diff --git a/SyncToSqlsrv7.ps1 b/SyncToSqlsrv7.ps1 index 6661726..7e4d10b 100644 --- a/SyncToSqlsrv7.ps1 +++ b/SyncToSqlsrv7.ps1 @@ -1,10 +1,19 @@ $DestPath = "\\sqlsrv7\c$\soft\eDos2026" $SourcePath="D:\l\src\cs2025\eDosStation" -$ScriptPath="$SourcePath\scripts" + $SourcePathTools="D:\l\src\cs2025\LSWTools" $DistributePath="D:\Soft\Distribute" $TWN4DevPackPath="D:\Soft\TWN4DevPack480" +if ($env:COMPUTERNAME -eq "T16LUC") { + $SourcePath = "C:\l\src\eDosStation" + $TWN4DevPackPath="C:\l\TWN4\TWN4DevPack520" + $SourcePathTools="C:\l\src\LSWTools" + $DestPath = "C:\l\Edos2026" + $DistributePath="c:\L\Distribute" +} +$ScriptPath="$SourcePath\scripts" + $cert = get-childitem -path cert:\CurrentUser\My\857150b64ef7d3e679c8cbde425d2a0b5e58ffaa Export-Certificate -Force -FilePath "$DestPath\signertrust.cer" -Cert $cert @@ -41,10 +50,10 @@ Copy-Item -Path "$SourcePath\eDosLocal\UpdateLocal.sql" -Destination "$DestPath\ Copy-Item -Path "$SourcePath\eDosLocal\Updates.sql" -Destination "$DestPath\Updates.sql" Copy-Item -Path "$SourcePathTools\LogFolderClean\bin\Release\logFolderClean.exe" -Destination "$DestPath\LogFolderClean.exe" Copy-Item -Path "$SourcePathTools\LogFolderClean\bin\Release\logFolderClean.exe.config" -Destination "$DestPath\LogFolderClean.exe.config" -Copy-Item -Path "$DistributePath\OpenSSH\OpenSSH981bSigned.zip" -Destination $DestPath +Copy-Item -Path "$DistributePath\OpenSSH\OpenSSH10p2Signed.zip" -Destination $DestPath Copy-Item -Path "$TWN4DevPackPath\Tools\flash.exe" -Destination $DestPath -Copy-Item -Path "$TWN4DevPackPath\Apps\Luc\TWN4_xCx480_EDOS100_Edos_Badge_Reader.bix" -Destination $DestPath +Copy-Item -Path "$DistributePath\Elatec\TWN4_xCx480_EDOS100_Edos_Badge_Reader.bix" -Destination $DestPath write-host "Files are copied to $DestPath" @@ -53,213 +62,3 @@ write-host "Source files from $SourcePath\eDosStation\bin\Release are zipped to Sleep 10 exit - -# SIG # Begin signature block -# MIImrAYJKoZIhvcNAQcCoIImnTCCJpkCAQExDzANBglghkgBZQMEAgEFADB5Bgor -# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG -# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCU6qClN0bhjEPx -# p1jr3ET3PBagW9FIwdE5BfLyRBftZ6CCDDYwggW8MIIDpKADAgECAgEfMA0GCSqG -# SIb3DQEBCwUAMGYxCzAJBgNVBAYTAkJFMRIwEAYDVQQIEwlBbnR3ZXJwZW4xDDAK -# BgNVBAcTA01vbDEPMA0GA1UEChMGU0NLQ0VOMQwwCgYDVQQLEwNJQ1QxFjAUBgNV -# BAMTDVNDS0NFTiBJQ1QgQ0EwHhcNMTgwNTI0MDYxMTAwWhcNMzAwNjAxMTIwMDAw -# WjBPMSEwHwYDVQQDExhWYW5kZW5icm91Y2tlIEx1YyBDUzIwMjExKjAoBgkqhkiG -# 9w0BCQEWG2x1Yy52YW5kZW5icm91Y2tlQHNja2Nlbi5iZTCCASIwDQYJKoZIhvcN -# AQEBBQADggEPADCCAQoCggEBAPRbMPSAdMsURs6M9TChuXZWe1LSQlVXYVHPGRln -# QeF719tgHS1Ern70aW0PuvCECkzUTbGHw3o+bF+vj1UZWw82oOEZGannAoTyG1CI -# xdOMc85Mdmy+Kb++9Ivxa6i4ahfpNDHE0F58TomaNyDY0dtRUDEMZw/A0AMkFmdg -# 9BOnqrYeeLB0O/86ZkzUklRifi/Wa3ti1LV4U7fR6S4bMm7dZBh46IU2G3/oBdlN -# YAtC3DNol+bnrcBvF+ccGwG5kVxEZg8TtpEMj00hnI+rNPjI4Ar6mE83XKak1X5/ -# xddZppx9ldJaiVujyOqy0cONhiN/vsWPdZU37LQbG1OydGUCAwEAAaOCAYowggGG -# MAkGA1UdEwQCMAAwHQYDVR0OBBYEFN+1bIhLi6eWlLbzynleh97QuIFlMB8GA1Ud -# IwQYMBaAFPApFPVqIRSSVlQTpD3VrfAhOsV4MAsGA1UdDwQEAwIHgDAfBgNVHSUE -# GDAWBggrBgEFBQcDAwYKKwYBBAGCNwIBFTA6BgNVHREEMzAxgRtsdWMudmFuZGVu -# YnJvdWNrZUBzY2tjZW4uYmWBEmx2YW5kZW5iQHNja2Nlbi5iZTA1BgNVHRIELjAs -# hipodHRwOi8vY3JsLnNja2Nlbi5iZS9TQ0tDRU4lMjBJQ1QlMjBDQS5jcnQwOwYD -# VR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2tjZW4uYmUvU0NLQ0VOJTIwSUNU -# JTIwQ0EuY3JsMD4GCSsGAQQBgjcVBwQxMC8GJysGAQQBgjcVCISMvCGCyP13gqGT -# IoSXlEaExpIugQGC1IQhgfrIaQIBZAIBCDAbBgkrBgEEAYI3FQoEDjAMMAoGCCsG -# AQUFBwMDMA0GCSqGSIb3DQEBCwUAA4ICAQBGH87fu9sNbcCPVQCdJ9jP4jT59WTZ -# m6s5BquO10UL9i7UAEmdd0yfCHW3myNUigR6O+Oc6Wa74HbUhAk+nEimHxzP5KcN -# nKE6lwqsIOf49J5G+2HRmTgW9tewsr39ZiB3NE5s04fHEA0I45zs8wsgyp4Mlr5v -# 3AfzYB7gxh0Hxdm+ion7PXvbKhAyI3F7pQTYauilmLAkHnoXD6T+Osp04wR9m1+H -# NGqLMKYyVOSdu0UnmGuqHBxpMD7hAJ8LCi5yR6t6s4BNCczwhzUpo6ZgrtLmKCac -# DmZ6SJMqsGFwan/GxnLSvw5QpVXUVJidDfTflMeJrfWhDOEt7jx9oQWQ249uzxlq -# JMVfBt1YZDq4gr76yjK6VY7F6540ECog4auPte4NoiT5UPdE3QHSD/82/cdLoVuh -# ELR4p4bfJ7PONT7x8iZzI8BoASh9SKJBh06mcmyJosOkc77Wv3ykqal7R+/LQi9g -# eJwku6Ti0XIy9UFGBbUD4m18e5cKdqDzyIHwAne0JR0ZEILPzITWviFuSXKqGP0b -# kSbGgpl+LuaCHcKAv+1FQBc2oWW0yPdxCUYpwo9QfTTh0qYXABQAbibOw7VKTnRL -# sS92m9pb6wn9tYyNfMu6r7EXCuxJNDbYpKbxeadfY0arCzlOT6mpC6lzBqfgKyN+ -# VWoy9rmdzhjEjjCCBnIwggRaoAMCAQICEzgAAAACbukOrXYB5dcAAAAAAAIwDQYJ -# KoZIhvcNAQELBQAwZzELMAkGA1UEBhMCQkUxEjAQBgNVBAgTCUFudHdlcnBlbjEM -# MAoGA1UEBxMDTW9sMQ8wDQYDVQQKEwZTQ0tDRU4xDDAKBgNVBAsTA0lDVDEXMBUG -# A1UEAxMOU0NLQ0VOIFJvb3QgQ0EwHhcNMTcwNjIzMTEzOTM0WhcNMzIwNjIzMTE0 -# OTM0WjBmMQswCQYDVQQGEwJCRTESMBAGA1UECBMJQW50d2VycGVuMQwwCgYDVQQH -# EwNNb2wxDzANBgNVBAoTBlNDS0NFTjEMMAoGA1UECxMDSUNUMRYwFAYDVQQDEw1T -# Q0tDRU4gSUNUIENBMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsW1u -# J8gCKQwjdhAhr6eJJNXw+wffi5p2RB48uzTaQh2Y89P+75NFhk7qeOW0tVwacxYk -# ubMvgNqasA9RslymREsxLfloMCidRPSQj8o0KE2cfLYojYre1TChFxc0PZobibZ7 -# BTsU2v75GQjnsEEMmxzwJLAjSU2mFVKJKjrKs4Xt/q6j3w0fdrRz0ba8zSMbTHO2 -# K8Cd1Rq3GQDLPythJyDxzo6YRE7TFOFcXGrIpFXvmy1XPc/ItiHwTocOmQ1msF+4 -# 6W0gfWtbFLt8bC/CnuE2ZQPnAmpq3lOUu8cOq/2eqhihAeAli5McYepaK+qr1JtL -# NfgTSkkFFw27c5cPXwFCCE0ryJdN+qN4Xdk3J2iz0hayEJ4sGaimdJTXv/OTmSxx -# KGMnPYV+BTvk/PDJnGjWQqOryf0PWgmwVQ1KAowaPjBAXJOEotzNnzW0/FKtvgJY -# Lk3xFs3sJJ6EG6D02wB2RNszNGM66tyqqx/Z3651xwzgkYYR1ETdmddcqL6/3a+H -# ifS5K99N+q7rX/Rp31AUlNsb53xhh43NWUAg5Tzrb9J54mBR6Z/MafmTVHcK2nK6 -# RRYaUfxs/WuE2+OzX7MdG/URi1lVuOu7hp7AKnSjcLnOcBG7lkSK1Q1pCuACYMkv -# Cl+7keio376akUfumX3HqEVgK8ttZiRgiVHR7Q0CAwEAAaOCARYwggESMBAGCSsG -# AQQBgjcVAQQDAgEAMB0GA1UdDgQWBBTwKRT1aiEUklZUE6Q91a3wITrFeDAZBgkr -# BgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUw -# AwEB/zAfBgNVHSMEGDAWgBRSvxsquCggUTGvI6e+I5TG0fkUMDA8BgNVHR8ENTAz -# MDGgL6AthitodHRwOi8vY3JsLnNja2Nlbi5iZS9TQ0tDRU4lMjBSb290JTIwQ0Eu -# Y3JsMEcGCCsGAQUFBwEBBDswOTA3BggrBgEFBQcwAoYraHR0cDovL2NybC5zY2tj -# ZW4uYmUvU0NLQ0VOJTIwUm9vdCUyMENBLmNydDANBgkqhkiG9w0BAQsFAAOCAgEA -# hsQ1eNAeFzKKGY9KW0VMGrLUbtccjHoeKlGdVn+yhS9xhSaIFgm00IPVO5zh9jKt -# gCA3o81TqY0w1WoRK1U8t89On5RZYVy39pDyu+oBlHgul9KOuJbIKLgh0VgEPvY3 -# vM0h0bLdxIrnlIxchVxgs5y/h/wLKmXLjsg+AuYzsJ4+9GAD5SsdFGp2jiKPf9aw -# 6zG67an2yTqtvPfeoRpkMWO+Mx39CWWwfU3MaQySlAx0/JzZcqWzk6QFgN1h89wS -# BHD0mMFdnahEth5y9QhPkLydPniibF5VZ59gbUVlpFFz8VddmBtx9xfe5aIYEjkj -# 35HmEW/FN7qwnJP3dCljzFiqSueKqiFIN3punjHbMUoAxJnibx11Xz4pFm5mdk8v -# 95r+sncH8SFK/P5nUjjEYIBRInZiovl7C8KfI1RD9lXJDPdw5yVfkCpkCr/rYNNM -# BHfDYZ+G1NEu9WzE2NrknC4H4qoNJLmMjVPTswcIT780iOvFZRf1ql+0e2TKUHCO -# kZ+plXtl3H6MimrNk6B/ZQAy4mETNH6ceaoudV7X5Y7HzbTwSXCSw6GCiQMdYXgs -# Fp+lioorEmFZhVc2PTs+oUXbMi8IUaCyKEm6tMZHJ+PGU1YBE8Szyj5nI1SUhb+a -# HunRGlhgXPb4bnEdZVaMruxFM0UbriGwmkOEv9cPVpAxghnMMIIZyAIBATBrMGYx -# CzAJBgNVBAYTAkJFMRIwEAYDVQQIEwlBbnR3ZXJwZW4xDDAKBgNVBAcTA01vbDEP -# MA0GA1UEChMGU0NLQ0VOMQwwCgYDVQQLEwNJQ1QxFjAUBgNVBAMTDVNDS0NFTiBJ -# Q1QgQ0ECAR8wDQYJYIZIAWUDBAIBBQCggbgwGQYJKoZIhvcNAQkDMQwGCisGAQQB -# gjcCAQQwHAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkE -# MSIEIADm9bPItPC4fkpYnv5pTxqyP/r0k7LpttW0w3aYZPRJMEwGCisGAQQBgjcC -# AQwxPjA8oDqAOABJAG4AdABlAGcAcgBpAHQAeQAgACYAIABBAHUAdABoAGUAbgB0 -# AGkAYwBpAHQAeQAgAEwAUwBXMA0GCSqGSIb3DQEBAQUABIIBAKN9vaNBf5gLQ2Ah -# 0cn8e+qR1SkohvFBQtdiLaHTooaYNbSvFYDrm2iRlkMY5AeDGFagBvUdmwC8FXDw -# CM3m/VAqiV6CI+pTi2NzZ5B5ANeEJ7F0DZeBhuQ4AUf5M2j9o7DttD1cMdjZA9MX -# Wm3slbB+MgF83pYQukjNj74J7PqlXf1azVDobWcpZZrx96K4s8lqGVk5Ag/NGAK1 -# 59qQO3rLgtENhN0tZW+yMTgGpc7RzMjmIsOxI7MpgTS6cPhu3Xoh5MgzOShMkxj3 -# J2E+OFsVmEm1QVso4WXq5ySQGa7pNaAHJSf69X41nbEpQQ+rthAz5L/sOoU78Uuj -# vZxLd7Shghd3MIIXcwYKKwYBBAGCNwMDATGCF2MwghdfBgkqhkiG9w0BBwKgghdQ -# MIIXTAIBAzEPMA0GCWCGSAFlAwQCAQUAMHgGCyqGSIb3DQEJEAEEoGkEZzBlAgEB -# BglghkgBhv1sBwEwMTANBglghkgBZQMEAgEFAAQg4KgHm3PC1+p4+aHAdn++qogy -# 5xSFhUUJwBrMUca97y8CEQDkL9bPvTbwuu9a2MxH9XVYGA8yMDI2MDEwNzEzMzIz -# OFqgghM6MIIG7TCCBNWgAwIBAgIQCoDvGEuN8QWC0cR2p5V0aDANBgkqhkiG9w0B -# AQsFADBpMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xQTA/ -# BgNVBAMTOERpZ2lDZXJ0IFRydXN0ZWQgRzQgVGltZVN0YW1waW5nIFJTQTQwOTYg -# U0hBMjU2IDIwMjUgQ0ExMB4XDTI1MDYwNDAwMDAwMFoXDTM2MDkwMzIzNTk1OVow -# YzELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMTswOQYDVQQD -# EzJEaWdpQ2VydCBTSEEyNTYgUlNBNDA5NiBUaW1lc3RhbXAgUmVzcG9uZGVyIDIw -# MjUgMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANBGrC0Sxp7Q6q5g -# VrMrV7pvUf+GcAoB38o3zBlCMGMyqJnfFNZx+wvA69HFTBdwbHwBSOeLpvPnZ8ZN -# +vo8dE2/pPvOx/Vj8TchTySA2R4QKpVD7dvNZh6wW2R6kSu9RJt/4QhguSssp3qo -# me7MrxVyfQO9sMx6ZAWjFDYOzDi8SOhPUWlLnh00Cll8pjrUcCV3K3E0zz09ldQ/ -# /nBZZREr4h/GI6Dxb2UoyrN0ijtUDVHRXdmncOOMA3CoB/iUSROUINDT98oksouT -# MYFOnHoRh6+86Ltc5zjPKHW5KqCvpSduSwhwUmotuQhcg9tw2YD3w6ySSSu+3qU8 -# DD+nigNJFmt6LAHvH3KSuNLoZLc1Hf2JNMVL4Q1OpbybpMe46YceNA0LfNsnqcnp -# JeItK/DhKbPxTTuGoX7wJNdoRORVbPR1VVnDuSeHVZlc4seAO+6d2sC26/PQPdP5 -# 1ho1zBp+xUIZkpSFA8vWdoUoHLWnqWU3dCCyFG1roSrgHjSHlq8xymLnjCbSLZ49 -# kPmk8iyyizNDIXj//cOgrY7rlRyTlaCCfw7aSUROwnu7zER6EaJ+AliL7ojTdS5P -# WPsWeupWs7NpChUk555K096V1hE0yZIXe+giAwW00aHzrDchIc2bQhpp0IoKRR7Y -# ufAkprxMiXAJQ1XCmnCfgPf8+3mnAgMBAAGjggGVMIIBkTAMBgNVHRMBAf8EAjAA -# MB0GA1UdDgQWBBTkO/zyMe39/dfzkXFjGVBDz2GM6DAfBgNVHSMEGDAWgBTvb1NK -# 6eQGfHrK4pBW9i/USezLTjAOBgNVHQ8BAf8EBAMCB4AwFgYDVR0lAQH/BAwwCgYI -# KwYBBQUHAwgwgZUGCCsGAQUFBwEBBIGIMIGFMCQGCCsGAQUFBzABhhhodHRwOi8v -# b2NzcC5kaWdpY2VydC5jb20wXQYIKwYBBQUHMAKGUWh0dHA6Ly9jYWNlcnRzLmRp -# Z2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0ZWRHNFRpbWVTdGFtcGluZ1JTQTQwOTZT -# SEEyNTYyMDI1Q0ExLmNydDBfBgNVHR8EWDBWMFSgUqBQhk5odHRwOi8vY3JsMy5k -# aWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkRzRUaW1lU3RhbXBpbmdSU0E0MDk2 -# U0hBMjU2MjAyNUNBMS5jcmwwIAYDVR0gBBkwFzAIBgZngQwBBAIwCwYJYIZIAYb9 -# bAcBMA0GCSqGSIb3DQEBCwUAA4ICAQBlKq3xHCcEua5gQezRCESeY0ByIfjk9iJP -# 2zWLpQq1b4URGnwWBdEZD9gBq9fNaNmFj6Eh8/YmRDfxT7C0k8FUFqNh+tshgb4O -# 6Lgjg8K8elC4+oWCqnU/ML9lFfim8/9yJmZSe2F8AQ/UdKFOtj7YMTmqPO9mzskg -# iC3QYIUP2S3HQvHG1FDu+WUqW4daIqToXFE/JQ/EABgfZXLWU0ziTN6R3ygQBHMU -# BaB5bdrPbF6MRYs03h4obEMnxYOX8VBRKe1uNnzQVTeLni2nHkX/QqvXnNb+YkDF -# kxUGtMTaiLR9wjxUxu2hECZpqyU1d0IbX6Wq8/gVutDojBIFeRlqAcuEVT0cKsb+ -# zJNEsuEB7O7/cuvTQasnM9AWcIQfVjnzrvwiCZ85EE8LUkqRhoS3Y50OHgaY7T/l -# wd6UArb+BOVAkg2oOvol/DJgddJ35XTxfUlQ+8Hggt8l2Yv7roancJIFcbojBcxl -# RcGG0LIhp6GvReQGgMgYxQbV1S3CrWqZzBt1R9xJgKf47CdxVRd/ndUlQ05oxYy2 -# zRWVFjF7mcr4C34Mj3ocCVccAvlKV9jEnstrniLvUxxVZE/rptb7IRE2lskKPIJg -# baP5t2nGj/ULLi49xTcBZU8atufk+EMF/cWuiC7POGT75qaL6vdCvHlshtjdNXOC -# IUjsarfNZzCCBrQwggScoAMCAQICEA3HrFcF/yGZLkBDIgw6SYYwDQYJKoZIhvcN -# AQELBQAwYjELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcG -# A1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEhMB8GA1UEAxMYRGlnaUNlcnQgVHJ1c3Rl -# ZCBSb290IEc0MB4XDTI1MDUwNzAwMDAwMFoXDTM4MDExNDIzNTk1OVowaTELMAkG -# A1UEBhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMUEwPwYDVQQDEzhEaWdp -# Q2VydCBUcnVzdGVkIEc0IFRpbWVTdGFtcGluZyBSU0E0MDk2IFNIQTI1NiAyMDI1 -# IENBMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALR4MdMKmEFyvjxG -# wBysddujRmh0tFEXnU2tjQ2UtZmWgyxU7UNqEY81FzJsQqr5G7A6c+Gh/qm8Xi4a -# PCOo2N8S9SLrC6Kbltqn7SWCWgzbNfiR+2fkHUiljNOqnIVD/gG3SYDEAd4dg2dD -# GpeZGKe+42DFUF0mR/vtLa4+gKPsYfwEu7EEbkC9+0F2w4QJLVSTEG8yAR2CQWIM -# 1iI5PHg62IVwxKSpO0XaF9DPfNBKS7Zazch8NF5vp7eaZ2CVNxpqumzTCNSOxm+S -# AWSuIr21Qomb+zzQWKhxKTVVgtmUPAW35xUUFREmDrMxSNlr/NsJyUXzdtFUUt4a -# S4CEeIY8y9IaaGBpPNXKFifinT7zL2gdFpBP9qh8SdLnEut/GcalNeJQ55IuwnKC -# gs+nrpuQNfVmUB5KlCX3ZA4x5HHKS+rqBvKWxdCyQEEGcbLe1b8Aw4wJkhU1JrPs -# FfxW1gaou30yZ46t4Y9F20HHfIY4/6vHespYMQmUiote8ladjS/nJ0+k6Mvqzfpz -# PDOy5y6gqztiT96Fv/9bH7mQyogxG9QEPHrPV6/7umw052AkyiLA6tQbZl1KhBtT -# asySkuJDpsZGKdlsjg4u70EwgWbVRSX1Wd4+zoFpp4Ra+MlKM2baoD6x0VR4RjSp -# WM8o5a6D8bpfm4CLKczsG7ZrIGNTAgMBAAGjggFdMIIBWTASBgNVHRMBAf8ECDAG -# AQH/AgEAMB0GA1UdDgQWBBTvb1NK6eQGfHrK4pBW9i/USezLTjAfBgNVHSMEGDAW -# gBTs1+OC0nFdZEzfLmc/57qYrhwPTzAOBgNVHQ8BAf8EBAMCAYYwEwYDVR0lBAww -# CgYIKwYBBQUHAwgwdwYIKwYBBQUHAQEEazBpMCQGCCsGAQUFBzABhhhodHRwOi8v -# b2NzcC5kaWdpY2VydC5jb20wQQYIKwYBBQUHMAKGNWh0dHA6Ly9jYWNlcnRzLmRp -# Z2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0ZWRSb290RzQuY3J0MEMGA1UdHwQ8MDow -# OKA2oDSGMmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0ZWRS -# b290RzQuY3JsMCAGA1UdIAQZMBcwCAYGZ4EMAQQCMAsGCWCGSAGG/WwHATANBgkq -# hkiG9w0BAQsFAAOCAgEAF877FoAc/gc9EXZxML2+C8i1NKZ/zdCHxYgaMH9Pw5tc -# BnPw6O6FTGNpoV2V4wzSUGvI9NAzaoQk97frPBtIj+ZLzdp+yXdhOP4hCFATuNT+ -# ReOPK0mCefSG+tXqGpYZ3essBS3q8nL2UwM+NMvEuBd/2vmdYxDCvwzJv2sRUoKE -# fJ+nN57mQfQXwcAEGCvRR2qKtntujB71WPYAgwPyWLKu6RnaID/B0ba2H3LUiwDR -# AXx1Neq9ydOal95CHfmTnM4I+ZI2rVQfjXQA1WSjjf4J2a7jLzWGNqNX+DF0SQzH -# U0pTi4dBwp9nEC8EAqoxW6q17r0z0noDjs6+BFo+z7bKSBwZXTRNivYuve3L2oiK -# NqetRHdqfMTCW/NmKLJ9M+MtucVGyOxiDf06VXxyKkOirv6o02OoXN4bFzK0vlNM -# svhlqgF2puE6FndlENSmE+9JGYxOGLS/D284NHNboDGcmWXfwXRy4kbu4QFhOm0x -# JuF2EZAOk5eCkhSxZON3rGlHqhpB/8MluDezooIs8CVnrpHMiD2wL40mm53+/j7t -# FaxYKIqL0Q4ssd8xHZnIn/7GELH3IdvG2XlM9q7WP/UwgOkw/HQtyRN62JK4S1C8 -# uw3PdBunvAZapsiI5YKdvlarEvf8EA+8hcpSM9LHJmyrxaFtoza2zNaQ9k+5t1ww -# ggWNMIIEdaADAgECAhAOmxiO+dAt5+/bUOIIQBhaMA0GCSqGSIb3DQEBDAUAMGUx -# CzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3 -# dy5kaWdpY2VydC5jb20xJDAiBgNVBAMTG0RpZ2lDZXJ0IEFzc3VyZWQgSUQgUm9v -# dCBDQTAeFw0yMjA4MDEwMDAwMDBaFw0zMTExMDkyMzU5NTlaMGIxCzAJBgNVBAYT -# AlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2Vy -# dC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0IFRydXN0ZWQgUm9vdCBHNDCCAiIwDQYJ -# KoZIhvcNAQEBBQADggIPADCCAgoCggIBAL/mkHNo3rvkXUo8MCIwaTPswqclLskh -# PfKK2FnC4SmnPVirdprNrnsbhA3EMB/zG6Q4FutWxpdtHauyefLKEdLkX9YFPFIP -# Uh/GnhWlfr6fqVcWWVVyr2iTcMKyunWZanMylNEQRBAu34LzB4TmdDttceItDBvu -# INXJIB1jKS3O7F5OyJP4IWGbNOsFxl7sWxq868nPzaw0QF+xembud8hIqGZXV59U -# WI4MK7dPpzDZVu7Ke13jrclPXuU15zHL2pNe3I6PgNq2kZhAkHnDeMe2scS1ahg4 -# AxCN2NQ3pC4FfYj1gj4QkXCrVYJBMtfbBHMqbpEBfCFM1LyuGwN1XXhm2ToxRJoz -# QL8I11pJpMLmqaBn3aQnvKFPObURWBf3JFxGj2T3wWmIdph2PVldQnaHiZdpekjw -# 4KISG2aadMreSx7nDmOu5tTvkpI6nj3cAORFJYm2mkQZK37AlLTSYW3rM9nF30sE -# AMx9HJXDj/chsrIRt7t/8tWMcCxBYKqxYxhElRp2Yn72gLD76GSmM9GJB+G9t+ZD -# pBi4pncB4Q+UDCEdslQpJYls5Q5SUUd0viastkF13nqsX40/ybzTQRESW+UQUOsx -# xcpyFiIJ33xMdT9j7CFfxCBRa2+xq4aLT8LWRV+dIPyhHsXAj6KxfgommfXkaS+Y -# HS312amyHeUbAgMBAAGjggE6MIIBNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQW -# BBTs1+OC0nFdZEzfLmc/57qYrhwPTzAfBgNVHSMEGDAWgBRF66Kv9JLLgjEtUYun -# pyGd823IDzAOBgNVHQ8BAf8EBAMCAYYweQYIKwYBBQUHAQEEbTBrMCQGCCsGAQUF -# BzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wQwYIKwYBBQUHMAKGN2h0dHA6 -# Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5j -# cnQwRQYDVR0fBD4wPDA6oDigNoY0aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0Rp -# Z2lDZXJ0QXNzdXJlZElEUm9vdENBLmNybDARBgNVHSAECjAIMAYGBFUdIAAwDQYJ -# KoZIhvcNAQEMBQADggEBAHCgv0NcVec4X6CjdBs9thbX979XB72arKGHLOyFXqka -# uyL4hxppVCLtpIh3bb0aFPQTSnovLbc47/T/gLn4offyct4kvFIDyE7QKt76LVbP -# +fT3rDB6mouyXtTP0UNEm0Mh65ZyoUi0mcudT6cGAxN3J0TU53/oWajwvy8Lpuny -# NDzs9wPHh6jSTEAZNUZqaVSwuKFWjuyk1T3osdz9HNj0d1pcVIxv76FQPfx2CWiE -# n2/K2yCNNWAcAgPLILCsWKAOQGPFmCLBsln1VWvPJ6tsds5vIy30fnFqI2si/xK4 -# VC0nftg62fC2h5b9W9FcrBjDTZ9ztwGpn1eqXijiuZQxggN8MIIDeAIBATB9MGkx -# CzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UEAxM4 -# RGlnaUNlcnQgVHJ1c3RlZCBHNCBUaW1lU3RhbXBpbmcgUlNBNDA5NiBTSEEyNTYg -# MjAyNSBDQTECEAqA7xhLjfEFgtHEdqeVdGgwDQYJYIZIAWUDBAIBBQCggdEwGgYJ -# KoZIhvcNAQkDMQ0GCyqGSIb3DQEJEAEEMBwGCSqGSIb3DQEJBTEPFw0yNjAxMDcx -# MzMyMzhaMCsGCyqGSIb3DQEJEAIMMRwwGjAYMBYEFN1iMKyGCi0wa9o4sWh5UjAH -# +0F+MC8GCSqGSIb3DQEJBDEiBCBh46NmVoIzW3O4yRKgQJ5+0RP0kn3PhzkgjbZ9 -# pMhPUDA3BgsqhkiG9w0BCRACLzEoMCYwJDAiBCBKoD+iLNdchMVck4+CjmdrnK7K -# sz/jbSaaozTxRhEKMzANBgkqhkiG9w0BAQEFAASCAgBZpjatRIu4wbgDCPtmQ8qI -# O+OWlqYOBBExjmVNSefdeuUOEDzr6cH+Hi+/oUVoTCpyMR+oKxa2m1tLYek1wO+r -# RrLc6AEiajcoLRbKrqW0AcCCbQGgN38DKEq0FJhG3p1Q45LGwiL38jkzWnxDBVKy -# kNNMQkbCYPZmTvRqJoUbkEZzBKk9cMI1FYmi/nH+/SxPdg2LBkChUdMvMIwv7rkk -# KX9rR+gLi3NNQHM+8Tqg6wBudSPQl6bfjmJOIyqClhc6j6sxIKbmYYzjI8niymOQ -# sc+P6+A/TyhOp19d/VWv7MVPX6ocYJRsr8B+DatQWsMb29V1qS3G/N+gLIsxkwib -# cYNqVkp9HDlkjZ/iGwZxuCq8JKDKYkd/bW9MTB3MeFwxY2N3dHs5E3PXW6smmATv -# PUBQWhPKx4ySB3aYzOzMr2idJ9SqA4eCf7e8BL2PZBgPx/GL0HhhKxeEfW2Hc7jG -# 7DqDLsez6qKaG1vD/LlwHpVkgMFz6yLH6pewrFZKTrAkN9owLOZ+XY1rEN+cA8mI -# 5RkLUIRJVZSo1cEvOrqZpqj/zl2/4cktWFjItylQRu/HN63JPsPL/drjf86a7ZGK -# q5zssvbUBh1SjHDSVoADyq5l5gCRQAJ+IRhUwFshXHU/Fn5cRjmky8bukv1xKrUR -# 5fgZlA632dJRBnb4FWtXkg== -# SIG # End signature block diff --git a/eDosStation/EntryBadge.xaml.cs b/eDosStation/EntryBadge.xaml.cs index 60be04a..f6994f4 100644 --- a/eDosStation/EntryBadge.xaml.cs +++ b/eDosStation/EntryBadge.xaml.cs @@ -130,9 +130,9 @@ namespace eDosStation bool realFault = (ep.EPDDetFault>0) || (ep.EPDCalFault >0) || (ep.EPDComFault >0) || (ep.EPDEprFault >0) || (ep.EPDTrhFault>0); + bool stopBecauseAlarmDose = ep.eDoshasAlarm && thisStation.StopBecauseAlarmDose;//&& stat - - if (ep.eDoshasAlarm || ep.OtherAlarmBatLow > 0 || realFault ) + if (stopBecauseAlarmDose || ep.OtherAlarmBatLow > 0 || realFault ) { TextBlock il = new TextBlock(); il.Inlines.Add(new Run("EPD is in alarm status\n\n") diff --git a/eDosStation/EpdExit.xaml.cs b/eDosStation/EpdExit.xaml.cs index ac8063c..0e13d37 100644 --- a/eDosStation/EpdExit.xaml.cs +++ b/eDosStation/EpdExit.xaml.cs @@ -153,6 +153,7 @@ namespace eDosStation #endif int rv = 0; EpdVisitID = 0; + if (epdDevice == null) return; if (thisStation.LogAll || epdDevice.HasStepError()) { diff --git a/eDosStation/MainWindow.xaml.cs b/eDosStation/MainWindow.xaml.cs index 963a7b1..69bd19f 100644 --- a/eDosStation/MainWindow.xaml.cs +++ b/eDosStation/MainWindow.xaml.cs @@ -229,9 +229,9 @@ namespace eDosStation thisStation.ReceivedPersid = Pelatec_DataReceived; } else { -#if !DEBUG +//#if !DEBUG DisableUserInfo(); -#endif +//#endif } } diff --git a/eDosStation/Resources/BuildDate.txt b/eDosStation/Resources/BuildDate.txt index 794269b..d44068a 100644 --- a/eDosStation/Resources/BuildDate.txt +++ b/eDosStation/Resources/BuildDate.txt @@ -1 +1 @@ -25/08/2026 17:47:14,95 +27/08/2026 12:02:06,85 diff --git a/eDosStation/Station.cs b/eDosStation/Station.cs index e3f8353..af3b011 100644 --- a/eDosStation/Station.cs +++ b/eDosStation/Station.cs @@ -73,6 +73,7 @@ namespace eDosStation public delegate void dReceivedPersID(int persid); public dReceivedPersID ReceivedPersid; + internal bool StopBecauseAlarmDose; public ushort useBeepMK3() { @@ -89,6 +90,7 @@ namespace eDosStation splunkLog = spl; // new spl1(Environment.MachineName,hourlyLog:true); stationLog = null; dataInterface = mDataInterface; + StopBecauseAlarmDose=false; Error = 0; ErrorMessage = string.Empty; ComPort = 0; @@ -184,6 +186,7 @@ namespace eDosStation OnlyMK2 = rs.BoolOrDefault("OnlyMK2", false); AllowMultipleEPD = rs.BoolOrDefault("AllowMultipleEPD", false); WriteConfig32 = true; // rs.BoolOrDefault("WriteConfig32", false); + StopBecauseAlarmDose = false; // rs.BoolOrDefault("StopBecauseAlarmDose", false); } else { @@ -206,6 +209,7 @@ namespace eDosStation EPDRetries = 2; AllowMultipleEPD = false; WriteConfig32 = true; + StopBecauseAlarmDose = false; } rs.Close(); splunkLog.WriteSplunkLog(module,step, spl1.iseverity.info); diff --git a/eDosStation/UserInfo.xaml.cs b/eDosStation/UserInfo.xaml.cs index c161e9b..272ae9f 100644 --- a/eDosStation/UserInfo.xaml.cs +++ b/eDosStation/UserInfo.xaml.cs @@ -133,6 +133,7 @@ namespace eDosStation private void dataLoad() { rw = null; + System.Diagnostics.Debug.WriteLine(PersID); using (var ta = new DataSet1TableAdapters.GetPersonOverviewTableAdapter()) { dsInfo = ta.GetData(PersID); @@ -235,9 +236,9 @@ namespace eDosStation private void Window_Loaded(object sender, RoutedEventArgs e) { SetEmpty(); -#if DEBUG - PersID = 13527; -#endif +//#if DEBUG + // PersID = 13527; +//#endif if (PersID != 0) dataLoad(); } diff --git a/eDosStation/x.txt b/eDosStation/x.txt deleted file mode 100644 index 1c103ca..0000000 --- a/eDosStation/x.txt +++ /dev/null @@ -1,45282 +0,0 @@ -Microsoft (R) COFF/PE Dumper Version 14.51.36252.0 -Copyright (C) Microsoft Corporation. All rights reserved. - - -Dump of file reader2.dll - -File Type: DLL - - 10001000: 83 EC 20 sub esp,20h - 10001003: 56 push esi - 10001004: 8B F1 mov esi,ecx - 10001006: 57 push edi - 10001007: 8D 4C 24 08 lea ecx,[esp+8] - 1000100B: E8 A0 86 00 00 call 100096B0 - 10001010: 8D 4C 24 18 lea ecx,[esp+18h] - 10001014: E8 97 86 00 00 call 100096B0 - 10001019: 50 push eax - 1000101A: 8D 4C 24 0C lea ecx,[esp+0Ch] - 1000101E: E8 0D 87 00 00 call 10009730 - 10001023: 0F B7 44 24 2C movzx eax,word ptr [esp+2Ch] - 10001028: 8D 04 80 lea eax,[eax+eax*4] - 1000102B: 8D 34 C6 lea esi,[esi+eax*8] - 1000102E: 8D 7E 10 lea edi,[esi+10h] - 10001031: 57 push edi - 10001032: 8D 4C 24 0C lea ecx,[esp+0Ch] - 10001036: E8 C5 87 00 00 call 10009800 - 1000103B: 84 C0 test al,al - 1000103D: 74 1E je 1000105D - 1000103F: 8D 4E 20 lea ecx,[esi+20h] - 10001042: 51 push ecx - 10001043: 8D 4C 24 0C lea ecx,[esp+0Ch] - 10001047: E8 74 87 00 00 call 100097C0 - 1000104C: 84 C0 test al,al - 1000104E: 74 0D je 1000105D - 10001050: 5F pop edi - 10001051: B8 01 00 00 00 mov eax,1 - 10001056: 5E pop esi - 10001057: 83 C4 20 add esp,20h - 1000105A: C2 04 00 ret 4 - 1000105D: 53 push ebx - 1000105E: 33 DB xor ebx,ebx - 10001060: 8B CF mov ecx,edi - 10001062: 89 5E 08 mov dword ptr [esi+8],ebx - 10001065: E8 96 88 00 00 call 10009900 - 1000106A: 8D 4E 20 lea ecx,[esi+20h] - 1000106D: E8 8E 88 00 00 call 10009900 - 10001072: 8B C3 mov eax,ebx - 10001074: 5B pop ebx - 10001075: 5F pop edi - 10001076: 5E pop esi - 10001077: 83 C4 20 add esp,20h - 1000107A: C2 04 00 ret 4 - 1000107D: CC int 3 - 1000107E: CC int 3 - 1000107F: CC int 3 - 10001080: 83 C1 08 add ecx,8 - 10001083: E9 08 64 00 00 jmp 10007490 - 10001088: CC int 3 - 10001089: CC int 3 - 1000108A: CC int 3 - 1000108B: CC int 3 - 1000108C: CC int 3 - 1000108D: CC int 3 - 1000108E: CC int 3 - 1000108F: CC int 3 - 10001090: 8B 54 24 08 mov edx,dword ptr [esp+8] - 10001094: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10001098: 56 push esi - 10001099: 8B 74 24 10 mov esi,dword ptr [esp+10h] - 1000109D: 56 push esi - 1000109E: 52 push edx - 1000109F: 89 81 6C 01 00 00 mov dword ptr [ecx+0000016Ch],eax - 100010A5: 89 91 70 01 00 00 mov dword ptr [ecx+00000170h],edx - 100010AB: 89 B1 74 01 00 00 mov dword ptr [ecx+00000174h],esi - 100010B1: 50 push eax - 100010B2: 83 C1 08 add ecx,8 - 100010B5: E8 F6 63 00 00 call 100074B0 - 100010BA: 5E pop esi - 100010BB: C2 0C 00 ret 0Ch - 100010BE: CC int 3 - 100010BF: CC int 3 - 100010C0: 8B 44 24 04 mov eax,dword ptr [esp+4] - 100010C4: 89 81 80 01 00 00 mov dword ptr [ecx+00000180h],eax - 100010CA: C2 04 00 ret 4 - 100010CD: CC int 3 - 100010CE: CC int 3 - 100010CF: CC int 3 - 100010D0: 8B 44 24 04 mov eax,dword ptr [esp+4] - 100010D4: 89 81 60 01 00 00 mov dword ptr [ecx+00000160h],eax - 100010DA: C2 04 00 ret 4 - 100010DD: CC int 3 - 100010DE: CC int 3 - 100010DF: CC int 3 - 100010E0: 8A 44 24 04 mov al,byte ptr [esp+4] - 100010E4: 88 41 78 mov byte ptr [ecx+78h],al - 100010E7: C2 04 00 ret 4 - 100010EA: CC int 3 - 100010EB: CC int 3 - 100010EC: CC int 3 - 100010ED: CC int 3 - 100010EE: CC int 3 - 100010EF: CC int 3 - 100010F0: 66 8B 44 24 04 mov ax,word ptr [esp+4] - 100010F5: 66 8B 54 24 08 mov dx,word ptr [esp+8] - 100010FA: 66 89 81 78 01 00 mov word ptr [ecx+00000178h],ax - 00 - 10001101: 66 89 91 7A 01 00 mov word ptr [ecx+0000017Ah],dx - 00 - 10001108: C2 08 00 ret 8 - 1000110B: CC int 3 - 1000110C: CC int 3 - 1000110D: CC int 3 - 1000110E: CC int 3 - 1000110F: CC int 3 - 10001110: 83 C1 08 add ecx,8 - 10001113: E9 E8 63 00 00 jmp 10007500 - 10001118: CC int 3 - 10001119: CC int 3 - 1000111A: CC int 3 - 1000111B: CC int 3 - 1000111C: CC int 3 - 1000111D: CC int 3 - 1000111E: CC int 3 - 1000111F: CC int 3 - 10001120: 56 push esi - 10001121: 57 push edi - 10001122: 8B 7C 24 0C mov edi,dword ptr [esp+0Ch] - 10001126: 8B F1 mov esi,ecx - 10001128: 57 push edi - 10001129: 8D 4E 08 lea ecx,[esi+8] - 1000112C: E8 DF 63 00 00 call 10007510 - 10001131: 89 BE 64 01 00 00 mov dword ptr [esi+00000164h],edi - 10001137: 5F pop edi - 10001138: C6 86 39 01 00 00 mov byte ptr [esi+00000139h],0 - 00 - 1000113F: 5E pop esi - 10001140: C2 04 00 ret 4 - 10001143: CC int 3 - 10001144: CC int 3 - 10001145: CC int 3 - 10001146: CC int 3 - 10001147: CC int 3 - 10001148: CC int 3 - 10001149: CC int 3 - 1000114A: CC int 3 - 1000114B: CC int 3 - 1000114C: CC int 3 - 1000114D: CC int 3 - 1000114E: CC int 3 - 1000114F: CC int 3 - 10001150: 83 C1 08 add ecx,8 - 10001153: E9 C8 63 00 00 jmp 10007520 - 10001158: CC int 3 - 10001159: CC int 3 - 1000115A: CC int 3 - 1000115B: CC int 3 - 1000115C: CC int 3 - 1000115D: CC int 3 - 1000115E: CC int 3 - 1000115F: CC int 3 - 10001160: 83 EC 20 sub esp,20h - 10001163: 56 push esi - 10001164: 57 push edi - 10001165: 8B F9 mov edi,ecx - 10001167: 8D 87 40 01 00 00 lea eax,[edi+00000140h] - 1000116D: 50 push eax - 1000116E: 8D 4C 24 0C lea ecx,[esp+0Ch] - 10001172: E8 39 85 00 00 call 100096B0 - 10001177: 8B C8 mov ecx,eax - 10001179: E8 62 86 00 00 call 100097E0 - 1000117E: 84 C0 test al,al - 10001180: 75 34 jne 100011B6 - 10001182: 8D 8F 50 01 00 00 lea ecx,[edi+00000150h] - 10001188: 51 push ecx - 10001189: 8D 4C 24 1C lea ecx,[esp+1Ch] - 1000118D: E8 1E 85 00 00 call 100096B0 - 10001192: 8B C8 mov ecx,eax - 10001194: E8 27 86 00 00 call 100097C0 - 10001199: 84 C0 test al,al - 1000119B: 75 19 jne 100011B6 - 1000119D: 33 F6 xor esi,esi - 1000119F: 56 push esi - 100011A0: 6A 0E push 0Eh - 100011A2: 6A 02 push 2 - 100011A4: E8 C7 84 00 00 call 10009670 - 100011A9: 83 C4 0C add esp,0Ch - 100011AC: 5F pop edi - 100011AD: 8B C6 mov eax,esi - 100011AF: 5E pop esi - 100011B0: 83 C4 20 add esp,20h - 100011B3: C2 0C 00 ret 0Ch - 100011B6: 8A 54 24 2C mov dl,byte ptr [esp+2Ch] - 100011BA: 53 push ebx - 100011BB: 8B 5C 24 38 mov ebx,dword ptr [esp+38h] - 100011BF: B8 3E 00 00 00 mov eax,3Eh - 100011C4: 3B C3 cmp eax,ebx - 100011C6: 55 push ebp - 100011C7: 1B F6 sbb esi,esi - 100011C9: 83 C6 01 add esi,1 - 100011CC: 8D AF F9 00 00 00 lea ebp,[edi+000000F9h] - 100011D2: 88 55 00 mov byte ptr [ebp],dl - 100011D5: 88 9F FA 00 00 00 mov byte ptr [edi+000000FAh],bl - 100011DB: 74 14 je 100011F1 - 100011DD: 8B 4C 24 38 mov ecx,dword ptr [esp+38h] - 100011E1: 53 push ebx - 100011E2: 51 push ecx - 100011E3: 8D 97 FB 00 00 00 lea edx,[edi+000000FBh] - 100011E9: 52 push edx - 100011EA: E8 61 87 00 00 call 10009950 - 100011EF: EB 0B jmp 100011FC - 100011F1: 6A 00 push 0 - 100011F3: 6A 0C push 0Ch - 100011F5: 6A 02 push 2 - 100011F7: E8 74 84 00 00 call 10009670 - 100011FC: 83 C4 0C add esp,0Ch - 100011FF: 85 F6 test esi,esi - 10001201: 74 17 je 1000121A - 10001203: 83 C3 02 add ebx,2 - 10001206: 53 push ebx - 10001207: 55 push ebp - 10001208: 8D 4F 08 lea ecx,[edi+8] - 1000120B: E8 30 64 00 00 call 10007640 - 10001210: 5D pop ebp - 10001211: 5B pop ebx - 10001212: 5F pop edi - 10001213: 5E pop esi - 10001214: 83 C4 20 add esp,20h - 10001217: C2 0C 00 ret 0Ch - 1000121A: 5D pop ebp - 1000121B: 5B pop ebx - 1000121C: 5F pop edi - 1000121D: 8B C6 mov eax,esi - 1000121F: 5E pop esi - 10001220: 83 C4 20 add esp,20h - 10001223: C2 0C 00 ret 0Ch - 10001226: CC int 3 - 10001227: CC int 3 - 10001228: CC int 3 - 10001229: CC int 3 - 1000122A: CC int 3 - 1000122B: CC int 3 - 1000122C: CC int 3 - 1000122D: CC int 3 - 1000122E: CC int 3 - 1000122F: CC int 3 - 10001230: 53 push ebx - 10001231: 56 push esi - 10001232: 8B F1 mov esi,ecx - 10001234: 57 push edi - 10001235: 0F B6 BE FA 00 00 movzx edi,byte ptr [esi+000000FAh] - 00 - 1000123C: 8D 5E 08 lea ebx,[esi+8] - 1000123F: 8B CB mov ecx,ebx - 10001241: 83 C7 02 add edi,2 - 10001244: E8 D7 62 00 00 call 10007520 - 10001249: 85 C0 test eax,eax - 1000124B: 74 0F je 1000125C - 1000124D: 57 push edi - 1000124E: 81 C6 F9 00 00 00 add esi,0F9h - 10001254: 56 push esi - 10001255: 8B CB mov ecx,ebx - 10001257: E8 E4 63 00 00 call 10007640 - 1000125C: 5F pop edi - 1000125D: 5E pop esi - 1000125E: 5B pop ebx - 1000125F: C3 ret - 10001260: 51 push ecx - 10001261: 56 push esi - 10001262: 8B F1 mov esi,ecx - 10001264: 8A 86 39 01 00 00 mov al,byte ptr [esi+00000139h] - 1000126A: 04 04 add al,4 - 1000126C: 57 push edi - 1000126D: 8B BE 68 01 00 00 mov edi,dword ptr [esi+00000168h] - 10001273: 8D 4E 08 lea ecx,[esi+8] - 10001276: 88 44 24 08 mov byte ptr [esp+8],al - 1000127A: E8 A1 62 00 00 call 10007520 - 1000127F: 85 C0 test eax,eax - 10001281: 74 11 je 10001294 - 10001283: 8B 54 24 08 mov edx,dword ptr [esp+8] - 10001287: 57 push edi - 10001288: 8D 4E 79 lea ecx,[esi+79h] - 1000128B: 51 push ecx - 1000128C: 52 push edx - 1000128D: 8B CE mov ecx,esi - 1000128F: E8 CC FE FF FF call 10001160 - 10001294: 33 C9 xor ecx,ecx - 10001296: 33 D2 xor edx,edx - 10001298: 5F pop edi - 10001299: 66 89 8E 7E 01 00 mov word ptr [esi+0000017Eh],cx - 00 - 100012A0: 66 89 96 7C 01 00 mov word ptr [esi+0000017Ch],dx - 00 - 100012A7: 5E pop esi - 100012A8: 59 pop ecx - 100012A9: C3 ret - 100012AA: CC int 3 - 100012AB: CC int 3 - 100012AC: CC int 3 - 100012AD: CC int 3 - 100012AE: CC int 3 - 100012AF: CC int 3 - 100012B0: 51 push ecx - 100012B1: 8B 44 24 0C mov eax,dword ptr [esp+0Ch] - 100012B5: 53 push ebx - 100012B6: 55 push ebp - 100012B7: 56 push esi - 100012B8: 8B E9 mov ebp,ecx - 100012BA: 57 push edi - 100012BB: C7 00 00 00 00 00 mov dword ptr [eax],0 - 100012C1: 8D 5D 08 lea ebx,[ebp+8] - 100012C4: 8B 4C 24 28 mov ecx,dword ptr [esp+28h] - 100012C8: 8B 54 24 1C mov edx,dword ptr [esp+1Ch] - 100012CC: 8B 44 24 18 mov eax,dword ptr [esp+18h] - 100012D0: 51 push ecx - 100012D1: 52 push edx - 100012D2: 6A 40 push 40h - 100012D4: 8D BD B9 00 00 00 lea edi,[ebp+000000B9h] - 100012DA: 57 push edi - 100012DB: 50 push eax - 100012DC: 8B CB mov ecx,ebx - 100012DE: E8 2D 69 00 00 call 10007C10 - 100012E3: 33 C9 xor ecx,ecx - 100012E5: 84 C0 test al,al - 100012E7: 0F 94 C1 sete cl - 100012EA: 88 44 24 10 mov byte ptr [esp+10h],al - 100012EE: 8B F1 mov esi,ecx - 100012F0: 85 F6 test esi,esi - 100012F2: 0F 84 BD 00 00 00 je 100013B5 - 100012F8: 8A 07 mov al,byte ptr [edi] - 100012FA: 0F B6 C8 movzx ecx,al - 100012FD: 83 C1 FE add ecx,0FFFFFFFEh - 10001300: 83 F9 03 cmp ecx,3 - 10001303: 0F 87 24 01 00 00 ja 1000142D - 10001309: FF 24 8D A8 14 00 jmp dword ptr [ecx*4+100014A8h] - 10 - 10001310: 80 BD BA 00 00 00 cmp byte ptr [ebp+000000BAh],0 - 00 - 10001317: 75 09 jne 10001322 - 10001319: 8B 54 24 1C mov edx,dword ptr [esp+1Ch] - 1000131D: 83 3A 02 cmp dword ptr [edx],2 - 10001320: EB 2B jmp 1000134D - 10001322: 33 F6 xor esi,esi - 10001324: 56 push esi - 10001325: 6A 12 push 12h - 10001327: 6A 02 push 2 - 10001329: E8 42 83 00 00 call 10009670 - 1000132E: 83 C4 0C add esp,0Ch - 10001331: E9 F7 00 00 00 jmp 1000142D - 10001336: 8B 4C 24 1C mov ecx,dword ptr [esp+1Ch] - 1000133A: 8B 09 mov ecx,dword ptr [ecx] - 1000133C: 83 F9 02 cmp ecx,2 - 1000133F: 76 E1 jbe 10001322 - 10001341: 0F B6 95 BA 00 00 movzx edx,byte ptr [ebp+000000BAh] - 00 - 10001348: 83 C1 FE add ecx,0FFFFFFFEh - 1000134B: 3B D1 cmp edx,ecx - 1000134D: 75 D3 jne 10001322 - 1000134F: BE 01 00 00 00 mov esi,1 - 10001354: 3A 44 24 20 cmp al,byte ptr [esp+20h] - 10001358: 0F 82 CF 00 00 00 jb 1000142D - 1000135E: 3A 44 24 24 cmp al,byte ptr [esp+24h] - 10001362: 0F 86 36 01 00 00 jbe 1000149E - 10001368: E9 C0 00 00 00 jmp 1000142D - 1000136D: 0F B7 85 7E 01 00 movzx eax,word ptr [ebp+0000017Eh] - 00 - 10001374: 8D 48 01 lea ecx,[eax+1] - 10001377: 66 89 8D 7E 01 00 mov word ptr [ebp+0000017Eh],cx - 00 - 1000137E: 66 3B 85 7A 01 00 cmp ax,word ptr [ebp+0000017Ah] - 00 - 10001385: 0F 83 A2 00 00 00 jae 1000142D - 1000138B: 0F B6 BD FA 00 00 movzx edi,byte ptr [ebp+000000FAh] - 00 - 10001392: 8B CB mov ecx,ebx - 10001394: 83 C7 02 add edi,2 - 10001397: E8 84 61 00 00 call 10007520 - 1000139C: 85 C0 test eax,eax - 1000139E: 0F 84 87 00 00 00 je 1000142B - 100013A4: 57 push edi - 100013A5: 8D 95 F9 00 00 00 lea edx,[ebp+000000F9h] - 100013AB: 52 push edx - 100013AC: 8B CB mov ecx,ebx - 100013AE: E8 8D 62 00 00 call 10007640 - 100013B3: EB 76 jmp 1000142B - 100013B5: 0F B6 C8 movzx ecx,al - 100013B8: 49 dec ecx - 100013B9: 83 F9 05 cmp ecx,5 - 100013BC: 0F 87 CB 00 00 00 ja 1000148D - 100013C2: FF 24 8D B8 14 00 jmp dword ptr [ecx*4+100014B8h] - 10 - 100013C9: 83 7C 24 2C 00 cmp dword ptr [esp+2Ch],0 - 100013CE: 0F 84 9E 00 00 00 je 10001472 - 100013D4: 3C 01 cmp al,1 - 100013D6: 75 32 jne 1000140A - 100013D8: 0F B7 85 7E 01 00 movzx eax,word ptr [ebp+0000017Eh] - 00 - 100013DF: 8D 48 01 lea ecx,[eax+1] - 100013E2: 66 89 8D 7E 01 00 mov word ptr [ebp+0000017Eh],cx - 00 - 100013E9: 66 3B 85 7A 01 00 cmp ax,word ptr [ebp+0000017Ah] - 00 - 100013F0: 72 32 jb 10001424 - 100013F2: 6A 01 push 1 - 100013F4: 6A 18 push 18h - 100013F6: 6A 02 push 2 - 100013F8: E8 73 82 00 00 call 10009670 - 100013FD: 83 C4 0C add esp,0Ch - 10001400: 5F pop edi - 10001401: 8B C6 mov eax,esi - 10001403: 5E pop esi - 10001404: 5D pop ebp - 10001405: 5B pop ebx - 10001406: 59 pop ecx - 10001407: C2 18 00 ret 18h - 1000140A: 0F B7 85 7C 01 00 movzx eax,word ptr [ebp+0000017Ch] - 00 - 10001411: 8D 50 01 lea edx,[eax+1] - 10001414: 66 89 95 7C 01 00 mov word ptr [ebp+0000017Ch],dx - 00 - 1000141B: 66 3B 85 78 01 00 cmp ax,word ptr [ebp+00000178h] - 00 - 10001422: 73 33 jae 10001457 - 10001424: 8B CD mov ecx,ebp - 10001426: E8 05 FE FF FF call 10001230 - 1000142B: 8B F0 mov esi,eax - 1000142D: 85 F6 test esi,esi - 1000142F: 0F 85 8F FE FF FF jne 100012C4 - 10001435: 5F pop edi - 10001436: 8B C6 mov eax,esi - 10001438: 5E pop esi - 10001439: 5D pop ebp - 1000143A: 5B pop ebx - 1000143B: 59 pop ecx - 1000143C: C2 18 00 ret 18h - 1000143F: 6A 00 push 0 - 10001441: 6A 17 push 17h - 10001443: 6A 02 push 2 - 10001445: E8 26 82 00 00 call 10009670 - 1000144A: 83 C4 0C add esp,0Ch - 1000144D: 5F pop edi - 1000144E: 8B C6 mov eax,esi - 10001450: 5E pop esi - 10001451: 5D pop ebp - 10001452: 5B pop ebx - 10001453: 59 pop ecx - 10001454: C2 18 00 ret 18h - 10001457: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 1000145B: 50 push eax - 1000145C: 6A 19 push 19h - 1000145E: 6A 02 push 2 - 10001460: E8 0B 82 00 00 call 10009670 - 10001465: 83 C4 0C add esp,0Ch - 10001468: 5F pop edi - 10001469: 8B C6 mov eax,esi - 1000146B: 5E pop esi - 1000146C: 5D pop ebp - 1000146D: 5B pop ebx - 1000146E: 59 pop ecx - 1000146F: C2 18 00 ret 18h - 10001472: 8B 4C 24 10 mov ecx,dword ptr [esp+10h] - 10001476: 51 push ecx - 10001477: 6A 19 push 19h - 10001479: 6A 02 push 2 - 1000147B: E8 F0 81 00 00 call 10009670 - 10001480: 83 C4 0C add esp,0Ch - 10001483: 5F pop edi - 10001484: 8B C6 mov eax,esi - 10001486: 5E pop esi - 10001487: 5D pop ebp - 10001488: 5B pop ebx - 10001489: 59 pop ecx - 1000148A: C2 18 00 ret 18h - 1000148D: 8B 54 24 10 mov edx,dword ptr [esp+10h] - 10001491: 52 push edx - 10001492: 6A 1A push 1Ah - 10001494: 6A 02 push 2 - 10001496: E8 D5 81 00 00 call 10009670 - 1000149B: 83 C4 0C add esp,0Ch - 1000149E: 5F pop edi - 1000149F: 8B C6 mov eax,esi - 100014A1: 5E pop esi - 100014A2: 5D pop ebp - 100014A3: 5B pop ebx - 100014A4: 59 pop ecx - 100014A5: C2 18 00 ret 18h - 100014A8: 10 13 adc byte ptr [ebx],dl - 100014AA: 00 10 add byte ptr [eax],dl - 100014AC: 6D ins dword ptr es:[edi],dx - 100014AD: 13 00 adc eax,dword ptr [eax] - 100014AF: 10 36 adc byte ptr [esi],dh - 100014B1: 13 00 adc eax,dword ptr [eax] - 100014B3: 10 36 adc byte ptr [esi],dh - 100014B5: 13 00 adc eax,dword ptr [eax] - 100014B7: 10 C9 adc cl,cl - 100014B9: 13 00 adc eax,dword ptr [eax] - 100014BB: 10 C9 adc cl,cl - 100014BD: 13 00 adc eax,dword ptr [eax] - 100014BF: 10 C9 adc cl,cl - 100014C1: 13 00 adc eax,dword ptr [eax] - 100014C3: 10 C4 adc ah,al - 100014C5: 12 00 adc al,byte ptr [eax] - 100014C7: 10 C9 adc cl,cl - 100014C9: 13 00 adc eax,dword ptr [eax] - 100014CB: 10 3F adc byte ptr [edi],bh - 100014CD: 14 00 adc al,0 - 100014CF: 10 56 33 adc byte ptr [esi+33h],dl - 100014D2: C0 57 66 89 rcl byte ptr [edi+66h],89h - 100014D6: 41 inc ecx - 100014D7: 04 8D add al,8Dh - 100014D9: 71 10 jno 100014EB - 100014DB: 8D 78 0A lea edi,[eax+0Ah] - 100014DE: 8B FF mov edi,edi - 100014E0: 8B CE mov ecx,esi - 100014E2: C7 46 F8 00 00 00 mov dword ptr [esi-8],0 - 00 - 100014E9: E8 12 84 00 00 call 10009900 - 100014EE: 8D 4E 10 lea ecx,[esi+10h] - 100014F1: E8 0A 84 00 00 call 10009900 - 100014F6: 83 C6 28 add esi,28h - 100014F9: 83 EF 01 sub edi,1 - 100014FC: 75 E2 jne 100014E0 - 100014FE: 5F pop edi - 100014FF: 5E pop esi - 10001500: C3 ret - 10001501: CC int 3 - 10001502: CC int 3 - 10001503: CC int 3 - 10001504: CC int 3 - 10001505: CC int 3 - 10001506: CC int 3 - 10001507: CC int 3 - 10001508: CC int 3 - 10001509: CC int 3 - 1000150A: CC int 3 - 1000150B: CC int 3 - 1000150C: CC int 3 - 1000150D: CC int 3 - 1000150E: CC int 3 - 1000150F: CC int 3 - 10001510: 83 EC 20 sub esp,20h - 10001513: 53 push ebx - 10001514: 55 push ebp - 10001515: 56 push esi - 10001516: 8B D9 mov ebx,ecx - 10001518: 57 push edi - 10001519: 8D 4C 24 10 lea ecx,[esp+10h] - 1000151D: 33 F6 xor esi,esi - 1000151F: E8 8C 81 00 00 call 100096B0 - 10001524: 8D 4C 24 20 lea ecx,[esp+20h] - 10001528: 33 ED xor ebp,ebp - 1000152A: E8 81 81 00 00 call 100096B0 - 1000152F: 50 push eax - 10001530: 8D 4C 24 14 lea ecx,[esp+14h] - 10001534: E8 F7 81 00 00 call 10009730 - 10001539: 8D A4 24 00 00 00 lea esp,[esp+00000000h] - 00 - 10001540: 66 83 FD 0A cmp bp,0Ah - 10001544: 73 54 jae 1000159A - 10001546: 8B 54 24 34 mov edx,dword ptr [esp+34h] - 1000154A: 0F B7 C5 movzx eax,bp - 1000154D: 8D 04 80 lea eax,[eax+eax*4] - 10001550: 33 C9 xor ecx,ecx - 10001552: 39 54 C3 08 cmp dword ptr [ebx+eax*8+8],edx - 10001556: 8D 3C C3 lea edi,[ebx+eax*8] - 10001559: 0F 94 C1 sete cl - 1000155C: 8B F1 mov esi,ecx - 1000155E: 85 F6 test esi,esi - 10001560: 74 27 je 10001589 - 10001562: 8D 44 24 10 lea eax,[esp+10h] - 10001566: 50 push eax - 10001567: 8D 4F 10 lea ecx,[edi+10h] - 1000156A: E8 C1 81 00 00 call 10009730 - 1000156F: 8B 0B mov ecx,dword ptr [ebx] - 10001571: 51 push ecx - 10001572: 8B 4C 24 3C mov ecx,dword ptr [esp+3Ch] - 10001576: 8D 54 24 24 lea edx,[esp+24h] - 1000157A: 52 push edx - 1000157B: E8 F0 81 00 00 call 10009770 - 10001580: 50 push eax - 10001581: 8D 4F 20 lea ecx,[edi+20h] - 10001584: E8 A7 81 00 00 call 10009730 - 10001589: 45 inc ebp - 1000158A: 85 F6 test esi,esi - 1000158C: 74 B2 je 10001540 - 1000158E: 5F pop edi - 1000158F: 8B C6 mov eax,esi - 10001591: 5E pop esi - 10001592: 5D pop ebp - 10001593: 5B pop ebx - 10001594: 83 C4 20 add esp,20h - 10001597: C2 08 00 ret 8 - 1000159A: 85 F6 test esi,esi - 1000159C: 75 57 jne 100015F5 - 1000159E: 33 ED xor ebp,ebp - 100015A0: 66 83 FD 0A cmp bp,0Ah - 100015A4: 73 4F jae 100015F5 - 100015A6: 55 push ebp - 100015A7: 8B CB mov ecx,ebx - 100015A9: E8 52 FA FF FF call 10001000 - 100015AE: 8B F0 mov esi,eax - 100015B0: F7 DE neg esi - 100015B2: 1B F6 sbb esi,esi - 100015B4: 83 C6 01 add esi,1 - 100015B7: 74 37 je 100015F0 - 100015B9: 8B 4C 24 34 mov ecx,dword ptr [esp+34h] - 100015BD: 0F B7 C5 movzx eax,bp - 100015C0: 8D 04 80 lea eax,[eax+eax*4] - 100015C3: 8D 3C C3 lea edi,[ebx+eax*8] - 100015C6: 8D 54 24 10 lea edx,[esp+10h] - 100015CA: 89 4F 08 mov dword ptr [edi+8],ecx - 100015CD: 52 push edx - 100015CE: 8D 4F 10 lea ecx,[edi+10h] - 100015D1: E8 5A 81 00 00 call 10009730 - 100015D6: 8B 03 mov eax,dword ptr [ebx] - 100015D8: 50 push eax - 100015D9: 8D 4C 24 24 lea ecx,[esp+24h] - 100015DD: 51 push ecx - 100015DE: 8B 4C 24 40 mov ecx,dword ptr [esp+40h] - 100015E2: E8 89 81 00 00 call 10009770 - 100015E7: 50 push eax - 100015E8: 8D 4F 20 lea ecx,[edi+20h] - 100015EB: E8 40 81 00 00 call 10009730 - 100015F0: 45 inc ebp - 100015F1: 85 F6 test esi,esi - 100015F3: 74 AB je 100015A0 - 100015F5: 5F pop edi - 100015F6: 8B C6 mov eax,esi - 100015F8: 5E pop esi - 100015F9: 5D pop ebp - 100015FA: 5B pop ebx - 100015FB: 83 C4 20 add esp,20h - 100015FE: C2 08 00 ret 8 - 10001601: CC int 3 - 10001602: CC int 3 - 10001603: CC int 3 - 10001604: CC int 3 - 10001605: CC int 3 - 10001606: CC int 3 - 10001607: CC int 3 - 10001608: CC int 3 - 10001609: CC int 3 - 1000160A: CC int 3 - 1000160B: CC int 3 - 1000160C: CC int 3 - 1000160D: CC int 3 - 1000160E: CC int 3 - 1000160F: CC int 3 - 10001610: 56 push esi - 10001611: 57 push edi - 10001612: 8B 7C 24 0C mov edi,dword ptr [esp+0Ch] - 10001616: 8B F1 mov esi,ecx - 10001618: 33 C0 xor eax,eax - 1000161A: 8D 9B 00 00 00 00 lea ebx,[ebx+00000000h] - 10001620: 0F B7 4E 04 movzx ecx,word ptr [esi+4] - 10001624: 66 83 F9 0A cmp cx,0Ah - 10001628: 73 21 jae 1000164B - 1000162A: 51 push ecx - 1000162B: 8B CE mov ecx,esi - 1000162D: E8 CE F9 FF FF call 10001000 - 10001632: 85 C0 test eax,eax - 10001634: 74 0D je 10001643 - 10001636: 0F B7 4E 04 movzx ecx,word ptr [esi+4] - 1000163A: 8D 0C 89 lea ecx,[ecx+ecx*4] - 1000163D: 8B 54 CE 08 mov edx,dword ptr [esi+ecx*8+8] - 10001641: 89 17 mov dword ptr [edi],edx - 10001643: 66 FF 46 04 inc word ptr [esi+4] - 10001647: 85 C0 test eax,eax - 10001649: 74 D5 je 10001620 - 1000164B: 5F pop edi - 1000164C: 5E pop esi - 1000164D: C2 04 00 ret 4 - 10001650: 6A FF push 0FFFFFFFFh - 10001652: 68 7B EC 01 10 push 1001EC7Bh - 10001657: 64 A1 00 00 00 00 mov eax,dword ptr fs:[00000000h] - 1000165D: 50 push eax - 1000165E: 51 push ecx - 1000165F: 56 push esi - 10001660: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10001665: 33 C4 xor eax,esp - 10001667: 50 push eax - 10001668: 8D 44 24 0C lea eax,[esp+0Ch] - 1000166C: 64 A3 00 00 00 00 mov dword ptr fs:[00000000h],eax - 10001672: 89 4C 24 08 mov dword ptr [esp+8],ecx - 10001676: C7 01 E0 F1 01 10 mov dword ptr [ecx],1001F1E0h - 1000167C: 8D 71 08 lea esi,[ecx+8] - 1000167F: 8B CE mov ecx,esi - 10001681: C7 44 24 14 00 00 mov dword ptr [esp+14h],0 - 00 00 - 10001689: E8 02 5E 00 00 call 10007490 - 1000168E: 8B CE mov ecx,esi - 10001690: C7 44 24 14 FF FF mov dword ptr [esp+14h],0FFFFFFFFh - FF FF - 10001698: E8 F3 64 00 00 call 10007B90 - 1000169D: 8B 4C 24 0C mov ecx,dword ptr [esp+0Ch] - 100016A1: 64 89 0D 00 00 00 mov dword ptr fs:[00000000h],ecx - 00 - 100016A8: 59 pop ecx - 100016A9: 5E pop esi - 100016AA: 83 C4 10 add esp,10h - 100016AD: C3 ret - 100016AE: CC int 3 - 100016AF: CC int 3 - 100016B0: 8B 44 24 14 mov eax,dword ptr [esp+14h] - 100016B4: 8B 54 24 0C mov edx,dword ptr [esp+0Ch] - 100016B8: 55 push ebp - 100016B9: 56 push esi - 100016BA: 57 push edi - 100016BB: 8B F1 mov esi,ecx - 100016BD: 8B 4C 24 1C mov ecx,dword ptr [esp+1Ch] - 100016C1: 50 push eax - 100016C2: 8B 44 24 18 mov eax,dword ptr [esp+18h] - 100016C6: 51 push ecx - 100016C7: 8B 4C 24 18 mov ecx,dword ptr [esp+18h] - 100016CB: 52 push edx - 100016CC: 50 push eax - 100016CD: 8D 6E 08 lea ebp,[esi+8] - 100016D0: 51 push ecx - 100016D1: 8B CD mov ecx,ebp - 100016D3: E8 58 5D 00 00 call 10007430 - 100016D8: 8B F8 mov edi,eax - 100016DA: 85 FF test edi,edi - 100016DC: 74 2A je 10001708 - 100016DE: B8 F4 01 00 00 mov eax,1F4h - 100016E3: 50 push eax - 100016E4: 50 push eax - 100016E5: 6A 0A push 0Ah - 100016E7: 8B CD mov ecx,ebp - 100016E9: C7 86 6C 01 00 00 mov dword ptr [esi+0000016Ch],0Ah - 0A 00 00 00 - 100016F3: 89 86 70 01 00 00 mov dword ptr [esi+00000170h],eax - 100016F9: 89 86 74 01 00 00 mov dword ptr [esi+00000174h],eax - 100016FF: E8 AC 5D 00 00 call 100074B0 - 10001704: 8B F8 mov edi,eax - 10001706: EB 0E jmp 10001716 - 10001708: 6A 00 push 0 - 1000170A: 6A 11 push 11h - 1000170C: 6A 02 push 2 - 1000170E: E8 5D 7F 00 00 call 10009670 - 10001713: 83 C4 0C add esp,0Ch - 10001716: 8D 8E 40 01 00 00 lea ecx,[esi+00000140h] - 1000171C: E8 DF 81 00 00 call 10009900 - 10001721: 8D 8E 50 01 00 00 lea ecx,[esi+00000150h] - 10001727: E8 D4 81 00 00 call 10009900 - 1000172C: 33 D2 xor edx,edx - 1000172E: 33 C0 xor eax,eax - 10001730: 8D 8E 80 01 00 00 lea ecx,[esi+00000180h] - 10001736: 66 89 96 7C 01 00 mov word ptr [esi+0000017Ch],dx - 00 - 1000173D: 66 89 86 7E 01 00 mov word ptr [esi+0000017Eh],ax - 00 - 10001744: E8 87 FD FF FF call 100014D0 - 10001749: 6A 00 push 0 - 1000174B: 8B CD mov ecx,ebp - 1000174D: E8 BE 5D 00 00 call 10007510 - 10001752: 8B C7 mov eax,edi - 10001754: 5F pop edi - 10001755: C7 86 64 01 00 00 mov dword ptr [esi+00000164h],0 - 00 00 00 00 - 1000175F: C6 86 39 01 00 00 mov byte ptr [esi+00000139h],0 - 00 - 10001766: 5E pop esi - 10001767: 5D pop ebp - 10001768: C2 14 00 ret 14h - 1000176B: CC int 3 - 1000176C: CC int 3 - 1000176D: CC int 3 - 1000176E: CC int 3 - 1000176F: CC int 3 - 10001770: 81 C1 80 01 00 00 add ecx,180h - 10001776: E9 55 FD FF FF jmp 100014D0 - 1000177B: CC int 3 - 1000177C: CC int 3 - 1000177D: CC int 3 - 1000177E: CC int 3 - 1000177F: CC int 3 - 10001780: 51 push ecx - 10001781: 8B 44 24 08 mov eax,dword ptr [esp+8] - 10001785: 53 push ebx - 10001786: 55 push ebp - 10001787: 56 push esi - 10001788: 8B F1 mov esi,ecx - 1000178A: 57 push edi - 1000178B: 8D 5E 08 lea ebx,[esi+8] - 1000178E: 50 push eax - 1000178F: 8B CB mov ecx,ebx - 10001791: 33 FF xor edi,edi - 10001793: 8B E8 mov ebp,eax - 10001795: E8 76 5D 00 00 call 10007510 - 1000179A: 8B CB mov ecx,ebx - 1000179C: 89 AE 64 01 00 00 mov dword ptr [esi+00000164h],ebp - 100017A2: C6 86 39 01 00 00 mov byte ptr [esi+00000139h],0 - 00 - 100017A9: E8 72 5D 00 00 call 10007520 - 100017AE: 85 C0 test eax,eax - 100017B0: 74 64 je 10001816 - 100017B2: 57 push edi - 100017B3: 57 push edi - 100017B4: 57 push edi - 100017B5: 8B CE mov ecx,esi - 100017B7: E8 A4 F9 FF FF call 10001160 - 100017BC: 85 C0 test eax,eax - 100017BE: 74 56 je 10001816 - 100017C0: 8D 5F 02 lea ebx,[edi+2] - 100017C3: 85 FF test edi,edi - 100017C5: 75 4F jne 10001816 - 100017C7: 8B 86 60 01 00 00 mov eax,dword ptr [esi+00000160h] - 100017CD: 57 push edi - 100017CE: 50 push eax - 100017CF: 53 push ebx - 100017D0: 53 push ebx - 100017D1: 8D 4C 24 20 lea ecx,[esp+20h] - 100017D5: 51 push ecx - 100017D6: 8D 54 24 2C lea edx,[esp+2Ch] - 100017DA: 52 push edx - 100017DB: 8B CE mov ecx,esi - 100017DD: E8 CE FA FF FF call 100012B0 - 100017E2: 85 C0 test eax,eax - 100017E4: 74 30 je 10001816 - 100017E6: 8A 86 B9 00 00 00 mov al,byte ptr [esi+000000B9h] - 100017EC: 3A C3 cmp al,bl - 100017EE: 75 16 jne 10001806 - 100017F0: 80 BE BA 00 00 00 cmp byte ptr [esi+000000BAh],0 - 00 - 100017F7: 75 0D jne 10001806 - 100017F9: 39 5C 24 10 cmp dword ptr [esp+10h],ebx - 100017FD: 75 07 jne 10001806 - 100017FF: BF 01 00 00 00 mov edi,1 - 10001804: EB BD jmp 100017C3 - 10001806: 50 push eax - 10001807: 6A 01 push 1 - 10001809: 53 push ebx - 1000180A: 33 FF xor edi,edi - 1000180C: E8 5F 7E 00 00 call 10009670 - 10001811: 83 C4 0C add esp,0Ch - 10001814: EB AD jmp 100017C3 - 10001816: 8B C7 mov eax,edi - 10001818: 5F pop edi - 10001819: 5E pop esi - 1000181A: 5D pop ebp - 1000181B: 5B pop ebx - 1000181C: 59 pop ecx - 1000181D: C2 04 00 ret 4 - 10001820: 53 push ebx - 10001821: 56 push esi - 10001822: 57 push edi - 10001823: 8B 7C 24 14 mov edi,dword ptr [esp+14h] - 10001827: 8B F1 mov esi,ecx - 10001829: 89 BE 68 01 00 00 mov dword ptr [esi+00000168h],edi - 1000182F: 83 FF 40 cmp edi,40h - 10001832: 76 0A jbe 1000183E - 10001834: C7 86 68 01 00 00 mov dword ptr [esi+00000168h],40h - 40 00 00 00 - 1000183E: 8B 86 68 01 00 00 mov eax,dword ptr [esi+00000168h] - 10001844: 8B 5C 24 10 mov ebx,dword ptr [esp+10h] - 10001848: 50 push eax - 10001849: 8D 4E 79 lea ecx,[esi+79h] - 1000184C: 53 push ebx - 1000184D: 51 push ecx - 1000184E: E8 FD 80 00 00 call 10009950 - 10001853: 8A 96 39 01 00 00 mov dl,byte ptr [esi+00000139h] - 10001859: 80 C2 04 add dl,4 - 1000185C: 83 C4 0C add esp,0Ch - 1000185F: 8D 4E 08 lea ecx,[esi+8] - 10001862: 88 54 24 14 mov byte ptr [esp+14h],dl - 10001866: E8 B5 5C 00 00 call 10007520 - 1000186B: 85 C0 test eax,eax - 1000186D: 74 0E je 1000187D - 1000186F: 8B 44 24 14 mov eax,dword ptr [esp+14h] - 10001873: 57 push edi - 10001874: 53 push ebx - 10001875: 50 push eax - 10001876: 8B CE mov ecx,esi - 10001878: E8 E3 F8 FF FF call 10001160 - 1000187D: 33 C9 xor ecx,ecx - 1000187F: 33 D2 xor edx,edx - 10001881: 5F pop edi - 10001882: 66 89 8E 7E 01 00 mov word ptr [esi+0000017Eh],cx - 00 - 10001889: 66 89 96 7C 01 00 mov word ptr [esi+0000017Ch],dx - 00 - 10001890: 5E pop esi - 10001891: 5B pop ebx - 10001892: C2 08 00 ret 8 - 10001895: CC int 3 - 10001896: CC int 3 - 10001897: CC int 3 - 10001898: CC int 3 - 10001899: CC int 3 - 1000189A: CC int 3 - 1000189B: CC int 3 - 1000189C: CC int 3 - 1000189D: CC int 3 - 1000189E: CC int 3 - 1000189F: CC int 3 - 100018A0: 83 EC 20 sub esp,20h - 100018A3: 56 push esi - 100018A4: 8B F1 mov esi,ecx - 100018A6: 57 push edi - 100018A7: 8B 7C 24 38 mov edi,dword ptr [esp+38h] - 100018AB: 8D 86 40 01 00 00 lea eax,[esi+00000140h] - 100018B1: 50 push eax - 100018B2: 8D 4C 24 0C lea ecx,[esp+0Ch] - 100018B6: C7 07 00 00 00 00 mov dword ptr [edi],0 - 100018BC: E8 EF 7D 00 00 call 100096B0 - 100018C1: 8B C8 mov ecx,eax - 100018C3: E8 38 7F 00 00 call 10009800 - 100018C8: 84 C0 test al,al - 100018CA: 75 34 jne 10001900 - 100018CC: 8D 8E 50 01 00 00 lea ecx,[esi+00000150h] - 100018D2: 51 push ecx - 100018D3: 8D 4C 24 1C lea ecx,[esp+1Ch] - 100018D7: E8 D4 7D 00 00 call 100096B0 - 100018DC: 8B C8 mov ecx,eax - 100018DE: E8 DD 7E 00 00 call 100097C0 - 100018E3: 84 C0 test al,al - 100018E5: 75 19 jne 10001900 - 100018E7: 33 F6 xor esi,esi - 100018E9: 56 push esi - 100018EA: 6A 0E push 0Eh - 100018EC: 6A 02 push 2 - 100018EE: E8 7D 7D 00 00 call 10009670 - 100018F3: 83 C4 0C add esp,0Ch - 100018F6: 5F pop edi - 100018F7: 8B C6 mov eax,esi - 100018F9: 5E pop esi - 100018FA: 83 C4 20 add esp,20h - 100018FD: C2 10 00 ret 10h - 10001900: 8B 96 70 01 00 00 mov edx,dword ptr [esi+00000170h] - 10001906: 8B 44 24 2C mov eax,dword ptr [esp+2Ch] - 1000190A: 6A 01 push 1 - 1000190C: 52 push edx - 1000190D: 6A 05 push 5 - 1000190F: 6A 04 push 4 - 10001911: 57 push edi - 10001912: 50 push eax - 10001913: 8B CE mov ecx,esi - 10001915: E8 96 F9 FF FF call 100012B0 - 1000191A: 85 C0 test eax,eax - 1000191C: 0F 84 9C 00 00 00 je 100019BE - 10001922: 8A 86 39 01 00 00 mov al,byte ptr [esi+00000139h] - 10001928: 0F B6 96 B9 00 00 movzx edx,byte ptr [esi+000000B9h] - 00 - 1000192F: 0F B6 C8 movzx ecx,al - 10001932: 53 push ebx - 10001933: 33 DB xor ebx,ebx - 10001935: 83 C1 04 add ecx,4 - 10001938: 3B D1 cmp edx,ecx - 1000193A: 0F 94 C3 sete bl - 1000193D: 8B CB mov ecx,ebx - 1000193F: 5B pop ebx - 10001940: 85 C9 test ecx,ecx - 10001942: 75 2A jne 1000196E - 10001944: 50 push eax - 10001945: 6A 0D push 0Dh - 10001947: 6A 02 push 2 - 10001949: E8 22 7D 00 00 call 10009670 - 1000194E: 8B 86 64 01 00 00 mov eax,dword ptr [esi+00000164h] - 10001954: 83 C4 0C add esp,0Ch - 10001957: 50 push eax - 10001958: 8B CE mov ecx,esi - 1000195A: E8 21 FE FF FF call 10001780 - 1000195F: 85 C0 test eax,eax - 10001961: 74 5B je 100019BE - 10001963: 8B CE mov ecx,esi - 10001965: E8 F6 F8 FF FF call 10001260 - 1000196A: 85 C0 test eax,eax - 1000196C: 74 50 je 100019BE - 1000196E: 83 07 FE add dword ptr [edi],0FFFFFFFEh - 10001971: 8B 07 mov eax,dword ptr [edi] - 10001973: 8B 4C 24 34 mov ecx,dword ptr [esp+34h] - 10001977: 3B C8 cmp ecx,eax - 10001979: 1B FF sbb edi,edi - 1000197B: 83 C7 01 add edi,1 - 1000197E: 75 17 jne 10001997 - 10001980: 51 push ecx - 10001981: 6A 0B push 0Bh - 10001983: 6A 02 push 2 - 10001985: E8 E6 7C 00 00 call 10009670 - 1000198A: 83 C4 0C add esp,0Ch - 1000198D: 8B C7 mov eax,edi - 1000198F: 5F pop edi - 10001990: 5E pop esi - 10001991: 83 C4 20 add esp,20h - 10001994: C2 10 00 ret 10h - 10001997: 8B 54 24 30 mov edx,dword ptr [esp+30h] - 1000199B: 50 push eax - 1000199C: 8D 8E BB 00 00 00 lea ecx,[esi+000000BBh] - 100019A2: 51 push ecx - 100019A3: 52 push edx - 100019A4: E8 A7 7F 00 00 call 10009950 - 100019A9: 80 B6 39 01 00 00 xor byte ptr [esi+00000139h],1 - 01 - 100019B0: 83 C4 0C add esp,0Ch - 100019B3: 33 C0 xor eax,eax - 100019B5: 66 89 86 7C 01 00 mov word ptr [esi+0000017Ch],ax - 00 - 100019BC: 8B C7 mov eax,edi - 100019BE: 5F pop edi - 100019BF: 5E pop esi - 100019C0: 83 C4 20 add esp,20h - 100019C3: C2 10 00 ret 10h - 100019C6: CC int 3 - 100019C7: CC int 3 - 100019C8: CC int 3 - 100019C9: CC int 3 - 100019CA: CC int 3 - 100019CB: CC int 3 - 100019CC: CC int 3 - 100019CD: CC int 3 - 100019CE: CC int 3 - 100019CF: CC int 3 - 100019D0: 53 push ebx - 100019D1: 56 push esi - 100019D2: 8B D9 mov ebx,ecx - 100019D4: 57 push edi - 100019D5: BF 09 00 00 00 mov edi,9 - 100019DA: 8D 73 20 lea esi,[ebx+20h] - 100019DD: 8D 49 00 lea ecx,[ecx] - 100019E0: 8D 4E F0 lea ecx,[esi-10h] - 100019E3: E8 C8 7C 00 00 call 100096B0 - 100019E8: 8B CE mov ecx,esi - 100019EA: E8 C1 7C 00 00 call 100096B0 - 100019EF: 83 C6 28 add esi,28h - 100019F2: 83 EF 01 sub edi,1 - 100019F5: 79 E9 jns 100019E0 - 100019F7: 8B CB mov ecx,ebx - 100019F9: C7 03 88 13 00 00 mov dword ptr [ebx],1388h - 100019FF: E8 CC FA FF FF call 100014D0 - 10001A04: 5F pop edi - 10001A05: 5E pop esi - 10001A06: 8B C3 mov eax,ebx - 10001A08: 5B pop ebx - 10001A09: C3 ret - 10001A0A: CC int 3 - 10001A0B: CC int 3 - 10001A0C: CC int 3 - 10001A0D: CC int 3 - 10001A0E: CC int 3 - 10001A0F: CC int 3 - 10001A10: 6A FF push 0FFFFFFFFh - 10001A12: 68 7B EC 01 10 push 1001EC7Bh - 10001A17: 64 A1 00 00 00 00 mov eax,dword ptr fs:[00000000h] - 10001A1D: 50 push eax - 10001A1E: 51 push ecx - 10001A1F: 56 push esi - 10001A20: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10001A25: 33 C4 xor eax,esp - 10001A27: 50 push eax - 10001A28: 8D 44 24 0C lea eax,[esp+0Ch] - 10001A2C: 64 A3 00 00 00 00 mov dword ptr fs:[00000000h],eax - 10001A32: 8B F1 mov esi,ecx - 10001A34: 89 74 24 08 mov dword ptr [esp+8],esi - 10001A38: 8D 4E 08 lea ecx,[esi+8] - 10001A3B: E8 60 59 00 00 call 100073A0 - 10001A40: 8D 8E 40 01 00 00 lea ecx,[esi+00000140h] - 10001A46: C7 44 24 14 00 00 mov dword ptr [esp+14h],0 - 00 00 - 10001A4E: C7 06 E0 F1 01 10 mov dword ptr [esi],1001F1E0h - 10001A54: E8 57 7C 00 00 call 100096B0 - 10001A59: 8D 8E 50 01 00 00 lea ecx,[esi+00000150h] - 10001A5F: E8 4C 7C 00 00 call 100096B0 - 10001A64: 8D 8E 80 01 00 00 lea ecx,[esi+00000180h] - 10001A6A: E8 61 FF FF FF call 100019D0 - 10001A6F: B8 02 00 00 00 mov eax,2 - 10001A74: 8B C8 mov ecx,eax - 10001A76: 66 89 86 78 01 00 mov word ptr [esi+00000178h],ax - 00 - 10001A7D: 66 89 8E 7A 01 00 mov word ptr [esi+0000017Ah],cx - 00 - 10001A84: C7 86 60 01 00 00 mov dword ptr [esi+00000160h],0C8h - C8 00 00 00 - 10001A8E: C6 46 78 08 mov byte ptr [esi+78h],8 - 10001A92: C7 86 64 01 00 00 mov dword ptr [esi+00000164h],0 - 00 00 00 00 - 10001A9C: C7 46 74 00 00 00 mov dword ptr [esi+74h],0 - 00 - 10001AA3: 8B C6 mov eax,esi - 10001AA5: 8B 4C 24 0C mov ecx,dword ptr [esp+0Ch] - 10001AA9: 64 89 0D 00 00 00 mov dword ptr fs:[00000000h],ecx - 00 - 10001AB0: 59 pop ecx - 10001AB1: 5E pop esi - 10001AB2: 83 C4 10 add esp,10h - 10001AB5: C3 ret - 10001AB6: CC int 3 - 10001AB7: CC int 3 - 10001AB8: CC int 3 - 10001AB9: CC int 3 - 10001ABA: CC int 3 - 10001ABB: CC int 3 - 10001ABC: CC int 3 - 10001ABD: CC int 3 - 10001ABE: CC int 3 - 10001ABF: CC int 3 - 10001AC0: 83 EC 40 sub esp,40h - 10001AC3: 53 push ebx - 10001AC4: 55 push ebp - 10001AC5: 56 push esi - 10001AC6: 8B F1 mov esi,ecx - 10001AC8: 57 push edi - 10001AC9: 33 DB xor ebx,ebx - 10001ACB: 8D AE 40 01 00 00 lea ebp,[esi+00000140h] - 10001AD1: 55 push ebp - 10001AD2: 8D 4C 24 24 lea ecx,[esp+24h] - 10001AD6: 89 5C 24 18 mov dword ptr [esp+18h],ebx - 10001ADA: 89 5C 24 1C mov dword ptr [esp+1Ch],ebx - 10001ADE: E8 CD 7B 00 00 call 100096B0 - 10001AE3: 8B C8 mov ecx,eax - 10001AE5: E8 F6 7C 00 00 call 100097E0 - 10001AEA: 84 C0 test al,al - 10001AEC: 75 1F jne 10001B0D - 10001AEE: 8D 86 50 01 00 00 lea eax,[esi+00000150h] - 10001AF4: 50 push eax - 10001AF5: 8D 4C 24 24 lea ecx,[esp+24h] - 10001AF9: E8 B2 7B 00 00 call 100096B0 - 10001AFE: 8B C8 mov ecx,eax - 10001B00: E8 BB 7C 00 00 call 100097C0 - 10001B05: 84 C0 test al,al - 10001B07: 0F 84 BF 00 00 00 je 10001BCC - 10001B0D: 68 FF FF FF 00 push 0FFFFFFh - 10001B12: 8D 4E 08 lea ecx,[esi+8] - 10001B15: E8 F6 59 00 00 call 10007510 - 10001B1A: C7 86 64 01 00 00 mov dword ptr [esi+00000164h],0FFFFFFh - FF FF FF 00 - 10001B24: 88 9E 39 01 00 00 mov byte ptr [esi+00000139h],bl - 10001B2A: 8B CE mov ecx,esi - 10001B2C: 39 5E 74 cmp dword ptr [esi+74h],ebx - 10001B2F: 74 51 je 10001B82 - 10001B31: 6A 01 push 1 - 10001B33: 8D 7E 78 lea edi,[esi+78h] - 10001B36: 57 push edi - 10001B37: 6A 01 push 1 - 10001B39: E8 22 F6 FF FF call 10001160 - 10001B3E: 89 44 24 14 mov dword ptr [esp+14h],eax - 10001B42: 3B C3 cmp eax,ebx - 10001B44: 0F 84 82 00 00 00 je 10001BCC - 10001B4A: 8D 4C 24 20 lea ecx,[esp+20h] - 10001B4E: 8D 9E 50 01 00 00 lea ebx,[esi+00000150h] - 10001B54: E8 57 7B 00 00 call 100096B0 - 10001B59: 50 push eax - 10001B5A: 8B CB mov ecx,ebx - 10001B5C: E8 CF 7B 00 00 call 10009730 - 10001B61: 0F B6 0F movzx ecx,byte ptr [edi] - 10001B64: 0F AF 8E 60 01 00 imul ecx,dword ptr [esi+00000160h] - 00 - 10001B6B: 51 push ecx - 10001B6C: 8D 54 24 24 lea edx,[esp+24h] - 10001B70: 52 push edx - 10001B71: 8B CB mov ecx,ebx - 10001B73: E8 F8 7B 00 00 call 10009770 - 10001B78: 50 push eax - 10001B79: 8B CD mov ecx,ebp - 10001B7B: E8 B0 7B 00 00 call 10009730 - 10001B80: EB 4A jmp 10001BCC - 10001B82: 53 push ebx - 10001B83: 53 push ebx - 10001B84: 53 push ebx - 10001B85: E8 D6 F5 FF FF call 10001160 - 10001B8A: 89 44 24 14 mov dword ptr [esp+14h],eax - 10001B8E: 3B C3 cmp eax,ebx - 10001B90: 74 3A je 10001BCC - 10001B92: 8D 4C 24 20 lea ecx,[esp+20h] - 10001B96: 8D BE 50 01 00 00 lea edi,[esi+00000150h] - 10001B9C: E8 0F 7B 00 00 call 100096B0 - 10001BA1: 50 push eax - 10001BA2: 8B CF mov ecx,edi - 10001BA4: E8 87 7B 00 00 call 10009730 - 10001BA9: 8B 86 60 01 00 00 mov eax,dword ptr [esi+00000160h] - 10001BAF: 50 push eax - 10001BB0: 8D 4C 24 24 lea ecx,[esp+24h] - 10001BB4: 51 push ecx - 10001BB5: 8B CF mov ecx,edi - 10001BB7: E8 B4 7B 00 00 call 10009770 - 10001BBC: 50 push eax - 10001BBD: 8B CD mov ecx,ebp - 10001BBF: E8 6C 7B 00 00 call 10009730 - 10001BC4: C7 44 24 18 01 00 mov dword ptr [esp+18h],1 - 00 00 - 10001BCC: 6A 00 push 0 - 10001BCE: 6A 64 push 64h - 10001BD0: BB 02 00 00 00 mov ebx,2 - 10001BD5: 53 push ebx - 10001BD6: 53 push ebx - 10001BD7: 8D 54 24 2C lea edx,[esp+2Ch] - 10001BDB: 52 push edx - 10001BDC: 8D 44 24 24 lea eax,[esp+24h] - 10001BE0: 50 push eax - 10001BE1: 8B CE mov ecx,esi - 10001BE3: E8 C8 F6 FF FF call 100012B0 - 10001BE8: 85 C0 test eax,eax - 10001BEA: 0F 84 7D 00 00 00 je 10001C6D - 10001BF0: 38 9E B9 00 00 00 cmp byte ptr [esi+000000B9h],bl - 10001BF6: 75 5A jne 10001C52 - 10001BF8: 80 BE BA 00 00 00 cmp byte ptr [esi+000000BAh],0 - 00 - 10001BFF: 75 51 jne 10001C52 - 10001C01: 39 5C 24 1C cmp dword ptr [esp+1Ch],ebx - 10001C05: 75 4B jne 10001C52 - 10001C07: 83 7C 24 18 00 cmp dword ptr [esp+18h],0 - 10001C0C: 74 11 je 10001C1F - 10001C0E: 8D 4C 24 20 lea ecx,[esp+20h] - 10001C12: E8 99 7A 00 00 call 100096B0 - 10001C17: 50 push eax - 10001C18: 8B CD mov ecx,ebp - 10001C1A: E8 11 7B 00 00 call 10009730 - 10001C1F: 8D 4C 24 30 lea ecx,[esp+30h] - 10001C23: E8 88 7A 00 00 call 100096B0 - 10001C28: 50 push eax - 10001C29: 8B CD mov ecx,ebp - 10001C2B: E8 D0 7B 00 00 call 10009800 - 10001C30: 84 C0 test al,al - 10001C32: 74 04 je 10001C38 - 10001C34: 8B C5 mov eax,ebp - 10001C36: EB 09 jmp 10001C41 - 10001C38: 8D 4C 24 40 lea ecx,[esp+40h] - 10001C3C: E8 6F 7A 00 00 call 100096B0 - 10001C41: 8B 4C 24 10 mov ecx,dword ptr [esp+10h] - 10001C45: 50 push eax - 10001C46: 51 push ecx - 10001C47: 8D 8E 80 01 00 00 lea ecx,[esi+00000180h] - 10001C4D: E8 BE F8 FF FF call 10001510 - 10001C52: 6A 00 push 0 - 10001C54: 6A 64 push 64h - 10001C56: 53 push ebx - 10001C57: 53 push ebx - 10001C58: 8D 54 24 2C lea edx,[esp+2Ch] - 10001C5C: 52 push edx - 10001C5D: 8D 44 24 24 lea eax,[esp+24h] - 10001C61: 50 push eax - 10001C62: 8B CE mov ecx,esi - 10001C64: E8 47 F6 FF FF call 100012B0 - 10001C69: 85 C0 test eax,eax - 10001C6B: 75 83 jne 10001BF0 - 10001C6D: 8D 4E 08 lea ecx,[esi+8] - 10001C70: E8 0B 5F 00 00 call 10007B80 - 10001C75: 33 C9 xor ecx,ecx - 10001C77: 8D BE 80 01 00 00 lea edi,[esi+00000180h] - 10001C7D: 89 46 74 mov dword ptr [esi+74h],eax - 10001C80: 8D 54 24 10 lea edx,[esp+10h] - 10001C84: 66 89 4F 04 mov word ptr [edi+4],cx - 10001C88: 52 push edx - 10001C89: 8B CF mov ecx,edi - 10001C8B: E8 80 F9 FF FF call 10001610 - 10001C90: 85 C0 test eax,eax - 10001C92: 0F 84 87 00 00 00 je 10001D1F - 10001C98: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 10001C9C: 8B 5C 24 54 mov ebx,dword ptr [esp+54h] - 10001CA0: 8D 4C 24 10 lea ecx,[esp+10h] - 10001CA4: 51 push ecx - 10001CA5: 8B CF mov ecx,edi - 10001CA7: 89 03 mov dword ptr [ebx],eax - 10001CA9: BE 01 00 00 00 mov esi,1 - 10001CAE: E8 5D F9 FF FF call 10001610 - 10001CB3: 85 C0 test eax,eax - 10001CB5: 74 3E je 10001CF5 - 10001CB7: 66 8B 6C 24 58 mov bp,word ptr [esp+58h] - 10001CBC: 8D 64 24 00 lea esp,[esp] - 10001CC0: 66 3B F5 cmp si,bp - 10001CC3: 73 45 jae 10001D0A - 10001CC5: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 10001CC9: 0F B7 D6 movzx edx,si - 10001CCC: 8D 4C 24 10 lea ecx,[esp+10h] - 10001CD0: 51 push ecx - 10001CD1: 8B CF mov ecx,edi - 10001CD3: 89 04 93 mov dword ptr [ebx+edx*4],eax - 10001CD6: 46 inc esi - 10001CD7: E8 34 F9 FF FF call 10001610 - 10001CDC: 85 C0 test eax,eax - 10001CDE: 75 E0 jne 10001CC0 - 10001CE0: 8B 54 24 5C mov edx,dword ptr [esp+5Ch] - 10001CE4: 8B 44 24 14 mov eax,dword ptr [esp+14h] - 10001CE8: 5F pop edi - 10001CE9: 66 89 32 mov word ptr [edx],si - 10001CEC: 5E pop esi - 10001CED: 5D pop ebp - 10001CEE: 5B pop ebx - 10001CEF: 83 C4 40 add esp,40h - 10001CF2: C2 0C 00 ret 0Ch - 10001CF5: 8B 44 24 5C mov eax,dword ptr [esp+5Ch] - 10001CF9: 5F pop edi - 10001CFA: 66 89 30 mov word ptr [eax],si - 10001CFD: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 10001D01: 5E pop esi - 10001D02: 5D pop ebp - 10001D03: 5B pop ebx - 10001D04: 83 C4 40 add esp,40h - 10001D07: C2 0C 00 ret 0Ch - 10001D0A: 8B 4C 24 5C mov ecx,dword ptr [esp+5Ch] - 10001D0E: 8B 44 24 14 mov eax,dword ptr [esp+14h] - 10001D12: 5F pop edi - 10001D13: 66 89 31 mov word ptr [ecx],si - 10001D16: 5E pop esi - 10001D17: 5D pop ebp - 10001D18: 5B pop ebx - 10001D19: 83 C4 40 add esp,40h - 10001D1C: C2 0C 00 ret 0Ch - 10001D1F: 8B 54 24 5C mov edx,dword ptr [esp+5Ch] - 10001D23: 5F pop edi - 10001D24: 5E pop esi - 10001D25: 33 C0 xor eax,eax - 10001D27: 5D pop ebp - 10001D28: 66 89 02 mov word ptr [edx],ax - 10001D2B: 8B 44 24 08 mov eax,dword ptr [esp+8] - 10001D2F: 5B pop ebx - 10001D30: 83 C4 40 add esp,40h - 10001D33: C2 0C 00 ret 0Ch - 10001D36: CC int 3 - 10001D37: CC int 3 - 10001D38: CC int 3 - 10001D39: CC int 3 - 10001D3A: CC int 3 - 10001D3B: CC int 3 - 10001D3C: CC int 3 - 10001D3D: CC int 3 - 10001D3E: CC int 3 - 10001D3F: CC int 3 - 10001D40: 56 push esi - 10001D41: 8B F1 mov esi,ecx - 10001D43: 8B 06 mov eax,dword ptr [esi] - 10001D45: 85 C0 test eax,eax - 10001D47: 74 09 je 10001D52 - 10001D49: 50 push eax - 10001D4A: E8 AC 83 00 00 call 1000A0FB - 10001D4F: 83 C4 04 add esp,4 - 10001D52: C7 06 00 00 00 00 mov dword ptr [esi],0 - 10001D58: 5E pop esi - 10001D59: C3 ret - 10001D5A: CC int 3 - 10001D5B: CC int 3 - 10001D5C: CC int 3 - 10001D5D: CC int 3 - 10001D5E: CC int 3 - 10001D5F: CC int 3 - 10001D60: 8B 51 04 mov edx,dword ptr [ecx+4] - 10001D63: 8B 01 mov eax,dword ptr [ecx] - 10001D65: 4A dec edx - 10001D66: 89 41 08 mov dword ptr [ecx+8],eax - 10001D69: 89 51 0C mov dword ptr [ecx+0Ch],edx - 10001D6C: C3 ret - 10001D6D: CC int 3 - 10001D6E: CC int 3 - 10001D6F: CC int 3 - 10001D70: 8B 41 0C mov eax,dword ptr [ecx+0Ch] - 10001D73: 40 inc eax - 10001D74: 3B 41 04 cmp eax,dword ptr [ecx+4] - 10001D77: 72 02 jb 10001D7B - 10001D79: 8B 01 mov eax,dword ptr [ecx] - 10001D7B: 33 D2 xor edx,edx - 10001D7D: 39 41 08 cmp dword ptr [ecx+8],eax - 10001D80: 0F 94 C2 sete dl - 10001D83: 8B C2 mov eax,edx - 10001D85: C3 ret - 10001D86: CC int 3 - 10001D87: CC int 3 - 10001D88: CC int 3 - 10001D89: CC int 3 - 10001D8A: CC int 3 - 10001D8B: CC int 3 - 10001D8C: CC int 3 - 10001D8D: CC int 3 - 10001D8E: CC int 3 - 10001D8F: CC int 3 - 10001D90: 8B 41 08 mov eax,dword ptr [ecx+8] - 10001D93: 3B 41 0C cmp eax,dword ptr [ecx+0Ch] - 10001D96: 74 1C je 10001DB4 - 10001D98: 8A 54 24 04 mov dl,byte ptr [esp+4] - 10001D9C: 88 10 mov byte ptr [eax],dl - 10001D9E: 8B 41 08 mov eax,dword ptr [ecx+8] - 10001DA1: 40 inc eax - 10001DA2: 3B 41 04 cmp eax,dword ptr [ecx+4] - 10001DA5: 72 02 jb 10001DA9 - 10001DA7: 8B 01 mov eax,dword ptr [ecx] - 10001DA9: 89 41 08 mov dword ptr [ecx+8],eax - 10001DAC: B8 01 00 00 00 mov eax,1 - 10001DB1: C2 04 00 ret 4 - 10001DB4: 33 C0 xor eax,eax - 10001DB6: C2 04 00 ret 4 - 10001DB9: CC int 3 - 10001DBA: CC int 3 - 10001DBB: CC int 3 - 10001DBC: CC int 3 - 10001DBD: CC int 3 - 10001DBE: CC int 3 - 10001DBF: CC int 3 - 10001DC0: 8B 41 0C mov eax,dword ptr [ecx+0Ch] - 10001DC3: 8D 50 01 lea edx,[eax+1] - 10001DC6: 56 push esi - 10001DC7: 8B 71 04 mov esi,dword ptr [ecx+4] - 10001DCA: 8B C2 mov eax,edx - 10001DCC: 3B C6 cmp eax,esi - 10001DCE: 72 02 jb 10001DD2 - 10001DD0: 8B 01 mov eax,dword ptr [ecx] - 10001DD2: 39 41 08 cmp dword ptr [ecx+8],eax - 10001DD5: 74 1C je 10001DF3 - 10001DD7: 8B C2 mov eax,edx - 10001DD9: 3B C6 cmp eax,esi - 10001DDB: 72 02 jb 10001DDF - 10001DDD: 8B 01 mov eax,dword ptr [ecx] - 10001DDF: 89 41 0C mov dword ptr [ecx+0Ch],eax - 10001DE2: 8A 00 mov al,byte ptr [eax] - 10001DE4: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10001DE8: 88 01 mov byte ptr [ecx],al - 10001DEA: B8 01 00 00 00 mov eax,1 - 10001DEF: 5E pop esi - 10001DF0: C2 04 00 ret 4 - 10001DF3: 33 C0 xor eax,eax - 10001DF5: 5E pop esi - 10001DF6: C2 04 00 ret 4 - 10001DF9: CC int 3 - 10001DFA: CC int 3 - 10001DFB: CC int 3 - 10001DFC: CC int 3 - 10001DFD: CC int 3 - 10001DFE: CC int 3 - 10001DFF: CC int 3 - 10001E00: 56 push esi - 10001E01: 57 push edi - 10001E02: 8B 7C 24 0C mov edi,dword ptr [esp+0Ch] - 10001E06: 57 push edi - 10001E07: 8B F1 mov esi,ecx - 10001E09: E8 62 83 00 00 call 1000A170 - 10001E0E: 8D 0C 38 lea ecx,[eax+edi] - 10001E11: 83 C4 04 add esp,4 - 10001E14: 89 4E 04 mov dword ptr [esi+4],ecx - 10001E17: 89 06 mov dword ptr [esi],eax - 10001E19: 89 46 08 mov dword ptr [esi+8],eax - 10001E1C: 49 dec ecx - 10001E1D: 5F pop edi - 10001E1E: 89 4E 0C mov dword ptr [esi+0Ch],ecx - 10001E21: 8B C6 mov eax,esi - 10001E23: 5E pop esi - 10001E24: C2 04 00 ret 4 - 10001E27: CC int 3 - 10001E28: CC int 3 - 10001E29: CC int 3 - 10001E2A: CC int 3 - 10001E2B: CC int 3 - 10001E2C: CC int 3 - 10001E2D: CC int 3 - 10001E2E: CC int 3 - 10001E2F: CC int 3 - 10001E30: F6 44 24 04 01 test byte ptr [esp+4],1 - 10001E35: 56 push esi - 10001E36: 8B F1 mov esi,ecx - 10001E38: C7 06 E8 F1 01 10 mov dword ptr [esi],1001F1E8h - 10001E3E: 74 09 je 10001E49 - 10001E40: 56 push esi - 10001E41: E8 B5 82 00 00 call 1000A0FB - 10001E46: 83 C4 04 add esp,4 - 10001E49: 8B C6 mov eax,esi - 10001E4B: 5E pop esi - 10001E4C: C2 04 00 ret 4 - 10001E4F: CC int 3 - 10001E50: 83 EC 78 sub esp,78h - 10001E53: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10001E58: 33 C4 xor eax,esp - 10001E5A: 89 44 24 74 mov dword ptr [esp+74h],eax - 10001E5E: 8A 44 24 7C mov al,byte ptr [esp+7Ch] - 10001E62: 53 push ebx - 10001E63: 56 push esi - 10001E64: 8B F1 mov esi,ecx - 10001E66: 8A C8 mov cl,al - 10001E68: 57 push edi - 10001E69: FE C9 dec cl - 10001E6B: 33 DB xor ebx,ebx - 10001E6D: 33 FF xor edi,edi - 10001E6F: 80 F9 62 cmp cl,62h - 10001E72: 0F 87 4E 01 00 00 ja 10001FC6 - 10001E78: 0F B6 D0 movzx edx,al - 10001E7B: 52 push edx - 10001E7C: 68 58 F2 01 10 push 1001F258h - 10001E81: 8D 44 24 44 lea eax,[esp+44h] - 10001E85: 6A 21 push 21h - 10001E87: 50 push eax - 10001E88: E8 72 83 00 00 call 1000A1FF - 10001E8D: 83 C4 10 add esp,10h - 10001E90: 6A 21 push 21h - 10001E92: 8D 4C 24 40 lea ecx,[esp+40h] - 10001E96: 51 push ecx - 10001E97: E8 F4 5E 00 00 call 10007D90 - 10001E9C: 8D 54 24 3C lea edx,[esp+3Ch] - 10001EA0: 52 push edx - 10001EA1: 68 2C F2 01 10 push 1001F22Ch - 10001EA6: 6A 04 push 4 - 10001EA8: 68 CE 00 00 00 push 0CEh - 10001EAD: 68 18 F2 01 10 push 1001F218h - 10001EB2: E8 C9 66 00 00 call 10008580 - 10001EB7: 83 C4 14 add esp,14h - 10001EBA: 39 5E 08 cmp dword ptr [esi+8],ebx - 10001EBD: 0F 85 ED 00 00 00 jne 10001FB0 - 10001EC3: 53 push ebx - 10001EC4: 68 80 00 00 00 push 80h - 10001EC9: 6A 03 push 3 - 10001ECB: 53 push ebx - 10001ECC: 53 push ebx - 10001ECD: 68 00 00 00 C0 push 0C0000000h - 10001ED2: 8D 44 24 54 lea eax,[esp+54h] - 10001ED6: 50 push eax - 10001ED7: FF 15 10 F0 01 10 call dword ptr ds:[1001F010h] - 10001EDD: 33 C9 xor ecx,ecx - 10001EDF: 83 F8 FF cmp eax,0FFFFFFFFh - 10001EE2: 0F 95 C1 setne cl - 10001EE5: 89 46 04 mov dword ptr [esi+4],eax - 10001EE8: 89 4E 08 mov dword ptr [esi+8],ecx - 10001EEB: 3B CB cmp ecx,ebx - 10001EED: 0F 84 BD 00 00 00 je 10001FB0 - 10001EF3: 8D 4C 24 20 lea ecx,[esp+20h] - 10001EF7: 51 push ecx - 10001EF8: 50 push eax - 10001EF9: FF 15 0C F0 01 10 call dword ptr ds:[1001F00Ch] - 10001EFF: 85 C0 test eax,eax - 10001F01: 0F 84 A0 00 00 00 je 10001FA7 - 10001F07: 8B 46 04 mov eax,dword ptr [esi+4] - 10001F0A: 8D 54 24 0C lea edx,[esp+0Ch] - 10001F0E: 52 push edx - 10001F0F: 50 push eax - 10001F10: FF 15 08 F0 01 10 call dword ptr ds:[1001F008h] - 10001F16: 85 C0 test eax,eax - 10001F18: 0F 84 89 00 00 00 je 10001FA7 - 10001F1E: 8B 4C 24 28 mov ecx,dword ptr [esp+28h] - 10001F22: B8 D0 07 00 00 mov eax,7D0h - 10001F27: 8D 54 24 20 lea edx,[esp+20h] - 10001F2B: 89 44 24 14 mov dword ptr [esp+14h],eax - 10001F2F: 89 44 24 1C mov dword ptr [esp+1Ch],eax - 10001F33: 8B 46 04 mov eax,dword ptr [esi+4] - 10001F36: 81 E1 93 DC FF FF and ecx,0FFFFDC93h - 10001F3C: 52 push edx - 10001F3D: 81 C9 10 10 00 00 or ecx,1010h - 10001F43: 50 push eax - 10001F44: C7 44 24 14 64 00 mov dword ptr [esp+14h],64h - 00 00 - 10001F4C: 89 5C 24 18 mov dword ptr [esp+18h],ebx - 10001F50: 89 5C 24 20 mov dword ptr [esp+20h],ebx - 10001F54: 89 4C 24 30 mov dword ptr [esp+30h],ecx - 10001F58: C7 44 24 2C 80 25 mov dword ptr [esp+2Ch],2580h - 00 00 - 10001F60: C6 44 24 3A 08 mov byte ptr [esp+3Ah],8 - 10001F65: 88 5C 24 3B mov byte ptr [esp+3Bh],bl - 10001F69: 88 5C 24 3C mov byte ptr [esp+3Ch],bl - 10001F6D: FF 15 04 F0 01 10 call dword ptr ds:[1001F004h] - 10001F73: 85 C0 test eax,eax - 10001F75: 74 2E je 10001FA5 - 10001F77: 8B 56 04 mov edx,dword ptr [esi+4] - 10001F7A: 8D 4C 24 0C lea ecx,[esp+0Ch] - 10001F7E: 51 push ecx - 10001F7F: 52 push edx - 10001F80: FF 15 00 F0 01 10 call dword ptr ds:[1001F000h] - 10001F86: 85 C0 test eax,eax - 10001F88: 74 1B je 10001FA5 - 10001F8A: BF 01 00 00 00 mov edi,1 - 10001F8F: 8B C7 mov eax,edi - 10001F91: 5F pop edi - 10001F92: 5E pop esi - 10001F93: 5B pop ebx - 10001F94: 8B 4C 24 74 mov ecx,dword ptr [esp+74h] - 10001F98: 33 CC xor ecx,esp - 10001F9A: E8 FC 80 00 00 call 1000A09B - 10001F9F: 83 C4 78 add esp,78h - 10001FA2: C2 04 00 ret 4 - 10001FA5: 33 FF xor edi,edi - 10001FA7: 8B 06 mov eax,dword ptr [esi] - 10001FA9: 8B 50 08 mov edx,dword ptr [eax+8] - 10001FAC: 8B CE mov ecx,esi - 10001FAE: FF D2 call edx - 10001FB0: 8B C7 mov eax,edi - 10001FB2: 5F pop edi - 10001FB3: 5E pop esi - 10001FB4: 5B pop ebx - 10001FB5: 8B 4C 24 74 mov ecx,dword ptr [esp+74h] - 10001FB9: 33 CC xor ecx,esp - 10001FBB: E8 DB 80 00 00 call 1000A09B - 10001FC0: 83 C4 78 add esp,78h - 10001FC3: C2 04 00 ret 4 - 10001FC6: 8B 8C 24 80 00 00 mov ecx,dword ptr [esp+00000080h] - 00 - 10001FCD: 5F pop edi - 10001FCE: 5E pop esi - 10001FCF: 5B pop ebx - 10001FD0: 33 CC xor ecx,esp - 10001FD2: 33 C0 xor eax,eax - 10001FD4: E8 C2 80 00 00 call 1000A09B - 10001FD9: 83 C4 78 add esp,78h - 10001FDC: C2 04 00 ret 4 - 10001FDF: CC int 3 - 10001FE0: 56 push esi - 10001FE1: 8B F1 mov esi,ecx - 10001FE3: 33 C0 xor eax,eax - 10001FE5: 39 46 08 cmp dword ptr [esi+8],eax - 10001FE8: 74 1C je 10002006 - 10001FEA: 8B 46 04 mov eax,dword ptr [esi+4] - 10001FED: 50 push eax - 10001FEE: FF 15 14 F0 01 10 call dword ptr ds:[1001F014h] - 10001FF4: 85 C0 test eax,eax - 10001FF6: 74 0E je 10002006 - 10001FF8: C7 46 04 FF FF FF mov dword ptr [esi+4],0FFFFFFFFh - FF - 10001FFF: C7 46 08 00 00 00 mov dword ptr [esi+8],0 - 00 - 10002006: 5E pop esi - 10002007: C3 ret - 10002008: CC int 3 - 10002009: CC int 3 - 1000200A: CC int 3 - 1000200B: CC int 3 - 1000200C: CC int 3 - 1000200D: CC int 3 - 1000200E: CC int 3 - 1000200F: CC int 3 - 10002010: 33 C0 xor eax,eax - 10002012: 33 D2 xor edx,edx - 10002014: 39 44 24 04 cmp dword ptr [esp+4],eax - 10002018: 74 03 je 1000201D - 1000201A: 8D 50 05 lea edx,[eax+5] - 1000201D: 39 44 24 08 cmp dword ptr [esp+8],eax - 10002021: 74 03 je 10002026 - 10002023: 83 CA 0A or edx,0Ah - 10002026: 39 41 08 cmp dword ptr [ecx+8],eax - 10002029: 74 11 je 1000203C - 1000202B: 89 54 24 08 mov dword ptr [esp+8],edx - 1000202F: 8B 41 04 mov eax,dword ptr [ecx+4] - 10002032: 89 44 24 04 mov dword ptr [esp+4],eax - 10002036: FF 25 18 F0 01 10 jmp dword ptr ds:[1001F018h] - 1000203C: C2 08 00 ret 8 - 1000203F: CC int 3 - 10002040: 33 C0 xor eax,eax - 10002042: 39 41 08 cmp dword ptr [ecx+8],eax - 10002045: 74 1A je 10002061 - 10002047: 8B 54 24 08 mov edx,dword ptr [esp+8] - 1000204B: 8B 49 04 mov ecx,dword ptr [ecx+4] - 1000204E: 50 push eax - 1000204F: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 10002053: 50 push eax - 10002054: 8B 44 24 0C mov eax,dword ptr [esp+0Ch] - 10002058: 52 push edx - 10002059: 50 push eax - 1000205A: 51 push ecx - 1000205B: FF 15 1C F0 01 10 call dword ptr ds:[1001F01Ch] - 10002061: C2 0C 00 ret 0Ch - 10002064: CC int 3 - 10002065: CC int 3 - 10002066: CC int 3 - 10002067: CC int 3 - 10002068: CC int 3 - 10002069: CC int 3 - 1000206A: CC int 3 - 1000206B: CC int 3 - 1000206C: CC int 3 - 1000206D: CC int 3 - 1000206E: CC int 3 - 1000206F: CC int 3 - 10002070: 33 C0 xor eax,eax - 10002072: 39 41 08 cmp dword ptr [ecx+8],eax - 10002075: 74 1A je 10002091 - 10002077: 8B 54 24 08 mov edx,dword ptr [esp+8] - 1000207B: 8B 49 04 mov ecx,dword ptr [ecx+4] - 1000207E: 50 push eax - 1000207F: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 10002083: 50 push eax - 10002084: 8B 44 24 0C mov eax,dword ptr [esp+0Ch] - 10002088: 52 push edx - 10002089: 50 push eax - 1000208A: 51 push ecx - 1000208B: FF 15 20 F0 01 10 call dword ptr ds:[1001F020h] - 10002091: C2 0C 00 ret 0Ch - 10002094: CC int 3 - 10002095: CC int 3 - 10002096: CC int 3 - 10002097: CC int 3 - 10002098: CC int 3 - 10002099: CC int 3 - 1000209A: CC int 3 - 1000209B: CC int 3 - 1000209C: CC int 3 - 1000209D: CC int 3 - 1000209E: CC int 3 - 1000209F: CC int 3 - 100020A0: 83 EC 1C sub esp,1Ch - 100020A3: 56 push esi - 100020A4: 57 push edi - 100020A5: 8B F1 mov esi,ecx - 100020A7: 33 FF xor edi,edi - 100020A9: 39 7E 08 cmp dword ptr [esi+8],edi - 100020AC: 74 4A je 100020F8 - 100020AE: 8B 4E 04 mov ecx,dword ptr [esi+4] - 100020B1: 8D 44 24 08 lea eax,[esp+8] - 100020B5: 50 push eax - 100020B6: 51 push ecx - 100020B7: FF 15 0C F0 01 10 call dword ptr ds:[1001F00Ch] - 100020BD: 85 C0 test eax,eax - 100020BF: 74 37 je 100020F8 - 100020C1: 8A 44 24 2C mov al,byte ptr [esp+2Ch] - 100020C5: 8B 54 24 28 mov edx,dword ptr [esp+28h] - 100020C9: 8A 4C 24 30 mov cl,byte ptr [esp+30h] - 100020CD: 88 44 24 1A mov byte ptr [esp+1Ah],al - 100020D1: 8D 44 24 08 lea eax,[esp+8] - 100020D5: 88 4C 24 1B mov byte ptr [esp+1Bh],cl - 100020D9: 8B 4E 04 mov ecx,dword ptr [esi+4] - 100020DC: 89 54 24 0C mov dword ptr [esp+0Ch],edx - 100020E0: 8A 54 24 34 mov dl,byte ptr [esp+34h] - 100020E4: 50 push eax - 100020E5: 51 push ecx - 100020E6: 88 54 24 24 mov byte ptr [esp+24h],dl - 100020EA: FF 15 04 F0 01 10 call dword ptr ds:[1001F004h] - 100020F0: 5F pop edi - 100020F1: 5E pop esi - 100020F2: 83 C4 1C add esp,1Ch - 100020F5: C2 10 00 ret 10h - 100020F8: 8B C7 mov eax,edi - 100020FA: 5F pop edi - 100020FB: 5E pop esi - 100020FC: 83 C4 1C add esp,1Ch - 100020FF: C2 10 00 ret 10h - 10002102: CC int 3 - 10002103: CC int 3 - 10002104: CC int 3 - 10002105: CC int 3 - 10002106: CC int 3 - 10002107: CC int 3 - 10002108: CC int 3 - 10002109: CC int 3 - 1000210A: CC int 3 - 1000210B: CC int 3 - 1000210C: CC int 3 - 1000210D: CC int 3 - 1000210E: CC int 3 - 1000210F: CC int 3 - 10002110: 83 EC 14 sub esp,14h - 10002113: 56 push esi - 10002114: 57 push edi - 10002115: 8B F1 mov esi,ecx - 10002117: 33 FF xor edi,edi - 10002119: 39 7E 08 cmp dword ptr [esi+8],edi - 1000211C: 74 52 je 10002170 - 1000211E: 8B 4E 04 mov ecx,dword ptr [esi+4] - 10002121: 8D 44 24 08 lea eax,[esp+8] - 10002125: 50 push eax - 10002126: 51 push ecx - 10002127: FF 15 08 F0 01 10 call dword ptr ds:[1001F008h] - 1000212D: 85 C0 test eax,eax - 1000212F: 74 3F je 10002170 - 10002131: 8B 54 24 20 mov edx,dword ptr [esp+20h] - 10002135: 8B 4C 24 28 mov ecx,dword ptr [esp+28h] - 10002139: 8B 44 24 24 mov eax,dword ptr [esp+24h] - 1000213D: 89 54 24 08 mov dword ptr [esp+8],edx - 10002141: 8B 54 24 2C mov edx,dword ptr [esp+2Ch] - 10002145: 89 4C 24 10 mov dword ptr [esp+10h],ecx - 10002149: 8D 4C 24 08 lea ecx,[esp+8] - 1000214D: 89 54 24 14 mov dword ptr [esp+14h],edx - 10002151: 8B 56 04 mov edx,dword ptr [esi+4] - 10002154: 89 44 24 0C mov dword ptr [esp+0Ch],eax - 10002158: 8B 44 24 30 mov eax,dword ptr [esp+30h] - 1000215C: 51 push ecx - 1000215D: 52 push edx - 1000215E: 89 44 24 20 mov dword ptr [esp+20h],eax - 10002162: FF 15 00 F0 01 10 call dword ptr ds:[1001F000h] - 10002168: 5F pop edi - 10002169: 5E pop esi - 1000216A: 83 C4 14 add esp,14h - 1000216D: C2 14 00 ret 14h - 10002170: 8B C7 mov eax,edi - 10002172: 5F pop edi - 10002173: 5E pop esi - 10002174: 83 C4 14 add esp,14h - 10002177: C2 14 00 ret 14h - 1000217A: CC int 3 - 1000217B: CC int 3 - 1000217C: CC int 3 - 1000217D: CC int 3 - 1000217E: CC int 3 - 1000217F: CC int 3 - 10002180: 33 C0 xor eax,eax - 10002182: 39 41 08 cmp dword ptr [ecx+8],eax - 10002185: 74 14 je 1000219B - 10002187: 8B 44 24 04 mov eax,dword ptr [esp+4] - 1000218B: 8B 54 24 08 mov edx,dword ptr [esp+8] - 1000218F: 50 push eax - 10002190: 8B 41 04 mov eax,dword ptr [ecx+4] - 10002193: 52 push edx - 10002194: 50 push eax - 10002195: FF 15 24 F0 01 10 call dword ptr ds:[1001F024h] - 1000219B: C2 08 00 ret 8 - 1000219E: CC int 3 - 1000219F: CC int 3 - 100021A0: 83 EC 1C sub esp,1Ch - 100021A3: 56 push esi - 100021A4: 57 push edi - 100021A5: 8B F1 mov esi,ecx - 100021A7: 33 FF xor edi,edi - 100021A9: 39 7E 08 cmp dword ptr [esi+8],edi - 100021AC: 74 45 je 100021F3 - 100021AE: 8B 4E 04 mov ecx,dword ptr [esi+4] - 100021B1: 8D 44 24 08 lea eax,[esp+8] - 100021B5: 50 push eax - 100021B6: 51 push ecx - 100021B7: FF 15 0C F0 01 10 call dword ptr ds:[1001F00Ch] - 100021BD: 85 C0 test eax,eax - 100021BF: 74 32 je 100021F3 - 100021C1: 8B 44 24 28 mov eax,dword ptr [esp+28h] - 100021C5: 8B 16 mov edx,dword ptr [esi] - 100021C7: 8B 52 2C mov edx,dword ptr [edx+2Ch] - 100021CA: F7 D8 neg eax - 100021CC: 1B C0 sbb eax,eax - 100021CE: 83 C0 04 add eax,4 - 100021D1: 50 push eax - 100021D2: 8B CE mov ecx,esi - 100021D4: FF D2 call edx - 100021D6: 8B 4C 24 2C mov ecx,dword ptr [esp+2Ch] - 100021DA: 8B 06 mov eax,dword ptr [esi] - 100021DC: 8B 50 2C mov edx,dword ptr [eax+2Ch] - 100021DF: F7 D9 neg ecx - 100021E1: 1B C9 sbb ecx,ecx - 100021E3: 83 C1 06 add ecx,6 - 100021E6: 51 push ecx - 100021E7: 8B CE mov ecx,esi - 100021E9: FF D2 call edx - 100021EB: 5F pop edi - 100021EC: 5E pop esi - 100021ED: 83 C4 1C add esp,1Ch - 100021F0: C2 08 00 ret 8 - 100021F3: 8B C7 mov eax,edi - 100021F5: 5F pop edi - 100021F6: 5E pop esi - 100021F7: 83 C4 1C add esp,1Ch - 100021FA: C2 08 00 ret 8 - 100021FD: CC int 3 - 100021FE: CC int 3 - 100021FF: CC int 3 - 10002200: 33 C0 xor eax,eax - 10002202: 39 41 08 cmp dword ptr [ecx+8],eax - 10002205: 74 14 je 1000221B - 10002207: 8B 44 24 08 mov eax,dword ptr [esp+8] - 1000220B: 8B 54 24 04 mov edx,dword ptr [esp+4] - 1000220F: 50 push eax - 10002210: 8B 41 04 mov eax,dword ptr [ecx+4] - 10002213: 52 push edx - 10002214: 50 push eax - 10002215: FF 15 28 F0 01 10 call dword ptr ds:[1001F028h] - 1000221B: C2 08 00 ret 8 - 1000221E: CC int 3 - 1000221F: CC int 3 - 10002220: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10002224: 8B 49 04 mov ecx,dword ptr [ecx+4] - 10002227: 50 push eax - 10002228: 51 push ecx - 10002229: FF 15 2C F0 01 10 call dword ptr ds:[1001F02Ch] - 1000222F: C2 04 00 ret 4 - 10002232: CC int 3 - 10002233: CC int 3 - 10002234: CC int 3 - 10002235: CC int 3 - 10002236: CC int 3 - 10002237: CC int 3 - 10002238: CC int 3 - 10002239: CC int 3 - 1000223A: CC int 3 - 1000223B: CC int 3 - 1000223C: CC int 3 - 1000223D: CC int 3 - 1000223E: CC int 3 - 1000223F: CC int 3 - 10002240: 6A 50 push 50h - 10002242: E8 29 7F 00 00 call 1000A170 - 10002247: 83 C4 04 add esp,4 - 1000224A: 85 C0 test eax,eax - 1000224C: 74 24 je 10002272 - 1000224E: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10002252: 33 D2 xor edx,edx - 10002254: 85 C0 test eax,eax - 10002256: 0F 95 C2 setne dl - 10002259: C7 00 70 F2 01 10 mov dword ptr [eax],1001F270h - 1000225F: C7 40 04 FF FF FF mov dword ptr [eax+4],0FFFFFFFFh - FF - 10002266: C7 40 08 00 00 00 mov dword ptr [eax+8],0 - 00 - 1000226D: 89 01 mov dword ptr [ecx],eax - 1000226F: 8B C2 mov eax,edx - 10002271: C3 ret - 10002272: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10002276: 33 C0 xor eax,eax - 10002278: 33 D2 xor edx,edx - 1000227A: 85 C0 test eax,eax - 1000227C: 0F 95 C2 setne dl - 1000227F: 89 01 mov dword ptr [ecx],eax - 10002281: 8B C2 mov eax,edx - 10002283: C3 ret - 10002284: CC int 3 - 10002285: CC int 3 - 10002286: CC int 3 - 10002287: CC int 3 - 10002288: CC int 3 - 10002289: CC int 3 - 1000228A: CC int 3 - 1000228B: CC int 3 - 1000228C: CC int 3 - 1000228D: CC int 3 - 1000228E: CC int 3 - 1000228F: CC int 3 - 10002290: 56 push esi - 10002291: 8B F1 mov esi,ecx - 10002293: 83 7E 08 00 cmp dword ptr [esi+8],0 - 10002297: C7 06 70 F2 01 10 mov dword ptr [esi],1001F270h - 1000229D: 74 1C je 100022BB - 1000229F: 8B 46 04 mov eax,dword ptr [esi+4] - 100022A2: 50 push eax - 100022A3: FF 15 14 F0 01 10 call dword ptr ds:[1001F014h] - 100022A9: 85 C0 test eax,eax - 100022AB: 74 0E je 100022BB - 100022AD: C7 46 04 FF FF FF mov dword ptr [esi+4],0FFFFFFFFh - FF - 100022B4: C7 46 08 00 00 00 mov dword ptr [esi+8],0 - 00 - 100022BB: F6 44 24 08 01 test byte ptr [esp+8],1 - 100022C0: C7 06 E8 F1 01 10 mov dword ptr [esi],1001F1E8h - 100022C6: 74 09 je 100022D1 - 100022C8: 56 push esi - 100022C9: E8 2D 7E 00 00 call 1000A0FB - 100022CE: 83 C4 04 add esp,4 - 100022D1: 8B C6 mov eax,esi - 100022D3: 5E pop esi - 100022D4: C2 04 00 ret 4 - 100022D7: CC int 3 - 100022D8: CC int 3 - 100022D9: CC int 3 - 100022DA: CC int 3 - 100022DB: CC int 3 - 100022DC: CC int 3 - 100022DD: CC int 3 - 100022DE: CC int 3 - 100022DF: CC int 3 - 100022E0: 8B 4C 24 0C mov ecx,dword ptr [esp+0Ch] - 100022E4: 8B 54 24 08 mov edx,dword ptr [esp+8] - 100022E8: 66 85 C9 test cx,cx - 100022EB: 76 2D jbe 1000231A - 100022ED: 8B 44 24 04 mov eax,dword ptr [esp+4] - 100022F1: 56 push esi - 100022F2: 0F B6 32 movzx esi,byte ptr [edx] - 100022F5: 33 F0 xor esi,eax - 100022F7: 66 C1 E8 08 shr ax,8 - 100022FB: 81 E6 FF 00 00 00 and esi,0FFh - 10002301: 66 33 04 75 A0 F2 xor ax,word ptr [esi*2+1001F2A0h] - 01 10 - 10002309: 81 C1 FF FF 00 00 add ecx,0FFFFh - 1000230F: 42 inc edx - 10002310: 0F B7 C0 movzx eax,ax - 10002313: 66 85 C9 test cx,cx - 10002316: 77 DA ja 100022F2 - 10002318: 5E pop esi - 10002319: C3 ret - 1000231A: 66 8B 44 24 04 mov ax,word ptr [esp+4] - 1000231F: C3 ret - 10002320: 8B C1 mov eax,ecx - 10002322: C7 00 00 00 00 00 mov dword ptr [eax],0 - 10002328: C3 ret - 10002329: CC int 3 - 1000232A: CC int 3 - 1000232B: CC int 3 - 1000232C: CC int 3 - 1000232D: CC int 3 - 1000232E: CC int 3 - 1000232F: CC int 3 - 10002330: 53 push ebx - 10002331: 57 push edi - 10002332: 8B F9 mov edi,ecx - 10002334: 33 DB xor ebx,ebx - 10002336: 39 1F cmp dword ptr [edi],ebx - 10002338: 0F 85 AC 00 00 00 jne 100023EA - 1000233E: 56 push esi - 1000233F: 8D 77 04 lea esi,[edi+4] - 10002342: 56 push esi - 10002343: E8 F8 FE FF FF call 10002240 - 10002348: 83 C4 04 add esp,4 - 1000234B: 89 07 mov dword ptr [edi],eax - 1000234D: 85 C0 test eax,eax - 1000234F: 0F 84 9C 00 00 00 je 100023F1 - 10002355: 8B 0E mov ecx,dword ptr [esi] - 10002357: 8B 01 mov eax,dword ptr [ecx] - 10002359: 8B 54 24 10 mov edx,dword ptr [esp+10h] - 1000235D: 8B 40 04 mov eax,dword ptr [eax+4] - 10002360: 52 push edx - 10002361: FF D0 call eax - 10002363: 39 1F cmp dword ptr [edi],ebx - 10002365: 0F 84 88 00 00 00 je 100023F3 - 1000236B: 85 C0 test eax,eax - 1000236D: 0F 84 80 00 00 00 je 100023F3 - 10002373: 8B 0E mov ecx,dword ptr [esi] - 10002375: 8B 11 mov edx,dword ptr [ecx] - 10002377: 8B 42 20 mov eax,dword ptr [edx+20h] - 1000237A: 68 00 01 00 00 push 100h - 1000237F: 68 00 01 00 00 push 100h - 10002384: FF D0 call eax - 10002386: 8B 0E mov ecx,dword ptr [esi] - 10002388: 8B 11 mov edx,dword ptr [ecx] - 1000238A: 8B 42 24 mov eax,dword ptr [edx+24h] - 1000238D: 6A 01 push 1 - 1000238F: 6A 01 push 1 - 10002391: FF D0 call eax - 10002393: 8B 3D 30 F0 01 10 mov edi,dword ptr ds:[1001F030h] - 10002399: 6A 3C push 3Ch - 1000239B: FF D7 call edi - 1000239D: 8B 0E mov ecx,dword ptr [esi] - 1000239F: 8B 11 mov edx,dword ptr [ecx] - 100023A1: 8B 42 24 mov eax,dword ptr [edx+24h] - 100023A4: 53 push ebx - 100023A5: 6A 01 push 1 - 100023A7: FF D0 call eax - 100023A9: 6A 0A push 0Ah - 100023AB: FF D7 call edi - 100023AD: 8B 0E mov ecx,dword ptr [esi] - 100023AF: 8B 11 mov edx,dword ptr [ecx] - 100023B1: 8B 42 24 mov eax,dword ptr [edx+24h] - 100023B4: 6A 01 push 1 - 100023B6: 6A 01 push 1 - 100023B8: FF D0 call eax - 100023BA: 8B 0E mov ecx,dword ptr [esi] - 100023BC: 8B 11 mov edx,dword ptr [ecx] - 100023BE: 8B 42 24 mov eax,dword ptr [edx+24h] - 100023C1: 6A 01 push 1 - 100023C3: 6A 01 push 1 - 100023C5: FF D0 call eax - 100023C7: 8B 44 24 20 mov eax,dword ptr [esp+20h] - 100023CB: 8B 0E mov ecx,dword ptr [esi] - 100023CD: 8B 11 mov edx,dword ptr [ecx] - 100023CF: 8B 52 18 mov edx,dword ptr [edx+18h] - 100023D2: 50 push eax - 100023D3: 8B 44 24 20 mov eax,dword ptr [esp+20h] - 100023D7: 50 push eax - 100023D8: 8B 44 24 20 mov eax,dword ptr [esp+20h] - 100023DC: 50 push eax - 100023DD: 8B 44 24 20 mov eax,dword ptr [esp+20h] - 100023E1: 50 push eax - 100023E2: FF D2 call edx - 100023E4: 5E pop esi - 100023E5: 5F pop edi - 100023E6: 5B pop ebx - 100023E7: C2 14 00 ret 14h - 100023EA: 5F pop edi - 100023EB: 8B C3 mov eax,ebx - 100023ED: 5B pop ebx - 100023EE: C2 14 00 ret 14h - 100023F1: 8B C3 mov eax,ebx - 100023F3: 5E pop esi - 100023F4: 5F pop edi - 100023F5: 5B pop ebx - 100023F6: C2 14 00 ret 14h - 100023F9: CC int 3 - 100023FA: CC int 3 - 100023FB: CC int 3 - 100023FC: CC int 3 - 100023FD: CC int 3 - 100023FE: CC int 3 - 100023FF: CC int 3 - 10002400: 56 push esi - 10002401: 8B F1 mov esi,ecx - 10002403: 33 C0 xor eax,eax - 10002405: 39 06 cmp dword ptr [esi],eax - 10002407: 74 25 je 1000242E - 10002409: 8B 4E 04 mov ecx,dword ptr [esi+4] - 1000240C: 8B 01 mov eax,dword ptr [ecx] - 1000240E: 8B 50 08 mov edx,dword ptr [eax+8] - 10002411: 57 push edi - 10002412: FF D2 call edx - 10002414: 8B 4E 04 mov ecx,dword ptr [esi+4] - 10002417: 8B F8 mov edi,eax - 10002419: C7 06 00 00 00 00 mov dword ptr [esi],0 - 1000241F: 85 C9 test ecx,ecx - 10002421: 74 0A je 1000242D - 10002423: 8B 01 mov eax,dword ptr [ecx] - 10002425: 8B 10 mov edx,dword ptr [eax] - 10002427: 6A 01 push 1 - 10002429: FF D2 call edx - 1000242B: 8B C7 mov eax,edi - 1000242D: 5F pop edi - 1000242E: 5E pop esi - 1000242F: C3 ret - 10002430: 33 C0 xor eax,eax - 10002432: 39 01 cmp dword ptr [ecx],eax - 10002434: 74 0A je 10002440 - 10002436: 8B 49 04 mov ecx,dword ptr [ecx+4] - 10002439: 8B 01 mov eax,dword ptr [ecx] - 1000243B: 8B 40 1C mov eax,dword ptr [eax+1Ch] - 1000243E: FF E0 jmp eax - 10002440: C2 14 00 ret 14h - 10002443: CC int 3 - 10002444: CC int 3 - 10002445: CC int 3 - 10002446: CC int 3 - 10002447: CC int 3 - 10002448: CC int 3 - 10002449: CC int 3 - 1000244A: CC int 3 - 1000244B: CC int 3 - 1000244C: CC int 3 - 1000244D: CC int 3 - 1000244E: CC int 3 - 1000244F: CC int 3 - 10002450: 33 C0 xor eax,eax - 10002452: 39 01 cmp dword ptr [ecx],eax - 10002454: 74 0A je 10002460 - 10002456: 8B 49 04 mov ecx,dword ptr [ecx+4] - 10002459: 8B 01 mov eax,dword ptr [ecx] - 1000245B: 8B 40 24 mov eax,dword ptr [eax+24h] - 1000245E: FF E0 jmp eax - 10002460: C2 08 00 ret 8 - 10002463: CC int 3 - 10002464: CC int 3 - 10002465: CC int 3 - 10002466: CC int 3 - 10002467: CC int 3 - 10002468: CC int 3 - 10002469: CC int 3 - 1000246A: CC int 3 - 1000246B: CC int 3 - 1000246C: CC int 3 - 1000246D: CC int 3 - 1000246E: CC int 3 - 1000246F: CC int 3 - 10002470: 33 C0 xor eax,eax - 10002472: 39 01 cmp dword ptr [ecx],eax - 10002474: 74 0A je 10002480 - 10002476: 8B 49 04 mov ecx,dword ptr [ecx+4] - 10002479: 8B 01 mov eax,dword ptr [ecx] - 1000247B: 8B 40 0C mov eax,dword ptr [eax+0Ch] - 1000247E: FF E0 jmp eax - 10002480: C2 08 00 ret 8 - 10002483: CC int 3 - 10002484: CC int 3 - 10002485: CC int 3 - 10002486: CC int 3 - 10002487: CC int 3 - 10002488: CC int 3 - 10002489: CC int 3 - 1000248A: CC int 3 - 1000248B: CC int 3 - 1000248C: CC int 3 - 1000248D: CC int 3 - 1000248E: CC int 3 - 1000248F: CC int 3 - 10002490: 33 C0 xor eax,eax - 10002492: 39 01 cmp dword ptr [ecx],eax - 10002494: 74 25 je 100024BB - 10002496: 8B 54 24 08 mov edx,dword ptr [esp+8] - 1000249A: 56 push esi - 1000249B: 8B 74 24 10 mov esi,dword ptr [esp+10h] - 1000249F: 89 06 mov dword ptr [esi],eax - 100024A1: 8B 49 04 mov ecx,dword ptr [ecx+4] - 100024A4: 8B 01 mov eax,dword ptr [ecx] - 100024A6: 8B 40 10 mov eax,dword ptr [eax+10h] - 100024A9: 56 push esi - 100024AA: 52 push edx - 100024AB: 8B 54 24 10 mov edx,dword ptr [esp+10h] - 100024AF: 52 push edx - 100024B0: FF D0 call eax - 100024B2: 33 C9 xor ecx,ecx - 100024B4: 3B 0E cmp ecx,dword ptr [esi] - 100024B6: 5E pop esi - 100024B7: 1B C0 sbb eax,eax - 100024B9: F7 D8 neg eax - 100024BB: C2 0C 00 ret 0Ch - 100024BE: CC int 3 - 100024BF: CC int 3 - 100024C0: 33 C0 xor eax,eax - 100024C2: 39 01 cmp dword ptr [ecx],eax - 100024C4: 74 25 je 100024EB - 100024C6: 8B 54 24 08 mov edx,dword ptr [esp+8] - 100024CA: 56 push esi - 100024CB: 8B 74 24 10 mov esi,dword ptr [esp+10h] - 100024CF: 89 06 mov dword ptr [esi],eax - 100024D1: 8B 49 04 mov ecx,dword ptr [ecx+4] - 100024D4: 8B 01 mov eax,dword ptr [ecx] - 100024D6: 8B 40 14 mov eax,dword ptr [eax+14h] - 100024D9: 56 push esi - 100024DA: 52 push edx - 100024DB: 8B 54 24 10 mov edx,dword ptr [esp+10h] - 100024DF: 52 push edx - 100024E0: FF D0 call eax - 100024E2: 33 C9 xor ecx,ecx - 100024E4: 3B 0E cmp ecx,dword ptr [esi] - 100024E6: 5E pop esi - 100024E7: 1B C0 sbb eax,eax - 100024E9: F7 D8 neg eax - 100024EB: C2 0C 00 ret 0Ch - 100024EE: CC int 3 - 100024EF: CC int 3 - 100024F0: 33 C0 xor eax,eax - 100024F2: 39 01 cmp dword ptr [ecx],eax - 100024F4: 74 0A je 10002500 - 100024F6: 8B 49 04 mov ecx,dword ptr [ecx+4] - 100024F9: 8B 01 mov eax,dword ptr [ecx] - 100024FB: 8B 40 28 mov eax,dword ptr [eax+28h] - 100024FE: FF E0 jmp eax - 10002500: C2 08 00 ret 8 - 10002503: CC int 3 - 10002504: CC int 3 - 10002505: CC int 3 - 10002506: CC int 3 - 10002507: CC int 3 - 10002508: CC int 3 - 10002509: CC int 3 - 1000250A: CC int 3 - 1000250B: CC int 3 - 1000250C: CC int 3 - 1000250D: CC int 3 - 1000250E: CC int 3 - 1000250F: CC int 3 - 10002510: 56 push esi - 10002511: 8B F1 mov esi,ecx - 10002513: 83 3E 00 cmp dword ptr [esi],0 - 10002516: 74 1F je 10002537 - 10002518: 8B 4E 04 mov ecx,dword ptr [esi+4] - 1000251B: 8B 01 mov eax,dword ptr [ecx] - 1000251D: 8B 50 08 mov edx,dword ptr [eax+8] - 10002520: FF D2 call edx - 10002522: 8B 4E 04 mov ecx,dword ptr [esi+4] - 10002525: C7 06 00 00 00 00 mov dword ptr [esi],0 - 1000252B: 85 C9 test ecx,ecx - 1000252D: 74 08 je 10002537 - 1000252F: 8B 01 mov eax,dword ptr [ecx] - 10002531: 8B 10 mov edx,dword ptr [eax] - 10002533: 6A 01 push 1 - 10002535: FF D2 call edx - 10002537: 5E pop esi - 10002538: C3 ret - 10002539: CC int 3 - 1000253A: CC int 3 - 1000253B: CC int 3 - 1000253C: CC int 3 - 1000253D: CC int 3 - 1000253E: CC int 3 - 1000253F: CC int 3 - 10002540: 83 EC 08 sub esp,8 - 10002543: 56 push esi - 10002544: 8D 44 24 04 lea eax,[esp+4] - 10002548: 50 push eax - 10002549: 33 F6 xor esi,esi - 1000254B: E8 00 71 00 00 call 10009650 - 10002550: 83 C4 04 add esp,4 - 10002553: 85 C0 test eax,eax - 10002555: 74 25 je 1000257C - 10002557: 8B 44 24 04 mov eax,dword ptr [esp+4] - 1000255B: 39 B0 90 00 00 00 cmp dword ptr [eax+00000090h],esi - 10002561: 74 19 je 1000257C - 10002563: 8B 88 94 00 00 00 mov ecx,dword ptr [eax+00000094h] - 10002569: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 1000256D: 8B 11 mov edx,dword ptr [ecx] - 1000256F: 8B 52 04 mov edx,dword ptr [edx+4] - 10002572: 50 push eax - 10002573: 8D 44 24 0C lea eax,[esp+0Ch] - 10002577: 50 push eax - 10002578: FF D2 call edx - 1000257A: 8B F0 mov esi,eax - 1000257C: 8B C6 mov eax,esi - 1000257E: F7 D8 neg eax - 10002580: 1B C0 sbb eax,eax - 10002582: 23 44 24 08 and eax,dword ptr [esp+8] - 10002586: 5E pop esi - 10002587: 83 C4 08 add esp,8 - 1000258A: C2 04 00 ret 4 - 1000258D: CC int 3 - 1000258E: CC int 3 - 1000258F: CC int 3 - 10002590: 51 push ecx - 10002591: 56 push esi - 10002592: 8D 44 24 04 lea eax,[esp+4] - 10002596: 50 push eax - 10002597: 33 F6 xor esi,esi - 10002599: E8 B2 70 00 00 call 10009650 - 1000259E: 83 C4 04 add esp,4 - 100025A1: 85 C0 test eax,eax - 100025A3: 74 23 je 100025C8 - 100025A5: 8B 44 24 04 mov eax,dword ptr [esp+4] - 100025A9: 39 B0 90 00 00 00 cmp dword ptr [eax+00000090h],esi - 100025AF: 74 17 je 100025C8 - 100025B1: 8B 88 94 00 00 00 mov ecx,dword ptr [eax+00000094h] - 100025B7: 8B 11 mov edx,dword ptr [ecx] - 100025B9: 8B 44 24 0C mov eax,dword ptr [esp+0Ch] - 100025BD: 8B 52 0C mov edx,dword ptr [edx+0Ch] - 100025C0: 50 push eax - 100025C1: FF D2 call edx - 100025C3: 5E pop esi - 100025C4: 59 pop ecx - 100025C5: C2 04 00 ret 4 - 100025C8: 66 8B C6 mov ax,si - 100025CB: 5E pop esi - 100025CC: 59 pop ecx - 100025CD: C2 04 00 ret 4 - 100025D0: 51 push ecx - 100025D1: 8B 44 24 08 mov eax,dword ptr [esp+8] - 100025D5: 56 push esi - 100025D6: 8D 4C 24 0C lea ecx,[esp+0Ch] - 100025DA: 51 push ecx - 100025DB: 33 F6 xor esi,esi - 100025DD: 89 44 24 08 mov dword ptr [esp+8],eax - 100025E1: E8 6A 70 00 00 call 10009650 - 100025E6: 83 C4 04 add esp,4 - 100025E9: 85 C0 test eax,eax - 100025EB: 74 23 je 10002610 - 100025ED: 8B 44 24 0C mov eax,dword ptr [esp+0Ch] - 100025F1: 39 B0 90 00 00 00 cmp dword ptr [eax+00000090h],esi - 100025F7: 74 17 je 10002610 - 100025F9: 8B 88 94 00 00 00 mov ecx,dword ptr [eax+00000094h] - 100025FF: 8B 11 mov edx,dword ptr [ecx] - 10002601: 8B 52 08 mov edx,dword ptr [edx+8] - 10002604: 8D 44 24 04 lea eax,[esp+4] - 10002608: 50 push eax - 10002609: FF D2 call edx - 1000260B: 5E pop esi - 1000260C: 59 pop ecx - 1000260D: C2 04 00 ret 4 - 10002610: 66 8B C6 mov ax,si - 10002613: 5E pop esi - 10002614: 59 pop ecx - 10002615: C2 04 00 ret 4 - 10002618: CC int 3 - 10002619: CC int 3 - 1000261A: CC int 3 - 1000261B: CC int 3 - 1000261C: CC int 3 - 1000261D: CC int 3 - 1000261E: CC int 3 - 1000261F: CC int 3 - 10002620: 51 push ecx - 10002621: 56 push esi - 10002622: 8D 44 24 04 lea eax,[esp+4] - 10002626: 57 push edi - 10002627: 50 push eax - 10002628: 33 F6 xor esi,esi - 1000262A: E8 21 70 00 00 call 10009650 - 1000262F: 8B 7C 24 14 mov edi,dword ptr [esp+14h] - 10002633: 83 C4 04 add esp,4 - 10002636: 85 C0 test eax,eax - 10002638: 74 1C je 10002656 - 1000263A: 8B 44 24 08 mov eax,dword ptr [esp+8] - 1000263E: 39 B0 90 00 00 00 cmp dword ptr [eax+00000090h],esi - 10002644: 74 10 je 10002656 - 10002646: 8B 88 94 00 00 00 mov ecx,dword ptr [eax+00000094h] - 1000264C: 8B 11 mov edx,dword ptr [ecx] - 1000264E: 8B 42 0C mov eax,dword ptr [edx+0Ch] - 10002651: 57 push edi - 10002652: FF D0 call eax - 10002654: 8B F0 mov esi,eax - 10002656: 0F B7 C6 movzx eax,si - 10002659: 85 C0 test eax,eax - 1000265B: 74 4C je 100026A9 - 1000265D: 0F B7 4C 24 18 movzx ecx,word ptr [esp+18h] - 10002662: 83 E9 01 sub ecx,1 - 10002665: 74 33 je 1000269A - 10002667: 83 E9 01 sub ecx,1 - 1000266A: 74 19 je 10002685 - 1000266C: 83 E9 02 sub ecx,2 - 1000266F: 75 38 jne 100026A9 - 10002671: 0F B7 4C 24 14 movzx ecx,word ptr [esp+14h] - 10002676: 8B 14 39 mov edx,dword ptr [ecx+edi] - 10002679: 8B 4C 24 1C mov ecx,dword ptr [esp+1Ch] - 1000267D: 5F pop edi - 1000267E: 89 11 mov dword ptr [ecx],edx - 10002680: 5E pop esi - 10002681: 59 pop ecx - 10002682: C2 10 00 ret 10h - 10002685: 0F B7 54 24 14 movzx edx,word ptr [esp+14h] - 1000268A: 0F B7 0C 3A movzx ecx,word ptr [edx+edi] - 1000268E: 8B 54 24 1C mov edx,dword ptr [esp+1Ch] - 10002692: 5F pop edi - 10002693: 89 0A mov dword ptr [edx],ecx - 10002695: 5E pop esi - 10002696: 59 pop ecx - 10002697: C2 10 00 ret 10h - 1000269A: 0F B7 4C 24 14 movzx ecx,word ptr [esp+14h] - 1000269F: 0F B6 14 39 movzx edx,byte ptr [ecx+edi] - 100026A3: 8B 4C 24 1C mov ecx,dword ptr [esp+1Ch] - 100026A7: 89 11 mov dword ptr [ecx],edx - 100026A9: 5F pop edi - 100026AA: 5E pop esi - 100026AB: 59 pop ecx - 100026AC: C2 10 00 ret 10h - 100026AF: CC int 3 - 100026B0: 51 push ecx - 100026B1: 56 push esi - 100026B2: 8D 44 24 04 lea eax,[esp+4] - 100026B6: 57 push edi - 100026B7: 50 push eax - 100026B8: 33 F6 xor esi,esi - 100026BA: E8 91 6F 00 00 call 10009650 - 100026BF: 8B 7C 24 14 mov edi,dword ptr [esp+14h] - 100026C3: 83 C4 04 add esp,4 - 100026C6: 85 C0 test eax,eax - 100026C8: 74 1C je 100026E6 - 100026CA: 8B 44 24 08 mov eax,dword ptr [esp+8] - 100026CE: 39 B0 90 00 00 00 cmp dword ptr [eax+00000090h],esi - 100026D4: 74 10 je 100026E6 - 100026D6: 8B 88 94 00 00 00 mov ecx,dword ptr [eax+00000094h] - 100026DC: 8B 11 mov edx,dword ptr [ecx] - 100026DE: 8B 42 0C mov eax,dword ptr [edx+0Ch] - 100026E1: 57 push edi - 100026E2: FF D0 call eax - 100026E4: 8B F0 mov esi,eax - 100026E6: 0F B7 C6 movzx eax,si - 100026E9: 85 C0 test eax,eax - 100026EB: 74 4C je 10002739 - 100026ED: 0F B7 4C 24 18 movzx ecx,word ptr [esp+18h] - 100026F2: 83 E9 01 sub ecx,1 - 100026F5: 74 34 je 1000272B - 100026F7: 83 E9 01 sub ecx,1 - 100026FA: 74 19 je 10002715 - 100026FC: 83 E9 02 sub ecx,2 - 100026FF: 75 38 jne 10002739 - 10002701: 0F B7 4C 24 14 movzx ecx,word ptr [esp+14h] - 10002706: 8B 54 24 1C mov edx,dword ptr [esp+1Ch] - 1000270A: 8B 12 mov edx,dword ptr [edx] - 1000270C: 89 14 39 mov dword ptr [ecx+edi],edx - 1000270F: 5F pop edi - 10002710: 5E pop esi - 10002711: 59 pop ecx - 10002712: C2 10 00 ret 10h - 10002715: 0F B7 4C 24 14 movzx ecx,word ptr [esp+14h] - 1000271A: 8B 54 24 1C mov edx,dword ptr [esp+1Ch] - 1000271E: 66 8B 12 mov dx,word ptr [edx] - 10002721: 66 89 14 39 mov word ptr [ecx+edi],dx - 10002725: 5F pop edi - 10002726: 5E pop esi - 10002727: 59 pop ecx - 10002728: C2 10 00 ret 10h - 1000272B: 0F B7 4C 24 14 movzx ecx,word ptr [esp+14h] - 10002730: 8B 54 24 1C mov edx,dword ptr [esp+1Ch] - 10002734: 8A 12 mov dl,byte ptr [edx] - 10002736: 88 14 39 mov byte ptr [ecx+edi],dl - 10002739: 5F pop edi - 1000273A: 5E pop esi - 1000273B: 59 pop ecx - 1000273C: C2 10 00 ret 10h - 1000273F: CC int 3 - 10002740: 51 push ecx - 10002741: 8D 04 24 lea eax,[esp] - 10002744: 50 push eax - 10002745: E8 06 6F 00 00 call 10009650 - 1000274A: 83 C4 04 add esp,4 - 1000274D: 85 C0 test eax,eax - 1000274F: 74 30 je 10002781 - 10002751: 8B 0C 24 mov ecx,dword ptr [esp] - 10002754: 0F B6 91 8C 00 00 movzx edx,byte ptr [ecx+0000008Ch] - 00 - 1000275B: 56 push esi - 1000275C: 8B 74 24 0C mov esi,dword ptr [esp+0Ch] - 10002760: 66 89 16 mov word ptr [esi],dx - 10002763: 0F B6 91 8D 00 00 movzx edx,byte ptr [ecx+0000008Dh] - 00 - 1000276A: 8B 74 24 10 mov esi,dword ptr [esp+10h] - 1000276E: 66 89 16 mov word ptr [esi],dx - 10002771: 66 0F B6 89 8E 00 movzx cx,byte ptr [ecx+0000008Eh] - 00 00 - 10002779: 8B 54 24 14 mov edx,dword ptr [esp+14h] - 1000277D: 66 89 0A mov word ptr [edx],cx - 10002780: 5E pop esi - 10002781: 59 pop ecx - 10002782: C2 0C 00 ret 0Ch - 10002785: CC int 3 - 10002786: CC int 3 - 10002787: CC int 3 - 10002788: CC int 3 - 10002789: CC int 3 - 1000278A: CC int 3 - 1000278B: CC int 3 - 1000278C: CC int 3 - 1000278D: CC int 3 - 1000278E: CC int 3 - 1000278F: CC int 3 - 10002790: B8 01 00 00 00 mov eax,1 - 10002795: C2 08 00 ret 8 - 10002798: CC int 3 - 10002799: CC int 3 - 1000279A: CC int 3 - 1000279B: CC int 3 - 1000279C: CC int 3 - 1000279D: CC int 3 - 1000279E: CC int 3 - 1000279F: CC int 3 - 100027A0: 83 EC 08 sub esp,8 - 100027A3: 8D 44 24 04 lea eax,[esp+4] - 100027A7: 56 push esi - 100027A8: 50 push eax - 100027A9: E8 A2 6E 00 00 call 10009650 - 100027AE: 8B F0 mov esi,eax - 100027B0: 83 C4 04 add esp,4 - 100027B3: 85 F6 test esi,esi - 100027B5: 75 17 jne 100027CE - 100027B7: 50 push eax - 100027B8: 6A 08 push 8 - 100027BA: 6A 02 push 2 - 100027BC: E8 AF 6E 00 00 call 10009670 - 100027C1: 83 C4 0C add esp,0Ch - 100027C4: 66 8B C6 mov ax,si - 100027C7: 5E pop esi - 100027C8: 83 C4 08 add esp,8 - 100027CB: C2 14 00 ret 14h - 100027CE: 8D 4C 24 04 lea ecx,[esp+4] - 100027D2: 51 push ecx - 100027D3: E8 D8 6B 00 00 call 100093B0 - 100027D8: 8B F0 mov esi,eax - 100027DA: 83 C4 04 add esp,4 - 100027DD: 85 F6 test esi,esi - 100027DF: 75 17 jne 100027F8 - 100027E1: 50 push eax - 100027E2: 6A 09 push 9 - 100027E4: 6A 02 push 2 - 100027E6: E8 85 6E 00 00 call 10009670 - 100027EB: 83 C4 0C add esp,0Ch - 100027EE: 66 8B C6 mov ax,si - 100027F1: 5E pop esi - 100027F2: 83 C4 08 add esp,8 - 100027F5: C2 14 00 ret 14h - 100027F8: 8B 44 24 20 mov eax,dword ptr [esp+20h] - 100027FC: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10002800: 8B 11 mov edx,dword ptr [ecx] - 10002802: 8B 52 30 mov edx,dword ptr [edx+30h] - 10002805: 57 push edi - 10002806: 8B 7C 24 14 mov edi,dword ptr [esp+14h] - 1000280A: 50 push eax - 1000280B: 8B 44 24 24 mov eax,dword ptr [esp+24h] - 1000280F: 50 push eax - 10002810: 8B 44 24 24 mov eax,dword ptr [esp+24h] - 10002814: 50 push eax - 10002815: 8B 44 24 24 mov eax,dword ptr [esp+24h] - 10002819: 50 push eax - 1000281A: 57 push edi - 1000281B: FF D2 call edx - 1000281D: 8B F0 mov esi,eax - 1000281F: 85 F6 test esi,esi - 10002821: 75 29 jne 1000284C - 10002823: 50 push eax - 10002824: 6A 0F push 0Fh - 10002826: 6A 02 push 2 - 10002828: E8 43 6E 00 00 call 10009670 - 1000282D: 8B 4C 24 14 mov ecx,dword ptr [esp+14h] - 10002831: 83 C4 0C add esp,0Ch - 10002834: 85 C9 test ecx,ecx - 10002836: 74 31 je 10002869 - 10002838: 8B 01 mov eax,dword ptr [ecx] - 1000283A: 8B 50 04 mov edx,dword ptr [eax+4] - 1000283D: 6A 01 push 1 - 1000283F: FF D2 call edx - 10002841: 5F pop edi - 10002842: 66 8B C6 mov ax,si - 10002845: 5E pop esi - 10002846: 83 C4 08 add esp,8 - 10002849: C2 14 00 ret 14h - 1000284C: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10002850: 8B 54 24 0C mov edx,dword ptr [esp+0Ch] - 10002854: 0F B7 C7 movzx eax,di - 10002857: 89 4C 82 FC mov dword ptr [edx+eax*4-4],ecx - 1000285B: 8B 44 24 0C mov eax,dword ptr [esp+0Ch] - 1000285F: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10002863: 89 88 80 00 00 00 mov dword ptr [eax+00000080h],ecx - 10002869: 5F pop edi - 1000286A: 66 8B C6 mov ax,si - 1000286D: 5E pop esi - 1000286E: 83 C4 08 add esp,8 - 10002871: C2 14 00 ret 14h - 10002874: CC int 3 - 10002875: CC int 3 - 10002876: CC int 3 - 10002877: CC int 3 - 10002878: CC int 3 - 10002879: CC int 3 - 1000287A: CC int 3 - 1000287B: CC int 3 - 1000287C: CC int 3 - 1000287D: CC int 3 - 1000287E: CC int 3 - 1000287F: CC int 3 - 10002880: 51 push ecx - 10002881: 8D 04 24 lea eax,[esp] - 10002884: 56 push esi - 10002885: 50 push eax - 10002886: E8 C5 6D 00 00 call 10009650 - 1000288B: 8B F0 mov esi,eax - 1000288D: 83 C4 04 add esp,4 - 10002890: 85 F6 test esi,esi - 10002892: 75 15 jne 100028A9 - 10002894: 50 push eax - 10002895: 6A 08 push 8 - 10002897: 6A 02 push 2 - 10002899: E8 D2 6D 00 00 call 10009670 - 1000289E: 83 C4 0C add esp,0Ch - 100028A1: 66 8B C6 mov ax,si - 100028A4: 5E pop esi - 100028A5: 59 pop ecx - 100028A6: C2 04 00 ret 4 - 100028A9: 0F B7 74 24 0C movzx esi,word ptr [esp+0Ch] - 100028AE: 8B 44 24 04 mov eax,dword ptr [esp+4] - 100028B2: 03 F6 add esi,esi - 100028B4: 03 F6 add esi,esi - 100028B6: 8B 4C 06 FC mov ecx,dword ptr [esi+eax-4] - 100028BA: 33 D2 xor edx,edx - 100028BC: 85 C9 test ecx,ecx - 100028BE: 0F 95 C2 setne dl - 100028C1: 57 push edi - 100028C2: 8B FA mov edi,edx - 100028C4: 85 FF test edi,edi - 100028C6: 75 16 jne 100028DE - 100028C8: 52 push edx - 100028C9: 6A 09 push 9 - 100028CB: 6A 02 push 2 - 100028CD: E8 9E 6D 00 00 call 10009670 - 100028D2: 83 C4 0C add esp,0Ch - 100028D5: 66 8B C7 mov ax,di - 100028D8: 5F pop edi - 100028D9: 5E pop esi - 100028DA: 59 pop ecx - 100028DB: C2 04 00 ret 4 - 100028DE: 39 88 80 00 00 00 cmp dword ptr [eax+00000080h],ecx - 100028E4: 75 1C jne 10002902 - 100028E6: C7 80 80 00 00 00 mov dword ptr [eax+00000080h],0 - 00 00 00 00 - 100028F0: 8B 44 24 08 mov eax,dword ptr [esp+8] - 100028F4: C7 80 88 00 00 00 mov dword ptr [eax+00000088h],0 - 00 00 00 00 - 100028FE: 8B 44 24 08 mov eax,dword ptr [esp+8] - 10002902: 8B 4C 06 FC mov ecx,dword ptr [esi+eax-4] - 10002906: 8B 11 mov edx,dword ptr [ecx] - 10002908: 8B 42 34 mov eax,dword ptr [edx+34h] - 1000290B: FF D0 call eax - 1000290D: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10002911: 8B 4C 0E FC mov ecx,dword ptr [esi+ecx-4] - 10002915: 85 C9 test ecx,ecx - 10002917: 74 09 je 10002922 - 10002919: 8B 11 mov edx,dword ptr [ecx] - 1000291B: 8B 42 04 mov eax,dword ptr [edx+4] - 1000291E: 6A 01 push 1 - 10002920: FF D0 call eax - 10002922: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10002926: 66 8B C7 mov ax,di - 10002929: 5F pop edi - 1000292A: C7 44 0E FC 00 00 mov dword ptr [esi+ecx-4],0 - 00 00 - 10002932: 5E pop esi - 10002933: 59 pop ecx - 10002934: C2 04 00 ret 4 - 10002937: CC int 3 - 10002938: CC int 3 - 10002939: CC int 3 - 1000293A: CC int 3 - 1000293B: CC int 3 - 1000293C: CC int 3 - 1000293D: CC int 3 - 1000293E: CC int 3 - 1000293F: CC int 3 - 10002940: 51 push ecx - 10002941: 8D 04 24 lea eax,[esp] - 10002944: 56 push esi - 10002945: 50 push eax - 10002946: E8 05 6D 00 00 call 10009650 - 1000294B: 8B F0 mov esi,eax - 1000294D: 83 C4 04 add esp,4 - 10002950: 85 F6 test esi,esi - 10002952: 75 13 jne 10002967 - 10002954: 50 push eax - 10002955: 6A 08 push 8 - 10002957: 6A 02 push 2 - 10002959: E8 12 6D 00 00 call 10009670 - 1000295E: 83 C4 0C add esp,0Ch - 10002961: 66 8B C6 mov ax,si - 10002964: 5E pop esi - 10002965: 59 pop ecx - 10002966: C3 ret - 10002967: 8B 44 24 04 mov eax,dword ptr [esp+4] - 1000296B: 33 C9 xor ecx,ecx - 1000296D: 39 88 80 00 00 00 cmp dword ptr [eax+00000080h],ecx - 10002973: 0F 95 C1 setne cl - 10002976: 8B F1 mov esi,ecx - 10002978: 85 F6 test esi,esi - 1000297A: 75 13 jne 1000298F - 1000297C: 51 push ecx - 1000297D: 6A 10 push 10h - 1000297F: 6A 02 push 2 - 10002981: E8 EA 6C 00 00 call 10009670 - 10002986: 83 C4 0C add esp,0Ch - 10002989: 66 8B C6 mov ax,si - 1000298C: 5E pop esi - 1000298D: 59 pop ecx - 1000298E: C3 ret - 1000298F: 8B 88 80 00 00 00 mov ecx,dword ptr [eax+00000080h] - 10002995: 8B 11 mov edx,dword ptr [ecx] - 10002997: 8B 42 44 mov eax,dword ptr [edx+44h] - 1000299A: FF D0 call eax - 1000299C: 5E pop esi - 1000299D: 59 pop ecx - 1000299E: C3 ret - 1000299F: CC int 3 - 100029A0: 51 push ecx - 100029A1: 8D 04 24 lea eax,[esp] - 100029A4: 56 push esi - 100029A5: 50 push eax - 100029A6: E8 A5 6C 00 00 call 10009650 - 100029AB: 8B F0 mov esi,eax - 100029AD: 83 C4 04 add esp,4 - 100029B0: 85 F6 test esi,esi - 100029B2: 75 15 jne 100029C9 - 100029B4: 50 push eax - 100029B5: 6A 08 push 8 - 100029B7: 6A 02 push 2 - 100029B9: E8 B2 6C 00 00 call 10009670 - 100029BE: 83 C4 0C add esp,0Ch - 100029C1: 66 8B C6 mov ax,si - 100029C4: 5E pop esi - 100029C5: 59 pop ecx - 100029C6: C2 10 00 ret 10h - 100029C9: 0F B7 4C 24 0C movzx ecx,word ptr [esp+0Ch] - 100029CE: 8B 54 24 04 mov edx,dword ptr [esp+4] - 100029D2: 8D 44 8A FC lea eax,[edx+ecx*4-4] - 100029D6: 33 C9 xor ecx,ecx - 100029D8: 39 08 cmp dword ptr [eax],ecx - 100029DA: 0F 95 C1 setne cl - 100029DD: 8B F1 mov esi,ecx - 100029DF: 85 F6 test esi,esi - 100029E1: 75 15 jne 100029F8 - 100029E3: 51 push ecx - 100029E4: 6A 09 push 9 - 100029E6: 6A 02 push 2 - 100029E8: E8 83 6C 00 00 call 10009670 - 100029ED: 83 C4 0C add esp,0Ch - 100029F0: 66 8B C6 mov ax,si - 100029F3: 5E pop esi - 100029F4: 59 pop ecx - 100029F5: C2 10 00 ret 10h - 100029F8: 8B 4C 24 18 mov ecx,dword ptr [esp+18h] - 100029FC: 8B 00 mov eax,dword ptr [eax] - 100029FE: 8B 10 mov edx,dword ptr [eax] - 10002A00: 8B 52 38 mov edx,dword ptr [edx+38h] - 10002A03: 51 push ecx - 10002A04: 8B 4C 24 18 mov ecx,dword ptr [esp+18h] - 10002A08: 51 push ecx - 10002A09: 8B 4C 24 18 mov ecx,dword ptr [esp+18h] - 10002A0D: 51 push ecx - 10002A0E: 8B C8 mov ecx,eax - 10002A10: FF D2 call edx - 10002A12: 66 8B C6 mov ax,si - 10002A15: 5E pop esi - 10002A16: 59 pop ecx - 10002A17: C2 10 00 ret 10h - 10002A1A: CC int 3 - 10002A1B: CC int 3 - 10002A1C: CC int 3 - 10002A1D: CC int 3 - 10002A1E: CC int 3 - 10002A1F: CC int 3 - 10002A20: 51 push ecx - 10002A21: 8D 04 24 lea eax,[esp] - 10002A24: 56 push esi - 10002A25: 50 push eax - 10002A26: E8 25 6C 00 00 call 10009650 - 10002A2B: 8B F0 mov esi,eax - 10002A2D: 83 C4 04 add esp,4 - 10002A30: 85 F6 test esi,esi - 10002A32: 75 15 jne 10002A49 - 10002A34: 50 push eax - 10002A35: 6A 08 push 8 - 10002A37: 6A 02 push 2 - 10002A39: E8 32 6C 00 00 call 10009670 - 10002A3E: 83 C4 0C add esp,0Ch - 10002A41: 66 8B C6 mov ax,si - 10002A44: 5E pop esi - 10002A45: 59 pop ecx - 10002A46: C2 08 00 ret 8 - 10002A49: 0F B7 4C 24 0C movzx ecx,word ptr [esp+0Ch] - 10002A4E: 8B 54 24 04 mov edx,dword ptr [esp+4] - 10002A52: 8D 44 8A FC lea eax,[edx+ecx*4-4] - 10002A56: 33 C9 xor ecx,ecx - 10002A58: 39 08 cmp dword ptr [eax],ecx - 10002A5A: 0F 95 C1 setne cl - 10002A5D: 8B F1 mov esi,ecx - 10002A5F: 85 F6 test esi,esi - 10002A61: 75 15 jne 10002A78 - 10002A63: 51 push ecx - 10002A64: 6A 09 push 9 - 10002A66: 6A 02 push 2 - 10002A68: E8 03 6C 00 00 call 10009670 - 10002A6D: 83 C4 0C add esp,0Ch - 10002A70: 66 8B C6 mov ax,si - 10002A73: 5E pop esi - 10002A74: 59 pop ecx - 10002A75: C2 08 00 ret 8 - 10002A78: 8B 00 mov eax,dword ptr [eax] - 10002A7A: 8B 4C 24 10 mov ecx,dword ptr [esp+10h] - 10002A7E: 8B 10 mov edx,dword ptr [eax] - 10002A80: 8B 52 08 mov edx,dword ptr [edx+8] - 10002A83: 51 push ecx - 10002A84: 8B C8 mov ecx,eax - 10002A86: FF D2 call edx - 10002A88: 66 8B C6 mov ax,si - 10002A8B: 5E pop esi - 10002A8C: 59 pop ecx - 10002A8D: C2 08 00 ret 8 - 10002A90: 51 push ecx - 10002A91: 8D 04 24 lea eax,[esp] - 10002A94: 56 push esi - 10002A95: 50 push eax - 10002A96: E8 B5 6B 00 00 call 10009650 - 10002A9B: 8B F0 mov esi,eax - 10002A9D: 83 C4 04 add esp,4 - 10002AA0: 85 F6 test esi,esi - 10002AA2: 75 15 jne 10002AB9 - 10002AA4: 50 push eax - 10002AA5: 6A 08 push 8 - 10002AA7: 6A 02 push 2 - 10002AA9: E8 C2 6B 00 00 call 10009670 - 10002AAE: 83 C4 0C add esp,0Ch - 10002AB1: 66 8B C6 mov ax,si - 10002AB4: 5E pop esi - 10002AB5: 59 pop ecx - 10002AB6: C2 08 00 ret 8 - 10002AB9: 0F B7 4C 24 0C movzx ecx,word ptr [esp+0Ch] - 10002ABE: 8B 54 24 04 mov edx,dword ptr [esp+4] - 10002AC2: 8D 44 8A FC lea eax,[edx+ecx*4-4] - 10002AC6: 33 C9 xor ecx,ecx - 10002AC8: 39 08 cmp dword ptr [eax],ecx - 10002ACA: 0F 95 C1 setne cl - 10002ACD: 8B F1 mov esi,ecx - 10002ACF: 85 F6 test esi,esi - 10002AD1: 75 15 jne 10002AE8 - 10002AD3: 51 push ecx - 10002AD4: 6A 09 push 9 - 10002AD6: 6A 02 push 2 - 10002AD8: E8 93 6B 00 00 call 10009670 - 10002ADD: 83 C4 0C add esp,0Ch - 10002AE0: 66 8B C6 mov ax,si - 10002AE3: 5E pop esi - 10002AE4: 59 pop ecx - 10002AE5: C2 08 00 ret 8 - 10002AE8: 8B 00 mov eax,dword ptr [eax] - 10002AEA: 8B 4C 24 10 mov ecx,dword ptr [esp+10h] - 10002AEE: 8B 10 mov edx,dword ptr [eax] - 10002AF0: 8B 52 0C mov edx,dword ptr [edx+0Ch] - 10002AF3: 51 push ecx - 10002AF4: 8B C8 mov ecx,eax - 10002AF6: FF D2 call edx - 10002AF8: 66 8B C6 mov ax,si - 10002AFB: 5E pop esi - 10002AFC: 59 pop ecx - 10002AFD: C2 08 00 ret 8 - 10002B00: 51 push ecx - 10002B01: 8D 04 24 lea eax,[esp] - 10002B04: 56 push esi - 10002B05: 50 push eax - 10002B06: E8 45 6B 00 00 call 10009650 - 10002B0B: 8B F0 mov esi,eax - 10002B0D: 83 C4 04 add esp,4 - 10002B10: 85 F6 test esi,esi - 10002B12: 75 15 jne 10002B29 - 10002B14: 50 push eax - 10002B15: 6A 08 push 8 - 10002B17: 6A 02 push 2 - 10002B19: E8 52 6B 00 00 call 10009670 - 10002B1E: 83 C4 0C add esp,0Ch - 10002B21: 66 8B C6 mov ax,si - 10002B24: 5E pop esi - 10002B25: 59 pop ecx - 10002B26: C2 08 00 ret 8 - 10002B29: 0F B7 4C 24 0C movzx ecx,word ptr [esp+0Ch] - 10002B2E: 8B 54 24 04 mov edx,dword ptr [esp+4] - 10002B32: 8D 44 8A FC lea eax,[edx+ecx*4-4] - 10002B36: 33 C9 xor ecx,ecx - 10002B38: 39 08 cmp dword ptr [eax],ecx - 10002B3A: 0F 95 C1 setne cl - 10002B3D: 8B F1 mov esi,ecx - 10002B3F: 85 F6 test esi,esi - 10002B41: 75 15 jne 10002B58 - 10002B43: 51 push ecx - 10002B44: 6A 09 push 9 - 10002B46: 6A 02 push 2 - 10002B48: E8 23 6B 00 00 call 10009670 - 10002B4D: 83 C4 0C add esp,0Ch - 10002B50: 66 8B C6 mov ax,si - 10002B53: 5E pop esi - 10002B54: 59 pop ecx - 10002B55: C2 08 00 ret 8 - 10002B58: 8B 00 mov eax,dword ptr [eax] - 10002B5A: 8B 4C 24 10 mov ecx,dword ptr [esp+10h] - 10002B5E: 8B 10 mov edx,dword ptr [eax] - 10002B60: 8B 52 10 mov edx,dword ptr [edx+10h] - 10002B63: 51 push ecx - 10002B64: 8B C8 mov ecx,eax - 10002B66: FF D2 call edx - 10002B68: 66 8B C6 mov ax,si - 10002B6B: 5E pop esi - 10002B6C: 59 pop ecx - 10002B6D: C2 08 00 ret 8 - 10002B70: 51 push ecx - 10002B71: 8D 04 24 lea eax,[esp] - 10002B74: 56 push esi - 10002B75: 50 push eax - 10002B76: E8 D5 6A 00 00 call 10009650 - 10002B7B: 8B F0 mov esi,eax - 10002B7D: 83 C4 04 add esp,4 - 10002B80: 85 F6 test esi,esi - 10002B82: 75 15 jne 10002B99 - 10002B84: 50 push eax - 10002B85: 6A 08 push 8 - 10002B87: 6A 02 push 2 - 10002B89: E8 E2 6A 00 00 call 10009670 - 10002B8E: 83 C4 0C add esp,0Ch - 10002B91: 66 8B C6 mov ax,si - 10002B94: 5E pop esi - 10002B95: 59 pop ecx - 10002B96: C2 04 00 ret 4 - 10002B99: 0F B7 4C 24 0C movzx ecx,word ptr [esp+0Ch] - 10002B9E: 8B 54 24 04 mov edx,dword ptr [esp+4] - 10002BA2: 8D 44 8A FC lea eax,[edx+ecx*4-4] - 10002BA6: 33 C9 xor ecx,ecx - 10002BA8: 39 08 cmp dword ptr [eax],ecx - 10002BAA: 0F 95 C1 setne cl - 10002BAD: 8B F1 mov esi,ecx - 10002BAF: 85 F6 test esi,esi - 10002BB1: 75 15 jne 10002BC8 - 10002BB3: 51 push ecx - 10002BB4: 6A 09 push 9 - 10002BB6: 6A 02 push 2 - 10002BB8: E8 B3 6A 00 00 call 10009670 - 10002BBD: 83 C4 0C add esp,0Ch - 10002BC0: 66 8B C6 mov ax,si - 10002BC3: 5E pop esi - 10002BC4: 59 pop ecx - 10002BC5: C2 04 00 ret 4 - 10002BC8: 8B 00 mov eax,dword ptr [eax] - 10002BCA: 8B 10 mov edx,dword ptr [eax] - 10002BCC: 8B C8 mov ecx,eax - 10002BCE: 8B 42 14 mov eax,dword ptr [edx+14h] - 10002BD1: FF D0 call eax - 10002BD3: 66 8B C6 mov ax,si - 10002BD6: 5E pop esi - 10002BD7: 59 pop ecx - 10002BD8: C2 04 00 ret 4 - 10002BDB: CC int 3 - 10002BDC: CC int 3 - 10002BDD: CC int 3 - 10002BDE: CC int 3 - 10002BDF: CC int 3 - 10002BE0: 51 push ecx - 10002BE1: 8D 04 24 lea eax,[esp] - 10002BE4: 56 push esi - 10002BE5: 50 push eax - 10002BE6: E8 65 6A 00 00 call 10009650 - 10002BEB: 8B F0 mov esi,eax - 10002BED: 83 C4 04 add esp,4 - 10002BF0: 85 F6 test esi,esi - 10002BF2: 75 15 jne 10002C09 - 10002BF4: 50 push eax - 10002BF5: 6A 08 push 8 - 10002BF7: 6A 02 push 2 - 10002BF9: E8 72 6A 00 00 call 10009670 - 10002BFE: 83 C4 0C add esp,0Ch - 10002C01: 66 8B C6 mov ax,si - 10002C04: 5E pop esi - 10002C05: 59 pop ecx - 10002C06: C2 10 00 ret 10h - 10002C09: 0F B7 74 24 0C movzx esi,word ptr [esp+0Ch] - 10002C0E: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10002C12: 03 F6 add esi,esi - 10002C14: 33 C9 xor ecx,ecx - 10002C16: 03 F6 add esi,esi - 10002C18: 39 4C 06 FC cmp dword ptr [esi+eax-4],ecx - 10002C1C: 57 push edi - 10002C1D: 0F 95 C1 setne cl - 10002C20: 8B F9 mov edi,ecx - 10002C22: 85 FF test edi,edi - 10002C24: 75 16 jne 10002C3C - 10002C26: 51 push ecx - 10002C27: 6A 09 push 9 - 10002C29: 6A 02 push 2 - 10002C2B: E8 40 6A 00 00 call 10009670 - 10002C30: 83 C4 0C add esp,0Ch - 10002C33: 66 8B C7 mov ax,di - 10002C36: 5F pop edi - 10002C37: 5E pop esi - 10002C38: 59 pop ecx - 10002C39: C2 10 00 ret 10h - 10002C3C: 33 D2 xor edx,edx - 10002C3E: 39 90 88 00 00 00 cmp dword ptr [eax+00000088h],edx - 10002C44: 0F 94 C2 sete dl - 10002C47: 8B FA mov edi,edx - 10002C49: 85 FF test edi,edi - 10002C4B: 75 16 jne 10002C63 - 10002C4D: 52 push edx - 10002C4E: 6A 0A push 0Ah - 10002C50: 6A 02 push 2 - 10002C52: E8 19 6A 00 00 call 10009670 - 10002C57: 83 C4 0C add esp,0Ch - 10002C5A: 66 8B C7 mov ax,di - 10002C5D: 5F pop edi - 10002C5E: 5E pop esi - 10002C5F: 59 pop ecx - 10002C60: C2 10 00 ret 10h - 10002C63: 8B 88 80 00 00 00 mov ecx,dword ptr [eax+00000080h] - 10002C69: 8B 01 mov eax,dword ptr [ecx] - 10002C6B: 8B 50 20 mov edx,dword ptr [eax+20h] - 10002C6E: 6A 1E push 1Eh - 10002C70: FF D2 call edx - 10002C72: 8B 44 24 08 mov eax,dword ptr [esp+8] - 10002C76: 8B 4C 06 FC mov ecx,dword ptr [esi+eax-4] - 10002C7A: 8B 44 24 1C mov eax,dword ptr [esp+1Ch] - 10002C7E: 8B 11 mov edx,dword ptr [ecx] - 10002C80: 8B 52 18 mov edx,dword ptr [edx+18h] - 10002C83: 50 push eax - 10002C84: 8B 44 24 1C mov eax,dword ptr [esp+1Ch] - 10002C88: 50 push eax - 10002C89: 8B 44 24 1C mov eax,dword ptr [esp+1Ch] - 10002C8D: 50 push eax - 10002C8E: FF D2 call edx - 10002C90: 5F pop edi - 10002C91: 5E pop esi - 10002C92: 59 pop ecx - 10002C93: C2 10 00 ret 10h - 10002C96: CC int 3 - 10002C97: CC int 3 - 10002C98: CC int 3 - 10002C99: CC int 3 - 10002C9A: CC int 3 - 10002C9B: CC int 3 - 10002C9C: CC int 3 - 10002C9D: CC int 3 - 10002C9E: CC int 3 - 10002C9F: CC int 3 - 10002CA0: 51 push ecx - 10002CA1: 8D 04 24 lea eax,[esp] - 10002CA4: 56 push esi - 10002CA5: 50 push eax - 10002CA6: E8 A5 69 00 00 call 10009650 - 10002CAB: 8B F0 mov esi,eax - 10002CAD: 83 C4 04 add esp,4 - 10002CB0: 85 F6 test esi,esi - 10002CB2: 75 15 jne 10002CC9 - 10002CB4: 50 push eax - 10002CB5: 6A 08 push 8 - 10002CB7: 6A 02 push 2 - 10002CB9: E8 B2 69 00 00 call 10009670 - 10002CBE: 83 C4 0C add esp,0Ch - 10002CC1: 66 8B C6 mov ax,si - 10002CC4: 5E pop esi - 10002CC5: 59 pop ecx - 10002CC6: C2 08 00 ret 8 - 10002CC9: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10002CCD: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 10002CD1: 8B 89 80 00 00 00 mov ecx,dword ptr [ecx+00000080h] - 10002CD7: 8B 11 mov edx,dword ptr [ecx] - 10002CD9: 8B 52 1C mov edx,dword ptr [edx+1Ch] - 10002CDC: 50 push eax - 10002CDD: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 10002CE1: 50 push eax - 10002CE2: FF D2 call edx - 10002CE4: 66 8B C6 mov ax,si - 10002CE7: 5E pop esi - 10002CE8: 59 pop ecx - 10002CE9: C2 08 00 ret 8 - 10002CEC: CC int 3 - 10002CED: CC int 3 - 10002CEE: CC int 3 - 10002CEF: CC int 3 - 10002CF0: 51 push ecx - 10002CF1: 8D 04 24 lea eax,[esp] - 10002CF4: 56 push esi - 10002CF5: 50 push eax - 10002CF6: E8 55 69 00 00 call 10009650 - 10002CFB: 8B F0 mov esi,eax - 10002CFD: 83 C4 04 add esp,4 - 10002D00: 85 F6 test esi,esi - 10002D02: 75 15 jne 10002D19 - 10002D04: 50 push eax - 10002D05: 6A 08 push 8 - 10002D07: 6A 02 push 2 - 10002D09: E8 62 69 00 00 call 10009670 - 10002D0E: 83 C4 0C add esp,0Ch - 10002D11: 66 8B C6 mov ax,si - 10002D14: 5E pop esi - 10002D15: 59 pop ecx - 10002D16: C2 04 00 ret 4 - 10002D19: 0F B7 4C 24 0C movzx ecx,word ptr [esp+0Ch] - 10002D1E: 8B 54 24 04 mov edx,dword ptr [esp+4] - 10002D22: 89 8A 84 00 00 00 mov dword ptr [edx+00000084h],ecx - 10002D28: 5E pop esi - 10002D29: 59 pop ecx - 10002D2A: C2 04 00 ret 4 - 10002D2D: CC int 3 - 10002D2E: CC int 3 - 10002D2F: CC int 3 - 10002D30: 51 push ecx - 10002D31: 8D 04 24 lea eax,[esp] - 10002D34: 56 push esi - 10002D35: 50 push eax - 10002D36: E8 15 69 00 00 call 10009650 - 10002D3B: 8B F0 mov esi,eax - 10002D3D: 83 C4 04 add esp,4 - 10002D40: 85 F6 test esi,esi - 10002D42: 75 15 jne 10002D59 - 10002D44: 50 push eax - 10002D45: 6A 08 push 8 - 10002D47: 6A 02 push 2 - 10002D49: E8 22 69 00 00 call 10009670 - 10002D4E: 83 C4 0C add esp,0Ch - 10002D51: 66 8B C6 mov ax,si - 10002D54: 5E pop esi - 10002D55: 59 pop ecx - 10002D56: C2 08 00 ret 8 - 10002D59: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10002D5D: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 10002D61: 8B 89 80 00 00 00 mov ecx,dword ptr [ecx+00000080h] - 10002D67: 8B 11 mov edx,dword ptr [ecx] - 10002D69: 8B 12 mov edx,dword ptr [edx] - 10002D6B: 50 push eax - 10002D6C: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 10002D70: 50 push eax - 10002D71: FF D2 call edx - 10002D73: 5E pop esi - 10002D74: 59 pop ecx - 10002D75: C2 08 00 ret 8 - 10002D78: CC int 3 - 10002D79: CC int 3 - 10002D7A: CC int 3 - 10002D7B: CC int 3 - 10002D7C: CC int 3 - 10002D7D: CC int 3 - 10002D7E: CC int 3 - 10002D7F: CC int 3 - 10002D80: 51 push ecx - 10002D81: 8D 04 24 lea eax,[esp] - 10002D84: 56 push esi - 10002D85: 50 push eax - 10002D86: E8 C5 68 00 00 call 10009650 - 10002D8B: 8B F0 mov esi,eax - 10002D8D: 83 C4 04 add esp,4 - 10002D90: 85 F6 test esi,esi - 10002D92: 75 15 jne 10002DA9 - 10002D94: 50 push eax - 10002D95: 6A 08 push 8 - 10002D97: 6A 02 push 2 - 10002D99: E8 D2 68 00 00 call 10009670 - 10002D9E: 83 C4 0C add esp,0Ch - 10002DA1: 66 8B C6 mov ax,si - 10002DA4: 5E pop esi - 10002DA5: 59 pop ecx - 10002DA6: C2 08 00 ret 8 - 10002DA9: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10002DAD: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 10002DB1: 8B 89 80 00 00 00 mov ecx,dword ptr [ecx+00000080h] - 10002DB7: 8B 11 mov edx,dword ptr [ecx] - 10002DB9: 8B 52 3C mov edx,dword ptr [edx+3Ch] - 10002DBC: 50 push eax - 10002DBD: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 10002DC1: 50 push eax - 10002DC2: FF D2 call edx - 10002DC4: 5E pop esi - 10002DC5: 59 pop ecx - 10002DC6: C2 08 00 ret 8 - 10002DC9: CC int 3 - 10002DCA: CC int 3 - 10002DCB: CC int 3 - 10002DCC: CC int 3 - 10002DCD: CC int 3 - 10002DCE: CC int 3 - 10002DCF: CC int 3 - 10002DD0: 51 push ecx - 10002DD1: 8D 04 24 lea eax,[esp] - 10002DD4: 56 push esi - 10002DD5: 50 push eax - 10002DD6: E8 75 68 00 00 call 10009650 - 10002DDB: 8B F0 mov esi,eax - 10002DDD: 83 C4 04 add esp,4 - 10002DE0: 85 F6 test esi,esi - 10002DE2: 75 15 jne 10002DF9 - 10002DE4: 50 push eax - 10002DE5: 6A 08 push 8 - 10002DE7: 6A 02 push 2 - 10002DE9: E8 82 68 00 00 call 10009670 - 10002DEE: 83 C4 0C add esp,0Ch - 10002DF1: 66 8B C6 mov ax,si - 10002DF4: 5E pop esi - 10002DF5: 59 pop ecx - 10002DF6: C2 08 00 ret 8 - 10002DF9: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10002DFD: 33 D2 xor edx,edx - 10002DFF: 39 91 88 00 00 00 cmp dword ptr [ecx+00000088h],edx - 10002E05: 0F 94 C2 sete dl - 10002E08: 8B F2 mov esi,edx - 10002E0A: 85 F6 test esi,esi - 10002E0C: 75 15 jne 10002E23 - 10002E0E: 52 push edx - 10002E0F: 6A 0A push 0Ah - 10002E11: 6A 02 push 2 - 10002E13: E8 58 68 00 00 call 10009670 - 10002E18: 83 C4 0C add esp,0Ch - 10002E1B: 66 8B C6 mov ax,si - 10002E1E: 5E pop esi - 10002E1F: 59 pop ecx - 10002E20: C2 08 00 ret 8 - 10002E23: 0F B7 44 24 0C movzx eax,word ptr [esp+0Ch] - 10002E28: 33 D2 xor edx,edx - 10002E2A: 39 54 81 FC cmp dword ptr [ecx+eax*4-4],edx - 10002E2E: 8D 44 81 FC lea eax,[ecx+eax*4-4] - 10002E32: 0F 95 C2 setne dl - 10002E35: 8B F2 mov esi,edx - 10002E37: 85 F6 test esi,esi - 10002E39: 75 15 jne 10002E50 - 10002E3B: 52 push edx - 10002E3C: 6A 09 push 9 - 10002E3E: 6A 02 push 2 - 10002E40: E8 2B 68 00 00 call 10009670 - 10002E45: 83 C4 0C add esp,0Ch - 10002E48: 66 8B C6 mov ax,si - 10002E4B: 5E pop esi - 10002E4C: 59 pop ecx - 10002E4D: C2 08 00 ret 8 - 10002E50: 8B 00 mov eax,dword ptr [eax] - 10002E52: 89 81 80 00 00 00 mov dword ptr [ecx+00000080h],eax - 10002E58: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10002E5C: 8B 89 80 00 00 00 mov ecx,dword ptr [ecx+00000080h] - 10002E62: 8B 11 mov edx,dword ptr [ecx] - 10002E64: 8B 42 20 mov eax,dword ptr [edx+20h] - 10002E67: 6A 03 push 3 - 10002E69: FF D0 call eax - 10002E6B: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10002E6F: 8B 89 80 00 00 00 mov ecx,dword ptr [ecx+00000080h] - 10002E75: 8B 11 mov edx,dword ptr [ecx] - 10002E77: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 10002E7B: 8B 52 24 mov edx,dword ptr [edx+24h] - 10002E7E: 50 push eax - 10002E7F: FF D2 call edx - 10002E81: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10002E85: C7 80 88 00 00 00 mov dword ptr [eax+00000088h],1 - 01 00 00 00 - 10002E8F: 66 8B C6 mov ax,si - 10002E92: 5E pop esi - 10002E93: 59 pop ecx - 10002E94: C2 08 00 ret 8 - 10002E97: CC int 3 - 10002E98: CC int 3 - 10002E99: CC int 3 - 10002E9A: CC int 3 - 10002E9B: CC int 3 - 10002E9C: CC int 3 - 10002E9D: CC int 3 - 10002E9E: CC int 3 - 10002E9F: CC int 3 - 10002EA0: 51 push ecx - 10002EA1: 8D 04 24 lea eax,[esp] - 10002EA4: 56 push esi - 10002EA5: 50 push eax - 10002EA6: E8 A5 67 00 00 call 10009650 - 10002EAB: 8B F0 mov esi,eax - 10002EAD: 83 C4 04 add esp,4 - 10002EB0: 85 F6 test esi,esi - 10002EB2: 75 15 jne 10002EC9 - 10002EB4: 50 push eax - 10002EB5: 6A 08 push 8 - 10002EB7: 6A 02 push 2 - 10002EB9: E8 B2 67 00 00 call 10009670 - 10002EBE: 83 C4 0C add esp,0Ch - 10002EC1: 66 8B C6 mov ax,si - 10002EC4: 5E pop esi - 10002EC5: 59 pop ecx - 10002EC6: C2 04 00 ret 4 - 10002EC9: 0F B7 4C 24 0C movzx ecx,word ptr [esp+0Ch] - 10002ECE: 8B 54 24 04 mov edx,dword ptr [esp+4] - 10002ED2: 8D 44 8A FC lea eax,[edx+ecx*4-4] - 10002ED6: 33 C9 xor ecx,ecx - 10002ED8: 39 08 cmp dword ptr [eax],ecx - 10002EDA: 0F 95 C1 setne cl - 10002EDD: 8B F1 mov esi,ecx - 10002EDF: 85 F6 test esi,esi - 10002EE1: 75 15 jne 10002EF8 - 10002EE3: 51 push ecx - 10002EE4: 6A 09 push 9 - 10002EE6: 6A 02 push 2 - 10002EE8: E8 83 67 00 00 call 10009670 - 10002EED: 83 C4 0C add esp,0Ch - 10002EF0: 66 8B C6 mov ax,si - 10002EF3: 5E pop esi - 10002EF4: 59 pop ecx - 10002EF5: C2 04 00 ret 4 - 10002EF8: 8B 00 mov eax,dword ptr [eax] - 10002EFA: 8B 10 mov edx,dword ptr [eax] - 10002EFC: 8B C8 mov ecx,eax - 10002EFE: 8B 42 28 mov eax,dword ptr [edx+28h] - 10002F01: FF D0 call eax - 10002F03: 66 8B C6 mov ax,si - 10002F06: 5E pop esi - 10002F07: 59 pop ecx - 10002F08: C2 04 00 ret 4 - 10002F0B: CC int 3 - 10002F0C: CC int 3 - 10002F0D: CC int 3 - 10002F0E: CC int 3 - 10002F0F: CC int 3 - 10002F10: 51 push ecx - 10002F11: 8D 04 24 lea eax,[esp] - 10002F14: 56 push esi - 10002F15: 50 push eax - 10002F16: E8 35 67 00 00 call 10009650 - 10002F1B: 8B F0 mov esi,eax - 10002F1D: 83 C4 04 add esp,4 - 10002F20: 85 F6 test esi,esi - 10002F22: 75 15 jne 10002F39 - 10002F24: 50 push eax - 10002F25: 6A 08 push 8 - 10002F27: 6A 02 push 2 - 10002F29: E8 42 67 00 00 call 10009670 - 10002F2E: 83 C4 0C add esp,0Ch - 10002F31: 66 8B C6 mov ax,si - 10002F34: 5E pop esi - 10002F35: 59 pop ecx - 10002F36: C2 04 00 ret 4 - 10002F39: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10002F3D: 33 C9 xor ecx,ecx - 10002F3F: 39 88 80 00 00 00 cmp dword ptr [eax+00000080h],ecx - 10002F45: 0F 95 C1 setne cl - 10002F48: 8B F1 mov esi,ecx - 10002F4A: 85 F6 test esi,esi - 10002F4C: 75 15 jne 10002F63 - 10002F4E: 51 push ecx - 10002F4F: 6A 09 push 9 - 10002F51: 6A 02 push 2 - 10002F53: E8 18 67 00 00 call 10009670 - 10002F58: 83 C4 0C add esp,0Ch - 10002F5B: 66 8B C6 mov ax,si - 10002F5E: 5E pop esi - 10002F5F: 59 pop ecx - 10002F60: C2 04 00 ret 4 - 10002F63: 8B 88 80 00 00 00 mov ecx,dword ptr [eax+00000080h] - 10002F69: 8B 11 mov edx,dword ptr [ecx] - 10002F6B: 8B 42 20 mov eax,dword ptr [edx+20h] - 10002F6E: 6A 1E push 1Eh - 10002F70: FF D0 call eax - 10002F72: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10002F76: 8B 89 80 00 00 00 mov ecx,dword ptr [ecx+00000080h] - 10002F7C: 8B 11 mov edx,dword ptr [ecx] - 10002F7E: 8B 44 24 0C mov eax,dword ptr [esp+0Ch] - 10002F82: 8B 52 2C mov edx,dword ptr [edx+2Ch] - 10002F85: 50 push eax - 10002F86: FF D2 call edx - 10002F88: 5E pop esi - 10002F89: 59 pop ecx - 10002F8A: C2 04 00 ret 4 - 10002F8D: CC int 3 - 10002F8E: CC int 3 - 10002F8F: CC int 3 - 10002F90: 51 push ecx - 10002F91: 8D 04 24 lea eax,[esp] - 10002F94: 56 push esi - 10002F95: 50 push eax - 10002F96: E8 B5 66 00 00 call 10009650 - 10002F9B: 8B F0 mov esi,eax - 10002F9D: 83 C4 04 add esp,4 - 10002FA0: 85 F6 test esi,esi - 10002FA2: 75 13 jne 10002FB7 - 10002FA4: 50 push eax - 10002FA5: 6A 08 push 8 - 10002FA7: 6A 02 push 2 - 10002FA9: E8 C2 66 00 00 call 10009670 - 10002FAE: 83 C4 0C add esp,0Ch - 10002FB1: 66 8B C6 mov ax,si - 10002FB4: 5E pop esi - 10002FB5: 59 pop ecx - 10002FB6: C3 ret - 10002FB7: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10002FBB: 33 C9 xor ecx,ecx - 10002FBD: 39 88 80 00 00 00 cmp dword ptr [eax+00000080h],ecx - 10002FC3: 0F 95 C1 setne cl - 10002FC6: 8B F1 mov esi,ecx - 10002FC8: 85 F6 test esi,esi - 10002FCA: 75 13 jne 10002FDF - 10002FCC: 51 push ecx - 10002FCD: 6A 09 push 9 - 10002FCF: 6A 02 push 2 - 10002FD1: E8 9A 66 00 00 call 10009670 - 10002FD6: 83 C4 0C add esp,0Ch - 10002FD9: 66 8B C6 mov ax,si - 10002FDC: 5E pop esi - 10002FDD: 59 pop ecx - 10002FDE: C3 ret - 10002FDF: 8B 88 80 00 00 00 mov ecx,dword ptr [eax+00000080h] - 10002FE5: 8B 11 mov edx,dword ptr [ecx] - 10002FE7: 8B 42 20 mov eax,dword ptr [edx+20h] - 10002FEA: 6A 03 push 3 - 10002FEC: FF D0 call eax - 10002FEE: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10002FF2: 8B 89 80 00 00 00 mov ecx,dword ptr [ecx+00000080h] - 10002FF8: 8B 11 mov edx,dword ptr [ecx] - 10002FFA: 8B 42 40 mov eax,dword ptr [edx+40h] - 10002FFD: FF D0 call eax - 10002FFF: 5E pop esi - 10003000: 59 pop ecx - 10003001: C3 ret - 10003002: CC int 3 - 10003003: CC int 3 - 10003004: CC int 3 - 10003005: CC int 3 - 10003006: CC int 3 - 10003007: CC int 3 - 10003008: CC int 3 - 10003009: CC int 3 - 1000300A: CC int 3 - 1000300B: CC int 3 - 1000300C: CC int 3 - 1000300D: CC int 3 - 1000300E: CC int 3 - 1000300F: CC int 3 - 10003010: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10003014: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10003018: 50 push eax - 10003019: 51 push ecx - 1000301A: E8 81 2C 00 00 call 10005CA0 - 1000301F: 83 C4 08 add esp,8 - 10003022: C3 ret - 10003023: CC int 3 - 10003024: CC int 3 - 10003025: CC int 3 - 10003026: CC int 3 - 10003027: CC int 3 - 10003028: CC int 3 - 10003029: CC int 3 - 1000302A: CC int 3 - 1000302B: CC int 3 - 1000302C: CC int 3 - 1000302D: CC int 3 - 1000302E: CC int 3 - 1000302F: CC int 3 - 10003030: 51 push ecx - 10003031: 8D 04 24 lea eax,[esp] - 10003034: 50 push eax - 10003035: E8 16 66 00 00 call 10009650 - 1000303A: 33 D2 xor edx,edx - 1000303C: 83 C4 04 add esp,4 - 1000303F: 3B C2 cmp eax,edx - 10003041: 74 33 je 10003076 - 10003043: 8B 0C 24 mov ecx,dword ptr [esp] - 10003046: 39 91 80 00 00 00 cmp dword ptr [ecx+00000080h],edx - 1000304C: 74 28 je 10003076 - 1000304E: 88 91 8C 00 00 00 mov byte ptr [ecx+0000008Ch],dl - 10003054: 8B 0C 24 mov ecx,dword ptr [esp] - 10003057: 88 91 8D 00 00 00 mov byte ptr [ecx+0000008Dh],dl - 1000305D: 8B 04 24 mov eax,dword ptr [esp] - 10003060: 88 90 8E 00 00 00 mov byte ptr [eax+0000008Eh],dl - 10003066: 8B 0C 24 mov ecx,dword ptr [esp] - 10003069: 8B 89 80 00 00 00 mov ecx,dword ptr [ecx+00000080h] - 1000306F: 8B 11 mov edx,dword ptr [ecx] - 10003071: 8B 42 4C mov eax,dword ptr [edx+4Ch] - 10003074: FF D0 call eax - 10003076: 59 pop ecx - 10003077: C3 ret - 10003078: CC int 3 - 10003079: CC int 3 - 1000307A: CC int 3 - 1000307B: CC int 3 - 1000307C: CC int 3 - 1000307D: CC int 3 - 1000307E: CC int 3 - 1000307F: CC int 3 - 10003080: 51 push ecx - 10003081: 8D 04 24 lea eax,[esp] - 10003084: 50 push eax - 10003085: E8 C6 65 00 00 call 10009650 - 1000308A: 33 D2 xor edx,edx - 1000308C: 83 C4 04 add esp,4 - 1000308F: 3B C2 cmp eax,edx - 10003091: 74 47 je 100030DA - 10003093: 8B 0C 24 mov ecx,dword ptr [esp] - 10003096: 39 91 80 00 00 00 cmp dword ptr [ecx+00000080h],edx - 1000309C: 74 3C je 100030DA - 1000309E: 88 91 8C 00 00 00 mov byte ptr [ecx+0000008Ch],dl - 100030A4: 8B 0C 24 mov ecx,dword ptr [esp] - 100030A7: 88 91 8D 00 00 00 mov byte ptr [ecx+0000008Dh],dl - 100030AD: 8B 04 24 mov eax,dword ptr [esp] - 100030B0: 88 90 8E 00 00 00 mov byte ptr [eax+0000008Eh],dl - 100030B6: 8B 44 24 14 mov eax,dword ptr [esp+14h] - 100030BA: 8B 0C 24 mov ecx,dword ptr [esp] - 100030BD: 8B 89 80 00 00 00 mov ecx,dword ptr [ecx+00000080h] - 100030C3: 8B 11 mov edx,dword ptr [ecx] - 100030C5: 8B 52 50 mov edx,dword ptr [edx+50h] - 100030C8: 50 push eax - 100030C9: 8B 44 24 14 mov eax,dword ptr [esp+14h] - 100030CD: 50 push eax - 100030CE: 8B 44 24 14 mov eax,dword ptr [esp+14h] - 100030D2: 50 push eax - 100030D3: 8B 44 24 14 mov eax,dword ptr [esp+14h] - 100030D7: 50 push eax - 100030D8: FF D2 call edx - 100030DA: 59 pop ecx - 100030DB: C2 10 00 ret 10h - 100030DE: CC int 3 - 100030DF: CC int 3 - 100030E0: 83 EC 08 sub esp,8 - 100030E3: 6A 00 push 0 - 100030E5: E8 33 71 00 00 call 1000A21D - 100030EA: 8B 4C 24 10 mov ecx,dword ptr [esp+10h] - 100030EE: 89 54 24 08 mov dword ptr [esp+8],edx - 100030F2: 8B 51 04 mov edx,dword ptr [ecx+4] - 100030F5: 89 02 mov dword ptr [edx],eax - 100030F7: 8B 44 24 14 mov eax,dword ptr [esp+14h] - 100030FB: 51 push ecx - 100030FC: 50 push eax - 100030FD: E8 AE 34 00 00 call 100065B0 - 10003102: 83 C4 14 add esp,14h - 10003105: C3 ret - 10003106: CC int 3 - 10003107: CC int 3 - 10003108: CC int 3 - 10003109: CC int 3 - 1000310A: CC int 3 - 1000310B: CC int 3 - 1000310C: CC int 3 - 1000310D: CC int 3 - 1000310E: CC int 3 - 1000310F: CC int 3 - 10003110: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10003114: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10003118: 50 push eax - 10003119: 51 push ecx - 1000311A: E8 41 35 00 00 call 10006660 - 1000311F: 83 C4 08 add esp,8 - 10003122: C3 ret - 10003123: CC int 3 - 10003124: CC int 3 - 10003125: CC int 3 - 10003126: CC int 3 - 10003127: CC int 3 - 10003128: CC int 3 - 10003129: CC int 3 - 1000312A: CC int 3 - 1000312B: CC int 3 - 1000312C: CC int 3 - 1000312D: CC int 3 - 1000312E: CC int 3 - 1000312F: CC int 3 - 10003130: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10003134: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10003138: 50 push eax - 10003139: 51 push ecx - 1000313A: E8 71 35 00 00 call 100066B0 - 1000313F: 83 C4 08 add esp,8 - 10003142: C3 ret - 10003143: CC int 3 - 10003144: CC int 3 - 10003145: CC int 3 - 10003146: CC int 3 - 10003147: CC int 3 - 10003148: CC int 3 - 10003149: CC int 3 - 1000314A: CC int 3 - 1000314B: CC int 3 - 1000314C: CC int 3 - 1000314D: CC int 3 - 1000314E: CC int 3 - 1000314F: CC int 3 - 10003150: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10003154: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10003158: 50 push eax - 10003159: 51 push ecx - 1000315A: E8 E1 2B 00 00 call 10005D40 - 1000315F: 83 C4 08 add esp,8 - 10003162: C3 ret - 10003163: CC int 3 - 10003164: CC int 3 - 10003165: CC int 3 - 10003166: CC int 3 - 10003167: CC int 3 - 10003168: CC int 3 - 10003169: CC int 3 - 1000316A: CC int 3 - 1000316B: CC int 3 - 1000316C: CC int 3 - 1000316D: CC int 3 - 1000316E: CC int 3 - 1000316F: CC int 3 - 10003170: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10003174: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10003178: 50 push eax - 10003179: 51 push ecx - 1000317A: E8 01 33 00 00 call 10006480 - 1000317F: 83 C4 08 add esp,8 - 10003182: C3 ret - 10003183: CC int 3 - 10003184: CC int 3 - 10003185: CC int 3 - 10003186: CC int 3 - 10003187: CC int 3 - 10003188: CC int 3 - 10003189: CC int 3 - 1000318A: CC int 3 - 1000318B: CC int 3 - 1000318C: CC int 3 - 1000318D: CC int 3 - 1000318E: CC int 3 - 1000318F: CC int 3 - 10003190: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10003194: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10003198: 50 push eax - 10003199: 51 push ecx - 1000319A: E8 91 2C 00 00 call 10005E30 - 1000319F: 83 C4 08 add esp,8 - 100031A2: C3 ret - 100031A3: CC int 3 - 100031A4: CC int 3 - 100031A5: CC int 3 - 100031A6: CC int 3 - 100031A7: CC int 3 - 100031A8: CC int 3 - 100031A9: CC int 3 - 100031AA: CC int 3 - 100031AB: CC int 3 - 100031AC: CC int 3 - 100031AD: CC int 3 - 100031AE: CC int 3 - 100031AF: CC int 3 - 100031B0: 8B 44 24 04 mov eax,dword ptr [esp+4] - 100031B4: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 100031B8: 50 push eax - 100031B9: 51 push ecx - 100031BA: E8 31 2D 00 00 call 10005EF0 - 100031BF: 83 C4 08 add esp,8 - 100031C2: C3 ret - 100031C3: CC int 3 - 100031C4: CC int 3 - 100031C5: CC int 3 - 100031C6: CC int 3 - 100031C7: CC int 3 - 100031C8: CC int 3 - 100031C9: CC int 3 - 100031CA: CC int 3 - 100031CB: CC int 3 - 100031CC: CC int 3 - 100031CD: CC int 3 - 100031CE: CC int 3 - 100031CF: CC int 3 - 100031D0: 8B 44 24 04 mov eax,dword ptr [esp+4] - 100031D4: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 100031D8: 50 push eax - 100031D9: 51 push ecx - 100031DA: E8 71 2D 00 00 call 10005F50 - 100031DF: 83 C4 08 add esp,8 - 100031E2: C3 ret - 100031E3: CC int 3 - 100031E4: CC int 3 - 100031E5: CC int 3 - 100031E6: CC int 3 - 100031E7: CC int 3 - 100031E8: CC int 3 - 100031E9: CC int 3 - 100031EA: CC int 3 - 100031EB: CC int 3 - 100031EC: CC int 3 - 100031ED: CC int 3 - 100031EE: CC int 3 - 100031EF: CC int 3 - 100031F0: 8B 44 24 04 mov eax,dword ptr [esp+4] - 100031F4: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 100031F8: 50 push eax - 100031F9: 51 push ecx - 100031FA: E8 11 2E 00 00 call 10006010 - 100031FF: 83 C4 08 add esp,8 - 10003202: C3 ret - 10003203: CC int 3 - 10003204: CC int 3 - 10003205: CC int 3 - 10003206: CC int 3 - 10003207: CC int 3 - 10003208: CC int 3 - 10003209: CC int 3 - 1000320A: CC int 3 - 1000320B: CC int 3 - 1000320C: CC int 3 - 1000320D: CC int 3 - 1000320E: CC int 3 - 1000320F: CC int 3 - 10003210: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10003214: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10003218: 50 push eax - 10003219: 51 push ecx - 1000321A: E8 01 2F 00 00 call 10006120 - 1000321F: 83 C4 08 add esp,8 - 10003222: C3 ret - 10003223: CC int 3 - 10003224: CC int 3 - 10003225: CC int 3 - 10003226: CC int 3 - 10003227: CC int 3 - 10003228: CC int 3 - 10003229: CC int 3 - 1000322A: CC int 3 - 1000322B: CC int 3 - 1000322C: CC int 3 - 1000322D: CC int 3 - 1000322E: CC int 3 - 1000322F: CC int 3 - 10003230: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10003234: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10003238: 50 push eax - 10003239: 51 push ecx - 1000323A: E8 71 2F 00 00 call 100061B0 - 1000323F: 83 C4 08 add esp,8 - 10003242: C3 ret - 10003243: CC int 3 - 10003244: CC int 3 - 10003245: CC int 3 - 10003246: CC int 3 - 10003247: CC int 3 - 10003248: CC int 3 - 10003249: CC int 3 - 1000324A: CC int 3 - 1000324B: CC int 3 - 1000324C: CC int 3 - 1000324D: CC int 3 - 1000324E: CC int 3 - 1000324F: CC int 3 - 10003250: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10003254: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10003258: 50 push eax - 10003259: 51 push ecx - 1000325A: E8 D1 34 00 00 call 10006730 - 1000325F: 83 C4 08 add esp,8 - 10003262: C3 ret - 10003263: CC int 3 - 10003264: CC int 3 - 10003265: CC int 3 - 10003266: CC int 3 - 10003267: CC int 3 - 10003268: CC int 3 - 10003269: CC int 3 - 1000326A: CC int 3 - 1000326B: CC int 3 - 1000326C: CC int 3 - 1000326D: CC int 3 - 1000326E: CC int 3 - 1000326F: CC int 3 - 10003270: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10003274: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10003278: 50 push eax - 10003279: 51 push ecx - 1000327A: E8 61 34 00 00 call 100066E0 - 1000327F: 83 C4 08 add esp,8 - 10003282: C3 ret - 10003283: CC int 3 - 10003284: CC int 3 - 10003285: CC int 3 - 10003286: CC int 3 - 10003287: CC int 3 - 10003288: CC int 3 - 10003289: CC int 3 - 1000328A: CC int 3 - 1000328B: CC int 3 - 1000328C: CC int 3 - 1000328D: CC int 3 - 1000328E: CC int 3 - 1000328F: CC int 3 - 10003290: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10003294: 8B 08 mov ecx,dword ptr [eax] - 10003296: 8B 54 24 08 mov edx,dword ptr [esp+8] - 1000329A: 51 push ecx - 1000329B: 52 push edx - 1000329C: E8 6F 3A 00 00 call 10006D10 - 100032A1: 83 C4 08 add esp,8 - 100032A4: C3 ret - 100032A5: CC int 3 - 100032A6: CC int 3 - 100032A7: CC int 3 - 100032A8: CC int 3 - 100032A9: CC int 3 - 100032AA: CC int 3 - 100032AB: CC int 3 - 100032AC: CC int 3 - 100032AD: CC int 3 - 100032AE: CC int 3 - 100032AF: CC int 3 - 100032B0: 53 push ebx - 100032B1: 8A 5C 24 0C mov bl,byte ptr [esp+0Ch] - 100032B5: 33 C0 xor eax,eax - 100032B7: 84 DB test bl,bl - 100032B9: 74 47 je 10003302 - 100032BB: 8B 54 24 08 mov edx,dword ptr [esp+8] - 100032BF: 0F B7 8A 60 45 00 movzx ecx,word ptr [edx+00004560h] - 00 - 100032C6: F6 04 11 80 test byte ptr [ecx+edx],80h - 100032CA: 74 03 je 100032CF - 100032CC: 83 C8 FF or eax,0FFFFFFFFh - 100032CF: 84 DB test bl,bl - 100032D1: 76 2F jbe 10003302 - 100032D3: 56 push esi - 100032D4: EB 0A jmp 100032E0 - 100032D6: 8D A4 24 00 00 00 lea esp,[esp+00000000h] - 00 - 100032DD: 8D 49 00 lea ecx,[ecx] - 100032E0: 0F B7 8A 60 45 00 movzx ecx,word ptr [edx+00004560h] - 00 - 100032E7: 0F B7 F1 movzx esi,cx - 100032EA: 0F B6 34 16 movzx esi,byte ptr [esi+edx] - 100032EE: C1 E0 08 shl eax,8 - 100032F1: FE CB dec bl - 100032F3: 41 inc ecx - 100032F4: 0B C6 or eax,esi - 100032F6: 66 89 8A 60 45 00 mov word ptr [edx+00004560h],cx - 00 - 100032FD: 84 DB test bl,bl - 100032FF: 77 DF ja 100032E0 - 10003301: 5E pop esi - 10003302: 5B pop ebx - 10003303: C3 ret - 10003304: CC int 3 - 10003305: CC int 3 - 10003306: CC int 3 - 10003307: CC int 3 - 10003308: CC int 3 - 10003309: CC int 3 - 1000330A: CC int 3 - 1000330B: CC int 3 - 1000330C: CC int 3 - 1000330D: CC int 3 - 1000330E: CC int 3 - 1000330F: CC int 3 - 10003310: 53 push ebx - 10003311: 56 push esi - 10003312: 8B 74 24 0C mov esi,dword ptr [esp+0Ch] - 10003316: 0F B7 86 60 45 00 movzx eax,word ptr [esi+00004560h] - 00 - 1000331D: 0F B7 C8 movzx ecx,ax - 10003320: 8A 1C 31 mov bl,byte ptr [ecx+esi] - 10003323: 40 inc eax - 10003324: 8A D3 mov dl,bl - 10003326: C0 EA 06 shr dl,6 - 10003329: 66 89 86 60 45 00 mov word ptr [esi+00004560h],ax - 00 - 10003330: 0F B6 C2 movzx eax,dl - 10003333: 57 push edi - 10003334: 50 push eax - 10003335: 56 push esi - 10003336: E8 75 FF FF FF call 100032B0 - 1000333B: 8B 7C 24 1C mov edi,dword ptr [esp+1Ch] - 1000333F: 8A CB mov cl,bl - 10003341: C0 E9 04 shr cl,4 - 10003344: 80 E1 03 and cl,3 - 10003347: 0F B6 D1 movzx edx,cl - 1000334A: 52 push edx - 1000334B: 56 push esi - 1000334C: 89 07 mov dword ptr [edi],eax - 1000334E: E8 5D FF FF FF call 100032B0 - 10003353: 66 89 47 04 mov word ptr [edi+4],ax - 10003357: 8A C3 mov al,bl - 10003359: C0 E8 02 shr al,2 - 1000335C: 24 03 and al,3 - 1000335E: 0F B6 C8 movzx ecx,al - 10003361: 51 push ecx - 10003362: 56 push esi - 10003363: E8 48 FF FF FF call 100032B0 - 10003368: 80 E3 03 and bl,3 - 1000336B: 0F B6 D3 movzx edx,bl - 1000336E: 52 push edx - 1000336F: 56 push esi - 10003370: 89 47 08 mov dword ptr [edi+8],eax - 10003373: E8 38 FF FF FF call 100032B0 - 10003378: 83 C4 20 add esp,20h - 1000337B: 89 47 0C mov dword ptr [edi+0Ch],eax - 1000337E: 5F pop edi - 1000337F: 5E pop esi - 10003380: 5B pop ebx - 10003381: C3 ret - 10003382: CC int 3 - 10003383: CC int 3 - 10003384: CC int 3 - 10003385: CC int 3 - 10003386: CC int 3 - 10003387: CC int 3 - 10003388: CC int 3 - 10003389: CC int 3 - 1000338A: CC int 3 - 1000338B: CC int 3 - 1000338C: CC int 3 - 1000338D: CC int 3 - 1000338E: CC int 3 - 1000338F: CC int 3 - 10003390: 51 push ecx - 10003391: 56 push esi - 10003392: 8D 44 24 04 lea eax,[esp+4] - 10003396: 50 push eax - 10003397: 33 F6 xor esi,esi - 10003399: E8 B2 62 00 00 call 10009650 - 1000339E: 83 C4 04 add esp,4 - 100033A1: 85 C0 test eax,eax - 100033A3: 74 6C je 10003411 - 100033A5: 66 8B 44 24 0C mov ax,word ptr [esp+0Ch] - 100033AA: 8B 54 24 04 mov edx,dword ptr [esp+4] - 100033AE: 66 3B 82 FA 45 00 cmp ax,word ptr [edx+000045FAh] - 00 - 100033B5: 77 4C ja 10003403 - 100033B7: 0F B7 C8 movzx ecx,ax - 100033BA: 8B C1 mov eax,ecx - 100033BC: C1 E0 04 shl eax,4 - 100033BF: 8B B4 10 74 07 00 mov esi,dword ptr [eax+edx+00000774h] - 00 - 100033C6: 03 C2 add eax,edx - 100033C8: 57 push edi - 100033C9: 8B 7C 24 14 mov edi,dword ptr [esp+14h] - 100033CD: 89 37 mov dword ptr [edi],esi - 100033CF: 66 8B B0 78 07 00 mov si,word ptr [eax+00000778h] - 00 - 100033D6: 8B 7C 24 18 mov edi,dword ptr [esp+18h] - 100033DA: 66 89 37 mov word ptr [edi],si - 100033DD: 8B 80 7C 07 00 00 mov eax,dword ptr [eax+0000077Ch] - 100033E3: 8B 74 24 1C mov esi,dword ptr [esp+1Ch] - 100033E7: 83 C1 78 add ecx,78h - 100033EA: 89 06 mov dword ptr [esi],eax - 100033EC: C1 E1 04 shl ecx,4 - 100033EF: 8B 0C 11 mov ecx,dword ptr [ecx+edx] - 100033F2: 8B 54 24 20 mov edx,dword ptr [esp+20h] - 100033F6: 5F pop edi - 100033F7: 89 0A mov dword ptr [edx],ecx - 100033F9: B8 01 00 00 00 mov eax,1 - 100033FE: 5E pop esi - 100033FF: 59 pop ecx - 10003400: C2 14 00 ret 14h - 10003403: 6A 00 push 0 - 10003405: 6A 1B push 1Bh - 10003407: 6A 02 push 2 - 10003409: E8 62 62 00 00 call 10009670 - 1000340E: 83 C4 0C add esp,0Ch - 10003411: 66 8B C6 mov ax,si - 10003414: 5E pop esi - 10003415: 59 pop ecx - 10003416: C2 14 00 ret 14h - 10003419: CC int 3 - 1000341A: CC int 3 - 1000341B: CC int 3 - 1000341C: CC int 3 - 1000341D: CC int 3 - 1000341E: CC int 3 - 1000341F: CC int 3 - 10003420: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10003424: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10003428: 50 push eax - 10003429: 51 push ecx - 1000342A: E8 91 2E 00 00 call 100062C0 - 1000342F: 83 C4 08 add esp,8 - 10003432: C3 ret - 10003433: CC int 3 - 10003434: CC int 3 - 10003435: CC int 3 - 10003436: CC int 3 - 10003437: CC int 3 - 10003438: CC int 3 - 10003439: CC int 3 - 1000343A: CC int 3 - 1000343B: CC int 3 - 1000343C: CC int 3 - 1000343D: CC int 3 - 1000343E: CC int 3 - 1000343F: CC int 3 - 10003440: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10003444: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10003448: 50 push eax - 10003449: 51 push ecx - 1000344A: E8 51 2F 00 00 call 100063A0 - 1000344F: 83 C4 08 add esp,8 - 10003452: C3 ret - 10003453: CC int 3 - 10003454: CC int 3 - 10003455: CC int 3 - 10003456: CC int 3 - 10003457: CC int 3 - 10003458: CC int 3 - 10003459: CC int 3 - 1000345A: CC int 3 - 1000345B: CC int 3 - 1000345C: CC int 3 - 1000345D: CC int 3 - 1000345E: CC int 3 - 1000345F: CC int 3 - 10003460: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10003464: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10003468: 50 push eax - 10003469: 51 push ecx - 1000346A: E8 81 2F 00 00 call 100063F0 - 1000346F: 83 C4 08 add esp,8 - 10003472: C3 ret - 10003473: CC int 3 - 10003474: CC int 3 - 10003475: CC int 3 - 10003476: CC int 3 - 10003477: CC int 3 - 10003478: CC int 3 - 10003479: CC int 3 - 1000347A: CC int 3 - 1000347B: CC int 3 - 1000347C: CC int 3 - 1000347D: CC int 3 - 1000347E: CC int 3 - 1000347F: CC int 3 - 10003480: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10003484: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10003488: 50 push eax - 10003489: 51 push ecx - 1000348A: E8 91 36 00 00 call 10006B20 - 1000348F: 83 C4 08 add esp,8 - 10003492: C3 ret - 10003493: CC int 3 - 10003494: CC int 3 - 10003495: CC int 3 - 10003496: CC int 3 - 10003497: CC int 3 - 10003498: CC int 3 - 10003499: CC int 3 - 1000349A: CC int 3 - 1000349B: CC int 3 - 1000349C: CC int 3 - 1000349D: CC int 3 - 1000349E: CC int 3 - 1000349F: CC int 3 - 100034A0: 8B 44 24 04 mov eax,dword ptr [esp+4] - 100034A4: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 100034A8: 50 push eax - 100034A9: 51 push ecx - 100034AA: E8 81 37 00 00 call 10006C30 - 100034AF: 83 C4 08 add esp,8 - 100034B2: C3 ret - 100034B3: CC int 3 - 100034B4: CC int 3 - 100034B5: CC int 3 - 100034B6: CC int 3 - 100034B7: CC int 3 - 100034B8: CC int 3 - 100034B9: CC int 3 - 100034BA: CC int 3 - 100034BB: CC int 3 - 100034BC: CC int 3 - 100034BD: CC int 3 - 100034BE: CC int 3 - 100034BF: CC int 3 - 100034C0: 8B 44 24 04 mov eax,dword ptr [esp+4] - 100034C4: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 100034C8: 50 push eax - 100034C9: 51 push ecx - 100034CA: E8 B1 33 00 00 call 10006880 - 100034CF: 83 C4 08 add esp,8 - 100034D2: C3 ret - 100034D3: CC int 3 - 100034D4: CC int 3 - 100034D5: CC int 3 - 100034D6: CC int 3 - 100034D7: CC int 3 - 100034D8: CC int 3 - 100034D9: CC int 3 - 100034DA: CC int 3 - 100034DB: CC int 3 - 100034DC: CC int 3 - 100034DD: CC int 3 - 100034DE: CC int 3 - 100034DF: CC int 3 - 100034E0: 8B 44 24 04 mov eax,dword ptr [esp+4] - 100034E4: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 100034E8: 50 push eax - 100034E9: 51 push ecx - 100034EA: E8 31 34 00 00 call 10006920 - 100034EF: 83 C4 08 add esp,8 - 100034F2: C3 ret - 100034F3: CC int 3 - 100034F4: CC int 3 - 100034F5: CC int 3 - 100034F6: CC int 3 - 100034F7: CC int 3 - 100034F8: CC int 3 - 100034F9: CC int 3 - 100034FA: CC int 3 - 100034FB: CC int 3 - 100034FC: CC int 3 - 100034FD: CC int 3 - 100034FE: CC int 3 - 100034FF: CC int 3 - 10003500: 8B 44 24 08 mov eax,dword ptr [esp+8] - 10003504: 66 0F B6 08 movzx cx,byte ptr [eax] - 10003508: 8B 54 24 04 mov edx,dword ptr [esp+4] - 1000350C: 8B 02 mov eax,dword ptr [edx] - 1000350E: 66 89 08 mov word ptr [eax],cx - 10003511: C3 ret - 10003512: CC int 3 - 10003513: CC int 3 - 10003514: CC int 3 - 10003515: CC int 3 - 10003516: CC int 3 - 10003517: CC int 3 - 10003518: CC int 3 - 10003519: CC int 3 - 1000351A: CC int 3 - 1000351B: CC int 3 - 1000351C: CC int 3 - 1000351D: CC int 3 - 1000351E: CC int 3 - 1000351F: CC int 3 - 10003520: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10003524: 0F B6 48 04 movzx ecx,byte ptr [eax+4] - 10003528: 8B 54 24 08 mov edx,dword ptr [esp+8] - 1000352C: 8B 00 mov eax,dword ptr [eax] - 1000352E: 51 push ecx - 1000352F: 52 push edx - 10003530: 50 push eax - 10003531: E8 1A 64 00 00 call 10009950 - 10003536: 83 C4 0C add esp,0Ch - 10003539: C3 ret - 1000353A: CC int 3 - 1000353B: CC int 3 - 1000353C: CC int 3 - 1000353D: CC int 3 - 1000353E: CC int 3 - 1000353F: CC int 3 - 10003540: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10003544: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10003548: 50 push eax - 10003549: 51 push ecx - 1000354A: E8 91 33 00 00 call 100068E0 - 1000354F: 83 C4 08 add esp,8 - 10003552: C3 ret - 10003553: CC int 3 - 10003554: CC int 3 - 10003555: CC int 3 - 10003556: CC int 3 - 10003557: CC int 3 - 10003558: CC int 3 - 10003559: CC int 3 - 1000355A: CC int 3 - 1000355B: CC int 3 - 1000355C: CC int 3 - 1000355D: CC int 3 - 1000355E: CC int 3 - 1000355F: CC int 3 - 10003560: 33 C0 xor eax,eax - 10003562: C2 0C 00 ret 0Ch - 10003565: CC int 3 - 10003566: CC int 3 - 10003567: CC int 3 - 10003568: CC int 3 - 10003569: CC int 3 - 1000356A: CC int 3 - 1000356B: CC int 3 - 1000356C: CC int 3 - 1000356D: CC int 3 - 1000356E: CC int 3 - 1000356F: CC int 3 - 10003570: 33 C0 xor eax,eax - 10003572: C2 08 00 ret 8 - 10003575: CC int 3 - 10003576: CC int 3 - 10003577: CC int 3 - 10003578: CC int 3 - 10003579: CC int 3 - 1000357A: CC int 3 - 1000357B: CC int 3 - 1000357C: CC int 3 - 1000357D: CC int 3 - 1000357E: CC int 3 - 1000357F: CC int 3 - 10003580: 33 C0 xor eax,eax - 10003582: C3 ret - 10003583: CC int 3 - 10003584: CC int 3 - 10003585: CC int 3 - 10003586: CC int 3 - 10003587: CC int 3 - 10003588: CC int 3 - 10003589: CC int 3 - 1000358A: CC int 3 - 1000358B: CC int 3 - 1000358C: CC int 3 - 1000358D: CC int 3 - 1000358E: CC int 3 - 1000358F: CC int 3 - 10003590: 33 C0 xor eax,eax - 10003592: C2 10 00 ret 10h - 10003595: CC int 3 - 10003596: CC int 3 - 10003597: CC int 3 - 10003598: CC int 3 - 10003599: CC int 3 - 1000359A: CC int 3 - 1000359B: CC int 3 - 1000359C: CC int 3 - 1000359D: CC int 3 - 1000359E: CC int 3 - 1000359F: CC int 3 - 100035A0: 8B 44 24 04 mov eax,dword ptr [esp+4] - 100035A4: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 100035A8: 50 push eax - 100035A9: 51 push ecx - 100035AA: E8 D1 36 00 00 call 10006C80 - 100035AF: 83 C4 08 add esp,8 - 100035B2: C3 ret - 100035B3: CC int 3 - 100035B4: CC int 3 - 100035B5: CC int 3 - 100035B6: CC int 3 - 100035B7: CC int 3 - 100035B8: CC int 3 - 100035B9: CC int 3 - 100035BA: CC int 3 - 100035BB: CC int 3 - 100035BC: CC int 3 - 100035BD: CC int 3 - 100035BE: CC int 3 - 100035BF: CC int 3 - 100035C0: 8B 44 24 04 mov eax,dword ptr [esp+4] - 100035C4: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 100035C8: 50 push eax - 100035C9: 51 push ecx - 100035CA: E8 11 37 00 00 call 10006CE0 - 100035CF: 83 C4 08 add esp,8 - 100035D2: C3 ret - 100035D3: CC int 3 - 100035D4: CC int 3 - 100035D5: CC int 3 - 100035D6: CC int 3 - 100035D7: CC int 3 - 100035D8: CC int 3 - 100035D9: CC int 3 - 100035DA: CC int 3 - 100035DB: CC int 3 - 100035DC: CC int 3 - 100035DD: CC int 3 - 100035DE: CC int 3 - 100035DF: CC int 3 - 100035E0: 51 push ecx - 100035E1: 8D 04 24 lea eax,[esp] - 100035E4: 50 push eax - 100035E5: E8 66 60 00 00 call 10009650 - 100035EA: 83 C4 04 add esp,4 - 100035ED: 85 C0 test eax,eax - 100035EF: 74 77 je 10003668 - 100035F1: 8B 0C 24 mov ecx,dword ptr [esp] - 100035F4: 83 B9 80 00 00 00 cmp dword ptr [ecx+00000080h],0 - 00 - 100035FB: 74 6B je 10003668 - 100035FD: C6 81 8C 00 00 00 mov byte ptr [ecx+0000008Ch],0 - 00 - 10003604: 8B 0C 24 mov ecx,dword ptr [esp] - 10003607: C6 81 8D 00 00 00 mov byte ptr [ecx+0000008Dh],0 - 00 - 1000360E: 8B 14 24 mov edx,dword ptr [esp] - 10003611: C6 82 8E 00 00 00 mov byte ptr [edx+0000008Eh],0 - 00 - 10003618: 8B 04 24 mov eax,dword ptr [esp] - 1000361B: 8B 88 80 00 00 00 mov ecx,dword ptr [eax+00000080h] - 10003621: 8B 44 24 24 mov eax,dword ptr [esp+24h] - 10003625: 8B 11 mov edx,dword ptr [ecx] - 10003627: 50 push eax - 10003628: 8B 44 24 24 mov eax,dword ptr [esp+24h] - 1000362C: 8B 52 48 mov edx,dword ptr [edx+48h] - 1000362F: 50 push eax - 10003630: 8B 44 24 24 mov eax,dword ptr [esp+24h] - 10003634: 50 push eax - 10003635: 8B 44 24 24 mov eax,dword ptr [esp+24h] - 10003639: 50 push eax - 1000363A: 8B 44 24 24 mov eax,dword ptr [esp+24h] - 1000363E: 50 push eax - 1000363F: 8B 44 24 24 mov eax,dword ptr [esp+24h] - 10003643: 50 push eax - 10003644: 8B 44 24 24 mov eax,dword ptr [esp+24h] - 10003648: 50 push eax - 10003649: 8B 44 24 24 mov eax,dword ptr [esp+24h] - 1000364D: 50 push eax - 1000364E: FF D2 call edx - 10003650: 85 C0 test eax,eax - 10003652: 74 14 je 10003668 - 10003654: 8B 0C 24 mov ecx,dword ptr [esp] - 10003657: 83 B9 84 00 00 00 cmp dword ptr [ecx+00000084h],0 - 00 - 1000365E: 74 08 je 10003668 - 10003660: E8 2B F9 FF FF call 10002F90 - 10003665: 0F B7 C0 movzx eax,ax - 10003668: 59 pop ecx - 10003669: C3 ret - 1000366A: CC int 3 - 1000366B: CC int 3 - 1000366C: CC int 3 - 1000366D: CC int 3 - 1000366E: CC int 3 - 1000366F: CC int 3 - 10003670: 51 push ecx - 10003671: 8D 04 24 lea eax,[esp] - 10003674: 56 push esi - 10003675: 50 push eax - 10003676: E8 D5 5F 00 00 call 10009650 - 1000367B: 8B F0 mov esi,eax - 1000367D: 83 C4 04 add esp,4 - 10003680: 85 F6 test esi,esi - 10003682: 75 13 jne 10003697 - 10003684: 50 push eax - 10003685: 6A 08 push 8 - 10003687: 6A 02 push 2 - 10003689: E8 E2 5F 00 00 call 10009670 - 1000368E: 83 C4 0C add esp,0Ch - 10003691: 66 8B C6 mov ax,si - 10003694: 5E pop esi - 10003695: 59 pop ecx - 10003696: C3 ret - 10003697: 8B 54 24 04 mov edx,dword ptr [esp+4] - 1000369B: 33 C9 xor ecx,ecx - 1000369D: 39 8A 80 00 00 00 cmp dword ptr [edx+00000080h],ecx - 100036A3: 0F 95 C1 setne cl - 100036A6: 8B F1 mov esi,ecx - 100036A8: 85 F6 test esi,esi - 100036AA: 75 13 jne 100036BF - 100036AC: 51 push ecx - 100036AD: 6A 09 push 9 - 100036AF: 6A 02 push 2 - 100036B1: E8 BA 5F 00 00 call 10009670 - 100036B6: 83 C4 0C add esp,0Ch - 100036B9: 66 8B C6 mov ax,si - 100036BC: 5E pop esi - 100036BD: 59 pop ecx - 100036BE: C3 ret - 100036BF: E8 CC F8 FF FF call 10002F90 - 100036C4: 8B 44 24 04 mov eax,dword ptr [esp+4] - 100036C8: 8B 88 80 00 00 00 mov ecx,dword ptr [eax+00000080h] - 100036CE: 8B 11 mov edx,dword ptr [ecx] - 100036D0: 8B 42 24 mov eax,dword ptr [edx+24h] - 100036D3: 6A 00 push 0 - 100036D5: FF D0 call eax - 100036D7: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 100036DB: 66 8B C6 mov ax,si - 100036DE: C7 81 88 00 00 00 mov dword ptr [ecx+00000088h],0 - 00 00 00 00 - 100036E8: 5E pop esi - 100036E9: 59 pop ecx - 100036EA: C3 ret - 100036EB: CC int 3 - 100036EC: CC int 3 - 100036ED: CC int 3 - 100036EE: CC int 3 - 100036EF: CC int 3 - 100036F0: 83 EC 1C sub esp,1Ch - 100036F3: 8B 4C 24 24 mov ecx,dword ptr [esp+24h] - 100036F7: 8B 44 24 20 mov eax,dword ptr [esp+20h] - 100036FB: 8B 54 24 28 mov edx,dword ptr [esp+28h] - 100036FF: 6A 01 push 1 - 10003701: 68 10 30 00 10 push 10003010h - 10003706: 89 4C 24 0C mov dword ptr [esp+0Ch],ecx - 1000370A: 8B 4C 24 38 mov ecx,dword ptr [esp+38h] - 1000370E: 6A 1C push 1Ch - 10003710: 89 4C 24 1C mov dword ptr [esp+1Ch],ecx - 10003714: 8D 4C 24 0C lea ecx,[esp+0Ch] - 10003718: 51 push ecx - 10003719: 6A 0D push 0Dh - 1000371B: 89 44 24 14 mov dword ptr [esp+14h],eax - 1000371F: 8B 44 24 40 mov eax,dword ptr [esp+40h] - 10003723: 6A 00 push 0 - 10003725: 89 54 24 20 mov dword ptr [esp+20h],edx - 10003729: 8B 54 24 4C mov edx,dword ptr [esp+4Ch] - 1000372D: 89 44 24 24 mov dword ptr [esp+24h],eax - 10003731: 8B 44 24 50 mov eax,dword ptr [esp+50h] - 10003735: 6A 00 push 0 - 10003737: 68 FF 00 00 00 push 0FFh - 1000373C: 89 54 24 34 mov dword ptr [esp+34h],edx - 10003740: 89 44 24 38 mov dword ptr [esp+38h],eax - 10003744: E8 97 FE FF FF call 100035E0 - 10003749: 83 C4 3C add esp,3Ch - 1000374C: C2 1C 00 ret 1Ch - 1000374F: CC int 3 - 10003750: 6A 01 push 1 - 10003752: 6A 00 push 0 - 10003754: 6A 00 push 0 - 10003756: 6A 00 push 0 - 10003758: 6A 00 push 0 - 1000375A: 6A 00 push 0 - 1000375C: 6A 00 push 0 - 1000375E: 6A 35 push 35h - 10003760: E8 7B FE FF FF call 100035E0 - 10003765: 83 C4 20 add esp,20h - 10003768: C3 ret - 10003769: CC int 3 - 1000376A: CC int 3 - 1000376B: CC int 3 - 1000376C: CC int 3 - 1000376D: CC int 3 - 1000376E: CC int 3 - 1000376F: CC int 3 - 10003770: 83 EC 24 sub esp,24h - 10003773: 8B 44 24 28 mov eax,dword ptr [esp+28h] - 10003777: 8B 4C 24 2C mov ecx,dword ptr [esp+2Ch] - 1000377B: 8B 54 24 30 mov edx,dword ptr [esp+30h] - 1000377F: 89 04 24 mov dword ptr [esp],eax - 10003782: 8B 44 24 34 mov eax,dword ptr [esp+34h] - 10003786: 6A 01 push 1 - 10003788: 68 E0 30 00 10 push 100030E0h - 1000378D: 89 44 24 14 mov dword ptr [esp+14h],eax - 10003791: 8B 44 24 48 mov eax,dword ptr [esp+48h] - 10003795: 6A 24 push 24h - 10003797: 89 44 24 24 mov dword ptr [esp+24h],eax - 1000379B: 8D 44 24 0C lea eax,[esp+0Ch] - 1000379F: 50 push eax - 100037A0: 6A 10 push 10h - 100037A2: 89 4C 24 18 mov dword ptr [esp+18h],ecx - 100037A6: 8B 4C 24 4C mov ecx,dword ptr [esp+4Ch] - 100037AA: 89 54 24 1C mov dword ptr [esp+1Ch],edx - 100037AE: 8B 54 24 50 mov edx,dword ptr [esp+50h] - 100037B2: 6A 00 push 0 - 100037B4: 89 4C 24 28 mov dword ptr [esp+28h],ecx - 100037B8: 8B 4C 24 5C mov ecx,dword ptr [esp+5Ch] - 100037BC: 89 54 24 2C mov dword ptr [esp+2Ch],edx - 100037C0: 8B 54 24 60 mov edx,dword ptr [esp+60h] - 100037C4: 6A 00 push 0 - 100037C6: 6A 01 push 1 - 100037C8: 89 4C 24 3C mov dword ptr [esp+3Ch],ecx - 100037CC: 89 54 24 40 mov dword ptr [esp+40h],edx - 100037D0: E8 0B FE FF FF call 100035E0 - 100037D5: 83 C4 44 add esp,44h - 100037D8: C2 24 00 ret 24h - 100037DB: CC int 3 - 100037DC: CC int 3 - 100037DD: CC int 3 - 100037DE: CC int 3 - 100037DF: CC int 3 - 100037E0: 6A 01 push 1 - 100037E2: 6A 00 push 0 - 100037E4: 6A 00 push 0 - 100037E6: 6A 00 push 0 - 100037E8: 6A 00 push 0 - 100037EA: 6A 00 push 0 - 100037EC: 6A 00 push 0 - 100037EE: 6A 3D push 3Dh - 100037F0: E8 EB FD FF FF call 100035E0 - 100037F5: 83 C4 20 add esp,20h - 100037F8: C3 ret - 100037F9: CC int 3 - 100037FA: CC int 3 - 100037FB: CC int 3 - 100037FC: CC int 3 - 100037FD: CC int 3 - 100037FE: CC int 3 - 100037FF: CC int 3 - 10003800: 83 EC 08 sub esp,8 - 10003803: 8B 44 24 0C mov eax,dword ptr [esp+0Ch] - 10003807: 8A 4C 24 10 mov cl,byte ptr [esp+10h] - 1000380B: 6A 01 push 1 - 1000380D: 68 10 31 00 10 push 10003110h - 10003812: 6A 08 push 8 - 10003814: 8D 54 24 0C lea edx,[esp+0Ch] - 10003818: 52 push edx - 10003819: 6A 06 push 6 - 1000381B: 6A 00 push 0 - 1000381D: 6A 00 push 0 - 1000381F: 6A 02 push 2 - 10003821: 89 44 24 20 mov dword ptr [esp+20h],eax - 10003825: 88 4C 24 24 mov byte ptr [esp+24h],cl - 10003829: E8 B2 FD FF FF call 100035E0 - 1000382E: 83 C4 28 add esp,28h - 10003831: C2 08 00 ret 8 - 10003834: CC int 3 - 10003835: CC int 3 - 10003836: CC int 3 - 10003837: CC int 3 - 10003838: CC int 3 - 10003839: CC int 3 - 1000383A: CC int 3 - 1000383B: CC int 3 - 1000383C: CC int 3 - 1000383D: CC int 3 - 1000383E: CC int 3 - 1000383F: CC int 3 - 10003840: 83 EC 08 sub esp,8 - 10003843: 8B 44 24 0C mov eax,dword ptr [esp+0Ch] - 10003847: 8A 4C 24 10 mov cl,byte ptr [esp+10h] - 1000384B: 6A 01 push 1 - 1000384D: 68 30 31 00 10 push 10003130h - 10003852: 6A 08 push 8 - 10003854: 8D 54 24 0C lea edx,[esp+0Ch] - 10003858: 52 push edx - 10003859: 6A 16 push 16h - 1000385B: 6A 00 push 0 - 1000385D: 6A 00 push 0 - 1000385F: 6A 03 push 3 - 10003861: 89 44 24 20 mov dword ptr [esp+20h],eax - 10003865: 88 4C 24 24 mov byte ptr [esp+24h],cl - 10003869: E8 72 FD FF FF call 100035E0 - 1000386E: 83 C4 28 add esp,28h - 10003871: C2 08 00 ret 8 - 10003874: CC int 3 - 10003875: CC int 3 - 10003876: CC int 3 - 10003877: CC int 3 - 10003878: CC int 3 - 10003879: CC int 3 - 1000387A: CC int 3 - 1000387B: CC int 3 - 1000387C: CC int 3 - 1000387D: CC int 3 - 1000387E: CC int 3 - 1000387F: CC int 3 - 10003880: 83 EC 10 sub esp,10h - 10003883: 8A 4C 24 18 mov cl,byte ptr [esp+18h] - 10003887: 8B 44 24 14 mov eax,dword ptr [esp+14h] - 1000388B: 8B 54 24 1C mov edx,dword ptr [esp+1Ch] - 1000388F: 6A 01 push 1 - 10003891: 68 40 35 00 10 push 10003540h - 10003896: 6A 10 push 10h - 10003898: 88 4C 24 10 mov byte ptr [esp+10h],cl - 1000389C: 8D 4C 24 0C lea ecx,[esp+0Ch] - 100038A0: 51 push ecx - 100038A1: 6A 1C push 1Ch - 100038A3: 6A 00 push 0 - 100038A5: 89 44 24 18 mov dword ptr [esp+18h],eax - 100038A9: 8A 44 24 38 mov al,byte ptr [esp+38h] - 100038AD: 6A 00 push 0 - 100038AF: 6A 04 push 4 - 100038B1: 89 54 24 28 mov dword ptr [esp+28h],edx - 100038B5: 88 44 24 2C mov byte ptr [esp+2Ch],al - 100038B9: E8 22 FD FF FF call 100035E0 - 100038BE: 83 C4 30 add esp,30h - 100038C1: C2 10 00 ret 10h - 100038C4: CC int 3 - 100038C5: CC int 3 - 100038C6: CC int 3 - 100038C7: CC int 3 - 100038C8: CC int 3 - 100038C9: CC int 3 - 100038CA: CC int 3 - 100038CB: CC int 3 - 100038CC: CC int 3 - 100038CD: CC int 3 - 100038CE: CC int 3 - 100038CF: CC int 3 - 100038D0: 83 EC 4C sub esp,4Ch - 100038D3: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 100038D8: 33 C4 xor eax,esp - 100038DA: 89 44 24 48 mov dword ptr [esp+48h],eax - 100038DE: 8B 44 24 50 mov eax,dword ptr [esp+50h] - 100038E2: 8D 4C 24 08 lea ecx,[esp+8] - 100038E6: 89 04 24 mov dword ptr [esp],eax - 100038E9: 8A 44 24 54 mov al,byte ptr [esp+54h] - 100038ED: 51 push ecx - 100038EE: 8D 54 24 04 lea edx,[esp+4] - 100038F2: 52 push edx - 100038F3: 88 44 24 0C mov byte ptr [esp+0Ch],al - 100038F7: E8 94 34 00 00 call 10006D90 - 100038FC: 6A 01 push 1 - 100038FE: 6A 00 push 0 - 10003900: 6A 00 push 0 - 10003902: 6A 00 push 0 - 10003904: 6A 00 push 0 - 10003906: 6A 06 push 6 - 10003908: 8D 44 24 28 lea eax,[esp+28h] - 1000390C: 50 push eax - 1000390D: 6A 16 push 16h - 1000390F: E8 CC FC FF FF call 100035E0 - 10003914: 8B 4C 24 70 mov ecx,dword ptr [esp+70h] - 10003918: 83 C4 28 add esp,28h - 1000391B: 33 CC xor ecx,esp - 1000391D: E8 79 67 00 00 call 1000A09B - 10003922: 83 C4 4C add esp,4Ch - 10003925: C2 08 00 ret 8 - 10003928: CC int 3 - 10003929: CC int 3 - 1000392A: CC int 3 - 1000392B: CC int 3 - 1000392C: CC int 3 - 1000392D: CC int 3 - 1000392E: CC int 3 - 1000392F: CC int 3 - 10003930: 6A 01 push 1 - 10003932: 6A 00 push 0 - 10003934: 6A 00 push 0 - 10003936: 6A 00 push 0 - 10003938: 6A 00 push 0 - 1000393A: 6A 00 push 0 - 1000393C: 6A 00 push 0 - 1000393E: 6A 17 push 17h - 10003940: E8 9B FC FF FF call 100035E0 - 10003945: 83 C4 20 add esp,20h - 10003948: C3 ret - 10003949: CC int 3 - 1000394A: CC int 3 - 1000394B: CC int 3 - 1000394C: CC int 3 - 1000394D: CC int 3 - 1000394E: CC int 3 - 1000394F: CC int 3 - 10003950: 83 EC 4C sub esp,4Ch - 10003953: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10003958: 33 C4 xor eax,esp - 1000395A: 89 44 24 48 mov dword ptr [esp+48h],eax - 1000395E: 8B 44 24 50 mov eax,dword ptr [esp+50h] - 10003962: 8D 4C 24 08 lea ecx,[esp+8] - 10003966: 89 04 24 mov dword ptr [esp],eax - 10003969: 8A 44 24 54 mov al,byte ptr [esp+54h] - 1000396D: 51 push ecx - 1000396E: 8D 54 24 04 lea edx,[esp+4] - 10003972: 52 push edx - 10003973: 88 44 24 0C mov byte ptr [esp+0Ch],al - 10003977: E8 74 34 00 00 call 10006DF0 - 1000397C: 6A 01 push 1 - 1000397E: 6A 00 push 0 - 10003980: 6A 00 push 0 - 10003982: 6A 00 push 0 - 10003984: 6A 00 push 0 - 10003986: 6A 16 push 16h - 10003988: 8D 44 24 28 lea eax,[esp+28h] - 1000398C: 50 push eax - 1000398D: 6A 18 push 18h - 1000398F: E8 4C FC FF FF call 100035E0 - 10003994: 8B 4C 24 70 mov ecx,dword ptr [esp+70h] - 10003998: 83 C4 28 add esp,28h - 1000399B: 33 CC xor ecx,esp - 1000399D: E8 F9 66 00 00 call 1000A09B - 100039A2: 83 C4 4C add esp,4Ch - 100039A5: C2 08 00 ret 8 - 100039A8: CC int 3 - 100039A9: CC int 3 - 100039AA: CC int 3 - 100039AB: CC int 3 - 100039AC: CC int 3 - 100039AD: CC int 3 - 100039AE: CC int 3 - 100039AF: CC int 3 - 100039B0: 6A 01 push 1 - 100039B2: 6A 00 push 0 - 100039B4: 6A 00 push 0 - 100039B6: 6A 00 push 0 - 100039B8: 6A 00 push 0 - 100039BA: 6A 00 push 0 - 100039BC: 6A 00 push 0 - 100039BE: 6A 1F push 1Fh - 100039C0: E8 1B FC FF FF call 100035E0 - 100039C5: 83 C4 20 add esp,20h - 100039C8: C3 ret - 100039C9: CC int 3 - 100039CA: CC int 3 - 100039CB: CC int 3 - 100039CC: CC int 3 - 100039CD: CC int 3 - 100039CE: CC int 3 - 100039CF: CC int 3 - 100039D0: 6A 01 push 1 - 100039D2: 6A 00 push 0 - 100039D4: 6A 00 push 0 - 100039D6: 6A 00 push 0 - 100039D8: 6A 00 push 0 - 100039DA: 6A 00 push 0 - 100039DC: 6A 00 push 0 - 100039DE: 6A 31 push 31h - 100039E0: E8 FB FB FF FF call 100035E0 - 100039E5: 83 C4 20 add esp,20h - 100039E8: C3 ret - 100039E9: CC int 3 - 100039EA: CC int 3 - 100039EB: CC int 3 - 100039EC: CC int 3 - 100039ED: CC int 3 - 100039EE: CC int 3 - 100039EF: CC int 3 - 100039F0: 6A 01 push 1 - 100039F2: 6A 00 push 0 - 100039F4: 6A 00 push 0 - 100039F6: 6A 00 push 0 - 100039F8: 6A 00 push 0 - 100039FA: 6A 00 push 0 - 100039FC: 6A 00 push 0 - 100039FE: 6A 32 push 32h - 10003A00: E8 DB FB FF FF call 100035E0 - 10003A05: 83 C4 20 add esp,20h - 10003A08: C3 ret - 10003A09: CC int 3 - 10003A0A: CC int 3 - 10003A0B: CC int 3 - 10003A0C: CC int 3 - 10003A0D: CC int 3 - 10003A0E: CC int 3 - 10003A0F: CC int 3 - 10003A10: 6A 01 push 1 - 10003A12: 6A 00 push 0 - 10003A14: 6A 00 push 0 - 10003A16: 6A 00 push 0 - 10003A18: 6A 00 push 0 - 10003A1A: 6A 00 push 0 - 10003A1C: 6A 00 push 0 - 10003A1E: 6A 33 push 33h - 10003A20: E8 BB FB FF FF call 100035E0 - 10003A25: 83 C4 20 add esp,20h - 10003A28: C3 ret - 10003A29: CC int 3 - 10003A2A: CC int 3 - 10003A2B: CC int 3 - 10003A2C: CC int 3 - 10003A2D: CC int 3 - 10003A2E: CC int 3 - 10003A2F: CC int 3 - 10003A30: 6A 01 push 1 - 10003A32: 6A 00 push 0 - 10003A34: 6A 00 push 0 - 10003A36: 6A 00 push 0 - 10003A38: 6A 00 push 0 - 10003A3A: 6A 00 push 0 - 10003A3C: 6A 00 push 0 - 10003A3E: 6A 34 push 34h - 10003A40: E8 9B FB FF FF call 100035E0 - 10003A45: 83 C4 20 add esp,20h - 10003A48: C3 ret - 10003A49: CC int 3 - 10003A4A: CC int 3 - 10003A4B: CC int 3 - 10003A4C: CC int 3 - 10003A4D: CC int 3 - 10003A4E: CC int 3 - 10003A4F: CC int 3 - 10003A50: 83 EC 1C sub esp,1Ch - 10003A53: 8B 4C 24 24 mov ecx,dword ptr [esp+24h] - 10003A57: 8B 44 24 20 mov eax,dword ptr [esp+20h] - 10003A5B: 8B 54 24 28 mov edx,dword ptr [esp+28h] - 10003A5F: 6A 01 push 1 - 10003A61: 68 50 31 00 10 push 10003150h - 10003A66: 89 4C 24 0C mov dword ptr [esp+0Ch],ecx - 10003A6A: 8B 4C 24 38 mov ecx,dword ptr [esp+38h] - 10003A6E: 6A 1C push 1Ch - 10003A70: 89 4C 24 1C mov dword ptr [esp+1Ch],ecx - 10003A74: 8D 4C 24 0C lea ecx,[esp+0Ch] - 10003A78: 51 push ecx - 10003A79: 6A 18 push 18h - 10003A7B: 89 44 24 14 mov dword ptr [esp+14h],eax - 10003A7F: 8B 44 24 40 mov eax,dword ptr [esp+40h] - 10003A83: 6A 00 push 0 - 10003A85: 89 54 24 20 mov dword ptr [esp+20h],edx - 10003A89: 8B 54 24 4C mov edx,dword ptr [esp+4Ch] - 10003A8D: 89 44 24 24 mov dword ptr [esp+24h],eax - 10003A91: 8B 44 24 50 mov eax,dword ptr [esp+50h] - 10003A95: 6A 00 push 0 - 10003A97: 6A 05 push 5 - 10003A99: 89 54 24 34 mov dword ptr [esp+34h],edx - 10003A9D: 89 44 24 38 mov dword ptr [esp+38h],eax - 10003AA1: E8 3A FB FF FF call 100035E0 - 10003AA6: 83 C4 3C add esp,3Ch - 10003AA9: C2 1C 00 ret 1Ch - 10003AAC: CC int 3 - 10003AAD: CC int 3 - 10003AAE: CC int 3 - 10003AAF: CC int 3 - 10003AB0: 83 EC 14 sub esp,14h - 10003AB3: 8B 54 24 20 mov edx,dword ptr [esp+20h] - 10003AB7: 8B 44 24 18 mov eax,dword ptr [esp+18h] - 10003ABB: 8B 4C 24 1C mov ecx,dword ptr [esp+1Ch] - 10003ABF: 6A 01 push 1 - 10003AC1: 68 70 31 00 10 push 10003170h - 10003AC6: 6A 14 push 14h - 10003AC8: 89 54 24 14 mov dword ptr [esp+14h],edx - 10003ACC: 8D 54 24 0C lea edx,[esp+0Ch] - 10003AD0: 52 push edx - 10003AD1: 6A 14 push 14h - 10003AD3: 6A 00 push 0 - 10003AD5: 89 44 24 18 mov dword ptr [esp+18h],eax - 10003AD9: 8B 44 24 3C mov eax,dword ptr [esp+3Ch] - 10003ADD: 89 4C 24 1C mov dword ptr [esp+1Ch],ecx - 10003AE1: 8B 4C 24 40 mov ecx,dword ptr [esp+40h] - 10003AE5: 6A 00 push 0 - 10003AE7: 6A 06 push 6 - 10003AE9: 89 44 24 2C mov dword ptr [esp+2Ch],eax - 10003AED: 89 4C 24 30 mov dword ptr [esp+30h],ecx - 10003AF1: E8 EA FA FF FF call 100035E0 - 10003AF6: 83 C4 34 add esp,34h - 10003AF9: C2 14 00 ret 14h - 10003AFC: CC int 3 - 10003AFD: CC int 3 - 10003AFE: CC int 3 - 10003AFF: CC int 3 - 10003B00: 83 EC 18 sub esp,18h - 10003B03: 8B 4C 24 20 mov ecx,dword ptr [esp+20h] - 10003B07: 8B 44 24 1C mov eax,dword ptr [esp+1Ch] - 10003B0B: 8B 54 24 24 mov edx,dword ptr [esp+24h] - 10003B0F: 6A 01 push 1 - 10003B11: 68 90 31 00 10 push 10003190h - 10003B16: 6A 18 push 18h - 10003B18: 89 4C 24 10 mov dword ptr [esp+10h],ecx - 10003B1C: 8D 4C 24 0C lea ecx,[esp+0Ch] - 10003B20: 51 push ecx - 10003B21: 6A 10 push 10h - 10003B23: 6A 00 push 0 - 10003B25: 89 44 24 18 mov dword ptr [esp+18h],eax - 10003B29: 8B 44 24 40 mov eax,dword ptr [esp+40h] - 10003B2D: 6A 00 push 0 - 10003B2F: 6A 07 push 7 - 10003B31: 89 54 24 28 mov dword ptr [esp+28h],edx - 10003B35: 89 44 24 2C mov dword ptr [esp+2Ch],eax - 10003B39: E8 A2 FA FF FF call 100035E0 - 10003B3E: 83 C4 38 add esp,38h - 10003B41: C2 10 00 ret 10h - 10003B44: CC int 3 - 10003B45: CC int 3 - 10003B46: CC int 3 - 10003B47: CC int 3 - 10003B48: CC int 3 - 10003B49: CC int 3 - 10003B4A: CC int 3 - 10003B4B: CC int 3 - 10003B4C: CC int 3 - 10003B4D: CC int 3 - 10003B4E: CC int 3 - 10003B4F: CC int 3 - 10003B50: 83 EC 08 sub esp,8 - 10003B53: 8B 44 24 0C mov eax,dword ptr [esp+0Ch] - 10003B57: 8B 4C 24 10 mov ecx,dword ptr [esp+10h] - 10003B5B: 6A 01 push 1 - 10003B5D: 68 B0 31 00 10 push 100031B0h - 10003B62: 6A 08 push 8 - 10003B64: 8D 54 24 0C lea edx,[esp+0Ch] - 10003B68: 52 push edx - 10003B69: 6A 08 push 8 - 10003B6B: 6A 00 push 0 - 10003B6D: 6A 00 push 0 - 10003B6F: 6A 08 push 8 - 10003B71: 89 44 24 20 mov dword ptr [esp+20h],eax - 10003B75: 89 4C 24 24 mov dword ptr [esp+24h],ecx - 10003B79: E8 62 FA FF FF call 100035E0 - 10003B7E: 83 C4 28 add esp,28h - 10003B81: C2 08 00 ret 8 - 10003B84: CC int 3 - 10003B85: CC int 3 - 10003B86: CC int 3 - 10003B87: CC int 3 - 10003B88: CC int 3 - 10003B89: CC int 3 - 10003B8A: CC int 3 - 10003B8B: CC int 3 - 10003B8C: CC int 3 - 10003B8D: CC int 3 - 10003B8E: CC int 3 - 10003B8F: CC int 3 - 10003B90: 83 EC 14 sub esp,14h - 10003B93: 8B 54 24 20 mov edx,dword ptr [esp+20h] - 10003B97: 8B 44 24 18 mov eax,dword ptr [esp+18h] - 10003B9B: 8B 4C 24 1C mov ecx,dword ptr [esp+1Ch] - 10003B9F: 6A 01 push 1 - 10003BA1: 68 70 31 00 10 push 10003170h - 10003BA6: 6A 14 push 14h - 10003BA8: 89 54 24 14 mov dword ptr [esp+14h],edx - 10003BAC: 8D 54 24 0C lea edx,[esp+0Ch] - 10003BB0: 52 push edx - 10003BB1: 6A 14 push 14h - 10003BB3: 6A 00 push 0 - 10003BB5: 89 44 24 18 mov dword ptr [esp+18h],eax - 10003BB9: 8B 44 24 3C mov eax,dword ptr [esp+3Ch] - 10003BBD: 89 4C 24 1C mov dword ptr [esp+1Ch],ecx - 10003BC1: 8B 4C 24 40 mov ecx,dword ptr [esp+40h] - 10003BC5: 6A 00 push 0 - 10003BC7: 6A 09 push 9 - 10003BC9: 89 44 24 2C mov dword ptr [esp+2Ch],eax - 10003BCD: 89 4C 24 30 mov dword ptr [esp+30h],ecx - 10003BD1: E8 0A FA FF FF call 100035E0 - 10003BD6: 83 C4 34 add esp,34h - 10003BD9: C2 14 00 ret 14h - 10003BDC: CC int 3 - 10003BDD: CC int 3 - 10003BDE: CC int 3 - 10003BDF: CC int 3 - 10003BE0: 83 EC 28 sub esp,28h - 10003BE3: 8B 4C 24 30 mov ecx,dword ptr [esp+30h] - 10003BE7: 8B 44 24 2C mov eax,dword ptr [esp+2Ch] - 10003BEB: 8B 54 24 34 mov edx,dword ptr [esp+34h] - 10003BEF: 89 4C 24 04 mov dword ptr [esp+4],ecx - 10003BF3: 8B 4C 24 3C mov ecx,dword ptr [esp+3Ch] - 10003BF7: 89 04 24 mov dword ptr [esp],eax - 10003BFA: 8B 44 24 38 mov eax,dword ptr [esp+38h] - 10003BFE: 89 4C 24 10 mov dword ptr [esp+10h],ecx - 10003C02: 8B 4C 24 48 mov ecx,dword ptr [esp+48h] - 10003C06: 89 54 24 08 mov dword ptr [esp+8],edx - 10003C0A: 8B 54 24 40 mov edx,dword ptr [esp+40h] - 10003C0E: 89 44 24 0C mov dword ptr [esp+0Ch],eax - 10003C12: 8B 44 24 44 mov eax,dword ptr [esp+44h] - 10003C16: 89 4C 24 1C mov dword ptr [esp+1Ch],ecx - 10003C1A: 56 push esi - 10003C1B: 89 54 24 18 mov dword ptr [esp+18h],edx - 10003C1F: 8B 54 24 50 mov edx,dword ptr [esp+50h] - 10003C23: 89 44 24 1C mov dword ptr [esp+1Ch],eax - 10003C27: 8B 44 24 54 mov eax,dword ptr [esp+54h] - 10003C2B: 8D 4C 24 3C lea ecx,[esp+3Ch] - 10003C2F: 51 push ecx - 10003C30: 33 F6 xor esi,esi - 10003C32: 89 54 24 28 mov dword ptr [esp+28h],edx - 10003C36: 89 44 24 2C mov dword ptr [esp+2Ch],eax - 10003C3A: E8 11 5A 00 00 call 10009650 - 10003C3F: 83 C4 04 add esp,4 - 10003C42: 85 C0 test eax,eax - 10003C44: 74 4E je 10003C94 - 10003C46: 8B 4C 24 3C mov ecx,dword ptr [esp+3Ch] - 10003C4A: 39 B1 80 00 00 00 cmp dword ptr [ecx+00000080h],esi - 10003C50: 74 42 je 10003C94 - 10003C52: C6 81 8C 00 00 00 mov byte ptr [ecx+0000008Ch],0 - 00 - 10003C59: 8B 54 24 3C mov edx,dword ptr [esp+3Ch] - 10003C5D: C6 82 8D 00 00 00 mov byte ptr [edx+0000008Dh],0 - 00 - 10003C64: 8B 44 24 3C mov eax,dword ptr [esp+3Ch] - 10003C68: C6 80 8E 00 00 00 mov byte ptr [eax+0000008Eh],0 - 00 - 10003C6F: 8B 4C 24 3C mov ecx,dword ptr [esp+3Ch] - 10003C73: 8B 89 80 00 00 00 mov ecx,dword ptr [ecx+00000080h] - 10003C79: 8B 11 mov edx,dword ptr [ecx] - 10003C7B: 8B 52 50 mov edx,dword ptr [edx+50h] - 10003C7E: 8D 44 24 30 lea eax,[esp+30h] - 10003C82: 50 push eax - 10003C83: 8D 44 24 38 lea eax,[esp+38h] - 10003C87: 50 push eax - 10003C88: 8D 44 24 40 lea eax,[esp+40h] - 10003C8C: 50 push eax - 10003C8D: 8D 44 24 4C lea eax,[esp+4Ch] - 10003C91: 50 push eax - 10003C92: FF D2 call edx - 10003C94: 66 85 C0 test ax,ax - 10003C97: 74 4C je 10003CE5 - 10003C99: E8 F2 F2 FF FF call 10002F90 - 10003C9E: 0F B7 C0 movzx eax,ax - 10003CA1: 66 85 C0 test ax,ax - 10003CA4: 74 42 je 10003CE8 - 10003CA6: F6 44 24 30 08 test byte ptr [esp+30h],8 - 10003CAB: 6A 01 push 1 - 10003CAD: 74 26 je 10003CD5 - 10003CAF: 68 F0 31 00 10 push 100031F0h - 10003CB4: 6A 28 push 28h - 10003CB6: 8D 44 24 10 lea eax,[esp+10h] - 10003CBA: 50 push eax - 10003CBB: 6A 14 push 14h - 10003CBD: 6A 00 push 0 - 10003CBF: 6A 00 push 0 - 10003CC1: 6A 0A push 0Ah - 10003CC3: E8 18 F9 FF FF call 100035E0 - 10003CC8: 83 C4 20 add esp,20h - 10003CCB: 0F B7 C0 movzx eax,ax - 10003CCE: 5E pop esi - 10003CCF: 83 C4 28 add esp,28h - 10003CD2: C2 28 00 ret 28h - 10003CD5: 68 D0 31 00 10 push 100031D0h - 10003CDA: 6A 28 push 28h - 10003CDC: 8D 4C 24 10 lea ecx,[esp+10h] - 10003CE0: 51 push ecx - 10003CE1: 6A 12 push 12h - 10003CE3: EB D8 jmp 10003CBD - 10003CE5: 66 8B C6 mov ax,si - 10003CE8: 5E pop esi - 10003CE9: 83 C4 28 add esp,28h - 10003CEC: C2 28 00 ret 28h - 10003CEF: CC int 3 - 10003CF0: 83 EC 0C sub esp,0Ch - 10003CF3: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 10003CF7: 8B 4C 24 14 mov ecx,dword ptr [esp+14h] - 10003CFB: 8B 54 24 18 mov edx,dword ptr [esp+18h] - 10003CFF: 6A 01 push 1 - 10003D01: 68 10 32 00 10 push 10003210h - 10003D06: 6A 0C push 0Ch - 10003D08: 89 44 24 0C mov dword ptr [esp+0Ch],eax - 10003D0C: 8D 44 24 0C lea eax,[esp+0Ch] - 10003D10: 50 push eax - 10003D11: 6A 0E push 0Eh - 10003D13: 6A 00 push 0 - 10003D15: 6A 00 push 0 - 10003D17: 6A 0B push 0Bh - 10003D19: 89 4C 24 24 mov dword ptr [esp+24h],ecx - 10003D1D: 89 54 24 28 mov dword ptr [esp+28h],edx - 10003D21: E8 BA F8 FF FF call 100035E0 - 10003D26: 83 C4 2C add esp,2Ch - 10003D29: C2 0C 00 ret 0Ch - 10003D2C: CC int 3 - 10003D2D: CC int 3 - 10003D2E: CC int 3 - 10003D2F: CC int 3 - 10003D30: 83 EC 18 sub esp,18h - 10003D33: 8B 44 24 1C mov eax,dword ptr [esp+1Ch] - 10003D37: 8B 4C 24 20 mov ecx,dword ptr [esp+20h] - 10003D3B: 8B 54 24 24 mov edx,dword ptr [esp+24h] - 10003D3F: 6A 01 push 1 - 10003D41: 68 30 32 00 10 push 10003230h - 10003D46: 89 44 24 08 mov dword ptr [esp+8],eax - 10003D4A: 8B 44 24 30 mov eax,dword ptr [esp+30h] - 10003D4E: 6A 18 push 18h - 10003D50: 89 44 24 18 mov dword ptr [esp+18h],eax - 10003D54: 8D 44 24 0C lea eax,[esp+0Ch] - 10003D58: 50 push eax - 10003D59: 6A 1A push 1Ah - 10003D5B: 6A 00 push 0 - 10003D5D: 89 4C 24 1C mov dword ptr [esp+1Ch],ecx - 10003D61: 8B 4C 24 44 mov ecx,dword ptr [esp+44h] - 10003D65: 89 54 24 20 mov dword ptr [esp+20h],edx - 10003D69: 8B 54 24 48 mov edx,dword ptr [esp+48h] - 10003D6D: 6A 00 push 0 - 10003D6F: 6A 0C push 0Ch - 10003D71: 89 4C 24 30 mov dword ptr [esp+30h],ecx - 10003D75: 89 54 24 34 mov dword ptr [esp+34h],edx - 10003D79: E8 62 F8 FF FF call 100035E0 - 10003D7E: 83 C4 38 add esp,38h - 10003D81: C2 18 00 ret 18h - 10003D84: CC int 3 - 10003D85: CC int 3 - 10003D86: CC int 3 - 10003D87: CC int 3 - 10003D88: CC int 3 - 10003D89: CC int 3 - 10003D8A: CC int 3 - 10003D8B: CC int 3 - 10003D8C: CC int 3 - 10003D8D: CC int 3 - 10003D8E: CC int 3 - 10003D8F: CC int 3 - 10003D90: 6A 01 push 1 - 10003D92: 6A 00 push 0 - 10003D94: 6A 00 push 0 - 10003D96: 6A 00 push 0 - 10003D98: 6A 00 push 0 - 10003D9A: 6A 01 push 1 - 10003D9C: 8D 44 24 1C lea eax,[esp+1Ch] - 10003DA0: 50 push eax - 10003DA1: 6A 40 push 40h - 10003DA3: E8 38 F8 FF FF call 100035E0 - 10003DA8: 83 C4 20 add esp,20h - 10003DAB: C2 04 00 ret 4 - 10003DAE: CC int 3 - 10003DAF: CC int 3 - 10003DB0: 83 EC 24 sub esp,24h - 10003DB3: 8B 44 24 28 mov eax,dword ptr [esp+28h] - 10003DB7: 8B 4C 24 2C mov ecx,dword ptr [esp+2Ch] - 10003DBB: 8B 54 24 30 mov edx,dword ptr [esp+30h] - 10003DBF: 89 04 24 mov dword ptr [esp],eax - 10003DC2: 8B 44 24 34 mov eax,dword ptr [esp+34h] - 10003DC6: 6A 01 push 1 - 10003DC8: 68 50 32 00 10 push 10003250h - 10003DCD: 89 44 24 14 mov dword ptr [esp+14h],eax - 10003DD1: 8B 44 24 48 mov eax,dword ptr [esp+48h] - 10003DD5: 6A 24 push 24h - 10003DD7: 89 44 24 24 mov dword ptr [esp+24h],eax - 10003DDB: 8D 44 24 0C lea eax,[esp+0Ch] - 10003DDF: 50 push eax - 10003DE0: 6A 20 push 20h - 10003DE2: 89 4C 24 18 mov dword ptr [esp+18h],ecx - 10003DE6: 8B 4C 24 4C mov ecx,dword ptr [esp+4Ch] - 10003DEA: 89 54 24 1C mov dword ptr [esp+1Ch],edx - 10003DEE: 8B 54 24 50 mov edx,dword ptr [esp+50h] - 10003DF2: 6A 00 push 0 - 10003DF4: 89 4C 24 28 mov dword ptr [esp+28h],ecx - 10003DF8: 8B 4C 24 5C mov ecx,dword ptr [esp+5Ch] - 10003DFC: 89 54 24 2C mov dword ptr [esp+2Ch],edx - 10003E00: 8B 54 24 60 mov edx,dword ptr [esp+60h] - 10003E04: 6A 00 push 0 - 10003E06: 6A 0D push 0Dh - 10003E08: 89 4C 24 3C mov dword ptr [esp+3Ch],ecx - 10003E0C: 89 54 24 40 mov dword ptr [esp+40h],edx - 10003E10: E8 CB F7 FF FF call 100035E0 - 10003E15: 83 C4 44 add esp,44h - 10003E18: C2 24 00 ret 24h - 10003E1B: CC int 3 - 10003E1C: CC int 3 - 10003E1D: CC int 3 - 10003E1E: CC int 3 - 10003E1F: CC int 3 - 10003E20: 83 EC 08 sub esp,8 - 10003E23: 8B 44 24 0C mov eax,dword ptr [esp+0Ch] - 10003E27: 8B 4C 24 10 mov ecx,dword ptr [esp+10h] - 10003E2B: 6A 01 push 1 - 10003E2D: 68 70 32 00 10 push 10003270h - 10003E32: 6A 08 push 8 - 10003E34: 8D 54 24 0C lea edx,[esp+0Ch] - 10003E38: 52 push edx - 10003E39: 6A 06 push 6 - 10003E3B: 6A 00 push 0 - 10003E3D: 6A 00 push 0 - 10003E3F: 6A 0E push 0Eh - 10003E41: 89 44 24 20 mov dword ptr [esp+20h],eax - 10003E45: 89 4C 24 24 mov dword ptr [esp+24h],ecx - 10003E49: E8 92 F7 FF FF call 100035E0 - 10003E4E: 83 C4 28 add esp,28h - 10003E51: C2 08 00 ret 8 - 10003E54: CC int 3 - 10003E55: CC int 3 - 10003E56: CC int 3 - 10003E57: CC int 3 - 10003E58: CC int 3 - 10003E59: CC int 3 - 10003E5A: CC int 3 - 10003E5B: CC int 3 - 10003E5C: CC int 3 - 10003E5D: CC int 3 - 10003E5E: CC int 3 - 10003E5F: CC int 3 - 10003E60: 83 EC 50 sub esp,50h - 10003E63: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10003E68: 33 C4 xor eax,esp - 10003E6A: 89 44 24 4C mov dword ptr [esp+4Ch],eax - 10003E6E: 8B 44 24 5C mov eax,dword ptr [esp+5Ch] - 10003E72: 89 44 24 04 mov dword ptr [esp+4],eax - 10003E76: 8A 44 24 58 mov al,byte ptr [esp+58h] - 10003E7A: 8D 4C 24 0C lea ecx,[esp+0Ch] - 10003E7E: 88 44 24 08 mov byte ptr [esp+8],al - 10003E82: 88 04 24 mov byte ptr [esp],al - 10003E85: 66 8B 44 24 54 mov ax,word ptr [esp+54h] - 10003E8A: 51 push ecx - 10003E8B: 8D 54 24 04 lea edx,[esp+4] - 10003E8F: 52 push edx - 10003E90: 66 89 44 24 0A mov word ptr [esp+0Ah],ax - 10003E95: E8 86 34 00 00 call 10007320 - 10003E9A: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10003E9E: 6A 01 push 1 - 10003EA0: 68 20 35 00 10 push 10003520h - 10003EA5: 6A 08 push 8 - 10003EA7: 8D 44 24 18 lea eax,[esp+18h] - 10003EAB: 50 push eax - 10003EAC: 51 push ecx - 10003EAD: 6A 03 push 3 - 10003EAF: 8D 54 24 2C lea edx,[esp+2Ch] - 10003EB3: 52 push edx - 10003EB4: 6A 0F push 0Fh - 10003EB6: E8 25 F7 FF FF call 100035E0 - 10003EBB: 83 C4 28 add esp,28h - 10003EBE: 85 C0 test eax,eax - 10003EC0: 74 08 je 10003ECA - 10003EC2: E8 C9 F0 FF FF call 10002F90 - 10003EC7: 0F B7 C0 movzx eax,ax - 10003ECA: 8B 4C 24 4C mov ecx,dword ptr [esp+4Ch] - 10003ECE: 33 CC xor ecx,esp - 10003ED0: E8 C6 61 00 00 call 1000A09B - 10003ED5: 83 C4 50 add esp,50h - 10003ED8: C3 ret - 10003ED9: CC int 3 - 10003EDA: CC int 3 - 10003EDB: CC int 3 - 10003EDC: CC int 3 - 10003EDD: CC int 3 - 10003EDE: CC int 3 - 10003EDF: CC int 3 - 10003EE0: 53 push ebx - 10003EE1: 8B 5C 24 0C mov ebx,dword ptr [esp+0Ch] - 10003EE5: 55 push ebp - 10003EE6: 8B 6C 24 0C mov ebp,dword ptr [esp+0Ch] - 10003EEA: 66 8B 85 5C 45 00 mov ax,word ptr [ebp+0000455Ch] - 00 - 10003EF1: 66 03 C3 add ax,bx - 10003EF4: 0F B7 C0 movzx eax,ax - 10003EF7: B9 DA 06 00 00 mov ecx,6DAh - 10003EFC: 56 push esi - 10003EFD: 57 push edi - 10003EFE: 66 3B C1 cmp ax,cx - 10003F01: 72 05 jb 10003F08 - 10003F03: 05 26 F9 00 00 add eax,0F926h - 10003F08: 0F B7 CB movzx ecx,bx - 10003F0B: 8D 51 1E lea edx,[ecx+1Eh] - 10003F0E: 81 FA DA 06 00 00 cmp edx,6DAh - 10003F14: BF 1E 00 00 00 mov edi,1Eh - 10003F19: 7E 0A jle 10003F25 - 10003F1B: BA DA 06 00 00 mov edx,6DAh - 10003F20: 2B D3 sub edx,ebx - 10003F22: 0F B7 FA movzx edi,dx - 10003F25: 0F B7 D7 movzx edx,di - 10003F28: 0F B7 F0 movzx esi,ax - 10003F2B: 03 D6 add edx,esi - 10003F2D: 81 FA DA 06 00 00 cmp edx,6DAh - 10003F33: 7E 2D jle 10003F62 - 10003F35: BA DA 06 00 00 mov edx,6DAh - 10003F3A: 2B D0 sub edx,eax - 10003F3C: 0F B7 F2 movzx esi,dx - 10003F3F: 03 CD add ecx,ebp - 10003F41: 51 push ecx - 10003F42: 56 push esi - 10003F43: 50 push eax - 10003F44: E8 17 FF FF FF call 10003E60 - 10003F49: 83 C4 0C add esp,0Ch - 10003F4C: 85 C0 test eax,eax - 10003F4E: 74 2E je 10003F7E - 10003F50: E8 3B F0 FF FF call 10002F90 - 10003F55: 0F B7 C0 movzx eax,ax - 10003F58: 85 C0 test eax,eax - 10003F5A: 74 22 je 10003F7E - 10003F5C: 33 C0 xor eax,eax - 10003F5E: 03 DE add ebx,esi - 10003F60: 2B FE sub edi,esi - 10003F62: 0F B7 CB movzx ecx,bx - 10003F65: 03 CD add ecx,ebp - 10003F67: 51 push ecx - 10003F68: 57 push edi - 10003F69: 50 push eax - 10003F6A: E8 F1 FE FF FF call 10003E60 - 10003F6F: 83 C4 0C add esp,0Ch - 10003F72: 85 C0 test eax,eax - 10003F74: 74 08 je 10003F7E - 10003F76: E8 15 F0 FF FF call 10002F90 - 10003F7B: 0F B7 C0 movzx eax,ax - 10003F7E: 5F pop edi - 10003F7F: 5E pop esi - 10003F80: 5D pop ebp - 10003F81: 5B pop ebx - 10003F82: C3 ret - 10003F83: CC int 3 - 10003F84: CC int 3 - 10003F85: CC int 3 - 10003F86: CC int 3 - 10003F87: CC int 3 - 10003F88: CC int 3 - 10003F89: CC int 3 - 10003F8A: CC int 3 - 10003F8B: CC int 3 - 10003F8C: CC int 3 - 10003F8D: CC int 3 - 10003F8E: CC int 3 - 10003F8F: CC int 3 - 10003F90: 56 push esi - 10003F91: 8B 74 24 08 mov esi,dword ptr [esp+8] - 10003F95: 0F B7 8E 62 45 00 movzx ecx,word ptr [esi+00004562h] - 00 - 10003F9C: 57 push edi - 10003F9D: B8 01 00 00 00 mov eax,1 - 10003FA2: 66 3B 8E 5E 45 00 cmp cx,word ptr [esi+0000455Eh] - 00 - 10003FA9: 73 5A jae 10004005 - 10003FAB: 0F B7 96 60 45 00 movzx edx,word ptr [esi+00004560h] - 00 - 10003FB2: 0F B7 F9 movzx edi,cx - 10003FB5: 83 C2 10 add edx,10h - 10003FB8: 3B D7 cmp edx,edi - 10003FBA: 7E 49 jle 10004005 - 10003FBC: 51 push ecx - 10003FBD: 56 push esi - 10003FBE: E8 1D FF FF FF call 10003EE0 - 10003FC3: 83 C4 08 add esp,8 - 10003FC6: 85 C0 test eax,eax - 10003FC8: 74 3B je 10004005 - 10003FCA: BF 1E 00 00 00 mov edi,1Eh - 10003FCF: 66 01 BE 62 45 00 add word ptr [esi+00004562h],di - 00 - 10003FD6: 0F B7 8E 62 45 00 movzx ecx,word ptr [esi+00004562h] - 00 - 10003FDD: 0F B7 D1 movzx edx,cx - 10003FE0: 80 3C 32 FF cmp byte ptr [edx+esi],0FFh - 10003FE4: 75 1F jne 10004005 - 10003FE6: 8D 41 E5 lea eax,[ecx-1Bh] - 10003FE9: 50 push eax - 10003FEA: 56 push esi - 10003FEB: 66 89 86 62 45 00 mov word ptr [esi+00004562h],ax - 00 - 10003FF2: E8 E9 FE FF FF call 10003EE0 - 10003FF7: 83 C4 08 add esp,8 - 10003FFA: 85 C0 test eax,eax - 10003FFC: 74 07 je 10004005 - 10003FFE: 66 01 BE 62 45 00 add word ptr [esi+00004562h],di - 00 - 10004005: 8B 54 24 14 mov edx,dword ptr [esp+14h] - 10004009: 33 C9 xor ecx,ecx - 1000400B: 85 C0 test eax,eax - 1000400D: 0F 94 C1 sete cl - 10004010: 89 0A mov dword ptr [edx],ecx - 10004012: 85 C0 test eax,eax - 10004014: 0F 84 C1 00 00 00 je 100040DB - 1000401A: 0F B7 96 60 45 00 movzx edx,word ptr [esi+00004560h] - 00 - 10004021: 0F B7 BE 62 45 00 movzx edi,word ptr [esi+00004562h] - 00 - 10004028: 0F B7 C2 movzx eax,dx - 1000402B: 53 push ebx - 1000402C: 32 C9 xor cl,cl - 1000402E: 8B FF mov edi,edi - 10004030: 66 3B C7 cmp ax,di - 10004033: 73 11 jae 10004046 - 10004035: 0F B7 D8 movzx ebx,ax - 10004038: 40 inc eax - 10004039: 80 3C 33 FF cmp byte ptr [ebx+esi],0FFh - 1000403D: 75 ED jne 1000402C - 1000403F: FE C1 inc cl - 10004041: 80 F9 10 cmp cl,10h - 10004044: 72 EA jb 10004030 - 10004046: 80 F9 10 cmp cl,10h - 10004049: 75 0A jne 10004055 - 1000404B: 83 C0 F0 add eax,0FFFFFFF0h - 1000404E: 66 89 86 5E 45 00 mov word ptr [esi+0000455Eh],ax - 00 - 10004055: 8B 7C 24 14 mov edi,dword ptr [esp+14h] - 10004059: 0F B7 C2 movzx eax,dx - 1000405C: 8A 0C 30 mov cl,byte ptr [eax+esi] - 1000405F: 33 C0 xor eax,eax - 10004061: 84 C9 test cl,cl - 10004063: 0F 94 C0 sete al - 10004066: 89 07 mov dword ptr [edi],eax - 10004068: 85 C0 test eax,eax - 1000406A: 74 33 je 1000409F - 1000406C: 0F B7 96 60 45 00 movzx edx,word ptr [esi+00004560h] - 00 - 10004073: 0F B7 9E 5E 45 00 movzx ebx,word ptr [esi+0000455Eh] - 00 - 1000407A: 89 4C 24 10 mov dword ptr [esp+10h],ecx - 1000407E: 33 C9 xor ecx,ecx - 10004080: 8D 42 03 lea eax,[edx+3] - 10004083: 3B C3 cmp eax,ebx - 10004085: 0F 9E C1 setle cl - 10004088: 8B C1 mov eax,ecx - 1000408A: 8B 4C 24 10 mov ecx,dword ptr [esp+10h] - 1000408E: 85 C0 test eax,eax - 10004090: 74 07 je 10004099 - 10004092: 80 7C 32 01 00 cmp byte ptr [edx+esi+1],0 - 10004097: 74 41 je 100040DA - 10004099: C7 07 00 00 00 00 mov dword ptr [edi],0 - 1000409F: 8A D1 mov dl,cl - 100040A1: C0 EA 04 shr dl,4 - 100040A4: 8A C1 mov al,cl - 100040A6: C0 E8 02 shr al,2 - 100040A9: 80 E2 03 and dl,3 - 100040AC: 24 03 and al,3 - 100040AE: 02 D0 add dl,al - 100040B0: 8A C1 mov al,cl - 100040B2: C0 E8 06 shr al,6 - 100040B5: 02 D0 add dl,al - 100040B7: 80 E1 03 and cl,3 - 100040BA: 02 D1 add dl,cl - 100040BC: 0F B6 CA movzx ecx,dl - 100040BF: 0F B7 96 60 45 00 movzx edx,word ptr [esi+00004560h] - 00 - 100040C6: 8D 44 11 01 lea eax,[ecx+edx+1] - 100040CA: 0F B7 8E 5E 45 00 movzx ecx,word ptr [esi+0000455Eh] - 00 - 100040D1: 33 D2 xor edx,edx - 100040D3: 3B C1 cmp eax,ecx - 100040D5: 0F 9E C2 setle dl - 100040D8: 8B C2 mov eax,edx - 100040DA: 5B pop ebx - 100040DB: 5F pop edi - 100040DC: 5E pop esi - 100040DD: C3 ret - 100040DE: CC int 3 - 100040DF: CC int 3 - 100040E0: 83 EC 18 sub esp,18h - 100040E3: 53 push ebx - 100040E4: 55 push ebp - 100040E5: 33 DB xor ebx,ebx - 100040E7: 33 C0 xor eax,eax - 100040E9: 56 push esi - 100040EA: 8B 74 24 2C mov esi,dword ptr [esp+2Ch] - 100040EE: 66 89 46 04 mov word ptr [esi+4],ax - 100040F2: 89 1E mov dword ptr [esi],ebx - 100040F4: 89 5E 08 mov dword ptr [esi+8],ebx - 100040F7: 89 5E 0C mov dword ptr [esi+0Ch],ebx - 100040FA: 57 push edi - 100040FB: 8B 7C 24 2C mov edi,dword ptr [esp+2Ch] - 100040FF: 66 FF 87 60 45 00 inc word ptr [edi+00004560h] - 00 - 10004106: 0F B7 8F 60 45 00 movzx ecx,word ptr [edi+00004560h] - 00 - 1000410D: 0F B7 D1 movzx edx,cx - 10004110: 66 0F B6 04 3A movzx ax,byte ptr [edx+edi] - 10004115: 41 inc ecx - 10004116: 0F B7 D1 movzx edx,cx - 10004119: 0F B7 C0 movzx eax,ax - 1000411C: 66 89 8F 60 45 00 mov word ptr [edi+00004560h],cx - 00 - 10004123: 66 0F B6 14 3A movzx dx,byte ptr [edx+edi] - 10004128: C1 E0 08 shl eax,8 - 1000412B: 66 0B D0 or dx,ax - 1000412E: 8D 41 01 lea eax,[ecx+1] - 10004131: 0F B7 8F 5E 45 00 movzx ecx,word ptr [edi+0000455Eh] - 00 - 10004138: 0F B7 EA movzx ebp,dx - 1000413B: 03 E8 add ebp,eax - 1000413D: 89 5C 24 14 mov dword ptr [esp+14h],ebx - 10004141: 89 5C 24 10 mov dword ptr [esp+10h],ebx - 10004145: 66 89 87 60 45 00 mov word ptr [edi+00004560h],ax - 00 - 1000414C: 66 3B E9 cmp bp,cx - 1000414F: 76 03 jbe 10004154 - 10004151: 0F B7 E9 movzx ebp,cx - 10004154: 0F B7 C8 movzx ecx,ax - 10004157: 89 4C 24 30 mov dword ptr [esp+30h],ecx - 1000415B: 66 3B C5 cmp ax,bp - 1000415E: 73 57 jae 100041B7 - 10004160: 8D 54 24 10 lea edx,[esp+10h] - 10004164: 52 push edx - 10004165: 8D 44 24 18 lea eax,[esp+18h] - 10004169: 50 push eax - 1000416A: 57 push edi - 1000416B: E8 20 FE FF FF call 10003F90 - 10004170: 83 C4 0C add esp,0Ch - 10004173: 85 C0 test eax,eax - 10004175: 74 40 je 100041B7 - 10004177: 39 5C 24 14 cmp dword ptr [esp+14h],ebx - 1000417B: 75 3A jne 100041B7 - 1000417D: 39 5C 24 10 cmp dword ptr [esp+10h],ebx - 10004181: 75 34 jne 100041B7 - 10004183: 8D 4C 24 18 lea ecx,[esp+18h] - 10004187: 51 push ecx - 10004188: 57 push edi - 10004189: E8 82 F1 FF FF call 10003310 - 1000418E: 8B 54 24 28 mov edx,dword ptr [esp+28h] - 10004192: 8B 44 24 2C mov eax,dword ptr [esp+2Ch] - 10004196: 29 56 08 sub dword ptr [esi+8],edx - 10004199: 29 46 0C sub dword ptr [esi+0Ch],eax - 1000419C: 66 8B 4C 24 24 mov cx,word ptr [esp+24h] - 100041A1: 66 29 4E 04 sub word ptr [esi+4],cx - 100041A5: 83 C4 08 add esp,8 - 100041A8: 88 5E 0B mov byte ptr [esi+0Bh],bl - 100041AB: 88 5E 0F mov byte ptr [esi+0Fh],bl - 100041AE: 66 39 AF 60 45 00 cmp word ptr [edi+00004560h],bp - 00 - 100041B5: 72 A9 jb 10004160 - 100041B7: 66 8B 54 24 30 mov dx,word ptr [esp+30h] - 100041BC: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 100041C0: 66 89 97 60 45 00 mov word ptr [edi+00004560h],dx - 00 - 100041C7: 5F pop edi - 100041C8: 5E pop esi - 100041C9: 5D pop ebp - 100041CA: 5B pop ebx - 100041CB: 83 C4 18 add esp,18h - 100041CE: C3 ret - 100041CF: CC int 3 - 100041D0: 83 EC 28 sub esp,28h - 100041D3: 8B 44 24 2C mov eax,dword ptr [esp+2Ch] - 100041D7: 66 8B 48 10 mov cx,word ptr [eax+10h] - 100041DB: 53 push ebx - 100041DC: 55 push ebp - 100041DD: 8B 28 mov ebp,dword ptr [eax] - 100041DF: 56 push esi - 100041E0: 8B 74 24 3C mov esi,dword ptr [esp+3Ch] - 100041E4: 66 89 8E 5C 45 00 mov word ptr [esi+0000455Ch],cx - 00 - 100041EB: 66 8B 50 04 mov dx,word ptr [eax+4] - 100041EF: 8B 08 mov ecx,dword ptr [eax] - 100041F1: 8B 58 0C mov ebx,dword ptr [eax+0Ch] - 100041F4: 57 push edi - 100041F5: 8B 78 08 mov edi,dword ptr [eax+8] - 100041F8: 66 89 54 24 2C mov word ptr [esp+2Ch],dx - 100041FD: 8B 44 24 2C mov eax,dword ptr [esp+2Ch] - 10004201: 89 8E DC 06 00 00 mov dword ptr [esi+000006DCh],ecx - 10004207: 89 86 E0 06 00 00 mov dword ptr [esi+000006E0h],eax - 1000420D: 33 D2 xor edx,edx - 1000420F: 33 C0 xor eax,eax - 10004211: 66 89 96 60 45 00 mov word ptr [esi+00004560h],dx - 00 - 10004218: 8D 54 24 10 lea edx,[esp+10h] - 1000421C: 66 89 86 62 45 00 mov word ptr [esi+00004562h],ax - 00 - 10004223: 52 push edx - 10004224: B9 DA 06 00 00 mov ecx,6DAh - 10004229: 8D 44 24 40 lea eax,[esp+40h] - 1000422D: 66 89 8E 5E 45 00 mov word ptr [esi+0000455Eh],cx - 00 - 10004234: B9 01 00 00 00 mov ecx,1 - 10004239: 50 push eax - 1000423A: 89 BE E4 06 00 00 mov dword ptr [esi+000006E4h],edi - 10004240: 56 push esi - 10004241: 89 9E E8 06 00 00 mov dword ptr [esi+000006E8h],ebx - 10004247: 66 89 8E 64 45 00 mov word ptr [esi+00004564h],cx - 00 - 1000424E: 89 4C 24 4C mov dword ptr [esp+4Ch],ecx - 10004252: E8 39 FD FF FF call 10003F90 - 10004257: 83 C4 0C add esp,0Ch - 1000425A: 85 C0 test eax,eax - 1000425C: 0F 84 14 01 00 00 je 10004376 - 10004262: 83 7C 24 40 00 cmp dword ptr [esp+40h],0 - 10004267: 0F 84 09 01 00 00 je 10004376 - 1000426D: 83 7C 24 3C 00 cmp dword ptr [esp+3Ch],0 - 10004272: 74 0D je 10004281 - 10004274: 8D 4C 24 18 lea ecx,[esp+18h] - 10004278: 51 push ecx - 10004279: 56 push esi - 1000427A: E8 61 FE FF FF call 100040E0 - 1000427F: EB 28 jmp 100042A9 - 10004281: 0F B7 86 60 45 00 movzx eax,word ptr [esi+00004560h] - 00 - 10004288: 0F B7 D0 movzx edx,ax - 1000428B: 80 3C 32 00 cmp byte ptr [edx+esi],0 - 1000428F: 75 0D jne 1000429E - 10004291: 40 inc eax - 10004292: 66 89 86 60 45 00 mov word ptr [esi+00004560h],ax - 00 - 10004299: E9 BD 00 00 00 jmp 1000435B - 1000429E: 8D 44 24 18 lea eax,[esp+18h] - 100042A2: 50 push eax - 100042A3: 56 push esi - 100042A4: E8 67 F0 FF FF call 10003310 - 100042A9: 66 8B 44 24 24 mov ax,word ptr [esp+24h] - 100042AE: 83 C4 08 add esp,8 - 100042B1: 66 85 C0 test ax,ax - 100042B4: 74 05 je 100042BB - 100042B6: 66 29 44 24 2C sub word ptr [esp+2Ch],ax - 100042BB: 83 7C 24 3C 00 cmp dword ptr [esp+3Ch],0 - 100042C0: 75 29 jne 100042EB - 100042C2: 8B 44 24 18 mov eax,dword ptr [esp+18h] - 100042C6: 85 C0 test eax,eax - 100042C8: 75 07 jne 100042D1 - 100042CA: 0F B7 44 24 2C movzx eax,word ptr [esp+2Ch] - 100042CF: 03 C0 add eax,eax - 100042D1: 8B C8 mov ecx,eax - 100042D3: 81 E1 00 00 00 80 and ecx,80000000h - 100042D9: 33 D2 xor edx,edx - 100042DB: 3B D1 cmp edx,ecx - 100042DD: 1B C9 sbb ecx,ecx - 100042DF: F7 D9 neg ecx - 100042E1: 89 4C 24 14 mov dword ptr [esp+14h],ecx - 100042E5: 75 08 jne 100042EF - 100042E7: 2B E8 sub ebp,eax - 100042E9: EB 04 jmp 100042EF - 100042EB: 8B 4C 24 14 mov ecx,dword ptr [esp+14h] - 100042EF: 83 FD 3C cmp ebp,3Ch - 100042F2: 76 67 jbe 1000435B - 100042F4: 2B 7C 24 20 sub edi,dword ptr [esp+20h] - 100042F8: 2B 5C 24 24 sub ebx,dword ptr [esp+24h] - 100042FC: 81 E7 FF FF FF 00 and edi,0FFFFFFh - 10004302: 81 E3 FF FF FF 00 and ebx,0FFFFFFh - 10004308: 85 C9 test ecx,ecx - 1000430A: 74 07 je 10004313 - 1000430C: 83 7C 24 3C 00 cmp dword ptr [esp+3Ch],0 - 10004311: 74 48 je 1000435B - 10004313: 0F B7 8E 64 45 00 movzx ecx,word ptr [esi+00004564h] - 00 - 1000431A: B8 E8 03 00 00 mov eax,3E8h - 1000431F: 66 3B C8 cmp cx,ax - 10004322: 73 24 jae 10004348 - 10004324: 0F B7 D1 movzx edx,cx - 10004327: C1 E2 04 shl edx,4 - 1000432A: 8D 84 32 DC 06 00 lea eax,[edx+esi+000006DCh] - 00 - 10004331: 41 inc ecx - 10004332: 66 89 8E 64 45 00 mov word ptr [esi+00004564h],cx - 00 - 10004339: 8B 4C 24 2C mov ecx,dword ptr [esp+2Ch] - 1000433D: 89 28 mov dword ptr [eax],ebp - 1000433F: 89 48 04 mov dword ptr [eax+4],ecx - 10004342: 89 78 08 mov dword ptr [eax+8],edi - 10004345: 89 58 0C mov dword ptr [eax+0Ch],ebx - 10004348: 83 7C 24 44 00 cmp dword ptr [esp+44h],0 - 1000434D: 74 0C je 1000435B - 1000434F: 39 6C 24 48 cmp dword ptr [esp+48h],ebp - 10004353: 1B C0 sbb eax,eax - 10004355: F7 D8 neg eax - 10004357: 89 44 24 40 mov dword ptr [esp+40h],eax - 1000435B: 8D 54 24 10 lea edx,[esp+10h] - 1000435F: 52 push edx - 10004360: 8D 44 24 40 lea eax,[esp+40h] - 10004364: 50 push eax - 10004365: 56 push esi - 10004366: E8 25 FC FF FF call 10003F90 - 1000436B: 83 C4 0C add esp,0Ch - 1000436E: 85 C0 test eax,eax - 10004370: 0F 85 EC FE FF FF jne 10004262 - 10004376: 5F pop edi - 10004377: 33 C0 xor eax,eax - 10004379: 39 44 24 0C cmp dword ptr [esp+0Ch],eax - 1000437D: 5E pop esi - 1000437E: 5D pop ebp - 1000437F: 0F 94 C0 sete al - 10004382: 5B pop ebx - 10004383: 83 C4 28 add esp,28h - 10004386: C3 ret - 10004387: CC int 3 - 10004388: CC int 3 - 10004389: CC int 3 - 1000438A: CC int 3 - 1000438B: CC int 3 - 1000438C: CC int 3 - 1000438D: CC int 3 - 1000438E: CC int 3 - 1000438F: CC int 3 - 10004390: 83 EC 18 sub esp,18h - 10004393: 56 push esi - 10004394: 57 push edi - 10004395: 8B 7C 24 24 mov edi,dword ptr [esp+24h] - 10004399: 8D 4C 24 24 lea ecx,[esp+24h] - 1000439D: 33 C0 xor eax,eax - 1000439F: 51 push ecx - 100043A0: 33 F6 xor esi,esi - 100043A2: 66 89 07 mov word ptr [edi],ax - 100043A5: E8 A6 52 00 00 call 10009650 - 100043AA: 83 C4 04 add esp,4 - 100043AD: 85 C0 test eax,eax - 100043AF: 74 6C je 1000441D - 100043B1: E8 DA EB FF FF call 10002F90 - 100043B6: 66 85 C0 test ax,ax - 100043B9: 74 62 je 1000441D - 100043BB: 6A 01 push 1 - 100043BD: 68 90 32 00 10 push 10003290h - 100043C2: 6A 04 push 4 - 100043C4: 8D 44 24 14 lea eax,[esp+14h] - 100043C8: 50 push eax - 100043C9: 6A 10 push 10h - 100043CB: 56 push esi - 100043CC: 8D 54 24 24 lea edx,[esp+24h] - 100043D0: 56 push esi - 100043D1: 6A 3C push 3Ch - 100043D3: 89 54 24 28 mov dword ptr [esp+28h],edx - 100043D7: E8 04 F2 FF FF call 100035E0 - 100043DC: 83 C4 20 add esp,20h - 100043DF: 85 C0 test eax,eax - 100043E1: 74 3A je 1000441D - 100043E3: E8 A8 EB FF FF call 10002F90 - 100043E8: 66 85 C0 test ax,ax - 100043EB: 74 30 je 1000441D - 100043ED: 8B 4C 24 24 mov ecx,dword ptr [esp+24h] - 100043F1: 56 push esi - 100043F2: 56 push esi - 100043F3: 81 C1 98 00 00 00 add ecx,98h - 100043F9: 51 push ecx - 100043FA: 8D 54 24 18 lea edx,[esp+18h] - 100043FE: 52 push edx - 100043FF: E8 CC FD FF FF call 100041D0 - 10004404: 8B 4C 24 34 mov ecx,dword ptr [esp+34h] - 10004408: 66 8B 91 FC 45 00 mov dx,word ptr [ecx+000045FCh] - 00 - 1000440F: 83 C4 10 add esp,10h - 10004412: 66 89 17 mov word ptr [edi],dx - 10004415: 5F pop edi - 10004416: 5E pop esi - 10004417: 83 C4 18 add esp,18h - 1000441A: C2 04 00 ret 4 - 1000441D: 5F pop edi - 1000441E: 66 8B C6 mov ax,si - 10004421: 5E pop esi - 10004422: 83 C4 18 add esp,18h - 10004425: C2 04 00 ret 4 - 10004428: CC int 3 - 10004429: CC int 3 - 1000442A: CC int 3 - 1000442B: CC int 3 - 1000442C: CC int 3 - 1000442D: CC int 3 - 1000442E: CC int 3 - 1000442F: CC int 3 - 10004430: 83 EC 18 sub esp,18h - 10004433: 56 push esi - 10004434: 57 push edi - 10004435: 8B 7C 24 28 mov edi,dword ptr [esp+28h] - 10004439: 8D 4C 24 28 lea ecx,[esp+28h] - 1000443D: 33 C0 xor eax,eax - 1000443F: 51 push ecx - 10004440: 33 F6 xor esi,esi - 10004442: 66 89 07 mov word ptr [edi],ax - 10004445: E8 06 52 00 00 call 10009650 - 1000444A: 83 C4 04 add esp,4 - 1000444D: 85 C0 test eax,eax - 1000444F: 74 71 je 100044C2 - 10004451: E8 3A EB FF FF call 10002F90 - 10004456: 66 85 C0 test ax,ax - 10004459: 74 67 je 100044C2 - 1000445B: 6A 01 push 1 - 1000445D: 68 90 32 00 10 push 10003290h - 10004462: 6A 04 push 4 - 10004464: 8D 44 24 14 lea eax,[esp+14h] - 10004468: 50 push eax - 10004469: 6A 10 push 10h - 1000446B: 56 push esi - 1000446C: 8D 54 24 24 lea edx,[esp+24h] - 10004470: 56 push esi - 10004471: 6A 3C push 3Ch - 10004473: 89 54 24 28 mov dword ptr [esp+28h],edx - 10004477: E8 64 F1 FF FF call 100035E0 - 1000447C: 83 C4 20 add esp,20h - 1000447F: 85 C0 test eax,eax - 10004481: 74 3F je 100044C2 - 10004483: E8 08 EB FF FF call 10002F90 - 10004488: 66 85 C0 test ax,ax - 1000448B: 74 35 je 100044C2 - 1000448D: 8B 4C 24 24 mov ecx,dword ptr [esp+24h] - 10004491: 8B 54 24 28 mov edx,dword ptr [esp+28h] - 10004495: 51 push ecx - 10004496: 6A 01 push 1 - 10004498: 81 C2 98 00 00 00 add edx,98h - 1000449E: 52 push edx - 1000449F: 8D 44 24 18 lea eax,[esp+18h] - 100044A3: 50 push eax - 100044A4: E8 27 FD FF FF call 100041D0 - 100044A9: 8B 4C 24 38 mov ecx,dword ptr [esp+38h] - 100044AD: 66 8B 91 FC 45 00 mov dx,word ptr [ecx+000045FCh] - 00 - 100044B4: 83 C4 10 add esp,10h - 100044B7: 66 89 17 mov word ptr [edi],dx - 100044BA: 5F pop edi - 100044BB: 5E pop esi - 100044BC: 83 C4 18 add esp,18h - 100044BF: C2 08 00 ret 8 - 100044C2: 5F pop edi - 100044C3: 66 8B C6 mov ax,si - 100044C6: 5E pop esi - 100044C7: 83 C4 18 add esp,18h - 100044CA: C2 08 00 ret 8 - 100044CD: CC int 3 - 100044CE: CC int 3 - 100044CF: CC int 3 - 100044D0: 83 EC 34 sub esp,34h - 100044D3: 8B 4C 24 3C mov ecx,dword ptr [esp+3Ch] - 100044D7: 8B 44 24 38 mov eax,dword ptr [esp+38h] - 100044DB: 8B 54 24 40 mov edx,dword ptr [esp+40h] - 100044DF: 89 4C 24 04 mov dword ptr [esp+4],ecx - 100044E3: 8B 4C 24 48 mov ecx,dword ptr [esp+48h] - 100044E7: 89 4C 24 10 mov dword ptr [esp+10h],ecx - 100044EB: 8B 4C 24 54 mov ecx,dword ptr [esp+54h] - 100044EF: 6A 01 push 1 - 100044F1: 68 20 34 00 10 push 10003420h - 100044F6: 89 4C 24 24 mov dword ptr [esp+24h],ecx - 100044FA: 8B 4C 24 68 mov ecx,dword ptr [esp+68h] - 100044FE: 89 44 24 08 mov dword ptr [esp+8],eax - 10004502: 8B 44 24 4C mov eax,dword ptr [esp+4Ch] - 10004506: 6A 34 push 34h - 10004508: 89 4C 24 34 mov dword ptr [esp+34h],ecx - 1000450C: 89 54 24 14 mov dword ptr [esp+14h],edx - 10004510: 8B 54 24 58 mov edx,dword ptr [esp+58h] - 10004514: 89 44 24 18 mov dword ptr [esp+18h],eax - 10004518: 8B 44 24 5C mov eax,dword ptr [esp+5Ch] - 1000451C: 8D 4C 24 0C lea ecx,[esp+0Ch] - 10004520: 51 push ecx - 10004521: 6A 14 push 14h - 10004523: 89 54 24 28 mov dword ptr [esp+28h],edx - 10004527: 8B 54 24 6C mov edx,dword ptr [esp+6Ch] - 1000452B: 89 44 24 2C mov dword ptr [esp+2Ch],eax - 1000452F: 8B 44 24 70 mov eax,dword ptr [esp+70h] - 10004533: 6A 00 push 0 - 10004535: 89 54 24 38 mov dword ptr [esp+38h],edx - 10004539: 8B 54 24 7C mov edx,dword ptr [esp+7Ch] - 1000453D: 89 44 24 3C mov dword ptr [esp+3Ch],eax - 10004541: 8B 84 24 80 00 00 mov eax,dword ptr [esp+00000080h] - 00 - 10004548: 6A 00 push 0 - 1000454A: 6A 10 push 10h - 1000454C: 89 54 24 4C mov dword ptr [esp+4Ch],edx - 10004550: 89 44 24 50 mov dword ptr [esp+50h],eax - 10004554: E8 87 F0 FF FF call 100035E0 - 10004559: 83 C4 54 add esp,54h - 1000455C: C2 34 00 ret 34h - 1000455F: CC int 3 - 10004560: 83 EC 10 sub esp,10h - 10004563: 8A 4C 24 18 mov cl,byte ptr [esp+18h] - 10004567: 8B 44 24 14 mov eax,dword ptr [esp+14h] - 1000456B: 8B 54 24 1C mov edx,dword ptr [esp+1Ch] - 1000456F: 6A 01 push 1 - 10004571: 68 40 34 00 10 push 10003440h - 10004576: 6A 10 push 10h - 10004578: 88 4C 24 10 mov byte ptr [esp+10h],cl - 1000457C: 8D 4C 24 0C lea ecx,[esp+0Ch] - 10004580: 51 push ecx - 10004581: 6A 18 push 18h - 10004583: 6A 00 push 0 - 10004585: 89 44 24 18 mov dword ptr [esp+18h],eax - 10004589: 8A 44 24 38 mov al,byte ptr [esp+38h] - 1000458D: 6A 00 push 0 - 1000458F: 6A 11 push 11h - 10004591: 89 54 24 28 mov dword ptr [esp+28h],edx - 10004595: 88 44 24 2C mov byte ptr [esp+2Ch],al - 10004599: E8 42 F0 FF FF call 100035E0 - 1000459E: 83 C4 30 add esp,30h - 100045A1: C2 10 00 ret 10h - 100045A4: CC int 3 - 100045A5: CC int 3 - 100045A6: CC int 3 - 100045A7: CC int 3 - 100045A8: CC int 3 - 100045A9: CC int 3 - 100045AA: CC int 3 - 100045AB: CC int 3 - 100045AC: CC int 3 - 100045AD: CC int 3 - 100045AE: CC int 3 - 100045AF: CC int 3 - 100045B0: 83 EC 1C sub esp,1Ch - 100045B3: 8A 4C 24 38 mov cl,byte ptr [esp+38h] - 100045B7: 8B 44 24 34 mov eax,dword ptr [esp+34h] - 100045BB: 8B 54 24 30 mov edx,dword ptr [esp+30h] - 100045BF: 6A 01 push 1 - 100045C1: 68 60 34 00 10 push 10003460h - 100045C6: 88 4C 24 0C mov byte ptr [esp+0Ch],cl - 100045CA: 8B 4C 24 2C mov ecx,dword ptr [esp+2Ch] - 100045CE: 6A 1C push 1Ch - 100045D0: 89 4C 24 1C mov dword ptr [esp+1Ch],ecx - 100045D4: 8D 4C 24 0C lea ecx,[esp+0Ch] - 100045D8: 51 push ecx - 100045D9: 6A 0C push 0Ch - 100045DB: 89 44 24 14 mov dword ptr [esp+14h],eax - 100045DF: 8B 44 24 34 mov eax,dword ptr [esp+34h] - 100045E3: 6A 00 push 0 - 100045E5: 89 54 24 20 mov dword ptr [esp+20h],edx - 100045E9: 8B 54 24 40 mov edx,dword ptr [esp+40h] - 100045ED: 89 44 24 24 mov dword ptr [esp+24h],eax - 100045F1: 8B 44 24 44 mov eax,dword ptr [esp+44h] - 100045F5: 6A 00 push 0 - 100045F7: 6A 12 push 12h - 100045F9: 89 54 24 34 mov dword ptr [esp+34h],edx - 100045FD: 89 44 24 38 mov dword ptr [esp+38h],eax - 10004601: E8 DA EF FF FF call 100035E0 - 10004606: 83 C4 3C add esp,3Ch - 10004609: C2 1C 00 ret 1Ch - 1000460C: CC int 3 - 1000460D: CC int 3 - 1000460E: CC int 3 - 1000460F: CC int 3 - 10004610: 81 EC C4 00 00 00 sub esp,0C4h - 10004616: 8B 84 24 C8 00 00 mov eax,dword ptr [esp+000000C8h] - 00 - 1000461D: 55 push ebp - 1000461E: 8B AC 24 D4 00 00 mov ebp,dword ptr [esp+000000D4h] - 00 - 10004625: 89 44 24 08 mov dword ptr [esp+8],eax - 10004629: E8 62 E9 FF FF call 10002F90 - 1000462E: 0F B7 C0 movzx eax,ax - 10004631: 66 85 C0 test ax,ax - 10004634: 0F 84 11 01 00 00 je 1000474B - 1000463A: 6A 01 push 1 - 1000463C: 68 80 34 00 10 push 10003480h - 10004641: 6A 04 push 4 - 10004643: 8D 54 24 10 lea edx,[esp+10h] - 10004647: 52 push edx - 10004648: 6A 30 push 30h - 1000464A: 6A 00 push 0 - 1000464C: 8D 4C 24 24 lea ecx,[esp+24h] - 10004650: 6A 00 push 0 - 10004652: 6A 13 push 13h - 10004654: 89 4C 24 24 mov dword ptr [esp+24h],ecx - 10004658: E8 83 EF FF FF call 100035E0 - 1000465D: 0F B7 C0 movzx eax,ax - 10004660: 83 C4 20 add esp,20h - 10004663: 66 85 C0 test ax,ax - 10004666: 0F 84 DF 00 00 00 je 1000474B - 1000466C: E8 1F E9 FF FF call 10002F90 - 10004671: 0F B7 C0 movzx eax,ax - 10004674: 66 85 C0 test ax,ax - 10004677: 0F 84 CE 00 00 00 je 1000474B - 1000467D: 6A 01 push 1 - 1000467F: 68 A0 34 00 10 push 100034A0h - 10004684: 6A 04 push 4 - 10004686: 8D 4C 24 10 lea ecx,[esp+10h] - 1000468A: 51 push ecx - 1000468B: 6A 2E push 2Eh - 1000468D: 6A 00 push 0 - 1000468F: 8D 44 24 24 lea eax,[esp+24h] - 10004693: 6A 00 push 0 - 10004695: 6A 19 push 19h - 10004697: 89 44 24 24 mov dword ptr [esp+24h],eax - 1000469B: E8 40 EF FF FF call 100035E0 - 100046A0: 0F B7 C0 movzx eax,ax - 100046A3: 83 C4 20 add esp,20h - 100046A6: 66 85 C0 test ax,ax - 100046A9: 0F 84 9C 00 00 00 je 1000474B - 100046AF: E8 DC E8 FF FF call 10002F90 - 100046B4: 0F B7 C0 movzx eax,ax - 100046B7: 89 44 24 04 mov dword ptr [esp+4],eax - 100046BB: 66 85 C0 test ax,ax - 100046BE: 0F 84 87 00 00 00 je 1000474B - 100046C4: 8A 4C 24 68 mov cl,byte ptr [esp+68h] - 100046C8: 53 push ebx - 100046C9: 56 push esi - 100046CA: 57 push edi - 100046CB: 8D 54 24 78 lea edx,[esp+78h] - 100046CF: BE 17 00 00 00 mov esi,17h - 100046D4: 0F B6 F9 movzx edi,cl - 100046D7: 8B 7C BC 18 mov edi,dword ptr [esp+edi*4+18h] - 100046DB: 89 3A mov dword ptr [edx],edi - 100046DD: 84 C9 test cl,cl - 100046DF: 75 04 jne 100046E5 - 100046E1: B1 16 mov cl,16h - 100046E3: EB 02 jmp 100046E7 - 100046E5: FE C9 dec cl - 100046E7: 83 C2 04 add edx,4 - 100046EA: 83 EE 01 sub esi,1 - 100046ED: 75 E5 jne 100046D4 - 100046EF: 8B 94 24 E4 00 00 mov edx,dword ptr [esp+000000E4h] - 00 - 100046F6: 8D 7E 17 lea edi,[esi+17h] - 100046F9: 8B B4 24 DC 00 00 mov esi,dword ptr [esp+000000DCh] - 00 - 10004700: 8D 4C 24 7A lea ecx,[esp+7Ah] - 10004704: 66 83 FE 04 cmp si,4 - 10004708: 72 23 jb 1000472D - 1000470A: 0F B6 59 FF movzx ebx,byte ptr [ecx-1] - 1000470E: 0F B7 01 movzx eax,word ptr [ecx] - 10004711: C1 E3 10 shl ebx,10h - 10004714: 0B D8 or ebx,eax - 10004716: 8B 44 24 14 mov eax,dword ptr [esp+14h] - 1000471A: 89 18 mov dword ptr [eax],ebx - 1000471C: 83 C0 04 add eax,4 - 1000471F: 89 44 24 14 mov dword ptr [esp+14h],eax - 10004723: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 10004727: 81 C6 FC FF 00 00 add esi,0FFFCh - 1000472D: 66 83 FA 01 cmp dx,1 - 10004731: 72 0D jb 10004740 - 10004733: 8A 59 FE mov bl,byte ptr [ecx-2] - 10004736: 88 5D 00 mov byte ptr [ebp],bl - 10004739: 45 inc ebp - 1000473A: 81 C2 FF FF 00 00 add edx,0FFFFh - 10004740: 83 C1 04 add ecx,4 - 10004743: 83 EF 01 sub edi,1 - 10004746: 75 BC jne 10004704 - 10004748: 5F pop edi - 10004749: 5E pop esi - 1000474A: 5B pop ebx - 1000474B: 5D pop ebp - 1000474C: 81 C4 C4 00 00 00 add esp,0C4h - 10004752: C2 10 00 ret 10h - 10004755: CC int 3 - 10004756: CC int 3 - 10004757: CC int 3 - 10004758: CC int 3 - 10004759: CC int 3 - 1000475A: CC int 3 - 1000475B: CC int 3 - 1000475C: CC int 3 - 1000475D: CC int 3 - 1000475E: CC int 3 - 1000475F: CC int 3 - 10004760: 83 EC 08 sub esp,8 - 10004763: 8B 44 24 0C mov eax,dword ptr [esp+0Ch] - 10004767: 66 8B 4C 24 10 mov cx,word ptr [esp+10h] - 1000476C: 6A 01 push 1 - 1000476E: 68 C0 34 00 10 push 100034C0h - 10004773: 6A 08 push 8 - 10004775: 8D 54 24 0C lea edx,[esp+0Ch] - 10004779: 52 push edx - 1000477A: 6A 30 push 30h - 1000477C: 6A 00 push 0 - 1000477E: 6A 00 push 0 - 10004780: 6A 14 push 14h - 10004782: 89 44 24 20 mov dword ptr [esp+20h],eax - 10004786: 66 89 4C 24 24 mov word ptr [esp+24h],cx - 1000478B: E8 50 EE FF FF call 100035E0 - 10004790: 83 C4 28 add esp,28h - 10004793: C2 08 00 ret 8 - 10004796: CC int 3 - 10004797: CC int 3 - 10004798: CC int 3 - 10004799: CC int 3 - 1000479A: CC int 3 - 1000479B: CC int 3 - 1000479C: CC int 3 - 1000479D: CC int 3 - 1000479E: CC int 3 - 1000479F: CC int 3 - 100047A0: 83 EC 5C sub esp,5Ch - 100047A3: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 100047A8: 33 C4 xor eax,esp - 100047AA: 89 44 24 58 mov dword ptr [esp+58h],eax - 100047AE: 8B 44 24 68 mov eax,dword ptr [esp+68h] - 100047B2: 66 8B 54 24 60 mov dx,word ptr [esp+60h] - 100047B7: 8B 4C 24 70 mov ecx,dword ptr [esp+70h] - 100047BB: 89 44 24 08 mov dword ptr [esp+8],eax - 100047BF: 66 8B 44 24 6C mov ax,word ptr [esp+6Ch] - 100047C4: 53 push ebx - 100047C5: 66 8B 5C 24 68 mov bx,word ptr [esp+68h] - 100047CA: 66 89 54 24 08 mov word ptr [esp+8],dx - 100047CF: 88 54 24 04 mov byte ptr [esp+4],dl - 100047D3: 8D 54 24 1C lea edx,[esp+1Ch] - 100047D7: 66 89 44 24 10 mov word ptr [esp+10h],ax - 100047DC: 89 4C 24 14 mov dword ptr [esp+14h],ecx - 100047E0: 66 8B 4C 24 78 mov cx,word ptr [esp+78h] - 100047E5: 52 push edx - 100047E6: 8D 44 24 08 lea eax,[esp+8] - 100047EA: 50 push eax - 100047EB: 66 89 5C 24 12 mov word ptr [esp+12h],bx - 100047F0: 66 89 4C 24 20 mov word ptr [esp+20h],cx - 100047F5: 88 5C 24 0D mov byte ptr [esp+0Dh],bl - 100047F9: E8 82 2B 00 00 call 10007380 - 100047FE: 6A 01 push 1 - 10004800: 68 E0 34 00 10 push 100034E0h - 10004805: 02 DB add bl,bl - 10004807: 6A 14 push 14h - 10004809: 02 DB add bl,bl - 1000480B: 02 DB add bl,bl - 1000480D: 8D 4C 24 1C lea ecx,[esp+1Ch] - 10004811: 51 push ecx - 10004812: 0F B6 D3 movzx edx,bl - 10004815: 52 push edx - 10004816: 6A 02 push 2 - 10004818: 8D 44 24 3C lea eax,[esp+3Ch] - 1000481C: 50 push eax - 1000481D: 6A 15 push 15h - 1000481F: E8 BC ED FF FF call 100035E0 - 10004824: 8B 8C 24 84 00 00 mov ecx,dword ptr [esp+00000084h] - 00 - 1000482B: 83 C4 28 add esp,28h - 1000482E: 5B pop ebx - 1000482F: 33 CC xor ecx,esp - 10004831: E8 65 58 00 00 call 1000A09B - 10004836: 83 C4 5C add esp,5Ch - 10004839: C2 18 00 ret 18h - 1000483C: CC int 3 - 1000483D: CC int 3 - 1000483E: CC int 3 - 1000483F: CC int 3 - 10004840: 6A 01 push 1 - 10004842: 6A 00 push 0 - 10004844: 6A 00 push 0 - 10004846: 6A 00 push 0 - 10004848: 6A 00 push 0 - 1000484A: 6A 00 push 0 - 1000484C: 6A 00 push 0 - 1000484E: 6A 1A push 1Ah - 10004850: E8 8B ED FF FF call 100035E0 - 10004855: 83 C4 20 add esp,20h - 10004858: C3 ret - 10004859: CC int 3 - 1000485A: CC int 3 - 1000485B: CC int 3 - 1000485C: CC int 3 - 1000485D: CC int 3 - 1000485E: CC int 3 - 1000485F: CC int 3 - 10004860: 83 EC 4C sub esp,4Ch - 10004863: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10004868: 33 C4 xor eax,esp - 1000486A: 89 44 24 48 mov dword ptr [esp+48h],eax - 1000486E: 8B 44 24 50 mov eax,dword ptr [esp+50h] - 10004872: 8B 4C 24 54 mov ecx,dword ptr [esp+54h] - 10004876: 8D 54 24 08 lea edx,[esp+8] - 1000487A: 89 04 24 mov dword ptr [esp],eax - 1000487D: 52 push edx - 1000487E: 8D 44 24 04 lea eax,[esp+4] - 10004882: 50 push eax - 10004883: 89 4C 24 0C mov dword ptr [esp+0Ch],ecx - 10004887: E8 24 2A 00 00 call 100072B0 - 1000488C: 6A 01 push 1 - 1000488E: 6A 00 push 0 - 10004890: 6A 00 push 0 - 10004892: 6A 00 push 0 - 10004894: 6A 00 push 0 - 10004896: 6A 08 push 8 - 10004898: 8D 4C 24 28 lea ecx,[esp+28h] - 1000489C: 51 push ecx - 1000489D: 6A 1B push 1Bh - 1000489F: E8 3C ED FF FF call 100035E0 - 100048A4: 8B 4C 24 70 mov ecx,dword ptr [esp+70h] - 100048A8: 83 C4 28 add esp,28h - 100048AB: 33 CC xor ecx,esp - 100048AD: E8 E9 57 00 00 call 1000A09B - 100048B2: 83 C4 4C add esp,4Ch - 100048B5: C2 08 00 ret 8 - 100048B8: CC int 3 - 100048B9: CC int 3 - 100048BA: CC int 3 - 100048BB: CC int 3 - 100048BC: CC int 3 - 100048BD: CC int 3 - 100048BE: CC int 3 - 100048BF: CC int 3 - 100048C0: 83 EC 48 sub esp,48h - 100048C3: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 100048C8: 33 C4 xor eax,esp - 100048CA: 89 44 24 44 mov dword ptr [esp+44h],eax - 100048CE: 66 8B 44 24 4C mov ax,word ptr [esp+4Ch] - 100048D3: 8A 4C 24 50 mov cl,byte ptr [esp+50h] - 100048D7: 8D 54 24 04 lea edx,[esp+4] - 100048DB: 66 89 04 24 mov word ptr [esp],ax - 100048DF: 52 push edx - 100048E0: 8D 44 24 04 lea eax,[esp+4] - 100048E4: 50 push eax - 100048E5: 88 4C 24 0A mov byte ptr [esp+0Ah],cl - 100048E9: E8 12 2A 00 00 call 10007300 - 100048EE: 6A 01 push 1 - 100048F0: 6A 00 push 0 - 100048F2: 6A 00 push 0 - 100048F4: 6A 00 push 0 - 100048F6: 6A 00 push 0 - 100048F8: 6A 03 push 3 - 100048FA: 8D 4C 24 24 lea ecx,[esp+24h] - 100048FE: 51 push ecx - 100048FF: 6A 41 push 41h - 10004901: E8 DA EC FF FF call 100035E0 - 10004906: 8B 4C 24 6C mov ecx,dword ptr [esp+6Ch] - 1000490A: 83 C4 28 add esp,28h - 1000490D: 33 CC xor ecx,esp - 1000490F: E8 87 57 00 00 call 1000A09B - 10004914: 83 C4 48 add esp,48h - 10004917: C2 08 00 ret 8 - 1000491A: CC int 3 - 1000491B: CC int 3 - 1000491C: CC int 3 - 1000491D: CC int 3 - 1000491E: CC int 3 - 1000491F: CC int 3 - 10004920: 6A 01 push 1 - 10004922: 6A 00 push 0 - 10004924: 6A 00 push 0 - 10004926: 6A 00 push 0 - 10004928: 6A 00 push 0 - 1000492A: 6A 00 push 0 - 1000492C: 6A 00 push 0 - 1000492E: 6A 1C push 1Ch - 10004930: E8 AB EC FF FF call 100035E0 - 10004935: 83 C4 20 add esp,20h - 10004938: C3 ret - 10004939: CC int 3 - 1000493A: CC int 3 - 1000493B: CC int 3 - 1000493C: CC int 3 - 1000493D: CC int 3 - 1000493E: CC int 3 - 1000493F: CC int 3 - 10004940: 83 EC 4C sub esp,4Ch - 10004943: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10004948: 33 C4 xor eax,esp - 1000494A: 89 44 24 48 mov dword ptr [esp+48h],eax - 1000494E: 8B 44 24 50 mov eax,dword ptr [esp+50h] - 10004952: 8B 4C 24 54 mov ecx,dword ptr [esp+54h] - 10004956: 8D 54 24 08 lea edx,[esp+8] - 1000495A: 89 04 24 mov dword ptr [esp],eax - 1000495D: 52 push edx - 1000495E: 8D 44 24 04 lea eax,[esp+4] - 10004962: 50 push eax - 10004963: 89 4C 24 0C mov dword ptr [esp+0Ch],ecx - 10004967: E8 44 29 00 00 call 100072B0 - 1000496C: 6A 01 push 1 - 1000496E: 6A 00 push 0 - 10004970: 6A 00 push 0 - 10004972: 6A 00 push 0 - 10004974: 6A 00 push 0 - 10004976: 6A 08 push 8 - 10004978: 8D 4C 24 28 lea ecx,[esp+28h] - 1000497C: 51 push ecx - 1000497D: 6A 1D push 1Dh - 1000497F: E8 5C EC FF FF call 100035E0 - 10004984: 8B 4C 24 70 mov ecx,dword ptr [esp+70h] - 10004988: 83 C4 28 add esp,28h - 1000498B: 33 CC xor ecx,esp - 1000498D: E8 09 57 00 00 call 1000A09B - 10004992: 83 C4 4C add esp,4Ch - 10004995: C2 08 00 ret 8 - 10004998: CC int 3 - 10004999: CC int 3 - 1000499A: CC int 3 - 1000499B: CC int 3 - 1000499C: CC int 3 - 1000499D: CC int 3 - 1000499E: CC int 3 - 1000499F: CC int 3 - 100049A0: 6A 01 push 1 - 100049A2: 6A 00 push 0 - 100049A4: 6A 00 push 0 - 100049A6: 6A 00 push 0 - 100049A8: 6A 00 push 0 - 100049AA: 6A 00 push 0 - 100049AC: 6A 00 push 0 - 100049AE: 6A 1E push 1Eh - 100049B0: E8 2B EC FF FF call 100035E0 - 100049B5: 83 C4 20 add esp,20h - 100049B8: C3 ret - 100049B9: CC int 3 - 100049BA: CC int 3 - 100049BB: CC int 3 - 100049BC: CC int 3 - 100049BD: CC int 3 - 100049BE: CC int 3 - 100049BF: CC int 3 - 100049C0: 83 EC 44 sub esp,44h - 100049C3: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 100049C8: 33 C4 xor eax,esp - 100049CA: 89 44 24 40 mov dword ptr [esp+40h],eax - 100049CE: 8D 04 24 lea eax,[esp] - 100049D1: 50 push eax - 100049D2: 8D 4C 24 4C lea ecx,[esp+4Ch] - 100049D6: 51 push ecx - 100049D7: E8 64 28 00 00 call 10007240 - 100049DC: 6A 01 push 1 - 100049DE: 6A 00 push 0 - 100049E0: 6A 00 push 0 - 100049E2: 6A 00 push 0 - 100049E4: 6A 00 push 0 - 100049E6: 6A 04 push 4 - 100049E8: 8D 54 24 20 lea edx,[esp+20h] - 100049EC: 52 push edx - 100049ED: 6A 20 push 20h - 100049EF: E8 EC EB FF FF call 100035E0 - 100049F4: 8B 4C 24 68 mov ecx,dword ptr [esp+68h] - 100049F8: 83 C4 28 add esp,28h - 100049FB: 33 CC xor ecx,esp - 100049FD: E8 99 56 00 00 call 1000A09B - 10004A02: 83 C4 44 add esp,44h - 10004A05: C2 04 00 ret 4 - 10004A08: CC int 3 - 10004A09: CC int 3 - 10004A0A: CC int 3 - 10004A0B: CC int 3 - 10004A0C: CC int 3 - 10004A0D: CC int 3 - 10004A0E: CC int 3 - 10004A0F: CC int 3 - 10004A10: 83 EC 54 sub esp,54h - 10004A13: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10004A18: 33 C4 xor eax,esp - 10004A1A: 89 44 24 50 mov dword ptr [esp+50h],eax - 10004A1E: 8B 4C 24 5C mov ecx,dword ptr [esp+5Ch] - 10004A22: 8B 54 24 60 mov edx,dword ptr [esp+60h] - 10004A26: 8B 44 24 58 mov eax,dword ptr [esp+58h] - 10004A2A: 89 4C 24 04 mov dword ptr [esp+4],ecx - 10004A2E: 8D 4C 24 10 lea ecx,[esp+10h] - 10004A32: 89 54 24 08 mov dword ptr [esp+8],edx - 10004A36: 89 04 24 mov dword ptr [esp],eax - 10004A39: 51 push ecx - 10004A3A: 8D 54 24 04 lea edx,[esp+4] - 10004A3E: 33 C0 xor eax,eax - 10004A40: 52 push edx - 10004A41: 66 89 44 24 14 mov word ptr [esp+14h],ax - 10004A46: E8 F5 24 00 00 call 10006F40 - 10004A4B: 6A 01 push 1 - 10004A4D: 6A 00 push 0 - 10004A4F: 6A 00 push 0 - 10004A51: 6A 00 push 0 - 10004A53: 6A 00 push 0 - 10004A55: 6A 0E push 0Eh - 10004A57: 8D 44 24 30 lea eax,[esp+30h] - 10004A5B: 50 push eax - 10004A5C: 6A 21 push 21h - 10004A5E: E8 7D EB FF FF call 100035E0 - 10004A63: 8B 4C 24 78 mov ecx,dword ptr [esp+78h] - 10004A67: 83 C4 28 add esp,28h - 10004A6A: 33 CC xor ecx,esp - 10004A6C: E8 2A 56 00 00 call 1000A09B - 10004A71: 83 C4 54 add esp,54h - 10004A74: C2 0C 00 ret 0Ch - 10004A77: CC int 3 - 10004A78: CC int 3 - 10004A79: CC int 3 - 10004A7A: CC int 3 - 10004A7B: CC int 3 - 10004A7C: CC int 3 - 10004A7D: CC int 3 - 10004A7E: CC int 3 - 10004A7F: CC int 3 - 10004A80: 83 EC 60 sub esp,60h - 10004A83: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10004A88: 33 C4 xor eax,esp - 10004A8A: 89 44 24 5C mov dword ptr [esp+5Ch],eax - 10004A8E: 8B 4C 24 68 mov ecx,dword ptr [esp+68h] - 10004A92: 8B 54 24 6C mov edx,dword ptr [esp+6Ch] - 10004A96: 8B 44 24 64 mov eax,dword ptr [esp+64h] - 10004A9A: 89 4C 24 08 mov dword ptr [esp+8],ecx - 10004A9E: 8B 4C 24 74 mov ecx,dword ptr [esp+74h] - 10004AA2: 89 54 24 10 mov dword ptr [esp+10h],edx - 10004AA6: 8B 54 24 78 mov edx,dword ptr [esp+78h] - 10004AAA: 89 04 24 mov dword ptr [esp],eax - 10004AAD: 8B 44 24 70 mov eax,dword ptr [esp+70h] - 10004AB1: 89 4C 24 0C mov dword ptr [esp+0Ch],ecx - 10004AB5: 8D 4C 24 1C lea ecx,[esp+1Ch] - 10004AB9: 89 54 24 14 mov dword ptr [esp+14h],edx - 10004ABD: 89 44 24 04 mov dword ptr [esp+4],eax - 10004AC1: 51 push ecx - 10004AC2: 8D 54 24 04 lea edx,[esp+4] - 10004AC6: 33 C0 xor eax,eax - 10004AC8: 52 push edx - 10004AC9: 66 89 44 24 20 mov word ptr [esp+20h],ax - 10004ACE: E8 ED 24 00 00 call 10006FC0 - 10004AD3: 6A 01 push 1 - 10004AD5: 6A 00 push 0 - 10004AD7: 6A 00 push 0 - 10004AD9: 6A 00 push 0 - 10004ADB: 6A 00 push 0 - 10004ADD: 6A 1A push 1Ah - 10004ADF: 8D 44 24 3C lea eax,[esp+3Ch] - 10004AE3: 50 push eax - 10004AE4: 6A 22 push 22h - 10004AE6: E8 F5 EA FF FF call 100035E0 - 10004AEB: 8B 8C 24 84 00 00 mov ecx,dword ptr [esp+00000084h] - 00 - 10004AF2: 83 C4 28 add esp,28h - 10004AF5: 33 CC xor ecx,esp - 10004AF7: E8 9F 55 00 00 call 1000A09B - 10004AFC: 83 C4 60 add esp,60h - 10004AFF: C2 18 00 ret 18h - 10004B02: CC int 3 - 10004B03: CC int 3 - 10004B04: CC int 3 - 10004B05: CC int 3 - 10004B06: CC int 3 - 10004B07: CC int 3 - 10004B08: CC int 3 - 10004B09: CC int 3 - 10004B0A: CC int 3 - 10004B0B: CC int 3 - 10004B0C: CC int 3 - 10004B0D: CC int 3 - 10004B0E: CC int 3 - 10004B0F: CC int 3 - 10004B10: 83 EC 70 sub esp,70h - 10004B13: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10004B18: 33 C4 xor eax,esp - 10004B1A: 89 44 24 6C mov dword ptr [esp+6Ch],eax - 10004B1E: 53 push ebx - 10004B1F: 55 push ebp - 10004B20: 56 push esi - 10004B21: 57 push edi - 10004B22: 8B BC 24 84 00 00 mov edi,dword ptr [esp+00000084h] - 00 - 10004B29: 33 DB xor ebx,ebx - 10004B2B: 66 83 BC 24 88 00 cmp word ptr [esp+00000088h],0Ch - 00 00 0C - 10004B34: 8B F7 mov esi,edi - 10004B36: 89 5C 24 14 mov dword ptr [esp+14h],ebx - 10004B3A: 0F 85 46 01 00 00 jne 10004C86 - 10004B40: 8B AC 24 90 00 00 mov ebp,dword ptr [esp+00000090h] - 00 - 10004B47: 66 83 FD 0C cmp bp,0Ch - 10004B4B: 0F 85 35 01 00 00 jne 10004C86 - 10004B51: 8D 44 24 10 lea eax,[esp+10h] - 10004B55: 50 push eax - 10004B56: 8D 4C 24 20 lea ecx,[esp+20h] - 10004B5A: 51 push ecx - 10004B5B: 8D 54 24 20 lea edx,[esp+20h] - 10004B5F: 52 push edx - 10004B60: 8D 44 24 2C lea eax,[esp+2Ch] - 10004B64: 50 push eax - 10004B65: E8 16 E5 FF FF call 10003080 - 10004B6A: 66 85 C0 test ax,ax - 10004B6D: 0F 84 20 01 00 00 je 10004C93 - 10004B73: F6 44 24 10 40 test byte ptr [esp+10h],40h - 10004B78: 8B 94 24 8C 00 00 mov edx,dword ptr [esp+0000008Ch] - 00 - 10004B7F: 74 6D je 10004BEE - 10004B81: 8B CA mov ecx,edx - 10004B83: 2B CF sub ecx,edi - 10004B85: 8D 6B 0C lea ebp,[ebx+0Ch] - 10004B88: 8A 06 mov al,byte ptr [esi] - 10004B8A: 8A D8 mov bl,al - 10004B8C: 80 CB 8F or bl,8Fh - 10004B8F: 80 FB 8F cmp bl,8Fh - 10004B92: 74 1B je 10004BAF - 10004B94: A8 02 test al,2 - 10004B96: 74 17 je 10004BAF - 10004B98: A8 04 test al,4 - 10004B9A: 74 13 je 10004BAF - 10004B9C: A8 01 test al,1 - 10004B9E: 74 0F je 10004BAF - 10004BA0: A8 08 test al,8 - 10004BA2: 75 0B jne 10004BAF - 10004BA4: 8A 04 31 mov al,byte ptr [ecx+esi] - 10004BA7: 84 C0 test al,al - 10004BA9: 74 0C je 10004BB7 - 10004BAB: 3C 96 cmp al,96h - 10004BAD: 73 08 jae 10004BB7 - 10004BAF: C7 44 24 14 01 00 mov dword ptr [esp+14h],1 - 00 00 - 10004BB7: 46 inc esi - 10004BB8: 83 ED 01 sub ebp,1 - 10004BBB: 75 CB jne 10004B88 - 10004BBD: 39 6C 24 14 cmp dword ptr [esp+14h],ebp - 10004BC1: 74 24 je 10004BE7 - 10004BC3: 55 push ebp - 10004BC4: 6A 1C push 1Ch - 10004BC6: 6A 02 push 2 - 10004BC8: E8 A3 4A 00 00 call 10009670 - 10004BCD: 83 C4 0C add esp,0Ch - 10004BD0: 5F pop edi - 10004BD1: 5E pop esi - 10004BD2: 5D pop ebp - 10004BD3: 33 C0 xor eax,eax - 10004BD5: 5B pop ebx - 10004BD6: 8B 4C 24 6C mov ecx,dword ptr [esp+6Ch] - 10004BDA: 33 CC xor ecx,esp - 10004BDC: E8 BA 54 00 00 call 1000A09B - 10004BE1: 83 C4 70 add esp,70h - 10004BE4: C2 10 00 ret 10h - 10004BE7: 8B AC 24 90 00 00 mov ebp,dword ptr [esp+00000090h] - 00 - 10004BEE: 8B F2 mov esi,edx - 10004BF0: 8D 44 24 25 lea eax,[esp+25h] - 10004BF4: BA 0C 00 00 00 mov edx,0Ch - 10004BF9: 8D A4 24 00 00 00 lea esp,[esp+00000000h] - 00 - 10004C00: 8B 8C 24 88 00 00 mov ecx,dword ptr [esp+00000088h] - 00 - 10004C07: 66 8B D9 mov bx,cx - 10004C0A: 81 C1 FF FF 00 00 add ecx,0FFFFh - 10004C10: 89 8C 24 88 00 00 mov dword ptr [esp+00000088h],ecx - 00 - 10004C17: 66 85 DB test bx,bx - 10004C1A: 76 06 jbe 10004C22 - 10004C1C: 0F B6 0F movzx ecx,byte ptr [edi] - 10004C1F: 47 inc edi - 10004C20: EB 02 jmp 10004C24 - 10004C22: 33 C9 xor ecx,ecx - 10004C24: 88 48 FF mov byte ptr [eax-1],cl - 10004C27: 66 8B CD mov cx,bp - 10004C2A: 81 C5 FF FF 00 00 add ebp,0FFFFh - 10004C30: 66 85 C9 test cx,cx - 10004C33: 76 06 jbe 10004C3B - 10004C35: 0F B6 0E movzx ecx,byte ptr [esi] - 10004C38: 46 inc esi - 10004C39: EB 02 jmp 10004C3D - 10004C3B: 33 C9 xor ecx,ecx - 10004C3D: 88 08 mov byte ptr [eax],cl - 10004C3F: 83 C0 02 add eax,2 - 10004C42: 83 EA 01 sub edx,1 - 10004C45: 75 B9 jne 10004C00 - 10004C47: 8D 54 24 3C lea edx,[esp+3Ch] - 10004C4B: 52 push edx - 10004C4C: 8D 44 24 28 lea eax,[esp+28h] - 10004C50: 50 push eax - 10004C51: E8 4A 24 00 00 call 100070A0 - 10004C56: 6A 01 push 1 - 10004C58: 6A 00 push 0 - 10004C5A: 6A 00 push 0 - 10004C5C: 6A 00 push 0 - 10004C5E: 6A 00 push 0 - 10004C60: 6A 18 push 18h - 10004C62: 8D 4C 24 5C lea ecx,[esp+5Ch] - 10004C66: 51 push ecx - 10004C67: 6A 23 push 23h - 10004C69: E8 72 E9 FF FF call 100035E0 - 10004C6E: 83 C4 28 add esp,28h - 10004C71: 5F pop edi - 10004C72: 5E pop esi - 10004C73: 5D pop ebp - 10004C74: 5B pop ebx - 10004C75: 8B 4C 24 6C mov ecx,dword ptr [esp+6Ch] - 10004C79: 33 CC xor ecx,esp - 10004C7B: E8 1B 54 00 00 call 1000A09B - 10004C80: 83 C4 70 add esp,70h - 10004C83: C2 10 00 ret 10h - 10004C86: 53 push ebx - 10004C87: 6A 1D push 1Dh - 10004C89: 6A 02 push 2 - 10004C8B: E8 E0 49 00 00 call 10009670 - 10004C90: 83 C4 0C add esp,0Ch - 10004C93: 8B 4C 24 7C mov ecx,dword ptr [esp+7Ch] - 10004C97: 5F pop edi - 10004C98: 5E pop esi - 10004C99: 5D pop ebp - 10004C9A: 66 8B C3 mov ax,bx - 10004C9D: 5B pop ebx - 10004C9E: 33 CC xor ecx,esp - 10004CA0: E8 F6 53 00 00 call 1000A09B - 10004CA5: 83 C4 70 add esp,70h - 10004CA8: C2 10 00 ret 10h - 10004CAB: CC int 3 - 10004CAC: CC int 3 - 10004CAD: CC int 3 - 10004CAE: CC int 3 - 10004CAF: CC int 3 - 10004CB0: 81 EC B0 00 00 00 sub esp,0B0h - 10004CB6: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10004CBB: 33 C4 xor eax,esp - 10004CBD: 89 84 24 AC 00 00 mov dword ptr [esp+000000ACh],eax - 00 - 10004CC4: 55 push ebp - 10004CC5: 66 8B AC 24 D0 00 mov bp,word ptr [esp+000000D0h] - 00 00 - 10004CCD: 56 push esi - 10004CCE: 33 F6 xor esi,esi - 10004CD0: 57 push edi - 10004CD1: 8B BC 24 D4 00 00 mov edi,dword ptr [esp+000000D4h] - 00 - 10004CD8: 66 83 FD 38 cmp bp,38h - 10004CDC: 74 0F je 10004CED - 10004CDE: 56 push esi - 10004CDF: 6A 1E push 1Eh - 10004CE1: 6A 02 push 2 - 10004CE3: E8 88 49 00 00 call 10009670 - 10004CE8: 83 C4 0C add esp,0Ch - 10004CEB: EB 26 jmp 10004D13 - 10004CED: 8D 44 24 14 lea eax,[esp+14h] - 10004CF1: 50 push eax - 10004CF2: 8D 4C 24 2C lea ecx,[esp+2Ch] - 10004CF6: 51 push ecx - 10004CF7: 8D 54 24 24 lea edx,[esp+24h] - 10004CFB: 52 push edx - 10004CFC: 8D 44 24 3C lea eax,[esp+3Ch] - 10004D00: 50 push eax - 10004D01: E8 7A E3 FF FF call 10003080 - 10004D06: 66 85 C0 test ax,ax - 10004D09: 74 08 je 10004D13 - 10004D0B: E8 80 E2 FF FF call 10002F90 - 10004D10: 0F B7 F0 movzx esi,ax - 10004D13: F6 44 24 14 80 test byte ptr [esp+14h],80h - 10004D18: 0F 84 81 00 00 00 je 10004D9F - 10004D1E: 85 F6 test esi,esi - 10004D20: 74 68 je 10004D8A - 10004D22: 6A 38 push 38h - 10004D24: 8D 8C 24 84 00 00 lea ecx,[esp+00000084h] - 00 - 10004D2B: 51 push ecx - 10004D2C: 8D 54 24 28 lea edx,[esp+28h] - 10004D30: 52 push edx - 10004D31: 8D 44 24 38 lea eax,[esp+38h] - 10004D35: 50 push eax - 10004D36: 8D 4C 24 28 lea ecx,[esp+28h] - 10004D3A: 51 push ecx - 10004D3B: 8D 54 24 38 lea edx,[esp+38h] - 10004D3F: 52 push edx - 10004D40: 8D 44 24 28 lea eax,[esp+28h] - 10004D44: 50 push eax - 10004D45: E8 66 F8 FF FF call 100045B0 - 10004D4A: 66 85 C0 test ax,ax - 10004D4D: 74 3B je 10004D8A - 10004D4F: E8 3C E2 FF FF call 10002F90 - 10004D54: 66 85 C0 test ax,ax - 10004D57: 74 31 je 10004D8A - 10004D59: 0F B7 44 24 10 movzx eax,word ptr [esp+10h] - 10004D5E: 0F B7 8C 24 C0 00 movzx ecx,word ptr [esp+000000C0h] - 00 00 - 10004D66: 8B D1 mov edx,ecx - 10004D68: 8B F0 mov esi,eax - 10004D6A: 83 E2 F8 and edx,0FFFFFFF8h - 10004D6D: 83 E6 F8 and esi,0FFFFFFF8h - 10004D70: 83 CA F0 or edx,0FFFFFFF0h - 10004D73: 83 CE F0 or esi,0FFFFFFF0h - 10004D76: 3B F2 cmp esi,edx - 10004D78: 75 10 jne 10004D8A - 10004D7A: 83 E1 C0 and ecx,0FFFFFFC0h - 10004D7D: 83 E0 C0 and eax,0FFFFFFC0h - 10004D80: 83 C9 80 or ecx,0FFFFFF80h - 10004D83: 83 C8 80 or eax,0FFFFFF80h - 10004D86: 3B C1 cmp eax,ecx - 10004D88: 74 15 je 10004D9F - 10004D8A: 6A 00 push 0 - 10004D8C: 6A 1F push 1Fh - 10004D8E: 6A 02 push 2 - 10004D90: E8 DB 48 00 00 call 10009670 - 10004D95: 83 C4 0C add esp,0Ch - 10004D98: 33 C0 xor eax,eax - 10004D9A: E9 20 01 00 00 jmp 10004EBF - 10004D9F: 33 C0 xor eax,eax - 10004DA1: 89 44 24 34 mov dword ptr [esp+34h],eax - 10004DA5: 66 89 44 24 38 mov word ptr [esp+38h],ax - 10004DAA: 88 44 24 3A mov byte ptr [esp+3Ah],al - 10004DAE: 32 C0 xor al,al - 10004DB0: 3C 38 cmp al,38h - 10004DB2: 72 09 jb 10004DBD - 10004DB4: 66 0F B6 C8 movzx cx,al - 10004DB8: 66 3B CD cmp cx,bp - 10004DBB: 73 44 jae 10004E01 - 10004DBD: 80 3F 01 cmp byte ptr [edi],1 - 10004DC0: 75 2A jne 10004DEC - 10004DC2: 0F B6 C8 movzx ecx,al - 10004DC5: 81 E1 07 00 00 80 and ecx,80000007h - 10004DCB: 79 05 jns 10004DD2 - 10004DCD: 49 dec ecx - 10004DCE: 83 C9 F8 or ecx,0FFFFFFF8h - 10004DD1: 41 inc ecx - 10004DD2: BA 01 00 00 00 mov edx,1 - 10004DD7: D3 E2 shl edx,cl - 10004DD9: 0F B6 C8 movzx ecx,al - 10004DDC: C1 E9 03 shr ecx,3 - 10004DDF: 08 54 0C 34 or byte ptr [esp+ecx+34h],dl - 10004DE3: 8D 4C 0C 34 lea ecx,[esp+ecx+34h] - 10004DE7: 47 inc edi - 10004DE8: FE C0 inc al - 10004DEA: EB C4 jmp 10004DB0 - 10004DEC: 0F B6 C8 movzx ecx,al - 10004DEF: C1 E9 03 shr ecx,3 - 10004DF2: 33 D2 xor edx,edx - 10004DF4: 08 54 0C 34 or byte ptr [esp+ecx+34h],dl - 10004DF8: 8D 4C 0C 34 lea ecx,[esp+ecx+34h] - 10004DFC: 47 inc edi - 10004DFD: FE C0 inc al - 10004DFF: EB AF jmp 10004DB0 - 10004E01: 8A 94 24 C0 00 00 mov dl,byte ptr [esp+000000C0h] - 00 - 10004E08: 8A 8C 24 C8 00 00 mov cl,byte ptr [esp+000000C8h] - 00 - 10004E0F: 8A 84 24 C4 00 00 mov al,byte ptr [esp+000000C4h] - 00 - 10004E16: 88 54 24 3C mov byte ptr [esp+3Ch],dl - 10004E1A: 8A 94 24 CC 00 00 mov dl,byte ptr [esp+000000CCh] - 00 - 10004E21: 88 4C 24 3E mov byte ptr [esp+3Eh],cl - 10004E25: 8D 4C 24 40 lea ecx,[esp+40h] - 10004E29: 88 54 24 3F mov byte ptr [esp+3Fh],dl - 10004E2D: 88 44 24 3D mov byte ptr [esp+3Dh],al - 10004E31: 8A 84 24 D0 00 00 mov al,byte ptr [esp+000000D0h] - 00 - 10004E38: 51 push ecx - 10004E39: 8D 54 24 38 lea edx,[esp+38h] - 10004E3D: 52 push edx - 10004E3E: 88 44 24 43 mov byte ptr [esp+43h],al - 10004E42: E8 B9 22 00 00 call 10007100 - 10004E47: 8D 44 24 14 lea eax,[esp+14h] - 10004E4B: 50 push eax - 10004E4C: E8 FF 47 00 00 call 10009650 - 10004E51: 83 C4 0C add esp,0Ch - 10004E54: 85 C0 test eax,eax - 10004E56: 74 67 je 10004EBF - 10004E58: 8B 4C 24 0C mov ecx,dword ptr [esp+0Ch] - 10004E5C: 83 B9 80 00 00 00 cmp dword ptr [ecx+00000080h],0 - 00 - 10004E63: 74 5A je 10004EBF - 10004E65: C6 81 8C 00 00 00 mov byte ptr [ecx+0000008Ch],0 - 00 - 10004E6C: 8B 4C 24 0C mov ecx,dword ptr [esp+0Ch] - 10004E70: 6A 01 push 1 - 10004E72: 6A 00 push 0 - 10004E74: C6 81 8D 00 00 00 mov byte ptr [ecx+0000008Dh],0 - 00 - 10004E7B: 8B 54 24 14 mov edx,dword ptr [esp+14h] - 10004E7F: 6A 00 push 0 - 10004E81: C6 82 8E 00 00 00 mov byte ptr [edx+0000008Eh],0 - 00 - 10004E88: 8B 44 24 18 mov eax,dword ptr [esp+18h] - 10004E8C: 8B 88 80 00 00 00 mov ecx,dword ptr [eax+00000080h] - 10004E92: 8B 11 mov edx,dword ptr [ecx] - 10004E94: 8B 52 48 mov edx,dword ptr [edx+48h] - 10004E97: 6A 00 push 0 - 10004E99: 6A 00 push 0 - 10004E9B: 6A 0C push 0Ch - 10004E9D: 8D 44 24 58 lea eax,[esp+58h] - 10004EA1: 50 push eax - 10004EA2: 6A 24 push 24h - 10004EA4: FF D2 call edx - 10004EA6: 85 C0 test eax,eax - 10004EA8: 74 15 je 10004EBF - 10004EAA: 8B 4C 24 0C mov ecx,dword ptr [esp+0Ch] - 10004EAE: 83 B9 84 00 00 00 cmp dword ptr [ecx+00000084h],0 - 00 - 10004EB5: 74 08 je 10004EBF - 10004EB7: E8 D4 E0 FF FF call 10002F90 - 10004EBC: 0F B7 C0 movzx eax,ax - 10004EBF: 8B 8C 24 B8 00 00 mov ecx,dword ptr [esp+000000B8h] - 00 - 10004EC6: 5F pop edi - 10004EC7: 5E pop esi - 10004EC8: 5D pop ebp - 10004EC9: 33 CC xor ecx,esp - 10004ECB: E8 CB 51 00 00 call 1000A09B - 10004ED0: 81 C4 B0 00 00 00 add esp,0B0h - 10004ED6: C2 1C 00 ret 1Ch - 10004ED9: CC int 3 - 10004EDA: CC int 3 - 10004EDB: CC int 3 - 10004EDC: CC int 3 - 10004EDD: CC int 3 - 10004EDE: CC int 3 - 10004EDF: CC int 3 - 10004EE0: 83 EC 5C sub esp,5Ch - 10004EE3: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10004EE8: 33 C4 xor eax,esp - 10004EEA: 89 44 24 58 mov dword ptr [esp+58h],eax - 10004EEE: 8B 4C 24 64 mov ecx,dword ptr [esp+64h] - 10004EF2: 66 8B 44 24 60 mov ax,word ptr [esp+60h] - 10004EF7: 66 8B 54 24 68 mov dx,word ptr [esp+68h] - 10004EFC: 89 4C 24 04 mov dword ptr [esp+4],ecx - 10004F00: 8A 4C 24 70 mov cl,byte ptr [esp+70h] - 10004F04: 66 89 54 24 08 mov word ptr [esp+8],dx - 10004F09: 8A 54 24 74 mov dl,byte ptr [esp+74h] - 10004F0D: 66 89 04 24 mov word ptr [esp],ax - 10004F11: 8A 44 24 6C mov al,byte ptr [esp+6Ch] - 10004F15: 88 4C 24 0B mov byte ptr [esp+0Bh],cl - 10004F19: 8A 4C 24 7C mov cl,byte ptr [esp+7Ch] - 10004F1D: 88 54 24 0C mov byte ptr [esp+0Ch],dl - 10004F21: 8A 94 24 80 00 00 mov dl,byte ptr [esp+00000080h] - 00 - 10004F28: 88 44 24 0A mov byte ptr [esp+0Ah],al - 10004F2C: 8A 44 24 78 mov al,byte ptr [esp+78h] - 10004F30: 88 4C 24 0E mov byte ptr [esp+0Eh],cl - 10004F34: 8A 8C 24 88 00 00 mov cl,byte ptr [esp+00000088h] - 00 - 10004F3B: 88 54 24 0F mov byte ptr [esp+0Fh],dl - 10004F3F: 8A 94 24 8C 00 00 mov dl,byte ptr [esp+0000008Ch] - 00 - 10004F46: 88 44 24 0D mov byte ptr [esp+0Dh],al - 10004F4A: 66 8B 84 24 84 00 mov ax,word ptr [esp+00000084h] - 00 00 - 10004F52: 88 4C 24 12 mov byte ptr [esp+12h],cl - 10004F56: 8D 4C 24 18 lea ecx,[esp+18h] - 10004F5A: 88 54 24 13 mov byte ptr [esp+13h],dl - 10004F5E: 66 89 44 24 10 mov word ptr [esp+10h],ax - 10004F63: 66 8B 84 24 90 00 mov ax,word ptr [esp+00000090h] - 00 00 - 10004F6B: 51 push ecx - 10004F6C: 8D 54 24 04 lea edx,[esp+4] - 10004F70: 52 push edx - 10004F71: 66 89 44 24 1C mov word ptr [esp+1Ch],ax - 10004F76: E8 15 1F 00 00 call 10006E90 - 10004F7B: 6A 01 push 1 - 10004F7D: 6A 00 push 0 - 10004F7F: 6A 00 push 0 - 10004F81: 6A 00 push 0 - 10004F83: 6A 00 push 0 - 10004F85: 6A 14 push 14h - 10004F87: 8D 44 24 38 lea eax,[esp+38h] - 10004F8B: 50 push eax - 10004F8C: 6A 25 push 25h - 10004F8E: E8 4D E6 FF FF call 100035E0 - 10004F93: 8B 8C 24 80 00 00 mov ecx,dword ptr [esp+00000080h] - 00 - 10004F9A: 83 C4 28 add esp,28h - 10004F9D: 33 CC xor ecx,esp - 10004F9F: E8 F7 50 00 00 call 1000A09B - 10004FA4: 83 C4 5C add esp,5Ch - 10004FA7: C2 34 00 ret 34h - 10004FAA: CC int 3 - 10004FAB: CC int 3 - 10004FAC: CC int 3 - 10004FAD: CC int 3 - 10004FAE: CC int 3 - 10004FAF: CC int 3 - 10004FB0: 83 EC 4C sub esp,4Ch - 10004FB3: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10004FB8: 33 C4 xor eax,esp - 10004FBA: 89 44 24 48 mov dword ptr [esp+48h],eax - 10004FBE: 66 8B 44 24 50 mov ax,word ptr [esp+50h] - 10004FC3: 8B 4C 24 54 mov ecx,dword ptr [esp+54h] - 10004FC7: 8D 54 24 08 lea edx,[esp+8] - 10004FCB: 66 89 04 24 mov word ptr [esp],ax - 10004FCF: 52 push edx - 10004FD0: 8D 44 24 04 lea eax,[esp+4] - 10004FD4: 50 push eax - 10004FD5: 89 4C 24 0C mov dword ptr [esp+0Ch],ecx - 10004FD9: E8 72 21 00 00 call 10007150 - 10004FDE: 6A 01 push 1 - 10004FE0: 6A 00 push 0 - 10004FE2: 6A 00 push 0 - 10004FE4: 6A 00 push 0 - 10004FE6: 6A 00 push 0 - 10004FE8: 6A 06 push 6 - 10004FEA: 8D 4C 24 28 lea ecx,[esp+28h] - 10004FEE: 51 push ecx - 10004FEF: 6A 26 push 26h - 10004FF1: E8 EA E5 FF FF call 100035E0 - 10004FF6: 8B 4C 24 70 mov ecx,dword ptr [esp+70h] - 10004FFA: 83 C4 28 add esp,28h - 10004FFD: 33 CC xor ecx,esp - 10004FFF: E8 97 50 00 00 call 1000A09B - 10005004: 83 C4 4C add esp,4Ch - 10005007: C2 08 00 ret 8 - 1000500A: CC int 3 - 1000500B: CC int 3 - 1000500C: CC int 3 - 1000500D: CC int 3 - 1000500E: CC int 3 - 1000500F: CC int 3 - 10005010: 83 EC 78 sub esp,78h - 10005013: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10005018: 33 C4 xor eax,esp - 1000501A: 89 44 24 74 mov dword ptr [esp+74h],eax - 1000501E: 66 C1 AC 24 80 00 shr word ptr [esp+00000080h],2 - 00 00 02 - 10005027: 56 push esi - 10005028: 8B B4 24 80 00 00 mov esi,dword ptr [esp+00000080h] - 00 - 1000502F: 8D 4C 24 08 lea ecx,[esp+8] - 10005033: BA 0C 00 00 00 mov edx,0Ch - 10005038: 66 8B 84 24 84 00 mov ax,word ptr [esp+00000084h] - 00 00 - 10005040: 81 84 24 84 00 00 add dword ptr [esp+00000084h],0FFFFh - 00 FF FF 00 00 - 1000504B: 66 85 C0 test ax,ax - 1000504E: 76 07 jbe 10005057 - 10005050: 8B 06 mov eax,dword ptr [esi] - 10005052: 83 C6 04 add esi,4 - 10005055: EB 02 jmp 10005059 - 10005057: 33 C0 xor eax,eax - 10005059: 89 01 mov dword ptr [ecx],eax - 1000505B: 83 C1 04 add ecx,4 - 1000505E: 83 EA 01 sub edx,1 - 10005061: 75 D5 jne 10005038 - 10005063: 8D 4C 24 38 lea ecx,[esp+38h] - 10005067: 51 push ecx - 10005068: 8D 54 24 0C lea edx,[esp+0Ch] - 1000506C: 52 push edx - 1000506D: E8 1E 21 00 00 call 10007190 - 10005072: 8D 44 24 0C lea eax,[esp+0Ch] - 10005076: 50 push eax - 10005077: E8 D4 45 00 00 call 10009650 - 1000507C: 83 C4 0C add esp,0Ch - 1000507F: 5E pop esi - 10005080: 85 C0 test eax,eax - 10005082: 74 64 je 100050E8 - 10005084: 8B 0C 24 mov ecx,dword ptr [esp] - 10005087: 83 B9 80 00 00 00 cmp dword ptr [ecx+00000080h],0 - 00 - 1000508E: 74 58 je 100050E8 - 10005090: C6 81 8C 00 00 00 mov byte ptr [ecx+0000008Ch],0 - 00 - 10005097: 8B 0C 24 mov ecx,dword ptr [esp] - 1000509A: 6A 01 push 1 - 1000509C: 6A 00 push 0 - 1000509E: C6 81 8D 00 00 00 mov byte ptr [ecx+0000008Dh],0 - 00 - 100050A5: 8B 54 24 08 mov edx,dword ptr [esp+8] - 100050A9: 6A 00 push 0 - 100050AB: C6 82 8E 00 00 00 mov byte ptr [edx+0000008Eh],0 - 00 - 100050B2: 8B 44 24 0C mov eax,dword ptr [esp+0Ch] - 100050B6: 8B 88 80 00 00 00 mov ecx,dword ptr [eax+00000080h] - 100050BC: 8B 11 mov edx,dword ptr [ecx] - 100050BE: 8B 52 48 mov edx,dword ptr [edx+48h] - 100050C1: 6A 00 push 0 - 100050C3: 6A 00 push 0 - 100050C5: 6A 30 push 30h - 100050C7: 8D 44 24 4C lea eax,[esp+4Ch] - 100050CB: 50 push eax - 100050CC: 6A 27 push 27h - 100050CE: FF D2 call edx - 100050D0: 85 C0 test eax,eax - 100050D2: 74 14 je 100050E8 - 100050D4: 8B 0C 24 mov ecx,dword ptr [esp] - 100050D7: 83 B9 84 00 00 00 cmp dword ptr [ecx+00000084h],0 - 00 - 100050DE: 74 08 je 100050E8 - 100050E0: E8 AB DE FF FF call 10002F90 - 100050E5: 0F B7 C0 movzx eax,ax - 100050E8: 8B 4C 24 74 mov ecx,dword ptr [esp+74h] - 100050EC: 33 CC xor ecx,esp - 100050EE: E8 A8 4F 00 00 call 1000A09B - 100050F3: 83 C4 78 add esp,78h - 100050F6: C2 08 00 ret 8 - 100050F9: CC int 3 - 100050FA: CC int 3 - 100050FB: CC int 3 - 100050FC: CC int 3 - 100050FD: CC int 3 - 100050FE: CC int 3 - 100050FF: CC int 3 - 10005100: 8A 44 24 04 mov al,byte ptr [esp+4] - 10005104: 8A 4C 24 08 mov cl,byte ptr [esp+8] - 10005108: 6A 00 push 0 - 1000510A: 6A 00 push 0 - 1000510C: 6A 00 push 0 - 1000510E: 6A 00 push 0 - 10005110: 6A 00 push 0 - 10005112: 6A 02 push 2 - 10005114: 8D 54 24 1C lea edx,[esp+1Ch] - 10005118: 52 push edx - 10005119: 6A 2A push 2Ah - 1000511B: 88 44 24 24 mov byte ptr [esp+24h],al - 1000511F: 88 4C 24 25 mov byte ptr [esp+25h],cl - 10005123: E8 B8 E4 FF FF call 100035E0 - 10005128: 83 C4 20 add esp,20h - 1000512B: C2 08 00 ret 8 - 1000512E: CC int 3 - 1000512F: CC int 3 - 10005130: 83 EC 50 sub esp,50h - 10005133: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10005138: 33 C4 xor eax,esp - 1000513A: 89 44 24 4C mov dword ptr [esp+4Ch],eax - 1000513E: 8B 44 24 5C mov eax,dword ptr [esp+5Ch] - 10005142: 53 push ebx - 10005143: 8B 5C 24 5C mov ebx,dword ptr [esp+5Ch] - 10005147: 8D 4C 24 10 lea ecx,[esp+10h] - 1000514B: 89 44 24 08 mov dword ptr [esp+8],eax - 1000514F: 66 8B 44 24 58 mov ax,word ptr [esp+58h] - 10005154: 51 push ecx - 10005155: 8D 54 24 08 lea edx,[esp+8] - 10005159: 52 push edx - 1000515A: 88 5C 24 14 mov byte ptr [esp+14h],bl - 1000515E: 66 89 44 24 0E mov word ptr [esp+0Eh],ax - 10005163: 88 5C 24 0C mov byte ptr [esp+0Ch],bl - 10005167: E8 B4 21 00 00 call 10007320 - 1000516C: 6A 01 push 1 - 1000516E: 68 20 35 00 10 push 10003520h - 10005173: 6A 08 push 8 - 10005175: 8D 44 24 1C lea eax,[esp+1Ch] - 10005179: 50 push eax - 1000517A: 53 push ebx - 1000517B: 6A 03 push 3 - 1000517D: 8D 4C 24 30 lea ecx,[esp+30h] - 10005181: 51 push ecx - 10005182: 6A 2B push 2Bh - 10005184: E8 57 E4 FF FF call 100035E0 - 10005189: 8B 4C 24 78 mov ecx,dword ptr [esp+78h] - 1000518D: 83 C4 28 add esp,28h - 10005190: 5B pop ebx - 10005191: 33 CC xor ecx,esp - 10005193: E8 03 4F 00 00 call 1000A09B - 10005198: 83 C4 50 add esp,50h - 1000519B: C2 0C 00 ret 0Ch - 1000519E: CC int 3 - 1000519F: CC int 3 - 100051A0: 81 EC 48 01 00 00 sub esp,148h - 100051A6: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 100051AB: 33 C4 xor eax,esp - 100051AD: 89 84 24 44 01 00 mov dword ptr [esp+00000144h],eax - 00 - 100051B4: 66 8B 94 24 4C 01 mov dx,word ptr [esp+0000014Ch] - 00 00 - 100051BC: 8B 8C 24 54 01 00 mov ecx,dword ptr [esp+00000154h] - 00 - 100051C3: 53 push ebx - 100051C4: 66 8B 9C 24 54 01 mov bx,word ptr [esp+00000154h] - 00 00 - 100051CC: 56 push esi - 100051CD: 0F B7 C3 movzx eax,bx - 100051D0: 0F B7 F2 movzx esi,dx - 100051D3: 03 F0 add esi,eax - 100051D5: 81 FE 9A 03 00 00 cmp esi,39Ah - 100051DB: 7F 4C jg 10005229 - 100051DD: 50 push eax - 100051DE: 51 push ecx - 100051DF: 8D 44 24 14 lea eax,[esp+14h] - 100051E3: 50 push eax - 100051E4: 88 5C 24 14 mov byte ptr [esp+14h],bl - 100051E8: 66 89 54 24 16 mov word ptr [esp+16h],dx - 100051ED: E8 5E 47 00 00 call 10009950 - 100051F2: 8D 8C 24 18 01 00 lea ecx,[esp+00000118h] - 00 - 100051F9: 51 push ecx - 100051FA: 8D 54 24 18 lea edx,[esp+18h] - 100051FE: 52 push edx - 100051FF: E8 3C 21 00 00 call 10007340 - 10005204: 6A 01 push 1 - 10005206: 6A 00 push 0 - 10005208: 6A 00 push 0 - 1000520A: 6A 00 push 0 - 1000520C: 80 C3 03 add bl,3 - 1000520F: 0F B6 C3 movzx eax,bl - 10005212: 6A 00 push 0 - 10005214: 50 push eax - 10005215: 8D 8C 24 38 01 00 lea ecx,[esp+00000138h] - 00 - 1000521C: 51 push ecx - 1000521D: 6A 2C push 2Ch - 1000521F: E8 BC E3 FF FF call 100035E0 - 10005224: 83 C4 34 add esp,34h - 10005227: EB 10 jmp 10005239 - 10005229: 6A 00 push 0 - 1000522B: 6A 20 push 20h - 1000522D: 6A 02 push 2 - 1000522F: E8 3C 44 00 00 call 10009670 - 10005234: 83 C4 0C add esp,0Ch - 10005237: 33 C0 xor eax,eax - 10005239: 8B 8C 24 4C 01 00 mov ecx,dword ptr [esp+0000014Ch] - 00 - 10005240: 5E pop esi - 10005241: 5B pop ebx - 10005242: 33 CC xor ecx,esp - 10005244: E8 52 4E 00 00 call 1000A09B - 10005249: 81 C4 48 01 00 00 add esp,148h - 1000524F: C2 0C 00 ret 0Ch - 10005252: CC int 3 - 10005253: CC int 3 - 10005254: CC int 3 - 10005255: CC int 3 - 10005256: CC int 3 - 10005257: CC int 3 - 10005258: CC int 3 - 10005259: CC int 3 - 1000525A: CC int 3 - 1000525B: CC int 3 - 1000525C: CC int 3 - 1000525D: CC int 3 - 1000525E: CC int 3 - 1000525F: CC int 3 - 10005260: 83 EC 44 sub esp,44h - 10005263: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10005268: 33 C4 xor eax,esp - 1000526A: 89 44 24 40 mov dword ptr [esp+40h],eax - 1000526E: 8D 04 24 lea eax,[esp] - 10005271: 50 push eax - 10005272: 8D 4C 24 4C lea ecx,[esp+4Ch] - 10005276: 51 push ecx - 10005277: E8 04 21 00 00 call 10007380 - 1000527C: 6A 01 push 1 - 1000527E: 6A 00 push 0 - 10005280: 6A 00 push 0 - 10005282: 6A 00 push 0 - 10005284: 6A 00 push 0 - 10005286: 6A 02 push 2 - 10005288: 8D 54 24 20 lea edx,[esp+20h] - 1000528C: 52 push edx - 1000528D: 6A 2D push 2Dh - 1000528F: E8 4C E3 FF FF call 100035E0 - 10005294: 8B 4C 24 68 mov ecx,dword ptr [esp+68h] - 10005298: 83 C4 28 add esp,28h - 1000529B: 33 CC xor ecx,esp - 1000529D: E8 F9 4D 00 00 call 1000A09B - 100052A2: 83 C4 44 add esp,44h - 100052A5: C2 04 00 ret 4 - 100052A8: CC int 3 - 100052A9: CC int 3 - 100052AA: CC int 3 - 100052AB: CC int 3 - 100052AC: CC int 3 - 100052AD: CC int 3 - 100052AE: CC int 3 - 100052AF: CC int 3 - 100052B0: 83 EC 50 sub esp,50h - 100052B3: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 100052B8: 33 C4 xor eax,esp - 100052BA: 89 44 24 4C mov dword ptr [esp+4Ch],eax - 100052BE: 8B 44 24 5C mov eax,dword ptr [esp+5Ch] - 100052C2: 53 push ebx - 100052C3: 8B 5C 24 5C mov ebx,dword ptr [esp+5Ch] - 100052C7: 8D 4C 24 10 lea ecx,[esp+10h] - 100052CB: 89 44 24 08 mov dword ptr [esp+8],eax - 100052CF: 66 8B 44 24 58 mov ax,word ptr [esp+58h] - 100052D4: 51 push ecx - 100052D5: 8D 54 24 08 lea edx,[esp+8] - 100052D9: 52 push edx - 100052DA: 88 5C 24 14 mov byte ptr [esp+14h],bl - 100052DE: 66 89 44 24 0E mov word ptr [esp+0Eh],ax - 100052E3: 88 5C 24 0C mov byte ptr [esp+0Ch],bl - 100052E7: E8 34 20 00 00 call 10007320 - 100052EC: 6A 01 push 1 - 100052EE: 68 20 35 00 10 push 10003520h - 100052F3: 6A 08 push 8 - 100052F5: 8D 44 24 1C lea eax,[esp+1Ch] - 100052F9: 50 push eax - 100052FA: 53 push ebx - 100052FB: 6A 03 push 3 - 100052FD: 8D 4C 24 30 lea ecx,[esp+30h] - 10005301: 51 push ecx - 10005302: 6A 37 push 37h - 10005304: E8 D7 E2 FF FF call 100035E0 - 10005309: 8B 4C 24 78 mov ecx,dword ptr [esp+78h] - 1000530D: 83 C4 28 add esp,28h - 10005310: 5B pop ebx - 10005311: 33 CC xor ecx,esp - 10005313: E8 83 4D 00 00 call 1000A09B - 10005318: 83 C4 50 add esp,50h - 1000531B: C2 0C 00 ret 0Ch - 1000531E: CC int 3 - 1000531F: CC int 3 - 10005320: 8B 44 24 08 mov eax,dword ptr [esp+8] - 10005324: 8A 4C 24 04 mov cl,byte ptr [esp+4] - 10005328: 6A 01 push 1 - 1000532A: 68 00 35 00 10 push 10003500h - 1000532F: 6A 04 push 4 - 10005331: 8D 54 24 14 lea edx,[esp+14h] - 10005335: 52 push edx - 10005336: 6A 01 push 1 - 10005338: 89 44 24 1C mov dword ptr [esp+1Ch],eax - 1000533C: 6A 01 push 1 - 1000533E: 8D 44 24 1C lea eax,[esp+1Ch] - 10005342: 50 push eax - 10005343: 6A 39 push 39h - 10005345: 88 4C 24 24 mov byte ptr [esp+24h],cl - 10005349: E8 92 E2 FF FF call 100035E0 - 1000534E: 83 C4 20 add esp,20h - 10005351: C2 08 00 ret 8 - 10005354: CC int 3 - 10005355: CC int 3 - 10005356: CC int 3 - 10005357: CC int 3 - 10005358: CC int 3 - 10005359: CC int 3 - 1000535A: CC int 3 - 1000535B: CC int 3 - 1000535C: CC int 3 - 1000535D: CC int 3 - 1000535E: CC int 3 - 1000535F: CC int 3 - 10005360: 83 EC 50 sub esp,50h - 10005363: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10005368: 33 C4 xor eax,esp - 1000536A: 89 44 24 4C mov dword ptr [esp+4Ch],eax - 1000536E: 8B 44 24 5C mov eax,dword ptr [esp+5Ch] - 10005372: 53 push ebx - 10005373: 8B 5C 24 5C mov ebx,dword ptr [esp+5Ch] - 10005377: 8D 4C 24 10 lea ecx,[esp+10h] - 1000537B: 89 44 24 08 mov dword ptr [esp+8],eax - 1000537F: 66 8B 44 24 58 mov ax,word ptr [esp+58h] - 10005384: 51 push ecx - 10005385: 8D 54 24 08 lea edx,[esp+8] - 10005389: 52 push edx - 1000538A: 88 5C 24 14 mov byte ptr [esp+14h],bl - 1000538E: 66 89 44 24 0E mov word ptr [esp+0Eh],ax - 10005393: 88 5C 24 0C mov byte ptr [esp+0Ch],bl - 10005397: E8 84 1F 00 00 call 10007320 - 1000539C: 6A 01 push 1 - 1000539E: 68 20 35 00 10 push 10003520h - 100053A3: 6A 08 push 8 - 100053A5: 8D 44 24 1C lea eax,[esp+1Ch] - 100053A9: 50 push eax - 100053AA: 53 push ebx - 100053AB: 6A 03 push 3 - 100053AD: 8D 4C 24 30 lea ecx,[esp+30h] - 100053B1: 51 push ecx - 100053B2: 6A 38 push 38h - 100053B4: E8 27 E2 FF FF call 100035E0 - 100053B9: 8B 4C 24 78 mov ecx,dword ptr [esp+78h] - 100053BD: 83 C4 28 add esp,28h - 100053C0: 5B pop ebx - 100053C1: 33 CC xor ecx,esp - 100053C3: E8 D3 4C 00 00 call 1000A09B - 100053C8: 83 C4 50 add esp,50h - 100053CB: C2 0C 00 ret 0Ch - 100053CE: CC int 3 - 100053CF: CC int 3 - 100053D0: 83 EC 44 sub esp,44h - 100053D3: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 100053D8: 33 C4 xor eax,esp - 100053DA: 89 44 24 40 mov dword ptr [esp+40h],eax - 100053DE: 8D 04 24 lea eax,[esp] - 100053E1: 50 push eax - 100053E2: 8D 4C 24 4C lea ecx,[esp+4Ch] - 100053E6: 51 push ecx - 100053E7: E8 54 1E 00 00 call 10007240 - 100053EC: 6A 01 push 1 - 100053EE: 6A 00 push 0 - 100053F0: 6A 00 push 0 - 100053F2: 6A 00 push 0 - 100053F4: 6A 00 push 0 - 100053F6: 6A 04 push 4 - 100053F8: 8D 54 24 20 lea edx,[esp+20h] - 100053FC: 52 push edx - 100053FD: 6A 28 push 28h - 100053FF: E8 DC E1 FF FF call 100035E0 - 10005404: 8B 4C 24 68 mov ecx,dword ptr [esp+68h] - 10005408: 83 C4 28 add esp,28h - 1000540B: 33 CC xor ecx,esp - 1000540D: E8 89 4C 00 00 call 1000A09B - 10005412: 83 C4 44 add esp,44h - 10005415: C2 04 00 ret 4 - 10005418: CC int 3 - 10005419: CC int 3 - 1000541A: CC int 3 - 1000541B: CC int 3 - 1000541C: CC int 3 - 1000541D: CC int 3 - 1000541E: CC int 3 - 1000541F: CC int 3 - 10005420: 6A 01 push 1 - 10005422: 6A 00 push 0 - 10005424: 6A 00 push 0 - 10005426: 6A 00 push 0 - 10005428: 6A 00 push 0 - 1000542A: 6A 00 push 0 - 1000542C: 6A 00 push 0 - 1000542E: 68 80 00 00 00 push 80h - 10005433: E8 A8 E1 FF FF call 100035E0 - 10005438: 83 C4 20 add esp,20h - 1000543B: C3 ret - 1000543C: CC int 3 - 1000543D: CC int 3 - 1000543E: CC int 3 - 1000543F: CC int 3 - 10005440: 83 EC 10 sub esp,10h - 10005443: 8A 4C 24 18 mov cl,byte ptr [esp+18h] - 10005447: 8B 44 24 14 mov eax,dword ptr [esp+14h] - 1000544B: 8B 54 24 1C mov edx,dword ptr [esp+1Ch] - 1000544F: 6A 01 push 1 - 10005451: 68 40 35 00 10 push 10003540h - 10005456: 6A 10 push 10h - 10005458: 88 4C 24 10 mov byte ptr [esp+10h],cl - 1000545C: 8D 4C 24 0C lea ecx,[esp+0Ch] - 10005460: 51 push ecx - 10005461: 6A 1C push 1Ch - 10005463: 6A 00 push 0 - 10005465: 89 44 24 18 mov dword ptr [esp+18h],eax - 10005469: 8A 44 24 38 mov al,byte ptr [esp+38h] - 1000546D: 6A 00 push 0 - 1000546F: 6A 43 push 43h - 10005471: 89 54 24 28 mov dword ptr [esp+28h],edx - 10005475: 88 44 24 2C mov byte ptr [esp+2Ch],al - 10005479: E8 62 E1 FF FF call 100035E0 - 1000547E: 83 C4 30 add esp,30h - 10005481: C2 10 00 ret 10h - 10005484: CC int 3 - 10005485: CC int 3 - 10005486: CC int 3 - 10005487: CC int 3 - 10005488: CC int 3 - 10005489: CC int 3 - 1000548A: CC int 3 - 1000548B: CC int 3 - 1000548C: CC int 3 - 1000548D: CC int 3 - 1000548E: CC int 3 - 1000548F: CC int 3 - 10005490: 83 EC 54 sub esp,54h - 10005493: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10005498: 33 C4 xor eax,esp - 1000549A: 89 44 24 50 mov dword ptr [esp+50h],eax - 1000549E: 8B 44 24 58 mov eax,dword ptr [esp+58h] - 100054A2: 8B 4C 24 60 mov ecx,dword ptr [esp+60h] - 100054A6: 89 04 24 mov dword ptr [esp],eax - 100054A9: 8A 44 24 5C mov al,byte ptr [esp+5Ch] - 100054AD: 8D 54 24 10 lea edx,[esp+10h] - 100054B1: 88 44 24 04 mov byte ptr [esp+4],al - 100054B5: 89 4C 24 08 mov dword ptr [esp+8],ecx - 100054B9: 8A 4C 24 64 mov cl,byte ptr [esp+64h] - 100054BD: 52 push edx - 100054BE: 8D 44 24 04 lea eax,[esp+4] - 100054C2: 50 push eax - 100054C3: 88 4C 24 14 mov byte ptr [esp+14h],cl - 100054C7: E8 74 19 00 00 call 10006E40 - 100054CC: 6A 01 push 1 - 100054CE: 6A 00 push 0 - 100054D0: 6A 00 push 0 - 100054D2: 6A 00 push 0 - 100054D4: 6A 00 push 0 - 100054D6: 6A 1C push 1Ch - 100054D8: 8D 4C 24 30 lea ecx,[esp+30h] - 100054DC: 51 push ecx - 100054DD: 68 82 00 00 00 push 82h - 100054E2: E8 F9 E0 FF FF call 100035E0 - 100054E7: 8B 4C 24 78 mov ecx,dword ptr [esp+78h] - 100054EB: 83 C4 28 add esp,28h - 100054EE: 33 CC xor ecx,esp - 100054F0: E8 A6 4B 00 00 call 1000A09B - 100054F5: 83 C4 54 add esp,54h - 100054F8: C2 10 00 ret 10h - 100054FB: CC int 3 - 100054FC: CC int 3 - 100054FD: CC int 3 - 100054FE: CC int 3 - 100054FF: CC int 3 - 10005500: 6A 01 push 1 - 10005502: 6A 00 push 0 - 10005504: 6A 00 push 0 - 10005506: 6A 00 push 0 - 10005508: 6A 00 push 0 - 1000550A: 6A 00 push 0 - 1000550C: 6A 00 push 0 - 1000550E: 68 83 00 00 00 push 83h - 10005513: E8 C8 E0 FF FF call 100035E0 - 10005518: 83 C4 20 add esp,20h - 1000551B: C3 ret - 1000551C: CC int 3 - 1000551D: CC int 3 - 1000551E: CC int 3 - 1000551F: CC int 3 - 10005520: 6A 01 push 1 - 10005522: 6A 00 push 0 - 10005524: 6A 00 push 0 - 10005526: 6A 00 push 0 - 10005528: 6A 00 push 0 - 1000552A: 6A 00 push 0 - 1000552C: 6A 00 push 0 - 1000552E: 68 84 00 00 00 push 84h - 10005533: E8 A8 E0 FF FF call 100035E0 - 10005538: 83 C4 20 add esp,20h - 1000553B: C3 ret - 1000553C: CC int 3 - 1000553D: CC int 3 - 1000553E: CC int 3 - 1000553F: CC int 3 - 10005540: 83 EC 44 sub esp,44h - 10005543: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10005548: 33 C4 xor eax,esp - 1000554A: 89 44 24 40 mov dword ptr [esp+40h],eax - 1000554E: 8D 04 24 lea eax,[esp] - 10005551: 50 push eax - 10005552: 8D 4C 24 4C lea ecx,[esp+4Ch] - 10005556: 51 push ecx - 10005557: E8 E4 1C 00 00 call 10007240 - 1000555C: 6A 01 push 1 - 1000555E: 6A 00 push 0 - 10005560: 6A 00 push 0 - 10005562: 6A 00 push 0 - 10005564: 6A 00 push 0 - 10005566: 6A 04 push 4 - 10005568: 8D 54 24 20 lea edx,[esp+20h] - 1000556C: 52 push edx - 1000556D: 68 85 00 00 00 push 85h - 10005572: E8 69 E0 FF FF call 100035E0 - 10005577: 8B 4C 24 68 mov ecx,dword ptr [esp+68h] - 1000557B: 83 C4 28 add esp,28h - 1000557E: 33 CC xor ecx,esp - 10005580: E8 16 4B 00 00 call 1000A09B - 10005585: 83 C4 44 add esp,44h - 10005588: C2 04 00 ret 4 - 1000558B: CC int 3 - 1000558C: CC int 3 - 1000558D: CC int 3 - 1000558E: CC int 3 - 1000558F: CC int 3 - 10005590: 6A 01 push 1 - 10005592: 6A 00 push 0 - 10005594: 6A 00 push 0 - 10005596: 6A 00 push 0 - 10005598: 6A 00 push 0 - 1000559A: 6A 00 push 0 - 1000559C: 6A 00 push 0 - 1000559E: 68 86 00 00 00 push 86h - 100055A3: E8 38 E0 FF FF call 100035E0 - 100055A8: 83 C4 20 add esp,20h - 100055AB: C3 ret - 100055AC: CC int 3 - 100055AD: CC int 3 - 100055AE: CC int 3 - 100055AF: CC int 3 - 100055B0: 6A 01 push 1 - 100055B2: 6A 00 push 0 - 100055B4: 6A 00 push 0 - 100055B6: 6A 00 push 0 - 100055B8: 6A 00 push 0 - 100055BA: 6A 00 push 0 - 100055BC: 6A 00 push 0 - 100055BE: 68 87 00 00 00 push 87h - 100055C3: E8 18 E0 FF FF call 100035E0 - 100055C8: 83 C4 20 add esp,20h - 100055CB: C3 ret - 100055CC: CC int 3 - 100055CD: CC int 3 - 100055CE: CC int 3 - 100055CF: CC int 3 - 100055D0: 83 EC 44 sub esp,44h - 100055D3: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 100055D8: 33 C4 xor eax,esp - 100055DA: 89 44 24 40 mov dword ptr [esp+40h],eax - 100055DE: 8D 04 24 lea eax,[esp] - 100055E1: 50 push eax - 100055E2: 8D 4C 24 4C lea ecx,[esp+4Ch] - 100055E6: 51 push ecx - 100055E7: E8 54 1C 00 00 call 10007240 - 100055EC: 6A 01 push 1 - 100055EE: 6A 00 push 0 - 100055F0: 6A 00 push 0 - 100055F2: 6A 00 push 0 - 100055F4: 6A 00 push 0 - 100055F6: 6A 04 push 4 - 100055F8: 8D 54 24 20 lea edx,[esp+20h] - 100055FC: 52 push edx - 100055FD: 6A 29 push 29h - 100055FF: E8 DC DF FF FF call 100035E0 - 10005604: 8B 4C 24 68 mov ecx,dword ptr [esp+68h] - 10005608: 83 C4 28 add esp,28h - 1000560B: 33 CC xor ecx,esp - 1000560D: E8 89 4A 00 00 call 1000A09B - 10005612: 83 C4 44 add esp,44h - 10005615: C2 04 00 ret 4 - 10005618: CC int 3 - 10005619: CC int 3 - 1000561A: CC int 3 - 1000561B: CC int 3 - 1000561C: CC int 3 - 1000561D: CC int 3 - 1000561E: CC int 3 - 1000561F: CC int 3 - 10005620: 83 EC 50 sub esp,50h - 10005623: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10005628: 33 C4 xor eax,esp - 1000562A: 89 44 24 4C mov dword ptr [esp+4Ch],eax - 1000562E: 66 8B 44 24 54 mov ax,word ptr [esp+54h] - 10005633: 66 8B 4C 24 58 mov cx,word ptr [esp+58h] - 10005638: 66 8B 54 24 5C mov dx,word ptr [esp+5Ch] - 1000563D: 66 89 04 24 mov word ptr [esp],ax - 10005641: 66 8B 44 24 60 mov ax,word ptr [esp+60h] - 10005646: 66 89 4C 24 02 mov word ptr [esp+2],cx - 1000564B: 66 8B 4C 24 64 mov cx,word ptr [esp+64h] - 10005650: 66 89 44 24 06 mov word ptr [esp+6],ax - 10005655: 8D 44 24 0C lea eax,[esp+0Ch] - 10005659: 66 89 4C 24 08 mov word ptr [esp+8],cx - 1000565E: 66 89 54 24 04 mov word ptr [esp+4],dx - 10005663: 66 8B 54 24 68 mov dx,word ptr [esp+68h] - 10005668: 50 push eax - 10005669: 8D 4C 24 04 lea ecx,[esp+4] - 1000566D: 51 push ecx - 1000566E: 66 89 54 24 12 mov word ptr [esp+12h],dx - 10005673: E8 58 1B 00 00 call 100071D0 - 10005678: 6A 01 push 1 - 1000567A: 6A 00 push 0 - 1000567C: 6A 00 push 0 - 1000567E: 6A 00 push 0 - 10005680: 6A 00 push 0 - 10005682: 6A 0C push 0Ch - 10005684: 8D 54 24 2C lea edx,[esp+2Ch] - 10005688: 52 push edx - 10005689: 68 C0 00 00 00 push 0C0h - 1000568E: E8 4D DF FF FF call 100035E0 - 10005693: 8B 4C 24 74 mov ecx,dword ptr [esp+74h] - 10005697: 83 C4 28 add esp,28h - 1000569A: 33 CC xor ecx,esp - 1000569C: E8 FA 49 00 00 call 1000A09B - 100056A1: 83 C4 50 add esp,50h - 100056A4: C2 18 00 ret 18h - 100056A7: CC int 3 - 100056A8: CC int 3 - 100056A9: CC int 3 - 100056AA: CC int 3 - 100056AB: CC int 3 - 100056AC: CC int 3 - 100056AD: CC int 3 - 100056AE: CC int 3 - 100056AF: CC int 3 - 100056B0: 83 EC 64 sub esp,64h - 100056B3: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 100056B8: 33 C4 xor eax,esp - 100056BA: 89 44 24 60 mov dword ptr [esp+60h],eax - 100056BE: 53 push ebx - 100056BF: 56 push esi - 100056C0: 8D 44 24 08 lea eax,[esp+8] - 100056C4: 50 push eax - 100056C5: 33 DB xor ebx,ebx - 100056C7: 33 F6 xor esi,esi - 100056C9: E8 82 3F 00 00 call 10009650 - 100056CE: 83 C4 04 add esp,4 - 100056D1: 3B C3 cmp eax,ebx - 100056D3: 74 4B je 10005720 - 100056D5: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 100056D9: 39 99 80 00 00 00 cmp dword ptr [ecx+00000080h],ebx - 100056DF: 74 3F je 10005720 - 100056E1: 88 99 8C 00 00 00 mov byte ptr [ecx+0000008Ch],bl - 100056E7: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 100056EB: 88 99 8D 00 00 00 mov byte ptr [ecx+0000008Dh],bl - 100056F1: 8B 54 24 08 mov edx,dword ptr [esp+8] - 100056F5: 88 9A 8E 00 00 00 mov byte ptr [edx+0000008Eh],bl - 100056FB: 8B 44 24 08 mov eax,dword ptr [esp+8] - 100056FF: 8B 88 80 00 00 00 mov ecx,dword ptr [eax+00000080h] - 10005705: 8B 11 mov edx,dword ptr [ecx] - 10005707: 8B 52 50 mov edx,dword ptr [edx+50h] - 1000570A: 8D 44 24 18 lea eax,[esp+18h] - 1000570E: 50 push eax - 1000570F: 8D 44 24 20 lea eax,[esp+20h] - 10005713: 50 push eax - 10005714: 8D 44 24 28 lea eax,[esp+28h] - 10005718: 50 push eax - 10005719: 8D 44 24 30 lea eax,[esp+30h] - 1000571D: 50 push eax - 1000571E: FF D2 call edx - 10005720: 66 3B C3 cmp ax,bx - 10005723: 0F 84 EC 00 00 00 je 10005815 - 10005729: E8 62 D8 FF FF call 10002F90 - 1000572E: 0F B7 C0 movzx eax,ax - 10005731: 66 3B C3 cmp ax,bx - 10005734: 0F 84 DE 00 00 00 je 10005818 - 1000573A: F6 44 24 18 08 test byte ptr [esp+18h],8 - 1000573F: 0F 84 92 00 00 00 je 100057D7 - 10005745: 8B 4C 24 74 mov ecx,dword ptr [esp+74h] - 10005749: 8A 5C 24 7C mov bl,byte ptr [esp+7Ch] - 1000574D: 8B 44 24 70 mov eax,dword ptr [esp+70h] - 10005751: 8B 54 24 78 mov edx,dword ptr [esp+78h] - 10005755: 88 44 24 13 mov byte ptr [esp+13h],al - 10005759: C1 E8 08 shr eax,8 - 1000575C: 88 5C 24 15 mov byte ptr [esp+15h],bl - 10005760: 8A D9 mov bl,cl - 10005762: 88 4C 24 12 mov byte ptr [esp+12h],cl - 10005766: C1 E9 04 shr ecx,4 - 10005769: C0 EB 04 shr bl,4 - 1000576C: 32 C3 xor al,bl - 1000576E: 24 0F and al,0Fh - 10005770: 32 C1 xor al,cl - 10005772: 88 44 24 10 mov byte ptr [esp+10h],al - 10005776: 8B 44 24 7C mov eax,dword ptr [esp+7Ch] - 1000577A: 8A CA mov cl,dl - 1000577C: C0 E9 04 shr cl,4 - 1000577F: C1 E8 08 shr eax,8 - 10005782: 32 C8 xor cl,al - 10005784: 88 54 24 14 mov byte ptr [esp+14h],dl - 10005788: C1 EA 04 shr edx,4 - 1000578B: 80 E1 0F and cl,0Fh - 1000578E: 32 CA xor cl,dl - 10005790: 8D 54 24 28 lea edx,[esp+28h] - 10005794: 52 push edx - 10005795: 8D 44 24 14 lea eax,[esp+14h] - 10005799: 50 push eax - 1000579A: 88 4C 24 19 mov byte ptr [esp+19h],cl - 1000579E: E8 CD 1A 00 00 call 10007270 - 100057A3: 6A 01 push 1 - 100057A5: 6A 00 push 0 - 100057A7: 6A 00 push 0 - 100057A9: 6A 00 push 0 - 100057AB: 6A 00 push 0 - 100057AD: 6A 06 push 6 - 100057AF: 8D 4C 24 48 lea ecx,[esp+48h] - 100057B3: 51 push ecx - 100057B4: 68 C1 00 00 00 push 0C1h - 100057B9: E8 22 DE FF FF call 100035E0 - 100057BE: 83 C4 28 add esp,28h - 100057C1: 5E pop esi - 100057C2: 0F B7 C0 movzx eax,ax - 100057C5: 5B pop ebx - 100057C6: 8B 4C 24 60 mov ecx,dword ptr [esp+60h] - 100057CA: 33 CC xor ecx,esp - 100057CC: E8 CA 48 00 00 call 1000A09B - 100057D1: 83 C4 64 add esp,64h - 100057D4: C2 10 00 ret 10h - 100057D7: 8A 44 24 74 mov al,byte ptr [esp+74h] - 100057DB: 8A 54 24 70 mov dl,byte ptr [esp+70h] - 100057DF: 8A 4C 24 78 mov cl,byte ptr [esp+78h] - 100057E3: 88 44 24 0D mov byte ptr [esp+0Dh],al - 100057E7: 8D 44 24 28 lea eax,[esp+28h] - 100057EB: 88 4C 24 0E mov byte ptr [esp+0Eh],cl - 100057EF: 88 54 24 0C mov byte ptr [esp+0Ch],dl - 100057F3: 8A 54 24 7C mov dl,byte ptr [esp+7Ch] - 100057F7: 50 push eax - 100057F8: 8D 4C 24 10 lea ecx,[esp+10h] - 100057FC: 51 push ecx - 100057FD: 88 54 24 17 mov byte ptr [esp+17h],dl - 10005801: E8 3A 1A 00 00 call 10007240 - 10005806: 6A 01 push 1 - 10005808: 53 push ebx - 10005809: 53 push ebx - 1000580A: 53 push ebx - 1000580B: 53 push ebx - 1000580C: 6A 04 push 4 - 1000580E: 8D 54 24 48 lea edx,[esp+48h] - 10005812: 52 push edx - 10005813: EB 9F jmp 100057B4 - 10005815: 66 8B C6 mov ax,si - 10005818: 8B 4C 24 68 mov ecx,dword ptr [esp+68h] - 1000581C: 5E pop esi - 1000581D: 5B pop ebx - 1000581E: 33 CC xor ecx,esp - 10005820: E8 76 48 00 00 call 1000A09B - 10005825: 83 C4 64 add esp,64h - 10005828: C2 10 00 ret 10h - 1000582B: CC int 3 - 1000582C: CC int 3 - 1000582D: CC int 3 - 1000582E: CC int 3 - 1000582F: CC int 3 - 10005830: 8A 44 24 04 mov al,byte ptr [esp+4] - 10005834: 6A 01 push 1 - 10005836: 6A 00 push 0 - 10005838: 6A 00 push 0 - 1000583A: 6A 00 push 0 - 1000583C: 6A 00 push 0 - 1000583E: 6A 01 push 1 - 10005840: 8D 4C 24 1C lea ecx,[esp+1Ch] - 10005844: 51 push ecx - 10005845: 6A 2E push 2Eh - 10005847: 88 44 24 24 mov byte ptr [esp+24h],al - 1000584B: E8 90 DD FF FF call 100035E0 - 10005850: 83 C4 20 add esp,20h - 10005853: C2 04 00 ret 4 - 10005856: CC int 3 - 10005857: CC int 3 - 10005858: CC int 3 - 10005859: CC int 3 - 1000585A: CC int 3 - 1000585B: CC int 3 - 1000585C: CC int 3 - 1000585D: CC int 3 - 1000585E: CC int 3 - 1000585F: CC int 3 - 10005860: 83 EC 50 sub esp,50h - 10005863: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10005868: 33 C4 xor eax,esp - 1000586A: 89 44 24 4C mov dword ptr [esp+4Ch],eax - 1000586E: 33 C0 xor eax,eax - 10005870: 56 push esi - 10005871: 8B 74 24 5C mov esi,dword ptr [esp+5Ch] - 10005875: 57 push edi - 10005876: 66 8B 7C 24 64 mov di,word ptr [esp+64h] - 1000587B: 89 44 24 0C mov dword ptr [esp+0Ch],eax - 1000587F: 66 89 44 24 10 mov word ptr [esp+10h],ax - 10005884: 88 44 24 12 mov byte ptr [esp+12h],al - 10005888: 32 C0 xor al,al - 1000588A: 8D 9B 00 00 00 00 lea ebx,[ebx+00000000h] - 10005890: 3C 38 cmp al,38h - 10005892: 72 09 jb 1000589D - 10005894: 66 0F B6 C8 movzx cx,al - 10005898: 66 3B CF cmp cx,di - 1000589B: 73 44 jae 100058E1 - 1000589D: 80 3E 01 cmp byte ptr [esi],1 - 100058A0: 75 2A jne 100058CC - 100058A2: 0F B6 C8 movzx ecx,al - 100058A5: 81 E1 07 00 00 80 and ecx,80000007h - 100058AB: 79 05 jns 100058B2 - 100058AD: 49 dec ecx - 100058AE: 83 C9 F8 or ecx,0FFFFFFF8h - 100058B1: 41 inc ecx - 100058B2: BA 01 00 00 00 mov edx,1 - 100058B7: D3 E2 shl edx,cl - 100058B9: 0F B6 C8 movzx ecx,al - 100058BC: C1 E9 03 shr ecx,3 - 100058BF: 08 54 0C 0C or byte ptr [esp+ecx+0Ch],dl - 100058C3: 8D 4C 0C 0C lea ecx,[esp+ecx+0Ch] - 100058C7: 46 inc esi - 100058C8: FE C0 inc al - 100058CA: EB C4 jmp 10005890 - 100058CC: 0F B6 C8 movzx ecx,al - 100058CF: C1 E9 03 shr ecx,3 - 100058D2: 33 D2 xor edx,edx - 100058D4: 08 54 0C 0C or byte ptr [esp+ecx+0Ch],dl - 100058D8: 8D 4C 0C 0C lea ecx,[esp+ecx+0Ch] - 100058DC: 46 inc esi - 100058DD: FE C0 inc al - 100058DF: EB AF jmp 10005890 - 100058E1: 8A 54 24 5C mov dl,byte ptr [esp+5Ch] - 100058E5: 8D 44 24 14 lea eax,[esp+14h] - 100058E9: 50 push eax - 100058EA: 8D 4C 24 10 lea ecx,[esp+10h] - 100058EE: 51 push ecx - 100058EF: 88 54 24 1B mov byte ptr [esp+1Bh],dl - 100058F3: E8 D8 17 00 00 call 100070D0 - 100058F8: 8D 54 24 10 lea edx,[esp+10h] - 100058FC: 52 push edx - 100058FD: E8 4E 3D 00 00 call 10009650 - 10005902: 83 C4 0C add esp,0Ch - 10005905: 5F pop edi - 10005906: 5E pop esi - 10005907: 85 C0 test eax,eax - 10005909: 74 64 je 1000596F - 1000590B: 8B 0C 24 mov ecx,dword ptr [esp] - 1000590E: 83 B9 80 00 00 00 cmp dword ptr [ecx+00000080h],0 - 00 - 10005915: 74 58 je 1000596F - 10005917: C6 81 8C 00 00 00 mov byte ptr [ecx+0000008Ch],0 - 00 - 1000591E: 8B 04 24 mov eax,dword ptr [esp] - 10005921: 6A 01 push 1 - 10005923: 6A 00 push 0 - 10005925: C6 80 8D 00 00 00 mov byte ptr [eax+0000008Dh],0 - 00 - 1000592C: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10005930: 6A 00 push 0 - 10005932: 6A 00 push 0 - 10005934: C6 81 8E 00 00 00 mov byte ptr [ecx+0000008Eh],0 - 00 - 1000593B: 8B 54 24 10 mov edx,dword ptr [esp+10h] - 1000593F: 8B 8A 80 00 00 00 mov ecx,dword ptr [edx+00000080h] - 10005945: 8B 01 mov eax,dword ptr [ecx] - 10005947: 8B 40 48 mov eax,dword ptr [eax+48h] - 1000594A: 6A 00 push 0 - 1000594C: 6A 08 push 8 - 1000594E: 8D 54 24 24 lea edx,[esp+24h] - 10005952: 52 push edx - 10005953: 6A 3F push 3Fh - 10005955: FF D0 call eax - 10005957: 85 C0 test eax,eax - 10005959: 74 14 je 1000596F - 1000595B: 8B 0C 24 mov ecx,dword ptr [esp] - 1000595E: 83 B9 84 00 00 00 cmp dword ptr [ecx+00000084h],0 - 00 - 10005965: 74 08 je 1000596F - 10005967: E8 24 D6 FF FF call 10002F90 - 1000596C: 0F B7 C0 movzx eax,ax - 1000596F: 8B 4C 24 4C mov ecx,dword ptr [esp+4Ch] - 10005973: 33 CC xor ecx,esp - 10005975: E8 21 47 00 00 call 1000A09B - 1000597A: 83 C4 50 add esp,50h - 1000597D: C2 0C 00 ret 0Ch - 10005980: 83 EC 44 sub esp,44h - 10005983: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10005988: 33 C4 xor eax,esp - 1000598A: 89 44 24 40 mov dword ptr [esp+40h],eax - 1000598E: 8D 04 24 lea eax,[esp] - 10005991: 50 push eax - 10005992: 8D 4C 24 4C lea ecx,[esp+4Ch] - 10005996: 51 push ecx - 10005997: E8 A4 18 00 00 call 10007240 - 1000599C: 6A 01 push 1 - 1000599E: 6A 00 push 0 - 100059A0: 6A 00 push 0 - 100059A2: 6A 00 push 0 - 100059A4: 6A 00 push 0 - 100059A6: 6A 04 push 4 - 100059A8: 8D 54 24 20 lea edx,[esp+20h] - 100059AC: 52 push edx - 100059AD: 68 C9 00 00 00 push 0C9h - 100059B2: E8 29 DC FF FF call 100035E0 - 100059B7: 8B 4C 24 68 mov ecx,dword ptr [esp+68h] - 100059BB: 83 C4 28 add esp,28h - 100059BE: 33 CC xor ecx,esp - 100059C0: E8 D6 46 00 00 call 1000A09B - 100059C5: 83 C4 44 add esp,44h - 100059C8: C2 04 00 ret 4 - 100059CB: CC int 3 - 100059CC: CC int 3 - 100059CD: CC int 3 - 100059CE: CC int 3 - 100059CF: CC int 3 - 100059D0: 83 EC 1C sub esp,1Ch - 100059D3: 8B 4C 24 24 mov ecx,dword ptr [esp+24h] - 100059D7: 8B 44 24 20 mov eax,dword ptr [esp+20h] - 100059DB: 8B 54 24 28 mov edx,dword ptr [esp+28h] - 100059DF: 6A 01 push 1 - 100059E1: 68 A0 35 00 10 push 100035A0h - 100059E6: 89 4C 24 0C mov dword ptr [esp+0Ch],ecx - 100059EA: 8B 4C 24 38 mov ecx,dword ptr [esp+38h] - 100059EE: 6A 1C push 1Ch - 100059F0: 89 4C 24 1C mov dword ptr [esp+1Ch],ecx - 100059F4: 8D 4C 24 0C lea ecx,[esp+0Ch] - 100059F8: 51 push ecx - 100059F9: 6A 08 push 8 - 100059FB: 89 44 24 14 mov dword ptr [esp+14h],eax - 100059FF: 8B 44 24 40 mov eax,dword ptr [esp+40h] - 10005A03: 6A 00 push 0 - 10005A05: 89 54 24 20 mov dword ptr [esp+20h],edx - 10005A09: 8B 54 24 4C mov edx,dword ptr [esp+4Ch] - 10005A0D: 89 44 24 24 mov dword ptr [esp+24h],eax - 10005A11: 8B 44 24 50 mov eax,dword ptr [esp+50h] - 10005A15: 6A 00 push 0 - 10005A17: 6A 4A push 4Ah - 10005A19: 89 54 24 34 mov dword ptr [esp+34h],edx - 10005A1D: 89 44 24 38 mov dword ptr [esp+38h],eax - 10005A21: E8 BA DB FF FF call 100035E0 - 10005A26: 83 C4 3C add esp,3Ch - 10005A29: C2 1C 00 ret 1Ch - 10005A2C: CC int 3 - 10005A2D: CC int 3 - 10005A2E: CC int 3 - 10005A2F: CC int 3 - 10005A30: 83 EC 10 sub esp,10h - 10005A33: 8B 4C 24 18 mov ecx,dword ptr [esp+18h] - 10005A37: 8B 44 24 14 mov eax,dword ptr [esp+14h] - 10005A3B: 8B 54 24 1C mov edx,dword ptr [esp+1Ch] - 10005A3F: 6A 01 push 1 - 10005A41: 68 C0 35 00 10 push 100035C0h - 10005A46: 6A 10 push 10h - 10005A48: 89 4C 24 10 mov dword ptr [esp+10h],ecx - 10005A4C: 8D 4C 24 0C lea ecx,[esp+0Ch] - 10005A50: 51 push ecx - 10005A51: 6A 04 push 4 - 10005A53: 6A 00 push 0 - 10005A55: 89 44 24 18 mov dword ptr [esp+18h],eax - 10005A59: 8B 44 24 38 mov eax,dword ptr [esp+38h] - 10005A5D: 6A 00 push 0 - 10005A5F: 6A 4B push 4Bh - 10005A61: 89 54 24 28 mov dword ptr [esp+28h],edx - 10005A65: 89 44 24 2C mov dword ptr [esp+2Ch],eax - 10005A69: E8 72 DB FF FF call 100035E0 - 10005A6E: 83 C4 30 add esp,30h - 10005A71: C2 10 00 ret 10h - 10005A74: CC int 3 - 10005A75: CC int 3 - 10005A76: CC int 3 - 10005A77: CC int 3 - 10005A78: CC int 3 - 10005A79: CC int 3 - 10005A7A: CC int 3 - 10005A7B: CC int 3 - 10005A7C: CC int 3 - 10005A7D: CC int 3 - 10005A7E: CC int 3 - 10005A7F: CC int 3 - 10005A80: 83 EC 70 sub esp,70h - 10005A83: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10005A88: 33 C4 xor eax,esp - 10005A8A: 89 44 24 6C mov dword ptr [esp+6Ch],eax - 10005A8E: 56 push esi - 10005A8F: 8D 44 24 0C lea eax,[esp+0Ch] - 10005A93: 50 push eax - 10005A94: 33 F6 xor esi,esi - 10005A96: E8 B5 3B 00 00 call 10009650 - 10005A9B: 83 C4 04 add esp,4 - 10005A9E: 85 C0 test eax,eax - 10005AA0: 74 4E je 10005AF0 - 10005AA2: 8B 4C 24 0C mov ecx,dword ptr [esp+0Ch] - 10005AA6: 39 B1 80 00 00 00 cmp dword ptr [ecx+00000080h],esi - 10005AAC: 74 42 je 10005AF0 - 10005AAE: C6 81 8C 00 00 00 mov byte ptr [ecx+0000008Ch],0 - 00 - 10005AB5: 8B 4C 24 0C mov ecx,dword ptr [esp+0Ch] - 10005AB9: C6 81 8D 00 00 00 mov byte ptr [ecx+0000008Dh],0 - 00 - 10005AC0: 8B 54 24 0C mov edx,dword ptr [esp+0Ch] - 10005AC4: C6 82 8E 00 00 00 mov byte ptr [edx+0000008Eh],0 - 00 - 10005ACB: 8B 44 24 0C mov eax,dword ptr [esp+0Ch] - 10005ACF: 8B 88 80 00 00 00 mov ecx,dword ptr [eax+00000080h] - 10005AD5: 8B 11 mov edx,dword ptr [ecx] - 10005AD7: 8B 52 50 mov edx,dword ptr [edx+50h] - 10005ADA: 8D 44 24 10 lea eax,[esp+10h] - 10005ADE: 50 push eax - 10005ADF: 8D 44 24 28 lea eax,[esp+28h] - 10005AE3: 50 push eax - 10005AE4: 8D 44 24 30 lea eax,[esp+30h] - 10005AE8: 50 push eax - 10005AE9: 8D 44 24 38 lea eax,[esp+38h] - 10005AED: 50 push eax - 10005AEE: FF D2 call edx - 10005AF0: 66 85 C0 test ax,ax - 10005AF3: 0F 84 40 01 00 00 je 10005C39 - 10005AF9: E8 92 D4 FF FF call 10002F90 - 10005AFE: 66 85 C0 test ax,ax - 10005B01: 0F 84 32 01 00 00 je 10005C39 - 10005B07: F6 44 24 10 80 test byte ptr [esp+10h],80h - 10005B0C: 66 8B B4 24 88 00 mov si,word ptr [esp+00000088h] - 00 00 - 10005B14: 53 push ebx - 10005B15: 8A 9C 24 90 00 00 mov bl,byte ptr [esp+00000090h] - 00 - 10005B1C: 0F 84 9D 00 00 00 je 10005BBF - 10005B22: 8D 44 24 1B lea eax,[esp+1Bh] - 10005B26: 50 push eax - 10005B27: 8D 4C 24 12 lea ecx,[esp+12h] - 10005B2B: 51 push ecx - 10005B2C: 8D 54 24 24 lea edx,[esp+24h] - 10005B30: 52 push edx - 10005B31: 8D 44 24 18 lea eax,[esp+18h] - 10005B35: 50 push eax - 10005B36: 8D 4C 24 1B lea ecx,[esp+1Bh] - 10005B3A: 51 push ecx - 10005B3B: 8D 54 24 21 lea edx,[esp+21h] - 10005B3F: 52 push edx - 10005B40: 8D 44 24 27 lea eax,[esp+27h] - 10005B44: 50 push eax - 10005B45: E8 86 FE FF FF call 100059D0 - 10005B4A: 66 85 C0 test ax,ax - 10005B4D: 74 4D je 10005B9C - 10005B4F: E8 3C D4 FF FF call 10002F90 - 10005B54: 66 85 C0 test ax,ax - 10005B57: 74 43 je 10005B9C - 10005B59: 8A 4C 24 7C mov cl,byte ptr [esp+7Ch] - 10005B5D: 3A 4C 24 0F cmp cl,byte ptr [esp+0Fh] - 10005B61: 75 39 jne 10005B9C - 10005B63: 8A 94 24 80 00 00 mov dl,byte ptr [esp+00000080h] - 00 - 10005B6A: 3A 54 24 0D cmp dl,byte ptr [esp+0Dh] - 10005B6E: 75 2C jne 10005B9C - 10005B70: 8A 84 24 84 00 00 mov al,byte ptr [esp+00000084h] - 00 - 10005B77: 3A 44 24 0B cmp al,byte ptr [esp+0Bh] - 10005B7B: 75 1F jne 10005B9C - 10005B7D: 8A 8C 24 88 00 00 mov cl,byte ptr [esp+00000088h] - 00 - 10005B84: 3A 4C 24 0C cmp cl,byte ptr [esp+0Ch] - 10005B88: 75 12 jne 10005B9C - 10005B8A: 66 3B 74 24 1C cmp si,word ptr [esp+1Ch] - 10005B8F: 75 0B jne 10005B9C - 10005B91: 8A 54 24 0E mov dl,byte ptr [esp+0Eh] - 10005B95: 32 D3 xor dl,bl - 10005B97: F6 C2 07 test dl,7 - 10005B9A: 74 23 je 10005BBF - 10005B9C: 6A 00 push 0 - 10005B9E: 6A 1C push 1Ch - 10005BA0: 6A 02 push 2 - 10005BA2: E8 C9 3A 00 00 call 10009670 - 10005BA7: 83 C4 0C add esp,0Ch - 10005BAA: 5B pop ebx - 10005BAB: 33 C0 xor eax,eax - 10005BAD: 5E pop esi - 10005BAE: 8B 4C 24 6C mov ecx,dword ptr [esp+6Ch] - 10005BB2: 33 CC xor ecx,esp - 10005BB4: E8 E2 44 00 00 call 1000A09B - 10005BB9: 83 C4 70 add esp,70h - 10005BBC: C2 1C 00 ret 1Ch - 10005BBF: 8A 44 24 7C mov al,byte ptr [esp+7Ch] - 10005BC3: 8A 94 24 84 00 00 mov dl,byte ptr [esp+00000084h] - 00 - 10005BCA: 8A 8C 24 80 00 00 mov cl,byte ptr [esp+00000080h] - 00 - 10005BD1: 88 44 24 20 mov byte ptr [esp+20h],al - 10005BD5: 8A 84 24 88 00 00 mov al,byte ptr [esp+00000088h] - 00 - 10005BDC: 88 54 24 22 mov byte ptr [esp+22h],dl - 10005BE0: 8D 54 24 34 lea edx,[esp+34h] - 10005BE4: 88 44 24 23 mov byte ptr [esp+23h],al - 10005BE8: 88 4C 24 21 mov byte ptr [esp+21h],cl - 10005BEC: 8A 8C 24 94 00 00 mov cl,byte ptr [esp+00000094h] - 00 - 10005BF3: 52 push edx - 10005BF4: 8D 44 24 24 lea eax,[esp+24h] - 10005BF8: 50 push eax - 10005BF9: 66 89 74 24 2C mov word ptr [esp+2Ch],si - 10005BFE: 88 5C 24 2E mov byte ptr [esp+2Eh],bl - 10005C02: 88 4C 24 2F mov byte ptr [esp+2Fh],cl - 10005C06: E8 A5 16 00 00 call 100072B0 - 10005C0B: 6A 01 push 1 - 10005C0D: 6A 00 push 0 - 10005C0F: 6A 00 push 0 - 10005C11: 6A 00 push 0 - 10005C13: 6A 00 push 0 - 10005C15: 6A 08 push 8 - 10005C17: 8D 4C 24 54 lea ecx,[esp+54h] - 10005C1B: 51 push ecx - 10005C1C: 6A 4C push 4Ch - 10005C1E: E8 BD D9 FF FF call 100035E0 - 10005C23: 83 C4 28 add esp,28h - 10005C26: 5B pop ebx - 10005C27: 5E pop esi - 10005C28: 8B 4C 24 6C mov ecx,dword ptr [esp+6Ch] - 10005C2C: 33 CC xor ecx,esp - 10005C2E: E8 68 44 00 00 call 1000A09B - 10005C33: 83 C4 70 add esp,70h - 10005C36: C2 1C 00 ret 1Ch - 10005C39: 8B 4C 24 70 mov ecx,dword ptr [esp+70h] - 10005C3D: 66 8B C6 mov ax,si - 10005C40: 5E pop esi - 10005C41: 33 CC xor ecx,esp - 10005C43: E8 53 44 00 00 call 1000A09B - 10005C48: 83 C4 70 add esp,70h - 10005C4B: C2 1C 00 ret 1Ch - 10005C4E: CC int 3 - 10005C4F: CC int 3 - 10005C50: 6A 01 push 1 - 10005C52: 6A 00 push 0 - 10005C54: 6A 00 push 0 - 10005C56: 6A 00 push 0 - 10005C58: 6A 00 push 0 - 10005C5A: 6A 00 push 0 - 10005C5C: 6A 00 push 0 - 10005C5E: 6A 4D push 4Dh - 10005C60: E8 7B D9 FF FF call 100035E0 - 10005C65: 83 C4 20 add esp,20h - 10005C68: C3 ret - 10005C69: CC int 3 - 10005C6A: CC int 3 - 10005C6B: CC int 3 - 10005C6C: CC int 3 - 10005C6D: CC int 3 - 10005C6E: CC int 3 - 10005C6F: CC int 3 - 10005C70: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10005C74: 0F B6 10 movzx edx,byte ptr [eax] - 10005C77: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10005C7B: 40 inc eax - 10005C7C: 88 11 mov byte ptr [ecx],dl - 10005C7E: 0F B6 10 movzx edx,byte ptr [eax] - 10005C81: 40 inc eax - 10005C82: 88 51 01 mov byte ptr [ecx+1],dl - 10005C85: 0F B6 10 movzx edx,byte ptr [eax] - 10005C88: 40 inc eax - 10005C89: 88 51 02 mov byte ptr [ecx+2],dl - 10005C8C: 0F B6 10 movzx edx,byte ptr [eax] - 10005C8F: 88 51 03 mov byte ptr [ecx+3],dl - 10005C92: 40 inc eax - 10005C93: C3 ret - 10005C94: CC int 3 - 10005C95: CC int 3 - 10005C96: CC int 3 - 10005C97: CC int 3 - 10005C98: CC int 3 - 10005C99: CC int 3 - 10005C9A: CC int 3 - 10005C9B: CC int 3 - 10005C9C: CC int 3 - 10005C9D: CC int 3 - 10005C9E: CC int 3 - 10005C9F: CC int 3 - 10005CA0: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10005CA4: 8B 11 mov edx,dword ptr [ecx] - 10005CA6: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10005CAA: 53 push ebx - 10005CAB: 0F B6 18 movzx ebx,byte ptr [eax] - 10005CAE: 88 1A mov byte ptr [edx],bl - 10005CB0: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005CB4: 8B 11 mov edx,dword ptr [ecx] - 10005CB6: 88 5A 01 mov byte ptr [edx+1],bl - 10005CB9: 8B 51 04 mov edx,dword ptr [ecx+4] - 10005CBC: 40 inc eax - 10005CBD: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005CC1: 88 1A mov byte ptr [edx],bl - 10005CC3: 8B 51 04 mov edx,dword ptr [ecx+4] - 10005CC6: 40 inc eax - 10005CC7: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005CCB: 88 5A 01 mov byte ptr [edx+1],bl - 10005CCE: 8B 51 08 mov edx,dword ptr [ecx+8] - 10005CD1: 40 inc eax - 10005CD2: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005CD6: 88 1A mov byte ptr [edx],bl - 10005CD8: 8B 51 08 mov edx,dword ptr [ecx+8] - 10005CDB: 40 inc eax - 10005CDC: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005CE0: 88 5A 01 mov byte ptr [edx+1],bl - 10005CE3: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 10005CE6: 40 inc eax - 10005CE7: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005CEB: 88 1A mov byte ptr [edx],bl - 10005CED: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 10005CF0: 40 inc eax - 10005CF1: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005CF5: 88 5A 01 mov byte ptr [edx+1],bl - 10005CF8: 8B 51 10 mov edx,dword ptr [ecx+10h] - 10005CFB: 40 inc eax - 10005CFC: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005D00: 88 1A mov byte ptr [edx],bl - 10005D02: 8B 51 10 mov edx,dword ptr [ecx+10h] - 10005D05: 40 inc eax - 10005D06: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005D0A: 88 5A 01 mov byte ptr [edx+1],bl - 10005D0D: 8B 51 14 mov edx,dword ptr [ecx+14h] - 10005D10: 40 inc eax - 10005D11: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005D15: 40 inc eax - 10005D16: 88 1A mov byte ptr [edx],bl - 10005D18: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005D1C: 8B 51 14 mov edx,dword ptr [ecx+14h] - 10005D1F: 40 inc eax - 10005D20: 88 5A 01 mov byte ptr [edx+1],bl - 10005D23: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005D27: 8B 51 18 mov edx,dword ptr [ecx+18h] - 10005D2A: 40 inc eax - 10005D2B: 88 1A mov byte ptr [edx],bl - 10005D2D: 8A 50 01 mov dl,byte ptr [eax+1] - 10005D30: 8B 49 18 mov ecx,dword ptr [ecx+18h] - 10005D33: 40 inc eax - 10005D34: 88 51 01 mov byte ptr [ecx+1],dl - 10005D37: 40 inc eax - 10005D38: 5B pop ebx - 10005D39: C3 ret - 10005D3A: CC int 3 - 10005D3B: CC int 3 - 10005D3C: CC int 3 - 10005D3D: CC int 3 - 10005D3E: CC int 3 - 10005D3F: CC int 3 - 10005D40: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10005D44: 8B 11 mov edx,dword ptr [ecx] - 10005D46: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10005D4A: 53 push ebx - 10005D4B: 0F B6 18 movzx ebx,byte ptr [eax] - 10005D4E: 88 1A mov byte ptr [edx],bl - 10005D50: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005D54: 8B 11 mov edx,dword ptr [ecx] - 10005D56: 88 5A 01 mov byte ptr [edx+1],bl - 10005D59: 8B 11 mov edx,dword ptr [ecx] - 10005D5B: 40 inc eax - 10005D5C: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005D60: 88 5A 02 mov byte ptr [edx+2],bl - 10005D63: 8B 11 mov edx,dword ptr [ecx] - 10005D65: 40 inc eax - 10005D66: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005D6A: 88 5A 03 mov byte ptr [edx+3],bl - 10005D6D: 8B 51 04 mov edx,dword ptr [ecx+4] - 10005D70: 40 inc eax - 10005D71: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005D75: 88 1A mov byte ptr [edx],bl - 10005D77: 8B 51 04 mov edx,dword ptr [ecx+4] - 10005D7A: 40 inc eax - 10005D7B: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005D7F: 88 5A 01 mov byte ptr [edx+1],bl - 10005D82: 8B 51 04 mov edx,dword ptr [ecx+4] - 10005D85: 40 inc eax - 10005D86: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005D8A: 88 5A 02 mov byte ptr [edx+2],bl - 10005D8D: 8B 51 04 mov edx,dword ptr [ecx+4] - 10005D90: 40 inc eax - 10005D91: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005D95: 88 5A 03 mov byte ptr [edx+3],bl - 10005D98: 8B 51 08 mov edx,dword ptr [ecx+8] - 10005D9B: 40 inc eax - 10005D9C: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005DA0: 88 1A mov byte ptr [edx],bl - 10005DA2: 8B 51 08 mov edx,dword ptr [ecx+8] - 10005DA5: 40 inc eax - 10005DA6: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005DAA: 88 5A 01 mov byte ptr [edx+1],bl - 10005DAD: 8B 51 08 mov edx,dword ptr [ecx+8] - 10005DB0: 40 inc eax - 10005DB1: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005DB5: 88 5A 02 mov byte ptr [edx+2],bl - 10005DB8: 8B 51 08 mov edx,dword ptr [ecx+8] - 10005DBB: 40 inc eax - 10005DBC: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005DC0: 88 5A 03 mov byte ptr [edx+3],bl - 10005DC3: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 10005DC6: 40 inc eax - 10005DC7: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005DCB: 88 1A mov byte ptr [edx],bl - 10005DCD: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 10005DD0: 40 inc eax - 10005DD1: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005DD5: 88 5A 01 mov byte ptr [edx+1],bl - 10005DD8: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 10005DDB: 40 inc eax - 10005DDC: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005DE0: 88 5A 02 mov byte ptr [edx+2],bl - 10005DE3: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 10005DE6: 40 inc eax - 10005DE7: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005DEB: 40 inc eax - 10005DEC: 88 5A 03 mov byte ptr [edx+3],bl - 10005DEF: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005DF3: 8B 51 10 mov edx,dword ptr [ecx+10h] - 10005DF6: 40 inc eax - 10005DF7: 88 1A mov byte ptr [edx],bl - 10005DF9: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005DFD: 8B 51 10 mov edx,dword ptr [ecx+10h] - 10005E00: 40 inc eax - 10005E01: 88 5A 01 mov byte ptr [edx+1],bl - 10005E04: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005E08: 8B 51 14 mov edx,dword ptr [ecx+14h] - 10005E0B: 40 inc eax - 10005E0C: 88 1A mov byte ptr [edx],bl - 10005E0E: 8B 51 14 mov edx,dword ptr [ecx+14h] - 10005E11: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005E15: 40 inc eax - 10005E16: 88 5A 01 mov byte ptr [edx+1],bl - 10005E19: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005E1D: 8B 51 18 mov edx,dword ptr [ecx+18h] - 10005E20: 40 inc eax - 10005E21: 88 1A mov byte ptr [edx],bl - 10005E23: 8A 50 01 mov dl,byte ptr [eax+1] - 10005E26: 8B 49 18 mov ecx,dword ptr [ecx+18h] - 10005E29: 40 inc eax - 10005E2A: 88 51 01 mov byte ptr [ecx+1],dl - 10005E2D: 40 inc eax - 10005E2E: 5B pop ebx - 10005E2F: C3 ret - 10005E30: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10005E34: 8B 11 mov edx,dword ptr [ecx] - 10005E36: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10005E3A: 53 push ebx - 10005E3B: 0F B6 18 movzx ebx,byte ptr [eax] - 10005E3E: 88 1A mov byte ptr [edx],bl - 10005E40: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005E44: 8B 11 mov edx,dword ptr [ecx] - 10005E46: 88 5A 01 mov byte ptr [edx+1],bl - 10005E49: 8B 11 mov edx,dword ptr [ecx] - 10005E4B: 40 inc eax - 10005E4C: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005E50: 88 5A 02 mov byte ptr [edx+2],bl - 10005E53: 8B 11 mov edx,dword ptr [ecx] - 10005E55: 40 inc eax - 10005E56: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005E5A: 88 5A 03 mov byte ptr [edx+3],bl - 10005E5D: 8B 51 04 mov edx,dword ptr [ecx+4] - 10005E60: 40 inc eax - 10005E61: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005E65: 88 1A mov byte ptr [edx],bl - 10005E67: 8B 51 04 mov edx,dword ptr [ecx+4] - 10005E6A: 40 inc eax - 10005E6B: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005E6F: 88 5A 01 mov byte ptr [edx+1],bl - 10005E72: 8B 51 04 mov edx,dword ptr [ecx+4] - 10005E75: 40 inc eax - 10005E76: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005E7A: 88 5A 02 mov byte ptr [edx+2],bl - 10005E7D: 8B 51 04 mov edx,dword ptr [ecx+4] - 10005E80: 40 inc eax - 10005E81: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005E85: 88 5A 03 mov byte ptr [edx+3],bl - 10005E88: 8B 51 08 mov edx,dword ptr [ecx+8] - 10005E8B: 40 inc eax - 10005E8C: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005E90: 88 1A mov byte ptr [edx],bl - 10005E92: 8B 51 08 mov edx,dword ptr [ecx+8] - 10005E95: 40 inc eax - 10005E96: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005E9A: 88 5A 01 mov byte ptr [edx+1],bl - 10005E9D: 8B 51 08 mov edx,dword ptr [ecx+8] - 10005EA0: 40 inc eax - 10005EA1: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005EA5: 88 5A 02 mov byte ptr [edx+2],bl - 10005EA8: 8B 51 08 mov edx,dword ptr [ecx+8] - 10005EAB: 40 inc eax - 10005EAC: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005EB0: 88 5A 03 mov byte ptr [edx+3],bl - 10005EB3: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 10005EB6: 40 inc eax - 10005EB7: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005EBB: 40 inc eax - 10005EBC: 88 1A mov byte ptr [edx],bl - 10005EBE: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005EC2: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 10005EC5: 40 inc eax - 10005EC6: 88 5A 01 mov byte ptr [edx+1],bl - 10005EC9: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005ECD: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 10005ED0: 40 inc eax - 10005ED1: 88 5A 02 mov byte ptr [edx+2],bl - 10005ED4: 8A 50 01 mov dl,byte ptr [eax+1] - 10005ED7: 8B 49 0C mov ecx,dword ptr [ecx+0Ch] - 10005EDA: 40 inc eax - 10005EDB: 88 51 03 mov byte ptr [ecx+3],dl - 10005EDE: 40 inc eax - 10005EDF: 5B pop ebx - 10005EE0: C3 ret - 10005EE1: CC int 3 - 10005EE2: CC int 3 - 10005EE3: CC int 3 - 10005EE4: CC int 3 - 10005EE5: CC int 3 - 10005EE6: CC int 3 - 10005EE7: CC int 3 - 10005EE8: CC int 3 - 10005EE9: CC int 3 - 10005EEA: CC int 3 - 10005EEB: CC int 3 - 10005EEC: CC int 3 - 10005EED: CC int 3 - 10005EEE: CC int 3 - 10005EEF: CC int 3 - 10005EF0: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10005EF4: 8B 11 mov edx,dword ptr [ecx] - 10005EF6: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10005EFA: 53 push ebx - 10005EFB: 0F B6 18 movzx ebx,byte ptr [eax] - 10005EFE: 88 1A mov byte ptr [edx],bl - 10005F00: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005F04: 8B 11 mov edx,dword ptr [ecx] - 10005F06: 88 5A 01 mov byte ptr [edx+1],bl - 10005F09: 8B 11 mov edx,dword ptr [ecx] - 10005F0B: 40 inc eax - 10005F0C: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005F10: 88 5A 02 mov byte ptr [edx+2],bl - 10005F13: 8B 11 mov edx,dword ptr [ecx] - 10005F15: 40 inc eax - 10005F16: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005F1A: 88 5A 03 mov byte ptr [edx+3],bl - 10005F1D: 8B 51 04 mov edx,dword ptr [ecx+4] - 10005F20: 40 inc eax - 10005F21: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005F25: 40 inc eax - 10005F26: 88 1A mov byte ptr [edx],bl - 10005F28: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005F2C: 8B 51 04 mov edx,dword ptr [ecx+4] - 10005F2F: 40 inc eax - 10005F30: 88 5A 01 mov byte ptr [edx+1],bl - 10005F33: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005F37: 8B 51 04 mov edx,dword ptr [ecx+4] - 10005F3A: 40 inc eax - 10005F3B: 88 5A 02 mov byte ptr [edx+2],bl - 10005F3E: 8A 50 01 mov dl,byte ptr [eax+1] - 10005F41: 8B 49 04 mov ecx,dword ptr [ecx+4] - 10005F44: 40 inc eax - 10005F45: 88 51 03 mov byte ptr [ecx+3],dl - 10005F48: 40 inc eax - 10005F49: 5B pop ebx - 10005F4A: C3 ret - 10005F4B: CC int 3 - 10005F4C: CC int 3 - 10005F4D: CC int 3 - 10005F4E: CC int 3 - 10005F4F: CC int 3 - 10005F50: 53 push ebx - 10005F51: 56 push esi - 10005F52: 8B 4C 24 10 mov ecx,dword ptr [esp+10h] - 10005F56: 8B 11 mov edx,dword ptr [ecx] - 10005F58: 8B 44 24 0C mov eax,dword ptr [esp+0Ch] - 10005F5C: 0F B6 18 movzx ebx,byte ptr [eax] - 10005F5F: 88 1A mov byte ptr [edx],bl - 10005F61: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005F65: 8B 11 mov edx,dword ptr [ecx] - 10005F67: 88 5A 01 mov byte ptr [edx+1],bl - 10005F6A: 8B 51 04 mov edx,dword ptr [ecx+4] - 10005F6D: 40 inc eax - 10005F6E: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005F72: 88 1A mov byte ptr [edx],bl - 10005F74: 8B 51 04 mov edx,dword ptr [ecx+4] - 10005F77: 40 inc eax - 10005F78: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005F7C: 88 5A 01 mov byte ptr [edx+1],bl - 10005F7F: 8B 51 08 mov edx,dword ptr [ecx+8] - 10005F82: 40 inc eax - 10005F83: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005F87: 88 1A mov byte ptr [edx],bl - 10005F89: 8B 51 08 mov edx,dword ptr [ecx+8] - 10005F8C: 40 inc eax - 10005F8D: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005F91: 88 5A 01 mov byte ptr [edx+1],bl - 10005F94: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 10005F97: 40 inc eax - 10005F98: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005F9C: 88 1A mov byte ptr [edx],bl - 10005F9E: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 10005FA1: 40 inc eax - 10005FA2: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005FA6: 88 5A 01 mov byte ptr [edx+1],bl - 10005FA9: 8B 51 10 mov edx,dword ptr [ecx+10h] - 10005FAC: 40 inc eax - 10005FAD: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005FB1: 88 1A mov byte ptr [edx],bl - 10005FB3: 8B 51 10 mov edx,dword ptr [ecx+10h] - 10005FB6: 40 inc eax - 10005FB7: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005FBB: 88 5A 01 mov byte ptr [edx+1],bl - 10005FBE: 8B 51 14 mov edx,dword ptr [ecx+14h] - 10005FC1: 40 inc eax - 10005FC2: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005FC6: 88 1A mov byte ptr [edx],bl - 10005FC8: 8B 51 14 mov edx,dword ptr [ecx+14h] - 10005FCB: 40 inc eax - 10005FCC: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10005FD0: 88 5A 01 mov byte ptr [edx+1],bl - 10005FD3: 40 inc eax - 10005FD4: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10005FD8: 40 inc eax - 10005FD9: 8B 71 18 mov esi,dword ptr [ecx+18h] - 10005FDC: 66 89 16 mov word ptr [esi],dx - 10005FDF: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10005FE3: 8B 71 1C mov esi,dword ptr [ecx+1Ch] - 10005FE6: 40 inc eax - 10005FE7: 66 89 16 mov word ptr [esi],dx - 10005FEA: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10005FEE: 8B 71 20 mov esi,dword ptr [ecx+20h] - 10005FF1: 40 inc eax - 10005FF2: 66 89 16 mov word ptr [esi],dx - 10005FF5: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10005FF9: 8B 49 24 mov ecx,dword ptr [ecx+24h] - 10005FFC: 40 inc eax - 10005FFD: 5E pop esi - 10005FFE: 66 89 11 mov word ptr [ecx],dx - 10006001: 83 C0 03 add eax,3 - 10006004: 5B pop ebx - 10006005: C3 ret - 10006006: CC int 3 - 10006007: CC int 3 - 10006008: CC int 3 - 10006009: CC int 3 - 1000600A: CC int 3 - 1000600B: CC int 3 - 1000600C: CC int 3 - 1000600D: CC int 3 - 1000600E: CC int 3 - 1000600F: CC int 3 - 10006010: 53 push ebx - 10006011: 56 push esi - 10006012: 57 push edi - 10006013: 8B 4C 24 14 mov ecx,dword ptr [esp+14h] - 10006017: 8B 11 mov edx,dword ptr [ecx] - 10006019: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 1000601D: 0F B6 18 movzx ebx,byte ptr [eax] - 10006020: 88 1A mov byte ptr [edx],bl - 10006022: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006026: 8B 11 mov edx,dword ptr [ecx] - 10006028: 88 5A 01 mov byte ptr [edx+1],bl - 1000602B: 8B 51 04 mov edx,dword ptr [ecx+4] - 1000602E: 40 inc eax - 1000602F: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006033: 88 1A mov byte ptr [edx],bl - 10006035: 8B 51 04 mov edx,dword ptr [ecx+4] - 10006038: 40 inc eax - 10006039: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 1000603D: 88 5A 01 mov byte ptr [edx+1],bl - 10006040: 8B 51 08 mov edx,dword ptr [ecx+8] - 10006043: 40 inc eax - 10006044: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006048: 88 1A mov byte ptr [edx],bl - 1000604A: 8B 51 08 mov edx,dword ptr [ecx+8] - 1000604D: 40 inc eax - 1000604E: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006052: 88 5A 01 mov byte ptr [edx+1],bl - 10006055: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 10006058: 40 inc eax - 10006059: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 1000605D: 88 1A mov byte ptr [edx],bl - 1000605F: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 10006062: 40 inc eax - 10006063: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006067: 88 5A 01 mov byte ptr [edx+1],bl - 1000606A: 8B 51 10 mov edx,dword ptr [ecx+10h] - 1000606D: 40 inc eax - 1000606E: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006072: 88 1A mov byte ptr [edx],bl - 10006074: 8B 51 10 mov edx,dword ptr [ecx+10h] - 10006077: 40 inc eax - 10006078: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 1000607C: 88 5A 01 mov byte ptr [edx+1],bl - 1000607F: 8B 51 14 mov edx,dword ptr [ecx+14h] - 10006082: 40 inc eax - 10006083: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006087: 88 1A mov byte ptr [edx],bl - 10006089: 8B 51 14 mov edx,dword ptr [ecx+14h] - 1000608C: 40 inc eax - 1000608D: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006091: 88 5A 01 mov byte ptr [edx+1],bl - 10006094: 8B 59 1C mov ebx,dword ptr [ecx+1Ch] - 10006097: 40 inc eax - 10006098: 66 0F B6 50 01 movzx dx,byte ptr [eax+1] - 1000609D: 40 inc eax - 1000609E: 40 inc eax - 1000609F: 66 0F B6 30 movzx si,byte ptr [eax] - 100060A3: 0F B6 78 01 movzx edi,byte ptr [eax+1] - 100060A7: 66 89 3B mov word ptr [ebx],di - 100060AA: 8B 59 18 mov ebx,dword ptr [ecx+18h] - 100060AD: 40 inc eax - 100060AE: 0F B6 78 01 movzx edi,byte ptr [eax+1] - 100060B2: 66 89 3B mov word ptr [ebx],di - 100060B5: 8B 59 20 mov ebx,dword ptr [ecx+20h] - 100060B8: 40 inc eax - 100060B9: 0F B6 78 01 movzx edi,byte ptr [eax+1] - 100060BD: 40 inc eax - 100060BE: 66 89 3B mov word ptr [ebx],di - 100060C1: 0F B6 78 01 movzx edi,byte ptr [eax+1] - 100060C5: 8B 59 24 mov ebx,dword ptr [ecx+24h] - 100060C8: 40 inc eax - 100060C9: 66 89 3B mov word ptr [ebx],di - 100060CC: 8B 79 1C mov edi,dword ptr [ecx+1Ch] - 100060CF: 0F B7 D2 movzx edx,dx - 100060D2: 8B DA mov ebx,edx - 100060D4: 81 E3 F0 00 00 00 and ebx,0F0h - 100060DA: C1 E3 04 shl ebx,4 - 100060DD: 66 09 1F or word ptr [edi],bx - 100060E0: 8B 79 18 mov edi,dword ptr [ecx+18h] - 100060E3: 0F B7 F6 movzx esi,si - 100060E6: 83 E2 0F and edx,0Fh - 100060E9: C1 E2 08 shl edx,8 - 100060EC: 66 09 17 or word ptr [edi],dx - 100060EF: 8B 51 24 mov edx,dword ptr [ecx+24h] - 100060F2: 8B FE mov edi,esi - 100060F4: 83 E7 0F and edi,0Fh - 100060F7: C1 E7 08 shl edi,8 - 100060FA: 66 09 3A or word ptr [edx],di - 100060FD: 8B 49 20 mov ecx,dword ptr [ecx+20h] - 10006100: 81 E6 F0 00 00 00 and esi,0F0h - 10006106: C1 E6 04 shl esi,4 - 10006109: 66 09 31 or word ptr [ecx],si - 1000610C: 5F pop edi - 1000610D: 5E pop esi - 1000610E: 83 C0 03 add eax,3 - 10006111: 5B pop ebx - 10006112: C3 ret - 10006113: CC int 3 - 10006114: CC int 3 - 10006115: CC int 3 - 10006116: CC int 3 - 10006117: CC int 3 - 10006118: CC int 3 - 10006119: CC int 3 - 1000611A: CC int 3 - 1000611B: CC int 3 - 1000611C: CC int 3 - 1000611D: CC int 3 - 1000611E: CC int 3 - 1000611F: CC int 3 - 10006120: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10006124: 8B 11 mov edx,dword ptr [ecx] - 10006126: 8B 44 24 04 mov eax,dword ptr [esp+4] - 1000612A: 53 push ebx - 1000612B: 0F B6 18 movzx ebx,byte ptr [eax] - 1000612E: 88 1A mov byte ptr [edx],bl - 10006130: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006134: 8B 11 mov edx,dword ptr [ecx] - 10006136: 88 5A 01 mov byte ptr [edx+1],bl - 10006139: 8B 11 mov edx,dword ptr [ecx] - 1000613B: 40 inc eax - 1000613C: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006140: 88 5A 02 mov byte ptr [edx+2],bl - 10006143: 8B 11 mov edx,dword ptr [ecx] - 10006145: 40 inc eax - 10006146: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 1000614A: 88 5A 03 mov byte ptr [edx+3],bl - 1000614D: 8B 51 04 mov edx,dword ptr [ecx+4] - 10006150: 40 inc eax - 10006151: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006155: 88 1A mov byte ptr [edx],bl - 10006157: 8B 51 04 mov edx,dword ptr [ecx+4] - 1000615A: 40 inc eax - 1000615B: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 1000615F: 88 5A 01 mov byte ptr [edx+1],bl - 10006162: 8B 51 04 mov edx,dword ptr [ecx+4] - 10006165: 40 inc eax - 10006166: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 1000616A: 88 5A 02 mov byte ptr [edx+2],bl - 1000616D: 8B 51 04 mov edx,dword ptr [ecx+4] - 10006170: 40 inc eax - 10006171: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006175: 88 5A 03 mov byte ptr [edx+3],bl - 10006178: 8B 51 08 mov edx,dword ptr [ecx+8] - 1000617B: 40 inc eax - 1000617C: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006180: 40 inc eax - 10006181: 88 1A mov byte ptr [edx],bl - 10006183: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006187: 8B 51 08 mov edx,dword ptr [ecx+8] - 1000618A: 40 inc eax - 1000618B: 88 5A 01 mov byte ptr [edx+1],bl - 1000618E: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006192: 8B 51 08 mov edx,dword ptr [ecx+8] - 10006195: 40 inc eax - 10006196: 88 5A 02 mov byte ptr [edx+2],bl - 10006199: 8A 50 01 mov dl,byte ptr [eax+1] - 1000619C: 8B 49 08 mov ecx,dword ptr [ecx+8] - 1000619F: 40 inc eax - 100061A0: 88 51 03 mov byte ptr [ecx+3],dl - 100061A3: 83 C0 03 add eax,3 - 100061A6: 5B pop ebx - 100061A7: C3 ret - 100061A8: CC int 3 - 100061A9: CC int 3 - 100061AA: CC int 3 - 100061AB: CC int 3 - 100061AC: CC int 3 - 100061AD: CC int 3 - 100061AE: CC int 3 - 100061AF: CC int 3 - 100061B0: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 100061B4: 8B 11 mov edx,dword ptr [ecx] - 100061B6: 8B 44 24 04 mov eax,dword ptr [esp+4] - 100061BA: 53 push ebx - 100061BB: 0F B6 18 movzx ebx,byte ptr [eax] - 100061BE: 88 1A mov byte ptr [edx],bl - 100061C0: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100061C4: 8B 11 mov edx,dword ptr [ecx] - 100061C6: 88 5A 01 mov byte ptr [edx+1],bl - 100061C9: 8B 11 mov edx,dword ptr [ecx] - 100061CB: 40 inc eax - 100061CC: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100061D0: 88 5A 02 mov byte ptr [edx+2],bl - 100061D3: 8B 11 mov edx,dword ptr [ecx] - 100061D5: 40 inc eax - 100061D6: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100061DA: 88 5A 03 mov byte ptr [edx+3],bl - 100061DD: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 100061E0: 40 inc eax - 100061E1: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100061E5: 88 1A mov byte ptr [edx],bl - 100061E7: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 100061EA: 40 inc eax - 100061EB: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100061EF: 88 5A 01 mov byte ptr [edx+1],bl - 100061F2: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 100061F5: 40 inc eax - 100061F6: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100061FA: 88 5A 02 mov byte ptr [edx+2],bl - 100061FD: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 10006200: 40 inc eax - 10006201: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006205: 88 5A 03 mov byte ptr [edx+3],bl - 10006208: 8B 51 04 mov edx,dword ptr [ecx+4] - 1000620B: 40 inc eax - 1000620C: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006210: 88 1A mov byte ptr [edx],bl - 10006212: 8B 51 04 mov edx,dword ptr [ecx+4] - 10006215: 40 inc eax - 10006216: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 1000621A: 88 5A 01 mov byte ptr [edx+1],bl - 1000621D: 8B 51 04 mov edx,dword ptr [ecx+4] - 10006220: 40 inc eax - 10006221: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006225: 88 5A 02 mov byte ptr [edx+2],bl - 10006228: 8B 51 04 mov edx,dword ptr [ecx+4] - 1000622B: 40 inc eax - 1000622C: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006230: 88 5A 03 mov byte ptr [edx+3],bl - 10006233: 8B 51 10 mov edx,dword ptr [ecx+10h] - 10006236: 40 inc eax - 10006237: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 1000623B: 88 1A mov byte ptr [edx],bl - 1000623D: 8B 51 10 mov edx,dword ptr [ecx+10h] - 10006240: 40 inc eax - 10006241: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006245: 88 5A 01 mov byte ptr [edx+1],bl - 10006248: 8B 51 10 mov edx,dword ptr [ecx+10h] - 1000624B: 40 inc eax - 1000624C: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006250: 88 5A 02 mov byte ptr [edx+2],bl - 10006253: 8B 51 10 mov edx,dword ptr [ecx+10h] - 10006256: 40 inc eax - 10006257: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 1000625B: 40 inc eax - 1000625C: 88 5A 03 mov byte ptr [edx+3],bl - 1000625F: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006263: 8B 51 08 mov edx,dword ptr [ecx+8] - 10006266: 40 inc eax - 10006267: 88 1A mov byte ptr [edx],bl - 10006269: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 1000626D: 8B 51 08 mov edx,dword ptr [ecx+8] - 10006270: 40 inc eax - 10006271: 88 5A 01 mov byte ptr [edx+1],bl - 10006274: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006278: 8B 51 08 mov edx,dword ptr [ecx+8] - 1000627B: 40 inc eax - 1000627C: 88 5A 02 mov byte ptr [edx+2],bl - 1000627F: 8B 51 08 mov edx,dword ptr [ecx+8] - 10006282: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006286: 40 inc eax - 10006287: 88 5A 03 mov byte ptr [edx+3],bl - 1000628A: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 1000628E: 8B 51 14 mov edx,dword ptr [ecx+14h] - 10006291: 40 inc eax - 10006292: 88 1A mov byte ptr [edx],bl - 10006294: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006298: 8B 51 14 mov edx,dword ptr [ecx+14h] - 1000629B: 40 inc eax - 1000629C: 88 5A 01 mov byte ptr [edx+1],bl - 1000629F: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100062A3: 8B 51 14 mov edx,dword ptr [ecx+14h] - 100062A6: 40 inc eax - 100062A7: 88 5A 02 mov byte ptr [edx+2],bl - 100062AA: 8A 50 01 mov dl,byte ptr [eax+1] - 100062AD: 8B 49 14 mov ecx,dword ptr [ecx+14h] - 100062B0: 40 inc eax - 100062B1: 88 51 03 mov byte ptr [ecx+3],dl - 100062B4: 83 C0 03 add eax,3 - 100062B7: 5B pop ebx - 100062B8: C3 ret - 100062B9: CC int 3 - 100062BA: CC int 3 - 100062BB: CC int 3 - 100062BC: CC int 3 - 100062BD: CC int 3 - 100062BE: CC int 3 - 100062BF: CC int 3 - 100062C0: 53 push ebx - 100062C1: 56 push esi - 100062C2: 8B 4C 24 10 mov ecx,dword ptr [esp+10h] - 100062C6: 8B 11 mov edx,dword ptr [ecx] - 100062C8: 8B 44 24 0C mov eax,dword ptr [esp+0Ch] - 100062CC: 40 inc eax - 100062CD: 0F B6 58 FF movzx ebx,byte ptr [eax-1] - 100062D1: 88 1A mov byte ptr [edx],bl - 100062D3: 0F B6 18 movzx ebx,byte ptr [eax] - 100062D6: 8B 11 mov edx,dword ptr [ecx] - 100062D8: 88 5A 01 mov byte ptr [edx+1],bl - 100062DB: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100062DF: 8B 51 04 mov edx,dword ptr [ecx+4] - 100062E2: 88 1A mov byte ptr [edx],bl - 100062E4: 8B 51 04 mov edx,dword ptr [ecx+4] - 100062E7: 40 inc eax - 100062E8: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100062EC: 88 5A 01 mov byte ptr [edx+1],bl - 100062EF: 8B 51 04 mov edx,dword ptr [ecx+4] - 100062F2: 40 inc eax - 100062F3: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100062F7: 88 5A 02 mov byte ptr [edx+2],bl - 100062FA: 8B 51 04 mov edx,dword ptr [ecx+4] - 100062FD: 40 inc eax - 100062FE: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006302: 88 5A 03 mov byte ptr [edx+3],bl - 10006305: 8B 51 08 mov edx,dword ptr [ecx+8] - 10006308: 40 inc eax - 10006309: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 1000630D: 88 1A mov byte ptr [edx],bl - 1000630F: 8B 51 08 mov edx,dword ptr [ecx+8] - 10006312: 40 inc eax - 10006313: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006317: 88 5A 01 mov byte ptr [edx+1],bl - 1000631A: 40 inc eax - 1000631B: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 1000631F: 40 inc eax - 10006320: 40 inc eax - 10006321: 8B 71 0C mov esi,dword ptr [ecx+0Ch] - 10006324: 66 89 16 mov word ptr [esi],dx - 10006327: 0F B6 10 movzx edx,byte ptr [eax] - 1000632A: 8B 71 10 mov esi,dword ptr [ecx+10h] - 1000632D: 66 89 16 mov word ptr [esi],dx - 10006330: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006334: 8B 71 14 mov esi,dword ptr [ecx+14h] - 10006337: 66 89 16 mov word ptr [esi],dx - 1000633A: 8B 71 18 mov esi,dword ptr [ecx+18h] - 1000633D: 40 inc eax - 1000633E: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006342: 66 89 16 mov word ptr [esi],dx - 10006345: 8B 71 1C mov esi,dword ptr [ecx+1Ch] - 10006348: 40 inc eax - 10006349: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 1000634D: 66 89 16 mov word ptr [esi],dx - 10006350: 8B 71 20 mov esi,dword ptr [ecx+20h] - 10006353: 40 inc eax - 10006354: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006358: 66 89 16 mov word ptr [esi],dx - 1000635B: 8B 51 24 mov edx,dword ptr [ecx+24h] - 1000635E: 40 inc eax - 1000635F: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006363: 88 1A mov byte ptr [edx],bl - 10006365: 8B 51 24 mov edx,dword ptr [ecx+24h] - 10006368: 40 inc eax - 10006369: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 1000636D: 40 inc eax - 1000636E: 88 5A 01 mov byte ptr [edx+1],bl - 10006371: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006375: 8B 71 28 mov esi,dword ptr [ecx+28h] - 10006378: 40 inc eax - 10006379: 66 89 16 mov word ptr [esi],dx - 1000637C: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006380: 8B 71 2C mov esi,dword ptr [ecx+2Ch] - 10006383: 40 inc eax - 10006384: 66 89 16 mov word ptr [esi],dx - 10006387: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 1000638B: 8B 51 30 mov edx,dword ptr [ecx+30h] - 1000638E: 40 inc eax - 1000638F: 88 1A mov byte ptr [edx],bl - 10006391: 8B 49 30 mov ecx,dword ptr [ecx+30h] - 10006394: 40 inc eax - 10006395: 8A 10 mov dl,byte ptr [eax] - 10006397: 5E pop esi - 10006398: 88 51 01 mov byte ptr [ecx+1],dl - 1000639B: 40 inc eax - 1000639C: 5B pop ebx - 1000639D: C3 ret - 1000639E: CC int 3 - 1000639F: CC int 3 - 100063A0: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 100063A4: 8B 44 24 04 mov eax,dword ptr [esp+4] - 100063A8: 53 push ebx - 100063A9: 56 push esi - 100063AA: BE 0C 00 00 00 mov esi,0Ch - 100063AF: 90 nop - 100063B0: 8A 18 mov bl,byte ptr [eax] - 100063B2: 8A 51 04 mov dl,byte ptr [ecx+4] - 100063B5: 40 inc eax - 100063B6: 84 D2 test dl,dl - 100063B8: 76 0B jbe 100063C5 - 100063BA: FE CA dec dl - 100063BC: 88 51 04 mov byte ptr [ecx+4],dl - 100063BF: 8B 11 mov edx,dword ptr [ecx] - 100063C1: 88 1A mov byte ptr [edx],bl - 100063C3: FF 01 inc dword ptr [ecx] - 100063C5: 8A 18 mov bl,byte ptr [eax] - 100063C7: 8A 51 0C mov dl,byte ptr [ecx+0Ch] - 100063CA: 40 inc eax - 100063CB: 84 D2 test dl,dl - 100063CD: 76 0D jbe 100063DC - 100063CF: FE CA dec dl - 100063D1: 88 51 0C mov byte ptr [ecx+0Ch],dl - 100063D4: 8B 51 08 mov edx,dword ptr [ecx+8] - 100063D7: 88 1A mov byte ptr [edx],bl - 100063D9: FF 41 08 inc dword ptr [ecx+8] - 100063DC: 83 EE 01 sub esi,1 - 100063DF: 75 CF jne 100063B0 - 100063E1: 5E pop esi - 100063E2: 5B pop ebx - 100063E3: C3 ret - 100063E4: CC int 3 - 100063E5: CC int 3 - 100063E6: CC int 3 - 100063E7: CC int 3 - 100063E8: CC int 3 - 100063E9: CC int 3 - 100063EA: CC int 3 - 100063EB: CC int 3 - 100063EC: CC int 3 - 100063ED: CC int 3 - 100063EE: CC int 3 - 100063EF: CC int 3 - 100063F0: 51 push ecx - 100063F1: 53 push ebx - 100063F2: 55 push ebp - 100063F3: 56 push esi - 100063F4: 8B 74 24 18 mov esi,dword ptr [esp+18h] - 100063F8: 57 push edi - 100063F9: 8B 7C 24 18 mov edi,dword ptr [esp+18h] - 100063FD: 32 C0 xor al,al - 100063FF: C7 44 24 10 07 00 mov dword ptr [esp+10h],7 - 00 00 - 10006407: 8A 0F mov cl,byte ptr [edi] - 10006409: 88 4C 24 1C mov byte ptr [esp+1Ch],cl - 1000640D: 47 inc edi - 1000640E: 32 C9 xor cl,cl - 10006410: 3A 46 04 cmp al,byte ptr [esi+4] - 10006413: 73 22 jae 10006437 - 10006415: 0F B6 5C 24 1C movzx ebx,byte ptr [esp+1Ch] - 1000641A: 8B 2E mov ebp,dword ptr [esi] - 1000641C: BA 01 00 00 00 mov edx,1 - 10006421: D3 E2 shl edx,cl - 10006423: 85 D3 test ebx,edx - 10006425: 0F 9F C2 setg dl - 10006428: 0F B6 D8 movzx ebx,al - 1000642B: FE C1 inc cl - 1000642D: FE C0 inc al - 1000642F: 88 14 2B mov byte ptr [ebx+ebp],dl - 10006432: 80 F9 08 cmp cl,8 - 10006435: 72 D9 jb 10006410 - 10006437: 83 6C 24 10 01 sub dword ptr [esp+10h],1 - 1000643C: 75 C9 jne 10006407 - 1000643E: 0F B6 07 movzx eax,byte ptr [edi] - 10006441: 8B 4E 08 mov ecx,dword ptr [esi+8] - 10006444: 66 89 01 mov word ptr [ecx],ax - 10006447: 0F B6 57 01 movzx edx,byte ptr [edi+1] - 1000644B: 8B 46 0C mov eax,dword ptr [esi+0Ch] - 1000644E: 47 inc edi - 1000644F: 66 89 10 mov word ptr [eax],dx - 10006452: 66 0F B6 4F 01 movzx cx,byte ptr [edi+1] - 10006457: 8B 56 10 mov edx,dword ptr [esi+10h] - 1000645A: 47 inc edi - 1000645B: 66 89 0A mov word ptr [edx],cx - 1000645E: 0F B6 47 01 movzx eax,byte ptr [edi+1] - 10006462: 8B 4E 14 mov ecx,dword ptr [esi+14h] - 10006465: 47 inc edi - 10006466: 66 89 01 mov word ptr [ecx],ax - 10006469: 0F B6 57 01 movzx edx,byte ptr [edi+1] - 1000646D: 8B 46 18 mov eax,dword ptr [esi+18h] - 10006470: 47 inc edi - 10006471: 66 89 10 mov word ptr [eax],dx - 10006474: 8D 47 01 lea eax,[edi+1] - 10006477: 5F pop edi - 10006478: 5E pop esi - 10006479: 5D pop ebp - 1000647A: 5B pop ebx - 1000647B: 59 pop ecx - 1000647C: C3 ret - 1000647D: CC int 3 - 1000647E: CC int 3 - 1000647F: CC int 3 - 10006480: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10006484: 8B 11 mov edx,dword ptr [ecx] - 10006486: 8B 44 24 04 mov eax,dword ptr [esp+4] - 1000648A: 53 push ebx - 1000648B: 0F B6 18 movzx ebx,byte ptr [eax] - 1000648E: 88 1A mov byte ptr [edx],bl - 10006490: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006494: 8B 11 mov edx,dword ptr [ecx] - 10006496: 88 5A 01 mov byte ptr [edx+1],bl - 10006499: 8B 11 mov edx,dword ptr [ecx] - 1000649B: 40 inc eax - 1000649C: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100064A0: 88 5A 02 mov byte ptr [edx+2],bl - 100064A3: 8B 11 mov edx,dword ptr [ecx] - 100064A5: 40 inc eax - 100064A6: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100064AA: 88 5A 03 mov byte ptr [edx+3],bl - 100064AD: 8B 51 04 mov edx,dword ptr [ecx+4] - 100064B0: 40 inc eax - 100064B1: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100064B5: 88 1A mov byte ptr [edx],bl - 100064B7: 8B 51 04 mov edx,dword ptr [ecx+4] - 100064BA: 40 inc eax - 100064BB: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100064BF: 88 5A 01 mov byte ptr [edx+1],bl - 100064C2: 8B 51 04 mov edx,dword ptr [ecx+4] - 100064C5: 40 inc eax - 100064C6: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100064CA: 88 5A 02 mov byte ptr [edx+2],bl - 100064CD: 8B 51 04 mov edx,dword ptr [ecx+4] - 100064D0: 40 inc eax - 100064D1: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100064D5: 88 5A 03 mov byte ptr [edx+3],bl - 100064D8: 8B 51 08 mov edx,dword ptr [ecx+8] - 100064DB: 40 inc eax - 100064DC: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100064E0: 88 1A mov byte ptr [edx],bl - 100064E2: 8B 51 08 mov edx,dword ptr [ecx+8] - 100064E5: 40 inc eax - 100064E6: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100064EA: 88 5A 01 mov byte ptr [edx+1],bl - 100064ED: 8B 51 08 mov edx,dword ptr [ecx+8] - 100064F0: 40 inc eax - 100064F1: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100064F5: 88 5A 02 mov byte ptr [edx+2],bl - 100064F8: 8B 51 08 mov edx,dword ptr [ecx+8] - 100064FB: 40 inc eax - 100064FC: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006500: 88 5A 03 mov byte ptr [edx+3],bl - 10006503: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 10006506: 40 inc eax - 10006507: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 1000650B: 88 1A mov byte ptr [edx],bl - 1000650D: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 10006510: 40 inc eax - 10006511: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006515: 88 5A 01 mov byte ptr [edx+1],bl - 10006518: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 1000651B: 40 inc eax - 1000651C: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006520: 88 5A 02 mov byte ptr [edx+2],bl - 10006523: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 10006526: 40 inc eax - 10006527: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 1000652B: 40 inc eax - 1000652C: 88 5A 03 mov byte ptr [edx+3],bl - 1000652F: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006533: 8B 51 10 mov edx,dword ptr [ecx+10h] - 10006536: 40 inc eax - 10006537: 88 1A mov byte ptr [edx],bl - 10006539: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 1000653D: 8B 51 10 mov edx,dword ptr [ecx+10h] - 10006540: 40 inc eax - 10006541: 88 5A 01 mov byte ptr [edx+1],bl - 10006544: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006548: 8B 51 10 mov edx,dword ptr [ecx+10h] - 1000654B: 40 inc eax - 1000654C: 88 5A 02 mov byte ptr [edx+2],bl - 1000654F: 8B 49 10 mov ecx,dword ptr [ecx+10h] - 10006552: 8A 50 01 mov dl,byte ptr [eax+1] - 10006555: 40 inc eax - 10006556: 88 51 03 mov byte ptr [ecx+3],dl - 10006559: 40 inc eax - 1000655A: 5B pop ebx - 1000655B: C3 ret - 1000655C: CC int 3 - 1000655D: CC int 3 - 1000655E: CC int 3 - 1000655F: CC int 3 - 10006560: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10006564: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10006568: 0F B6 10 movzx edx,byte ptr [eax] - 1000656B: 40 inc eax - 1000656C: 88 11 mov byte ptr [ecx],dl - 1000656E: 0F B6 10 movzx edx,byte ptr [eax] - 10006571: 40 inc eax - 10006572: 88 51 01 mov byte ptr [ecx+1],dl - 10006575: 0F B6 10 movzx edx,byte ptr [eax] - 10006578: 40 inc eax - 10006579: 88 51 02 mov byte ptr [ecx+2],dl - 1000657C: 0F B6 10 movzx edx,byte ptr [eax] - 1000657F: 40 inc eax - 10006580: 88 51 03 mov byte ptr [ecx+3],dl - 10006583: 0F B6 10 movzx edx,byte ptr [eax] - 10006586: 40 inc eax - 10006587: 88 51 04 mov byte ptr [ecx+4],dl - 1000658A: 0F B6 10 movzx edx,byte ptr [eax] - 1000658D: 40 inc eax - 1000658E: 88 51 05 mov byte ptr [ecx+5],dl - 10006591: 0F B6 10 movzx edx,byte ptr [eax] - 10006594: 40 inc eax - 10006595: 88 51 06 mov byte ptr [ecx+6],dl - 10006598: 0F B6 10 movzx edx,byte ptr [eax] - 1000659B: 40 inc eax - 1000659C: 88 51 07 mov byte ptr [ecx+7],dl - 1000659F: 0F B6 10 movzx edx,byte ptr [eax] - 100065A2: 40 inc eax - 100065A3: 88 51 08 mov byte ptr [ecx+8],dl - 100065A6: 0F B6 10 movzx edx,byte ptr [eax] - 100065A9: 88 51 09 mov byte ptr [ecx+9],dl - 100065AC: 40 inc eax - 100065AD: C3 ret - 100065AE: CC int 3 - 100065AF: CC int 3 - 100065B0: 53 push ebx - 100065B1: 56 push esi - 100065B2: 8B 4C 24 10 mov ecx,dword ptr [esp+10h] - 100065B6: 8B 51 08 mov edx,dword ptr [ecx+8] - 100065B9: 8B 44 24 0C mov eax,dword ptr [esp+0Ch] - 100065BD: 0F B6 18 movzx ebx,byte ptr [eax] - 100065C0: 88 1A mov byte ptr [edx],bl - 100065C2: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100065C6: 8B 51 08 mov edx,dword ptr [ecx+8] - 100065C9: 88 5A 01 mov byte ptr [edx+1],bl - 100065CC: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 100065CF: 40 inc eax - 100065D0: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100065D4: 88 1A mov byte ptr [edx],bl - 100065D6: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 100065D9: 40 inc eax - 100065DA: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100065DE: 88 5A 01 mov byte ptr [edx+1],bl - 100065E1: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 100065E4: 40 inc eax - 100065E5: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100065E9: 88 5A 02 mov byte ptr [edx+2],bl - 100065EC: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 100065EF: 40 inc eax - 100065F0: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100065F4: 88 5A 03 mov byte ptr [edx+3],bl - 100065F7: 40 inc eax - 100065F8: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 100065FC: 40 inc eax - 100065FD: 8B 71 10 mov esi,dword ptr [ecx+10h] - 10006600: 66 89 16 mov word ptr [esi],dx - 10006603: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006607: 8B 71 14 mov esi,dword ptr [ecx+14h] - 1000660A: 66 89 16 mov word ptr [esi],dx - 1000660D: 8B 71 18 mov esi,dword ptr [ecx+18h] - 10006610: 40 inc eax - 10006611: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006615: 66 89 16 mov word ptr [esi],dx - 10006618: 8B 71 1C mov esi,dword ptr [ecx+1Ch] - 1000661B: 40 inc eax - 1000661C: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006620: 66 89 16 mov word ptr [esi],dx - 10006623: 8B 71 20 mov esi,dword ptr [ecx+20h] - 10006626: 40 inc eax - 10006627: 0F B6 50 02 movzx edx,byte ptr [eax+2] - 1000662B: 66 89 16 mov word ptr [esi],dx - 1000662E: 8B 11 mov edx,dword ptr [ecx] - 10006630: 83 C0 02 add eax,2 - 10006633: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006637: 40 inc eax - 10006638: 88 1A mov byte ptr [edx],bl - 1000663A: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 1000663E: 8B 11 mov edx,dword ptr [ecx] - 10006640: 40 inc eax - 10006641: 88 5A 01 mov byte ptr [edx+1],bl - 10006644: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006648: 8B 11 mov edx,dword ptr [ecx] - 1000664A: 40 inc eax - 1000664B: 88 5A 02 mov byte ptr [edx+2],bl - 1000664E: 8A 50 01 mov dl,byte ptr [eax+1] - 10006651: 8B 09 mov ecx,dword ptr [ecx] - 10006653: 40 inc eax - 10006654: 5E pop esi - 10006655: 88 51 03 mov byte ptr [ecx+3],dl - 10006658: 40 inc eax - 10006659: 5B pop ebx - 1000665A: C3 ret - 1000665B: CC int 3 - 1000665C: CC int 3 - 1000665D: CC int 3 - 1000665E: CC int 3 - 1000665F: CC int 3 - 10006660: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10006664: 53 push ebx - 10006665: 55 push ebp - 10006666: 56 push esi - 10006667: 8B 74 24 10 mov esi,dword ptr [esp+10h] - 1000666B: 57 push edi - 1000666C: 32 D2 xor dl,dl - 1000666E: BF 06 00 00 00 mov edi,6 - 10006673: 8A 06 mov al,byte ptr [esi] - 10006675: 8A DA mov bl,dl - 10006677: 46 inc esi - 10006678: FE C2 inc dl - 1000667A: 3A 59 04 cmp bl,byte ptr [ecx+4] - 1000667D: 73 0C jae 1000668B - 1000667F: 8B 29 mov ebp,dword ptr [ecx] - 10006681: 8A D8 mov bl,al - 10006683: C0 EB 04 shr bl,4 - 10006686: 88 5D 00 mov byte ptr [ebp],bl - 10006689: FF 01 inc dword ptr [ecx] - 1000668B: 8A DA mov bl,dl - 1000668D: FE C2 inc dl - 1000668F: 3A 59 04 cmp bl,byte ptr [ecx+4] - 10006692: 73 08 jae 1000669C - 10006694: 8B 19 mov ebx,dword ptr [ecx] - 10006696: 24 0F and al,0Fh - 10006698: 88 03 mov byte ptr [ebx],al - 1000669A: FF 01 inc dword ptr [ecx] - 1000669C: 83 EF 01 sub edi,1 - 1000669F: 75 D2 jne 10006673 - 100066A1: 5F pop edi - 100066A2: 8B C6 mov eax,esi - 100066A4: 5E pop esi - 100066A5: 5D pop ebp - 100066A6: 5B pop ebx - 100066A7: C3 ret - 100066A8: CC int 3 - 100066A9: CC int 3 - 100066AA: CC int 3 - 100066AB: CC int 3 - 100066AC: CC int 3 - 100066AD: CC int 3 - 100066AE: CC int 3 - 100066AF: CC int 3 - 100066B0: 56 push esi - 100066B1: 8B 74 24 0C mov esi,dword ptr [esp+0Ch] - 100066B5: 0F B6 46 04 movzx eax,byte ptr [esi+4] - 100066B9: 8B 0E mov ecx,dword ptr [esi] - 100066BB: 57 push edi - 100066BC: 50 push eax - 100066BD: 6A 20 push 20h - 100066BF: 51 push ecx - 100066C0: E8 AB 3B 00 00 call 1000A270 - 100066C5: 0F B6 56 04 movzx edx,byte ptr [esi+4] - 100066C9: 8B 7C 24 18 mov edi,dword ptr [esp+18h] - 100066CD: 8B 06 mov eax,dword ptr [esi] - 100066CF: 52 push edx - 100066D0: 57 push edi - 100066D1: 50 push eax - 100066D2: E8 79 32 00 00 call 10009950 - 100066D7: 83 C4 18 add esp,18h - 100066DA: 8D 47 16 lea eax,[edi+16h] - 100066DD: 5F pop edi - 100066DE: 5E pop esi - 100066DF: C3 ret - 100066E0: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 100066E4: 8B 11 mov edx,dword ptr [ecx] - 100066E6: 8B 44 24 04 mov eax,dword ptr [esp+4] - 100066EA: 53 push ebx - 100066EB: 0F B6 18 movzx ebx,byte ptr [eax] - 100066EE: 88 1A mov byte ptr [edx],bl - 100066F0: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100066F4: 8B 11 mov edx,dword ptr [ecx] - 100066F6: 88 5A 01 mov byte ptr [edx+1],bl - 100066F9: 8B 51 04 mov edx,dword ptr [ecx+4] - 100066FC: 40 inc eax - 100066FD: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006701: 40 inc eax - 10006702: 88 1A mov byte ptr [edx],bl - 10006704: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006708: 8B 51 04 mov edx,dword ptr [ecx+4] - 1000670B: 40 inc eax - 1000670C: 88 5A 01 mov byte ptr [edx+1],bl - 1000670F: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006713: 8B 51 04 mov edx,dword ptr [ecx+4] - 10006716: 40 inc eax - 10006717: 88 5A 02 mov byte ptr [edx+2],bl - 1000671A: 8A 50 01 mov dl,byte ptr [eax+1] - 1000671D: 8B 49 04 mov ecx,dword ptr [ecx+4] - 10006720: 40 inc eax - 10006721: 88 51 03 mov byte ptr [ecx+3],dl - 10006724: 40 inc eax - 10006725: 5B pop ebx - 10006726: C3 ret - 10006727: CC int 3 - 10006728: CC int 3 - 10006729: CC int 3 - 1000672A: CC int 3 - 1000672B: CC int 3 - 1000672C: CC int 3 - 1000672D: CC int 3 - 1000672E: CC int 3 - 1000672F: CC int 3 - 10006730: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10006734: 8B 11 mov edx,dword ptr [ecx] - 10006736: 8B 44 24 04 mov eax,dword ptr [esp+4] - 1000673A: 53 push ebx - 1000673B: 0F B6 18 movzx ebx,byte ptr [eax] - 1000673E: 88 1A mov byte ptr [edx],bl - 10006740: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006744: 8B 11 mov edx,dword ptr [ecx] - 10006746: 88 5A 01 mov byte ptr [edx+1],bl - 10006749: 8B 11 mov edx,dword ptr [ecx] - 1000674B: 40 inc eax - 1000674C: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006750: 88 5A 02 mov byte ptr [edx+2],bl - 10006753: 8B 11 mov edx,dword ptr [ecx] - 10006755: 40 inc eax - 10006756: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 1000675A: 88 5A 03 mov byte ptr [edx+3],bl - 1000675D: 8B 51 04 mov edx,dword ptr [ecx+4] - 10006760: 40 inc eax - 10006761: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006765: 88 1A mov byte ptr [edx],bl - 10006767: 8B 51 04 mov edx,dword ptr [ecx+4] - 1000676A: 40 inc eax - 1000676B: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 1000676F: 88 5A 01 mov byte ptr [edx+1],bl - 10006772: 8B 51 04 mov edx,dword ptr [ecx+4] - 10006775: 40 inc eax - 10006776: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 1000677A: 88 5A 02 mov byte ptr [edx+2],bl - 1000677D: 8B 51 04 mov edx,dword ptr [ecx+4] - 10006780: 40 inc eax - 10006781: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006785: 88 5A 03 mov byte ptr [edx+3],bl - 10006788: 8B 51 08 mov edx,dword ptr [ecx+8] - 1000678B: 40 inc eax - 1000678C: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006790: 88 1A mov byte ptr [edx],bl - 10006792: 8B 51 08 mov edx,dword ptr [ecx+8] - 10006795: 40 inc eax - 10006796: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 1000679A: 88 5A 01 mov byte ptr [edx+1],bl - 1000679D: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 100067A0: 40 inc eax - 100067A1: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100067A5: 88 1A mov byte ptr [edx],bl - 100067A7: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 100067AA: 40 inc eax - 100067AB: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100067AF: 88 5A 01 mov byte ptr [edx+1],bl - 100067B2: 8B 51 10 mov edx,dword ptr [ecx+10h] - 100067B5: 40 inc eax - 100067B6: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100067BA: 88 1A mov byte ptr [edx],bl - 100067BC: 8B 51 10 mov edx,dword ptr [ecx+10h] - 100067BF: 40 inc eax - 100067C0: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100067C4: 88 5A 01 mov byte ptr [edx+1],bl - 100067C7: 8B 51 14 mov edx,dword ptr [ecx+14h] - 100067CA: 40 inc eax - 100067CB: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100067CF: 88 1A mov byte ptr [edx],bl - 100067D1: 8B 51 14 mov edx,dword ptr [ecx+14h] - 100067D4: 40 inc eax - 100067D5: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100067D9: 40 inc eax - 100067DA: 88 5A 01 mov byte ptr [edx+1],bl - 100067DD: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100067E1: 8B 51 14 mov edx,dword ptr [ecx+14h] - 100067E4: 40 inc eax - 100067E5: 88 5A 02 mov byte ptr [edx+2],bl - 100067E8: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100067EC: 8B 51 14 mov edx,dword ptr [ecx+14h] - 100067EF: 40 inc eax - 100067F0: 88 5A 03 mov byte ptr [edx+3],bl - 100067F3: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 100067F7: 8B 51 18 mov edx,dword ptr [ecx+18h] - 100067FA: 40 inc eax - 100067FB: 88 1A mov byte ptr [edx],bl - 100067FD: 8B 51 18 mov edx,dword ptr [ecx+18h] - 10006800: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006804: 40 inc eax - 10006805: 88 5A 01 mov byte ptr [edx+1],bl - 10006808: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 1000680C: 8B 51 18 mov edx,dword ptr [ecx+18h] - 1000680F: 88 5A 02 mov byte ptr [edx+2],bl - 10006812: 8B 51 18 mov edx,dword ptr [ecx+18h] - 10006815: 40 inc eax - 10006816: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 1000681A: 88 5A 03 mov byte ptr [edx+3],bl - 1000681D: 8B 51 1C mov edx,dword ptr [ecx+1Ch] - 10006820: 40 inc eax - 10006821: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006825: 88 1A mov byte ptr [edx],bl - 10006827: 8B 51 1C mov edx,dword ptr [ecx+1Ch] - 1000682A: 40 inc eax - 1000682B: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 1000682F: 88 5A 01 mov byte ptr [edx+1],bl - 10006832: 8B 51 1C mov edx,dword ptr [ecx+1Ch] - 10006835: 40 inc eax - 10006836: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 1000683A: 88 5A 02 mov byte ptr [edx+2],bl - 1000683D: 8B 51 1C mov edx,dword ptr [ecx+1Ch] - 10006840: 40 inc eax - 10006841: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006845: 88 5A 03 mov byte ptr [edx+3],bl - 10006848: 8B 51 20 mov edx,dword ptr [ecx+20h] - 1000684B: 40 inc eax - 1000684C: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006850: 40 inc eax - 10006851: 88 1A mov byte ptr [edx],bl - 10006853: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006857: 8B 51 20 mov edx,dword ptr [ecx+20h] - 1000685A: 40 inc eax - 1000685B: 88 5A 01 mov byte ptr [edx+1],bl - 1000685E: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006862: 8B 51 20 mov edx,dword ptr [ecx+20h] - 10006865: 40 inc eax - 10006866: 88 5A 02 mov byte ptr [edx+2],bl - 10006869: 8A 50 01 mov dl,byte ptr [eax+1] - 1000686C: 8B 49 20 mov ecx,dword ptr [ecx+20h] - 1000686F: 40 inc eax - 10006870: 88 51 03 mov byte ptr [ecx+3],dl - 10006873: 83 C0 03 add eax,3 - 10006876: 5B pop ebx - 10006877: C3 ret - 10006878: CC int 3 - 10006879: CC int 3 - 1000687A: CC int 3 - 1000687B: CC int 3 - 1000687C: CC int 3 - 1000687D: CC int 3 - 1000687E: CC int 3 - 1000687F: CC int 3 - 10006880: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10006884: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10006888: 53 push ebx - 10006889: 57 push edi - 1000688A: BF 0C 00 00 00 mov edi,0Ch - 1000688F: 90 nop - 10006890: 0F B6 10 movzx edx,byte ptr [eax] - 10006893: 40 inc eax - 10006894: 88 54 24 0C mov byte ptr [esp+0Ch],dl - 10006898: 0F B6 10 movzx edx,byte ptr [eax] - 1000689B: 40 inc eax - 1000689C: 88 54 24 0D mov byte ptr [esp+0Dh],dl - 100068A0: 0F B6 10 movzx edx,byte ptr [eax] - 100068A3: 40 inc eax - 100068A4: 88 54 24 0E mov byte ptr [esp+0Eh],dl - 100068A8: 0F B6 10 movzx edx,byte ptr [eax] - 100068AB: 40 inc eax - 100068AC: 66 83 79 04 04 cmp word ptr [ecx+4],4 - 100068B1: 88 54 24 0F mov byte ptr [esp+0Fh],dl - 100068B5: 72 14 jb 100068CB - 100068B7: 8B 11 mov edx,dword ptr [ecx] - 100068B9: 8B 5C 24 0C mov ebx,dword ptr [esp+0Ch] - 100068BD: 89 1A mov dword ptr [edx],ebx - 100068BF: 83 01 04 add dword ptr [ecx],4 - 100068C2: BA FC FF 00 00 mov edx,0FFFCh - 100068C7: 66 01 51 04 add word ptr [ecx+4],dx - 100068CB: 83 EF 01 sub edi,1 - 100068CE: 75 C0 jne 10006890 - 100068D0: 5F pop edi - 100068D1: 5B pop ebx - 100068D2: C3 ret - 100068D3: CC int 3 - 100068D4: CC int 3 - 100068D5: CC int 3 - 100068D6: CC int 3 - 100068D7: CC int 3 - 100068D8: CC int 3 - 100068D9: CC int 3 - 100068DA: CC int 3 - 100068DB: CC int 3 - 100068DC: CC int 3 - 100068DD: CC int 3 - 100068DE: CC int 3 - 100068DF: CC int 3 - 100068E0: 8B 44 24 04 mov eax,dword ptr [esp+4] - 100068E4: 56 push esi - 100068E5: 8B 74 24 0C mov esi,dword ptr [esp+0Ch] - 100068E9: 57 push edi - 100068EA: 56 push esi - 100068EB: 50 push eax - 100068EC: E8 6F FD FF FF call 10006660 - 100068F1: 0F B6 4E 0C movzx ecx,byte ptr [esi+0Ch] - 100068F5: 8B 56 08 mov edx,dword ptr [esi+8] - 100068F8: 51 push ecx - 100068F9: 6A 20 push 20h - 100068FB: 52 push edx - 100068FC: 8B F8 mov edi,eax - 100068FE: E8 6D 39 00 00 call 1000A270 - 10006903: 0F B6 46 0C movzx eax,byte ptr [esi+0Ch] - 10006907: 8B 4E 08 mov ecx,dword ptr [esi+8] - 1000690A: 50 push eax - 1000690B: 57 push edi - 1000690C: 51 push ecx - 1000690D: E8 3E 30 00 00 call 10009950 - 10006912: 83 C4 20 add esp,20h - 10006915: 8D 47 16 lea eax,[edi+16h] - 10006918: 5F pop edi - 10006919: 5E pop esi - 1000691A: C3 ret - 1000691B: CC int 3 - 1000691C: CC int 3 - 1000691D: CC int 3 - 1000691E: CC int 3 - 1000691F: CC int 3 - 10006920: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10006924: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10006928: 53 push ebx - 10006929: 56 push esi - 1000692A: 57 push edi - 1000692B: BF 03 00 00 00 mov edi,3 - 10006930: 8D 77 01 lea esi,[edi+1] - 10006933: 0F B6 10 movzx edx,byte ptr [eax] - 10006936: 40 inc eax - 10006937: 88 54 24 10 mov byte ptr [esp+10h],dl - 1000693B: 0F B6 10 movzx edx,byte ptr [eax] - 1000693E: 40 inc eax - 1000693F: 88 54 24 11 mov byte ptr [esp+11h],dl - 10006943: 0F B6 10 movzx edx,byte ptr [eax] - 10006946: 40 inc eax - 10006947: 88 54 24 12 mov byte ptr [esp+12h],dl - 1000694B: 0F B6 10 movzx edx,byte ptr [eax] - 1000694E: 40 inc eax - 1000694F: 88 54 24 13 mov byte ptr [esp+13h],dl - 10006953: 66 39 71 08 cmp word ptr [ecx+8],si - 10006957: 72 15 jb 1000696E - 10006959: 8B 51 04 mov edx,dword ptr [ecx+4] - 1000695C: 8B 5C 24 10 mov ebx,dword ptr [esp+10h] - 10006960: 89 1A mov dword ptr [edx],ebx - 10006962: 01 71 04 add dword ptr [ecx+4],esi - 10006965: BA FC FF 00 00 mov edx,0FFFCh - 1000696A: 66 01 51 08 add word ptr [ecx+8],dx - 1000696E: 0F B6 10 movzx edx,byte ptr [eax] - 10006971: 40 inc eax - 10006972: 88 54 24 10 mov byte ptr [esp+10h],dl - 10006976: 0F B6 10 movzx edx,byte ptr [eax] - 10006979: 40 inc eax - 1000697A: 88 54 24 11 mov byte ptr [esp+11h],dl - 1000697E: 0F B6 10 movzx edx,byte ptr [eax] - 10006981: 40 inc eax - 10006982: 88 54 24 12 mov byte ptr [esp+12h],dl - 10006986: 0F B6 10 movzx edx,byte ptr [eax] - 10006989: 40 inc eax - 1000698A: 88 54 24 13 mov byte ptr [esp+13h],dl - 1000698E: 66 39 71 10 cmp word ptr [ecx+10h],si - 10006992: 72 15 jb 100069A9 - 10006994: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 10006997: 8B 5C 24 10 mov ebx,dword ptr [esp+10h] - 1000699B: 89 1A mov dword ptr [edx],ebx - 1000699D: 01 71 0C add dword ptr [ecx+0Ch],esi - 100069A0: BA FC FF 00 00 mov edx,0FFFCh - 100069A5: 66 01 51 10 add word ptr [ecx+10h],dx - 100069A9: 0F B6 10 movzx edx,byte ptr [eax] - 100069AC: 40 inc eax - 100069AD: 88 54 24 10 mov byte ptr [esp+10h],dl - 100069B1: 0F B6 10 movzx edx,byte ptr [eax] - 100069B4: 40 inc eax - 100069B5: 88 54 24 11 mov byte ptr [esp+11h],dl - 100069B9: 0F B6 10 movzx edx,byte ptr [eax] - 100069BC: 40 inc eax - 100069BD: 88 54 24 12 mov byte ptr [esp+12h],dl - 100069C1: 0F B6 10 movzx edx,byte ptr [eax] - 100069C4: 40 inc eax - 100069C5: 88 54 24 13 mov byte ptr [esp+13h],dl - 100069C9: 66 39 71 08 cmp word ptr [ecx+8],si - 100069CD: 72 15 jb 100069E4 - 100069CF: 8B 51 04 mov edx,dword ptr [ecx+4] - 100069D2: 8B 5C 24 10 mov ebx,dword ptr [esp+10h] - 100069D6: 89 1A mov dword ptr [edx],ebx - 100069D8: 01 71 04 add dword ptr [ecx+4],esi - 100069DB: BA FC FF 00 00 mov edx,0FFFCh - 100069E0: 66 01 51 08 add word ptr [ecx+8],dx - 100069E4: 0F B6 10 movzx edx,byte ptr [eax] - 100069E7: 40 inc eax - 100069E8: 88 54 24 10 mov byte ptr [esp+10h],dl - 100069EC: 0F B6 10 movzx edx,byte ptr [eax] - 100069EF: 40 inc eax - 100069F0: 88 54 24 11 mov byte ptr [esp+11h],dl - 100069F4: 0F B6 10 movzx edx,byte ptr [eax] - 100069F7: 40 inc eax - 100069F8: 88 54 24 12 mov byte ptr [esp+12h],dl - 100069FC: 0F B6 10 movzx edx,byte ptr [eax] - 100069FF: 40 inc eax - 10006A00: 88 54 24 13 mov byte ptr [esp+13h],dl - 10006A04: 66 39 71 10 cmp word ptr [ecx+10h],si - 10006A08: 72 15 jb 10006A1F - 10006A0A: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 10006A0D: 8B 5C 24 10 mov ebx,dword ptr [esp+10h] - 10006A11: 89 1A mov dword ptr [edx],ebx - 10006A13: 01 71 0C add dword ptr [ecx+0Ch],esi - 10006A16: BA FC FF 00 00 mov edx,0FFFCh - 10006A1B: 66 01 51 10 add word ptr [ecx+10h],dx - 10006A1F: 0F B6 10 movzx edx,byte ptr [eax] - 10006A22: 40 inc eax - 10006A23: 88 54 24 10 mov byte ptr [esp+10h],dl - 10006A27: 0F B6 10 movzx edx,byte ptr [eax] - 10006A2A: 40 inc eax - 10006A2B: 88 54 24 11 mov byte ptr [esp+11h],dl - 10006A2F: 0F B6 10 movzx edx,byte ptr [eax] - 10006A32: 40 inc eax - 10006A33: 88 54 24 12 mov byte ptr [esp+12h],dl - 10006A37: 0F B6 10 movzx edx,byte ptr [eax] - 10006A3A: 40 inc eax - 10006A3B: 88 54 24 13 mov byte ptr [esp+13h],dl - 10006A3F: 66 39 71 08 cmp word ptr [ecx+8],si - 10006A43: 72 15 jb 10006A5A - 10006A45: 8B 51 04 mov edx,dword ptr [ecx+4] - 10006A48: 8B 5C 24 10 mov ebx,dword ptr [esp+10h] - 10006A4C: 89 1A mov dword ptr [edx],ebx - 10006A4E: 01 71 04 add dword ptr [ecx+4],esi - 10006A51: BA FC FF 00 00 mov edx,0FFFCh - 10006A56: 66 01 51 08 add word ptr [ecx+8],dx - 10006A5A: 0F B6 10 movzx edx,byte ptr [eax] - 10006A5D: 40 inc eax - 10006A5E: 88 54 24 10 mov byte ptr [esp+10h],dl - 10006A62: 0F B6 10 movzx edx,byte ptr [eax] - 10006A65: 40 inc eax - 10006A66: 88 54 24 11 mov byte ptr [esp+11h],dl - 10006A6A: 0F B6 10 movzx edx,byte ptr [eax] - 10006A6D: 40 inc eax - 10006A6E: 88 54 24 12 mov byte ptr [esp+12h],dl - 10006A72: 0F B6 10 movzx edx,byte ptr [eax] - 10006A75: 40 inc eax - 10006A76: 88 54 24 13 mov byte ptr [esp+13h],dl - 10006A7A: 66 39 71 10 cmp word ptr [ecx+10h],si - 10006A7E: 72 15 jb 10006A95 - 10006A80: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 10006A83: 8B 5C 24 10 mov ebx,dword ptr [esp+10h] - 10006A87: 89 1A mov dword ptr [edx],ebx - 10006A89: 01 71 0C add dword ptr [ecx+0Ch],esi - 10006A8C: BA FC FF 00 00 mov edx,0FFFCh - 10006A91: 66 01 51 10 add word ptr [ecx+10h],dx - 10006A95: 0F B6 10 movzx edx,byte ptr [eax] - 10006A98: 40 inc eax - 10006A99: 88 54 24 10 mov byte ptr [esp+10h],dl - 10006A9D: 0F B6 10 movzx edx,byte ptr [eax] - 10006AA0: 40 inc eax - 10006AA1: 88 54 24 11 mov byte ptr [esp+11h],dl - 10006AA5: 0F B6 10 movzx edx,byte ptr [eax] - 10006AA8: 40 inc eax - 10006AA9: 88 54 24 12 mov byte ptr [esp+12h],dl - 10006AAD: 0F B6 10 movzx edx,byte ptr [eax] - 10006AB0: 40 inc eax - 10006AB1: 88 54 24 13 mov byte ptr [esp+13h],dl - 10006AB5: 66 39 71 08 cmp word ptr [ecx+8],si - 10006AB9: 72 15 jb 10006AD0 - 10006ABB: 8B 51 04 mov edx,dword ptr [ecx+4] - 10006ABE: 8B 5C 24 10 mov ebx,dword ptr [esp+10h] - 10006AC2: 89 1A mov dword ptr [edx],ebx - 10006AC4: 01 71 04 add dword ptr [ecx+4],esi - 10006AC7: BA FC FF 00 00 mov edx,0FFFCh - 10006ACC: 66 01 51 08 add word ptr [ecx+8],dx - 10006AD0: 0F B6 10 movzx edx,byte ptr [eax] - 10006AD3: 40 inc eax - 10006AD4: 88 54 24 10 mov byte ptr [esp+10h],dl - 10006AD8: 0F B6 10 movzx edx,byte ptr [eax] - 10006ADB: 40 inc eax - 10006ADC: 88 54 24 11 mov byte ptr [esp+11h],dl - 10006AE0: 0F B6 10 movzx edx,byte ptr [eax] - 10006AE3: 40 inc eax - 10006AE4: 88 54 24 12 mov byte ptr [esp+12h],dl - 10006AE8: 0F B6 10 movzx edx,byte ptr [eax] - 10006AEB: 40 inc eax - 10006AEC: 88 54 24 13 mov byte ptr [esp+13h],dl - 10006AF0: 66 39 71 10 cmp word ptr [ecx+10h],si - 10006AF4: 72 15 jb 10006B0B - 10006AF6: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 10006AF9: 8B 5C 24 10 mov ebx,dword ptr [esp+10h] - 10006AFD: 89 1A mov dword ptr [edx],ebx - 10006AFF: 01 71 0C add dword ptr [ecx+0Ch],esi - 10006B02: BA FC FF 00 00 mov edx,0FFFCh - 10006B07: 66 01 51 10 add word ptr [ecx+10h],dx - 10006B0B: 83 EF 01 sub edi,1 - 10006B0E: 0F 85 1F FE FF FF jne 10006933 - 10006B14: 5F pop edi - 10006B15: 5E pop esi - 10006B16: 5B pop ebx - 10006B17: C3 ret - 10006B18: CC int 3 - 10006B19: CC int 3 - 10006B1A: CC int 3 - 10006B1B: CC int 3 - 10006B1C: CC int 3 - 10006B1D: CC int 3 - 10006B1E: CC int 3 - 10006B1F: CC int 3 - 10006B20: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10006B24: 55 push ebp - 10006B25: 56 push esi - 10006B26: 57 push edi - 10006B27: 8B 7C 24 14 mov edi,dword ptr [esp+14h] - 10006B2B: BE 0C 00 00 00 mov esi,0Ch - 10006B30: 0F B6 10 movzx edx,byte ptr [eax] - 10006B33: 8B 0F mov ecx,dword ptr [edi] - 10006B35: 40 inc eax - 10006B36: 40 inc eax - 10006B37: 40 inc eax - 10006B38: 8D 6E F4 lea ebp,[esi-0Ch] - 10006B3B: 88 14 29 mov byte ptr [ecx+ebp],dl - 10006B3E: 0F B6 50 FE movzx edx,byte ptr [eax-2] - 10006B42: 88 54 29 01 mov byte ptr [ecx+ebp+1],dl - 10006B46: 0F B6 50 FF movzx edx,byte ptr [eax-1] - 10006B4A: 88 54 29 02 mov byte ptr [ecx+ebp+2],dl - 10006B4E: 0F B6 10 movzx edx,byte ptr [eax] - 10006B51: 88 54 29 03 mov byte ptr [ecx+ebp+3],dl - 10006B55: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006B59: 03 CD add ecx,ebp - 10006B5B: 8B 0F mov ecx,dword ptr [edi] - 10006B5D: 88 54 29 04 mov byte ptr [ecx+ebp+4],dl - 10006B61: 40 inc eax - 10006B62: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006B66: 88 54 29 05 mov byte ptr [ecx+ebp+5],dl - 10006B6A: 40 inc eax - 10006B6B: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006B6F: 88 54 29 06 mov byte ptr [ecx+ebp+6],dl - 10006B73: 8D 4C 29 04 lea ecx,[ecx+ebp+4] - 10006B77: 40 inc eax - 10006B78: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006B7C: 88 51 03 mov byte ptr [ecx+3],dl - 10006B7F: 8B 0F mov ecx,dword ptr [edi] - 10006B81: 40 inc eax - 10006B82: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006B86: 88 54 0E FC mov byte ptr [esi+ecx-4],dl - 10006B8A: 40 inc eax - 10006B8B: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006B8F: 88 54 0E FD mov byte ptr [esi+ecx-3],dl - 10006B93: 40 inc eax - 10006B94: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006B98: 88 54 0E FE mov byte ptr [esi+ecx-2],dl - 10006B9C: 8D 4C 0E FC lea ecx,[esi+ecx-4] - 10006BA0: 40 inc eax - 10006BA1: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006BA5: 88 51 03 mov byte ptr [ecx+3],dl - 10006BA8: 8B 0F mov ecx,dword ptr [edi] - 10006BAA: 40 inc eax - 10006BAB: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006BAF: 88 14 31 mov byte ptr [ecx+esi],dl - 10006BB2: 40 inc eax - 10006BB3: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006BB7: 88 54 31 01 mov byte ptr [ecx+esi+1],dl - 10006BBB: 03 CE add ecx,esi - 10006BBD: 40 inc eax - 10006BBE: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006BC2: 88 51 02 mov byte ptr [ecx+2],dl - 10006BC5: 40 inc eax - 10006BC6: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006BCA: 88 51 03 mov byte ptr [ecx+3],dl - 10006BCD: 8B 0F mov ecx,dword ptr [edi] - 10006BCF: 40 inc eax - 10006BD0: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006BD4: 88 54 0E 04 mov byte ptr [esi+ecx+4],dl - 10006BD8: 40 inc eax - 10006BD9: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006BDD: 8D 4C 0E 04 lea ecx,[esi+ecx+4] - 10006BE1: 40 inc eax - 10006BE2: 88 51 01 mov byte ptr [ecx+1],dl - 10006BE5: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006BE9: 40 inc eax - 10006BEA: 88 51 02 mov byte ptr [ecx+2],dl - 10006BED: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006BF1: 40 inc eax - 10006BF2: 88 51 03 mov byte ptr [ecx+3],dl - 10006BF5: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006BF9: 8B 0F mov ecx,dword ptr [edi] - 10006BFB: 40 inc eax - 10006BFC: 8D 4C 0E 08 lea ecx,[esi+ecx+8] - 10006C00: 88 11 mov byte ptr [ecx],dl - 10006C02: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006C06: 40 inc eax - 10006C07: 88 51 01 mov byte ptr [ecx+1],dl - 10006C0A: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006C0E: 40 inc eax - 10006C0F: 88 51 02 mov byte ptr [ecx+2],dl - 10006C12: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006C16: 40 inc eax - 10006C17: 83 C6 18 add esi,18h - 10006C1A: 40 inc eax - 10006C1B: 83 FE 3C cmp esi,3Ch - 10006C1E: 88 51 03 mov byte ptr [ecx+3],dl - 10006C21: 0F 8C 09 FF FF FF jl 10006B30 - 10006C27: 5F pop edi - 10006C28: 5E pop esi - 10006C29: 5D pop ebp - 10006C2A: C3 ret - 10006C2B: CC int 3 - 10006C2C: CC int 3 - 10006C2D: CC int 3 - 10006C2E: CC int 3 - 10006C2F: CC int 3 - 10006C30: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10006C34: 56 push esi - 10006C35: 57 push edi - 10006C36: 8B 7C 24 10 mov edi,dword ptr [esp+10h] - 10006C3A: BE 30 00 00 00 mov esi,30h - 10006C3F: 90 nop - 10006C40: 0F B6 10 movzx edx,byte ptr [eax] - 10006C43: 8B 0F mov ecx,dword ptr [edi] - 10006C45: 03 CE add ecx,esi - 10006C47: 40 inc eax - 10006C48: 88 11 mov byte ptr [ecx],dl - 10006C4A: 0F B6 10 movzx edx,byte ptr [eax] - 10006C4D: 40 inc eax - 10006C4E: 88 51 01 mov byte ptr [ecx+1],dl - 10006C51: 0F B6 10 movzx edx,byte ptr [eax] - 10006C54: 40 inc eax - 10006C55: 88 51 02 mov byte ptr [ecx+2],dl - 10006C58: 0F B6 10 movzx edx,byte ptr [eax] - 10006C5B: 83 C6 04 add esi,4 - 10006C5E: 40 inc eax - 10006C5F: 83 FE 5C cmp esi,5Ch - 10006C62: 88 51 03 mov byte ptr [ecx+3],dl - 10006C65: 7C D9 jl 10006C40 - 10006C67: 0F B6 10 movzx edx,byte ptr [eax] - 10006C6A: 8B 0F mov ecx,dword ptr [edi] - 10006C6C: 88 51 5C mov byte ptr [ecx+5Ch],dl - 10006C6F: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006C73: 8B 0F mov ecx,dword ptr [edi] - 10006C75: 40 inc eax - 10006C76: 5F pop edi - 10006C77: 88 51 5D mov byte ptr [ecx+5Dh],dl - 10006C7A: 40 inc eax - 10006C7B: 5E pop esi - 10006C7C: C3 ret - 10006C7D: CC int 3 - 10006C7E: CC int 3 - 10006C7F: CC int 3 - 10006C80: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10006C84: 8B 11 mov edx,dword ptr [ecx] - 10006C86: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10006C8A: 53 push ebx - 10006C8B: 0F B6 18 movzx ebx,byte ptr [eax] - 10006C8E: 88 1A mov byte ptr [edx],bl - 10006C90: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006C94: 8B 51 04 mov edx,dword ptr [ecx+4] - 10006C97: 88 1A mov byte ptr [edx],bl - 10006C99: 8B 51 08 mov edx,dword ptr [ecx+8] - 10006C9C: 40 inc eax - 10006C9D: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006CA1: 88 1A mov byte ptr [edx],bl - 10006CA3: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 10006CA6: 40 inc eax - 10006CA7: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006CAB: 88 1A mov byte ptr [edx],bl - 10006CAD: 8B 51 10 mov edx,dword ptr [ecx+10h] - 10006CB0: 40 inc eax - 10006CB1: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006CB5: 40 inc eax - 10006CB6: 88 1A mov byte ptr [edx],bl - 10006CB8: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006CBC: 8B 51 10 mov edx,dword ptr [ecx+10h] - 10006CBF: 40 inc eax - 10006CC0: 88 5A 01 mov byte ptr [edx+1],bl - 10006CC3: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006CC7: 8B 51 14 mov edx,dword ptr [ecx+14h] - 10006CCA: 40 inc eax - 10006CCB: 88 1A mov byte ptr [edx],bl - 10006CCD: 8A 50 01 mov dl,byte ptr [eax+1] - 10006CD0: 8B 49 18 mov ecx,dword ptr [ecx+18h] - 10006CD3: 40 inc eax - 10006CD4: 88 11 mov byte ptr [ecx],dl - 10006CD6: 40 inc eax - 10006CD7: 5B pop ebx - 10006CD8: C3 ret - 10006CD9: CC int 3 - 10006CDA: CC int 3 - 10006CDB: CC int 3 - 10006CDC: CC int 3 - 10006CDD: CC int 3 - 10006CDE: CC int 3 - 10006CDF: CC int 3 - 10006CE0: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10006CE4: 8B 11 mov edx,dword ptr [ecx] - 10006CE6: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10006CEA: 53 push ebx - 10006CEB: 0F B6 18 movzx ebx,byte ptr [eax] - 10006CEE: 88 1A mov byte ptr [edx],bl - 10006CF0: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006CF4: 8B 51 04 mov edx,dword ptr [ecx+4] - 10006CF7: 40 inc eax - 10006CF8: 88 1A mov byte ptr [edx],bl - 10006CFA: 0F B6 58 01 movzx ebx,byte ptr [eax+1] - 10006CFE: 8B 51 08 mov edx,dword ptr [ecx+8] - 10006D01: 40 inc eax - 10006D02: 88 1A mov byte ptr [edx],bl - 10006D04: 8A 50 01 mov dl,byte ptr [eax+1] - 10006D07: 8B 49 0C mov ecx,dword ptr [ecx+0Ch] - 10006D0A: 40 inc eax - 10006D0B: 88 11 mov byte ptr [ecx],dl - 10006D0D: 40 inc eax - 10006D0E: 5B pop ebx - 10006D0F: C3 ret - 10006D10: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10006D14: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10006D18: 0F B6 10 movzx edx,byte ptr [eax] - 10006D1B: 40 inc eax - 10006D1C: 88 11 mov byte ptr [ecx],dl - 10006D1E: 0F B6 10 movzx edx,byte ptr [eax] - 10006D21: 40 inc eax - 10006D22: 88 51 01 mov byte ptr [ecx+1],dl - 10006D25: 0F B6 10 movzx edx,byte ptr [eax] - 10006D28: 40 inc eax - 10006D29: 88 51 02 mov byte ptr [ecx+2],dl - 10006D2C: 0F B6 10 movzx edx,byte ptr [eax] - 10006D2F: 40 inc eax - 10006D30: 88 51 03 mov byte ptr [ecx+3],dl - 10006D33: 0F B6 10 movzx edx,byte ptr [eax] - 10006D36: 40 inc eax - 10006D37: 88 51 04 mov byte ptr [ecx+4],dl - 10006D3A: 0F B6 10 movzx edx,byte ptr [eax] - 10006D3D: 40 inc eax - 10006D3E: 88 51 05 mov byte ptr [ecx+5],dl - 10006D41: 0F B6 10 movzx edx,byte ptr [eax] - 10006D44: 40 inc eax - 10006D45: 88 51 08 mov byte ptr [ecx+8],dl - 10006D48: 0F B6 10 movzx edx,byte ptr [eax] - 10006D4B: 40 inc eax - 10006D4C: 88 51 09 mov byte ptr [ecx+9],dl - 10006D4F: 0F B6 10 movzx edx,byte ptr [eax] - 10006D52: 40 inc eax - 10006D53: 88 51 0A mov byte ptr [ecx+0Ah],dl - 10006D56: 0F B6 10 movzx edx,byte ptr [eax] - 10006D59: 40 inc eax - 10006D5A: 88 51 0B mov byte ptr [ecx+0Bh],dl - 10006D5D: 0F B6 10 movzx edx,byte ptr [eax] - 10006D60: 40 inc eax - 10006D61: 88 51 0C mov byte ptr [ecx+0Ch],dl - 10006D64: 0F B6 10 movzx edx,byte ptr [eax] - 10006D67: 40 inc eax - 10006D68: 88 51 0D mov byte ptr [ecx+0Dh],dl - 10006D6B: 0F B6 10 movzx edx,byte ptr [eax] - 10006D6E: 40 inc eax - 10006D6F: 88 51 0E mov byte ptr [ecx+0Eh],dl - 10006D72: 0F B6 10 movzx edx,byte ptr [eax] - 10006D75: 40 inc eax - 10006D76: 88 51 0F mov byte ptr [ecx+0Fh],dl - 10006D79: 0F B6 10 movzx edx,byte ptr [eax] - 10006D7C: 40 inc eax - 10006D7D: 88 51 10 mov byte ptr [ecx+10h],dl - 10006D80: 0F B6 10 movzx edx,byte ptr [eax] - 10006D83: 88 51 11 mov byte ptr [ecx+11h],dl - 10006D86: 40 inc eax - 10006D87: C3 ret - 10006D88: CC int 3 - 10006D89: CC int 3 - 10006D8A: CC int 3 - 10006D8B: CC int 3 - 10006D8C: CC int 3 - 10006D8D: CC int 3 - 10006D8E: CC int 3 - 10006D8F: CC int 3 - 10006D90: 53 push ebx - 10006D91: 55 push ebp - 10006D92: 56 push esi - 10006D93: 8B 74 24 10 mov esi,dword ptr [esp+10h] - 10006D97: 57 push edi - 10006D98: 8B 7C 24 18 mov edi,dword ptr [esp+18h] - 10006D9C: 32 D2 xor dl,dl - 10006D9E: BD 06 00 00 00 mov ebp,6 - 10006DA3: 8A 5E 04 mov bl,byte ptr [esi+4] - 10006DA6: 3A D3 cmp dl,bl - 10006DA8: 73 0D jae 10006DB7 - 10006DAA: 8B 0E mov ecx,dword ptr [esi] - 10006DAC: 0F B6 C2 movzx eax,dl - 10006DAF: 8A 0C 08 mov cl,byte ptr [eax+ecx] - 10006DB2: C0 E1 04 shl cl,4 - 10006DB5: EB 02 jmp 10006DB9 - 10006DB7: B1 F0 mov cl,0F0h - 10006DB9: FE C2 inc dl - 10006DBB: 3A D3 cmp dl,bl - 10006DBD: 73 0E jae 10006DCD - 10006DBF: 8B 1E mov ebx,dword ptr [esi] - 10006DC1: 0F B6 C2 movzx eax,dl - 10006DC4: 8A 04 18 mov al,byte ptr [eax+ebx] - 10006DC7: 24 0F and al,0Fh - 10006DC9: 0A C8 or cl,al - 10006DCB: EB 03 jmp 10006DD0 - 10006DCD: 80 C9 0F or cl,0Fh - 10006DD0: 88 0F mov byte ptr [edi],cl - 10006DD2: FE C2 inc dl - 10006DD4: 47 inc edi - 10006DD5: 83 ED 01 sub ebp,1 - 10006DD8: 75 C9 jne 10006DA3 - 10006DDA: 8B C7 mov eax,edi - 10006DDC: 5F pop edi - 10006DDD: 5E pop esi - 10006DDE: 5D pop ebp - 10006DDF: 5B pop ebx - 10006DE0: C3 ret - 10006DE1: CC int 3 - 10006DE2: CC int 3 - 10006DE3: CC int 3 - 10006DE4: CC int 3 - 10006DE5: CC int 3 - 10006DE6: CC int 3 - 10006DE7: CC int 3 - 10006DE8: CC int 3 - 10006DE9: CC int 3 - 10006DEA: CC int 3 - 10006DEB: CC int 3 - 10006DEC: CC int 3 - 10006DED: CC int 3 - 10006DEE: CC int 3 - 10006DEF: CC int 3 - 10006DF0: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10006DF4: B8 20 20 20 20 mov eax,20202020h - 10006DF9: 56 push esi - 10006DFA: 8B 74 24 0C mov esi,dword ptr [esp+0Ch] - 10006DFE: 89 06 mov dword ptr [esi],eax - 10006E00: 89 46 04 mov dword ptr [esi+4],eax - 10006E03: 89 46 08 mov dword ptr [esi+8],eax - 10006E06: 89 46 0C mov dword ptr [esi+0Ch],eax - 10006E09: 89 46 10 mov dword ptr [esi+10h],eax - 10006E0C: 66 89 46 14 mov word ptr [esi+14h],ax - 10006E10: 8A 41 04 mov al,byte ptr [ecx+4] - 10006E13: 3C 16 cmp al,16h - 10006E15: 0F B6 C0 movzx eax,al - 10006E18: 72 05 jb 10006E1F - 10006E1A: B8 16 00 00 00 mov eax,16h - 10006E1F: 50 push eax - 10006E20: 8B 01 mov eax,dword ptr [ecx] - 10006E22: 50 push eax - 10006E23: 56 push esi - 10006E24: E8 27 2B 00 00 call 10009950 - 10006E29: 83 C4 0C add esp,0Ch - 10006E2C: 8D 46 16 lea eax,[esi+16h] - 10006E2F: 5E pop esi - 10006E30: C3 ret - 10006E31: CC int 3 - 10006E32: CC int 3 - 10006E33: CC int 3 - 10006E34: CC int 3 - 10006E35: CC int 3 - 10006E36: CC int 3 - 10006E37: CC int 3 - 10006E38: CC int 3 - 10006E39: CC int 3 - 10006E3A: CC int 3 - 10006E3B: CC int 3 - 10006E3C: CC int 3 - 10006E3D: CC int 3 - 10006E3E: CC int 3 - 10006E3F: CC int 3 - 10006E40: 8B 44 24 08 mov eax,dword ptr [esp+8] - 10006E44: 56 push esi - 10006E45: 57 push edi - 10006E46: 8B 7C 24 0C mov edi,dword ptr [esp+0Ch] - 10006E4A: 50 push eax - 10006E4B: 57 push edi - 10006E4C: E8 3F FF FF FF call 10006D90 - 10006E51: 8B F0 mov esi,eax - 10006E53: B8 20 20 20 20 mov eax,20202020h - 10006E58: 89 06 mov dword ptr [esi],eax - 10006E5A: 89 46 04 mov dword ptr [esi+4],eax - 10006E5D: 89 46 08 mov dword ptr [esi+8],eax - 10006E60: 89 46 0C mov dword ptr [esi+0Ch],eax - 10006E63: 89 46 10 mov dword ptr [esi+10h],eax - 10006E66: 66 89 46 14 mov word ptr [esi+14h],ax - 10006E6A: 8A 47 0C mov al,byte ptr [edi+0Ch] - 10006E6D: 83 C4 08 add esp,8 - 10006E70: 3C 16 cmp al,16h - 10006E72: 0F B6 C0 movzx eax,al - 10006E75: 72 05 jb 10006E7C - 10006E77: B8 16 00 00 00 mov eax,16h - 10006E7C: 8B 4F 08 mov ecx,dword ptr [edi+8] - 10006E7F: 50 push eax - 10006E80: 51 push ecx - 10006E81: 56 push esi - 10006E82: E8 C9 2A 00 00 call 10009950 - 10006E87: 83 C4 0C add esp,0Ch - 10006E8A: 5F pop edi - 10006E8B: 8D 46 16 lea eax,[esi+16h] - 10006E8E: 5E pop esi - 10006E8F: C3 ret - 10006E90: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10006E94: 0F B6 11 movzx edx,byte ptr [ecx] - 10006E97: 8B 44 24 08 mov eax,dword ptr [esp+8] - 10006E9B: 88 10 mov byte ptr [eax],dl - 10006E9D: 0F B6 51 01 movzx edx,byte ptr [ecx+1] - 10006EA1: 88 50 01 mov byte ptr [eax+1],dl - 10006EA4: 0F B6 51 04 movzx edx,byte ptr [ecx+4] - 10006EA8: 40 inc eax - 10006EA9: 88 50 01 mov byte ptr [eax+1],dl - 10006EAC: 0F B6 51 05 movzx edx,byte ptr [ecx+5] - 10006EB0: 40 inc eax - 10006EB1: 88 50 01 mov byte ptr [eax+1],dl - 10006EB4: 0F B6 51 06 movzx edx,byte ptr [ecx+6] - 10006EB8: 40 inc eax - 10006EB9: 88 50 01 mov byte ptr [eax+1],dl - 10006EBC: 0F B6 51 07 movzx edx,byte ptr [ecx+7] - 10006EC0: 40 inc eax - 10006EC1: 88 50 01 mov byte ptr [eax+1],dl - 10006EC4: 0F B6 51 08 movzx edx,byte ptr [ecx+8] - 10006EC8: 40 inc eax - 10006EC9: 88 50 01 mov byte ptr [eax+1],dl - 10006ECC: 0F B6 51 09 movzx edx,byte ptr [ecx+9] - 10006ED0: 40 inc eax - 10006ED1: 88 50 01 mov byte ptr [eax+1],dl - 10006ED4: 0F B6 51 0A movzx edx,byte ptr [ecx+0Ah] - 10006ED8: 40 inc eax - 10006ED9: 88 50 01 mov byte ptr [eax+1],dl - 10006EDC: 0F B6 51 0B movzx edx,byte ptr [ecx+0Bh] - 10006EE0: 40 inc eax - 10006EE1: 88 50 01 mov byte ptr [eax+1],dl - 10006EE4: 0F B6 51 0C movzx edx,byte ptr [ecx+0Ch] - 10006EE8: 40 inc eax - 10006EE9: 88 50 01 mov byte ptr [eax+1],dl - 10006EEC: 0F B6 51 0D movzx edx,byte ptr [ecx+0Dh] - 10006EF0: 40 inc eax - 10006EF1: 88 50 01 mov byte ptr [eax+1],dl - 10006EF4: 0F B6 51 0E movzx edx,byte ptr [ecx+0Eh] - 10006EF8: 40 inc eax - 10006EF9: 88 50 01 mov byte ptr [eax+1],dl - 10006EFC: 0F B6 51 0F movzx edx,byte ptr [ecx+0Fh] - 10006F00: 40 inc eax - 10006F01: 88 50 01 mov byte ptr [eax+1],dl - 10006F04: 0F B6 51 10 movzx edx,byte ptr [ecx+10h] - 10006F08: 40 inc eax - 10006F09: 88 50 01 mov byte ptr [eax+1],dl - 10006F0C: 0F B6 51 11 movzx edx,byte ptr [ecx+11h] - 10006F10: 40 inc eax - 10006F11: 88 50 01 mov byte ptr [eax+1],dl - 10006F14: 0F B6 51 12 movzx edx,byte ptr [ecx+12h] - 10006F18: 40 inc eax - 10006F19: 88 50 01 mov byte ptr [eax+1],dl - 10006F1C: 0F B6 51 13 movzx edx,byte ptr [ecx+13h] - 10006F20: 40 inc eax - 10006F21: 88 50 01 mov byte ptr [eax+1],dl - 10006F24: 0F B6 51 14 movzx edx,byte ptr [ecx+14h] - 10006F28: 40 inc eax - 10006F29: 40 inc eax - 10006F2A: 88 10 mov byte ptr [eax],dl - 10006F2C: 8A 49 15 mov cl,byte ptr [ecx+15h] - 10006F2F: 40 inc eax - 10006F30: 88 08 mov byte ptr [eax],cl - 10006F32: 40 inc eax - 10006F33: C3 ret - 10006F34: CC int 3 - 10006F35: CC int 3 - 10006F36: CC int 3 - 10006F37: CC int 3 - 10006F38: CC int 3 - 10006F39: CC int 3 - 10006F3A: CC int 3 - 10006F3B: CC int 3 - 10006F3C: CC int 3 - 10006F3D: CC int 3 - 10006F3E: CC int 3 - 10006F3F: CC int 3 - 10006F40: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10006F44: 0F B6 11 movzx edx,byte ptr [ecx] - 10006F47: 8B 44 24 08 mov eax,dword ptr [esp+8] - 10006F4B: 88 10 mov byte ptr [eax],dl - 10006F4D: 0F B6 51 01 movzx edx,byte ptr [ecx+1] - 10006F51: 88 50 01 mov byte ptr [eax+1],dl - 10006F54: 0F B6 51 02 movzx edx,byte ptr [ecx+2] - 10006F58: 40 inc eax - 10006F59: 88 50 01 mov byte ptr [eax+1],dl - 10006F5C: 0F B6 51 03 movzx edx,byte ptr [ecx+3] - 10006F60: 40 inc eax - 10006F61: 88 50 01 mov byte ptr [eax+1],dl - 10006F64: 0F B6 51 04 movzx edx,byte ptr [ecx+4] - 10006F68: 40 inc eax - 10006F69: 88 50 01 mov byte ptr [eax+1],dl - 10006F6C: 0F B6 51 05 movzx edx,byte ptr [ecx+5] - 10006F70: 40 inc eax - 10006F71: 88 50 01 mov byte ptr [eax+1],dl - 10006F74: 0F B6 51 06 movzx edx,byte ptr [ecx+6] - 10006F78: 40 inc eax - 10006F79: 88 50 01 mov byte ptr [eax+1],dl - 10006F7C: 0F B6 51 07 movzx edx,byte ptr [ecx+7] - 10006F80: 40 inc eax - 10006F81: 88 50 01 mov byte ptr [eax+1],dl - 10006F84: 0F B6 51 08 movzx edx,byte ptr [ecx+8] - 10006F88: 40 inc eax - 10006F89: 88 50 01 mov byte ptr [eax+1],dl - 10006F8C: 0F B6 51 09 movzx edx,byte ptr [ecx+9] - 10006F90: 40 inc eax - 10006F91: 88 50 01 mov byte ptr [eax+1],dl - 10006F94: 0F B6 51 0A movzx edx,byte ptr [ecx+0Ah] - 10006F98: 40 inc eax - 10006F99: 88 50 01 mov byte ptr [eax+1],dl - 10006F9C: 0F B6 51 0B movzx edx,byte ptr [ecx+0Bh] - 10006FA0: 40 inc eax - 10006FA1: 88 50 01 mov byte ptr [eax+1],dl - 10006FA4: 0F B6 51 0C movzx edx,byte ptr [ecx+0Ch] - 10006FA8: 40 inc eax - 10006FA9: 40 inc eax - 10006FAA: 88 10 mov byte ptr [eax],dl - 10006FAC: 8A 49 0D mov cl,byte ptr [ecx+0Dh] - 10006FAF: 40 inc eax - 10006FB0: 88 08 mov byte ptr [eax],cl - 10006FB2: 40 inc eax - 10006FB3: C3 ret - 10006FB4: CC int 3 - 10006FB5: CC int 3 - 10006FB6: CC int 3 - 10006FB7: CC int 3 - 10006FB8: CC int 3 - 10006FB9: CC int 3 - 10006FBA: CC int 3 - 10006FBB: CC int 3 - 10006FBC: CC int 3 - 10006FBD: CC int 3 - 10006FBE: CC int 3 - 10006FBF: CC int 3 - 10006FC0: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10006FC4: 0F B6 10 movzx edx,byte ptr [eax] - 10006FC7: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 10006FCB: 88 11 mov byte ptr [ecx],dl - 10006FCD: 0F B6 50 01 movzx edx,byte ptr [eax+1] - 10006FD1: 88 51 01 mov byte ptr [ecx+1],dl - 10006FD4: 0F B6 50 02 movzx edx,byte ptr [eax+2] - 10006FD8: 41 inc ecx - 10006FD9: 88 51 01 mov byte ptr [ecx+1],dl - 10006FDC: 0F B6 50 03 movzx edx,byte ptr [eax+3] - 10006FE0: 41 inc ecx - 10006FE1: 88 51 01 mov byte ptr [ecx+1],dl - 10006FE4: 0F B6 50 04 movzx edx,byte ptr [eax+4] - 10006FE8: 41 inc ecx - 10006FE9: 88 51 01 mov byte ptr [ecx+1],dl - 10006FEC: 0F B6 50 05 movzx edx,byte ptr [eax+5] - 10006FF0: 41 inc ecx - 10006FF1: 88 51 01 mov byte ptr [ecx+1],dl - 10006FF4: 0F B6 50 06 movzx edx,byte ptr [eax+6] - 10006FF8: 41 inc ecx - 10006FF9: 88 51 01 mov byte ptr [ecx+1],dl - 10006FFC: 0F B6 50 07 movzx edx,byte ptr [eax+7] - 10007000: 41 inc ecx - 10007001: 88 51 01 mov byte ptr [ecx+1],dl - 10007004: 0F B6 50 08 movzx edx,byte ptr [eax+8] - 10007008: 41 inc ecx - 10007009: 88 51 01 mov byte ptr [ecx+1],dl - 1000700C: 0F B6 50 09 movzx edx,byte ptr [eax+9] - 10007010: 41 inc ecx - 10007011: 88 51 01 mov byte ptr [ecx+1],dl - 10007014: 0F B6 50 0A movzx edx,byte ptr [eax+0Ah] - 10007018: 41 inc ecx - 10007019: 88 51 01 mov byte ptr [ecx+1],dl - 1000701C: 0F B6 50 0B movzx edx,byte ptr [eax+0Bh] - 10007020: 41 inc ecx - 10007021: 88 51 01 mov byte ptr [ecx+1],dl - 10007024: 0F B6 50 0C movzx edx,byte ptr [eax+0Ch] - 10007028: 41 inc ecx - 10007029: 88 51 01 mov byte ptr [ecx+1],dl - 1000702C: 0F B6 50 0D movzx edx,byte ptr [eax+0Dh] - 10007030: 41 inc ecx - 10007031: 88 51 01 mov byte ptr [ecx+1],dl - 10007034: 0F B6 50 0E movzx edx,byte ptr [eax+0Eh] - 10007038: 41 inc ecx - 10007039: 88 51 01 mov byte ptr [ecx+1],dl - 1000703C: 0F B6 50 0F movzx edx,byte ptr [eax+0Fh] - 10007040: 41 inc ecx - 10007041: 88 51 01 mov byte ptr [ecx+1],dl - 10007044: 0F B6 50 10 movzx edx,byte ptr [eax+10h] - 10007048: 41 inc ecx - 10007049: 88 51 01 mov byte ptr [ecx+1],dl - 1000704C: 0F B6 50 11 movzx edx,byte ptr [eax+11h] - 10007050: 41 inc ecx - 10007051: 88 51 01 mov byte ptr [ecx+1],dl - 10007054: 0F B6 50 12 movzx edx,byte ptr [eax+12h] - 10007058: 41 inc ecx - 10007059: 88 51 01 mov byte ptr [ecx+1],dl - 1000705C: 0F B6 50 13 movzx edx,byte ptr [eax+13h] - 10007060: 41 inc ecx - 10007061: 88 51 01 mov byte ptr [ecx+1],dl - 10007064: 0F B6 50 14 movzx edx,byte ptr [eax+14h] - 10007068: 41 inc ecx - 10007069: 88 51 01 mov byte ptr [ecx+1],dl - 1000706C: 0F B6 50 15 movzx edx,byte ptr [eax+15h] - 10007070: 41 inc ecx - 10007071: 88 51 01 mov byte ptr [ecx+1],dl - 10007074: 0F B6 50 16 movzx edx,byte ptr [eax+16h] - 10007078: 41 inc ecx - 10007079: 88 51 01 mov byte ptr [ecx+1],dl - 1000707C: 0F B6 50 17 movzx edx,byte ptr [eax+17h] - 10007080: 41 inc ecx - 10007081: 88 51 01 mov byte ptr [ecx+1],dl - 10007084: 0F B6 50 18 movzx edx,byte ptr [eax+18h] - 10007088: 41 inc ecx - 10007089: 41 inc ecx - 1000708A: 88 11 mov byte ptr [ecx],dl - 1000708C: 8A 40 19 mov al,byte ptr [eax+19h] - 1000708F: 41 inc ecx - 10007090: 88 01 mov byte ptr [ecx],al - 10007092: 8D 41 01 lea eax,[ecx+1] - 10007095: C3 ret - 10007096: CC int 3 - 10007097: CC int 3 - 10007098: CC int 3 - 10007099: CC int 3 - 1000709A: CC int 3 - 1000709B: CC int 3 - 1000709C: CC int 3 - 1000709D: CC int 3 - 1000709E: CC int 3 - 1000709F: CC int 3 - 100070A0: 8B 44 24 08 mov eax,dword ptr [esp+8] - 100070A4: 56 push esi - 100070A5: 8B 74 24 08 mov esi,dword ptr [esp+8] - 100070A9: 33 C9 xor ecx,ecx - 100070AB: EB 03 jmp 100070B0 - 100070AD: 8D 49 00 lea ecx,[ecx] - 100070B0: 0F B6 14 4E movzx edx,byte ptr [esi+ecx*2] - 100070B4: 88 10 mov byte ptr [eax],dl - 100070B6: 0F B6 54 4E 01 movzx edx,byte ptr [esi+ecx*2+1] - 100070BB: 40 inc eax - 100070BC: 88 10 mov byte ptr [eax],dl - 100070BE: 41 inc ecx - 100070BF: 40 inc eax - 100070C0: 83 F9 0C cmp ecx,0Ch - 100070C3: 7C EB jl 100070B0 - 100070C5: 5E pop esi - 100070C6: C3 ret - 100070C7: CC int 3 - 100070C8: CC int 3 - 100070C9: CC int 3 - 100070CA: CC int 3 - 100070CB: CC int 3 - 100070CC: CC int 3 - 100070CD: CC int 3 - 100070CE: CC int 3 - 100070CF: CC int 3 - 100070D0: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 100070D4: 8B 11 mov edx,dword ptr [ecx] - 100070D6: 8B 44 24 08 mov eax,dword ptr [esp+8] - 100070DA: 89 10 mov dword ptr [eax],edx - 100070DC: 66 8B 51 04 mov dx,word ptr [ecx+4] - 100070E0: 66 89 50 04 mov word ptr [eax+4],dx - 100070E4: 8A 51 06 mov dl,byte ptr [ecx+6] - 100070E7: 88 50 06 mov byte ptr [eax+6],dl - 100070EA: 8A 49 07 mov cl,byte ptr [ecx+7] - 100070ED: 83 C0 07 add eax,7 - 100070F0: 88 08 mov byte ptr [eax],cl - 100070F2: 40 inc eax - 100070F3: C3 ret - 100070F4: CC int 3 - 100070F5: CC int 3 - 100070F6: CC int 3 - 100070F7: CC int 3 - 100070F8: CC int 3 - 100070F9: CC int 3 - 100070FA: CC int 3 - 100070FB: CC int 3 - 100070FC: CC int 3 - 100070FD: CC int 3 - 100070FE: CC int 3 - 100070FF: CC int 3 - 10007100: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10007104: 8B 11 mov edx,dword ptr [ecx] - 10007106: 8B 44 24 08 mov eax,dword ptr [esp+8] - 1000710A: 89 10 mov dword ptr [eax],edx - 1000710C: 66 8B 51 04 mov dx,word ptr [ecx+4] - 10007110: 66 89 50 04 mov word ptr [eax+4],dx - 10007114: 0F B6 51 06 movzx edx,byte ptr [ecx+6] - 10007118: 88 50 06 mov byte ptr [eax+6],dl - 1000711B: 0F B6 51 07 movzx edx,byte ptr [ecx+7] - 1000711F: 88 50 07 mov byte ptr [eax+7],dl - 10007122: 0F B6 51 08 movzx edx,byte ptr [ecx+8] - 10007126: 88 50 08 mov byte ptr [eax+8],dl - 10007129: 0F B6 51 09 movzx edx,byte ptr [ecx+9] - 1000712D: 83 C0 08 add eax,8 - 10007130: 88 50 01 mov byte ptr [eax+1],dl - 10007133: 0F B6 51 0A movzx edx,byte ptr [ecx+0Ah] - 10007137: 40 inc eax - 10007138: 40 inc eax - 10007139: 88 10 mov byte ptr [eax],dl - 1000713B: 8A 49 0B mov cl,byte ptr [ecx+0Bh] - 1000713E: 40 inc eax - 1000713F: 88 08 mov byte ptr [eax],cl - 10007141: 40 inc eax - 10007142: C3 ret - 10007143: CC int 3 - 10007144: CC int 3 - 10007145: CC int 3 - 10007146: CC int 3 - 10007147: CC int 3 - 10007148: CC int 3 - 10007149: CC int 3 - 1000714A: CC int 3 - 1000714B: CC int 3 - 1000714C: CC int 3 - 1000714D: CC int 3 - 1000714E: CC int 3 - 1000714F: CC int 3 - 10007150: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10007154: 0F B6 11 movzx edx,byte ptr [ecx] - 10007157: 8B 44 24 08 mov eax,dword ptr [esp+8] - 1000715B: 88 10 mov byte ptr [eax],dl - 1000715D: 0F B6 51 01 movzx edx,byte ptr [ecx+1] - 10007161: 88 50 01 mov byte ptr [eax+1],dl - 10007164: 0F B6 51 04 movzx edx,byte ptr [ecx+4] - 10007168: 40 inc eax - 10007169: 88 50 01 mov byte ptr [eax+1],dl - 1000716C: 0F B6 51 05 movzx edx,byte ptr [ecx+5] - 10007170: 40 inc eax - 10007171: 88 50 01 mov byte ptr [eax+1],dl - 10007174: 0F B6 51 06 movzx edx,byte ptr [ecx+6] - 10007178: 40 inc eax - 10007179: 40 inc eax - 1000717A: 88 10 mov byte ptr [eax],dl - 1000717C: 8A 49 07 mov cl,byte ptr [ecx+7] - 1000717F: 40 inc eax - 10007180: 88 08 mov byte ptr [eax],cl - 10007182: 40 inc eax - 10007183: C3 ret - 10007184: CC int 3 - 10007185: CC int 3 - 10007186: CC int 3 - 10007187: CC int 3 - 10007188: CC int 3 - 10007189: CC int 3 - 1000718A: CC int 3 - 1000718B: CC int 3 - 1000718C: CC int 3 - 1000718D: CC int 3 - 1000718E: CC int 3 - 1000718F: CC int 3 - 10007190: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10007194: 8B 44 24 08 mov eax,dword ptr [esp+8] - 10007198: 56 push esi - 10007199: 83 C1 02 add ecx,2 - 1000719C: BE 0C 00 00 00 mov esi,0Ch - 100071A1: 0F B6 51 FE movzx edx,byte ptr [ecx-2] - 100071A5: 88 10 mov byte ptr [eax],dl - 100071A7: 0F B6 51 FF movzx edx,byte ptr [ecx-1] - 100071AB: 40 inc eax - 100071AC: 88 10 mov byte ptr [eax],dl - 100071AE: 0F B6 11 movzx edx,byte ptr [ecx] - 100071B1: 40 inc eax - 100071B2: 88 10 mov byte ptr [eax],dl - 100071B4: 0F B6 51 01 movzx edx,byte ptr [ecx+1] - 100071B8: 40 inc eax - 100071B9: 88 10 mov byte ptr [eax],dl - 100071BB: 40 inc eax - 100071BC: 83 C1 04 add ecx,4 - 100071BF: 83 EE 01 sub esi,1 - 100071C2: 75 DD jne 100071A1 - 100071C4: 5E pop esi - 100071C5: C3 ret - 100071C6: CC int 3 - 100071C7: CC int 3 - 100071C8: CC int 3 - 100071C9: CC int 3 - 100071CA: CC int 3 - 100071CB: CC int 3 - 100071CC: CC int 3 - 100071CD: CC int 3 - 100071CE: CC int 3 - 100071CF: CC int 3 - 100071D0: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 100071D4: 0F B6 11 movzx edx,byte ptr [ecx] - 100071D7: 8B 44 24 08 mov eax,dword ptr [esp+8] - 100071DB: 88 10 mov byte ptr [eax],dl - 100071DD: 0F B6 51 01 movzx edx,byte ptr [ecx+1] - 100071E1: 88 50 01 mov byte ptr [eax+1],dl - 100071E4: 0F B6 51 02 movzx edx,byte ptr [ecx+2] - 100071E8: 40 inc eax - 100071E9: 88 50 01 mov byte ptr [eax+1],dl - 100071EC: 0F B6 51 03 movzx edx,byte ptr [ecx+3] - 100071F0: 40 inc eax - 100071F1: 88 50 01 mov byte ptr [eax+1],dl - 100071F4: 0F B6 51 04 movzx edx,byte ptr [ecx+4] - 100071F8: 40 inc eax - 100071F9: 88 50 01 mov byte ptr [eax+1],dl - 100071FC: 0F B6 51 05 movzx edx,byte ptr [ecx+5] - 10007200: 40 inc eax - 10007201: 88 50 01 mov byte ptr [eax+1],dl - 10007204: 0F B6 51 06 movzx edx,byte ptr [ecx+6] - 10007208: 40 inc eax - 10007209: 88 50 01 mov byte ptr [eax+1],dl - 1000720C: 0F B6 51 07 movzx edx,byte ptr [ecx+7] - 10007210: 40 inc eax - 10007211: 88 50 01 mov byte ptr [eax+1],dl - 10007214: 0F B6 51 08 movzx edx,byte ptr [ecx+8] - 10007218: 40 inc eax - 10007219: 88 50 01 mov byte ptr [eax+1],dl - 1000721C: 0F B6 51 09 movzx edx,byte ptr [ecx+9] - 10007220: 40 inc eax - 10007221: 88 50 01 mov byte ptr [eax+1],dl - 10007224: 0F B6 51 0A movzx edx,byte ptr [ecx+0Ah] - 10007228: 40 inc eax - 10007229: 40 inc eax - 1000722A: 88 10 mov byte ptr [eax],dl - 1000722C: 8A 49 0B mov cl,byte ptr [ecx+0Bh] - 1000722F: 40 inc eax - 10007230: 88 08 mov byte ptr [eax],cl - 10007232: 40 inc eax - 10007233: C3 ret - 10007234: CC int 3 - 10007235: CC int 3 - 10007236: CC int 3 - 10007237: CC int 3 - 10007238: CC int 3 - 10007239: CC int 3 - 1000723A: CC int 3 - 1000723B: CC int 3 - 1000723C: CC int 3 - 1000723D: CC int 3 - 1000723E: CC int 3 - 1000723F: CC int 3 - 10007240: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10007244: 0F B6 11 movzx edx,byte ptr [ecx] - 10007247: 8B 44 24 08 mov eax,dword ptr [esp+8] - 1000724B: 88 10 mov byte ptr [eax],dl - 1000724D: 0F B6 51 01 movzx edx,byte ptr [ecx+1] - 10007251: 88 50 01 mov byte ptr [eax+1],dl - 10007254: 0F B6 51 02 movzx edx,byte ptr [ecx+2] - 10007258: 40 inc eax - 10007259: 40 inc eax - 1000725A: 88 10 mov byte ptr [eax],dl - 1000725C: 8A 49 03 mov cl,byte ptr [ecx+3] - 1000725F: 40 inc eax - 10007260: 88 08 mov byte ptr [eax],cl - 10007262: 40 inc eax - 10007263: C3 ret - 10007264: CC int 3 - 10007265: CC int 3 - 10007266: CC int 3 - 10007267: CC int 3 - 10007268: CC int 3 - 10007269: CC int 3 - 1000726A: CC int 3 - 1000726B: CC int 3 - 1000726C: CC int 3 - 1000726D: CC int 3 - 1000726E: CC int 3 - 1000726F: CC int 3 - 10007270: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10007274: 0F B6 11 movzx edx,byte ptr [ecx] - 10007277: 8B 44 24 08 mov eax,dword ptr [esp+8] - 1000727B: 88 10 mov byte ptr [eax],dl - 1000727D: 0F B6 51 01 movzx edx,byte ptr [ecx+1] - 10007281: 88 50 01 mov byte ptr [eax+1],dl - 10007284: 0F B6 51 02 movzx edx,byte ptr [ecx+2] - 10007288: 40 inc eax - 10007289: 88 50 01 mov byte ptr [eax+1],dl - 1000728C: 0F B6 51 03 movzx edx,byte ptr [ecx+3] - 10007290: 40 inc eax - 10007291: 88 50 01 mov byte ptr [eax+1],dl - 10007294: 0F B6 51 04 movzx edx,byte ptr [ecx+4] - 10007298: 40 inc eax - 10007299: 40 inc eax - 1000729A: 88 10 mov byte ptr [eax],dl - 1000729C: 8A 49 05 mov cl,byte ptr [ecx+5] - 1000729F: 40 inc eax - 100072A0: 88 08 mov byte ptr [eax],cl - 100072A2: 40 inc eax - 100072A3: C3 ret - 100072A4: CC int 3 - 100072A5: CC int 3 - 100072A6: CC int 3 - 100072A7: CC int 3 - 100072A8: CC int 3 - 100072A9: CC int 3 - 100072AA: CC int 3 - 100072AB: CC int 3 - 100072AC: CC int 3 - 100072AD: CC int 3 - 100072AE: CC int 3 - 100072AF: CC int 3 - 100072B0: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 100072B4: 0F B6 11 movzx edx,byte ptr [ecx] - 100072B7: 8B 44 24 08 mov eax,dword ptr [esp+8] - 100072BB: 88 10 mov byte ptr [eax],dl - 100072BD: 0F B6 51 01 movzx edx,byte ptr [ecx+1] - 100072C1: 88 50 01 mov byte ptr [eax+1],dl - 100072C4: 0F B6 51 02 movzx edx,byte ptr [ecx+2] - 100072C8: 40 inc eax - 100072C9: 88 50 01 mov byte ptr [eax+1],dl - 100072CC: 0F B6 51 03 movzx edx,byte ptr [ecx+3] - 100072D0: 40 inc eax - 100072D1: 88 50 01 mov byte ptr [eax+1],dl - 100072D4: 0F B6 51 04 movzx edx,byte ptr [ecx+4] - 100072D8: 40 inc eax - 100072D9: 88 50 01 mov byte ptr [eax+1],dl - 100072DC: 0F B6 51 05 movzx edx,byte ptr [ecx+5] - 100072E0: 40 inc eax - 100072E1: 88 50 01 mov byte ptr [eax+1],dl - 100072E4: 0F B6 51 06 movzx edx,byte ptr [ecx+6] - 100072E8: 40 inc eax - 100072E9: 40 inc eax - 100072EA: 88 10 mov byte ptr [eax],dl - 100072EC: 8A 49 07 mov cl,byte ptr [ecx+7] - 100072EF: 40 inc eax - 100072F0: 88 08 mov byte ptr [eax],cl - 100072F2: 40 inc eax - 100072F3: C3 ret - 100072F4: CC int 3 - 100072F5: CC int 3 - 100072F6: CC int 3 - 100072F7: CC int 3 - 100072F8: CC int 3 - 100072F9: CC int 3 - 100072FA: CC int 3 - 100072FB: CC int 3 - 100072FC: CC int 3 - 100072FD: CC int 3 - 100072FE: CC int 3 - 100072FF: CC int 3 - 10007300: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10007304: 0F B6 11 movzx edx,byte ptr [ecx] - 10007307: 8B 44 24 08 mov eax,dword ptr [esp+8] - 1000730B: 88 10 mov byte ptr [eax],dl - 1000730D: 0F B6 51 01 movzx edx,byte ptr [ecx+1] - 10007311: 40 inc eax - 10007312: 88 10 mov byte ptr [eax],dl - 10007314: 8A 49 02 mov cl,byte ptr [ecx+2] - 10007317: 40 inc eax - 10007318: 88 08 mov byte ptr [eax],cl - 1000731A: 40 inc eax - 1000731B: C3 ret - 1000731C: CC int 3 - 1000731D: CC int 3 - 1000731E: CC int 3 - 1000731F: CC int 3 - 10007320: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10007324: 0F B6 11 movzx edx,byte ptr [ecx] - 10007327: 8B 44 24 08 mov eax,dword ptr [esp+8] - 1000732B: 88 10 mov byte ptr [eax],dl - 1000732D: 0F B6 51 02 movzx edx,byte ptr [ecx+2] - 10007331: 40 inc eax - 10007332: 88 10 mov byte ptr [eax],dl - 10007334: 8A 49 03 mov cl,byte ptr [ecx+3] - 10007337: 40 inc eax - 10007338: 88 08 mov byte ptr [eax],cl - 1000733A: 40 inc eax - 1000733B: C3 ret - 1000733C: CC int 3 - 1000733D: CC int 3 - 1000733E: CC int 3 - 1000733F: CC int 3 - 10007340: 8B 44 24 08 mov eax,dword ptr [esp+8] - 10007344: 56 push esi - 10007345: 8B 74 24 08 mov esi,dword ptr [esp+8] - 10007349: 0F B6 0E movzx ecx,byte ptr [esi] - 1000734C: 88 08 mov byte ptr [eax],cl - 1000734E: 8A 56 02 mov dl,byte ptr [esi+2] - 10007351: 40 inc eax - 10007352: 88 10 mov byte ptr [eax],dl - 10007354: 0F B6 4E 03 movzx ecx,byte ptr [esi+3] - 10007358: 40 inc eax - 10007359: 88 08 mov byte ptr [eax],cl - 1000735B: 0F B6 16 movzx edx,byte ptr [esi] - 1000735E: 57 push edi - 1000735F: 8D 78 01 lea edi,[eax+1] - 10007362: 52 push edx - 10007363: 8D 46 04 lea eax,[esi+4] - 10007366: 50 push eax - 10007367: 57 push edi - 10007368: E8 E3 25 00 00 call 10009950 - 1000736D: 0F B6 06 movzx eax,byte ptr [esi] - 10007370: 83 C4 0C add esp,0Ch - 10007373: 03 C7 add eax,edi - 10007375: 5F pop edi - 10007376: 5E pop esi - 10007377: C3 ret - 10007378: CC int 3 - 10007379: CC int 3 - 1000737A: CC int 3 - 1000737B: CC int 3 - 1000737C: CC int 3 - 1000737D: CC int 3 - 1000737E: CC int 3 - 1000737F: CC int 3 - 10007380: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10007384: 8A 11 mov dl,byte ptr [ecx] - 10007386: 8B 44 24 08 mov eax,dword ptr [esp+8] - 1000738A: 88 10 mov byte ptr [eax],dl - 1000738C: 8A 49 01 mov cl,byte ptr [ecx+1] - 1000738F: 40 inc eax - 10007390: 88 08 mov byte ptr [eax],cl - 10007392: 40 inc eax - 10007393: C3 ret - 10007394: CC int 3 - 10007395: CC int 3 - 10007396: CC int 3 - 10007397: CC int 3 - 10007398: CC int 3 - 10007399: CC int 3 - 1000739A: CC int 3 - 1000739B: CC int 3 - 1000739C: CC int 3 - 1000739D: CC int 3 - 1000739E: CC int 3 - 1000739F: CC int 3 - 100073A0: 6A FF push 0FFFFFFFFh - 100073A2: 68 B3 EC 01 10 push 1001ECB3h - 100073A7: 64 A1 00 00 00 00 mov eax,dword ptr fs:[00000000h] - 100073AD: 50 push eax - 100073AE: 83 EC 08 sub esp,8 - 100073B1: 53 push ebx - 100073B2: 56 push esi - 100073B3: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 100073B8: 33 C4 xor eax,esp - 100073BA: 50 push eax - 100073BB: 8D 44 24 14 lea eax,[esp+14h] - 100073BF: 64 A3 00 00 00 00 mov dword ptr fs:[00000000h],eax - 100073C5: 8B F1 mov esi,ecx - 100073C7: 89 74 24 0C mov dword ptr [esp+0Ch],esi - 100073CB: E8 50 AF FF FF call 10002320 - 100073D0: 33 DB xor ebx,ebx - 100073D2: 6A 10 push 10h - 100073D4: 89 5C 24 20 mov dword ptr [esp+20h],ebx - 100073D8: E8 93 2D 00 00 call 1000A170 - 100073DD: 83 C4 04 add esp,4 - 100073E0: 89 44 24 10 mov dword ptr [esp+10h],eax - 100073E4: C6 44 24 1C 01 mov byte ptr [esp+1Ch],1 - 100073E9: 3B C3 cmp eax,ebx - 100073EB: 74 0E je 100073FB - 100073ED: 68 80 00 00 00 push 80h - 100073F2: 8B C8 mov ecx,eax - 100073F4: E8 07 AA FF FF call 10001E00 - 100073F9: EB 02 jmp 100073FD - 100073FB: 33 C0 xor eax,eax - 100073FD: 89 46 14 mov dword ptr [esi+14h],eax - 10007400: 33 C0 xor eax,eax - 10007402: 66 89 46 12 mov word ptr [esi+12h],ax - 10007406: C6 46 10 1E mov byte ptr [esi+10h],1Eh - 1000740A: 89 5E 60 mov dword ptr [esi+60h],ebx - 1000740D: 89 5E 64 mov dword ptr [esi+64h],ebx - 10007410: 88 5E 68 mov byte ptr [esi+68h],bl - 10007413: 8B C6 mov eax,esi - 10007415: 8B 4C 24 14 mov ecx,dword ptr [esp+14h] - 10007419: 64 89 0D 00 00 00 mov dword ptr fs:[00000000h],ecx - 00 - 10007420: 59 pop ecx - 10007421: 5E pop esi - 10007422: 5B pop ebx - 10007423: 83 C4 14 add esp,14h - 10007426: C3 ret - 10007427: CC int 3 - 10007428: CC int 3 - 10007429: CC int 3 - 1000742A: CC int 3 - 1000742B: CC int 3 - 1000742C: CC int 3 - 1000742D: CC int 3 - 1000742E: CC int 3 - 1000742F: CC int 3 - 10007430: 8B 44 24 14 mov eax,dword ptr [esp+14h] - 10007434: 8B 54 24 0C mov edx,dword ptr [esp+0Ch] - 10007438: 53 push ebx - 10007439: 56 push esi - 1000743A: 57 push edi - 1000743B: 50 push eax - 1000743C: 8B 44 24 18 mov eax,dword ptr [esp+18h] - 10007440: 8B F1 mov esi,ecx - 10007442: 8B 4C 24 20 mov ecx,dword ptr [esp+20h] - 10007446: 51 push ecx - 10007447: 8B 4C 24 18 mov ecx,dword ptr [esp+18h] - 1000744B: 52 push edx - 1000744C: 50 push eax - 1000744D: 51 push ecx - 1000744E: 8B CE mov ecx,esi - 10007450: E8 DB AE FF FF call 10002330 - 10007455: 8B F8 mov edi,eax - 10007457: 33 DB xor ebx,ebx - 10007459: 3B FB cmp edi,ebx - 1000745B: 75 0D jne 1000746A - 1000745D: 53 push ebx - 1000745E: 6A 14 push 14h - 10007460: 6A 02 push 2 - 10007462: E8 09 22 00 00 call 10009670 - 10007467: 83 C4 0C add esp,0Ch - 1000746A: 33 D2 xor edx,edx - 1000746C: 8B C7 mov eax,edi - 1000746E: 5F pop edi - 1000746F: 89 5E 0C mov dword ptr [esi+0Ch],ebx - 10007472: 89 5E 60 mov dword ptr [esi+60h],ebx - 10007475: 89 5E 64 mov dword ptr [esi+64h],ebx - 10007478: 88 5E 68 mov byte ptr [esi+68h],bl - 1000747B: 66 89 56 12 mov word ptr [esi+12h],dx - 1000747F: 5E pop esi - 10007480: 5B pop ebx - 10007481: C2 14 00 ret 14h - 10007484: CC int 3 - 10007485: CC int 3 - 10007486: CC int 3 - 10007487: CC int 3 - 10007488: CC int 3 - 10007489: CC int 3 - 1000748A: CC int 3 - 1000748B: CC int 3 - 1000748C: CC int 3 - 1000748D: CC int 3 - 1000748E: CC int 3 - 1000748F: CC int 3 - 10007490: 56 push esi - 10007491: E8 6A AF FF FF call 10002400 - 10007496: 8B F0 mov esi,eax - 10007498: 85 F6 test esi,esi - 1000749A: 75 0F jne 100074AB - 1000749C: 50 push eax - 1000749D: 6A 15 push 15h - 1000749F: 6A 02 push 2 - 100074A1: E8 CA 21 00 00 call 10009670 - 100074A6: 83 C4 0C add esp,0Ch - 100074A9: 8B C6 mov eax,esi - 100074AB: 5E pop esi - 100074AC: C3 ret - 100074AD: CC int 3 - 100074AE: CC int 3 - 100074AF: CC int 3 - 100074B0: 56 push esi - 100074B1: 8B 74 24 08 mov esi,dword ptr [esp+8] - 100074B5: B8 67 66 66 66 mov eax,66666667h - 100074BA: F7 EE imul esi - 100074BC: C1 FA 02 sar edx,2 - 100074BF: 8B C2 mov eax,edx - 100074C1: C1 E8 1F shr eax,1Fh - 100074C4: 03 C2 add eax,edx - 100074C6: 83 F8 01 cmp eax,1 - 100074C9: 7D 05 jge 100074D0 - 100074CB: B8 01 00 00 00 mov eax,1 - 100074D0: 8B 54 24 10 mov edx,dword ptr [esp+10h] - 100074D4: 52 push edx - 100074D5: 6A 00 push 0 - 100074D7: 6A 64 push 64h - 100074D9: 50 push eax - 100074DA: 56 push esi - 100074DB: E8 50 AF FF FF call 10002430 - 100074E0: 8B F0 mov esi,eax - 100074E2: 85 F6 test esi,esi - 100074E4: 75 0D jne 100074F3 - 100074E6: 50 push eax - 100074E7: 6A 16 push 16h - 100074E9: 6A 02 push 2 - 100074EB: E8 80 21 00 00 call 10009670 - 100074F0: 83 C4 0C add esp,0Ch - 100074F3: 8B C6 mov eax,esi - 100074F5: 5E pop esi - 100074F6: C2 0C 00 ret 0Ch - 100074F9: CC int 3 - 100074FA: CC int 3 - 100074FB: CC int 3 - 100074FC: CC int 3 - 100074FD: CC int 3 - 100074FE: CC int 3 - 100074FF: CC int 3 - 10007500: 8A 44 24 04 mov al,byte ptr [esp+4] - 10007504: 88 41 10 mov byte ptr [ecx+10h],al - 10007507: C2 04 00 ret 4 - 1000750A: CC int 3 - 1000750B: CC int 3 - 1000750C: CC int 3 - 1000750D: CC int 3 - 1000750E: CC int 3 - 1000750F: CC int 3 - 10007510: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10007514: 89 41 0C mov dword ptr [ecx+0Ch],eax - 10007517: C2 04 00 ret 4 - 1000751A: CC int 3 - 1000751B: CC int 3 - 1000751C: CC int 3 - 1000751D: CC int 3 - 1000751E: CC int 3 - 1000751F: CC int 3 - 10007520: 56 push esi - 10007521: 57 push edi - 10007522: 6A 01 push 1 - 10007524: 6A 01 push 1 - 10007526: 8B F1 mov esi,ecx - 10007528: E8 43 AF FF FF call 10002470 - 1000752D: 8B 4E 14 mov ecx,dword ptr [esi+14h] - 10007530: 8B F8 mov edi,eax - 10007532: E8 29 A8 FF FF call 10001D60 - 10007537: 33 C0 xor eax,eax - 10007539: 89 46 60 mov dword ptr [esi+60h],eax - 1000753C: 89 46 64 mov dword ptr [esi+64h],eax - 1000753F: 88 46 68 mov byte ptr [esi+68h],al - 10007542: 8B C7 mov eax,edi - 10007544: 5F pop edi - 10007545: 5E pop esi - 10007546: C3 ret - 10007547: CC int 3 - 10007548: CC int 3 - 10007549: CC int 3 - 1000754A: CC int 3 - 1000754B: CC int 3 - 1000754C: CC int 3 - 1000754D: CC int 3 - 1000754E: CC int 3 - 1000754F: CC int 3 - 10007550: 53 push ebx - 10007551: 8B 5C 24 08 mov ebx,dword ptr [esp+8] - 10007555: 55 push ebp - 10007556: 56 push esi - 10007557: 8B 74 24 14 mov esi,dword ptr [esp+14h] - 1000755B: 57 push edi - 1000755C: 8B E9 mov ebp,ecx - 1000755E: BF 01 00 00 00 mov edi,1 - 10007563: 85 F6 test esi,esi - 10007565: 76 31 jbe 10007598 - 10007567: 8D 44 24 18 lea eax,[esp+18h] - 1000756B: 50 push eax - 1000756C: 56 push esi - 1000756D: 53 push ebx - 1000756E: 8B CD mov ecx,ebp - 10007570: E8 1B AF FF FF call 10002490 - 10007575: 8B F8 mov edi,eax - 10007577: 85 FF test edi,edi - 10007579: 74 0A je 10007585 - 1000757B: 8B 44 24 18 mov eax,dword ptr [esp+18h] - 1000757F: 03 D8 add ebx,eax - 10007581: 2B F0 sub esi,eax - 10007583: EB DE jmp 10007563 - 10007585: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 1000758B: 50 push eax - 1000758C: 6A 13 push 13h - 1000758E: 6A 02 push 2 - 10007590: E8 DB 20 00 00 call 10009670 - 10007595: 83 C4 0C add esp,0Ch - 10007598: 8B C7 mov eax,edi - 1000759A: 5F pop edi - 1000759B: 5E pop esi - 1000759C: 5D pop ebp - 1000759D: 5B pop ebx - 1000759E: C2 08 00 ret 8 - 100075A1: CC int 3 - 100075A2: CC int 3 - 100075A3: CC int 3 - 100075A4: CC int 3 - 100075A5: CC int 3 - 100075A6: CC int 3 - 100075A7: CC int 3 - 100075A8: CC int 3 - 100075A9: CC int 3 - 100075AA: CC int 3 - 100075AB: CC int 3 - 100075AC: CC int 3 - 100075AD: CC int 3 - 100075AE: CC int 3 - 100075AF: CC int 3 - 100075B0: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 100075B4: 53 push ebx - 100075B5: 8B 5C 24 14 mov ebx,dword ptr [esp+14h] - 100075B9: 55 push ebp - 100075BA: 8B 6C 24 0C mov ebp,dword ptr [esp+0Ch] - 100075BE: 56 push esi - 100075BF: 57 push edi - 100075C0: BE 01 00 00 00 mov esi,1 - 100075C5: 33 D2 xor edx,edx - 100075C7: 3B 54 24 24 cmp edx,dword ptr [esp+24h] - 100075CB: 73 5D jae 1000762A - 100075CD: 83 7C 24 28 00 cmp dword ptr [esp+28h],0 - 100075D2: 74 39 je 1000760D - 100075D4: 8A 04 1A mov al,byte ptr [edx+ebx] - 100075D7: 3C C0 cmp al,0C0h - 100075D9: 74 08 je 100075E3 - 100075DB: 3C C1 cmp al,0C1h - 100075DD: 74 04 je 100075E3 - 100075DF: 3C 7D cmp al,7Dh - 100075E1: 75 2A jne 1000760D - 100075E3: 8B 01 mov eax,dword ptr [ecx] - 100075E5: 8B 74 24 1C mov esi,dword ptr [esp+1Ch] - 100075E9: 2B F0 sub esi,eax - 100075EB: BF 01 00 00 00 mov edi,1 - 100075F0: 3B FE cmp edi,esi - 100075F2: 1B F6 sbb esi,esi - 100075F4: F7 DE neg esi - 100075F6: 74 32 je 1000762A - 100075F8: C6 04 28 7D mov byte ptr [eax+ebp],7Dh - 100075FC: FF 01 inc dword ptr [ecx] - 100075FE: 8A 04 1A mov al,byte ptr [edx+ebx] - 10007601: 8B 39 mov edi,dword ptr [ecx] - 10007603: 34 20 xor al,20h - 10007605: 88 04 2F mov byte ptr [edi+ebp],al - 10007608: FF 01 inc dword ptr [ecx] - 1000760A: 42 inc edx - 1000760B: EB BA jmp 100075C7 - 1000760D: 8B 39 mov edi,dword ptr [ecx] - 1000760F: 8B 44 24 1C mov eax,dword ptr [esp+1Ch] - 10007613: 33 F6 xor esi,esi - 10007615: 2B C7 sub eax,edi - 10007617: 3B F0 cmp esi,eax - 10007619: 1B F6 sbb esi,esi - 1000761B: F7 DE neg esi - 1000761D: 74 0B je 1000762A - 1000761F: 8A 04 1A mov al,byte ptr [edx+ebx] - 10007622: 88 04 2F mov byte ptr [edi+ebp],al - 10007625: FF 01 inc dword ptr [ecx] - 10007627: 42 inc edx - 10007628: EB 9D jmp 100075C7 - 1000762A: 5F pop edi - 1000762B: 8B C6 mov eax,esi - 1000762D: 5E pop esi - 1000762E: 5D pop ebp - 1000762F: 5B pop ebx - 10007630: C2 18 00 ret 18h - 10007633: CC int 3 - 10007634: CC int 3 - 10007635: CC int 3 - 10007636: CC int 3 - 10007637: CC int 3 - 10007638: CC int 3 - 10007639: CC int 3 - 1000763A: CC int 3 - 1000763B: CC int 3 - 1000763C: CC int 3 - 1000763D: CC int 3 - 1000763E: CC int 3 - 1000763F: CC int 3 - 10007640: 81 EC 88 01 00 00 sub esp,188h - 10007646: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1000764B: 33 C4 xor eax,esp - 1000764D: 89 84 24 84 01 00 mov dword ptr [esp+00000184h],eax - 00 - 10007654: 8B 84 24 8C 01 00 mov eax,dword ptr [esp+0000018Ch] - 00 - 1000765B: 53 push ebx - 1000765C: 55 push ebp - 1000765D: 56 push esi - 1000765E: 8B D9 mov ebx,ecx - 10007660: 57 push edi - 10007661: 8D 4C 24 20 lea ecx,[esp+20h] - 10007665: 89 44 24 1C mov dword ptr [esp+1Ch],eax - 10007669: C6 44 24 17 C0 mov byte ptr [esp+17h],0C0h - 1000766E: C6 44 24 15 C1 mov byte ptr [esp+15h],0C1h - 10007673: E8 38 20 00 00 call 100096B0 - 10007678: 66 0F B6 4B 10 movzx cx,byte ptr [ebx+10h] - 1000767D: 0F B7 C1 movzx eax,cx - 10007680: 33 F6 xor esi,esi - 10007682: 33 D2 xor edx,edx - 10007684: 89 74 24 10 mov dword ptr [esp+10h],esi - 10007688: 66 3B D0 cmp dx,ax - 1000768B: 73 16 jae 100076A3 - 1000768D: 0F B7 C0 movzx eax,ax - 10007690: 50 push eax - 10007691: 8D 4C 24 64 lea ecx,[esp+64h] - 10007695: 68 FF 00 00 00 push 0FFh - 1000769A: 51 push ecx - 1000769B: E8 D0 2B 00 00 call 1000A270 - 100076A0: 83 C4 0C add esp,0Ch - 100076A3: 8B 6B 0C mov ebp,dword ptr [ebx+0Ch] - 100076A6: 33 C9 xor ecx,ecx - 100076A8: 8D 44 24 18 lea eax,[esp+18h] - 100076AC: 8D 79 03 lea edi,[ecx+3] - 100076AF: 90 nop - 100076B0: 8B D5 mov edx,ebp - 100076B2: D3 EA shr edx,cl - 100076B4: 83 C1 08 add ecx,8 - 100076B7: 40 inc eax - 100076B8: 83 EF 01 sub edi,1 - 100076BB: 88 50 FF mov byte ptr [eax-1],dl - 100076BE: 75 F0 jne 100076B0 - 100076C0: 6A 03 push 3 - 100076C2: 8D 44 24 1C lea eax,[esp+1Ch] - 100076C6: 50 push eax - 100076C7: 68 FF FF 00 00 push 0FFFFh - 100076CC: E8 0F AC FF FF call 100022E0 - 100076D1: 8B AC 24 AC 01 00 mov ebp,dword ptr [esp+000001ACh] - 00 - 100076D8: 8B 4C 24 28 mov ecx,dword ptr [esp+28h] - 100076DC: 0F B7 C0 movzx eax,ax - 100076DF: 55 push ebp - 100076E0: 51 push ecx - 100076E1: 50 push eax - 100076E2: E8 F9 AB FF FF call 100022E0 - 100076E7: 66 F7 D0 not ax - 100076EA: 0F B7 C0 movzx eax,ax - 100076ED: 83 C4 18 add esp,18h - 100076F0: 88 44 24 16 mov byte ptr [esp+16h],al - 100076F4: 57 push edi - 100076F5: C1 E8 08 shr eax,8 - 100076F8: 6A 01 push 1 - 100076FA: 8B CB mov ecx,ebx - 100076FC: 88 44 24 1C mov byte ptr [esp+1Ch],al - 10007700: E8 4B AD FF FF call 10002450 - 10007705: 8D 4C 24 30 lea ecx,[esp+30h] - 10007709: E8 A2 1F 00 00 call 100096B0 - 1000770E: 50 push eax - 1000770F: 8D 4C 24 24 lea ecx,[esp+24h] - 10007713: E8 18 20 00 00 call 10009730 - 10007718: 6A 02 push 2 - 1000771A: 8D 54 24 34 lea edx,[esp+34h] - 1000771E: 52 push edx - 1000771F: 8D 4C 24 28 lea ecx,[esp+28h] - 10007723: E8 48 20 00 00 call 10009770 - 10007728: 50 push eax - 10007729: 8D 4C 24 44 lea ecx,[esp+44h] - 1000772D: E8 7E 1F 00 00 call 100096B0 - 10007732: 8B C8 mov ecx,eax - 10007734: E8 87 20 00 00 call 100097C0 - 10007739: 84 C0 test al,al - 1000773B: 74 19 je 10007756 - 1000773D: 8D 44 24 20 lea eax,[esp+20h] - 10007741: 50 push eax - 10007742: 8D 4C 24 54 lea ecx,[esp+54h] - 10007746: E8 65 1F 00 00 call 100096B0 - 1000774B: 8B C8 mov ecx,eax - 1000774D: E8 AE 20 00 00 call 10009800 - 10007752: 84 C0 test al,al - 10007754: 75 C2 jne 10007718 - 10007756: 6A 01 push 1 - 10007758: 6A 01 push 1 - 1000775A: 8B CB mov ecx,ebx - 1000775C: E8 EF AC FF FF call 10002450 - 10007761: 0F B6 7B 10 movzx edi,byte ptr [ebx+10h] - 10007765: B8 01 00 00 00 mov eax,1 - 1000776A: 8D 9B 00 00 00 00 lea ebx,[ebx+00000000h] - 10007770: 3B F7 cmp esi,edi - 10007772: 73 23 jae 10007797 - 10007774: B9 00 01 00 00 mov ecx,100h - 10007779: 2B CE sub ecx,esi - 1000777B: 33 D2 xor edx,edx - 1000777D: 3B D1 cmp edx,ecx - 1000777F: 1B C0 sbb eax,eax - 10007781: F7 D8 neg eax - 10007783: 0F 84 4B 01 00 00 je 100078D4 - 10007789: 8A 4C 34 60 mov cl,byte ptr [esp+esi+60h] - 1000778D: 88 8C 34 94 00 00 mov byte ptr [esp+esi+00000094h],cl - 00 - 10007794: 46 inc esi - 10007795: EB D9 jmp 10007770 - 10007797: 89 74 24 10 mov dword ptr [esp+10h],esi - 1000779B: 85 C0 test eax,eax - 1000779D: 0F 84 35 01 00 00 je 100078D8 - 100077A3: B8 01 00 00 00 mov eax,1 - 100077A8: 33 C9 xor ecx,ecx - 100077AA: 8D 9B 00 00 00 00 lea ebx,[ebx+00000000h] - 100077B0: 83 F9 01 cmp ecx,1 - 100077B3: 73 24 jae 100077D9 - 100077B5: BA 00 01 00 00 mov edx,100h - 100077BA: 33 C0 xor eax,eax - 100077BC: 2B D6 sub edx,esi - 100077BE: 3B C2 cmp eax,edx - 100077C0: 1B C0 sbb eax,eax - 100077C2: F7 D8 neg eax - 100077C4: 0F 84 0A 01 00 00 je 100078D4 - 100077CA: 8A 54 0C 17 mov dl,byte ptr [esp+ecx+17h] - 100077CE: 88 94 34 94 00 00 mov byte ptr [esp+esi+00000094h],dl - 00 - 100077D5: 46 inc esi - 100077D6: 41 inc ecx - 100077D7: EB D7 jmp 100077B0 - 100077D9: 89 74 24 10 mov dword ptr [esp+10h],esi - 100077DD: 85 C0 test eax,eax - 100077DF: 0F 84 F3 00 00 00 je 100078D8 - 100077E5: 6A 01 push 1 - 100077E7: 6A 03 push 3 - 100077E9: 8D 44 24 20 lea eax,[esp+20h] - 100077ED: 50 push eax - 100077EE: 68 00 01 00 00 push 100h - 100077F3: 8D 4C 24 20 lea ecx,[esp+20h] - 100077F7: 51 push ecx - 100077F8: 8D 94 24 A8 00 00 lea edx,[esp+000000A8h] - 00 - 100077FF: 52 push edx - 10007800: 8B CB mov ecx,ebx - 10007802: E8 A9 FD FF FF call 100075B0 - 10007807: 85 C0 test eax,eax - 10007809: 0F 84 C9 00 00 00 je 100078D8 - 1000780F: 8B 44 24 1C mov eax,dword ptr [esp+1Ch] - 10007813: 6A 01 push 1 - 10007815: 55 push ebp - 10007816: 50 push eax - 10007817: 68 00 01 00 00 push 100h - 1000781C: 8D 4C 24 20 lea ecx,[esp+20h] - 10007820: 51 push ecx - 10007821: 8D 94 24 A8 00 00 lea edx,[esp+000000A8h] - 00 - 10007828: 52 push edx - 10007829: 8B CB mov ecx,ebx - 1000782B: E8 80 FD FF FF call 100075B0 - 10007830: 85 C0 test eax,eax - 10007832: 0F 84 A0 00 00 00 je 100078D8 - 10007838: 6A 01 push 1 - 1000783A: 6A 01 push 1 - 1000783C: 8D 44 24 1E lea eax,[esp+1Eh] - 10007840: 50 push eax - 10007841: 68 00 01 00 00 push 100h - 10007846: 8D 4C 24 20 lea ecx,[esp+20h] - 1000784A: 51 push ecx - 1000784B: 8D 94 24 A8 00 00 lea edx,[esp+000000A8h] - 00 - 10007852: 52 push edx - 10007853: 8B CB mov ecx,ebx - 10007855: E8 56 FD FF FF call 100075B0 - 1000785A: 85 C0 test eax,eax - 1000785C: 74 7A je 100078D8 - 1000785E: 6A 01 push 1 - 10007860: 6A 01 push 1 - 10007862: 8D 44 24 1C lea eax,[esp+1Ch] - 10007866: 50 push eax - 10007867: 68 00 01 00 00 push 100h - 1000786C: 8D 4C 24 20 lea ecx,[esp+20h] - 10007870: 51 push ecx - 10007871: 8D 94 24 A8 00 00 lea edx,[esp+000000A8h] - 00 - 10007878: 52 push edx - 10007879: 8B CB mov ecx,ebx - 1000787B: E8 30 FD FF FF call 100075B0 - 10007880: 85 C0 test eax,eax - 10007882: 74 54 je 100078D8 - 10007884: 8B 4C 24 10 mov ecx,dword ptr [esp+10h] - 10007888: B8 01 00 00 00 mov eax,1 - 1000788D: 33 F6 xor esi,esi - 1000788F: 90 nop - 10007890: 83 FE 01 cmp esi,1 - 10007893: 73 20 jae 100078B5 - 10007895: B8 00 01 00 00 mov eax,100h - 1000789A: 2B C1 sub eax,ecx - 1000789C: 33 D2 xor edx,edx - 1000789E: 3B D0 cmp edx,eax - 100078A0: 1B C0 sbb eax,eax - 100078A2: F7 D8 neg eax - 100078A4: 74 32 je 100078D8 - 100078A6: 8A 54 34 15 mov dl,byte ptr [esp+esi+15h] - 100078AA: 88 94 0C 94 00 00 mov byte ptr [esp+ecx+00000094h],dl - 00 - 100078B1: 41 inc ecx - 100078B2: 46 inc esi - 100078B3: EB DB jmp 10007890 - 100078B5: 85 C0 test eax,eax - 100078B7: 74 1F je 100078D8 - 100078B9: 51 push ecx - 100078BA: 8D 84 24 98 00 00 lea eax,[esp+00000098h] - 00 - 100078C1: 50 push eax - 100078C2: 8B CB mov ecx,ebx - 100078C4: E8 87 FC FF FF call 10007550 - 100078C9: 85 C0 test eax,eax - 100078CB: 74 0B je 100078D8 - 100078CD: B8 01 00 00 00 mov eax,1 - 100078D2: EB 06 jmp 100078DA - 100078D4: 89 74 24 10 mov dword ptr [esp+10h],esi - 100078D8: 33 C0 xor eax,eax - 100078DA: 8B 8C 24 94 01 00 mov ecx,dword ptr [esp+00000194h] - 00 - 100078E1: 5F pop edi - 100078E2: 5E pop esi - 100078E3: 5D pop ebp - 100078E4: 5B pop ebx - 100078E5: 33 CC xor ecx,esp - 100078E7: E8 AF 27 00 00 call 1000A09B - 100078EC: 81 C4 88 01 00 00 add esp,188h - 100078F2: C2 08 00 ret 8 - 100078F5: CC int 3 - 100078F6: CC int 3 - 100078F7: CC int 3 - 100078F8: CC int 3 - 100078F9: CC int 3 - 100078FA: CC int 3 - 100078FB: CC int 3 - 100078FC: CC int 3 - 100078FD: CC int 3 - 100078FE: CC int 3 - 100078FF: CC int 3 - 10007900: 81 EC B8 00 00 00 sub esp,0B8h - 10007906: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1000790B: 33 C4 xor eax,esp - 1000790D: 89 84 24 B4 00 00 mov dword ptr [esp+000000B4h],eax - 00 - 10007914: 8B 84 24 C0 00 00 mov eax,dword ptr [esp+000000C0h] - 00 - 1000791B: 53 push ebx - 1000791C: 55 push ebp - 1000791D: 8B AC 24 CC 00 00 mov ebp,dword ptr [esp+000000CCh] - 00 - 10007924: 56 push esi - 10007925: 57 push edi - 10007926: 8B BC 24 CC 00 00 mov edi,dword ptr [esp+000000CCh] - 00 - 1000792D: 8B F1 mov esi,ecx - 1000792F: 89 44 24 14 mov dword ptr [esp+14h],eax - 10007933: 55 push ebp - 10007934: 68 80 00 00 00 push 80h - 10007939: 8D 4C 24 4C lea ecx,[esp+4Ch] - 1000793D: 51 push ecx - 1000793E: 8B CE mov ecx,esi - 10007940: E8 7B AB FF FF call 100024C0 - 10007945: 85 C0 test eax,eax - 10007947: 8D 54 24 18 lea edx,[esp+18h] - 1000794B: 52 push edx - 1000794C: 8D 44 24 14 lea eax,[esp+14h] - 10007950: 50 push eax - 10007951: 8B CE mov ecx,esi - 10007953: 0F 94 C3 sete bl - 10007956: E8 95 AB FF FF call 100024F0 - 1000795B: 85 C0 test eax,eax - 1000795D: 75 06 jne 10007965 - 1000795F: 89 44 24 10 mov dword ptr [esp+10h],eax - 10007963: EB 18 jmp 1000797D - 10007965: F6 44 24 10 08 test byte ptr [esp+10h],8 - 1000796A: 74 11 je 1000797D - 1000796C: 0F B7 46 12 movzx eax,word ptr [esi+12h] - 10007970: 66 83 F8 08 cmp ax,8 - 10007974: 7D 07 jge 1000797D - 10007976: 83 C0 02 add eax,2 - 10007979: 66 89 46 12 mov word ptr [esi+12h],ax - 1000797D: 80 FB 01 cmp bl,1 - 10007980: 75 4B jne 100079CD - 10007982: 57 push edi - 10007983: 8D 4C 24 38 lea ecx,[esp+38h] - 10007987: E8 24 1D 00 00 call 100096B0 - 1000798C: 8B C8 mov ecx,eax - 1000798E: E8 6D 1E 00 00 call 10009800 - 10007993: 84 C0 test al,al - 10007995: 74 19 je 100079B0 - 10007997: 8B 4C 24 14 mov ecx,dword ptr [esp+14h] - 1000799B: 51 push ecx - 1000799C: 8D 4C 24 28 lea ecx,[esp+28h] - 100079A0: E8 0B 1D 00 00 call 100096B0 - 100079A5: 8B C8 mov ecx,eax - 100079A7: E8 14 1E 00 00 call 100097C0 - 100079AC: 84 C0 test al,al - 100079AE: 75 83 jne 10007933 - 100079B0: 8A C3 mov al,bl - 100079B2: 8B 8C 24 C4 00 00 mov ecx,dword ptr [esp+000000C4h] - 00 - 100079B9: 5F pop edi - 100079BA: 5E pop esi - 100079BB: 5D pop ebp - 100079BC: 5B pop ebx - 100079BD: 33 CC xor ecx,esp - 100079BF: E8 D7 26 00 00 call 1000A09B - 100079C4: 81 C4 B8 00 00 00 add esp,0B8h - 100079CA: C2 0C 00 ret 0Ch - 100079CD: 84 DB test bl,bl - 100079CF: 75 DF jne 100079B0 - 100079D1: 33 FF xor edi,edi - 100079D3: 39 7D 00 cmp dword ptr [ebp],edi - 100079D6: 76 D8 jbe 100079B0 - 100079D8: EB 06 jmp 100079E0 - 100079DA: 8D 9B 00 00 00 00 lea ebx,[ebx+00000000h] - 100079E0: 0F B6 54 3C 44 movzx edx,byte ptr [esp+edi+44h] - 100079E5: 8B 4E 14 mov ecx,dword ptr [esi+14h] - 100079E8: 52 push edx - 100079E9: E8 A2 A3 FF FF call 10001D90 - 100079EE: 85 C0 test eax,eax - 100079F0: 74 08 je 100079FA - 100079F2: 47 inc edi - 100079F3: 3B 7D 00 cmp edi,dword ptr [ebp] - 100079F6: 72 E8 jb 100079E0 - 100079F8: EB B6 jmp 100079B0 - 100079FA: B0 01 mov al,1 - 100079FC: EB B4 jmp 100079B2 - 100079FE: CC int 3 - 100079FF: CC int 3 - 10007A00: 51 push ecx - 10007A01: 56 push esi - 10007A02: 8B F1 mov esi,ecx - 10007A04: 8A 4C 24 0C mov cl,byte ptr [esp+0Ch] - 10007A08: 32 D2 xor dl,dl - 10007A0A: 88 54 24 07 mov byte ptr [esp+7],dl - 10007A0E: 80 F9 C0 cmp cl,0C0h - 10007A11: 75 29 jne 10007A3C - 10007A13: 83 7E 64 00 cmp dword ptr [esi+64h],0 - 10007A17: 74 11 je 10007A2A - 10007A19: 0F B7 46 12 movzx eax,word ptr [esi+12h] - 10007A1D: 66 83 F8 08 cmp ax,8 - 10007A21: 7D 07 jge 10007A2A - 10007A23: 83 C0 02 add eax,2 - 10007A26: 66 89 46 12 mov word ptr [esi+12h],ax - 10007A2A: C7 46 64 01 00 00 mov dword ptr [esi+64h],1 - 00 - 10007A31: C6 46 68 00 mov byte ptr [esi+68h],0 - 10007A35: 8A C2 mov al,dl - 10007A37: 5E pop esi - 10007A38: 59 pop ecx - 10007A39: C2 18 00 ret 18h - 10007A3C: 83 7E 64 00 cmp dword ptr [esi+64h],0 - 10007A40: 74 F3 je 10007A35 - 10007A42: 53 push ebx - 10007A43: 80 F9 C1 cmp cl,0C1h - 10007A46: 0F 85 DD 00 00 00 jne 10007B29 - 10007A4C: 66 0F B6 46 68 movzx ax,byte ptr [esi+68h] - 10007A51: 55 push ebp - 10007A52: 57 push edi - 10007A53: 0F B7 C8 movzx ecx,ax - 10007A56: 51 push ecx - 10007A57: 8D 7E 18 lea edi,[esi+18h] - 10007A5A: 57 push edi - 10007A5B: 68 FF FF 00 00 push 0FFFFh - 10007A60: E8 7B A8 FF FF call 100022E0 - 10007A65: BA B8 F0 00 00 mov edx,0F0B8h - 10007A6A: 83 C4 0C add esp,0Ch - 10007A6D: 66 3B C2 cmp ax,dx - 10007A70: 74 29 je 10007A9B - 10007A72: B1 05 mov cl,5 - 10007A74: 0F B7 46 12 movzx eax,word ptr [esi+12h] - 10007A78: 66 83 F8 08 cmp ax,8 - 10007A7C: 7D 07 jge 10007A85 - 10007A7E: 83 C0 02 add eax,2 - 10007A81: 66 89 46 12 mov word ptr [esi+12h],ax - 10007A85: 5F pop edi - 10007A86: 33 C0 xor eax,eax - 10007A88: 5D pop ebp - 10007A89: 89 46 64 mov dword ptr [esi+64h],eax - 10007A8C: 89 46 60 mov dword ptr [esi+60h],eax - 10007A8F: 5B pop ebx - 10007A90: C6 46 68 00 mov byte ptr [esi+68h],0 - 10007A94: 8A C1 mov al,cl - 10007A96: 5E pop esi - 10007A97: 59 pop ecx - 10007A98: C2 18 00 ret 18h - 10007A9B: 8A 46 68 mov al,byte ptr [esi+68h] - 10007A9E: 3C 05 cmp al,5 - 10007AA0: 73 04 jae 10007AA6 - 10007AA2: B1 02 mov cl,2 - 10007AA4: EB CE jmp 10007A74 - 10007AA6: 8B 6C 24 28 mov ebp,dword ptr [esp+28h] - 10007AAA: 0F B6 C0 movzx eax,al - 10007AAD: 83 C0 FB add eax,0FFFFFFFBh - 10007AB0: 89 45 00 mov dword ptr [ebp],eax - 10007AB3: 3B 44 24 24 cmp eax,dword ptr [esp+24h] - 10007AB7: 76 04 jbe 10007ABD - 10007AB9: B1 03 mov cl,3 - 10007ABB: EB B7 jmp 10007A74 - 10007ABD: 8B 44 24 1C mov eax,dword ptr [esp+1Ch] - 10007AC1: 33 C9 xor ecx,ecx - 10007AC3: 8B D7 mov edx,edi - 10007AC5: C7 00 00 00 00 00 mov dword ptr [eax],0 - 10007ACB: 8D 79 03 lea edi,[ecx+3] - 10007ACE: 8B FF mov edi,edi - 10007AD0: 0F B6 1A movzx ebx,byte ptr [edx] - 10007AD3: D3 E3 shl ebx,cl - 10007AD5: 42 inc edx - 10007AD6: 83 C1 08 add ecx,8 - 10007AD9: 01 18 add dword ptr [eax],ebx - 10007ADB: 83 EF 01 sub edi,1 - 10007ADE: 75 F0 jne 10007AD0 - 10007AE0: 8B 4E 0C mov ecx,dword ptr [esi+0Ch] - 10007AE3: 3B 08 cmp ecx,dword ptr [eax] - 10007AE5: 74 0C je 10007AF3 - 10007AE7: 81 F9 FF FF FF 00 cmp ecx,0FFFFFFh - 10007AED: 74 04 je 10007AF3 - 10007AEF: B1 04 mov cl,4 - 10007AF1: EB 81 jmp 10007A74 - 10007AF3: 8B 45 00 mov eax,dword ptr [ebp] - 10007AF6: 8B 54 24 20 mov edx,dword ptr [esp+20h] - 10007AFA: 50 push eax - 10007AFB: 8D 4E 1B lea ecx,[esi+1Bh] - 10007AFE: 51 push ecx - 10007AFF: 52 push edx - 10007B00: E8 4B 1E 00 00 call 10009950 - 10007B05: 8B 44 24 38 mov eax,dword ptr [esp+38h] - 10007B09: 8A 4C 24 1F mov cl,byte ptr [esp+1Fh] - 10007B0D: C7 00 01 00 00 00 mov dword ptr [eax],1 - 10007B13: 0F B7 46 12 movzx eax,word ptr [esi+12h] - 10007B17: 83 C4 0C add esp,0Ch - 10007B1A: 66 85 C0 test ax,ax - 10007B1D: 0F 8E 62 FF FF FF jle 10007A85 - 10007B23: 48 dec eax - 10007B24: E9 58 FF FF FF jmp 10007A81 - 10007B29: 83 7E 60 00 cmp dword ptr [esi+60h],0 - 10007B2D: BB 01 00 00 00 mov ebx,1 - 10007B32: 74 0C je 10007B40 - 10007B34: 80 F1 20 xor cl,20h - 10007B37: C7 46 60 00 00 00 mov dword ptr [esi+60h],0 - 00 - 10007B3E: EB 08 jmp 10007B48 - 10007B40: 80 F9 7D cmp cl,7Dh - 10007B43: 75 03 jne 10007B48 - 10007B45: 89 5E 60 mov dword ptr [esi+60h],ebx - 10007B48: 83 7E 60 00 cmp dword ptr [esi+60h],0 - 10007B4C: 75 11 jne 10007B5F - 10007B4E: 8A 46 68 mov al,byte ptr [esi+68h] - 10007B51: 3C 45 cmp al,45h - 10007B53: 73 12 jae 10007B67 - 10007B55: 0F B6 C0 movzx eax,al - 10007B58: 88 4C 30 18 mov byte ptr [eax+esi+18h],cl - 10007B5C: 00 5E 68 add byte ptr [esi+68h],bl - 10007B5F: 5B pop ebx - 10007B60: 8A C2 mov al,dl - 10007B62: 5E pop esi - 10007B63: 59 pop ecx - 10007B64: C2 18 00 ret 18h - 10007B67: 5B pop ebx - 10007B68: C6 46 68 00 mov byte ptr [esi+68h],0 - 10007B6C: B0 06 mov al,6 - 10007B6E: 5E pop esi - 10007B6F: 59 pop ecx - 10007B70: C2 18 00 ret 18h - 10007B73: CC int 3 - 10007B74: CC int 3 - 10007B75: CC int 3 - 10007B76: CC int 3 - 10007B77: CC int 3 - 10007B78: CC int 3 - 10007B79: CC int 3 - 10007B7A: CC int 3 - 10007B7B: CC int 3 - 10007B7C: CC int 3 - 10007B7D: CC int 3 - 10007B7E: CC int 3 - 10007B7F: CC int 3 - 10007B80: 33 C0 xor eax,eax - 10007B82: 66 83 79 12 04 cmp word ptr [ecx+12h],4 - 10007B87: 0F 9D C0 setge al - 10007B8A: C3 ret - 10007B8B: CC int 3 - 10007B8C: CC int 3 - 10007B8D: CC int 3 - 10007B8E: CC int 3 - 10007B8F: CC int 3 - 10007B90: 6A FF push 0FFFFFFFFh - 10007B92: 68 D8 EC 01 10 push 1001ECD8h - 10007B97: 64 A1 00 00 00 00 mov eax,dword ptr fs:[00000000h] - 10007B9D: 50 push eax - 10007B9E: 51 push ecx - 10007B9F: 56 push esi - 10007BA0: 57 push edi - 10007BA1: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10007BA6: 33 C4 xor eax,esp - 10007BA8: 50 push eax - 10007BA9: 8D 44 24 10 lea eax,[esp+10h] - 10007BAD: 64 A3 00 00 00 00 mov dword ptr fs:[00000000h],eax - 10007BB3: 8B F1 mov esi,ecx - 10007BB5: 89 74 24 0C mov dword ptr [esp+0Ch],esi - 10007BB9: C7 44 24 18 00 00 mov dword ptr [esp+18h],0 - 00 00 - 10007BC1: E8 3A A8 FF FF call 10002400 - 10007BC6: 85 C0 test eax,eax - 10007BC8: 75 0D jne 10007BD7 - 10007BCA: 50 push eax - 10007BCB: 6A 15 push 15h - 10007BCD: 6A 02 push 2 - 10007BCF: E8 9C 1A 00 00 call 10009670 - 10007BD4: 83 C4 0C add esp,0Ch - 10007BD7: 8B 7E 14 mov edi,dword ptr [esi+14h] - 10007BDA: 85 FF test edi,edi - 10007BDC: 74 10 je 10007BEE - 10007BDE: 8B CF mov ecx,edi - 10007BE0: E8 5B A1 FF FF call 10001D40 - 10007BE5: 57 push edi - 10007BE6: E8 10 25 00 00 call 1000A0FB - 10007BEB: 83 C4 04 add esp,4 - 10007BEE: 8B CE mov ecx,esi - 10007BF0: C7 44 24 18 FF FF mov dword ptr [esp+18h],0FFFFFFFFh - FF FF - 10007BF8: E8 13 A9 FF FF call 10002510 - 10007BFD: 8B 4C 24 10 mov ecx,dword ptr [esp+10h] - 10007C01: 64 89 0D 00 00 00 mov dword ptr fs:[00000000h],ecx - 00 - 10007C08: 59 pop ecx - 10007C09: 5F pop edi - 10007C0A: 5E pop esi - 10007C0B: 83 C4 10 add esp,10h - 10007C0E: C3 ret - 10007C0F: CC int 3 - 10007C10: 83 EC 4C sub esp,4Ch - 10007C13: 53 push ebx - 10007C14: 55 push ebp - 10007C15: 56 push esi - 10007C16: 8B F1 mov esi,ecx - 10007C18: 57 push edi - 10007C19: 33 ED xor ebp,ebp - 10007C1B: 8D 4C 24 1C lea ecx,[esp+1Ch] - 10007C1F: 33 FF xor edi,edi - 10007C21: 89 6C 24 10 mov dword ptr [esp+10h],ebp - 10007C25: 32 DB xor bl,bl - 10007C27: E8 84 1A 00 00 call 100096B0 - 10007C2C: 8D 4C 24 2C lea ecx,[esp+2Ch] - 10007C30: E8 7B 1A 00 00 call 100096B0 - 10007C35: 8B 44 24 6C mov eax,dword ptr [esp+6Ch] - 10007C39: 8D 4C 24 3C lea ecx,[esp+3Ch] - 10007C3D: 89 38 mov dword ptr [eax],edi - 10007C3F: E8 6C 1A 00 00 call 100096B0 - 10007C44: 50 push eax - 10007C45: 8D 4C 24 20 lea ecx,[esp+20h] - 10007C49: E8 E2 1A 00 00 call 10009730 - 10007C4E: 8B 4C 24 70 mov ecx,dword ptr [esp+70h] - 10007C52: 51 push ecx - 10007C53: 8D 54 24 40 lea edx,[esp+40h] - 10007C57: 52 push edx - 10007C58: 8D 4C 24 24 lea ecx,[esp+24h] - 10007C5C: E8 0F 1B 00 00 call 10009770 - 10007C61: 50 push eax - 10007C62: 8D 4C 24 30 lea ecx,[esp+30h] - 10007C66: E8 C5 1A 00 00 call 10009730 - 10007C6B: EB 03 jmp 10007C70 - 10007C6D: 8D 49 00 lea ecx,[ecx] - 10007C70: 85 FF test edi,edi - 10007C72: 0F 85 C4 00 00 00 jne 10007D3C - 10007C78: 84 DB test bl,bl - 10007C7A: 0F 85 BC 00 00 00 jne 10007D3C - 10007C80: 85 ED test ebp,ebp - 10007C82: 75 24 jne 10007CA8 - 10007C84: 8B 4E 14 mov ecx,dword ptr [esi+14h] - 10007C87: E8 E4 A0 FF FF call 10001D70 - 10007C8C: 85 C0 test eax,eax - 10007C8E: 74 18 je 10007CA8 - 10007C90: 8D 44 24 18 lea eax,[esp+18h] - 10007C94: 50 push eax - 10007C95: 8D 4C 24 30 lea ecx,[esp+30h] - 10007C99: 51 push ecx - 10007C9A: 8D 54 24 24 lea edx,[esp+24h] - 10007C9E: 52 push edx - 10007C9F: 8B CE mov ecx,esi - 10007CA1: E8 5A FC FF FF call 10007900 - 10007CA6: 8A D8 mov bl,al - 10007CA8: 8B 4E 14 mov ecx,dword ptr [esi+14h] - 10007CAB: E8 C0 A0 FF FF call 10001D70 - 10007CB0: 85 C0 test eax,eax - 10007CB2: 75 4C jne 10007D00 - 10007CB4: 85 ED test ebp,ebp - 10007CB6: 75 48 jne 10007D00 - 10007CB8: 84 DB test bl,bl - 10007CBA: 75 44 jne 10007D00 - 10007CBC: 8B 4E 14 mov ecx,dword ptr [esi+14h] - 10007CBF: 8D 44 24 14 lea eax,[esp+14h] - 10007CC3: 50 push eax - 10007CC4: E8 F7 A0 FF FF call 10001DC0 - 10007CC9: 8B 54 24 6C mov edx,dword ptr [esp+6Ch] - 10007CCD: 8B 44 24 68 mov eax,dword ptr [esp+68h] - 10007CD1: 8D 4C 24 10 lea ecx,[esp+10h] - 10007CD5: 51 push ecx - 10007CD6: 8B 4C 24 68 mov ecx,dword ptr [esp+68h] - 10007CDA: 52 push edx - 10007CDB: 8B 54 24 68 mov edx,dword ptr [esp+68h] - 10007CDF: 50 push eax - 10007CE0: 8B 44 24 20 mov eax,dword ptr [esp+20h] - 10007CE4: 51 push ecx - 10007CE5: 52 push edx - 10007CE6: 50 push eax - 10007CE7: 8B CE mov ecx,esi - 10007CE9: E8 12 FD FF FF call 10007A00 - 10007CEE: 8B 4E 14 mov ecx,dword ptr [esi+14h] - 10007CF1: 8A D8 mov bl,al - 10007CF3: E8 78 A0 FF FF call 10001D70 - 10007CF8: 8B 6C 24 10 mov ebp,dword ptr [esp+10h] - 10007CFC: 85 C0 test eax,eax - 10007CFE: 74 B4 je 10007CB4 - 10007D00: 8D 4C 24 2C lea ecx,[esp+2Ch] - 10007D04: 51 push ecx - 10007D05: 8D 4C 24 40 lea ecx,[esp+40h] - 10007D09: E8 A2 19 00 00 call 100096B0 - 10007D0E: 8B C8 mov ecx,eax - 10007D10: E8 EB 1A 00 00 call 10009800 - 10007D15: 84 C0 test al,al - 10007D17: 75 2F jne 10007D48 - 10007D19: 8D 54 24 1C lea edx,[esp+1Ch] - 10007D1D: 52 push edx - 10007D1E: 8D 4C 24 50 lea ecx,[esp+50h] - 10007D22: E8 89 19 00 00 call 100096B0 - 10007D27: 8B C8 mov ecx,eax - 10007D29: E8 92 1A 00 00 call 100097C0 - 10007D2E: 84 C0 test al,al - 10007D30: 75 16 jne 10007D48 - 10007D32: 33 FF xor edi,edi - 10007D34: 85 ED test ebp,ebp - 10007D36: 0F 84 34 FF FF FF je 10007C70 - 10007D3C: 5F pop edi - 10007D3D: 5E pop esi - 10007D3E: 5D pop ebp - 10007D3F: 8A C3 mov al,bl - 10007D41: 5B pop ebx - 10007D42: 83 C4 4C add esp,4Ch - 10007D45: C2 14 00 ret 14h - 10007D48: BF 01 00 00 00 mov edi,1 - 10007D4D: 85 ED test ebp,ebp - 10007D4F: 75 EB jne 10007D3C - 10007D51: 84 DB test bl,bl - 10007D53: 0F 85 17 FF FF FF jne 10007C70 - 10007D59: B3 01 mov bl,1 - 10007D5B: E9 10 FF FF FF jmp 10007C70 - 10007D60: 56 push esi - 10007D61: 0F B7 74 24 0C movzx esi,word ptr [esp+0Ch] - 10007D66: 57 push edi - 10007D67: 8B 7C 24 0C mov edi,dword ptr [esp+0Ch] - 10007D6B: 8D 46 FF lea eax,[esi-1] - 10007D6E: 50 push eax - 10007D6F: 68 A8 5C 02 10 push 10025CA8h - 10007D74: 57 push edi - 10007D75: E8 70 25 00 00 call 1000A2EA - 10007D7A: 83 C4 0C add esp,0Ch - 10007D7D: 33 C9 xor ecx,ecx - 10007D7F: 66 89 4C 77 FE mov word ptr [edi+esi*2-2],cx - 10007D84: 5F pop edi - 10007D85: 5E pop esi - 10007D86: C2 08 00 ret 8 - 10007D89: CC int 3 - 10007D8A: CC int 3 - 10007D8B: CC int 3 - 10007D8C: CC int 3 - 10007D8D: CC int 3 - 10007D8E: CC int 3 - 10007D8F: CC int 3 - 10007D90: 0F B7 44 24 08 movzx eax,word ptr [esp+8] - 10007D95: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10007D99: 48 dec eax - 10007D9A: 50 push eax - 10007D9B: 51 push ecx - 10007D9C: 68 B8 60 02 10 push 100260B8h - 10007DA1: E8 44 25 00 00 call 1000A2EA - 10007DA6: 83 C4 0C add esp,0Ch - 10007DA9: C2 08 00 ret 8 - 10007DAC: CC int 3 - 10007DAD: CC int 3 - 10007DAE: CC int 3 - 10007DAF: CC int 3 - 10007DB0: 81 EC 64 06 00 00 sub esp,664h - 10007DB6: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10007DBB: 33 C4 xor eax,esp - 10007DBD: 89 84 24 60 06 00 mov dword ptr [esp+00000660h],eax - 00 - 10007DC4: 83 3D 80 44 02 10 cmp dword ptr ds:[10024480h],0 - 00 - 10007DCB: 0F 84 70 03 00 00 je 10008141 - 10007DD1: B9 0C F5 01 10 mov ecx,1001F50Ch - 10007DD6: B8 A8 5C 02 10 mov eax,10025CA8h - 10007DDB: EB 03 jmp 10007DE0 - 10007DDD: 8D 49 00 lea ecx,[ecx] - 10007DE0: 66 8B 10 mov dx,word ptr [eax] - 10007DE3: 66 3B 11 cmp dx,word ptr [ecx] - 10007DE6: 75 1E jne 10007E06 - 10007DE8: 66 85 D2 test dx,dx - 10007DEB: 74 15 je 10007E02 - 10007DED: 66 8B 50 02 mov dx,word ptr [eax+2] - 10007DF1: 66 3B 51 02 cmp dx,word ptr [ecx+2] - 10007DF5: 75 0F jne 10007E06 - 10007DF7: 83 C0 04 add eax,4 - 10007DFA: 83 C1 04 add ecx,4 - 10007DFD: 66 85 D2 test dx,dx - 10007E00: 75 DE jne 10007DE0 - 10007E02: 33 C0 xor eax,eax - 10007E04: EB 05 jmp 10007E0B - 10007E06: 1B C0 sbb eax,eax - 10007E08: 83 D8 FF sbb eax,0FFFFFFFFh - 10007E0B: 56 push esi - 10007E0C: 85 C0 test eax,eax - 10007E0E: 0F 85 2B 01 00 00 jne 10007F3F - 10007E14: 8D 84 24 44 04 00 lea eax,[esp+00000444h] - 00 - 10007E1B: 50 push eax - 10007E1C: 6A 00 push 0 - 10007E1E: 6A 00 push 0 - 10007E20: 6A 1A push 1Ah - 10007E22: 6A 00 push 0 - 10007E24: FF 15 74 F1 01 10 call dword ptr ds:[1001F174h] - 10007E2A: 85 C0 test eax,eax - 10007E2C: 0F 8C 0D 01 00 00 jl 10007F3F - 10007E32: 53 push ebx - 10007E33: 57 push edi - 10007E34: 8D 8C 24 4C 04 00 lea ecx,[esp+0000044Ch] - 00 - 10007E3B: 51 push ecx - 10007E3C: 68 04 F5 01 10 push 1001F504h - 10007E41: 8D 54 24 14 lea edx,[esp+14h] - 10007E45: 68 0F 01 00 00 push 10Fh - 10007E4A: 52 push edx - 10007E4B: E8 AF 23 00 00 call 1000A1FF - 10007E50: 8B F0 mov esi,eax - 10007E52: 68 00 F5 01 10 push 1001F500h - 10007E57: B8 0F 01 00 00 mov eax,10Fh - 10007E5C: 68 04 F5 01 10 push 1001F504h - 10007E61: 2B C6 sub eax,esi - 10007E63: 50 push eax - 10007E64: 8D 4C 74 28 lea ecx,[esp+esi*2+28h] - 10007E68: 51 push ecx - 10007E69: E8 91 23 00 00 call 1000A1FF - 10007E6E: 03 F0 add esi,eax - 10007E70: 68 A8 46 02 10 push 100246A8h - 10007E75: BA 0F 01 00 00 mov edx,10Fh - 10007E7A: 68 04 F5 01 10 push 1001F504h - 10007E7F: 2B D6 sub edx,esi - 10007E81: 52 push edx - 10007E82: 8D 44 74 38 lea eax,[esp+esi*2+38h] - 10007E86: 50 push eax - 10007E87: E8 73 23 00 00 call 1000A1FF - 10007E8C: 03 F0 add esi,eax - 10007E8E: 68 00 F5 01 10 push 1001F500h - 10007E93: B9 0F 01 00 00 mov ecx,10Fh - 10007E98: 68 04 F5 01 10 push 1001F504h - 10007E9D: 2B CE sub ecx,esi - 10007E9F: 51 push ecx - 10007EA0: 8D 54 74 48 lea edx,[esp+esi*2+48h] - 10007EA4: 52 push edx - 10007EA5: E8 55 23 00 00 call 1000A1FF - 10007EAA: 8B 3D 40 F0 01 10 mov edi,dword ptr ds:[1001F040h] - 10007EB0: 83 C4 40 add esp,40h - 10007EB3: 03 F0 add esi,eax - 10007EB5: 6A 00 push 0 - 10007EB7: 8D 44 24 10 lea eax,[esp+10h] - 10007EBB: 50 push eax - 10007EBC: FF D7 call edi - 10007EBE: 8B 1D 3C F0 01 10 mov ebx,dword ptr ds:[1001F03Ch] - 10007EC4: 85 C0 test eax,eax - 10007EC6: 74 09 je 10007ED1 - 10007EC8: 6A 00 push 0 - 10007ECA: 8D 4C 24 10 lea ecx,[esp+10h] - 10007ECE: 51 push ecx - 10007ECF: FF D3 call ebx - 10007ED1: 68 B8 60 02 10 push 100260B8h - 10007ED6: BA 0F 01 00 00 mov edx,10Fh - 10007EDB: 68 F0 F4 01 10 push 1001F4F0h - 10007EE0: 2B D6 sub edx,esi - 10007EE2: 52 push edx - 10007EE3: 8D 44 74 18 lea eax,[esp+esi*2+18h] - 10007EE7: 50 push eax - 10007EE8: E8 12 23 00 00 call 1000A1FF - 10007EED: 03 F0 add esi,eax - 10007EEF: 68 00 F5 01 10 push 1001F500h - 10007EF4: B9 0F 01 00 00 mov ecx,10Fh - 10007EF9: 68 04 F5 01 10 push 1001F504h - 10007EFE: 2B CE sub ecx,esi - 10007F00: 51 push ecx - 10007F01: 8D 54 74 28 lea edx,[esp+esi*2+28h] - 10007F05: 52 push edx - 10007F06: E8 F4 22 00 00 call 1000A1FF - 10007F0B: 8D 44 24 2C lea eax,[esp+2Ch] - 10007F0F: 50 push eax - 10007F10: 68 04 F5 01 10 push 1001F504h - 10007F15: 68 01 01 00 00 push 101h - 10007F1A: 68 A8 5C 02 10 push 10025CA8h - 10007F1F: E8 DB 22 00 00 call 1000A1FF - 10007F24: 83 C4 30 add esp,30h - 10007F27: 6A 00 push 0 - 10007F29: 68 A8 5C 02 10 push 10025CA8h - 10007F2E: FF D7 call edi - 10007F30: 85 C0 test eax,eax - 10007F32: 74 09 je 10007F3D - 10007F34: 6A 00 push 0 - 10007F36: 68 A8 5C 02 10 push 10025CA8h - 10007F3B: FF D3 call ebx - 10007F3D: 5F pop edi - 10007F3E: 5B pop ebx - 10007F3F: B8 A8 5C 02 10 mov eax,10025CA8h - 10007F44: 8D 50 02 lea edx,[eax+2] - 10007F47: 66 8B 08 mov cx,word ptr [eax] - 10007F4A: 83 C0 02 add eax,2 - 10007F4D: 66 85 C9 test cx,cx - 10007F50: 75 F5 jne 10007F47 - 10007F52: 2B C2 sub eax,edx - 10007F54: D1 F8 sar eax,1 - 10007F56: BE 0E 01 00 00 mov esi,10Eh - 10007F5B: 2B F0 sub esi,eax - 10007F5D: B9 E0 F4 01 10 mov ecx,1001F4E0h - 10007F62: B8 78 42 02 10 mov eax,10024278h - 10007F67: 66 8B 10 mov dx,word ptr [eax] - 10007F6A: 66 3B 11 cmp dx,word ptr [ecx] - 10007F6D: 75 1E jne 10007F8D - 10007F6F: 66 85 D2 test dx,dx - 10007F72: 74 15 je 10007F89 - 10007F74: 66 8B 50 02 mov dx,word ptr [eax+2] - 10007F78: 66 3B 51 02 cmp dx,word ptr [ecx+2] - 10007F7C: 75 0F jne 10007F8D - 10007F7E: 83 C0 04 add eax,4 - 10007F81: 83 C1 04 add ecx,4 - 10007F84: 66 85 D2 test dx,dx - 10007F87: 75 DE jne 10007F67 - 10007F89: 33 C0 xor eax,eax - 10007F8B: EB 05 jmp 10007F92 - 10007F8D: 1B C0 sbb eax,eax - 10007F8F: 83 D8 FF sbb eax,0FFFFFFFFh - 10007F92: 85 C0 test eax,eax - 10007F94: 75 41 jne 10007FD7 - 10007F96: 68 78 42 02 10 push 10024278h - 10007F9B: 56 push esi - 10007F9C: 68 A8 5C 02 10 push 10025CA8h - 10007FA1: 68 D0 F4 01 10 push 1001F4D0h - 10007FA6: 8D 8C 24 34 02 00 lea ecx,[esp+00000234h] - 00 - 10007FAD: 68 0F 01 00 00 push 10Fh - 10007FB2: 51 push ecx - 10007FB3: E8 47 22 00 00 call 1000A1FF - 10007FB8: 83 C4 18 add esp,18h - 10007FBB: 33 C0 xor eax,eax - 10007FBD: 8D 49 00 lea ecx,[ecx] - 10007FC0: 0F B7 8C 04 24 02 movzx ecx,word ptr [esp+eax+00000224h] - 00 00 - 10007FC8: 66 89 88 78 42 02 mov word ptr [eax+10024278h],cx - 10 - 10007FCF: 83 C0 02 add eax,2 - 10007FD2: 66 85 C9 test cx,cx - 10007FD5: 75 E9 jne 10007FC0 - 10007FD7: B9 B8 F4 01 10 mov ecx,1001F4B8h - 10007FDC: B8 88 44 02 10 mov eax,10024488h - 10007FE1: 66 8B 10 mov dx,word ptr [eax] - 10007FE4: 66 3B 11 cmp dx,word ptr [ecx] - 10007FE7: 75 1E jne 10008007 - 10007FE9: 66 85 D2 test dx,dx - 10007FEC: 74 15 je 10008003 - 10007FEE: 66 8B 50 02 mov dx,word ptr [eax+2] - 10007FF2: 66 3B 51 02 cmp dx,word ptr [ecx+2] - 10007FF6: 75 0F jne 10008007 - 10007FF8: 83 C0 04 add eax,4 - 10007FFB: 83 C1 04 add ecx,4 - 10007FFE: 66 85 D2 test dx,dx - 10008001: 75 DE jne 10007FE1 - 10008003: 33 C0 xor eax,eax - 10008005: EB 05 jmp 1000800C - 10008007: 1B C0 sbb eax,eax - 10008009: 83 D8 FF sbb eax,0FFFFFFFFh - 1000800C: 85 C0 test eax,eax - 1000800E: 75 47 jne 10008057 - 10008010: 68 88 44 02 10 push 10024488h - 10008015: 56 push esi - 10008016: 68 A8 5C 02 10 push 10025CA8h - 1000801B: 68 D0 F4 01 10 push 1001F4D0h - 10008020: 8D 94 24 34 02 00 lea edx,[esp+00000234h] - 00 - 10008027: 68 0F 01 00 00 push 10Fh - 1000802C: 52 push edx - 1000802D: E8 CD 21 00 00 call 1000A1FF - 10008032: 83 C4 18 add esp,18h - 10008035: 33 C0 xor eax,eax - 10008037: EB 07 jmp 10008040 - 10008039: 8D A4 24 00 00 00 lea esp,[esp+00000000h] - 00 - 10008040: 0F B7 8C 04 24 02 movzx ecx,word ptr [esp+eax+00000224h] - 00 00 - 10008048: 66 89 88 88 44 02 mov word ptr [eax+10024488h],cx - 10 - 1000804F: 83 C0 02 add eax,2 - 10008052: 66 85 C9 test cx,cx - 10008055: 75 E9 jne 10008040 - 10008057: 8B 35 38 F0 01 10 mov esi,dword ptr ds:[1001F038h] - 1000805D: 68 78 42 02 10 push 10024278h - 10008062: FF D6 call esi - 10008064: 68 88 44 02 10 push 10024488h - 10008069: FF D6 call esi - 1000806B: 68 00 01 00 00 push 100h - 10008070: 6A 00 push 0 - 10008072: E8 97 24 00 00 call 1000A50E - 10008077: 8B F0 mov esi,eax - 10008079: 83 C4 08 add esp,8 - 1000807C: 85 F6 test esi,esi - 1000807E: 74 1E je 1000809E - 10008080: 56 push esi - 10008081: 68 B0 F4 01 10 push 1001F4B0h - 10008086: 68 01 01 00 00 push 101h - 1000808B: 68 B0 5E 02 10 push 10025EB0h - 10008090: E8 6A 21 00 00 call 1000A1FF - 10008095: 56 push esi - 10008096: E8 99 22 00 00 call 1000A334 - 1000809B: 83 C4 14 add esp,14h - 1000809E: B8 B0 5E 02 10 mov eax,10025EB0h - 100080A3: 8D 50 02 lea edx,[eax+2] - 100080A6: 66 8B 08 mov cx,word ptr [eax] - 100080A9: 83 C0 02 add eax,2 - 100080AC: 66 85 C9 test cx,cx - 100080AF: 75 F5 jne 100080A6 - 100080B1: 2B C2 sub eax,edx - 100080B3: D1 F8 sar eax,1 - 100080B5: BA A0 F4 01 10 mov edx,1001F4A0h - 100080BA: B9 70 40 02 10 mov ecx,10024070h - 100080BF: 90 nop - 100080C0: 66 8B 31 mov si,word ptr [ecx] - 100080C3: 66 3B 32 cmp si,word ptr [edx] - 100080C6: 75 1E jne 100080E6 - 100080C8: 66 85 F6 test si,si - 100080CB: 74 15 je 100080E2 - 100080CD: 66 8B 71 02 mov si,word ptr [ecx+2] - 100080D1: 66 3B 72 02 cmp si,word ptr [edx+2] - 100080D5: 75 0F jne 100080E6 - 100080D7: 83 C1 04 add ecx,4 - 100080DA: 83 C2 04 add edx,4 - 100080DD: 66 85 F6 test si,si - 100080E0: 75 DE jne 100080C0 - 100080E2: 33 C9 xor ecx,ecx - 100080E4: EB 05 jmp 100080EB - 100080E6: 1B C9 sbb ecx,ecx - 100080E8: 83 D9 FF sbb ecx,0FFFFFFFFh - 100080EB: 5E pop esi - 100080EC: 85 C9 test ecx,ecx - 100080EE: 75 47 jne 10008137 - 100080F0: 68 70 40 02 10 push 10024070h - 100080F5: B9 0E 01 00 00 mov ecx,10Eh - 100080FA: 2B C8 sub ecx,eax - 100080FC: 51 push ecx - 100080FD: 68 B0 5E 02 10 push 10025EB0h - 10008102: 68 D0 F4 01 10 push 1001F4D0h - 10008107: 8D 94 24 30 02 00 lea edx,[esp+00000230h] - 00 - 1000810E: 68 0F 01 00 00 push 10Fh - 10008113: 52 push edx - 10008114: E8 E6 20 00 00 call 1000A1FF - 10008119: 83 C4 18 add esp,18h - 1000811C: 33 C0 xor eax,eax - 1000811E: 8B FF mov edi,edi - 10008120: 0F B7 8C 04 20 02 movzx ecx,word ptr [esp+eax+00000220h] - 00 00 - 10008128: 66 89 88 70 40 02 mov word ptr [eax+10024070h],cx - 10 - 1000812F: 83 C0 02 add eax,2 - 10008132: 66 85 C9 test cx,cx - 10008135: 75 E9 jne 10008120 - 10008137: C7 05 80 44 02 10 mov dword ptr ds:[10024480h],0 - 00 00 00 00 - 10008141: 8B 8C 24 60 06 00 mov ecx,dword ptr [esp+00000660h] - 00 - 10008148: 33 CC xor ecx,esp - 1000814A: E8 4C 1F 00 00 call 1000A09B - 1000814F: 81 C4 64 06 00 00 add esp,664h - 10008155: C3 ret - 10008156: CC int 3 - 10008157: CC int 3 - 10008158: CC int 3 - 10008159: CC int 3 - 1000815A: CC int 3 - 1000815B: CC int 3 - 1000815C: CC int 3 - 1000815D: CC int 3 - 1000815E: CC int 3 - 1000815F: CC int 3 - 10008160: 81 EC 08 02 00 00 sub esp,208h - 10008166: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1000816B: 33 C4 xor eax,esp - 1000816D: 89 84 24 04 02 00 mov dword ptr [esp+00000204h],eax - 00 - 10008174: 83 3D A0 5C 02 10 cmp dword ptr ds:[10025CA0h],0 - 00 - 1000817B: 0F 85 FD 00 00 00 jne 1000827E - 10008181: 56 push esi - 10008182: E8 29 FC FF FF call 10007DB0 - 10008187: 68 E0 F5 01 10 push 1001F5E0h - 1000818C: 68 70 40 02 10 push 10024070h - 10008191: E8 F2 2B 00 00 call 1000AD88 - 10008196: 8B F0 mov esi,eax - 10008198: 83 C4 08 add esp,8 - 1000819B: 85 F6 test esi,esi - 1000819D: 75 21 jne 100081C0 - 1000819F: 68 70 40 02 10 push 10024070h - 100081A4: 68 98 F5 01 10 push 1001F598h - 100081A9: E8 5F 29 00 00 call 1000AB0D - 100081AE: 83 C0 40 add eax,40h - 100081B1: 50 push eax - 100081B2: E8 C2 28 00 00 call 1000AA79 - 100081B7: 83 C4 0C add esp,0Ch - 100081BA: E9 B4 00 00 00 jmp 10008273 - 100081BF: 90 nop - 100081C0: 56 push esi - 100081C1: 8D 44 24 0C lea eax,[esp+0Ch] - 100081C5: 68 00 01 00 00 push 100h - 100081CA: 50 push eax - 100081CB: E8 E8 27 00 00 call 1000A9B8 - 100081D0: 83 C4 0C add esp,0Ch - 100081D3: 85 C0 test eax,eax - 100081D5: 0F 84 8F 00 00 00 je 1000826A - 100081DB: 8D 4C 24 08 lea ecx,[esp+8] - 100081DF: 51 push ecx - 100081E0: E8 63 27 00 00 call 1000A948 - 100081E5: 8D 54 24 08 lea edx,[esp+8] - 100081E9: 52 push edx - 100081EA: 8D 44 24 10 lea eax,[esp+10h] - 100081EE: 68 70 F5 01 10 push 1001F570h - 100081F3: 50 push eax - 100081F4: E8 C1 24 00 00 call 1000A6BA - 100081F9: 83 C4 10 add esp,10h - 100081FC: 83 F8 01 cmp eax,1 - 100081FF: 75 0E jne 1000820F - 10008201: 66 8B 4C 24 04 mov cx,word ptr [esp+4] - 10008206: 66 89 0D 7C 44 02 mov word ptr ds:[1002447Ch],cx - 10 - 1000820D: EB B1 jmp 100081C0 - 1000820F: 8D 54 24 04 lea edx,[esp+4] - 10008213: 52 push edx - 10008214: 8D 44 24 0C lea eax,[esp+0Ch] - 10008218: 68 3C F5 01 10 push 1001F53Ch - 1000821D: 50 push eax - 1000821E: E8 97 24 00 00 call 1000A6BA - 10008223: 83 C4 0C add esp,0Ch - 10008226: 83 F8 01 cmp eax,1 - 10008229: 75 0E jne 10008239 - 1000822B: 66 8B 4C 24 04 mov cx,word ptr [esp+4] - 10008230: 66 89 0D A4 5C 02 mov word ptr ds:[10025CA4h],cx - 10 - 10008237: EB 87 jmp 100081C0 - 10008239: 8D 54 24 04 lea edx,[esp+4] - 1000823D: 52 push edx - 1000823E: 8D 44 24 0C lea eax,[esp+0Ch] - 10008242: 68 10 F5 01 10 push 1001F510h - 10008247: 50 push eax - 10008248: E8 6D 24 00 00 call 1000A6BA - 1000824D: 83 C4 0C add esp,0Ch - 10008250: 83 F8 01 cmp eax,1 - 10008253: 0F 85 67 FF FF FF jne 100081C0 - 10008259: 66 8B 4C 24 04 mov cx,word ptr [esp+4] - 1000825E: 66 89 0D FC 60 02 mov word ptr ds:[100260FCh],cx - 10 - 10008265: E9 56 FF FF FF jmp 100081C0 - 1000826A: 56 push esi - 1000826B: E8 5E 23 00 00 call 1000A5CE - 10008270: 83 C4 04 add esp,4 - 10008273: C7 05 A0 5C 02 10 mov dword ptr ds:[10025CA0h],1 - 01 00 00 00 - 1000827D: 5E pop esi - 1000827E: 8B 8C 24 04 02 00 mov ecx,dword ptr [esp+00000204h] - 00 - 10008285: 33 CC xor ecx,esp - 10008287: E8 0F 1E 00 00 call 1000A09B - 1000828C: 81 C4 08 02 00 00 add esp,208h - 10008292: C3 ret - 10008293: CC int 3 - 10008294: CC int 3 - 10008295: CC int 3 - 10008296: CC int 3 - 10008297: CC int 3 - 10008298: CC int 3 - 10008299: CC int 3 - 1000829A: CC int 3 - 1000829B: CC int 3 - 1000829C: CC int 3 - 1000829D: CC int 3 - 1000829E: CC int 3 - 1000829F: CC int 3 - 100082A0: 56 push esi - 100082A1: 57 push edi - 100082A2: E8 B9 FE FF FF call 10008160 - 100082A7: 0F B7 74 24 10 movzx esi,word ptr [esp+10h] - 100082AC: 8B 7C 24 0C mov edi,dword ptr [esp+0Ch] - 100082B0: 8D 46 FF lea eax,[esi-1] - 100082B3: 50 push eax - 100082B4: 68 70 40 02 10 push 10024070h - 100082B9: 57 push edi - 100082BA: E8 2B 20 00 00 call 1000A2EA - 100082BF: 83 C4 0C add esp,0Ch - 100082C2: 33 C9 xor ecx,ecx - 100082C4: 66 89 4C 77 FE mov word ptr [edi+esi*2-2],cx - 100082C9: 5F pop edi - 100082CA: 5E pop esi - 100082CB: C2 08 00 ret 8 - 100082CE: CC int 3 - 100082CF: CC int 3 - 100082D0: 56 push esi - 100082D1: 8B 74 24 08 mov esi,dword ptr [esp+8] - 100082D5: 0F B7 06 movzx eax,word ptr [esi] - 100082D8: 66 83 F8 2E cmp ax,2Eh - 100082DC: 74 64 je 10008342 - 100082DE: 66 83 7E 02 3A cmp word ptr [esi+2],3Ah - 100082E3: 74 5D je 10008342 - 100082E5: 66 83 F8 5C cmp ax,5Ch - 100082E9: 74 57 je 10008342 - 100082EB: E8 C0 FA FF FF call 10007DB0 - 100082F0: B8 A8 5C 02 10 mov eax,10025CA8h - 100082F5: 8D 50 02 lea edx,[eax+2] - 100082F8: EB 06 jmp 10008300 - 100082FA: 8D 9B 00 00 00 00 lea ebx,[ebx+00000000h] - 10008300: 66 8B 08 mov cx,word ptr [eax] - 10008303: 83 C0 02 add eax,2 - 10008306: 66 85 C9 test cx,cx - 10008309: 75 F5 jne 10008300 - 1000830B: 2B C2 sub eax,edx - 1000830D: 56 push esi - 1000830E: D1 F8 sar eax,1 - 10008310: B9 0E 01 00 00 mov ecx,10Eh - 10008315: 2B C8 sub ecx,eax - 10008317: 51 push ecx - 10008318: 68 A8 5C 02 10 push 10025CA8h - 1000831D: 68 D0 F4 01 10 push 1001F4D0h - 10008322: 68 01 01 00 00 push 101h - 10008327: 68 70 40 02 10 push 10024070h - 1000832C: E8 CE 1E 00 00 call 1000A1FF - 10008331: 83 C4 18 add esp,18h - 10008334: C7 05 A0 5C 02 10 mov dword ptr ds:[10025CA0h],0 - 00 00 00 00 - 1000833E: 5E pop esi - 1000833F: C2 04 00 ret 4 - 10008342: 68 00 01 00 00 push 100h - 10008347: 56 push esi - 10008348: 68 70 40 02 10 push 10024070h - 1000834D: E8 98 1F 00 00 call 1000A2EA - 10008352: 83 C4 0C add esp,0Ch - 10008355: C7 05 A0 5C 02 10 mov dword ptr ds:[10025CA0h],0 - 00 00 00 00 - 1000835F: 5E pop esi - 10008360: C2 04 00 ret 4 - 10008363: CC int 3 - 10008364: CC int 3 - 10008365: CC int 3 - 10008366: CC int 3 - 10008367: CC int 3 - 10008368: CC int 3 - 10008369: CC int 3 - 1000836A: CC int 3 - 1000836B: CC int 3 - 1000836C: CC int 3 - 1000836D: CC int 3 - 1000836E: CC int 3 - 1000836F: CC int 3 - 10008370: 56 push esi - 10008371: 57 push edi - 10008372: E8 E9 FD FF FF call 10008160 - 10008377: 0F B7 74 24 10 movzx esi,word ptr [esp+10h] - 1000837C: 8B 7C 24 0C mov edi,dword ptr [esp+0Ch] - 10008380: 8D 46 FF lea eax,[esi-1] - 10008383: 50 push eax - 10008384: 68 78 42 02 10 push 10024278h - 10008389: 57 push edi - 1000838A: E8 5B 1F 00 00 call 1000A2EA - 1000838F: 83 C4 0C add esp,0Ch - 10008392: 33 C9 xor ecx,ecx - 10008394: 66 89 4C 77 FE mov word ptr [edi+esi*2-2],cx - 10008399: 5F pop edi - 1000839A: 5E pop esi - 1000839B: C2 08 00 ret 8 - 1000839E: CC int 3 - 1000839F: CC int 3 - 100083A0: 56 push esi - 100083A1: 8B 74 24 08 mov esi,dword ptr [esp+8] - 100083A5: 0F B7 06 movzx eax,word ptr [esi] - 100083A8: 66 83 F8 2E cmp ax,2Eh - 100083AC: 74 58 je 10008406 - 100083AE: 66 83 7E 02 3A cmp word ptr [esi+2],3Ah - 100083B3: 74 51 je 10008406 - 100083B5: 66 83 F8 5C cmp ax,5Ch - 100083B9: 74 4B je 10008406 - 100083BB: E8 F0 F9 FF FF call 10007DB0 - 100083C0: B8 A8 5C 02 10 mov eax,10025CA8h - 100083C5: 8D 50 02 lea edx,[eax+2] - 100083C8: EB 06 jmp 100083D0 - 100083CA: 8D 9B 00 00 00 00 lea ebx,[ebx+00000000h] - 100083D0: 66 8B 08 mov cx,word ptr [eax] - 100083D3: 83 C0 02 add eax,2 - 100083D6: 66 85 C9 test cx,cx - 100083D9: 75 F5 jne 100083D0 - 100083DB: 2B C2 sub eax,edx - 100083DD: 56 push esi - 100083DE: D1 F8 sar eax,1 - 100083E0: B9 0E 01 00 00 mov ecx,10Eh - 100083E5: 2B C8 sub ecx,eax - 100083E7: 51 push ecx - 100083E8: 68 A8 5C 02 10 push 10025CA8h - 100083ED: 68 D0 F4 01 10 push 1001F4D0h - 100083F2: 68 01 01 00 00 push 101h - 100083F7: 68 78 42 02 10 push 10024278h - 100083FC: E8 FE 1D 00 00 call 1000A1FF - 10008401: 83 C4 18 add esp,18h - 10008404: EB 13 jmp 10008419 - 10008406: 68 00 01 00 00 push 100h - 1000840B: 56 push esi - 1000840C: 68 78 42 02 10 push 10024278h - 10008411: E8 D4 1E 00 00 call 1000A2EA - 10008416: 83 C4 0C add esp,0Ch - 10008419: 5E pop esi - 1000841A: C7 44 24 04 78 42 mov dword ptr [esp+4],10024278h - 02 10 - 10008422: FF 25 38 F0 01 10 jmp dword ptr ds:[1001F038h] - 10008428: CC int 3 - 10008429: CC int 3 - 1000842A: CC int 3 - 1000842B: CC int 3 - 1000842C: CC int 3 - 1000842D: CC int 3 - 1000842E: CC int 3 - 1000842F: CC int 3 - 10008430: 56 push esi - 10008431: 57 push edi - 10008432: E8 29 FD FF FF call 10008160 - 10008437: 0F B7 74 24 10 movzx esi,word ptr [esp+10h] - 1000843C: 8B 7C 24 0C mov edi,dword ptr [esp+0Ch] - 10008440: 8D 46 FF lea eax,[esi-1] - 10008443: 50 push eax - 10008444: 68 88 44 02 10 push 10024488h - 10008449: 57 push edi - 1000844A: E8 9B 1E 00 00 call 1000A2EA - 1000844F: 83 C4 0C add esp,0Ch - 10008452: 33 C9 xor ecx,ecx - 10008454: 66 89 4C 77 FE mov word ptr [edi+esi*2-2],cx - 10008459: 5F pop edi - 1000845A: 5E pop esi - 1000845B: C2 08 00 ret 8 - 1000845E: CC int 3 - 1000845F: CC int 3 - 10008460: 56 push esi - 10008461: 8B 74 24 08 mov esi,dword ptr [esp+8] - 10008465: 0F B7 06 movzx eax,word ptr [esi] - 10008468: 66 83 F8 2E cmp ax,2Eh - 1000846C: 74 58 je 100084C6 - 1000846E: 66 83 7E 02 3A cmp word ptr [esi+2],3Ah - 10008473: 74 51 je 100084C6 - 10008475: 66 83 F8 5C cmp ax,5Ch - 10008479: 74 4B je 100084C6 - 1000847B: E8 30 F9 FF FF call 10007DB0 - 10008480: B8 A8 5C 02 10 mov eax,10025CA8h - 10008485: 8D 50 02 lea edx,[eax+2] - 10008488: EB 06 jmp 10008490 - 1000848A: 8D 9B 00 00 00 00 lea ebx,[ebx+00000000h] - 10008490: 66 8B 08 mov cx,word ptr [eax] - 10008493: 83 C0 02 add eax,2 - 10008496: 66 85 C9 test cx,cx - 10008499: 75 F5 jne 10008490 - 1000849B: 2B C2 sub eax,edx - 1000849D: 56 push esi - 1000849E: D1 F8 sar eax,1 - 100084A0: B9 0E 01 00 00 mov ecx,10Eh - 100084A5: 2B C8 sub ecx,eax - 100084A7: 51 push ecx - 100084A8: 68 A8 5C 02 10 push 10025CA8h - 100084AD: 68 D0 F4 01 10 push 1001F4D0h - 100084B2: 68 0F 01 00 00 push 10Fh - 100084B7: 68 88 44 02 10 push 10024488h - 100084BC: E8 3E 1D 00 00 call 1000A1FF - 100084C1: 83 C4 18 add esp,18h - 100084C4: EB 13 jmp 100084D9 - 100084C6: 68 0E 01 00 00 push 10Eh - 100084CB: 56 push esi - 100084CC: 68 88 44 02 10 push 10024488h - 100084D1: E8 14 1E 00 00 call 1000A2EA - 100084D6: 83 C4 0C add esp,0Ch - 100084D9: 5E pop esi - 100084DA: C7 44 24 04 88 44 mov dword ptr [esp+4],10024488h - 02 10 - 100084E2: FF 25 38 F0 01 10 jmp dword ptr ds:[1001F038h] - 100084E8: CC int 3 - 100084E9: CC int 3 - 100084EA: CC int 3 - 100084EB: CC int 3 - 100084EC: CC int 3 - 100084ED: CC int 3 - 100084EE: CC int 3 - 100084EF: CC int 3 - 100084F0: E8 6B FC FF FF call 10008160 - 100084F5: 66 A1 7C 44 02 10 mov ax,word ptr ds:[1002447Ch] - 100084FB: C3 ret - 100084FC: CC int 3 - 100084FD: CC int 3 - 100084FE: CC int 3 - 100084FF: CC int 3 - 10008500: E8 5B FC FF FF call 10008160 - 10008505: 66 8B 44 24 04 mov ax,word ptr [esp+4] - 1000850A: 66 A3 7C 44 02 10 mov word ptr ds:[1002447Ch],ax - 10008510: C2 04 00 ret 4 - 10008513: CC int 3 - 10008514: CC int 3 - 10008515: CC int 3 - 10008516: CC int 3 - 10008517: CC int 3 - 10008518: CC int 3 - 10008519: CC int 3 - 1000851A: CC int 3 - 1000851B: CC int 3 - 1000851C: CC int 3 - 1000851D: CC int 3 - 1000851E: CC int 3 - 1000851F: CC int 3 - 10008520: E8 3B FC FF FF call 10008160 - 10008525: 66 A1 A4 5C 02 10 mov ax,word ptr ds:[10025CA4h] - 1000852B: C3 ret - 1000852C: CC int 3 - 1000852D: CC int 3 - 1000852E: CC int 3 - 1000852F: CC int 3 - 10008530: E8 2B FC FF FF call 10008160 - 10008535: 66 8B 44 24 04 mov ax,word ptr [esp+4] - 1000853A: 66 A3 A4 5C 02 10 mov word ptr ds:[10025CA4h],ax - 10008540: C2 04 00 ret 4 - 10008543: CC int 3 - 10008544: CC int 3 - 10008545: CC int 3 - 10008546: CC int 3 - 10008547: CC int 3 - 10008548: CC int 3 - 10008549: CC int 3 - 1000854A: CC int 3 - 1000854B: CC int 3 - 1000854C: CC int 3 - 1000854D: CC int 3 - 1000854E: CC int 3 - 1000854F: CC int 3 - 10008550: E8 0B FC FF FF call 10008160 - 10008555: 66 A1 FC 60 02 10 mov ax,word ptr ds:[100260FCh] - 1000855B: C3 ret - 1000855C: CC int 3 - 1000855D: CC int 3 - 1000855E: CC int 3 - 1000855F: CC int 3 - 10008560: E8 FB FB FF FF call 10008160 - 10008565: 66 8B 44 24 04 mov ax,word ptr [esp+4] - 1000856A: 66 A3 FC 60 02 10 mov word ptr ds:[100260FCh],ax - 10008570: C2 04 00 ret 4 - 10008573: CC int 3 - 10008574: CC int 3 - 10008575: CC int 3 - 10008576: CC int 3 - 10008577: CC int 3 - 10008578: CC int 3 - 10008579: CC int 3 - 1000857A: CC int 3 - 1000857B: CC int 3 - 1000857C: CC int 3 - 1000857D: CC int 3 - 1000857E: CC int 3 - 1000857F: CC int 3 - 10008580: 81 EC 2C 04 00 00 sub esp,42Ch - 10008586: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1000858B: 33 C4 xor eax,esp - 1000858D: 89 84 24 28 04 00 mov dword ptr [esp+00000428h],eax - 00 - 10008594: A1 68 F6 01 10 mov eax,dword ptr ds:[1001F668h] - 10008599: 8B 0D 6C F6 01 10 mov ecx,dword ptr ds:[1001F66Ch] - 1000859F: 8B 15 70 F6 01 10 mov edx,dword ptr ds:[1001F670h] - 100085A5: 89 44 24 10 mov dword ptr [esp+10h],eax - 100085A9: A1 74 F6 01 10 mov eax,dword ptr ds:[1001F674h] - 100085AE: 89 4C 24 14 mov dword ptr [esp+14h],ecx - 100085B2: 8B 0D 78 F6 01 10 mov ecx,dword ptr ds:[1001F678h] - 100085B8: 89 54 24 18 mov dword ptr [esp+18h],edx - 100085BC: 8B 15 7C F6 01 10 mov edx,dword ptr ds:[1001F67Ch] - 100085C2: 53 push ebx - 100085C3: 89 44 24 20 mov dword ptr [esp+20h],eax - 100085C7: 89 4C 24 24 mov dword ptr [esp+24h],ecx - 100085CB: 89 54 24 28 mov dword ptr [esp+28h],edx - 100085CF: E8 8C FB FF FF call 10008160 - 100085D4: 66 8B 9C 24 3C 04 mov bx,word ptr [esp+0000043Ch] - 00 00 - 100085DC: 66 3B 1D 7C 44 02 cmp bx,word ptr ds:[1002447Ch] - 10 - 100085E3: 0F 87 37 01 00 00 ja 10008720 - 100085E9: 57 push edi - 100085EA: 68 64 F6 01 10 push 1001F664h - 100085EF: 68 78 42 02 10 push 10024278h - 100085F4: E8 8F 27 00 00 call 1000AD88 - 100085F9: 8B F8 mov edi,eax - 100085FB: 83 C4 08 add esp,8 - 100085FE: 85 FF test edi,edi - 10008600: 0F 84 07 01 00 00 je 1000870D - 10008606: 56 push esi - 10008607: 8B B4 24 3C 04 00 mov esi,dword ptr [esp+0000043Ch] - 00 - 1000860E: 8B C6 mov eax,esi - 10008610: 8D 50 01 lea edx,[eax+1] - 10008613: 8A 08 mov cl,byte ptr [eax] - 10008615: 40 inc eax - 10008616: 84 C9 test cl,cl - 10008618: 75 F9 jne 10008613 - 1000861A: 2B C2 sub eax,edx - 1000861C: 3D FF 00 00 00 cmp eax,0FFh - 10008621: 7E 12 jle 10008635 - 10008623: 8B C6 mov eax,esi - 10008625: 8D 50 01 lea edx,[eax+1] - 10008628: 8A 08 mov cl,byte ptr [eax] - 1000862A: 40 inc eax - 1000862B: 84 C9 test cl,cl - 1000862D: 75 F9 jne 10008628 - 1000862F: 2B C2 sub eax,edx - 10008631: 8B C8 mov ecx,eax - 10008633: EB 05 jmp 1000863A - 10008635: B9 FF 00 00 00 mov ecx,0FFh - 1000863A: 33 C0 xor eax,eax - 1000863C: 85 C9 test ecx,ecx - 1000863E: 7E 0F jle 1000864F - 10008640: 66 0F BE 14 30 movsx dx,byte ptr [eax+esi] - 10008645: 66 89 54 44 34 mov word ptr [esp+eax*2+34h],dx - 1000864A: 40 inc eax - 1000864B: 3B C1 cmp eax,ecx - 1000864D: 7C F1 jl 10008640 - 1000864F: 8D 44 24 1C lea eax,[esp+1Ch] - 10008653: 50 push eax - 10008654: 8D 4C 24 10 lea ecx,[esp+10h] - 10008658: E8 53 10 00 00 call 100096B0 - 1000865D: 8B C8 mov ecx,eax - 1000865F: E8 BC 11 00 00 call 10009820 - 10008664: 8B C8 mov ecx,eax - 10008666: 8D 71 01 lea esi,[ecx+1] - 10008669: 8D A4 24 00 00 00 lea esp,[esp+00000000h] - 00 - 10008670: 8A 11 mov dl,byte ptr [ecx] - 10008672: 41 inc ecx - 10008673: 84 D2 test dl,dl - 10008675: 75 F9 jne 10008670 - 10008677: 2B CE sub ecx,esi - 10008679: 81 F9 FF 00 00 00 cmp ecx,0FFh - 1000867F: 7E 12 jle 10008693 - 10008681: 8B C8 mov ecx,eax - 10008683: 8D 71 01 lea esi,[ecx+1] - 10008686: 8A 11 mov dl,byte ptr [ecx] - 10008688: 41 inc ecx - 10008689: 84 D2 test dl,dl - 1000868B: 75 F9 jne 10008686 - 1000868D: 2B CE sub ecx,esi - 1000868F: 8B D1 mov edx,ecx - 10008691: EB 05 jmp 10008698 - 10008693: BA FF 00 00 00 mov edx,0FFh - 10008698: 33 C9 xor ecx,ecx - 1000869A: 85 D2 test edx,edx - 1000869C: 7E 14 jle 100086B2 - 1000869E: 8B FF mov edi,edi - 100086A0: 66 0F BE 34 01 movsx si,byte ptr [ecx+eax] - 100086A5: 66 89 B4 4C 34 02 mov word ptr [esp+ecx*2+00000234h],si - 00 00 - 100086AD: 41 inc ecx - 100086AE: 3B CA cmp ecx,edx - 100086B0: 7C EE jl 100086A0 - 100086B2: 8B 8C 24 40 04 00 mov ecx,dword ptr [esp+00000440h] - 00 - 100086B9: 51 push ecx - 100086BA: 8D 54 24 38 lea edx,[esp+38h] - 100086BE: 52 push edx - 100086BF: 0F B7 C3 movzx eax,bx - 100086C2: 50 push eax - 100086C3: 8D 8C 24 40 02 00 lea ecx,[esp+00000240h] - 00 - 100086CA: 51 push ecx - 100086CB: 68 48 F6 01 10 push 1001F648h - 100086D0: 57 push edi - 100086D1: E8 A3 23 00 00 call 1000AA79 - 100086D6: 8B 84 24 60 04 00 mov eax,dword ptr [esp+00000460h] - 00 - 100086DD: 8D 94 24 64 04 00 lea edx,[esp+00000464h] - 00 - 100086E4: 52 push edx - 100086E5: 50 push eax - 100086E6: 57 push edi - 100086E7: E8 F5 27 00 00 call 1000AEE1 - 100086EC: 57 push edi - 100086ED: E8 DC 1E 00 00 call 1000A5CE - 100086F2: 83 C4 28 add esp,28h - 100086F5: 5E pop esi - 100086F6: 5F pop edi - 100086F7: 5B pop ebx - 100086F8: 8B 8C 24 28 04 00 mov ecx,dword ptr [esp+00000428h] - 00 - 100086FF: 33 CC xor ecx,esp - 10008701: E8 95 19 00 00 call 1000A09B - 10008706: 81 C4 2C 04 00 00 add esp,42Ch - 1000870C: C3 ret - 1000870D: 68 78 42 02 10 push 10024278h - 10008712: 68 E8 F5 01 10 push 1001F5E8h - 10008717: E8 83 26 00 00 call 1000AD9F - 1000871C: 83 C4 08 add esp,8 - 1000871F: 5F pop edi - 10008720: 8B 8C 24 2C 04 00 mov ecx,dword ptr [esp+0000042Ch] - 00 - 10008727: 5B pop ebx - 10008728: 33 CC xor ecx,esp - 1000872A: E8 6C 19 00 00 call 1000A09B - 1000872F: 81 C4 2C 04 00 00 add esp,42Ch - 10008735: C3 ret - 10008736: CC int 3 - 10008737: CC int 3 - 10008738: CC int 3 - 10008739: CC int 3 - 1000873A: CC int 3 - 1000873B: CC int 3 - 1000873C: CC int 3 - 1000873D: CC int 3 - 1000873E: CC int 3 - 1000873F: CC int 3 - 10008740: 81 EC D4 03 00 00 sub esp,3D4h - 10008746: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1000874B: 33 C4 xor eax,esp - 1000874D: 89 84 24 D0 03 00 mov dword ptr [esp+000003D0h],eax - 00 - 10008754: 8B 84 24 DC 03 00 mov eax,dword ptr [esp+000003DCh] - 00 - 1000875B: 55 push ebp - 1000875C: 56 push esi - 1000875D: 57 push edi - 1000875E: B9 0C 00 00 00 mov ecx,0Ch - 10008763: BE 30 F7 01 10 mov esi,1001F730h - 10008768: 8D 7C 24 48 lea edi,[esp+48h] - 1000876C: F3 A5 rep movs dword ptr es:[edi],dword ptr [esi] - 1000876E: 8B E8 mov ebp,eax - 10008770: E8 EB F9 FF FF call 10008160 - 10008775: 66 8B BC 24 E4 03 mov di,word ptr [esp+000003E4h] - 00 00 - 1000877D: 66 3B 3D A4 5C 02 cmp di,word ptr ds:[10025CA4h] - 10 - 10008784: 0F 87 64 01 00 00 ja 100088EE - 1000878A: 68 64 F6 01 10 push 1001F664h - 1000878F: 68 88 44 02 10 push 10024488h - 10008794: E8 EF 25 00 00 call 1000AD88 - 10008799: 8B F0 mov esi,eax - 1000879B: 83 C4 08 add esp,8 - 1000879E: 89 74 24 0C mov dword ptr [esp+0Ch],esi - 100087A2: 85 F6 test esi,esi - 100087A4: 0F 84 2F 01 00 00 je 100088D9 - 100087AA: 0F B7 C7 movzx eax,di - 100087AD: 83 E8 01 sub eax,1 - 100087B0: 74 64 je 10008816 - 100087B2: 83 E8 01 sub eax,1 - 100087B5: 74 3F je 100087F6 - 100087B7: 83 E8 01 sub eax,1 - 100087BA: 74 1A je 100087D6 - 100087BC: 33 C0 xor eax,eax - 100087BE: 8B FF mov edi,edi - 100087C0: 0F B7 88 14 F7 01 movzx ecx,word ptr [eax+1001F714h] - 10 - 100087C7: 66 89 4C 04 20 mov word ptr [esp+eax+20h],cx - 100087CC: 83 C0 02 add eax,2 - 100087CF: 66 85 C9 test cx,cx - 100087D2: 75 EC jne 100087C0 - 100087D4: EB 5E jmp 10008834 - 100087D6: 33 C0 xor eax,eax - 100087D8: EB 06 jmp 100087E0 - 100087DA: 8D 9B 00 00 00 00 lea ebx,[ebx+00000000h] - 100087E0: 0F B7 88 F8 F6 01 movzx ecx,word ptr [eax+1001F6F8h] - 10 - 100087E7: 66 89 4C 04 20 mov word ptr [esp+eax+20h],cx - 100087EC: 83 C0 02 add eax,2 - 100087EF: 66 85 C9 test cx,cx - 100087F2: 75 EC jne 100087E0 - 100087F4: EB 3E jmp 10008834 - 100087F6: 33 C0 xor eax,eax - 100087F8: EB 06 jmp 10008800 - 100087FA: 8D 9B 00 00 00 00 lea ebx,[ebx+00000000h] - 10008800: 0F B7 88 DC F6 01 movzx ecx,word ptr [eax+1001F6DCh] - 10 - 10008807: 66 89 4C 04 20 mov word ptr [esp+eax+20h],cx - 1000880C: 83 C0 02 add eax,2 - 1000880F: 66 85 C9 test cx,cx - 10008812: 75 EC jne 10008800 - 10008814: EB 1E jmp 10008834 - 10008816: 33 C0 xor eax,eax - 10008818: EB 06 jmp 10008820 - 1000881A: 8D 9B 00 00 00 00 lea ebx,[ebx+00000000h] - 10008820: 0F B7 88 C0 F6 01 movzx ecx,word ptr [eax+1001F6C0h] - 10 - 10008827: 66 89 4C 04 20 mov word ptr [esp+eax+20h],cx - 1000882C: 83 C0 02 add eax,2 - 1000882F: 66 85 C9 test cx,cx - 10008832: 75 EC jne 10008820 - 10008834: 53 push ebx - 10008835: 8B 9C 24 F0 03 00 mov ebx,dword ptr [esp+000003F0h] - 00 - 1000883C: 53 push ebx - 1000883D: 8D 44 24 28 lea eax,[esp+28h] - 10008841: 50 push eax - 10008842: 8D 4C 24 54 lea ecx,[esp+54h] - 10008846: 51 push ecx - 10008847: 8D 4C 24 20 lea ecx,[esp+20h] - 1000884B: E8 60 0E 00 00 call 100096B0 - 10008850: 8B C8 mov ecx,eax - 10008852: E8 C9 0F 00 00 call 10009820 - 10008857: 50 push eax - 10008858: 68 8C F6 01 10 push 1001F68Ch - 1000885D: 56 push esi - 1000885E: E8 16 22 00 00 call 1000AA79 - 10008863: 83 C4 14 add esp,14h - 10008866: 83 FB 50 cmp ebx,50h - 10008869: 76 05 jbe 10008870 - 1000886B: BB 50 00 00 00 mov ebx,50h - 10008870: 33 FF xor edi,edi - 10008872: 85 DB test ebx,ebx - 10008874: 76 35 jbe 100088AB - 10008876: 8D 74 24 7C lea esi,[esp+7Ch] - 1000887A: 8D 9B 00 00 00 00 lea ebx,[ebx+00000000h] - 10008880: 0F B6 55 00 movzx edx,byte ptr [ebp] - 10008884: 52 push edx - 10008885: B8 A2 00 00 00 mov eax,0A2h - 1000888A: 68 80 F6 01 10 push 1001F680h - 1000888F: 2B C7 sub eax,edi - 10008891: 50 push eax - 10008892: 56 push esi - 10008893: E8 67 19 00 00 call 1000A1FF - 10008898: 83 C4 10 add esp,10h - 1000889B: 83 C7 02 add edi,2 - 1000889E: 83 C6 04 add esi,4 - 100088A1: 45 inc ebp - 100088A2: 83 EB 01 sub ebx,1 - 100088A5: 75 D9 jne 10008880 - 100088A7: 8B 74 24 10 mov esi,dword ptr [esp+10h] - 100088AB: 8D 44 24 7C lea eax,[esp+7Ch] - 100088AF: 50 push eax - 100088B0: B9 0A 00 00 00 mov ecx,0Ah - 100088B5: 33 D2 xor edx,edx - 100088B7: 56 push esi - 100088B8: 66 89 8C 24 84 00 mov word ptr [esp+00000084h],cx - 00 00 - 100088C0: 66 89 94 24 86 00 mov word ptr [esp+00000086h],dx - 00 00 - 100088C8: E8 AC 21 00 00 call 1000AA79 - 100088CD: 56 push esi - 100088CE: E8 FB 1C 00 00 call 1000A5CE - 100088D3: 83 C4 0C add esp,0Ch - 100088D6: 5B pop ebx - 100088D7: EB 15 jmp 100088EE - 100088D9: 8D 8C 24 BC 01 00 lea ecx,[esp+000001BCh] - 00 - 100088E0: 51 push ecx - 100088E1: 68 E8 F5 01 10 push 1001F5E8h - 100088E6: E8 B4 24 00 00 call 1000AD9F - 100088EB: 83 C4 08 add esp,8 - 100088EE: 8B 8C 24 DC 03 00 mov ecx,dword ptr [esp+000003DCh] - 00 - 100088F5: 5F pop edi - 100088F6: 5E pop esi - 100088F7: 5D pop ebp - 100088F8: 33 CC xor ecx,esp - 100088FA: E8 9C 17 00 00 call 1000A09B - 100088FF: 81 C4 D4 03 00 00 add esp,3D4h - 10008905: C2 0C 00 ret 0Ch - 10008908: CC int 3 - 10008909: CC int 3 - 1000890A: CC int 3 - 1000890B: CC int 3 - 1000890C: CC int 3 - 1000890D: CC int 3 - 1000890E: CC int 3 - 1000890F: CC int 3 - 10008910: 8B 44 24 08 mov eax,dword ptr [esp+8] - 10008914: 83 F8 03 cmp eax,3 - 10008917: 77 39 ja 10008952 - 10008919: FF 24 85 58 89 00 jmp dword ptr [eax*4+10008958h] - 10 - 10008920: E8 4B 0C 00 00 call 10009570 - 10008925: 85 C0 test eax,eax - 10008927: 74 29 je 10008952 - 10008929: E8 32 0C 00 00 call 10009560 - 1000892E: 85 C0 test eax,eax - 10008930: 74 20 je 10008952 - 10008932: B8 01 00 00 00 mov eax,1 - 10008937: C2 0C 00 ret 0Ch - 1000893A: E8 21 0C 00 00 call 10009560 - 1000893F: C2 0C 00 ret 0Ch - 10008942: E8 99 0C 00 00 call 100095E0 - 10008947: C2 0C 00 ret 0Ch - 1000894A: E8 31 AC FF FF call 10003580 - 1000894F: C2 0C 00 ret 0Ch - 10008952: 33 C0 xor eax,eax - 10008954: C2 0C 00 ret 0Ch - 10008957: 90 nop - 10008958: 42 inc edx - 10008959: 89 00 mov dword ptr [eax],eax - 1000895B: 10 20 adc byte ptr [eax],ah - 1000895D: 89 00 mov dword ptr [eax],eax - 1000895F: 10 3A adc byte ptr [edx],bh - 10008961: 89 00 mov dword ptr [eax],eax - 10008963: 10 4A 89 adc byte ptr [edx-77h],cl - 10008966: 00 10 add byte ptr [eax],dl - 10008968: CC int 3 - 10008969: CC int 3 - 1000896A: CC int 3 - 1000896B: CC int 3 - 1000896C: CC int 3 - 1000896D: CC int 3 - 1000896E: CC int 3 - 1000896F: CC int 3 - 10008970: F6 44 24 04 01 test byte ptr [esp+4],1 - 10008975: 56 push esi - 10008976: 8B F1 mov esi,ecx - 10008978: C7 06 64 F7 01 10 mov dword ptr [esi],1001F764h - 1000897E: 74 09 je 10008989 - 10008980: 56 push esi - 10008981: E8 75 17 00 00 call 1000A0FB - 10008986: 83 C4 04 add esp,4 - 10008989: 8B C6 mov eax,esi - 1000898B: 5E pop esi - 1000898C: C2 04 00 ret 4 - 1000898F: CC int 3 - 10008990: 53 push ebx - 10008991: 8B D9 mov ebx,ecx - 10008993: 56 push esi - 10008994: 8B 73 04 mov esi,dword ptr [ebx+4] - 10008997: C7 03 78 F7 01 10 mov dword ptr [ebx],1001F778h - 1000899D: 85 F6 test esi,esi - 1000899F: 74 22 je 100089C3 - 100089A1: 57 push edi - 100089A2: 33 FF xor edi,edi - 100089A4: 85 F6 test esi,esi - 100089A6: 74 14 je 100089BC - 100089A8: 8B 06 mov eax,dword ptr [esi] - 100089AA: 8B 7E 04 mov edi,dword ptr [esi+4] - 100089AD: 50 push eax - 100089AE: E8 81 19 00 00 call 1000A334 - 100089B3: 56 push esi - 100089B4: E8 7B 19 00 00 call 1000A334 - 100089B9: 83 C4 08 add esp,8 - 100089BC: 8B F7 mov esi,edi - 100089BE: 85 FF test edi,edi - 100089C0: 75 E0 jne 100089A2 - 100089C2: 5F pop edi - 100089C3: 5E pop esi - 100089C4: C7 03 64 F7 01 10 mov dword ptr [ebx],1001F764h - 100089CA: 5B pop ebx - 100089CB: C3 ret - 100089CC: CC int 3 - 100089CD: CC int 3 - 100089CE: CC int 3 - 100089CF: CC int 3 - 100089D0: 53 push ebx - 100089D1: 55 push ebp - 100089D2: 56 push esi - 100089D3: 8D 71 04 lea esi,[ecx+4] - 100089D6: 33 ED xor ebp,ebp - 100089D8: 39 2E cmp dword ptr [esi],ebp - 100089DA: 74 0D je 100089E9 - 100089DC: 8D 64 24 00 lea esp,[esp] - 100089E0: 8B 36 mov esi,dword ptr [esi] - 100089E2: 83 C6 04 add esi,4 - 100089E5: 39 2E cmp dword ptr [esi],ebp - 100089E7: 75 F7 jne 100089E0 - 100089E9: 8B 5C 24 10 mov ebx,dword ptr [esp+10h] - 100089ED: 6A 08 push 8 - 100089EF: 6A 01 push 1 - 100089F1: 89 2B mov dword ptr [ebx],ebp - 100089F3: E8 08 25 00 00 call 1000AF00 - 100089F8: 83 C4 08 add esp,8 - 100089FB: 89 06 mov dword ptr [esi],eax - 100089FD: 3B C5 cmp eax,ebp - 100089FF: 74 54 je 10008A55 - 10008A01: 8B 44 24 14 mov eax,dword ptr [esp+14h] - 10008A05: 57 push edi - 10008A06: 50 push eax - 10008A07: 6A 01 push 1 - 10008A09: E8 F2 24 00 00 call 1000AF00 - 10008A0E: 8B 0E mov ecx,dword ptr [esi] - 10008A10: 89 01 mov dword ptr [ecx],eax - 10008A12: 8B 16 mov edx,dword ptr [esi] - 10008A14: 89 6A 04 mov dword ptr [edx+4],ebp - 10008A17: 8B 3E mov edi,dword ptr [esi] - 10008A19: 83 C4 08 add esp,8 - 10008A1C: 39 2F cmp dword ptr [edi],ebp - 10008A1E: 74 10 je 10008A30 - 10008A20: 8B 07 mov eax,dword ptr [edi] - 10008A22: 5F pop edi - 10008A23: 5E pop esi - 10008A24: 89 03 mov dword ptr [ebx],eax - 10008A26: 5D pop ebp - 10008A27: B8 01 00 00 00 mov eax,1 - 10008A2C: 5B pop ebx - 10008A2D: C2 08 00 ret 8 - 10008A30: 33 DB xor ebx,ebx - 10008A32: 3B FD cmp edi,ebp - 10008A34: 74 14 je 10008A4A - 10008A36: 8B 0F mov ecx,dword ptr [edi] - 10008A38: 8B 5F 04 mov ebx,dword ptr [edi+4] - 10008A3B: 51 push ecx - 10008A3C: E8 F3 18 00 00 call 1000A334 - 10008A41: 57 push edi - 10008A42: E8 ED 18 00 00 call 1000A334 - 10008A47: 83 C4 08 add esp,8 - 10008A4A: 5F pop edi - 10008A4B: 89 1E mov dword ptr [esi],ebx - 10008A4D: 5E pop esi - 10008A4E: 8B C5 mov eax,ebp - 10008A50: 5D pop ebp - 10008A51: 5B pop ebx - 10008A52: C2 08 00 ret 8 - 10008A55: 5E pop esi - 10008A56: 8B C5 mov eax,ebp - 10008A58: 5D pop ebp - 10008A59: 5B pop ebx - 10008A5A: C2 08 00 ret 8 - 10008A5D: CC int 3 - 10008A5E: CC int 3 - 10008A5F: CC int 3 - 10008A60: 56 push esi - 10008A61: 8D 71 04 lea esi,[ecx+4] - 10008A64: 33 C0 xor eax,eax - 10008A66: 39 06 cmp dword ptr [esi],eax - 10008A68: 74 43 je 10008AAD - 10008A6A: 55 push ebp - 10008A6B: 8B 6C 24 0C mov ebp,dword ptr [esp+0Ch] - 10008A6F: 8B 55 00 mov edx,dword ptr [ebp] - 10008A72: 8B 0E mov ecx,dword ptr [esi] - 10008A74: 39 11 cmp dword ptr [ecx],edx - 10008A76: 74 08 je 10008A80 - 10008A78: 39 41 04 cmp dword ptr [ecx+4],eax - 10008A7B: 8D 71 04 lea esi,[ecx+4] - 10008A7E: 75 F2 jne 10008A72 - 10008A80: 57 push edi - 10008A81: 8B 3E mov edi,dword ptr [esi] - 10008A83: 85 FF test edi,edi - 10008A85: 74 24 je 10008AAB - 10008A87: 8B 07 mov eax,dword ptr [edi] - 10008A89: 53 push ebx - 10008A8A: 8B 5F 04 mov ebx,dword ptr [edi+4] - 10008A8D: 50 push eax - 10008A8E: E8 A1 18 00 00 call 1000A334 - 10008A93: 57 push edi - 10008A94: E8 9B 18 00 00 call 1000A334 - 10008A99: 83 C4 08 add esp,8 - 10008A9C: 89 1E mov dword ptr [esi],ebx - 10008A9E: C7 45 00 00 00 00 mov dword ptr [ebp],0 - 00 - 10008AA5: B8 01 00 00 00 mov eax,1 - 10008AAA: 5B pop ebx - 10008AAB: 5F pop edi - 10008AAC: 5D pop ebp - 10008AAD: 5E pop esi - 10008AAE: C2 04 00 ret 4 - 10008AB1: CC int 3 - 10008AB2: CC int 3 - 10008AB3: CC int 3 - 10008AB4: CC int 3 - 10008AB5: CC int 3 - 10008AB6: CC int 3 - 10008AB7: CC int 3 - 10008AB8: CC int 3 - 10008AB9: CC int 3 - 10008ABA: CC int 3 - 10008ABB: CC int 3 - 10008ABC: CC int 3 - 10008ABD: CC int 3 - 10008ABE: CC int 3 - 10008ABF: CC int 3 - 10008AC0: 8B 49 04 mov ecx,dword ptr [ecx+4] - 10008AC3: 33 C0 xor eax,eax - 10008AC5: 85 C9 test ecx,ecx - 10008AC7: 74 17 je 10008AE0 - 10008AC9: 8B 54 24 04 mov edx,dword ptr [esp+4] - 10008ACD: 8D 49 00 lea ecx,[ecx] - 10008AD0: 85 C0 test eax,eax - 10008AD2: 75 0C jne 10008AE0 - 10008AD4: 39 11 cmp dword ptr [ecx],edx - 10008AD6: 8B 49 04 mov ecx,dword ptr [ecx+4] - 10008AD9: 0F 94 C0 sete al - 10008ADC: 85 C9 test ecx,ecx - 10008ADE: 75 F0 jne 10008AD0 - 10008AE0: C2 04 00 ret 4 - 10008AE3: CC int 3 - 10008AE4: CC int 3 - 10008AE5: CC int 3 - 10008AE6: CC int 3 - 10008AE7: CC int 3 - 10008AE8: CC int 3 - 10008AE9: CC int 3 - 10008AEA: CC int 3 - 10008AEB: CC int 3 - 10008AEC: CC int 3 - 10008AED: CC int 3 - 10008AEE: CC int 3 - 10008AEF: CC int 3 - 10008AF0: 56 push esi - 10008AF1: 8B F1 mov esi,ecx - 10008AF3: E8 98 FE FF FF call 10008990 - 10008AF8: F6 44 24 08 01 test byte ptr [esp+8],1 - 10008AFD: 74 09 je 10008B08 - 10008AFF: 56 push esi - 10008B00: E8 F6 15 00 00 call 1000A0FB - 10008B05: 83 C4 04 add esp,4 - 10008B08: 8B C6 mov eax,esi - 10008B0A: 5E pop esi - 10008B0B: C2 04 00 ret 4 - 10008B0E: CC int 3 - 10008B0F: CC int 3 - 10008B10: 6A 08 push 8 - 10008B12: E8 59 16 00 00 call 1000A170 - 10008B17: 83 C4 04 add esp,4 - 10008B1A: 85 C0 test eax,eax - 10008B1C: 74 1D je 10008B3B - 10008B1E: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10008B22: 33 D2 xor edx,edx - 10008B24: 85 C0 test eax,eax - 10008B26: 0F 95 C2 setne dl - 10008B29: C7 00 78 F7 01 10 mov dword ptr [eax],1001F778h - 10008B2F: C7 40 04 00 00 00 mov dword ptr [eax+4],0 - 00 - 10008B36: 89 01 mov dword ptr [ecx],eax - 10008B38: 8B C2 mov eax,edx - 10008B3A: C3 ret - 10008B3B: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10008B3F: 33 C0 xor eax,eax - 10008B41: 33 D2 xor edx,edx - 10008B43: 85 C0 test eax,eax - 10008B45: 0F 95 C2 setne dl - 10008B48: 89 01 mov dword ptr [ecx],eax - 10008B4A: 8B C2 mov eax,edx - 10008B4C: C3 ret - 10008B4D: CC int 3 - 10008B4E: CC int 3 - 10008B4F: CC int 3 - 10008B50: C7 01 8C F7 01 10 mov dword ptr [ecx],1001F78Ch - 10008B56: E9 F5 8A FF FF jmp 10001650 - 10008B5B: CC int 3 - 10008B5C: CC int 3 - 10008B5D: CC int 3 - 10008B5E: CC int 3 - 10008B5F: CC int 3 - 10008B60: 56 push esi - 10008B61: 8B F1 mov esi,ecx - 10008B63: C7 06 8C F7 01 10 mov dword ptr [esi],1001F78Ch - 10008B69: E8 E2 8A FF FF call 10001650 - 10008B6E: F6 44 24 08 01 test byte ptr [esp+8],1 - 10008B73: 74 09 je 10008B7E - 10008B75: 56 push esi - 10008B76: E8 80 15 00 00 call 1000A0FB - 10008B7B: 83 C4 04 add esp,4 - 10008B7E: 8B C6 mov eax,esi - 10008B80: 5E pop esi - 10008B81: C2 04 00 ret 4 - 10008B84: CC int 3 - 10008B85: CC int 3 - 10008B86: CC int 3 - 10008B87: CC int 3 - 10008B88: CC int 3 - 10008B89: CC int 3 - 10008B8A: CC int 3 - 10008B8B: CC int 3 - 10008B8C: CC int 3 - 10008B8D: CC int 3 - 10008B8E: CC int 3 - 10008B8F: CC int 3 - 10008B90: 8B 81 18 03 00 00 mov eax,dword ptr [ecx+00000318h] - 10008B96: C7 81 A4 07 00 00 mov dword ptr [ecx+000007A4h],0FFFFFFFFh - FF FF FF FF - 10008BA0: 85 C0 test eax,eax - 10008BA2: 74 05 je 10008BA9 - 10008BA4: E9 07 8B FF FF jmp 100016B0 - 10008BA9: C2 14 00 ret 14h - 10008BAC: CC int 3 - 10008BAD: CC int 3 - 10008BAE: CC int 3 - 10008BAF: CC int 3 - 10008BB0: C7 81 A4 07 00 00 mov dword ptr [ecx+000007A4h],0FFFFFFFFh - FF FF FF FF - 10008BBA: E9 C1 84 FF FF jmp 10001080 - 10008BBF: CC int 3 - 10008BC0: E9 CB 84 FF FF jmp 10001090 - 10008BC5: CC int 3 - 10008BC6: CC int 3 - 10008BC7: CC int 3 - 10008BC8: CC int 3 - 10008BC9: CC int 3 - 10008BCA: CC int 3 - 10008BCB: CC int 3 - 10008BCC: CC int 3 - 10008BCD: CC int 3 - 10008BCE: CC int 3 - 10008BCF: CC int 3 - 10008BD0: E9 EB 84 FF FF jmp 100010C0 - 10008BD5: CC int 3 - 10008BD6: CC int 3 - 10008BD7: CC int 3 - 10008BD8: CC int 3 - 10008BD9: CC int 3 - 10008BDA: CC int 3 - 10008BDB: CC int 3 - 10008BDC: CC int 3 - 10008BDD: CC int 3 - 10008BDE: CC int 3 - 10008BDF: CC int 3 - 10008BE0: E9 EB 84 FF FF jmp 100010D0 - 10008BE5: CC int 3 - 10008BE6: CC int 3 - 10008BE7: CC int 3 - 10008BE8: CC int 3 - 10008BE9: CC int 3 - 10008BEA: CC int 3 - 10008BEB: CC int 3 - 10008BEC: CC int 3 - 10008BED: CC int 3 - 10008BEE: CC int 3 - 10008BEF: CC int 3 - 10008BF0: E9 EB 84 FF FF jmp 100010E0 - 10008BF5: CC int 3 - 10008BF6: CC int 3 - 10008BF7: CC int 3 - 10008BF8: CC int 3 - 10008BF9: CC int 3 - 10008BFA: CC int 3 - 10008BFB: CC int 3 - 10008BFC: CC int 3 - 10008BFD: CC int 3 - 10008BFE: CC int 3 - 10008BFF: CC int 3 - 10008C00: E9 6B 8B FF FF jmp 10001770 - 10008C05: CC int 3 - 10008C06: CC int 3 - 10008C07: CC int 3 - 10008C08: CC int 3 - 10008C09: CC int 3 - 10008C0A: CC int 3 - 10008C0B: CC int 3 - 10008C0C: CC int 3 - 10008C0D: CC int 3 - 10008C0E: CC int 3 - 10008C0F: CC int 3 - 10008C10: C7 81 A4 07 00 00 mov dword ptr [ecx+000007A4h],0FFFFFFFFh - FF FF FF FF - 10008C1A: E9 A1 8E FF FF jmp 10001AC0 - 10008C1F: CC int 3 - 10008C20: E9 CB 84 FF FF jmp 100010F0 - 10008C25: CC int 3 - 10008C26: CC int 3 - 10008C27: CC int 3 - 10008C28: CC int 3 - 10008C29: CC int 3 - 10008C2A: CC int 3 - 10008C2B: CC int 3 - 10008C2C: CC int 3 - 10008C2D: CC int 3 - 10008C2E: CC int 3 - 10008C2F: CC int 3 - 10008C30: E9 DB 84 FF FF jmp 10001110 - 10008C35: CC int 3 - 10008C36: CC int 3 - 10008C37: CC int 3 - 10008C38: CC int 3 - 10008C39: CC int 3 - 10008C3A: CC int 3 - 10008C3B: CC int 3 - 10008C3C: CC int 3 - 10008C3D: CC int 3 - 10008C3E: CC int 3 - 10008C3F: CC int 3 - 10008C40: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10008C44: 89 81 B4 07 00 00 mov dword ptr [ecx+000007B4h],eax - 10008C4A: C7 81 A4 07 00 00 mov dword ptr [ecx+000007A4h],0FFFFFFFFh - FF FF FF FF - 10008C54: 89 44 24 04 mov dword ptr [esp+4],eax - 10008C58: E9 C3 84 FF FF jmp 10001120 - 10008C5D: CC int 3 - 10008C5E: CC int 3 - 10008C5F: CC int 3 - 10008C60: E9 EB 84 FF FF jmp 10001150 - 10008C65: CC int 3 - 10008C66: CC int 3 - 10008C67: CC int 3 - 10008C68: CC int 3 - 10008C69: CC int 3 - 10008C6A: CC int 3 - 10008C6B: CC int 3 - 10008C6C: CC int 3 - 10008C6D: CC int 3 - 10008C6E: CC int 3 - 10008C6F: CC int 3 - 10008C70: E9 0B 8B FF FF jmp 10001780 - 10008C75: CC int 3 - 10008C76: CC int 3 - 10008C77: CC int 3 - 10008C78: CC int 3 - 10008C79: CC int 3 - 10008C7A: CC int 3 - 10008C7B: CC int 3 - 10008C7C: CC int 3 - 10008C7D: CC int 3 - 10008C7E: CC int 3 - 10008C7F: CC int 3 - 10008C80: 51 push ecx - 10008C81: 53 push ebx - 10008C82: 56 push esi - 10008C83: 8B F1 mov esi,ecx - 10008C85: 32 DB xor bl,bl - 10008C87: 80 BE 63 07 00 00 cmp byte ptr [esi+00000763h],3Ah - 3A - 10008C8E: 57 push edi - 10008C8F: BF 01 00 00 00 mov edi,1 - 10008C94: C6 44 24 0D 00 mov byte ptr [esp+0Dh],0 - 10008C99: 75 1C jne 10008CB7 - 10008C9B: 0F B6 86 64 07 00 movzx eax,byte ptr [esi+00000764h] - 00 - 10008CA2: 0F B6 8E 65 07 00 movzx ecx,byte ptr [esi+00000765h] - 00 - 10008CA9: 50 push eax - 10008CAA: 51 push ecx - 10008CAB: 6A 03 push 3 - 10008CAD: E8 BE 09 00 00 call 10009670 - 10008CB2: 83 C4 0C add esp,0Ch - 10008CB5: 33 FF xor edi,edi - 10008CB7: 80 BE 24 07 00 00 cmp byte ptr [esi+00000724h],0 - 00 - 10008CBE: 0F 86 20 01 00 00 jbe 10008DE4 - 10008CC4: 55 push ebp - 10008CC5: EB 04 jmp 10008CCB - 10008CC7: 8A 5C 24 12 mov bl,byte ptr [esp+12h] - 10008CCB: FE C3 inc bl - 10008CCD: 0F B6 D3 movzx edx,bl - 10008CD0: C1 E2 04 shl edx,4 - 10008CD3: 88 5C 24 12 mov byte ptr [esp+12h],bl - 10008CD7: 8A 9C 32 18 03 00 mov bl,byte ptr [edx+esi+00000318h] - 00 - 10008CDE: 8D AC 32 14 03 00 lea ebp,[edx+esi+00000314h] - 00 - 10008CE5: 80 C3 02 add bl,2 - 10008CE8: 85 FF test edi,edi - 10008CEA: 0F 84 D2 00 00 00 je 10008DC2 - 10008CF0: 0F B6 44 24 11 movzx eax,byte ptr [esp+11h] - 10008CF5: 8A 8C 30 63 07 00 mov cl,byte ptr [eax+esi+00000763h] - 00 - 10008CFC: 03 C6 add eax,esi - 10008CFE: 80 F9 3A cmp cl,3Ah - 10008D01: 75 21 jne 10008D24 - 10008D03: 0F B6 88 64 07 00 movzx ecx,byte ptr [eax+00000764h] - 00 - 10008D0A: 0F B6 90 65 07 00 movzx edx,byte ptr [eax+00000765h] - 00 - 10008D11: 51 push ecx - 10008D12: 52 push edx - 10008D13: 6A 03 push 3 - 10008D15: E8 56 09 00 00 call 10009670 - 10008D1A: 83 C4 0C add esp,0Ch - 10008D1D: 33 FF xor edi,edi - 10008D1F: E9 9E 00 00 00 jmp 10008DC2 - 10008D24: 0F B6 D1 movzx edx,cl - 10008D27: 3B 55 00 cmp edx,dword ptr [ebp] - 10008D2A: 74 18 je 10008D44 - 10008D2C: 0F B6 80 64 07 00 movzx eax,byte ptr [eax+00000764h] - 00 - 10008D33: 50 push eax - 10008D34: 6A 01 push 1 - 10008D36: 6A 02 push 2 - 10008D38: E8 33 09 00 00 call 10009670 - 10008D3D: 83 C4 0C add esp,0Ch - 10008D40: 33 FF xor edi,edi - 10008D42: EB 7E jmp 10008DC2 - 10008D44: 8A 96 A2 07 00 00 mov dl,byte ptr [esi+000007A2h] - 10008D4A: 88 54 24 13 mov byte ptr [esp+13h],dl - 10008D4E: 3A D3 cmp dl,bl - 10008D50: 73 11 jae 10008D63 - 10008D52: 51 push ecx - 10008D53: 6A 02 push 2 - 10008D55: 6A 02 push 2 - 10008D57: E8 14 09 00 00 call 10009670 - 10008D5C: 83 C4 0C add esp,0Ch - 10008D5F: 33 FF xor edi,edi - 10008D61: EB 5F jmp 10008DC2 - 10008D63: 8A 55 04 mov dl,byte ptr [ebp+4] - 10008D66: 38 90 64 07 00 00 cmp byte ptr [eax+00000764h],dl - 10008D6C: 74 11 je 10008D7F - 10008D6E: 51 push ecx - 10008D6F: 6A 03 push 3 - 10008D71: 6A 01 push 1 - 10008D73: E8 F8 08 00 00 call 10009670 - 10008D78: 83 C4 0C add esp,0Ch - 10008D7B: 33 FF xor edi,edi - 10008D7D: EB 43 jmp 10008DC2 - 10008D7F: 8A 54 24 12 mov dl,byte ptr [esp+12h] - 10008D83: 3A 96 24 07 00 00 cmp dl,byte ptr [esi+00000724h] - 10008D89: 75 17 jne 10008DA2 - 10008D8B: 38 5C 24 13 cmp byte ptr [esp+13h],bl - 10008D8F: 74 11 je 10008DA2 - 10008D91: 51 push ecx - 10008D92: 6A 03 push 3 - 10008D94: 6A 01 push 1 - 10008D96: E8 D5 08 00 00 call 10009670 - 10008D9B: 83 C4 0C add esp,0Ch - 10008D9E: 33 FF xor edi,edi - 10008DA0: EB 20 jmp 10008DC2 - 10008DA2: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch] - 10008DA5: 85 C9 test ecx,ecx - 10008DA7: 74 0F je 10008DB8 - 10008DA9: 05 65 07 00 00 add eax,765h - 10008DAE: 50 push eax - 10008DAF: 8B 45 08 mov eax,dword ptr [ebp+8] - 10008DB2: 50 push eax - 10008DB3: FF D1 call ecx - 10008DB5: 83 C4 08 add esp,8 - 10008DB8: 28 9E A2 07 00 00 sub byte ptr [esi+000007A2h],bl - 10008DBE: 00 5C 24 11 add byte ptr [esp+11h],bl - 10008DC2: 8B 8E 20 03 00 00 mov ecx,dword ptr [esi+00000320h] - 10008DC8: 8B 11 mov edx,dword ptr [ecx] - 10008DCA: 8B 42 08 mov eax,dword ptr [edx+8] - 10008DCD: 83 C5 08 add ebp,8 - 10008DD0: 55 push ebp - 10008DD1: FF D0 call eax - 10008DD3: 8A 4C 24 12 mov cl,byte ptr [esp+12h] - 10008DD7: 3A 8E 24 07 00 00 cmp cl,byte ptr [esi+00000724h] - 10008DDD: 0F 82 E4 FE FF FF jb 10008CC7 - 10008DE3: 5D pop ebp - 10008DE4: 8B C7 mov eax,edi - 10008DE6: 5F pop edi - 10008DE7: 5E pop esi - 10008DE8: 5B pop ebx - 10008DE9: 59 pop ecx - 10008DEA: C3 ret - 10008DEB: CC int 3 - 10008DEC: CC int 3 - 10008DED: CC int 3 - 10008DEE: CC int 3 - 10008DEF: CC int 3 - 10008DF0: 8B 54 24 08 mov edx,dword ptr [esp+8] - 10008DF4: B8 01 00 00 00 mov eax,1 - 10008DF9: 85 D2 test edx,edx - 10008DFB: 74 09 je 10008E06 - 10008DFD: 89 54 24 08 mov dword ptr [esp+8],edx - 10008E01: E9 1A 8A FF FF jmp 10001820 - 10008E06: C2 08 00 ret 8 - 10008E09: CC int 3 - 10008E0A: CC int 3 - 10008E0B: CC int 3 - 10008E0C: CC int 3 - 10008E0D: CC int 3 - 10008E0E: CC int 3 - 10008E0F: CC int 3 - 10008E10: 51 push ecx - 10008E11: 56 push esi - 10008E12: 8D 44 24 0C lea eax,[esp+0Ch] - 10008E16: 50 push eax - 10008E17: 8B F1 mov esi,ecx - 10008E19: 8B 4C 24 10 mov ecx,dword ptr [esp+10h] - 10008E1D: 6A 3E push 3Eh - 10008E1F: 51 push ecx - 10008E20: 8D 54 24 10 lea edx,[esp+10h] - 10008E24: 52 push edx - 10008E25: 8B CE mov ecx,esi - 10008E27: E8 74 8A FF FF call 100018A0 - 10008E2C: 33 C9 xor ecx,ecx - 10008E2E: 3B C1 cmp eax,ecx - 10008E30: 74 0D je 10008E3F - 10008E32: 0F B6 54 24 0C movzx edx,byte ptr [esp+0Ch] - 10008E37: 57 push edi - 10008E38: 8B 7C 24 14 mov edi,dword ptr [esp+14h] - 10008E3C: 89 17 mov dword ptr [edi],edx - 10008E3E: 5F pop edi - 10008E3F: 88 8E 24 07 00 00 mov byte ptr [esi+00000724h],cl - 10008E45: 89 8E 1C 03 00 00 mov dword ptr [esi+0000031Ch],ecx - 10008E4B: 5E pop esi - 10008E4C: 59 pop ecx - 10008E4D: C2 08 00 ret 8 - 10008E50: 83 EC 08 sub esp,8 - 10008E53: 53 push ebx - 10008E54: 56 push esi - 10008E55: 8B F1 mov esi,ecx - 10008E57: 8A 86 A1 07 00 00 mov al,byte ptr [esi+000007A1h] - 10008E5D: 57 push edi - 10008E5E: 33 DB xor ebx,ebx - 10008E60: 33 FF xor edi,edi - 10008E62: 3A C3 cmp al,bl - 10008E64: 74 1E je 10008E84 - 10008E66: 0F B6 C0 movzx eax,al - 10008E69: 50 push eax - 10008E6A: 8D 8E 25 07 00 00 lea ecx,[esi+00000725h] - 10008E70: 51 push ecx - 10008E71: 8B CE mov ecx,esi - 10008E73: E8 A8 89 FF FF call 10001820 - 10008E78: 85 C0 test eax,eax - 10008E7A: 74 40 je 10008EBC - 10008E7C: 39 9E 1C 03 00 00 cmp dword ptr [esi+0000031Ch],ebx - 10008E82: 75 07 jne 10008E8B - 10008E84: BF 01 00 00 00 mov edi,1 - 10008E89: EB 31 jmp 10008EBC - 10008E8B: 8D 54 24 0C lea edx,[esp+0Ch] - 10008E8F: 52 push edx - 10008E90: 6A 3E push 3Eh - 10008E92: 8D 86 63 07 00 00 lea eax,[esi+00000763h] - 10008E98: 50 push eax - 10008E99: 8D 4C 24 1C lea ecx,[esp+1Ch] - 10008E9D: 51 push ecx - 10008E9E: 8B CE mov ecx,esi - 10008EA0: E8 FB 89 FF FF call 100018A0 - 10008EA5: 85 C0 test eax,eax - 10008EA7: 74 13 je 10008EBC - 10008EA9: 8A 54 24 0C mov dl,byte ptr [esp+0Ch] - 10008EAD: 8B CE mov ecx,esi - 10008EAF: 88 96 A2 07 00 00 mov byte ptr [esi+000007A2h],dl - 10008EB5: E8 C6 FD FF FF call 10008C80 - 10008EBA: 8B F8 mov edi,eax - 10008EBC: 8B C7 mov eax,edi - 10008EBE: 5F pop edi - 10008EBF: 88 9E A1 07 00 00 mov byte ptr [esi+000007A1h],bl - 10008EC5: 88 9E A2 07 00 00 mov byte ptr [esi+000007A2h],bl - 10008ECB: 88 9E 24 07 00 00 mov byte ptr [esi+00000724h],bl - 10008ED1: 89 9E 1C 03 00 00 mov dword ptr [esi+0000031Ch],ebx - 10008ED7: 5E pop esi - 10008ED8: 5B pop ebx - 10008ED9: 83 C4 08 add esp,8 - 10008EDC: C3 ret - 10008EDD: CC int 3 - 10008EDE: CC int 3 - 10008EDF: CC int 3 - 10008EE0: 53 push ebx - 10008EE1: 56 push esi - 10008EE2: 8B F1 mov esi,ecx - 10008EE4: 57 push edi - 10008EE5: 8B BE 18 03 00 00 mov edi,dword ptr [esi+00000318h] - 10008EEB: 33 DB xor ebx,ebx - 10008EED: C7 86 A4 07 00 00 mov dword ptr [esi+000007A4h],0FFFFFFFFh - FF FF FF FF - 10008EF7: 3B FB cmp edi,ebx - 10008EF9: 74 4F je 10008F4A - 10008EFB: 38 9E 24 07 00 00 cmp byte ptr [esi+00000724h],bl - 10008F01: 76 2F jbe 10008F32 - 10008F03: FE 8E 24 07 00 00 dec byte ptr [esi+00000724h] - 10008F09: 8A 86 24 07 00 00 mov al,byte ptr [esi+00000724h] - 10008F0F: 8B 8E 20 03 00 00 mov ecx,dword ptr [esi+00000320h] - 10008F15: 8B 11 mov edx,dword ptr [ecx] - 10008F17: 8B 52 08 mov edx,dword ptr [edx+8] - 10008F1A: 0F B6 C0 movzx eax,al - 10008F1D: C1 E0 04 shl eax,4 - 10008F20: 8D 84 30 2C 03 00 lea eax,[eax+esi+0000032Ch] - 00 - 10008F27: 50 push eax - 10008F28: FF D2 call edx - 10008F2A: 38 9E 24 07 00 00 cmp byte ptr [esi+00000724h],bl - 10008F30: 77 D1 ja 10008F03 - 10008F32: 88 9E 24 07 00 00 mov byte ptr [esi+00000724h],bl - 10008F38: 88 9E A1 07 00 00 mov byte ptr [esi+000007A1h],bl - 10008F3E: 88 9E A2 07 00 00 mov byte ptr [esi+000007A2h],bl - 10008F44: 89 9E 1C 03 00 00 mov dword ptr [esi+0000031Ch],ebx - 10008F4A: 8B C7 mov eax,edi - 10008F4C: 5F pop edi - 10008F4D: 5E pop esi - 10008F4E: 5B pop ebx - 10008F4F: C3 ret - 10008F50: 83 EC 08 sub esp,8 - 10008F53: 53 push ebx - 10008F54: 8A 5C 24 18 mov bl,byte ptr [esp+18h] - 10008F58: 56 push esi - 10008F59: 57 push edi - 10008F5A: 33 FF xor edi,edi - 10008F5C: B0 01 mov al,1 - 10008F5E: 8B F1 mov esi,ecx - 10008F60: 88 44 24 0F mov byte ptr [esp+0Fh],al - 10008F64: 89 7C 24 10 mov dword ptr [esp+10h],edi - 10008F68: 84 DB test bl,bl - 10008F6A: 76 02 jbe 10008F6E - 10008F6C: B0 02 mov al,2 - 10008F6E: 8A 54 24 24 mov dl,byte ptr [esp+24h] - 10008F72: 84 D2 test dl,dl - 10008F74: 76 05 jbe 10008F7B - 10008F76: C6 44 24 0F 02 mov byte ptr [esp+0Fh],2 - 10008F7B: 80 BE 24 07 00 00 cmp byte ptr [esi+00000724h],40h - 40 - 10008F82: 72 18 jb 10008F9C - 10008F84: 57 push edi - 10008F85: 6A 04 push 4 - 10008F87: 6A 01 push 1 - 10008F89: E8 E2 06 00 00 call 10009670 - 10008F8E: 83 C4 0C add esp,0Ch - 10008F91: 8B C7 mov eax,edi - 10008F93: 5F pop edi - 10008F94: 5E pop esi - 10008F95: 5B pop ebx - 10008F96: 83 C4 08 add esp,8 - 10008F99: C2 20 00 ret 20h - 10008F9C: 55 push ebp - 10008F9D: 0F B6 AE A1 07 00 movzx ebp,byte ptr [esi+000007A1h] - 00 - 10008FA4: 0F B6 CB movzx ecx,bl - 10008FA7: 0F B6 C0 movzx eax,al - 10008FAA: 03 C1 add eax,ecx - 10008FAC: 03 E8 add ebp,eax - 10008FAE: 83 FD 3E cmp ebp,3Eh - 10008FB1: 0F 8F 70 01 00 00 jg 10009127 - 10008FB7: 0F B6 8E A2 07 00 movzx ecx,byte ptr [esi+000007A2h] - 00 - 10008FBE: 0F B6 44 24 13 movzx eax,byte ptr [esp+13h] - 10008FC3: 0F B6 D2 movzx edx,dl - 10008FC6: 03 C8 add ecx,eax - 10008FC8: 03 CA add ecx,edx - 10008FCA: 83 F9 3E cmp ecx,3Eh - 10008FCD: 0F 8F 54 01 00 00 jg 10009127 - 10008FD3: 8B 6C 24 2C mov ebp,dword ptr [esp+2Ch] - 10008FD7: 8A 44 24 30 mov al,byte ptr [esp+30h] - 10008FDB: 85 ED test ebp,ebp - 10008FDD: 74 3B je 1000901A - 10008FDF: 84 C0 test al,al - 10008FE1: 74 3B je 1000901E - 10008FE3: 85 ED test ebp,ebp - 10008FE5: 74 60 je 10009047 - 10008FE7: 8B 8E 20 03 00 00 mov ecx,dword ptr [esi+00000320h] - 10008FED: 0F B6 F8 movzx edi,al - 10008FF0: 8B 01 mov eax,dword ptr [ecx] - 10008FF2: 8B 40 04 mov eax,dword ptr [eax+4] - 10008FF5: 57 push edi - 10008FF6: 8D 54 24 18 lea edx,[esp+18h] - 10008FFA: 52 push edx - 10008FFB: FF D0 call eax - 10008FFD: 85 C0 test eax,eax - 10008FFF: 75 37 jne 10009038 - 10009001: 50 push eax - 10009002: 6A 07 push 7 - 10009004: 6A 02 push 2 - 10009006: E8 65 06 00 00 call 10009670 - 1000900B: 83 C4 0C add esp,0Ch - 1000900E: 5D pop ebp - 1000900F: 5F pop edi - 10009010: 5E pop esi - 10009011: 33 C0 xor eax,eax - 10009013: 5B pop ebx - 10009014: 83 C4 08 add esp,8 - 10009017: C2 20 00 ret 20h - 1000901A: 84 C0 test al,al - 1000901C: 74 C5 je 10008FE3 - 1000901E: 6A 00 push 0 - 10009020: 6A 06 push 6 - 10009022: 6A 01 push 1 - 10009024: E8 47 06 00 00 call 10009670 - 10009029: 83 C4 0C add esp,0Ch - 1000902C: 5D pop ebp - 1000902D: 8B C7 mov eax,edi - 1000902F: 5F pop edi - 10009030: 5E pop esi - 10009031: 5B pop ebx - 10009032: 83 C4 08 add esp,8 - 10009035: C2 20 00 ret 20h - 10009038: 8B 4C 24 14 mov ecx,dword ptr [esp+14h] - 1000903C: 57 push edi - 1000903D: 55 push ebp - 1000903E: 51 push ecx - 1000903F: E8 0C 09 00 00 call 10009950 - 10009044: 83 C4 0C add esp,0Ch - 10009047: 0F B6 96 A1 07 00 movzx edx,byte ptr [esi+000007A1h] - 00 - 1000904E: 8A 44 24 1C mov al,byte ptr [esp+1Ch] - 10009052: 88 84 32 25 07 00 mov byte ptr [edx+esi+00000725h],al - 00 - 10009059: FE 86 A1 07 00 00 inc byte ptr [esi+000007A1h] - 1000905F: 8A 86 A1 07 00 00 mov al,byte ptr [esi+000007A1h] - 10009065: 84 DB test bl,bl - 10009067: 76 16 jbe 1000907F - 10009069: 0F B6 C8 movzx ecx,al - 1000906C: 88 9C 31 25 07 00 mov byte ptr [ecx+esi+00000725h],bl - 00 - 10009073: FE 86 A1 07 00 00 inc byte ptr [esi+000007A1h] - 10009079: 8A 86 A1 07 00 00 mov al,byte ptr [esi+000007A1h] - 1000907F: 8B 54 24 20 mov edx,dword ptr [esp+20h] - 10009083: 0F B6 CB movzx ecx,bl - 10009086: 51 push ecx - 10009087: 0F B6 C0 movzx eax,al - 1000908A: 52 push edx - 1000908B: 8D 8C 30 25 07 00 lea ecx,[eax+esi+00000725h] - 00 - 10009092: 51 push ecx - 10009093: E8 B8 08 00 00 call 10009950 - 10009098: 8A 44 24 34 mov al,byte ptr [esp+34h] - 1000909C: 00 9E A1 07 00 00 add byte ptr [esi+000007A1h],bl - 100090A2: 83 C4 0C add esp,0Ch - 100090A5: 84 C0 test al,al - 100090A7: 76 62 jbe 1000910B - 100090A9: 8A 4C 24 13 mov cl,byte ptr [esp+13h] - 100090AD: 0F B6 54 24 1C movzx edx,byte ptr [esp+1Ch] - 100090B2: 02 C8 add cl,al - 100090B4: 00 8E A2 07 00 00 add byte ptr [esi+000007A2h],cl - 100090BA: 0F B6 8E 24 07 00 movzx ecx,byte ptr [esi+00000724h] - 00 - 100090C1: C1 E1 04 shl ecx,4 - 100090C4: 89 94 31 24 03 00 mov dword ptr [ecx+esi+00000324h],edx - 00 - 100090CB: 0F B6 96 24 07 00 movzx edx,byte ptr [esi+00000724h] - 00 - 100090D2: C1 E2 04 shl edx,4 - 100090D5: 88 84 32 28 03 00 mov byte ptr [edx+esi+00000328h],al - 00 - 100090DC: 0F B6 86 24 07 00 movzx eax,byte ptr [esi+00000724h] - 00 - 100090E3: 8B 4C 24 14 mov ecx,dword ptr [esp+14h] - 100090E7: C1 E0 04 shl eax,4 - 100090EA: 89 8C 30 2C 03 00 mov dword ptr [eax+esi+0000032Ch],ecx - 00 - 100090F1: 0F B6 96 24 07 00 movzx edx,byte ptr [esi+00000724h] - 00 - 100090F8: 8B 44 24 34 mov eax,dword ptr [esp+34h] - 100090FC: 83 C2 33 add edx,33h - 100090FF: C1 E2 04 shl edx,4 - 10009102: 89 04 32 mov dword ptr [edx+esi],eax - 10009105: FE 86 24 07 00 00 inc byte ptr [esi+00000724h] - 1000910B: 83 7C 24 38 00 cmp dword ptr [esp+38h],0 - 10009110: B8 01 00 00 00 mov eax,1 - 10009115: 74 06 je 1000911D - 10009117: 89 86 1C 03 00 00 mov dword ptr [esi+0000031Ch],eax - 1000911D: 5D pop ebp - 1000911E: 5F pop edi - 1000911F: 5E pop esi - 10009120: 5B pop ebx - 10009121: 83 C4 08 add esp,8 - 10009124: C2 20 00 ret 20h - 10009127: 6A 00 push 0 - 10009129: 6A 05 push 5 - 1000912B: 6A 02 push 2 - 1000912D: E8 3E 05 00 00 call 10009670 - 10009132: 83 C4 0C add esp,0Ch - 10009135: 5D pop ebp - 10009136: 8B C7 mov eax,edi - 10009138: 5F pop edi - 10009139: 5E pop esi - 1000913A: 5B pop ebx - 1000913B: 83 C4 08 add esp,8 - 1000913E: C2 20 00 ret 20h - 10009141: CC int 3 - 10009142: CC int 3 - 10009143: CC int 3 - 10009144: CC int 3 - 10009145: CC int 3 - 10009146: CC int 3 - 10009147: CC int 3 - 10009148: CC int 3 - 10009149: CC int 3 - 1000914A: CC int 3 - 1000914B: CC int 3 - 1000914C: CC int 3 - 1000914D: CC int 3 - 1000914E: CC int 3 - 1000914F: CC int 3 - 10009150: 83 EC 4C sub esp,4Ch - 10009153: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10009158: 33 C4 xor eax,esp - 1000915A: 89 44 24 48 mov dword ptr [esp+48h],eax - 1000915E: 56 push esi - 1000915F: 57 push edi - 10009160: B0 04 mov al,4 - 10009162: 88 44 24 13 mov byte ptr [esp+13h],al - 10009166: 88 44 24 14 mov byte ptr [esp+14h],al - 1000916A: 6A 06 push 6 - 1000916C: 8D 44 24 14 lea eax,[esp+14h] - 10009170: 50 push eax - 10009171: 8B F1 mov esi,ecx - 10009173: 33 FF xor edi,edi - 10009175: C6 44 24 18 00 mov byte ptr [esp+18h],0 - 1000917A: C6 44 24 19 38 mov byte ptr [esp+19h],38h - 1000917F: C6 44 24 1A 03 mov byte ptr [esp+1Ah],3 - 10009184: C6 44 24 1D 00 mov byte ptr [esp+1Dh],0 - 10009189: E8 92 86 FF FF call 10001820 - 1000918E: 85 C0 test eax,eax - 10009190: 0F 84 91 00 00 00 je 10009227 - 10009196: 8D 4C 24 08 lea ecx,[esp+8] - 1000919A: 51 push ecx - 1000919B: 6A 3E push 3Eh - 1000919D: 8D 54 24 18 lea edx,[esp+18h] - 100091A1: 52 push edx - 100091A2: 8D 44 24 18 lea eax,[esp+18h] - 100091A6: 50 push eax - 100091A7: 8B CE mov ecx,esi - 100091A9: E8 F2 86 FF FF call 100018A0 - 100091AE: 85 C0 test eax,eax - 100091B0: 74 75 je 10009227 - 100091B2: 83 7C 24 08 03 cmp dword ptr [esp+8],3 - 100091B7: 76 6E jbe 10009227 - 100091B9: 80 7C 24 10 00 cmp byte ptr [esp+10h],0 - 100091BE: 75 67 jne 10009227 - 100091C0: 80 7C 24 11 0A cmp byte ptr [esp+11h],0Ah - 100091C5: 75 60 jne 10009227 - 100091C7: 55 push ebp - 100091C8: 8D AE A4 07 00 00 lea ebp,[esi+000007A4h] - 100091CE: 8D 4C 24 16 lea ecx,[esp+16h] - 100091D2: 55 push ebp - 100091D3: 51 push ecx - 100091D4: E8 87 D3 FF FF call 10006560 - 100091D9: 83 C4 08 add esp,8 - 100091DC: 80 7C 24 20 38 cmp byte ptr [esp+20h],38h - 100091E1: 75 29 jne 1000920C - 100091E3: 81 C6 B0 07 00 00 add esi,7B0h - 100091E9: 8D 54 24 22 lea edx,[esp+22h] - 100091ED: 56 push esi - 100091EE: 52 push edx - 100091EF: E8 7C CA FF FF call 10005C70 - 100091F4: 83 C4 08 add esp,8 - 100091F7: 5D pop ebp - 100091F8: 8D 47 01 lea eax,[edi+1] - 100091FB: 5F pop edi - 100091FC: 5E pop esi - 100091FD: 8B 4C 24 48 mov ecx,dword ptr [esp+48h] - 10009201: 33 CC xor ecx,esp - 10009203: E8 93 0E 00 00 call 1000A09B - 10009208: 83 C4 4C add esp,4Ch - 1000920B: C3 ret - 1000920C: C7 45 00 FF FF FF mov dword ptr [ebp],0FFFFFFFFh - FF - 10009213: 5D pop ebp - 10009214: 8B C7 mov eax,edi - 10009216: 5F pop edi - 10009217: 5E pop esi - 10009218: 8B 4C 24 48 mov ecx,dword ptr [esp+48h] - 1000921C: 33 CC xor ecx,esp - 1000921E: E8 78 0E 00 00 call 1000A09B - 10009223: 83 C4 4C add esp,4Ch - 10009226: C3 ret - 10009227: 8B 4C 24 50 mov ecx,dword ptr [esp+50h] - 1000922B: 8B C7 mov eax,edi - 1000922D: 5F pop edi - 1000922E: 5E pop esi - 1000922F: 33 CC xor ecx,esp - 10009231: E8 65 0E 00 00 call 1000A09B - 10009236: 83 C4 4C add esp,4Ch - 10009239: C3 ret - 1000923A: CC int 3 - 1000923B: CC int 3 - 1000923C: CC int 3 - 1000923D: CC int 3 - 1000923E: CC int 3 - 1000923F: CC int 3 - 10009240: 56 push esi - 10009241: 8B F1 mov esi,ecx - 10009243: 8B 86 B4 07 00 00 mov eax,dword ptr [esi+000007B4h] - 10009249: 3B 86 A4 07 00 00 cmp eax,dword ptr [esi+000007A4h] - 1000924F: 75 07 jne 10009258 - 10009251: B8 01 00 00 00 mov eax,1 - 10009256: EB 09 jmp 10009261 - 10009258: E8 F3 FE FF FF call 10009150 - 1000925D: 85 C0 test eax,eax - 1000925F: 74 36 je 10009297 - 10009261: 8B 8E A4 07 00 00 mov ecx,dword ptr [esi+000007A4h] - 10009267: 8B 54 24 08 mov edx,dword ptr [esp+8] - 1000926B: 89 0A mov dword ptr [edx],ecx - 1000926D: 0F B7 8E A8 07 00 movzx ecx,word ptr [esi+000007A8h] - 00 - 10009274: 8B 54 24 0C mov edx,dword ptr [esp+0Ch] - 10009278: 66 89 0A mov word ptr [edx],cx - 1000927B: 0F B7 8E AA 07 00 movzx ecx,word ptr [esi+000007AAh] - 00 - 10009282: 8B 54 24 10 mov edx,dword ptr [esp+10h] - 10009286: 66 89 0A mov word ptr [edx],cx - 10009289: 0F B7 8E AC 07 00 movzx ecx,word ptr [esi+000007ACh] - 00 - 10009290: 8B 54 24 14 mov edx,dword ptr [esp+14h] - 10009294: 66 89 0A mov word ptr [edx],cx - 10009297: 5E pop esi - 10009298: C2 10 00 ret 10h - 1000929B: CC int 3 - 1000929C: CC int 3 - 1000929D: CC int 3 - 1000929E: CC int 3 - 1000929F: CC int 3 - 100092A0: 6A FF push 0FFFFFFFFh - 100092A2: 68 08 ED 01 10 push 1001ED08h - 100092A7: 64 A1 00 00 00 00 mov eax,dword ptr fs:[00000000h] - 100092AD: 50 push eax - 100092AE: 51 push ecx - 100092AF: 53 push ebx - 100092B0: 56 push esi - 100092B1: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 100092B6: 33 C4 xor eax,esp - 100092B8: 50 push eax - 100092B9: 8D 44 24 10 lea eax,[esp+10h] - 100092BD: 64 A3 00 00 00 00 mov dword ptr fs:[00000000h],eax - 100092C3: 8B F1 mov esi,ecx - 100092C5: 89 74 24 0C mov dword ptr [esp+0Ch],esi - 100092C9: E8 42 87 FF FF call 10001A10 - 100092CE: 8D 86 20 03 00 00 lea eax,[esi+00000320h] - 100092D4: 33 DB xor ebx,ebx - 100092D6: 50 push eax - 100092D7: 89 5C 24 1C mov dword ptr [esp+1Ch],ebx - 100092DB: C7 06 E4 F7 01 10 mov dword ptr [esi],1001F7E4h - 100092E1: E8 2A F8 FF FF call 10008B10 - 100092E6: 89 86 18 03 00 00 mov dword ptr [esi+00000318h],eax - 100092EC: 83 C4 04 add esp,4 - 100092EF: 89 9E 1C 03 00 00 mov dword ptr [esi+0000031Ch],ebx - 100092F5: 88 9E 24 07 00 00 mov byte ptr [esi+00000724h],bl - 100092FB: 88 9E A1 07 00 00 mov byte ptr [esi+000007A1h],bl - 10009301: 88 9E A2 07 00 00 mov byte ptr [esi+000007A2h],bl - 10009307: 8B C6 mov eax,esi - 10009309: 8B 4C 24 10 mov ecx,dword ptr [esp+10h] - 1000930D: 64 89 0D 00 00 00 mov dword ptr fs:[00000000h],ecx - 00 - 10009314: 59 pop ecx - 10009315: 5E pop esi - 10009316: 5B pop ebx - 10009317: 83 C4 10 add esp,10h - 1000931A: C3 ret - 1000931B: CC int 3 - 1000931C: CC int 3 - 1000931D: CC int 3 - 1000931E: CC int 3 - 1000931F: CC int 3 - 10009320: 6A FF push 0FFFFFFFFh - 10009322: 68 38 ED 01 10 push 1001ED38h - 10009327: 64 A1 00 00 00 00 mov eax,dword ptr fs:[00000000h] - 1000932D: 50 push eax - 1000932E: 51 push ecx - 1000932F: 56 push esi - 10009330: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10009335: 33 C4 xor eax,esp - 10009337: 50 push eax - 10009338: 8D 44 24 0C lea eax,[esp+0Ch] - 1000933C: 64 A3 00 00 00 00 mov dword ptr fs:[00000000h],eax - 10009342: 8B F1 mov esi,ecx - 10009344: 89 74 24 08 mov dword ptr [esp+8],esi - 10009348: C7 06 E4 F7 01 10 mov dword ptr [esi],1001F7E4h - 1000934E: C7 44 24 14 00 00 mov dword ptr [esp+14h],0 - 00 00 - 10009356: C7 86 A4 07 00 00 mov dword ptr [esi+000007A4h],0FFFFFFFFh - FF FF FF FF - 10009360: E8 1B 7D FF FF call 10001080 - 10009365: 83 BE 18 03 00 00 cmp dword ptr [esi+00000318h],0 - 00 - 1000936C: 74 1C je 1000938A - 1000936E: 8B 8E 20 03 00 00 mov ecx,dword ptr [esi+00000320h] - 10009374: C7 86 18 03 00 00 mov dword ptr [esi+00000318h],0 - 00 00 00 00 - 1000937E: 85 C9 test ecx,ecx - 10009380: 74 08 je 1000938A - 10009382: 8B 01 mov eax,dword ptr [ecx] - 10009384: 8B 10 mov edx,dword ptr [eax] - 10009386: 6A 01 push 1 - 10009388: FF D2 call edx - 1000938A: 8B CE mov ecx,esi - 1000938C: C7 44 24 14 FF FF mov dword ptr [esp+14h],0FFFFFFFFh - FF FF - 10009394: C7 06 8C F7 01 10 mov dword ptr [esi],1001F78Ch - 1000939A: E8 B1 82 FF FF call 10001650 - 1000939F: 8B 4C 24 0C mov ecx,dword ptr [esp+0Ch] - 100093A3: 64 89 0D 00 00 00 mov dword ptr fs:[00000000h],ecx - 00 - 100093AA: 59 pop ecx - 100093AB: 5E pop esi - 100093AC: 83 C4 10 add esp,10h - 100093AF: C3 ret - 100093B0: 6A FF push 0FFFFFFFFh - 100093B2: 68 6B ED 01 10 push 1001ED6Bh - 100093B7: 64 A1 00 00 00 00 mov eax,dword ptr fs:[00000000h] - 100093BD: 50 push eax - 100093BE: 51 push ecx - 100093BF: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 100093C4: 33 C4 xor eax,esp - 100093C6: 50 push eax - 100093C7: 8D 44 24 08 lea eax,[esp+8] - 100093CB: 64 A3 00 00 00 00 mov dword ptr fs:[00000000h],eax - 100093D1: 68 B8 07 00 00 push 7B8h - 100093D6: E8 95 0D 00 00 call 1000A170 - 100093DB: 83 C4 04 add esp,4 - 100093DE: 89 44 24 04 mov dword ptr [esp+4],eax - 100093E2: C7 44 24 10 00 00 mov dword ptr [esp+10h],0 - 00 00 - 100093EA: 85 C0 test eax,eax - 100093EC: 74 09 je 100093F7 - 100093EE: 8B C8 mov ecx,eax - 100093F0: E8 AB FE FF FF call 100092A0 - 100093F5: EB 02 jmp 100093F9 - 100093F7: 33 C0 xor eax,eax - 100093F9: 8B 4C 24 18 mov ecx,dword ptr [esp+18h] - 100093FD: 33 D2 xor edx,edx - 100093FF: 85 C0 test eax,eax - 10009401: 0F 95 C2 setne dl - 10009404: 89 01 mov dword ptr [ecx],eax - 10009406: 8B C2 mov eax,edx - 10009408: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 1000940C: 64 89 0D 00 00 00 mov dword ptr fs:[00000000h],ecx - 00 - 10009413: 59 pop ecx - 10009414: 83 C4 10 add esp,10h - 10009417: C3 ret - 10009418: CC int 3 - 10009419: CC int 3 - 1000941A: CC int 3 - 1000941B: CC int 3 - 1000941C: CC int 3 - 1000941D: CC int 3 - 1000941E: CC int 3 - 1000941F: CC int 3 - 10009420: 83 EC 0C sub esp,0Ch - 10009423: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10009428: 33 C4 xor eax,esp - 1000942A: 89 44 24 08 mov dword ptr [esp+8],eax - 1000942E: 56 push esi - 1000942F: 8B F1 mov esi,ecx - 10009431: 8B 8E B4 07 00 00 mov ecx,dword ptr [esi+000007B4h] - 10009437: B8 30 FE 00 00 mov eax,0FE30h - 1000943C: 66 89 44 24 06 mov word ptr [esp+6],ax - 10009441: C6 44 24 04 01 mov byte ptr [esp+4],1 - 10009446: 3B 8E A4 07 00 00 cmp ecx,dword ptr [esi+000007A4h] - 1000944C: 74 0F je 1000945D - 1000944E: 8B CE mov ecx,esi - 10009450: E8 FB FC FF FF call 10009150 - 10009455: 85 C0 test eax,eax - 10009457: 0F 84 A8 00 00 00 je 10009505 - 1000945D: F6 86 AD 07 00 00 test byte ptr [esi+000007ADh],0Fh - 0F - 10009464: 0F 85 AB 00 00 00 jne 10009515 - 1000946A: 0F B7 86 AA 07 00 movzx eax,word ptr [esi+000007AAh] - 00 - 10009471: 66 83 F8 07 cmp ax,7 - 10009475: 74 0E je 10009485 - 10009477: 66 83 F8 08 cmp ax,8 - 1000947B: 0F 85 94 00 00 00 jne 10009515 - 10009481: 66 83 F8 07 cmp ax,7 - 10009485: 8B 06 mov eax,dword ptr [esi] - 10009487: 6A 01 push 1 - 10009489: 6A 00 push 0 - 1000948B: 6A 00 push 0 - 1000948D: 0F 95 C2 setne dl - 10009490: 6A 00 push 0 - 10009492: FE CA dec dl - 10009494: 6A 00 push 0 - 10009496: 80 E2 F1 and dl,0F1h - 10009499: 6A 00 push 0 - 1000949B: 80 C2 10 add dl,10h - 1000949E: 6A 00 push 0 - 100094A0: 88 54 24 24 mov byte ptr [esp+24h],dl - 100094A4: 8B 50 48 mov edx,dword ptr [eax+48h] - 100094A7: 6A 36 push 36h - 100094A9: 8B CE mov ecx,esi - 100094AB: FF D2 call edx - 100094AD: 85 C0 test eax,eax - 100094AF: 74 54 je 10009505 - 100094B1: 8B 06 mov eax,dword ptr [esi] - 100094B3: 8B 50 48 mov edx,dword ptr [eax+48h] - 100094B6: 6A 01 push 1 - 100094B8: 6A 00 push 0 - 100094BA: 6A 00 push 0 - 100094BC: 6A 00 push 0 - 100094BE: 6A 00 push 0 - 100094C0: 6A 04 push 4 - 100094C2: 8D 8E B0 07 00 00 lea ecx,[esi+000007B0h] - 100094C8: 51 push ecx - 100094C9: 6A 29 push 29h - 100094CB: 8B CE mov ecx,esi - 100094CD: FF D2 call edx - 100094CF: 85 C0 test eax,eax - 100094D1: 74 32 je 10009505 - 100094D3: 8B 06 mov eax,dword ptr [esi] - 100094D5: 8B 50 48 mov edx,dword ptr [eax+48h] - 100094D8: 57 push edi - 100094D9: 6A 01 push 1 - 100094DB: 6A 00 push 0 - 100094DD: 6A 00 push 0 - 100094DF: 6A 00 push 0 - 100094E1: 6A 00 push 0 - 100094E3: 6A 04 push 4 - 100094E5: 8D 4C 24 20 lea ecx,[esp+20h] - 100094E9: 51 push ecx - 100094EA: 68 C2 00 00 00 push 0C2h - 100094EF: 8B CE mov ecx,esi - 100094F1: FF D2 call edx - 100094F3: 8B F8 mov edi,eax - 100094F5: 85 FF test edi,edi - 100094F7: 74 09 je 10009502 - 100094F9: 8B 06 mov eax,dword ptr [esi] - 100094FB: 8B 50 40 mov edx,dword ptr [eax+40h] - 100094FE: 8B CE mov ecx,esi - 10009500: FF D2 call edx - 10009502: 8B C7 mov eax,edi - 10009504: 5F pop edi - 10009505: 5E pop esi - 10009506: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 1000950A: 33 CC xor ecx,esp - 1000950C: E8 8A 0B 00 00 call 1000A09B - 10009511: 83 C4 0C add esp,0Ch - 10009514: C3 ret - 10009515: 8B 06 mov eax,dword ptr [esi] - 10009517: 8B 50 48 mov edx,dword ptr [eax+48h] - 1000951A: 6A 01 push 1 - 1000951C: 6A 00 push 0 - 1000951E: 6A 00 push 0 - 10009520: 6A 00 push 0 - 10009522: 6A 00 push 0 - 10009524: 6A 00 push 0 - 10009526: 6A 00 push 0 - 10009528: 6A 36 push 36h - 1000952A: 8B CE mov ecx,esi - 1000952C: FF D2 call edx - 1000952E: 8B 4C 24 0C mov ecx,dword ptr [esp+0Ch] - 10009532: 5E pop esi - 10009533: 33 CC xor ecx,esp - 10009535: E8 61 0B 00 00 call 1000A09B - 1000953A: 83 C4 0C add esp,0Ch - 1000953D: C3 ret - 1000953E: CC int 3 - 1000953F: CC int 3 - 10009540: 56 push esi - 10009541: 8B F1 mov esi,ecx - 10009543: E8 D8 FD FF FF call 10009320 - 10009548: F6 44 24 08 01 test byte ptr [esp+8],1 - 1000954D: 74 09 je 10009558 - 1000954F: 56 push esi - 10009550: E8 A6 0B 00 00 call 1000A0FB - 10009555: 83 C4 04 add esp,4 - 10009558: 8B C6 mov eax,esi - 1000955A: 5E pop esi - 1000955B: C2 04 00 ret 4 - 1000955E: CC int 3 - 1000955F: CC int 3 - 10009560: B8 01 00 00 00 mov eax,1 - 10009565: C3 ret - 10009566: CC int 3 - 10009567: CC int 3 - 10009568: CC int 3 - 10009569: CC int 3 - 1000956A: CC int 3 - 1000956B: CC int 3 - 1000956C: CC int 3 - 1000956D: CC int 3 - 1000956E: CC int 3 - 1000956F: CC int 3 - 10009570: 33 C0 xor eax,eax - 10009572: 39 05 04 61 02 10 cmp dword ptr ds:[10026104h],eax - 10009578: 75 63 jne 100095DD - 1000957A: 56 push esi - 1000957B: FF 15 44 F0 01 10 call dword ptr ds:[1001F044h] - 10009581: 33 C9 xor ecx,ecx - 10009583: 83 F8 FF cmp eax,0FFFFFFFFh - 10009586: 0F 95 C1 setne cl - 10009589: 68 00 46 00 00 push 4600h - 1000958E: A3 00 61 02 10 mov dword ptr ds:[10026100h],eax - 10009593: 89 0D 04 61 02 10 mov dword ptr ds:[10026104h],ecx - 10009599: E8 D2 0B 00 00 call 1000A170 - 1000959E: A3 08 61 02 10 mov dword ptr ds:[10026108h],eax - 100095A3: 8B F0 mov esi,eax - 100095A5: C7 80 80 00 00 00 mov dword ptr [eax+00000080h],0 - 00 00 00 00 - 100095AF: C7 80 84 00 00 00 mov dword ptr [eax+00000084h],0 - 00 00 00 00 - 100095B9: C7 80 88 00 00 00 mov dword ptr [eax+00000088h],0 - 00 00 00 00 - 100095C3: 05 94 00 00 00 add eax,94h - 100095C8: 50 push eax - 100095C9: E8 42 F5 FF FF call 10008B10 - 100095CE: 83 C4 08 add esp,8 - 100095D1: 89 86 90 00 00 00 mov dword ptr [esi+00000090h],eax - 100095D7: B8 01 00 00 00 mov eax,1 - 100095DC: 5E pop esi - 100095DD: C3 ret - 100095DE: CC int 3 - 100095DF: CC int 3 - 100095E0: 33 C0 xor eax,eax - 100095E2: 39 05 04 61 02 10 cmp dword ptr ds:[10026104h],eax - 100095E8: 74 5D je 10009647 - 100095EA: A1 08 61 02 10 mov eax,dword ptr ds:[10026108h] - 100095EF: 83 B8 90 00 00 00 cmp dword ptr [eax+00000090h],0 - 00 - 100095F6: 74 21 je 10009619 - 100095F8: 8B 88 94 00 00 00 mov ecx,dword ptr [eax+00000094h] - 100095FE: C7 80 90 00 00 00 mov dword ptr [eax+00000090h],0 - 00 00 00 00 - 10009608: 85 C9 test ecx,ecx - 1000960A: 74 0D je 10009619 - 1000960C: 8B 01 mov eax,dword ptr [ecx] - 1000960E: 8B 10 mov edx,dword ptr [eax] - 10009610: 6A 01 push 1 - 10009612: FF D2 call edx - 10009614: A1 08 61 02 10 mov eax,dword ptr ds:[10026108h] - 10009619: 50 push eax - 1000961A: E8 DC 0A 00 00 call 1000A0FB - 1000961F: A1 00 61 02 10 mov eax,dword ptr ds:[10026100h] - 10009624: 83 C4 04 add esp,4 - 10009627: 50 push eax - 10009628: C7 05 08 61 02 10 mov dword ptr ds:[10026108h],0 - 00 00 00 00 - 10009632: FF 15 48 F0 01 10 call dword ptr ds:[1001F048h] - 10009638: C7 05 04 61 02 10 mov dword ptr ds:[10026104h],0 - 00 00 00 00 - 10009642: B8 01 00 00 00 mov eax,1 - 10009647: C3 ret - 10009648: CC int 3 - 10009649: CC int 3 - 1000964A: CC int 3 - 1000964B: CC int 3 - 1000964C: CC int 3 - 1000964D: CC int 3 - 1000964E: CC int 3 - 1000964F: CC int 3 - 10009650: 33 C0 xor eax,eax - 10009652: 39 05 04 61 02 10 cmp dword ptr ds:[10026104h],eax - 10009658: 74 14 je 1000966E - 1000965A: A1 08 61 02 10 mov eax,dword ptr ds:[10026108h] - 1000965F: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10009663: 33 D2 xor edx,edx - 10009665: 85 C0 test eax,eax - 10009667: 0F 95 C2 setne dl - 1000966A: 89 01 mov dword ptr [ecx],eax - 1000966C: 8B C2 mov eax,edx - 1000966E: C3 ret - 1000966F: CC int 3 - 10009670: 33 C0 xor eax,eax - 10009672: 39 05 04 61 02 10 cmp dword ptr ds:[10026104h],eax - 10009678: 74 2D je 100096A7 - 1000967A: 8B 0D 08 61 02 10 mov ecx,dword ptr ds:[10026108h] - 10009680: 85 C9 test ecx,ecx - 10009682: 0F 95 C0 setne al - 10009685: 85 C0 test eax,eax - 10009687: 74 1E je 100096A7 - 10009689: 8A 54 24 04 mov dl,byte ptr [esp+4] - 1000968D: 88 91 8C 00 00 00 mov byte ptr [ecx+0000008Ch],dl - 10009693: 8A 54 24 08 mov dl,byte ptr [esp+8] - 10009697: 88 91 8D 00 00 00 mov byte ptr [ecx+0000008Dh],dl - 1000969D: 8A 54 24 0C mov dl,byte ptr [esp+0Ch] - 100096A1: 88 91 8E 00 00 00 mov byte ptr [ecx+0000008Eh],dl - 100096A7: C3 ret - 100096A8: CC int 3 - 100096A9: CC int 3 - 100096AA: CC int 3 - 100096AB: CC int 3 - 100096AC: CC int 3 - 100096AD: CC int 3 - 100096AE: CC int 3 - 100096AF: CC int 3 - 100096B0: 56 push esi - 100096B1: 8B F1 mov esi,ecx - 100096B3: E8 C2 26 00 00 call 1000BD7A - 100096B8: 56 push esi - 100096B9: E8 1A 1F 00 00 call 1000B5D8 - 100096BE: 83 C4 04 add esp,4 - 100096C1: 8B C6 mov eax,esi - 100096C3: 5E pop esi - 100096C4: C3 ret - 100096C5: CC int 3 - 100096C6: CC int 3 - 100096C7: CC int 3 - 100096C8: CC int 3 - 100096C9: CC int 3 - 100096CA: CC int 3 - 100096CB: CC int 3 - 100096CC: CC int 3 - 100096CD: CC int 3 - 100096CE: CC int 3 - 100096CF: CC int 3 - 100096D0: 8B 11 mov edx,dword ptr [ecx] - 100096D2: 8B 41 04 mov eax,dword ptr [ecx+4] - 100096D5: 56 push esi - 100096D6: 8B 74 24 08 mov esi,dword ptr [esp+8] - 100096DA: 2B 16 sub edx,dword ptr [esi] - 100096DC: 57 push edi - 100096DD: 1B 46 04 sbb eax,dword ptr [esi+4] - 100096E0: 8B FA mov edi,edx - 100096E2: 0B F8 or edi,eax - 100096E4: 75 22 jne 10009708 - 100096E6: 0F BF 41 08 movsx eax,word ptr [ecx+8] - 100096EA: 0F BF 56 08 movsx edx,word ptr [esi+8] - 100096EE: 2B C2 sub eax,edx - 100096F0: 99 cdq - 100096F1: 8B C8 mov ecx,eax - 100096F3: 0B CA or ecx,edx - 100096F5: 75 07 jne 100096FE - 100096F7: 5F pop edi - 100096F8: 33 C0 xor eax,eax - 100096FA: 5E pop esi - 100096FB: C2 04 00 ret 4 - 100096FE: 85 D2 test edx,edx - 10009700: 7C 1A jl 1000971C - 10009702: 7F 0E jg 10009712 - 10009704: 85 C0 test eax,eax - 10009706: EB 08 jmp 10009710 - 10009708: 85 C0 test eax,eax - 1000970A: 7C 10 jl 1000971C - 1000970C: 7F 04 jg 10009712 - 1000970E: 85 D2 test edx,edx - 10009710: 76 0A jbe 1000971C - 10009712: 5F pop edi - 10009713: B8 01 00 00 00 mov eax,1 - 10009718: 5E pop esi - 10009719: C2 04 00 ret 4 - 1000971C: 5F pop edi - 1000971D: 83 C8 FF or eax,0FFFFFFFFh - 10009720: 5E pop esi - 10009721: C2 04 00 ret 4 - 10009724: CC int 3 - 10009725: CC int 3 - 10009726: CC int 3 - 10009727: CC int 3 - 10009728: CC int 3 - 10009729: CC int 3 - 1000972A: CC int 3 - 1000972B: CC int 3 - 1000972C: CC int 3 - 1000972D: CC int 3 - 1000972E: CC int 3 - 1000972F: CC int 3 - 10009730: 56 push esi - 10009731: 8B F1 mov esi,ecx - 10009733: E8 42 26 00 00 call 1000BD7A - 10009738: 8B 44 24 08 mov eax,dword ptr [esp+8] - 1000973C: 8B 08 mov ecx,dword ptr [eax] - 1000973E: 89 0E mov dword ptr [esi],ecx - 10009740: 8B 50 04 mov edx,dword ptr [eax+4] - 10009743: 89 56 04 mov dword ptr [esi+4],edx - 10009746: 66 8B 48 08 mov cx,word ptr [eax+8] - 1000974A: 66 89 4E 08 mov word ptr [esi+8],cx - 1000974E: 66 8B 50 0A mov dx,word ptr [eax+0Ah] - 10009752: 66 89 56 0A mov word ptr [esi+0Ah],dx - 10009756: 66 8B 40 0C mov ax,word ptr [eax+0Ch] - 1000975A: 66 89 46 0C mov word ptr [esi+0Ch],ax - 1000975E: 8B C6 mov eax,esi - 10009760: 5E pop esi - 10009761: C2 04 00 ret 4 - 10009764: CC int 3 - 10009765: CC int 3 - 10009766: CC int 3 - 10009767: CC int 3 - 10009768: CC int 3 - 10009769: CC int 3 - 1000976A: CC int 3 - 1000976B: CC int 3 - 1000976C: CC int 3 - 1000976D: CC int 3 - 1000976E: CC int 3 - 1000976F: CC int 3 - 10009770: 8B 01 mov eax,dword ptr [ecx] - 10009772: 8B 51 04 mov edx,dword ptr [ecx+4] - 10009775: 56 push esi - 10009776: 8B 74 24 08 mov esi,dword ptr [esp+8] - 1000977A: 89 06 mov dword ptr [esi],eax - 1000977C: 8B 41 08 mov eax,dword ptr [ecx+8] - 1000977F: 8B 49 0C mov ecx,dword ptr [ecx+0Ch] - 10009782: 89 56 04 mov dword ptr [esi+4],edx - 10009785: 89 46 08 mov dword ptr [esi+8],eax - 10009788: 89 4E 0C mov dword ptr [esi+0Ch],ecx - 1000978B: 0F B7 4E 08 movzx ecx,word ptr [esi+8] - 1000978F: 03 4C 24 0C add ecx,dword ptr [esp+0Ch] - 10009793: B8 D3 4D 62 10 mov eax,10624DD3h - 10009798: F7 E9 imul ecx - 1000979A: C1 FA 06 sar edx,6 - 1000979D: 8B C2 mov eax,edx - 1000979F: C1 E8 1F shr eax,1Fh - 100097A2: 03 C2 add eax,edx - 100097A4: 8B D0 mov edx,eax - 100097A6: 69 D2 E8 03 00 00 imul edx,edx,3E8h - 100097AC: 2B CA sub ecx,edx - 100097AE: 99 cdq - 100097AF: 01 06 add dword ptr [esi],eax - 100097B1: 66 89 4E 08 mov word ptr [esi+8],cx - 100097B5: 8B C6 mov eax,esi - 100097B7: 11 56 04 adc dword ptr [esi+4],edx - 100097BA: 5E pop esi - 100097BB: C2 08 00 ret 8 - 100097BE: CC int 3 - 100097BF: CC int 3 - 100097C0: 8B 44 24 04 mov eax,dword ptr [esp+4] - 100097C4: 50 push eax - 100097C5: E8 06 FF FF FF call 100096D0 - 100097CA: 33 C9 xor ecx,ecx - 100097CC: 85 C0 test eax,eax - 100097CE: 0F 9C C1 setl cl - 100097D1: 8A C1 mov al,cl - 100097D3: C2 04 00 ret 4 - 100097D6: CC int 3 - 100097D7: CC int 3 - 100097D8: CC int 3 - 100097D9: CC int 3 - 100097DA: CC int 3 - 100097DB: CC int 3 - 100097DC: CC int 3 - 100097DD: CC int 3 - 100097DE: CC int 3 - 100097DF: CC int 3 - 100097E0: 8B 44 24 04 mov eax,dword ptr [esp+4] - 100097E4: 50 push eax - 100097E5: E8 E6 FE FF FF call 100096D0 - 100097EA: 33 C9 xor ecx,ecx - 100097EC: 85 C0 test eax,eax - 100097EE: 0F 9F C1 setg cl - 100097F1: 8A C1 mov al,cl - 100097F3: C2 04 00 ret 4 - 100097F6: CC int 3 - 100097F7: CC int 3 - 100097F8: CC int 3 - 100097F9: CC int 3 - 100097FA: CC int 3 - 100097FB: CC int 3 - 100097FC: CC int 3 - 100097FD: CC int 3 - 100097FE: CC int 3 - 100097FF: CC int 3 - 10009800: 8B 44 24 04 mov eax,dword ptr [esp+4] - 10009804: 50 push eax - 10009805: E8 C6 FE FF FF call 100096D0 - 1000980A: 33 C9 xor ecx,ecx - 1000980C: 85 C0 test eax,eax - 1000980E: 0F 9D C1 setge cl - 10009811: 8A C1 mov al,cl - 10009813: C2 04 00 ret 4 - 10009816: CC int 3 - 10009817: CC int 3 - 10009818: CC int 3 - 10009819: CC int 3 - 1000981A: CC int 3 - 1000981B: CC int 3 - 1000981C: CC int 3 - 1000981D: CC int 3 - 1000981E: CC int 3 - 1000981F: CC int 3 - 10009820: 56 push esi - 10009821: 8B F1 mov esi,ecx - 10009823: E8 52 25 00 00 call 1000BD7A - 10009828: 8B 06 mov eax,dword ptr [esi] - 1000982A: 0B 46 04 or eax,dword ptr [esi+4] - 1000982D: 75 3D jne 1000986C - 1000982F: 8B 0D 70 F8 01 10 mov ecx,dword ptr ds:[1001F870h] - 10009835: 8B 44 24 08 mov eax,dword ptr [esp+8] - 10009839: 89 08 mov dword ptr [eax],ecx - 1000983B: 8B 15 74 F8 01 10 mov edx,dword ptr ds:[1001F874h] - 10009841: 89 50 04 mov dword ptr [eax+4],edx - 10009844: 8B 0D 78 F8 01 10 mov ecx,dword ptr ds:[1001F878h] - 1000984A: 89 48 08 mov dword ptr [eax+8],ecx - 1000984D: 8B 15 7C F8 01 10 mov edx,dword ptr ds:[1001F87Ch] - 10009853: 89 50 0C mov dword ptr [eax+0Ch],edx - 10009856: 8B 0D 80 F8 01 10 mov ecx,dword ptr ds:[1001F880h] - 1000985C: 89 48 10 mov dword ptr [eax+10h],ecx - 1000985F: 8B 15 84 F8 01 10 mov edx,dword ptr ds:[1001F884h] - 10009865: 89 50 14 mov dword ptr [eax+14h],edx - 10009868: 5E pop esi - 10009869: C2 04 00 ret 4 - 1000986C: 56 push esi - 1000986D: E8 C9 1B 00 00 call 1000B43B - 10009872: 83 C4 04 add esp,4 - 10009875: 85 C0 test eax,eax - 10009877: 75 3F jne 100098B8 - 10009879: 8B 0D 5C F8 01 10 mov ecx,dword ptr ds:[1001F85Ch] - 1000987F: 8B 44 24 08 mov eax,dword ptr [esp+8] - 10009883: 89 08 mov dword ptr [eax],ecx - 10009885: 8B 15 60 F8 01 10 mov edx,dword ptr ds:[1001F860h] - 1000988B: 89 50 04 mov dword ptr [eax+4],edx - 1000988E: 8B 0D 64 F8 01 10 mov ecx,dword ptr ds:[1001F864h] - 10009894: 89 48 08 mov dword ptr [eax+8],ecx - 10009897: 8B 15 68 F8 01 10 mov edx,dword ptr ds:[1001F868h] - 1000989D: 89 50 0C mov dword ptr [eax+0Ch],edx - 100098A0: 66 8B 0D 6C F8 01 mov cx,word ptr ds:[1001F86Ch] - 10 - 100098A7: 66 89 48 10 mov word ptr [eax+10h],cx - 100098AB: 8A 15 6E F8 01 10 mov dl,byte ptr ds:[1001F86Eh] - 100098B1: 88 50 12 mov byte ptr [eax+12h],dl - 100098B4: 5E pop esi - 100098B5: C2 04 00 ret 4 - 100098B8: 0F B7 4E 08 movzx ecx,word ptr [esi+8] - 100098BC: 8B 10 mov edx,dword ptr [eax] - 100098BE: 8B 74 24 08 mov esi,dword ptr [esp+8] - 100098C2: 51 push ecx - 100098C3: 8B 48 04 mov ecx,dword ptr [eax+4] - 100098C6: 52 push edx - 100098C7: 8B 50 08 mov edx,dword ptr [eax+8] - 100098CA: 51 push ecx - 100098CB: 8B 48 0C mov ecx,dword ptr [eax+0Ch] - 100098CE: 52 push edx - 100098CF: 8B 50 10 mov edx,dword ptr [eax+10h] - 100098D2: 8B 40 14 mov eax,dword ptr [eax+14h] - 100098D5: 51 push ecx - 100098D6: 42 inc edx - 100098D7: 52 push edx - 100098D8: 05 6C 07 00 00 add eax,76Ch - 100098DD: 50 push eax - 100098DE: 68 38 F8 01 10 push 1001F838h - 100098E3: 56 push esi - 100098E4: E8 05 27 00 00 call 1000BFEE - 100098E9: 83 C4 24 add esp,24h - 100098EC: 8B C6 mov eax,esi - 100098EE: 5E pop esi - 100098EF: C2 04 00 ret 4 - 100098F2: CC int 3 - 100098F3: CC int 3 - 100098F4: CC int 3 - 100098F5: CC int 3 - 100098F6: CC int 3 - 100098F7: CC int 3 - 100098F8: CC int 3 - 100098F9: CC int 3 - 100098FA: CC int 3 - 100098FB: CC int 3 - 100098FC: CC int 3 - 100098FD: CC int 3 - 100098FE: CC int 3 - 100098FF: CC int 3 - 10009900: 56 push esi - 10009901: 8B F1 mov esi,ecx - 10009903: E8 72 24 00 00 call 1000BD7A - 10009908: 33 C0 xor eax,eax - 1000990A: C7 06 00 00 00 00 mov dword ptr [esi],0 - 10009910: C7 46 04 00 00 00 mov dword ptr [esi+4],0 - 00 - 10009917: 66 89 46 08 mov word ptr [esi+8],ax - 1000991B: E8 C2 26 00 00 call 1000BFE2 - 10009920: 8B 08 mov ecx,dword ptr [eax] - 10009922: B8 89 88 88 88 mov eax,88888889h - 10009927: F7 E9 imul ecx - 10009929: 03 D1 add edx,ecx - 1000992B: C1 FA 05 sar edx,5 - 1000992E: 8B CA mov ecx,edx - 10009930: C1 E9 1F shr ecx,1Fh - 10009933: 03 CA add ecx,edx - 10009935: 66 89 4E 0A mov word ptr [esi+0Ah],cx - 10009939: E8 98 26 00 00 call 1000BFD6 - 1000993E: 66 8B 10 mov dx,word ptr [eax] - 10009941: 66 89 56 0C mov word ptr [esi+0Ch],dx - 10009945: 5E pop esi - 10009946: C3 ret - 10009947: CC int 3 - 10009948: CC int 3 - 10009949: CC int 3 - 1000994A: CC int 3 - 1000994B: CC int 3 - 1000994C: CC int 3 - 1000994D: CC int 3 - 1000994E: CC int 3 - 1000994F: CC int 3 - 10009950: 55 push ebp - 10009951: 8B EC mov ebp,esp - 10009953: 57 push edi - 10009954: 56 push esi - 10009955: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 10009958: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 1000995B: 8B 7D 08 mov edi,dword ptr [ebp+8] - 1000995E: 8B C1 mov eax,ecx - 10009960: 8B D1 mov edx,ecx - 10009962: 03 C6 add eax,esi - 10009964: 3B FE cmp edi,esi - 10009966: 76 08 jbe 10009970 - 10009968: 3B F8 cmp edi,eax - 1000996A: 0F 82 A4 01 00 00 jb 10009B14 - 10009970: 81 F9 00 01 00 00 cmp ecx,100h - 10009976: 72 1F jb 10009997 - 10009978: 83 3D 1C 6D 02 10 cmp dword ptr ds:[10026D1Ch],0 - 00 - 1000997F: 74 16 je 10009997 - 10009981: 57 push edi - 10009982: 56 push esi - 10009983: 83 E7 0F and edi,0Fh - 10009986: 83 E6 0F and esi,0Fh - 10009989: 3B FE cmp edi,esi - 1000998B: 5E pop esi - 1000998C: 5F pop edi - 1000998D: 75 08 jne 10009997 - 1000998F: 5E pop esi - 10009990: 5F pop edi - 10009991: 5D pop ebp - 10009992: E9 A9 29 00 00 jmp 1000C340 - 10009997: F7 C7 03 00 00 00 test edi,3 - 1000999D: 75 15 jne 100099B4 - 1000999F: C1 E9 02 shr ecx,2 - 100099A2: 83 E2 03 and edx,3 - 100099A5: 83 F9 08 cmp ecx,8 - 100099A8: 72 2A jb 100099D4 - 100099AA: F3 A5 rep movs dword ptr es:[edi],dword ptr [esi] - 100099AC: FF 24 95 C4 9A 00 jmp dword ptr [edx*4+10009AC4h] - 10 - 100099B3: 90 nop - 100099B4: 8B C7 mov eax,edi - 100099B6: BA 03 00 00 00 mov edx,3 - 100099BB: 83 E9 04 sub ecx,4 - 100099BE: 72 0C jb 100099CC - 100099C0: 83 E0 03 and eax,3 - 100099C3: 03 C8 add ecx,eax - 100099C5: FF 24 85 D8 99 00 jmp dword ptr [eax*4+100099D8h] - 10 - 100099CC: FF 24 8D D4 9A 00 jmp dword ptr [ecx*4+10009AD4h] - 10 - 100099D3: 90 nop - 100099D4: FF 24 8D 58 9A 00 jmp dword ptr [ecx*4+10009A58h] - 10 - 100099DB: 90 nop - 100099DC: E8 99 00 10 14 call 24109A7A - 100099E1: 9A 00 10 38 9A 00 call 1000:9A381000 - 10 - 100099E8: 23 D1 and edx,ecx - 100099EA: 8A 06 mov al,byte ptr [esi] - 100099EC: 88 07 mov byte ptr [edi],al - 100099EE: 8A 46 01 mov al,byte ptr [esi+1] - 100099F1: 88 47 01 mov byte ptr [edi+1],al - 100099F4: 8A 46 02 mov al,byte ptr [esi+2] - 100099F7: C1 E9 02 shr ecx,2 - 100099FA: 88 47 02 mov byte ptr [edi+2],al - 100099FD: 83 C6 03 add esi,3 - 10009A00: 83 C7 03 add edi,3 - 10009A03: 83 F9 08 cmp ecx,8 - 10009A06: 72 CC jb 100099D4 - 10009A08: F3 A5 rep movs dword ptr es:[edi],dword ptr [esi] - 10009A0A: FF 24 95 C4 9A 00 jmp dword ptr [edx*4+10009AC4h] - 10 - 10009A11: 8D 49 00 lea ecx,[ecx] - 10009A14: 23 D1 and edx,ecx - 10009A16: 8A 06 mov al,byte ptr [esi] - 10009A18: 88 07 mov byte ptr [edi],al - 10009A1A: 8A 46 01 mov al,byte ptr [esi+1] - 10009A1D: C1 E9 02 shr ecx,2 - 10009A20: 88 47 01 mov byte ptr [edi+1],al - 10009A23: 83 C6 02 add esi,2 - 10009A26: 83 C7 02 add edi,2 - 10009A29: 83 F9 08 cmp ecx,8 - 10009A2C: 72 A6 jb 100099D4 - 10009A2E: F3 A5 rep movs dword ptr es:[edi],dword ptr [esi] - 10009A30: FF 24 95 C4 9A 00 jmp dword ptr [edx*4+10009AC4h] - 10 - 10009A37: 90 nop - 10009A38: 23 D1 and edx,ecx - 10009A3A: 8A 06 mov al,byte ptr [esi] - 10009A3C: 88 07 mov byte ptr [edi],al - 10009A3E: 83 C6 01 add esi,1 - 10009A41: C1 E9 02 shr ecx,2 - 10009A44: 83 C7 01 add edi,1 - 10009A47: 83 F9 08 cmp ecx,8 - 10009A4A: 72 88 jb 100099D4 - 10009A4C: F3 A5 rep movs dword ptr es:[edi],dword ptr [esi] - 10009A4E: FF 24 95 C4 9A 00 jmp dword ptr [edx*4+10009AC4h] - 10 - 10009A55: 8D 49 00 lea ecx,[ecx] - 10009A58: BB 9A 00 10 A8 mov ebx,0A810009Ah - 10009A5D: 9A 00 10 A0 9A 00 call 1000:9AA01000 - 10 - 10009A64: 98 cwde - 10009A65: 9A 00 10 90 9A 00 call 1000:9A901000 - 10 - 10009A6C: 88 9A 00 10 80 9A mov byte ptr [edx+9A801000h],bl - 10009A72: 00 10 add byte ptr [eax],dl - 10009A74: 78 9A js 10009A10 - 10009A76: 00 10 add byte ptr [eax],dl - 10009A78: 8B 44 8E E4 mov eax,dword ptr [esi+ecx*4-1Ch] - 10009A7C: 89 44 8F E4 mov dword ptr [edi+ecx*4-1Ch],eax - 10009A80: 8B 44 8E E8 mov eax,dword ptr [esi+ecx*4-18h] - 10009A84: 89 44 8F E8 mov dword ptr [edi+ecx*4-18h],eax - 10009A88: 8B 44 8E EC mov eax,dword ptr [esi+ecx*4-14h] - 10009A8C: 89 44 8F EC mov dword ptr [edi+ecx*4-14h],eax - 10009A90: 8B 44 8E F0 mov eax,dword ptr [esi+ecx*4-10h] - 10009A94: 89 44 8F F0 mov dword ptr [edi+ecx*4-10h],eax - 10009A98: 8B 44 8E F4 mov eax,dword ptr [esi+ecx*4-0Ch] - 10009A9C: 89 44 8F F4 mov dword ptr [edi+ecx*4-0Ch],eax - 10009AA0: 8B 44 8E F8 mov eax,dword ptr [esi+ecx*4-8] - 10009AA4: 89 44 8F F8 mov dword ptr [edi+ecx*4-8],eax - 10009AA8: 8B 44 8E FC mov eax,dword ptr [esi+ecx*4-4] - 10009AAC: 89 44 8F FC mov dword ptr [edi+ecx*4-4],eax - 10009AB0: 8D 04 8D 00 00 00 lea eax,[ecx*4+00000000h] - 00 - 10009AB7: 03 F0 add esi,eax - 10009AB9: 03 F8 add edi,eax - 10009ABB: FF 24 95 C4 9A 00 jmp dword ptr [edx*4+10009AC4h] - 10 - 10009AC2: 8B FF mov edi,edi - 10009AC4: D4 9A aamb 9Ah - 10009AC6: 00 10 add byte ptr [eax],dl - 10009AC8: DC 9A 00 10 E8 9A fcomp qword ptr [edx+9AE81000h] - 10009ACE: 00 10 add byte ptr [eax],dl - 10009AD0: FC cld - 10009AD1: 9A 00 10 8B 45 08 call 5E08:458B1000 - 5E - 10009AD8: 5F pop edi - 10009AD9: C9 leave - 10009ADA: C3 ret - 10009ADB: 90 nop - 10009ADC: 8A 06 mov al,byte ptr [esi] - 10009ADE: 88 07 mov byte ptr [edi],al - 10009AE0: 8B 45 08 mov eax,dword ptr [ebp+8] - 10009AE3: 5E pop esi - 10009AE4: 5F pop edi - 10009AE5: C9 leave - 10009AE6: C3 ret - 10009AE7: 90 nop - 10009AE8: 8A 06 mov al,byte ptr [esi] - 10009AEA: 88 07 mov byte ptr [edi],al - 10009AEC: 8A 46 01 mov al,byte ptr [esi+1] - 10009AEF: 88 47 01 mov byte ptr [edi+1],al - 10009AF2: 8B 45 08 mov eax,dword ptr [ebp+8] - 10009AF5: 5E pop esi - 10009AF6: 5F pop edi - 10009AF7: C9 leave - 10009AF8: C3 ret - 10009AF9: 8D 49 00 lea ecx,[ecx] - 10009AFC: 8A 06 mov al,byte ptr [esi] - 10009AFE: 88 07 mov byte ptr [edi],al - 10009B00: 8A 46 01 mov al,byte ptr [esi+1] - 10009B03: 88 47 01 mov byte ptr [edi+1],al - 10009B06: 8A 46 02 mov al,byte ptr [esi+2] - 10009B09: 88 47 02 mov byte ptr [edi+2],al - 10009B0C: 8B 45 08 mov eax,dword ptr [ebp+8] - 10009B0F: 5E pop esi - 10009B10: 5F pop edi - 10009B11: C9 leave - 10009B12: C3 ret - 10009B13: 90 nop - 10009B14: 8D 74 31 FC lea esi,[ecx+esi-4] - 10009B18: 8D 7C 39 FC lea edi,[ecx+edi-4] - 10009B1C: F7 C7 03 00 00 00 test edi,3 - 10009B22: 75 24 jne 10009B48 - 10009B24: C1 E9 02 shr ecx,2 - 10009B27: 83 E2 03 and edx,3 - 10009B2A: 83 F9 08 cmp ecx,8 - 10009B2D: 72 0D jb 10009B3C - 10009B2F: FD std - 10009B30: F3 A5 rep movs dword ptr es:[edi],dword ptr [esi] - 10009B32: FC cld - 10009B33: FF 24 95 60 9C 00 jmp dword ptr [edx*4+10009C60h] - 10 - 10009B3A: 8B FF mov edi,edi - 10009B3C: F7 D9 neg ecx - 10009B3E: FF 24 8D 10 9C 00 jmp dword ptr [ecx*4+10009C10h] - 10 - 10009B45: 8D 49 00 lea ecx,[ecx] - 10009B48: 8B C7 mov eax,edi - 10009B4A: BA 03 00 00 00 mov edx,3 - 10009B4F: 83 F9 04 cmp ecx,4 - 10009B52: 72 0C jb 10009B60 - 10009B54: 83 E0 03 and eax,3 - 10009B57: 2B C8 sub ecx,eax - 10009B59: FF 24 85 64 9B 00 jmp dword ptr [eax*4+10009B64h] - 10 - 10009B60: FF 24 8D 60 9C 00 jmp dword ptr [ecx*4+10009C60h] - 10 - 10009B67: 90 nop - 10009B68: 74 9B je 10009B05 - 10009B6A: 00 10 add byte ptr [eax],dl - 10009B6C: 98 cwde - 10009B6D: 9B wait - 10009B6E: 00 10 add byte ptr [eax],dl - 10009B70: C0 9B 00 10 8A 46 rcr byte ptr [ebx+468A1000h],3 - 03 - 10009B77: 23 D1 and edx,ecx - 10009B79: 88 47 03 mov byte ptr [edi+3],al - 10009B7C: 83 EE 01 sub esi,1 - 10009B7F: C1 E9 02 shr ecx,2 - 10009B82: 83 EF 01 sub edi,1 - 10009B85: 83 F9 08 cmp ecx,8 - 10009B88: 72 B2 jb 10009B3C - 10009B8A: FD std - 10009B8B: F3 A5 rep movs dword ptr es:[edi],dword ptr [esi] - 10009B8D: FC cld - 10009B8E: FF 24 95 60 9C 00 jmp dword ptr [edx*4+10009C60h] - 10 - 10009B95: 8D 49 00 lea ecx,[ecx] - 10009B98: 8A 46 03 mov al,byte ptr [esi+3] - 10009B9B: 23 D1 and edx,ecx - 10009B9D: 88 47 03 mov byte ptr [edi+3],al - 10009BA0: 8A 46 02 mov al,byte ptr [esi+2] - 10009BA3: C1 E9 02 shr ecx,2 - 10009BA6: 88 47 02 mov byte ptr [edi+2],al - 10009BA9: 83 EE 02 sub esi,2 - 10009BAC: 83 EF 02 sub edi,2 - 10009BAF: 83 F9 08 cmp ecx,8 - 10009BB2: 72 88 jb 10009B3C - 10009BB4: FD std - 10009BB5: F3 A5 rep movs dword ptr es:[edi],dword ptr [esi] - 10009BB7: FC cld - 10009BB8: FF 24 95 60 9C 00 jmp dword ptr [edx*4+10009C60h] - 10 - 10009BBF: 90 nop - 10009BC0: 8A 46 03 mov al,byte ptr [esi+3] - 10009BC3: 23 D1 and edx,ecx - 10009BC5: 88 47 03 mov byte ptr [edi+3],al - 10009BC8: 8A 46 02 mov al,byte ptr [esi+2] - 10009BCB: 88 47 02 mov byte ptr [edi+2],al - 10009BCE: 8A 46 01 mov al,byte ptr [esi+1] - 10009BD1: C1 E9 02 shr ecx,2 - 10009BD4: 88 47 01 mov byte ptr [edi+1],al - 10009BD7: 83 EE 03 sub esi,3 - 10009BDA: 83 EF 03 sub edi,3 - 10009BDD: 83 F9 08 cmp ecx,8 - 10009BE0: 0F 82 56 FF FF FF jb 10009B3C - 10009BE6: FD std - 10009BE7: F3 A5 rep movs dword ptr es:[edi],dword ptr [esi] - 10009BE9: FC cld - 10009BEA: FF 24 95 60 9C 00 jmp dword ptr [edx*4+10009C60h] - 10 - 10009BF1: 8D 49 00 lea ecx,[ecx] - 10009BF4: 14 9C adc al,9Ch - 10009BF6: 00 10 add byte ptr [eax],dl - 10009BF8: 1C 9C sbb al,9Ch - 10009BFA: 00 10 add byte ptr [eax],dl - 10009BFC: 24 9C and al,9Ch - 10009BFE: 00 10 add byte ptr [eax],dl - 10009C00: 2C 9C sub al,9Ch - 10009C02: 00 10 add byte ptr [eax],dl - 10009C04: 34 9C xor al,9Ch - 10009C06: 00 10 add byte ptr [eax],dl - 10009C08: 3C 9C cmp al,9Ch - 10009C0A: 00 10 add byte ptr [eax],dl - 10009C0C: 44 inc esp - 10009C0D: 9C pushfd - 10009C0E: 00 10 add byte ptr [eax],dl - 10009C10: 57 push edi - 10009C11: 9C pushfd - 10009C12: 00 10 add byte ptr [eax],dl - 10009C14: 8B 44 8E 1C mov eax,dword ptr [esi+ecx*4+1Ch] - 10009C18: 89 44 8F 1C mov dword ptr [edi+ecx*4+1Ch],eax - 10009C1C: 8B 44 8E 18 mov eax,dword ptr [esi+ecx*4+18h] - 10009C20: 89 44 8F 18 mov dword ptr [edi+ecx*4+18h],eax - 10009C24: 8B 44 8E 14 mov eax,dword ptr [esi+ecx*4+14h] - 10009C28: 89 44 8F 14 mov dword ptr [edi+ecx*4+14h],eax - 10009C2C: 8B 44 8E 10 mov eax,dword ptr [esi+ecx*4+10h] - 10009C30: 89 44 8F 10 mov dword ptr [edi+ecx*4+10h],eax - 10009C34: 8B 44 8E 0C mov eax,dword ptr [esi+ecx*4+0Ch] - 10009C38: 89 44 8F 0C mov dword ptr [edi+ecx*4+0Ch],eax - 10009C3C: 8B 44 8E 08 mov eax,dword ptr [esi+ecx*4+8] - 10009C40: 89 44 8F 08 mov dword ptr [edi+ecx*4+8],eax - 10009C44: 8B 44 8E 04 mov eax,dword ptr [esi+ecx*4+4] - 10009C48: 89 44 8F 04 mov dword ptr [edi+ecx*4+4],eax - 10009C4C: 8D 04 8D 00 00 00 lea eax,[ecx*4+00000000h] - 00 - 10009C53: 03 F0 add esi,eax - 10009C55: 03 F8 add edi,eax - 10009C57: FF 24 95 60 9C 00 jmp dword ptr [edx*4+10009C60h] - 10 - 10009C5E: 8B FF mov edi,edi - 10009C60: 70 9C jo 10009BFE - 10009C62: 00 10 add byte ptr [eax],dl - 10009C64: 78 9C js 10009C02 - 10009C66: 00 10 add byte ptr [eax],dl - 10009C68: 88 9C 00 10 9C 9C mov byte ptr [eax+eax+009C9C10h],bl - 00 - 10009C6F: 10 8B 45 08 5E 5F adc byte ptr [ebx+5F5E0845h],cl - 10009C75: C9 leave - 10009C76: C3 ret - 10009C77: 90 nop - 10009C78: 8A 46 03 mov al,byte ptr [esi+3] - 10009C7B: 88 47 03 mov byte ptr [edi+3],al - 10009C7E: 8B 45 08 mov eax,dword ptr [ebp+8] - 10009C81: 5E pop esi - 10009C82: 5F pop edi - 10009C83: C9 leave - 10009C84: C3 ret - 10009C85: 8D 49 00 lea ecx,[ecx] - 10009C88: 8A 46 03 mov al,byte ptr [esi+3] - 10009C8B: 88 47 03 mov byte ptr [edi+3],al - 10009C8E: 8A 46 02 mov al,byte ptr [esi+2] - 10009C91: 88 47 02 mov byte ptr [edi+2],al - 10009C94: 8B 45 08 mov eax,dword ptr [ebp+8] - 10009C97: 5E pop esi - 10009C98: 5F pop edi - 10009C99: C9 leave - 10009C9A: C3 ret - 10009C9B: 90 nop - 10009C9C: 8A 46 03 mov al,byte ptr [esi+3] - 10009C9F: 88 47 03 mov byte ptr [edi+3],al - 10009CA2: 8A 46 02 mov al,byte ptr [esi+2] - 10009CA5: 88 47 02 mov byte ptr [edi+2],al - 10009CA8: 8A 46 01 mov al,byte ptr [esi+1] - 10009CAB: 88 47 01 mov byte ptr [edi+1],al - 10009CAE: 8B 45 08 mov eax,dword ptr [ebp+8] - 10009CB1: 5E pop esi - 10009CB2: 5F pop edi - 10009CB3: C9 leave - 10009CB4: C3 ret - 10009CB5: 8B FF mov edi,edi - 10009CB7: 55 push ebp - 10009CB8: 8B EC mov ebp,esp - 10009CBA: 51 push ecx - 10009CBB: 53 push ebx - 10009CBC: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 10009CBF: 83 C0 0C add eax,0Ch - 10009CC2: 89 45 FC mov dword ptr [ebp-4],eax - 10009CC5: 64 8B 1D 00 00 00 mov ebx,dword ptr fs:[00000000h] - 00 - 10009CCC: 8B 03 mov eax,dword ptr [ebx] - 10009CCE: 64 A3 00 00 00 00 mov dword ptr fs:[00000000h],eax - 10009CD4: 8B 45 08 mov eax,dword ptr [ebp+8] - 10009CD7: 8B 5D 0C mov ebx,dword ptr [ebp+0Ch] - 10009CDA: 8B 6D FC mov ebp,dword ptr [ebp-4] - 10009CDD: 8B 63 FC mov esp,dword ptr [ebx-4] - 10009CE0: FF E0 jmp eax - 10009CE2: 5B pop ebx - 10009CE3: C9 leave - 10009CE4: C2 08 00 ret 8 - 10009CE7: 58 pop eax - 10009CE8: 59 pop ecx - 10009CE9: 87 04 24 xchg eax,dword ptr [esp] - 10009CEC: FF E0 jmp eax - 10009CEE: 8B FF mov edi,edi - 10009CF0: 55 push ebp - 10009CF1: 8B EC mov ebp,esp - 10009CF3: 51 push ecx - 10009CF4: 51 push ecx - 10009CF5: 53 push ebx - 10009CF6: 56 push esi - 10009CF7: 57 push edi - 10009CF8: 64 8B 35 00 00 00 mov esi,dword ptr fs:[00000000h] - 00 - 10009CFF: 89 75 FC mov dword ptr [ebp-4],esi - 10009D02: C7 45 F8 19 9D 00 mov dword ptr [ebp-8],10009D19h - 10 - 10009D09: 6A 00 push 0 - 10009D0B: FF 75 0C push dword ptr [ebp+0Ch] - 10009D0E: FF 75 F8 push dword ptr [ebp-8] - 10009D11: FF 75 08 push dword ptr [ebp+8] - 10009D14: E8 45 4F 01 00 call 1001EC5E - 10009D19: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 10009D1C: 8B 40 04 mov eax,dword ptr [eax+4] - 10009D1F: 83 E0 FD and eax,0FFFFFFFDh - 10009D22: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch] - 10009D25: 89 41 04 mov dword ptr [ecx+4],eax - 10009D28: 64 8B 3D 00 00 00 mov edi,dword ptr fs:[00000000h] - 00 - 10009D2F: 8B 5D FC mov ebx,dword ptr [ebp-4] - 10009D32: 89 3B mov dword ptr [ebx],edi - 10009D34: 64 89 1D 00 00 00 mov dword ptr fs:[00000000h],ebx - 00 - 10009D3B: 5F pop edi - 10009D3C: 5E pop esi - 10009D3D: 5B pop ebx - 10009D3E: C9 leave - 10009D3F: C2 08 00 ret 8 - 10009D42: 55 push ebp - 10009D43: 8B EC mov ebp,esp - 10009D45: 83 EC 08 sub esp,8 - 10009D48: 53 push ebx - 10009D49: 56 push esi - 10009D4A: 57 push edi - 10009D4B: FC cld - 10009D4C: 89 45 FC mov dword ptr [ebp-4],eax - 10009D4F: 33 C0 xor eax,eax - 10009D51: 50 push eax - 10009D52: 50 push eax - 10009D53: 50 push eax - 10009D54: FF 75 FC push dword ptr [ebp-4] - 10009D57: FF 75 14 push dword ptr [ebp+14h] - 10009D5A: FF 75 10 push dword ptr [ebp+10h] - 10009D5D: FF 75 0C push dword ptr [ebp+0Ch] - 10009D60: FF 75 08 push dword ptr [ebp+8] - 10009D63: E8 4D 33 00 00 call 1000D0B5 - 10009D68: 83 C4 20 add esp,20h - 10009D6B: 89 45 F8 mov dword ptr [ebp-8],eax - 10009D6E: 5F pop edi - 10009D6F: 5E pop esi - 10009D70: 5B pop ebx - 10009D71: 8B 45 F8 mov eax,dword ptr [ebp-8] - 10009D74: 8B E5 mov esp,ebp - 10009D76: 5D pop ebp - 10009D77: C3 ret - 10009D78: 8B FF mov edi,edi - 10009D7A: 55 push ebp - 10009D7B: 8B EC mov ebp,esp - 10009D7D: 56 push esi - 10009D7E: FC cld - 10009D7F: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 10009D82: 8B 4E 08 mov ecx,dword ptr [esi+8] - 10009D85: 33 CE xor ecx,esi - 10009D87: E8 0F 03 00 00 call 1000A09B - 10009D8C: 6A 00 push 0 - 10009D8E: 56 push esi - 10009D8F: FF 76 14 push dword ptr [esi+14h] - 10009D92: FF 76 0C push dword ptr [esi+0Ch] - 10009D95: 6A 00 push 0 - 10009D97: FF 75 10 push dword ptr [ebp+10h] - 10009D9A: FF 76 10 push dword ptr [esi+10h] - 10009D9D: FF 75 08 push dword ptr [ebp+8] - 10009DA0: E8 10 33 00 00 call 1000D0B5 - 10009DA5: 83 C4 20 add esp,20h - 10009DA8: 5E pop esi - 10009DA9: 5D pop ebp - 10009DAA: C3 ret - 10009DAB: 8B FF mov edi,edi - 10009DAD: 55 push ebp - 10009DAE: 8B EC mov ebp,esp - 10009DB0: 83 EC 38 sub esp,38h - 10009DB3: 53 push ebx - 10009DB4: 81 7D 08 23 01 00 cmp dword ptr [ebp+8],123h - 00 - 10009DBB: 75 12 jne 10009DCF - 10009DBD: B8 56 9E 00 10 mov eax,10009E56h - 10009DC2: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch] - 10009DC5: 89 01 mov dword ptr [ecx],eax - 10009DC7: 33 C0 xor eax,eax - 10009DC9: 40 inc eax - 10009DCA: E9 B0 00 00 00 jmp 10009E7F - 10009DCF: 83 65 D8 00 and dword ptr [ebp-28h],0 - 10009DD3: C7 45 DC 82 9E 00 mov dword ptr [ebp-24h],10009E82h - 10 - 10009DDA: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10009DDF: 8D 4D D8 lea ecx,[ebp-28h] - 10009DE2: 33 C1 xor eax,ecx - 10009DE4: 89 45 E0 mov dword ptr [ebp-20h],eax - 10009DE7: 8B 45 18 mov eax,dword ptr [ebp+18h] - 10009DEA: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 10009DED: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 10009DF0: 89 45 E8 mov dword ptr [ebp-18h],eax - 10009DF3: 8B 45 1C mov eax,dword ptr [ebp+1Ch] - 10009DF6: 89 45 EC mov dword ptr [ebp-14h],eax - 10009DF9: 8B 45 20 mov eax,dword ptr [ebp+20h] - 10009DFC: 89 45 F0 mov dword ptr [ebp-10h],eax - 10009DFF: 83 65 F4 00 and dword ptr [ebp-0Ch],0 - 10009E03: 83 65 F8 00 and dword ptr [ebp-8],0 - 10009E07: 83 65 FC 00 and dword ptr [ebp-4],0 - 10009E0B: 89 65 F4 mov dword ptr [ebp-0Ch],esp - 10009E0E: 89 6D F8 mov dword ptr [ebp-8],ebp - 10009E11: 64 A1 00 00 00 00 mov eax,dword ptr fs:[00000000h] - 10009E17: 89 45 D8 mov dword ptr [ebp-28h],eax - 10009E1A: 8D 45 D8 lea eax,[ebp-28h] - 10009E1D: 64 A3 00 00 00 00 mov dword ptr fs:[00000000h],eax - 10009E23: C7 45 C8 01 00 00 mov dword ptr [ebp-38h],1 - 00 - 10009E2A: 8B 45 08 mov eax,dword ptr [ebp+8] - 10009E2D: 89 45 CC mov dword ptr [ebp-34h],eax - 10009E30: 8B 45 10 mov eax,dword ptr [ebp+10h] - 10009E33: 89 45 D0 mov dword ptr [ebp-30h],eax - 10009E36: E8 27 36 00 00 call 1000D462 - 10009E3B: 8B 80 80 00 00 00 mov eax,dword ptr [eax+00000080h] - 10009E41: 89 45 D4 mov dword ptr [ebp-2Ch],eax - 10009E44: 8D 45 CC lea eax,[ebp-34h] - 10009E47: 50 push eax - 10009E48: 8B 45 08 mov eax,dword ptr [ebp+8] - 10009E4B: FF 30 push dword ptr [eax] - 10009E4D: FF 55 D4 call dword ptr [ebp-2Ch] - 10009E50: 59 pop ecx - 10009E51: 59 pop ecx - 10009E52: 83 65 C8 00 and dword ptr [ebp-38h],0 - 10009E56: 83 7D FC 00 cmp dword ptr [ebp-4],0 - 10009E5A: 74 17 je 10009E73 - 10009E5C: 64 8B 1D 00 00 00 mov ebx,dword ptr fs:[00000000h] - 00 - 10009E63: 8B 03 mov eax,dword ptr [ebx] - 10009E65: 8B 5D D8 mov ebx,dword ptr [ebp-28h] - 10009E68: 89 03 mov dword ptr [ebx],eax - 10009E6A: 64 89 1D 00 00 00 mov dword ptr fs:[00000000h],ebx - 00 - 10009E71: EB 09 jmp 10009E7C - 10009E73: 8B 45 D8 mov eax,dword ptr [ebp-28h] - 10009E76: 64 A3 00 00 00 00 mov dword ptr fs:[00000000h],eax - 10009E7C: 8B 45 C8 mov eax,dword ptr [ebp-38h] - 10009E7F: 5B pop ebx - 10009E80: C9 leave - 10009E81: C3 ret - 10009E82: 8B FF mov edi,edi - 10009E84: 55 push ebp - 10009E85: 8B EC mov ebp,esp - 10009E87: 51 push ecx - 10009E88: 53 push ebx - 10009E89: FC cld - 10009E8A: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 10009E8D: 8B 48 08 mov ecx,dword ptr [eax+8] - 10009E90: 33 4D 0C xor ecx,dword ptr [ebp+0Ch] - 10009E93: E8 03 02 00 00 call 1000A09B - 10009E98: 8B 45 08 mov eax,dword ptr [ebp+8] - 10009E9B: 8B 40 04 mov eax,dword ptr [eax+4] - 10009E9E: 83 E0 66 and eax,66h - 10009EA1: 74 11 je 10009EB4 - 10009EA3: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 10009EA6: C7 40 24 01 00 00 mov dword ptr [eax+24h],1 - 00 - 10009EAD: 33 C0 xor eax,eax - 10009EAF: 40 inc eax - 10009EB0: EB 6C jmp 10009F1E - 10009EB2: EB 6A jmp 10009F1E - 10009EB4: 6A 01 push 1 - 10009EB6: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 10009EB9: FF 70 18 push dword ptr [eax+18h] - 10009EBC: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 10009EBF: FF 70 14 push dword ptr [eax+14h] - 10009EC2: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 10009EC5: FF 70 0C push dword ptr [eax+0Ch] - 10009EC8: 6A 00 push 0 - 10009ECA: FF 75 10 push dword ptr [ebp+10h] - 10009ECD: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 10009ED0: FF 70 10 push dword ptr [eax+10h] - 10009ED3: FF 75 08 push dword ptr [ebp+8] - 10009ED6: E8 DA 31 00 00 call 1000D0B5 - 10009EDB: 83 C4 20 add esp,20h - 10009EDE: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 10009EE1: 83 78 24 00 cmp dword ptr [eax+24h],0 - 10009EE5: 75 0B jne 10009EF2 - 10009EE7: FF 75 08 push dword ptr [ebp+8] - 10009EEA: FF 75 0C push dword ptr [ebp+0Ch] - 10009EED: E8 FC FD FF FF call 10009CEE - 10009EF2: 6A 00 push 0 - 10009EF4: 6A 00 push 0 - 10009EF6: 6A 00 push 0 - 10009EF8: 6A 00 push 0 - 10009EFA: 6A 00 push 0 - 10009EFC: 8D 45 FC lea eax,[ebp-4] - 10009EFF: 50 push eax - 10009F00: 68 23 01 00 00 push 123h - 10009F05: E8 A1 FE FF FF call 10009DAB - 10009F0A: 83 C4 1C add esp,1Ch - 10009F0D: 8B 45 FC mov eax,dword ptr [ebp-4] - 10009F10: 8B 5D 0C mov ebx,dword ptr [ebp+0Ch] - 10009F13: 8B 63 1C mov esp,dword ptr [ebx+1Ch] - 10009F16: 8B 6B 20 mov ebp,dword ptr [ebx+20h] - 10009F19: FF E0 jmp eax - 10009F1B: 33 C0 xor eax,eax - 10009F1D: 40 inc eax - 10009F1E: 5B pop ebx - 10009F1F: C9 leave - 10009F20: C3 ret - 10009F21: 8B FF mov edi,edi - 10009F23: 55 push ebp - 10009F24: 8B EC mov ebp,esp - 10009F26: 51 push ecx - 10009F27: 53 push ebx - 10009F28: 56 push esi - 10009F29: 57 push edi - 10009F2A: 8B 7D 08 mov edi,dword ptr [ebp+8] - 10009F2D: 8B 47 10 mov eax,dword ptr [edi+10h] - 10009F30: 8B 77 0C mov esi,dword ptr [edi+0Ch] - 10009F33: 89 45 FC mov dword ptr [ebp-4],eax - 10009F36: 8B DE mov ebx,esi - 10009F38: EB 2D jmp 10009F67 - 10009F3A: 83 FE FF cmp esi,0FFFFFFFFh - 10009F3D: 75 05 jne 10009F44 - 10009F3F: E8 AE 38 00 00 call 1000D7F2 - 10009F44: 8B 4D FC mov ecx,dword ptr [ebp-4] - 10009F47: 4E dec esi - 10009F48: 8B C6 mov eax,esi - 10009F4A: 6B C0 14 imul eax,eax,14h - 10009F4D: 03 C1 add eax,ecx - 10009F4F: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 10009F52: 39 48 04 cmp dword ptr [eax+4],ecx - 10009F55: 7D 05 jge 10009F5C - 10009F57: 3B 48 08 cmp ecx,dword ptr [eax+8] - 10009F5A: 7E 05 jle 10009F61 - 10009F5C: 83 FE FF cmp esi,0FFFFFFFFh - 10009F5F: 75 09 jne 10009F6A - 10009F61: FF 4D 0C dec dword ptr [ebp+0Ch] - 10009F64: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 10009F67: 89 75 08 mov dword ptr [ebp+8],esi - 10009F6A: 83 7D 0C 00 cmp dword ptr [ebp+0Ch],0 - 10009F6E: 7D CA jge 10009F3A - 10009F70: 8B 45 14 mov eax,dword ptr [ebp+14h] - 10009F73: 46 inc esi - 10009F74: 89 30 mov dword ptr [eax],esi - 10009F76: 8B 45 18 mov eax,dword ptr [ebp+18h] - 10009F79: 89 18 mov dword ptr [eax],ebx - 10009F7B: 3B 5F 0C cmp ebx,dword ptr [edi+0Ch] - 10009F7E: 77 04 ja 10009F84 - 10009F80: 3B F3 cmp esi,ebx - 10009F82: 76 05 jbe 10009F89 - 10009F84: E8 69 38 00 00 call 1000D7F2 - 10009F89: 8B C6 mov eax,esi - 10009F8B: 6B C0 14 imul eax,eax,14h - 10009F8E: 03 45 FC add eax,dword ptr [ebp-4] - 10009F91: 5F pop edi - 10009F92: 5E pop esi - 10009F93: 5B pop ebx - 10009F94: C9 leave - 10009F95: C3 ret - 10009F96: 8B FF mov edi,edi - 10009F98: 55 push ebp - 10009F99: 8B EC mov ebp,esp - 10009F9B: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 10009F9E: 56 push esi - 10009F9F: 8B 75 08 mov esi,dword ptr [ebp+8] - 10009FA2: 89 06 mov dword ptr [esi],eax - 10009FA4: E8 B9 34 00 00 call 1000D462 - 10009FA9: 8B 80 98 00 00 00 mov eax,dword ptr [eax+00000098h] - 10009FAF: 89 46 04 mov dword ptr [esi+4],eax - 10009FB2: E8 AB 34 00 00 call 1000D462 - 10009FB7: 89 B0 98 00 00 00 mov dword ptr [eax+00000098h],esi - 10009FBD: 8B C6 mov eax,esi - 10009FBF: 5E pop esi - 10009FC0: 5D pop ebp - 10009FC1: C3 ret - 10009FC2: 8B FF mov edi,edi - 10009FC4: 55 push ebp - 10009FC5: 8B EC mov ebp,esp - 10009FC7: E8 96 34 00 00 call 1000D462 - 10009FCC: 8B 80 98 00 00 00 mov eax,dword ptr [eax+00000098h] - 10009FD2: EB 0A jmp 10009FDE - 10009FD4: 8B 08 mov ecx,dword ptr [eax] - 10009FD6: 3B 4D 08 cmp ecx,dword ptr [ebp+8] - 10009FD9: 74 0A je 10009FE5 - 10009FDB: 8B 40 04 mov eax,dword ptr [eax+4] - 10009FDE: 85 C0 test eax,eax - 10009FE0: 75 F2 jne 10009FD4 - 10009FE2: 40 inc eax - 10009FE3: 5D pop ebp - 10009FE4: C3 ret - 10009FE5: 33 C0 xor eax,eax - 10009FE7: 5D pop ebp - 10009FE8: C3 ret - 10009FE9: 8B FF mov edi,edi - 10009FEB: 55 push ebp - 10009FEC: 8B EC mov ebp,esp - 10009FEE: 56 push esi - 10009FEF: E8 6E 34 00 00 call 1000D462 - 10009FF4: 8B 75 08 mov esi,dword ptr [ebp+8] - 10009FF7: 3B B0 98 00 00 00 cmp esi,dword ptr [eax+00000098h] - 10009FFD: 75 11 jne 1000A010 - 10009FFF: E8 5E 34 00 00 call 1000D462 - 1000A004: 8B 4E 04 mov ecx,dword ptr [esi+4] - 1000A007: 89 88 98 00 00 00 mov dword ptr [eax+00000098h],ecx - 1000A00D: 5E pop esi - 1000A00E: 5D pop ebp - 1000A00F: C3 ret - 1000A010: E8 4D 34 00 00 call 1000D462 - 1000A015: 8B 80 98 00 00 00 mov eax,dword ptr [eax+00000098h] - 1000A01B: EB 09 jmp 1000A026 - 1000A01D: 8B 48 04 mov ecx,dword ptr [eax+4] - 1000A020: 3B F1 cmp esi,ecx - 1000A022: 74 0F je 1000A033 - 1000A024: 8B C1 mov eax,ecx - 1000A026: 83 78 04 00 cmp dword ptr [eax+4],0 - 1000A02A: 75 F1 jne 1000A01D - 1000A02C: 5E pop esi - 1000A02D: 5D pop ebp - 1000A02E: E9 BF 37 00 00 jmp 1000D7F2 - 1000A033: 8B 4E 04 mov ecx,dword ptr [esi+4] - 1000A036: 89 48 04 mov dword ptr [eax+4],ecx - 1000A039: EB D2 jmp 1000A00D - 1000A03B: 8B FF mov edi,edi - 1000A03D: 55 push ebp - 1000A03E: 8B EC mov ebp,esp - 1000A040: 83 EC 18 sub esp,18h - 1000A043: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1000A048: 83 65 E8 00 and dword ptr [ebp-18h],0 - 1000A04C: 8D 4D E8 lea ecx,[ebp-18h] - 1000A04F: 33 C1 xor eax,ecx - 1000A051: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000A054: 89 45 F0 mov dword ptr [ebp-10h],eax - 1000A057: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 1000A05A: 89 45 F4 mov dword ptr [ebp-0Ch],eax - 1000A05D: 8B 45 14 mov eax,dword ptr [ebp+14h] - 1000A060: 40 inc eax - 1000A061: C7 45 EC 78 9D 00 mov dword ptr [ebp-14h],10009D78h - 10 - 1000A068: 89 4D F8 mov dword ptr [ebp-8],ecx - 1000A06B: 89 45 FC mov dword ptr [ebp-4],eax - 1000A06E: 64 A1 00 00 00 00 mov eax,dword ptr fs:[00000000h] - 1000A074: 89 45 E8 mov dword ptr [ebp-18h],eax - 1000A077: 8D 45 E8 lea eax,[ebp-18h] - 1000A07A: 64 A3 00 00 00 00 mov dword ptr fs:[00000000h],eax - 1000A080: FF 75 18 push dword ptr [ebp+18h] - 1000A083: 51 push ecx - 1000A084: FF 75 10 push dword ptr [ebp+10h] - 1000A087: E8 B4 37 00 00 call 1000D840 - 1000A08C: 8B C8 mov ecx,eax - 1000A08E: 8B 45 E8 mov eax,dword ptr [ebp-18h] - 1000A091: 64 A3 00 00 00 00 mov dword ptr fs:[00000000h],eax - 1000A097: 8B C1 mov eax,ecx - 1000A099: C9 leave - 1000A09A: C3 ret - 1000A09B: 3B 0D 10 49 02 10 cmp ecx,dword ptr ds:[10024910h] - 1000A0A1: 75 02 jne 1000A0A5 - 1000A0A3: F3 C3 rep ret - 1000A0A5: E9 E2 37 00 00 jmp 1000D88C - 1000A0AA: 8B FF mov edi,edi - 1000A0AC: 51 push ecx - 1000A0AD: C7 01 9C F8 01 10 mov dword ptr [ecx],1001F89Ch - 1000A0B3: E8 DA 38 00 00 call 1000D992 - 1000A0B8: 59 pop ecx - 1000A0B9: C3 ret - 1000A0BA: 8B FF mov edi,edi - 1000A0BC: 55 push ebp - 1000A0BD: 8B EC mov ebp,esp - 1000A0BF: 56 push esi - 1000A0C0: 8B F1 mov esi,ecx - 1000A0C2: E8 E3 FF FF FF call 1000A0AA - 1000A0C7: F6 45 08 01 test byte ptr [ebp+8],1 - 1000A0CB: 74 07 je 1000A0D4 - 1000A0CD: 56 push esi - 1000A0CE: E8 28 00 00 00 call 1000A0FB - 1000A0D3: 59 pop ecx - 1000A0D4: 8B C6 mov eax,esi - 1000A0D6: 5E pop esi - 1000A0D7: 5D pop ebp - 1000A0D8: C2 04 00 ret 4 - 1000A0DB: 8B FF mov edi,edi - 1000A0DD: 55 push ebp - 1000A0DE: 8B EC mov ebp,esp - 1000A0E0: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000A0E3: 83 C1 09 add ecx,9 - 1000A0E6: 51 push ecx - 1000A0E7: 83 C0 09 add eax,9 - 1000A0EA: 50 push eax - 1000A0EB: E8 20 39 00 00 call 1000DA10 - 1000A0F0: F7 D8 neg eax - 1000A0F2: 59 pop ecx - 1000A0F3: 1B C0 sbb eax,eax - 1000A0F5: 59 pop ecx - 1000A0F6: 40 inc eax - 1000A0F7: 5D pop ebp - 1000A0F8: C2 04 00 ret 4 - 1000A0FB: 8B FF mov edi,edi - 1000A0FD: 55 push ebp - 1000A0FE: 8B EC mov ebp,esp - 1000A100: 5D pop ebp - 1000A101: E9 2E 02 00 00 jmp 1000A334 - 1000A106: 8B FF mov edi,edi - 1000A108: 56 push esi - 1000A109: 6A 01 push 1 - 1000A10B: 68 34 49 02 10 push 10024934h - 1000A110: 8B F1 mov esi,ecx - 1000A112: E8 D4 39 00 00 call 1000DAEB - 1000A117: C7 06 A4 F8 01 10 mov dword ptr [esi],1001F8A4h - 1000A11D: 8B C6 mov eax,esi - 1000A11F: 5E pop esi - 1000A120: C3 ret - 1000A121: C7 01 A4 F8 01 10 mov dword ptr [ecx],1001F8A4h - 1000A127: E9 39 3A 00 00 jmp 1000DB65 - 1000A12C: 8B FF mov edi,edi - 1000A12E: 55 push ebp - 1000A12F: 8B EC mov ebp,esp - 1000A131: 56 push esi - 1000A132: 8B F1 mov esi,ecx - 1000A134: C7 06 A4 F8 01 10 mov dword ptr [esi],1001F8A4h - 1000A13A: E8 26 3A 00 00 call 1000DB65 - 1000A13F: F6 45 08 01 test byte ptr [ebp+8],1 - 1000A143: 74 07 je 1000A14C - 1000A145: 56 push esi - 1000A146: E8 B0 FF FF FF call 1000A0FB - 1000A14B: 59 pop ecx - 1000A14C: 8B C6 mov eax,esi - 1000A14E: 5E pop esi - 1000A14F: 5D pop ebp - 1000A150: C2 04 00 ret 4 - 1000A153: 8B FF mov edi,edi - 1000A155: 55 push ebp - 1000A156: 8B EC mov ebp,esp - 1000A158: 56 push esi - 1000A159: FF 75 08 push dword ptr [ebp+8] - 1000A15C: 8B F1 mov esi,ecx - 1000A15E: E8 A5 39 00 00 call 1000DB08 - 1000A163: C7 06 A4 F8 01 10 mov dword ptr [esi],1001F8A4h - 1000A169: 8B C6 mov eax,esi - 1000A16B: 5E pop esi - 1000A16C: 5D pop ebp - 1000A16D: C2 04 00 ret 4 - 1000A170: 8B FF mov edi,edi - 1000A172: 55 push ebp - 1000A173: 8B EC mov ebp,esp - 1000A175: 83 EC 0C sub esp,0Ch - 1000A178: EB 0D jmp 1000A187 - 1000A17A: FF 75 08 push dword ptr [ebp+8] - 1000A17D: E8 8D 3C 00 00 call 1000DE0F - 1000A182: 59 pop ecx - 1000A183: 85 C0 test eax,eax - 1000A185: 74 0F je 1000A196 - 1000A187: FF 75 08 push dword ptr [ebp+8] - 1000A18A: E8 A7 3B 00 00 call 1000DD36 - 1000A18F: 59 pop ecx - 1000A190: 85 C0 test eax,eax - 1000A192: 74 E6 je 1000A17A - 1000A194: C9 leave - 1000A195: C3 ret - 1000A196: F6 05 18 61 02 10 test byte ptr ds:[10026118h],1 - 01 - 1000A19D: BE 0C 61 02 10 mov esi,1002610Ch - 1000A1A2: 75 19 jne 1000A1BD - 1000A1A4: 83 0D 18 61 02 10 or dword ptr ds:[10026118h],1 - 01 - 1000A1AB: 8B CE mov ecx,esi - 1000A1AD: E8 54 FF FF FF call 1000A106 - 1000A1B2: 68 A1 ED 01 10 push 1001EDA1h - 1000A1B7: E8 14 3B 00 00 call 1000DCD0 - 1000A1BC: 59 pop ecx - 1000A1BD: 56 push esi - 1000A1BE: 8D 4D F4 lea ecx,[ebp-0Ch] - 1000A1C1: E8 8D FF FF FF call 1000A153 - 1000A1C6: 68 D0 18 02 10 push 100218D0h - 1000A1CB: 8D 45 F4 lea eax,[ebp-0Ch] - 1000A1CE: 50 push eax - 1000A1CF: E8 63 3C 00 00 call 1000DE37 - 1000A1D4: CC int 3 - 1000A1D5: FF 35 5C 68 02 10 push dword ptr ds:[1002685Ch] - 1000A1DB: E8 36 30 00 00 call 1000D216 - 1000A1E0: 59 pop ecx - 1000A1E1: 85 C0 test eax,eax - 1000A1E3: 74 02 je 1000A1E7 - 1000A1E5: FF D0 call eax - 1000A1E7: 6A 19 push 19h - 1000A1E9: E8 CD 3D 00 00 call 1000DFBB - 1000A1EE: 6A 01 push 1 - 1000A1F0: 6A 00 push 0 - 1000A1F2: E8 A3 3D 00 00 call 1000DF9A - 1000A1F7: 83 C4 0C add esp,0Ch - 1000A1FA: E9 84 3C 00 00 jmp 1000DE83 - 1000A1FF: 8B FF mov edi,edi - 1000A201: 55 push ebp - 1000A202: 8B EC mov ebp,esp - 1000A204: 8D 45 14 lea eax,[ebp+14h] - 1000A207: 50 push eax - 1000A208: 6A 00 push 0 - 1000A20A: FF 75 10 push dword ptr [ebp+10h] - 1000A20D: FF 75 0C push dword ptr [ebp+0Ch] - 1000A210: FF 75 08 push dword ptr [ebp+8] - 1000A213: E8 72 4F 00 00 call 1000F18A - 1000A218: 83 C4 14 add esp,14h - 1000A21B: 5D pop ebp - 1000A21C: C3 ret - 1000A21D: 8B FF mov edi,edi - 1000A21F: 55 push ebp - 1000A220: 8B EC mov ebp,esp - 1000A222: 51 push ecx - 1000A223: 51 push ecx - 1000A224: 8D 45 F8 lea eax,[ebp-8] - 1000A227: 50 push eax - 1000A228: FF 15 58 F0 01 10 call dword ptr ds:[1001F058h] - 1000A22E: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1000A231: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1000A234: 6A 00 push 0 - 1000A236: 05 00 80 C1 2A add eax,2AC18000h - 1000A23B: 68 80 96 98 00 push 989680h - 1000A240: 81 D1 21 4E 62 FE adc ecx,0FE624E21h - 1000A246: 51 push ecx - 1000A247: 50 push eax - 1000A248: E8 D3 4F 00 00 call 1000F220 - 1000A24D: 83 FA 07 cmp edx,7 - 1000A250: 7C 0E jl 1000A260 - 1000A252: 7F 07 jg 1000A25B - 1000A254: 3D FF 6F 40 93 cmp eax,93406FFFh - 1000A259: 76 05 jbe 1000A260 - 1000A25B: 83 C8 FF or eax,0FFFFFFFFh - 1000A25E: 8B D0 mov edx,eax - 1000A260: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000A263: 85 C9 test ecx,ecx - 1000A265: 74 05 je 1000A26C - 1000A267: 89 01 mov dword ptr [ecx],eax - 1000A269: 89 51 04 mov dword ptr [ecx+4],edx - 1000A26C: C9 leave - 1000A26D: C3 ret - 1000A26E: CC int 3 - 1000A26F: CC int 3 - 1000A270: 8B 54 24 0C mov edx,dword ptr [esp+0Ch] - 1000A274: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 1000A278: 85 D2 test edx,edx - 1000A27A: 74 69 je 1000A2E5 - 1000A27C: 33 C0 xor eax,eax - 1000A27E: 8A 44 24 08 mov al,byte ptr [esp+8] - 1000A282: 84 C0 test al,al - 1000A284: 75 16 jne 1000A29C - 1000A286: 81 FA 00 01 00 00 cmp edx,100h - 1000A28C: 72 0E jb 1000A29C - 1000A28E: 83 3D 1C 6D 02 10 cmp dword ptr ds:[10026D1Ch],0 - 00 - 1000A295: 74 05 je 1000A29C - 1000A297: E9 43 50 00 00 jmp 1000F2DF - 1000A29C: 57 push edi - 1000A29D: 8B F9 mov edi,ecx - 1000A29F: 83 FA 04 cmp edx,4 - 1000A2A2: 72 31 jb 1000A2D5 - 1000A2A4: F7 D9 neg ecx - 1000A2A6: 83 E1 03 and ecx,3 - 1000A2A9: 74 0C je 1000A2B7 - 1000A2AB: 2B D1 sub edx,ecx - 1000A2AD: 88 07 mov byte ptr [edi],al - 1000A2AF: 83 C7 01 add edi,1 - 1000A2B2: 83 E9 01 sub ecx,1 - 1000A2B5: 75 F6 jne 1000A2AD - 1000A2B7: 8B C8 mov ecx,eax - 1000A2B9: C1 E0 08 shl eax,8 - 1000A2BC: 03 C1 add eax,ecx - 1000A2BE: 8B C8 mov ecx,eax - 1000A2C0: C1 E0 10 shl eax,10h - 1000A2C3: 03 C1 add eax,ecx - 1000A2C5: 8B CA mov ecx,edx - 1000A2C7: 83 E2 03 and edx,3 - 1000A2CA: C1 E9 02 shr ecx,2 - 1000A2CD: 74 06 je 1000A2D5 - 1000A2CF: F3 AB rep stos dword ptr es:[edi] - 1000A2D1: 85 D2 test edx,edx - 1000A2D3: 74 0A je 1000A2DF - 1000A2D5: 88 07 mov byte ptr [edi],al - 1000A2D7: 83 C7 01 add edi,1 - 1000A2DA: 83 EA 01 sub edx,1 - 1000A2DD: 75 F6 jne 1000A2D5 - 1000A2DF: 8B 44 24 08 mov eax,dword ptr [esp+8] - 1000A2E3: 5F pop edi - 1000A2E4: C3 ret - 1000A2E5: 8B 44 24 04 mov eax,dword ptr [esp+4] - 1000A2E9: C3 ret - 1000A2EA: 8B FF mov edi,edi - 1000A2EC: 55 push ebp - 1000A2ED: 8B EC mov ebp,esp - 1000A2EF: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 1000A2F2: 56 push esi - 1000A2F3: 57 push edi - 1000A2F4: 8B 7D 08 mov edi,dword ptr [ebp+8] - 1000A2F7: 8B F7 mov esi,edi - 1000A2F9: 85 C9 test ecx,ecx - 1000A2FB: 74 31 je 1000A32E - 1000A2FD: 8B 55 0C mov edx,dword ptr [ebp+0Ch] - 1000A300: 0F B7 02 movzx eax,word ptr [edx] - 1000A303: 66 89 07 mov word ptr [edi],ax - 1000A306: 47 inc edi - 1000A307: 47 inc edi - 1000A308: 42 inc edx - 1000A309: 42 inc edx - 1000A30A: 66 85 C0 test ax,ax - 1000A30D: 74 03 je 1000A312 - 1000A30F: 49 dec ecx - 1000A310: 75 EE jne 1000A300 - 1000A312: 85 C9 test ecx,ecx - 1000A314: 74 18 je 1000A32E - 1000A316: 49 dec ecx - 1000A317: 74 15 je 1000A32E - 1000A319: 33 C0 xor eax,eax - 1000A31B: 0F B7 D0 movzx edx,ax - 1000A31E: 8B C2 mov eax,edx - 1000A320: C1 E2 10 shl edx,10h - 1000A323: 0B C2 or eax,edx - 1000A325: D1 E9 shr ecx,1 - 1000A327: F3 AB rep stos dword ptr es:[edi] - 1000A329: 13 C9 adc ecx,ecx - 1000A32B: 66 F3 AB rep stos word ptr es:[edi] - 1000A32E: 5F pop edi - 1000A32F: 8B C6 mov eax,esi - 1000A331: 5E pop esi - 1000A332: 5D pop ebp - 1000A333: C3 ret - 1000A334: 6A 0C push 0Ch - 1000A336: 68 28 19 02 10 push 10021928h - 1000A33B: E8 48 5D 00 00 call 10010088 - 1000A340: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000A343: 85 F6 test esi,esi - 1000A345: 74 75 je 1000A3BC - 1000A347: 83 3D 18 6D 02 10 cmp dword ptr ds:[10026D18h],3 - 03 - 1000A34E: 75 43 jne 1000A393 - 1000A350: 6A 04 push 4 - 1000A352: E8 37 52 00 00 call 1000F58E - 1000A357: 59 pop ecx - 1000A358: 83 65 FC 00 and dword ptr [ebp-4],0 - 1000A35C: 56 push esi - 1000A35D: E8 5F 52 00 00 call 1000F5C1 - 1000A362: 59 pop ecx - 1000A363: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1000A366: 85 C0 test eax,eax - 1000A368: 74 09 je 1000A373 - 1000A36A: 56 push esi - 1000A36B: 50 push eax - 1000A36C: E8 80 52 00 00 call 1000F5F1 - 1000A371: 59 pop ecx - 1000A372: 59 pop ecx - 1000A373: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000A37A: E8 0B 00 00 00 call 1000A38A - 1000A37F: 83 7D E4 00 cmp dword ptr [ebp-1Ch],0 - 1000A383: 75 37 jne 1000A3BC - 1000A385: FF 75 08 push dword ptr [ebp+8] - 1000A388: EB 0A jmp 1000A394 - 1000A38A: 6A 04 push 4 - 1000A38C: E8 23 51 00 00 call 1000F4B4 - 1000A391: 59 pop ecx - 1000A392: C3 ret - 1000A393: 56 push esi - 1000A394: 6A 00 push 0 - 1000A396: FF 35 64 68 02 10 push dword ptr ds:[10026864h] - 1000A39C: FF 15 5C F0 01 10 call dword ptr ds:[1001F05Ch] - 1000A3A2: 85 C0 test eax,eax - 1000A3A4: 75 16 jne 1000A3BC - 1000A3A6: E8 9E 4C 00 00 call 1000F049 - 1000A3AB: 8B F0 mov esi,eax - 1000A3AD: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 1000A3B3: 50 push eax - 1000A3B4: E8 4E 4C 00 00 call 1000F007 - 1000A3B9: 89 06 mov dword ptr [esi],eax - 1000A3BB: 59 pop ecx - 1000A3BC: E8 0C 5D 00 00 call 100100CD - 1000A3C1: C3 ret - 1000A3C2: 8B FF mov edi,edi - 1000A3C4: 55 push ebp - 1000A3C5: 8B EC mov ebp,esp - 1000A3C7: 83 EC 14 sub esp,14h - 1000A3CA: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1000A3CF: 33 C5 xor eax,ebp - 1000A3D1: 89 45 FC mov dword ptr [ebp-4],eax - 1000A3D4: 53 push ebx - 1000A3D5: 56 push esi - 1000A3D6: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000A3D9: 33 DB xor ebx,ebx - 1000A3DB: 57 push edi - 1000A3DC: 8B 7D 0C mov edi,dword ptr [ebp+0Ch] - 1000A3DF: 3B F3 cmp esi,ebx - 1000A3E1: 74 33 je 1000A416 - 1000A3E3: 56 push esi - 1000A3E4: E8 5C 5F 00 00 call 10010345 - 1000A3E9: 59 pop ecx - 1000A3EA: 85 C0 test eax,eax - 1000A3EC: 75 2F jne 1000A41D - 1000A3EE: E8 69 4C 00 00 call 1000F05C - 1000A3F3: C7 00 0F 00 00 00 mov dword ptr [eax],0Fh - 1000A3F9: E8 4B 4C 00 00 call 1000F049 - 1000A3FE: C7 00 0D 00 00 00 mov dword ptr [eax],0Dh - 1000A404: 53 push ebx - 1000A405: 53 push ebx - 1000A406: 53 push ebx - 1000A407: 53 push ebx - 1000A408: 53 push ebx - 1000A409: E8 D3 4B 00 00 call 1000EFE1 - 1000A40E: 83 C4 14 add esp,14h - 1000A411: E9 E7 00 00 00 jmp 1000A4FD - 1000A416: E8 61 5E 00 00 call 1001027C - 1000A41B: 8B F0 mov esi,eax - 1000A41D: 3B FB cmp edi,ebx - 1000A41F: 74 1E je 1000A43F - 1000A421: 8B 45 10 mov eax,dword ptr [ebp+10h] - 1000A424: 3B C3 cmp eax,ebx - 1000A426: 7F 0D jg 1000A435 - 1000A428: E8 1C 4C 00 00 call 1000F049 - 1000A42D: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1000A433: EB CF jmp 1000A404 - 1000A435: 89 45 F0 mov dword ptr [ebp-10h],eax - 1000A438: 33 C0 xor eax,eax - 1000A43A: 66 89 07 mov word ptr [edi],ax - 1000A43D: EB 03 jmp 1000A442 - 1000A43F: 89 5D F0 mov dword ptr [ebp-10h],ebx - 1000A442: 3B F3 cmp esi,ebx - 1000A444: 74 1D je 1000A463 - 1000A446: 6A 3A push 3Ah - 1000A448: 58 pop eax - 1000A449: 66 89 45 F6 mov word ptr [ebp-0Ah],ax - 1000A44D: 6A 2E push 2Eh - 1000A44F: 58 pop eax - 1000A450: 83 C6 40 add esi,40h - 1000A453: 66 89 45 F8 mov word ptr [ebp-8],ax - 1000A457: 33 C0 xor eax,eax - 1000A459: 66 89 75 F4 mov word ptr [ebp-0Ch],si - 1000A45D: 66 89 45 FA mov word ptr [ebp-6],ax - 1000A461: EB 0D jmp 1000A470 - 1000A463: 6A 2E push 2Eh - 1000A465: 58 pop eax - 1000A466: 66 89 45 F4 mov word ptr [ebp-0Ch],ax - 1000A46A: 33 C0 xor eax,eax - 1000A46C: 66 89 45 F6 mov word ptr [ebp-0Ah],ax - 1000A470: 8B 35 60 F0 01 10 mov esi,dword ptr ds:[1001F060h] - 1000A476: 8D 45 EC lea eax,[ebp-14h] - 1000A479: 50 push eax - 1000A47A: 57 push edi - 1000A47B: FF 75 F0 push dword ptr [ebp-10h] - 1000A47E: 8D 45 F4 lea eax,[ebp-0Ch] - 1000A481: 50 push eax - 1000A482: FF D6 call esi - 1000A484: 3B C3 cmp eax,ebx - 1000A486: 74 68 je 1000A4F0 - 1000A488: 3B FB cmp edi,ebx - 1000A48A: 74 1B je 1000A4A7 - 1000A48C: 3B 45 F0 cmp eax,dword ptr [ebp-10h] - 1000A48F: 7D 04 jge 1000A495 - 1000A491: 8B C7 mov eax,edi - 1000A493: EB 6A jmp 1000A4FF - 1000A495: E8 AF 4B 00 00 call 1000F049 - 1000A49A: C7 00 22 00 00 00 mov dword ptr [eax],22h - 1000A4A0: 33 C0 xor eax,eax - 1000A4A2: 66 89 07 mov word ptr [edi],ax - 1000A4A5: EB 56 jmp 1000A4FD - 1000A4A7: 3B 45 10 cmp eax,dword ptr [ebp+10h] - 1000A4AA: 7E 03 jle 1000A4AF - 1000A4AC: 89 45 10 mov dword ptr [ebp+10h],eax - 1000A4AF: 6A 02 push 2 - 1000A4B1: FF 75 10 push dword ptr [ebp+10h] - 1000A4B4: E8 47 0A 00 00 call 1000AF00 - 1000A4B9: 8B F8 mov edi,eax - 1000A4BB: 59 pop ecx - 1000A4BC: 59 pop ecx - 1000A4BD: 3B FB cmp edi,ebx - 1000A4BF: 75 18 jne 1000A4D9 - 1000A4C1: E8 83 4B 00 00 call 1000F049 - 1000A4C6: C7 00 0C 00 00 00 mov dword ptr [eax],0Ch - 1000A4CC: E8 8B 4B 00 00 call 1000F05C - 1000A4D1: C7 00 08 00 00 00 mov dword ptr [eax],8 - 1000A4D7: EB 24 jmp 1000A4FD - 1000A4D9: 8D 45 EC lea eax,[ebp-14h] - 1000A4DC: 50 push eax - 1000A4DD: 57 push edi - 1000A4DE: FF 75 10 push dword ptr [ebp+10h] - 1000A4E1: 8D 45 F4 lea eax,[ebp-0Ch] - 1000A4E4: 50 push eax - 1000A4E5: FF D6 call esi - 1000A4E7: 3B C3 cmp eax,ebx - 1000A4E9: 74 05 je 1000A4F0 - 1000A4EB: 3B 45 10 cmp eax,dword ptr [ebp+10h] - 1000A4EE: 7C A1 jl 1000A491 - 1000A4F0: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 1000A4F6: 50 push eax - 1000A4F7: E8 73 4B 00 00 call 1000F06F - 1000A4FC: 59 pop ecx - 1000A4FD: 33 C0 xor eax,eax - 1000A4FF: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1000A502: 5F pop edi - 1000A503: 5E pop esi - 1000A504: 33 CD xor ecx,ebp - 1000A506: 5B pop ebx - 1000A507: E8 8F FB FF FF call 1000A09B - 1000A50C: C9 leave - 1000A50D: C3 ret - 1000A50E: 6A 0C push 0Ch - 1000A510: 68 48 19 02 10 push 10021948h - 1000A515: E8 6E 5B 00 00 call 10010088 - 1000A51A: 6A 07 push 7 - 1000A51C: E8 6D 50 00 00 call 1000F58E - 1000A521: 59 pop ecx - 1000A522: 83 65 FC 00 and dword ptr [ebp-4],0 - 1000A526: FF 75 0C push dword ptr [ebp+0Ch] - 1000A529: FF 75 08 push dword ptr [ebp+8] - 1000A52C: 6A 00 push 0 - 1000A52E: E8 8F FE FF FF call 1000A3C2 - 1000A533: 83 C4 0C add esp,0Ch - 1000A536: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1000A539: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000A540: E8 09 00 00 00 call 1000A54E - 1000A545: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 1000A548: E8 80 5B 00 00 call 100100CD - 1000A54D: C3 ret - 1000A54E: 6A 07 push 7 - 1000A550: E8 5F 4F 00 00 call 1000F4B4 - 1000A555: 59 pop ecx - 1000A556: C3 ret - 1000A557: 8B FF mov edi,edi - 1000A559: 55 push ebp - 1000A55A: 8B EC mov ebp,esp - 1000A55C: 53 push ebx - 1000A55D: 56 push esi - 1000A55E: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000A561: 57 push edi - 1000A562: 33 FF xor edi,edi - 1000A564: 83 CB FF or ebx,0FFFFFFFFh - 1000A567: 3B F7 cmp esi,edi - 1000A569: 75 1C jne 1000A587 - 1000A56B: E8 D9 4A 00 00 call 1000F049 - 1000A570: 57 push edi - 1000A571: 57 push edi - 1000A572: 57 push edi - 1000A573: 57 push edi - 1000A574: 57 push edi - 1000A575: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1000A57B: E8 61 4A 00 00 call 1000EFE1 - 1000A580: 83 C4 14 add esp,14h - 1000A583: 0B C3 or eax,ebx - 1000A585: EB 42 jmp 1000A5C9 - 1000A587: F6 46 0C 83 test byte ptr [esi+0Ch],83h - 1000A58B: 74 37 je 1000A5C4 - 1000A58D: 56 push esi - 1000A58E: E8 B7 5F 00 00 call 1001054A - 1000A593: 56 push esi - 1000A594: 8B D8 mov ebx,eax - 1000A596: E8 7E 5F 00 00 call 10010519 - 1000A59B: 56 push esi - 1000A59C: E8 46 5F 00 00 call 100104E7 - 1000A5A1: 50 push eax - 1000A5A2: E8 73 5E 00 00 call 1001041A - 1000A5A7: 83 C4 10 add esp,10h - 1000A5AA: 85 C0 test eax,eax - 1000A5AC: 7D 05 jge 1000A5B3 - 1000A5AE: 83 CB FF or ebx,0FFFFFFFFh - 1000A5B1: EB 11 jmp 1000A5C4 - 1000A5B3: 8B 46 1C mov eax,dword ptr [esi+1Ch] - 1000A5B6: 3B C7 cmp eax,edi - 1000A5B8: 74 0A je 1000A5C4 - 1000A5BA: 50 push eax - 1000A5BB: E8 74 FD FF FF call 1000A334 - 1000A5C0: 59 pop ecx - 1000A5C1: 89 7E 1C mov dword ptr [esi+1Ch],edi - 1000A5C4: 89 7E 0C mov dword ptr [esi+0Ch],edi - 1000A5C7: 8B C3 mov eax,ebx - 1000A5C9: 5F pop edi - 1000A5CA: 5E pop esi - 1000A5CB: 5B pop ebx - 1000A5CC: 5D pop ebp - 1000A5CD: C3 ret - 1000A5CE: 6A 0C push 0Ch - 1000A5D0: 68 68 19 02 10 push 10021968h - 1000A5D5: E8 AE 5A 00 00 call 10010088 - 1000A5DA: 83 4D E4 FF or dword ptr [ebp-1Ch],0FFFFFFFFh - 1000A5DE: 33 C0 xor eax,eax - 1000A5E0: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000A5E3: 33 FF xor edi,edi - 1000A5E5: 3B F7 cmp esi,edi - 1000A5E7: 0F 95 C0 setne al - 1000A5EA: 3B C7 cmp eax,edi - 1000A5EC: 75 1D jne 1000A60B - 1000A5EE: E8 56 4A 00 00 call 1000F049 - 1000A5F3: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1000A5F9: 57 push edi - 1000A5FA: 57 push edi - 1000A5FB: 57 push edi - 1000A5FC: 57 push edi - 1000A5FD: 57 push edi - 1000A5FE: E8 DE 49 00 00 call 1000EFE1 - 1000A603: 83 C4 14 add esp,14h - 1000A606: 83 C8 FF or eax,0FFFFFFFFh - 1000A609: EB 0C jmp 1000A617 - 1000A60B: F6 46 0C 40 test byte ptr [esi+0Ch],40h - 1000A60F: 74 0C je 1000A61D - 1000A611: 89 7E 0C mov dword ptr [esi+0Ch],edi - 1000A614: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 1000A617: E8 B1 5A 00 00 call 100100CD - 1000A61C: C3 ret - 1000A61D: 56 push esi - 1000A61E: E8 C1 05 00 00 call 1000ABE4 - 1000A623: 59 pop ecx - 1000A624: 89 7D FC mov dword ptr [ebp-4],edi - 1000A627: 56 push esi - 1000A628: E8 2A FF FF FF call 1000A557 - 1000A62D: 59 pop ecx - 1000A62E: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1000A631: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000A638: E8 05 00 00 00 call 1000A642 - 1000A63D: EB D5 jmp 1000A614 - 1000A63F: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000A642: 56 push esi - 1000A643: E8 0F 06 00 00 call 1000AC57 - 1000A648: 59 pop ecx - 1000A649: C3 ret - 1000A64A: 8B FF mov edi,edi - 1000A64C: 55 push ebp - 1000A64D: 8B EC mov ebp,esp - 1000A64F: 83 EC 20 sub esp,20h - 1000A652: 57 push edi - 1000A653: 56 push esi - 1000A654: E8 84 60 00 00 call 100106DD - 1000A659: 33 FF xor edi,edi - 1000A65B: 59 pop ecx - 1000A65C: 3B F7 cmp esi,edi - 1000A65E: 75 1D jne 1000A67D - 1000A660: E8 E4 49 00 00 call 1000F049 - 1000A665: 57 push edi - 1000A666: 57 push edi - 1000A667: 57 push edi - 1000A668: 57 push edi - 1000A669: 57 push edi - 1000A66A: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1000A670: E8 6C 49 00 00 call 1000EFE1 - 1000A675: 83 C4 14 add esp,14h - 1000A678: 83 C8 FF or eax,0FFFFFFFFh - 1000A67B: EB 3A jmp 1000A6B7 - 1000A67D: 39 7D 0C cmp dword ptr [ebp+0Ch],edi - 1000A680: 74 DE je 1000A660 - 1000A682: C7 45 EC 49 00 00 mov dword ptr [ebp-14h],49h - 00 - 1000A689: 89 75 E8 mov dword ptr [ebp-18h],esi - 1000A68C: 89 75 E0 mov dword ptr [ebp-20h],esi - 1000A68F: 3D FF FF FF 3F cmp eax,3FFFFFFFh - 1000A694: 76 09 jbe 1000A69F - 1000A696: C7 45 E4 FF FF FF mov dword ptr [ebp-1Ch],7FFFFFFFh - 7F - 1000A69D: EB 05 jmp 1000A6A4 - 1000A69F: 03 C0 add eax,eax - 1000A6A1: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1000A6A4: FF 75 14 push dword ptr [ebp+14h] - 1000A6A7: 8D 45 E0 lea eax,[ebp-20h] - 1000A6AA: FF 75 10 push dword ptr [ebp+10h] - 1000A6AD: FF 75 0C push dword ptr [ebp+0Ch] - 1000A6B0: 50 push eax - 1000A6B1: FF 55 08 call dword ptr [ebp+8] - 1000A6B4: 83 C4 10 add esp,10h - 1000A6B7: 5F pop edi - 1000A6B8: C9 leave - 1000A6B9: C3 ret - 1000A6BA: 8B FF mov edi,edi - 1000A6BC: 55 push ebp - 1000A6BD: 8B EC mov ebp,esp - 1000A6BF: 56 push esi - 1000A6C0: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000A6C3: 8D 45 10 lea eax,[ebp+10h] - 1000A6C6: 50 push eax - 1000A6C7: 6A 00 push 0 - 1000A6C9: FF 75 0C push dword ptr [ebp+0Ch] - 1000A6CC: 68 D1 07 01 10 push 100107D1h - 1000A6D1: E8 74 FF FF FF call 1000A64A - 1000A6D6: 83 C4 10 add esp,10h - 1000A6D9: 5E pop esi - 1000A6DA: 5D pop ebp - 1000A6DB: C3 ret - 1000A6DC: 8B FF mov edi,edi - 1000A6DE: 55 push ebp - 1000A6DF: 8B EC mov ebp,esp - 1000A6E1: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000A6E4: 85 C0 test eax,eax - 1000A6E6: 74 12 je 1000A6FA - 1000A6E8: 83 E8 08 sub eax,8 - 1000A6EB: 81 38 DD DD 00 00 cmp dword ptr [eax],0DDDDh - 1000A6F1: 75 07 jne 1000A6FA - 1000A6F3: 50 push eax - 1000A6F4: E8 3B FC FF FF call 1000A334 - 1000A6F9: 59 pop ecx - 1000A6FA: 5D pop ebp - 1000A6FB: C3 ret - 1000A6FC: 8B FF mov edi,edi - 1000A6FE: 55 push ebp - 1000A6FF: 8B EC mov ebp,esp - 1000A701: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000A704: 56 push esi - 1000A705: 8B F1 mov esi,ecx - 1000A707: C6 46 0C 00 mov byte ptr [esi+0Ch],0 - 1000A70B: 85 C0 test eax,eax - 1000A70D: 75 63 jne 1000A772 - 1000A70F: E8 4E 2D 00 00 call 1000D462 - 1000A714: 89 46 08 mov dword ptr [esi+8],eax - 1000A717: 8B 48 6C mov ecx,dword ptr [eax+6Ch] - 1000A71A: 89 0E mov dword ptr [esi],ecx - 1000A71C: 8B 48 68 mov ecx,dword ptr [eax+68h] - 1000A71F: 89 4E 04 mov dword ptr [esi+4],ecx - 1000A722: 8B 0E mov ecx,dword ptr [esi] - 1000A724: 3B 0D 60 56 02 10 cmp ecx,dword ptr ds:[10025660h] - 1000A72A: 74 12 je 1000A73E - 1000A72C: 8B 0D 7C 55 02 10 mov ecx,dword ptr ds:[1002557Ch] - 1000A732: 85 48 70 test dword ptr [eax+70h],ecx - 1000A735: 75 07 jne 1000A73E - 1000A737: E8 28 7B 00 00 call 10012264 - 1000A73C: 89 06 mov dword ptr [esi],eax - 1000A73E: 8B 46 04 mov eax,dword ptr [esi+4] - 1000A741: 3B 05 80 54 02 10 cmp eax,dword ptr ds:[10025480h] - 1000A747: 74 16 je 1000A75F - 1000A749: 8B 46 08 mov eax,dword ptr [esi+8] - 1000A74C: 8B 0D 7C 55 02 10 mov ecx,dword ptr ds:[1002557Ch] - 1000A752: 85 48 70 test dword ptr [eax+70h],ecx - 1000A755: 75 08 jne 1000A75F - 1000A757: E8 9C 73 00 00 call 10011AF8 - 1000A75C: 89 46 04 mov dword ptr [esi+4],eax - 1000A75F: 8B 46 08 mov eax,dword ptr [esi+8] - 1000A762: F6 40 70 02 test byte ptr [eax+70h],2 - 1000A766: 75 14 jne 1000A77C - 1000A768: 83 48 70 02 or dword ptr [eax+70h],2 - 1000A76C: C6 46 0C 01 mov byte ptr [esi+0Ch],1 - 1000A770: EB 0A jmp 1000A77C - 1000A772: 8B 08 mov ecx,dword ptr [eax] - 1000A774: 89 0E mov dword ptr [esi],ecx - 1000A776: 8B 40 04 mov eax,dword ptr [eax+4] - 1000A779: 89 46 04 mov dword ptr [esi+4],eax - 1000A77C: 8B C6 mov eax,esi - 1000A77E: 5E pop esi - 1000A77F: 5D pop ebp - 1000A780: C2 04 00 ret 4 - 1000A783: 8B FF mov edi,edi - 1000A785: 55 push ebp - 1000A786: 8B EC mov ebp,esp - 1000A788: 83 EC 0C sub esp,0Ch - 1000A78B: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1000A790: 33 C5 xor eax,ebp - 1000A792: 89 45 FC mov dword ptr [ebp-4],eax - 1000A795: 56 push esi - 1000A796: 33 F6 xor esi,esi - 1000A798: 57 push edi - 1000A799: 3B DE cmp ebx,esi - 1000A79B: 75 1E jne 1000A7BB - 1000A79D: E8 A7 48 00 00 call 1000F049 - 1000A7A2: 6A 16 push 16h - 1000A7A4: 5F pop edi - 1000A7A5: 56 push esi - 1000A7A6: 56 push esi - 1000A7A7: 56 push esi - 1000A7A8: 56 push esi - 1000A7A9: 56 push esi - 1000A7AA: 89 38 mov dword ptr [eax],edi - 1000A7AC: E8 30 48 00 00 call 1000EFE1 - 1000A7B1: 83 C4 14 add esp,14h - 1000A7B4: 8B C7 mov eax,edi - 1000A7B6: E9 47 01 00 00 jmp 1000A902 - 1000A7BB: FF 75 08 push dword ptr [ebp+8] - 1000A7BE: 53 push ebx - 1000A7BF: E8 DC 7B 00 00 call 100123A0 - 1000A7C4: 59 pop ecx - 1000A7C5: 59 pop ecx - 1000A7C6: 3B 45 08 cmp eax,dword ptr [ebp+8] - 1000A7C9: 72 07 jb 1000A7D2 - 1000A7CB: 33 C0 xor eax,eax - 1000A7CD: 66 89 03 mov word ptr [ebx],ax - 1000A7D0: EB CB jmp 1000A79D - 1000A7D2: 8B 55 0C mov edx,dword ptr [ebp+0Ch] - 1000A7D5: 8B 02 mov eax,dword ptr [edx] - 1000A7D7: 8B 48 14 mov ecx,dword ptr [eax+14h] - 1000A7DA: 3B CE cmp ecx,esi - 1000A7DC: 75 2A jne 1000A808 - 1000A7DE: 8B C3 mov eax,ebx - 1000A7E0: 66 39 33 cmp word ptr [ebx],si - 1000A7E3: 74 1C je 1000A801 - 1000A7E5: 0F B7 08 movzx ecx,word ptr [eax] - 1000A7E8: 66 83 F9 61 cmp cx,61h - 1000A7EC: 72 0C jb 1000A7FA - 1000A7EE: 66 83 F9 7A cmp cx,7Ah - 1000A7F2: 77 06 ja 1000A7FA - 1000A7F4: 83 C1 E0 add ecx,0FFFFFFE0h - 1000A7F7: 66 89 08 mov word ptr [eax],cx - 1000A7FA: 40 inc eax - 1000A7FB: 40 inc eax - 1000A7FC: 66 39 30 cmp word ptr [eax],si - 1000A7FF: 75 E4 jne 1000A7E5 - 1000A801: 33 C0 xor eax,eax - 1000A803: E9 FA 00 00 00 jmp 1000A902 - 1000A808: FF 70 04 push dword ptr [eax+4] - 1000A80B: BF 00 02 00 00 mov edi,200h - 1000A810: 56 push esi - 1000A811: 56 push esi - 1000A812: 6A FF push 0FFFFFFFFh - 1000A814: 53 push ebx - 1000A815: 57 push edi - 1000A816: 51 push ecx - 1000A817: 52 push edx - 1000A818: E8 2C 7B 00 00 call 10012349 - 1000A81D: 8B C8 mov ecx,eax - 1000A81F: 83 C4 20 add esp,20h - 1000A822: 89 4D F4 mov dword ptr [ebp-0Ch],ecx - 1000A825: 3B CE cmp ecx,esi - 1000A827: 75 17 jne 1000A840 - 1000A829: E8 1B 48 00 00 call 1000F049 - 1000A82E: C7 00 2A 00 00 00 mov dword ptr [eax],2Ah - 1000A834: E8 10 48 00 00 call 1000F049 - 1000A839: 8B 00 mov eax,dword ptr [eax] - 1000A83B: E9 C2 00 00 00 jmp 1000A902 - 1000A840: 39 4D 08 cmp dword ptr [ebp+8],ecx - 1000A843: 73 11 jae 1000A856 - 1000A845: 33 C0 xor eax,eax - 1000A847: 66 89 03 mov word ptr [ebx],ax - 1000A84A: E8 FA 47 00 00 call 1000F049 - 1000A84F: 6A 22 push 22h - 1000A851: E9 4E FF FF FF jmp 1000A7A4 - 1000A856: 3B CE cmp ecx,esi - 1000A858: 7E 46 jle 1000A8A0 - 1000A85A: 6A E0 push 0FFFFFFE0h - 1000A85C: 33 D2 xor edx,edx - 1000A85E: 58 pop eax - 1000A85F: F7 F1 div eax,ecx - 1000A861: 83 F8 02 cmp eax,2 - 1000A864: 72 3A jb 1000A8A0 - 1000A866: 8D 44 09 08 lea eax,[ecx+ecx+8] - 1000A86A: 3D 00 04 00 00 cmp eax,400h - 1000A86F: 77 13 ja 1000A884 - 1000A871: E8 4A 7B 00 00 call 100123C0 - 1000A876: 8B C4 mov eax,esp - 1000A878: 3B C6 cmp eax,esi - 1000A87A: 74 1C je 1000A898 - 1000A87C: C7 00 CC CC 00 00 mov dword ptr [eax],0CCCCh - 1000A882: EB 11 jmp 1000A895 - 1000A884: 50 push eax - 1000A885: E8 AC 34 00 00 call 1000DD36 - 1000A88A: 59 pop ecx - 1000A88B: 3B C6 cmp eax,esi - 1000A88D: 74 09 je 1000A898 - 1000A88F: C7 00 DD DD 00 00 mov dword ptr [eax],0DDDDh - 1000A895: 83 C0 08 add eax,8 - 1000A898: 8B 4D F4 mov ecx,dword ptr [ebp-0Ch] - 1000A89B: 89 45 F8 mov dword ptr [ebp-8],eax - 1000A89E: EB 03 jmp 1000A8A3 - 1000A8A0: 89 75 F8 mov dword ptr [ebp-8],esi - 1000A8A3: 39 75 F8 cmp dword ptr [ebp-8],esi - 1000A8A6: 75 10 jne 1000A8B8 - 1000A8A8: E8 9C 47 00 00 call 1000F049 - 1000A8AD: C7 00 0C 00 00 00 mov dword ptr [eax],0Ch - 1000A8B3: E9 7C FF FF FF jmp 1000A834 - 1000A8B8: 8B 55 0C mov edx,dword ptr [ebp+0Ch] - 1000A8BB: 8B 02 mov eax,dword ptr [edx] - 1000A8BD: FF 70 04 push dword ptr [eax+4] - 1000A8C0: 51 push ecx - 1000A8C1: FF 75 F8 push dword ptr [ebp-8] - 1000A8C4: 6A FF push 0FFFFFFFFh - 1000A8C6: 53 push ebx - 1000A8C7: 57 push edi - 1000A8C8: FF 70 14 push dword ptr [eax+14h] - 1000A8CB: 52 push edx - 1000A8CC: E8 78 7A 00 00 call 10012349 - 1000A8D1: 83 C4 20 add esp,20h - 1000A8D4: 85 C0 test eax,eax - 1000A8D6: 74 13 je 1000A8EB - 1000A8D8: FF 75 F8 push dword ptr [ebp-8] - 1000A8DB: FF 75 08 push dword ptr [ebp+8] - 1000A8DE: 53 push ebx - 1000A8DF: E8 F6 79 00 00 call 100122DA - 1000A8E4: 83 C4 0C add esp,0Ch - 1000A8E7: 8B F0 mov esi,eax - 1000A8E9: EB 0C jmp 1000A8F7 - 1000A8EB: E8 59 47 00 00 call 1000F049 - 1000A8F0: 6A 2A push 2Ah - 1000A8F2: 59 pop ecx - 1000A8F3: 89 08 mov dword ptr [eax],ecx - 1000A8F5: 8B F1 mov esi,ecx - 1000A8F7: FF 75 F8 push dword ptr [ebp-8] - 1000A8FA: E8 DD FD FF FF call 1000A6DC - 1000A8FF: 59 pop ecx - 1000A900: 8B C6 mov eax,esi - 1000A902: 8D 65 EC lea esp,[ebp-14h] - 1000A905: 5F pop edi - 1000A906: 5E pop esi - 1000A907: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1000A90A: 33 CD xor ecx,ebp - 1000A90C: E8 8A F7 FF FF call 1000A09B - 1000A911: C9 leave - 1000A912: C3 ret - 1000A913: 8B FF mov edi,edi - 1000A915: 55 push ebp - 1000A916: 8B EC mov ebp,esp - 1000A918: 83 EC 10 sub esp,10h - 1000A91B: 53 push ebx - 1000A91C: FF 75 10 push dword ptr [ebp+10h] - 1000A91F: 8D 4D F0 lea ecx,[ebp-10h] - 1000A922: E8 D5 FD FF FF call 1000A6FC - 1000A927: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 1000A92A: 8D 45 F0 lea eax,[ebp-10h] - 1000A92D: 50 push eax - 1000A92E: FF 75 0C push dword ptr [ebp+0Ch] - 1000A931: E8 4D FE FF FF call 1000A783 - 1000A936: 80 7D FC 00 cmp byte ptr [ebp-4],0 - 1000A93A: 59 pop ecx - 1000A93B: 59 pop ecx - 1000A93C: 5B pop ebx - 1000A93D: 74 07 je 1000A946 - 1000A93F: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 1000A942: 83 61 70 FD and dword ptr [ecx+70h],0FFFFFFFDh - 1000A946: C9 leave - 1000A947: C3 ret - 1000A948: 8B FF mov edi,edi - 1000A94A: 55 push ebp - 1000A94B: 8B EC mov ebp,esp - 1000A94D: 56 push esi - 1000A94E: 33 F6 xor esi,esi - 1000A950: 39 35 D8 69 02 10 cmp dword ptr ds:[100269D8h],esi - 1000A956: 75 4C jne 1000A9A4 - 1000A958: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000A95B: 3B C6 cmp eax,esi - 1000A95D: 75 1C jne 1000A97B - 1000A95F: E8 E5 46 00 00 call 1000F049 - 1000A964: 56 push esi - 1000A965: 56 push esi - 1000A966: 56 push esi - 1000A967: 56 push esi - 1000A968: 56 push esi - 1000A969: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1000A96F: E8 6D 46 00 00 call 1000EFE1 - 1000A974: 83 C4 14 add esp,14h - 1000A977: 33 C0 xor eax,eax - 1000A979: EB 3A jmp 1000A9B5 - 1000A97B: 8B C8 mov ecx,eax - 1000A97D: 66 39 30 cmp word ptr [eax],si - 1000A980: 74 33 je 1000A9B5 - 1000A982: 57 push edi - 1000A983: 0F B7 11 movzx edx,word ptr [ecx] - 1000A986: 6A 61 push 61h - 1000A988: 5F pop edi - 1000A989: 66 3B FA cmp di,dx - 1000A98C: 77 0C ja 1000A99A - 1000A98E: 66 83 FA 7A cmp dx,7Ah - 1000A992: 77 06 ja 1000A99A - 1000A994: 83 C2 E0 add edx,0FFFFFFE0h - 1000A997: 66 89 11 mov word ptr [ecx],dx - 1000A99A: 41 inc ecx - 1000A99B: 41 inc ecx - 1000A99C: 66 39 31 cmp word ptr [ecx],si - 1000A99F: 75 E2 jne 1000A983 - 1000A9A1: 5F pop edi - 1000A9A2: EB 11 jmp 1000A9B5 - 1000A9A4: 56 push esi - 1000A9A5: 6A FF push 0FFFFFFFFh - 1000A9A7: FF 75 08 push dword ptr [ebp+8] - 1000A9AA: E8 64 FF FF FF call 1000A913 - 1000A9AF: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000A9B2: 83 C4 0C add esp,0Ch - 1000A9B5: 5E pop esi - 1000A9B6: 5D pop ebp - 1000A9B7: C3 ret - 1000A9B8: 6A 14 push 14h - 1000A9BA: 68 88 19 02 10 push 10021988h - 1000A9BF: E8 C4 56 00 00 call 10010088 - 1000A9C4: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 1000A9C7: 8B FB mov edi,ebx - 1000A9C9: 89 5D E4 mov dword ptr [ebp-1Ch],ebx - 1000A9CC: 33 F6 xor esi,esi - 1000A9CE: 3B DE cmp ebx,esi - 1000A9D0: 75 21 jne 1000A9F3 - 1000A9D2: 39 75 0C cmp dword ptr [ebp+0Ch],esi - 1000A9D5: 74 1C je 1000A9F3 - 1000A9D7: E8 6D 46 00 00 call 1000F049 - 1000A9DC: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1000A9E2: 56 push esi - 1000A9E3: 56 push esi - 1000A9E4: 56 push esi - 1000A9E5: 56 push esi - 1000A9E6: 56 push esi - 1000A9E7: E8 F5 45 00 00 call 1000EFE1 - 1000A9EC: 83 C4 14 add esp,14h - 1000A9EF: 33 C0 xor eax,eax - 1000A9F1: EB 76 jmp 1000AA69 - 1000A9F3: 33 C0 xor eax,eax - 1000A9F5: 39 75 0C cmp dword ptr [ebp+0Ch],esi - 1000A9F8: 0F 9D C0 setge al - 1000A9FB: 3B C6 cmp eax,esi - 1000A9FD: 74 D8 je 1000A9D7 - 1000A9FF: 33 C0 xor eax,eax - 1000AA01: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 1000AA04: 3B CE cmp ecx,esi - 1000AA06: 0F 95 C0 setne al - 1000AA09: 3B C6 cmp eax,esi - 1000AA0B: 74 CA je 1000A9D7 - 1000AA0D: 39 75 0C cmp dword ptr [ebp+0Ch],esi - 1000AA10: 74 DD je 1000A9EF - 1000AA12: 89 4D 08 mov dword ptr [ebp+8],ecx - 1000AA15: 51 push ecx - 1000AA16: E8 C9 01 00 00 call 1000ABE4 - 1000AA1B: 59 pop ecx - 1000AA1C: 89 75 FC mov dword ptr [ebp-4],esi - 1000AA1F: 3B DE cmp ebx,esi - 1000AA21: 74 37 je 1000AA5A - 1000AA23: FF 4D 0C dec dword ptr [ebp+0Ch] - 1000AA26: 74 2D je 1000AA55 - 1000AA28: FF 75 08 push dword ptr [ebp+8] - 1000AA2B: E8 BC 79 00 00 call 100123EC - 1000AA30: 59 pop ecx - 1000AA31: 0F B7 C0 movzx eax,ax - 1000AA34: 89 45 E0 mov dword ptr [ebp-20h],eax - 1000AA37: 3D FF FF 00 00 cmp eax,0FFFFh - 1000AA3C: 75 09 jne 1000AA47 - 1000AA3E: 3B FB cmp edi,ebx - 1000AA40: 75 13 jne 1000AA55 - 1000AA42: 89 75 E4 mov dword ptr [ebp-1Ch],esi - 1000AA45: EB 13 jmp 1000AA5A - 1000AA47: 66 89 07 mov word ptr [edi],ax - 1000AA4A: 47 inc edi - 1000AA4B: 47 inc edi - 1000AA4C: 89 7D DC mov dword ptr [ebp-24h],edi - 1000AA4F: 66 83 F8 0A cmp ax,0Ah - 1000AA53: 75 CE jne 1000AA23 - 1000AA55: 33 C0 xor eax,eax - 1000AA57: 66 89 07 mov word ptr [edi],ax - 1000AA5A: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000AA61: E8 09 00 00 00 call 1000AA6F - 1000AA66: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 1000AA69: E8 5F 56 00 00 call 100100CD - 1000AA6E: C3 ret - 1000AA6F: FF 75 08 push dword ptr [ebp+8] - 1000AA72: E8 E0 01 00 00 call 1000AC57 - 1000AA77: 59 pop ecx - 1000AA78: C3 ret - 1000AA79: 6A 0C push 0Ch - 1000AA7B: 68 A8 19 02 10 push 100219A8h - 1000AA80: E8 03 56 00 00 call 10010088 - 1000AA85: 33 C0 xor eax,eax - 1000AA87: 8B 7D 08 mov edi,dword ptr [ebp+8] - 1000AA8A: 33 F6 xor esi,esi - 1000AA8C: 3B FE cmp edi,esi - 1000AA8E: 0F 95 C0 setne al - 1000AA91: 3B C6 cmp eax,esi - 1000AA93: 75 1D jne 1000AAB2 - 1000AA95: E8 AF 45 00 00 call 1000F049 - 1000AA9A: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1000AAA0: 56 push esi - 1000AAA1: 56 push esi - 1000AAA2: 56 push esi - 1000AAA3: 56 push esi - 1000AAA4: 56 push esi - 1000AAA5: E8 37 45 00 00 call 1000EFE1 - 1000AAAA: 83 C4 14 add esp,14h - 1000AAAD: 83 C8 FF or eax,0FFFFFFFFh - 1000AAB0: EB 4B jmp 1000AAFD - 1000AAB2: 33 C0 xor eax,eax - 1000AAB4: 39 75 0C cmp dword ptr [ebp+0Ch],esi - 1000AAB7: 0F 95 C0 setne al - 1000AABA: 3B C6 cmp eax,esi - 1000AABC: 74 D7 je 1000AA95 - 1000AABE: 89 7D 08 mov dword ptr [ebp+8],edi - 1000AAC1: 57 push edi - 1000AAC2: E8 1D 01 00 00 call 1000ABE4 - 1000AAC7: 59 pop ecx - 1000AAC8: 89 75 FC mov dword ptr [ebp-4],esi - 1000AACB: 57 push edi - 1000AACC: E8 C6 7A 00 00 call 10012597 - 1000AAD1: 8B D8 mov ebx,eax - 1000AAD3: 8D 45 10 lea eax,[ebp+10h] - 1000AAD6: 50 push eax - 1000AAD7: 56 push esi - 1000AAD8: FF 75 0C push dword ptr [ebp+0Ch] - 1000AADB: 57 push edi - 1000AADC: E8 31 38 00 00 call 1000E312 - 1000AAE1: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1000AAE4: 57 push edi - 1000AAE5: 53 push ebx - 1000AAE6: E8 48 7B 00 00 call 10012633 - 1000AAEB: 83 C4 1C add esp,1Ch - 1000AAEE: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000AAF5: E8 09 00 00 00 call 1000AB03 - 1000AAFA: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 1000AAFD: E8 CB 55 00 00 call 100100CD - 1000AB02: C3 ret - 1000AB03: FF 75 08 push dword ptr [ebp+8] - 1000AB06: E8 4C 01 00 00 call 1000AC57 - 1000AB0B: 59 pop ecx - 1000AB0C: C3 ret - 1000AB0D: B8 70 49 02 10 mov eax,10024970h - 1000AB12: C3 ret - 1000AB13: A1 40 7D 02 10 mov eax,dword ptr ds:[10027D40h] - 1000AB18: 56 push esi - 1000AB19: 6A 14 push 14h - 1000AB1B: 5E pop esi - 1000AB1C: 85 C0 test eax,eax - 1000AB1E: 75 07 jne 1000AB27 - 1000AB20: B8 00 02 00 00 mov eax,200h - 1000AB25: EB 06 jmp 1000AB2D - 1000AB27: 3B C6 cmp eax,esi - 1000AB29: 7D 07 jge 1000AB32 - 1000AB2B: 8B C6 mov eax,esi - 1000AB2D: A3 40 7D 02 10 mov dword ptr ds:[10027D40h],eax - 1000AB32: 6A 04 push 4 - 1000AB34: 50 push eax - 1000AB35: E8 14 7E 00 00 call 1001294E - 1000AB3A: 59 pop ecx - 1000AB3B: 59 pop ecx - 1000AB3C: A3 24 6D 02 10 mov dword ptr ds:[10026D24h],eax - 1000AB41: 85 C0 test eax,eax - 1000AB43: 75 1E jne 1000AB63 - 1000AB45: 6A 04 push 4 - 1000AB47: 56 push esi - 1000AB48: 89 35 40 7D 02 10 mov dword ptr ds:[10027D40h],esi - 1000AB4E: E8 FB 7D 00 00 call 1001294E - 1000AB53: 59 pop ecx - 1000AB54: 59 pop ecx - 1000AB55: A3 24 6D 02 10 mov dword ptr ds:[10026D24h],eax - 1000AB5A: 85 C0 test eax,eax - 1000AB5C: 75 05 jne 1000AB63 - 1000AB5E: 6A 1A push 1Ah - 1000AB60: 58 pop eax - 1000AB61: 5E pop esi - 1000AB62: C3 ret - 1000AB63: 33 D2 xor edx,edx - 1000AB65: B9 70 49 02 10 mov ecx,10024970h - 1000AB6A: EB 05 jmp 1000AB71 - 1000AB6C: A1 24 6D 02 10 mov eax,dword ptr ds:[10026D24h] - 1000AB71: 89 0C 02 mov dword ptr [edx+eax],ecx - 1000AB74: 83 C1 20 add ecx,20h - 1000AB77: 83 C2 04 add edx,4 - 1000AB7A: 81 F9 F0 4B 02 10 cmp ecx,10024BF0h - 1000AB80: 7C EA jl 1000AB6C - 1000AB82: 6A FE push 0FFFFFFFEh - 1000AB84: 5E pop esi - 1000AB85: 33 D2 xor edx,edx - 1000AB87: B9 80 49 02 10 mov ecx,10024980h - 1000AB8C: 57 push edi - 1000AB8D: 8B C2 mov eax,edx - 1000AB8F: C1 F8 05 sar eax,5 - 1000AB92: 8B 04 85 00 6C 02 mov eax,dword ptr [eax*4+10026C00h] - 10 - 1000AB99: 8B FA mov edi,edx - 1000AB9B: 83 E7 1F and edi,1Fh - 1000AB9E: C1 E7 06 shl edi,6 - 1000ABA1: 8B 04 07 mov eax,dword ptr [edi+eax] - 1000ABA4: 83 F8 FF cmp eax,0FFFFFFFFh - 1000ABA7: 74 08 je 1000ABB1 - 1000ABA9: 3B C6 cmp eax,esi - 1000ABAB: 74 04 je 1000ABB1 - 1000ABAD: 85 C0 test eax,eax - 1000ABAF: 75 02 jne 1000ABB3 - 1000ABB1: 89 31 mov dword ptr [ecx],esi - 1000ABB3: 83 C1 20 add ecx,20h - 1000ABB6: 42 inc edx - 1000ABB7: 81 F9 E0 49 02 10 cmp ecx,100249E0h - 1000ABBD: 7C CE jl 1000AB8D - 1000ABBF: 5F pop edi - 1000ABC0: 33 C0 xor eax,eax - 1000ABC2: 5E pop esi - 1000ABC3: C3 ret - 1000ABC4: E8 0B 5B 00 00 call 100106D4 - 1000ABC9: 80 3D 30 6A 02 10 cmp byte ptr ds:[10026A30h],0 - 00 - 1000ABD0: 74 05 je 1000ABD7 - 1000ABD2: E8 63 7E 00 00 call 10012A3A - 1000ABD7: FF 35 24 6D 02 10 push dword ptr ds:[10026D24h] - 1000ABDD: E8 52 F7 FF FF call 1000A334 - 1000ABE2: 59 pop ecx - 1000ABE3: C3 ret - 1000ABE4: 8B FF mov edi,edi - 1000ABE6: 55 push ebp - 1000ABE7: 8B EC mov ebp,esp - 1000ABE9: 56 push esi - 1000ABEA: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000ABED: B8 70 49 02 10 mov eax,10024970h - 1000ABF2: 3B F0 cmp esi,eax - 1000ABF4: 72 22 jb 1000AC18 - 1000ABF6: 81 FE D0 4B 02 10 cmp esi,10024BD0h - 1000ABFC: 77 1A ja 1000AC18 - 1000ABFE: 8B CE mov ecx,esi - 1000AC00: 2B C8 sub ecx,eax - 1000AC02: C1 F9 05 sar ecx,5 - 1000AC05: 83 C1 10 add ecx,10h - 1000AC08: 51 push ecx - 1000AC09: E8 80 49 00 00 call 1000F58E - 1000AC0E: 81 4E 0C 00 80 00 or dword ptr [esi+0Ch],8000h - 00 - 1000AC15: 59 pop ecx - 1000AC16: EB 0A jmp 1000AC22 - 1000AC18: 83 C6 20 add esi,20h - 1000AC1B: 56 push esi - 1000AC1C: FF 15 64 F0 01 10 call dword ptr ds:[1001F064h] - 1000AC22: 5E pop esi - 1000AC23: 5D pop ebp - 1000AC24: C3 ret - 1000AC25: 8B FF mov edi,edi - 1000AC27: 55 push ebp - 1000AC28: 8B EC mov ebp,esp - 1000AC2A: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000AC2D: 83 F8 14 cmp eax,14h - 1000AC30: 7D 16 jge 1000AC48 - 1000AC32: 83 C0 10 add eax,10h - 1000AC35: 50 push eax - 1000AC36: E8 53 49 00 00 call 1000F58E - 1000AC3B: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 1000AC3E: 81 48 0C 00 80 00 or dword ptr [eax+0Ch],8000h - 00 - 1000AC45: 59 pop ecx - 1000AC46: 5D pop ebp - 1000AC47: C3 ret - 1000AC48: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 1000AC4B: 83 C0 20 add eax,20h - 1000AC4E: 50 push eax - 1000AC4F: FF 15 64 F0 01 10 call dword ptr ds:[1001F064h] - 1000AC55: 5D pop ebp - 1000AC56: C3 ret - 1000AC57: 8B FF mov edi,edi - 1000AC59: 55 push ebp - 1000AC5A: 8B EC mov ebp,esp - 1000AC5C: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000AC5F: B9 70 49 02 10 mov ecx,10024970h - 1000AC64: 3B C1 cmp eax,ecx - 1000AC66: 72 1F jb 1000AC87 - 1000AC68: 3D D0 4B 02 10 cmp eax,10024BD0h - 1000AC6D: 77 18 ja 1000AC87 - 1000AC6F: 81 60 0C FF 7F FF and dword ptr [eax+0Ch],0FFFF7FFFh - FF - 1000AC76: 2B C1 sub eax,ecx - 1000AC78: C1 F8 05 sar eax,5 - 1000AC7B: 83 C0 10 add eax,10h - 1000AC7E: 50 push eax - 1000AC7F: E8 30 48 00 00 call 1000F4B4 - 1000AC84: 59 pop ecx - 1000AC85: 5D pop ebp - 1000AC86: C3 ret - 1000AC87: 83 C0 20 add eax,20h - 1000AC8A: 50 push eax - 1000AC8B: FF 15 68 F0 01 10 call dword ptr ds:[1001F068h] - 1000AC91: 5D pop ebp - 1000AC92: C3 ret - 1000AC93: 8B FF mov edi,edi - 1000AC95: 55 push ebp - 1000AC96: 8B EC mov ebp,esp - 1000AC98: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000AC9B: 83 F9 14 cmp ecx,14h - 1000AC9E: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 1000ACA1: 7D 13 jge 1000ACB6 - 1000ACA3: 81 60 0C FF 7F FF and dword ptr [eax+0Ch],0FFFF7FFFh - FF - 1000ACAA: 83 C1 10 add ecx,10h - 1000ACAD: 51 push ecx - 1000ACAE: E8 01 48 00 00 call 1000F4B4 - 1000ACB3: 59 pop ecx - 1000ACB4: 5D pop ebp - 1000ACB5: C3 ret - 1000ACB6: 83 C0 20 add eax,20h - 1000ACB9: 50 push eax - 1000ACBA: FF 15 68 F0 01 10 call dword ptr ds:[1001F068h] - 1000ACC0: 5D pop ebp - 1000ACC1: C3 ret - 1000ACC2: 6A 0C push 0Ch - 1000ACC4: 68 C8 19 02 10 push 100219C8h - 1000ACC9: E8 BA 53 00 00 call 10010088 - 1000ACCE: 33 F6 xor esi,esi - 1000ACD0: 89 75 E4 mov dword ptr [ebp-1Ch],esi - 1000ACD3: 33 C0 xor eax,eax - 1000ACD5: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 1000ACD8: 3B DE cmp ebx,esi - 1000ACDA: 0F 95 C0 setne al - 1000ACDD: 3B C6 cmp eax,esi - 1000ACDF: 75 1C jne 1000ACFD - 1000ACE1: E8 63 43 00 00 call 1000F049 - 1000ACE6: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1000ACEC: 56 push esi - 1000ACED: 56 push esi - 1000ACEE: 56 push esi - 1000ACEF: 56 push esi - 1000ACF0: 56 push esi - 1000ACF1: E8 EB 42 00 00 call 1000EFE1 - 1000ACF6: 83 C4 14 add esp,14h - 1000ACF9: 33 C0 xor eax,eax - 1000ACFB: EB 7B jmp 1000AD78 - 1000ACFD: 33 C0 xor eax,eax - 1000ACFF: 8B 7D 0C mov edi,dword ptr [ebp+0Ch] - 1000AD02: 3B FE cmp edi,esi - 1000AD04: 0F 95 C0 setne al - 1000AD07: 3B C6 cmp eax,esi - 1000AD09: 74 D6 je 1000ACE1 - 1000AD0B: 33 C0 xor eax,eax - 1000AD0D: 66 39 37 cmp word ptr [edi],si - 1000AD10: 0F 95 C0 setne al - 1000AD13: 3B C6 cmp eax,esi - 1000AD15: 74 CA je 1000ACE1 - 1000AD17: E8 84 83 00 00 call 100130A0 - 1000AD1C: 89 45 08 mov dword ptr [ebp+8],eax - 1000AD1F: 3B C6 cmp eax,esi - 1000AD21: 75 0D jne 1000AD30 - 1000AD23: E8 21 43 00 00 call 1000F049 - 1000AD28: C7 00 18 00 00 00 mov dword ptr [eax],18h - 1000AD2E: EB C9 jmp 1000ACF9 - 1000AD30: 89 75 FC mov dword ptr [ebp-4],esi - 1000AD33: 66 39 33 cmp word ptr [ebx],si - 1000AD36: 75 20 jne 1000AD58 - 1000AD38: E8 0C 43 00 00 call 1000F049 - 1000AD3D: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1000AD43: 6A FE push 0FFFFFFFEh - 1000AD45: 8D 45 F0 lea eax,[ebp-10h] - 1000AD48: 50 push eax - 1000AD49: 68 10 49 02 10 push 10024910h - 1000AD4E: E8 85 84 00 00 call 100131D8 - 1000AD53: 83 C4 0C add esp,0Ch - 1000AD56: EB A1 jmp 1000ACF9 - 1000AD58: 50 push eax - 1000AD59: FF 75 10 push dword ptr [ebp+10h] - 1000AD5C: 57 push edi - 1000AD5D: 53 push ebx - 1000AD5E: E8 89 80 00 00 call 10012DEC - 1000AD63: 83 C4 10 add esp,10h - 1000AD66: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1000AD69: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000AD70: E8 09 00 00 00 call 1000AD7E - 1000AD75: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 1000AD78: E8 50 53 00 00 call 100100CD - 1000AD7D: C3 ret - 1000AD7E: FF 75 08 push dword ptr [ebp+8] - 1000AD81: E8 D1 FE FF FF call 1000AC57 - 1000AD86: 59 pop ecx - 1000AD87: C3 ret - 1000AD88: 8B FF mov edi,edi - 1000AD8A: 55 push ebp - 1000AD8B: 8B EC mov ebp,esp - 1000AD8D: 6A 40 push 40h - 1000AD8F: FF 75 0C push dword ptr [ebp+0Ch] - 1000AD92: FF 75 08 push dword ptr [ebp+8] - 1000AD95: E8 28 FF FF FF call 1000ACC2 - 1000AD9A: 83 C4 0C add esp,0Ch - 1000AD9D: 5D pop ebp - 1000AD9E: C3 ret - 1000AD9F: 6A 0C push 0Ch - 1000ADA1: 68 E8 19 02 10 push 100219E8h - 1000ADA6: E8 DD 52 00 00 call 10010088 - 1000ADAB: 33 C0 xor eax,eax - 1000ADAD: 33 F6 xor esi,esi - 1000ADAF: 39 75 08 cmp dword ptr [ebp+8],esi - 1000ADB2: 0F 95 C0 setne al - 1000ADB5: 3B C6 cmp eax,esi - 1000ADB7: 75 1D jne 1000ADD6 - 1000ADB9: E8 8B 42 00 00 call 1000F049 - 1000ADBE: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1000ADC4: 56 push esi - 1000ADC5: 56 push esi - 1000ADC6: 56 push esi - 1000ADC7: 56 push esi - 1000ADC8: 56 push esi - 1000ADC9: E8 13 42 00 00 call 1000EFE1 - 1000ADCE: 83 C4 14 add esp,14h - 1000ADD1: 83 C8 FF or eax,0FFFFFFFFh - 1000ADD4: EB 5F jmp 1000AE35 - 1000ADD6: E8 32 FD FF FF call 1000AB0D - 1000ADDB: 6A 20 push 20h - 1000ADDD: 5B pop ebx - 1000ADDE: 03 C3 add eax,ebx - 1000ADE0: 50 push eax - 1000ADE1: 6A 01 push 1 - 1000ADE3: E8 3D FE FF FF call 1000AC25 - 1000ADE8: 59 pop ecx - 1000ADE9: 59 pop ecx - 1000ADEA: 89 75 FC mov dword ptr [ebp-4],esi - 1000ADED: E8 1B FD FF FF call 1000AB0D - 1000ADF2: 03 C3 add eax,ebx - 1000ADF4: 50 push eax - 1000ADF5: E8 9D 77 00 00 call 10012597 - 1000ADFA: 59 pop ecx - 1000ADFB: 8B F8 mov edi,eax - 1000ADFD: 8D 45 0C lea eax,[ebp+0Ch] - 1000AE00: 50 push eax - 1000AE01: 56 push esi - 1000AE02: FF 75 08 push dword ptr [ebp+8] - 1000AE05: E8 03 FD FF FF call 1000AB0D - 1000AE0A: 03 C3 add eax,ebx - 1000AE0C: 50 push eax - 1000AE0D: E8 00 35 00 00 call 1000E312 - 1000AE12: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1000AE15: E8 F3 FC FF FF call 1000AB0D - 1000AE1A: 03 C3 add eax,ebx - 1000AE1C: 50 push eax - 1000AE1D: 57 push edi - 1000AE1E: E8 10 78 00 00 call 10012633 - 1000AE23: 83 C4 18 add esp,18h - 1000AE26: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000AE2D: E8 09 00 00 00 call 1000AE3B - 1000AE32: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 1000AE35: E8 93 52 00 00 call 100100CD - 1000AE3A: C3 ret - 1000AE3B: E8 CD FC FF FF call 1000AB0D - 1000AE40: 83 C0 20 add eax,20h - 1000AE43: 50 push eax - 1000AE44: 6A 01 push 1 - 1000AE46: E8 48 FE FF FF call 1000AC93 - 1000AE4B: 59 pop ecx - 1000AE4C: 59 pop ecx - 1000AE4D: C3 ret - 1000AE4E: 6A 0C push 0Ch - 1000AE50: 68 08 1A 02 10 push 10021A08h - 1000AE55: E8 2E 52 00 00 call 10010088 - 1000AE5A: 33 C0 xor eax,eax - 1000AE5C: 8B 7D 0C mov edi,dword ptr [ebp+0Ch] - 1000AE5F: 33 F6 xor esi,esi - 1000AE61: 3B FE cmp edi,esi - 1000AE63: 0F 95 C0 setne al - 1000AE66: 3B C6 cmp eax,esi - 1000AE68: 75 1D jne 1000AE87 - 1000AE6A: E8 DA 41 00 00 call 1000F049 - 1000AE6F: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1000AE75: 56 push esi - 1000AE76: 56 push esi - 1000AE77: 56 push esi - 1000AE78: 56 push esi - 1000AE79: 56 push esi - 1000AE7A: E8 62 41 00 00 call 1000EFE1 - 1000AE7F: 83 C4 14 add esp,14h - 1000AE82: 83 C8 FF or eax,0FFFFFFFFh - 1000AE85: EB 4A jmp 1000AED1 - 1000AE87: 33 C0 xor eax,eax - 1000AE89: 39 75 10 cmp dword ptr [ebp+10h],esi - 1000AE8C: 0F 95 C0 setne al - 1000AE8F: 3B C6 cmp eax,esi - 1000AE91: 74 D7 je 1000AE6A - 1000AE93: 89 7D 0C mov dword ptr [ebp+0Ch],edi - 1000AE96: 57 push edi - 1000AE97: E8 48 FD FF FF call 1000ABE4 - 1000AE9C: 59 pop ecx - 1000AE9D: 89 75 FC mov dword ptr [ebp-4],esi - 1000AEA0: 57 push edi - 1000AEA1: E8 F1 76 00 00 call 10012597 - 1000AEA6: 8B F0 mov esi,eax - 1000AEA8: FF 75 18 push dword ptr [ebp+18h] - 1000AEAB: FF 75 14 push dword ptr [ebp+14h] - 1000AEAE: FF 75 10 push dword ptr [ebp+10h] - 1000AEB1: 57 push edi - 1000AEB2: FF 55 08 call dword ptr [ebp+8] - 1000AEB5: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1000AEB8: 57 push edi - 1000AEB9: 56 push esi - 1000AEBA: E8 74 77 00 00 call 10012633 - 1000AEBF: 83 C4 1C add esp,1Ch - 1000AEC2: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000AEC9: E8 09 00 00 00 call 1000AED7 - 1000AECE: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 1000AED1: E8 F7 51 00 00 call 100100CD - 1000AED6: C3 ret - 1000AED7: FF 75 0C push dword ptr [ebp+0Ch] - 1000AEDA: E8 78 FD FF FF call 1000AC57 - 1000AEDF: 59 pop ecx - 1000AEE0: C3 ret - 1000AEE1: 8B FF mov edi,edi - 1000AEE3: 55 push ebp - 1000AEE4: 8B EC mov ebp,esp - 1000AEE6: FF 75 10 push dword ptr [ebp+10h] - 1000AEE9: 6A 00 push 0 - 1000AEEB: FF 75 0C push dword ptr [ebp+0Ch] - 1000AEEE: FF 75 08 push dword ptr [ebp+8] - 1000AEF1: 68 12 E3 00 10 push 1000E312h - 1000AEF6: E8 53 FF FF FF call 1000AE4E - 1000AEFB: 83 C4 14 add esp,14h - 1000AEFE: 5D pop ebp - 1000AEFF: C3 ret - 1000AF00: 8B FF mov edi,edi - 1000AF02: 55 push ebp - 1000AF03: 8B EC mov ebp,esp - 1000AF05: 51 push ecx - 1000AF06: 83 65 FC 00 and dword ptr [ebp-4],0 - 1000AF0A: 56 push esi - 1000AF0B: 8D 45 FC lea eax,[ebp-4] - 1000AF0E: 50 push eax - 1000AF0F: FF 75 0C push dword ptr [ebp+0Ch] - 1000AF12: FF 75 08 push dword ptr [ebp+8] - 1000AF15: E8 59 90 00 00 call 10013F73 - 1000AF1A: 8B F0 mov esi,eax - 1000AF1C: 83 C4 0C add esp,0Ch - 1000AF1F: 85 F6 test esi,esi - 1000AF21: 75 18 jne 1000AF3B - 1000AF23: 39 45 FC cmp dword ptr [ebp-4],eax - 1000AF26: 74 13 je 1000AF3B - 1000AF28: E8 1C 41 00 00 call 1000F049 - 1000AF2D: 85 C0 test eax,eax - 1000AF2F: 74 0A je 1000AF3B - 1000AF31: E8 13 41 00 00 call 1000F049 - 1000AF36: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1000AF39: 89 08 mov dword ptr [eax],ecx - 1000AF3B: 8B C6 mov eax,esi - 1000AF3D: 5E pop esi - 1000AF3E: C9 leave - 1000AF3F: C3 ret - 1000AF40: 8B FF mov edi,edi - 1000AF42: 55 push ebp - 1000AF43: 8B EC mov ebp,esp - 1000AF45: 83 EC 10 sub esp,10h - 1000AF48: 56 push esi - 1000AF49: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000AF4C: 57 push edi - 1000AF4D: 33 FF xor edi,edi - 1000AF4F: 89 7D FC mov dword ptr [ebp-4],edi - 1000AF52: 3B F7 cmp esi,edi - 1000AF54: 75 1E jne 1000AF74 - 1000AF56: E8 EE 40 00 00 call 1000F049 - 1000AF5B: 6A 16 push 16h - 1000AF5D: 5E pop esi - 1000AF5E: 57 push edi - 1000AF5F: 57 push edi - 1000AF60: 57 push edi - 1000AF61: 57 push edi - 1000AF62: 57 push edi - 1000AF63: 89 30 mov dword ptr [eax],esi - 1000AF65: E8 77 40 00 00 call 1000EFE1 - 1000AF6A: 83 C4 14 add esp,14h - 1000AF6D: 8B C6 mov eax,esi - 1000AF6F: E9 0B 02 00 00 jmp 1000B17F - 1000AF74: 6A 24 push 24h - 1000AF76: 68 FF 00 00 00 push 0FFh - 1000AF7B: 56 push esi - 1000AF7C: E8 EF F2 FF FF call 1000A270 - 1000AF81: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 1000AF84: 83 C4 0C add esp,0Ch - 1000AF87: 3B C7 cmp eax,edi - 1000AF89: 74 CB je 1000AF56 - 1000AF8B: 8B 08 mov ecx,dword ptr [eax] - 1000AF8D: 8B 40 04 mov eax,dword ptr [eax+4] - 1000AF90: 83 F8 FF cmp eax,0FFFFFFFFh - 1000AF93: 89 4D F0 mov dword ptr [ebp-10h],ecx - 1000AF96: 89 45 F4 mov dword ptr [ebp-0Ch],eax - 1000AF99: 7F 16 jg 1000AFB1 - 1000AF9B: 7C 08 jl 1000AFA5 - 1000AF9D: 81 F9 40 57 FF FF cmp ecx,0FFFF5740h - 1000AFA3: 73 0C jae 1000AFB1 - 1000AFA5: E8 9F 40 00 00 call 1000F049 - 1000AFAA: 6A 16 push 16h - 1000AFAC: 5E pop esi - 1000AFAD: 89 30 mov dword ptr [eax],esi - 1000AFAF: EB BC jmp 1000AF6D - 1000AFB1: 83 F8 07 cmp eax,7 - 1000AFB4: 7C 0A jl 1000AFC0 - 1000AFB6: 7F ED jg 1000AFA5 - 1000AFB8: 81 F9 CF 26 41 93 cmp ecx,934126CFh - 1000AFBE: 77 E5 ja 1000AFA5 - 1000AFC0: 53 push ebx - 1000AFC1: 57 push edi - 1000AFC2: 68 80 33 E1 01 push 1E13380h - 1000AFC7: 50 push eax - 1000AFC8: 51 push ecx - 1000AFC9: E8 12 91 00 00 call 100140E0 - 1000AFCE: 8B C8 mov ecx,eax - 1000AFD0: 83 C1 46 add ecx,46h - 1000AFD3: 8D 81 2B 01 00 00 lea eax,[ecx+0000012Bh] - 1000AFD9: 99 cdq - 1000AFDA: BB 90 01 00 00 mov ebx,190h - 1000AFDF: F7 FB idiv eax,ebx - 1000AFE1: 8D 79 FF lea edi,[ecx-1] - 1000AFE4: 6A 64 push 64h - 1000AFE6: 89 7D F8 mov dword ptr [ebp-8],edi - 1000AFE9: 89 4D 08 mov dword ptr [ebp+8],ecx - 1000AFEC: 8B D8 mov ebx,eax - 1000AFEE: 8B C7 mov eax,edi - 1000AFF0: 99 cdq - 1000AFF1: 5F pop edi - 1000AFF2: F7 FF idiv eax,edi - 1000AFF4: 6A FF push 0FFFFFFFFh - 1000AFF6: 68 93 FE FF FF push 0FFFFFE93h - 1000AFFB: 2B D8 sub ebx,eax - 1000AFFD: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1000B000: 99 cdq - 1000B001: 83 E2 03 and edx,3 - 1000B004: 03 C2 add eax,edx - 1000B006: C1 F8 02 sar eax,2 - 1000B009: 8D 44 03 EF lea eax,[ebx+eax-11h] - 1000B00D: 99 cdq - 1000B00E: 8B F8 mov edi,eax - 1000B010: 8D 41 BA lea eax,[ecx-46h] - 1000B013: 8B DA mov ebx,edx - 1000B015: 99 cdq - 1000B016: 52 push edx - 1000B017: 50 push eax - 1000B018: E8 83 90 00 00 call 100140A0 - 1000B01D: 2B C7 sub eax,edi - 1000B01F: 1B D3 sbb edx,ebx - 1000B021: 6A 00 push 0 - 1000B023: BB 80 51 01 00 mov ebx,15180h - 1000B028: 53 push ebx - 1000B029: 52 push edx - 1000B02A: 50 push eax - 1000B02B: E8 70 90 00 00 call 100140A0 - 1000B030: 8B 7D F0 mov edi,dword ptr [ebp-10h] - 1000B033: 03 F8 add edi,eax - 1000B035: 11 55 F4 adc dword ptr [ebp-0Ch],edx - 1000B038: 83 7D F4 00 cmp dword ptr [ebp-0Ch],0 - 1000B03C: 7F 4D jg 1000B08B - 1000B03E: 7C 04 jl 1000B044 - 1000B040: 85 FF test edi,edi - 1000B042: 73 47 jae 1000B08B - 1000B044: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1000B047: 81 C7 80 33 E1 01 add edi,1E13380h - 1000B04D: 83 55 F4 00 adc dword ptr [ebp-0Ch],0 - 1000B051: 8B C8 mov ecx,eax - 1000B053: 81 E1 03 00 00 80 and ecx,80000003h - 1000B059: 89 45 08 mov dword ptr [ebp+8],eax - 1000B05C: 79 05 jns 1000B063 - 1000B05E: 49 dec ecx - 1000B05F: 83 C9 FC or ecx,0FFFFFFFCh - 1000B062: 41 inc ecx - 1000B063: 75 0D jne 1000B072 - 1000B065: 6A 64 push 64h - 1000B067: 99 cdq - 1000B068: 59 pop ecx - 1000B069: F7 F9 idiv eax,ecx - 1000B06B: 85 D2 test edx,edx - 1000B06D: 75 14 jne 1000B083 - 1000B06F: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000B072: 05 6C 07 00 00 add eax,76Ch - 1000B077: 99 cdq - 1000B078: B9 90 01 00 00 mov ecx,190h - 1000B07D: F7 F9 idiv eax,ecx - 1000B07F: 85 D2 test edx,edx - 1000B081: 75 41 jne 1000B0C4 - 1000B083: 03 FB add edi,ebx - 1000B085: 83 55 F4 00 adc dword ptr [ebp-0Ch],0 - 1000B089: EB 32 jmp 1000B0BD - 1000B08B: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000B08E: 8B C8 mov ecx,eax - 1000B090: 81 E1 03 00 00 80 and ecx,80000003h - 1000B096: 79 05 jns 1000B09D - 1000B098: 49 dec ecx - 1000B099: 83 C9 FC or ecx,0FFFFFFFCh - 1000B09C: 41 inc ecx - 1000B09D: 75 0A jne 1000B0A9 - 1000B09F: 6A 64 push 64h - 1000B0A1: 99 cdq - 1000B0A2: 59 pop ecx - 1000B0A3: F7 F9 idiv eax,ecx - 1000B0A5: 85 D2 test edx,edx - 1000B0A7: 75 14 jne 1000B0BD - 1000B0A9: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000B0AC: 05 6C 07 00 00 add eax,76Ch - 1000B0B1: 99 cdq - 1000B0B2: B9 90 01 00 00 mov ecx,190h - 1000B0B7: F7 F9 idiv eax,ecx - 1000B0B9: 85 D2 test edx,edx - 1000B0BB: 75 07 jne 1000B0C4 - 1000B0BD: C7 45 FC 01 00 00 mov dword ptr [ebp-4],1 - 00 - 1000B0C4: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000B0C7: 6A 00 push 0 - 1000B0C9: 53 push ebx - 1000B0CA: FF 75 F4 push dword ptr [ebp-0Ch] - 1000B0CD: 89 46 14 mov dword ptr [esi+14h],eax - 1000B0D0: 57 push edi - 1000B0D1: E8 0A 90 00 00 call 100140E0 - 1000B0D6: 6A FF push 0FFFFFFFFh - 1000B0D8: 89 46 1C mov dword ptr [esi+1Ch],eax - 1000B0DB: 99 cdq - 1000B0DC: 68 80 AE FE FF push 0FFFEAE80h - 1000B0E1: 52 push edx - 1000B0E2: 50 push eax - 1000B0E3: E8 B8 8F 00 00 call 100140A0 - 1000B0E8: 03 F8 add edi,eax - 1000B0EA: 11 55 F4 adc dword ptr [ebp-0Ch],edx - 1000B0ED: 83 7D FC 00 cmp dword ptr [ebp-4],0 - 1000B0F1: BA B4 56 02 10 mov edx,100256B4h - 1000B0F6: 75 05 jne 1000B0FD - 1000B0F8: BA E8 56 02 10 mov edx,100256E8h - 1000B0FD: 8B 46 1C mov eax,dword ptr [esi+1Ch] - 1000B100: 33 C9 xor ecx,ecx - 1000B102: 41 inc ecx - 1000B103: 39 42 04 cmp dword ptr [edx+4],eax - 1000B106: 7D 0D jge 1000B115 - 1000B108: 8B D8 mov ebx,eax - 1000B10A: 41 inc ecx - 1000B10B: 39 1C 8A cmp dword ptr [edx+ecx*4],ebx - 1000B10E: 7C FA jl 1000B10A - 1000B110: BB 80 51 01 00 mov ebx,15180h - 1000B115: 49 dec ecx - 1000B116: 89 4E 10 mov dword ptr [esi+10h],ecx - 1000B119: 2B 04 8A sub eax,dword ptr [edx+ecx*4] - 1000B11C: 6A 00 push 0 - 1000B11E: 89 46 0C mov dword ptr [esi+0Ch],eax - 1000B121: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 1000B124: 53 push ebx - 1000B125: FF 70 04 push dword ptr [eax+4] - 1000B128: FF 30 push dword ptr [eax] - 1000B12A: E8 B1 8F 00 00 call 100140E0 - 1000B12F: 6A 07 push 7 - 1000B131: 83 C0 04 add eax,4 - 1000B134: 59 pop ecx - 1000B135: 99 cdq - 1000B136: F7 F9 idiv eax,ecx - 1000B138: 33 DB xor ebx,ebx - 1000B13A: 53 push ebx - 1000B13B: 68 10 0E 00 00 push 0E10h - 1000B140: FF 75 F4 push dword ptr [ebp-0Ch] - 1000B143: 57 push edi - 1000B144: 89 56 18 mov dword ptr [esi+18h],edx - 1000B147: E8 94 8F 00 00 call 100140E0 - 1000B14C: 6A FF push 0FFFFFFFFh - 1000B14E: 89 46 08 mov dword ptr [esi+8],eax - 1000B151: 99 cdq - 1000B152: 68 F0 F1 FF FF push 0FFFFF1F0h - 1000B157: 52 push edx - 1000B158: 50 push eax - 1000B159: E8 42 8F 00 00 call 100140A0 - 1000B15E: 53 push ebx - 1000B15F: 03 F8 add edi,eax - 1000B161: 11 55 F4 adc dword ptr [ebp-0Ch],edx - 1000B164: 6A 3C push 3Ch - 1000B166: FF 75 F4 push dword ptr [ebp-0Ch] - 1000B169: 57 push edi - 1000B16A: E8 71 8F 00 00 call 100140E0 - 1000B16F: 89 46 04 mov dword ptr [esi+4],eax - 1000B172: 6B C0 3C imul eax,eax,3Ch - 1000B175: 2B F8 sub edi,eax - 1000B177: 89 5E 20 mov dword ptr [esi+20h],ebx - 1000B17A: 89 3E mov dword ptr [esi],edi - 1000B17C: 33 C0 xor eax,eax - 1000B17E: 5B pop ebx - 1000B17F: 5F pop edi - 1000B180: 5E pop esi - 1000B181: C9 leave - 1000B182: C3 ret - 1000B183: 8B FF mov edi,edi - 1000B185: 55 push ebp - 1000B186: 8B EC mov ebp,esp - 1000B188: 83 EC 14 sub esp,14h - 1000B18B: 53 push ebx - 1000B18C: 33 DB xor ebx,ebx - 1000B18E: 56 push esi - 1000B18F: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000B192: 89 5D F8 mov dword ptr [ebp-8],ebx - 1000B195: 89 5D F4 mov dword ptr [ebp-0Ch],ebx - 1000B198: 89 5D FC mov dword ptr [ebp-4],ebx - 1000B19B: 3B F3 cmp esi,ebx - 1000B19D: 75 1E jne 1000B1BD - 1000B19F: E8 A5 3E 00 00 call 1000F049 - 1000B1A4: 6A 16 push 16h - 1000B1A6: 5E pop esi - 1000B1A7: 53 push ebx - 1000B1A8: 53 push ebx - 1000B1A9: 53 push ebx - 1000B1AA: 53 push ebx - 1000B1AB: 53 push ebx - 1000B1AC: 89 30 mov dword ptr [eax],esi - 1000B1AE: E8 2E 3E 00 00 call 1000EFE1 - 1000B1B3: 83 C4 14 add esp,14h - 1000B1B6: 8B C6 mov eax,esi - 1000B1B8: E9 3B 02 00 00 jmp 1000B3F8 - 1000B1BD: 57 push edi - 1000B1BE: 6A 24 push 24h - 1000B1C0: 68 FF 00 00 00 push 0FFh - 1000B1C5: 56 push esi - 1000B1C6: E8 A5 F0 FF FF call 1000A270 - 1000B1CB: 8B 7D 0C mov edi,dword ptr [ebp+0Ch] - 1000B1CE: 83 C4 0C add esp,0Ch - 1000B1D1: 3B FB cmp edi,ebx - 1000B1D3: 75 19 jne 1000B1EE - 1000B1D5: E8 6F 3E 00 00 call 1000F049 - 1000B1DA: 6A 16 push 16h - 1000B1DC: 5E pop esi - 1000B1DD: 53 push ebx - 1000B1DE: 53 push ebx - 1000B1DF: 53 push ebx - 1000B1E0: 53 push ebx - 1000B1E1: 53 push ebx - 1000B1E2: 89 30 mov dword ptr [eax],esi - 1000B1E4: E8 F8 3D 00 00 call 1000EFE1 - 1000B1E9: 83 C4 14 add esp,14h - 1000B1EC: EB 28 jmp 1000B216 - 1000B1EE: 8B 47 04 mov eax,dword ptr [edi+4] - 1000B1F1: 3B C3 cmp eax,ebx - 1000B1F3: 8B 0F mov ecx,dword ptr [edi] - 1000B1F5: 7F 06 jg 1000B1FD - 1000B1F7: 7C 13 jl 1000B20C - 1000B1F9: 3B CB cmp ecx,ebx - 1000B1FB: 72 0F jb 1000B20C - 1000B1FD: 83 F8 07 cmp eax,7 - 1000B200: 7C 1B jl 1000B21D - 1000B202: 7F 08 jg 1000B20C - 1000B204: 81 F9 FF 6F 40 93 cmp ecx,93406FFFh - 1000B20A: 76 11 jbe 1000B21D - 1000B20C: E8 38 3E 00 00 call 1000F049 - 1000B211: 6A 16 push 16h - 1000B213: 5E pop esi - 1000B214: 89 30 mov dword ptr [eax],esi - 1000B216: 8B C6 mov eax,esi - 1000B218: E9 DA 01 00 00 jmp 1000B3F7 - 1000B21D: E8 09 0B 00 00 call 1000BD2B - 1000B222: 8D 45 F8 lea eax,[ebp-8] - 1000B225: 50 push eax - 1000B226: E8 00 0D 00 00 call 1000BF2B - 1000B22B: 59 pop ecx - 1000B22C: 85 C0 test eax,eax - 1000B22E: 74 0D je 1000B23D - 1000B230: 53 push ebx - 1000B231: 53 push ebx - 1000B232: 53 push ebx - 1000B233: 53 push ebx - 1000B234: 53 push ebx - 1000B235: E8 7F 3C 00 00 call 1000EEB9 - 1000B23A: 83 C4 14 add esp,14h - 1000B23D: 8D 45 F4 lea eax,[ebp-0Ch] - 1000B240: 50 push eax - 1000B241: E8 1E 0D 00 00 call 1000BF64 - 1000B246: 59 pop ecx - 1000B247: 85 C0 test eax,eax - 1000B249: 74 0D je 1000B258 - 1000B24B: 53 push ebx - 1000B24C: 53 push ebx - 1000B24D: 53 push ebx - 1000B24E: 53 push ebx - 1000B24F: 53 push ebx - 1000B250: E8 64 3C 00 00 call 1000EEB9 - 1000B255: 83 C4 14 add esp,14h - 1000B258: 8D 45 FC lea eax,[ebp-4] - 1000B25B: 50 push eax - 1000B25C: E8 3C 0D 00 00 call 1000BF9D - 1000B261: 59 pop ecx - 1000B262: 85 C0 test eax,eax - 1000B264: 74 0D je 1000B273 - 1000B266: 53 push ebx - 1000B267: 53 push ebx - 1000B268: 53 push ebx - 1000B269: 53 push ebx - 1000B26A: 53 push ebx - 1000B26B: E8 49 3C 00 00 call 1000EEB9 - 1000B270: 83 C4 14 add esp,14h - 1000B273: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 1000B276: 8B 48 04 mov ecx,dword ptr [eax+4] - 1000B279: 3B CB cmp ecx,ebx - 1000B27B: 8B 3F mov edi,dword ptr [edi] - 1000B27D: 7C 6E jl 1000B2ED - 1000B27F: 7F 08 jg 1000B289 - 1000B281: 81 FF 80 F4 03 00 cmp edi,3F480h - 1000B287: 76 64 jbe 1000B2ED - 1000B289: 8B 45 FC mov eax,dword ptr [ebp-4] - 1000B28C: 99 cdq - 1000B28D: 2B F8 sub edi,eax - 1000B28F: 8D 45 EC lea eax,[ebp-14h] - 1000B292: 50 push eax - 1000B293: 1B CA sbb ecx,edx - 1000B295: 56 push esi - 1000B296: 89 7D EC mov dword ptr [ebp-14h],edi - 1000B299: 89 4D F0 mov dword ptr [ebp-10h],ecx - 1000B29C: E8 9F FC FF FF call 1000AF40 - 1000B2A1: 59 pop ecx - 1000B2A2: 59 pop ecx - 1000B2A3: 3B C3 cmp eax,ebx - 1000B2A5: 0F 85 4C 01 00 00 jne 1000B3F7 - 1000B2AB: 39 5D F8 cmp dword ptr [ebp-8],ebx - 1000B2AE: 0F 84 41 01 00 00 je 1000B3F5 - 1000B2B4: 56 push esi - 1000B2B5: E8 F8 0A 00 00 call 1000BDB2 - 1000B2BA: 59 pop ecx - 1000B2BB: 85 C0 test eax,eax - 1000B2BD: 0F 84 32 01 00 00 je 1000B3F5 - 1000B2C3: 8B 45 F4 mov eax,dword ptr [ebp-0Ch] - 1000B2C6: 99 cdq - 1000B2C7: 29 45 EC sub dword ptr [ebp-14h],eax - 1000B2CA: 8D 45 EC lea eax,[ebp-14h] - 1000B2CD: 50 push eax - 1000B2CE: 19 55 F0 sbb dword ptr [ebp-10h],edx - 1000B2D1: 56 push esi - 1000B2D2: E8 69 FC FF FF call 1000AF40 - 1000B2D7: 59 pop ecx - 1000B2D8: 59 pop ecx - 1000B2D9: 3B C3 cmp eax,ebx - 1000B2DB: 0F 85 16 01 00 00 jne 1000B3F7 - 1000B2E1: C7 46 20 01 00 00 mov dword ptr [esi+20h],1 - 00 - 1000B2E8: E9 08 01 00 00 jmp 1000B3F5 - 1000B2ED: 50 push eax - 1000B2EE: 56 push esi - 1000B2EF: E8 4C FC FF FF call 1000AF40 - 1000B2F4: 59 pop ecx - 1000B2F5: 59 pop ecx - 1000B2F6: 3B C3 cmp eax,ebx - 1000B2F8: 0F 85 F9 00 00 00 jne 1000B3F7 - 1000B2FE: 39 5D F8 cmp dword ptr [ebp-8],ebx - 1000B301: 74 32 je 1000B335 - 1000B303: 56 push esi - 1000B304: E8 A9 0A 00 00 call 1000BDB2 - 1000B309: 59 pop ecx - 1000B30A: 85 C0 test eax,eax - 1000B30C: 74 27 je 1000B335 - 1000B30E: 8B 4D F4 mov ecx,dword ptr [ebp-0Ch] - 1000B311: 8B 45 FC mov eax,dword ptr [ebp-4] - 1000B314: 03 C1 add eax,ecx - 1000B316: 99 cdq - 1000B317: 8B C8 mov ecx,eax - 1000B319: 8B C2 mov eax,edx - 1000B31B: 89 45 08 mov dword ptr [ebp+8],eax - 1000B31E: 8B 06 mov eax,dword ptr [esi] - 1000B320: 99 cdq - 1000B321: 8B F8 mov edi,eax - 1000B323: 2B F9 sub edi,ecx - 1000B325: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000B328: 8B DA mov ebx,edx - 1000B32A: 1B D9 sbb ebx,ecx - 1000B32C: C7 46 20 01 00 00 mov dword ptr [esi+20h],1 - 00 - 1000B333: EB 0F jmp 1000B344 - 1000B335: 8B 06 mov eax,dword ptr [esi] - 1000B337: 99 cdq - 1000B338: 8B F8 mov edi,eax - 1000B33A: 8B 45 FC mov eax,dword ptr [ebp-4] - 1000B33D: 8B DA mov ebx,edx - 1000B33F: 99 cdq - 1000B340: 2B F8 sub edi,eax - 1000B342: 1B DA sbb ebx,edx - 1000B344: 6A 00 push 0 - 1000B346: 6A 3C push 3Ch - 1000B348: 53 push ebx - 1000B349: 57 push edi - 1000B34A: E8 81 8E 00 00 call 100141D0 - 1000B34F: 89 06 mov dword ptr [esi],eax - 1000B351: 85 C0 test eax,eax - 1000B353: 7D 0B jge 1000B360 - 1000B355: 83 C0 3C add eax,3Ch - 1000B358: 83 C7 C4 add edi,0FFFFFFC4h - 1000B35B: 89 06 mov dword ptr [esi],eax - 1000B35D: 83 D3 FF adc ebx,0FFFFFFFFh - 1000B360: 6A 00 push 0 - 1000B362: 6A 3C push 3Ch - 1000B364: 53 push ebx - 1000B365: 57 push edi - 1000B366: E8 75 8D 00 00 call 100140E0 - 1000B36B: 8B F8 mov edi,eax - 1000B36D: 8B 46 04 mov eax,dword ptr [esi+4] - 1000B370: 8B DA mov ebx,edx - 1000B372: 99 cdq - 1000B373: 6A 00 push 0 - 1000B375: 03 F8 add edi,eax - 1000B377: 6A 3C push 3Ch - 1000B379: 13 DA adc ebx,edx - 1000B37B: 53 push ebx - 1000B37C: 57 push edi - 1000B37D: E8 4E 8E 00 00 call 100141D0 - 1000B382: 89 46 04 mov dword ptr [esi+4],eax - 1000B385: 85 C0 test eax,eax - 1000B387: 7D 0C jge 1000B395 - 1000B389: 83 C0 3C add eax,3Ch - 1000B38C: 83 C7 C4 add edi,0FFFFFFC4h - 1000B38F: 89 46 04 mov dword ptr [esi+4],eax - 1000B392: 83 D3 FF adc ebx,0FFFFFFFFh - 1000B395: 6A 00 push 0 - 1000B397: 6A 3C push 3Ch - 1000B399: 53 push ebx - 1000B39A: 57 push edi - 1000B39B: E8 40 8D 00 00 call 100140E0 - 1000B3A0: 8B F8 mov edi,eax - 1000B3A2: 8B 46 08 mov eax,dword ptr [esi+8] - 1000B3A5: 8B DA mov ebx,edx - 1000B3A7: 99 cdq - 1000B3A8: 6A 00 push 0 - 1000B3AA: 03 F8 add edi,eax - 1000B3AC: 6A 18 push 18h - 1000B3AE: 13 DA adc ebx,edx - 1000B3B0: 53 push ebx - 1000B3B1: 57 push edi - 1000B3B2: E8 19 8E 00 00 call 100141D0 - 1000B3B7: 89 46 08 mov dword ptr [esi+8],eax - 1000B3BA: 85 C0 test eax,eax - 1000B3BC: 7D 0C jge 1000B3CA - 1000B3BE: 83 C0 18 add eax,18h - 1000B3C1: 83 C7 E8 add edi,0FFFFFFE8h - 1000B3C4: 89 46 08 mov dword ptr [esi+8],eax - 1000B3C7: 83 D3 FF adc ebx,0FFFFFFFFh - 1000B3CA: 6A 00 push 0 - 1000B3CC: 6A 18 push 18h - 1000B3CE: 53 push ebx - 1000B3CF: 57 push edi - 1000B3D0: E8 0B 8D 00 00 call 100140E0 - 1000B3D5: 8B C8 mov ecx,eax - 1000B3D7: 85 D2 test edx,edx - 1000B3D9: 7C 2B jl 1000B406 - 1000B3DB: 7F 04 jg 1000B3E1 - 1000B3DD: 85 C9 test ecx,ecx - 1000B3DF: 76 1B jbe 1000B3FC - 1000B3E1: 8B 46 18 mov eax,dword ptr [esi+18h] - 1000B3E4: 03 C1 add eax,ecx - 1000B3E6: 6A 07 push 7 - 1000B3E8: 99 cdq - 1000B3E9: 5F pop edi - 1000B3EA: F7 FF idiv eax,edi - 1000B3EC: 01 4E 0C add dword ptr [esi+0Ch],ecx - 1000B3EF: 89 56 18 mov dword ptr [esi+18h],edx - 1000B3F2: 01 4E 1C add dword ptr [esi+1Ch],ecx - 1000B3F5: 33 C0 xor eax,eax - 1000B3F7: 5F pop edi - 1000B3F8: 5E pop esi - 1000B3F9: 5B pop ebx - 1000B3FA: C9 leave - 1000B3FB: C3 ret - 1000B3FC: 85 D2 test edx,edx - 1000B3FE: 7F F5 jg 1000B3F5 - 1000B400: 7C 04 jl 1000B406 - 1000B402: 85 C9 test ecx,ecx - 1000B404: 73 EF jae 1000B3F5 - 1000B406: 8B 46 18 mov eax,dword ptr [esi+18h] - 1000B409: 8D 44 01 07 lea eax,[ecx+eax+7] - 1000B40D: 99 cdq - 1000B40E: 6A 07 push 7 - 1000B410: 5F pop edi - 1000B411: F7 FF idiv eax,edi - 1000B413: 01 4E 0C add dword ptr [esi+0Ch],ecx - 1000B416: 8B 46 0C mov eax,dword ptr [esi+0Ch] - 1000B419: 89 56 18 mov dword ptr [esi+18h],edx - 1000B41C: 85 C0 test eax,eax - 1000B41E: 7F D2 jg 1000B3F2 - 1000B420: 81 C1 6D 01 00 00 add ecx,16Dh - 1000B426: 01 4E 1C add dword ptr [esi+1Ch],ecx - 1000B429: 83 C0 1F add eax,1Fh - 1000B42C: FF 4E 14 dec dword ptr [esi+14h] - 1000B42F: 89 46 0C mov dword ptr [esi+0Ch],eax - 1000B432: C7 46 10 0B 00 00 mov dword ptr [esi+10h],0Bh - 00 - 1000B439: EB BA jmp 1000B3F5 - 1000B43B: 8B FF mov edi,edi - 1000B43D: 55 push ebp - 1000B43E: 8B EC mov ebp,esp - 1000B440: 56 push esi - 1000B441: E8 44 8D 00 00 call 1001418A - 1000B446: 8B F0 mov esi,eax - 1000B448: 85 F6 test esi,esi - 1000B44A: 74 13 je 1000B45F - 1000B44C: FF 75 08 push dword ptr [ebp+8] - 1000B44F: 56 push esi - 1000B450: E8 2E FD FF FF call 1000B183 - 1000B455: F7 D8 neg eax - 1000B457: 1B C0 sbb eax,eax - 1000B459: 59 pop ecx - 1000B45A: F7 D0 not eax - 1000B45C: 59 pop ecx - 1000B45D: 23 C6 and eax,esi - 1000B45F: 5E pop esi - 1000B460: 5D pop ebp - 1000B461: C3 ret - 1000B462: 8B FF mov edi,edi - 1000B464: 55 push ebp - 1000B465: 8B EC mov ebp,esp - 1000B467: 81 EC C4 00 00 00 sub esp,0C4h - 1000B46D: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1000B472: 33 C5 xor eax,ebp - 1000B474: 89 45 FC mov dword ptr [ebp-4],eax - 1000B477: 56 push esi - 1000B478: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000B47B: 57 push edi - 1000B47C: 33 FF xor edi,edi - 1000B47E: 89 BD 4C FF FF FF mov dword ptr [ebp+FFFFFF4Ch],edi - 1000B484: 3B F7 cmp esi,edi - 1000B486: 75 1E jne 1000B4A6 - 1000B488: E8 BC 3B 00 00 call 1000F049 - 1000B48D: 6A 16 push 16h - 1000B48F: 5E pop esi - 1000B490: 57 push edi - 1000B491: 57 push edi - 1000B492: 57 push edi - 1000B493: 57 push edi - 1000B494: 57 push edi - 1000B495: 89 30 mov dword ptr [eax],esi - 1000B497: E8 45 3B 00 00 call 1000EFE1 - 1000B49C: 83 C4 14 add esp,14h - 1000B49F: 8B C6 mov eax,esi - 1000B4A1: E9 24 01 00 00 jmp 1000B5CA - 1000B4A6: E8 80 08 00 00 call 1000BD2B - 1000B4AB: 8D 85 4C FF FF FF lea eax,[ebp+FFFFFF4Ch] - 1000B4B1: 50 push eax - 1000B4B2: E8 E6 0A 00 00 call 1000BF9D - 1000B4B7: 59 pop ecx - 1000B4B8: 85 C0 test eax,eax - 1000B4BA: 74 0D je 1000B4C9 - 1000B4BC: 57 push edi - 1000B4BD: 57 push edi - 1000B4BE: 57 push edi - 1000B4BF: 57 push edi - 1000B4C0: 57 push edi - 1000B4C1: E8 F3 39 00 00 call 1000EEB9 - 1000B4C6: 83 C4 14 add esp,14h - 1000B4C9: 8B 85 4C FF FF FF mov eax,dword ptr [ebp+FFFFFF4Ch] - 1000B4CF: 53 push ebx - 1000B4D0: 6A 3C push 3Ch - 1000B4D2: 99 cdq - 1000B4D3: 59 pop ecx - 1000B4D4: F7 F9 idiv eax,ecx - 1000B4D6: 66 89 46 0A mov word ptr [esi+0Ah],ax - 1000B4DA: 8D 85 44 FF FF FF lea eax,[ebp+FFFFFF44h] - 1000B4E0: 50 push eax - 1000B4E1: FF 15 58 F0 01 10 call dword ptr ds:[1001F058h] - 1000B4E7: 8B 9D 44 FF FF FF mov ebx,dword ptr [ebp+FFFFFF44h] - 1000B4ED: 57 push edi - 1000B4EE: 8B BD 48 FF FF FF mov edi,dword ptr [ebp+FFFFFF48h] - 1000B4F4: 68 00 46 C3 23 push 23C34600h - 1000B4F9: 57 push edi - 1000B4FA: 53 push ebx - 1000B4FB: E8 20 3D 00 00 call 1000F220 - 1000B500: 89 85 3C FF FF FF mov dword ptr [ebp+FFFFFF3Ch],eax - 1000B506: 89 95 40 FF FF FF mov dword ptr [ebp+FFFFFF40h],edx - 1000B50C: 3B 05 20 61 02 10 cmp eax,dword ptr ds:[10026120h] - 1000B512: 75 08 jne 1000B51C - 1000B514: 3B 15 24 61 02 10 cmp edx,dword ptr ds:[10026124h] - 1000B51A: 74 62 je 1000B57E - 1000B51C: 8D 85 50 FF FF FF lea eax,[ebp+FFFFFF50h] - 1000B522: 50 push eax - 1000B523: FF 15 6C F0 01 10 call dword ptr ds:[1001F06Ch] - 1000B529: 83 F8 FF cmp eax,0FFFFFFFFh - 1000B52C: 74 27 je 1000B555 - 1000B52E: 83 F8 02 cmp eax,2 - 1000B531: 75 19 jne 1000B54C - 1000B533: 66 83 7D EA 00 cmp word ptr [ebp-16h],0 - 1000B538: 74 12 je 1000B54C - 1000B53A: 83 7D F8 00 cmp dword ptr [ebp-8],0 - 1000B53E: 74 0C je 1000B54C - 1000B540: C7 05 F0 4B 02 10 mov dword ptr ds:[10024BF0h],1 - 01 00 00 00 - 1000B54A: EB 10 jmp 1000B55C - 1000B54C: 83 25 F0 4B 02 10 and dword ptr ds:[10024BF0h],0 - 00 - 1000B553: EB 07 jmp 1000B55C - 1000B555: 83 0D F0 4B 02 10 or dword ptr ds:[10024BF0h],0FFFFFFFFh - FF - 1000B55C: 8B 85 3C FF FF FF mov eax,dword ptr [ebp+FFFFFF3Ch] - 1000B562: 8B BD 48 FF FF FF mov edi,dword ptr [ebp+FFFFFF48h] - 1000B568: 8B 9D 44 FF FF FF mov ebx,dword ptr [ebp+FFFFFF44h] - 1000B56E: A3 20 61 02 10 mov dword ptr ds:[10026120h],eax - 1000B573: 8B 85 40 FF FF FF mov eax,dword ptr [ebp+FFFFFF40h] - 1000B579: A3 24 61 02 10 mov dword ptr ds:[10026124h],eax - 1000B57E: 66 A1 F0 4B 02 10 mov ax,word ptr ds:[10024BF0h] - 1000B584: 6A 00 push 0 - 1000B586: 68 10 27 00 00 push 2710h - 1000B58B: 57 push edi - 1000B58C: 53 push ebx - 1000B58D: 66 89 46 0C mov word ptr [esi+0Ch],ax - 1000B591: E8 8A 3C 00 00 call 1000F220 - 1000B596: 6A 00 push 0 - 1000B598: 68 E8 03 00 00 push 3E8h - 1000B59D: 52 push edx - 1000B59E: 50 push eax - 1000B59F: E8 EC 8C 00 00 call 10014290 - 1000B5A4: 6A 00 push 0 - 1000B5A6: 81 C3 00 80 C1 2A add ebx,2AC18000h - 1000B5AC: 68 80 96 98 00 push 989680h - 1000B5B1: 81 D7 21 4E 62 FE adc edi,0FE624E21h - 1000B5B7: 57 push edi - 1000B5B8: 53 push ebx - 1000B5B9: 66 89 46 08 mov word ptr [esi+8],ax - 1000B5BD: E8 5E 3C 00 00 call 1000F220 - 1000B5C2: 89 06 mov dword ptr [esi],eax - 1000B5C4: 89 56 04 mov dword ptr [esi+4],edx - 1000B5C7: 33 C0 xor eax,eax - 1000B5C9: 5B pop ebx - 1000B5CA: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1000B5CD: 5F pop edi - 1000B5CE: 33 CD xor ecx,ebp - 1000B5D0: 5E pop esi - 1000B5D1: E8 C5 EA FF FF call 1000A09B - 1000B5D6: C9 leave - 1000B5D7: C3 ret - 1000B5D8: 8B FF mov edi,edi - 1000B5DA: 55 push ebp - 1000B5DB: 8B EC mov ebp,esp - 1000B5DD: 5D pop ebp - 1000B5DE: E9 7F FE FF FF jmp 1000B462 - 1000B5E3: 8B FF mov edi,edi - 1000B5E5: 55 push ebp - 1000B5E6: 8B EC mov ebp,esp - 1000B5E8: E8 E9 09 00 00 call 1000BFD6 - 1000B5ED: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000B5F0: 89 08 mov dword ptr [eax],ecx - 1000B5F2: 5D pop ebp - 1000B5F3: C3 ret - 1000B5F4: 8B FF mov edi,edi - 1000B5F6: 55 push ebp - 1000B5F7: 8B EC mov ebp,esp - 1000B5F9: E8 DE 09 00 00 call 1000BFDC - 1000B5FE: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000B601: 89 08 mov dword ptr [eax],ecx - 1000B603: 5D pop ebp - 1000B604: C3 ret - 1000B605: 8B FF mov edi,edi - 1000B607: 55 push ebp - 1000B608: 8B EC mov ebp,esp - 1000B60A: E8 D3 09 00 00 call 1000BFE2 - 1000B60F: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000B612: 89 08 mov dword ptr [eax],ecx - 1000B614: 5D pop ebp - 1000B615: C3 ret - 1000B616: 6A 2C push 2Ch - 1000B618: 68 28 1A 02 10 push 10021A28h - 1000B61D: E8 66 4A 00 00 call 10010088 - 1000B622: 33 DB xor ebx,ebx - 1000B624: 89 5D C8 mov dword ptr [ebp-38h],ebx - 1000B627: 89 5D D4 mov dword ptr [ebp-2Ch],ebx - 1000B62A: 89 5D E4 mov dword ptr [ebp-1Ch],ebx - 1000B62D: 89 5D DC mov dword ptr [ebp-24h],ebx - 1000B630: 89 5D D8 mov dword ptr [ebp-28h],ebx - 1000B633: 89 5D E0 mov dword ptr [ebp-20h],ebx - 1000B636: 6A 07 push 7 - 1000B638: E8 51 3F 00 00 call 1000F58E - 1000B63D: 59 pop ecx - 1000B63E: 89 5D FC mov dword ptr [ebp-4],ebx - 1000B641: E8 A2 09 00 00 call 1000BFE8 - 1000B646: 89 45 E0 mov dword ptr [ebp-20h],eax - 1000B649: 8D 45 E4 lea eax,[ebp-1Ch] - 1000B64C: 50 push eax - 1000B64D: E8 4B 09 00 00 call 1000BF9D - 1000B652: 59 pop ecx - 1000B653: 3B C3 cmp eax,ebx - 1000B655: 74 0D je 1000B664 - 1000B657: 53 push ebx - 1000B658: 53 push ebx - 1000B659: 53 push ebx - 1000B65A: 53 push ebx - 1000B65B: 53 push ebx - 1000B65C: E8 58 38 00 00 call 1000EEB9 - 1000B661: 83 C4 14 add esp,14h - 1000B664: 8D 45 DC lea eax,[ebp-24h] - 1000B667: 50 push eax - 1000B668: E8 BE 08 00 00 call 1000BF2B - 1000B66D: 59 pop ecx - 1000B66E: 3B C3 cmp eax,ebx - 1000B670: 74 0D je 1000B67F - 1000B672: 53 push ebx - 1000B673: 53 push ebx - 1000B674: 53 push ebx - 1000B675: 53 push ebx - 1000B676: 53 push ebx - 1000B677: E8 3D 38 00 00 call 1000EEB9 - 1000B67C: 83 C4 14 add esp,14h - 1000B67F: 8D 45 D8 lea eax,[ebp-28h] - 1000B682: 50 push eax - 1000B683: E8 DC 08 00 00 call 1000BF64 - 1000B688: 59 pop ecx - 1000B689: 3B C3 cmp eax,ebx - 1000B68B: 74 0D je 1000B69A - 1000B68D: 53 push ebx - 1000B68E: 53 push ebx - 1000B68F: 53 push ebx - 1000B690: 53 push ebx - 1000B691: 53 push ebx - 1000B692: E8 22 38 00 00 call 1000EEB9 - 1000B697: 83 C4 14 add esp,14h - 1000B69A: E8 B3 8E 00 00 call 10014552 - 1000B69F: 89 45 CC mov dword ptr [ebp-34h],eax - 1000B6A2: 89 1D D4 61 02 10 mov dword ptr ds:[100261D4h],ebx - 1000B6A8: 83 CF FF or edi,0FFFFFFFFh - 1000B6AB: 89 3D 00 4C 02 10 mov dword ptr ds:[10024C00h],edi - 1000B6B1: 89 3D F4 4B 02 10 mov dword ptr ds:[10024BF4h],edi - 1000B6B7: 68 AC F8 01 10 push 1001F8ACh - 1000B6BC: E8 0A 8E 00 00 call 100144CB - 1000B6C1: 59 pop ecx - 1000B6C2: 8B F0 mov esi,eax - 1000B6C4: 89 75 C4 mov dword ptr [ebp-3Ch],esi - 1000B6C7: 3B F3 cmp esi,ebx - 1000B6C9: 74 7C je 1000B747 - 1000B6CB: 38 1E cmp byte ptr [esi],bl - 1000B6CD: 74 78 je 1000B747 - 1000B6CF: A1 D8 61 02 10 mov eax,dword ptr ds:[100261D8h] - 1000B6D4: 3B C3 cmp eax,ebx - 1000B6D6: 74 21 je 1000B6F9 - 1000B6D8: 50 push eax - 1000B6D9: 56 push esi - 1000B6DA: E8 31 23 00 00 call 1000DA10 - 1000B6DF: 59 pop ecx - 1000B6E0: 59 pop ecx - 1000B6E1: 85 C0 test eax,eax - 1000B6E3: 0F 84 49 01 00 00 je 1000B832 - 1000B6E9: A1 D8 61 02 10 mov eax,dword ptr ds:[100261D8h] - 1000B6EE: 3B C3 cmp eax,ebx - 1000B6F0: 74 07 je 1000B6F9 - 1000B6F2: 50 push eax - 1000B6F3: E8 3C EC FF FF call 1000A334 - 1000B6F8: 59 pop ecx - 1000B6F9: 56 push esi - 1000B6FA: E8 41 8D 00 00 call 10014440 - 1000B6FF: 40 inc eax - 1000B700: 50 push eax - 1000B701: E8 03 72 00 00 call 10012909 - 1000B706: 59 pop ecx - 1000B707: 59 pop ecx - 1000B708: A3 D8 61 02 10 mov dword ptr ds:[100261D8h],eax - 1000B70D: 3B C3 cmp eax,ebx - 1000B70F: 0F 84 1D 01 00 00 je 1000B832 - 1000B715: 56 push esi - 1000B716: 56 push esi - 1000B717: E8 24 8D 00 00 call 10014440 - 1000B71C: 59 pop ecx - 1000B71D: 40 inc eax - 1000B71E: 50 push eax - 1000B71F: FF 35 D8 61 02 10 push dword ptr ds:[100261D8h] - 1000B725: E8 A6 8C 00 00 call 100143D0 - 1000B72A: 83 C4 0C add esp,0Ch - 1000B72D: 3B C3 cmp eax,ebx - 1000B72F: 0F 84 04 01 00 00 je 1000B839 - 1000B735: 53 push ebx - 1000B736: 53 push ebx - 1000B737: 53 push ebx - 1000B738: 53 push ebx - 1000B739: 53 push ebx - 1000B73A: E8 7A 37 00 00 call 1000EEB9 - 1000B73F: 83 C4 14 add esp,14h - 1000B742: E9 F2 00 00 00 jmp 1000B839 - 1000B747: A1 D8 61 02 10 mov eax,dword ptr ds:[100261D8h] - 1000B74C: 3B C3 cmp eax,ebx - 1000B74E: 74 0D je 1000B75D - 1000B750: 50 push eax - 1000B751: E8 DE EB FF FF call 1000A334 - 1000B756: 59 pop ecx - 1000B757: 89 1D D8 61 02 10 mov dword ptr ds:[100261D8h],ebx - 1000B75D: 68 28 61 02 10 push 10026128h - 1000B762: FF 15 6C F0 01 10 call dword ptr ds:[1001F06Ch] - 1000B768: 3B C7 cmp eax,edi - 1000B76A: 0F 84 C2 00 00 00 je 1000B832 - 1000B770: 33 C9 xor ecx,ecx - 1000B772: 41 inc ecx - 1000B773: 89 0D D4 61 02 10 mov dword ptr ds:[100261D4h],ecx - 1000B779: A1 28 61 02 10 mov eax,dword ptr ds:[10026128h] - 1000B77E: 6B C0 3C imul eax,eax,3Ch - 1000B781: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1000B784: 66 39 1D 6E 61 02 cmp word ptr ds:[1002616Eh],bx - 10 - 1000B78B: 74 0E je 1000B79B - 1000B78D: 8B 15 7C 61 02 10 mov edx,dword ptr ds:[1002617Ch] - 1000B793: 6B D2 3C imul edx,edx,3Ch - 1000B796: 03 C2 add eax,edx - 1000B798: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1000B79B: 66 39 1D C2 61 02 cmp word ptr ds:[100261C2h],bx - 10 - 1000B7A2: 74 1A je 1000B7BE - 1000B7A4: A1 D0 61 02 10 mov eax,dword ptr ds:[100261D0h] - 1000B7A9: 3B C3 cmp eax,ebx - 1000B7AB: 74 11 je 1000B7BE - 1000B7AD: 89 4D DC mov dword ptr [ebp-24h],ecx - 1000B7B0: 2B 05 7C 61 02 10 sub eax,dword ptr ds:[1002617Ch] - 1000B7B6: 6B C0 3C imul eax,eax,3Ch - 1000B7B9: 89 45 D8 mov dword ptr [ebp-28h],eax - 1000B7BC: EB 06 jmp 1000B7C4 - 1000B7BE: 89 5D DC mov dword ptr [ebp-24h],ebx - 1000B7C1: 89 5D D8 mov dword ptr [ebp-28h],ebx - 1000B7C4: 8D 45 D0 lea eax,[ebp-30h] - 1000B7C7: 50 push eax - 1000B7C8: 53 push ebx - 1000B7C9: 6A 3F push 3Fh - 1000B7CB: 8B 45 E0 mov eax,dword ptr [ebp-20h] - 1000B7CE: FF 30 push dword ptr [eax] - 1000B7D0: 57 push edi - 1000B7D1: 68 2C 61 02 10 push 1002612Ch - 1000B7D6: 53 push ebx - 1000B7D7: FF 75 CC push dword ptr [ebp-34h] - 1000B7DA: 8B 3D 70 F0 01 10 mov edi,dword ptr ds:[1001F070h] - 1000B7E0: FF D7 call edi - 1000B7E2: 85 C0 test eax,eax - 1000B7E4: 74 0F je 1000B7F5 - 1000B7E6: 39 5D D0 cmp dword ptr [ebp-30h],ebx - 1000B7E9: 75 0A jne 1000B7F5 - 1000B7EB: 8B 45 E0 mov eax,dword ptr [ebp-20h] - 1000B7EE: 8B 00 mov eax,dword ptr [eax] - 1000B7F0: 88 58 3F mov byte ptr [eax+3Fh],bl - 1000B7F3: EB 07 jmp 1000B7FC - 1000B7F5: 8B 45 E0 mov eax,dword ptr [ebp-20h] - 1000B7F8: 8B 00 mov eax,dword ptr [eax] - 1000B7FA: 88 18 mov byte ptr [eax],bl - 1000B7FC: 8D 45 D0 lea eax,[ebp-30h] - 1000B7FF: 50 push eax - 1000B800: 53 push ebx - 1000B801: 6A 3F push 3Fh - 1000B803: 8B 45 E0 mov eax,dword ptr [ebp-20h] - 1000B806: FF 70 04 push dword ptr [eax+4] - 1000B809: 6A FF push 0FFFFFFFFh - 1000B80B: 68 80 61 02 10 push 10026180h - 1000B810: 53 push ebx - 1000B811: FF 75 CC push dword ptr [ebp-34h] - 1000B814: FF D7 call edi - 1000B816: 85 C0 test eax,eax - 1000B818: 74 10 je 1000B82A - 1000B81A: 39 5D D0 cmp dword ptr [ebp-30h],ebx - 1000B81D: 75 0B jne 1000B82A - 1000B81F: 8B 45 E0 mov eax,dword ptr [ebp-20h] - 1000B822: 8B 40 04 mov eax,dword ptr [eax+4] - 1000B825: 88 58 3F mov byte ptr [eax+3Fh],bl - 1000B828: EB 08 jmp 1000B832 - 1000B82A: 8B 45 E0 mov eax,dword ptr [ebp-20h] - 1000B82D: 8B 40 04 mov eax,dword ptr [eax+4] - 1000B830: 88 18 mov byte ptr [eax],bl - 1000B832: C7 45 D4 01 00 00 mov dword ptr [ebp-2Ch],1 - 00 - 1000B839: FF 75 E4 push dword ptr [ebp-1Ch] - 1000B83C: E8 C4 FD FF FF call 1000B605 - 1000B841: FF 75 DC push dword ptr [ebp-24h] - 1000B844: E8 9A FD FF FF call 1000B5E3 - 1000B849: FF 75 D8 push dword ptr [ebp-28h] - 1000B84C: E8 A3 FD FF FF call 1000B5F4 - 1000B851: 83 C4 0C add esp,0Ch - 1000B854: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000B85B: E8 62 00 00 00 call 1000B8C2 - 1000B860: 39 5D D4 cmp dword ptr [ebp-2Ch],ebx - 1000B863: 0F 85 ED 00 00 00 jne 1000B956 - 1000B869: 6A 03 push 3 - 1000B86B: 56 push esi - 1000B86C: 6A 40 push 40h - 1000B86E: 8B 7D E0 mov edi,dword ptr [ebp-20h] - 1000B871: FF 37 push dword ptr [edi] - 1000B873: E8 A3 8A 00 00 call 1001431B - 1000B878: 83 C4 10 add esp,10h - 1000B87B: 85 C0 test eax,eax - 1000B87D: 74 0D je 1000B88C - 1000B87F: 53 push ebx - 1000B880: 53 push ebx - 1000B881: 53 push ebx - 1000B882: 53 push ebx - 1000B883: 53 push ebx - 1000B884: E8 30 36 00 00 call 1000EEB9 - 1000B889: 83 C4 14 add esp,14h - 1000B88C: 83 C6 03 add esi,3 - 1000B88F: 80 3E 2D cmp byte ptr [esi],2Dh - 1000B892: 75 08 jne 1000B89C - 1000B894: C7 45 C8 01 00 00 mov dword ptr [ebp-38h],1 - 00 - 1000B89B: 46 inc esi - 1000B89C: 56 push esi - 1000B89D: E8 63 8A 00 00 call 10014305 - 1000B8A2: 59 pop ecx - 1000B8A3: 69 C0 10 0E 00 00 imul eax,eax,0E10h - 1000B8A9: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1000B8AC: 8A 06 mov al,byte ptr [esi] - 1000B8AE: 3C 2B cmp al,2Bh - 1000B8B0: 74 08 je 1000B8BA - 1000B8B2: 3C 30 cmp al,30h - 1000B8B4: 7C 15 jl 1000B8CB - 1000B8B6: 3C 39 cmp al,39h - 1000B8B8: 7F 11 jg 1000B8CB - 1000B8BA: 46 inc esi - 1000B8BB: EB EF jmp 1000B8AC - 1000B8BD: 33 DB xor ebx,ebx - 1000B8BF: 8B 75 C4 mov esi,dword ptr [ebp-3Ch] - 1000B8C2: 6A 07 push 7 - 1000B8C4: E8 EB 3B 00 00 call 1000F4B4 - 1000B8C9: 59 pop ecx - 1000B8CA: C3 ret - 1000B8CB: 80 3E 3A cmp byte ptr [esi],3Ah - 1000B8CE: 75 38 jne 1000B908 - 1000B8D0: 46 inc esi - 1000B8D1: 56 push esi - 1000B8D2: E8 2E 8A 00 00 call 10014305 - 1000B8D7: 59 pop ecx - 1000B8D8: 6B C0 3C imul eax,eax,3Ch - 1000B8DB: 01 45 E4 add dword ptr [ebp-1Ch],eax - 1000B8DE: EB 05 jmp 1000B8E5 - 1000B8E0: 3C 39 cmp al,39h - 1000B8E2: 7F 07 jg 1000B8EB - 1000B8E4: 46 inc esi - 1000B8E5: 8A 06 mov al,byte ptr [esi] - 1000B8E7: 3C 30 cmp al,30h - 1000B8E9: 7D F5 jge 1000B8E0 - 1000B8EB: 80 3E 3A cmp byte ptr [esi],3Ah - 1000B8EE: 75 18 jne 1000B908 - 1000B8F0: 46 inc esi - 1000B8F1: 56 push esi - 1000B8F2: E8 0E 8A 00 00 call 10014305 - 1000B8F7: 59 pop ecx - 1000B8F8: 01 45 E4 add dword ptr [ebp-1Ch],eax - 1000B8FB: EB 05 jmp 1000B902 - 1000B8FD: 3C 39 cmp al,39h - 1000B8FF: 7F 07 jg 1000B908 - 1000B901: 46 inc esi - 1000B902: 8A 06 mov al,byte ptr [esi] - 1000B904: 3C 30 cmp al,30h - 1000B906: 7D F5 jge 1000B8FD - 1000B908: 39 5D C8 cmp dword ptr [ebp-38h],ebx - 1000B90B: 74 03 je 1000B910 - 1000B90D: F7 5D E4 neg dword ptr [ebp-1Ch] - 1000B910: 0F BE 06 movsx eax,byte ptr [esi] - 1000B913: 89 45 DC mov dword ptr [ebp-24h],eax - 1000B916: 3B C3 cmp eax,ebx - 1000B918: 74 23 je 1000B93D - 1000B91A: 6A 03 push 3 - 1000B91C: 56 push esi - 1000B91D: 6A 40 push 40h - 1000B91F: FF 77 04 push dword ptr [edi+4] - 1000B922: E8 F4 89 00 00 call 1001431B - 1000B927: 83 C4 10 add esp,10h - 1000B92A: 85 C0 test eax,eax - 1000B92C: 74 14 je 1000B942 - 1000B92E: 53 push ebx - 1000B92F: 53 push ebx - 1000B930: 53 push ebx - 1000B931: 53 push ebx - 1000B932: 53 push ebx - 1000B933: E8 81 35 00 00 call 1000EEB9 - 1000B938: 83 C4 14 add esp,14h - 1000B93B: EB 05 jmp 1000B942 - 1000B93D: 8B 47 04 mov eax,dword ptr [edi+4] - 1000B940: 88 18 mov byte ptr [eax],bl - 1000B942: 8B 75 E4 mov esi,dword ptr [ebp-1Ch] - 1000B945: E8 98 06 00 00 call 1000BFE2 - 1000B94A: 89 30 mov dword ptr [eax],esi - 1000B94C: 8B 75 DC mov esi,dword ptr [ebp-24h] - 1000B94F: E8 82 06 00 00 call 1000BFD6 - 1000B954: 89 30 mov dword ptr [eax],esi - 1000B956: E8 72 47 00 00 call 100100CD - 1000B95B: C3 ret - 1000B95C: 8B FF mov edi,edi - 1000B95E: 55 push ebp - 1000B95F: 8B EC mov ebp,esp - 1000B961: 83 EC 0C sub esp,0Ch - 1000B964: 83 65 FC 00 and dword ptr [ebp-4],0 - 1000B968: 83 7D 0C 01 cmp dword ptr [ebp+0Ch],1 - 1000B96C: 53 push ebx - 1000B96D: 56 push esi - 1000B96E: 57 push edi - 1000B96F: 8B 7D 10 mov edi,dword ptr [ebp+10h] - 1000B972: 8B F0 mov esi,eax - 1000B974: 8B C7 mov eax,edi - 1000B976: 0F 85 F9 00 00 00 jne 1000BA75 - 1000B97C: 25 03 00 00 80 and eax,80000003h - 1000B981: 79 05 jns 1000B988 - 1000B983: 48 dec eax - 1000B984: 83 C8 FC or eax,0FFFFFFFCh - 1000B987: 40 inc eax - 1000B988: 89 45 F4 mov dword ptr [ebp-0Ch],eax - 1000B98B: 75 0C jne 1000B999 - 1000B98D: 8B C7 mov eax,edi - 1000B98F: 6A 64 push 64h - 1000B991: 99 cdq - 1000B992: 5B pop ebx - 1000B993: F7 FB idiv eax,ebx - 1000B995: 85 D2 test edx,edx - 1000B997: 75 1F jne 1000B9B8 - 1000B999: 8D 87 6C 07 00 00 lea eax,[edi+0000076Ch] - 1000B99F: 99 cdq - 1000B9A0: BB 90 01 00 00 mov ebx,190h - 1000B9A5: F7 FB idiv eax,ebx - 1000B9A7: 85 D2 test edx,edx - 1000B9A9: 74 0D je 1000B9B8 - 1000B9AB: 8B C6 mov eax,esi - 1000B9AD: C1 E0 02 shl eax,2 - 1000B9B0: 8B B0 E4 56 02 10 mov esi,dword ptr [eax+100256E4h] - 1000B9B6: EB 0B jmp 1000B9C3 - 1000B9B8: 8B C6 mov eax,esi - 1000B9BA: C1 E0 02 shl eax,2 - 1000B9BD: 8B B0 B0 56 02 10 mov esi,dword ptr [eax+100256B0h] - 1000B9C3: 89 45 0C mov dword ptr [ebp+0Ch],eax - 1000B9C6: 8D 87 2B 01 00 00 lea eax,[edi+0000012Bh] - 1000B9CC: 99 cdq - 1000B9CD: 8D 5F FF lea ebx,[edi-1] - 1000B9D0: BF 90 01 00 00 mov edi,190h - 1000B9D5: F7 FF idiv eax,edi - 1000B9D7: 6A 64 push 64h - 1000B9D9: 5F pop edi - 1000B9DA: 46 inc esi - 1000B9DB: 6A 07 push 7 - 1000B9DD: 89 45 F8 mov dword ptr [ebp-8],eax - 1000B9E0: 8B C3 mov eax,ebx - 1000B9E2: 99 cdq - 1000B9E3: F7 FF idiv eax,edi - 1000B9E5: 8B 55 F8 mov edx,dword ptr [ebp-8] - 1000B9E8: 8B 7D 10 mov edi,dword ptr [ebp+10h] - 1000B9EB: 2B D0 sub edx,eax - 1000B9ED: 8B DA mov ebx,edx - 1000B9EF: 8D 47 FF lea eax,[edi-1] - 1000B9F2: 99 cdq - 1000B9F3: 83 E2 03 and edx,3 - 1000B9F6: 03 C2 add eax,edx - 1000B9F8: C1 F8 02 sar eax,2 - 1000B9FB: 8B D7 mov edx,edi - 1000B9FD: 69 D2 6D 01 00 00 imul edx,edx,16Dh - 1000BA03: 03 C6 add eax,esi - 1000BA05: 03 C3 add eax,ebx - 1000BA07: 8D 84 02 25 9C FF lea eax,[edx+eax+FFFF9C25h] - FF - 1000BA0E: 99 cdq - 1000BA0F: 5B pop ebx - 1000BA10: F7 FB idiv eax,ebx - 1000BA12: 8B 45 14 mov eax,dword ptr [ebp+14h] - 1000BA15: 6B C0 07 imul eax,eax,7 - 1000BA18: 2B C2 sub eax,edx - 1000BA1A: 03 45 18 add eax,dword ptr [ebp+18h] - 1000BA1D: 3B 55 18 cmp edx,dword ptr [ebp+18h] - 1000BA20: 7F 06 jg 1000BA28 - 1000BA22: 8D 74 06 F9 lea esi,[esi+eax-7] - 1000BA26: EB 02 jmp 1000BA2A - 1000BA28: 03 F0 add esi,eax - 1000BA2A: 83 7D 14 05 cmp dword ptr [ebp+14h],5 - 1000BA2E: 0F 85 80 00 00 00 jne 1000BAB4 - 1000BA34: 83 7D F4 00 cmp dword ptr [ebp-0Ch],0 - 1000BA38: 75 0C jne 1000BA46 - 1000BA3A: 8B C7 mov eax,edi - 1000BA3C: 6A 64 push 64h - 1000BA3E: 99 cdq - 1000BA3F: 5B pop ebx - 1000BA40: F7 FB idiv eax,ebx - 1000BA42: 85 D2 test edx,edx - 1000BA44: 75 1D jne 1000BA63 - 1000BA46: 8D 87 6C 07 00 00 lea eax,[edi+0000076Ch] - 1000BA4C: 99 cdq - 1000BA4D: BB 90 01 00 00 mov ebx,190h - 1000BA52: F7 FB idiv eax,ebx - 1000BA54: 85 D2 test edx,edx - 1000BA56: 74 0B je 1000BA63 - 1000BA58: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 1000BA5B: 8B 80 E8 56 02 10 mov eax,dword ptr [eax+100256E8h] - 1000BA61: EB 09 jmp 1000BA6C - 1000BA63: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 1000BA66: 8B 80 B4 56 02 10 mov eax,dword ptr [eax+100256B4h] - 1000BA6C: 3B F0 cmp esi,eax - 1000BA6E: 7E 44 jle 1000BAB4 - 1000BA70: 83 EE 07 sub esi,7 - 1000BA73: EB 3F jmp 1000BAB4 - 1000BA75: 25 03 00 00 80 and eax,80000003h - 1000BA7A: 79 05 jns 1000BA81 - 1000BA7C: 48 dec eax - 1000BA7D: 83 C8 FC or eax,0FFFFFFFCh - 1000BA80: 40 inc eax - 1000BA81: 75 0C jne 1000BA8F - 1000BA83: 8B C7 mov eax,edi - 1000BA85: 6A 64 push 64h - 1000BA87: 99 cdq - 1000BA88: 5B pop ebx - 1000BA89: F7 FB idiv eax,ebx - 1000BA8B: 85 D2 test edx,edx - 1000BA8D: 75 1B jne 1000BAAA - 1000BA8F: 8D 87 6C 07 00 00 lea eax,[edi+0000076Ch] - 1000BA95: 99 cdq - 1000BA96: BB 90 01 00 00 mov ebx,190h - 1000BA9B: F7 FB idiv eax,ebx - 1000BA9D: 85 D2 test edx,edx - 1000BA9F: 74 09 je 1000BAAA - 1000BAA1: 8B 34 B5 E4 56 02 mov esi,dword ptr [esi*4+100256E4h] - 10 - 1000BAA8: EB 07 jmp 1000BAB1 - 1000BAAA: 8B 34 B5 B0 56 02 mov esi,dword ptr [esi*4+100256B0h] - 10 - 1000BAB1: 03 75 1C add esi,dword ptr [ebp+1Ch] - 1000BAB4: 6B C9 3C imul ecx,ecx,3Ch - 1000BAB7: 03 4D 20 add ecx,dword ptr [ebp+20h] - 1000BABA: 6B C9 3C imul ecx,ecx,3Ch - 1000BABD: 03 4D 24 add ecx,dword ptr [ebp+24h] - 1000BAC0: 69 C9 E8 03 00 00 imul ecx,ecx,3E8h - 1000BAC6: 03 4D 28 add ecx,dword ptr [ebp+28h] - 1000BAC9: 83 7D 08 01 cmp dword ptr [ebp+8],1 - 1000BACD: 75 14 jne 1000BAE3 - 1000BACF: 89 35 F8 4B 02 10 mov dword ptr ds:[10024BF8h],esi - 1000BAD5: 89 0D FC 4B 02 10 mov dword ptr ds:[10024BFCh],ecx - 1000BADB: 89 3D F4 4B 02 10 mov dword ptr ds:[10024BF4h],edi - 1000BAE1: EB 6B jmp 1000BB4E - 1000BAE3: 8D 45 FC lea eax,[ebp-4] - 1000BAE6: 50 push eax - 1000BAE7: 89 35 04 4C 02 10 mov dword ptr ds:[10024C04h],esi - 1000BAED: 89 0D 08 4C 02 10 mov dword ptr ds:[10024C08h],ecx - 1000BAF3: E8 6C 04 00 00 call 1000BF64 - 1000BAF8: 59 pop ecx - 1000BAF9: 85 C0 test eax,eax - 1000BAFB: 74 0F je 1000BB0C - 1000BAFD: 33 C0 xor eax,eax - 1000BAFF: 50 push eax - 1000BB00: 50 push eax - 1000BB01: 50 push eax - 1000BB02: 50 push eax - 1000BB03: 50 push eax - 1000BB04: E8 B0 33 00 00 call 1000EEB9 - 1000BB09: 83 C4 14 add esp,14h - 1000BB0C: 8B 45 FC mov eax,dword ptr [ebp-4] - 1000BB0F: 69 C0 E8 03 00 00 imul eax,eax,3E8h - 1000BB15: 01 05 08 4C 02 10 add dword ptr ds:[10024C08h],eax - 1000BB1B: 79 12 jns 1000BB2F - 1000BB1D: 81 05 08 4C 02 10 add dword ptr ds:[10024C08h],5265C00h - 00 5C 26 05 - 1000BB27: FF 0D 04 4C 02 10 dec dword ptr ds:[10024C04h] - 1000BB2D: EB 19 jmp 1000BB48 - 1000BB2F: B8 00 5C 26 05 mov eax,5265C00h - 1000BB34: 39 05 08 4C 02 10 cmp dword ptr ds:[10024C08h],eax - 1000BB3A: 7C 0C jl 1000BB48 - 1000BB3C: 29 05 08 4C 02 10 sub dword ptr ds:[10024C08h],eax - 1000BB42: FF 05 04 4C 02 10 inc dword ptr ds:[10024C04h] - 1000BB48: 89 3D 00 4C 02 10 mov dword ptr ds:[10024C00h],edi - 1000BB4E: 5F pop edi - 1000BB4F: 5E pop esi - 1000BB50: 5B pop ebx - 1000BB51: C9 leave - 1000BB52: C3 ret - 1000BB53: 8B FF mov edi,edi - 1000BB55: 55 push ebp - 1000BB56: 8B EC mov ebp,esp - 1000BB58: 83 EC 0C sub esp,0Ch - 1000BB5B: 56 push esi - 1000BB5C: 8D 45 FC lea eax,[ebp-4] - 1000BB5F: 33 F6 xor esi,esi - 1000BB61: 50 push eax - 1000BB62: 89 75 FC mov dword ptr [ebp-4],esi - 1000BB65: E8 C1 03 00 00 call 1000BF2B - 1000BB6A: 59 pop ecx - 1000BB6B: 85 C0 test eax,eax - 1000BB6D: 74 0D je 1000BB7C - 1000BB6F: 56 push esi - 1000BB70: 56 push esi - 1000BB71: 56 push esi - 1000BB72: 56 push esi - 1000BB73: 56 push esi - 1000BB74: E8 40 33 00 00 call 1000EEB9 - 1000BB79: 83 C4 14 add esp,14h - 1000BB7C: 39 75 FC cmp dword ptr [ebp-4],esi - 1000BB7F: 75 07 jne 1000BB88 - 1000BB81: 33 C0 xor eax,eax - 1000BB83: E9 58 01 00 00 jmp 1000BCE0 - 1000BB88: 8B 57 14 mov edx,dword ptr [edi+14h] - 1000BB8B: 53 push ebx - 1000BB8C: 33 DB xor ebx,ebx - 1000BB8E: 43 inc ebx - 1000BB8F: 3B 15 F4 4B 02 10 cmp edx,dword ptr ds:[10024BF4h] - 1000BB95: 75 0C jne 1000BBA3 - 1000BB97: 3B 15 00 4C 02 10 cmp edx,dword ptr ds:[10024C00h] - 1000BB9D: 0F 84 18 01 00 00 je 1000BCBB - 1000BBA3: 39 35 D4 61 02 10 cmp dword ptr ds:[100261D4h],esi - 1000BBA9: 0F 84 B8 00 00 00 je 1000BC67 - 1000BBAF: 0F B7 05 CE 61 02 movzx eax,word ptr ds:[100261CEh] - 10 - 1000BBB6: 0F B7 0D C8 61 02 movzx ecx,word ptr ds:[100261C8h] - 10 - 1000BBBD: 50 push eax - 1000BBBE: 0F B7 05 CC 61 02 movzx eax,word ptr ds:[100261CCh] - 10 - 1000BBC5: 50 push eax - 1000BBC6: 0F B7 05 CA 61 02 movzx eax,word ptr ds:[100261CAh] - 10 - 1000BBCD: 50 push eax - 1000BBCE: 66 39 35 C0 61 02 cmp word ptr ds:[100261C0h],si - 10 - 1000BBD5: 75 15 jne 1000BBEC - 1000BBD7: 0F B7 05 C4 61 02 movzx eax,word ptr ds:[100261C4h] - 10 - 1000BBDE: 56 push esi - 1000BBDF: 50 push eax - 1000BBE0: 0F B7 05 C6 61 02 movzx eax,word ptr ds:[100261C6h] - 10 - 1000BBE7: 50 push eax - 1000BBE8: 52 push edx - 1000BBE9: 53 push ebx - 1000BBEA: EB 0C jmp 1000BBF8 - 1000BBEC: 0F B7 05 C6 61 02 movzx eax,word ptr ds:[100261C6h] - 10 - 1000BBF3: 50 push eax - 1000BBF4: 56 push esi - 1000BBF5: 56 push esi - 1000BBF6: 52 push edx - 1000BBF7: 56 push esi - 1000BBF8: 0F B7 05 C2 61 02 movzx eax,word ptr ds:[100261C2h] - 10 - 1000BBFF: 53 push ebx - 1000BC00: E8 57 FD FF FF call 1000B95C - 1000BC05: 0F B7 05 7A 61 02 movzx eax,word ptr ds:[1002617Ah] - 10 - 1000BC0C: 0F B7 0D 74 61 02 movzx ecx,word ptr ds:[10026174h] - 10 - 1000BC13: 83 C4 24 add esp,24h - 1000BC16: 50 push eax - 1000BC17: 0F B7 05 78 61 02 movzx eax,word ptr ds:[10026178h] - 10 - 1000BC1E: 50 push eax - 1000BC1F: 0F B7 05 76 61 02 movzx eax,word ptr ds:[10026176h] - 10 - 1000BC26: 50 push eax - 1000BC27: 66 39 35 6C 61 02 cmp word ptr ds:[1002616Ch],si - 10 - 1000BC2E: 75 17 jne 1000BC47 - 1000BC30: 0F B7 05 70 61 02 movzx eax,word ptr ds:[10026170h] - 10 - 1000BC37: 56 push esi - 1000BC38: 50 push eax - 1000BC39: 0F B7 05 72 61 02 movzx eax,word ptr ds:[10026172h] - 10 - 1000BC40: 50 push eax - 1000BC41: FF 77 14 push dword ptr [edi+14h] - 1000BC44: 53 push ebx - 1000BC45: EB 0E jmp 1000BC55 - 1000BC47: 0F B7 05 72 61 02 movzx eax,word ptr ds:[10026172h] - 10 - 1000BC4E: 50 push eax - 1000BC4F: 56 push esi - 1000BC50: 56 push esi - 1000BC51: FF 77 14 push dword ptr [edi+14h] - 1000BC54: 56 push esi - 1000BC55: 0F B7 05 6E 61 02 movzx eax,word ptr ds:[1002616Eh] - 10 - 1000BC5C: 56 push esi - 1000BC5D: E8 FA FC FF FF call 1000B95C - 1000BC62: 83 C4 24 add esp,24h - 1000BC65: EB 54 jmp 1000BCBB - 1000BC67: 83 FA 6B cmp edx,6Bh - 1000BC6A: 6A 03 push 3 - 1000BC6C: 58 pop eax - 1000BC6D: 6A 02 push 2 - 1000BC6F: 59 pop ecx - 1000BC70: C7 45 F4 0B 00 00 mov dword ptr [ebp-0Ch],0Bh - 00 - 1000BC77: 89 5D F8 mov dword ptr [ebp-8],ebx - 1000BC7A: 7D 13 jge 1000BC8F - 1000BC7C: 6A 04 push 4 - 1000BC7E: 58 pop eax - 1000BC7F: 8B CB mov ecx,ebx - 1000BC81: C7 45 F4 0A 00 00 mov dword ptr [ebp-0Ch],0Ah - 00 - 1000BC88: C7 45 F8 05 00 00 mov dword ptr [ebp-8],5 - 00 - 1000BC8F: 56 push esi - 1000BC90: 56 push esi - 1000BC91: 56 push esi - 1000BC92: 56 push esi - 1000BC93: 56 push esi - 1000BC94: 51 push ecx - 1000BC95: 52 push edx - 1000BC96: 53 push ebx - 1000BC97: 53 push ebx - 1000BC98: 6A 02 push 2 - 1000BC9A: 59 pop ecx - 1000BC9B: E8 BC FC FF FF call 1000B95C - 1000BCA0: 8B 45 F4 mov eax,dword ptr [ebp-0Ch] - 1000BCA3: 56 push esi - 1000BCA4: 56 push esi - 1000BCA5: 56 push esi - 1000BCA6: 56 push esi - 1000BCA7: 56 push esi - 1000BCA8: FF 75 F8 push dword ptr [ebp-8] - 1000BCAB: FF 77 14 push dword ptr [edi+14h] - 1000BCAE: 53 push ebx - 1000BCAF: 56 push esi - 1000BCB0: 6A 02 push 2 - 1000BCB2: 59 pop ecx - 1000BCB3: E8 A4 FC FF FF call 1000B95C - 1000BCB8: 83 C4 48 add esp,48h - 1000BCBB: 8B 0D F8 4B 02 10 mov ecx,dword ptr ds:[10024BF8h] - 1000BCC1: A1 04 4C 02 10 mov eax,dword ptr ds:[10024C04h] - 1000BCC6: 3B C8 cmp ecx,eax - 1000BCC8: 8B 57 1C mov edx,dword ptr [edi+1Ch] - 1000BCCB: 7D 16 jge 1000BCE3 - 1000BCCD: 3B D1 cmp edx,ecx - 1000BCCF: 7C 22 jl 1000BCF3 - 1000BCD1: 3B D0 cmp edx,eax - 1000BCD3: 7F 1E jg 1000BCF3 - 1000BCD5: 3B D1 cmp edx,ecx - 1000BCD7: 7E 1E jle 1000BCF7 - 1000BCD9: 3B D0 cmp edx,eax - 1000BCDB: 7D 1A jge 1000BCF7 - 1000BCDD: 8B C3 mov eax,ebx - 1000BCDF: 5B pop ebx - 1000BCE0: 5E pop esi - 1000BCE1: C9 leave - 1000BCE2: C3 ret - 1000BCE3: 3B D0 cmp edx,eax - 1000BCE5: 7C F6 jl 1000BCDD - 1000BCE7: 3B D1 cmp edx,ecx - 1000BCE9: 7F F2 jg 1000BCDD - 1000BCEB: 3B D0 cmp edx,eax - 1000BCED: 7E 08 jle 1000BCF7 - 1000BCEF: 3B D1 cmp edx,ecx - 1000BCF1: 7D 04 jge 1000BCF7 - 1000BCF3: 33 C0 xor eax,eax - 1000BCF5: EB E8 jmp 1000BCDF - 1000BCF7: 8B 47 08 mov eax,dword ptr [edi+8] - 1000BCFA: 6B C0 3C imul eax,eax,3Ch - 1000BCFD: 03 47 04 add eax,dword ptr [edi+4] - 1000BD00: 6B C0 3C imul eax,eax,3Ch - 1000BD03: 03 07 add eax,dword ptr [edi] - 1000BD05: 69 C0 E8 03 00 00 imul eax,eax,3E8h - 1000BD0B: 3B D1 cmp edx,ecx - 1000BD0D: 75 0D jne 1000BD1C - 1000BD0F: 33 C9 xor ecx,ecx - 1000BD11: 3B 05 FC 4B 02 10 cmp eax,dword ptr ds:[10024BFCh] - 1000BD17: 0F 9D C1 setge cl - 1000BD1A: EB 0B jmp 1000BD27 - 1000BD1C: 33 C9 xor ecx,ecx - 1000BD1E: 3B 05 08 4C 02 10 cmp eax,dword ptr ds:[10024C08h] - 1000BD24: 0F 9C C1 setl cl - 1000BD27: 8B C1 mov eax,ecx - 1000BD29: EB B4 jmp 1000BCDF - 1000BD2B: 6A 08 push 8 - 1000BD2D: 68 48 1A 02 10 push 10021A48h - 1000BD32: E8 51 43 00 00 call 10010088 - 1000BD37: 33 F6 xor esi,esi - 1000BD39: 39 35 DC 61 02 10 cmp dword ptr ds:[100261DCh],esi - 1000BD3F: 75 2A jne 1000BD6B - 1000BD41: 6A 06 push 6 - 1000BD43: E8 46 38 00 00 call 1000F58E - 1000BD48: 59 pop ecx - 1000BD49: 89 75 FC mov dword ptr [ebp-4],esi - 1000BD4C: 39 35 DC 61 02 10 cmp dword ptr ds:[100261DCh],esi - 1000BD52: 75 0B jne 1000BD5F - 1000BD54: E8 BD F8 FF FF call 1000B616 - 1000BD59: FF 05 DC 61 02 10 inc dword ptr ds:[100261DCh] - 1000BD5F: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000BD66: E8 06 00 00 00 call 1000BD71 - 1000BD6B: E8 5D 43 00 00 call 100100CD - 1000BD70: C3 ret - 1000BD71: 6A 06 push 6 - 1000BD73: E8 3C 37 00 00 call 1000F4B4 - 1000BD78: 59 pop ecx - 1000BD79: C3 ret - 1000BD7A: 6A 08 push 8 - 1000BD7C: 68 68 1A 02 10 push 10021A68h - 1000BD81: E8 02 43 00 00 call 10010088 - 1000BD86: 6A 06 push 6 - 1000BD88: E8 01 38 00 00 call 1000F58E - 1000BD8D: 59 pop ecx - 1000BD8E: 83 65 FC 00 and dword ptr [ebp-4],0 - 1000BD92: E8 7F F8 FF FF call 1000B616 - 1000BD97: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000BD9E: E8 06 00 00 00 call 1000BDA9 - 1000BDA3: E8 25 43 00 00 call 100100CD - 1000BDA8: C3 ret - 1000BDA9: 6A 06 push 6 - 1000BDAB: E8 04 37 00 00 call 1000F4B4 - 1000BDB0: 59 pop ecx - 1000BDB1: C3 ret - 1000BDB2: 6A 0C push 0Ch - 1000BDB4: 68 88 1A 02 10 push 10021A88h - 1000BDB9: E8 CA 42 00 00 call 10010088 - 1000BDBE: 6A 06 push 6 - 1000BDC0: E8 C9 37 00 00 call 1000F58E - 1000BDC5: 59 pop ecx - 1000BDC6: 83 65 FC 00 and dword ptr [ebp-4],0 - 1000BDCA: 8B 7D 08 mov edi,dword ptr [ebp+8] - 1000BDCD: E8 81 FD FF FF call 1000BB53 - 1000BDD2: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1000BDD5: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000BDDC: E8 09 00 00 00 call 1000BDEA - 1000BDE1: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 1000BDE4: E8 E4 42 00 00 call 100100CD - 1000BDE9: C3 ret - 1000BDEA: 6A 06 push 6 - 1000BDEC: E8 C3 36 00 00 call 1000F4B4 - 1000BDF1: 59 pop ecx - 1000BDF2: C3 ret - 1000BDF3: B8 30 50 01 10 mov eax,10015030h - 1000BDF8: A3 20 57 02 10 mov dword ptr ds:[10025720h],eax - 1000BDFD: C7 05 24 57 02 10 mov dword ptr ds:[10025724h],10014717h - 17 47 01 10 - 1000BE07: C7 05 28 57 02 10 mov dword ptr ds:[10025728h],100146CBh - CB 46 01 10 - 1000BE11: C7 05 2C 57 02 10 mov dword ptr ds:[1002572Ch],10014704h - 04 47 01 10 - 1000BE1B: C7 05 30 57 02 10 mov dword ptr ds:[10025730h],1001466Dh - 6D 46 01 10 - 1000BE25: A3 34 57 02 10 mov dword ptr ds:[10025734h],eax - 1000BE2A: C7 05 38 57 02 10 mov dword ptr ds:[10025738h],10014FA8h - A8 4F 01 10 - 1000BE34: C7 05 3C 57 02 10 mov dword ptr ds:[1002573Ch],10014689h - 89 46 01 10 - 1000BE3E: C7 05 40 57 02 10 mov dword ptr ds:[10025740h],100145EBh - EB 45 01 10 - 1000BE48: C7 05 44 57 02 10 mov dword ptr ds:[10025744h],10014578h - 78 45 01 10 - 1000BE52: C3 ret - 1000BE53: 8B FF mov edi,edi - 1000BE55: 55 push ebp - 1000BE56: 8B EC mov ebp,esp - 1000BE58: E8 96 FF FF FF call 1000BDF3 - 1000BE5D: E8 7B 92 00 00 call 100150DD - 1000BE62: 83 7D 08 00 cmp dword ptr [ebp+8],0 - 1000BE66: A3 E4 61 02 10 mov dword ptr ds:[100261E4h],eax - 1000BE6B: 74 05 je 1000BE72 - 1000BE6D: E8 02 92 00 00 call 10015074 - 1000BE72: DB E2 fnclex - 1000BE74: 5D pop ebp - 1000BE75: C3 ret - 1000BE76: CC int 3 - 1000BE77: CC int 3 - 1000BE78: CC int 3 - 1000BE79: CC int 3 - 1000BE7A: CC int 3 - 1000BE7B: CC int 3 - 1000BE7C: CC int 3 - 1000BE7D: CC int 3 - 1000BE7E: CC int 3 - 1000BE7F: CC int 3 - 1000BE80: 83 3D 1C 6D 02 10 cmp dword ptr ds:[10026D1Ch],0 - 00 - 1000BE87: 74 2D je 1000BEB6 - 1000BE89: 55 push ebp - 1000BE8A: 8B EC mov ebp,esp - 1000BE8C: 83 EC 08 sub esp,8 - 1000BE8F: 83 E4 F8 and esp,0FFFFFFF8h - 1000BE92: DD 1C 24 fstp qword ptr [esp] - 1000BE95: F2 0F 2C 04 24 cvttsd2si eax,mmword ptr [esp] - 1000BE9A: C9 leave - 1000BE9B: C3 ret - 1000BE9C: 83 3D 1C 6D 02 10 cmp dword ptr ds:[10026D1Ch],0 - 00 - 1000BEA3: 74 11 je 1000BEB6 - 1000BEA5: 83 EC 04 sub esp,4 - 1000BEA8: D9 3C 24 fnstcw word ptr [esp] - 1000BEAB: 58 pop eax - 1000BEAC: 66 83 E0 7F and ax,7Fh - 1000BEB0: 66 83 F8 7F cmp ax,7Fh - 1000BEB4: 74 D3 je 1000BE89 - 1000BEB6: 55 push ebp - 1000BEB7: 8B EC mov ebp,esp - 1000BEB9: 83 EC 20 sub esp,20h - 1000BEBC: 83 E4 F0 and esp,0FFFFFFF0h - 1000BEBF: D9 C0 fld st(0) - 1000BEC1: D9 54 24 18 fst dword ptr [esp+18h] - 1000BEC5: DF 7C 24 10 fistp qword ptr [esp+10h] - 1000BEC9: DF 6C 24 10 fild qword ptr [esp+10h] - 1000BECD: 8B 54 24 18 mov edx,dword ptr [esp+18h] - 1000BED1: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 1000BED5: 85 C0 test eax,eax - 1000BED7: 74 3C je 1000BF15 - 1000BED9: DE E9 fsubp st(1),st - 1000BEDB: 85 D2 test edx,edx - 1000BEDD: 79 1E jns 1000BEFD - 1000BEDF: D9 1C 24 fstp dword ptr [esp] - 1000BEE2: 8B 0C 24 mov ecx,dword ptr [esp] - 1000BEE5: 81 F1 00 00 00 80 xor ecx,80000000h - 1000BEEB: 81 C1 FF FF FF 7F add ecx,7FFFFFFFh - 1000BEF1: 83 D0 00 adc eax,0 - 1000BEF4: 8B 54 24 14 mov edx,dword ptr [esp+14h] - 1000BEF8: 83 D2 00 adc edx,0 - 1000BEFB: EB 2C jmp 1000BF29 - 1000BEFD: D9 1C 24 fstp dword ptr [esp] - 1000BF00: 8B 0C 24 mov ecx,dword ptr [esp] - 1000BF03: 81 C1 FF FF FF 7F add ecx,7FFFFFFFh - 1000BF09: 83 D8 00 sbb eax,0 - 1000BF0C: 8B 54 24 14 mov edx,dword ptr [esp+14h] - 1000BF10: 83 DA 00 sbb edx,0 - 1000BF13: EB 14 jmp 1000BF29 - 1000BF15: 8B 54 24 14 mov edx,dword ptr [esp+14h] - 1000BF19: F7 C2 FF FF FF 7F test edx,7FFFFFFFh - 1000BF1F: 75 B8 jne 1000BED9 - 1000BF21: D9 5C 24 18 fstp dword ptr [esp+18h] - 1000BF25: D9 5C 24 18 fstp dword ptr [esp+18h] - 1000BF29: C9 leave - 1000BF2A: C3 ret - 1000BF2B: 8B FF mov edi,edi - 1000BF2D: 55 push ebp - 1000BF2E: 8B EC mov ebp,esp - 1000BF30: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000BF33: 56 push esi - 1000BF34: 33 F6 xor esi,esi - 1000BF36: 3B C6 cmp eax,esi - 1000BF38: 75 1D jne 1000BF57 - 1000BF3A: E8 0A 31 00 00 call 1000F049 - 1000BF3F: 56 push esi - 1000BF40: 56 push esi - 1000BF41: 56 push esi - 1000BF42: 56 push esi - 1000BF43: 56 push esi - 1000BF44: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1000BF4A: E8 92 30 00 00 call 1000EFE1 - 1000BF4F: 83 C4 14 add esp,14h - 1000BF52: 6A 16 push 16h - 1000BF54: 58 pop eax - 1000BF55: EB 0A jmp 1000BF61 - 1000BF57: 8B 0D 24 4C 02 10 mov ecx,dword ptr ds:[10024C24h] - 1000BF5D: 89 08 mov dword ptr [eax],ecx - 1000BF5F: 33 C0 xor eax,eax - 1000BF61: 5E pop esi - 1000BF62: 5D pop ebp - 1000BF63: C3 ret - 1000BF64: 8B FF mov edi,edi - 1000BF66: 55 push ebp - 1000BF67: 8B EC mov ebp,esp - 1000BF69: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000BF6C: 56 push esi - 1000BF6D: 33 F6 xor esi,esi - 1000BF6F: 3B C6 cmp eax,esi - 1000BF71: 75 1D jne 1000BF90 - 1000BF73: E8 D1 30 00 00 call 1000F049 - 1000BF78: 56 push esi - 1000BF79: 56 push esi - 1000BF7A: 56 push esi - 1000BF7B: 56 push esi - 1000BF7C: 56 push esi - 1000BF7D: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1000BF83: E8 59 30 00 00 call 1000EFE1 - 1000BF88: 83 C4 14 add esp,14h - 1000BF8B: 6A 16 push 16h - 1000BF8D: 58 pop eax - 1000BF8E: EB 0A jmp 1000BF9A - 1000BF90: 8B 0D 28 4C 02 10 mov ecx,dword ptr ds:[10024C28h] - 1000BF96: 89 08 mov dword ptr [eax],ecx - 1000BF98: 33 C0 xor eax,eax - 1000BF9A: 5E pop esi - 1000BF9B: 5D pop ebp - 1000BF9C: C3 ret - 1000BF9D: 8B FF mov edi,edi - 1000BF9F: 55 push ebp - 1000BFA0: 8B EC mov ebp,esp - 1000BFA2: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000BFA5: 56 push esi - 1000BFA6: 33 F6 xor esi,esi - 1000BFA8: 3B C6 cmp eax,esi - 1000BFAA: 75 1D jne 1000BFC9 - 1000BFAC: E8 98 30 00 00 call 1000F049 - 1000BFB1: 56 push esi - 1000BFB2: 56 push esi - 1000BFB3: 56 push esi - 1000BFB4: 56 push esi - 1000BFB5: 56 push esi - 1000BFB6: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1000BFBC: E8 20 30 00 00 call 1000EFE1 - 1000BFC1: 83 C4 14 add esp,14h - 1000BFC4: 6A 16 push 16h - 1000BFC6: 58 pop eax - 1000BFC7: EB 0A jmp 1000BFD3 - 1000BFC9: 8B 0D 20 4C 02 10 mov ecx,dword ptr ds:[10024C20h] - 1000BFCF: 89 08 mov dword ptr [eax],ecx - 1000BFD1: 33 C0 xor eax,eax - 1000BFD3: 5E pop esi - 1000BFD4: 5D pop ebp - 1000BFD5: C3 ret - 1000BFD6: B8 24 4C 02 10 mov eax,10024C24h - 1000BFDB: C3 ret - 1000BFDC: B8 28 4C 02 10 mov eax,10024C28h - 1000BFE1: C3 ret - 1000BFE2: B8 20 4C 02 10 mov eax,10024C20h - 1000BFE7: C3 ret - 1000BFE8: B8 B0 4C 02 10 mov eax,10024CB0h - 1000BFED: C3 ret - 1000BFEE: 8B FF mov edi,edi - 1000BFF0: 55 push ebp - 1000BFF1: 8B EC mov ebp,esp - 1000BFF3: 83 EC 20 sub esp,20h - 1000BFF6: 53 push ebx - 1000BFF7: 33 DB xor ebx,ebx - 1000BFF9: 39 5D 0C cmp dword ptr [ebp+0Ch],ebx - 1000BFFC: 75 1D jne 1000C01B - 1000BFFE: E8 46 30 00 00 call 1000F049 - 1000C003: 53 push ebx - 1000C004: 53 push ebx - 1000C005: 53 push ebx - 1000C006: 53 push ebx - 1000C007: 53 push ebx - 1000C008: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1000C00E: E8 CE 2F 00 00 call 1000EFE1 - 1000C013: 83 C4 14 add esp,14h - 1000C016: 83 C8 FF or eax,0FFFFFFFFh - 1000C019: EB 4D jmp 1000C068 - 1000C01B: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000C01E: 3B C3 cmp eax,ebx - 1000C020: 74 DC je 1000BFFE - 1000C022: 56 push esi - 1000C023: 89 45 E8 mov dword ptr [ebp-18h],eax - 1000C026: 89 45 E0 mov dword ptr [ebp-20h],eax - 1000C029: 8D 45 10 lea eax,[ebp+10h] - 1000C02C: 50 push eax - 1000C02D: 53 push ebx - 1000C02E: FF 75 0C push dword ptr [ebp+0Ch] - 1000C031: 8D 45 E0 lea eax,[ebp-20h] - 1000C034: 50 push eax - 1000C035: C7 45 E4 FF FF FF mov dword ptr [ebp-1Ch],7FFFFFFFh - 7F - 1000C03C: C7 45 EC 42 00 00 mov dword ptr [ebp-14h],42h - 00 - 1000C043: E8 64 91 00 00 call 100151AC - 1000C048: 83 C4 10 add esp,10h - 1000C04B: FF 4D E4 dec dword ptr [ebp-1Ch] - 1000C04E: 8B F0 mov esi,eax - 1000C050: 78 07 js 1000C059 - 1000C052: 8B 45 E0 mov eax,dword ptr [ebp-20h] - 1000C055: 88 18 mov byte ptr [eax],bl - 1000C057: EB 0C jmp 1000C065 - 1000C059: 8D 45 E0 lea eax,[ebp-20h] - 1000C05C: 50 push eax - 1000C05D: 53 push ebx - 1000C05E: E8 4B 21 00 00 call 1000E1AE - 1000C063: 59 pop ecx - 1000C064: 59 pop ecx - 1000C065: 8B C6 mov eax,esi - 1000C067: 5E pop esi - 1000C068: 5B pop ebx - 1000C069: C9 leave - 1000C06A: C3 ret - 1000C06B: 8B FF mov edi,edi - 1000C06D: 55 push ebp - 1000C06E: 8B EC mov ebp,esp - 1000C070: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 1000C073: 56 push esi - 1000C074: 57 push edi - 1000C075: 83 F8 01 cmp eax,1 - 1000C078: 75 7C jne 1000C0F6 - 1000C07A: 50 push eax - 1000C07B: E8 EE 32 00 00 call 1000F36E - 1000C080: 59 pop ecx - 1000C081: 85 C0 test eax,eax - 1000C083: 75 07 jne 1000C08C - 1000C085: 33 C0 xor eax,eax - 1000C087: E9 0E 01 00 00 jmp 1000C19A - 1000C08C: E8 88 15 00 00 call 1000D619 - 1000C091: 85 C0 test eax,eax - 1000C093: 75 07 jne 1000C09C - 1000C095: E8 04 33 00 00 call 1000F39E - 1000C09A: EB E9 jmp 1000C085 - 1000C09C: E8 0D A1 00 00 call 100161AE - 1000C0A1: FF 15 78 F0 01 10 call dword ptr ds:[1001F078h] - 1000C0A7: A3 20 6D 02 10 mov dword ptr ds:[10026D20h],eax - 1000C0AC: E8 C6 9F 00 00 call 10016077 - 1000C0B1: A3 EC 61 02 10 mov dword ptr ds:[100261ECh],eax - 1000C0B6: E8 AC 65 00 00 call 10012667 - 1000C0BB: 85 C0 test eax,eax - 1000C0BD: 7D 07 jge 1000C0C6 - 1000C0BF: E8 01 12 00 00 call 1000D2C5 - 1000C0C4: EB CF jmp 1000C095 - 1000C0C6: E8 F1 9E 00 00 call 10015FBC - 1000C0CB: 85 C0 test eax,eax - 1000C0CD: 7C 20 jl 1000C0EF - 1000C0CF: E8 70 9C 00 00 call 10015D44 - 1000C0D4: 85 C0 test eax,eax - 1000C0D6: 7C 17 jl 1000C0EF - 1000C0D8: 6A 00 push 0 - 1000C0DA: E8 E9 6A 00 00 call 10012BC8 - 1000C0DF: 59 pop ecx - 1000C0E0: 85 C0 test eax,eax - 1000C0E2: 75 0B jne 1000C0EF - 1000C0E4: FF 05 E8 61 02 10 inc dword ptr ds:[100261E8h] - 1000C0EA: E9 A8 00 00 00 jmp 1000C197 - 1000C0EF: E8 C7 67 00 00 call 100128BB - 1000C0F4: EB C9 jmp 1000C0BF - 1000C0F6: 33 FF xor edi,edi - 1000C0F8: 3B C7 cmp eax,edi - 1000C0FA: 75 31 jne 1000C12D - 1000C0FC: 39 3D E8 61 02 10 cmp dword ptr ds:[100261E8h],edi - 1000C102: 7E 81 jle 1000C085 - 1000C104: FF 0D E8 61 02 10 dec dword ptr ds:[100261E8h] - 1000C10A: 39 3D 34 6A 02 10 cmp dword ptr ds:[10026A34h],edi - 1000C110: 75 05 jne 1000C117 - 1000C112: E8 78 6C 00 00 call 10012D8F - 1000C117: 39 7D 10 cmp dword ptr [ebp+10h],edi - 1000C11A: 75 7B jne 1000C197 - 1000C11C: E8 9A 67 00 00 call 100128BB - 1000C121: E8 9F 11 00 00 call 1000D2C5 - 1000C126: E8 73 32 00 00 call 1000F39E - 1000C12B: EB 6A jmp 1000C197 - 1000C12D: 83 F8 02 cmp eax,2 - 1000C130: 75 59 jne 1000C18B - 1000C132: E8 5A 11 00 00 call 1000D291 - 1000C137: 68 14 02 00 00 push 214h - 1000C13C: 6A 01 push 1 - 1000C13E: E8 0B 68 00 00 call 1001294E - 1000C143: 8B F0 mov esi,eax - 1000C145: 59 pop ecx - 1000C146: 59 pop ecx - 1000C147: 3B F7 cmp esi,edi - 1000C149: 0F 84 36 FF FF FF je 1000C085 - 1000C14F: 56 push esi - 1000C150: FF 35 DC 4C 02 10 push dword ptr ds:[10024CDCh] - 1000C156: FF 35 04 62 02 10 push dword ptr ds:[10026204h] - 1000C15C: E8 B5 10 00 00 call 1000D216 - 1000C161: 59 pop ecx - 1000C162: FF D0 call eax - 1000C164: 85 C0 test eax,eax - 1000C166: 74 17 je 1000C17F - 1000C168: 57 push edi - 1000C169: 56 push esi - 1000C16A: E8 93 11 00 00 call 1000D302 - 1000C16F: 59 pop ecx - 1000C170: 59 pop ecx - 1000C171: FF 15 74 F0 01 10 call dword ptr ds:[1001F074h] - 1000C177: 83 4E 04 FF or dword ptr [esi+4],0FFFFFFFFh - 1000C17B: 89 06 mov dword ptr [esi],eax - 1000C17D: EB 18 jmp 1000C197 - 1000C17F: 56 push esi - 1000C180: E8 AF E1 FF FF call 1000A334 - 1000C185: 59 pop ecx - 1000C186: E9 FA FE FF FF jmp 1000C085 - 1000C18B: 83 F8 03 cmp eax,3 - 1000C18E: 75 07 jne 1000C197 - 1000C190: 57 push edi - 1000C191: E8 15 14 00 00 call 1000D5AB - 1000C196: 59 pop ecx - 1000C197: 33 C0 xor eax,eax - 1000C199: 40 inc eax - 1000C19A: 5F pop edi - 1000C19B: 5E pop esi - 1000C19C: 5D pop ebp - 1000C19D: C2 0C 00 ret 0Ch - 1000C1A0: 6A 0C push 0Ch - 1000C1A2: 68 A8 1A 02 10 push 10021AA8h - 1000C1A7: E8 DC 3E 00 00 call 10010088 - 1000C1AC: 8B F9 mov edi,ecx - 1000C1AE: 8B F2 mov esi,edx - 1000C1B0: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 1000C1B3: 33 C0 xor eax,eax - 1000C1B5: 40 inc eax - 1000C1B6: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1000C1B9: 85 F6 test esi,esi - 1000C1BB: 75 0C jne 1000C1C9 - 1000C1BD: 39 15 E8 61 02 10 cmp dword ptr ds:[100261E8h],edx - 1000C1C3: 0F 84 C5 00 00 00 je 1000C28E - 1000C1C9: 83 65 FC 00 and dword ptr [ebp-4],0 - 1000C1CD: 3B F0 cmp esi,eax - 1000C1CF: 74 05 je 1000C1D6 - 1000C1D1: 83 FE 02 cmp esi,2 - 1000C1D4: 75 2E jne 1000C204 - 1000C1D6: A1 FC F8 01 10 mov eax,dword ptr ds:[1001F8FCh] - 1000C1DB: 85 C0 test eax,eax - 1000C1DD: 74 08 je 1000C1E7 - 1000C1DF: 57 push edi - 1000C1E0: 56 push esi - 1000C1E1: 53 push ebx - 1000C1E2: FF D0 call eax - 1000C1E4: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1000C1E7: 83 7D E4 00 cmp dword ptr [ebp-1Ch],0 - 1000C1EB: 0F 84 96 00 00 00 je 1000C287 - 1000C1F1: 57 push edi - 1000C1F2: 56 push esi - 1000C1F3: 53 push ebx - 1000C1F4: E8 72 FE FF FF call 1000C06B - 1000C1F9: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1000C1FC: 85 C0 test eax,eax - 1000C1FE: 0F 84 83 00 00 00 je 1000C287 - 1000C204: 57 push edi - 1000C205: 56 push esi - 1000C206: 53 push ebx - 1000C207: E8 04 C7 FF FF call 10008910 - 1000C20C: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1000C20F: 83 FE 01 cmp esi,1 - 1000C212: 75 24 jne 1000C238 - 1000C214: 85 C0 test eax,eax - 1000C216: 75 20 jne 1000C238 - 1000C218: 57 push edi - 1000C219: 50 push eax - 1000C21A: 53 push ebx - 1000C21B: E8 F0 C6 FF FF call 10008910 - 1000C220: 57 push edi - 1000C221: 6A 00 push 0 - 1000C223: 53 push ebx - 1000C224: E8 42 FE FF FF call 1000C06B - 1000C229: A1 FC F8 01 10 mov eax,dword ptr ds:[1001F8FCh] - 1000C22E: 85 C0 test eax,eax - 1000C230: 74 06 je 1000C238 - 1000C232: 57 push edi - 1000C233: 6A 00 push 0 - 1000C235: 53 push ebx - 1000C236: FF D0 call eax - 1000C238: 85 F6 test esi,esi - 1000C23A: 74 05 je 1000C241 - 1000C23C: 83 FE 03 cmp esi,3 - 1000C23F: 75 26 jne 1000C267 - 1000C241: 57 push edi - 1000C242: 56 push esi - 1000C243: 53 push ebx - 1000C244: E8 22 FE FF FF call 1000C06B - 1000C249: 85 C0 test eax,eax - 1000C24B: 75 03 jne 1000C250 - 1000C24D: 21 45 E4 and dword ptr [ebp-1Ch],eax - 1000C250: 83 7D E4 00 cmp dword ptr [ebp-1Ch],0 - 1000C254: 74 11 je 1000C267 - 1000C256: A1 FC F8 01 10 mov eax,dword ptr ds:[1001F8FCh] - 1000C25B: 85 C0 test eax,eax - 1000C25D: 74 08 je 1000C267 - 1000C25F: 57 push edi - 1000C260: 56 push esi - 1000C261: 53 push ebx - 1000C262: FF D0 call eax - 1000C264: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1000C267: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000C26E: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 1000C271: EB 1D jmp 1000C290 - 1000C273: 8B 45 EC mov eax,dword ptr [ebp-14h] - 1000C276: 8B 08 mov ecx,dword ptr [eax] - 1000C278: 8B 09 mov ecx,dword ptr [ecx] - 1000C27A: 50 push eax - 1000C27B: 51 push ecx - 1000C27C: E8 DA A0 00 00 call 1001635B - 1000C281: 59 pop ecx - 1000C282: 59 pop ecx - 1000C283: C3 ret - 1000C284: 8B 65 E8 mov esp,dword ptr [ebp-18h] - 1000C287: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000C28E: 33 C0 xor eax,eax - 1000C290: E8 38 3E 00 00 call 100100CD - 1000C295: C3 ret - 1000C296: 8B FF mov edi,edi - 1000C298: 55 push ebp - 1000C299: 8B EC mov ebp,esp - 1000C29B: 83 7D 0C 01 cmp dword ptr [ebp+0Ch],1 - 1000C29F: 75 05 jne 1000C2A6 - 1000C2A1: E8 D5 A0 00 00 call 1001637B - 1000C2A6: FF 75 08 push dword ptr [ebp+8] - 1000C2A9: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 1000C2AC: 8B 55 0C mov edx,dword ptr [ebp+0Ch] - 1000C2AF: E8 EC FE FF FF call 1000C1A0 - 1000C2B4: 59 pop ecx - 1000C2B5: 5D pop ebp - 1000C2B6: C2 0C 00 ret 0Ch - 1000C2B9: 55 push ebp - 1000C2BA: 8B EC mov ebp,esp - 1000C2BC: 83 EC 08 sub esp,8 - 1000C2BF: 89 7D FC mov dword ptr [ebp-4],edi - 1000C2C2: 89 75 F8 mov dword ptr [ebp-8],esi - 1000C2C5: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 1000C2C8: 8B 7D 08 mov edi,dword ptr [ebp+8] - 1000C2CB: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 1000C2CE: C1 E9 07 shr ecx,7 - 1000C2D1: EB 06 jmp 1000C2D9 - 1000C2D3: 8D 9B 00 00 00 00 lea ebx,[ebx+00000000h] - 1000C2D9: 66 0F 6F 06 movdqa xmm0,xmmword ptr [esi] - 1000C2DD: 66 0F 6F 4E 10 movdqa xmm1,xmmword ptr [esi+10h] - 1000C2E2: 66 0F 6F 56 20 movdqa xmm2,xmmword ptr [esi+20h] - 1000C2E7: 66 0F 6F 5E 30 movdqa xmm3,xmmword ptr [esi+30h] - 1000C2EC: 66 0F 7F 07 movdqa xmmword ptr [edi],xmm0 - 1000C2F0: 66 0F 7F 4F 10 movdqa xmmword ptr [edi+10h],xmm1 - 1000C2F5: 66 0F 7F 57 20 movdqa xmmword ptr [edi+20h],xmm2 - 1000C2FA: 66 0F 7F 5F 30 movdqa xmmword ptr [edi+30h],xmm3 - 1000C2FF: 66 0F 6F 66 40 movdqa xmm4,xmmword ptr [esi+40h] - 1000C304: 66 0F 6F 6E 50 movdqa xmm5,xmmword ptr [esi+50h] - 1000C309: 66 0F 6F 76 60 movdqa xmm6,xmmword ptr [esi+60h] - 1000C30E: 66 0F 6F 7E 70 movdqa xmm7,xmmword ptr [esi+70h] - 1000C313: 66 0F 7F 67 40 movdqa xmmword ptr [edi+40h],xmm4 - 1000C318: 66 0F 7F 6F 50 movdqa xmmword ptr [edi+50h],xmm5 - 1000C31D: 66 0F 7F 77 60 movdqa xmmword ptr [edi+60h],xmm6 - 1000C322: 66 0F 7F 7F 70 movdqa xmmword ptr [edi+70h],xmm7 - 1000C327: 8D B6 80 00 00 00 lea esi,[esi+00000080h] - 1000C32D: 8D BF 80 00 00 00 lea edi,[edi+00000080h] - 1000C333: 49 dec ecx - 1000C334: 75 A3 jne 1000C2D9 - 1000C336: 8B 75 F8 mov esi,dword ptr [ebp-8] - 1000C339: 8B 7D FC mov edi,dword ptr [ebp-4] - 1000C33C: 8B E5 mov esp,ebp - 1000C33E: 5D pop ebp - 1000C33F: C3 ret - 1000C340: 55 push ebp - 1000C341: 8B EC mov ebp,esp - 1000C343: 83 EC 1C sub esp,1Ch - 1000C346: 89 7D F4 mov dword ptr [ebp-0Ch],edi - 1000C349: 89 75 F8 mov dword ptr [ebp-8],esi - 1000C34C: 89 5D FC mov dword ptr [ebp-4],ebx - 1000C34F: 8B 5D 0C mov ebx,dword ptr [ebp+0Ch] - 1000C352: 8B C3 mov eax,ebx - 1000C354: 99 cdq - 1000C355: 8B C8 mov ecx,eax - 1000C357: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000C35A: 33 CA xor ecx,edx - 1000C35C: 2B CA sub ecx,edx - 1000C35E: 83 E1 0F and ecx,0Fh - 1000C361: 33 CA xor ecx,edx - 1000C363: 2B CA sub ecx,edx - 1000C365: 99 cdq - 1000C366: 8B F8 mov edi,eax - 1000C368: 33 FA xor edi,edx - 1000C36A: 2B FA sub edi,edx - 1000C36C: 83 E7 0F and edi,0Fh - 1000C36F: 33 FA xor edi,edx - 1000C371: 2B FA sub edi,edx - 1000C373: 8B D1 mov edx,ecx - 1000C375: 0B D7 or edx,edi - 1000C377: 75 4A jne 1000C3C3 - 1000C379: 8B 75 10 mov esi,dword ptr [ebp+10h] - 1000C37C: 8B CE mov ecx,esi - 1000C37E: 83 E1 7F and ecx,7Fh - 1000C381: 89 4D E8 mov dword ptr [ebp-18h],ecx - 1000C384: 3B F1 cmp esi,ecx - 1000C386: 74 13 je 1000C39B - 1000C388: 2B F1 sub esi,ecx - 1000C38A: 56 push esi - 1000C38B: 53 push ebx - 1000C38C: 50 push eax - 1000C38D: E8 27 FF FF FF call 1000C2B9 - 1000C392: 83 C4 0C add esp,0Ch - 1000C395: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000C398: 8B 4D E8 mov ecx,dword ptr [ebp-18h] - 1000C39B: 85 C9 test ecx,ecx - 1000C39D: 74 77 je 1000C416 - 1000C39F: 8B 5D 10 mov ebx,dword ptr [ebp+10h] - 1000C3A2: 8B 55 0C mov edx,dword ptr [ebp+0Ch] - 1000C3A5: 03 D3 add edx,ebx - 1000C3A7: 2B D1 sub edx,ecx - 1000C3A9: 89 55 EC mov dword ptr [ebp-14h],edx - 1000C3AC: 03 D8 add ebx,eax - 1000C3AE: 2B D9 sub ebx,ecx - 1000C3B0: 89 5D F0 mov dword ptr [ebp-10h],ebx - 1000C3B3: 8B 75 EC mov esi,dword ptr [ebp-14h] - 1000C3B6: 8B 7D F0 mov edi,dword ptr [ebp-10h] - 1000C3B9: 8B 4D E8 mov ecx,dword ptr [ebp-18h] - 1000C3BC: F3 A4 rep movs byte ptr es:[edi],byte ptr [esi] - 1000C3BE: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000C3C1: EB 53 jmp 1000C416 - 1000C3C3: 3B CF cmp ecx,edi - 1000C3C5: 75 35 jne 1000C3FC - 1000C3C7: F7 D9 neg ecx - 1000C3C9: 83 C1 10 add ecx,10h - 1000C3CC: 89 4D E4 mov dword ptr [ebp-1Ch],ecx - 1000C3CF: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 1000C3D2: 8B 7D 08 mov edi,dword ptr [ebp+8] - 1000C3D5: 8B 4D E4 mov ecx,dword ptr [ebp-1Ch] - 1000C3D8: F3 A4 rep movs byte ptr es:[edi],byte ptr [esi] - 1000C3DA: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000C3DD: 03 4D E4 add ecx,dword ptr [ebp-1Ch] - 1000C3E0: 8B 55 0C mov edx,dword ptr [ebp+0Ch] - 1000C3E3: 03 55 E4 add edx,dword ptr [ebp-1Ch] - 1000C3E6: 8B 45 10 mov eax,dword ptr [ebp+10h] - 1000C3E9: 2B 45 E4 sub eax,dword ptr [ebp-1Ch] - 1000C3EC: 50 push eax - 1000C3ED: 52 push edx - 1000C3EE: 51 push ecx - 1000C3EF: E8 4C FF FF FF call 1000C340 - 1000C3F4: 83 C4 0C add esp,0Ch - 1000C3F7: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000C3FA: EB 1A jmp 1000C416 - 1000C3FC: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 1000C3FF: 8B 7D 08 mov edi,dword ptr [ebp+8] - 1000C402: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 1000C405: 8B D1 mov edx,ecx - 1000C407: C1 E9 02 shr ecx,2 - 1000C40A: F3 A5 rep movs dword ptr es:[edi],dword ptr [esi] - 1000C40C: 8B CA mov ecx,edx - 1000C40E: 83 E1 03 and ecx,3 - 1000C411: F3 A4 rep movs byte ptr es:[edi],byte ptr [esi] - 1000C413: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000C416: 8B 5D FC mov ebx,dword ptr [ebp-4] - 1000C419: 8B 75 F8 mov esi,dword ptr [ebp-8] - 1000C41C: 8B 7D F4 mov edi,dword ptr [ebp-0Ch] - 1000C41F: 8B E5 mov esp,ebp - 1000C421: 5D pop ebp - 1000C422: C3 ret - 1000C423: 6A 0C push 0Ch - 1000C425: 68 C8 1A 02 10 push 10021AC8h - 1000C42A: E8 59 3C 00 00 call 10010088 - 1000C42F: 83 65 FC 00 and dword ptr [ebp-4],0 - 1000C433: 66 0F 28 C1 movapd xmm0,xmm1 - 1000C437: C7 45 E4 01 00 00 mov dword ptr [ebp-1Ch],1 - 00 - 1000C43E: EB 23 jmp 1000C463 - 1000C440: 8B 45 EC mov eax,dword ptr [ebp-14h] - 1000C443: 8B 00 mov eax,dword ptr [eax] - 1000C445: 8B 00 mov eax,dword ptr [eax] - 1000C447: 3D 05 00 00 C0 cmp eax,0C0000005h - 1000C44C: 74 0A je 1000C458 - 1000C44E: 3D 1D 00 00 C0 cmp eax,0C000001Dh - 1000C453: 74 03 je 1000C458 - 1000C455: 33 C0 xor eax,eax - 1000C457: C3 ret - 1000C458: 33 C0 xor eax,eax - 1000C45A: 40 inc eax - 1000C45B: C3 ret - 1000C45C: 8B 65 E8 mov esp,dword ptr [ebp-18h] - 1000C45F: 83 65 E4 00 and dword ptr [ebp-1Ch],0 - 1000C463: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000C46A: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 1000C46D: E8 5B 3C 00 00 call 100100CD - 1000C472: C3 ret - 1000C473: 8B FF mov edi,edi - 1000C475: 55 push ebp - 1000C476: 8B EC mov ebp,esp - 1000C478: 83 EC 18 sub esp,18h - 1000C47B: 33 C0 xor eax,eax - 1000C47D: 53 push ebx - 1000C47E: 89 45 FC mov dword ptr [ebp-4],eax - 1000C481: 89 45 F4 mov dword ptr [ebp-0Ch],eax - 1000C484: 89 45 F8 mov dword ptr [ebp-8],eax - 1000C487: 53 push ebx - 1000C488: 9C pushfd - 1000C489: 58 pop eax - 1000C48A: 8B C8 mov ecx,eax - 1000C48C: 35 00 00 20 00 xor eax,200000h - 1000C491: 50 push eax - 1000C492: 9D popfd - 1000C493: 9C pushfd - 1000C494: 5A pop edx - 1000C495: 2B D1 sub edx,ecx - 1000C497: 74 1F je 1000C4B8 - 1000C499: 51 push ecx - 1000C49A: 9D popfd - 1000C49B: 33 C0 xor eax,eax - 1000C49D: 0F A2 cpuid - 1000C49F: 89 45 F4 mov dword ptr [ebp-0Ch],eax - 1000C4A2: 89 5D E8 mov dword ptr [ebp-18h],ebx - 1000C4A5: 89 55 EC mov dword ptr [ebp-14h],edx - 1000C4A8: 89 4D F0 mov dword ptr [ebp-10h],ecx - 1000C4AB: B8 01 00 00 00 mov eax,1 - 1000C4B0: 0F A2 cpuid - 1000C4B2: 89 55 FC mov dword ptr [ebp-4],edx - 1000C4B5: 89 45 F8 mov dword ptr [ebp-8],eax - 1000C4B8: 5B pop ebx - 1000C4B9: F7 45 FC 00 00 00 test dword ptr [ebp-4],4000000h - 04 - 1000C4C0: 74 0E je 1000C4D0 - 1000C4C2: E8 5C FF FF FF call 1000C423 - 1000C4C7: 85 C0 test eax,eax - 1000C4C9: 74 05 je 1000C4D0 - 1000C4CB: 33 C0 xor eax,eax - 1000C4CD: 40 inc eax - 1000C4CE: EB 02 jmp 1000C4D2 - 1000C4D0: 33 C0 xor eax,eax - 1000C4D2: 5B pop ebx - 1000C4D3: C9 leave - 1000C4D4: C3 ret - 1000C4D5: E8 99 FF FF FF call 1000C473 - 1000C4DA: A3 1C 6D 02 10 mov dword ptr ds:[10026D1Ch],eax - 1000C4DF: 33 C0 xor eax,eax - 1000C4E1: C3 ret - 1000C4E2: 8B FF mov edi,edi - 1000C4E4: 55 push ebp - 1000C4E5: 8B EC mov ebp,esp - 1000C4E7: 56 push esi - 1000C4E8: 8D 45 08 lea eax,[ebp+8] - 1000C4EB: 50 push eax - 1000C4EC: 8B F1 mov esi,ecx - 1000C4EE: E8 A5 15 00 00 call 1000DA98 - 1000C4F3: C7 06 08 F9 01 10 mov dword ptr [esi],1001F908h - 1000C4F9: 8B C6 mov eax,esi - 1000C4FB: 5E pop esi - 1000C4FC: 5D pop ebp - 1000C4FD: C2 04 00 ret 4 - 1000C500: C7 01 08 F9 01 10 mov dword ptr [ecx],1001F908h - 1000C506: E9 5A 16 00 00 jmp 1000DB65 - 1000C50B: 8B FF mov edi,edi - 1000C50D: 55 push ebp - 1000C50E: 8B EC mov ebp,esp - 1000C510: 56 push esi - 1000C511: 8B F1 mov esi,ecx - 1000C513: C7 06 08 F9 01 10 mov dword ptr [esi],1001F908h - 1000C519: E8 47 16 00 00 call 1000DB65 - 1000C51E: F6 45 08 01 test byte ptr [ebp+8],1 - 1000C522: 74 07 je 1000C52B - 1000C524: 56 push esi - 1000C525: E8 D1 DB FF FF call 1000A0FB - 1000C52A: 59 pop ecx - 1000C52B: 8B C6 mov eax,esi - 1000C52D: 5E pop esi - 1000C52E: 5D pop ebp - 1000C52F: C2 04 00 ret 4 - 1000C532: 8B FF mov edi,edi - 1000C534: 55 push ebp - 1000C535: 8B EC mov ebp,esp - 1000C537: 56 push esi - 1000C538: 57 push edi - 1000C539: 8B 7D 08 mov edi,dword ptr [ebp+8] - 1000C53C: 8B 47 04 mov eax,dword ptr [edi+4] - 1000C53F: 85 C0 test eax,eax - 1000C541: 74 47 je 1000C58A - 1000C543: 8D 50 08 lea edx,[eax+8] - 1000C546: 80 3A 00 cmp byte ptr [edx],0 - 1000C549: 74 3F je 1000C58A - 1000C54B: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 1000C54E: 8B 4E 04 mov ecx,dword ptr [esi+4] - 1000C551: 3B C1 cmp eax,ecx - 1000C553: 74 14 je 1000C569 - 1000C555: 83 C1 08 add ecx,8 - 1000C558: 51 push ecx - 1000C559: 52 push edx - 1000C55A: E8 B1 14 00 00 call 1000DA10 - 1000C55F: 59 pop ecx - 1000C560: 59 pop ecx - 1000C561: 85 C0 test eax,eax - 1000C563: 74 04 je 1000C569 - 1000C565: 33 C0 xor eax,eax - 1000C567: EB 24 jmp 1000C58D - 1000C569: F6 06 02 test byte ptr [esi],2 - 1000C56C: 74 05 je 1000C573 - 1000C56E: F6 07 08 test byte ptr [edi],8 - 1000C571: 74 F2 je 1000C565 - 1000C573: 8B 45 10 mov eax,dword ptr [ebp+10h] - 1000C576: 8B 00 mov eax,dword ptr [eax] - 1000C578: A8 01 test al,1 - 1000C57A: 74 05 je 1000C581 - 1000C57C: F6 07 01 test byte ptr [edi],1 - 1000C57F: 74 E4 je 1000C565 - 1000C581: A8 02 test al,2 - 1000C583: 74 05 je 1000C58A - 1000C585: F6 07 02 test byte ptr [edi],2 - 1000C588: 74 DB je 1000C565 - 1000C58A: 33 C0 xor eax,eax - 1000C58C: 40 inc eax - 1000C58D: 5F pop edi - 1000C58E: 5E pop esi - 1000C58F: 5D pop ebp - 1000C590: C3 ret - 1000C591: 8B FF mov edi,edi - 1000C593: 55 push ebp - 1000C594: 8B EC mov ebp,esp - 1000C596: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000C599: 8B 00 mov eax,dword ptr [eax] - 1000C59B: 8B 00 mov eax,dword ptr [eax] - 1000C59D: 3D 4D 4F 43 E0 cmp eax,0E0434F4Dh - 1000C5A2: 74 18 je 1000C5BC - 1000C5A4: 3D 63 73 6D E0 cmp eax,0E06D7363h - 1000C5A9: 75 2B jne 1000C5D6 - 1000C5AB: E8 B2 0E 00 00 call 1000D462 - 1000C5B0: 83 A0 90 00 00 00 and dword ptr [eax+00000090h],0 - 00 - 1000C5B7: E9 EA 11 00 00 jmp 1000D7A6 - 1000C5BC: E8 A1 0E 00 00 call 1000D462 - 1000C5C1: 83 B8 90 00 00 00 cmp dword ptr [eax+00000090h],0 - 00 - 1000C5C8: 7E 0C jle 1000C5D6 - 1000C5CA: E8 93 0E 00 00 call 1000D462 - 1000C5CF: 05 90 00 00 00 add eax,90h - 1000C5D4: FF 08 dec dword ptr [eax] - 1000C5D6: 33 C0 xor eax,eax - 1000C5D8: 5D pop ebp - 1000C5D9: C3 ret - 1000C5DA: 6A 10 push 10h - 1000C5DC: 68 E8 1A 02 10 push 10021AE8h - 1000C5E1: E8 A2 3A 00 00 call 10010088 - 1000C5E6: 8B 7D 10 mov edi,dword ptr [ebp+10h] - 1000C5E9: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 1000C5EC: 81 7F 04 80 00 00 cmp dword ptr [edi+4],80h - 00 - 1000C5F3: 7F 06 jg 1000C5FB - 1000C5F5: 0F BE 73 08 movsx esi,byte ptr [ebx+8] - 1000C5F9: EB 03 jmp 1000C5FE - 1000C5FB: 8B 73 08 mov esi,dword ptr [ebx+8] - 1000C5FE: 89 75 E4 mov dword ptr [ebp-1Ch],esi - 1000C601: E8 5C 0E 00 00 call 1000D462 - 1000C606: 05 90 00 00 00 add eax,90h - 1000C60B: FF 00 inc dword ptr [eax] - 1000C60D: 83 65 FC 00 and dword ptr [ebp-4],0 - 1000C611: 3B 75 14 cmp esi,dword ptr [ebp+14h] - 1000C614: 74 65 je 1000C67B - 1000C616: 83 FE FF cmp esi,0FFFFFFFFh - 1000C619: 7E 05 jle 1000C620 - 1000C61B: 3B 77 04 cmp esi,dword ptr [edi+4] - 1000C61E: 7C 05 jl 1000C625 - 1000C620: E8 CD 11 00 00 call 1000D7F2 - 1000C625: 8B C6 mov eax,esi - 1000C627: C1 E0 03 shl eax,3 - 1000C62A: 8B 4F 08 mov ecx,dword ptr [edi+8] - 1000C62D: 03 C8 add ecx,eax - 1000C62F: 8B 31 mov esi,dword ptr [ecx] - 1000C631: 89 75 E0 mov dword ptr [ebp-20h],esi - 1000C634: C7 45 FC 01 00 00 mov dword ptr [ebp-4],1 - 00 - 1000C63B: 83 79 04 00 cmp dword ptr [ecx+4],0 - 1000C63F: 74 15 je 1000C656 - 1000C641: 89 73 08 mov dword ptr [ebx+8],esi - 1000C644: 68 03 01 00 00 push 103h - 1000C649: 53 push ebx - 1000C64A: 8B 4F 08 mov ecx,dword ptr [edi+8] - 1000C64D: FF 74 01 04 push dword ptr [ecx+eax+4] - 1000C651: E8 EA 11 00 00 call 1000D840 - 1000C656: 83 65 FC 00 and dword ptr [ebp-4],0 - 1000C65A: EB 1A jmp 1000C676 - 1000C65C: FF 75 EC push dword ptr [ebp-14h] - 1000C65F: E8 2D FF FF FF call 1000C591 - 1000C664: 59 pop ecx - 1000C665: C3 ret - 1000C666: 8B 65 E8 mov esp,dword ptr [ebp-18h] - 1000C669: 83 65 FC 00 and dword ptr [ebp-4],0 - 1000C66D: 8B 7D 10 mov edi,dword ptr [ebp+10h] - 1000C670: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 1000C673: 8B 75 E0 mov esi,dword ptr [ebp-20h] - 1000C676: 89 75 E4 mov dword ptr [ebp-1Ch],esi - 1000C679: EB 96 jmp 1000C611 - 1000C67B: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000C682: E8 19 00 00 00 call 1000C6A0 - 1000C687: 3B 75 14 cmp esi,dword ptr [ebp+14h] - 1000C68A: 74 05 je 1000C691 - 1000C68C: E8 61 11 00 00 call 1000D7F2 - 1000C691: 89 73 08 mov dword ptr [ebx+8],esi - 1000C694: E8 34 3A 00 00 call 100100CD - 1000C699: C3 ret - 1000C69A: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 1000C69D: 8B 75 E4 mov esi,dword ptr [ebp-1Ch] - 1000C6A0: E8 BD 0D 00 00 call 1000D462 - 1000C6A5: 83 B8 90 00 00 00 cmp dword ptr [eax+00000090h],0 - 00 - 1000C6AC: 7E 0C jle 1000C6BA - 1000C6AE: E8 AF 0D 00 00 call 1000D462 - 1000C6B3: 05 90 00 00 00 add eax,90h - 1000C6B8: FF 08 dec dword ptr [eax] - 1000C6BA: C3 ret - 1000C6BB: 8B 00 mov eax,dword ptr [eax] - 1000C6BD: 81 38 63 73 6D E0 cmp dword ptr [eax],0E06D7363h - 1000C6C3: 75 38 jne 1000C6FD - 1000C6C5: 83 78 10 03 cmp dword ptr [eax+10h],3 - 1000C6C9: 75 32 jne 1000C6FD - 1000C6CB: 8B 48 14 mov ecx,dword ptr [eax+14h] - 1000C6CE: 81 F9 20 05 93 19 cmp ecx,19930520h - 1000C6D4: 74 10 je 1000C6E6 - 1000C6D6: 81 F9 21 05 93 19 cmp ecx,19930521h - 1000C6DC: 74 08 je 1000C6E6 - 1000C6DE: 81 F9 22 05 93 19 cmp ecx,19930522h - 1000C6E4: 75 17 jne 1000C6FD - 1000C6E6: 83 78 1C 00 cmp dword ptr [eax+1Ch],0 - 1000C6EA: 75 11 jne 1000C6FD - 1000C6EC: E8 71 0D 00 00 call 1000D462 - 1000C6F1: 33 C9 xor ecx,ecx - 1000C6F3: 41 inc ecx - 1000C6F4: 89 88 0C 02 00 00 mov dword ptr [eax+0000020Ch],ecx - 1000C6FA: 8B C1 mov eax,ecx - 1000C6FC: C3 ret - 1000C6FD: 33 C0 xor eax,eax - 1000C6FF: C3 ret - 1000C700: 6A 08 push 8 - 1000C702: 68 10 1B 02 10 push 10021B10h - 1000C707: E8 7C 39 00 00 call 10010088 - 1000C70C: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000C70F: 85 C9 test ecx,ecx - 1000C711: 74 2A je 1000C73D - 1000C713: 81 39 63 73 6D E0 cmp dword ptr [ecx],0E06D7363h - 1000C719: 75 22 jne 1000C73D - 1000C71B: 8B 41 1C mov eax,dword ptr [ecx+1Ch] - 1000C71E: 85 C0 test eax,eax - 1000C720: 74 1B je 1000C73D - 1000C722: 8B 40 04 mov eax,dword ptr [eax+4] - 1000C725: 85 C0 test eax,eax - 1000C727: 74 14 je 1000C73D - 1000C729: 83 65 FC 00 and dword ptr [ebp-4],0 - 1000C72D: 50 push eax - 1000C72E: FF 71 18 push dword ptr [ecx+18h] - 1000C731: E8 B1 D5 FF FF call 10009CE7 - 1000C736: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000C73D: E8 8B 39 00 00 call 100100CD - 1000C742: C3 ret - 1000C743: 33 C0 xor eax,eax - 1000C745: 38 45 0C cmp byte ptr [ebp+0Ch],al - 1000C748: 0F 95 C0 setne al - 1000C74B: C3 ret - 1000C74C: 8B 65 E8 mov esp,dword ptr [ebp-18h] - 1000C74F: E8 52 10 00 00 call 1000D7A6 - 1000C754: CC int 3 - 1000C755: 8B FF mov edi,edi - 1000C757: 55 push ebp - 1000C758: 8B EC mov ebp,esp - 1000C75A: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch] - 1000C75D: 8B 01 mov eax,dword ptr [ecx] - 1000C75F: 56 push esi - 1000C760: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000C763: 03 C6 add eax,esi - 1000C765: 83 79 04 00 cmp dword ptr [ecx+4],0 - 1000C769: 7C 10 jl 1000C77B - 1000C76B: 8B 51 04 mov edx,dword ptr [ecx+4] - 1000C76E: 8B 49 08 mov ecx,dword ptr [ecx+8] - 1000C771: 8B 34 32 mov esi,dword ptr [edx+esi] - 1000C774: 8B 0C 0E mov ecx,dword ptr [esi+ecx] - 1000C777: 03 CA add ecx,edx - 1000C779: 03 C1 add eax,ecx - 1000C77B: 5E pop esi - 1000C77C: 5D pop ebp - 1000C77D: C3 ret - 1000C77E: 8B FF mov edi,edi - 1000C780: 55 push ebp - 1000C781: 8B EC mov ebp,esp - 1000C783: 83 EC 0C sub esp,0Ch - 1000C786: 85 FF test edi,edi - 1000C788: 75 0A jne 1000C794 - 1000C78A: E8 63 10 00 00 call 1000D7F2 - 1000C78F: E8 12 10 00 00 call 1000D7A6 - 1000C794: 83 65 F8 00 and dword ptr [ebp-8],0 - 1000C798: 83 3F 00 cmp dword ptr [edi],0 - 1000C79B: C6 45 FF 00 mov byte ptr [ebp-1],0 - 1000C79F: 7E 53 jle 1000C7F4 - 1000C7A1: 53 push ebx - 1000C7A2: 56 push esi - 1000C7A3: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000C7A6: 8B 40 1C mov eax,dword ptr [eax+1Ch] - 1000C7A9: 8B 40 0C mov eax,dword ptr [eax+0Ch] - 1000C7AC: 8B 18 mov ebx,dword ptr [eax] - 1000C7AE: 8D 70 04 lea esi,[eax+4] - 1000C7B1: 85 DB test ebx,ebx - 1000C7B3: 7E 33 jle 1000C7E8 - 1000C7B5: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1000C7B8: C1 E0 04 shl eax,4 - 1000C7BB: 89 45 F4 mov dword ptr [ebp-0Ch],eax - 1000C7BE: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000C7C1: FF 71 1C push dword ptr [ecx+1Ch] - 1000C7C4: 8B 06 mov eax,dword ptr [esi] - 1000C7C6: 50 push eax - 1000C7C7: 8B 47 04 mov eax,dword ptr [edi+4] - 1000C7CA: 03 45 F4 add eax,dword ptr [ebp-0Ch] - 1000C7CD: 50 push eax - 1000C7CE: E8 5F FD FF FF call 1000C532 - 1000C7D3: 83 C4 0C add esp,0Ch - 1000C7D6: 85 C0 test eax,eax - 1000C7D8: 75 0A jne 1000C7E4 - 1000C7DA: 4B dec ebx - 1000C7DB: 83 C6 04 add esi,4 - 1000C7DE: 85 DB test ebx,ebx - 1000C7E0: 7F DC jg 1000C7BE - 1000C7E2: EB 04 jmp 1000C7E8 - 1000C7E4: C6 45 FF 01 mov byte ptr [ebp-1],1 - 1000C7E8: FF 45 F8 inc dword ptr [ebp-8] - 1000C7EB: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1000C7EE: 3B 07 cmp eax,dword ptr [edi] - 1000C7F0: 7C B1 jl 1000C7A3 - 1000C7F2: 5E pop esi - 1000C7F3: 5B pop ebx - 1000C7F4: 8A 45 FF mov al,byte ptr [ebp-1] - 1000C7F7: C9 leave - 1000C7F8: C3 ret - 1000C7F9: 6A 04 push 4 - 1000C7FB: B8 86 ED 01 10 mov eax,1001ED86h - 1000C800: E8 0C 9C 00 00 call 10016411 - 1000C805: E8 58 0C 00 00 call 1000D462 - 1000C80A: 83 B8 94 00 00 00 cmp dword ptr [eax+00000094h],0 - 00 - 1000C811: 74 05 je 1000C818 - 1000C813: E8 DA 0F 00 00 call 1000D7F2 - 1000C818: 83 65 FC 00 and dword ptr [ebp-4],0 - 1000C81C: E8 BE 0F 00 00 call 1000D7DF - 1000C821: 83 4D FC FF or dword ptr [ebp-4],0FFFFFFFFh - 1000C825: E8 7C 0F 00 00 call 1000D7A6 - 1000C82A: E8 33 0C 00 00 call 1000D462 - 1000C82F: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000C832: 6A 00 push 0 - 1000C834: 6A 00 push 0 - 1000C836: 89 88 94 00 00 00 mov dword ptr [eax+00000094h],ecx - 1000C83C: E8 F6 15 00 00 call 1000DE37 - 1000C841: CC int 3 - 1000C842: 6A 2C push 2Ch - 1000C844: 68 88 1B 02 10 push 10021B88h - 1000C849: E8 3A 38 00 00 call 10010088 - 1000C84E: 8B D9 mov ebx,ecx - 1000C850: 8B 7D 0C mov edi,dword ptr [ebp+0Ch] - 1000C853: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000C856: 89 5D E4 mov dword ptr [ebp-1Ch],ebx - 1000C859: 83 65 CC 00 and dword ptr [ebp-34h],0 - 1000C85D: 8B 47 FC mov eax,dword ptr [edi-4] - 1000C860: 89 45 DC mov dword ptr [ebp-24h],eax - 1000C863: FF 76 18 push dword ptr [esi+18h] - 1000C866: 8D 45 C4 lea eax,[ebp-3Ch] - 1000C869: 50 push eax - 1000C86A: E8 27 D7 FF FF call 10009F96 - 1000C86F: 59 pop ecx - 1000C870: 59 pop ecx - 1000C871: 89 45 D8 mov dword ptr [ebp-28h],eax - 1000C874: E8 E9 0B 00 00 call 1000D462 - 1000C879: 8B 80 88 00 00 00 mov eax,dword ptr [eax+00000088h] - 1000C87F: 89 45 D4 mov dword ptr [ebp-2Ch],eax - 1000C882: E8 DB 0B 00 00 call 1000D462 - 1000C887: 8B 80 8C 00 00 00 mov eax,dword ptr [eax+0000008Ch] - 1000C88D: 89 45 D0 mov dword ptr [ebp-30h],eax - 1000C890: E8 CD 0B 00 00 call 1000D462 - 1000C895: 89 B0 88 00 00 00 mov dword ptr [eax+00000088h],esi - 1000C89B: E8 C2 0B 00 00 call 1000D462 - 1000C8A0: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 1000C8A3: 89 88 8C 00 00 00 mov dword ptr [eax+0000008Ch],ecx - 1000C8A9: 83 65 FC 00 and dword ptr [ebp-4],0 - 1000C8AD: 33 C0 xor eax,eax - 1000C8AF: 40 inc eax - 1000C8B0: 89 45 10 mov dword ptr [ebp+10h],eax - 1000C8B3: 89 45 FC mov dword ptr [ebp-4],eax - 1000C8B6: FF 75 1C push dword ptr [ebp+1Ch] - 1000C8B9: FF 75 18 push dword ptr [ebp+18h] - 1000C8BC: 53 push ebx - 1000C8BD: FF 75 14 push dword ptr [ebp+14h] - 1000C8C0: 57 push edi - 1000C8C1: E8 75 D7 FF FF call 1000A03B - 1000C8C6: 83 C4 14 add esp,14h - 1000C8C9: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1000C8CC: 83 65 FC 00 and dword ptr [ebp-4],0 - 1000C8D0: EB 6F jmp 1000C941 - 1000C8D2: 8B 45 EC mov eax,dword ptr [ebp-14h] - 1000C8D5: E8 E1 FD FF FF call 1000C6BB - 1000C8DA: C3 ret - 1000C8DB: 8B 65 E8 mov esp,dword ptr [ebp-18h] - 1000C8DE: E8 7F 0B 00 00 call 1000D462 - 1000C8E3: 83 A0 0C 02 00 00 and dword ptr [eax+0000020Ch],0 - 00 - 1000C8EA: 8B 75 14 mov esi,dword ptr [ebp+14h] - 1000C8ED: 8B 7D 0C mov edi,dword ptr [ebp+0Ch] - 1000C8F0: 81 7E 04 80 00 00 cmp dword ptr [esi+4],80h - 00 - 1000C8F7: 7F 06 jg 1000C8FF - 1000C8F9: 0F BE 4F 08 movsx ecx,byte ptr [edi+8] - 1000C8FD: EB 03 jmp 1000C902 - 1000C8FF: 8B 4F 08 mov ecx,dword ptr [edi+8] - 1000C902: 8B 5E 10 mov ebx,dword ptr [esi+10h] - 1000C905: 83 65 E0 00 and dword ptr [ebp-20h],0 - 1000C909: 8B 45 E0 mov eax,dword ptr [ebp-20h] - 1000C90C: 3B 46 0C cmp eax,dword ptr [esi+0Ch] - 1000C90F: 73 18 jae 1000C929 - 1000C911: 6B C0 14 imul eax,eax,14h - 1000C914: 03 C3 add eax,ebx - 1000C916: 8B 50 04 mov edx,dword ptr [eax+4] - 1000C919: 3B CA cmp ecx,edx - 1000C91B: 7E 40 jle 1000C95D - 1000C91D: 3B 48 08 cmp ecx,dword ptr [eax+8] - 1000C920: 7F 3B jg 1000C95D - 1000C922: 8B 46 08 mov eax,dword ptr [esi+8] - 1000C925: 8B 4C D0 08 mov ecx,dword ptr [eax+edx*8+8] - 1000C929: 51 push ecx - 1000C92A: 56 push esi - 1000C92B: 6A 00 push 0 - 1000C92D: 57 push edi - 1000C92E: E8 A7 FC FF FF call 1000C5DA - 1000C933: 83 C4 10 add esp,10h - 1000C936: 83 65 E4 00 and dword ptr [ebp-1Ch],0 - 1000C93A: 83 65 FC 00 and dword ptr [ebp-4],0 - 1000C93E: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000C941: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000C948: C7 45 10 00 00 00 mov dword ptr [ebp+10h],0 - 00 - 1000C94F: E8 14 00 00 00 call 1000C968 - 1000C954: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 1000C957: E8 71 37 00 00 call 100100CD - 1000C95C: C3 ret - 1000C95D: FF 45 E0 inc dword ptr [ebp-20h] - 1000C960: EB A7 jmp 1000C909 - 1000C962: 8B 7D 0C mov edi,dword ptr [ebp+0Ch] - 1000C965: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000C968: 8B 45 DC mov eax,dword ptr [ebp-24h] - 1000C96B: 89 47 FC mov dword ptr [edi-4],eax - 1000C96E: FF 75 D8 push dword ptr [ebp-28h] - 1000C971: E8 73 D6 FF FF call 10009FE9 - 1000C976: 59 pop ecx - 1000C977: E8 E6 0A 00 00 call 1000D462 - 1000C97C: 8B 4D D4 mov ecx,dword ptr [ebp-2Ch] - 1000C97F: 89 88 88 00 00 00 mov dword ptr [eax+00000088h],ecx - 1000C985: E8 D8 0A 00 00 call 1000D462 - 1000C98A: 8B 4D D0 mov ecx,dword ptr [ebp-30h] - 1000C98D: 89 88 8C 00 00 00 mov dword ptr [eax+0000008Ch],ecx - 1000C993: 81 3E 63 73 6D E0 cmp dword ptr [esi],0E06D7363h - 1000C999: 75 42 jne 1000C9DD - 1000C99B: 83 7E 10 03 cmp dword ptr [esi+10h],3 - 1000C99F: 75 3C jne 1000C9DD - 1000C9A1: 8B 46 14 mov eax,dword ptr [esi+14h] - 1000C9A4: 3D 20 05 93 19 cmp eax,19930520h - 1000C9A9: 74 0E je 1000C9B9 - 1000C9AB: 3D 21 05 93 19 cmp eax,19930521h - 1000C9B0: 74 07 je 1000C9B9 - 1000C9B2: 3D 22 05 93 19 cmp eax,19930522h - 1000C9B7: 75 24 jne 1000C9DD - 1000C9B9: 83 7D CC 00 cmp dword ptr [ebp-34h],0 - 1000C9BD: 75 1E jne 1000C9DD - 1000C9BF: 83 7D E4 00 cmp dword ptr [ebp-1Ch],0 - 1000C9C3: 74 18 je 1000C9DD - 1000C9C5: FF 76 18 push dword ptr [esi+18h] - 1000C9C8: E8 F5 D5 FF FF call 10009FC2 - 1000C9CD: 59 pop ecx - 1000C9CE: 85 C0 test eax,eax - 1000C9D0: 74 0B je 1000C9DD - 1000C9D2: FF 75 10 push dword ptr [ebp+10h] - 1000C9D5: 56 push esi - 1000C9D6: E8 25 FD FF FF call 1000C700 - 1000C9DB: 59 pop ecx - 1000C9DC: 59 pop ecx - 1000C9DD: C3 ret - 1000C9DE: 6A 0C push 0Ch - 1000C9E0: 68 B0 1B 02 10 push 10021BB0h - 1000C9E5: E8 9E 36 00 00 call 10010088 - 1000C9EA: 33 D2 xor edx,edx - 1000C9EC: 89 55 E4 mov dword ptr [ebp-1Ch],edx - 1000C9EF: 8B 45 10 mov eax,dword ptr [ebp+10h] - 1000C9F2: 8B 48 04 mov ecx,dword ptr [eax+4] - 1000C9F5: 3B CA cmp ecx,edx - 1000C9F7: 0F 84 58 01 00 00 je 1000CB55 - 1000C9FD: 38 51 08 cmp byte ptr [ecx+8],dl - 1000CA00: 0F 84 4F 01 00 00 je 1000CB55 - 1000CA06: 8B 48 08 mov ecx,dword ptr [eax+8] - 1000CA09: 3B CA cmp ecx,edx - 1000CA0B: 75 0C jne 1000CA19 - 1000CA0D: F7 00 00 00 00 80 test dword ptr [eax],80000000h - 1000CA13: 0F 84 3C 01 00 00 je 1000CB55 - 1000CA19: 8B 00 mov eax,dword ptr [eax] - 1000CA1B: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 1000CA1E: 85 C0 test eax,eax - 1000CA20: 78 04 js 1000CA26 - 1000CA22: 8D 74 31 0C lea esi,[ecx+esi+0Ch] - 1000CA26: 89 55 FC mov dword ptr [ebp-4],edx - 1000CA29: 33 DB xor ebx,ebx - 1000CA2B: 43 inc ebx - 1000CA2C: 53 push ebx - 1000CA2D: A8 08 test al,8 - 1000CA2F: 74 41 je 1000CA72 - 1000CA31: 8B 7D 08 mov edi,dword ptr [ebp+8] - 1000CA34: FF 77 18 push dword ptr [edi+18h] - 1000CA37: E8 0B 9A 00 00 call 10016447 - 1000CA3C: 59 pop ecx - 1000CA3D: 59 pop ecx - 1000CA3E: 85 C0 test eax,eax - 1000CA40: 0F 84 F2 00 00 00 je 1000CB38 - 1000CA46: 53 push ebx - 1000CA47: 56 push esi - 1000CA48: E8 FA 99 00 00 call 10016447 - 1000CA4D: 59 pop ecx - 1000CA4E: 59 pop ecx - 1000CA4F: 85 C0 test eax,eax - 1000CA51: 0F 84 E1 00 00 00 je 1000CB38 - 1000CA57: 8B 47 18 mov eax,dword ptr [edi+18h] - 1000CA5A: 89 06 mov dword ptr [esi],eax - 1000CA5C: 8B 4D 14 mov ecx,dword ptr [ebp+14h] - 1000CA5F: 83 C1 08 add ecx,8 - 1000CA62: 51 push ecx - 1000CA63: 50 push eax - 1000CA64: E8 EC FC FF FF call 1000C755 - 1000CA69: 59 pop ecx - 1000CA6A: 59 pop ecx - 1000CA6B: 89 06 mov dword ptr [esi],eax - 1000CA6D: E9 CB 00 00 00 jmp 1000CB3D - 1000CA72: 8B 7D 14 mov edi,dword ptr [ebp+14h] - 1000CA75: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000CA78: FF 70 18 push dword ptr [eax+18h] - 1000CA7B: 84 1F test byte ptr [edi],bl - 1000CA7D: 74 48 je 1000CAC7 - 1000CA7F: E8 C3 99 00 00 call 10016447 - 1000CA84: 59 pop ecx - 1000CA85: 59 pop ecx - 1000CA86: 85 C0 test eax,eax - 1000CA88: 0F 84 AA 00 00 00 je 1000CB38 - 1000CA8E: 53 push ebx - 1000CA8F: 56 push esi - 1000CA90: E8 B2 99 00 00 call 10016447 - 1000CA95: 59 pop ecx - 1000CA96: 59 pop ecx - 1000CA97: 85 C0 test eax,eax - 1000CA99: 0F 84 99 00 00 00 je 1000CB38 - 1000CA9F: FF 77 14 push dword ptr [edi+14h] - 1000CAA2: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000CAA5: FF 70 18 push dword ptr [eax+18h] - 1000CAA8: 56 push esi - 1000CAA9: E8 B2 99 00 00 call 10016460 - 1000CAAE: 83 C4 0C add esp,0Ch - 1000CAB1: 83 7F 14 04 cmp dword ptr [edi+14h],4 - 1000CAB5: 0F 85 82 00 00 00 jne 1000CB3D - 1000CABB: 8B 06 mov eax,dword ptr [esi] - 1000CABD: 85 C0 test eax,eax - 1000CABF: 74 7C je 1000CB3D - 1000CAC1: 83 C7 08 add edi,8 - 1000CAC4: 57 push edi - 1000CAC5: EB 9C jmp 1000CA63 - 1000CAC7: 39 57 18 cmp dword ptr [edi+18h],edx - 1000CACA: 75 38 jne 1000CB04 - 1000CACC: E8 76 99 00 00 call 10016447 - 1000CAD1: 59 pop ecx - 1000CAD2: 59 pop ecx - 1000CAD3: 85 C0 test eax,eax - 1000CAD5: 74 61 je 1000CB38 - 1000CAD7: 53 push ebx - 1000CAD8: 56 push esi - 1000CAD9: E8 69 99 00 00 call 10016447 - 1000CADE: 59 pop ecx - 1000CADF: 59 pop ecx - 1000CAE0: 85 C0 test eax,eax - 1000CAE2: 74 54 je 1000CB38 - 1000CAE4: FF 77 14 push dword ptr [edi+14h] - 1000CAE7: 83 C7 08 add edi,8 - 1000CAEA: 57 push edi - 1000CAEB: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000CAEE: FF 70 18 push dword ptr [eax+18h] - 1000CAF1: E8 5F FC FF FF call 1000C755 - 1000CAF6: 59 pop ecx - 1000CAF7: 59 pop ecx - 1000CAF8: 50 push eax - 1000CAF9: 56 push esi - 1000CAFA: E8 61 99 00 00 call 10016460 - 1000CAFF: 83 C4 0C add esp,0Ch - 1000CB02: EB 39 jmp 1000CB3D - 1000CB04: E8 3E 99 00 00 call 10016447 - 1000CB09: 59 pop ecx - 1000CB0A: 59 pop ecx - 1000CB0B: 85 C0 test eax,eax - 1000CB0D: 74 29 je 1000CB38 - 1000CB0F: 53 push ebx - 1000CB10: 56 push esi - 1000CB11: E8 31 99 00 00 call 10016447 - 1000CB16: 59 pop ecx - 1000CB17: 59 pop ecx - 1000CB18: 85 C0 test eax,eax - 1000CB1A: 74 1C je 1000CB38 - 1000CB1C: FF 77 18 push dword ptr [edi+18h] - 1000CB1F: E8 23 99 00 00 call 10016447 - 1000CB24: 59 pop ecx - 1000CB25: 85 C0 test eax,eax - 1000CB27: 74 0F je 1000CB38 - 1000CB29: F6 07 04 test byte ptr [edi],4 - 1000CB2C: 6A 00 push 0 - 1000CB2E: 58 pop eax - 1000CB2F: 0F 95 C0 setne al - 1000CB32: 40 inc eax - 1000CB33: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1000CB36: EB 05 jmp 1000CB3D - 1000CB38: E8 B5 0C 00 00 call 1000D7F2 - 1000CB3D: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000CB44: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 1000CB47: EB 0E jmp 1000CB57 - 1000CB49: 33 C0 xor eax,eax - 1000CB4B: 40 inc eax - 1000CB4C: C3 ret - 1000CB4D: 8B 65 E8 mov esp,dword ptr [ebp-18h] - 1000CB50: E8 51 0C 00 00 call 1000D7A6 - 1000CB55: 33 C0 xor eax,eax - 1000CB57: E8 71 35 00 00 call 100100CD - 1000CB5C: C3 ret - 1000CB5D: 6A 08 push 8 - 1000CB5F: 68 D0 1B 02 10 push 10021BD0h - 1000CB64: E8 1F 35 00 00 call 10010088 - 1000CB69: 8B 45 10 mov eax,dword ptr [ebp+10h] - 1000CB6C: F7 00 00 00 00 80 test dword ptr [eax],80000000h - 1000CB72: 74 05 je 1000CB79 - 1000CB74: 8B 5D 0C mov ebx,dword ptr [ebp+0Ch] - 1000CB77: EB 0A jmp 1000CB83 - 1000CB79: 8B 48 08 mov ecx,dword ptr [eax+8] - 1000CB7C: 8B 55 0C mov edx,dword ptr [ebp+0Ch] - 1000CB7F: 8D 5C 11 0C lea ebx,[ecx+edx+0Ch] - 1000CB83: 83 65 FC 00 and dword ptr [ebp-4],0 - 1000CB87: 8B 75 14 mov esi,dword ptr [ebp+14h] - 1000CB8A: 56 push esi - 1000CB8B: 50 push eax - 1000CB8C: FF 75 0C push dword ptr [ebp+0Ch] - 1000CB8F: 8B 7D 08 mov edi,dword ptr [ebp+8] - 1000CB92: 57 push edi - 1000CB93: E8 46 FE FF FF call 1000C9DE - 1000CB98: 83 C4 10 add esp,10h - 1000CB9B: 48 dec eax - 1000CB9C: 74 1F je 1000CBBD - 1000CB9E: 48 dec eax - 1000CB9F: 75 34 jne 1000CBD5 - 1000CBA1: 6A 01 push 1 - 1000CBA3: 8D 46 08 lea eax,[esi+8] - 1000CBA6: 50 push eax - 1000CBA7: FF 77 18 push dword ptr [edi+18h] - 1000CBAA: E8 A6 FB FF FF call 1000C755 - 1000CBAF: 59 pop ecx - 1000CBB0: 59 pop ecx - 1000CBB1: 50 push eax - 1000CBB2: FF 76 18 push dword ptr [esi+18h] - 1000CBB5: 53 push ebx - 1000CBB6: E8 2C D1 FF FF call 10009CE7 - 1000CBBB: EB 18 jmp 1000CBD5 - 1000CBBD: 8D 46 08 lea eax,[esi+8] - 1000CBC0: 50 push eax - 1000CBC1: FF 77 18 push dword ptr [edi+18h] - 1000CBC4: E8 8C FB FF FF call 1000C755 - 1000CBC9: 59 pop ecx - 1000CBCA: 59 pop ecx - 1000CBCB: 50 push eax - 1000CBCC: FF 76 18 push dword ptr [esi+18h] - 1000CBCF: 53 push ebx - 1000CBD0: E8 12 D1 FF FF call 10009CE7 - 1000CBD5: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000CBDC: E8 EC 34 00 00 call 100100CD - 1000CBE1: C3 ret - 1000CBE2: 33 C0 xor eax,eax - 1000CBE4: 40 inc eax - 1000CBE5: C3 ret - 1000CBE6: 8B 65 E8 mov esp,dword ptr [ebp-18h] - 1000CBE9: E8 B8 0B 00 00 call 1000D7A6 - 1000CBEE: CC int 3 - 1000CBEF: 8B FF mov edi,edi - 1000CBF1: 55 push ebp - 1000CBF2: 8B EC mov ebp,esp - 1000CBF4: 83 7D 18 00 cmp dword ptr [ebp+18h],0 - 1000CBF8: 74 10 je 1000CC0A - 1000CBFA: FF 75 18 push dword ptr [ebp+18h] - 1000CBFD: 53 push ebx - 1000CBFE: 56 push esi - 1000CBFF: FF 75 08 push dword ptr [ebp+8] - 1000CC02: E8 56 FF FF FF call 1000CB5D - 1000CC07: 83 C4 10 add esp,10h - 1000CC0A: 83 7D 20 00 cmp dword ptr [ebp+20h],0 - 1000CC0E: FF 75 08 push dword ptr [ebp+8] - 1000CC11: 75 03 jne 1000CC16 - 1000CC13: 56 push esi - 1000CC14: EB 03 jmp 1000CC19 - 1000CC16: FF 75 20 push dword ptr [ebp+20h] - 1000CC19: E8 D0 D0 FF FF call 10009CEE - 1000CC1E: FF 37 push dword ptr [edi] - 1000CC20: FF 75 14 push dword ptr [ebp+14h] - 1000CC23: FF 75 10 push dword ptr [ebp+10h] - 1000CC26: 56 push esi - 1000CC27: E8 AE F9 FF FF call 1000C5DA - 1000CC2C: 8B 47 04 mov eax,dword ptr [edi+4] - 1000CC2F: 68 00 01 00 00 push 100h - 1000CC34: FF 75 1C push dword ptr [ebp+1Ch] - 1000CC37: 40 inc eax - 1000CC38: FF 75 14 push dword ptr [ebp+14h] - 1000CC3B: 89 46 08 mov dword ptr [esi+8],eax - 1000CC3E: FF 75 0C push dword ptr [ebp+0Ch] - 1000CC41: 8B 4B 0C mov ecx,dword ptr [ebx+0Ch] - 1000CC44: 56 push esi - 1000CC45: FF 75 08 push dword ptr [ebp+8] - 1000CC48: E8 F5 FB FF FF call 1000C842 - 1000CC4D: 83 C4 28 add esp,28h - 1000CC50: 85 C0 test eax,eax - 1000CC52: 74 07 je 1000CC5B - 1000CC54: 56 push esi - 1000CC55: 50 push eax - 1000CC56: E8 5A D0 FF FF call 10009CB5 - 1000CC5B: 5D pop ebp - 1000CC5C: C3 ret - 1000CC5D: 8B FF mov edi,edi - 1000CC5F: 55 push ebp - 1000CC60: 8B EC mov ebp,esp - 1000CC62: 51 push ecx - 1000CC63: 51 push ecx - 1000CC64: 56 push esi - 1000CC65: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000CC68: 81 3E 03 00 00 80 cmp dword ptr [esi],80000003h - 1000CC6E: 0F 84 DA 00 00 00 je 1000CD4E - 1000CC74: 57 push edi - 1000CC75: E8 E8 07 00 00 call 1000D462 - 1000CC7A: 83 B8 80 00 00 00 cmp dword ptr [eax+00000080h],0 - 00 - 1000CC81: 74 3F je 1000CCC2 - 1000CC83: E8 DA 07 00 00 call 1000D462 - 1000CC88: 8D B8 80 00 00 00 lea edi,[eax+00000080h] - 1000CC8E: E8 7A 05 00 00 call 1000D20D - 1000CC93: 39 07 cmp dword ptr [edi],eax - 1000CC95: 74 2B je 1000CCC2 - 1000CC97: 81 3E 4D 4F 43 E0 cmp dword ptr [esi],0E0434F4Dh - 1000CC9D: 74 23 je 1000CCC2 - 1000CC9F: FF 75 24 push dword ptr [ebp+24h] - 1000CCA2: FF 75 20 push dword ptr [ebp+20h] - 1000CCA5: FF 75 18 push dword ptr [ebp+18h] - 1000CCA8: FF 75 14 push dword ptr [ebp+14h] - 1000CCAB: FF 75 10 push dword ptr [ebp+10h] - 1000CCAE: FF 75 0C push dword ptr [ebp+0Ch] - 1000CCB1: 56 push esi - 1000CCB2: E8 F4 D0 FF FF call 10009DAB - 1000CCB7: 83 C4 1C add esp,1Ch - 1000CCBA: 85 C0 test eax,eax - 1000CCBC: 0F 85 8B 00 00 00 jne 1000CD4D - 1000CCC2: 8B 7D 18 mov edi,dword ptr [ebp+18h] - 1000CCC5: 83 7F 0C 00 cmp dword ptr [edi+0Ch],0 - 1000CCC9: 75 05 jne 1000CCD0 - 1000CCCB: E8 22 0B 00 00 call 1000D7F2 - 1000CCD0: 8B 75 1C mov esi,dword ptr [ebp+1Ch] - 1000CCD3: 8D 45 F8 lea eax,[ebp-8] - 1000CCD6: 50 push eax - 1000CCD7: 8D 45 FC lea eax,[ebp-4] - 1000CCDA: 50 push eax - 1000CCDB: 56 push esi - 1000CCDC: FF 75 20 push dword ptr [ebp+20h] - 1000CCDF: 57 push edi - 1000CCE0: E8 3C D2 FF FF call 10009F21 - 1000CCE5: 8B F8 mov edi,eax - 1000CCE7: 8B 45 FC mov eax,dword ptr [ebp-4] - 1000CCEA: 83 C4 14 add esp,14h - 1000CCED: 3B 45 F8 cmp eax,dword ptr [ebp-8] - 1000CCF0: 73 5B jae 1000CD4D - 1000CCF2: 53 push ebx - 1000CCF3: 3B 37 cmp esi,dword ptr [edi] - 1000CCF5: 7C 47 jl 1000CD3E - 1000CCF7: 3B 77 04 cmp esi,dword ptr [edi+4] - 1000CCFA: 7F 42 jg 1000CD3E - 1000CCFC: 8B 47 0C mov eax,dword ptr [edi+0Ch] - 1000CCFF: 8B 4F 10 mov ecx,dword ptr [edi+10h] - 1000CD02: C1 E0 04 shl eax,4 - 1000CD05: 03 C1 add eax,ecx - 1000CD07: 8B 48 F4 mov ecx,dword ptr [eax-0Ch] - 1000CD0A: 85 C9 test ecx,ecx - 1000CD0C: 74 06 je 1000CD14 - 1000CD0E: 80 79 08 00 cmp byte ptr [ecx+8],0 - 1000CD12: 75 2A jne 1000CD3E - 1000CD14: 8D 58 F0 lea ebx,[eax-10h] - 1000CD17: F6 03 40 test byte ptr [ebx],40h - 1000CD1A: 75 22 jne 1000CD3E - 1000CD1C: FF 75 24 push dword ptr [ebp+24h] - 1000CD1F: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 1000CD22: FF 75 20 push dword ptr [ebp+20h] - 1000CD25: 6A 00 push 0 - 1000CD27: FF 75 18 push dword ptr [ebp+18h] - 1000CD2A: FF 75 14 push dword ptr [ebp+14h] - 1000CD2D: FF 75 10 push dword ptr [ebp+10h] - 1000CD30: FF 75 08 push dword ptr [ebp+8] - 1000CD33: E8 B7 FE FF FF call 1000CBEF - 1000CD38: 8B 75 1C mov esi,dword ptr [ebp+1Ch] - 1000CD3B: 83 C4 1C add esp,1Ch - 1000CD3E: FF 45 FC inc dword ptr [ebp-4] - 1000CD41: 8B 45 FC mov eax,dword ptr [ebp-4] - 1000CD44: 83 C7 14 add edi,14h - 1000CD47: 3B 45 F8 cmp eax,dword ptr [ebp-8] - 1000CD4A: 72 A7 jb 1000CCF3 - 1000CD4C: 5B pop ebx - 1000CD4D: 5F pop edi - 1000CD4E: 5E pop esi - 1000CD4F: C9 leave - 1000CD50: C3 ret - 1000CD51: 8B FF mov edi,edi - 1000CD53: 55 push ebp - 1000CD54: 8B EC mov ebp,esp - 1000CD56: 83 EC 2C sub esp,2Ch - 1000CD59: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch] - 1000CD5C: 53 push ebx - 1000CD5D: 8B 5D 18 mov ebx,dword ptr [ebp+18h] - 1000CD60: 8B 43 04 mov eax,dword ptr [ebx+4] - 1000CD63: 3D 80 00 00 00 cmp eax,80h - 1000CD68: 56 push esi - 1000CD69: 57 push edi - 1000CD6A: C6 45 FF 00 mov byte ptr [ebp-1],0 - 1000CD6E: 7F 06 jg 1000CD76 - 1000CD70: 0F BE 49 08 movsx ecx,byte ptr [ecx+8] - 1000CD74: EB 03 jmp 1000CD79 - 1000CD76: 8B 49 08 mov ecx,dword ptr [ecx+8] - 1000CD79: 83 F9 FF cmp ecx,0FFFFFFFFh - 1000CD7C: 89 4D F8 mov dword ptr [ebp-8],ecx - 1000CD7F: 7C 04 jl 1000CD85 - 1000CD81: 3B C8 cmp ecx,eax - 1000CD83: 7C 05 jl 1000CD8A - 1000CD85: E8 68 0A 00 00 call 1000D7F2 - 1000CD8A: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000CD8D: BF 63 73 6D E0 mov edi,0E06D7363h - 1000CD92: 39 3E cmp dword ptr [esi],edi - 1000CD94: 0F 85 BA 02 00 00 jne 1000D054 - 1000CD9A: 83 7E 10 03 cmp dword ptr [esi+10h],3 - 1000CD9E: BB 20 05 93 19 mov ebx,19930520h - 1000CDA3: 0F 85 18 01 00 00 jne 1000CEC1 - 1000CDA9: 8B 46 14 mov eax,dword ptr [esi+14h] - 1000CDAC: 3B C3 cmp eax,ebx - 1000CDAE: 74 12 je 1000CDC2 - 1000CDB0: 3D 21 05 93 19 cmp eax,19930521h - 1000CDB5: 74 0B je 1000CDC2 - 1000CDB7: 3D 22 05 93 19 cmp eax,19930522h - 1000CDBC: 0F 85 FF 00 00 00 jne 1000CEC1 - 1000CDC2: 83 7E 1C 00 cmp dword ptr [esi+1Ch],0 - 1000CDC6: 0F 85 F5 00 00 00 jne 1000CEC1 - 1000CDCC: E8 91 06 00 00 call 1000D462 - 1000CDD1: 83 B8 88 00 00 00 cmp dword ptr [eax+00000088h],0 - 00 - 1000CDD8: 0F 84 B5 02 00 00 je 1000D093 - 1000CDDE: E8 7F 06 00 00 call 1000D462 - 1000CDE3: 8B B0 88 00 00 00 mov esi,dword ptr [eax+00000088h] - 1000CDE9: 89 75 08 mov dword ptr [ebp+8],esi - 1000CDEC: E8 71 06 00 00 call 1000D462 - 1000CDF1: 8B 80 8C 00 00 00 mov eax,dword ptr [eax+0000008Ch] - 1000CDF7: 6A 01 push 1 - 1000CDF9: 56 push esi - 1000CDFA: 89 45 10 mov dword ptr [ebp+10h],eax - 1000CDFD: E8 45 96 00 00 call 10016447 - 1000CE02: 59 pop ecx - 1000CE03: 59 pop ecx - 1000CE04: 85 C0 test eax,eax - 1000CE06: 75 05 jne 1000CE0D - 1000CE08: E8 E5 09 00 00 call 1000D7F2 - 1000CE0D: 39 3E cmp dword ptr [esi],edi - 1000CE0F: 75 26 jne 1000CE37 - 1000CE11: 83 7E 10 03 cmp dword ptr [esi+10h],3 - 1000CE15: 75 20 jne 1000CE37 - 1000CE17: 8B 46 14 mov eax,dword ptr [esi+14h] - 1000CE1A: 3B C3 cmp eax,ebx - 1000CE1C: 74 0E je 1000CE2C - 1000CE1E: 3D 21 05 93 19 cmp eax,19930521h - 1000CE23: 74 07 je 1000CE2C - 1000CE25: 3D 22 05 93 19 cmp eax,19930522h - 1000CE2A: 75 0B jne 1000CE37 - 1000CE2C: 83 7E 1C 00 cmp dword ptr [esi+1Ch],0 - 1000CE30: 75 05 jne 1000CE37 - 1000CE32: E8 BB 09 00 00 call 1000D7F2 - 1000CE37: E8 26 06 00 00 call 1000D462 - 1000CE3C: 83 B8 94 00 00 00 cmp dword ptr [eax+00000094h],0 - 00 - 1000CE43: 74 7C je 1000CEC1 - 1000CE45: E8 18 06 00 00 call 1000D462 - 1000CE4A: 8B B8 94 00 00 00 mov edi,dword ptr [eax+00000094h] - 1000CE50: E8 0D 06 00 00 call 1000D462 - 1000CE55: FF 75 08 push dword ptr [ebp+8] - 1000CE58: 33 F6 xor esi,esi - 1000CE5A: 89 B0 94 00 00 00 mov dword ptr [eax+00000094h],esi - 1000CE60: E8 19 F9 FF FF call 1000C77E - 1000CE65: 59 pop ecx - 1000CE66: 84 C0 test al,al - 1000CE68: 75 4F jne 1000CEB9 - 1000CE6A: 33 DB xor ebx,ebx - 1000CE6C: 39 1F cmp dword ptr [edi],ebx - 1000CE6E: 7E 1D jle 1000CE8D - 1000CE70: 8B 47 04 mov eax,dword ptr [edi+4] - 1000CE73: 8B 4C 03 04 mov ecx,dword ptr [ebx+eax+4] - 1000CE77: 68 BC 4C 02 10 push 10024CBCh - 1000CE7C: E8 5A D2 FF FF call 1000A0DB - 1000CE81: 84 C0 test al,al - 1000CE83: 75 0D jne 1000CE92 - 1000CE85: 46 inc esi - 1000CE86: 83 C3 10 add ebx,10h - 1000CE89: 3B 37 cmp esi,dword ptr [edi] - 1000CE8B: 7C E3 jl 1000CE70 - 1000CE8D: E8 14 09 00 00 call 1000D7A6 - 1000CE92: 6A 01 push 1 - 1000CE94: FF 75 08 push dword ptr [ebp+8] - 1000CE97: E8 64 F8 FF FF call 1000C700 - 1000CE9C: 59 pop ecx - 1000CE9D: 59 pop ecx - 1000CE9E: 68 10 F9 01 10 push 1001F910h - 1000CEA3: 8D 4D D4 lea ecx,[ebp-2Ch] - 1000CEA6: E8 37 F6 FF FF call 1000C4E2 - 1000CEAB: 68 EC 1B 02 10 push 10021BECh - 1000CEB0: 8D 45 D4 lea eax,[ebp-2Ch] - 1000CEB3: 50 push eax - 1000CEB4: E8 7E 0F 00 00 call 1000DE37 - 1000CEB9: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000CEBC: BF 63 73 6D E0 mov edi,0E06D7363h - 1000CEC1: 39 3E cmp dword ptr [esi],edi - 1000CEC3: 0F 85 88 01 00 00 jne 1000D051 - 1000CEC9: 83 7E 10 03 cmp dword ptr [esi+10h],3 - 1000CECD: 0F 85 7E 01 00 00 jne 1000D051 - 1000CED3: 8B 46 14 mov eax,dword ptr [esi+14h] - 1000CED6: 3B C3 cmp eax,ebx - 1000CED8: 74 12 je 1000CEEC - 1000CEDA: 3D 21 05 93 19 cmp eax,19930521h - 1000CEDF: 74 0B je 1000CEEC - 1000CEE1: 3D 22 05 93 19 cmp eax,19930522h - 1000CEE6: 0F 85 65 01 00 00 jne 1000D051 - 1000CEEC: 8B 7D 18 mov edi,dword ptr [ebp+18h] - 1000CEEF: 83 7F 0C 00 cmp dword ptr [edi+0Ch],0 - 1000CEF3: 0F 86 BF 00 00 00 jbe 1000CFB8 - 1000CEF9: 8D 45 E4 lea eax,[ebp-1Ch] - 1000CEFC: 50 push eax - 1000CEFD: 8D 45 F0 lea eax,[ebp-10h] - 1000CF00: 50 push eax - 1000CF01: FF 75 F8 push dword ptr [ebp-8] - 1000CF04: FF 75 20 push dword ptr [ebp+20h] - 1000CF07: 57 push edi - 1000CF08: E8 14 D0 FF FF call 10009F21 - 1000CF0D: 83 C4 14 add esp,14h - 1000CF10: 8B F8 mov edi,eax - 1000CF12: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 1000CF15: 3B 45 E4 cmp eax,dword ptr [ebp-1Ch] - 1000CF18: 0F 83 97 00 00 00 jae 1000CFB5 - 1000CF1E: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1000CF21: 39 07 cmp dword ptr [edi],eax - 1000CF23: 0F 8F 81 00 00 00 jg 1000CFAA - 1000CF29: 3B 47 04 cmp eax,dword ptr [edi+4] - 1000CF2C: 7F 7C jg 1000CFAA - 1000CF2E: 8B 47 10 mov eax,dword ptr [edi+10h] - 1000CF31: 89 45 F4 mov dword ptr [ebp-0Ch],eax - 1000CF34: 8B 47 0C mov eax,dword ptr [edi+0Ch] - 1000CF37: 89 45 E8 mov dword ptr [ebp-18h],eax - 1000CF3A: 85 C0 test eax,eax - 1000CF3C: 7E 6C jle 1000CFAA - 1000CF3E: 8B 46 1C mov eax,dword ptr [esi+1Ch] - 1000CF41: 8B 40 0C mov eax,dword ptr [eax+0Ch] - 1000CF44: 8D 58 04 lea ebx,[eax+4] - 1000CF47: 8B 00 mov eax,dword ptr [eax] - 1000CF49: 89 45 EC mov dword ptr [ebp-14h],eax - 1000CF4C: 85 C0 test eax,eax - 1000CF4E: 7E 23 jle 1000CF73 - 1000CF50: FF 76 1C push dword ptr [esi+1Ch] - 1000CF53: 8B 03 mov eax,dword ptr [ebx] - 1000CF55: 50 push eax - 1000CF56: FF 75 F4 push dword ptr [ebp-0Ch] - 1000CF59: 89 45 E0 mov dword ptr [ebp-20h],eax - 1000CF5C: E8 D1 F5 FF FF call 1000C532 - 1000CF61: 83 C4 0C add esp,0Ch - 1000CF64: 85 C0 test eax,eax - 1000CF66: 75 1A jne 1000CF82 - 1000CF68: FF 4D EC dec dword ptr [ebp-14h] - 1000CF6B: 83 C3 04 add ebx,4 - 1000CF6E: 39 45 EC cmp dword ptr [ebp-14h],eax - 1000CF71: 7F DD jg 1000CF50 - 1000CF73: FF 4D E8 dec dword ptr [ebp-18h] - 1000CF76: 83 45 F4 10 add dword ptr [ebp-0Ch],10h - 1000CF7A: 83 7D E8 00 cmp dword ptr [ebp-18h],0 - 1000CF7E: 7F BE jg 1000CF3E - 1000CF80: EB 28 jmp 1000CFAA - 1000CF82: FF 75 24 push dword ptr [ebp+24h] - 1000CF85: 8B 5D F4 mov ebx,dword ptr [ebp-0Ch] - 1000CF88: FF 75 20 push dword ptr [ebp+20h] - 1000CF8B: C6 45 FF 01 mov byte ptr [ebp-1],1 - 1000CF8F: FF 75 E0 push dword ptr [ebp-20h] - 1000CF92: FF 75 18 push dword ptr [ebp+18h] - 1000CF95: FF 75 14 push dword ptr [ebp+14h] - 1000CF98: FF 75 10 push dword ptr [ebp+10h] - 1000CF9B: 56 push esi - 1000CF9C: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 1000CF9F: E8 4B FC FF FF call 1000CBEF - 1000CFA4: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000CFA7: 83 C4 1C add esp,1Ch - 1000CFAA: FF 45 F0 inc dword ptr [ebp-10h] - 1000CFAD: 83 C7 14 add edi,14h - 1000CFB0: E9 5D FF FF FF jmp 1000CF12 - 1000CFB5: 8B 7D 18 mov edi,dword ptr [ebp+18h] - 1000CFB8: 80 7D 1C 00 cmp byte ptr [ebp+1Ch],0 - 1000CFBC: 74 0A je 1000CFC8 - 1000CFBE: 6A 01 push 1 - 1000CFC0: 56 push esi - 1000CFC1: E8 3A F7 FF FF call 1000C700 - 1000CFC6: 59 pop ecx - 1000CFC7: 59 pop ecx - 1000CFC8: 80 7D FF 00 cmp byte ptr [ebp-1],0 - 1000CFCC: 0F 85 AE 00 00 00 jne 1000D080 - 1000CFD2: 8B 07 mov eax,dword ptr [edi] - 1000CFD4: 25 FF FF FF 1F and eax,1FFFFFFFh - 1000CFD9: 3D 21 05 93 19 cmp eax,19930521h - 1000CFDE: 0F 82 9C 00 00 00 jb 1000D080 - 1000CFE4: 8B 7F 1C mov edi,dword ptr [edi+1Ch] - 1000CFE7: 85 FF test edi,edi - 1000CFE9: 0F 84 91 00 00 00 je 1000D080 - 1000CFEF: 56 push esi - 1000CFF0: E8 89 F7 FF FF call 1000C77E - 1000CFF5: 59 pop ecx - 1000CFF6: 84 C0 test al,al - 1000CFF8: 0F 85 82 00 00 00 jne 1000D080 - 1000CFFE: E8 5F 04 00 00 call 1000D462 - 1000D003: E8 5A 04 00 00 call 1000D462 - 1000D008: E8 55 04 00 00 call 1000D462 - 1000D00D: 89 B0 88 00 00 00 mov dword ptr [eax+00000088h],esi - 1000D013: E8 4A 04 00 00 call 1000D462 - 1000D018: 83 7D 24 00 cmp dword ptr [ebp+24h],0 - 1000D01C: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 1000D01F: 89 88 8C 00 00 00 mov dword ptr [eax+0000008Ch],ecx - 1000D025: 56 push esi - 1000D026: 75 05 jne 1000D02D - 1000D028: FF 75 0C push dword ptr [ebp+0Ch] - 1000D02B: EB 03 jmp 1000D030 - 1000D02D: FF 75 24 push dword ptr [ebp+24h] - 1000D030: E8 B9 CC FF FF call 10009CEE - 1000D035: 8B 75 18 mov esi,dword ptr [ebp+18h] - 1000D038: 6A FF push 0FFFFFFFFh - 1000D03A: 56 push esi - 1000D03B: FF 75 14 push dword ptr [ebp+14h] - 1000D03E: FF 75 0C push dword ptr [ebp+0Ch] - 1000D041: E8 94 F5 FF FF call 1000C5DA - 1000D046: 83 C4 10 add esp,10h - 1000D049: FF 76 1C push dword ptr [esi+1Ch] - 1000D04C: E8 A8 F7 FF FF call 1000C7F9 - 1000D051: 8B 5D 18 mov ebx,dword ptr [ebp+18h] - 1000D054: 83 7B 0C 00 cmp dword ptr [ebx+0Ch],0 - 1000D058: 76 26 jbe 1000D080 - 1000D05A: 80 7D 1C 00 cmp byte ptr [ebp+1Ch],0 - 1000D05E: 0F 85 29 FE FF FF jne 1000CE8D - 1000D064: FF 75 24 push dword ptr [ebp+24h] - 1000D067: FF 75 20 push dword ptr [ebp+20h] - 1000D06A: FF 75 F8 push dword ptr [ebp-8] - 1000D06D: 53 push ebx - 1000D06E: FF 75 14 push dword ptr [ebp+14h] - 1000D071: FF 75 10 push dword ptr [ebp+10h] - 1000D074: FF 75 0C push dword ptr [ebp+0Ch] - 1000D077: 56 push esi - 1000D078: E8 E0 FB FF FF call 1000CC5D - 1000D07D: 83 C4 20 add esp,20h - 1000D080: E8 DD 03 00 00 call 1000D462 - 1000D085: 83 B8 94 00 00 00 cmp dword ptr [eax+00000094h],0 - 00 - 1000D08C: 74 05 je 1000D093 - 1000D08E: E8 5F 07 00 00 call 1000D7F2 - 1000D093: 5F pop edi - 1000D094: 5E pop esi - 1000D095: 5B pop ebx - 1000D096: C9 leave - 1000D097: C3 ret - 1000D098: 8B FF mov edi,edi - 1000D09A: 55 push ebp - 1000D09B: 8B EC mov ebp,esp - 1000D09D: 56 push esi - 1000D09E: FF 75 08 push dword ptr [ebp+8] - 1000D0A1: 8B F1 mov esi,ecx - 1000D0A3: E8 60 0A 00 00 call 1000DB08 - 1000D0A8: C7 06 08 F9 01 10 mov dword ptr [esi],1001F908h - 1000D0AE: 8B C6 mov eax,esi - 1000D0B0: 5E pop esi - 1000D0B1: 5D pop ebp - 1000D0B2: C2 04 00 ret 4 - 1000D0B5: 8B FF mov edi,edi - 1000D0B7: 55 push ebp - 1000D0B8: 8B EC mov ebp,esp - 1000D0BA: 53 push ebx - 1000D0BB: 56 push esi - 1000D0BC: 57 push edi - 1000D0BD: E8 A0 03 00 00 call 1000D462 - 1000D0C2: 83 B8 0C 02 00 00 cmp dword ptr [eax+0000020Ch],0 - 00 - 1000D0C9: 8B 45 18 mov eax,dword ptr [ebp+18h] - 1000D0CC: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000D0CF: BF 63 73 6D E0 mov edi,0E06D7363h - 1000D0D4: BE FF FF FF 1F mov esi,1FFFFFFFh - 1000D0D9: BB 22 05 93 19 mov ebx,19930522h - 1000D0DE: 75 20 jne 1000D100 - 1000D0E0: 8B 11 mov edx,dword ptr [ecx] - 1000D0E2: 3B D7 cmp edx,edi - 1000D0E4: 74 1A je 1000D100 - 1000D0E6: 81 FA 26 00 00 80 cmp edx,80000026h - 1000D0EC: 74 12 je 1000D100 - 1000D0EE: 8B 10 mov edx,dword ptr [eax] - 1000D0F0: 23 D6 and edx,esi - 1000D0F2: 3B D3 cmp edx,ebx - 1000D0F4: 72 0A jb 1000D100 - 1000D0F6: F6 40 20 01 test byte ptr [eax+20h],1 - 1000D0FA: 0F 85 93 00 00 00 jne 1000D193 - 1000D100: F6 41 04 66 test byte ptr [ecx+4],66h - 1000D104: 74 23 je 1000D129 - 1000D106: 83 78 04 00 cmp dword ptr [eax+4],0 - 1000D10A: 0F 84 83 00 00 00 je 1000D193 - 1000D110: 83 7D 1C 00 cmp dword ptr [ebp+1Ch],0 - 1000D114: 75 7D jne 1000D193 - 1000D116: 6A FF push 0FFFFFFFFh - 1000D118: 50 push eax - 1000D119: FF 75 14 push dword ptr [ebp+14h] - 1000D11C: FF 75 0C push dword ptr [ebp+0Ch] - 1000D11F: E8 B6 F4 FF FF call 1000C5DA - 1000D124: 83 C4 10 add esp,10h - 1000D127: EB 6A jmp 1000D193 - 1000D129: 83 78 0C 00 cmp dword ptr [eax+0Ch],0 - 1000D12D: 75 12 jne 1000D141 - 1000D12F: 8B 10 mov edx,dword ptr [eax] - 1000D131: 23 D6 and edx,esi - 1000D133: 81 FA 21 05 93 19 cmp edx,19930521h - 1000D139: 72 58 jb 1000D193 - 1000D13B: 83 78 1C 00 cmp dword ptr [eax+1Ch],0 - 1000D13F: 74 52 je 1000D193 - 1000D141: 39 39 cmp dword ptr [ecx],edi - 1000D143: 75 32 jne 1000D177 - 1000D145: 83 79 10 03 cmp dword ptr [ecx+10h],3 - 1000D149: 72 2C jb 1000D177 - 1000D14B: 39 59 14 cmp dword ptr [ecx+14h],ebx - 1000D14E: 76 27 jbe 1000D177 - 1000D150: 8B 51 1C mov edx,dword ptr [ecx+1Ch] - 1000D153: 8B 52 08 mov edx,dword ptr [edx+8] - 1000D156: 85 D2 test edx,edx - 1000D158: 74 1D je 1000D177 - 1000D15A: 0F B6 75 24 movzx esi,byte ptr [ebp+24h] - 1000D15E: 56 push esi - 1000D15F: FF 75 20 push dword ptr [ebp+20h] - 1000D162: FF 75 1C push dword ptr [ebp+1Ch] - 1000D165: 50 push eax - 1000D166: FF 75 14 push dword ptr [ebp+14h] - 1000D169: FF 75 10 push dword ptr [ebp+10h] - 1000D16C: FF 75 0C push dword ptr [ebp+0Ch] - 1000D16F: 51 push ecx - 1000D170: FF D2 call edx - 1000D172: 83 C4 20 add esp,20h - 1000D175: EB 1F jmp 1000D196 - 1000D177: FF 75 20 push dword ptr [ebp+20h] - 1000D17A: FF 75 1C push dword ptr [ebp+1Ch] - 1000D17D: FF 75 24 push dword ptr [ebp+24h] - 1000D180: 50 push eax - 1000D181: FF 75 14 push dword ptr [ebp+14h] - 1000D184: FF 75 10 push dword ptr [ebp+10h] - 1000D187: FF 75 0C push dword ptr [ebp+0Ch] - 1000D18A: 51 push ecx - 1000D18B: E8 C1 FB FF FF call 1000CD51 - 1000D190: 83 C4 20 add esp,20h - 1000D193: 33 C0 xor eax,eax - 1000D195: 40 inc eax - 1000D196: 5F pop edi - 1000D197: 5E pop esi - 1000D198: 5B pop ebx - 1000D199: 5D pop ebp - 1000D19A: C3 ret - 1000D19B: 8B FF mov edi,edi - 1000D19D: 55 push ebp - 1000D19E: 8B EC mov ebp,esp - 1000D1A0: 56 push esi - 1000D1A1: FF 35 E0 4C 02 10 push dword ptr ds:[10024CE0h] - 1000D1A7: 8B 35 84 F0 01 10 mov esi,dword ptr ds:[1001F084h] - 1000D1AD: FF D6 call esi - 1000D1AF: 85 C0 test eax,eax - 1000D1B1: 74 21 je 1000D1D4 - 1000D1B3: A1 DC 4C 02 10 mov eax,dword ptr ds:[10024CDCh] - 1000D1B8: 83 F8 FF cmp eax,0FFFFFFFFh - 1000D1BB: 74 17 je 1000D1D4 - 1000D1BD: 50 push eax - 1000D1BE: FF 35 E0 4C 02 10 push dword ptr ds:[10024CE0h] - 1000D1C4: FF D6 call esi - 1000D1C6: FF D0 call eax - 1000D1C8: 85 C0 test eax,eax - 1000D1CA: 74 08 je 1000D1D4 - 1000D1CC: 8B 80 F8 01 00 00 mov eax,dword ptr [eax+000001F8h] - 1000D1D2: EB 27 jmp 1000D1FB - 1000D1D4: BE 30 F9 01 10 mov esi,1001F930h - 1000D1D9: 56 push esi - 1000D1DA: FF 15 7C F0 01 10 call dword ptr ds:[1001F07Ch] - 1000D1E0: 85 C0 test eax,eax - 1000D1E2: 75 0B jne 1000D1EF - 1000D1E4: 56 push esi - 1000D1E5: E8 EF 58 00 00 call 10012AD9 - 1000D1EA: 59 pop ecx - 1000D1EB: 85 C0 test eax,eax - 1000D1ED: 74 18 je 1000D207 - 1000D1EF: 68 20 F9 01 10 push 1001F920h - 1000D1F4: 50 push eax - 1000D1F5: FF 15 80 F0 01 10 call dword ptr ds:[1001F080h] - 1000D1FB: 85 C0 test eax,eax - 1000D1FD: 74 08 je 1000D207 - 1000D1FF: FF 75 08 push dword ptr [ebp+8] - 1000D202: FF D0 call eax - 1000D204: 89 45 08 mov dword ptr [ebp+8],eax - 1000D207: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000D20A: 5E pop esi - 1000D20B: 5D pop ebp - 1000D20C: C3 ret - 1000D20D: 6A 00 push 0 - 1000D20F: E8 87 FF FF FF call 1000D19B - 1000D214: 59 pop ecx - 1000D215: C3 ret - 1000D216: 8B FF mov edi,edi - 1000D218: 55 push ebp - 1000D219: 8B EC mov ebp,esp - 1000D21B: 56 push esi - 1000D21C: FF 35 E0 4C 02 10 push dword ptr ds:[10024CE0h] - 1000D222: 8B 35 84 F0 01 10 mov esi,dword ptr ds:[1001F084h] - 1000D228: FF D6 call esi - 1000D22A: 85 C0 test eax,eax - 1000D22C: 74 21 je 1000D24F - 1000D22E: A1 DC 4C 02 10 mov eax,dword ptr ds:[10024CDCh] - 1000D233: 83 F8 FF cmp eax,0FFFFFFFFh - 1000D236: 74 17 je 1000D24F - 1000D238: 50 push eax - 1000D239: FF 35 E0 4C 02 10 push dword ptr ds:[10024CE0h] - 1000D23F: FF D6 call esi - 1000D241: FF D0 call eax - 1000D243: 85 C0 test eax,eax - 1000D245: 74 08 je 1000D24F - 1000D247: 8B 80 FC 01 00 00 mov eax,dword ptr [eax+000001FCh] - 1000D24D: EB 27 jmp 1000D276 - 1000D24F: BE 30 F9 01 10 mov esi,1001F930h - 1000D254: 56 push esi - 1000D255: FF 15 7C F0 01 10 call dword ptr ds:[1001F07Ch] - 1000D25B: 85 C0 test eax,eax - 1000D25D: 75 0B jne 1000D26A - 1000D25F: 56 push esi - 1000D260: E8 74 58 00 00 call 10012AD9 - 1000D265: 59 pop ecx - 1000D266: 85 C0 test eax,eax - 1000D268: 74 18 je 1000D282 - 1000D26A: 68 4C F9 01 10 push 1001F94Ch - 1000D26F: 50 push eax - 1000D270: FF 15 80 F0 01 10 call dword ptr ds:[1001F080h] - 1000D276: 85 C0 test eax,eax - 1000D278: 74 08 je 1000D282 - 1000D27A: FF 75 08 push dword ptr [ebp+8] - 1000D27D: FF D0 call eax - 1000D27F: 89 45 08 mov dword ptr [ebp+8],eax - 1000D282: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000D285: 5E pop esi - 1000D286: 5D pop ebp - 1000D287: C3 ret - 1000D288: FF 15 44 F0 01 10 call dword ptr ds:[1001F044h] - 1000D28E: C2 04 00 ret 4 - 1000D291: 8B FF mov edi,edi - 1000D293: 56 push esi - 1000D294: FF 35 E0 4C 02 10 push dword ptr ds:[10024CE0h] - 1000D29A: FF 15 84 F0 01 10 call dword ptr ds:[1001F084h] - 1000D2A0: 8B F0 mov esi,eax - 1000D2A2: 85 F6 test esi,esi - 1000D2A4: 75 1B jne 1000D2C1 - 1000D2A6: FF 35 00 62 02 10 push dword ptr ds:[10026200h] - 1000D2AC: E8 65 FF FF FF call 1000D216 - 1000D2B1: 59 pop ecx - 1000D2B2: 8B F0 mov esi,eax - 1000D2B4: 56 push esi - 1000D2B5: FF 35 E0 4C 02 10 push dword ptr ds:[10024CE0h] - 1000D2BB: FF 15 88 F0 01 10 call dword ptr ds:[1001F088h] - 1000D2C1: 8B C6 mov eax,esi - 1000D2C3: 5E pop esi - 1000D2C4: C3 ret - 1000D2C5: A1 DC 4C 02 10 mov eax,dword ptr ds:[10024CDCh] - 1000D2CA: 83 F8 FF cmp eax,0FFFFFFFFh - 1000D2CD: 74 16 je 1000D2E5 - 1000D2CF: 50 push eax - 1000D2D0: FF 35 08 62 02 10 push dword ptr ds:[10026208h] - 1000D2D6: E8 3B FF FF FF call 1000D216 - 1000D2DB: 59 pop ecx - 1000D2DC: FF D0 call eax - 1000D2DE: 83 0D DC 4C 02 10 or dword ptr ds:[10024CDCh],0FFFFFFFFh - FF - 1000D2E5: A1 E0 4C 02 10 mov eax,dword ptr ds:[10024CE0h] - 1000D2EA: 83 F8 FF cmp eax,0FFFFFFFFh - 1000D2ED: 74 0E je 1000D2FD - 1000D2EF: 50 push eax - 1000D2F0: FF 15 48 F0 01 10 call dword ptr ds:[1001F048h] - 1000D2F6: 83 0D E0 4C 02 10 or dword ptr ds:[10024CE0h],0FFFFFFFFh - FF - 1000D2FD: E9 5B 21 00 00 jmp 1000F45D - 1000D302: 6A 0C push 0Ch - 1000D304: 68 28 1C 02 10 push 10021C28h - 1000D309: E8 7A 2D 00 00 call 10010088 - 1000D30E: BE 30 F9 01 10 mov esi,1001F930h - 1000D313: 56 push esi - 1000D314: FF 15 7C F0 01 10 call dword ptr ds:[1001F07Ch] - 1000D31A: 85 C0 test eax,eax - 1000D31C: 75 07 jne 1000D325 - 1000D31E: 56 push esi - 1000D31F: E8 B5 57 00 00 call 10012AD9 - 1000D324: 59 pop ecx - 1000D325: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1000D328: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000D32B: C7 46 5C 38 01 02 mov dword ptr [esi+5Ch],10020138h - 10 - 1000D332: 33 FF xor edi,edi - 1000D334: 47 inc edi - 1000D335: 89 7E 14 mov dword ptr [esi+14h],edi - 1000D338: 85 C0 test eax,eax - 1000D33A: 74 24 je 1000D360 - 1000D33C: 68 20 F9 01 10 push 1001F920h - 1000D341: 50 push eax - 1000D342: 8B 1D 80 F0 01 10 mov ebx,dword ptr ds:[1001F080h] - 1000D348: FF D3 call ebx - 1000D34A: 89 86 F8 01 00 00 mov dword ptr [esi+000001F8h],eax - 1000D350: 68 4C F9 01 10 push 1001F94Ch - 1000D355: FF 75 E4 push dword ptr [ebp-1Ch] - 1000D358: FF D3 call ebx - 1000D35A: 89 86 FC 01 00 00 mov dword ptr [esi+000001FCh],eax - 1000D360: 89 7E 70 mov dword ptr [esi+70h],edi - 1000D363: C6 86 C8 00 00 00 mov byte ptr [esi+000000C8h],43h - 43 - 1000D36A: C6 86 4B 01 00 00 mov byte ptr [esi+0000014Bh],43h - 43 - 1000D371: C7 46 68 58 50 02 mov dword ptr [esi+68h],10025058h - 10 - 1000D378: 6A 0D push 0Dh - 1000D37A: E8 0F 22 00 00 call 1000F58E - 1000D37F: 59 pop ecx - 1000D380: 83 65 FC 00 and dword ptr [ebp-4],0 - 1000D384: FF 76 68 push dword ptr [esi+68h] - 1000D387: FF 15 8C F0 01 10 call dword ptr ds:[1001F08Ch] - 1000D38D: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000D394: E8 3E 00 00 00 call 1000D3D7 - 1000D399: 6A 0C push 0Ch - 1000D39B: E8 EE 21 00 00 call 1000F58E - 1000D3A0: 59 pop ecx - 1000D3A1: 89 7D FC mov dword ptr [ebp-4],edi - 1000D3A4: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 1000D3A7: 89 46 6C mov dword ptr [esi+6Ch],eax - 1000D3AA: 85 C0 test eax,eax - 1000D3AC: 75 08 jne 1000D3B6 - 1000D3AE: A1 60 56 02 10 mov eax,dword ptr ds:[10025660h] - 1000D3B3: 89 46 6C mov dword ptr [esi+6Ch],eax - 1000D3B6: FF 76 6C push dword ptr [esi+6Ch] - 1000D3B9: E8 40 4D 00 00 call 100120FE - 1000D3BE: 59 pop ecx - 1000D3BF: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000D3C6: E8 15 00 00 00 call 1000D3E0 - 1000D3CB: E8 FD 2C 00 00 call 100100CD - 1000D3D0: C3 ret - 1000D3D1: 33 FF xor edi,edi - 1000D3D3: 47 inc edi - 1000D3D4: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000D3D7: 6A 0D push 0Dh - 1000D3D9: E8 D6 20 00 00 call 1000F4B4 - 1000D3DE: 59 pop ecx - 1000D3DF: C3 ret - 1000D3E0: 6A 0C push 0Ch - 1000D3E2: E8 CD 20 00 00 call 1000F4B4 - 1000D3E7: 59 pop ecx - 1000D3E8: C3 ret - 1000D3E9: 8B FF mov edi,edi - 1000D3EB: 56 push esi - 1000D3EC: 57 push edi - 1000D3ED: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 1000D3F3: FF 35 DC 4C 02 10 push dword ptr ds:[10024CDCh] - 1000D3F9: 8B F8 mov edi,eax - 1000D3FB: E8 91 FE FF FF call 1000D291 - 1000D400: FF D0 call eax - 1000D402: 8B F0 mov esi,eax - 1000D404: 85 F6 test esi,esi - 1000D406: 75 4E jne 1000D456 - 1000D408: 68 14 02 00 00 push 214h - 1000D40D: 6A 01 push 1 - 1000D40F: E8 3A 55 00 00 call 1001294E - 1000D414: 8B F0 mov esi,eax - 1000D416: 59 pop ecx - 1000D417: 59 pop ecx - 1000D418: 85 F6 test esi,esi - 1000D41A: 74 3A je 1000D456 - 1000D41C: 56 push esi - 1000D41D: FF 35 DC 4C 02 10 push dword ptr ds:[10024CDCh] - 1000D423: FF 35 04 62 02 10 push dword ptr ds:[10026204h] - 1000D429: E8 E8 FD FF FF call 1000D216 - 1000D42E: 59 pop ecx - 1000D42F: FF D0 call eax - 1000D431: 85 C0 test eax,eax - 1000D433: 74 18 je 1000D44D - 1000D435: 6A 00 push 0 - 1000D437: 56 push esi - 1000D438: E8 C5 FE FF FF call 1000D302 - 1000D43D: 59 pop ecx - 1000D43E: 59 pop ecx - 1000D43F: FF 15 74 F0 01 10 call dword ptr ds:[1001F074h] - 1000D445: 83 4E 04 FF or dword ptr [esi+4],0FFFFFFFFh - 1000D449: 89 06 mov dword ptr [esi],eax - 1000D44B: EB 09 jmp 1000D456 - 1000D44D: 56 push esi - 1000D44E: E8 E1 CE FF FF call 1000A334 - 1000D453: 59 pop ecx - 1000D454: 33 F6 xor esi,esi - 1000D456: 57 push edi - 1000D457: FF 15 90 F0 01 10 call dword ptr ds:[1001F090h] - 1000D45D: 5F pop edi - 1000D45E: 8B C6 mov eax,esi - 1000D460: 5E pop esi - 1000D461: C3 ret - 1000D462: 8B FF mov edi,edi - 1000D464: 56 push esi - 1000D465: E8 7F FF FF FF call 1000D3E9 - 1000D46A: 8B F0 mov esi,eax - 1000D46C: 85 F6 test esi,esi - 1000D46E: 75 08 jne 1000D478 - 1000D470: 6A 10 push 10h - 1000D472: E8 92 56 00 00 call 10012B09 - 1000D477: 59 pop ecx - 1000D478: 8B C6 mov eax,esi - 1000D47A: 5E pop esi - 1000D47B: C3 ret - 1000D47C: 6A 08 push 8 - 1000D47E: 68 50 1C 02 10 push 10021C50h - 1000D483: E8 00 2C 00 00 call 10010088 - 1000D488: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000D48B: 85 F6 test esi,esi - 1000D48D: 0F 84 F8 00 00 00 je 1000D58B - 1000D493: 8B 46 24 mov eax,dword ptr [esi+24h] - 1000D496: 85 C0 test eax,eax - 1000D498: 74 07 je 1000D4A1 - 1000D49A: 50 push eax - 1000D49B: E8 94 CE FF FF call 1000A334 - 1000D4A0: 59 pop ecx - 1000D4A1: 8B 46 2C mov eax,dword ptr [esi+2Ch] - 1000D4A4: 85 C0 test eax,eax - 1000D4A6: 74 07 je 1000D4AF - 1000D4A8: 50 push eax - 1000D4A9: E8 86 CE FF FF call 1000A334 - 1000D4AE: 59 pop ecx - 1000D4AF: 8B 46 34 mov eax,dword ptr [esi+34h] - 1000D4B2: 85 C0 test eax,eax - 1000D4B4: 74 07 je 1000D4BD - 1000D4B6: 50 push eax - 1000D4B7: E8 78 CE FF FF call 1000A334 - 1000D4BC: 59 pop ecx - 1000D4BD: 8B 46 3C mov eax,dword ptr [esi+3Ch] - 1000D4C0: 85 C0 test eax,eax - 1000D4C2: 74 07 je 1000D4CB - 1000D4C4: 50 push eax - 1000D4C5: E8 6A CE FF FF call 1000A334 - 1000D4CA: 59 pop ecx - 1000D4CB: 8B 46 40 mov eax,dword ptr [esi+40h] - 1000D4CE: 85 C0 test eax,eax - 1000D4D0: 74 07 je 1000D4D9 - 1000D4D2: 50 push eax - 1000D4D3: E8 5C CE FF FF call 1000A334 - 1000D4D8: 59 pop ecx - 1000D4D9: 8B 46 44 mov eax,dword ptr [esi+44h] - 1000D4DC: 85 C0 test eax,eax - 1000D4DE: 74 07 je 1000D4E7 - 1000D4E0: 50 push eax - 1000D4E1: E8 4E CE FF FF call 1000A334 - 1000D4E6: 59 pop ecx - 1000D4E7: 8B 46 48 mov eax,dword ptr [esi+48h] - 1000D4EA: 85 C0 test eax,eax - 1000D4EC: 74 07 je 1000D4F5 - 1000D4EE: 50 push eax - 1000D4EF: E8 40 CE FF FF call 1000A334 - 1000D4F4: 59 pop ecx - 1000D4F5: 8B 46 5C mov eax,dword ptr [esi+5Ch] - 1000D4F8: 3D 38 01 02 10 cmp eax,10020138h - 1000D4FD: 74 07 je 1000D506 - 1000D4FF: 50 push eax - 1000D500: E8 2F CE FF FF call 1000A334 - 1000D505: 59 pop ecx - 1000D506: 6A 0D push 0Dh - 1000D508: E8 81 20 00 00 call 1000F58E - 1000D50D: 59 pop ecx - 1000D50E: 83 65 FC 00 and dword ptr [ebp-4],0 - 1000D512: 8B 7E 68 mov edi,dword ptr [esi+68h] - 1000D515: 85 FF test edi,edi - 1000D517: 74 1A je 1000D533 - 1000D519: 57 push edi - 1000D51A: FF 15 94 F0 01 10 call dword ptr ds:[1001F094h] - 1000D520: 85 C0 test eax,eax - 1000D522: 75 0F jne 1000D533 - 1000D524: 81 FF 58 50 02 10 cmp edi,10025058h - 1000D52A: 74 07 je 1000D533 - 1000D52C: 57 push edi - 1000D52D: E8 02 CE FF FF call 1000A334 - 1000D532: 59 pop ecx - 1000D533: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000D53A: E8 57 00 00 00 call 1000D596 - 1000D53F: 6A 0C push 0Ch - 1000D541: E8 48 20 00 00 call 1000F58E - 1000D546: 59 pop ecx - 1000D547: C7 45 FC 01 00 00 mov dword ptr [ebp-4],1 - 00 - 1000D54E: 8B 7E 6C mov edi,dword ptr [esi+6Ch] - 1000D551: 85 FF test edi,edi - 1000D553: 74 23 je 1000D578 - 1000D555: 57 push edi - 1000D556: E8 32 4C 00 00 call 1001218D - 1000D55B: 59 pop ecx - 1000D55C: 3B 3D 60 56 02 10 cmp edi,dword ptr ds:[10025660h] - 1000D562: 74 14 je 1000D578 - 1000D564: 81 FF 88 55 02 10 cmp edi,10025588h - 1000D56A: 74 0C je 1000D578 - 1000D56C: 83 3F 00 cmp dword ptr [edi],0 - 1000D56F: 75 07 jne 1000D578 - 1000D571: 57 push edi - 1000D572: E8 3E 4A 00 00 call 10011FB5 - 1000D577: 59 pop ecx - 1000D578: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000D57F: E8 1E 00 00 00 call 1000D5A2 - 1000D584: 56 push esi - 1000D585: E8 AA CD FF FF call 1000A334 - 1000D58A: 59 pop ecx - 1000D58B: E8 3D 2B 00 00 call 100100CD - 1000D590: C2 04 00 ret 4 - 1000D593: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000D596: 6A 0D push 0Dh - 1000D598: E8 17 1F 00 00 call 1000F4B4 - 1000D59D: 59 pop ecx - 1000D59E: C3 ret - 1000D59F: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000D5A2: 6A 0C push 0Ch - 1000D5A4: E8 0B 1F 00 00 call 1000F4B4 - 1000D5A9: 59 pop ecx - 1000D5AA: C3 ret - 1000D5AB: 8B FF mov edi,edi - 1000D5AD: 55 push ebp - 1000D5AE: 8B EC mov ebp,esp - 1000D5B0: 83 3D DC 4C 02 10 cmp dword ptr ds:[10024CDCh],0FFFFFFFFh - FF - 1000D5B7: 74 4B je 1000D604 - 1000D5B9: 83 7D 08 00 cmp dword ptr [ebp+8],0 - 1000D5BD: 75 27 jne 1000D5E6 - 1000D5BF: 56 push esi - 1000D5C0: FF 35 E0 4C 02 10 push dword ptr ds:[10024CE0h] - 1000D5C6: 8B 35 84 F0 01 10 mov esi,dword ptr ds:[1001F084h] - 1000D5CC: FF D6 call esi - 1000D5CE: 85 C0 test eax,eax - 1000D5D0: 74 13 je 1000D5E5 - 1000D5D2: FF 35 DC 4C 02 10 push dword ptr ds:[10024CDCh] - 1000D5D8: FF 35 E0 4C 02 10 push dword ptr ds:[10024CE0h] - 1000D5DE: FF D6 call esi - 1000D5E0: FF D0 call eax - 1000D5E2: 89 45 08 mov dword ptr [ebp+8],eax - 1000D5E5: 5E pop esi - 1000D5E6: 6A 00 push 0 - 1000D5E8: FF 35 DC 4C 02 10 push dword ptr ds:[10024CDCh] - 1000D5EE: FF 35 04 62 02 10 push dword ptr ds:[10026204h] - 1000D5F4: E8 1D FC FF FF call 1000D216 - 1000D5F9: 59 pop ecx - 1000D5FA: FF D0 call eax - 1000D5FC: FF 75 08 push dword ptr [ebp+8] - 1000D5FF: E8 78 FE FF FF call 1000D47C - 1000D604: A1 E0 4C 02 10 mov eax,dword ptr ds:[10024CE0h] - 1000D609: 83 F8 FF cmp eax,0FFFFFFFFh - 1000D60C: 74 09 je 1000D617 - 1000D60E: 6A 00 push 0 - 1000D610: 50 push eax - 1000D611: FF 15 88 F0 01 10 call dword ptr ds:[1001F088h] - 1000D617: 5D pop ebp - 1000D618: C3 ret - 1000D619: 8B FF mov edi,edi - 1000D61B: 56 push esi - 1000D61C: 57 push edi - 1000D61D: BE 30 F9 01 10 mov esi,1001F930h - 1000D622: 56 push esi - 1000D623: FF 15 7C F0 01 10 call dword ptr ds:[1001F07Ch] - 1000D629: 85 C0 test eax,eax - 1000D62B: 75 07 jne 1000D634 - 1000D62D: 56 push esi - 1000D62E: E8 A6 54 00 00 call 10012AD9 - 1000D633: 59 pop ecx - 1000D634: 8B F8 mov edi,eax - 1000D636: 85 FF test edi,edi - 1000D638: 0F 84 5E 01 00 00 je 1000D79C - 1000D63E: 8B 35 80 F0 01 10 mov esi,dword ptr ds:[1001F080h] - 1000D644: 68 7C F9 01 10 push 1001F97Ch - 1000D649: 57 push edi - 1000D64A: FF D6 call esi - 1000D64C: 68 70 F9 01 10 push 1001F970h - 1000D651: 57 push edi - 1000D652: A3 FC 61 02 10 mov dword ptr ds:[100261FCh],eax - 1000D657: FF D6 call esi - 1000D659: 68 64 F9 01 10 push 1001F964h - 1000D65E: 57 push edi - 1000D65F: A3 00 62 02 10 mov dword ptr ds:[10026200h],eax - 1000D664: FF D6 call esi - 1000D666: 68 5C F9 01 10 push 1001F95Ch - 1000D66B: 57 push edi - 1000D66C: A3 04 62 02 10 mov dword ptr ds:[10026204h],eax - 1000D671: FF D6 call esi - 1000D673: 83 3D FC 61 02 10 cmp dword ptr ds:[100261FCh],0 - 00 - 1000D67A: 8B 35 88 F0 01 10 mov esi,dword ptr ds:[1001F088h] - 1000D680: A3 08 62 02 10 mov dword ptr ds:[10026208h],eax - 1000D685: 74 16 je 1000D69D - 1000D687: 83 3D 00 62 02 10 cmp dword ptr ds:[10026200h],0 - 00 - 1000D68E: 74 0D je 1000D69D - 1000D690: 83 3D 04 62 02 10 cmp dword ptr ds:[10026204h],0 - 00 - 1000D697: 74 04 je 1000D69D - 1000D699: 85 C0 test eax,eax - 1000D69B: 75 24 jne 1000D6C1 - 1000D69D: A1 84 F0 01 10 mov eax,dword ptr ds:[1001F084h] - 1000D6A2: A3 00 62 02 10 mov dword ptr ds:[10026200h],eax - 1000D6A7: A1 48 F0 01 10 mov eax,dword ptr ds:[1001F048h] - 1000D6AC: C7 05 FC 61 02 10 mov dword ptr ds:[100261FCh],1000D288h - 88 D2 00 10 - 1000D6B6: 89 35 04 62 02 10 mov dword ptr ds:[10026204h],esi - 1000D6BC: A3 08 62 02 10 mov dword ptr ds:[10026208h],eax - 1000D6C1: FF 15 44 F0 01 10 call dword ptr ds:[1001F044h] - 1000D6C7: A3 E0 4C 02 10 mov dword ptr ds:[10024CE0h],eax - 1000D6CC: 83 F8 FF cmp eax,0FFFFFFFFh - 1000D6CF: 0F 84 CC 00 00 00 je 1000D7A1 - 1000D6D5: FF 35 00 62 02 10 push dword ptr ds:[10026200h] - 1000D6DB: 50 push eax - 1000D6DC: FF D6 call esi - 1000D6DE: 85 C0 test eax,eax - 1000D6E0: 0F 84 BB 00 00 00 je 1000D7A1 - 1000D6E6: E8 B3 56 00 00 call 10012D9E - 1000D6EB: FF 35 FC 61 02 10 push dword ptr ds:[100261FCh] - 1000D6F1: E8 A5 FA FF FF call 1000D19B - 1000D6F6: FF 35 00 62 02 10 push dword ptr ds:[10026200h] - 1000D6FC: A3 FC 61 02 10 mov dword ptr ds:[100261FCh],eax - 1000D701: E8 95 FA FF FF call 1000D19B - 1000D706: FF 35 04 62 02 10 push dword ptr ds:[10026204h] - 1000D70C: A3 00 62 02 10 mov dword ptr ds:[10026200h],eax - 1000D711: E8 85 FA FF FF call 1000D19B - 1000D716: FF 35 08 62 02 10 push dword ptr ds:[10026208h] - 1000D71C: A3 04 62 02 10 mov dword ptr ds:[10026204h],eax - 1000D721: E8 75 FA FF FF call 1000D19B - 1000D726: 83 C4 10 add esp,10h - 1000D729: A3 08 62 02 10 mov dword ptr ds:[10026208h],eax - 1000D72E: E8 DF 1C 00 00 call 1000F412 - 1000D733: 85 C0 test eax,eax - 1000D735: 74 65 je 1000D79C - 1000D737: 68 7C D4 00 10 push 1000D47Ch - 1000D73C: FF 35 FC 61 02 10 push dword ptr ds:[100261FCh] - 1000D742: E8 CF FA FF FF call 1000D216 - 1000D747: 59 pop ecx - 1000D748: FF D0 call eax - 1000D74A: A3 DC 4C 02 10 mov dword ptr ds:[10024CDCh],eax - 1000D74F: 83 F8 FF cmp eax,0FFFFFFFFh - 1000D752: 74 48 je 1000D79C - 1000D754: 68 14 02 00 00 push 214h - 1000D759: 6A 01 push 1 - 1000D75B: E8 EE 51 00 00 call 1001294E - 1000D760: 8B F0 mov esi,eax - 1000D762: 59 pop ecx - 1000D763: 59 pop ecx - 1000D764: 85 F6 test esi,esi - 1000D766: 74 34 je 1000D79C - 1000D768: 56 push esi - 1000D769: FF 35 DC 4C 02 10 push dword ptr ds:[10024CDCh] - 1000D76F: FF 35 04 62 02 10 push dword ptr ds:[10026204h] - 1000D775: E8 9C FA FF FF call 1000D216 - 1000D77A: 59 pop ecx - 1000D77B: FF D0 call eax - 1000D77D: 85 C0 test eax,eax - 1000D77F: 74 1B je 1000D79C - 1000D781: 6A 00 push 0 - 1000D783: 56 push esi - 1000D784: E8 79 FB FF FF call 1000D302 - 1000D789: 59 pop ecx - 1000D78A: 59 pop ecx - 1000D78B: FF 15 74 F0 01 10 call dword ptr ds:[1001F074h] - 1000D791: 83 4E 04 FF or dword ptr [esi+4],0FFFFFFFFh - 1000D795: 89 06 mov dword ptr [esi],eax - 1000D797: 33 C0 xor eax,eax - 1000D799: 40 inc eax - 1000D79A: EB 07 jmp 1000D7A3 - 1000D79C: E8 24 FB FF FF call 1000D2C5 - 1000D7A1: 33 C0 xor eax,eax - 1000D7A3: 5F pop edi - 1000D7A4: 5E pop esi - 1000D7A5: C3 ret - 1000D7A6: 6A 08 push 8 - 1000D7A8: 68 78 1C 02 10 push 10021C78h - 1000D7AD: E8 D6 28 00 00 call 10010088 - 1000D7B2: E8 AB FC FF FF call 1000D462 - 1000D7B7: 8B 40 78 mov eax,dword ptr [eax+78h] - 1000D7BA: 85 C0 test eax,eax - 1000D7BC: 74 16 je 1000D7D4 - 1000D7BE: 83 65 FC 00 and dword ptr [ebp-4],0 - 1000D7C2: FF D0 call eax - 1000D7C4: EB 07 jmp 1000D7CD - 1000D7C6: 33 C0 xor eax,eax - 1000D7C8: 40 inc eax - 1000D7C9: C3 ret - 1000D7CA: 8B 65 E8 mov esp,dword ptr [ebp-18h] - 1000D7CD: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000D7D4: E8 AA 06 00 00 call 1000DE83 - 1000D7D9: E8 EF 28 00 00 call 100100CD - 1000D7DE: C3 ret - 1000D7DF: E8 7E FC FF FF call 1000D462 - 1000D7E4: 8B 40 7C mov eax,dword ptr [eax+7Ch] - 1000D7E7: 85 C0 test eax,eax - 1000D7E9: 74 02 je 1000D7ED - 1000D7EB: FF D0 call eax - 1000D7ED: E9 B4 FF FF FF jmp 1000D7A6 - 1000D7F2: 6A 08 push 8 - 1000D7F4: 68 98 1C 02 10 push 10021C98h - 1000D7F9: E8 8A 28 00 00 call 10010088 - 1000D7FE: FF 35 0C 62 02 10 push dword ptr ds:[1002620Ch] - 1000D804: E8 0D FA FF FF call 1000D216 - 1000D809: 59 pop ecx - 1000D80A: 85 C0 test eax,eax - 1000D80C: 74 16 je 1000D824 - 1000D80E: 83 65 FC 00 and dword ptr [ebp-4],0 - 1000D812: FF D0 call eax - 1000D814: EB 07 jmp 1000D81D - 1000D816: 33 C0 xor eax,eax - 1000D818: 40 inc eax - 1000D819: C3 ret - 1000D81A: 8B 65 E8 mov esp,dword ptr [ebp-18h] - 1000D81D: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000D824: E8 7D FF FF FF call 1000D7A6 - 1000D829: CC int 3 - 1000D82A: 68 A6 D7 00 10 push 1000D7A6h - 1000D82F: E8 67 F9 FF FF call 1000D19B - 1000D834: 59 pop ecx - 1000D835: A3 0C 62 02 10 mov dword ptr ds:[1002620Ch],eax - 1000D83A: C3 ret - 1000D83B: CC int 3 - 1000D83C: CC int 3 - 1000D83D: CC int 3 - 1000D83E: CC int 3 - 1000D83F: CC int 3 - 1000D840: 55 push ebp - 1000D841: 8B EC mov ebp,esp - 1000D843: 83 EC 04 sub esp,4 - 1000D846: 53 push ebx - 1000D847: 51 push ecx - 1000D848: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 1000D84B: 83 C0 0C add eax,0Ch - 1000D84E: 89 45 FC mov dword ptr [ebp-4],eax - 1000D851: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000D854: 55 push ebp - 1000D855: FF 75 10 push dword ptr [ebp+10h] - 1000D858: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 1000D85B: 8B 6D FC mov ebp,dword ptr [ebp-4] - 1000D85E: E8 71 90 00 00 call 100168D4 - 1000D863: 56 push esi - 1000D864: 57 push edi - 1000D865: FF D0 call eax - 1000D867: 5F pop edi - 1000D868: 5E pop esi - 1000D869: 8B DD mov ebx,ebp - 1000D86B: 5D pop ebp - 1000D86C: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 1000D86F: 55 push ebp - 1000D870: 8B EB mov ebp,ebx - 1000D872: 81 F9 00 01 00 00 cmp ecx,100h - 1000D878: 75 05 jne 1000D87F - 1000D87A: B9 02 00 00 00 mov ecx,2 - 1000D87F: 51 push ecx - 1000D880: E8 4F 90 00 00 call 100168D4 - 1000D885: 5D pop ebp - 1000D886: 59 pop ecx - 1000D887: 5B pop ebx - 1000D888: C9 leave - 1000D889: C2 0C 00 ret 0Ch - 1000D88C: 8B FF mov edi,edi - 1000D88E: 55 push ebp - 1000D88F: 8B EC mov ebp,esp - 1000D891: 81 EC 28 03 00 00 sub esp,328h - 1000D897: A3 18 63 02 10 mov dword ptr ds:[10026318h],eax - 1000D89C: 89 0D 14 63 02 10 mov dword ptr ds:[10026314h],ecx - 1000D8A2: 89 15 10 63 02 10 mov dword ptr ds:[10026310h],edx - 1000D8A8: 89 1D 0C 63 02 10 mov dword ptr ds:[1002630Ch],ebx - 1000D8AE: 89 35 08 63 02 10 mov dword ptr ds:[10026308h],esi - 1000D8B4: 89 3D 04 63 02 10 mov dword ptr ds:[10026304h],edi - 1000D8BA: 66 8C 15 30 63 02 mov word ptr ds:[10026330h],ss - 10 - 1000D8C1: 66 8C 0D 24 63 02 mov word ptr ds:[10026324h],cs - 10 - 1000D8C8: 66 8C 1D 00 63 02 mov word ptr ds:[10026300h],ds - 10 - 1000D8CF: 66 8C 05 FC 62 02 mov word ptr ds:[100262FCh],es - 10 - 1000D8D6: 66 8C 25 F8 62 02 mov word ptr ds:[100262F8h],fs - 10 - 1000D8DD: 66 8C 2D F4 62 02 mov word ptr ds:[100262F4h],gs - 10 - 1000D8E4: 9C pushfd - 1000D8E5: 8F 05 28 63 02 10 pop dword ptr ds:[10026328h] - 1000D8EB: 8B 45 00 mov eax,dword ptr [ebp] - 1000D8EE: A3 1C 63 02 10 mov dword ptr ds:[1002631Ch],eax - 1000D8F3: 8B 45 04 mov eax,dword ptr [ebp+4] - 1000D8F6: A3 20 63 02 10 mov dword ptr ds:[10026320h],eax - 1000D8FB: 8D 45 08 lea eax,[ebp+8] - 1000D8FE: A3 2C 63 02 10 mov dword ptr ds:[1002632Ch],eax - 1000D903: 8B 85 E0 FC FF FF mov eax,dword ptr [ebp+FFFFFCE0h] - 1000D909: C7 05 68 62 02 10 mov dword ptr ds:[10026268h],10001h - 01 00 01 00 - 1000D913: A1 20 63 02 10 mov eax,dword ptr ds:[10026320h] - 1000D918: A3 1C 62 02 10 mov dword ptr ds:[1002621Ch],eax - 1000D91D: C7 05 10 62 02 10 mov dword ptr ds:[10026210h],0C0000409h - 09 04 00 C0 - 1000D927: C7 05 14 62 02 10 mov dword ptr ds:[10026214h],1 - 01 00 00 00 - 1000D931: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1000D936: 89 85 D8 FC FF FF mov dword ptr [ebp+FFFFFCD8h],eax - 1000D93C: A1 14 49 02 10 mov eax,dword ptr ds:[10024914h] - 1000D941: 89 85 DC FC FF FF mov dword ptr [ebp+FFFFFCDCh],eax - 1000D947: FF 15 A8 F0 01 10 call dword ptr ds:[1001F0A8h] - 1000D94D: A3 60 62 02 10 mov dword ptr ds:[10026260h],eax - 1000D952: 6A 01 push 1 - 1000D954: E8 A6 8F 00 00 call 100168FF - 1000D959: 59 pop ecx - 1000D95A: 6A 00 push 0 - 1000D95C: FF 15 A4 F0 01 10 call dword ptr ds:[1001F0A4h] - 1000D962: 68 88 F9 01 10 push 1001F988h - 1000D967: FF 15 A0 F0 01 10 call dword ptr ds:[1001F0A0h] - 1000D96D: 83 3D 60 62 02 10 cmp dword ptr ds:[10026260h],0 - 00 - 1000D974: 75 08 jne 1000D97E - 1000D976: 6A 01 push 1 - 1000D978: E8 82 8F 00 00 call 100168FF - 1000D97D: 59 pop ecx - 1000D97E: 68 09 04 00 C0 push 0C0000409h - 1000D983: FF 15 9C F0 01 10 call dword ptr ds:[1001F09Ch] - 1000D989: 50 push eax - 1000D98A: FF 15 98 F0 01 10 call dword ptr ds:[1001F098h] - 1000D990: C9 leave - 1000D991: C3 ret - 1000D992: 6A 0C push 0Ch - 1000D994: 68 B8 1C 02 10 push 10021CB8h - 1000D999: E8 EA 26 00 00 call 10010088 - 1000D99E: 6A 0E push 0Eh - 1000D9A0: E8 E9 1B 00 00 call 1000F58E - 1000D9A5: 59 pop ecx - 1000D9A6: 83 65 FC 00 and dword ptr [ebp-4],0 - 1000D9AA: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000D9AD: 8B 4E 04 mov ecx,dword ptr [esi+4] - 1000D9B0: 85 C9 test ecx,ecx - 1000D9B2: 74 2F je 1000D9E3 - 1000D9B4: A1 38 65 02 10 mov eax,dword ptr ds:[10026538h] - 1000D9B9: BA 34 65 02 10 mov edx,10026534h - 1000D9BE: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1000D9C1: 85 C0 test eax,eax - 1000D9C3: 74 11 je 1000D9D6 - 1000D9C5: 39 08 cmp dword ptr [eax],ecx - 1000D9C7: 75 2C jne 1000D9F5 - 1000D9C9: 8B 48 04 mov ecx,dword ptr [eax+4] - 1000D9CC: 89 4A 04 mov dword ptr [edx+4],ecx - 1000D9CF: 50 push eax - 1000D9D0: E8 5F C9 FF FF call 1000A334 - 1000D9D5: 59 pop ecx - 1000D9D6: FF 76 04 push dword ptr [esi+4] - 1000D9D9: E8 56 C9 FF FF call 1000A334 - 1000D9DE: 59 pop ecx - 1000D9DF: 83 66 04 00 and dword ptr [esi+4],0 - 1000D9E3: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000D9EA: E8 0A 00 00 00 call 1000D9F9 - 1000D9EF: E8 D9 26 00 00 call 100100CD - 1000D9F4: C3 ret - 1000D9F5: 8B D0 mov edx,eax - 1000D9F7: EB C5 jmp 1000D9BE - 1000D9F9: 6A 0E push 0Eh - 1000D9FB: E8 B4 1A 00 00 call 1000F4B4 - 1000DA00: 59 pop ecx - 1000DA01: C3 ret - 1000DA02: CC int 3 - 1000DA03: CC int 3 - 1000DA04: CC int 3 - 1000DA05: CC int 3 - 1000DA06: CC int 3 - 1000DA07: CC int 3 - 1000DA08: CC int 3 - 1000DA09: CC int 3 - 1000DA0A: CC int 3 - 1000DA0B: CC int 3 - 1000DA0C: CC int 3 - 1000DA0D: CC int 3 - 1000DA0E: CC int 3 - 1000DA0F: CC int 3 - 1000DA10: 8B 54 24 04 mov edx,dword ptr [esp+4] - 1000DA14: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 1000DA18: F7 C2 03 00 00 00 test edx,3 - 1000DA1E: 75 3C jne 1000DA5C - 1000DA20: 8B 02 mov eax,dword ptr [edx] - 1000DA22: 3A 01 cmp al,byte ptr [ecx] - 1000DA24: 75 2E jne 1000DA54 - 1000DA26: 0A C0 or al,al - 1000DA28: 74 26 je 1000DA50 - 1000DA2A: 3A 61 01 cmp ah,byte ptr [ecx+1] - 1000DA2D: 75 25 jne 1000DA54 - 1000DA2F: 0A E4 or ah,ah - 1000DA31: 74 1D je 1000DA50 - 1000DA33: C1 E8 10 shr eax,10h - 1000DA36: 3A 41 02 cmp al,byte ptr [ecx+2] - 1000DA39: 75 19 jne 1000DA54 - 1000DA3B: 0A C0 or al,al - 1000DA3D: 74 11 je 1000DA50 - 1000DA3F: 3A 61 03 cmp ah,byte ptr [ecx+3] - 1000DA42: 75 10 jne 1000DA54 - 1000DA44: 83 C1 04 add ecx,4 - 1000DA47: 83 C2 04 add edx,4 - 1000DA4A: 0A E4 or ah,ah - 1000DA4C: 75 D2 jne 1000DA20 - 1000DA4E: 8B FF mov edi,edi - 1000DA50: 33 C0 xor eax,eax - 1000DA52: C3 ret - 1000DA53: 90 nop - 1000DA54: 1B C0 sbb eax,eax - 1000DA56: D1 E0 shl eax,1 - 1000DA58: 83 C0 01 add eax,1 - 1000DA5B: C3 ret - 1000DA5C: F7 C2 01 00 00 00 test edx,1 - 1000DA62: 74 18 je 1000DA7C - 1000DA64: 8A 02 mov al,byte ptr [edx] - 1000DA66: 83 C2 01 add edx,1 - 1000DA69: 3A 01 cmp al,byte ptr [ecx] - 1000DA6B: 75 E7 jne 1000DA54 - 1000DA6D: 83 C1 01 add ecx,1 - 1000DA70: 0A C0 or al,al - 1000DA72: 74 DC je 1000DA50 - 1000DA74: F7 C2 02 00 00 00 test edx,2 - 1000DA7A: 74 A4 je 1000DA20 - 1000DA7C: 66 8B 02 mov ax,word ptr [edx] - 1000DA7F: 83 C2 02 add edx,2 - 1000DA82: 3A 01 cmp al,byte ptr [ecx] - 1000DA84: 75 CE jne 1000DA54 - 1000DA86: 0A C0 or al,al - 1000DA88: 74 C6 je 1000DA50 - 1000DA8A: 3A 61 01 cmp ah,byte ptr [ecx+1] - 1000DA8D: 75 C5 jne 1000DA54 - 1000DA8F: 0A E4 or ah,ah - 1000DA91: 74 BD je 1000DA50 - 1000DA93: 83 C1 02 add ecx,2 - 1000DA96: EB 88 jmp 1000DA20 - 1000DA98: 8B FF mov edi,edi - 1000DA9A: 55 push ebp - 1000DA9B: 8B EC mov ebp,esp - 1000DA9D: 53 push ebx - 1000DA9E: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 1000DAA1: 56 push esi - 1000DAA2: 57 push edi - 1000DAA3: 8B F9 mov edi,ecx - 1000DAA5: C7 07 94 F9 01 10 mov dword ptr [edi],1001F994h - 1000DAAB: 8B 03 mov eax,dword ptr [ebx] - 1000DAAD: 85 C0 test eax,eax - 1000DAAF: 74 26 je 1000DAD7 - 1000DAB1: 50 push eax - 1000DAB2: E8 89 69 00 00 call 10014440 - 1000DAB7: 8B F0 mov esi,eax - 1000DAB9: 46 inc esi - 1000DABA: 56 push esi - 1000DABB: E8 76 02 00 00 call 1000DD36 - 1000DAC0: 59 pop ecx - 1000DAC1: 59 pop ecx - 1000DAC2: 89 47 04 mov dword ptr [edi+4],eax - 1000DAC5: 85 C0 test eax,eax - 1000DAC7: 74 12 je 1000DADB - 1000DAC9: FF 33 push dword ptr [ebx] - 1000DACB: 56 push esi - 1000DACC: 50 push eax - 1000DACD: E8 FE 68 00 00 call 100143D0 - 1000DAD2: 83 C4 0C add esp,0Ch - 1000DAD5: EB 04 jmp 1000DADB - 1000DAD7: 83 67 04 00 and dword ptr [edi+4],0 - 1000DADB: C7 47 08 01 00 00 mov dword ptr [edi+8],1 - 00 - 1000DAE2: 8B C7 mov eax,edi - 1000DAE4: 5F pop edi - 1000DAE5: 5E pop esi - 1000DAE6: 5B pop ebx - 1000DAE7: 5D pop ebp - 1000DAE8: C2 04 00 ret 4 - 1000DAEB: 8B FF mov edi,edi - 1000DAED: 55 push ebp - 1000DAEE: 8B EC mov ebp,esp - 1000DAF0: 8B C1 mov eax,ecx - 1000DAF2: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000DAF5: C7 00 94 F9 01 10 mov dword ptr [eax],1001F994h - 1000DAFB: 8B 09 mov ecx,dword ptr [ecx] - 1000DAFD: 83 60 08 00 and dword ptr [eax+8],0 - 1000DB01: 89 48 04 mov dword ptr [eax+4],ecx - 1000DB04: 5D pop ebp - 1000DB05: C2 08 00 ret 8 - 1000DB08: 8B FF mov edi,edi - 1000DB0A: 55 push ebp - 1000DB0B: 8B EC mov ebp,esp - 1000DB0D: 53 push ebx - 1000DB0E: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 1000DB11: 56 push esi - 1000DB12: 8B F1 mov esi,ecx - 1000DB14: C7 06 94 F9 01 10 mov dword ptr [esi],1001F994h - 1000DB1A: 8B 43 08 mov eax,dword ptr [ebx+8] - 1000DB1D: 89 46 08 mov dword ptr [esi+8],eax - 1000DB20: 85 C0 test eax,eax - 1000DB22: 8B 43 04 mov eax,dword ptr [ebx+4] - 1000DB25: 57 push edi - 1000DB26: 74 31 je 1000DB59 - 1000DB28: 85 C0 test eax,eax - 1000DB2A: 74 27 je 1000DB53 - 1000DB2C: 50 push eax - 1000DB2D: E8 0E 69 00 00 call 10014440 - 1000DB32: 8B F8 mov edi,eax - 1000DB34: 47 inc edi - 1000DB35: 57 push edi - 1000DB36: E8 FB 01 00 00 call 1000DD36 - 1000DB3B: 59 pop ecx - 1000DB3C: 59 pop ecx - 1000DB3D: 89 46 04 mov dword ptr [esi+4],eax - 1000DB40: 85 C0 test eax,eax - 1000DB42: 74 18 je 1000DB5C - 1000DB44: FF 73 04 push dword ptr [ebx+4] - 1000DB47: 57 push edi - 1000DB48: 50 push eax - 1000DB49: E8 82 68 00 00 call 100143D0 - 1000DB4E: 83 C4 0C add esp,0Ch - 1000DB51: EB 09 jmp 1000DB5C - 1000DB53: 83 66 04 00 and dword ptr [esi+4],0 - 1000DB57: EB 03 jmp 1000DB5C - 1000DB59: 89 46 04 mov dword ptr [esi+4],eax - 1000DB5C: 5F pop edi - 1000DB5D: 8B C6 mov eax,esi - 1000DB5F: 5E pop esi - 1000DB60: 5B pop ebx - 1000DB61: 5D pop ebp - 1000DB62: C2 04 00 ret 4 - 1000DB65: 83 79 08 00 cmp dword ptr [ecx+8],0 - 1000DB69: C7 01 94 F9 01 10 mov dword ptr [ecx],1001F994h - 1000DB6F: 74 09 je 1000DB7A - 1000DB71: FF 71 04 push dword ptr [ecx+4] - 1000DB74: E8 BB C7 FF FF call 1000A334 - 1000DB79: 59 pop ecx - 1000DB7A: C3 ret - 1000DB7B: 8B 41 04 mov eax,dword ptr [ecx+4] - 1000DB7E: 85 C0 test eax,eax - 1000DB80: 75 05 jne 1000DB87 - 1000DB82: B8 9C F9 01 10 mov eax,1001F99Ch - 1000DB87: C3 ret - 1000DB88: 8B FF mov edi,edi - 1000DB8A: 55 push ebp - 1000DB8B: 8B EC mov ebp,esp - 1000DB8D: 56 push esi - 1000DB8E: 8B F1 mov esi,ecx - 1000DB90: E8 D0 FF FF FF call 1000DB65 - 1000DB95: F6 45 08 01 test byte ptr [ebp+8],1 - 1000DB99: 74 07 je 1000DBA2 - 1000DB9B: 56 push esi - 1000DB9C: E8 5A C5 FF FF call 1000A0FB - 1000DBA1: 59 pop ecx - 1000DBA2: 8B C6 mov eax,esi - 1000DBA4: 5E pop esi - 1000DBA5: 5D pop ebp - 1000DBA6: C2 04 00 ret 4 - 1000DBA9: 8B FF mov edi,edi - 1000DBAB: 55 push ebp - 1000DBAC: 8B EC mov ebp,esp - 1000DBAE: 51 push ecx - 1000DBAF: 53 push ebx - 1000DBB0: 56 push esi - 1000DBB1: 57 push edi - 1000DBB2: FF 35 E8 6B 02 10 push dword ptr ds:[10026BE8h] - 1000DBB8: E8 59 F6 FF FF call 1000D216 - 1000DBBD: FF 35 E4 6B 02 10 push dword ptr ds:[10026BE4h] - 1000DBC3: 8B F8 mov edi,eax - 1000DBC5: 89 7D FC mov dword ptr [ebp-4],edi - 1000DBC8: E8 49 F6 FF FF call 1000D216 - 1000DBCD: 8B F0 mov esi,eax - 1000DBCF: 59 pop ecx - 1000DBD0: 59 pop ecx - 1000DBD1: 3B F7 cmp esi,edi - 1000DBD3: 0F 82 83 00 00 00 jb 1000DC5C - 1000DBD9: 8B DE mov ebx,esi - 1000DBDB: 2B DF sub ebx,edi - 1000DBDD: 8D 43 04 lea eax,[ebx+4] - 1000DBE0: 83 F8 04 cmp eax,4 - 1000DBE3: 72 77 jb 1000DC5C - 1000DBE5: 57 push edi - 1000DBE6: E8 1C 8D 00 00 call 10016907 - 1000DBEB: 8B F8 mov edi,eax - 1000DBED: 8D 43 04 lea eax,[ebx+4] - 1000DBF0: 59 pop ecx - 1000DBF1: 3B F8 cmp edi,eax - 1000DBF3: 73 48 jae 1000DC3D - 1000DBF5: B8 00 08 00 00 mov eax,800h - 1000DBFA: 3B F8 cmp edi,eax - 1000DBFC: 73 02 jae 1000DC00 - 1000DBFE: 8B C7 mov eax,edi - 1000DC00: 03 C7 add eax,edi - 1000DC02: 3B C7 cmp eax,edi - 1000DC04: 72 0F jb 1000DC15 - 1000DC06: 50 push eax - 1000DC07: FF 75 FC push dword ptr [ebp-4] - 1000DC0A: E8 8B 4D 00 00 call 1001299A - 1000DC0F: 59 pop ecx - 1000DC10: 59 pop ecx - 1000DC11: 85 C0 test eax,eax - 1000DC13: 75 16 jne 1000DC2B - 1000DC15: 8D 47 10 lea eax,[edi+10h] - 1000DC18: 3B C7 cmp eax,edi - 1000DC1A: 72 40 jb 1000DC5C - 1000DC1C: 50 push eax - 1000DC1D: FF 75 FC push dword ptr [ebp-4] - 1000DC20: E8 75 4D 00 00 call 1001299A - 1000DC25: 59 pop ecx - 1000DC26: 59 pop ecx - 1000DC27: 85 C0 test eax,eax - 1000DC29: 74 31 je 1000DC5C - 1000DC2B: C1 FB 02 sar ebx,2 - 1000DC2E: 50 push eax - 1000DC2F: 8D 34 98 lea esi,[eax+ebx*4] - 1000DC32: E8 64 F5 FF FF call 1000D19B - 1000DC37: 59 pop ecx - 1000DC38: A3 E8 6B 02 10 mov dword ptr ds:[10026BE8h],eax - 1000DC3D: FF 75 08 push dword ptr [ebp+8] - 1000DC40: E8 56 F5 FF FF call 1000D19B - 1000DC45: 89 06 mov dword ptr [esi],eax - 1000DC47: 83 C6 04 add esi,4 - 1000DC4A: 56 push esi - 1000DC4B: E8 4B F5 FF FF call 1000D19B - 1000DC50: 59 pop ecx - 1000DC51: A3 E4 6B 02 10 mov dword ptr ds:[10026BE4h],eax - 1000DC56: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000DC59: 59 pop ecx - 1000DC5A: EB 02 jmp 1000DC5E - 1000DC5C: 33 C0 xor eax,eax - 1000DC5E: 5F pop edi - 1000DC5F: 5E pop esi - 1000DC60: 5B pop ebx - 1000DC61: C9 leave - 1000DC62: C3 ret - 1000DC63: 8B FF mov edi,edi - 1000DC65: 56 push esi - 1000DC66: 6A 04 push 4 - 1000DC68: 6A 20 push 20h - 1000DC6A: E8 DF 4C 00 00 call 1001294E - 1000DC6F: 8B F0 mov esi,eax - 1000DC71: 56 push esi - 1000DC72: E8 24 F5 FF FF call 1000D19B - 1000DC77: 83 C4 0C add esp,0Ch - 1000DC7A: A3 E8 6B 02 10 mov dword ptr ds:[10026BE8h],eax - 1000DC7F: A3 E4 6B 02 10 mov dword ptr ds:[10026BE4h],eax - 1000DC84: 85 F6 test esi,esi - 1000DC86: 75 05 jne 1000DC8D - 1000DC88: 6A 18 push 18h - 1000DC8A: 58 pop eax - 1000DC8B: 5E pop esi - 1000DC8C: C3 ret - 1000DC8D: 83 26 00 and dword ptr [esi],0 - 1000DC90: 33 C0 xor eax,eax - 1000DC92: 5E pop esi - 1000DC93: C3 ret - 1000DC94: 6A 0C push 0Ch - 1000DC96: 68 D8 1C 02 10 push 10021CD8h - 1000DC9B: E8 E8 23 00 00 call 10010088 - 1000DCA0: E8 D0 4E 00 00 call 10012B75 - 1000DCA5: 83 65 FC 00 and dword ptr [ebp-4],0 - 1000DCA9: FF 75 08 push dword ptr [ebp+8] - 1000DCAC: E8 F8 FE FF FF call 1000DBA9 - 1000DCB1: 59 pop ecx - 1000DCB2: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1000DCB5: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000DCBC: E8 09 00 00 00 call 1000DCCA - 1000DCC1: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 1000DCC4: E8 04 24 00 00 call 100100CD - 1000DCC9: C3 ret - 1000DCCA: E8 AF 4E 00 00 call 10012B7E - 1000DCCF: C3 ret - 1000DCD0: 8B FF mov edi,edi - 1000DCD2: 55 push ebp - 1000DCD3: 8B EC mov ebp,esp - 1000DCD5: FF 75 08 push dword ptr [ebp+8] - 1000DCD8: E8 B7 FF FF FF call 1000DC94 - 1000DCDD: F7 D8 neg eax - 1000DCDF: 1B C0 sbb eax,eax - 1000DCE1: F7 D8 neg eax - 1000DCE3: 59 pop ecx - 1000DCE4: 48 dec eax - 1000DCE5: 5D pop ebp - 1000DCE6: C3 ret - 1000DCE7: 6A 0C push 0Ch - 1000DCE9: 68 F8 1C 02 10 push 10021CF8h - 1000DCEE: E8 95 23 00 00 call 10010088 - 1000DCF3: 83 65 E4 00 and dword ptr [ebp-1Ch],0 - 1000DCF7: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000DCFA: 3B 35 08 6D 02 10 cmp esi,dword ptr ds:[10026D08h] - 1000DD00: 77 22 ja 1000DD24 - 1000DD02: 6A 04 push 4 - 1000DD04: E8 85 18 00 00 call 1000F58E - 1000DD09: 59 pop ecx - 1000DD0A: 83 65 FC 00 and dword ptr [ebp-4],0 - 1000DD0E: 56 push esi - 1000DD0F: E8 8C 20 00 00 call 1000FDA0 - 1000DD14: 59 pop ecx - 1000DD15: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1000DD18: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000DD1F: E8 09 00 00 00 call 1000DD2D - 1000DD24: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 1000DD27: E8 A1 23 00 00 call 100100CD - 1000DD2C: C3 ret - 1000DD2D: 6A 04 push 4 - 1000DD2F: E8 80 17 00 00 call 1000F4B4 - 1000DD34: 59 pop ecx - 1000DD35: C3 ret - 1000DD36: 8B FF mov edi,edi - 1000DD38: 55 push ebp - 1000DD39: 8B EC mov ebp,esp - 1000DD3B: 56 push esi - 1000DD3C: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000DD3F: 83 FE E0 cmp esi,0FFFFFFE0h - 1000DD42: 0F 87 A1 00 00 00 ja 1000DDE9 - 1000DD48: 53 push ebx - 1000DD49: 57 push edi - 1000DD4A: 8B 3D AC F0 01 10 mov edi,dword ptr ds:[1001F0ACh] - 1000DD50: 83 3D 64 68 02 10 cmp dword ptr ds:[10026864h],0 - 00 - 1000DD57: 75 18 jne 1000DD71 - 1000DD59: E8 08 04 00 00 call 1000E166 - 1000DD5E: 6A 1E push 1Eh - 1000DD60: E8 56 02 00 00 call 1000DFBB - 1000DD65: 68 FF 00 00 00 push 0FFh - 1000DD6A: E8 EE 4D 00 00 call 10012B5D - 1000DD6F: 59 pop ecx - 1000DD70: 59 pop ecx - 1000DD71: A1 18 6D 02 10 mov eax,dword ptr ds:[10026D18h] - 1000DD76: 83 F8 01 cmp eax,1 - 1000DD79: 75 0E jne 1000DD89 - 1000DD7B: 85 F6 test esi,esi - 1000DD7D: 74 04 je 1000DD83 - 1000DD7F: 8B C6 mov eax,esi - 1000DD81: EB 03 jmp 1000DD86 - 1000DD83: 33 C0 xor eax,eax - 1000DD85: 40 inc eax - 1000DD86: 50 push eax - 1000DD87: EB 1C jmp 1000DDA5 - 1000DD89: 83 F8 03 cmp eax,3 - 1000DD8C: 75 0B jne 1000DD99 - 1000DD8E: 56 push esi - 1000DD8F: E8 53 FF FF FF call 1000DCE7 - 1000DD94: 59 pop ecx - 1000DD95: 85 C0 test eax,eax - 1000DD97: 75 16 jne 1000DDAF - 1000DD99: 85 F6 test esi,esi - 1000DD9B: 75 01 jne 1000DD9E - 1000DD9D: 46 inc esi - 1000DD9E: 83 C6 0F add esi,0Fh - 1000DDA1: 83 E6 F0 and esi,0FFFFFFF0h - 1000DDA4: 56 push esi - 1000DDA5: 6A 00 push 0 - 1000DDA7: FF 35 64 68 02 10 push dword ptr ds:[10026864h] - 1000DDAD: FF D7 call edi - 1000DDAF: 8B D8 mov ebx,eax - 1000DDB1: 85 DB test ebx,ebx - 1000DDB3: 75 2E jne 1000DDE3 - 1000DDB5: 6A 0C push 0Ch - 1000DDB7: 5E pop esi - 1000DDB8: 39 05 88 6B 02 10 cmp dword ptr ds:[10026B88h],eax - 1000DDBE: 74 15 je 1000DDD5 - 1000DDC0: FF 75 08 push dword ptr [ebp+8] - 1000DDC3: E8 47 00 00 00 call 1000DE0F - 1000DDC8: 59 pop ecx - 1000DDC9: 85 C0 test eax,eax - 1000DDCB: 74 0F je 1000DDDC - 1000DDCD: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000DDD0: E9 7B FF FF FF jmp 1000DD50 - 1000DDD5: E8 6F 12 00 00 call 1000F049 - 1000DDDA: 89 30 mov dword ptr [eax],esi - 1000DDDC: E8 68 12 00 00 call 1000F049 - 1000DDE1: 89 30 mov dword ptr [eax],esi - 1000DDE3: 5F pop edi - 1000DDE4: 8B C3 mov eax,ebx - 1000DDE6: 5B pop ebx - 1000DDE7: EB 14 jmp 1000DDFD - 1000DDE9: 56 push esi - 1000DDEA: E8 20 00 00 00 call 1000DE0F - 1000DDEF: 59 pop ecx - 1000DDF0: E8 54 12 00 00 call 1000F049 - 1000DDF5: C7 00 0C 00 00 00 mov dword ptr [eax],0Ch - 1000DDFB: 33 C0 xor eax,eax - 1000DDFD: 5E pop esi - 1000DDFE: 5D pop ebp - 1000DDFF: C3 ret - 1000DE00: 8B FF mov edi,edi - 1000DE02: 55 push ebp - 1000DE03: 8B EC mov ebp,esp - 1000DE05: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000DE08: A3 3C 65 02 10 mov dword ptr ds:[1002653Ch],eax - 1000DE0D: 5D pop ebp - 1000DE0E: C3 ret - 1000DE0F: 8B FF mov edi,edi - 1000DE11: 55 push ebp - 1000DE12: 8B EC mov ebp,esp - 1000DE14: FF 35 3C 65 02 10 push dword ptr ds:[1002653Ch] - 1000DE1A: E8 F7 F3 FF FF call 1000D216 - 1000DE1F: 59 pop ecx - 1000DE20: 85 C0 test eax,eax - 1000DE22: 74 0F je 1000DE33 - 1000DE24: FF 75 08 push dword ptr [ebp+8] - 1000DE27: FF D0 call eax - 1000DE29: 59 pop ecx - 1000DE2A: 85 C0 test eax,eax - 1000DE2C: 74 05 je 1000DE33 - 1000DE2E: 33 C0 xor eax,eax - 1000DE30: 40 inc eax - 1000DE31: 5D pop ebp - 1000DE32: C3 ret - 1000DE33: 33 C0 xor eax,eax - 1000DE35: 5D pop ebp - 1000DE36: C3 ret - 1000DE37: 8B FF mov edi,edi - 1000DE39: 55 push ebp - 1000DE3A: 8B EC mov ebp,esp - 1000DE3C: 83 EC 20 sub esp,20h - 1000DE3F: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000DE42: 56 push esi - 1000DE43: 57 push edi - 1000DE44: 6A 08 push 8 - 1000DE46: 59 pop ecx - 1000DE47: BE B0 F9 01 10 mov esi,1001F9B0h - 1000DE4C: 8D 7D E0 lea edi,[ebp-20h] - 1000DE4F: F3 A5 rep movs dword ptr es:[edi],dword ptr [esi] - 1000DE51: 89 45 F8 mov dword ptr [ebp-8],eax - 1000DE54: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 1000DE57: 5F pop edi - 1000DE58: 89 45 FC mov dword ptr [ebp-4],eax - 1000DE5B: 5E pop esi - 1000DE5C: 85 C0 test eax,eax - 1000DE5E: 74 0C je 1000DE6C - 1000DE60: F6 00 08 test byte ptr [eax],8 - 1000DE63: 74 07 je 1000DE6C - 1000DE65: C7 45 F4 00 40 99 mov dword ptr [ebp-0Ch],1994000h - 01 - 1000DE6C: 8D 45 F4 lea eax,[ebp-0Ch] - 1000DE6F: 50 push eax - 1000DE70: FF 75 F0 push dword ptr [ebp-10h] - 1000DE73: FF 75 E4 push dword ptr [ebp-1Ch] - 1000DE76: FF 75 E0 push dword ptr [ebp-20h] - 1000DE79: FF 15 B0 F0 01 10 call dword ptr ds:[1001F0B0h] - 1000DE7F: C9 leave - 1000DE80: C2 08 00 ret 8 - 1000DE83: 8B FF mov edi,edi - 1000DE85: 55 push ebp - 1000DE86: 8B EC mov ebp,esp - 1000DE88: 81 EC 28 03 00 00 sub esp,328h - 1000DE8E: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1000DE93: 33 C5 xor eax,ebp - 1000DE95: 89 45 FC mov dword ptr [ebp-4],eax - 1000DE98: F6 05 04 4D 02 10 test byte ptr ds:[10024D04h],1 - 01 - 1000DE9F: 56 push esi - 1000DEA0: 74 08 je 1000DEAA - 1000DEA2: 6A 0A push 0Ah - 1000DEA4: E8 12 01 00 00 call 1000DFBB - 1000DEA9: 59 pop ecx - 1000DEAA: E8 50 8B 00 00 call 100169FF - 1000DEAF: 85 C0 test eax,eax - 1000DEB1: 74 08 je 1000DEBB - 1000DEB3: 6A 16 push 16h - 1000DEB5: E8 52 8B 00 00 call 10016A0C - 1000DEBA: 59 pop ecx - 1000DEBB: F6 05 04 4D 02 10 test byte ptr ds:[10024D04h],2 - 02 - 1000DEC2: 0F 84 CA 00 00 00 je 1000DF92 - 1000DEC8: 89 85 E0 FD FF FF mov dword ptr [ebp+FFFFFDE0h],eax - 1000DECE: 89 8D DC FD FF FF mov dword ptr [ebp+FFFFFDDCh],ecx - 1000DED4: 89 95 D8 FD FF FF mov dword ptr [ebp+FFFFFDD8h],edx - 1000DEDA: 89 9D D4 FD FF FF mov dword ptr [ebp+FFFFFDD4h],ebx - 1000DEE0: 89 B5 D0 FD FF FF mov dword ptr [ebp+FFFFFDD0h],esi - 1000DEE6: 89 BD CC FD FF FF mov dword ptr [ebp+FFFFFDCCh],edi - 1000DEEC: 66 8C 95 F8 FD FF mov word ptr [ebp+FFFFFDF8h],ss - FF - 1000DEF3: 66 8C 8D EC FD FF mov word ptr [ebp+FFFFFDECh],cs - FF - 1000DEFA: 66 8C 9D C8 FD FF mov word ptr [ebp+FFFFFDC8h],ds - FF - 1000DF01: 66 8C 85 C4 FD FF mov word ptr [ebp+FFFFFDC4h],es - FF - 1000DF08: 66 8C A5 C0 FD FF mov word ptr [ebp+FFFFFDC0h],fs - FF - 1000DF0F: 66 8C AD BC FD FF mov word ptr [ebp+FFFFFDBCh],gs - FF - 1000DF16: 9C pushfd - 1000DF17: 8F 85 F0 FD FF FF pop dword ptr [ebp+FFFFFDF0h] - 1000DF1D: 8B 75 04 mov esi,dword ptr [ebp+4] - 1000DF20: 8D 45 04 lea eax,[ebp+4] - 1000DF23: 89 85 F4 FD FF FF mov dword ptr [ebp+FFFFFDF4h],eax - 1000DF29: C7 85 30 FD FF FF mov dword ptr [ebp+FFFFFD30h],10001h - 01 00 01 00 - 1000DF33: 89 B5 E8 FD FF FF mov dword ptr [ebp+FFFFFDE8h],esi - 1000DF39: 8B 40 FC mov eax,dword ptr [eax-4] - 1000DF3C: 6A 50 push 50h - 1000DF3E: 89 85 E4 FD FF FF mov dword ptr [ebp+FFFFFDE4h],eax - 1000DF44: 8D 85 D8 FC FF FF lea eax,[ebp+FFFFFCD8h] - 1000DF4A: 6A 00 push 0 - 1000DF4C: 50 push eax - 1000DF4D: E8 1E C3 FF FF call 1000A270 - 1000DF52: 8D 85 D8 FC FF FF lea eax,[ebp+FFFFFCD8h] - 1000DF58: 83 C4 0C add esp,0Ch - 1000DF5B: 89 85 28 FD FF FF mov dword ptr [ebp+FFFFFD28h],eax - 1000DF61: 8D 85 30 FD FF FF lea eax,[ebp+FFFFFD30h] - 1000DF67: 6A 00 push 0 - 1000DF69: C7 85 D8 FC FF FF mov dword ptr [ebp+FFFFFCD8h],40000015h - 15 00 00 40 - 1000DF73: 89 B5 E4 FC FF FF mov dword ptr [ebp+FFFFFCE4h],esi - 1000DF79: 89 85 2C FD FF FF mov dword ptr [ebp+FFFFFD2Ch],eax - 1000DF7F: FF 15 A4 F0 01 10 call dword ptr ds:[1001F0A4h] - 1000DF85: 8D 85 28 FD FF FF lea eax,[ebp+FFFFFD28h] - 1000DF8B: 50 push eax - 1000DF8C: FF 15 A0 F0 01 10 call dword ptr ds:[1001F0A0h] - 1000DF92: 6A 03 push 3 - 1000DF94: E8 E0 4D 00 00 call 10012D79 - 1000DF99: CC int 3 - 1000DF9A: 8B FF mov edi,edi - 1000DF9C: 55 push ebp - 1000DF9D: 8B EC mov ebp,esp - 1000DF9F: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch] - 1000DFA2: A1 04 4D 02 10 mov eax,dword ptr ds:[10024D04h] - 1000DFA7: 8B 55 08 mov edx,dword ptr [ebp+8] - 1000DFAA: 23 55 0C and edx,dword ptr [ebp+0Ch] - 1000DFAD: F7 D1 not ecx - 1000DFAF: 23 C8 and ecx,eax - 1000DFB1: 0B CA or ecx,edx - 1000DFB3: 89 0D 04 4D 02 10 mov dword ptr ds:[10024D04h],ecx - 1000DFB9: 5D pop ebp - 1000DFBA: C3 ret - 1000DFBB: 8B FF mov edi,edi - 1000DFBD: 55 push ebp - 1000DFBE: 8B EC mov ebp,esp - 1000DFC0: 51 push ecx - 1000DFC1: 51 push ecx - 1000DFC2: 53 push ebx - 1000DFC3: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 1000DFC6: 56 push esi - 1000DFC7: 57 push edi - 1000DFC8: 33 F6 xor esi,esi - 1000DFCA: 33 FF xor edi,edi - 1000DFCC: 89 7D FC mov dword ptr [ebp-4],edi - 1000DFCF: 3B 1C FD 08 4D 02 cmp ebx,dword ptr [edi*8+10024D08h] - 10 - 1000DFD6: 74 09 je 1000DFE1 - 1000DFD8: 47 inc edi - 1000DFD9: 89 7D FC mov dword ptr [ebp-4],edi - 1000DFDC: 83 FF 17 cmp edi,17h - 1000DFDF: 72 EE jb 1000DFCF - 1000DFE1: 83 FF 17 cmp edi,17h - 1000DFE4: 0F 83 77 01 00 00 jae 1000E161 - 1000DFEA: 6A 03 push 3 - 1000DFEC: E8 A8 8D 00 00 call 10016D99 - 1000DFF1: 59 pop ecx - 1000DFF2: 83 F8 01 cmp eax,1 - 1000DFF5: 0F 84 34 01 00 00 je 1000E12F - 1000DFFB: 6A 03 push 3 - 1000DFFD: E8 97 8D 00 00 call 10016D99 - 1000E002: 59 pop ecx - 1000E003: 85 C0 test eax,eax - 1000E005: 75 0D jne 1000E014 - 1000E007: 83 3D F8 61 02 10 cmp dword ptr ds:[100261F8h],1 - 01 - 1000E00E: 0F 84 1B 01 00 00 je 1000E12F - 1000E014: 81 FB FC 00 00 00 cmp ebx,0FCh - 1000E01A: 0F 84 41 01 00 00 je 1000E161 - 1000E020: 68 78 FF 01 10 push 1001FF78h - 1000E025: BB 14 03 00 00 mov ebx,314h - 1000E02A: 53 push ebx - 1000E02B: BF 40 65 02 10 mov edi,10026540h - 1000E030: 57 push edi - 1000E031: E8 9A 63 00 00 call 100143D0 - 1000E036: 83 C4 0C add esp,0Ch - 1000E039: 85 C0 test eax,eax - 1000E03B: 74 0D je 1000E04A - 1000E03D: 56 push esi - 1000E03E: 56 push esi - 1000E03F: 56 push esi - 1000E040: 56 push esi - 1000E041: 56 push esi - 1000E042: E8 72 0E 00 00 call 1000EEB9 - 1000E047: 83 C4 14 add esp,14h - 1000E04A: 68 04 01 00 00 push 104h - 1000E04F: BE 59 65 02 10 mov esi,10026559h - 1000E054: 56 push esi - 1000E055: 6A 00 push 0 - 1000E057: C6 05 5D 66 02 10 mov byte ptr ds:[1002665Dh],0 - 00 - 1000E05E: FF 15 B8 F0 01 10 call dword ptr ds:[1001F0B8h] - 1000E064: 85 C0 test eax,eax - 1000E066: 75 26 jne 1000E08E - 1000E068: 68 60 FF 01 10 push 1001FF60h - 1000E06D: 68 FB 02 00 00 push 2FBh - 1000E072: 56 push esi - 1000E073: E8 58 63 00 00 call 100143D0 - 1000E078: 83 C4 0C add esp,0Ch - 1000E07B: 85 C0 test eax,eax - 1000E07D: 74 0F je 1000E08E - 1000E07F: 33 C0 xor eax,eax - 1000E081: 50 push eax - 1000E082: 50 push eax - 1000E083: 50 push eax - 1000E084: 50 push eax - 1000E085: 50 push eax - 1000E086: E8 2E 0E 00 00 call 1000EEB9 - 1000E08B: 83 C4 14 add esp,14h - 1000E08E: 56 push esi - 1000E08F: E8 AC 63 00 00 call 10014440 - 1000E094: 40 inc eax - 1000E095: 59 pop ecx - 1000E096: 83 F8 3C cmp eax,3Ch - 1000E099: 76 38 jbe 1000E0D3 - 1000E09B: 56 push esi - 1000E09C: E8 9F 63 00 00 call 10014440 - 1000E0A1: 83 EE 3B sub esi,3Bh - 1000E0A4: 03 C6 add eax,esi - 1000E0A6: 6A 03 push 3 - 1000E0A8: B9 54 68 02 10 mov ecx,10026854h - 1000E0AD: 68 5C FF 01 10 push 1001FF5Ch - 1000E0B2: 2B C8 sub ecx,eax - 1000E0B4: 51 push ecx - 1000E0B5: 50 push eax - 1000E0B6: E8 60 62 00 00 call 1001431B - 1000E0BB: 83 C4 14 add esp,14h - 1000E0BE: 85 C0 test eax,eax - 1000E0C0: 74 11 je 1000E0D3 - 1000E0C2: 33 F6 xor esi,esi - 1000E0C4: 56 push esi - 1000E0C5: 56 push esi - 1000E0C6: 56 push esi - 1000E0C7: 56 push esi - 1000E0C8: 56 push esi - 1000E0C9: E8 EB 0D 00 00 call 1000EEB9 - 1000E0CE: 83 C4 14 add esp,14h - 1000E0D1: EB 02 jmp 1000E0D5 - 1000E0D3: 33 F6 xor esi,esi - 1000E0D5: 68 58 FF 01 10 push 1001FF58h - 1000E0DA: 53 push ebx - 1000E0DB: 57 push edi - 1000E0DC: E8 44 8C 00 00 call 10016D25 - 1000E0E1: 83 C4 0C add esp,0Ch - 1000E0E4: 85 C0 test eax,eax - 1000E0E6: 74 0D je 1000E0F5 - 1000E0E8: 56 push esi - 1000E0E9: 56 push esi - 1000E0EA: 56 push esi - 1000E0EB: 56 push esi - 1000E0EC: 56 push esi - 1000E0ED: E8 C7 0D 00 00 call 1000EEB9 - 1000E0F2: 83 C4 14 add esp,14h - 1000E0F5: 8B 45 FC mov eax,dword ptr [ebp-4] - 1000E0F8: FF 34 C5 0C 4D 02 push dword ptr [eax*8+10024D0Ch] - 10 - 1000E0FF: 53 push ebx - 1000E100: 57 push edi - 1000E101: E8 1F 8C 00 00 call 10016D25 - 1000E106: 83 C4 0C add esp,0Ch - 1000E109: 85 C0 test eax,eax - 1000E10B: 74 0D je 1000E11A - 1000E10D: 56 push esi - 1000E10E: 56 push esi - 1000E10F: 56 push esi - 1000E110: 56 push esi - 1000E111: 56 push esi - 1000E112: E8 A2 0D 00 00 call 1000EEB9 - 1000E117: 83 C4 14 add esp,14h - 1000E11A: 68 10 20 01 00 push 12010h - 1000E11F: 68 30 FF 01 10 push 1001FF30h - 1000E124: 57 push edi - 1000E125: E8 92 8A 00 00 call 10016BBC - 1000E12A: 83 C4 0C add esp,0Ch - 1000E12D: EB 32 jmp 1000E161 - 1000E12F: 6A F4 push 0FFFFFFF4h - 1000E131: FF 15 B4 F0 01 10 call dword ptr ds:[1001F0B4h] - 1000E137: 8B D8 mov ebx,eax - 1000E139: 3B DE cmp ebx,esi - 1000E13B: 74 24 je 1000E161 - 1000E13D: 83 FB FF cmp ebx,0FFFFFFFFh - 1000E140: 74 1F je 1000E161 - 1000E142: 6A 00 push 0 - 1000E144: 8D 45 F8 lea eax,[ebp-8] - 1000E147: 50 push eax - 1000E148: 8D 34 FD 0C 4D 02 lea esi,[edi*8+10024D0Ch] - 10 - 1000E14F: FF 36 push dword ptr [esi] - 1000E151: E8 EA 62 00 00 call 10014440 - 1000E156: 59 pop ecx - 1000E157: 50 push eax - 1000E158: FF 36 push dword ptr [esi] - 1000E15A: 53 push ebx - 1000E15B: FF 15 1C F0 01 10 call dword ptr ds:[1001F01Ch] - 1000E161: 5F pop edi - 1000E162: 5E pop esi - 1000E163: 5B pop ebx - 1000E164: C9 leave - 1000E165: C3 ret - 1000E166: 6A 03 push 3 - 1000E168: E8 2C 8C 00 00 call 10016D99 - 1000E16D: 59 pop ecx - 1000E16E: 83 F8 01 cmp eax,1 - 1000E171: 74 15 je 1000E188 - 1000E173: 6A 03 push 3 - 1000E175: E8 1F 8C 00 00 call 10016D99 - 1000E17A: 59 pop ecx - 1000E17B: 85 C0 test eax,eax - 1000E17D: 75 1F jne 1000E19E - 1000E17F: 83 3D F8 61 02 10 cmp dword ptr ds:[100261F8h],1 - 01 - 1000E186: 75 16 jne 1000E19E - 1000E188: 68 FC 00 00 00 push 0FCh - 1000E18D: E8 29 FE FF FF call 1000DFBB - 1000E192: 68 FF 00 00 00 push 0FFh - 1000E197: E8 1F FE FF FF call 1000DFBB - 1000E19C: 59 pop ecx - 1000E19D: 59 pop ecx - 1000E19E: C3 ret - 1000E19F: 8B FF mov edi,edi - 1000E1A1: 55 push ebp - 1000E1A2: 8B EC mov ebp,esp - 1000E1A4: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000E1A7: A3 5C 68 02 10 mov dword ptr ds:[1002685Ch],eax - 1000E1AC: 5D pop ebp - 1000E1AD: C3 ret - 1000E1AE: 8B FF mov edi,edi - 1000E1B0: 55 push ebp - 1000E1B1: 8B EC mov ebp,esp - 1000E1B3: 51 push ecx - 1000E1B4: 56 push esi - 1000E1B5: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 1000E1B8: 56 push esi - 1000E1B9: E8 29 23 00 00 call 100104E7 - 1000E1BE: 89 45 0C mov dword ptr [ebp+0Ch],eax - 1000E1C1: 8B 46 0C mov eax,dword ptr [esi+0Ch] - 1000E1C4: 59 pop ecx - 1000E1C5: A8 82 test al,82h - 1000E1C7: 75 17 jne 1000E1E0 - 1000E1C9: E8 7B 0E 00 00 call 1000F049 - 1000E1CE: C7 00 09 00 00 00 mov dword ptr [eax],9 - 1000E1D4: 83 4E 0C 20 or dword ptr [esi+0Ch],20h - 1000E1D8: 83 C8 FF or eax,0FFFFFFFFh - 1000E1DB: E9 2F 01 00 00 jmp 1000E30F - 1000E1E0: A8 40 test al,40h - 1000E1E2: 74 0D je 1000E1F1 - 1000E1E4: E8 60 0E 00 00 call 1000F049 - 1000E1E9: C7 00 22 00 00 00 mov dword ptr [eax],22h - 1000E1EF: EB E3 jmp 1000E1D4 - 1000E1F1: 53 push ebx - 1000E1F2: 33 DB xor ebx,ebx - 1000E1F4: A8 01 test al,1 - 1000E1F6: 74 16 je 1000E20E - 1000E1F8: 89 5E 04 mov dword ptr [esi+4],ebx - 1000E1FB: A8 10 test al,10h - 1000E1FD: 0F 84 87 00 00 00 je 1000E28A - 1000E203: 8B 4E 08 mov ecx,dword ptr [esi+8] - 1000E206: 83 E0 FE and eax,0FFFFFFFEh - 1000E209: 89 0E mov dword ptr [esi],ecx - 1000E20B: 89 46 0C mov dword ptr [esi+0Ch],eax - 1000E20E: 8B 46 0C mov eax,dword ptr [esi+0Ch] - 1000E211: 83 E0 EF and eax,0FFFFFFEFh - 1000E214: 83 C8 02 or eax,2 - 1000E217: 89 46 0C mov dword ptr [esi+0Ch],eax - 1000E21A: 89 5E 04 mov dword ptr [esi+4],ebx - 1000E21D: 89 5D FC mov dword ptr [ebp-4],ebx - 1000E220: A9 0C 01 00 00 test eax,10Ch - 1000E225: 75 2C jne 1000E253 - 1000E227: E8 E1 C8 FF FF call 1000AB0D - 1000E22C: 83 C0 20 add eax,20h - 1000E22F: 3B F0 cmp esi,eax - 1000E231: 74 0C je 1000E23F - 1000E233: E8 D5 C8 FF FF call 1000AB0D - 1000E238: 83 C0 40 add eax,40h - 1000E23B: 3B F0 cmp esi,eax - 1000E23D: 75 0D jne 1000E24C - 1000E23F: FF 75 0C push dword ptr [ebp+0Ch] - 1000E242: E8 98 96 00 00 call 100178DF - 1000E247: 59 pop ecx - 1000E248: 85 C0 test eax,eax - 1000E24A: 75 07 jne 1000E253 - 1000E24C: 56 push esi - 1000E24D: E8 44 96 00 00 call 10017896 - 1000E252: 59 pop ecx - 1000E253: F7 46 0C 08 01 00 test dword ptr [esi+0Ch],108h - 00 - 1000E25A: 57 push edi - 1000E25B: 0F 84 80 00 00 00 je 1000E2E1 - 1000E261: 8B 46 08 mov eax,dword ptr [esi+8] - 1000E264: 8B 3E mov edi,dword ptr [esi] - 1000E266: 8D 48 01 lea ecx,[eax+1] - 1000E269: 89 0E mov dword ptr [esi],ecx - 1000E26B: 8B 4E 18 mov ecx,dword ptr [esi+18h] - 1000E26E: 2B F8 sub edi,eax - 1000E270: 49 dec ecx - 1000E271: 3B FB cmp edi,ebx - 1000E273: 89 4E 04 mov dword ptr [esi+4],ecx - 1000E276: 7E 1D jle 1000E295 - 1000E278: 57 push edi - 1000E279: 50 push eax - 1000E27A: FF 75 0C push dword ptr [ebp+0Ch] - 1000E27D: E8 38 95 00 00 call 100177BA - 1000E282: 83 C4 0C add esp,0Ch - 1000E285: 89 45 FC mov dword ptr [ebp-4],eax - 1000E288: EB 4D jmp 1000E2D7 - 1000E28A: 83 C8 20 or eax,20h - 1000E28D: 89 46 0C mov dword ptr [esi+0Ch],eax - 1000E290: 83 C8 FF or eax,0FFFFFFFFh - 1000E293: EB 79 jmp 1000E30E - 1000E295: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch] - 1000E298: 83 F9 FF cmp ecx,0FFFFFFFFh - 1000E29B: 74 1B je 1000E2B8 - 1000E29D: 83 F9 FE cmp ecx,0FFFFFFFEh - 1000E2A0: 74 16 je 1000E2B8 - 1000E2A2: 8B C1 mov eax,ecx - 1000E2A4: 83 E0 1F and eax,1Fh - 1000E2A7: 8B D1 mov edx,ecx - 1000E2A9: C1 FA 05 sar edx,5 - 1000E2AC: C1 E0 06 shl eax,6 - 1000E2AF: 03 04 95 00 6C 02 add eax,dword ptr [edx*4+10026C00h] - 10 - 1000E2B6: EB 05 jmp 1000E2BD - 1000E2B8: B8 70 56 02 10 mov eax,10025670h - 1000E2BD: F6 40 04 20 test byte ptr [eax+4],20h - 1000E2C1: 74 14 je 1000E2D7 - 1000E2C3: 6A 02 push 2 - 1000E2C5: 53 push ebx - 1000E2C6: 53 push ebx - 1000E2C7: 51 push ecx - 1000E2C8: E8 A1 8C 00 00 call 10016F6E - 1000E2CD: 23 C2 and eax,edx - 1000E2CF: 83 C4 10 add esp,10h - 1000E2D2: 83 F8 FF cmp eax,0FFFFFFFFh - 1000E2D5: 74 25 je 1000E2FC - 1000E2D7: 8B 46 08 mov eax,dword ptr [esi+8] - 1000E2DA: 8A 4D 08 mov cl,byte ptr [ebp+8] - 1000E2DD: 88 08 mov byte ptr [eax],cl - 1000E2DF: EB 16 jmp 1000E2F7 - 1000E2E1: 33 FF xor edi,edi - 1000E2E3: 47 inc edi - 1000E2E4: 57 push edi - 1000E2E5: 8D 45 08 lea eax,[ebp+8] - 1000E2E8: 50 push eax - 1000E2E9: FF 75 0C push dword ptr [ebp+0Ch] - 1000E2EC: E8 C9 94 00 00 call 100177BA - 1000E2F1: 83 C4 0C add esp,0Ch - 1000E2F4: 89 45 FC mov dword ptr [ebp-4],eax - 1000E2F7: 39 7D FC cmp dword ptr [ebp-4],edi - 1000E2FA: 74 09 je 1000E305 - 1000E2FC: 83 4E 0C 20 or dword ptr [esi+0Ch],20h - 1000E300: 83 C8 FF or eax,0FFFFFFFFh - 1000E303: EB 08 jmp 1000E30D - 1000E305: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000E308: 25 FF 00 00 00 and eax,0FFh - 1000E30D: 5F pop edi - 1000E30E: 5B pop ebx - 1000E30F: 5E pop esi - 1000E310: C9 leave - 1000E311: C3 ret - 1000E312: 8B FF mov edi,edi - 1000E314: 55 push ebp - 1000E315: 8B EC mov ebp,esp - 1000E317: 81 EC 74 04 00 00 sub esp,474h - 1000E31D: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1000E322: 33 C5 xor eax,ebp - 1000E324: 89 45 FC mov dword ptr [ebp-4],eax - 1000E327: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000E32A: 53 push ebx - 1000E32B: 8B 5D 14 mov ebx,dword ptr [ebp+14h] - 1000E32E: 56 push esi - 1000E32F: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 1000E332: 57 push edi - 1000E333: FF 75 10 push dword ptr [ebp+10h] - 1000E336: 33 FF xor edi,edi - 1000E338: 8D 8D A8 FB FF FF lea ecx,[ebp+FFFFFBA8h] - 1000E33E: 89 85 D0 FB FF FF mov dword ptr [ebp+FFFFFBD0h],eax - 1000E344: 89 9D E4 FB FF FF mov dword ptr [ebp+FFFFFBE4h],ebx - 1000E34A: 89 BD B8 FB FF FF mov dword ptr [ebp+FFFFFBB8h],edi - 1000E350: 89 BD F8 FB FF FF mov dword ptr [ebp+FFFFFBF8h],edi - 1000E356: 89 BD D4 FB FF FF mov dword ptr [ebp+FFFFFBD4h],edi - 1000E35C: 89 BD F4 FB FF FF mov dword ptr [ebp+FFFFFBF4h],edi - 1000E362: 89 BD DC FB FF FF mov dword ptr [ebp+FFFFFBDCh],edi - 1000E368: 89 BD C4 FB FF FF mov dword ptr [ebp+FFFFFBC4h],edi - 1000E36E: 89 BD D8 FB FF FF mov dword ptr [ebp+FFFFFBD8h],edi - 1000E374: E8 83 C3 FF FF call 1000A6FC - 1000E379: 39 BD D0 FB FF FF cmp dword ptr [ebp+FFFFFBD0h],edi - 1000E37F: 75 33 jne 1000E3B4 - 1000E381: E8 C3 0C 00 00 call 1000F049 - 1000E386: 57 push edi - 1000E387: 57 push edi - 1000E388: 57 push edi - 1000E389: 57 push edi - 1000E38A: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1000E390: 57 push edi - 1000E391: E8 4B 0C 00 00 call 1000EFE1 - 1000E396: 83 C4 14 add esp,14h - 1000E399: 80 BD B4 FB FF FF cmp byte ptr [ebp+FFFFFBB4h],0 - 00 - 1000E3A0: 74 0A je 1000E3AC - 1000E3A2: 8B 85 B0 FB FF FF mov eax,dword ptr [ebp+FFFFFBB0h] - 1000E3A8: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1000E3AC: 83 C8 FF or eax,0FFFFFFFFh - 1000E3AF: E9 C4 0A 00 00 jmp 1000EE78 - 1000E3B4: 3B F7 cmp esi,edi - 1000E3B6: 74 C9 je 1000E381 - 1000E3B8: 0F B7 16 movzx edx,word ptr [esi] - 1000E3BB: 33 C9 xor ecx,ecx - 1000E3BD: 89 BD E0 FB FF FF mov dword ptr [ebp+FFFFFBE0h],edi - 1000E3C3: 89 BD EC FB FF FF mov dword ptr [ebp+FFFFFBECh],edi - 1000E3C9: 89 BD BC FB FF FF mov dword ptr [ebp+FFFFFBBCh],edi - 1000E3CF: 89 95 E8 FB FF FF mov dword ptr [ebp+FFFFFBE8h],edx - 1000E3D5: 66 3B D7 cmp dx,di - 1000E3D8: 0F 84 81 0A 00 00 je 1000EE5F - 1000E3DE: 6A 02 push 2 - 1000E3E0: 5F pop edi - 1000E3E1: 03 F7 add esi,edi - 1000E3E3: 83 BD E0 FB FF FF cmp dword ptr [ebp+FFFFFBE0h],0 - 00 - 1000E3EA: 89 B5 C0 FB FF FF mov dword ptr [ebp+FFFFFBC0h],esi - 1000E3F0: 0F 8C 69 0A 00 00 jl 1000EE5F - 1000E3F6: 8D 42 E0 lea eax,[edx-20h] - 1000E3F9: 66 83 F8 58 cmp ax,58h - 1000E3FD: 77 0F ja 1000E40E - 1000E3FF: 0F B7 C2 movzx eax,dx - 1000E402: 0F BE 80 B8 00 02 movsx eax,byte ptr [eax+100200B8h] - 10 - 1000E409: 83 E0 0F and eax,0Fh - 1000E40C: EB 02 jmp 1000E410 - 1000E40E: 33 C0 xor eax,eax - 1000E410: 0F BE 84 C1 D8 00 movsx eax,byte ptr [ecx+eax*8+100200D8h] - 02 10 - 1000E418: 6A 07 push 7 - 1000E41A: C1 F8 04 sar eax,4 - 1000E41D: 59 pop ecx - 1000E41E: 89 85 A4 FB FF FF mov dword ptr [ebp+FFFFFBA4h],eax - 1000E424: 3B C1 cmp eax,ecx - 1000E426: 0F 87 F5 09 00 00 ja 1000EE21 - 1000E42C: FF 24 85 8A EE 00 jmp dword ptr [eax*4+1000EE8Ah] - 10 - 1000E433: 33 C0 xor eax,eax - 1000E435: 83 8D F4 FB FF FF or dword ptr [ebp+FFFFFBF4h],0FFFFFFFFh - FF - 1000E43C: 89 85 A0 FB FF FF mov dword ptr [ebp+FFFFFBA0h],eax - 1000E442: 89 85 C4 FB FF FF mov dword ptr [ebp+FFFFFBC4h],eax - 1000E448: 89 85 D4 FB FF FF mov dword ptr [ebp+FFFFFBD4h],eax - 1000E44E: 89 85 DC FB FF FF mov dword ptr [ebp+FFFFFBDCh],eax - 1000E454: 89 85 F8 FB FF FF mov dword ptr [ebp+FFFFFBF8h],eax - 1000E45A: 89 85 D8 FB FF FF mov dword ptr [ebp+FFFFFBD8h],eax - 1000E460: E9 BC 09 00 00 jmp 1000EE21 - 1000E465: 0F B7 C2 movzx eax,dx - 1000E468: 83 E8 20 sub eax,20h - 1000E46B: 74 4A je 1000E4B7 - 1000E46D: 83 E8 03 sub eax,3 - 1000E470: 74 36 je 1000E4A8 - 1000E472: 83 E8 08 sub eax,8 - 1000E475: 74 25 je 1000E49C - 1000E477: 2B C7 sub eax,edi - 1000E479: 74 15 je 1000E490 - 1000E47B: 83 E8 03 sub eax,3 - 1000E47E: 0F 85 9D 09 00 00 jne 1000EE21 - 1000E484: 83 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],8 - 08 - 1000E48B: E9 91 09 00 00 jmp 1000EE21 - 1000E490: 83 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],4 - 04 - 1000E497: E9 85 09 00 00 jmp 1000EE21 - 1000E49C: 83 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],1 - 01 - 1000E4A3: E9 79 09 00 00 jmp 1000EE21 - 1000E4A8: 81 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],80h - 80 00 00 00 - 1000E4B2: E9 6A 09 00 00 jmp 1000EE21 - 1000E4B7: 09 BD F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],edi - 1000E4BD: E9 5F 09 00 00 jmp 1000EE21 - 1000E4C2: 66 83 FA 2A cmp dx,2Ah - 1000E4C6: 75 2C jne 1000E4F4 - 1000E4C8: 83 C3 04 add ebx,4 - 1000E4CB: 89 9D E4 FB FF FF mov dword ptr [ebp+FFFFFBE4h],ebx - 1000E4D1: 8B 5B FC mov ebx,dword ptr [ebx-4] - 1000E4D4: 89 9D D4 FB FF FF mov dword ptr [ebp+FFFFFBD4h],ebx - 1000E4DA: 85 DB test ebx,ebx - 1000E4DC: 0F 8D 3F 09 00 00 jge 1000EE21 - 1000E4E2: 83 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],4 - 04 - 1000E4E9: F7 9D D4 FB FF FF neg dword ptr [ebp+FFFFFBD4h] - 1000E4EF: E9 2D 09 00 00 jmp 1000EE21 - 1000E4F4: 8B 85 D4 FB FF FF mov eax,dword ptr [ebp+FFFFFBD4h] - 1000E4FA: 6B C0 0A imul eax,eax,0Ah - 1000E4FD: 0F B7 CA movzx ecx,dx - 1000E500: 8D 44 08 D0 lea eax,[eax+ecx-30h] - 1000E504: 89 85 D4 FB FF FF mov dword ptr [ebp+FFFFFBD4h],eax - 1000E50A: E9 12 09 00 00 jmp 1000EE21 - 1000E50F: 83 A5 F4 FB FF FF and dword ptr [ebp+FFFFFBF4h],0 - 00 - 1000E516: E9 06 09 00 00 jmp 1000EE21 - 1000E51B: 66 83 FA 2A cmp dx,2Ah - 1000E51F: 75 26 jne 1000E547 - 1000E521: 83 C3 04 add ebx,4 - 1000E524: 89 9D E4 FB FF FF mov dword ptr [ebp+FFFFFBE4h],ebx - 1000E52A: 8B 5B FC mov ebx,dword ptr [ebx-4] - 1000E52D: 89 9D F4 FB FF FF mov dword ptr [ebp+FFFFFBF4h],ebx - 1000E533: 85 DB test ebx,ebx - 1000E535: 0F 8D E6 08 00 00 jge 1000EE21 - 1000E53B: 83 8D F4 FB FF FF or dword ptr [ebp+FFFFFBF4h],0FFFFFFFFh - FF - 1000E542: E9 DA 08 00 00 jmp 1000EE21 - 1000E547: 8B 85 F4 FB FF FF mov eax,dword ptr [ebp+FFFFFBF4h] - 1000E54D: 6B C0 0A imul eax,eax,0Ah - 1000E550: 0F B7 CA movzx ecx,dx - 1000E553: 8D 44 08 D0 lea eax,[eax+ecx-30h] - 1000E557: 89 85 F4 FB FF FF mov dword ptr [ebp+FFFFFBF4h],eax - 1000E55D: E9 BF 08 00 00 jmp 1000EE21 - 1000E562: 0F B7 C2 movzx eax,dx - 1000E565: 83 F8 49 cmp eax,49h - 1000E568: 74 57 je 1000E5C1 - 1000E56A: 83 F8 68 cmp eax,68h - 1000E56D: 74 46 je 1000E5B5 - 1000E56F: 83 F8 6C cmp eax,6Ch - 1000E572: 74 18 je 1000E58C - 1000E574: 83 F8 77 cmp eax,77h - 1000E577: 0F 85 A4 08 00 00 jne 1000EE21 - 1000E57D: 81 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],800h - 00 08 00 00 - 1000E587: E9 95 08 00 00 jmp 1000EE21 - 1000E58C: 66 83 3E 6C cmp word ptr [esi],6Ch - 1000E590: 75 17 jne 1000E5A9 - 1000E592: 03 F7 add esi,edi - 1000E594: 81 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],1000h - 00 10 00 00 - 1000E59E: 89 B5 C0 FB FF FF mov dword ptr [ebp+FFFFFBC0h],esi - 1000E5A4: E9 78 08 00 00 jmp 1000EE21 - 1000E5A9: 83 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],10h - 10 - 1000E5B0: E9 6C 08 00 00 jmp 1000EE21 - 1000E5B5: 83 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],20h - 20 - 1000E5BC: E9 60 08 00 00 jmp 1000EE21 - 1000E5C1: 0F B7 06 movzx eax,word ptr [esi] - 1000E5C4: 66 83 F8 36 cmp ax,36h - 1000E5C8: 75 1F jne 1000E5E9 - 1000E5CA: 66 83 7E 02 34 cmp word ptr [esi+2],34h - 1000E5CF: 75 18 jne 1000E5E9 - 1000E5D1: 83 C6 04 add esi,4 - 1000E5D4: 81 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],8000h - 00 80 00 00 - 1000E5DE: 89 B5 C0 FB FF FF mov dword ptr [ebp+FFFFFBC0h],esi - 1000E5E4: E9 38 08 00 00 jmp 1000EE21 - 1000E5E9: 66 83 F8 33 cmp ax,33h - 1000E5ED: 75 1F jne 1000E60E - 1000E5EF: 66 83 7E 02 32 cmp word ptr [esi+2],32h - 1000E5F4: 75 18 jne 1000E60E - 1000E5F6: 83 C6 04 add esi,4 - 1000E5F9: 81 A5 F8 FB FF FF and dword ptr [ebp+FFFFFBF8h],0FFFF7FFFh - FF 7F FF FF - 1000E603: 89 B5 C0 FB FF FF mov dword ptr [ebp+FFFFFBC0h],esi - 1000E609: E9 13 08 00 00 jmp 1000EE21 - 1000E60E: 66 83 F8 64 cmp ax,64h - 1000E612: 0F 84 09 08 00 00 je 1000EE21 - 1000E618: 66 83 F8 69 cmp ax,69h - 1000E61C: 0F 84 FF 07 00 00 je 1000EE21 - 1000E622: 66 83 F8 6F cmp ax,6Fh - 1000E626: 0F 84 F5 07 00 00 je 1000EE21 - 1000E62C: 66 83 F8 75 cmp ax,75h - 1000E630: 0F 84 EB 07 00 00 je 1000EE21 - 1000E636: 66 83 F8 78 cmp ax,78h - 1000E63A: 0F 84 E1 07 00 00 je 1000EE21 - 1000E640: 66 83 F8 58 cmp ax,58h - 1000E644: 0F 84 D7 07 00 00 je 1000EE21 - 1000E64A: 83 A5 A4 FB FF FF and dword ptr [ebp+FFFFFBA4h],0 - 00 - 1000E651: 8B 85 D0 FB FF FF mov eax,dword ptr [ebp+FFFFFBD0h] - 1000E657: 52 push edx - 1000E658: 8D B5 E0 FB FF FF lea esi,[ebp+FFFFFBE0h] - 1000E65E: C7 85 D8 FB FF FF mov dword ptr [ebp+FFFFFBD8h],1 - 01 00 00 00 - 1000E668: E8 BE 4C 00 00 call 1001332B - 1000E66D: E9 AE 07 00 00 jmp 1000EE20 - 1000E672: 0F B7 C2 movzx eax,dx - 1000E675: 83 F8 64 cmp eax,64h - 1000E678: 0F 8F 2F 02 00 00 jg 1000E8AD - 1000E67E: 0F 84 C0 02 00 00 je 1000E944 - 1000E684: 83 F8 53 cmp eax,53h - 1000E687: 0F 8F 1B 01 00 00 jg 1000E7A8 - 1000E68D: 74 7E je 1000E70D - 1000E68F: 83 E8 41 sub eax,41h - 1000E692: 74 10 je 1000E6A4 - 1000E694: 2B C7 sub eax,edi - 1000E696: 74 59 je 1000E6F1 - 1000E698: 2B C7 sub eax,edi - 1000E69A: 74 08 je 1000E6A4 - 1000E69C: 2B C7 sub eax,edi - 1000E69E: 0F 85 EF 05 00 00 jne 1000EC93 - 1000E6A4: 83 C2 20 add edx,20h - 1000E6A7: C7 85 A0 FB FF FF mov dword ptr [ebp+FFFFFBA0h],1 - 01 00 00 00 - 1000E6B1: 89 95 E8 FB FF FF mov dword ptr [ebp+FFFFFBE8h],edx - 1000E6B7: 83 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],40h - 40 - 1000E6BE: 83 BD F4 FB FF FF cmp dword ptr [ebp+FFFFFBF4h],0 - 00 - 1000E6C5: 8D B5 FC FB FF FF lea esi,[ebp+FFFFFBFCh] - 1000E6CB: B8 00 02 00 00 mov eax,200h - 1000E6D0: 89 B5 F0 FB FF FF mov dword ptr [ebp+FFFFFBF0h],esi - 1000E6D6: 89 85 EC FB FF FF mov dword ptr [ebp+FFFFFBECh],eax - 1000E6DC: 0F 8D 90 02 00 00 jge 1000E972 - 1000E6E2: C7 85 F4 FB FF FF mov dword ptr [ebp+FFFFFBF4h],6 - 06 00 00 00 - 1000E6EC: E9 EC 02 00 00 jmp 1000E9DD - 1000E6F1: F7 85 F8 FB FF FF test dword ptr [ebp+FFFFFBF8h],830h - 30 08 00 00 - 1000E6FB: 0F 85 C8 00 00 00 jne 1000E7C9 - 1000E701: 83 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],20h - 20 - 1000E708: E9 BC 00 00 00 jmp 1000E7C9 - 1000E70D: F7 85 F8 FB FF FF test dword ptr [ebp+FFFFFBF8h],830h - 30 08 00 00 - 1000E717: 75 07 jne 1000E720 - 1000E719: 83 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],20h - 20 - 1000E720: 8B BD F4 FB FF FF mov edi,dword ptr [ebp+FFFFFBF4h] - 1000E726: 83 FF FF cmp edi,0FFFFFFFFh - 1000E729: 75 05 jne 1000E730 - 1000E72B: BF FF FF FF 7F mov edi,7FFFFFFFh - 1000E730: 83 C3 04 add ebx,4 - 1000E733: F6 85 F8 FB FF FF test byte ptr [ebp+FFFFFBF8h],20h - 20 - 1000E73A: 89 9D E4 FB FF FF mov dword ptr [ebp+FFFFFBE4h],ebx - 1000E740: 8B 5B FC mov ebx,dword ptr [ebx-4] - 1000E743: 89 9D F0 FB FF FF mov dword ptr [ebp+FFFFFBF0h],ebx - 1000E749: 0F 84 08 05 00 00 je 1000EC57 - 1000E74F: 85 DB test ebx,ebx - 1000E751: 75 0B jne 1000E75E - 1000E753: A1 48 57 02 10 mov eax,dword ptr ds:[10025748h] - 1000E758: 89 85 F0 FB FF FF mov dword ptr [ebp+FFFFFBF0h],eax - 1000E75E: 83 A5 EC FB FF FF and dword ptr [ebp+FFFFFBECh],0 - 00 - 1000E765: 8B B5 F0 FB FF FF mov esi,dword ptr [ebp+FFFFFBF0h] - 1000E76B: 85 FF test edi,edi - 1000E76D: 0F 8E 20 05 00 00 jle 1000EC93 - 1000E773: 8A 06 mov al,byte ptr [esi] - 1000E775: 84 C0 test al,al - 1000E777: 0F 84 16 05 00 00 je 1000EC93 - 1000E77D: 8D 8D A8 FB FF FF lea ecx,[ebp+FFFFFBA8h] - 1000E783: 0F B6 C0 movzx eax,al - 1000E786: 51 push ecx - 1000E787: 50 push eax - 1000E788: E8 84 94 00 00 call 10017C11 - 1000E78D: 59 pop ecx - 1000E78E: 59 pop ecx - 1000E78F: 85 C0 test eax,eax - 1000E791: 74 01 je 1000E794 - 1000E793: 46 inc esi - 1000E794: 46 inc esi - 1000E795: FF 85 EC FB FF FF inc dword ptr [ebp+FFFFFBECh] - 1000E79B: 39 BD EC FB FF FF cmp dword ptr [ebp+FFFFFBECh],edi - 1000E7A1: 7C D0 jl 1000E773 - 1000E7A3: E9 EB 04 00 00 jmp 1000EC93 - 1000E7A8: 83 E8 58 sub eax,58h - 1000E7AB: 0F 84 F7 02 00 00 je 1000EAA8 - 1000E7B1: 2B C7 sub eax,edi - 1000E7B3: 0F 84 94 00 00 00 je 1000E84D - 1000E7B9: 2B C1 sub eax,ecx - 1000E7BB: 0F 84 F6 FE FF FF je 1000E6B7 - 1000E7C1: 2B C7 sub eax,edi - 1000E7C3: 0F 85 CA 04 00 00 jne 1000EC93 - 1000E7C9: 0F B7 03 movzx eax,word ptr [ebx] - 1000E7CC: 83 C3 04 add ebx,4 - 1000E7CF: 33 F6 xor esi,esi - 1000E7D1: 46 inc esi - 1000E7D2: F6 85 F8 FB FF FF test byte ptr [ebp+FFFFFBF8h],20h - 20 - 1000E7D9: 89 B5 D8 FB FF FF mov dword ptr [ebp+FFFFFBD8h],esi - 1000E7DF: 89 9D E4 FB FF FF mov dword ptr [ebp+FFFFFBE4h],ebx - 1000E7E5: 89 85 9C FB FF FF mov dword ptr [ebp+FFFFFB9Ch],eax - 1000E7EB: 74 42 je 1000E82F - 1000E7ED: 88 85 CC FB FF FF mov byte ptr [ebp+FFFFFBCCh],al - 1000E7F3: 8D 85 A8 FB FF FF lea eax,[ebp+FFFFFBA8h] - 1000E7F9: 50 push eax - 1000E7FA: 8B 85 A8 FB FF FF mov eax,dword ptr [ebp+FFFFFBA8h] - 1000E800: C6 85 CD FB FF FF mov byte ptr [ebp+FFFFFBCDh],0 - 00 - 1000E807: FF B0 AC 00 00 00 push dword ptr [eax+000000ACh] - 1000E80D: 8D 85 CC FB FF FF lea eax,[ebp+FFFFFBCCh] - 1000E813: 50 push eax - 1000E814: 8D 85 FC FB FF FF lea eax,[ebp+FFFFFBFCh] - 1000E81A: 50 push eax - 1000E81B: E8 C0 92 00 00 call 10017AE0 - 1000E820: 83 C4 10 add esp,10h - 1000E823: 85 C0 test eax,eax - 1000E825: 7D 0F jge 1000E836 - 1000E827: 89 B5 C4 FB FF FF mov dword ptr [ebp+FFFFFBC4h],esi - 1000E82D: EB 07 jmp 1000E836 - 1000E82F: 66 89 85 FC FB FF mov word ptr [ebp+FFFFFBFCh],ax - FF - 1000E836: 8D 85 FC FB FF FF lea eax,[ebp+FFFFFBFCh] - 1000E83C: 89 85 F0 FB FF FF mov dword ptr [ebp+FFFFFBF0h],eax - 1000E842: 89 B5 EC FB FF FF mov dword ptr [ebp+FFFFFBECh],esi - 1000E848: E9 46 04 00 00 jmp 1000EC93 - 1000E84D: 8B 03 mov eax,dword ptr [ebx] - 1000E84F: 83 C3 04 add ebx,4 - 1000E852: 89 9D E4 FB FF FF mov dword ptr [ebp+FFFFFBE4h],ebx - 1000E858: 85 C0 test eax,eax - 1000E85A: 74 3A je 1000E896 - 1000E85C: 8B 48 04 mov ecx,dword ptr [eax+4] - 1000E85F: 85 C9 test ecx,ecx - 1000E861: 74 33 je 1000E896 - 1000E863: F7 85 F8 FB FF FF test dword ptr [ebp+FFFFFBF8h],800h - 00 08 00 00 - 1000E86D: 0F BF 00 movsx eax,word ptr [eax] - 1000E870: 89 8D F0 FB FF FF mov dword ptr [ebp+FFFFFBF0h],ecx - 1000E876: 74 12 je 1000E88A - 1000E878: 99 cdq - 1000E879: 2B C2 sub eax,edx - 1000E87B: C7 85 D8 FB FF FF mov dword ptr [ebp+FFFFFBD8h],1 - 01 00 00 00 - 1000E885: E9 01 04 00 00 jmp 1000EC8B - 1000E88A: 83 A5 D8 FB FF FF and dword ptr [ebp+FFFFFBD8h],0 - 00 - 1000E891: E9 F7 03 00 00 jmp 1000EC8D - 1000E896: A1 48 57 02 10 mov eax,dword ptr ds:[10025748h] - 1000E89B: 89 85 F0 FB FF FF mov dword ptr [ebp+FFFFFBF0h],eax - 1000E8A1: 50 push eax - 1000E8A2: E8 99 5B 00 00 call 10014440 - 1000E8A7: 59 pop ecx - 1000E8A8: E9 E0 03 00 00 jmp 1000EC8D - 1000E8AD: 83 F8 70 cmp eax,70h - 1000E8B0: 0F 8F FA 01 00 00 jg 1000EAB0 - 1000E8B6: 0F 84 E2 01 00 00 je 1000EA9E - 1000E8BC: 83 F8 65 cmp eax,65h - 1000E8BF: 0F 8C CE 03 00 00 jl 1000EC93 - 1000E8C5: 83 F8 67 cmp eax,67h - 1000E8C8: 0F 8E E9 FD FF FF jle 1000E6B7 - 1000E8CE: 83 F8 69 cmp eax,69h - 1000E8D1: 74 71 je 1000E944 - 1000E8D3: 83 F8 6E cmp eax,6Eh - 1000E8D6: 74 28 je 1000E900 - 1000E8D8: 83 F8 6F cmp eax,6Fh - 1000E8DB: 0F 85 B2 03 00 00 jne 1000EC93 - 1000E8E1: F6 85 F8 FB FF FF test byte ptr [ebp+FFFFFBF8h],80h - 80 - 1000E8E8: C7 85 E8 FB FF FF mov dword ptr [ebp+FFFFFBE8h],8 - 08 00 00 00 - 1000E8F2: 74 61 je 1000E955 - 1000E8F4: 81 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],200h - 00 02 00 00 - 1000E8FE: EB 55 jmp 1000E955 - 1000E900: 8B 33 mov esi,dword ptr [ebx] - 1000E902: 83 C3 04 add ebx,4 - 1000E905: 89 9D E4 FB FF FF mov dword ptr [ebp+FFFFFBE4h],ebx - 1000E90B: E8 BA 91 00 00 call 10017ACA - 1000E910: 85 C0 test eax,eax - 1000E912: 0F 84 30 05 00 00 je 1000EE48 - 1000E918: F6 85 F8 FB FF FF test byte ptr [ebp+FFFFFBF8h],20h - 20 - 1000E91F: 74 0C je 1000E92D - 1000E921: 66 8B 85 E0 FB FF mov ax,word ptr [ebp+FFFFFBE0h] - FF - 1000E928: 66 89 06 mov word ptr [esi],ax - 1000E92B: EB 08 jmp 1000E935 - 1000E92D: 8B 85 E0 FB FF FF mov eax,dword ptr [ebp+FFFFFBE0h] - 1000E933: 89 06 mov dword ptr [esi],eax - 1000E935: C7 85 C4 FB FF FF mov dword ptr [ebp+FFFFFBC4h],1 - 01 00 00 00 - 1000E93F: E9 C1 04 00 00 jmp 1000EE05 - 1000E944: 83 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],40h - 40 - 1000E94B: C7 85 E8 FB FF FF mov dword ptr [ebp+FFFFFBE8h],0Ah - 0A 00 00 00 - 1000E955: F7 85 F8 FB FF FF test dword ptr [ebp+FFFFFBF8h],8000h - 00 80 00 00 - 1000E95F: 0F 84 AB 01 00 00 je 1000EB10 - 1000E965: 8B 03 mov eax,dword ptr [ebx] - 1000E967: 8B 53 04 mov edx,dword ptr [ebx+4] - 1000E96A: 83 C3 08 add ebx,8 - 1000E96D: E9 E7 01 00 00 jmp 1000EB59 - 1000E972: 75 12 jne 1000E986 - 1000E974: 66 83 FA 67 cmp dx,67h - 1000E978: 75 63 jne 1000E9DD - 1000E97A: C7 85 F4 FB FF FF mov dword ptr [ebp+FFFFFBF4h],1 - 01 00 00 00 - 1000E984: EB 57 jmp 1000E9DD - 1000E986: 39 85 F4 FB FF FF cmp dword ptr [ebp+FFFFFBF4h],eax - 1000E98C: 7E 06 jle 1000E994 - 1000E98E: 89 85 F4 FB FF FF mov dword ptr [ebp+FFFFFBF4h],eax - 1000E994: 81 BD F4 FB FF FF cmp dword ptr [ebp+FFFFFBF4h],0A3h - A3 00 00 00 - 1000E99E: 7E 3D jle 1000E9DD - 1000E9A0: 8B BD F4 FB FF FF mov edi,dword ptr [ebp+FFFFFBF4h] - 1000E9A6: 81 C7 5D 01 00 00 add edi,15Dh - 1000E9AC: 57 push edi - 1000E9AD: E8 57 3F 00 00 call 10012909 - 1000E9B2: 8B 95 E8 FB FF FF mov edx,dword ptr [ebp+FFFFFBE8h] - 1000E9B8: 59 pop ecx - 1000E9B9: 89 85 BC FB FF FF mov dword ptr [ebp+FFFFFBBCh],eax - 1000E9BF: 85 C0 test eax,eax - 1000E9C1: 74 10 je 1000E9D3 - 1000E9C3: 89 85 F0 FB FF FF mov dword ptr [ebp+FFFFFBF0h],eax - 1000E9C9: 89 BD EC FB FF FF mov dword ptr [ebp+FFFFFBECh],edi - 1000E9CF: 8B F0 mov esi,eax - 1000E9D1: EB 0A jmp 1000E9DD - 1000E9D3: C7 85 F4 FB FF FF mov dword ptr [ebp+FFFFFBF4h],0A3h - A3 00 00 00 - 1000E9DD: 8B 03 mov eax,dword ptr [ebx] - 1000E9DF: 83 C3 08 add ebx,8 - 1000E9E2: 89 85 94 FB FF FF mov dword ptr [ebp+FFFFFB94h],eax - 1000E9E8: 8B 43 FC mov eax,dword ptr [ebx-4] - 1000E9EB: 89 85 98 FB FF FF mov dword ptr [ebp+FFFFFB98h],eax - 1000E9F1: 8D 85 A8 FB FF FF lea eax,[ebp+FFFFFBA8h] - 1000E9F7: 50 push eax - 1000E9F8: FF B5 A0 FB FF FF push dword ptr [ebp+FFFFFBA0h] - 1000E9FE: 0F BE C2 movsx eax,dl - 1000EA01: FF B5 F4 FB FF FF push dword ptr [ebp+FFFFFBF4h] - 1000EA07: 89 9D E4 FB FF FF mov dword ptr [ebp+FFFFFBE4h],ebx - 1000EA0D: 50 push eax - 1000EA0E: FF B5 EC FB FF FF push dword ptr [ebp+FFFFFBECh] - 1000EA14: 8D 85 94 FB FF FF lea eax,[ebp+FFFFFB94h] - 1000EA1A: 56 push esi - 1000EA1B: 50 push eax - 1000EA1C: FF 35 38 57 02 10 push dword ptr ds:[10025738h] - 1000EA22: E8 EF E7 FF FF call 1000D216 - 1000EA27: 59 pop ecx - 1000EA28: FF D0 call eax - 1000EA2A: 8B 9D F8 FB FF FF mov ebx,dword ptr [ebp+FFFFFBF8h] - 1000EA30: 83 C4 1C add esp,1Ch - 1000EA33: 81 E3 80 00 00 00 and ebx,80h - 1000EA39: 74 21 je 1000EA5C - 1000EA3B: 83 BD F4 FB FF FF cmp dword ptr [ebp+FFFFFBF4h],0 - 00 - 1000EA42: 75 18 jne 1000EA5C - 1000EA44: 8D 85 A8 FB FF FF lea eax,[ebp+FFFFFBA8h] - 1000EA4A: 50 push eax - 1000EA4B: 56 push esi - 1000EA4C: FF 35 44 57 02 10 push dword ptr ds:[10025744h] - 1000EA52: E8 BF E7 FF FF call 1000D216 - 1000EA57: 59 pop ecx - 1000EA58: FF D0 call eax - 1000EA5A: 59 pop ecx - 1000EA5B: 59 pop ecx - 1000EA5C: 66 83 BD E8 FB FF cmp word ptr [ebp+FFFFFBE8h],67h - FF 67 - 1000EA64: 75 1C jne 1000EA82 - 1000EA66: 85 DB test ebx,ebx - 1000EA68: 75 18 jne 1000EA82 - 1000EA6A: 8D 85 A8 FB FF FF lea eax,[ebp+FFFFFBA8h] - 1000EA70: 50 push eax - 1000EA71: 56 push esi - 1000EA72: FF 35 40 57 02 10 push dword ptr ds:[10025740h] - 1000EA78: E8 99 E7 FF FF call 1000D216 - 1000EA7D: 59 pop ecx - 1000EA7E: FF D0 call eax - 1000EA80: 59 pop ecx - 1000EA81: 59 pop ecx - 1000EA82: 80 3E 2D cmp byte ptr [esi],2Dh - 1000EA85: 75 11 jne 1000EA98 - 1000EA87: 81 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],100h - 00 01 00 00 - 1000EA91: 46 inc esi - 1000EA92: 89 B5 F0 FB FF FF mov dword ptr [ebp+FFFFFBF0h],esi - 1000EA98: 56 push esi - 1000EA99: E9 04 FE FF FF jmp 1000E8A2 - 1000EA9E: C7 85 F4 FB FF FF mov dword ptr [ebp+FFFFFBF4h],8 - 08 00 00 00 - 1000EAA8: 89 8D B8 FB FF FF mov dword ptr [ebp+FFFFFBB8h],ecx - 1000EAAE: EB 24 jmp 1000EAD4 - 1000EAB0: 83 E8 73 sub eax,73h - 1000EAB3: 0F 84 67 FC FF FF je 1000E720 - 1000EAB9: 2B C7 sub eax,edi - 1000EABB: 0F 84 8A FE FF FF je 1000E94B - 1000EAC1: 83 E8 03 sub eax,3 - 1000EAC4: 0F 85 C9 01 00 00 jne 1000EC93 - 1000EACA: C7 85 B8 FB FF FF mov dword ptr [ebp+FFFFFBB8h],27h - 27 00 00 00 - 1000EAD4: F6 85 F8 FB FF FF test byte ptr [ebp+FFFFFBF8h],80h - 80 - 1000EADB: C7 85 E8 FB FF FF mov dword ptr [ebp+FFFFFBE8h],10h - 10 00 00 00 - 1000EAE5: 0F 84 6A FE FF FF je 1000E955 - 1000EAEB: 6A 30 push 30h - 1000EAED: 58 pop eax - 1000EAEE: 66 89 85 C8 FB FF mov word ptr [ebp+FFFFFBC8h],ax - FF - 1000EAF5: 8B 85 B8 FB FF FF mov eax,dword ptr [ebp+FFFFFBB8h] - 1000EAFB: 83 C0 51 add eax,51h - 1000EAFE: 66 89 85 CA FB FF mov word ptr [ebp+FFFFFBCAh],ax - FF - 1000EB05: 89 BD DC FB FF FF mov dword ptr [ebp+FFFFFBDCh],edi - 1000EB0B: E9 45 FE FF FF jmp 1000E955 - 1000EB10: F7 85 F8 FB FF FF test dword ptr [ebp+FFFFFBF8h],1000h - 00 10 00 00 - 1000EB1A: 0F 85 45 FE FF FF jne 1000E965 - 1000EB20: 83 C3 04 add ebx,4 - 1000EB23: F6 85 F8 FB FF FF test byte ptr [ebp+FFFFFBF8h],20h - 20 - 1000EB2A: 74 1C je 1000EB48 - 1000EB2C: F6 85 F8 FB FF FF test byte ptr [ebp+FFFFFBF8h],40h - 40 - 1000EB33: 89 9D E4 FB FF FF mov dword ptr [ebp+FFFFFBE4h],ebx - 1000EB39: 74 06 je 1000EB41 - 1000EB3B: 0F BF 43 FC movsx eax,word ptr [ebx-4] - 1000EB3F: EB 04 jmp 1000EB45 - 1000EB41: 0F B7 43 FC movzx eax,word ptr [ebx-4] - 1000EB45: 99 cdq - 1000EB46: EB 17 jmp 1000EB5F - 1000EB48: F6 85 F8 FB FF FF test byte ptr [ebp+FFFFFBF8h],40h - 40 - 1000EB4F: 8B 43 FC mov eax,dword ptr [ebx-4] - 1000EB52: 74 03 je 1000EB57 - 1000EB54: 99 cdq - 1000EB55: EB 02 jmp 1000EB59 - 1000EB57: 33 D2 xor edx,edx - 1000EB59: 89 9D E4 FB FF FF mov dword ptr [ebp+FFFFFBE4h],ebx - 1000EB5F: F6 85 F8 FB FF FF test byte ptr [ebp+FFFFFBF8h],40h - 40 - 1000EB66: 74 1B je 1000EB83 - 1000EB68: 85 D2 test edx,edx - 1000EB6A: 7F 17 jg 1000EB83 - 1000EB6C: 7C 04 jl 1000EB72 - 1000EB6E: 85 C0 test eax,eax - 1000EB70: 73 11 jae 1000EB83 - 1000EB72: F7 D8 neg eax - 1000EB74: 83 D2 00 adc edx,0 - 1000EB77: F7 DA neg edx - 1000EB79: 81 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],100h - 00 01 00 00 - 1000EB83: F7 85 F8 FB FF FF test dword ptr [ebp+FFFFFBF8h],9000h - 00 90 00 00 - 1000EB8D: 8B DA mov ebx,edx - 1000EB8F: 8B F8 mov edi,eax - 1000EB91: 75 02 jne 1000EB95 - 1000EB93: 33 DB xor ebx,ebx - 1000EB95: 83 BD F4 FB FF FF cmp dword ptr [ebp+FFFFFBF4h],0 - 00 - 1000EB9C: 7D 0C jge 1000EBAA - 1000EB9E: C7 85 F4 FB FF FF mov dword ptr [ebp+FFFFFBF4h],1 - 01 00 00 00 - 1000EBA8: EB 1A jmp 1000EBC4 - 1000EBAA: 83 A5 F8 FB FF FF and dword ptr [ebp+FFFFFBF8h],0FFFFFFF7h - F7 - 1000EBB1: B8 00 02 00 00 mov eax,200h - 1000EBB6: 39 85 F4 FB FF FF cmp dword ptr [ebp+FFFFFBF4h],eax - 1000EBBC: 7E 06 jle 1000EBC4 - 1000EBBE: 89 85 F4 FB FF FF mov dword ptr [ebp+FFFFFBF4h],eax - 1000EBC4: 8B C7 mov eax,edi - 1000EBC6: 0B C3 or eax,ebx - 1000EBC8: 75 06 jne 1000EBD0 - 1000EBCA: 21 85 DC FB FF FF and dword ptr [ebp+FFFFFBDCh],eax - 1000EBD0: 8D B5 FB FD FF FF lea esi,[ebp+FFFFFDFBh] - 1000EBD6: 8B 85 F4 FB FF FF mov eax,dword ptr [ebp+FFFFFBF4h] - 1000EBDC: FF 8D F4 FB FF FF dec dword ptr [ebp+FFFFFBF4h] - 1000EBE2: 85 C0 test eax,eax - 1000EBE4: 7F 06 jg 1000EBEC - 1000EBE6: 8B C7 mov eax,edi - 1000EBE8: 0B C3 or eax,ebx - 1000EBEA: 74 2D je 1000EC19 - 1000EBEC: 8B 85 E8 FB FF FF mov eax,dword ptr [ebp+FFFFFBE8h] - 1000EBF2: 99 cdq - 1000EBF3: 52 push edx - 1000EBF4: 50 push eax - 1000EBF5: 53 push ebx - 1000EBF6: 57 push edi - 1000EBF7: E8 64 90 00 00 call 10017C60 - 1000EBFC: 83 C1 30 add ecx,30h - 1000EBFF: 83 F9 39 cmp ecx,39h - 1000EC02: 89 9D 90 FB FF FF mov dword ptr [ebp+FFFFFB90h],ebx - 1000EC08: 8B F8 mov edi,eax - 1000EC0A: 8B DA mov ebx,edx - 1000EC0C: 7E 06 jle 1000EC14 - 1000EC0E: 03 8D B8 FB FF FF add ecx,dword ptr [ebp+FFFFFBB8h] - 1000EC14: 88 0E mov byte ptr [esi],cl - 1000EC16: 4E dec esi - 1000EC17: EB BD jmp 1000EBD6 - 1000EC19: 8D 85 FB FD FF FF lea eax,[ebp+FFFFFDFBh] - 1000EC1F: 2B C6 sub eax,esi - 1000EC21: 46 inc esi - 1000EC22: F7 85 F8 FB FF FF test dword ptr [ebp+FFFFFBF8h],200h - 00 02 00 00 - 1000EC2C: 89 85 EC FB FF FF mov dword ptr [ebp+FFFFFBECh],eax - 1000EC32: 89 B5 F0 FB FF FF mov dword ptr [ebp+FFFFFBF0h],esi - 1000EC38: 74 59 je 1000EC93 - 1000EC3A: 85 C0 test eax,eax - 1000EC3C: 74 07 je 1000EC45 - 1000EC3E: 8B CE mov ecx,esi - 1000EC40: 80 39 30 cmp byte ptr [ecx],30h - 1000EC43: 74 4E je 1000EC93 - 1000EC45: FF 8D F0 FB FF FF dec dword ptr [ebp+FFFFFBF0h] - 1000EC4B: 8B 8D F0 FB FF FF mov ecx,dword ptr [ebp+FFFFFBF0h] - 1000EC51: C6 01 30 mov byte ptr [ecx],30h - 1000EC54: 40 inc eax - 1000EC55: EB 36 jmp 1000EC8D - 1000EC57: 85 DB test ebx,ebx - 1000EC59: 75 0B jne 1000EC66 - 1000EC5B: A1 4C 57 02 10 mov eax,dword ptr ds:[1002574Ch] - 1000EC60: 89 85 F0 FB FF FF mov dword ptr [ebp+FFFFFBF0h],eax - 1000EC66: 8B 85 F0 FB FF FF mov eax,dword ptr [ebp+FFFFFBF0h] - 1000EC6C: C7 85 D8 FB FF FF mov dword ptr [ebp+FFFFFBD8h],1 - 01 00 00 00 - 1000EC76: EB 09 jmp 1000EC81 - 1000EC78: 4F dec edi - 1000EC79: 66 83 38 00 cmp word ptr [eax],0 - 1000EC7D: 74 06 je 1000EC85 - 1000EC7F: 40 inc eax - 1000EC80: 40 inc eax - 1000EC81: 85 FF test edi,edi - 1000EC83: 75 F3 jne 1000EC78 - 1000EC85: 2B 85 F0 FB FF FF sub eax,dword ptr [ebp+FFFFFBF0h] - 1000EC8B: D1 F8 sar eax,1 - 1000EC8D: 89 85 EC FB FF FF mov dword ptr [ebp+FFFFFBECh],eax - 1000EC93: 83 BD C4 FB FF FF cmp dword ptr [ebp+FFFFFBC4h],0 - 00 - 1000EC9A: 0F 85 65 01 00 00 jne 1000EE05 - 1000ECA0: 8B 85 F8 FB FF FF mov eax,dword ptr [ebp+FFFFFBF8h] - 1000ECA6: A8 40 test al,40h - 1000ECA8: 74 2B je 1000ECD5 - 1000ECAA: A9 00 01 00 00 test eax,100h - 1000ECAF: 74 04 je 1000ECB5 - 1000ECB1: 6A 2D push 2Dh - 1000ECB3: EB 0E jmp 1000ECC3 - 1000ECB5: A8 01 test al,1 - 1000ECB7: 74 04 je 1000ECBD - 1000ECB9: 6A 2B push 2Bh - 1000ECBB: EB 06 jmp 1000ECC3 - 1000ECBD: A8 02 test al,2 - 1000ECBF: 74 14 je 1000ECD5 - 1000ECC1: 6A 20 push 20h - 1000ECC3: 58 pop eax - 1000ECC4: 66 89 85 C8 FB FF mov word ptr [ebp+FFFFFBC8h],ax - FF - 1000ECCB: C7 85 DC FB FF FF mov dword ptr [ebp+FFFFFBDCh],1 - 01 00 00 00 - 1000ECD5: 8B 9D D4 FB FF FF mov ebx,dword ptr [ebp+FFFFFBD4h] - 1000ECDB: 8B B5 EC FB FF FF mov esi,dword ptr [ebp+FFFFFBECh] - 1000ECE1: 2B DE sub ebx,esi - 1000ECE3: 2B 9D DC FB FF FF sub ebx,dword ptr [ebp+FFFFFBDCh] - 1000ECE9: F6 85 F8 FB FF FF test byte ptr [ebp+FFFFFBF8h],0Ch - 0C - 1000ECF0: 75 17 jne 1000ED09 - 1000ECF2: FF B5 D0 FB FF FF push dword ptr [ebp+FFFFFBD0h] - 1000ECF8: 8D 85 E0 FB FF FF lea eax,[ebp+FFFFFBE0h] - 1000ECFE: 53 push ebx - 1000ECFF: 6A 20 push 20h - 1000ED01: E8 54 46 00 00 call 1001335A - 1000ED06: 83 C4 0C add esp,0Ch - 1000ED09: FF B5 DC FB FF FF push dword ptr [ebp+FFFFFBDCh] - 1000ED0F: 8B BD D0 FB FF FF mov edi,dword ptr [ebp+FFFFFBD0h] - 1000ED15: 8D 85 E0 FB FF FF lea eax,[ebp+FFFFFBE0h] - 1000ED1B: 8D 8D C8 FB FF FF lea ecx,[ebp+FFFFFBC8h] - 1000ED21: E8 5B 46 00 00 call 10013381 - 1000ED26: F6 85 F8 FB FF FF test byte ptr [ebp+FFFFFBF8h],8 - 08 - 1000ED2D: 59 pop ecx - 1000ED2E: 74 1B je 1000ED4B - 1000ED30: F6 85 F8 FB FF FF test byte ptr [ebp+FFFFFBF8h],4 - 04 - 1000ED37: 75 12 jne 1000ED4B - 1000ED39: 57 push edi - 1000ED3A: 53 push ebx - 1000ED3B: 6A 30 push 30h - 1000ED3D: 8D 85 E0 FB FF FF lea eax,[ebp+FFFFFBE0h] - 1000ED43: E8 12 46 00 00 call 1001335A - 1000ED48: 83 C4 0C add esp,0Ch - 1000ED4B: 83 BD D8 FB FF FF cmp dword ptr [ebp+FFFFFBD8h],0 - 00 - 1000ED52: 75 75 jne 1000EDC9 - 1000ED54: 85 F6 test esi,esi - 1000ED56: 7E 71 jle 1000EDC9 - 1000ED58: 8B BD F0 FB FF FF mov edi,dword ptr [ebp+FFFFFBF0h] - 1000ED5E: 89 B5 E8 FB FF FF mov dword ptr [ebp+FFFFFBE8h],esi - 1000ED64: FF 8D E8 FB FF FF dec dword ptr [ebp+FFFFFBE8h] - 1000ED6A: 8D 85 A8 FB FF FF lea eax,[ebp+FFFFFBA8h] - 1000ED70: 50 push eax - 1000ED71: 8B 85 A8 FB FF FF mov eax,dword ptr [ebp+FFFFFBA8h] - 1000ED77: FF B0 AC 00 00 00 push dword ptr [eax+000000ACh] - 1000ED7D: 8D 85 9C FB FF FF lea eax,[ebp+FFFFFB9Ch] - 1000ED83: 57 push edi - 1000ED84: 50 push eax - 1000ED85: E8 56 8D 00 00 call 10017AE0 - 1000ED8A: 83 C4 10 add esp,10h - 1000ED8D: 89 85 90 FB FF FF mov dword ptr [ebp+FFFFFB90h],eax - 1000ED93: 85 C0 test eax,eax - 1000ED95: 7E 29 jle 1000EDC0 - 1000ED97: FF B5 9C FB FF FF push dword ptr [ebp+FFFFFB9Ch] - 1000ED9D: 8B 85 D0 FB FF FF mov eax,dword ptr [ebp+FFFFFBD0h] - 1000EDA3: 8D B5 E0 FB FF FF lea esi,[ebp+FFFFFBE0h] - 1000EDA9: E8 7D 45 00 00 call 1001332B - 1000EDAE: 03 BD 90 FB FF FF add edi,dword ptr [ebp+FFFFFB90h] - 1000EDB4: 83 BD E8 FB FF FF cmp dword ptr [ebp+FFFFFBE8h],0 - 00 - 1000EDBB: 59 pop ecx - 1000EDBC: 7F A6 jg 1000ED64 - 1000EDBE: EB 1C jmp 1000EDDC - 1000EDC0: 83 8D E0 FB FF FF or dword ptr [ebp+FFFFFBE0h],0FFFFFFFFh - FF - 1000EDC7: EB 13 jmp 1000EDDC - 1000EDC9: 8B 8D F0 FB FF FF mov ecx,dword ptr [ebp+FFFFFBF0h] - 1000EDCF: 56 push esi - 1000EDD0: 8D 85 E0 FB FF FF lea eax,[ebp+FFFFFBE0h] - 1000EDD6: E8 A6 45 00 00 call 10013381 - 1000EDDB: 59 pop ecx - 1000EDDC: 83 BD E0 FB FF FF cmp dword ptr [ebp+FFFFFBE0h],0 - 00 - 1000EDE3: 7C 20 jl 1000EE05 - 1000EDE5: F6 85 F8 FB FF FF test byte ptr [ebp+FFFFFBF8h],4 - 04 - 1000EDEC: 74 17 je 1000EE05 - 1000EDEE: FF B5 D0 FB FF FF push dword ptr [ebp+FFFFFBD0h] - 1000EDF4: 8D 85 E0 FB FF FF lea eax,[ebp+FFFFFBE0h] - 1000EDFA: 53 push ebx - 1000EDFB: 6A 20 push 20h - 1000EDFD: E8 58 45 00 00 call 1001335A - 1000EE02: 83 C4 0C add esp,0Ch - 1000EE05: 83 BD BC FB FF FF cmp dword ptr [ebp+FFFFFBBCh],0 - 00 - 1000EE0C: 74 13 je 1000EE21 - 1000EE0E: FF B5 BC FB FF FF push dword ptr [ebp+FFFFFBBCh] - 1000EE14: E8 1B B5 FF FF call 1000A334 - 1000EE19: 83 A5 BC FB FF FF and dword ptr [ebp+FFFFFBBCh],0 - 00 - 1000EE20: 59 pop ecx - 1000EE21: 8B B5 C0 FB FF FF mov esi,dword ptr [ebp+FFFFFBC0h] - 1000EE27: 0F B7 06 movzx eax,word ptr [esi] - 1000EE2A: 89 85 E8 FB FF FF mov dword ptr [ebp+FFFFFBE8h],eax - 1000EE30: 66 85 C0 test ax,ax - 1000EE33: 74 2A je 1000EE5F - 1000EE35: 8B 8D A4 FB FF FF mov ecx,dword ptr [ebp+FFFFFBA4h] - 1000EE3B: 8B 9D E4 FB FF FF mov ebx,dword ptr [ebp+FFFFFBE4h] - 1000EE41: 8B D0 mov edx,eax - 1000EE43: E9 96 F5 FF FF jmp 1000E3DE - 1000EE48: E8 FC 01 00 00 call 1000F049 - 1000EE4D: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1000EE53: 33 C0 xor eax,eax - 1000EE55: 50 push eax - 1000EE56: 50 push eax - 1000EE57: 50 push eax - 1000EE58: 50 push eax - 1000EE59: 50 push eax - 1000EE5A: E9 32 F5 FF FF jmp 1000E391 - 1000EE5F: 80 BD B4 FB FF FF cmp byte ptr [ebp+FFFFFBB4h],0 - 00 - 1000EE66: 74 0A je 1000EE72 - 1000EE68: 8B 85 B0 FB FF FF mov eax,dword ptr [ebp+FFFFFBB0h] - 1000EE6E: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1000EE72: 8B 85 E0 FB FF FF mov eax,dword ptr [ebp+FFFFFBE0h] - 1000EE78: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1000EE7B: 5F pop edi - 1000EE7C: 5E pop esi - 1000EE7D: 33 CD xor ecx,ebp - 1000EE7F: 5B pop ebx - 1000EE80: E8 16 B2 FF FF call 1000A09B - 1000EE85: C9 leave - 1000EE86: C3 ret - 1000EE87: 8D 49 00 lea ecx,[ecx] - 1000EE8A: 51 push ecx - 1000EE8B: E6 00 out 0,al - 1000EE8D: 10 33 adc byte ptr [ebx],dh - 1000EE8F: E4 00 in al,0 - 1000EE91: 10 65 E4 adc byte ptr [ebp-1Ch],ah - 1000EE94: 00 10 add byte ptr [eax],dl - 1000EE96: C2 E4 00 ret 0E4h - 1000EE99: 10 0F adc byte ptr [edi],cl - 1000EE9B: E5 00 in eax,0 - 1000EE9D: 10 1B adc byte ptr [ebx],bl - 1000EE9F: E5 00 in eax,0 - 1000EEA1: 10 62 E5 adc byte ptr [edx-1Bh],ah - 1000EEA4: 00 10 add byte ptr [eax],dl - 1000EEA6: 72 E6 jb 1000EE8E - 1000EEA8: 00 10 add byte ptr [eax],dl - 1000EEAA: 8B FF mov edi,edi - 1000EEAC: 55 push ebp - 1000EEAD: 8B EC mov ebp,esp - 1000EEAF: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000EEB2: A3 60 68 02 10 mov dword ptr ds:[10026860h],eax - 1000EEB7: 5D pop ebp - 1000EEB8: C3 ret - 1000EEB9: 8B FF mov edi,edi - 1000EEBB: 55 push ebp - 1000EEBC: 8B EC mov ebp,esp - 1000EEBE: 81 EC 28 03 00 00 sub esp,328h - 1000EEC4: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1000EEC9: 33 C5 xor eax,ebp - 1000EECB: 89 45 FC mov dword ptr [ebp-4],eax - 1000EECE: 83 A5 D8 FC FF FF and dword ptr [ebp+FFFFFCD8h],0 - 00 - 1000EED5: 53 push ebx - 1000EED6: 6A 4C push 4Ch - 1000EED8: 8D 85 DC FC FF FF lea eax,[ebp+FFFFFCDCh] - 1000EEDE: 6A 00 push 0 - 1000EEE0: 50 push eax - 1000EEE1: E8 8A B3 FF FF call 1000A270 - 1000EEE6: 8D 85 D8 FC FF FF lea eax,[ebp+FFFFFCD8h] - 1000EEEC: 89 85 28 FD FF FF mov dword ptr [ebp+FFFFFD28h],eax - 1000EEF2: 8D 85 30 FD FF FF lea eax,[ebp+FFFFFD30h] - 1000EEF8: 83 C4 0C add esp,0Ch - 1000EEFB: 89 85 2C FD FF FF mov dword ptr [ebp+FFFFFD2Ch],eax - 1000EF01: 89 85 E0 FD FF FF mov dword ptr [ebp+FFFFFDE0h],eax - 1000EF07: 89 8D DC FD FF FF mov dword ptr [ebp+FFFFFDDCh],ecx - 1000EF0D: 89 95 D8 FD FF FF mov dword ptr [ebp+FFFFFDD8h],edx - 1000EF13: 89 9D D4 FD FF FF mov dword ptr [ebp+FFFFFDD4h],ebx - 1000EF19: 89 B5 D0 FD FF FF mov dword ptr [ebp+FFFFFDD0h],esi - 1000EF1F: 89 BD CC FD FF FF mov dword ptr [ebp+FFFFFDCCh],edi - 1000EF25: 66 8C 95 F8 FD FF mov word ptr [ebp+FFFFFDF8h],ss - FF - 1000EF2C: 66 8C 8D EC FD FF mov word ptr [ebp+FFFFFDECh],cs - FF - 1000EF33: 66 8C 9D C8 FD FF mov word ptr [ebp+FFFFFDC8h],ds - FF - 1000EF3A: 66 8C 85 C4 FD FF mov word ptr [ebp+FFFFFDC4h],es - FF - 1000EF41: 66 8C A5 C0 FD FF mov word ptr [ebp+FFFFFDC0h],fs - FF - 1000EF48: 66 8C AD BC FD FF mov word ptr [ebp+FFFFFDBCh],gs - FF - 1000EF4F: 9C pushfd - 1000EF50: 8F 85 F0 FD FF FF pop dword ptr [ebp+FFFFFDF0h] - 1000EF56: 8B 45 04 mov eax,dword ptr [ebp+4] - 1000EF59: 8D 4D 04 lea ecx,[ebp+4] - 1000EF5C: C7 85 30 FD FF FF mov dword ptr [ebp+FFFFFD30h],10001h - 01 00 01 00 - 1000EF66: 89 85 E8 FD FF FF mov dword ptr [ebp+FFFFFDE8h],eax - 1000EF6C: 89 8D F4 FD FF FF mov dword ptr [ebp+FFFFFDF4h],ecx - 1000EF72: 8B 49 FC mov ecx,dword ptr [ecx-4] - 1000EF75: 89 8D E4 FD FF FF mov dword ptr [ebp+FFFFFDE4h],ecx - 1000EF7B: C7 85 D8 FC FF FF mov dword ptr [ebp+FFFFFCD8h],0C0000417h - 17 04 00 C0 - 1000EF85: C7 85 DC FC FF FF mov dword ptr [ebp+FFFFFCDCh],1 - 01 00 00 00 - 1000EF8F: 89 85 E4 FC FF FF mov dword ptr [ebp+FFFFFCE4h],eax - 1000EF95: FF 15 A8 F0 01 10 call dword ptr ds:[1001F0A8h] - 1000EF9B: 6A 00 push 0 - 1000EF9D: 8B D8 mov ebx,eax - 1000EF9F: FF 15 A4 F0 01 10 call dword ptr ds:[1001F0A4h] - 1000EFA5: 8D 85 28 FD FF FF lea eax,[ebp+FFFFFD28h] - 1000EFAB: 50 push eax - 1000EFAC: FF 15 A0 F0 01 10 call dword ptr ds:[1001F0A0h] - 1000EFB2: 85 C0 test eax,eax - 1000EFB4: 75 0C jne 1000EFC2 - 1000EFB6: 85 DB test ebx,ebx - 1000EFB8: 75 08 jne 1000EFC2 - 1000EFBA: 6A 02 push 2 - 1000EFBC: E8 3E 79 00 00 call 100168FF - 1000EFC1: 59 pop ecx - 1000EFC2: 68 17 04 00 C0 push 0C0000417h - 1000EFC7: FF 15 9C F0 01 10 call dword ptr ds:[1001F09Ch] - 1000EFCD: 50 push eax - 1000EFCE: FF 15 98 F0 01 10 call dword ptr ds:[1001F098h] - 1000EFD4: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1000EFD7: 33 CD xor ecx,ebp - 1000EFD9: 5B pop ebx - 1000EFDA: E8 BC B0 FF FF call 1000A09B - 1000EFDF: C9 leave - 1000EFE0: C3 ret - 1000EFE1: 8B FF mov edi,edi - 1000EFE3: 55 push ebp - 1000EFE4: 8B EC mov ebp,esp - 1000EFE6: FF 35 60 68 02 10 push dword ptr ds:[10026860h] - 1000EFEC: E8 25 E2 FF FF call 1000D216 - 1000EFF1: 59 pop ecx - 1000EFF2: 85 C0 test eax,eax - 1000EFF4: 74 03 je 1000EFF9 - 1000EFF6: 5D pop ebp - 1000EFF7: FF E0 jmp eax - 1000EFF9: 6A 02 push 2 - 1000EFFB: E8 FF 78 00 00 call 100168FF - 1000F000: 59 pop ecx - 1000F001: 5D pop ebp - 1000F002: E9 B2 FE FF FF jmp 1000EEB9 - 1000F007: 8B FF mov edi,edi - 1000F009: 55 push ebp - 1000F00A: 8B EC mov ebp,esp - 1000F00C: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000F00F: 33 C9 xor ecx,ecx - 1000F011: 3B 04 CD C0 4D 02 cmp eax,dword ptr [ecx*8+10024DC0h] - 10 - 1000F018: 74 13 je 1000F02D - 1000F01A: 41 inc ecx - 1000F01B: 83 F9 2D cmp ecx,2Dh - 1000F01E: 72 F1 jb 1000F011 - 1000F020: 8D 48 ED lea ecx,[eax-13h] - 1000F023: 83 F9 11 cmp ecx,11h - 1000F026: 77 0E ja 1000F036 - 1000F028: 6A 0D push 0Dh - 1000F02A: 58 pop eax - 1000F02B: 5D pop ebp - 1000F02C: C3 ret - 1000F02D: 8B 04 CD C4 4D 02 mov eax,dword ptr [ecx*8+10024DC4h] - 10 - 1000F034: 5D pop ebp - 1000F035: C3 ret - 1000F036: 05 44 FF FF FF add eax,0FFFFFF44h - 1000F03B: 6A 0E push 0Eh - 1000F03D: 59 pop ecx - 1000F03E: 3B C8 cmp ecx,eax - 1000F040: 1B C0 sbb eax,eax - 1000F042: 23 C1 and eax,ecx - 1000F044: 83 C0 08 add eax,8 - 1000F047: 5D pop ebp - 1000F048: C3 ret - 1000F049: E8 9B E3 FF FF call 1000D3E9 - 1000F04E: 85 C0 test eax,eax - 1000F050: 75 06 jne 1000F058 - 1000F052: B8 28 4F 02 10 mov eax,10024F28h - 1000F057: C3 ret - 1000F058: 83 C0 08 add eax,8 - 1000F05B: C3 ret - 1000F05C: E8 88 E3 FF FF call 1000D3E9 - 1000F061: 85 C0 test eax,eax - 1000F063: 75 06 jne 1000F06B - 1000F065: B8 2C 4F 02 10 mov eax,10024F2Ch - 1000F06A: C3 ret - 1000F06B: 83 C0 0C add eax,0Ch - 1000F06E: C3 ret - 1000F06F: 8B FF mov edi,edi - 1000F071: 55 push ebp - 1000F072: 8B EC mov ebp,esp - 1000F074: 56 push esi - 1000F075: E8 E2 FF FF FF call 1000F05C - 1000F07A: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000F07D: 51 push ecx - 1000F07E: 89 08 mov dword ptr [eax],ecx - 1000F080: E8 82 FF FF FF call 1000F007 - 1000F085: 59 pop ecx - 1000F086: 8B F0 mov esi,eax - 1000F088: E8 BC FF FF FF call 1000F049 - 1000F08D: 89 30 mov dword ptr [eax],esi - 1000F08F: 5E pop esi - 1000F090: 5D pop ebp - 1000F091: C3 ret - 1000F092: 8B FF mov edi,edi - 1000F094: 55 push ebp - 1000F095: 8B EC mov ebp,esp - 1000F097: 83 EC 20 sub esp,20h - 1000F09A: 53 push ebx - 1000F09B: 33 DB xor ebx,ebx - 1000F09D: 39 5D 14 cmp dword ptr [ebp+14h],ebx - 1000F0A0: 75 20 jne 1000F0C2 - 1000F0A2: E8 A2 FF FF FF call 1000F049 - 1000F0A7: 53 push ebx - 1000F0A8: 53 push ebx - 1000F0A9: 53 push ebx - 1000F0AA: 53 push ebx - 1000F0AB: 53 push ebx - 1000F0AC: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1000F0B2: E8 2A FF FF FF call 1000EFE1 - 1000F0B7: 83 C4 14 add esp,14h - 1000F0BA: 83 C8 FF or eax,0FFFFFFFFh - 1000F0BD: E9 C5 00 00 00 jmp 1000F187 - 1000F0C2: 56 push esi - 1000F0C3: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 1000F0C6: 57 push edi - 1000F0C7: 8B 7D 10 mov edi,dword ptr [ebp+10h] - 1000F0CA: 3B FB cmp edi,ebx - 1000F0CC: 74 24 je 1000F0F2 - 1000F0CE: 3B F3 cmp esi,ebx - 1000F0D0: 75 20 jne 1000F0F2 - 1000F0D2: E8 72 FF FF FF call 1000F049 - 1000F0D7: 53 push ebx - 1000F0D8: 53 push ebx - 1000F0D9: 53 push ebx - 1000F0DA: 53 push ebx - 1000F0DB: 53 push ebx - 1000F0DC: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1000F0E2: E8 FA FE FF FF call 1000EFE1 - 1000F0E7: 83 C4 14 add esp,14h - 1000F0EA: 83 C8 FF or eax,0FFFFFFFFh - 1000F0ED: E9 93 00 00 00 jmp 1000F185 - 1000F0F2: C7 45 EC 42 00 00 mov dword ptr [ebp-14h],42h - 00 - 1000F0F9: 89 75 E8 mov dword ptr [ebp-18h],esi - 1000F0FC: 89 75 E0 mov dword ptr [ebp-20h],esi - 1000F0FF: 81 FF FF FF FF 3F cmp edi,3FFFFFFFh - 1000F105: 76 09 jbe 1000F110 - 1000F107: C7 45 E4 FF FF FF mov dword ptr [ebp-1Ch],7FFFFFFFh - 7F - 1000F10E: EB 06 jmp 1000F116 - 1000F110: 8D 04 3F lea eax,[edi+edi] - 1000F113: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1000F116: FF 75 1C push dword ptr [ebp+1Ch] - 1000F119: 8D 45 E0 lea eax,[ebp-20h] - 1000F11C: FF 75 18 push dword ptr [ebp+18h] - 1000F11F: FF 75 14 push dword ptr [ebp+14h] - 1000F122: 50 push eax - 1000F123: FF 55 08 call dword ptr [ebp+8] - 1000F126: 83 C4 10 add esp,10h - 1000F129: 89 45 14 mov dword ptr [ebp+14h],eax - 1000F12C: 3B F3 cmp esi,ebx - 1000F12E: 74 55 je 1000F185 - 1000F130: 3B C3 cmp eax,ebx - 1000F132: 7C 42 jl 1000F176 - 1000F134: FF 4D E4 dec dword ptr [ebp-1Ch] - 1000F137: 78 0A js 1000F143 - 1000F139: 8B 45 E0 mov eax,dword ptr [ebp-20h] - 1000F13C: 88 18 mov byte ptr [eax],bl - 1000F13E: FF 45 E0 inc dword ptr [ebp-20h] - 1000F141: EB 11 jmp 1000F154 - 1000F143: 8D 45 E0 lea eax,[ebp-20h] - 1000F146: 50 push eax - 1000F147: 53 push ebx - 1000F148: E8 61 F0 FF FF call 1000E1AE - 1000F14D: 59 pop ecx - 1000F14E: 59 pop ecx - 1000F14F: 83 F8 FF cmp eax,0FFFFFFFFh - 1000F152: 74 22 je 1000F176 - 1000F154: FF 4D E4 dec dword ptr [ebp-1Ch] - 1000F157: 78 07 js 1000F160 - 1000F159: 8B 45 E0 mov eax,dword ptr [ebp-20h] - 1000F15C: 88 18 mov byte ptr [eax],bl - 1000F15E: EB 11 jmp 1000F171 - 1000F160: 8D 45 E0 lea eax,[ebp-20h] - 1000F163: 50 push eax - 1000F164: 53 push ebx - 1000F165: E8 44 F0 FF FF call 1000E1AE - 1000F16A: 59 pop ecx - 1000F16B: 59 pop ecx - 1000F16C: 83 F8 FF cmp eax,0FFFFFFFFh - 1000F16F: 74 05 je 1000F176 - 1000F171: 8B 45 14 mov eax,dword ptr [ebp+14h] - 1000F174: EB 0F jmp 1000F185 - 1000F176: 33 C0 xor eax,eax - 1000F178: 39 5D E4 cmp dword ptr [ebp-1Ch],ebx - 1000F17B: 66 89 44 7E FE mov word ptr [esi+edi*2-2],ax - 1000F180: 0F 9D C0 setge al - 1000F183: 48 dec eax - 1000F184: 48 dec eax - 1000F185: 5F pop edi - 1000F186: 5E pop esi - 1000F187: 5B pop ebx - 1000F188: C9 leave - 1000F189: C3 ret - 1000F18A: 8B FF mov edi,edi - 1000F18C: 55 push ebp - 1000F18D: 8B EC mov ebp,esp - 1000F18F: 56 push esi - 1000F190: 33 F6 xor esi,esi - 1000F192: 39 75 10 cmp dword ptr [ebp+10h],esi - 1000F195: 75 1D jne 1000F1B4 - 1000F197: E8 AD FE FF FF call 1000F049 - 1000F19C: 56 push esi - 1000F19D: 56 push esi - 1000F19E: 56 push esi - 1000F19F: 56 push esi - 1000F1A0: 56 push esi - 1000F1A1: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1000F1A7: E8 35 FE FF FF call 1000EFE1 - 1000F1AC: 83 C4 14 add esp,14h - 1000F1AF: 83 C8 FF or eax,0FFFFFFFFh - 1000F1B2: EB 5E jmp 1000F212 - 1000F1B4: 57 push edi - 1000F1B5: 8B 7D 08 mov edi,dword ptr [ebp+8] - 1000F1B8: 3B FE cmp edi,esi - 1000F1BA: 74 05 je 1000F1C1 - 1000F1BC: 39 75 0C cmp dword ptr [ebp+0Ch],esi - 1000F1BF: 77 0D ja 1000F1CE - 1000F1C1: E8 83 FE FF FF call 1000F049 - 1000F1C6: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1000F1CC: EB 33 jmp 1000F201 - 1000F1CE: FF 75 18 push dword ptr [ebp+18h] - 1000F1D1: FF 75 14 push dword ptr [ebp+14h] - 1000F1D4: FF 75 10 push dword ptr [ebp+10h] - 1000F1D7: FF 75 0C push dword ptr [ebp+0Ch] - 1000F1DA: 57 push edi - 1000F1DB: 68 D3 33 01 10 push 100133D3h - 1000F1E0: E8 AD FE FF FF call 1000F092 - 1000F1E5: 83 C4 18 add esp,18h - 1000F1E8: 3B C6 cmp eax,esi - 1000F1EA: 7D 05 jge 1000F1F1 - 1000F1EC: 33 C9 xor ecx,ecx - 1000F1EE: 66 89 0F mov word ptr [edi],cx - 1000F1F1: 83 F8 FE cmp eax,0FFFFFFFEh - 1000F1F4: 75 1B jne 1000F211 - 1000F1F6: E8 4E FE FF FF call 1000F049 - 1000F1FB: C7 00 22 00 00 00 mov dword ptr [eax],22h - 1000F201: 56 push esi - 1000F202: 56 push esi - 1000F203: 56 push esi - 1000F204: 56 push esi - 1000F205: 56 push esi - 1000F206: E8 D6 FD FF FF call 1000EFE1 - 1000F20B: 83 C4 14 add esp,14h - 1000F20E: 83 C8 FF or eax,0FFFFFFFFh - 1000F211: 5F pop edi - 1000F212: 5E pop esi - 1000F213: 5D pop ebp - 1000F214: C3 ret - 1000F215: CC int 3 - 1000F216: CC int 3 - 1000F217: CC int 3 - 1000F218: CC int 3 - 1000F219: CC int 3 - 1000F21A: CC int 3 - 1000F21B: CC int 3 - 1000F21C: CC int 3 - 1000F21D: CC int 3 - 1000F21E: CC int 3 - 1000F21F: CC int 3 - 1000F220: 53 push ebx - 1000F221: 56 push esi - 1000F222: 8B 44 24 18 mov eax,dword ptr [esp+18h] - 1000F226: 0B C0 or eax,eax - 1000F228: 75 18 jne 1000F242 - 1000F22A: 8B 4C 24 14 mov ecx,dword ptr [esp+14h] - 1000F22E: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 1000F232: 33 D2 xor edx,edx - 1000F234: F7 F1 div eax,ecx - 1000F236: 8B D8 mov ebx,eax - 1000F238: 8B 44 24 0C mov eax,dword ptr [esp+0Ch] - 1000F23C: F7 F1 div eax,ecx - 1000F23E: 8B D3 mov edx,ebx - 1000F240: EB 41 jmp 1000F283 - 1000F242: 8B C8 mov ecx,eax - 1000F244: 8B 5C 24 14 mov ebx,dword ptr [esp+14h] - 1000F248: 8B 54 24 10 mov edx,dword ptr [esp+10h] - 1000F24C: 8B 44 24 0C mov eax,dword ptr [esp+0Ch] - 1000F250: D1 E9 shr ecx,1 - 1000F252: D1 DB rcr ebx,1 - 1000F254: D1 EA shr edx,1 - 1000F256: D1 D8 rcr eax,1 - 1000F258: 0B C9 or ecx,ecx - 1000F25A: 75 F4 jne 1000F250 - 1000F25C: F7 F3 div eax,ebx - 1000F25E: 8B F0 mov esi,eax - 1000F260: F7 64 24 18 mul eax,dword ptr [esp+18h] - 1000F264: 8B C8 mov ecx,eax - 1000F266: 8B 44 24 14 mov eax,dword ptr [esp+14h] - 1000F26A: F7 E6 mul eax,esi - 1000F26C: 03 D1 add edx,ecx - 1000F26E: 72 0E jb 1000F27E - 1000F270: 3B 54 24 10 cmp edx,dword ptr [esp+10h] - 1000F274: 77 08 ja 1000F27E - 1000F276: 72 07 jb 1000F27F - 1000F278: 3B 44 24 0C cmp eax,dword ptr [esp+0Ch] - 1000F27C: 76 01 jbe 1000F27F - 1000F27E: 4E dec esi - 1000F27F: 33 D2 xor edx,edx - 1000F281: 8B C6 mov eax,esi - 1000F283: 5E pop esi - 1000F284: 5B pop ebx - 1000F285: C2 10 00 ret 10h - 1000F288: 55 push ebp - 1000F289: 8B EC mov ebp,esp - 1000F28B: 83 EC 04 sub esp,4 - 1000F28E: 89 7D FC mov dword ptr [ebp-4],edi - 1000F291: 8B 7D 08 mov edi,dword ptr [ebp+8] - 1000F294: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch] - 1000F297: C1 E9 07 shr ecx,7 - 1000F29A: 66 0F EF C0 pxor xmm0,xmm0 - 1000F29E: EB 08 jmp 1000F2A8 - 1000F2A0: 8D A4 24 00 00 00 lea esp,[esp+00000000h] - 00 - 1000F2A7: 90 nop - 1000F2A8: 66 0F 7F 07 movdqa xmmword ptr [edi],xmm0 - 1000F2AC: 66 0F 7F 47 10 movdqa xmmword ptr [edi+10h],xmm0 - 1000F2B1: 66 0F 7F 47 20 movdqa xmmword ptr [edi+20h],xmm0 - 1000F2B6: 66 0F 7F 47 30 movdqa xmmword ptr [edi+30h],xmm0 - 1000F2BB: 66 0F 7F 47 40 movdqa xmmword ptr [edi+40h],xmm0 - 1000F2C0: 66 0F 7F 47 50 movdqa xmmword ptr [edi+50h],xmm0 - 1000F2C5: 66 0F 7F 47 60 movdqa xmmword ptr [edi+60h],xmm0 - 1000F2CA: 66 0F 7F 47 70 movdqa xmmword ptr [edi+70h],xmm0 - 1000F2CF: 8D BF 80 00 00 00 lea edi,[edi+00000080h] - 1000F2D5: 49 dec ecx - 1000F2D6: 75 D0 jne 1000F2A8 - 1000F2D8: 8B 7D FC mov edi,dword ptr [ebp-4] - 1000F2DB: 8B E5 mov esp,ebp - 1000F2DD: 5D pop ebp - 1000F2DE: C3 ret - 1000F2DF: 55 push ebp - 1000F2E0: 8B EC mov ebp,esp - 1000F2E2: 83 EC 10 sub esp,10h - 1000F2E5: 89 7D FC mov dword ptr [ebp-4],edi - 1000F2E8: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000F2EB: 99 cdq - 1000F2EC: 8B F8 mov edi,eax - 1000F2EE: 33 FA xor edi,edx - 1000F2F0: 2B FA sub edi,edx - 1000F2F2: 83 E7 0F and edi,0Fh - 1000F2F5: 33 FA xor edi,edx - 1000F2F7: 2B FA sub edi,edx - 1000F2F9: 85 FF test edi,edi - 1000F2FB: 75 3C jne 1000F339 - 1000F2FD: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 1000F300: 8B D1 mov edx,ecx - 1000F302: 83 E2 7F and edx,7Fh - 1000F305: 89 55 F4 mov dword ptr [ebp-0Ch],edx - 1000F308: 3B CA cmp ecx,edx - 1000F30A: 74 12 je 1000F31E - 1000F30C: 2B CA sub ecx,edx - 1000F30E: 51 push ecx - 1000F30F: 50 push eax - 1000F310: E8 73 FF FF FF call 1000F288 - 1000F315: 83 C4 08 add esp,8 - 1000F318: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000F31B: 8B 55 F4 mov edx,dword ptr [ebp-0Ch] - 1000F31E: 85 D2 test edx,edx - 1000F320: 74 45 je 1000F367 - 1000F322: 03 45 10 add eax,dword ptr [ebp+10h] - 1000F325: 2B C2 sub eax,edx - 1000F327: 89 45 F8 mov dword ptr [ebp-8],eax - 1000F32A: 33 C0 xor eax,eax - 1000F32C: 8B 7D F8 mov edi,dword ptr [ebp-8] - 1000F32F: 8B 4D F4 mov ecx,dword ptr [ebp-0Ch] - 1000F332: F3 AA rep stos byte ptr es:[edi] - 1000F334: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000F337: EB 2E jmp 1000F367 - 1000F339: F7 DF neg edi - 1000F33B: 83 C7 10 add edi,10h - 1000F33E: 89 7D F0 mov dword ptr [ebp-10h],edi - 1000F341: 33 C0 xor eax,eax - 1000F343: 8B 7D 08 mov edi,dword ptr [ebp+8] - 1000F346: 8B 4D F0 mov ecx,dword ptr [ebp-10h] - 1000F349: F3 AA rep stos byte ptr es:[edi] - 1000F34B: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 1000F34E: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000F351: 8B 55 10 mov edx,dword ptr [ebp+10h] - 1000F354: 03 C8 add ecx,eax - 1000F356: 2B D0 sub edx,eax - 1000F358: 52 push edx - 1000F359: 6A 00 push 0 - 1000F35B: 51 push ecx - 1000F35C: E8 7E FF FF FF call 1000F2DF - 1000F361: 83 C4 0C add esp,0Ch - 1000F364: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000F367: 8B 7D FC mov edi,dword ptr [ebp-4] - 1000F36A: 8B E5 mov esp,ebp - 1000F36C: 5D pop ebp - 1000F36D: C3 ret - 1000F36E: 8B FF mov edi,edi - 1000F370: 55 push ebp - 1000F371: 8B EC mov ebp,esp - 1000F373: 33 C0 xor eax,eax - 1000F375: 39 45 08 cmp dword ptr [ebp+8],eax - 1000F378: 6A 00 push 0 - 1000F37A: 0F 94 C0 sete al - 1000F37D: 68 00 10 00 00 push 1000h - 1000F382: 50 push eax - 1000F383: FF 15 BC F0 01 10 call dword ptr ds:[1001F0BCh] - 1000F389: A3 64 68 02 10 mov dword ptr ds:[10026864h],eax - 1000F38E: 85 C0 test eax,eax - 1000F390: 75 02 jne 1000F394 - 1000F392: 5D pop ebp - 1000F393: C3 ret - 1000F394: 33 C0 xor eax,eax - 1000F396: 40 inc eax - 1000F397: A3 18 6D 02 10 mov dword ptr ds:[10026D18h],eax - 1000F39C: 5D pop ebp - 1000F39D: C3 ret - 1000F39E: 83 3D 18 6D 02 10 cmp dword ptr ds:[10026D18h],3 - 03 - 1000F3A5: 75 57 jne 1000F3FE - 1000F3A7: 53 push ebx - 1000F3A8: 33 DB xor ebx,ebx - 1000F3AA: 39 1D 00 6D 02 10 cmp dword ptr ds:[10026D00h],ebx - 1000F3B0: 57 push edi - 1000F3B1: 8B 3D 5C F0 01 10 mov edi,dword ptr ds:[1001F05Ch] - 1000F3B7: 7E 33 jle 1000F3EC - 1000F3B9: 56 push esi - 1000F3BA: 8B 35 04 6D 02 10 mov esi,dword ptr ds:[10026D04h] - 1000F3C0: 83 C6 10 add esi,10h - 1000F3C3: 68 00 80 00 00 push 8000h - 1000F3C8: 6A 00 push 0 - 1000F3CA: FF 76 FC push dword ptr [esi-4] - 1000F3CD: FF 15 C4 F0 01 10 call dword ptr ds:[1001F0C4h] - 1000F3D3: FF 36 push dword ptr [esi] - 1000F3D5: 6A 00 push 0 - 1000F3D7: FF 35 64 68 02 10 push dword ptr ds:[10026864h] - 1000F3DD: FF D7 call edi - 1000F3DF: 83 C6 14 add esi,14h - 1000F3E2: 43 inc ebx - 1000F3E3: 3B 1D 00 6D 02 10 cmp ebx,dword ptr ds:[10026D00h] - 1000F3E9: 7C D8 jl 1000F3C3 - 1000F3EB: 5E pop esi - 1000F3EC: FF 35 04 6D 02 10 push dword ptr ds:[10026D04h] - 1000F3F2: 6A 00 push 0 - 1000F3F4: FF 35 64 68 02 10 push dword ptr ds:[10026864h] - 1000F3FA: FF D7 call edi - 1000F3FC: 5F pop edi - 1000F3FD: 5B pop ebx - 1000F3FE: FF 35 64 68 02 10 push dword ptr ds:[10026864h] - 1000F404: FF 15 C0 F0 01 10 call dword ptr ds:[1001F0C0h] - 1000F40A: 83 25 64 68 02 10 and dword ptr ds:[10026864h],0 - 00 - 1000F411: C3 ret - 1000F412: 8B FF mov edi,edi - 1000F414: 56 push esi - 1000F415: 57 push edi - 1000F416: 33 F6 xor esi,esi - 1000F418: BF 68 68 02 10 mov edi,10026868h - 1000F41D: 83 3C F5 3C 4F 02 cmp dword ptr [esi*8+10024F3Ch],1 - 10 01 - 1000F425: 75 1E jne 1000F445 - 1000F427: 8D 04 F5 38 4F 02 lea eax,[esi*8+10024F38h] - 10 - 1000F42E: 89 38 mov dword ptr [eax],edi - 1000F430: 68 A0 0F 00 00 push 0FA0h - 1000F435: FF 30 push dword ptr [eax] - 1000F437: 83 C7 18 add edi,18h - 1000F43A: E8 C5 88 00 00 call 10017D04 - 1000F43F: 59 pop ecx - 1000F440: 59 pop ecx - 1000F441: 85 C0 test eax,eax - 1000F443: 74 0C je 1000F451 - 1000F445: 46 inc esi - 1000F446: 83 FE 24 cmp esi,24h - 1000F449: 7C D2 jl 1000F41D - 1000F44B: 33 C0 xor eax,eax - 1000F44D: 40 inc eax - 1000F44E: 5F pop edi - 1000F44F: 5E pop esi - 1000F450: C3 ret - 1000F451: 83 24 F5 38 4F 02 and dword ptr [esi*8+10024F38h],0 - 10 00 - 1000F459: 33 C0 xor eax,eax - 1000F45B: EB F1 jmp 1000F44E - 1000F45D: 8B FF mov edi,edi - 1000F45F: 53 push ebx - 1000F460: 8B 1D C8 F0 01 10 mov ebx,dword ptr ds:[1001F0C8h] - 1000F466: 56 push esi - 1000F467: BE 38 4F 02 10 mov esi,10024F38h - 1000F46C: 57 push edi - 1000F46D: 8B 3E mov edi,dword ptr [esi] - 1000F46F: 85 FF test edi,edi - 1000F471: 74 13 je 1000F486 - 1000F473: 83 7E 04 01 cmp dword ptr [esi+4],1 - 1000F477: 74 0D je 1000F486 - 1000F479: 57 push edi - 1000F47A: FF D3 call ebx - 1000F47C: 57 push edi - 1000F47D: E8 B2 AE FF FF call 1000A334 - 1000F482: 83 26 00 and dword ptr [esi],0 - 1000F485: 59 pop ecx - 1000F486: 83 C6 08 add esi,8 - 1000F489: 81 FE 58 50 02 10 cmp esi,10025058h - 1000F48F: 7C DC jl 1000F46D - 1000F491: BE 38 4F 02 10 mov esi,10024F38h - 1000F496: 5F pop edi - 1000F497: 8B 06 mov eax,dword ptr [esi] - 1000F499: 85 C0 test eax,eax - 1000F49B: 74 09 je 1000F4A6 - 1000F49D: 83 7E 04 01 cmp dword ptr [esi+4],1 - 1000F4A1: 75 03 jne 1000F4A6 - 1000F4A3: 50 push eax - 1000F4A4: FF D3 call ebx - 1000F4A6: 83 C6 08 add esi,8 - 1000F4A9: 81 FE 58 50 02 10 cmp esi,10025058h - 1000F4AF: 7C E6 jl 1000F497 - 1000F4B1: 5E pop esi - 1000F4B2: 5B pop ebx - 1000F4B3: C3 ret - 1000F4B4: 8B FF mov edi,edi - 1000F4B6: 55 push ebp - 1000F4B7: 8B EC mov ebp,esp - 1000F4B9: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000F4BC: FF 34 C5 38 4F 02 push dword ptr [eax*8+10024F38h] - 10 - 1000F4C3: FF 15 68 F0 01 10 call dword ptr ds:[1001F068h] - 1000F4C9: 5D pop ebp - 1000F4CA: C3 ret - 1000F4CB: 6A 0C push 0Ch - 1000F4CD: 68 18 1D 02 10 push 10021D18h - 1000F4D2: E8 B1 0B 00 00 call 10010088 - 1000F4D7: 33 FF xor edi,edi - 1000F4D9: 47 inc edi - 1000F4DA: 89 7D E4 mov dword ptr [ebp-1Ch],edi - 1000F4DD: 33 DB xor ebx,ebx - 1000F4DF: 39 1D 64 68 02 10 cmp dword ptr ds:[10026864h],ebx - 1000F4E5: 75 18 jne 1000F4FF - 1000F4E7: E8 7A EC FF FF call 1000E166 - 1000F4EC: 6A 1E push 1Eh - 1000F4EE: E8 C8 EA FF FF call 1000DFBB - 1000F4F3: 68 FF 00 00 00 push 0FFh - 1000F4F8: E8 60 36 00 00 call 10012B5D - 1000F4FD: 59 pop ecx - 1000F4FE: 59 pop ecx - 1000F4FF: 8B 75 08 mov esi,dword ptr [ebp+8] - 1000F502: 8D 34 F5 38 4F 02 lea esi,[esi*8+10024F38h] - 10 - 1000F509: 39 1E cmp dword ptr [esi],ebx - 1000F50B: 74 04 je 1000F511 - 1000F50D: 8B C7 mov eax,edi - 1000F50F: EB 6E jmp 1000F57F - 1000F511: 6A 18 push 18h - 1000F513: E8 F1 33 00 00 call 10012909 - 1000F518: 59 pop ecx - 1000F519: 8B F8 mov edi,eax - 1000F51B: 3B FB cmp edi,ebx - 1000F51D: 75 0F jne 1000F52E - 1000F51F: E8 25 FB FF FF call 1000F049 - 1000F524: C7 00 0C 00 00 00 mov dword ptr [eax],0Ch - 1000F52A: 33 C0 xor eax,eax - 1000F52C: EB 51 jmp 1000F57F - 1000F52E: 6A 0A push 0Ah - 1000F530: E8 59 00 00 00 call 1000F58E - 1000F535: 59 pop ecx - 1000F536: 89 5D FC mov dword ptr [ebp-4],ebx - 1000F539: 39 1E cmp dword ptr [esi],ebx - 1000F53B: 75 2C jne 1000F569 - 1000F53D: 68 A0 0F 00 00 push 0FA0h - 1000F542: 57 push edi - 1000F543: E8 BC 87 00 00 call 10017D04 - 1000F548: 59 pop ecx - 1000F549: 59 pop ecx - 1000F54A: 85 C0 test eax,eax - 1000F54C: 75 17 jne 1000F565 - 1000F54E: 57 push edi - 1000F54F: E8 E0 AD FF FF call 1000A334 - 1000F554: 59 pop ecx - 1000F555: E8 EF FA FF FF call 1000F049 - 1000F55A: C7 00 0C 00 00 00 mov dword ptr [eax],0Ch - 1000F560: 89 5D E4 mov dword ptr [ebp-1Ch],ebx - 1000F563: EB 0B jmp 1000F570 - 1000F565: 89 3E mov dword ptr [esi],edi - 1000F567: EB 07 jmp 1000F570 - 1000F569: 57 push edi - 1000F56A: E8 C5 AD FF FF call 1000A334 - 1000F56F: 59 pop ecx - 1000F570: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1000F577: E8 09 00 00 00 call 1000F585 - 1000F57C: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 1000F57F: E8 49 0B 00 00 call 100100CD - 1000F584: C3 ret - 1000F585: 6A 0A push 0Ah - 1000F587: E8 28 FF FF FF call 1000F4B4 - 1000F58C: 59 pop ecx - 1000F58D: C3 ret - 1000F58E: 8B FF mov edi,edi - 1000F590: 55 push ebp - 1000F591: 8B EC mov ebp,esp - 1000F593: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000F596: 56 push esi - 1000F597: 8D 34 C5 38 4F 02 lea esi,[eax*8+10024F38h] - 10 - 1000F59E: 83 3E 00 cmp dword ptr [esi],0 - 1000F5A1: 75 13 jne 1000F5B6 - 1000F5A3: 50 push eax - 1000F5A4: E8 22 FF FF FF call 1000F4CB - 1000F5A9: 59 pop ecx - 1000F5AA: 85 C0 test eax,eax - 1000F5AC: 75 08 jne 1000F5B6 - 1000F5AE: 6A 11 push 11h - 1000F5B0: E8 54 35 00 00 call 10012B09 - 1000F5B5: 59 pop ecx - 1000F5B6: FF 36 push dword ptr [esi] - 1000F5B8: FF 15 64 F0 01 10 call dword ptr ds:[1001F064h] - 1000F5BE: 5E pop esi - 1000F5BF: 5D pop ebp - 1000F5C0: C3 ret - 1000F5C1: 8B FF mov edi,edi - 1000F5C3: 55 push ebp - 1000F5C4: 8B EC mov ebp,esp - 1000F5C6: 8B 0D 00 6D 02 10 mov ecx,dword ptr ds:[10026D00h] - 1000F5CC: A1 04 6D 02 10 mov eax,dword ptr ds:[10026D04h] - 1000F5D1: 6B C9 14 imul ecx,ecx,14h - 1000F5D4: 03 C8 add ecx,eax - 1000F5D6: EB 11 jmp 1000F5E9 - 1000F5D8: 8B 55 08 mov edx,dword ptr [ebp+8] - 1000F5DB: 2B 50 0C sub edx,dword ptr [eax+0Ch] - 1000F5DE: 81 FA 00 00 10 00 cmp edx,100000h - 1000F5E4: 72 09 jb 1000F5EF - 1000F5E6: 83 C0 14 add eax,14h - 1000F5E9: 3B C1 cmp eax,ecx - 1000F5EB: 72 EB jb 1000F5D8 - 1000F5ED: 33 C0 xor eax,eax - 1000F5EF: 5D pop ebp - 1000F5F0: C3 ret - 1000F5F1: 8B FF mov edi,edi - 1000F5F3: 55 push ebp - 1000F5F4: 8B EC mov ebp,esp - 1000F5F6: 83 EC 10 sub esp,10h - 1000F5F9: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000F5FC: 8B 41 10 mov eax,dword ptr [ecx+10h] - 1000F5FF: 56 push esi - 1000F600: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 1000F603: 57 push edi - 1000F604: 8B FE mov edi,esi - 1000F606: 2B 79 0C sub edi,dword ptr [ecx+0Ch] - 1000F609: 83 C6 FC add esi,0FFFFFFFCh - 1000F60C: C1 EF 0F shr edi,0Fh - 1000F60F: 8B CF mov ecx,edi - 1000F611: 69 C9 04 02 00 00 imul ecx,ecx,204h - 1000F617: 8D 8C 01 44 01 00 lea ecx,[ecx+eax+00000144h] - 00 - 1000F61E: 89 4D F0 mov dword ptr [ebp-10h],ecx - 1000F621: 8B 0E mov ecx,dword ptr [esi] - 1000F623: 49 dec ecx - 1000F624: 89 4D FC mov dword ptr [ebp-4],ecx - 1000F627: F6 C1 01 test cl,1 - 1000F62A: 0F 85 D3 02 00 00 jne 1000F903 - 1000F630: 53 push ebx - 1000F631: 8D 1C 31 lea ebx,[ecx+esi] - 1000F634: 8B 13 mov edx,dword ptr [ebx] - 1000F636: 89 55 F4 mov dword ptr [ebp-0Ch],edx - 1000F639: 8B 56 FC mov edx,dword ptr [esi-4] - 1000F63C: 89 55 F8 mov dword ptr [ebp-8],edx - 1000F63F: 8B 55 F4 mov edx,dword ptr [ebp-0Ch] - 1000F642: 89 5D 0C mov dword ptr [ebp+0Ch],ebx - 1000F645: F6 C2 01 test dl,1 - 1000F648: 75 74 jne 1000F6BE - 1000F64A: C1 FA 04 sar edx,4 - 1000F64D: 4A dec edx - 1000F64E: 83 FA 3F cmp edx,3Fh - 1000F651: 76 03 jbe 1000F656 - 1000F653: 6A 3F push 3Fh - 1000F655: 5A pop edx - 1000F656: 8B 4B 04 mov ecx,dword ptr [ebx+4] - 1000F659: 3B 4B 08 cmp ecx,dword ptr [ebx+8] - 1000F65C: 75 42 jne 1000F6A0 - 1000F65E: BB 00 00 00 80 mov ebx,80000000h - 1000F663: 83 FA 20 cmp edx,20h - 1000F666: 73 19 jae 1000F681 - 1000F668: 8B CA mov ecx,edx - 1000F66A: D3 EB shr ebx,cl - 1000F66C: 8D 4C 02 04 lea ecx,[edx+eax+4] - 1000F670: F7 D3 not ebx - 1000F672: 21 5C B8 44 and dword ptr [eax+edi*4+44h],ebx - 1000F676: FE 09 dec byte ptr [ecx] - 1000F678: 75 23 jne 1000F69D - 1000F67A: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000F67D: 21 19 and dword ptr [ecx],ebx - 1000F67F: EB 1C jmp 1000F69D - 1000F681: 8D 4A E0 lea ecx,[edx-20h] - 1000F684: D3 EB shr ebx,cl - 1000F686: 8D 4C 02 04 lea ecx,[edx+eax+4] - 1000F68A: F7 D3 not ebx - 1000F68C: 21 9C B8 C4 00 00 and dword ptr [eax+edi*4+000000C4h],ebx - 00 - 1000F693: FE 09 dec byte ptr [ecx] - 1000F695: 75 06 jne 1000F69D - 1000F697: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000F69A: 21 59 04 and dword ptr [ecx+4],ebx - 1000F69D: 8B 5D 0C mov ebx,dword ptr [ebp+0Ch] - 1000F6A0: 8B 53 08 mov edx,dword ptr [ebx+8] - 1000F6A3: 8B 5B 04 mov ebx,dword ptr [ebx+4] - 1000F6A6: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1000F6A9: 03 4D F4 add ecx,dword ptr [ebp-0Ch] - 1000F6AC: 89 5A 04 mov dword ptr [edx+4],ebx - 1000F6AF: 8B 55 0C mov edx,dword ptr [ebp+0Ch] - 1000F6B2: 8B 5A 04 mov ebx,dword ptr [edx+4] - 1000F6B5: 8B 52 08 mov edx,dword ptr [edx+8] - 1000F6B8: 89 53 08 mov dword ptr [ebx+8],edx - 1000F6BB: 89 4D FC mov dword ptr [ebp-4],ecx - 1000F6BE: 8B D1 mov edx,ecx - 1000F6C0: C1 FA 04 sar edx,4 - 1000F6C3: 4A dec edx - 1000F6C4: 83 FA 3F cmp edx,3Fh - 1000F6C7: 76 03 jbe 1000F6CC - 1000F6C9: 6A 3F push 3Fh - 1000F6CB: 5A pop edx - 1000F6CC: 8B 5D F8 mov ebx,dword ptr [ebp-8] - 1000F6CF: 83 E3 01 and ebx,1 - 1000F6D2: 89 5D F4 mov dword ptr [ebp-0Ch],ebx - 1000F6D5: 0F 85 8F 00 00 00 jne 1000F76A - 1000F6DB: 2B 75 F8 sub esi,dword ptr [ebp-8] - 1000F6DE: 8B 5D F8 mov ebx,dword ptr [ebp-8] - 1000F6E1: C1 FB 04 sar ebx,4 - 1000F6E4: 6A 3F push 3Fh - 1000F6E6: 89 75 0C mov dword ptr [ebp+0Ch],esi - 1000F6E9: 4B dec ebx - 1000F6EA: 5E pop esi - 1000F6EB: 3B DE cmp ebx,esi - 1000F6ED: 76 02 jbe 1000F6F1 - 1000F6EF: 8B DE mov ebx,esi - 1000F6F1: 03 4D F8 add ecx,dword ptr [ebp-8] - 1000F6F4: 8B D1 mov edx,ecx - 1000F6F6: C1 FA 04 sar edx,4 - 1000F6F9: 4A dec edx - 1000F6FA: 89 4D FC mov dword ptr [ebp-4],ecx - 1000F6FD: 3B D6 cmp edx,esi - 1000F6FF: 76 02 jbe 1000F703 - 1000F701: 8B D6 mov edx,esi - 1000F703: 3B DA cmp ebx,edx - 1000F705: 74 5E je 1000F765 - 1000F707: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch] - 1000F70A: 8B 71 04 mov esi,dword ptr [ecx+4] - 1000F70D: 3B 71 08 cmp esi,dword ptr [ecx+8] - 1000F710: 75 3B jne 1000F74D - 1000F712: BE 00 00 00 80 mov esi,80000000h - 1000F717: 83 FB 20 cmp ebx,20h - 1000F71A: 73 17 jae 1000F733 - 1000F71C: 8B CB mov ecx,ebx - 1000F71E: D3 EE shr esi,cl - 1000F720: F7 D6 not esi - 1000F722: 21 74 B8 44 and dword ptr [eax+edi*4+44h],esi - 1000F726: FE 4C 03 04 dec byte ptr [ebx+eax+4] - 1000F72A: 75 21 jne 1000F74D - 1000F72C: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000F72F: 21 31 and dword ptr [ecx],esi - 1000F731: EB 1A jmp 1000F74D - 1000F733: 8D 4B E0 lea ecx,[ebx-20h] - 1000F736: D3 EE shr esi,cl - 1000F738: F7 D6 not esi - 1000F73A: 21 B4 B8 C4 00 00 and dword ptr [eax+edi*4+000000C4h],esi - 00 - 1000F741: FE 4C 03 04 dec byte ptr [ebx+eax+4] - 1000F745: 75 06 jne 1000F74D - 1000F747: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000F74A: 21 71 04 and dword ptr [ecx+4],esi - 1000F74D: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch] - 1000F750: 8B 71 08 mov esi,dword ptr [ecx+8] - 1000F753: 8B 49 04 mov ecx,dword ptr [ecx+4] - 1000F756: 89 4E 04 mov dword ptr [esi+4],ecx - 1000F759: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch] - 1000F75C: 8B 71 04 mov esi,dword ptr [ecx+4] - 1000F75F: 8B 49 08 mov ecx,dword ptr [ecx+8] - 1000F762: 89 4E 08 mov dword ptr [esi+8],ecx - 1000F765: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 1000F768: EB 03 jmp 1000F76D - 1000F76A: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 1000F76D: 83 7D F4 00 cmp dword ptr [ebp-0Ch],0 - 1000F771: 75 08 jne 1000F77B - 1000F773: 3B DA cmp ebx,edx - 1000F775: 0F 84 80 00 00 00 je 1000F7FB - 1000F77B: 8B 4D F0 mov ecx,dword ptr [ebp-10h] - 1000F77E: 8D 0C D1 lea ecx,[ecx+edx*8] - 1000F781: 8B 59 04 mov ebx,dword ptr [ecx+4] - 1000F784: 89 4E 08 mov dword ptr [esi+8],ecx - 1000F787: 89 5E 04 mov dword ptr [esi+4],ebx - 1000F78A: 89 71 04 mov dword ptr [ecx+4],esi - 1000F78D: 8B 4E 04 mov ecx,dword ptr [esi+4] - 1000F790: 89 71 08 mov dword ptr [ecx+8],esi - 1000F793: 8B 4E 04 mov ecx,dword ptr [esi+4] - 1000F796: 3B 4E 08 cmp ecx,dword ptr [esi+8] - 1000F799: 75 60 jne 1000F7FB - 1000F79B: 8A 4C 02 04 mov cl,byte ptr [edx+eax+4] - 1000F79F: 88 4D 0F mov byte ptr [ebp+0Fh],cl - 1000F7A2: FE C1 inc cl - 1000F7A4: 88 4C 02 04 mov byte ptr [edx+eax+4],cl - 1000F7A8: 83 FA 20 cmp edx,20h - 1000F7AB: 73 25 jae 1000F7D2 - 1000F7AD: 80 7D 0F 00 cmp byte ptr [ebp+0Fh],0 - 1000F7B1: 75 0E jne 1000F7C1 - 1000F7B3: 8B CA mov ecx,edx - 1000F7B5: BB 00 00 00 80 mov ebx,80000000h - 1000F7BA: D3 EB shr ebx,cl - 1000F7BC: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000F7BF: 09 19 or dword ptr [ecx],ebx - 1000F7C1: BB 00 00 00 80 mov ebx,80000000h - 1000F7C6: 8B CA mov ecx,edx - 1000F7C8: D3 EB shr ebx,cl - 1000F7CA: 8D 44 B8 44 lea eax,[eax+edi*4+44h] - 1000F7CE: 09 18 or dword ptr [eax],ebx - 1000F7D0: EB 29 jmp 1000F7FB - 1000F7D2: 80 7D 0F 00 cmp byte ptr [ebp+0Fh],0 - 1000F7D6: 75 10 jne 1000F7E8 - 1000F7D8: 8D 4A E0 lea ecx,[edx-20h] - 1000F7DB: BB 00 00 00 80 mov ebx,80000000h - 1000F7E0: D3 EB shr ebx,cl - 1000F7E2: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000F7E5: 09 59 04 or dword ptr [ecx+4],ebx - 1000F7E8: 8D 4A E0 lea ecx,[edx-20h] - 1000F7EB: BA 00 00 00 80 mov edx,80000000h - 1000F7F0: D3 EA shr edx,cl - 1000F7F2: 8D 84 B8 C4 00 00 lea eax,[eax+edi*4+000000C4h] - 00 - 1000F7F9: 09 10 or dword ptr [eax],edx - 1000F7FB: 8B 45 FC mov eax,dword ptr [ebp-4] - 1000F7FE: 89 06 mov dword ptr [esi],eax - 1000F800: 89 44 30 FC mov dword ptr [eax+esi-4],eax - 1000F804: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 1000F807: FF 08 dec dword ptr [eax] - 1000F809: 0F 85 F3 00 00 00 jne 1000F902 - 1000F80F: A1 B8 69 02 10 mov eax,dword ptr ds:[100269B8h] - 1000F814: 85 C0 test eax,eax - 1000F816: 0F 84 D8 00 00 00 je 1000F8F4 - 1000F81C: 8B 0D 14 6D 02 10 mov ecx,dword ptr ds:[10026D14h] - 1000F822: 8B 35 C4 F0 01 10 mov esi,dword ptr ds:[1001F0C4h] - 1000F828: 68 00 40 00 00 push 4000h - 1000F82D: C1 E1 0F shl ecx,0Fh - 1000F830: 03 48 0C add ecx,dword ptr [eax+0Ch] - 1000F833: BB 00 80 00 00 mov ebx,8000h - 1000F838: 53 push ebx - 1000F839: 51 push ecx - 1000F83A: FF D6 call esi - 1000F83C: 8B 0D 14 6D 02 10 mov ecx,dword ptr ds:[10026D14h] - 1000F842: A1 B8 69 02 10 mov eax,dword ptr ds:[100269B8h] - 1000F847: BA 00 00 00 80 mov edx,80000000h - 1000F84C: D3 EA shr edx,cl - 1000F84E: 09 50 08 or dword ptr [eax+8],edx - 1000F851: A1 B8 69 02 10 mov eax,dword ptr ds:[100269B8h] - 1000F856: 8B 40 10 mov eax,dword ptr [eax+10h] - 1000F859: 8B 0D 14 6D 02 10 mov ecx,dword ptr ds:[10026D14h] - 1000F85F: 83 A4 88 C4 00 00 and dword ptr [eax+ecx*4+000000C4h],0 - 00 00 - 1000F867: A1 B8 69 02 10 mov eax,dword ptr ds:[100269B8h] - 1000F86C: 8B 40 10 mov eax,dword ptr [eax+10h] - 1000F86F: FE 48 43 dec byte ptr [eax+43h] - 1000F872: A1 B8 69 02 10 mov eax,dword ptr ds:[100269B8h] - 1000F877: 8B 48 10 mov ecx,dword ptr [eax+10h] - 1000F87A: 80 79 43 00 cmp byte ptr [ecx+43h],0 - 1000F87E: 75 09 jne 1000F889 - 1000F880: 83 60 04 FE and dword ptr [eax+4],0FFFFFFFEh - 1000F884: A1 B8 69 02 10 mov eax,dword ptr ds:[100269B8h] - 1000F889: 83 78 08 FF cmp dword ptr [eax+8],0FFFFFFFFh - 1000F88D: 75 65 jne 1000F8F4 - 1000F88F: 53 push ebx - 1000F890: 6A 00 push 0 - 1000F892: FF 70 0C push dword ptr [eax+0Ch] - 1000F895: FF D6 call esi - 1000F897: A1 B8 69 02 10 mov eax,dword ptr ds:[100269B8h] - 1000F89C: FF 70 10 push dword ptr [eax+10h] - 1000F89F: 6A 00 push 0 - 1000F8A1: FF 35 64 68 02 10 push dword ptr ds:[10026864h] - 1000F8A7: FF 15 5C F0 01 10 call dword ptr ds:[1001F05Ch] - 1000F8AD: 8B 0D 00 6D 02 10 mov ecx,dword ptr ds:[10026D00h] - 1000F8B3: A1 B8 69 02 10 mov eax,dword ptr ds:[100269B8h] - 1000F8B8: 6B C9 14 imul ecx,ecx,14h - 1000F8BB: 8B 15 04 6D 02 10 mov edx,dword ptr ds:[10026D04h] - 1000F8C1: 2B C8 sub ecx,eax - 1000F8C3: 8D 4C 11 EC lea ecx,[ecx+edx-14h] - 1000F8C7: 51 push ecx - 1000F8C8: 8D 48 14 lea ecx,[eax+14h] - 1000F8CB: 51 push ecx - 1000F8CC: 50 push eax - 1000F8CD: E8 8E 6B 00 00 call 10016460 - 1000F8D2: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000F8D5: 83 C4 0C add esp,0Ch - 1000F8D8: FF 0D 00 6D 02 10 dec dword ptr ds:[10026D00h] - 1000F8DE: 3B 05 B8 69 02 10 cmp eax,dword ptr ds:[100269B8h] - 1000F8E4: 76 04 jbe 1000F8EA - 1000F8E6: 83 6D 08 14 sub dword ptr [ebp+8],14h - 1000F8EA: A1 04 6D 02 10 mov eax,dword ptr ds:[10026D04h] - 1000F8EF: A3 0C 6D 02 10 mov dword ptr ds:[10026D0Ch],eax - 1000F8F4: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000F8F7: A3 B8 69 02 10 mov dword ptr ds:[100269B8h],eax - 1000F8FC: 89 3D 14 6D 02 10 mov dword ptr ds:[10026D14h],edi - 1000F902: 5B pop ebx - 1000F903: 5F pop edi - 1000F904: 5E pop esi - 1000F905: C9 leave - 1000F906: C3 ret - 1000F907: A1 10 6D 02 10 mov eax,dword ptr ds:[10026D10h] - 1000F90C: 56 push esi - 1000F90D: 8B 35 00 6D 02 10 mov esi,dword ptr ds:[10026D00h] - 1000F913: 57 push edi - 1000F914: 33 FF xor edi,edi - 1000F916: 3B F0 cmp esi,eax - 1000F918: 75 34 jne 1000F94E - 1000F91A: 83 C0 10 add eax,10h - 1000F91D: 6B C0 14 imul eax,eax,14h - 1000F920: 50 push eax - 1000F921: FF 35 04 6D 02 10 push dword ptr ds:[10026D04h] - 1000F927: 57 push edi - 1000F928: FF 35 64 68 02 10 push dword ptr ds:[10026864h] - 1000F92E: FF 15 D0 F0 01 10 call dword ptr ds:[1001F0D0h] - 1000F934: 3B C7 cmp eax,edi - 1000F936: 75 04 jne 1000F93C - 1000F938: 33 C0 xor eax,eax - 1000F93A: EB 78 jmp 1000F9B4 - 1000F93C: 83 05 10 6D 02 10 add dword ptr ds:[10026D10h],10h - 10 - 1000F943: 8B 35 00 6D 02 10 mov esi,dword ptr ds:[10026D00h] - 1000F949: A3 04 6D 02 10 mov dword ptr ds:[10026D04h],eax - 1000F94E: 6B F6 14 imul esi,esi,14h - 1000F951: 03 35 04 6D 02 10 add esi,dword ptr ds:[10026D04h] - 1000F957: 68 C4 41 00 00 push 41C4h - 1000F95C: 6A 08 push 8 - 1000F95E: FF 35 64 68 02 10 push dword ptr ds:[10026864h] - 1000F964: FF 15 AC F0 01 10 call dword ptr ds:[1001F0ACh] - 1000F96A: 89 46 10 mov dword ptr [esi+10h],eax - 1000F96D: 3B C7 cmp eax,edi - 1000F96F: 74 C7 je 1000F938 - 1000F971: 6A 04 push 4 - 1000F973: 68 00 20 00 00 push 2000h - 1000F978: 68 00 00 10 00 push 100000h - 1000F97D: 57 push edi - 1000F97E: FF 15 CC F0 01 10 call dword ptr ds:[1001F0CCh] - 1000F984: 89 46 0C mov dword ptr [esi+0Ch],eax - 1000F987: 3B C7 cmp eax,edi - 1000F989: 75 12 jne 1000F99D - 1000F98B: FF 76 10 push dword ptr [esi+10h] - 1000F98E: 57 push edi - 1000F98F: FF 35 64 68 02 10 push dword ptr ds:[10026864h] - 1000F995: FF 15 5C F0 01 10 call dword ptr ds:[1001F05Ch] - 1000F99B: EB 9B jmp 1000F938 - 1000F99D: 83 4E 08 FF or dword ptr [esi+8],0FFFFFFFFh - 1000F9A1: 89 3E mov dword ptr [esi],edi - 1000F9A3: 89 7E 04 mov dword ptr [esi+4],edi - 1000F9A6: FF 05 00 6D 02 10 inc dword ptr ds:[10026D00h] - 1000F9AC: 8B 46 10 mov eax,dword ptr [esi+10h] - 1000F9AF: 83 08 FF or dword ptr [eax],0FFFFFFFFh - 1000F9B2: 8B C6 mov eax,esi - 1000F9B4: 5F pop edi - 1000F9B5: 5E pop esi - 1000F9B6: C3 ret - 1000F9B7: 8B FF mov edi,edi - 1000F9B9: 55 push ebp - 1000F9BA: 8B EC mov ebp,esp - 1000F9BC: 51 push ecx - 1000F9BD: 51 push ecx - 1000F9BE: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000F9C1: 8B 41 08 mov eax,dword ptr [ecx+8] - 1000F9C4: 53 push ebx - 1000F9C5: 56 push esi - 1000F9C6: 8B 71 10 mov esi,dword ptr [ecx+10h] - 1000F9C9: 57 push edi - 1000F9CA: 33 DB xor ebx,ebx - 1000F9CC: EB 03 jmp 1000F9D1 - 1000F9CE: 03 C0 add eax,eax - 1000F9D0: 43 inc ebx - 1000F9D1: 85 C0 test eax,eax - 1000F9D3: 7D F9 jge 1000F9CE - 1000F9D5: 8B C3 mov eax,ebx - 1000F9D7: 69 C0 04 02 00 00 imul eax,eax,204h - 1000F9DD: 8D 84 30 44 01 00 lea eax,[eax+esi+00000144h] - 00 - 1000F9E4: 6A 3F push 3Fh - 1000F9E6: 89 45 F8 mov dword ptr [ebp-8],eax - 1000F9E9: 5A pop edx - 1000F9EA: 89 40 08 mov dword ptr [eax+8],eax - 1000F9ED: 89 40 04 mov dword ptr [eax+4],eax - 1000F9F0: 83 C0 08 add eax,8 - 1000F9F3: 4A dec edx - 1000F9F4: 75 F4 jne 1000F9EA - 1000F9F6: 6A 04 push 4 - 1000F9F8: 8B FB mov edi,ebx - 1000F9FA: 68 00 10 00 00 push 1000h - 1000F9FF: C1 E7 0F shl edi,0Fh - 1000FA02: 03 79 0C add edi,dword ptr [ecx+0Ch] - 1000FA05: 68 00 80 00 00 push 8000h - 1000FA0A: 57 push edi - 1000FA0B: FF 15 CC F0 01 10 call dword ptr ds:[1001F0CCh] - 1000FA11: 85 C0 test eax,eax - 1000FA13: 75 08 jne 1000FA1D - 1000FA15: 83 C8 FF or eax,0FFFFFFFFh - 1000FA18: E9 9D 00 00 00 jmp 1000FABA - 1000FA1D: 8D 97 00 70 00 00 lea edx,[edi+00007000h] - 1000FA23: 89 55 FC mov dword ptr [ebp-4],edx - 1000FA26: 3B FA cmp edi,edx - 1000FA28: 77 43 ja 1000FA6D - 1000FA2A: 8B CA mov ecx,edx - 1000FA2C: 2B CF sub ecx,edi - 1000FA2E: C1 E9 0C shr ecx,0Ch - 1000FA31: 8D 47 10 lea eax,[edi+10h] - 1000FA34: 41 inc ecx - 1000FA35: 83 48 F8 FF or dword ptr [eax-8],0FFFFFFFFh - 1000FA39: 83 88 EC 0F 00 00 or dword ptr [eax+00000FECh],0FFFFFFFFh - FF - 1000FA40: 8D 90 FC 0F 00 00 lea edx,[eax+00000FFCh] - 1000FA46: 89 10 mov dword ptr [eax],edx - 1000FA48: 8D 90 FC EF FF FF lea edx,[eax+FFFFEFFCh] - 1000FA4E: C7 40 FC F0 0F 00 mov dword ptr [eax-4],0FF0h - 00 - 1000FA55: 89 50 04 mov dword ptr [eax+4],edx - 1000FA58: C7 80 E8 0F 00 00 mov dword ptr [eax+00000FE8h],0FF0h - F0 0F 00 00 - 1000FA62: 05 00 10 00 00 add eax,1000h - 1000FA67: 49 dec ecx - 1000FA68: 75 CB jne 1000FA35 - 1000FA6A: 8B 55 FC mov edx,dword ptr [ebp-4] - 1000FA6D: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1000FA70: 05 F8 01 00 00 add eax,1F8h - 1000FA75: 8D 4F 0C lea ecx,[edi+0Ch] - 1000FA78: 89 48 04 mov dword ptr [eax+4],ecx - 1000FA7B: 89 41 08 mov dword ptr [ecx+8],eax - 1000FA7E: 8D 4A 0C lea ecx,[edx+0Ch] - 1000FA81: 89 48 08 mov dword ptr [eax+8],ecx - 1000FA84: 89 41 04 mov dword ptr [ecx+4],eax - 1000FA87: 83 64 9E 44 00 and dword ptr [esi+ebx*4+44h],0 - 1000FA8C: 33 FF xor edi,edi - 1000FA8E: 47 inc edi - 1000FA8F: 89 BC 9E C4 00 00 mov dword ptr [esi+ebx*4+000000C4h],edi - 00 - 1000FA96: 8A 46 43 mov al,byte ptr [esi+43h] - 1000FA99: 8A C8 mov cl,al - 1000FA9B: FE C1 inc cl - 1000FA9D: 84 C0 test al,al - 1000FA9F: 8B 45 08 mov eax,dword ptr [ebp+8] - 1000FAA2: 88 4E 43 mov byte ptr [esi+43h],cl - 1000FAA5: 75 03 jne 1000FAAA - 1000FAA7: 09 78 04 or dword ptr [eax+4],edi - 1000FAAA: BA 00 00 00 80 mov edx,80000000h - 1000FAAF: 8B CB mov ecx,ebx - 1000FAB1: D3 EA shr edx,cl - 1000FAB3: F7 D2 not edx - 1000FAB5: 21 50 08 and dword ptr [eax+8],edx - 1000FAB8: 8B C3 mov eax,ebx - 1000FABA: 5F pop edi - 1000FABB: 5E pop esi - 1000FABC: 5B pop ebx - 1000FABD: C9 leave - 1000FABE: C3 ret - 1000FABF: 8B FF mov edi,edi - 1000FAC1: 55 push ebp - 1000FAC2: 8B EC mov ebp,esp - 1000FAC4: 83 EC 0C sub esp,0Ch - 1000FAC7: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000FACA: 8B 41 10 mov eax,dword ptr [ecx+10h] - 1000FACD: 53 push ebx - 1000FACE: 56 push esi - 1000FACF: 8B 75 10 mov esi,dword ptr [ebp+10h] - 1000FAD2: 57 push edi - 1000FAD3: 8B 7D 0C mov edi,dword ptr [ebp+0Ch] - 1000FAD6: 8B D7 mov edx,edi - 1000FAD8: 2B 51 0C sub edx,dword ptr [ecx+0Ch] - 1000FADB: 83 C6 17 add esi,17h - 1000FADE: C1 EA 0F shr edx,0Fh - 1000FAE1: 8B CA mov ecx,edx - 1000FAE3: 69 C9 04 02 00 00 imul ecx,ecx,204h - 1000FAE9: 8D 8C 01 44 01 00 lea ecx,[ecx+eax+00000144h] - 00 - 1000FAF0: 89 4D F4 mov dword ptr [ebp-0Ch],ecx - 1000FAF3: 8B 4F FC mov ecx,dword ptr [edi-4] - 1000FAF6: 83 E6 F0 and esi,0FFFFFFF0h - 1000FAF9: 49 dec ecx - 1000FAFA: 3B F1 cmp esi,ecx - 1000FAFC: 8D 7C 39 FC lea edi,[ecx+edi-4] - 1000FB00: 8B 1F mov ebx,dword ptr [edi] - 1000FB02: 89 4D 10 mov dword ptr [ebp+10h],ecx - 1000FB05: 89 5D FC mov dword ptr [ebp-4],ebx - 1000FB08: 0F 8E 55 01 00 00 jle 1000FC63 - 1000FB0E: F6 C3 01 test bl,1 - 1000FB11: 0F 85 45 01 00 00 jne 1000FC5C - 1000FB17: 03 D9 add ebx,ecx - 1000FB19: 3B F3 cmp esi,ebx - 1000FB1B: 0F 8F 3B 01 00 00 jg 1000FC5C - 1000FB21: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1000FB24: C1 F9 04 sar ecx,4 - 1000FB27: 49 dec ecx - 1000FB28: 89 4D F8 mov dword ptr [ebp-8],ecx - 1000FB2B: 83 F9 3F cmp ecx,3Fh - 1000FB2E: 76 06 jbe 1000FB36 - 1000FB30: 6A 3F push 3Fh - 1000FB32: 59 pop ecx - 1000FB33: 89 4D F8 mov dword ptr [ebp-8],ecx - 1000FB36: 8B 5F 04 mov ebx,dword ptr [edi+4] - 1000FB39: 3B 5F 08 cmp ebx,dword ptr [edi+8] - 1000FB3C: 75 43 jne 1000FB81 - 1000FB3E: BB 00 00 00 80 mov ebx,80000000h - 1000FB43: 83 F9 20 cmp ecx,20h - 1000FB46: 73 1A jae 1000FB62 - 1000FB48: D3 EB shr ebx,cl - 1000FB4A: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 1000FB4D: 8D 4C 01 04 lea ecx,[ecx+eax+4] - 1000FB51: F7 D3 not ebx - 1000FB53: 21 5C 90 44 and dword ptr [eax+edx*4+44h],ebx - 1000FB57: FE 09 dec byte ptr [ecx] - 1000FB59: 75 26 jne 1000FB81 - 1000FB5B: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000FB5E: 21 19 and dword ptr [ecx],ebx - 1000FB60: EB 1F jmp 1000FB81 - 1000FB62: 83 C1 E0 add ecx,0FFFFFFE0h - 1000FB65: D3 EB shr ebx,cl - 1000FB67: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 1000FB6A: 8D 4C 01 04 lea ecx,[ecx+eax+4] - 1000FB6E: F7 D3 not ebx - 1000FB70: 21 9C 90 C4 00 00 and dword ptr [eax+edx*4+000000C4h],ebx - 00 - 1000FB77: FE 09 dec byte ptr [ecx] - 1000FB79: 75 06 jne 1000FB81 - 1000FB7B: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000FB7E: 21 59 04 and dword ptr [ecx+4],ebx - 1000FB81: 8B 4F 08 mov ecx,dword ptr [edi+8] - 1000FB84: 8B 5F 04 mov ebx,dword ptr [edi+4] - 1000FB87: 89 59 04 mov dword ptr [ecx+4],ebx - 1000FB8A: 8B 4F 04 mov ecx,dword ptr [edi+4] - 1000FB8D: 8B 7F 08 mov edi,dword ptr [edi+8] - 1000FB90: 89 79 08 mov dword ptr [ecx+8],edi - 1000FB93: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 1000FB96: 2B CE sub ecx,esi - 1000FB98: 01 4D FC add dword ptr [ebp-4],ecx - 1000FB9B: 83 7D FC 00 cmp dword ptr [ebp-4],0 - 1000FB9F: 0F 8E A5 00 00 00 jle 1000FC4A - 1000FBA5: 8B 7D FC mov edi,dword ptr [ebp-4] - 1000FBA8: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch] - 1000FBAB: C1 FF 04 sar edi,4 - 1000FBAE: 4F dec edi - 1000FBAF: 8D 4C 31 FC lea ecx,[ecx+esi-4] - 1000FBB3: 83 FF 3F cmp edi,3Fh - 1000FBB6: 76 03 jbe 1000FBBB - 1000FBB8: 6A 3F push 3Fh - 1000FBBA: 5F pop edi - 1000FBBB: 8B 5D F4 mov ebx,dword ptr [ebp-0Ch] - 1000FBBE: 8D 1C FB lea ebx,[ebx+edi*8] - 1000FBC1: 89 5D 10 mov dword ptr [ebp+10h],ebx - 1000FBC4: 8B 5B 04 mov ebx,dword ptr [ebx+4] - 1000FBC7: 89 59 04 mov dword ptr [ecx+4],ebx - 1000FBCA: 8B 5D 10 mov ebx,dword ptr [ebp+10h] - 1000FBCD: 89 59 08 mov dword ptr [ecx+8],ebx - 1000FBD0: 89 4B 04 mov dword ptr [ebx+4],ecx - 1000FBD3: 8B 59 04 mov ebx,dword ptr [ecx+4] - 1000FBD6: 89 4B 08 mov dword ptr [ebx+8],ecx - 1000FBD9: 8B 59 04 mov ebx,dword ptr [ecx+4] - 1000FBDC: 3B 59 08 cmp ebx,dword ptr [ecx+8] - 1000FBDF: 75 57 jne 1000FC38 - 1000FBE1: 8A 4C 07 04 mov cl,byte ptr [edi+eax+4] - 1000FBE5: 88 4D 13 mov byte ptr [ebp+13h],cl - 1000FBE8: FE C1 inc cl - 1000FBEA: 88 4C 07 04 mov byte ptr [edi+eax+4],cl - 1000FBEE: 83 FF 20 cmp edi,20h - 1000FBF1: 73 1C jae 1000FC0F - 1000FBF3: 80 7D 13 00 cmp byte ptr [ebp+13h],0 - 1000FBF7: 75 0E jne 1000FC07 - 1000FBF9: 8B CF mov ecx,edi - 1000FBFB: BB 00 00 00 80 mov ebx,80000000h - 1000FC00: D3 EB shr ebx,cl - 1000FC02: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000FC05: 09 19 or dword ptr [ecx],ebx - 1000FC07: 8D 44 90 44 lea eax,[eax+edx*4+44h] - 1000FC0B: 8B CF mov ecx,edi - 1000FC0D: EB 20 jmp 1000FC2F - 1000FC0F: 80 7D 13 00 cmp byte ptr [ebp+13h],0 - 1000FC13: 75 10 jne 1000FC25 - 1000FC15: 8D 4F E0 lea ecx,[edi-20h] - 1000FC18: BB 00 00 00 80 mov ebx,80000000h - 1000FC1D: D3 EB shr ebx,cl - 1000FC1F: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000FC22: 09 59 04 or dword ptr [ecx+4],ebx - 1000FC25: 8D 84 90 C4 00 00 lea eax,[eax+edx*4+000000C4h] - 00 - 1000FC2C: 8D 4F E0 lea ecx,[edi-20h] - 1000FC2F: BA 00 00 00 80 mov edx,80000000h - 1000FC34: D3 EA shr edx,cl - 1000FC36: 09 10 or dword ptr [eax],edx - 1000FC38: 8B 55 0C mov edx,dword ptr [ebp+0Ch] - 1000FC3B: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1000FC3E: 8D 44 32 FC lea eax,[edx+esi-4] - 1000FC42: 89 08 mov dword ptr [eax],ecx - 1000FC44: 89 4C 01 FC mov dword ptr [ecx+eax-4],ecx - 1000FC48: EB 03 jmp 1000FC4D - 1000FC4A: 8B 55 0C mov edx,dword ptr [ebp+0Ch] - 1000FC4D: 8D 46 01 lea eax,[esi+1] - 1000FC50: 89 42 FC mov dword ptr [edx-4],eax - 1000FC53: 89 44 32 F8 mov dword ptr [edx+esi-8],eax - 1000FC57: E9 3C 01 00 00 jmp 1000FD98 - 1000FC5C: 33 C0 xor eax,eax - 1000FC5E: E9 38 01 00 00 jmp 1000FD9B - 1000FC63: 0F 8D 2F 01 00 00 jge 1000FD98 - 1000FC69: 8B 5D 0C mov ebx,dword ptr [ebp+0Ch] - 1000FC6C: 29 75 10 sub dword ptr [ebp+10h],esi - 1000FC6F: 8D 4E 01 lea ecx,[esi+1] - 1000FC72: 89 4B FC mov dword ptr [ebx-4],ecx - 1000FC75: 8D 5C 33 FC lea ebx,[ebx+esi-4] - 1000FC79: 8B 75 10 mov esi,dword ptr [ebp+10h] - 1000FC7C: C1 FE 04 sar esi,4 - 1000FC7F: 4E dec esi - 1000FC80: 89 5D 0C mov dword ptr [ebp+0Ch],ebx - 1000FC83: 89 4B FC mov dword ptr [ebx-4],ecx - 1000FC86: 83 FE 3F cmp esi,3Fh - 1000FC89: 76 03 jbe 1000FC8E - 1000FC8B: 6A 3F push 3Fh - 1000FC8D: 5E pop esi - 1000FC8E: F6 45 FC 01 test byte ptr [ebp-4],1 - 1000FC92: 0F 85 80 00 00 00 jne 1000FD18 - 1000FC98: 8B 75 FC mov esi,dword ptr [ebp-4] - 1000FC9B: C1 FE 04 sar esi,4 - 1000FC9E: 4E dec esi - 1000FC9F: 83 FE 3F cmp esi,3Fh - 1000FCA2: 76 03 jbe 1000FCA7 - 1000FCA4: 6A 3F push 3Fh - 1000FCA6: 5E pop esi - 1000FCA7: 8B 4F 04 mov ecx,dword ptr [edi+4] - 1000FCAA: 3B 4F 08 cmp ecx,dword ptr [edi+8] - 1000FCAD: 75 42 jne 1000FCF1 - 1000FCAF: BB 00 00 00 80 mov ebx,80000000h - 1000FCB4: 83 FE 20 cmp esi,20h - 1000FCB7: 73 19 jae 1000FCD2 - 1000FCB9: 8B CE mov ecx,esi - 1000FCBB: D3 EB shr ebx,cl - 1000FCBD: 8D 74 06 04 lea esi,[esi+eax+4] - 1000FCC1: F7 D3 not ebx - 1000FCC3: 21 5C 90 44 and dword ptr [eax+edx*4+44h],ebx - 1000FCC7: FE 0E dec byte ptr [esi] - 1000FCC9: 75 23 jne 1000FCEE - 1000FCCB: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000FCCE: 21 19 and dword ptr [ecx],ebx - 1000FCD0: EB 1C jmp 1000FCEE - 1000FCD2: 8D 4E E0 lea ecx,[esi-20h] - 1000FCD5: D3 EB shr ebx,cl - 1000FCD7: 8D 4C 06 04 lea ecx,[esi+eax+4] - 1000FCDB: F7 D3 not ebx - 1000FCDD: 21 9C 90 C4 00 00 and dword ptr [eax+edx*4+000000C4h],ebx - 00 - 1000FCE4: FE 09 dec byte ptr [ecx] - 1000FCE6: 75 06 jne 1000FCEE - 1000FCE8: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000FCEB: 21 59 04 and dword ptr [ecx+4],ebx - 1000FCEE: 8B 5D 0C mov ebx,dword ptr [ebp+0Ch] - 1000FCF1: 8B 4F 08 mov ecx,dword ptr [edi+8] - 1000FCF4: 8B 77 04 mov esi,dword ptr [edi+4] - 1000FCF7: 89 71 04 mov dword ptr [ecx+4],esi - 1000FCFA: 8B 77 08 mov esi,dword ptr [edi+8] - 1000FCFD: 8B 4F 04 mov ecx,dword ptr [edi+4] - 1000FD00: 89 71 08 mov dword ptr [ecx+8],esi - 1000FD03: 8B 75 10 mov esi,dword ptr [ebp+10h] - 1000FD06: 03 75 FC add esi,dword ptr [ebp-4] - 1000FD09: 89 75 10 mov dword ptr [ebp+10h],esi - 1000FD0C: C1 FE 04 sar esi,4 - 1000FD0F: 4E dec esi - 1000FD10: 83 FE 3F cmp esi,3Fh - 1000FD13: 76 03 jbe 1000FD18 - 1000FD15: 6A 3F push 3Fh - 1000FD17: 5E pop esi - 1000FD18: 8B 4D F4 mov ecx,dword ptr [ebp-0Ch] - 1000FD1B: 8D 0C F1 lea ecx,[ecx+esi*8] - 1000FD1E: 8B 79 04 mov edi,dword ptr [ecx+4] - 1000FD21: 89 4B 08 mov dword ptr [ebx+8],ecx - 1000FD24: 89 7B 04 mov dword ptr [ebx+4],edi - 1000FD27: 89 59 04 mov dword ptr [ecx+4],ebx - 1000FD2A: 8B 4B 04 mov ecx,dword ptr [ebx+4] - 1000FD2D: 89 59 08 mov dword ptr [ecx+8],ebx - 1000FD30: 8B 4B 04 mov ecx,dword ptr [ebx+4] - 1000FD33: 3B 4B 08 cmp ecx,dword ptr [ebx+8] - 1000FD36: 75 57 jne 1000FD8F - 1000FD38: 8A 4C 06 04 mov cl,byte ptr [esi+eax+4] - 1000FD3C: 88 4D 0F mov byte ptr [ebp+0Fh],cl - 1000FD3F: FE C1 inc cl - 1000FD41: 88 4C 06 04 mov byte ptr [esi+eax+4],cl - 1000FD45: 83 FE 20 cmp esi,20h - 1000FD48: 73 1C jae 1000FD66 - 1000FD4A: 80 7D 0F 00 cmp byte ptr [ebp+0Fh],0 - 1000FD4E: 75 0E jne 1000FD5E - 1000FD50: 8B CE mov ecx,esi - 1000FD52: BF 00 00 00 80 mov edi,80000000h - 1000FD57: D3 EF shr edi,cl - 1000FD59: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000FD5C: 09 39 or dword ptr [ecx],edi - 1000FD5E: 8D 44 90 44 lea eax,[eax+edx*4+44h] - 1000FD62: 8B CE mov ecx,esi - 1000FD64: EB 20 jmp 1000FD86 - 1000FD66: 80 7D 0F 00 cmp byte ptr [ebp+0Fh],0 - 1000FD6A: 75 10 jne 1000FD7C - 1000FD6C: 8D 4E E0 lea ecx,[esi-20h] - 1000FD6F: BF 00 00 00 80 mov edi,80000000h - 1000FD74: D3 EF shr edi,cl - 1000FD76: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000FD79: 09 79 04 or dword ptr [ecx+4],edi - 1000FD7C: 8D 84 90 C4 00 00 lea eax,[eax+edx*4+000000C4h] - 00 - 1000FD83: 8D 4E E0 lea ecx,[esi-20h] - 1000FD86: BA 00 00 00 80 mov edx,80000000h - 1000FD8B: D3 EA shr edx,cl - 1000FD8D: 09 10 or dword ptr [eax],edx - 1000FD8F: 8B 45 10 mov eax,dword ptr [ebp+10h] - 1000FD92: 89 03 mov dword ptr [ebx],eax - 1000FD94: 89 44 18 FC mov dword ptr [eax+ebx-4],eax - 1000FD98: 33 C0 xor eax,eax - 1000FD9A: 40 inc eax - 1000FD9B: 5F pop edi - 1000FD9C: 5E pop esi - 1000FD9D: 5B pop ebx - 1000FD9E: C9 leave - 1000FD9F: C3 ret - 1000FDA0: 8B FF mov edi,edi - 1000FDA2: 55 push ebp - 1000FDA3: 8B EC mov ebp,esp - 1000FDA5: 83 EC 14 sub esp,14h - 1000FDA8: A1 00 6D 02 10 mov eax,dword ptr ds:[10026D00h] - 1000FDAD: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1000FDB0: 6B C0 14 imul eax,eax,14h - 1000FDB3: 03 05 04 6D 02 10 add eax,dword ptr ds:[10026D04h] - 1000FDB9: 83 C1 17 add ecx,17h - 1000FDBC: 83 E1 F0 and ecx,0FFFFFFF0h - 1000FDBF: 89 4D F0 mov dword ptr [ebp-10h],ecx - 1000FDC2: C1 F9 04 sar ecx,4 - 1000FDC5: 53 push ebx - 1000FDC6: 49 dec ecx - 1000FDC7: 83 F9 20 cmp ecx,20h - 1000FDCA: 56 push esi - 1000FDCB: 57 push edi - 1000FDCC: 7D 0B jge 1000FDD9 - 1000FDCE: 83 CE FF or esi,0FFFFFFFFh - 1000FDD1: D3 EE shr esi,cl - 1000FDD3: 83 4D F8 FF or dword ptr [ebp-8],0FFFFFFFFh - 1000FDD7: EB 0D jmp 1000FDE6 - 1000FDD9: 83 C1 E0 add ecx,0FFFFFFE0h - 1000FDDC: 83 CA FF or edx,0FFFFFFFFh - 1000FDDF: 33 F6 xor esi,esi - 1000FDE1: D3 EA shr edx,cl - 1000FDE3: 89 55 F8 mov dword ptr [ebp-8],edx - 1000FDE6: 8B 0D 0C 6D 02 10 mov ecx,dword ptr ds:[10026D0Ch] - 1000FDEC: 8B D9 mov ebx,ecx - 1000FDEE: EB 11 jmp 1000FE01 - 1000FDF0: 8B 53 04 mov edx,dword ptr [ebx+4] - 1000FDF3: 8B 3B mov edi,dword ptr [ebx] - 1000FDF5: 23 55 F8 and edx,dword ptr [ebp-8] - 1000FDF8: 23 FE and edi,esi - 1000FDFA: 0B D7 or edx,edi - 1000FDFC: 75 0A jne 1000FE08 - 1000FDFE: 83 C3 14 add ebx,14h - 1000FE01: 89 5D 08 mov dword ptr [ebp+8],ebx - 1000FE04: 3B D8 cmp ebx,eax - 1000FE06: 72 E8 jb 1000FDF0 - 1000FE08: 3B D8 cmp ebx,eax - 1000FE0A: 75 7F jne 1000FE8B - 1000FE0C: 8B 1D 04 6D 02 10 mov ebx,dword ptr ds:[10026D04h] - 1000FE12: EB 11 jmp 1000FE25 - 1000FE14: 8B 53 04 mov edx,dword ptr [ebx+4] - 1000FE17: 8B 3B mov edi,dword ptr [ebx] - 1000FE19: 23 55 F8 and edx,dword ptr [ebp-8] - 1000FE1C: 23 FE and edi,esi - 1000FE1E: 0B D7 or edx,edi - 1000FE20: 75 0A jne 1000FE2C - 1000FE22: 83 C3 14 add ebx,14h - 1000FE25: 89 5D 08 mov dword ptr [ebp+8],ebx - 1000FE28: 3B D9 cmp ebx,ecx - 1000FE2A: 72 E8 jb 1000FE14 - 1000FE2C: 3B D9 cmp ebx,ecx - 1000FE2E: 75 5B jne 1000FE8B - 1000FE30: EB 0C jmp 1000FE3E - 1000FE32: 83 7B 08 00 cmp dword ptr [ebx+8],0 - 1000FE36: 75 0A jne 1000FE42 - 1000FE38: 83 C3 14 add ebx,14h - 1000FE3B: 89 5D 08 mov dword ptr [ebp+8],ebx - 1000FE3E: 3B D8 cmp ebx,eax - 1000FE40: 72 F0 jb 1000FE32 - 1000FE42: 3B D8 cmp ebx,eax - 1000FE44: 75 31 jne 1000FE77 - 1000FE46: 8B 1D 04 6D 02 10 mov ebx,dword ptr ds:[10026D04h] - 1000FE4C: EB 09 jmp 1000FE57 - 1000FE4E: 83 7B 08 00 cmp dword ptr [ebx+8],0 - 1000FE52: 75 0A jne 1000FE5E - 1000FE54: 83 C3 14 add ebx,14h - 1000FE57: 89 5D 08 mov dword ptr [ebp+8],ebx - 1000FE5A: 3B D9 cmp ebx,ecx - 1000FE5C: 72 F0 jb 1000FE4E - 1000FE5E: 3B D9 cmp ebx,ecx - 1000FE60: 75 15 jne 1000FE77 - 1000FE62: E8 A0 FA FF FF call 1000F907 - 1000FE67: 8B D8 mov ebx,eax - 1000FE69: 89 5D 08 mov dword ptr [ebp+8],ebx - 1000FE6C: 85 DB test ebx,ebx - 1000FE6E: 75 07 jne 1000FE77 - 1000FE70: 33 C0 xor eax,eax - 1000FE72: E9 09 02 00 00 jmp 10010080 - 1000FE77: 53 push ebx - 1000FE78: E8 3A FB FF FF call 1000F9B7 - 1000FE7D: 59 pop ecx - 1000FE7E: 8B 4B 10 mov ecx,dword ptr [ebx+10h] - 1000FE81: 89 01 mov dword ptr [ecx],eax - 1000FE83: 8B 43 10 mov eax,dword ptr [ebx+10h] - 1000FE86: 83 38 FF cmp dword ptr [eax],0FFFFFFFFh - 1000FE89: 74 E5 je 1000FE70 - 1000FE8B: 89 1D 0C 6D 02 10 mov dword ptr ds:[10026D0Ch],ebx - 1000FE91: 8B 43 10 mov eax,dword ptr [ebx+10h] - 1000FE94: 8B 10 mov edx,dword ptr [eax] - 1000FE96: 89 55 FC mov dword ptr [ebp-4],edx - 1000FE99: 83 FA FF cmp edx,0FFFFFFFFh - 1000FE9C: 74 14 je 1000FEB2 - 1000FE9E: 8B 8C 90 C4 00 00 mov ecx,dword ptr [eax+edx*4+000000C4h] - 00 - 1000FEA5: 8B 7C 90 44 mov edi,dword ptr [eax+edx*4+44h] - 1000FEA9: 23 4D F8 and ecx,dword ptr [ebp-8] - 1000FEAC: 23 FE and edi,esi - 1000FEAE: 0B CF or ecx,edi - 1000FEB0: 75 29 jne 1000FEDB - 1000FEB2: 83 65 FC 00 and dword ptr [ebp-4],0 - 1000FEB6: 8B 90 C4 00 00 00 mov edx,dword ptr [eax+000000C4h] - 1000FEBC: 8D 48 44 lea ecx,[eax+44h] - 1000FEBF: 8B 39 mov edi,dword ptr [ecx] - 1000FEC1: 23 55 F8 and edx,dword ptr [ebp-8] - 1000FEC4: 23 FE and edi,esi - 1000FEC6: 0B D7 or edx,edi - 1000FEC8: 75 0E jne 1000FED8 - 1000FECA: FF 45 FC inc dword ptr [ebp-4] - 1000FECD: 8B 91 84 00 00 00 mov edx,dword ptr [ecx+00000084h] - 1000FED3: 83 C1 04 add ecx,4 - 1000FED6: EB E7 jmp 1000FEBF - 1000FED8: 8B 55 FC mov edx,dword ptr [ebp-4] - 1000FEDB: 8B CA mov ecx,edx - 1000FEDD: 69 C9 04 02 00 00 imul ecx,ecx,204h - 1000FEE3: 8D 8C 01 44 01 00 lea ecx,[ecx+eax+00000144h] - 00 - 1000FEEA: 89 4D F4 mov dword ptr [ebp-0Ch],ecx - 1000FEED: 8B 4C 90 44 mov ecx,dword ptr [eax+edx*4+44h] - 1000FEF1: 33 FF xor edi,edi - 1000FEF3: 23 CE and ecx,esi - 1000FEF5: 75 12 jne 1000FF09 - 1000FEF7: 8B 8C 90 C4 00 00 mov ecx,dword ptr [eax+edx*4+000000C4h] - 00 - 1000FEFE: 23 4D F8 and ecx,dword ptr [ebp-8] - 1000FF01: 6A 20 push 20h - 1000FF03: 5F pop edi - 1000FF04: EB 03 jmp 1000FF09 - 1000FF06: 03 C9 add ecx,ecx - 1000FF08: 47 inc edi - 1000FF09: 85 C9 test ecx,ecx - 1000FF0B: 7D F9 jge 1000FF06 - 1000FF0D: 8B 4D F4 mov ecx,dword ptr [ebp-0Ch] - 1000FF10: 8B 54 F9 04 mov edx,dword ptr [ecx+edi*8+4] - 1000FF14: 8B 0A mov ecx,dword ptr [edx] - 1000FF16: 2B 4D F0 sub ecx,dword ptr [ebp-10h] - 1000FF19: 8B F1 mov esi,ecx - 1000FF1B: C1 FE 04 sar esi,4 - 1000FF1E: 4E dec esi - 1000FF1F: 83 FE 3F cmp esi,3Fh - 1000FF22: 89 4D F8 mov dword ptr [ebp-8],ecx - 1000FF25: 7E 03 jle 1000FF2A - 1000FF27: 6A 3F push 3Fh - 1000FF29: 5E pop esi - 1000FF2A: 3B F7 cmp esi,edi - 1000FF2C: 0F 84 01 01 00 00 je 10010033 - 1000FF32: 8B 4A 04 mov ecx,dword ptr [edx+4] - 1000FF35: 3B 4A 08 cmp ecx,dword ptr [edx+8] - 1000FF38: 75 5C jne 1000FF96 - 1000FF3A: 83 FF 20 cmp edi,20h - 1000FF3D: BB 00 00 00 80 mov ebx,80000000h - 1000FF42: 7D 26 jge 1000FF6A - 1000FF44: 8B CF mov ecx,edi - 1000FF46: D3 EB shr ebx,cl - 1000FF48: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1000FF4B: 8D 7C 38 04 lea edi,[eax+edi+4] - 1000FF4F: F7 D3 not ebx - 1000FF51: 89 5D EC mov dword ptr [ebp-14h],ebx - 1000FF54: 23 5C 88 44 and ebx,dword ptr [eax+ecx*4+44h] - 1000FF58: 89 5C 88 44 mov dword ptr [eax+ecx*4+44h],ebx - 1000FF5C: FE 0F dec byte ptr [edi] - 1000FF5E: 75 33 jne 1000FF93 - 1000FF60: 8B 4D EC mov ecx,dword ptr [ebp-14h] - 1000FF63: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 1000FF66: 21 0B and dword ptr [ebx],ecx - 1000FF68: EB 2C jmp 1000FF96 - 1000FF6A: 8D 4F E0 lea ecx,[edi-20h] - 1000FF6D: D3 EB shr ebx,cl - 1000FF6F: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1000FF72: 8D 8C 88 C4 00 00 lea ecx,[eax+ecx*4+000000C4h] - 00 - 1000FF79: 8D 7C 38 04 lea edi,[eax+edi+4] - 1000FF7D: F7 D3 not ebx - 1000FF7F: 21 19 and dword ptr [ecx],ebx - 1000FF81: FE 0F dec byte ptr [edi] - 1000FF83: 89 5D EC mov dword ptr [ebp-14h],ebx - 1000FF86: 75 0B jne 1000FF93 - 1000FF88: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 1000FF8B: 8B 4D EC mov ecx,dword ptr [ebp-14h] - 1000FF8E: 21 4B 04 and dword ptr [ebx+4],ecx - 1000FF91: EB 03 jmp 1000FF96 - 1000FF93: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 1000FF96: 83 7D F8 00 cmp dword ptr [ebp-8],0 - 1000FF9A: 8B 4A 08 mov ecx,dword ptr [edx+8] - 1000FF9D: 8B 7A 04 mov edi,dword ptr [edx+4] - 1000FFA0: 89 79 04 mov dword ptr [ecx+4],edi - 1000FFA3: 8B 4A 04 mov ecx,dword ptr [edx+4] - 1000FFA6: 8B 7A 08 mov edi,dword ptr [edx+8] - 1000FFA9: 89 79 08 mov dword ptr [ecx+8],edi - 1000FFAC: 0F 84 8D 00 00 00 je 1001003F - 1000FFB2: 8B 4D F4 mov ecx,dword ptr [ebp-0Ch] - 1000FFB5: 8D 0C F1 lea ecx,[ecx+esi*8] - 1000FFB8: 8B 79 04 mov edi,dword ptr [ecx+4] - 1000FFBB: 89 4A 08 mov dword ptr [edx+8],ecx - 1000FFBE: 89 7A 04 mov dword ptr [edx+4],edi - 1000FFC1: 89 51 04 mov dword ptr [ecx+4],edx - 1000FFC4: 8B 4A 04 mov ecx,dword ptr [edx+4] - 1000FFC7: 89 51 08 mov dword ptr [ecx+8],edx - 1000FFCA: 8B 4A 04 mov ecx,dword ptr [edx+4] - 1000FFCD: 3B 4A 08 cmp ecx,dword ptr [edx+8] - 1000FFD0: 75 5E jne 10010030 - 1000FFD2: 8A 4C 06 04 mov cl,byte ptr [esi+eax+4] - 1000FFD6: 88 4D 0B mov byte ptr [ebp+0Bh],cl - 1000FFD9: FE C1 inc cl - 1000FFDB: 83 FE 20 cmp esi,20h - 1000FFDE: 88 4C 06 04 mov byte ptr [esi+eax+4],cl - 1000FFE2: 7D 23 jge 10010007 - 1000FFE4: 80 7D 0B 00 cmp byte ptr [ebp+0Bh],0 - 1000FFE8: 75 0B jne 1000FFF5 - 1000FFEA: BF 00 00 00 80 mov edi,80000000h - 1000FFEF: 8B CE mov ecx,esi - 1000FFF1: D3 EF shr edi,cl - 1000FFF3: 09 3B or dword ptr [ebx],edi - 1000FFF5: 8B CE mov ecx,esi - 1000FFF7: BF 00 00 00 80 mov edi,80000000h - 1000FFFC: D3 EF shr edi,cl - 1000FFFE: 8B 4D FC mov ecx,dword ptr [ebp-4] - 10010001: 09 7C 88 44 or dword ptr [eax+ecx*4+44h],edi - 10010005: EB 29 jmp 10010030 - 10010007: 80 7D 0B 00 cmp byte ptr [ebp+0Bh],0 - 1001000B: 75 0D jne 1001001A - 1001000D: 8D 4E E0 lea ecx,[esi-20h] - 10010010: BF 00 00 00 80 mov edi,80000000h - 10010015: D3 EF shr edi,cl - 10010017: 09 7B 04 or dword ptr [ebx+4],edi - 1001001A: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1001001D: 8D BC 88 C4 00 00 lea edi,[eax+ecx*4+000000C4h] - 00 - 10010024: 8D 4E E0 lea ecx,[esi-20h] - 10010027: BE 00 00 00 80 mov esi,80000000h - 1001002C: D3 EE shr esi,cl - 1001002E: 09 37 or dword ptr [edi],esi - 10010030: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 10010033: 85 C9 test ecx,ecx - 10010035: 74 0B je 10010042 - 10010037: 89 0A mov dword ptr [edx],ecx - 10010039: 89 4C 11 FC mov dword ptr [ecx+edx-4],ecx - 1001003D: EB 03 jmp 10010042 - 1001003F: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 10010042: 8B 75 F0 mov esi,dword ptr [ebp-10h] - 10010045: 03 D1 add edx,ecx - 10010047: 8D 4E 01 lea ecx,[esi+1] - 1001004A: 89 0A mov dword ptr [edx],ecx - 1001004C: 89 4C 32 FC mov dword ptr [edx+esi-4],ecx - 10010050: 8B 75 F4 mov esi,dword ptr [ebp-0Ch] - 10010053: 8B 0E mov ecx,dword ptr [esi] - 10010055: 8D 79 01 lea edi,[ecx+1] - 10010058: 89 3E mov dword ptr [esi],edi - 1001005A: 85 C9 test ecx,ecx - 1001005C: 75 1A jne 10010078 - 1001005E: 3B 1D B8 69 02 10 cmp ebx,dword ptr ds:[100269B8h] - 10010064: 75 12 jne 10010078 - 10010066: 8B 4D FC mov ecx,dword ptr [ebp-4] - 10010069: 3B 0D 14 6D 02 10 cmp ecx,dword ptr ds:[10026D14h] - 1001006F: 75 07 jne 10010078 - 10010071: 83 25 B8 69 02 10 and dword ptr ds:[100269B8h],0 - 00 - 10010078: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1001007B: 89 08 mov dword ptr [eax],ecx - 1001007D: 8D 42 04 lea eax,[edx+4] - 10010080: 5F pop edi - 10010081: 5E pop esi - 10010082: 5B pop ebx - 10010083: C9 leave - 10010084: C3 ret - 10010085: CC int 3 - 10010086: CC int 3 - 10010087: CC int 3 - 10010088: 68 F0 00 01 10 push 100100F0h - 1001008D: 64 FF 35 00 00 00 push dword ptr fs:[00000000h] - 00 - 10010094: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 10010098: 89 6C 24 10 mov dword ptr [esp+10h],ebp - 1001009C: 8D 6C 24 10 lea ebp,[esp+10h] - 100100A0: 2B E0 sub esp,eax - 100100A2: 53 push ebx - 100100A3: 56 push esi - 100100A4: 57 push edi - 100100A5: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 100100AA: 31 45 FC xor dword ptr [ebp-4],eax - 100100AD: 33 C5 xor eax,ebp - 100100AF: 50 push eax - 100100B0: 89 65 E8 mov dword ptr [ebp-18h],esp - 100100B3: FF 75 F8 push dword ptr [ebp-8] - 100100B6: 8B 45 FC mov eax,dword ptr [ebp-4] - 100100B9: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 100100C0: 89 45 F8 mov dword ptr [ebp-8],eax - 100100C3: 8D 45 F0 lea eax,[ebp-10h] - 100100C6: 64 A3 00 00 00 00 mov dword ptr fs:[00000000h],eax - 100100CC: C3 ret - 100100CD: 8B 4D F0 mov ecx,dword ptr [ebp-10h] - 100100D0: 64 89 0D 00 00 00 mov dword ptr fs:[00000000h],ecx - 00 - 100100D7: 59 pop ecx - 100100D8: 5F pop edi - 100100D9: 5F pop edi - 100100DA: 5E pop esi - 100100DB: 5B pop ebx - 100100DC: 8B E5 mov esp,ebp - 100100DE: 5D pop ebp - 100100DF: 51 push ecx - 100100E0: C3 ret - 100100E1: CC int 3 - 100100E2: CC int 3 - 100100E3: CC int 3 - 100100E4: CC int 3 - 100100E5: CC int 3 - 100100E6: CC int 3 - 100100E7: CC int 3 - 100100E8: CC int 3 - 100100E9: CC int 3 - 100100EA: CC int 3 - 100100EB: CC int 3 - 100100EC: CC int 3 - 100100ED: CC int 3 - 100100EE: CC int 3 - 100100EF: CC int 3 - 100100F0: 8B FF mov edi,edi - 100100F2: 55 push ebp - 100100F3: 8B EC mov ebp,esp - 100100F5: 83 EC 18 sub esp,18h - 100100F8: 53 push ebx - 100100F9: 8B 5D 0C mov ebx,dword ptr [ebp+0Ch] - 100100FC: 56 push esi - 100100FD: 8B 73 08 mov esi,dword ptr [ebx+8] - 10010100: 33 35 10 49 02 10 xor esi,dword ptr ds:[10024910h] - 10010106: 57 push edi - 10010107: 8B 06 mov eax,dword ptr [esi] - 10010109: C6 45 FF 00 mov byte ptr [ebp-1],0 - 1001010D: C7 45 F4 01 00 00 mov dword ptr [ebp-0Ch],1 - 00 - 10010114: 8D 7B 10 lea edi,[ebx+10h] - 10010117: 83 F8 FE cmp eax,0FFFFFFFEh - 1001011A: 74 0D je 10010129 - 1001011C: 8B 4E 04 mov ecx,dword ptr [esi+4] - 1001011F: 03 CF add ecx,edi - 10010121: 33 0C 38 xor ecx,dword ptr [eax+edi] - 10010124: E8 72 9F FF FF call 1000A09B - 10010129: 8B 4E 0C mov ecx,dword ptr [esi+0Ch] - 1001012C: 8B 46 08 mov eax,dword ptr [esi+8] - 1001012F: 03 CF add ecx,edi - 10010131: 33 0C 38 xor ecx,dword ptr [eax+edi] - 10010134: E8 62 9F FF FF call 1000A09B - 10010139: 8B 45 08 mov eax,dword ptr [ebp+8] - 1001013C: F6 40 04 66 test byte ptr [eax+4],66h - 10010140: 0F 85 16 01 00 00 jne 1001025C - 10010146: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 10010149: 8D 55 E8 lea edx,[ebp-18h] - 1001014C: 89 53 FC mov dword ptr [ebx-4],edx - 1001014F: 8B 5B 0C mov ebx,dword ptr [ebx+0Ch] - 10010152: 89 45 E8 mov dword ptr [ebp-18h],eax - 10010155: 89 4D EC mov dword ptr [ebp-14h],ecx - 10010158: 83 FB FE cmp ebx,0FFFFFFFEh - 1001015B: 74 5F je 100101BC - 1001015D: 8D 49 00 lea ecx,[ecx] - 10010160: 8D 04 5B lea eax,[ebx+ebx*2] - 10010163: 8B 4C 86 14 mov ecx,dword ptr [esi+eax*4+14h] - 10010167: 8D 44 86 10 lea eax,[esi+eax*4+10h] - 1001016B: 89 45 F0 mov dword ptr [ebp-10h],eax - 1001016E: 8B 00 mov eax,dword ptr [eax] - 10010170: 89 45 F8 mov dword ptr [ebp-8],eax - 10010173: 85 C9 test ecx,ecx - 10010175: 74 14 je 1001018B - 10010177: 8B D7 mov edx,edi - 10010179: E8 4C 31 00 00 call 100132CA - 1001017E: C6 45 FF 01 mov byte ptr [ebp-1],1 - 10010182: 85 C0 test eax,eax - 10010184: 7C 40 jl 100101C6 - 10010186: 7F 47 jg 100101CF - 10010188: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1001018B: 8B D8 mov ebx,eax - 1001018D: 83 F8 FE cmp eax,0FFFFFFFEh - 10010190: 75 CE jne 10010160 - 10010192: 80 7D FF 00 cmp byte ptr [ebp-1],0 - 10010196: 74 24 je 100101BC - 10010198: 8B 06 mov eax,dword ptr [esi] - 1001019A: 83 F8 FE cmp eax,0FFFFFFFEh - 1001019D: 74 0D je 100101AC - 1001019F: 8B 4E 04 mov ecx,dword ptr [esi+4] - 100101A2: 03 CF add ecx,edi - 100101A4: 33 0C 38 xor ecx,dword ptr [eax+edi] - 100101A7: E8 EF 9E FF FF call 1000A09B - 100101AC: 8B 4E 0C mov ecx,dword ptr [esi+0Ch] - 100101AF: 8B 56 08 mov edx,dword ptr [esi+8] - 100101B2: 03 CF add ecx,edi - 100101B4: 33 0C 3A xor ecx,dword ptr [edx+edi] - 100101B7: E8 DF 9E FF FF call 1000A09B - 100101BC: 8B 45 F4 mov eax,dword ptr [ebp-0Ch] - 100101BF: 5F pop edi - 100101C0: 5E pop esi - 100101C1: 5B pop ebx - 100101C2: 8B E5 mov esp,ebp - 100101C4: 5D pop ebp - 100101C5: C3 ret - 100101C6: C7 45 F4 00 00 00 mov dword ptr [ebp-0Ch],0 - 00 - 100101CD: EB C9 jmp 10010198 - 100101CF: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 100101D2: 81 39 63 73 6D E0 cmp dword ptr [ecx],0E06D7363h - 100101D8: 75 29 jne 10010203 - 100101DA: 83 3D 00 F9 01 10 cmp dword ptr ds:[1001F900h],0 - 00 - 100101E1: 74 20 je 10010203 - 100101E3: 68 00 F9 01 10 push 1001F900h - 100101E8: E8 13 7C 00 00 call 10017E00 - 100101ED: 83 C4 04 add esp,4 - 100101F0: 85 C0 test eax,eax - 100101F2: 74 0F je 10010203 - 100101F4: 8B 55 08 mov edx,dword ptr [ebp+8] - 100101F7: 6A 01 push 1 - 100101F9: 52 push edx - 100101FA: FF 15 00 F9 01 10 call dword ptr ds:[1001F900h] - 10010200: 83 C4 08 add esp,8 - 10010203: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch] - 10010206: E8 EF 30 00 00 call 100132FA - 1001020B: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 1001020E: 39 58 0C cmp dword ptr [eax+0Ch],ebx - 10010211: 74 12 je 10010225 - 10010213: 68 10 49 02 10 push 10024910h - 10010218: 57 push edi - 10010219: 8B D3 mov edx,ebx - 1001021B: 8B C8 mov ecx,eax - 1001021D: E8 F2 30 00 00 call 10013314 - 10010222: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 10010225: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 10010228: 89 48 0C mov dword ptr [eax+0Ch],ecx - 1001022B: 8B 06 mov eax,dword ptr [esi] - 1001022D: 83 F8 FE cmp eax,0FFFFFFFEh - 10010230: 74 0D je 1001023F - 10010232: 8B 4E 04 mov ecx,dword ptr [esi+4] - 10010235: 03 CF add ecx,edi - 10010237: 33 0C 38 xor ecx,dword ptr [eax+edi] - 1001023A: E8 5C 9E FF FF call 1000A09B - 1001023F: 8B 4E 0C mov ecx,dword ptr [esi+0Ch] - 10010242: 8B 56 08 mov edx,dword ptr [esi+8] - 10010245: 03 CF add ecx,edi - 10010247: 33 0C 3A xor ecx,dword ptr [edx+edi] - 1001024A: E8 4C 9E FF FF call 1000A09B - 1001024F: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 10010252: 8B 48 08 mov ecx,dword ptr [eax+8] - 10010255: 8B D7 mov edx,edi - 10010257: E8 85 30 00 00 call 100132E1 - 1001025C: BA FE FF FF FF mov edx,0FFFFFFFEh - 10010261: 39 53 0C cmp dword ptr [ebx+0Ch],edx - 10010264: 0F 84 52 FF FF FF je 100101BC - 1001026A: 68 10 49 02 10 push 10024910h - 1001026F: 57 push edi - 10010270: 8B CB mov ecx,ebx - 10010272: E8 9D 30 00 00 call 10013314 - 10010277: E9 1C FF FF FF jmp 10010198 - 1001027C: 8B FF mov edi,edi - 1001027E: 55 push ebp - 1001027F: 8B EC mov ebp,esp - 10010281: 81 EC 14 01 00 00 sub esp,114h - 10010287: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1001028C: 33 C5 xor eax,ebp - 1001028E: 89 45 FC mov dword ptr [ebp-4],eax - 10010291: 83 A5 F0 FE FF FF and dword ptr [ebp+FFFFFEF0h],0 - 00 - 10010298: 53 push ebx - 10010299: 56 push esi - 1001029A: 57 push edi - 1001029B: 8B 3D D4 F0 01 10 mov edi,dword ptr ds:[1001F0D4h] - 100102A1: 8D 9D F4 FE FF FF lea ebx,[ebp+FFFFFEF4h] - 100102A7: 8B C3 mov eax,ebx - 100102A9: 50 push eax - 100102AA: 68 05 01 00 00 push 105h - 100102AF: FF D7 call edi - 100102B1: 8B F0 mov esi,eax - 100102B3: 81 FE 04 01 00 00 cmp esi,104h - 100102B9: 7E 41 jle 100102FC - 100102BB: 8D 46 01 lea eax,[esi+1] - 100102BE: 6A 01 push 1 - 100102C0: 50 push eax - 100102C1: 89 85 EC FE FF FF mov dword ptr [ebp+FFFFFEECh],eax - 100102C7: E8 82 26 00 00 call 1001294E - 100102CC: 8B D8 mov ebx,eax - 100102CE: 59 pop ecx - 100102CF: 59 pop ecx - 100102D0: 85 DB test ebx,ebx - 100102D2: 75 0F jne 100102E3 - 100102D4: E8 70 ED FF FF call 1000F049 - 100102D9: C7 00 0C 00 00 00 mov dword ptr [eax],0Ch - 100102DF: 33 F6 xor esi,esi - 100102E1: EB 19 jmp 100102FC - 100102E3: C7 85 F0 FE FF FF mov dword ptr [ebp+FFFFFEF0h],1 - 01 00 00 00 - 100102ED: 85 F6 test esi,esi - 100102EF: 74 0B je 100102FC - 100102F1: 53 push ebx - 100102F2: FF B5 EC FE FF FF push dword ptr [ebp+FFFFFEECh] - 100102F8: FF D7 call edi - 100102FA: 8B F0 mov esi,eax - 100102FC: 33 FF xor edi,edi - 100102FE: 85 F6 test esi,esi - 10010300: 74 17 je 10010319 - 10010302: 80 7B 01 3A cmp byte ptr [ebx+1],3Ah - 10010306: 75 1C jne 10010324 - 10010308: 0F B6 03 movzx eax,byte ptr [ebx] - 1001030B: 50 push eax - 1001030C: E8 C2 7C 00 00 call 10017FD3 - 10010311: 8B F8 mov edi,eax - 10010313: 59 pop ecx - 10010314: 83 EF 40 sub edi,40h - 10010317: EB 0B jmp 10010324 - 10010319: E8 2B ED FF FF call 1000F049 - 1001031E: C7 00 0C 00 00 00 mov dword ptr [eax],0Ch - 10010324: 83 BD F0 FE FF FF cmp dword ptr [ebp+FFFFFEF0h],0 - 00 - 1001032B: 74 07 je 10010334 - 1001032D: 53 push ebx - 1001032E: E8 01 A0 FF FF call 1000A334 - 10010333: 59 pop ecx - 10010334: 8B 4D FC mov ecx,dword ptr [ebp-4] - 10010337: 8B C7 mov eax,edi - 10010339: 5F pop edi - 1001033A: 5E pop esi - 1001033B: 33 CD xor ecx,ebp - 1001033D: 5B pop ebx - 1001033E: E8 58 9D FF FF call 1000A09B - 10010343: C9 leave - 10010344: C3 ret - 10010345: 8B FF mov edi,edi - 10010347: 55 push ebp - 10010348: 8B EC mov ebp,esp - 1001034A: 8B 45 08 mov eax,dword ptr [ebp+8] - 1001034D: 85 C0 test eax,eax - 1001034F: 75 05 jne 10010356 - 10010351: 33 C0 xor eax,eax - 10010353: 40 inc eax - 10010354: 5D pop ebp - 10010355: C3 ret - 10010356: 04 40 add al,40h - 10010358: 88 45 08 mov byte ptr [ebp+8],al - 1001035B: 8D 45 08 lea eax,[ebp+8] - 1001035E: 50 push eax - 1001035F: C6 45 09 3A mov byte ptr [ebp+9],3Ah - 10010363: C6 45 0A 5C mov byte ptr [ebp+0Ah],5Ch - 10010367: C6 45 0B 00 mov byte ptr [ebp+0Bh],0 - 1001036B: FF 15 D8 F0 01 10 call dword ptr ds:[1001F0D8h] - 10010371: 85 C0 test eax,eax - 10010373: 74 05 je 1001037A - 10010375: 83 F8 01 cmp eax,1 - 10010378: 75 D7 jne 10010351 - 1001037A: 33 C0 xor eax,eax - 1001037C: 5D pop ebp - 1001037D: C3 ret - 1001037E: 8B FF mov edi,edi - 10010380: 55 push ebp - 10010381: 8B EC mov ebp,esp - 10010383: 56 push esi - 10010384: 8B 75 08 mov esi,dword ptr [ebp+8] - 10010387: 57 push edi - 10010388: 56 push esi - 10010389: E8 78 7D 00 00 call 10018106 - 1001038E: 59 pop ecx - 1001038F: 83 F8 FF cmp eax,0FFFFFFFFh - 10010392: 74 50 je 100103E4 - 10010394: A1 00 6C 02 10 mov eax,dword ptr ds:[10026C00h] - 10010399: 83 FE 01 cmp esi,1 - 1001039C: 75 09 jne 100103A7 - 1001039E: F6 80 84 00 00 00 test byte ptr [eax+00000084h],1 - 01 - 100103A5: 75 0B jne 100103B2 - 100103A7: 83 FE 02 cmp esi,2 - 100103AA: 75 1C jne 100103C8 - 100103AC: F6 40 44 01 test byte ptr [eax+44h],1 - 100103B0: 74 16 je 100103C8 - 100103B2: 6A 02 push 2 - 100103B4: E8 4D 7D 00 00 call 10018106 - 100103B9: 6A 01 push 1 - 100103BB: 8B F8 mov edi,eax - 100103BD: E8 44 7D 00 00 call 10018106 - 100103C2: 59 pop ecx - 100103C3: 59 pop ecx - 100103C4: 3B C7 cmp eax,edi - 100103C6: 74 1C je 100103E4 - 100103C8: 56 push esi - 100103C9: E8 38 7D 00 00 call 10018106 - 100103CE: 59 pop ecx - 100103CF: 50 push eax - 100103D0: FF 15 14 F0 01 10 call dword ptr ds:[1001F014h] - 100103D6: 85 C0 test eax,eax - 100103D8: 75 0A jne 100103E4 - 100103DA: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 100103E0: 8B F8 mov edi,eax - 100103E2: EB 02 jmp 100103E6 - 100103E4: 33 FF xor edi,edi - 100103E6: 56 push esi - 100103E7: E8 94 7C 00 00 call 10018080 - 100103EC: 8B C6 mov eax,esi - 100103EE: C1 F8 05 sar eax,5 - 100103F1: 8B 04 85 00 6C 02 mov eax,dword ptr [eax*4+10026C00h] - 10 - 100103F8: 83 E6 1F and esi,1Fh - 100103FB: C1 E6 06 shl esi,6 - 100103FE: 59 pop ecx - 100103FF: C6 44 30 04 00 mov byte ptr [eax+esi+4],0 - 10010404: 85 FF test edi,edi - 10010406: 74 0C je 10010414 - 10010408: 57 push edi - 10010409: E8 61 EC FF FF call 1000F06F - 1001040E: 59 pop ecx - 1001040F: 83 C8 FF or eax,0FFFFFFFFh - 10010412: EB 02 jmp 10010416 - 10010414: 33 C0 xor eax,eax - 10010416: 5F pop edi - 10010417: 5E pop esi - 10010418: 5D pop ebp - 10010419: C3 ret - 1001041A: 6A 10 push 10h - 1001041C: 68 38 1D 02 10 push 10021D38h - 10010421: E8 62 FC FF FF call 10010088 - 10010426: 8B 45 08 mov eax,dword ptr [ebp+8] - 10010429: 83 F8 FE cmp eax,0FFFFFFFEh - 1001042C: 75 1B jne 10010449 - 1001042E: E8 29 EC FF FF call 1000F05C - 10010433: 83 20 00 and dword ptr [eax],0 - 10010436: E8 0E EC FF FF call 1000F049 - 1001043B: C7 00 09 00 00 00 mov dword ptr [eax],9 - 10010441: 83 C8 FF or eax,0FFFFFFFFh - 10010444: E9 8E 00 00 00 jmp 100104D7 - 10010449: 33 FF xor edi,edi - 1001044B: 3B C7 cmp eax,edi - 1001044D: 7C 08 jl 10010457 - 1001044F: 3B 05 F4 6B 02 10 cmp eax,dword ptr ds:[10026BF4h] - 10010455: 72 21 jb 10010478 - 10010457: E8 00 EC FF FF call 1000F05C - 1001045C: 89 38 mov dword ptr [eax],edi - 1001045E: E8 E6 EB FF FF call 1000F049 - 10010463: C7 00 09 00 00 00 mov dword ptr [eax],9 - 10010469: 57 push edi - 1001046A: 57 push edi - 1001046B: 57 push edi - 1001046C: 57 push edi - 1001046D: 57 push edi - 1001046E: E8 6E EB FF FF call 1000EFE1 - 10010473: 83 C4 14 add esp,14h - 10010476: EB C9 jmp 10010441 - 10010478: 8B C8 mov ecx,eax - 1001047A: C1 F9 05 sar ecx,5 - 1001047D: 8D 1C 8D 00 6C 02 lea ebx,[ecx*4+10026C00h] - 10 - 10010484: 8B F0 mov esi,eax - 10010486: 83 E6 1F and esi,1Fh - 10010489: C1 E6 06 shl esi,6 - 1001048C: 8B 0B mov ecx,dword ptr [ebx] - 1001048E: 0F BE 4C 31 04 movsx ecx,byte ptr [ecx+esi+4] - 10010493: 83 E1 01 and ecx,1 - 10010496: 74 BF je 10010457 - 10010498: 50 push eax - 10010499: E8 DF 7C 00 00 call 1001817D - 1001049E: 59 pop ecx - 1001049F: 89 7D FC mov dword ptr [ebp-4],edi - 100104A2: 8B 03 mov eax,dword ptr [ebx] - 100104A4: F6 44 30 04 01 test byte ptr [eax+esi+4],1 - 100104A9: 74 0E je 100104B9 - 100104AB: FF 75 08 push dword ptr [ebp+8] - 100104AE: E8 CB FE FF FF call 1001037E - 100104B3: 59 pop ecx - 100104B4: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 100104B7: EB 0F jmp 100104C8 - 100104B9: E8 8B EB FF FF call 1000F049 - 100104BE: C7 00 09 00 00 00 mov dword ptr [eax],9 - 100104C4: 83 4D E4 FF or dword ptr [ebp-1Ch],0FFFFFFFFh - 100104C8: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 100104CF: E8 09 00 00 00 call 100104DD - 100104D4: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 100104D7: E8 F1 FB FF FF call 100100CD - 100104DC: C3 ret - 100104DD: FF 75 08 push dword ptr [ebp+8] - 100104E0: E8 38 7D 00 00 call 1001821D - 100104E5: 59 pop ecx - 100104E6: C3 ret - 100104E7: 8B FF mov edi,edi - 100104E9: 55 push ebp - 100104EA: 8B EC mov ebp,esp - 100104EC: 8B 45 08 mov eax,dword ptr [ebp+8] - 100104EF: 56 push esi - 100104F0: 33 F6 xor esi,esi - 100104F2: 3B C6 cmp eax,esi - 100104F4: 75 1D jne 10010513 - 100104F6: E8 4E EB FF FF call 1000F049 - 100104FB: 56 push esi - 100104FC: 56 push esi - 100104FD: 56 push esi - 100104FE: 56 push esi - 100104FF: 56 push esi - 10010500: C7 00 16 00 00 00 mov dword ptr [eax],16h - 10010506: E8 D6 EA FF FF call 1000EFE1 - 1001050B: 83 C4 14 add esp,14h - 1001050E: 83 C8 FF or eax,0FFFFFFFFh - 10010511: EB 03 jmp 10010516 - 10010513: 8B 40 10 mov eax,dword ptr [eax+10h] - 10010516: 5E pop esi - 10010517: 5D pop ebp - 10010518: C3 ret - 10010519: 8B FF mov edi,edi - 1001051B: 55 push ebp - 1001051C: 8B EC mov ebp,esp - 1001051E: 56 push esi - 1001051F: 8B 75 08 mov esi,dword ptr [ebp+8] - 10010522: 8B 46 0C mov eax,dword ptr [esi+0Ch] - 10010525: A8 83 test al,83h - 10010527: 74 1E je 10010547 - 10010529: A8 08 test al,8 - 1001052B: 74 1A je 10010547 - 1001052D: FF 76 08 push dword ptr [esi+8] - 10010530: E8 FF 9D FF FF call 1000A334 - 10010535: 81 66 0C F7 FB FF and dword ptr [esi+0Ch],0FFFFFBF7h - FF - 1001053C: 33 C0 xor eax,eax - 1001053E: 59 pop ecx - 1001053F: 89 06 mov dword ptr [esi],eax - 10010541: 89 46 08 mov dword ptr [esi+8],eax - 10010544: 89 46 04 mov dword ptr [esi+4],eax - 10010547: 5E pop esi - 10010548: 5D pop ebp - 10010549: C3 ret - 1001054A: 8B FF mov edi,edi - 1001054C: 55 push ebp - 1001054D: 8B EC mov ebp,esp - 1001054F: 53 push ebx - 10010550: 56 push esi - 10010551: 8B 75 08 mov esi,dword ptr [ebp+8] - 10010554: 8B 46 0C mov eax,dword ptr [esi+0Ch] - 10010557: 8B C8 mov ecx,eax - 10010559: 80 E1 03 and cl,3 - 1001055C: 33 DB xor ebx,ebx - 1001055E: 80 F9 02 cmp cl,2 - 10010561: 75 40 jne 100105A3 - 10010563: A9 08 01 00 00 test eax,108h - 10010568: 74 39 je 100105A3 - 1001056A: 8B 46 08 mov eax,dword ptr [esi+8] - 1001056D: 57 push edi - 1001056E: 8B 3E mov edi,dword ptr [esi] - 10010570: 2B F8 sub edi,eax - 10010572: 85 FF test edi,edi - 10010574: 7E 2C jle 100105A2 - 10010576: 57 push edi - 10010577: 50 push eax - 10010578: 56 push esi - 10010579: E8 69 FF FF FF call 100104E7 - 1001057E: 59 pop ecx - 1001057F: 50 push eax - 10010580: E8 35 72 00 00 call 100177BA - 10010585: 83 C4 0C add esp,0Ch - 10010588: 3B C7 cmp eax,edi - 1001058A: 75 0F jne 1001059B - 1001058C: 8B 46 0C mov eax,dword ptr [esi+0Ch] - 1001058F: 84 C0 test al,al - 10010591: 79 0F jns 100105A2 - 10010593: 83 E0 FD and eax,0FFFFFFFDh - 10010596: 89 46 0C mov dword ptr [esi+0Ch],eax - 10010599: EB 07 jmp 100105A2 - 1001059B: 83 4E 0C 20 or dword ptr [esi+0Ch],20h - 1001059F: 83 CB FF or ebx,0FFFFFFFFh - 100105A2: 5F pop edi - 100105A3: 8B 46 08 mov eax,dword ptr [esi+8] - 100105A6: 83 66 04 00 and dword ptr [esi+4],0 - 100105AA: 89 06 mov dword ptr [esi],eax - 100105AC: 5E pop esi - 100105AD: 8B C3 mov eax,ebx - 100105AF: 5B pop ebx - 100105B0: 5D pop ebp - 100105B1: C3 ret - 100105B2: 8B FF mov edi,edi - 100105B4: 55 push ebp - 100105B5: 8B EC mov ebp,esp - 100105B7: 56 push esi - 100105B8: 8B 75 08 mov esi,dword ptr [ebp+8] - 100105BB: 85 F6 test esi,esi - 100105BD: 75 09 jne 100105C8 - 100105BF: 56 push esi - 100105C0: E8 35 00 00 00 call 100105FA - 100105C5: 59 pop ecx - 100105C6: EB 2F jmp 100105F7 - 100105C8: 56 push esi - 100105C9: E8 7C FF FF FF call 1001054A - 100105CE: 59 pop ecx - 100105CF: 85 C0 test eax,eax - 100105D1: 74 05 je 100105D8 - 100105D3: 83 C8 FF or eax,0FFFFFFFFh - 100105D6: EB 1F jmp 100105F7 - 100105D8: F7 46 0C 00 40 00 test dword ptr [esi+0Ch],4000h - 00 - 100105DF: 74 14 je 100105F5 - 100105E1: 56 push esi - 100105E2: E8 00 FF FF FF call 100104E7 - 100105E7: 50 push eax - 100105E8: E8 F1 7D 00 00 call 100183DE - 100105ED: 59 pop ecx - 100105EE: F7 D8 neg eax - 100105F0: 59 pop ecx - 100105F1: 1B C0 sbb eax,eax - 100105F3: EB 02 jmp 100105F7 - 100105F5: 33 C0 xor eax,eax - 100105F7: 5E pop esi - 100105F8: 5D pop ebp - 100105F9: C3 ret - 100105FA: 6A 14 push 14h - 100105FC: 68 58 1D 02 10 push 10021D58h - 10010601: E8 82 FA FF FF call 10010088 - 10010606: 33 FF xor edi,edi - 10010608: 89 7D E4 mov dword ptr [ebp-1Ch],edi - 1001060B: 89 7D DC mov dword ptr [ebp-24h],edi - 1001060E: 6A 01 push 1 - 10010610: E8 79 EF FF FF call 1000F58E - 10010615: 59 pop ecx - 10010616: 89 7D FC mov dword ptr [ebp-4],edi - 10010619: 33 F6 xor esi,esi - 1001061B: 89 75 E0 mov dword ptr [ebp-20h],esi - 1001061E: 3B 35 40 7D 02 10 cmp esi,dword ptr ds:[10027D40h] - 10010624: 0F 8D 83 00 00 00 jge 100106AD - 1001062A: A1 24 6D 02 10 mov eax,dword ptr ds:[10026D24h] - 1001062F: 8D 04 B0 lea eax,[eax+esi*4] - 10010632: 39 38 cmp dword ptr [eax],edi - 10010634: 74 5E je 10010694 - 10010636: 8B 00 mov eax,dword ptr [eax] - 10010638: F6 40 0C 83 test byte ptr [eax+0Ch],83h - 1001063C: 74 56 je 10010694 - 1001063E: 50 push eax - 1001063F: 56 push esi - 10010640: E8 E0 A5 FF FF call 1000AC25 - 10010645: 59 pop ecx - 10010646: 59 pop ecx - 10010647: 33 D2 xor edx,edx - 10010649: 42 inc edx - 1001064A: 89 55 FC mov dword ptr [ebp-4],edx - 1001064D: A1 24 6D 02 10 mov eax,dword ptr ds:[10026D24h] - 10010652: 8B 04 B0 mov eax,dword ptr [eax+esi*4] - 10010655: 8B 48 0C mov ecx,dword ptr [eax+0Ch] - 10010658: F6 C1 83 test cl,83h - 1001065B: 74 2F je 1001068C - 1001065D: 39 55 08 cmp dword ptr [ebp+8],edx - 10010660: 75 11 jne 10010673 - 10010662: 50 push eax - 10010663: E8 4A FF FF FF call 100105B2 - 10010668: 59 pop ecx - 10010669: 83 F8 FF cmp eax,0FFFFFFFFh - 1001066C: 74 1E je 1001068C - 1001066E: FF 45 E4 inc dword ptr [ebp-1Ch] - 10010671: EB 19 jmp 1001068C - 10010673: 39 7D 08 cmp dword ptr [ebp+8],edi - 10010676: 75 14 jne 1001068C - 10010678: F6 C1 02 test cl,2 - 1001067B: 74 0F je 1001068C - 1001067D: 50 push eax - 1001067E: E8 2F FF FF FF call 100105B2 - 10010683: 59 pop ecx - 10010684: 83 F8 FF cmp eax,0FFFFFFFFh - 10010687: 75 03 jne 1001068C - 10010689: 09 45 DC or dword ptr [ebp-24h],eax - 1001068C: 89 7D FC mov dword ptr [ebp-4],edi - 1001068F: E8 08 00 00 00 call 1001069C - 10010694: 46 inc esi - 10010695: EB 84 jmp 1001061B - 10010697: 33 FF xor edi,edi - 10010699: 8B 75 E0 mov esi,dword ptr [ebp-20h] - 1001069C: A1 24 6D 02 10 mov eax,dword ptr ds:[10026D24h] - 100106A1: FF 34 B0 push dword ptr [eax+esi*4] - 100106A4: 56 push esi - 100106A5: E8 E9 A5 FF FF call 1000AC93 - 100106AA: 59 pop ecx - 100106AB: 59 pop ecx - 100106AC: C3 ret - 100106AD: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 100106B4: E8 12 00 00 00 call 100106CB - 100106B9: 83 7D 08 01 cmp dword ptr [ebp+8],1 - 100106BD: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 100106C0: 74 03 je 100106C5 - 100106C2: 8B 45 DC mov eax,dword ptr [ebp-24h] - 100106C5: E8 03 FA FF FF call 100100CD - 100106CA: C3 ret - 100106CB: 6A 01 push 1 - 100106CD: E8 E2 ED FF FF call 1000F4B4 - 100106D2: 59 pop ecx - 100106D3: C3 ret - 100106D4: 6A 01 push 1 - 100106D6: E8 1F FF FF FF call 100105FA - 100106DB: 59 pop ecx - 100106DC: C3 ret - 100106DD: 8B FF mov edi,edi - 100106DF: 55 push ebp - 100106E0: 8B EC mov ebp,esp - 100106E2: 8B 45 08 mov eax,dword ptr [ebp+8] - 100106E5: 66 8B 08 mov cx,word ptr [eax] - 100106E8: 40 inc eax - 100106E9: 40 inc eax - 100106EA: 66 85 C9 test cx,cx - 100106ED: 75 F6 jne 100106E5 - 100106EF: 2B 45 08 sub eax,dword ptr [ebp+8] - 100106F2: D1 F8 sar eax,1 - 100106F4: 48 dec eax - 100106F5: 5D pop ebp - 100106F6: C3 ret - 100106F7: 8B FF mov edi,edi - 100106F9: 55 push ebp - 100106FA: 8B EC mov ebp,esp - 100106FC: 8B 06 mov eax,dword ptr [esi] - 100106FE: 39 45 08 cmp dword ptr [ebp+8],eax - 10010701: 75 49 jne 1001074C - 10010703: 8B 0F mov ecx,dword ptr [edi] - 10010705: 6A 04 push 4 - 10010707: 50 push eax - 10010708: 3B 4D 0C cmp ecx,dword ptr [ebp+0Ch] - 1001070B: 75 2E jne 1001073B - 1001070D: E8 3C 22 00 00 call 1001294E - 10010712: 59 pop ecx - 10010713: 59 pop ecx - 10010714: 89 07 mov dword ptr [edi],eax - 10010716: 85 C0 test eax,eax - 10010718: 75 04 jne 1001071E - 1001071A: 33 C0 xor eax,eax - 1001071C: 5D pop ebp - 1001071D: C3 ret - 1001071E: 8B 45 10 mov eax,dword ptr [ebp+10h] - 10010721: C7 00 01 00 00 00 mov dword ptr [eax],1 - 10010727: 8B 06 mov eax,dword ptr [esi] - 10010729: 03 C0 add eax,eax - 1001072B: 50 push eax - 1001072C: FF 75 0C push dword ptr [ebp+0Ch] - 1001072F: FF 37 push dword ptr [edi] - 10010731: E8 1A 92 FF FF call 10009950 - 10010736: 83 C4 0C add esp,0Ch - 10010739: EB 0F jmp 1001074A - 1001073B: 51 push ecx - 1001073C: E8 A7 22 00 00 call 100129E8 - 10010741: 83 C4 0C add esp,0Ch - 10010744: 85 C0 test eax,eax - 10010746: 74 D2 je 1001071A - 10010748: 89 07 mov dword ptr [edi],eax - 1001074A: D1 26 shl dword ptr [esi],1 - 1001074C: 33 C0 xor eax,eax - 1001074E: 40 inc eax - 1001074F: 5D pop ebp - 10010750: C3 ret - 10010751: 8B FF mov edi,edi - 10010753: 55 push ebp - 10010754: 8B EC mov ebp,esp - 10010756: F7 45 08 00 FF 00 test dword ptr [ebp+8],0FF00h - 00 - 1001075D: 56 push esi - 1001075E: 75 1A jne 1001077A - 10010760: 0F B7 75 08 movzx esi,word ptr [ebp+8] - 10010764: 8B C6 mov eax,esi - 10010766: 25 FF 00 00 00 and eax,0FFh - 1001076B: 50 push eax - 1001076C: E8 C4 66 00 00 call 10016E35 - 10010771: 59 pop ecx - 10010772: 85 C0 test eax,eax - 10010774: 74 04 je 1001077A - 10010776: 8B C6 mov eax,esi - 10010778: EB 0A jmp 10010784 - 1001077A: 0F B7 45 08 movzx eax,word ptr [ebp+8] - 1001077E: 83 E0 DF and eax,0FFFFFFDFh - 10010781: 83 E8 07 sub eax,7 - 10010784: 5E pop esi - 10010785: 5D pop ebp - 10010786: C3 ret - 10010787: 8B FF mov edi,edi - 10010789: 55 push ebp - 1001078A: 8B EC mov ebp,esp - 1001078C: B8 FF FF 00 00 mov eax,0FFFFh - 10010791: 66 3B 45 08 cmp ax,word ptr [ebp+8] - 10010795: 74 06 je 1001079D - 10010797: 5D pop ebp - 10010798: E9 22 7D 00 00 jmp 100184BF - 1001079D: 5D pop ebp - 1001079E: C3 ret - 1001079F: 8B FF mov edi,edi - 100107A1: 55 push ebp - 100107A2: 8B EC mov ebp,esp - 100107A4: 57 push edi - 100107A5: FF 75 08 push dword ptr [ebp+8] - 100107A8: FF 06 inc dword ptr [esi] - 100107AA: E8 3D 1C 00 00 call 100123EC - 100107AF: 0F B7 F8 movzx edi,ax - 100107B2: B8 FF FF 00 00 mov eax,0FFFFh - 100107B7: 59 pop ecx - 100107B8: 66 3B F8 cmp di,ax - 100107BB: 74 0E je 100107CB - 100107BD: 6A 08 push 8 - 100107BF: 57 push edi - 100107C0: E8 3E 7F 00 00 call 10018703 - 100107C5: 59 pop ecx - 100107C6: 59 pop ecx - 100107C7: 85 C0 test eax,eax - 100107C9: 75 DA jne 100107A5 - 100107CB: 66 8B C7 mov ax,di - 100107CE: 5F pop edi - 100107CF: 5D pop ebp - 100107D0: C3 ret - 100107D1: 8B FF mov edi,edi - 100107D3: 55 push ebp - 100107D4: 8B EC mov ebp,esp - 100107D6: 81 EC 40 03 00 00 sub esp,340h - 100107DC: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 100107E1: 33 C5 xor eax,ebp - 100107E3: 89 45 FC mov dword ptr [ebp-4],eax - 100107E6: 8B 4D 14 mov ecx,dword ptr [ebp+14h] - 100107E9: 8B 45 08 mov eax,dword ptr [ebp+8] - 100107EC: 56 push esi - 100107ED: 33 F6 xor esi,esi - 100107EF: 57 push edi - 100107F0: 8B 7D 0C mov edi,dword ptr [ebp+0Ch] - 100107F3: 89 8D DC FC FF FF mov dword ptr [ebp+FFFFFCDCh],ecx - 100107F9: 8D 8D 40 FD FF FF lea ecx,[ebp+FFFFFD40h] - 100107FF: 89 85 24 FD FF FF mov dword ptr [ebp+FFFFFD24h],eax - 10010805: 89 8D 1C FD FF FF mov dword ptr [ebp+FFFFFD1Ch],ecx - 1001080B: C7 85 EC FC FF FF mov dword ptr [ebp+FFFFFCECh],15Eh - 5E 01 00 00 - 10010815: 89 B5 F0 FC FF FF mov dword ptr [ebp+FFFFFCF0h],esi - 1001081B: 89 B5 F4 FC FF FF mov dword ptr [ebp+FFFFFCF4h],esi - 10010821: 89 B5 D8 FC FF FF mov dword ptr [ebp+FFFFFCD8h],esi - 10010827: 89 B5 34 FD FF FF mov dword ptr [ebp+FFFFFD34h],esi - 1001082D: 3B FE cmp edi,esi - 1001082F: 75 20 jne 10010851 - 10010831: E8 13 E8 FF FF call 1000F049 - 10010836: 56 push esi - 10010837: 56 push esi - 10010838: 56 push esi - 10010839: 56 push esi - 1001083A: 56 push esi - 1001083B: C7 00 16 00 00 00 mov dword ptr [eax],16h - 10010841: E8 9B E7 FF FF call 1000EFE1 - 10010846: 83 C4 14 add esp,14h - 10010849: 83 C8 FF or eax,0FFFFFFFFh - 1001084C: E9 73 10 00 00 jmp 100118C4 - 10010851: 3B C6 cmp eax,esi - 10010853: 74 DC je 10010831 - 10010855: FF 75 10 push dword ptr [ebp+10h] - 10010858: 8D 8D C4 FC FF FF lea ecx,[ebp+FFFFFCC4h] - 1001085E: E8 99 9E FF FF call 1000A6FC - 10010863: 0F B7 07 movzx eax,word ptr [edi] - 10010866: C6 85 23 FD FF FF mov byte ptr [ebp+FFFFFD23h],0 - 00 - 1001086D: 89 B5 38 FD FF FF mov dword ptr [ebp+FFFFFD38h],esi - 10010873: 89 B5 F8 FC FF FF mov dword ptr [ebp+FFFFFCF8h],esi - 10010879: 66 3B C6 cmp ax,si - 1001087C: 0F 84 29 10 00 00 je 100118AB - 10010882: 53 push ebx - 10010883: 6A 08 push 8 - 10010885: 50 push eax - 10010886: 33 F6 xor esi,esi - 10010888: E8 76 7E 00 00 call 10018703 - 1001088D: 59 pop ecx - 1001088E: 59 pop ecx - 1001088F: 85 C0 test eax,eax - 10010891: 74 41 je 100108D4 - 10010893: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 10010899: FF 8D 38 FD FF FF dec dword ptr [ebp+FFFFFD38h] - 1001089F: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 100108A5: 8D B5 38 FD FF FF lea esi,[ebp+FFFFFD38h] - 100108AB: E8 EF FE FF FF call 1001079F - 100108B0: 0F B7 C0 movzx eax,ax - 100108B3: 59 pop ecx - 100108B4: 50 push eax - 100108B5: E8 CD FE FF FF call 10010787 - 100108BA: 59 pop ecx - 100108BB: 59 pop ecx - 100108BC: 47 inc edi - 100108BD: 47 inc edi - 100108BE: 0F B7 07 movzx eax,word ptr [edi] - 100108C1: 6A 08 push 8 - 100108C3: 50 push eax - 100108C4: E8 3A 7E 00 00 call 10018703 - 100108C9: 59 pop ecx - 100108CA: 59 pop ecx - 100108CB: 85 C0 test eax,eax - 100108CD: 75 ED jne 100108BC - 100108CF: E9 4A 0F 00 00 jmp 1001181E - 100108D4: 0F B7 07 movzx eax,word ptr [edi] - 100108D7: 6A 25 push 25h - 100108D9: 59 pop ecx - 100108DA: 8B D1 mov edx,ecx - 100108DC: 66 3B D0 cmp dx,ax - 100108DF: 0F 85 DA 0E 00 00 jne 100117BF - 100108E5: 66 3B 57 02 cmp dx,word ptr [edi+2] - 100108E9: 0F 84 D0 0E 00 00 je 100117BF - 100108EF: 89 B5 E8 FC FF FF mov dword ptr [ebp+FFFFFCE8h],esi - 100108F5: 89 B5 C0 FC FF FF mov dword ptr [ebp+FFFFFCC0h],esi - 100108FB: 89 B5 18 FD FF FF mov dword ptr [ebp+FFFFFD18h],esi - 10010901: 89 B5 0C FD FF FF mov dword ptr [ebp+FFFFFD0Ch],esi - 10010907: 89 B5 2C FD FF FF mov dword ptr [ebp+FFFFFD2Ch],esi - 1001090D: 89 B5 E4 FC FF FF mov dword ptr [ebp+FFFFFCE4h],esi - 10010913: C6 85 13 FD FF FF mov byte ptr [ebp+FFFFFD13h],0 - 00 - 1001091A: C6 85 21 FD FF FF mov byte ptr [ebp+FFFFFD21h],0 - 00 - 10010921: C6 85 2B FD FF FF mov byte ptr [ebp+FFFFFD2Bh],0 - 00 - 10010928: C6 85 3F FD FF FF mov byte ptr [ebp+FFFFFD3Fh],0 - 00 - 1001092F: C6 85 22 FD FF FF mov byte ptr [ebp+FFFFFD22h],0 - 00 - 10010936: C6 85 33 FD FF FF mov byte ptr [ebp+FFFFFD33h],0 - 00 - 1001093D: C6 85 2A FD FF FF mov byte ptr [ebp+FFFFFD2Ah],1 - 01 - 10010944: 33 F6 xor esi,esi - 10010946: 47 inc edi - 10010947: 47 inc edi - 10010948: 0F B7 1F movzx ebx,word ptr [edi] - 1001094B: F7 C3 00 FF 00 00 test ebx,0FF00h - 10010951: 75 2C jne 1001097F - 10010953: 0F B6 C3 movzx eax,bl - 10010956: 50 push eax - 10010957: E8 D9 64 00 00 call 10016E35 - 1001095C: 59 pop ecx - 1001095D: 85 C0 test eax,eax - 1001095F: 74 1E je 1001097F - 10010961: 8B 85 2C FD FF FF mov eax,dword ptr [ebp+FFFFFD2Ch] - 10010967: FF 85 0C FD FF FF inc dword ptr [ebp+FFFFFD0Ch] - 1001096D: 6B C0 0A imul eax,eax,0Ah - 10010970: 8D 44 18 D0 lea eax,[eax+ebx-30h] - 10010974: 89 85 2C FD FF FF mov dword ptr [ebp+FFFFFD2Ch],eax - 1001097A: E9 D0 00 00 00 jmp 10010A4F - 1001097F: 83 FB 4E cmp ebx,4Eh - 10010982: 0F 8F 8D 00 00 00 jg 10010A15 - 10010988: 0F 84 C1 00 00 00 je 10010A4F - 1001098E: 83 FB 2A cmp ebx,2Ah - 10010991: 74 7A je 10010A0D - 10010993: 83 FB 46 cmp ebx,46h - 10010996: 0F 84 B3 00 00 00 je 10010A4F - 1001099C: 83 FB 49 cmp ebx,49h - 1001099F: 74 10 je 100109B1 - 100109A1: 83 FB 4C cmp ebx,4Ch - 100109A4: 75 7E jne 10010A24 - 100109A6: FE 85 2A FD FF FF inc byte ptr [ebp+FFFFFD2Ah] - 100109AC: E9 9E 00 00 00 jmp 10010A4F - 100109B1: 0F B7 4F 02 movzx ecx,word ptr [edi+2] - 100109B5: 66 83 F9 36 cmp cx,36h - 100109B9: 75 1F jne 100109DA - 100109BB: 8D 47 04 lea eax,[edi+4] - 100109BE: 66 83 38 34 cmp word ptr [eax],34h - 100109C2: 75 16 jne 100109DA - 100109C4: FF 85 E4 FC FF FF inc dword ptr [ebp+FFFFFCE4h] - 100109CA: 8B F8 mov edi,eax - 100109CC: 89 B5 04 FD FF FF mov dword ptr [ebp+FFFFFD04h],esi - 100109D2: 89 B5 08 FD FF FF mov dword ptr [ebp+FFFFFD08h],esi - 100109D8: EB 75 jmp 10010A4F - 100109DA: 66 83 F9 33 cmp cx,33h - 100109DE: 75 0D jne 100109ED - 100109E0: 8D 47 04 lea eax,[edi+4] - 100109E3: 66 83 38 32 cmp word ptr [eax],32h - 100109E7: 75 04 jne 100109ED - 100109E9: 8B F8 mov edi,eax - 100109EB: EB 62 jmp 10010A4F - 100109ED: 66 83 F9 64 cmp cx,64h - 100109F1: 74 5C je 10010A4F - 100109F3: 66 83 F9 69 cmp cx,69h - 100109F7: 74 56 je 10010A4F - 100109F9: 66 83 F9 6F cmp cx,6Fh - 100109FD: 74 50 je 10010A4F - 100109FF: 66 83 F9 78 cmp cx,78h - 10010A03: 74 4A je 10010A4F - 10010A05: 66 83 F9 58 cmp cx,58h - 10010A09: 75 19 jne 10010A24 - 10010A0B: EB 42 jmp 10010A4F - 10010A0D: FE 85 2B FD FF FF inc byte ptr [ebp+FFFFFD2Bh] - 10010A13: EB 3A jmp 10010A4F - 10010A15: 83 FB 68 cmp ebx,68h - 10010A18: 74 29 je 10010A43 - 10010A1A: 83 FB 6C cmp ebx,6Ch - 10010A1D: 74 0D je 10010A2C - 10010A1F: 83 FB 77 cmp ebx,77h - 10010A22: 74 17 je 10010A3B - 10010A24: FE 85 3F FD FF FF inc byte ptr [ebp+FFFFFD3Fh] - 10010A2A: EB 23 jmp 10010A4F - 10010A2C: 8D 47 02 lea eax,[edi+2] - 10010A2F: 66 83 38 6C cmp word ptr [eax],6Ch - 10010A33: 74 8F je 100109C4 - 10010A35: FE 85 2A FD FF FF inc byte ptr [ebp+FFFFFD2Ah] - 10010A3B: FE 85 33 FD FF FF inc byte ptr [ebp+FFFFFD33h] - 10010A41: EB 0C jmp 10010A4F - 10010A43: FE 8D 2A FD FF FF dec byte ptr [ebp+FFFFFD2Ah] - 10010A49: FE 8D 33 FD FF FF dec byte ptr [ebp+FFFFFD33h] - 10010A4F: 80 BD 3F FD FF FF cmp byte ptr [ebp+FFFFFD3Fh],0 - 00 - 10010A56: 0F 84 EA FE FF FF je 10010946 - 10010A5C: 80 BD 2B FD FF FF cmp byte ptr [ebp+FFFFFD2Bh],0 - 00 - 10010A63: 89 BD 00 FD FF FF mov dword ptr [ebp+FFFFFD00h],edi - 10010A69: 75 17 jne 10010A82 - 10010A6B: 8B 85 DC FC FF FF mov eax,dword ptr [ebp+FFFFFCDCh] - 10010A71: 8B 30 mov esi,dword ptr [eax] - 10010A73: 89 85 D4 FC FF FF mov dword ptr [ebp+FFFFFCD4h],eax - 10010A79: 83 C0 04 add eax,4 - 10010A7C: 89 85 DC FC FF FF mov dword ptr [ebp+FFFFFCDCh],eax - 10010A82: 80 BD 33 FD FF FF cmp byte ptr [ebp+FFFFFD33h],0 - 00 - 10010A89: 89 B5 FC FC FF FF mov dword ptr [ebp+FFFFFCFCh],esi - 10010A8F: C6 85 3F FD FF FF mov byte ptr [ebp+FFFFFD3Fh],0 - 00 - 10010A96: 75 1D jne 10010AB5 - 10010A98: 0F B7 07 movzx eax,word ptr [edi] - 10010A9B: 66 83 F8 53 cmp ax,53h - 10010A9F: 74 0D je 10010AAE - 10010AA1: C6 85 33 FD FF FF mov byte ptr [ebp+FFFFFD33h],1 - 01 - 10010AA8: 66 83 F8 43 cmp ax,43h - 10010AAC: 75 07 jne 10010AB5 - 10010AAE: C6 85 33 FD FF FF mov byte ptr [ebp+FFFFFD33h],0FFh - FF - 10010AB5: 0F B7 1F movzx ebx,word ptr [edi] - 10010AB8: 83 CB 20 or ebx,20h - 10010ABB: 89 9D 14 FD FF FF mov dword ptr [ebp+FFFFFD14h],ebx - 10010AC1: 83 FB 6E cmp ebx,6Eh - 10010AC4: 74 52 je 10010B18 - 10010AC6: 83 FB 63 cmp ebx,63h - 10010AC9: 74 18 je 10010AE3 - 10010ACB: 83 FB 7B cmp ebx,7Bh - 10010ACE: 74 13 je 10010AE3 - 10010AD0: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 10010AD6: 8D B5 38 FD FF FF lea esi,[ebp+FFFFFD38h] - 10010ADC: E8 BE FC FF FF call 1001079F - 10010AE1: EB 11 jmp 10010AF4 - 10010AE3: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 10010AE9: FF 85 38 FD FF FF inc dword ptr [ebp+FFFFFD38h] - 10010AEF: E8 F8 18 00 00 call 100123EC - 10010AF4: 0F B7 C0 movzx eax,ax - 10010AF7: 59 pop ecx - 10010AF8: B9 FF FF 00 00 mov ecx,0FFFFh - 10010AFD: 89 85 34 FD FF FF mov dword ptr [ebp+FFFFFD34h],eax - 10010B03: 66 3B C8 cmp cx,ax - 10010B06: 0F 84 3C 0D 00 00 je 10011848 - 10010B0C: 8B B5 FC FC FF FF mov esi,dword ptr [ebp+FFFFFCFCh] - 10010B12: 8B BD 00 FD FF FF mov edi,dword ptr [ebp+FFFFFD00h] - 10010B18: 8B 8D 0C FD FF FF mov ecx,dword ptr [ebp+FFFFFD0Ch] - 10010B1E: 85 C9 test ecx,ecx - 10010B20: 74 0D je 10010B2F - 10010B22: 83 BD 2C FD FF FF cmp dword ptr [ebp+FFFFFD2Ch],0 - 00 - 10010B29: 0F 84 06 0D 00 00 je 10011835 - 10010B2F: 83 FB 6F cmp ebx,6Fh - 10010B32: 0F 8F 1B 06 00 00 jg 10011153 - 10010B38: 0F 84 71 09 00 00 je 100114AF - 10010B3E: 83 FB 63 cmp ebx,63h - 10010B41: 0F 84 09 05 00 00 je 10011050 - 10010B47: 6A 64 push 64h - 10010B49: 58 pop eax - 10010B4A: 3B D8 cmp ebx,eax - 10010B4C: 0F 84 5D 09 00 00 je 100114AF - 10010B52: 0F 8E 25 06 00 00 jle 1001117D - 10010B58: 83 FB 67 cmp ebx,67h - 10010B5B: 7E 4A jle 10010BA7 - 10010B5D: 83 FB 69 cmp ebx,69h - 10010B60: 74 21 je 10010B83 - 10010B62: 83 FB 6E cmp ebx,6Eh - 10010B65: 0F 85 12 06 00 00 jne 1001117D - 10010B6B: 80 BD 2B FD FF FF cmp byte ptr [ebp+FFFFFD2Bh],0 - 00 - 10010B72: 8B BD 38 FD FF FF mov edi,dword ptr [ebp+FFFFFD38h] - 10010B78: 0F 84 FF 0B 00 00 je 1001177D - 10010B7E: E9 26 0C 00 00 jmp 100117A9 - 10010B83: 89 85 14 FD FF FF mov dword ptr [ebp+FFFFFD14h],eax - 10010B89: 8B 9D 34 FD FF FF mov ebx,dword ptr [ebp+FFFFFD34h] - 10010B8F: 6A 2D push 2Dh - 10010B91: 58 pop eax - 10010B92: 66 3B C3 cmp ax,bx - 10010B95: 0F 85 4C 07 00 00 jne 100112E7 - 10010B9B: C6 85 21 FD FF FF mov byte ptr [ebp+FFFFFD21h],1 - 01 - 10010BA2: E9 48 07 00 00 jmp 100112EF - 10010BA7: 6A 2D push 2Dh - 10010BA9: 58 pop eax - 10010BAA: 33 DB xor ebx,ebx - 10010BAC: 66 3B 85 34 FD FF cmp ax,word ptr [ebp+FFFFFD34h] - FF - 10010BB3: 75 0C jne 10010BC1 - 10010BB5: 8B 8D 1C FD FF FF mov ecx,dword ptr [ebp+FFFFFD1Ch] - 10010BBB: 66 89 01 mov word ptr [ecx],ax - 10010BBE: 43 inc ebx - 10010BBF: EB 0C jmp 10010BCD - 10010BC1: 6A 2B push 2Bh - 10010BC3: 58 pop eax - 10010BC4: 66 3B 85 34 FD FF cmp ax,word ptr [ebp+FFFFFD34h] - FF - 10010BCB: 75 21 jne 10010BEE - 10010BCD: FF 8D 2C FD FF FF dec dword ptr [ebp+FFFFFD2Ch] - 10010BD3: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 10010BD9: FF 85 38 FD FF FF inc dword ptr [ebp+FFFFFD38h] - 10010BDF: E8 08 18 00 00 call 100123EC - 10010BE4: 0F B7 C0 movzx eax,ax - 10010BE7: 59 pop ecx - 10010BE8: 89 85 34 FD FF FF mov dword ptr [ebp+FFFFFD34h],eax - 10010BEE: 83 BD 0C FD FF FF cmp dword ptr [ebp+FFFFFD0Ch],0 - 00 - 10010BF5: 75 07 jne 10010BFE - 10010BF7: 83 8D 2C FD FF FF or dword ptr [ebp+FFFFFD2Ch],0FFFFFFFFh - FF - 10010BFE: F7 85 34 FD FF FF test dword ptr [ebp+FFFFFD34h],0FF00h - 00 FF 00 00 - 10010C08: 0F 85 8C 00 00 00 jne 10010C9A - 10010C0E: 0F B6 85 34 FD FF movzx eax,byte ptr [ebp+FFFFFD34h] - FF - 10010C15: 50 push eax - 10010C16: E8 1A 62 00 00 call 10016E35 - 10010C1B: 59 pop ecx - 10010C1C: 85 C0 test eax,eax - 10010C1E: 74 7A je 10010C9A - 10010C20: 8B 85 2C FD FF FF mov eax,dword ptr [ebp+FFFFFD2Ch] - 10010C26: FF 8D 2C FD FF FF dec dword ptr [ebp+FFFFFD2Ch] - 10010C2C: 85 C0 test eax,eax - 10010C2E: 74 6A je 10010C9A - 10010C30: 66 0F BE 85 34 FD movsx ax,byte ptr [ebp+FFFFFD34h] - FF FF - 10010C38: 8B 8D 1C FD FF FF mov ecx,dword ptr [ebp+FFFFFD1Ch] - 10010C3E: FF 85 18 FD FF FF inc dword ptr [ebp+FFFFFD18h] - 10010C44: 66 89 04 59 mov word ptr [ecx+ebx*2],ax - 10010C48: 8D 85 F0 FC FF FF lea eax,[ebp+FFFFFCF0h] - 10010C4E: 50 push eax - 10010C4F: 8D 85 40 FD FF FF lea eax,[ebp+FFFFFD40h] - 10010C55: 50 push eax - 10010C56: 43 inc ebx - 10010C57: 53 push ebx - 10010C58: 8D BD 1C FD FF FF lea edi,[ebp+FFFFFD1Ch] - 10010C5E: 8D B5 EC FC FF FF lea esi,[ebp+FFFFFCECh] - 10010C64: E8 8E FA FF FF call 100106F7 - 10010C69: 83 C4 0C add esp,0Ch - 10010C6C: 85 C0 test eax,eax - 10010C6E: 0F 84 D4 0B 00 00 je 10011848 - 10010C74: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 10010C7A: FF 85 38 FD FF FF inc dword ptr [ebp+FFFFFD38h] - 10010C80: E8 67 17 00 00 call 100123EC - 10010C85: 0F B7 C0 movzx eax,ax - 10010C88: 59 pop ecx - 10010C89: 89 85 34 FD FF FF mov dword ptr [ebp+FFFFFD34h],eax - 10010C8F: A9 00 FF 00 00 test eax,0FF00h - 10010C94: 0F 84 74 FF FF FF je 10010C0E - 10010C9A: 8D 85 C4 FC FF FF lea eax,[ebp+FFFFFCC4h] - 10010CA0: 50 push eax - 10010CA1: 8B 85 C4 FC FF FF mov eax,dword ptr [ebp+FFFFFCC4h] - 10010CA7: C7 85 E0 FC FF FF mov dword ptr [ebp+FFFFFCE0h],2Eh - 2E 00 00 00 - 10010CB1: FF B0 AC 00 00 00 push dword ptr [eax+000000ACh] - 10010CB7: 8B 80 BC 00 00 00 mov eax,dword ptr [eax+000000BCh] - 10010CBD: FF 30 push dword ptr [eax] - 10010CBF: 8D 85 E0 FC FF FF lea eax,[ebp+FFFFFCE0h] - 10010CC5: 50 push eax - 10010CC6: E8 15 6E 00 00 call 10017AE0 - 10010CCB: 0F B7 85 E0 FC FF movzx eax,word ptr [ebp+FFFFFCE0h] - FF - 10010CD2: 0F BE 8D 34 FD FF movsx ecx,byte ptr [ebp+FFFFFD34h] - FF - 10010CD9: 83 C4 10 add esp,10h - 10010CDC: 3B C1 cmp eax,ecx - 10010CDE: 0F 85 06 01 00 00 jne 10010DEA - 10010CE4: 8B 85 2C FD FF FF mov eax,dword ptr [ebp+FFFFFD2Ch] - 10010CEA: FF 8D 2C FD FF FF dec dword ptr [ebp+FFFFFD2Ch] - 10010CF0: 85 C0 test eax,eax - 10010CF2: 0F 84 F2 00 00 00 je 10010DEA - 10010CF8: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 10010CFE: FF 85 38 FD FF FF inc dword ptr [ebp+FFFFFD38h] - 10010D04: E8 E3 16 00 00 call 100123EC - 10010D09: 8B 8D 1C FD FF FF mov ecx,dword ptr [ebp+FFFFFD1Ch] - 10010D0F: 0F B7 C0 movzx eax,ax - 10010D12: 89 85 34 FD FF FF mov dword ptr [ebp+FFFFFD34h],eax - 10010D18: 66 8B 85 E0 FC FF mov ax,word ptr [ebp+FFFFFCE0h] - FF - 10010D1F: 66 89 04 59 mov word ptr [ecx+ebx*2],ax - 10010D23: 8D 85 F0 FC FF FF lea eax,[ebp+FFFFFCF0h] - 10010D29: 50 push eax - 10010D2A: 8D 85 40 FD FF FF lea eax,[ebp+FFFFFD40h] - 10010D30: 50 push eax - 10010D31: 43 inc ebx - 10010D32: 53 push ebx - 10010D33: 8D BD 1C FD FF FF lea edi,[ebp+FFFFFD1Ch] - 10010D39: 8D B5 EC FC FF FF lea esi,[ebp+FFFFFCECh] - 10010D3F: E8 B3 F9 FF FF call 100106F7 - 10010D44: 83 C4 10 add esp,10h - 10010D47: 85 C0 test eax,eax - 10010D49: 0F 84 F9 0A 00 00 je 10011848 - 10010D4F: F7 85 34 FD FF FF test dword ptr [ebp+FFFFFD34h],0FF00h - 00 FF 00 00 - 10010D59: 0F 85 8B 00 00 00 jne 10010DEA - 10010D5F: 0F B6 85 34 FD FF movzx eax,byte ptr [ebp+FFFFFD34h] - FF - 10010D66: 50 push eax - 10010D67: E8 C9 60 00 00 call 10016E35 - 10010D6C: 59 pop ecx - 10010D6D: 85 C0 test eax,eax - 10010D6F: 74 79 je 10010DEA - 10010D71: 8B 85 2C FD FF FF mov eax,dword ptr [ebp+FFFFFD2Ch] - 10010D77: FF 8D 2C FD FF FF dec dword ptr [ebp+FFFFFD2Ch] - 10010D7D: 85 C0 test eax,eax - 10010D7F: 74 69 je 10010DEA - 10010D81: 8B 85 1C FD FF FF mov eax,dword ptr [ebp+FFFFFD1Ch] - 10010D87: 66 8B 8D 34 FD FF mov cx,word ptr [ebp+FFFFFD34h] - FF - 10010D8E: FF 85 18 FD FF FF inc dword ptr [ebp+FFFFFD18h] - 10010D94: 66 89 0C 58 mov word ptr [eax+ebx*2],cx - 10010D98: 8D 85 F0 FC FF FF lea eax,[ebp+FFFFFCF0h] - 10010D9E: 50 push eax - 10010D9F: 8D 85 40 FD FF FF lea eax,[ebp+FFFFFD40h] - 10010DA5: 50 push eax - 10010DA6: 43 inc ebx - 10010DA7: 53 push ebx - 10010DA8: 8D BD 1C FD FF FF lea edi,[ebp+FFFFFD1Ch] - 10010DAE: 8D B5 EC FC FF FF lea esi,[ebp+FFFFFCECh] - 10010DB4: E8 3E F9 FF FF call 100106F7 - 10010DB9: 83 C4 0C add esp,0Ch - 10010DBC: 85 C0 test eax,eax - 10010DBE: 0F 84 84 0A 00 00 je 10011848 - 10010DC4: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 10010DCA: FF 85 38 FD FF FF inc dword ptr [ebp+FFFFFD38h] - 10010DD0: E8 17 16 00 00 call 100123EC - 10010DD5: 0F B7 C0 movzx eax,ax - 10010DD8: 59 pop ecx - 10010DD9: 89 85 34 FD FF FF mov dword ptr [ebp+FFFFFD34h],eax - 10010DDF: A9 00 FF 00 00 test eax,0FF00h - 10010DE4: 0F 84 75 FF FF FF je 10010D5F - 10010DEA: 83 BD 18 FD FF FF cmp dword ptr [ebp+FFFFFD18h],0 - 00 - 10010DF1: 0F 84 94 01 00 00 je 10010F8B - 10010DF7: 6A 65 push 65h - 10010DF9: 58 pop eax - 10010DFA: 66 3B 85 34 FD FF cmp ax,word ptr [ebp+FFFFFD34h] - FF - 10010E01: 74 10 je 10010E13 - 10010E03: 6A 45 push 45h - 10010E05: 58 pop eax - 10010E06: 66 3B 85 34 FD FF cmp ax,word ptr [ebp+FFFFFD34h] - FF - 10010E0D: 0F 85 78 01 00 00 jne 10010F8B - 10010E13: 8B 85 2C FD FF FF mov eax,dword ptr [ebp+FFFFFD2Ch] - 10010E19: FF 8D 2C FD FF FF dec dword ptr [ebp+FFFFFD2Ch] - 10010E1F: 85 C0 test eax,eax - 10010E21: 0F 84 64 01 00 00 je 10010F8B - 10010E27: 8B 8D 1C FD FF FF mov ecx,dword ptr [ebp+FFFFFD1Ch] - 10010E2D: 6A 65 push 65h - 10010E2F: 58 pop eax - 10010E30: 66 89 04 59 mov word ptr [ecx+ebx*2],ax - 10010E34: 8D 85 F0 FC FF FF lea eax,[ebp+FFFFFCF0h] - 10010E3A: 50 push eax - 10010E3B: 8D 85 40 FD FF FF lea eax,[ebp+FFFFFD40h] - 10010E41: 50 push eax - 10010E42: 43 inc ebx - 10010E43: 53 push ebx - 10010E44: 8D BD 1C FD FF FF lea edi,[ebp+FFFFFD1Ch] - 10010E4A: 8D B5 EC FC FF FF lea esi,[ebp+FFFFFCECh] - 10010E50: E8 A2 F8 FF FF call 100106F7 - 10010E55: 83 C4 0C add esp,0Ch - 10010E58: 85 C0 test eax,eax - 10010E5A: 0F 84 E8 09 00 00 je 10011848 - 10010E60: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 10010E66: FF 85 38 FD FF FF inc dword ptr [ebp+FFFFFD38h] - 10010E6C: E8 7B 15 00 00 call 100123EC - 10010E71: 59 pop ecx - 10010E72: 0F B7 C0 movzx eax,ax - 10010E75: 6A 2D push 2Dh - 10010E77: 59 pop ecx - 10010E78: 89 85 34 FD FF FF mov dword ptr [ebp+FFFFFD34h],eax - 10010E7E: 66 3B C8 cmp cx,ax - 10010E81: 75 2E jne 10010EB1 - 10010E83: 51 push ecx - 10010E84: 8B 8D 1C FD FF FF mov ecx,dword ptr [ebp+FFFFFD1Ch] - 10010E8A: 58 pop eax - 10010E8B: 66 89 04 59 mov word ptr [ecx+ebx*2],ax - 10010E8F: 8D 85 F0 FC FF FF lea eax,[ebp+FFFFFCF0h] - 10010E95: 50 push eax - 10010E96: 8D 85 40 FD FF FF lea eax,[ebp+FFFFFD40h] - 10010E9C: 50 push eax - 10010E9D: 43 inc ebx - 10010E9E: 53 push ebx - 10010E9F: E8 53 F8 FF FF call 100106F7 - 10010EA4: 83 C4 0C add esp,0Ch - 10010EA7: 85 C0 test eax,eax - 10010EA9: 0F 84 99 09 00 00 je 10011848 - 10010EAF: EB 0C jmp 10010EBD - 10010EB1: 6A 2B push 2Bh - 10010EB3: 58 pop eax - 10010EB4: 66 3B 85 34 FD FF cmp ax,word ptr [ebp+FFFFFD34h] - FF - 10010EBB: 75 33 jne 10010EF0 - 10010EBD: 8B 85 2C FD FF FF mov eax,dword ptr [ebp+FFFFFD2Ch] - 10010EC3: FF 8D 2C FD FF FF dec dword ptr [ebp+FFFFFD2Ch] - 10010EC9: 85 C0 test eax,eax - 10010ECB: 75 08 jne 10010ED5 - 10010ECD: 21 85 2C FD FF FF and dword ptr [ebp+FFFFFD2Ch],eax - 10010ED3: EB 1B jmp 10010EF0 - 10010ED5: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 10010EDB: FF 85 38 FD FF FF inc dword ptr [ebp+FFFFFD38h] - 10010EE1: E8 06 15 00 00 call 100123EC - 10010EE6: 0F B7 C0 movzx eax,ax - 10010EE9: 59 pop ecx - 10010EEA: 89 85 34 FD FF FF mov dword ptr [ebp+FFFFFD34h],eax - 10010EF0: F7 85 34 FD FF FF test dword ptr [ebp+FFFFFD34h],0FF00h - 00 FF 00 00 - 10010EFA: 0F 85 8B 00 00 00 jne 10010F8B - 10010F00: 0F B6 85 34 FD FF movzx eax,byte ptr [ebp+FFFFFD34h] - FF - 10010F07: 50 push eax - 10010F08: E8 28 5F 00 00 call 10016E35 - 10010F0D: 59 pop ecx - 10010F0E: 85 C0 test eax,eax - 10010F10: 74 79 je 10010F8B - 10010F12: 8B 85 2C FD FF FF mov eax,dword ptr [ebp+FFFFFD2Ch] - 10010F18: FF 8D 2C FD FF FF dec dword ptr [ebp+FFFFFD2Ch] - 10010F1E: 85 C0 test eax,eax - 10010F20: 74 69 je 10010F8B - 10010F22: 8B 85 1C FD FF FF mov eax,dword ptr [ebp+FFFFFD1Ch] - 10010F28: 66 8B 8D 34 FD FF mov cx,word ptr [ebp+FFFFFD34h] - FF - 10010F2F: FF 85 18 FD FF FF inc dword ptr [ebp+FFFFFD18h] - 10010F35: 66 89 0C 58 mov word ptr [eax+ebx*2],cx - 10010F39: 8D 85 F0 FC FF FF lea eax,[ebp+FFFFFCF0h] - 10010F3F: 50 push eax - 10010F40: 8D 85 40 FD FF FF lea eax,[ebp+FFFFFD40h] - 10010F46: 50 push eax - 10010F47: 43 inc ebx - 10010F48: 53 push ebx - 10010F49: 8D BD 1C FD FF FF lea edi,[ebp+FFFFFD1Ch] - 10010F4F: 8D B5 EC FC FF FF lea esi,[ebp+FFFFFCECh] - 10010F55: E8 9D F7 FF FF call 100106F7 - 10010F5A: 83 C4 0C add esp,0Ch - 10010F5D: 85 C0 test eax,eax - 10010F5F: 0F 84 E3 08 00 00 je 10011848 - 10010F65: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 10010F6B: FF 85 38 FD FF FF inc dword ptr [ebp+FFFFFD38h] - 10010F71: E8 76 14 00 00 call 100123EC - 10010F76: 0F B7 C0 movzx eax,ax - 10010F79: 59 pop ecx - 10010F7A: 89 85 34 FD FF FF mov dword ptr [ebp+FFFFFD34h],eax - 10010F80: A9 00 FF 00 00 test eax,0FF00h - 10010F85: 0F 84 75 FF FF FF je 10010F00 - 10010F8B: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 10010F91: FF 8D 38 FD FF FF dec dword ptr [ebp+FFFFFD38h] - 10010F97: FF B5 34 FD FF FF push dword ptr [ebp+FFFFFD34h] - 10010F9D: E8 E5 F7 FF FF call 10010787 - 10010FA2: 83 BD 18 FD FF FF cmp dword ptr [ebp+FFFFFD18h],0 - 00 - 10010FA9: 59 pop ecx - 10010FAA: 59 pop ecx - 10010FAB: 0F 84 97 08 00 00 je 10011848 - 10010FB1: 80 BD 2B FD FF FF cmp byte ptr [ebp+FFFFFD2Bh],0 - 00 - 10010FB8: 0F 85 EB 07 00 00 jne 100117A9 - 10010FBE: 8B B5 EC FC FF FF mov esi,dword ptr [ebp+FFFFFCECh] - 10010FC4: 8B 8D 1C FD FF FF mov ecx,dword ptr [ebp+FFFFFD1Ch] - 10010FCA: FF 85 F8 FC FF FF inc dword ptr [ebp+FFFFFCF8h] - 10010FD0: 33 C0 xor eax,eax - 10010FD2: 8D 74 36 02 lea esi,[esi+esi+2] - 10010FD6: 56 push esi - 10010FD7: 66 89 04 59 mov word ptr [ecx+ebx*2],ax - 10010FDB: E8 29 19 00 00 call 10012909 - 10010FE0: 8B F8 mov edi,eax - 10010FE2: 59 pop ecx - 10010FE3: 85 FF test edi,edi - 10010FE5: 0F 84 5D 08 00 00 je 10011848 - 10010FEB: 8D 46 FF lea eax,[esi-1] - 10010FEE: 50 push eax - 10010FEF: FF B5 1C FD FF FF push dword ptr [ebp+FFFFFD1Ch] - 10010FF5: 56 push esi - 10010FF6: 57 push edi - 10010FF7: 33 F6 xor esi,esi - 10010FF9: 56 push esi - 10010FFA: E8 FF 7B 00 00 call 10018BFE - 10010FFF: 83 C4 14 add esp,14h - 10011002: 3B C6 cmp eax,esi - 10011004: 74 17 je 1001101D - 10011006: 83 F8 16 cmp eax,16h - 10011009: 74 05 je 10011010 - 1001100B: 83 F8 22 cmp eax,22h - 1001100E: 75 0D jne 1001101D - 10011010: 56 push esi - 10011011: 56 push esi - 10011012: 56 push esi - 10011013: 56 push esi - 10011014: 56 push esi - 10011015: E8 9F DE FF FF call 1000EEB9 - 1001101A: 83 C4 14 add esp,14h - 1001101D: 8D 85 C4 FC FF FF lea eax,[ebp+FFFFFCC4h] - 10011023: 50 push eax - 10011024: 0F BE 85 2A FD FF movsx eax,byte ptr [ebp+FFFFFD2Ah] - FF - 1001102B: 57 push edi - 1001102C: FF B5 FC FC FF FF push dword ptr [ebp+FFFFFCFCh] - 10011032: 48 dec eax - 10011033: 50 push eax - 10011034: FF 35 3C 57 02 10 push dword ptr ds:[1002573Ch] - 1001103A: E8 D7 C1 FF FF call 1000D216 - 1001103F: 59 pop ecx - 10011040: FF D0 call eax - 10011042: 57 push edi - 10011043: E8 EC 92 FF FF call 1000A334 - 10011048: 83 C4 14 add esp,14h - 1001104B: E9 59 07 00 00 jmp 100117A9 - 10011050: 85 C9 test ecx,ecx - 10011052: 75 10 jne 10011064 - 10011054: FF 85 2C FD FF FF inc dword ptr [ebp+FFFFFD2Ch] - 1001105A: C7 85 0C FD FF FF mov dword ptr [ebp+FFFFFD0Ch],1 - 01 00 00 00 - 10011064: 80 BD 33 FD FF FF cmp byte ptr [ebp+FFFFFD33h],0 - 00 - 1001106B: 7E 07 jle 10011074 - 1001106D: C6 85 22 FD FF FF mov byte ptr [ebp+FFFFFD22h],1 - 01 - 10011074: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 1001107A: FF 8D 38 FD FF FF dec dword ptr [ebp+FFFFFD38h] - 10011080: FF B5 34 FD FF FF push dword ptr [ebp+FFFFFD34h] - 10011086: 8B FE mov edi,esi - 10011088: E8 FA F6 FF FF call 10010787 - 1001108D: 59 pop ecx - 1001108E: 59 pop ecx - 1001108F: 83 BD 0C FD FF FF cmp dword ptr [ebp+FFFFFD0Ch],0 - 00 - 10011096: 74 14 je 100110AC - 10011098: 8B 85 2C FD FF FF mov eax,dword ptr [ebp+FFFFFD2Ch] - 1001109E: FF 8D 2C FD FF FF dec dword ptr [ebp+FFFFFD2Ch] - 100110A4: 85 C0 test eax,eax - 100110A6: 0F 84 B1 03 00 00 je 1001145D - 100110AC: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 100110B2: FF 85 38 FD FF FF inc dword ptr [ebp+FFFFFD38h] - 100110B8: E8 2F 13 00 00 call 100123EC - 100110BD: 0F B7 D0 movzx edx,ax - 100110C0: B8 FF FF 00 00 mov eax,0FFFFh - 100110C5: 59 pop ecx - 100110C6: 89 95 34 FD FF FF mov dword ptr [ebp+FFFFFD34h],edx - 100110CC: 66 3B C2 cmp ax,dx - 100110CF: 0F 84 74 03 00 00 je 10011449 - 100110D5: 83 FB 63 cmp ebx,63h - 100110D8: 74 55 je 1001112F - 100110DA: 83 FB 73 cmp ebx,73h - 100110DD: 75 16 jne 100110F5 - 100110DF: 66 83 FA 09 cmp dx,9 - 100110E3: 72 0A jb 100110EF - 100110E5: 66 83 FA 0D cmp dx,0Dh - 100110E9: 0F 86 5A 03 00 00 jbe 10011449 - 100110EF: 66 83 FA 20 cmp dx,20h - 100110F3: 75 3A jne 1001112F - 100110F5: 83 FB 7B cmp ebx,7Bh - 100110F8: 0F 85 4B 03 00 00 jne 10011449 - 100110FE: 0F B7 C2 movzx eax,dx - 10011101: 8B C8 mov ecx,eax - 10011103: 33 DB xor ebx,ebx - 10011105: 83 E1 07 and ecx,7 - 10011108: 43 inc ebx - 10011109: D3 E3 shl ebx,cl - 1001110B: 8B 8D F4 FC FF FF mov ecx,dword ptr [ebp+FFFFFCF4h] - 10011111: C1 E8 03 shr eax,3 - 10011114: 0F BE 04 08 movsx eax,byte ptr [eax+ecx] - 10011118: 0F BE 8D 13 FD FF movsx ecx,byte ptr [ebp+FFFFFD13h] - FF - 1001111F: 33 C1 xor eax,ecx - 10011121: 85 D8 test eax,ebx - 10011123: 8B 9D 14 FD FF FF mov ebx,dword ptr [ebp+FFFFFD14h] - 10011129: 0F 84 1A 03 00 00 je 10011449 - 1001112F: 80 BD 2B FD FF FF cmp byte ptr [ebp+FFFFFD2Bh],0 - 00 - 10011136: 0F 85 06 03 00 00 jne 10011442 - 1001113C: 80 BD 22 FD FF FF cmp byte ptr [ebp+FFFFFD22h],0 - 00 - 10011143: 0F 84 A8 02 00 00 je 100113F1 - 10011149: 66 89 16 mov word ptr [esi],dx - 1001114C: 46 inc esi - 1001114D: 46 inc esi - 1001114E: E9 E4 02 00 00 jmp 10011437 - 10011153: 8B C3 mov eax,ebx - 10011155: 83 E8 70 sub eax,70h - 10011158: 0F 84 4A 03 00 00 je 100114A8 - 1001115E: 83 E8 03 sub eax,3 - 10011161: 0F 84 FD FE FF FF je 10011064 - 10011167: 48 dec eax - 10011168: 48 dec eax - 10011169: 0F 84 40 03 00 00 je 100114AF - 1001116F: 83 E8 03 sub eax,3 - 10011172: 0F 84 11 FA FF FF je 10010B89 - 10011178: 83 E8 03 sub eax,3 - 1001117B: 74 33 je 100111B0 - 1001117D: 8B 85 34 FD FF FF mov eax,dword ptr [ebp+FFFFFD34h] - 10011183: 66 39 07 cmp word ptr [edi],ax - 10011186: 0F 85 A0 06 00 00 jne 1001182C - 1001118C: FE 8D 23 FD FF FF dec byte ptr [ebp+FFFFFD23h] - 10011192: 80 BD 2B FD FF FF cmp byte ptr [ebp+FFFFFD2Bh],0 - 00 - 10011199: 0F 85 0A 06 00 00 jne 100117A9 - 1001119F: 8B 85 D4 FC FF FF mov eax,dword ptr [ebp+FFFFFCD4h] - 100111A5: 89 85 DC FC FF FF mov dword ptr [ebp+FFFFFCDCh],eax - 100111AB: E9 F9 05 00 00 jmp 100117A9 - 100111B0: 80 BD 33 FD FF FF cmp byte ptr [ebp+FFFFFD33h],0 - 00 - 100111B7: 7E 07 jle 100111C0 - 100111B9: C6 85 22 FD FF FF mov byte ptr [ebp+FFFFFD22h],1 - 01 - 100111C0: 47 inc edi - 100111C1: 6A 5E push 5Eh - 100111C3: 47 inc edi - 100111C4: 58 pop eax - 100111C5: 66 3B 07 cmp ax,word ptr [edi] - 100111C8: 75 0A jne 100111D4 - 100111CA: 83 C7 02 add edi,2 - 100111CD: C6 85 13 FD FF FF mov byte ptr [ebp+FFFFFD13h],0FFh - FF - 100111D4: 83 BD F4 FC FF FF cmp dword ptr [ebp+FFFFFCF4h],0 - 00 - 100111DB: 75 23 jne 10011200 - 100111DD: 68 00 20 00 00 push 2000h - 100111E2: E8 22 17 00 00 call 10012909 - 100111E7: 59 pop ecx - 100111E8: 89 85 F4 FC FF FF mov dword ptr [ebp+FFFFFCF4h],eax - 100111EE: 85 C0 test eax,eax - 100111F0: 0F 84 52 06 00 00 je 10011848 - 100111F6: C7 85 D8 FC FF FF mov dword ptr [ebp+FFFFFCD8h],1 - 01 00 00 00 - 10011200: 68 00 20 00 00 push 2000h - 10011205: 6A 00 push 0 - 10011207: FF B5 F4 FC FF FF push dword ptr [ebp+FFFFFCF4h] - 1001120D: E8 5E 90 FF FF call 1000A270 - 10011212: 83 C4 0C add esp,0Ch - 10011215: 6A 5D push 5Dh - 10011217: 58 pop eax - 10011218: 66 3B 07 cmp ax,word ptr [edi] - 1001121B: 75 13 jne 10011230 - 1001121D: 50 push eax - 1001121E: 8B 85 F4 FC FF FF mov eax,dword ptr [ebp+FFFFFCF4h] - 10011224: 47 inc edi - 10011225: 5E pop esi - 10011226: 47 inc edi - 10011227: C6 40 0B 20 mov byte ptr [eax+0Bh],20h - 1001122B: E9 8D 00 00 00 jmp 100112BD - 10011230: 8B B5 C0 FC FF FF mov esi,dword ptr [ebp+FFFFFCC0h] - 10011236: E9 82 00 00 00 jmp 100112BD - 1001123B: 0F B7 C0 movzx eax,ax - 1001123E: 47 inc edi - 1001123F: 6A 2D push 2Dh - 10011241: 59 pop ecx - 10011242: 47 inc edi - 10011243: 66 3B C8 cmp cx,ax - 10011246: 75 59 jne 100112A1 - 10011248: 66 85 F6 test si,si - 1001124B: 74 54 je 100112A1 - 1001124D: 0F B7 0F movzx ecx,word ptr [edi] - 10011250: 6A 5D push 5Dh - 10011252: 5A pop edx - 10011253: 66 3B D1 cmp dx,cx - 10011256: 74 49 je 100112A1 - 10011258: 0F B7 C9 movzx ecx,cx - 1001125B: 47 inc edi - 1001125C: 47 inc edi - 1001125D: 66 3B F1 cmp si,cx - 10011260: 73 05 jae 10011267 - 10011262: 0F B7 C1 movzx eax,cx - 10011265: EB 06 jmp 1001126D - 10011267: 0F B7 C6 movzx eax,si - 1001126A: 0F B7 F1 movzx esi,cx - 1001126D: 66 3B F0 cmp si,ax - 10011270: 77 2B ja 1001129D - 10011272: 2B C6 sub eax,esi - 10011274: 40 inc eax - 10011275: 0F B7 D6 movzx edx,si - 10011278: 0F B7 F0 movzx esi,ax - 1001127B: 8B 8D F4 FC FF FF mov ecx,dword ptr [ebp+FFFFFCF4h] - 10011281: 8B C2 mov eax,edx - 10011283: C1 E8 03 shr eax,3 - 10011286: 03 C1 add eax,ecx - 10011288: 8B CA mov ecx,edx - 1001128A: 83 E1 07 and ecx,7 - 1001128D: B3 01 mov bl,1 - 1001128F: D2 E3 shl bl,cl - 10011291: 08 18 or byte ptr [eax],bl - 10011293: 42 inc edx - 10011294: 4E dec esi - 10011295: 75 E4 jne 1001127B - 10011297: 8B 9D 14 FD FF FF mov ebx,dword ptr [ebp+FFFFFD14h] - 1001129D: 33 F6 xor esi,esi - 1001129F: EB 1C jmp 100112BD - 100112A1: 8B 95 F4 FC FF FF mov edx,dword ptr [ebp+FFFFFCF4h] - 100112A7: 0F B7 C8 movzx ecx,ax - 100112AA: 0F B7 F0 movzx esi,ax - 100112AD: 8B C1 mov eax,ecx - 100112AF: C1 E8 03 shr eax,3 - 100112B2: 03 C2 add eax,edx - 100112B4: 83 E1 07 and ecx,7 - 100112B7: B2 01 mov dl,1 - 100112B9: D2 E2 shl dl,cl - 100112BB: 08 10 or byte ptr [eax],dl - 100112BD: 0F B7 07 movzx eax,word ptr [edi] - 100112C0: 6A 5D push 5Dh - 100112C2: 59 pop ecx - 100112C3: 66 3B C8 cmp cx,ax - 100112C6: 0F 85 6F FF FF FF jne 1001123B - 100112CC: 66 83 3F 00 cmp word ptr [edi],0 - 100112D0: 0F 84 72 05 00 00 je 10011848 - 100112D6: 8B B5 FC FC FF FF mov esi,dword ptr [ebp+FFFFFCFCh] - 100112DC: 89 BD 00 FD FF FF mov dword ptr [ebp+FFFFFD00h],edi - 100112E2: E9 8D FD FF FF jmp 10011074 - 100112E7: 6A 2B push 2Bh - 100112E9: 58 pop eax - 100112EA: 66 3B C3 cmp ax,bx - 100112ED: 75 30 jne 1001131F - 100112EF: FF 8D 2C FD FF FF dec dword ptr [ebp+FFFFFD2Ch] - 100112F5: 75 0D jne 10011304 - 100112F7: 85 C9 test ecx,ecx - 100112F9: 74 09 je 10011304 - 100112FB: C6 85 3F FD FF FF mov byte ptr [ebp+FFFFFD3Fh],1 - 01 - 10011302: EB 1B jmp 1001131F - 10011304: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 1001130A: FF 85 38 FD FF FF inc dword ptr [ebp+FFFFFD38h] - 10011310: E8 D7 10 00 00 call 100123EC - 10011315: 0F B7 D8 movzx ebx,ax - 10011318: 59 pop ecx - 10011319: 89 9D 34 FD FF FF mov dword ptr [ebp+FFFFFD34h],ebx - 1001131F: 6A 30 push 30h - 10011321: 58 pop eax - 10011322: 66 3B C3 cmp ax,bx - 10011325: 0F 85 D3 01 00 00 jne 100114FE - 1001132B: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 10011331: FF 85 38 FD FF FF inc dword ptr [ebp+FFFFFD38h] - 10011337: E8 B0 10 00 00 call 100123EC - 1001133C: 59 pop ecx - 1001133D: 0F B7 D8 movzx ebx,ax - 10011340: 6A 78 push 78h - 10011342: 5E pop esi - 10011343: 8B C6 mov eax,esi - 10011345: 89 9D 34 FD FF FF mov dword ptr [ebp+FFFFFD34h],ebx - 1001134B: 66 3B C3 cmp ax,bx - 1001134E: 74 5C je 100113AC - 10011350: 6A 58 push 58h - 10011352: 58 pop eax - 10011353: 66 3B C3 cmp ax,bx - 10011356: 74 54 je 100113AC - 10011358: C7 85 18 FD FF FF mov dword ptr [ebp+FFFFFD18h],1 - 01 00 00 00 - 10011362: 39 B5 14 FD FF FF cmp dword ptr [ebp+FFFFFD14h],esi - 10011368: 74 26 je 10011390 - 1001136A: 83 BD 0C FD FF FF cmp dword ptr [ebp+FFFFFD0Ch],0 - 00 - 10011371: 74 0E je 10011381 - 10011373: FF 8D 2C FD FF FF dec dword ptr [ebp+FFFFFD2Ch] - 10011379: 75 06 jne 10011381 - 1001137B: FE 85 3F FD FF FF inc byte ptr [ebp+FFFFFD3Fh] - 10011381: C7 85 14 FD FF FF mov dword ptr [ebp+FFFFFD14h],6Fh - 6F 00 00 00 - 1001138B: E9 6E 01 00 00 jmp 100114FE - 10011390: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 10011396: FF 8D 38 FD FF FF dec dword ptr [ebp+FFFFFD38h] - 1001139C: 53 push ebx - 1001139D: E8 E5 F3 FF FF call 10010787 - 100113A2: 59 pop ecx - 100113A3: 59 pop ecx - 100113A4: 6A 30 push 30h - 100113A6: 5B pop ebx - 100113A7: E9 4C 01 00 00 jmp 100114F8 - 100113AC: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 100113B2: FF 85 38 FD FF FF inc dword ptr [ebp+FFFFFD38h] - 100113B8: E8 2F 10 00 00 call 100123EC - 100113BD: 83 BD 0C FD FF FF cmp dword ptr [ebp+FFFFFD0Ch],0 - 00 - 100113C4: 0F B7 D8 movzx ebx,ax - 100113C7: 59 pop ecx - 100113C8: 89 9D 34 FD FF FF mov dword ptr [ebp+FFFFFD34h],ebx - 100113CE: 74 16 je 100113E6 - 100113D0: 83 AD 2C FD FF FF sub dword ptr [ebp+FFFFFD2Ch],2 - 02 - 100113D7: 83 BD 2C FD FF FF cmp dword ptr [ebp+FFFFFD2Ch],1 - 01 - 100113DE: 7D 06 jge 100113E6 - 100113E0: FE 85 3F FD FF FF inc byte ptr [ebp+FFFFFD3Fh] - 100113E6: 89 B5 14 FD FF FF mov dword ptr [ebp+FFFFFD14h],esi - 100113EC: E9 0D 01 00 00 jmp 100114FE - 100113F1: 83 A5 E8 FC FF FF and dword ptr [ebp+FFFFFCE8h],0 - 00 - 100113F8: 52 push edx - 100113F9: 6A 05 push 5 - 100113FB: 8D 85 E8 FC FF FF lea eax,[ebp+FFFFFCE8h] - 10011401: 56 push esi - 10011402: 50 push eax - 10011403: E8 DD 74 00 00 call 100188E5 - 10011408: 83 C4 10 add esp,10h - 1001140B: 85 C0 test eax,eax - 1001140D: 74 22 je 10011431 - 1001140F: 83 F8 16 cmp eax,16h - 10011412: 74 09 je 1001141D - 10011414: 83 F8 22 cmp eax,22h - 10011417: 0F 85 72 FC FF FF jne 1001108F - 1001141D: 33 C0 xor eax,eax - 1001141F: 50 push eax - 10011420: 50 push eax - 10011421: 50 push eax - 10011422: 50 push eax - 10011423: 50 push eax - 10011424: E8 90 DA FF FF call 1000EEB9 - 10011429: 83 C4 14 add esp,14h - 1001142C: E9 5E FC FF FF jmp 1001108F - 10011431: 03 B5 E8 FC FF FF add esi,dword ptr [ebp+FFFFFCE8h] - 10011437: 89 B5 FC FC FF FF mov dword ptr [ebp+FFFFFCFCh],esi - 1001143D: E9 4D FC FF FF jmp 1001108F - 10011442: 47 inc edi - 10011443: 47 inc edi - 10011444: E9 46 FC FF FF jmp 1001108F - 10011449: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 1001144F: FF 8D 38 FD FF FF dec dword ptr [ebp+FFFFFD38h] - 10011455: 52 push edx - 10011456: E8 2C F3 FF FF call 10010787 - 1001145B: 59 pop ecx - 1001145C: 59 pop ecx - 1001145D: 3B FE cmp edi,esi - 1001145F: 0F 84 E3 03 00 00 je 10011848 - 10011465: 80 BD 2B FD FF FF cmp byte ptr [ebp+FFFFFD2Bh],0 - 00 - 1001146C: 0F 85 37 03 00 00 jne 100117A9 - 10011472: FF 85 F8 FC FF FF inc dword ptr [ebp+FFFFFCF8h] - 10011478: 83 FB 63 cmp ebx,63h - 1001147B: 0F 84 28 03 00 00 je 100117A9 - 10011481: 80 BD 22 FD FF FF cmp byte ptr [ebp+FFFFFD22h],0 - 00 - 10011488: 74 10 je 1001149A - 1001148A: 8B 8D FC FC FF FF mov ecx,dword ptr [ebp+FFFFFCFCh] - 10011490: 33 C0 xor eax,eax - 10011492: 66 89 01 mov word ptr [ecx],ax - 10011495: E9 0F 03 00 00 jmp 100117A9 - 1001149A: 8B 85 FC FC FF FF mov eax,dword ptr [ebp+FFFFFCFCh] - 100114A0: C6 00 00 mov byte ptr [eax],0 - 100114A3: E9 01 03 00 00 jmp 100117A9 - 100114A8: C6 85 2A FD FF FF mov byte ptr [ebp+FFFFFD2Ah],1 - 01 - 100114AF: 8B 9D 34 FD FF FF mov ebx,dword ptr [ebp+FFFFFD34h] - 100114B5: 6A 2D push 2Dh - 100114B7: 58 pop eax - 100114B8: 66 3B C3 cmp ax,bx - 100114BB: 75 09 jne 100114C6 - 100114BD: C6 85 21 FD FF FF mov byte ptr [ebp+FFFFFD21h],1 - 01 - 100114C4: EB 08 jmp 100114CE - 100114C6: 6A 2B push 2Bh - 100114C8: 58 pop eax - 100114C9: 66 3B C3 cmp ax,bx - 100114CC: 75 30 jne 100114FE - 100114CE: FF 8D 2C FD FF FF dec dword ptr [ebp+FFFFFD2Ch] - 100114D4: 75 0D jne 100114E3 - 100114D6: 85 C9 test ecx,ecx - 100114D8: 74 09 je 100114E3 - 100114DA: C6 85 3F FD FF FF mov byte ptr [ebp+FFFFFD3Fh],1 - 01 - 100114E1: EB 1B jmp 100114FE - 100114E3: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 100114E9: FF 85 38 FD FF FF inc dword ptr [ebp+FFFFFD38h] - 100114EF: E8 F8 0E 00 00 call 100123EC - 100114F4: 59 pop ecx - 100114F5: 0F B7 D8 movzx ebx,ax - 100114F8: 89 9D 34 FD FF FF mov dword ptr [ebp+FFFFFD34h],ebx - 100114FE: 83 BD E4 FC FF FF cmp dword ptr [ebp+FFFFFCE4h],0 - 00 - 10011505: 0F 84 63 01 00 00 je 1001166E - 1001150B: 80 BD 3F FD FF FF cmp byte ptr [ebp+FFFFFD3Fh],0 - 00 - 10011512: 0F 85 1F 01 00 00 jne 10011637 - 10011518: BF 00 FF 00 00 mov edi,0FF00h - 1001151D: 83 BD 14 FD FF FF cmp dword ptr [ebp+FFFFFD14h],78h - 78 - 10011524: 74 72 je 10011598 - 10011526: 83 BD 14 FD FF FF cmp dword ptr [ebp+FFFFFD14h],70h - 70 - 1001152D: 74 69 je 10011598 - 1001152F: 85 DF test edi,ebx - 10011531: 0F 85 EC 00 00 00 jne 10011623 - 10011537: 0F B6 C3 movzx eax,bl - 1001153A: 50 push eax - 1001153B: E8 F5 58 00 00 call 10016E35 - 10011540: 59 pop ecx - 10011541: 85 C0 test eax,eax - 10011543: 0F 84 DA 00 00 00 je 10011623 - 10011549: 83 BD 14 FD FF FF cmp dword ptr [ebp+FFFFFD14h],6Fh - 6F - 10011550: 75 27 jne 10011579 - 10011552: 6A 38 push 38h - 10011554: 58 pop eax - 10011555: 66 3B C3 cmp ax,bx - 10011558: 0F 86 C5 00 00 00 jbe 10011623 - 1001155E: 8B 85 08 FD FF FF mov eax,dword ptr [ebp+FFFFFD08h] - 10011564: 8B B5 04 FD FF FF mov esi,dword ptr [ebp+FFFFFD04h] - 1001156A: 0F A4 F0 03 shld eax,esi,3 - 1001156E: C1 E6 03 shl esi,3 - 10011571: 89 85 08 FD FF FF mov dword ptr [ebp+FFFFFD08h],eax - 10011577: EB 5E jmp 100115D7 - 10011579: 6A 00 push 0 - 1001157B: 6A 0A push 0Ah - 1001157D: FF B5 08 FD FF FF push dword ptr [ebp+FFFFFD08h] - 10011583: FF B5 04 FD FF FF push dword ptr [ebp+FFFFFD04h] - 10011589: E8 12 2B 00 00 call 100140A0 - 1001158E: 8B F0 mov esi,eax - 10011590: 89 95 08 FD FF FF mov dword ptr [ebp+FFFFFD08h],edx - 10011596: EB 3F jmp 100115D7 - 10011598: 85 DF test edi,ebx - 1001159A: 0F 85 83 00 00 00 jne 10011623 - 100115A0: 0F B6 C3 movzx eax,bl - 100115A3: 50 push eax - 100115A4: E8 10 59 00 00 call 10016EB9 - 100115A9: 59 pop ecx - 100115AA: 85 C0 test eax,eax - 100115AC: 74 75 je 10011623 - 100115AE: 8B 85 08 FD FF FF mov eax,dword ptr [ebp+FFFFFD08h] - 100115B4: 8B B5 04 FD FF FF mov esi,dword ptr [ebp+FFFFFD04h] - 100115BA: 0F A4 F0 04 shld eax,esi,4 - 100115BE: 53 push ebx - 100115BF: C1 E6 04 shl esi,4 - 100115C2: 89 85 08 FD FF FF mov dword ptr [ebp+FFFFFD08h],eax - 100115C8: E8 84 F1 FF FF call 10010751 - 100115CD: 0F B7 D8 movzx ebx,ax - 100115D0: 59 pop ecx - 100115D1: 89 9D 34 FD FF FF mov dword ptr [ebp+FFFFFD34h],ebx - 100115D7: FF 85 18 FD FF FF inc dword ptr [ebp+FFFFFD18h] - 100115DD: 0F B7 C3 movzx eax,bx - 100115E0: 83 E8 30 sub eax,30h - 100115E3: 99 cdq - 100115E4: 03 F0 add esi,eax - 100115E6: 11 95 08 FD FF FF adc dword ptr [ebp+FFFFFD08h],edx - 100115EC: 83 BD 0C FD FF FF cmp dword ptr [ebp+FFFFFD0Ch],0 - 00 - 100115F3: 89 B5 04 FD FF FF mov dword ptr [ebp+FFFFFD04h],esi - 100115F9: 74 08 je 10011603 - 100115FB: FF 8D 2C FD FF FF dec dword ptr [ebp+FFFFFD2Ch] - 10011601: 74 34 je 10011637 - 10011603: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 10011609: FF 85 38 FD FF FF inc dword ptr [ebp+FFFFFD38h] - 1001160F: E8 D8 0D 00 00 call 100123EC - 10011614: 0F B7 D8 movzx ebx,ax - 10011617: 59 pop ecx - 10011618: 89 9D 34 FD FF FF mov dword ptr [ebp+FFFFFD34h],ebx - 1001161E: E9 FA FE FF FF jmp 1001151D - 10011623: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 10011629: FF 8D 38 FD FF FF dec dword ptr [ebp+FFFFFD38h] - 1001162F: 53 push ebx - 10011630: E8 52 F1 FF FF call 10010787 - 10011635: 59 pop ecx - 10011636: 59 pop ecx - 10011637: 80 BD 21 FD FF FF cmp byte ptr [ebp+FFFFFD21h],0 - 00 - 1001163E: 8B BD E8 FC FF FF mov edi,dword ptr [ebp+FFFFFCE8h] - 10011644: 0F 84 01 01 00 00 je 1001174B - 1001164A: 8B 85 04 FD FF FF mov eax,dword ptr [ebp+FFFFFD04h] - 10011650: 8B 8D 08 FD FF FF mov ecx,dword ptr [ebp+FFFFFD08h] - 10011656: F7 D8 neg eax - 10011658: 83 D1 00 adc ecx,0 - 1001165B: F7 D9 neg ecx - 1001165D: 89 85 04 FD FF FF mov dword ptr [ebp+FFFFFD04h],eax - 10011663: 89 8D 08 FD FF FF mov dword ptr [ebp+FFFFFD08h],ecx - 10011669: E9 DD 00 00 00 jmp 1001174B - 1001166E: 80 BD 3F FD FF FF cmp byte ptr [ebp+FFFFFD3Fh],0 - 00 - 10011675: 8B BD E8 FC FF FF mov edi,dword ptr [ebp+FFFFFCE8h] - 1001167B: 0F 85 BF 00 00 00 jne 10011740 - 10011681: BE 00 FF 00 00 mov esi,0FF00h - 10011686: 83 BD 14 FD FF FF cmp dword ptr [ebp+FFFFFD14h],78h - 78 - 1001168D: 74 3A je 100116C9 - 1001168F: 83 BD 14 FD FF FF cmp dword ptr [ebp+FFFFFD14h],70h - 70 - 10011696: 74 31 je 100116C9 - 10011698: 85 DE test esi,ebx - 1001169A: 0F 85 8C 00 00 00 jne 1001172C - 100116A0: 0F B6 C3 movzx eax,bl - 100116A3: 50 push eax - 100116A4: E8 8C 57 00 00 call 10016E35 - 100116A9: 59 pop ecx - 100116AA: 85 C0 test eax,eax - 100116AC: 74 7E je 1001172C - 100116AE: 83 BD 14 FD FF FF cmp dword ptr [ebp+FFFFFD14h],6Fh - 6F - 100116B5: 75 0D jne 100116C4 - 100116B7: 6A 38 push 38h - 100116B9: 58 pop eax - 100116BA: 66 3B C3 cmp ax,bx - 100116BD: 76 6D jbe 1001172C - 100116BF: C1 E7 03 shl edi,3 - 100116C2: EB 2A jmp 100116EE - 100116C4: 6B FF 0A imul edi,edi,0Ah - 100116C7: EB 25 jmp 100116EE - 100116C9: 85 DE test esi,ebx - 100116CB: 75 5F jne 1001172C - 100116CD: 0F B6 C3 movzx eax,bl - 100116D0: 50 push eax - 100116D1: E8 E3 57 00 00 call 10016EB9 - 100116D6: 59 pop ecx - 100116D7: 85 C0 test eax,eax - 100116D9: 74 51 je 1001172C - 100116DB: 53 push ebx - 100116DC: C1 E7 04 shl edi,4 - 100116DF: E8 6D F0 FF FF call 10010751 - 100116E4: 0F B7 D8 movzx ebx,ax - 100116E7: 59 pop ecx - 100116E8: 89 9D 34 FD FF FF mov dword ptr [ebp+FFFFFD34h],ebx - 100116EE: FF 85 18 FD FF FF inc dword ptr [ebp+FFFFFD18h] - 100116F4: 83 BD 0C FD FF FF cmp dword ptr [ebp+FFFFFD0Ch],0 - 00 - 100116FB: 0F B7 C3 movzx eax,bx - 100116FE: 8D 7C 07 D0 lea edi,[edi+eax-30h] - 10011702: 74 08 je 1001170C - 10011704: FF 8D 2C FD FF FF dec dword ptr [ebp+FFFFFD2Ch] - 1001170A: 74 34 je 10011740 - 1001170C: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 10011712: FF 85 38 FD FF FF inc dword ptr [ebp+FFFFFD38h] - 10011718: E8 CF 0C 00 00 call 100123EC - 1001171D: 0F B7 D8 movzx ebx,ax - 10011720: 59 pop ecx - 10011721: 89 9D 34 FD FF FF mov dword ptr [ebp+FFFFFD34h],ebx - 10011727: E9 5A FF FF FF jmp 10011686 - 1001172C: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 10011732: FF 8D 38 FD FF FF dec dword ptr [ebp+FFFFFD38h] - 10011738: 53 push ebx - 10011739: E8 49 F0 FF FF call 10010787 - 1001173E: 59 pop ecx - 1001173F: 59 pop ecx - 10011740: 80 BD 21 FD FF FF cmp byte ptr [ebp+FFFFFD21h],0 - 00 - 10011747: 74 02 je 1001174B - 10011749: F7 DF neg edi - 1001174B: 83 BD 14 FD FF FF cmp dword ptr [ebp+FFFFFD14h],46h - 46 - 10011752: 75 07 jne 1001175B - 10011754: 83 A5 18 FD FF FF and dword ptr [ebp+FFFFFD18h],0 - 00 - 1001175B: 83 BD 18 FD FF FF cmp dword ptr [ebp+FFFFFD18h],0 - 00 - 10011762: 0F 84 E0 00 00 00 je 10011848 - 10011768: 80 BD 2B FD FF FF cmp byte ptr [ebp+FFFFFD2Bh],0 - 00 - 1001176F: 75 38 jne 100117A9 - 10011771: FF 85 F8 FC FF FF inc dword ptr [ebp+FFFFFCF8h] - 10011777: 8B B5 FC FC FF FF mov esi,dword ptr [ebp+FFFFFCFCh] - 1001177D: 83 BD E4 FC FF FF cmp dword ptr [ebp+FFFFFCE4h],0 - 00 - 10011784: 74 13 je 10011799 - 10011786: 8B 85 04 FD FF FF mov eax,dword ptr [ebp+FFFFFD04h] - 1001178C: 89 06 mov dword ptr [esi],eax - 1001178E: 8B 85 08 FD FF FF mov eax,dword ptr [ebp+FFFFFD08h] - 10011794: 89 46 04 mov dword ptr [esi+4],eax - 10011797: EB 10 jmp 100117A9 - 10011799: 80 BD 2A FD FF FF cmp byte ptr [ebp+FFFFFD2Ah],0 - 00 - 100117A0: 74 04 je 100117A6 - 100117A2: 89 3E mov dword ptr [esi],edi - 100117A4: EB 03 jmp 100117A9 - 100117A6: 66 89 3E mov word ptr [esi],di - 100117A9: 8B BD 00 FD FF FF mov edi,dword ptr [ebp+FFFFFD00h] - 100117AF: FE 85 23 FD FF FF inc byte ptr [ebp+FFFFFD23h] - 100117B5: 47 inc edi - 100117B6: 47 inc edi - 100117B7: 89 BD 00 FD FF FF mov dword ptr [ebp+FFFFFD00h],edi - 100117BD: EB 3C jmp 100117FB - 100117BF: 8B D1 mov edx,ecx - 100117C1: 66 3B D0 cmp dx,ax - 100117C4: 75 0A jne 100117D0 - 100117C6: 8D 47 02 lea eax,[edi+2] - 100117C9: 66 3B 08 cmp cx,word ptr [eax] - 100117CC: 75 02 jne 100117D0 - 100117CE: 8B F8 mov edi,eax - 100117D0: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 100117D6: FF 85 38 FD FF FF inc dword ptr [ebp+FFFFFD38h] - 100117DC: E8 0B 0C 00 00 call 100123EC - 100117E1: 59 pop ecx - 100117E2: 66 8B 0F mov cx,word ptr [edi] - 100117E5: 0F B7 C0 movzx eax,ax - 100117E8: 47 inc edi - 100117E9: 47 inc edi - 100117EA: 89 85 34 FD FF FF mov dword ptr [ebp+FFFFFD34h],eax - 100117F0: 89 BD 00 FD FF FF mov dword ptr [ebp+FFFFFD00h],edi - 100117F6: 66 3B C8 cmp cx,ax - 100117F9: 75 3A jne 10011835 - 100117FB: B8 FF FF 00 00 mov eax,0FFFFh - 10011800: 66 3B 85 34 FD FF cmp ax,word ptr [ebp+FFFFFD34h] - FF - 10011807: 75 15 jne 1001181E - 10011809: 66 83 3F 25 cmp word ptr [edi],25h - 1001180D: 75 39 jne 10011848 - 1001180F: 8B 85 00 FD FF FF mov eax,dword ptr [ebp+FFFFFD00h] - 10011815: 66 83 78 02 6E cmp word ptr [eax+2],6Eh - 1001181A: 75 2C jne 10011848 - 1001181C: 8B F8 mov edi,eax - 1001181E: 0F B7 07 movzx eax,word ptr [edi] - 10011821: 66 85 C0 test ax,ax - 10011824: 0F 85 59 F0 FF FF jne 10010883 - 1001182A: EB 1C jmp 10011848 - 1001182C: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 10011832: 50 push eax - 10011833: EB 0C jmp 10011841 - 10011835: FF B5 24 FD FF FF push dword ptr [ebp+FFFFFD24h] - 1001183B: FF B5 34 FD FF FF push dword ptr [ebp+FFFFFD34h] - 10011841: E8 41 EF FF FF call 10010787 - 10011846: 59 pop ecx - 10011847: 59 pop ecx - 10011848: 83 BD D8 FC FF FF cmp dword ptr [ebp+FFFFFCD8h],1 - 01 - 1001184F: 5B pop ebx - 10011850: 75 0C jne 1001185E - 10011852: FF B5 F4 FC FF FF push dword ptr [ebp+FFFFFCF4h] - 10011858: E8 D7 8A FF FF call 1000A334 - 1001185D: 59 pop ecx - 1001185E: 83 BD F0 FC FF FF cmp dword ptr [ebp+FFFFFCF0h],1 - 01 - 10011865: 75 0C jne 10011873 - 10011867: FF B5 1C FD FF FF push dword ptr [ebp+FFFFFD1Ch] - 1001186D: E8 C2 8A FF FF call 1000A334 - 10011872: 59 pop ecx - 10011873: B8 FF FF 00 00 mov eax,0FFFFh - 10011878: 66 3B 85 34 FD FF cmp ax,word ptr [ebp+FFFFFD34h] - FF - 1001187F: 75 2A jne 100118AB - 10011881: 8B 85 F8 FC FF FF mov eax,dword ptr [ebp+FFFFFCF8h] - 10011887: 85 C0 test eax,eax - 10011889: 75 0B jne 10011896 - 1001188B: 38 85 23 FD FF FF cmp byte ptr [ebp+FFFFFD23h],al - 10011891: 75 03 jne 10011896 - 10011893: 83 C8 FF or eax,0FFFFFFFFh - 10011896: 80 BD D0 FC FF FF cmp byte ptr [ebp+FFFFFCD0h],0 - 00 - 1001189D: 74 25 je 100118C4 - 1001189F: 8B 8D CC FC FF FF mov ecx,dword ptr [ebp+FFFFFCCCh] - 100118A5: 83 61 70 FD and dword ptr [ecx+70h],0FFFFFFFDh - 100118A9: EB 19 jmp 100118C4 - 100118AB: 80 BD D0 FC FF FF cmp byte ptr [ebp+FFFFFCD0h],0 - 00 - 100118B2: 74 0A je 100118BE - 100118B4: 8B 85 CC FC FF FF mov eax,dword ptr [ebp+FFFFFCCCh] - 100118BA: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 100118BE: 8B 85 F8 FC FF FF mov eax,dword ptr [ebp+FFFFFCF8h] - 100118C4: 8B 4D FC mov ecx,dword ptr [ebp-4] - 100118C7: 5F pop edi - 100118C8: 33 CD xor ecx,ebp - 100118CA: 5E pop esi - 100118CB: E8 CB 87 FF FF call 1000A09B - 100118D0: C9 leave - 100118D1: C3 ret - 100118D2: 2D A4 03 00 00 sub eax,3A4h - 100118D7: 74 22 je 100118FB - 100118D9: 83 E8 04 sub eax,4 - 100118DC: 74 17 je 100118F5 - 100118DE: 83 E8 0D sub eax,0Dh - 100118E1: 74 0C je 100118EF - 100118E3: 48 dec eax - 100118E4: 74 03 je 100118E9 - 100118E6: 33 C0 xor eax,eax - 100118E8: C3 ret - 100118E9: B8 04 04 00 00 mov eax,404h - 100118EE: C3 ret - 100118EF: B8 12 04 00 00 mov eax,412h - 100118F4: C3 ret - 100118F5: B8 04 08 00 00 mov eax,804h - 100118FA: C3 ret - 100118FB: B8 11 04 00 00 mov eax,411h - 10011900: C3 ret - 10011901: 8B FF mov edi,edi - 10011903: 56 push esi - 10011904: 57 push edi - 10011905: 8B F0 mov esi,eax - 10011907: 68 01 01 00 00 push 101h - 1001190C: 33 FF xor edi,edi - 1001190E: 8D 46 1C lea eax,[esi+1Ch] - 10011911: 57 push edi - 10011912: 50 push eax - 10011913: E8 58 89 FF FF call 1000A270 - 10011918: 33 C0 xor eax,eax - 1001191A: 0F B7 C8 movzx ecx,ax - 1001191D: 8B C1 mov eax,ecx - 1001191F: 89 7E 04 mov dword ptr [esi+4],edi - 10011922: 89 7E 08 mov dword ptr [esi+8],edi - 10011925: 89 7E 0C mov dword ptr [esi+0Ch],edi - 10011928: C1 E1 10 shl ecx,10h - 1001192B: 0B C1 or eax,ecx - 1001192D: 8D 7E 10 lea edi,[esi+10h] - 10011930: AB stos dword ptr es:[edi] - 10011931: AB stos dword ptr es:[edi] - 10011932: AB stos dword ptr es:[edi] - 10011933: B9 58 50 02 10 mov ecx,10025058h - 10011938: 83 C4 0C add esp,0Ch - 1001193B: 8D 46 1C lea eax,[esi+1Ch] - 1001193E: 2B CE sub ecx,esi - 10011940: BF 01 01 00 00 mov edi,101h - 10011945: 8A 14 01 mov dl,byte ptr [ecx+eax] - 10011948: 88 10 mov byte ptr [eax],dl - 1001194A: 40 inc eax - 1001194B: 4F dec edi - 1001194C: 75 F7 jne 10011945 - 1001194E: 8D 86 1D 01 00 00 lea eax,[esi+0000011Dh] - 10011954: BE 00 01 00 00 mov esi,100h - 10011959: 8A 14 08 mov dl,byte ptr [eax+ecx] - 1001195C: 88 10 mov byte ptr [eax],dl - 1001195E: 40 inc eax - 1001195F: 4E dec esi - 10011960: 75 F7 jne 10011959 - 10011962: 5F pop edi - 10011963: 5E pop esi - 10011964: C3 ret - 10011965: 8B FF mov edi,edi - 10011967: 55 push ebp - 10011968: 8B EC mov ebp,esp - 1001196A: 81 EC 1C 05 00 00 sub esp,51Ch - 10011970: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10011975: 33 C5 xor eax,ebp - 10011977: 89 45 FC mov dword ptr [ebp-4],eax - 1001197A: 53 push ebx - 1001197B: 57 push edi - 1001197C: 8D 85 E8 FA FF FF lea eax,[ebp+FFFFFAE8h] - 10011982: 50 push eax - 10011983: FF 76 04 push dword ptr [esi+4] - 10011986: FF 15 DC F0 01 10 call dword ptr ds:[1001F0DCh] - 1001198C: BF 00 01 00 00 mov edi,100h - 10011991: 85 C0 test eax,eax - 10011993: 0F 84 FB 00 00 00 je 10011A94 - 10011999: 33 C0 xor eax,eax - 1001199B: 88 84 05 FC FE FF mov byte ptr [ebp+eax+FFFFFEFCh],al - FF - 100119A2: 40 inc eax - 100119A3: 3B C7 cmp eax,edi - 100119A5: 72 F4 jb 1001199B - 100119A7: 8A 85 EE FA FF FF mov al,byte ptr [ebp+FFFFFAEEh] - 100119AD: C6 85 FC FE FF FF mov byte ptr [ebp+FFFFFEFCh],20h - 20 - 100119B4: 84 C0 test al,al - 100119B6: 74 2E je 100119E6 - 100119B8: 8D 9D EF FA FF FF lea ebx,[ebp+FFFFFAEFh] - 100119BE: 0F B6 C8 movzx ecx,al - 100119C1: 0F B6 03 movzx eax,byte ptr [ebx] - 100119C4: 3B C8 cmp ecx,eax - 100119C6: 77 16 ja 100119DE - 100119C8: 2B C1 sub eax,ecx - 100119CA: 40 inc eax - 100119CB: 50 push eax - 100119CC: 8D 94 0D FC FE FF lea edx,[ebp+ecx+FFFFFEFCh] - FF - 100119D3: 6A 20 push 20h - 100119D5: 52 push edx - 100119D6: E8 95 88 FF FF call 1000A270 - 100119DB: 83 C4 0C add esp,0Ch - 100119DE: 43 inc ebx - 100119DF: 8A 03 mov al,byte ptr [ebx] - 100119E1: 43 inc ebx - 100119E2: 84 C0 test al,al - 100119E4: 75 D8 jne 100119BE - 100119E6: 6A 00 push 0 - 100119E8: FF 76 0C push dword ptr [esi+0Ch] - 100119EB: 8D 85 FC FA FF FF lea eax,[ebp+FFFFFAFCh] - 100119F1: FF 76 04 push dword ptr [esi+4] - 100119F4: 50 push eax - 100119F5: 57 push edi - 100119F6: 8D 85 FC FE FF FF lea eax,[ebp+FFFFFEFCh] - 100119FC: 50 push eax - 100119FD: 6A 01 push 1 - 100119FF: 6A 00 push 0 - 10011A01: E8 BC 77 00 00 call 100191C2 - 10011A06: 33 DB xor ebx,ebx - 10011A08: 53 push ebx - 10011A09: FF 76 04 push dword ptr [esi+4] - 10011A0C: 8D 85 FC FD FF FF lea eax,[ebp+FFFFFDFCh] - 10011A12: 57 push edi - 10011A13: 50 push eax - 10011A14: 57 push edi - 10011A15: 8D 85 FC FE FF FF lea eax,[ebp+FFFFFEFCh] - 10011A1B: 50 push eax - 10011A1C: 57 push edi - 10011A1D: FF 76 0C push dword ptr [esi+0Ch] - 10011A20: 53 push ebx - 10011A21: E8 9D 75 00 00 call 10018FC3 - 10011A26: 83 C4 44 add esp,44h - 10011A29: 53 push ebx - 10011A2A: FF 76 04 push dword ptr [esi+4] - 10011A2D: 8D 85 FC FC FF FF lea eax,[ebp+FFFFFCFCh] - 10011A33: 57 push edi - 10011A34: 50 push eax - 10011A35: 57 push edi - 10011A36: 8D 85 FC FE FF FF lea eax,[ebp+FFFFFEFCh] - 10011A3C: 50 push eax - 10011A3D: 68 00 02 00 00 push 200h - 10011A42: FF 76 0C push dword ptr [esi+0Ch] - 10011A45: 53 push ebx - 10011A46: E8 78 75 00 00 call 10018FC3 - 10011A4B: 83 C4 24 add esp,24h - 10011A4E: 33 C0 xor eax,eax - 10011A50: 0F B7 8C 45 FC FA movzx ecx,word ptr [ebp+eax*2+FFFFFAFCh] - FF FF - 10011A58: F6 C1 01 test cl,1 - 10011A5B: 74 0E je 10011A6B - 10011A5D: 80 4C 06 1D 10 or byte ptr [esi+eax+1Dh],10h - 10011A62: 8A 8C 05 FC FD FF mov cl,byte ptr [ebp+eax+FFFFFDFCh] - FF - 10011A69: EB 11 jmp 10011A7C - 10011A6B: F6 C1 02 test cl,2 - 10011A6E: 74 15 je 10011A85 - 10011A70: 80 4C 06 1D 20 or byte ptr [esi+eax+1Dh],20h - 10011A75: 8A 8C 05 FC FC FF mov cl,byte ptr [ebp+eax+FFFFFCFCh] - FF - 10011A7C: 88 8C 06 1D 01 00 mov byte ptr [esi+eax+0000011Dh],cl - 00 - 10011A83: EB 08 jmp 10011A8D - 10011A85: C6 84 06 1D 01 00 mov byte ptr [esi+eax+0000011Dh],0 - 00 00 - 10011A8D: 40 inc eax - 10011A8E: 3B C7 cmp eax,edi - 10011A90: 72 BE jb 10011A50 - 10011A92: EB 56 jmp 10011AEA - 10011A94: 8D 86 1D 01 00 00 lea eax,[esi+0000011Dh] - 10011A9A: C7 85 E4 FA FF FF mov dword ptr [ebp+FFFFFAE4h],0FFFFFF9Fh - 9F FF FF FF - 10011AA4: 33 C9 xor ecx,ecx - 10011AA6: 29 85 E4 FA FF FF sub dword ptr [ebp+FFFFFAE4h],eax - 10011AAC: 8B 95 E4 FA FF FF mov edx,dword ptr [ebp+FFFFFAE4h] - 10011AB2: 8D 84 0E 1D 01 00 lea eax,[esi+ecx+0000011Dh] - 00 - 10011AB9: 03 D0 add edx,eax - 10011ABB: 8D 5A 20 lea ebx,[edx+20h] - 10011ABE: 83 FB 19 cmp ebx,19h - 10011AC1: 77 0C ja 10011ACF - 10011AC3: 80 4C 0E 1D 10 or byte ptr [esi+ecx+1Dh],10h - 10011AC8: 8A D1 mov dl,cl - 10011ACA: 80 C2 20 add dl,20h - 10011ACD: EB 0F jmp 10011ADE - 10011ACF: 83 FA 19 cmp edx,19h - 10011AD2: 77 0E ja 10011AE2 - 10011AD4: 80 4C 0E 1D 20 or byte ptr [esi+ecx+1Dh],20h - 10011AD9: 8A D1 mov dl,cl - 10011ADB: 80 EA 20 sub dl,20h - 10011ADE: 88 10 mov byte ptr [eax],dl - 10011AE0: EB 03 jmp 10011AE5 - 10011AE2: C6 00 00 mov byte ptr [eax],0 - 10011AE5: 41 inc ecx - 10011AE6: 3B CF cmp ecx,edi - 10011AE8: 72 C2 jb 10011AAC - 10011AEA: 8B 4D FC mov ecx,dword ptr [ebp-4] - 10011AED: 5F pop edi - 10011AEE: 33 CD xor ecx,ebp - 10011AF0: 5B pop ebx - 10011AF1: E8 A5 85 FF FF call 1000A09B - 10011AF6: C9 leave - 10011AF7: C3 ret - 10011AF8: 6A 0C push 0Ch - 10011AFA: 68 80 1D 02 10 push 10021D80h - 10011AFF: E8 84 E5 FF FF call 10010088 - 10011B04: E8 59 B9 FF FF call 1000D462 - 10011B09: 8B F8 mov edi,eax - 10011B0B: A1 7C 55 02 10 mov eax,dword ptr ds:[1002557Ch] - 10011B10: 85 47 70 test dword ptr [edi+70h],eax - 10011B13: 74 1D je 10011B32 - 10011B15: 83 7F 6C 00 cmp dword ptr [edi+6Ch],0 - 10011B19: 74 17 je 10011B32 - 10011B1B: 8B 77 68 mov esi,dword ptr [edi+68h] - 10011B1E: 85 F6 test esi,esi - 10011B20: 75 08 jne 10011B2A - 10011B22: 6A 20 push 20h - 10011B24: E8 E0 0F 00 00 call 10012B09 - 10011B29: 59 pop ecx - 10011B2A: 8B C6 mov eax,esi - 10011B2C: E8 9C E5 FF FF call 100100CD - 10011B31: C3 ret - 10011B32: 6A 0D push 0Dh - 10011B34: E8 55 DA FF FF call 1000F58E - 10011B39: 59 pop ecx - 10011B3A: 83 65 FC 00 and dword ptr [ebp-4],0 - 10011B3E: 8B 77 68 mov esi,dword ptr [edi+68h] - 10011B41: 89 75 E4 mov dword ptr [ebp-1Ch],esi - 10011B44: 3B 35 80 54 02 10 cmp esi,dword ptr ds:[10025480h] - 10011B4A: 74 36 je 10011B82 - 10011B4C: 85 F6 test esi,esi - 10011B4E: 74 1A je 10011B6A - 10011B50: 56 push esi - 10011B51: FF 15 94 F0 01 10 call dword ptr ds:[1001F094h] - 10011B57: 85 C0 test eax,eax - 10011B59: 75 0F jne 10011B6A - 10011B5B: 81 FE 58 50 02 10 cmp esi,10025058h - 10011B61: 74 07 je 10011B6A - 10011B63: 56 push esi - 10011B64: E8 CB 87 FF FF call 1000A334 - 10011B69: 59 pop ecx - 10011B6A: A1 80 54 02 10 mov eax,dword ptr ds:[10025480h] - 10011B6F: 89 47 68 mov dword ptr [edi+68h],eax - 10011B72: 8B 35 80 54 02 10 mov esi,dword ptr ds:[10025480h] - 10011B78: 89 75 E4 mov dword ptr [ebp-1Ch],esi - 10011B7B: 56 push esi - 10011B7C: FF 15 8C F0 01 10 call dword ptr ds:[1001F08Ch] - 10011B82: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 10011B89: E8 05 00 00 00 call 10011B93 - 10011B8E: EB 8E jmp 10011B1E - 10011B90: 8B 75 E4 mov esi,dword ptr [ebp-1Ch] - 10011B93: 6A 0D push 0Dh - 10011B95: E8 1A D9 FF FF call 1000F4B4 - 10011B9A: 59 pop ecx - 10011B9B: C3 ret - 10011B9C: 8B FF mov edi,edi - 10011B9E: 55 push ebp - 10011B9F: 8B EC mov ebp,esp - 10011BA1: 83 EC 10 sub esp,10h - 10011BA4: 53 push ebx - 10011BA5: 33 DB xor ebx,ebx - 10011BA7: 53 push ebx - 10011BA8: 8D 4D F0 lea ecx,[ebp-10h] - 10011BAB: E8 4C 8B FF FF call 1000A6FC - 10011BB0: 89 1D BC 69 02 10 mov dword ptr ds:[100269BCh],ebx - 10011BB6: 83 FE FE cmp esi,0FFFFFFFEh - 10011BB9: 75 1E jne 10011BD9 - 10011BBB: C7 05 BC 69 02 10 mov dword ptr ds:[100269BCh],1 - 01 00 00 00 - 10011BC5: FF 15 E4 F0 01 10 call dword ptr ds:[1001F0E4h] - 10011BCB: 38 5D FC cmp byte ptr [ebp-4],bl - 10011BCE: 74 45 je 10011C15 - 10011BD0: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 10011BD3: 83 61 70 FD and dword ptr [ecx+70h],0FFFFFFFDh - 10011BD7: EB 3C jmp 10011C15 - 10011BD9: 83 FE FD cmp esi,0FFFFFFFDh - 10011BDC: 75 12 jne 10011BF0 - 10011BDE: C7 05 BC 69 02 10 mov dword ptr ds:[100269BCh],1 - 01 00 00 00 - 10011BE8: FF 15 E0 F0 01 10 call dword ptr ds:[1001F0E0h] - 10011BEE: EB DB jmp 10011BCB - 10011BF0: 83 FE FC cmp esi,0FFFFFFFCh - 10011BF3: 75 12 jne 10011C07 - 10011BF5: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 10011BF8: 8B 40 04 mov eax,dword ptr [eax+4] - 10011BFB: C7 05 BC 69 02 10 mov dword ptr ds:[100269BCh],1 - 01 00 00 00 - 10011C05: EB C4 jmp 10011BCB - 10011C07: 38 5D FC cmp byte ptr [ebp-4],bl - 10011C0A: 74 07 je 10011C13 - 10011C0C: 8B 45 F8 mov eax,dword ptr [ebp-8] - 10011C0F: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 10011C13: 8B C6 mov eax,esi - 10011C15: 5B pop ebx - 10011C16: C9 leave - 10011C17: C3 ret - 10011C18: 8B FF mov edi,edi - 10011C1A: 55 push ebp - 10011C1B: 8B EC mov ebp,esp - 10011C1D: 83 EC 20 sub esp,20h - 10011C20: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10011C25: 33 C5 xor eax,ebp - 10011C27: 89 45 FC mov dword ptr [ebp-4],eax - 10011C2A: 53 push ebx - 10011C2B: 8B 5D 0C mov ebx,dword ptr [ebp+0Ch] - 10011C2E: 56 push esi - 10011C2F: 8B 75 08 mov esi,dword ptr [ebp+8] - 10011C32: 57 push edi - 10011C33: E8 64 FF FF FF call 10011B9C - 10011C38: 8B F8 mov edi,eax - 10011C3A: 33 F6 xor esi,esi - 10011C3C: 89 7D 08 mov dword ptr [ebp+8],edi - 10011C3F: 3B FE cmp edi,esi - 10011C41: 75 0E jne 10011C51 - 10011C43: 8B C3 mov eax,ebx - 10011C45: E8 B7 FC FF FF call 10011901 - 10011C4A: 33 C0 xor eax,eax - 10011C4C: E9 9D 01 00 00 jmp 10011DEE - 10011C51: 89 75 E4 mov dword ptr [ebp-1Ch],esi - 10011C54: 33 C0 xor eax,eax - 10011C56: 39 B8 88 54 02 10 cmp dword ptr [eax+10025488h],edi - 10011C5C: 0F 84 91 00 00 00 je 10011CF3 - 10011C62: FF 45 E4 inc dword ptr [ebp-1Ch] - 10011C65: 83 C0 30 add eax,30h - 10011C68: 3D F0 00 00 00 cmp eax,0F0h - 10011C6D: 72 E7 jb 10011C56 - 10011C6F: 81 FF E8 FD 00 00 cmp edi,0FDE8h - 10011C75: 0F 84 70 01 00 00 je 10011DEB - 10011C7B: 81 FF E9 FD 00 00 cmp edi,0FDE9h - 10011C81: 0F 84 64 01 00 00 je 10011DEB - 10011C87: 0F B7 C7 movzx eax,di - 10011C8A: 50 push eax - 10011C8B: FF 15 E8 F0 01 10 call dword ptr ds:[1001F0E8h] - 10011C91: 85 C0 test eax,eax - 10011C93: 0F 84 52 01 00 00 je 10011DEB - 10011C99: 8D 45 E8 lea eax,[ebp-18h] - 10011C9C: 50 push eax - 10011C9D: 57 push edi - 10011C9E: FF 15 DC F0 01 10 call dword ptr ds:[1001F0DCh] - 10011CA4: 85 C0 test eax,eax - 10011CA6: 0F 84 33 01 00 00 je 10011DDF - 10011CAC: 68 01 01 00 00 push 101h - 10011CB1: 8D 43 1C lea eax,[ebx+1Ch] - 10011CB4: 56 push esi - 10011CB5: 50 push eax - 10011CB6: E8 B5 85 FF FF call 1000A270 - 10011CBB: 33 D2 xor edx,edx - 10011CBD: 42 inc edx - 10011CBE: 83 C4 0C add esp,0Ch - 10011CC1: 89 7B 04 mov dword ptr [ebx+4],edi - 10011CC4: 89 73 0C mov dword ptr [ebx+0Ch],esi - 10011CC7: 39 55 E8 cmp dword ptr [ebp-18h],edx - 10011CCA: 0F 86 F8 00 00 00 jbe 10011DC8 - 10011CD0: 80 7D EE 00 cmp byte ptr [ebp-12h],0 - 10011CD4: 0F 84 CF 00 00 00 je 10011DA9 - 10011CDA: 8D 75 EF lea esi,[ebp-11h] - 10011CDD: 8A 0E mov cl,byte ptr [esi] - 10011CDF: 84 C9 test cl,cl - 10011CE1: 0F 84 C2 00 00 00 je 10011DA9 - 10011CE7: 0F B6 46 FF movzx eax,byte ptr [esi-1] - 10011CEB: 0F B6 C9 movzx ecx,cl - 10011CEE: E9 A6 00 00 00 jmp 10011D99 - 10011CF3: 68 01 01 00 00 push 101h - 10011CF8: 8D 43 1C lea eax,[ebx+1Ch] - 10011CFB: 56 push esi - 10011CFC: 50 push eax - 10011CFD: E8 6E 85 FF FF call 1000A270 - 10011D02: 8B 4D E4 mov ecx,dword ptr [ebp-1Ch] - 10011D05: 83 C4 0C add esp,0Ch - 10011D08: 6B C9 30 imul ecx,ecx,30h - 10011D0B: 89 75 E0 mov dword ptr [ebp-20h],esi - 10011D0E: 8D B1 98 54 02 10 lea esi,[ecx+10025498h] - 10011D14: 89 75 E4 mov dword ptr [ebp-1Ch],esi - 10011D17: EB 2A jmp 10011D43 - 10011D19: 8A 46 01 mov al,byte ptr [esi+1] - 10011D1C: 84 C0 test al,al - 10011D1E: 74 28 je 10011D48 - 10011D20: 0F B6 3E movzx edi,byte ptr [esi] - 10011D23: 0F B6 C0 movzx eax,al - 10011D26: EB 12 jmp 10011D3A - 10011D28: 8B 45 E0 mov eax,dword ptr [ebp-20h] - 10011D2B: 8A 80 84 54 02 10 mov al,byte ptr [eax+10025484h] - 10011D31: 08 44 3B 1D or byte ptr [ebx+edi+1Dh],al - 10011D35: 0F B6 46 01 movzx eax,byte ptr [esi+1] - 10011D39: 47 inc edi - 10011D3A: 3B F8 cmp edi,eax - 10011D3C: 76 EA jbe 10011D28 - 10011D3E: 8B 7D 08 mov edi,dword ptr [ebp+8] - 10011D41: 46 inc esi - 10011D42: 46 inc esi - 10011D43: 80 3E 00 cmp byte ptr [esi],0 - 10011D46: 75 D1 jne 10011D19 - 10011D48: 8B 75 E4 mov esi,dword ptr [ebp-1Ch] - 10011D4B: FF 45 E0 inc dword ptr [ebp-20h] - 10011D4E: 83 C6 08 add esi,8 - 10011D51: 83 7D E0 04 cmp dword ptr [ebp-20h],4 - 10011D55: 89 75 E4 mov dword ptr [ebp-1Ch],esi - 10011D58: 72 E9 jb 10011D43 - 10011D5A: 8B C7 mov eax,edi - 10011D5C: 89 7B 04 mov dword ptr [ebx+4],edi - 10011D5F: C7 43 08 01 00 00 mov dword ptr [ebx+8],1 - 00 - 10011D66: E8 67 FB FF FF call 100118D2 - 10011D6B: 6A 06 push 6 - 10011D6D: 89 43 0C mov dword ptr [ebx+0Ch],eax - 10011D70: 8D 43 10 lea eax,[ebx+10h] - 10011D73: 8D 89 8C 54 02 10 lea ecx,[ecx+1002548Ch] - 10011D79: 5A pop edx - 10011D7A: 66 8B 31 mov si,word ptr [ecx] - 10011D7D: 41 inc ecx - 10011D7E: 66 89 30 mov word ptr [eax],si - 10011D81: 41 inc ecx - 10011D82: 40 inc eax - 10011D83: 40 inc eax - 10011D84: 4A dec edx - 10011D85: 75 F3 jne 10011D7A - 10011D87: 8B F3 mov esi,ebx - 10011D89: E8 D7 FB FF FF call 10011965 - 10011D8E: E9 B7 FE FF FF jmp 10011C4A - 10011D93: 80 4C 03 1D 04 or byte ptr [ebx+eax+1Dh],4 - 10011D98: 40 inc eax - 10011D99: 3B C1 cmp eax,ecx - 10011D9B: 76 F6 jbe 10011D93 - 10011D9D: 46 inc esi - 10011D9E: 46 inc esi - 10011D9F: 80 7E FF 00 cmp byte ptr [esi-1],0 - 10011DA3: 0F 85 34 FF FF FF jne 10011CDD - 10011DA9: 8D 43 1E lea eax,[ebx+1Eh] - 10011DAC: B9 FE 00 00 00 mov ecx,0FEh - 10011DB1: 80 08 08 or byte ptr [eax],8 - 10011DB4: 40 inc eax - 10011DB5: 49 dec ecx - 10011DB6: 75 F9 jne 10011DB1 - 10011DB8: 8B 43 04 mov eax,dword ptr [ebx+4] - 10011DBB: E8 12 FB FF FF call 100118D2 - 10011DC0: 89 43 0C mov dword ptr [ebx+0Ch],eax - 10011DC3: 89 53 08 mov dword ptr [ebx+8],edx - 10011DC6: EB 03 jmp 10011DCB - 10011DC8: 89 73 08 mov dword ptr [ebx+8],esi - 10011DCB: 33 C0 xor eax,eax - 10011DCD: 0F B7 C8 movzx ecx,ax - 10011DD0: 8B C1 mov eax,ecx - 10011DD2: C1 E1 10 shl ecx,10h - 10011DD5: 0B C1 or eax,ecx - 10011DD7: 8D 7B 10 lea edi,[ebx+10h] - 10011DDA: AB stos dword ptr es:[edi] - 10011DDB: AB stos dword ptr es:[edi] - 10011DDC: AB stos dword ptr es:[edi] - 10011DDD: EB A8 jmp 10011D87 - 10011DDF: 39 35 BC 69 02 10 cmp dword ptr ds:[100269BCh],esi - 10011DE5: 0F 85 58 FE FF FF jne 10011C43 - 10011DEB: 83 C8 FF or eax,0FFFFFFFFh - 10011DEE: 8B 4D FC mov ecx,dword ptr [ebp-4] - 10011DF1: 5F pop edi - 10011DF2: 5E pop esi - 10011DF3: 33 CD xor ecx,ebp - 10011DF5: 5B pop ebx - 10011DF6: E8 A0 82 FF FF call 1000A09B - 10011DFB: C9 leave - 10011DFC: C3 ret - 10011DFD: 6A 14 push 14h - 10011DFF: 68 A0 1D 02 10 push 10021DA0h - 10011E04: E8 7F E2 FF FF call 10010088 - 10011E09: 83 4D E0 FF or dword ptr [ebp-20h],0FFFFFFFFh - 10011E0D: E8 50 B6 FF FF call 1000D462 - 10011E12: 8B F8 mov edi,eax - 10011E14: 89 7D DC mov dword ptr [ebp-24h],edi - 10011E17: E8 DC FC FF FF call 10011AF8 - 10011E1C: 8B 5F 68 mov ebx,dword ptr [edi+68h] - 10011E1F: 8B 75 08 mov esi,dword ptr [ebp+8] - 10011E22: E8 75 FD FF FF call 10011B9C - 10011E27: 89 45 08 mov dword ptr [ebp+8],eax - 10011E2A: 3B 43 04 cmp eax,dword ptr [ebx+4] - 10011E2D: 0F 84 57 01 00 00 je 10011F8A - 10011E33: 68 20 02 00 00 push 220h - 10011E38: E8 CC 0A 00 00 call 10012909 - 10011E3D: 59 pop ecx - 10011E3E: 8B D8 mov ebx,eax - 10011E40: 85 DB test ebx,ebx - 10011E42: 0F 84 46 01 00 00 je 10011F8E - 10011E48: B9 88 00 00 00 mov ecx,88h - 10011E4D: 8B 77 68 mov esi,dword ptr [edi+68h] - 10011E50: 8B FB mov edi,ebx - 10011E52: F3 A5 rep movs dword ptr es:[edi],dword ptr [esi] - 10011E54: 83 23 00 and dword ptr [ebx],0 - 10011E57: 53 push ebx - 10011E58: FF 75 08 push dword ptr [ebp+8] - 10011E5B: E8 B8 FD FF FF call 10011C18 - 10011E60: 59 pop ecx - 10011E61: 59 pop ecx - 10011E62: 89 45 E0 mov dword ptr [ebp-20h],eax - 10011E65: 85 C0 test eax,eax - 10011E67: 0F 85 FC 00 00 00 jne 10011F69 - 10011E6D: 8B 75 DC mov esi,dword ptr [ebp-24h] - 10011E70: FF 76 68 push dword ptr [esi+68h] - 10011E73: FF 15 94 F0 01 10 call dword ptr ds:[1001F094h] - 10011E79: 85 C0 test eax,eax - 10011E7B: 75 11 jne 10011E8E - 10011E7D: 8B 46 68 mov eax,dword ptr [esi+68h] - 10011E80: 3D 58 50 02 10 cmp eax,10025058h - 10011E85: 74 07 je 10011E8E - 10011E87: 50 push eax - 10011E88: E8 A7 84 FF FF call 1000A334 - 10011E8D: 59 pop ecx - 10011E8E: 89 5E 68 mov dword ptr [esi+68h],ebx - 10011E91: 53 push ebx - 10011E92: 8B 3D 8C F0 01 10 mov edi,dword ptr ds:[1001F08Ch] - 10011E98: FF D7 call edi - 10011E9A: F6 46 70 02 test byte ptr [esi+70h],2 - 10011E9E: 0F 85 EA 00 00 00 jne 10011F8E - 10011EA4: F6 05 7C 55 02 10 test byte ptr ds:[1002557Ch],1 - 01 - 10011EAB: 0F 85 DD 00 00 00 jne 10011F8E - 10011EB1: 6A 0D push 0Dh - 10011EB3: E8 D6 D6 FF FF call 1000F58E - 10011EB8: 59 pop ecx - 10011EB9: 83 65 FC 00 and dword ptr [ebp-4],0 - 10011EBD: 8B 43 04 mov eax,dword ptr [ebx+4] - 10011EC0: A3 CC 69 02 10 mov dword ptr ds:[100269CCh],eax - 10011EC5: 8B 43 08 mov eax,dword ptr [ebx+8] - 10011EC8: A3 D0 69 02 10 mov dword ptr ds:[100269D0h],eax - 10011ECD: 8B 43 0C mov eax,dword ptr [ebx+0Ch] - 10011ED0: A3 D4 69 02 10 mov dword ptr ds:[100269D4h],eax - 10011ED5: 33 C0 xor eax,eax - 10011ED7: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 10011EDA: 83 F8 05 cmp eax,5 - 10011EDD: 7D 10 jge 10011EEF - 10011EDF: 66 8B 4C 43 10 mov cx,word ptr [ebx+eax*2+10h] - 10011EE4: 66 89 0C 45 C0 69 mov word ptr [eax*2+100269C0h],cx - 02 10 - 10011EEC: 40 inc eax - 10011EED: EB E8 jmp 10011ED7 - 10011EEF: 33 C0 xor eax,eax - 10011EF1: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 10011EF4: 3D 01 01 00 00 cmp eax,101h - 10011EF9: 7D 0D jge 10011F08 - 10011EFB: 8A 4C 18 1C mov cl,byte ptr [eax+ebx+1Ch] - 10011EFF: 88 88 78 52 02 10 mov byte ptr [eax+10025278h],cl - 10011F05: 40 inc eax - 10011F06: EB E9 jmp 10011EF1 - 10011F08: 33 C0 xor eax,eax - 10011F0A: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 10011F0D: 3D 00 01 00 00 cmp eax,100h - 10011F12: 7D 10 jge 10011F24 - 10011F14: 8A 8C 18 1D 01 00 mov cl,byte ptr [eax+ebx+0000011Dh] - 00 - 10011F1B: 88 88 80 53 02 10 mov byte ptr [eax+10025380h],cl - 10011F21: 40 inc eax - 10011F22: EB E6 jmp 10011F0A - 10011F24: FF 35 80 54 02 10 push dword ptr ds:[10025480h] - 10011F2A: FF 15 94 F0 01 10 call dword ptr ds:[1001F094h] - 10011F30: 85 C0 test eax,eax - 10011F32: 75 13 jne 10011F47 - 10011F34: A1 80 54 02 10 mov eax,dword ptr ds:[10025480h] - 10011F39: 3D 58 50 02 10 cmp eax,10025058h - 10011F3E: 74 07 je 10011F47 - 10011F40: 50 push eax - 10011F41: E8 EE 83 FF FF call 1000A334 - 10011F46: 59 pop ecx - 10011F47: 89 1D 80 54 02 10 mov dword ptr ds:[10025480h],ebx - 10011F4D: 53 push ebx - 10011F4E: FF D7 call edi - 10011F50: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 10011F57: E8 02 00 00 00 call 10011F5E - 10011F5C: EB 30 jmp 10011F8E - 10011F5E: 6A 0D push 0Dh - 10011F60: E8 4F D5 FF FF call 1000F4B4 - 10011F65: 59 pop ecx - 10011F66: C3 ret - 10011F67: EB 25 jmp 10011F8E - 10011F69: 83 F8 FF cmp eax,0FFFFFFFFh - 10011F6C: 75 20 jne 10011F8E - 10011F6E: 81 FB 58 50 02 10 cmp ebx,10025058h - 10011F74: 74 07 je 10011F7D - 10011F76: 53 push ebx - 10011F77: E8 B8 83 FF FF call 1000A334 - 10011F7C: 59 pop ecx - 10011F7D: E8 C7 D0 FF FF call 1000F049 - 10011F82: C7 00 16 00 00 00 mov dword ptr [eax],16h - 10011F88: EB 04 jmp 10011F8E - 10011F8A: 83 65 E0 00 and dword ptr [ebp-20h],0 - 10011F8E: 8B 45 E0 mov eax,dword ptr [ebp-20h] - 10011F91: E8 37 E1 FF FF call 100100CD - 10011F96: C3 ret - 10011F97: 83 3D EC 6B 02 10 cmp dword ptr ds:[10026BECh],0 - 00 - 10011F9E: 75 12 jne 10011FB2 - 10011FA0: 6A FD push 0FFFFFFFDh - 10011FA2: E8 56 FE FF FF call 10011DFD - 10011FA7: 59 pop ecx - 10011FA8: C7 05 EC 6B 02 10 mov dword ptr ds:[10026BECh],1 - 01 00 00 00 - 10011FB2: 33 C0 xor eax,eax - 10011FB4: C3 ret - 10011FB5: 8B FF mov edi,edi - 10011FB7: 55 push ebp - 10011FB8: 8B EC mov ebp,esp - 10011FBA: 53 push ebx - 10011FBB: 56 push esi - 10011FBC: 8B 75 08 mov esi,dword ptr [ebp+8] - 10011FBF: 8B 86 BC 00 00 00 mov eax,dword ptr [esi+000000BCh] - 10011FC5: 33 DB xor ebx,ebx - 10011FC7: 57 push edi - 10011FC8: 3B C3 cmp eax,ebx - 10011FCA: 74 6F je 1001203B - 10011FCC: 3D 38 58 02 10 cmp eax,10025838h - 10011FD1: 74 68 je 1001203B - 10011FD3: 8B 86 B0 00 00 00 mov eax,dword ptr [esi+000000B0h] - 10011FD9: 3B C3 cmp eax,ebx - 10011FDB: 74 5E je 1001203B - 10011FDD: 39 18 cmp dword ptr [eax],ebx - 10011FDF: 75 5A jne 1001203B - 10011FE1: 8B 86 B8 00 00 00 mov eax,dword ptr [esi+000000B8h] - 10011FE7: 3B C3 cmp eax,ebx - 10011FE9: 74 17 je 10012002 - 10011FEB: 39 18 cmp dword ptr [eax],ebx - 10011FED: 75 13 jne 10012002 - 10011FEF: 50 push eax - 10011FF0: E8 3F 83 FF FF call 1000A334 - 10011FF5: FF B6 BC 00 00 00 push dword ptr [esi+000000BCh] - 10011FFB: E8 DE 73 00 00 call 100193DE - 10012000: 59 pop ecx - 10012001: 59 pop ecx - 10012002: 8B 86 B4 00 00 00 mov eax,dword ptr [esi+000000B4h] - 10012008: 3B C3 cmp eax,ebx - 1001200A: 74 17 je 10012023 - 1001200C: 39 18 cmp dword ptr [eax],ebx - 1001200E: 75 13 jne 10012023 - 10012010: 50 push eax - 10012011: E8 1E 83 FF FF call 1000A334 - 10012016: FF B6 BC 00 00 00 push dword ptr [esi+000000BCh] - 1001201C: E8 78 73 00 00 call 10019399 - 10012021: 59 pop ecx - 10012022: 59 pop ecx - 10012023: FF B6 B0 00 00 00 push dword ptr [esi+000000B0h] - 10012029: E8 06 83 FF FF call 1000A334 - 1001202E: FF B6 BC 00 00 00 push dword ptr [esi+000000BCh] - 10012034: E8 FB 82 FF FF call 1000A334 - 10012039: 59 pop ecx - 1001203A: 59 pop ecx - 1001203B: 8B 86 C0 00 00 00 mov eax,dword ptr [esi+000000C0h] - 10012041: 3B C3 cmp eax,ebx - 10012043: 74 44 je 10012089 - 10012045: 39 18 cmp dword ptr [eax],ebx - 10012047: 75 40 jne 10012089 - 10012049: 8B 86 C4 00 00 00 mov eax,dword ptr [esi+000000C4h] - 1001204F: 2D FE 00 00 00 sub eax,0FEh - 10012054: 50 push eax - 10012055: E8 DA 82 FF FF call 1000A334 - 1001205A: 8B 86 CC 00 00 00 mov eax,dword ptr [esi+000000CCh] - 10012060: BF 80 00 00 00 mov edi,80h - 10012065: 2B C7 sub eax,edi - 10012067: 50 push eax - 10012068: E8 C7 82 FF FF call 1000A334 - 1001206D: 8B 86 D0 00 00 00 mov eax,dword ptr [esi+000000D0h] - 10012073: 2B C7 sub eax,edi - 10012075: 50 push eax - 10012076: E8 B9 82 FF FF call 1000A334 - 1001207B: FF B6 C0 00 00 00 push dword ptr [esi+000000C0h] - 10012081: E8 AE 82 FF FF call 1000A334 - 10012086: 83 C4 10 add esp,10h - 10012089: 8D BE D4 00 00 00 lea edi,[esi+000000D4h] - 1001208F: 8B 07 mov eax,dword ptr [edi] - 10012091: 3D 78 57 02 10 cmp eax,10025778h - 10012096: 74 17 je 100120AF - 10012098: 39 98 B4 00 00 00 cmp dword ptr [eax+000000B4h],ebx - 1001209E: 75 0F jne 100120AF - 100120A0: 50 push eax - 100120A1: E8 5E 71 00 00 call 10019204 - 100120A6: FF 37 push dword ptr [edi] - 100120A8: E8 87 82 FF FF call 1000A334 - 100120AD: 59 pop ecx - 100120AE: 59 pop ecx - 100120AF: 8D 7E 50 lea edi,[esi+50h] - 100120B2: C7 45 08 06 00 00 mov dword ptr [ebp+8],6 - 00 - 100120B9: 81 7F F8 80 55 02 cmp dword ptr [edi-8],10025580h - 10 - 100120C0: 74 11 je 100120D3 - 100120C2: 8B 07 mov eax,dword ptr [edi] - 100120C4: 3B C3 cmp eax,ebx - 100120C6: 74 0B je 100120D3 - 100120C8: 39 18 cmp dword ptr [eax],ebx - 100120CA: 75 07 jne 100120D3 - 100120CC: 50 push eax - 100120CD: E8 62 82 FF FF call 1000A334 - 100120D2: 59 pop ecx - 100120D3: 39 5F FC cmp dword ptr [edi-4],ebx - 100120D6: 74 12 je 100120EA - 100120D8: 8B 47 04 mov eax,dword ptr [edi+4] - 100120DB: 3B C3 cmp eax,ebx - 100120DD: 74 0B je 100120EA - 100120DF: 39 18 cmp dword ptr [eax],ebx - 100120E1: 75 07 jne 100120EA - 100120E3: 50 push eax - 100120E4: E8 4B 82 FF FF call 1000A334 - 100120E9: 59 pop ecx - 100120EA: 83 C7 10 add edi,10h - 100120ED: FF 4D 08 dec dword ptr [ebp+8] - 100120F0: 75 C7 jne 100120B9 - 100120F2: 56 push esi - 100120F3: E8 3C 82 FF FF call 1000A334 - 100120F8: 59 pop ecx - 100120F9: 5F pop edi - 100120FA: 5E pop esi - 100120FB: 5B pop ebx - 100120FC: 5D pop ebp - 100120FD: C3 ret - 100120FE: 8B FF mov edi,edi - 10012100: 55 push ebp - 10012101: 8B EC mov ebp,esp - 10012103: 53 push ebx - 10012104: 56 push esi - 10012105: 8B 35 8C F0 01 10 mov esi,dword ptr ds:[1001F08Ch] - 1001210B: 57 push edi - 1001210C: 8B 7D 08 mov edi,dword ptr [ebp+8] - 1001210F: 57 push edi - 10012110: FF D6 call esi - 10012112: 8B 87 B0 00 00 00 mov eax,dword ptr [edi+000000B0h] - 10012118: 85 C0 test eax,eax - 1001211A: 74 03 je 1001211F - 1001211C: 50 push eax - 1001211D: FF D6 call esi - 1001211F: 8B 87 B8 00 00 00 mov eax,dword ptr [edi+000000B8h] - 10012125: 85 C0 test eax,eax - 10012127: 74 03 je 1001212C - 10012129: 50 push eax - 1001212A: FF D6 call esi - 1001212C: 8B 87 B4 00 00 00 mov eax,dword ptr [edi+000000B4h] - 10012132: 85 C0 test eax,eax - 10012134: 74 03 je 10012139 - 10012136: 50 push eax - 10012137: FF D6 call esi - 10012139: 8B 87 C0 00 00 00 mov eax,dword ptr [edi+000000C0h] - 1001213F: 85 C0 test eax,eax - 10012141: 74 03 je 10012146 - 10012143: 50 push eax - 10012144: FF D6 call esi - 10012146: 8D 5F 50 lea ebx,[edi+50h] - 10012149: C7 45 08 06 00 00 mov dword ptr [ebp+8],6 - 00 - 10012150: 81 7B F8 80 55 02 cmp dword ptr [ebx-8],10025580h - 10 - 10012157: 74 09 je 10012162 - 10012159: 8B 03 mov eax,dword ptr [ebx] - 1001215B: 85 C0 test eax,eax - 1001215D: 74 03 je 10012162 - 1001215F: 50 push eax - 10012160: FF D6 call esi - 10012162: 83 7B FC 00 cmp dword ptr [ebx-4],0 - 10012166: 74 0A je 10012172 - 10012168: 8B 43 04 mov eax,dword ptr [ebx+4] - 1001216B: 85 C0 test eax,eax - 1001216D: 74 03 je 10012172 - 1001216F: 50 push eax - 10012170: FF D6 call esi - 10012172: 83 C3 10 add ebx,10h - 10012175: FF 4D 08 dec dword ptr [ebp+8] - 10012178: 75 D6 jne 10012150 - 1001217A: 8B 87 D4 00 00 00 mov eax,dword ptr [edi+000000D4h] - 10012180: 05 B4 00 00 00 add eax,0B4h - 10012185: 50 push eax - 10012186: FF D6 call esi - 10012188: 5F pop edi - 10012189: 5E pop esi - 1001218A: 5B pop ebx - 1001218B: 5D pop ebp - 1001218C: C3 ret - 1001218D: 8B FF mov edi,edi - 1001218F: 55 push ebp - 10012190: 8B EC mov ebp,esp - 10012192: 57 push edi - 10012193: 8B 7D 08 mov edi,dword ptr [ebp+8] - 10012196: 85 FF test edi,edi - 10012198: 0F 84 83 00 00 00 je 10012221 - 1001219E: 53 push ebx - 1001219F: 56 push esi - 100121A0: 8B 35 94 F0 01 10 mov esi,dword ptr ds:[1001F094h] - 100121A6: 57 push edi - 100121A7: FF D6 call esi - 100121A9: 8B 87 B0 00 00 00 mov eax,dword ptr [edi+000000B0h] - 100121AF: 85 C0 test eax,eax - 100121B1: 74 03 je 100121B6 - 100121B3: 50 push eax - 100121B4: FF D6 call esi - 100121B6: 8B 87 B8 00 00 00 mov eax,dword ptr [edi+000000B8h] - 100121BC: 85 C0 test eax,eax - 100121BE: 74 03 je 100121C3 - 100121C0: 50 push eax - 100121C1: FF D6 call esi - 100121C3: 8B 87 B4 00 00 00 mov eax,dword ptr [edi+000000B4h] - 100121C9: 85 C0 test eax,eax - 100121CB: 74 03 je 100121D0 - 100121CD: 50 push eax - 100121CE: FF D6 call esi - 100121D0: 8B 87 C0 00 00 00 mov eax,dword ptr [edi+000000C0h] - 100121D6: 85 C0 test eax,eax - 100121D8: 74 03 je 100121DD - 100121DA: 50 push eax - 100121DB: FF D6 call esi - 100121DD: 8D 5F 50 lea ebx,[edi+50h] - 100121E0: C7 45 08 06 00 00 mov dword ptr [ebp+8],6 - 00 - 100121E7: 81 7B F8 80 55 02 cmp dword ptr [ebx-8],10025580h - 10 - 100121EE: 74 09 je 100121F9 - 100121F0: 8B 03 mov eax,dword ptr [ebx] - 100121F2: 85 C0 test eax,eax - 100121F4: 74 03 je 100121F9 - 100121F6: 50 push eax - 100121F7: FF D6 call esi - 100121F9: 83 7B FC 00 cmp dword ptr [ebx-4],0 - 100121FD: 74 0A je 10012209 - 100121FF: 8B 43 04 mov eax,dword ptr [ebx+4] - 10012202: 85 C0 test eax,eax - 10012204: 74 03 je 10012209 - 10012206: 50 push eax - 10012207: FF D6 call esi - 10012209: 83 C3 10 add ebx,10h - 1001220C: FF 4D 08 dec dword ptr [ebp+8] - 1001220F: 75 D6 jne 100121E7 - 10012211: 8B 87 D4 00 00 00 mov eax,dword ptr [edi+000000D4h] - 10012217: 05 B4 00 00 00 add eax,0B4h - 1001221C: 50 push eax - 1001221D: FF D6 call esi - 1001221F: 5E pop esi - 10012220: 5B pop ebx - 10012221: 8B C7 mov eax,edi - 10012223: 5F pop edi - 10012224: 5D pop ebp - 10012225: C3 ret - 10012226: 85 FF test edi,edi - 10012228: 74 37 je 10012261 - 1001222A: 85 C0 test eax,eax - 1001222C: 74 33 je 10012261 - 1001222E: 56 push esi - 1001222F: 8B 30 mov esi,dword ptr [eax] - 10012231: 3B F7 cmp esi,edi - 10012233: 74 28 je 1001225D - 10012235: 57 push edi - 10012236: 89 38 mov dword ptr [eax],edi - 10012238: E8 C1 FE FF FF call 100120FE - 1001223D: 59 pop ecx - 1001223E: 85 F6 test esi,esi - 10012240: 74 1B je 1001225D - 10012242: 56 push esi - 10012243: E8 45 FF FF FF call 1001218D - 10012248: 83 3E 00 cmp dword ptr [esi],0 - 1001224B: 59 pop ecx - 1001224C: 75 0F jne 1001225D - 1001224E: 81 FE 88 55 02 10 cmp esi,10025588h - 10012254: 74 07 je 1001225D - 10012256: 56 push esi - 10012257: E8 59 FD FF FF call 10011FB5 - 1001225C: 59 pop ecx - 1001225D: 8B C7 mov eax,edi - 1001225F: 5E pop esi - 10012260: C3 ret - 10012261: 33 C0 xor eax,eax - 10012263: C3 ret - 10012264: 6A 0C push 0Ch - 10012266: 68 C0 1D 02 10 push 10021DC0h - 1001226B: E8 18 DE FF FF call 10010088 - 10012270: E8 ED B1 FF FF call 1000D462 - 10012275: 8B F0 mov esi,eax - 10012277: A1 7C 55 02 10 mov eax,dword ptr ds:[1002557Ch] - 1001227C: 85 46 70 test dword ptr [esi+70h],eax - 1001227F: 74 22 je 100122A3 - 10012281: 83 7E 6C 00 cmp dword ptr [esi+6Ch],0 - 10012285: 74 1C je 100122A3 - 10012287: E8 D6 B1 FF FF call 1000D462 - 1001228C: 8B 70 6C mov esi,dword ptr [eax+6Ch] - 1001228F: 85 F6 test esi,esi - 10012291: 75 08 jne 1001229B - 10012293: 6A 20 push 20h - 10012295: E8 6F 08 00 00 call 10012B09 - 1001229A: 59 pop ecx - 1001229B: 8B C6 mov eax,esi - 1001229D: E8 2B DE FF FF call 100100CD - 100122A2: C3 ret - 100122A3: 6A 0C push 0Ch - 100122A5: E8 E4 D2 FF FF call 1000F58E - 100122AA: 59 pop ecx - 100122AB: 83 65 FC 00 and dword ptr [ebp-4],0 - 100122AF: 8D 46 6C lea eax,[esi+6Ch] - 100122B2: 8B 3D 60 56 02 10 mov edi,dword ptr ds:[10025660h] - 100122B8: E8 69 FF FF FF call 10012226 - 100122BD: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 100122C0: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 100122C7: E8 02 00 00 00 call 100122CE - 100122CC: EB C1 jmp 1001228F - 100122CE: 6A 0C push 0Ch - 100122D0: E8 DF D1 FF FF call 1000F4B4 - 100122D5: 59 pop ecx - 100122D6: 8B 75 E4 mov esi,dword ptr [ebp-1Ch] - 100122D9: C3 ret - 100122DA: 8B FF mov edi,edi - 100122DC: 55 push ebp - 100122DD: 8B EC mov ebp,esp - 100122DF: 8B 55 08 mov edx,dword ptr [ebp+8] - 100122E2: 53 push ebx - 100122E3: 56 push esi - 100122E4: 57 push edi - 100122E5: 33 FF xor edi,edi - 100122E7: 3B D7 cmp edx,edi - 100122E9: 74 07 je 100122F2 - 100122EB: 8B 5D 0C mov ebx,dword ptr [ebp+0Ch] - 100122EE: 3B DF cmp ebx,edi - 100122F0: 77 1E ja 10012310 - 100122F2: E8 52 CD FF FF call 1000F049 - 100122F7: 6A 16 push 16h - 100122F9: 5E pop esi - 100122FA: 89 30 mov dword ptr [eax],esi - 100122FC: 57 push edi - 100122FD: 57 push edi - 100122FE: 57 push edi - 100122FF: 57 push edi - 10012300: 57 push edi - 10012301: E8 DB CC FF FF call 1000EFE1 - 10012306: 83 C4 14 add esp,14h - 10012309: 8B C6 mov eax,esi - 1001230B: 5F pop edi - 1001230C: 5E pop esi - 1001230D: 5B pop ebx - 1001230E: 5D pop ebp - 1001230F: C3 ret - 10012310: 8B 75 10 mov esi,dword ptr [ebp+10h] - 10012313: 3B F7 cmp esi,edi - 10012315: 75 07 jne 1001231E - 10012317: 33 C0 xor eax,eax - 10012319: 66 89 02 mov word ptr [edx],ax - 1001231C: EB D4 jmp 100122F2 - 1001231E: 8B CA mov ecx,edx - 10012320: 0F B7 06 movzx eax,word ptr [esi] - 10012323: 66 89 01 mov word ptr [ecx],ax - 10012326: 41 inc ecx - 10012327: 41 inc ecx - 10012328: 46 inc esi - 10012329: 46 inc esi - 1001232A: 66 3B C7 cmp ax,di - 1001232D: 74 03 je 10012332 - 1001232F: 4B dec ebx - 10012330: 75 EE jne 10012320 - 10012332: 33 C0 xor eax,eax - 10012334: 3B DF cmp ebx,edi - 10012336: 75 D3 jne 1001230B - 10012338: 66 89 02 mov word ptr [edx],ax - 1001233B: E8 09 CD FF FF call 1000F049 - 10012340: 6A 22 push 22h - 10012342: 59 pop ecx - 10012343: 89 08 mov dword ptr [eax],ecx - 10012345: 8B F1 mov esi,ecx - 10012347: EB B3 jmp 100122FC - 10012349: 8B FF mov edi,edi - 1001234B: 55 push ebp - 1001234C: 8B EC mov ebp,esp - 1001234E: 83 EC 10 sub esp,10h - 10012351: FF 75 08 push dword ptr [ebp+8] - 10012354: 8D 4D F0 lea ecx,[ebp-10h] - 10012357: E8 A0 83 FF FF call 1000A6FC - 1001235C: 8B 45 18 mov eax,dword ptr [ebp+18h] - 1001235F: 85 C0 test eax,eax - 10012361: 7E 18 jle 1001237B - 10012363: 8B 4D 14 mov ecx,dword ptr [ebp+14h] - 10012366: 8B D0 mov edx,eax - 10012368: 4A dec edx - 10012369: 66 83 39 00 cmp word ptr [ecx],0 - 1001236D: 74 09 je 10012378 - 1001236F: 41 inc ecx - 10012370: 41 inc ecx - 10012371: 85 D2 test edx,edx - 10012373: 75 F3 jne 10012368 - 10012375: 83 CA FF or edx,0FFFFFFFFh - 10012378: 2B C2 sub eax,edx - 1001237A: 48 dec eax - 1001237B: FF 75 20 push dword ptr [ebp+20h] - 1001237E: FF 75 1C push dword ptr [ebp+1Ch] - 10012381: 50 push eax - 10012382: FF 75 14 push dword ptr [ebp+14h] - 10012385: FF 75 10 push dword ptr [ebp+10h] - 10012388: FF 75 0C push dword ptr [ebp+0Ch] - 1001238B: FF 15 EC F0 01 10 call dword ptr ds:[1001F0ECh] - 10012391: 80 7D FC 00 cmp byte ptr [ebp-4],0 - 10012395: 74 07 je 1001239E - 10012397: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 1001239A: 83 61 70 FD and dword ptr [ecx+70h],0FFFFFFFDh - 1001239E: C9 leave - 1001239F: C3 ret - 100123A0: 8B FF mov edi,edi - 100123A2: 55 push ebp - 100123A3: 8B EC mov ebp,esp - 100123A5: 33 C0 xor eax,eax - 100123A7: 39 45 0C cmp dword ptr [ebp+0Ch],eax - 100123AA: 76 11 jbe 100123BD - 100123AC: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 100123AF: 66 83 39 00 cmp word ptr [ecx],0 - 100123B3: 74 08 je 100123BD - 100123B5: 40 inc eax - 100123B6: 41 inc ecx - 100123B7: 41 inc ecx - 100123B8: 3B 45 0C cmp eax,dword ptr [ebp+0Ch] - 100123BB: 72 F2 jb 100123AF - 100123BD: 5D pop ebp - 100123BE: C3 ret - 100123BF: CC int 3 - 100123C0: 51 push ecx - 100123C1: 8D 4C 24 08 lea ecx,[esp+8] - 100123C5: 2B C8 sub ecx,eax - 100123C7: 83 E1 0F and ecx,0Fh - 100123CA: 03 C1 add eax,ecx - 100123CC: 1B C9 sbb ecx,ecx - 100123CE: 0B C1 or eax,ecx - 100123D0: 59 pop ecx - 100123D1: E9 2A 71 00 00 jmp 10019500 - 100123D6: 51 push ecx - 100123D7: 8D 4C 24 08 lea ecx,[esp+8] - 100123DB: 2B C8 sub ecx,eax - 100123DD: 83 E1 07 and ecx,7 - 100123E0: 03 C1 add eax,ecx - 100123E2: 1B C9 sbb ecx,ecx - 100123E4: 0B C1 or eax,ecx - 100123E6: 59 pop ecx - 100123E7: E9 14 71 00 00 jmp 10019500 - 100123EC: 8B FF mov edi,edi - 100123EE: 55 push ebp - 100123EF: 8B EC mov ebp,esp - 100123F1: 51 push ecx - 100123F2: 53 push ebx - 100123F3: 56 push esi - 100123F4: 8B 75 08 mov esi,dword ptr [ebp+8] - 100123F7: F6 46 0C 40 test byte ptr [esi+0Ch],40h - 100123FB: 57 push edi - 100123FC: BB 70 56 02 10 mov ebx,10025670h - 10012401: 0F 85 72 01 00 00 jne 10012579 - 10012407: 56 push esi - 10012408: E8 DA E0 FF FF call 100104E7 - 1001240D: 59 pop ecx - 1001240E: 83 F8 FF cmp eax,0FFFFFFFFh - 10012411: 74 2E je 10012441 - 10012413: 56 push esi - 10012414: E8 CE E0 FF FF call 100104E7 - 10012419: 59 pop ecx - 1001241A: 83 F8 FE cmp eax,0FFFFFFFEh - 1001241D: 74 22 je 10012441 - 1001241F: 56 push esi - 10012420: E8 C2 E0 FF FF call 100104E7 - 10012425: C1 F8 05 sar eax,5 - 10012428: 56 push esi - 10012429: 8D 3C 85 00 6C 02 lea edi,[eax*4+10026C00h] - 10 - 10012430: E8 B2 E0 FF FF call 100104E7 - 10012435: 83 E0 1F and eax,1Fh - 10012438: 59 pop ecx - 10012439: C1 E0 06 shl eax,6 - 1001243C: 03 07 add eax,dword ptr [edi] - 1001243E: 59 pop ecx - 1001243F: EB 02 jmp 10012443 - 10012441: 8B C3 mov eax,ebx - 10012443: F6 40 24 7F test byte ptr [eax+24h],7Fh - 10012447: 74 4F je 10012498 - 10012449: FF 4E 04 dec dword ptr [esi+4] - 1001244C: 78 0A js 10012458 - 1001244E: 8B 0E mov ecx,dword ptr [esi] - 10012450: 0F B6 01 movzx eax,byte ptr [ecx] - 10012453: 41 inc ecx - 10012454: 89 0E mov dword ptr [esi],ecx - 10012456: EB 07 jmp 1001245F - 10012458: 56 push esi - 10012459: E8 69 73 00 00 call 100197C7 - 1001245E: 59 pop ecx - 1001245F: 83 F8 FF cmp eax,0FFFFFFFFh - 10012462: 75 0A jne 1001246E - 10012464: B8 FF FF 00 00 mov eax,0FFFFh - 10012469: E9 24 01 00 00 jmp 10012592 - 1001246E: FF 4E 04 dec dword ptr [esi+4] - 10012471: 88 45 08 mov byte ptr [ebp+8],al - 10012474: 78 0A js 10012480 - 10012476: 8B 0E mov ecx,dword ptr [esi] - 10012478: 0F B6 01 movzx eax,byte ptr [ecx] - 1001247B: 41 inc ecx - 1001247C: 89 0E mov dword ptr [esi],ecx - 1001247E: EB 07 jmp 10012487 - 10012480: 56 push esi - 10012481: E8 41 73 00 00 call 100197C7 - 10012486: 59 pop ecx - 10012487: 83 F8 FF cmp eax,0FFFFFFFFh - 1001248A: 74 D8 je 10012464 - 1001248C: 88 45 09 mov byte ptr [ebp+9],al - 1001248F: 66 8B 45 08 mov ax,word ptr [ebp+8] - 10012493: E9 FA 00 00 00 jmp 10012592 - 10012498: F6 46 0C 40 test byte ptr [esi+0Ch],40h - 1001249C: 0F 85 D7 00 00 00 jne 10012579 - 100124A2: 56 push esi - 100124A3: E8 3F E0 FF FF call 100104E7 - 100124A8: 59 pop ecx - 100124A9: 83 F8 FF cmp eax,0FFFFFFFFh - 100124AC: 74 2E je 100124DC - 100124AE: 56 push esi - 100124AF: E8 33 E0 FF FF call 100104E7 - 100124B4: 59 pop ecx - 100124B5: 83 F8 FE cmp eax,0FFFFFFFEh - 100124B8: 74 22 je 100124DC - 100124BA: 56 push esi - 100124BB: E8 27 E0 FF FF call 100104E7 - 100124C0: C1 F8 05 sar eax,5 - 100124C3: 56 push esi - 100124C4: 8D 3C 85 00 6C 02 lea edi,[eax*4+10026C00h] - 10 - 100124CB: E8 17 E0 FF FF call 100104E7 - 100124D0: 83 E0 1F and eax,1Fh - 100124D3: 59 pop ecx - 100124D4: C1 E0 06 shl eax,6 - 100124D7: 03 07 add eax,dword ptr [edi] - 100124D9: 59 pop ecx - 100124DA: EB 02 jmp 100124DE - 100124DC: 8B C3 mov eax,ebx - 100124DE: F6 40 04 80 test byte ptr [eax+4],80h - 100124E2: 0F 84 91 00 00 00 je 10012579 - 100124E8: 33 FF xor edi,edi - 100124EA: 47 inc edi - 100124EB: FF 4E 04 dec dword ptr [esi+4] - 100124EE: 78 0A js 100124FA - 100124F0: 8B 0E mov ecx,dword ptr [esi] - 100124F2: 0F B6 01 movzx eax,byte ptr [ecx] - 100124F5: 41 inc ecx - 100124F6: 89 0E mov dword ptr [esi],ecx - 100124F8: EB 07 jmp 10012501 - 100124FA: 56 push esi - 100124FB: E8 C7 72 00 00 call 100197C7 - 10012500: 59 pop ecx - 10012501: 83 F8 FF cmp eax,0FFFFFFFFh - 10012504: 0F 84 5A FF FF FF je 10012464 - 1001250A: 88 45 FC mov byte ptr [ebp-4],al - 1001250D: 0F B6 C0 movzx eax,al - 10012510: 50 push eax - 10012511: E8 33 57 00 00 call 10017C49 - 10012516: 59 pop ecx - 10012517: 85 C0 test eax,eax - 10012519: 74 34 je 1001254F - 1001251B: FF 4E 04 dec dword ptr [esi+4] - 1001251E: 78 0A js 1001252A - 10012520: 8B 0E mov ecx,dword ptr [esi] - 10012522: 0F B6 01 movzx eax,byte ptr [ecx] - 10012525: 41 inc ecx - 10012526: 89 0E mov dword ptr [esi],ecx - 10012528: EB 07 jmp 10012531 - 1001252A: 56 push esi - 1001252B: E8 97 72 00 00 call 100197C7 - 10012530: 59 pop ecx - 10012531: 83 F8 FF cmp eax,0FFFFFFFFh - 10012534: 75 13 jne 10012549 - 10012536: 0F BE 45 FC movsx eax,byte ptr [ebp-4] - 1001253A: 56 push esi - 1001253B: 50 push eax - 1001253C: E8 14 72 00 00 call 10019755 - 10012541: 59 pop ecx - 10012542: B8 FF FF 00 00 mov eax,0FFFFh - 10012547: EB 48 jmp 10012591 - 10012549: 6A 02 push 2 - 1001254B: 88 45 FD mov byte ptr [ebp-3],al - 1001254E: 5F pop edi - 1001254F: 57 push edi - 10012550: 8D 45 FC lea eax,[ebp-4] - 10012553: 50 push eax - 10012554: 8D 45 08 lea eax,[ebp+8] - 10012557: 50 push eax - 10012558: E8 9A 56 00 00 call 10017BF7 - 1001255D: 83 C4 0C add esp,0Ch - 10012560: 83 F8 FF cmp eax,0FFFFFFFFh - 10012563: 0F 85 26 FF FF FF jne 1001248F - 10012569: E8 DB CA FF FF call 1000F049 - 1001256E: C7 00 2A 00 00 00 mov dword ptr [eax],2Ah - 10012574: E9 EB FE FF FF jmp 10012464 - 10012579: 83 46 04 FE add dword ptr [esi+4],0FFFFFFFEh - 1001257D: 78 0C js 1001258B - 1001257F: 8B 0E mov ecx,dword ptr [esi] - 10012581: 0F B7 01 movzx eax,word ptr [ecx] - 10012584: 83 C1 02 add ecx,2 - 10012587: 89 0E mov dword ptr [esi],ecx - 10012589: EB 07 jmp 10012592 - 1001258B: 56 push esi - 1001258C: E8 9A 6F 00 00 call 1001952B - 10012591: 59 pop ecx - 10012592: 5F pop edi - 10012593: 5E pop esi - 10012594: 5B pop ebx - 10012595: C9 leave - 10012596: C3 ret - 10012597: 8B FF mov edi,edi - 10012599: 55 push ebp - 1001259A: 8B EC mov ebp,esp - 1001259C: 56 push esi - 1001259D: 8B 75 08 mov esi,dword ptr [ebp+8] - 100125A0: 56 push esi - 100125A1: E8 41 DF FF FF call 100104E7 - 100125A6: 50 push eax - 100125A7: E8 33 53 00 00 call 100178DF - 100125AC: 59 pop ecx - 100125AD: 59 pop ecx - 100125AE: 85 C0 test eax,eax - 100125B0: 74 7C je 1001262E - 100125B2: E8 56 85 FF FF call 1000AB0D - 100125B7: 83 C0 20 add eax,20h - 100125BA: 3B F0 cmp esi,eax - 100125BC: 75 04 jne 100125C2 - 100125BE: 33 C0 xor eax,eax - 100125C0: EB 0F jmp 100125D1 - 100125C2: E8 46 85 FF FF call 1000AB0D - 100125C7: 83 C0 40 add eax,40h - 100125CA: 3B F0 cmp esi,eax - 100125CC: 75 60 jne 1001262E - 100125CE: 33 C0 xor eax,eax - 100125D0: 40 inc eax - 100125D1: FF 05 1C 61 02 10 inc dword ptr ds:[1002611Ch] - 100125D7: F7 46 0C 0C 01 00 test dword ptr [esi+0Ch],10Ch - 00 - 100125DE: 75 4E jne 1001262E - 100125E0: 53 push ebx - 100125E1: 57 push edi - 100125E2: 8D 3C 85 FC 69 02 lea edi,[eax*4+100269FCh] - 10 - 100125E9: 83 3F 00 cmp dword ptr [edi],0 - 100125EC: BB 00 10 00 00 mov ebx,1000h - 100125F1: 75 20 jne 10012613 - 100125F3: 53 push ebx - 100125F4: E8 10 03 00 00 call 10012909 - 100125F9: 59 pop ecx - 100125FA: 89 07 mov dword ptr [edi],eax - 100125FC: 85 C0 test eax,eax - 100125FE: 75 13 jne 10012613 - 10012600: 8D 46 14 lea eax,[esi+14h] - 10012603: 6A 02 push 2 - 10012605: 89 46 08 mov dword ptr [esi+8],eax - 10012608: 89 06 mov dword ptr [esi],eax - 1001260A: 58 pop eax - 1001260B: 89 46 18 mov dword ptr [esi+18h],eax - 1001260E: 89 46 04 mov dword ptr [esi+4],eax - 10012611: EB 0D jmp 10012620 - 10012613: 8B 3F mov edi,dword ptr [edi] - 10012615: 89 7E 08 mov dword ptr [esi+8],edi - 10012618: 89 3E mov dword ptr [esi],edi - 1001261A: 89 5E 18 mov dword ptr [esi+18h],ebx - 1001261D: 89 5E 04 mov dword ptr [esi+4],ebx - 10012620: 81 4E 0C 02 11 00 or dword ptr [esi+0Ch],1102h - 00 - 10012627: 33 C0 xor eax,eax - 10012629: 5F pop edi - 1001262A: 40 inc eax - 1001262B: 5B pop ebx - 1001262C: EB 02 jmp 10012630 - 1001262E: 33 C0 xor eax,eax - 10012630: 5E pop esi - 10012631: 5D pop ebp - 10012632: C3 ret - 10012633: 8B FF mov edi,edi - 10012635: 55 push ebp - 10012636: 8B EC mov ebp,esp - 10012638: 83 7D 08 00 cmp dword ptr [ebp+8],0 - 1001263C: 74 27 je 10012665 - 1001263E: 56 push esi - 1001263F: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 10012642: F7 46 0C 00 10 00 test dword ptr [esi+0Ch],1000h - 00 - 10012649: 74 19 je 10012664 - 1001264B: 56 push esi - 1001264C: E8 F9 DE FF FF call 1001054A - 10012651: 81 66 0C FF EE FF and dword ptr [esi+0Ch],0FFFFEEFFh - FF - 10012658: 83 66 18 00 and dword ptr [esi+18h],0 - 1001265C: 83 26 00 and dword ptr [esi],0 - 1001265F: 83 66 08 00 and dword ptr [esi+8],0 - 10012663: 59 pop ecx - 10012664: 5E pop esi - 10012665: 5D pop ebp - 10012666: C3 ret - 10012667: 6A 54 push 54h - 10012669: 68 E0 1D 02 10 push 10021DE0h - 1001266E: E8 15 DA FF FF call 10010088 - 10012673: 33 FF xor edi,edi - 10012675: 89 7D FC mov dword ptr [ebp-4],edi - 10012678: 8D 45 9C lea eax,[ebp-64h] - 1001267B: 50 push eax - 1001267C: FF 15 F8 F0 01 10 call dword ptr ds:[1001F0F8h] - 10012682: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 10012689: 6A 40 push 40h - 1001268B: 6A 20 push 20h - 1001268D: 5E pop esi - 1001268E: 56 push esi - 1001268F: E8 BA 02 00 00 call 1001294E - 10012694: 59 pop ecx - 10012695: 59 pop ecx - 10012696: 3B C7 cmp eax,edi - 10012698: 0F 84 14 02 00 00 je 100128B2 - 1001269E: A3 00 6C 02 10 mov dword ptr ds:[10026C00h],eax - 100126A3: 89 35 F4 6B 02 10 mov dword ptr ds:[10026BF4h],esi - 100126A9: 8D 88 00 08 00 00 lea ecx,[eax+00000800h] - 100126AF: EB 30 jmp 100126E1 - 100126B1: C6 40 04 00 mov byte ptr [eax+4],0 - 100126B5: 83 08 FF or dword ptr [eax],0FFFFFFFFh - 100126B8: C6 40 05 0A mov byte ptr [eax+5],0Ah - 100126BC: 89 78 08 mov dword ptr [eax+8],edi - 100126BF: C6 40 24 00 mov byte ptr [eax+24h],0 - 100126C3: C6 40 25 0A mov byte ptr [eax+25h],0Ah - 100126C7: C6 40 26 0A mov byte ptr [eax+26h],0Ah - 100126CB: 89 78 38 mov dword ptr [eax+38h],edi - 100126CE: C6 40 34 00 mov byte ptr [eax+34h],0 - 100126D2: 83 C0 40 add eax,40h - 100126D5: 8B 0D 00 6C 02 10 mov ecx,dword ptr ds:[10026C00h] - 100126DB: 81 C1 00 08 00 00 add ecx,800h - 100126E1: 3B C1 cmp eax,ecx - 100126E3: 72 CC jb 100126B1 - 100126E5: 66 39 7D CE cmp word ptr [ebp-32h],di - 100126E9: 0F 84 0A 01 00 00 je 100127F9 - 100126EF: 8B 45 D0 mov eax,dword ptr [ebp-30h] - 100126F2: 3B C7 cmp eax,edi - 100126F4: 0F 84 FF 00 00 00 je 100127F9 - 100126FA: 8B 38 mov edi,dword ptr [eax] - 100126FC: 8D 58 04 lea ebx,[eax+4] - 100126FF: 8D 04 3B lea eax,[ebx+edi] - 10012702: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 10012705: BE 00 08 00 00 mov esi,800h - 1001270A: 3B FE cmp edi,esi - 1001270C: 7C 02 jl 10012710 - 1001270E: 8B FE mov edi,esi - 10012710: C7 45 E0 01 00 00 mov dword ptr [ebp-20h],1 - 00 - 10012717: EB 5B jmp 10012774 - 10012719: 6A 40 push 40h - 1001271B: 6A 20 push 20h - 1001271D: E8 2C 02 00 00 call 1001294E - 10012722: 59 pop ecx - 10012723: 59 pop ecx - 10012724: 85 C0 test eax,eax - 10012726: 74 56 je 1001277E - 10012728: 8B 4D E0 mov ecx,dword ptr [ebp-20h] - 1001272B: 8D 0C 8D 00 6C 02 lea ecx,[ecx*4+10026C00h] - 10 - 10012732: 89 01 mov dword ptr [ecx],eax - 10012734: 83 05 F4 6B 02 10 add dword ptr ds:[10026BF4h],20h - 20 - 1001273B: 8D 90 00 08 00 00 lea edx,[eax+00000800h] - 10012741: EB 2A jmp 1001276D - 10012743: C6 40 04 00 mov byte ptr [eax+4],0 - 10012747: 83 08 FF or dword ptr [eax],0FFFFFFFFh - 1001274A: C6 40 05 0A mov byte ptr [eax+5],0Ah - 1001274E: 83 60 08 00 and dword ptr [eax+8],0 - 10012752: 80 60 24 80 and byte ptr [eax+24h],80h - 10012756: C6 40 25 0A mov byte ptr [eax+25h],0Ah - 1001275A: C6 40 26 0A mov byte ptr [eax+26h],0Ah - 1001275E: 83 60 38 00 and dword ptr [eax+38h],0 - 10012762: C6 40 34 00 mov byte ptr [eax+34h],0 - 10012766: 83 C0 40 add eax,40h - 10012769: 8B 11 mov edx,dword ptr [ecx] - 1001276B: 03 D6 add edx,esi - 1001276D: 3B C2 cmp eax,edx - 1001276F: 72 D2 jb 10012743 - 10012771: FF 45 E0 inc dword ptr [ebp-20h] - 10012774: 39 3D F4 6B 02 10 cmp dword ptr ds:[10026BF4h],edi - 1001277A: 7C 9D jl 10012719 - 1001277C: EB 06 jmp 10012784 - 1001277E: 8B 3D F4 6B 02 10 mov edi,dword ptr ds:[10026BF4h] - 10012784: 83 65 E0 00 and dword ptr [ebp-20h],0 - 10012788: 85 FF test edi,edi - 1001278A: 7E 6D jle 100127F9 - 1001278C: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 1001278F: 8B 08 mov ecx,dword ptr [eax] - 10012791: 83 F9 FF cmp ecx,0FFFFFFFFh - 10012794: 74 56 je 100127EC - 10012796: 83 F9 FE cmp ecx,0FFFFFFFEh - 10012799: 74 51 je 100127EC - 1001279B: 8A 03 mov al,byte ptr [ebx] - 1001279D: A8 01 test al,1 - 1001279F: 74 4B je 100127EC - 100127A1: A8 08 test al,8 - 100127A3: 75 0B jne 100127B0 - 100127A5: 51 push ecx - 100127A6: FF 15 F4 F0 01 10 call dword ptr ds:[1001F0F4h] - 100127AC: 85 C0 test eax,eax - 100127AE: 74 3C je 100127EC - 100127B0: 8B 75 E0 mov esi,dword ptr [ebp-20h] - 100127B3: 8B C6 mov eax,esi - 100127B5: C1 F8 05 sar eax,5 - 100127B8: 83 E6 1F and esi,1Fh - 100127BB: C1 E6 06 shl esi,6 - 100127BE: 03 34 85 00 6C 02 add esi,dword ptr [eax*4+10026C00h] - 10 - 100127C5: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 100127C8: 8B 00 mov eax,dword ptr [eax] - 100127CA: 89 06 mov dword ptr [esi],eax - 100127CC: 8A 03 mov al,byte ptr [ebx] - 100127CE: 88 46 04 mov byte ptr [esi+4],al - 100127D1: 68 A0 0F 00 00 push 0FA0h - 100127D6: 8D 46 0C lea eax,[esi+0Ch] - 100127D9: 50 push eax - 100127DA: E8 25 55 00 00 call 10017D04 - 100127DF: 59 pop ecx - 100127E0: 59 pop ecx - 100127E1: 85 C0 test eax,eax - 100127E3: 0F 84 C9 00 00 00 je 100128B2 - 100127E9: FF 46 08 inc dword ptr [esi+8] - 100127EC: FF 45 E0 inc dword ptr [ebp-20h] - 100127EF: 43 inc ebx - 100127F0: 83 45 E4 04 add dword ptr [ebp-1Ch],4 - 100127F4: 39 7D E0 cmp dword ptr [ebp-20h],edi - 100127F7: 7C 93 jl 1001278C - 100127F9: 33 DB xor ebx,ebx - 100127FB: 8B F3 mov esi,ebx - 100127FD: C1 E6 06 shl esi,6 - 10012800: 03 35 00 6C 02 10 add esi,dword ptr ds:[10026C00h] - 10012806: 8B 06 mov eax,dword ptr [esi] - 10012808: 83 F8 FF cmp eax,0FFFFFFFFh - 1001280B: 74 0B je 10012818 - 1001280D: 83 F8 FE cmp eax,0FFFFFFFEh - 10012810: 74 06 je 10012818 - 10012812: 80 4E 04 80 or byte ptr [esi+4],80h - 10012816: EB 72 jmp 1001288A - 10012818: C6 46 04 81 mov byte ptr [esi+4],81h - 1001281C: 85 DB test ebx,ebx - 1001281E: 75 05 jne 10012825 - 10012820: 6A F6 push 0FFFFFFF6h - 10012822: 58 pop eax - 10012823: EB 0A jmp 1001282F - 10012825: 8B C3 mov eax,ebx - 10012827: 48 dec eax - 10012828: F7 D8 neg eax - 1001282A: 1B C0 sbb eax,eax - 1001282C: 83 C0 F5 add eax,0FFFFFFF5h - 1001282F: 50 push eax - 10012830: FF 15 B4 F0 01 10 call dword ptr ds:[1001F0B4h] - 10012836: 8B F8 mov edi,eax - 10012838: 83 FF FF cmp edi,0FFFFFFFFh - 1001283B: 74 43 je 10012880 - 1001283D: 85 FF test edi,edi - 1001283F: 74 3F je 10012880 - 10012841: 57 push edi - 10012842: FF 15 F4 F0 01 10 call dword ptr ds:[1001F0F4h] - 10012848: 85 C0 test eax,eax - 1001284A: 74 34 je 10012880 - 1001284C: 89 3E mov dword ptr [esi],edi - 1001284E: 25 FF 00 00 00 and eax,0FFh - 10012853: 83 F8 02 cmp eax,2 - 10012856: 75 06 jne 1001285E - 10012858: 80 4E 04 40 or byte ptr [esi+4],40h - 1001285C: EB 09 jmp 10012867 - 1001285E: 83 F8 03 cmp eax,3 - 10012861: 75 04 jne 10012867 - 10012863: 80 4E 04 08 or byte ptr [esi+4],8 - 10012867: 68 A0 0F 00 00 push 0FA0h - 1001286C: 8D 46 0C lea eax,[esi+0Ch] - 1001286F: 50 push eax - 10012870: E8 8F 54 00 00 call 10017D04 - 10012875: 59 pop ecx - 10012876: 59 pop ecx - 10012877: 85 C0 test eax,eax - 10012879: 74 37 je 100128B2 - 1001287B: FF 46 08 inc dword ptr [esi+8] - 1001287E: EB 0A jmp 1001288A - 10012880: 80 4E 04 40 or byte ptr [esi+4],40h - 10012884: C7 06 FE FF FF FF mov dword ptr [esi],0FFFFFFFEh - 1001288A: 43 inc ebx - 1001288B: 83 FB 03 cmp ebx,3 - 1001288E: 0F 8C 67 FF FF FF jl 100127FB - 10012894: FF 35 F4 6B 02 10 push dword ptr ds:[10026BF4h] - 1001289A: FF 15 F0 F0 01 10 call dword ptr ds:[1001F0F0h] - 100128A0: 33 C0 xor eax,eax - 100128A2: EB 11 jmp 100128B5 - 100128A4: 33 C0 xor eax,eax - 100128A6: 40 inc eax - 100128A7: C3 ret - 100128A8: 8B 65 E8 mov esp,dword ptr [ebp-18h] - 100128AB: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 100128B2: 83 C8 FF or eax,0FFFFFFFFh - 100128B5: E8 13 D8 FF FF call 100100CD - 100128BA: C3 ret - 100128BB: 8B FF mov edi,edi - 100128BD: 56 push esi - 100128BE: 57 push edi - 100128BF: BE 00 6C 02 10 mov esi,10026C00h - 100128C4: 8B 3E mov edi,dword ptr [esi] - 100128C6: 85 FF test edi,edi - 100128C8: 74 31 je 100128FB - 100128CA: 8D 87 00 08 00 00 lea eax,[edi+00000800h] - 100128D0: EB 1A jmp 100128EC - 100128D2: 83 7F 08 00 cmp dword ptr [edi+8],0 - 100128D6: 74 0A je 100128E2 - 100128D8: 8D 47 0C lea eax,[edi+0Ch] - 100128DB: 50 push eax - 100128DC: FF 15 C8 F0 01 10 call dword ptr ds:[1001F0C8h] - 100128E2: 8B 06 mov eax,dword ptr [esi] - 100128E4: 83 C7 40 add edi,40h - 100128E7: 05 00 08 00 00 add eax,800h - 100128EC: 3B F8 cmp edi,eax - 100128EE: 72 E2 jb 100128D2 - 100128F0: FF 36 push dword ptr [esi] - 100128F2: E8 3D 7A FF FF call 1000A334 - 100128F7: 83 26 00 and dword ptr [esi],0 - 100128FA: 59 pop ecx - 100128FB: 83 C6 04 add esi,4 - 100128FE: 81 FE 00 6D 02 10 cmp esi,10026D00h - 10012904: 7C BE jl 100128C4 - 10012906: 5F pop edi - 10012907: 5E pop esi - 10012908: C3 ret - 10012909: 8B FF mov edi,edi - 1001290B: 55 push ebp - 1001290C: 8B EC mov ebp,esp - 1001290E: 56 push esi - 1001290F: 57 push edi - 10012910: 33 F6 xor esi,esi - 10012912: FF 75 08 push dword ptr [ebp+8] - 10012915: E8 1C B4 FF FF call 1000DD36 - 1001291A: 8B F8 mov edi,eax - 1001291C: 59 pop ecx - 1001291D: 85 FF test edi,edi - 1001291F: 75 27 jne 10012948 - 10012921: 39 05 04 6A 02 10 cmp dword ptr ds:[10026A04h],eax - 10012927: 76 1F jbe 10012948 - 10012929: 56 push esi - 1001292A: FF 15 30 F0 01 10 call dword ptr ds:[1001F030h] - 10012930: 8D 86 E8 03 00 00 lea eax,[esi+000003E8h] - 10012936: 3B 05 04 6A 02 10 cmp eax,dword ptr ds:[10026A04h] - 1001293C: 76 03 jbe 10012941 - 1001293E: 83 C8 FF or eax,0FFFFFFFFh - 10012941: 8B F0 mov esi,eax - 10012943: 83 F8 FF cmp eax,0FFFFFFFFh - 10012946: 75 CA jne 10012912 - 10012948: 8B C7 mov eax,edi - 1001294A: 5F pop edi - 1001294B: 5E pop esi - 1001294C: 5D pop ebp - 1001294D: C3 ret - 1001294E: 8B FF mov edi,edi - 10012950: 55 push ebp - 10012951: 8B EC mov ebp,esp - 10012953: 56 push esi - 10012954: 57 push edi - 10012955: 33 F6 xor esi,esi - 10012957: 6A 00 push 0 - 10012959: FF 75 0C push dword ptr [ebp+0Ch] - 1001295C: FF 75 08 push dword ptr [ebp+8] - 1001295F: E8 0F 16 00 00 call 10013F73 - 10012964: 8B F8 mov edi,eax - 10012966: 83 C4 0C add esp,0Ch - 10012969: 85 FF test edi,edi - 1001296B: 75 27 jne 10012994 - 1001296D: 39 05 04 6A 02 10 cmp dword ptr ds:[10026A04h],eax - 10012973: 76 1F jbe 10012994 - 10012975: 56 push esi - 10012976: FF 15 30 F0 01 10 call dword ptr ds:[1001F030h] - 1001297C: 8D 86 E8 03 00 00 lea eax,[esi+000003E8h] - 10012982: 3B 05 04 6A 02 10 cmp eax,dword ptr ds:[10026A04h] - 10012988: 76 03 jbe 1001298D - 1001298A: 83 C8 FF or eax,0FFFFFFFFh - 1001298D: 8B F0 mov esi,eax - 1001298F: 83 F8 FF cmp eax,0FFFFFFFFh - 10012992: 75 C3 jne 10012957 - 10012994: 8B C7 mov eax,edi - 10012996: 5F pop edi - 10012997: 5E pop esi - 10012998: 5D pop ebp - 10012999: C3 ret - 1001299A: 8B FF mov edi,edi - 1001299C: 55 push ebp - 1001299D: 8B EC mov ebp,esp - 1001299F: 56 push esi - 100129A0: 57 push edi - 100129A1: 33 F6 xor esi,esi - 100129A3: FF 75 0C push dword ptr [ebp+0Ch] - 100129A6: FF 75 08 push dword ptr [ebp+8] - 100129A9: E8 44 6F 00 00 call 100198F2 - 100129AE: 8B F8 mov edi,eax - 100129B0: 59 pop ecx - 100129B1: 59 pop ecx - 100129B2: 85 FF test edi,edi - 100129B4: 75 2C jne 100129E2 - 100129B6: 39 45 0C cmp dword ptr [ebp+0Ch],eax - 100129B9: 74 27 je 100129E2 - 100129BB: 39 05 04 6A 02 10 cmp dword ptr ds:[10026A04h],eax - 100129C1: 76 1F jbe 100129E2 - 100129C3: 56 push esi - 100129C4: FF 15 30 F0 01 10 call dword ptr ds:[1001F030h] - 100129CA: 8D 86 E8 03 00 00 lea eax,[esi+000003E8h] - 100129D0: 3B 05 04 6A 02 10 cmp eax,dword ptr ds:[10026A04h] - 100129D6: 76 03 jbe 100129DB - 100129D8: 83 C8 FF or eax,0FFFFFFFFh - 100129DB: 8B F0 mov esi,eax - 100129DD: 83 F8 FF cmp eax,0FFFFFFFFh - 100129E0: 75 C1 jne 100129A3 - 100129E2: 8B C7 mov eax,edi - 100129E4: 5F pop edi - 100129E5: 5E pop esi - 100129E6: 5D pop ebp - 100129E7: C3 ret - 100129E8: 8B FF mov edi,edi - 100129EA: 55 push ebp - 100129EB: 8B EC mov ebp,esp - 100129ED: 56 push esi - 100129EE: 57 push edi - 100129EF: 33 F6 xor esi,esi - 100129F1: FF 75 10 push dword ptr [ebp+10h] - 100129F4: FF 75 0C push dword ptr [ebp+0Ch] - 100129F7: FF 75 08 push dword ptr [ebp+8] - 100129FA: E8 0E 71 00 00 call 10019B0D - 100129FF: 8B F8 mov edi,eax - 10012A01: 83 C4 0C add esp,0Ch - 10012A04: 85 FF test edi,edi - 10012A06: 75 2C jne 10012A34 - 10012A08: 39 45 10 cmp dword ptr [ebp+10h],eax - 10012A0B: 74 27 je 10012A34 - 10012A0D: 39 05 04 6A 02 10 cmp dword ptr ds:[10026A04h],eax - 10012A13: 76 1F jbe 10012A34 - 10012A15: 56 push esi - 10012A16: FF 15 30 F0 01 10 call dword ptr ds:[1001F030h] - 10012A1C: 8D 86 E8 03 00 00 lea eax,[esi+000003E8h] - 10012A22: 3B 05 04 6A 02 10 cmp eax,dword ptr ds:[10026A04h] - 10012A28: 76 03 jbe 10012A2D - 10012A2A: 83 C8 FF or eax,0FFFFFFFFh - 10012A2D: 8B F0 mov esi,eax - 10012A2F: 83 F8 FF cmp eax,0FFFFFFFFh - 10012A32: 75 BD jne 100129F1 - 10012A34: 8B C7 mov eax,edi - 10012A36: 5F pop edi - 10012A37: 5E pop esi - 10012A38: 5D pop ebp - 10012A39: C3 ret - 10012A3A: 6A 10 push 10h - 10012A3C: 68 00 1E 02 10 push 10021E00h - 10012A41: E8 42 D6 FF FF call 10010088 - 10012A46: 33 DB xor ebx,ebx - 10012A48: 89 5D E4 mov dword ptr [ebp-1Ch],ebx - 10012A4B: 6A 01 push 1 - 10012A4D: E8 3C CB FF FF call 1000F58E - 10012A52: 59 pop ecx - 10012A53: 89 5D FC mov dword ptr [ebp-4],ebx - 10012A56: 6A 03 push 3 - 10012A58: 5F pop edi - 10012A59: 89 7D E0 mov dword ptr [ebp-20h],edi - 10012A5C: 3B 3D 40 7D 02 10 cmp edi,dword ptr ds:[10027D40h] - 10012A62: 7D 57 jge 10012ABB - 10012A64: 8B F7 mov esi,edi - 10012A66: C1 E6 02 shl esi,2 - 10012A69: A1 24 6D 02 10 mov eax,dword ptr ds:[10026D24h] - 10012A6E: 03 C6 add eax,esi - 10012A70: 39 18 cmp dword ptr [eax],ebx - 10012A72: 74 44 je 10012AB8 - 10012A74: 8B 00 mov eax,dword ptr [eax] - 10012A76: F6 40 0C 83 test byte ptr [eax+0Ch],83h - 10012A7A: 74 0F je 10012A8B - 10012A7C: 50 push eax - 10012A7D: E8 4C 7B FF FF call 1000A5CE - 10012A82: 59 pop ecx - 10012A83: 83 F8 FF cmp eax,0FFFFFFFFh - 10012A86: 74 03 je 10012A8B - 10012A88: FF 45 E4 inc dword ptr [ebp-1Ch] - 10012A8B: 83 FF 14 cmp edi,14h - 10012A8E: 7C 28 jl 10012AB8 - 10012A90: A1 24 6D 02 10 mov eax,dword ptr ds:[10026D24h] - 10012A95: 8B 04 06 mov eax,dword ptr [esi+eax] - 10012A98: 83 C0 20 add eax,20h - 10012A9B: 50 push eax - 10012A9C: FF 15 C8 F0 01 10 call dword ptr ds:[1001F0C8h] - 10012AA2: A1 24 6D 02 10 mov eax,dword ptr ds:[10026D24h] - 10012AA7: FF 34 06 push dword ptr [esi+eax] - 10012AAA: E8 85 78 FF FF call 1000A334 - 10012AAF: 59 pop ecx - 10012AB0: A1 24 6D 02 10 mov eax,dword ptr ds:[10026D24h] - 10012AB5: 89 1C 06 mov dword ptr [esi+eax],ebx - 10012AB8: 47 inc edi - 10012AB9: EB 9E jmp 10012A59 - 10012ABB: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 10012AC2: E8 09 00 00 00 call 10012AD0 - 10012AC7: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 10012ACA: E8 FE D5 FF FF call 100100CD - 10012ACF: C3 ret - 10012AD0: 6A 01 push 1 - 10012AD2: E8 DD C9 FF FF call 1000F4B4 - 10012AD7: 59 pop ecx - 10012AD8: C3 ret - 10012AD9: 8B FF mov edi,edi - 10012ADB: 55 push ebp - 10012ADC: 8B EC mov ebp,esp - 10012ADE: 57 push edi - 10012ADF: BF E8 03 00 00 mov edi,3E8h - 10012AE4: 57 push edi - 10012AE5: FF 15 30 F0 01 10 call dword ptr ds:[1001F030h] - 10012AEB: FF 75 08 push dword ptr [ebp+8] - 10012AEE: FF 15 7C F0 01 10 call dword ptr ds:[1001F07Ch] - 10012AF4: 81 C7 E8 03 00 00 add edi,3E8h - 10012AFA: 81 FF 60 EA 00 00 cmp edi,0EA60h - 10012B00: 77 04 ja 10012B06 - 10012B02: 85 C0 test eax,eax - 10012B04: 74 DE je 10012AE4 - 10012B06: 5F pop edi - 10012B07: 5D pop ebp - 10012B08: C3 ret - 10012B09: 8B FF mov edi,edi - 10012B0B: 55 push ebp - 10012B0C: 8B EC mov ebp,esp - 10012B0E: E8 53 B6 FF FF call 1000E166 - 10012B13: FF 75 08 push dword ptr [ebp+8] - 10012B16: E8 A0 B4 FF FF call 1000DFBB - 10012B1B: FF 35 B0 56 02 10 push dword ptr ds:[100256B0h] - 10012B21: E8 F0 A6 FF FF call 1000D216 - 10012B26: 68 FF 00 00 00 push 0FFh - 10012B2B: FF D0 call eax - 10012B2D: 83 C4 0C add esp,0Ch - 10012B30: 5D pop ebp - 10012B31: C3 ret - 10012B32: 8B FF mov edi,edi - 10012B34: 55 push ebp - 10012B35: 8B EC mov ebp,esp - 10012B37: 68 2C 00 02 10 push 1002002Ch - 10012B3C: FF 15 7C F0 01 10 call dword ptr ds:[1001F07Ch] - 10012B42: 85 C0 test eax,eax - 10012B44: 74 15 je 10012B5B - 10012B46: 68 1C 00 02 10 push 1002001Ch - 10012B4B: 50 push eax - 10012B4C: FF 15 80 F0 01 10 call dword ptr ds:[1001F080h] - 10012B52: 85 C0 test eax,eax - 10012B54: 74 05 je 10012B5B - 10012B56: FF 75 08 push dword ptr [ebp+8] - 10012B59: FF D0 call eax - 10012B5B: 5D pop ebp - 10012B5C: C3 ret - 10012B5D: 8B FF mov edi,edi - 10012B5F: 55 push ebp - 10012B60: 8B EC mov ebp,esp - 10012B62: FF 75 08 push dword ptr [ebp+8] - 10012B65: E8 C8 FF FF FF call 10012B32 - 10012B6A: 59 pop ecx - 10012B6B: FF 75 08 push dword ptr [ebp+8] - 10012B6E: FF 15 FC F0 01 10 call dword ptr ds:[1001F0FCh] - 10012B74: CC int 3 - 10012B75: 6A 08 push 8 - 10012B77: E8 12 CA FF FF call 1000F58E - 10012B7C: 59 pop ecx - 10012B7D: C3 ret - 10012B7E: 6A 08 push 8 - 10012B80: E8 2F C9 FF FF call 1000F4B4 - 10012B85: 59 pop ecx - 10012B86: C3 ret - 10012B87: 8B FF mov edi,edi - 10012B89: 55 push ebp - 10012B8A: 8B EC mov ebp,esp - 10012B8C: 56 push esi - 10012B8D: 8B F0 mov esi,eax - 10012B8F: EB 0B jmp 10012B9C - 10012B91: 8B 06 mov eax,dword ptr [esi] - 10012B93: 85 C0 test eax,eax - 10012B95: 74 02 je 10012B99 - 10012B97: FF D0 call eax - 10012B99: 83 C6 04 add esi,4 - 10012B9C: 3B 75 08 cmp esi,dword ptr [ebp+8] - 10012B9F: 72 F0 jb 10012B91 - 10012BA1: 5E pop esi - 10012BA2: 5D pop ebp - 10012BA3: C3 ret - 10012BA4: 8B FF mov edi,edi - 10012BA6: 55 push ebp - 10012BA7: 8B EC mov ebp,esp - 10012BA9: 56 push esi - 10012BAA: 8B 75 08 mov esi,dword ptr [ebp+8] - 10012BAD: 33 C0 xor eax,eax - 10012BAF: EB 0F jmp 10012BC0 - 10012BB1: 85 C0 test eax,eax - 10012BB3: 75 10 jne 10012BC5 - 10012BB5: 8B 0E mov ecx,dword ptr [esi] - 10012BB7: 85 C9 test ecx,ecx - 10012BB9: 74 02 je 10012BBD - 10012BBB: FF D1 call ecx - 10012BBD: 83 C6 04 add esi,4 - 10012BC0: 3B 75 0C cmp esi,dword ptr [ebp+0Ch] - 10012BC3: 72 EC jb 10012BB1 - 10012BC5: 5E pop esi - 10012BC6: 5D pop ebp - 10012BC7: C3 ret - 10012BC8: 8B FF mov edi,edi - 10012BCA: 55 push ebp - 10012BCB: 8B EC mov ebp,esp - 10012BCD: 83 3D B0 F8 01 10 cmp dword ptr ds:[1001F8B0h],0 - 00 - 10012BD4: 74 19 je 10012BEF - 10012BD6: 68 B0 F8 01 10 push 1001F8B0h - 10012BDB: E8 20 52 00 00 call 10017E00 - 10012BE0: 59 pop ecx - 10012BE1: 85 C0 test eax,eax - 10012BE3: 74 0A je 10012BEF - 10012BE5: FF 75 08 push dword ptr [ebp+8] - 10012BE8: FF 15 B0 F8 01 10 call dword ptr ds:[1001F8B0h] - 10012BEE: 59 pop ecx - 10012BEF: E8 5F 24 00 00 call 10015053 - 10012BF4: 68 98 F1 01 10 push 1001F198h - 10012BF9: 68 84 F1 01 10 push 1001F184h - 10012BFE: E8 A1 FF FF FF call 10012BA4 - 10012C03: 59 pop ecx - 10012C04: 59 pop ecx - 10012C05: 85 C0 test eax,eax - 10012C07: 75 42 jne 10012C4B - 10012C09: 68 D4 61 01 10 push 100161D4h - 10012C0E: E8 BD B0 FF FF call 1000DCD0 - 10012C13: B8 7C F1 01 10 mov eax,1001F17Ch - 10012C18: C7 04 24 80 F1 01 mov dword ptr [esp],1001F180h - 10 - 10012C1F: E8 63 FF FF FF call 10012B87 - 10012C24: 83 3D F0 6B 02 10 cmp dword ptr ds:[10026BF0h],0 - 00 - 10012C2B: 59 pop ecx - 10012C2C: 74 1B je 10012C49 - 10012C2E: 68 F0 6B 02 10 push 10026BF0h - 10012C33: E8 C8 51 00 00 call 10017E00 - 10012C38: 59 pop ecx - 10012C39: 85 C0 test eax,eax - 10012C3B: 74 0C je 10012C49 - 10012C3D: 6A 00 push 0 - 10012C3F: 6A 02 push 2 - 10012C41: 6A 00 push 0 - 10012C43: FF 15 F0 6B 02 10 call dword ptr ds:[10026BF0h] - 10012C49: 33 C0 xor eax,eax - 10012C4B: 5D pop ebp - 10012C4C: C3 ret - 10012C4D: 6A 18 push 18h - 10012C4F: 68 20 1E 02 10 push 10021E20h - 10012C54: E8 2F D4 FF FF call 10010088 - 10012C59: 6A 08 push 8 - 10012C5B: E8 2E C9 FF FF call 1000F58E - 10012C60: 59 pop ecx - 10012C61: 83 65 FC 00 and dword ptr [ebp-4],0 - 10012C65: 33 DB xor ebx,ebx - 10012C67: 43 inc ebx - 10012C68: 39 1D 38 6A 02 10 cmp dword ptr ds:[10026A38h],ebx - 10012C6E: 0F 84 C5 00 00 00 je 10012D39 - 10012C74: 89 1D 34 6A 02 10 mov dword ptr ds:[10026A34h],ebx - 10012C7A: 8A 45 10 mov al,byte ptr [ebp+10h] - 10012C7D: A2 30 6A 02 10 mov byte ptr ds:[10026A30h],al - 10012C82: 83 7D 0C 00 cmp dword ptr [ebp+0Ch],0 - 10012C86: 0F 85 9D 00 00 00 jne 10012D29 - 10012C8C: FF 35 E8 6B 02 10 push dword ptr ds:[10026BE8h] - 10012C92: E8 7F A5 FF FF call 1000D216 - 10012C97: 59 pop ecx - 10012C98: 8B F8 mov edi,eax - 10012C9A: 89 7D D8 mov dword ptr [ebp-28h],edi - 10012C9D: 85 FF test edi,edi - 10012C9F: 74 78 je 10012D19 - 10012CA1: FF 35 E4 6B 02 10 push dword ptr ds:[10026BE4h] - 10012CA7: E8 6A A5 FF FF call 1000D216 - 10012CAC: 59 pop ecx - 10012CAD: 8B F0 mov esi,eax - 10012CAF: 89 75 DC mov dword ptr [ebp-24h],esi - 10012CB2: 89 7D E4 mov dword ptr [ebp-1Ch],edi - 10012CB5: 89 75 E0 mov dword ptr [ebp-20h],esi - 10012CB8: 83 EE 04 sub esi,4 - 10012CBB: 89 75 DC mov dword ptr [ebp-24h],esi - 10012CBE: 3B F7 cmp esi,edi - 10012CC0: 72 57 jb 10012D19 - 10012CC2: E8 46 A5 FF FF call 1000D20D - 10012CC7: 39 06 cmp dword ptr [esi],eax - 10012CC9: 74 ED je 10012CB8 - 10012CCB: 3B F7 cmp esi,edi - 10012CCD: 72 4A jb 10012D19 - 10012CCF: FF 36 push dword ptr [esi] - 10012CD1: E8 40 A5 FF FF call 1000D216 - 10012CD6: 8B F8 mov edi,eax - 10012CD8: E8 30 A5 FF FF call 1000D20D - 10012CDD: 89 06 mov dword ptr [esi],eax - 10012CDF: FF D7 call edi - 10012CE1: FF 35 E8 6B 02 10 push dword ptr ds:[10026BE8h] - 10012CE7: E8 2A A5 FF FF call 1000D216 - 10012CEC: 8B F8 mov edi,eax - 10012CEE: FF 35 E4 6B 02 10 push dword ptr ds:[10026BE4h] - 10012CF4: E8 1D A5 FF FF call 1000D216 - 10012CF9: 83 C4 0C add esp,0Ch - 10012CFC: 39 7D E4 cmp dword ptr [ebp-1Ch],edi - 10012CFF: 75 05 jne 10012D06 - 10012D01: 39 45 E0 cmp dword ptr [ebp-20h],eax - 10012D04: 74 0E je 10012D14 - 10012D06: 89 7D E4 mov dword ptr [ebp-1Ch],edi - 10012D09: 89 7D D8 mov dword ptr [ebp-28h],edi - 10012D0C: 89 45 E0 mov dword ptr [ebp-20h],eax - 10012D0F: 8B F0 mov esi,eax - 10012D11: 89 75 DC mov dword ptr [ebp-24h],esi - 10012D14: 8B 7D D8 mov edi,dword ptr [ebp-28h] - 10012D17: EB 9F jmp 10012CB8 - 10012D19: 68 A8 F1 01 10 push 1001F1A8h - 10012D1E: B8 9C F1 01 10 mov eax,1001F19Ch - 10012D23: E8 5F FE FF FF call 10012B87 - 10012D28: 59 pop ecx - 10012D29: 68 B0 F1 01 10 push 1001F1B0h - 10012D2E: B8 AC F1 01 10 mov eax,1001F1ACh - 10012D33: E8 4F FE FF FF call 10012B87 - 10012D38: 59 pop ecx - 10012D39: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 10012D40: E8 1F 00 00 00 call 10012D64 - 10012D45: 83 7D 10 00 cmp dword ptr [ebp+10h],0 - 10012D49: 75 28 jne 10012D73 - 10012D4B: 89 1D 38 6A 02 10 mov dword ptr ds:[10026A38h],ebx - 10012D51: 6A 08 push 8 - 10012D53: E8 5C C7 FF FF call 1000F4B4 - 10012D58: 59 pop ecx - 10012D59: FF 75 08 push dword ptr [ebp+8] - 10012D5C: E8 FC FD FF FF call 10012B5D - 10012D61: 33 DB xor ebx,ebx - 10012D63: 43 inc ebx - 10012D64: 83 7D 10 00 cmp dword ptr [ebp+10h],0 - 10012D68: 74 08 je 10012D72 - 10012D6A: 6A 08 push 8 - 10012D6C: E8 43 C7 FF FF call 1000F4B4 - 10012D71: 59 pop ecx - 10012D72: C3 ret - 10012D73: E8 55 D3 FF FF call 100100CD - 10012D78: C3 ret - 10012D79: 8B FF mov edi,edi - 10012D7B: 55 push ebp - 10012D7C: 8B EC mov ebp,esp - 10012D7E: 6A 00 push 0 - 10012D80: 6A 01 push 1 - 10012D82: FF 75 08 push dword ptr [ebp+8] - 10012D85: E8 C3 FE FF FF call 10012C4D - 10012D8A: 83 C4 0C add esp,0Ch - 10012D8D: 5D pop ebp - 10012D8E: C3 ret - 10012D8F: 6A 01 push 1 - 10012D91: 6A 00 push 0 - 10012D93: 6A 00 push 0 - 10012D95: E8 B3 FE FF FF call 10012C4D - 10012D9A: 83 C4 0C add esp,0Ch - 10012D9D: C3 ret - 10012D9E: 8B FF mov edi,edi - 10012DA0: 56 push esi - 10012DA1: E8 67 A4 FF FF call 1000D20D - 10012DA6: 8B F0 mov esi,eax - 10012DA8: 56 push esi - 10012DA9: E8 52 B0 FF FF call 1000DE00 - 10012DAE: 56 push esi - 10012DAF: E8 41 4F 00 00 call 10017CF5 - 10012DB4: 56 push esi - 10012DB5: E8 F0 C0 FF FF call 1000EEAA - 10012DBA: 56 push esi - 10012DBB: E8 DF B3 FF FF call 1000E19F - 10012DC0: 56 push esi - 10012DC1: E8 C2 6D 00 00 call 10019B88 - 10012DC6: 56 push esi - 10012DC7: E8 DE 3B 00 00 call 100169AA - 10012DCC: 56 push esi - 10012DCD: E8 28 34 00 00 call 100161FA - 10012DD2: 56 push esi - 10012DD3: E8 52 AA FF FF call 1000D82A - 10012DD8: 68 79 2D 01 10 push 10012D79h - 10012DDD: E8 B9 A3 FF FF call 1000D19B - 10012DE2: 83 C4 24 add esp,24h - 10012DE5: A3 B0 56 02 10 mov dword ptr ds:[100256B0h],eax - 10012DEA: 5E pop esi - 10012DEB: C3 ret - 10012DEC: 8B FF mov edi,edi - 10012DEE: 55 push ebp - 10012DEF: 8B EC mov ebp,esp - 10012DF1: 83 EC 10 sub esp,10h - 10012DF4: A1 CC 6B 02 10 mov eax,dword ptr ds:[10026BCCh] - 10012DF9: 53 push ebx - 10012DFA: 56 push esi - 10012DFB: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 10012DFE: 57 push edi - 10012DFF: 33 FF xor edi,edi - 10012E01: 89 45 FC mov dword ptr [ebp-4],eax - 10012E04: 89 7D F4 mov dword ptr [ebp-0Ch],edi - 10012E07: 89 7D F8 mov dword ptr [ebp-8],edi - 10012E0A: 89 7D F0 mov dword ptr [ebp-10h],edi - 10012E0D: EB 02 jmp 10012E11 - 10012E0F: 46 inc esi - 10012E10: 46 inc esi - 10012E11: 66 83 3E 20 cmp word ptr [esi],20h - 10012E15: 74 F8 je 10012E0F - 10012E17: 0F B7 06 movzx eax,word ptr [esi] - 10012E1A: 83 F8 61 cmp eax,61h - 10012E1D: 74 38 je 10012E57 - 10012E1F: 83 F8 72 cmp eax,72h - 10012E22: 74 2B je 10012E4F - 10012E24: 83 F8 77 cmp eax,77h - 10012E27: 74 1F je 10012E48 - 10012E29: E8 1B C2 FF FF call 1000F049 - 10012E2E: 57 push edi - 10012E2F: 57 push edi - 10012E30: 57 push edi - 10012E31: 57 push edi - 10012E32: 57 push edi - 10012E33: C7 00 16 00 00 00 mov dword ptr [eax],16h - 10012E39: E8 A3 C1 FF FF call 1000EFE1 - 10012E3E: 83 C4 14 add esp,14h - 10012E41: 33 C0 xor eax,eax - 10012E43: E9 53 02 00 00 jmp 1001309B - 10012E48: BB 01 03 00 00 mov ebx,301h - 10012E4D: EB 0D jmp 10012E5C - 10012E4F: 33 DB xor ebx,ebx - 10012E51: 83 4D FC 01 or dword ptr [ebp-4],1 - 10012E55: EB 09 jmp 10012E60 - 10012E57: BB 09 01 00 00 mov ebx,109h - 10012E5C: 83 4D FC 02 or dword ptr [ebp-4],2 - 10012E60: 33 C9 xor ecx,ecx - 10012E62: 41 inc ecx - 10012E63: 46 inc esi - 10012E64: 46 inc esi - 10012E65: 0F B7 06 movzx eax,word ptr [esi] - 10012E68: 66 3B C7 cmp ax,di - 10012E6B: 0F 84 DB 01 00 00 je 1001304C - 10012E71: BA 00 40 00 00 mov edx,4000h - 10012E76: 3B CF cmp ecx,edi - 10012E78: 0F 84 20 01 00 00 je 10012F9E - 10012E7E: 0F B7 C0 movzx eax,ax - 10012E81: 83 F8 53 cmp eax,53h - 10012E84: 0F 8F 9A 00 00 00 jg 10012F24 - 10012E8A: 0F 84 83 00 00 00 je 10012F13 - 10012E90: 83 E8 20 sub eax,20h - 10012E93: 0F 84 F7 00 00 00 je 10012F90 - 10012E99: 83 E8 0B sub eax,0Bh - 10012E9C: 74 56 je 10012EF4 - 10012E9E: 48 dec eax - 10012E9F: 74 47 je 10012EE8 - 10012EA1: 83 E8 18 sub eax,18h - 10012EA4: 74 31 je 10012ED7 - 10012EA6: 83 E8 0A sub eax,0Ah - 10012EA9: 74 21 je 10012ECC - 10012EAB: 83 E8 04 sub eax,4 - 10012EAE: 0F 85 75 FF FF FF jne 10012E29 - 10012EB4: 39 7D F8 cmp dword ptr [ebp-8],edi - 10012EB7: 0F 85 CD 00 00 00 jne 10012F8A - 10012EBD: C7 45 F8 01 00 00 mov dword ptr [ebp-8],1 - 00 - 10012EC4: 83 CB 10 or ebx,10h - 10012EC7: E9 C4 00 00 00 jmp 10012F90 - 10012ECC: 81 CB 80 00 00 00 or ebx,80h - 10012ED2: E9 B9 00 00 00 jmp 10012F90 - 10012ED7: F6 C3 40 test bl,40h - 10012EDA: 0F 85 AA 00 00 00 jne 10012F8A - 10012EE0: 83 CB 40 or ebx,40h - 10012EE3: E9 A8 00 00 00 jmp 10012F90 - 10012EE8: C7 45 F0 01 00 00 mov dword ptr [ebp-10h],1 - 00 - 10012EEF: E9 96 00 00 00 jmp 10012F8A - 10012EF4: F6 C3 02 test bl,2 - 10012EF7: 0F 85 8D 00 00 00 jne 10012F8A - 10012EFD: 8B 45 FC mov eax,dword ptr [ebp-4] - 10012F00: 83 E3 FE and ebx,0FFFFFFFEh - 10012F03: 83 E0 FC and eax,0FFFFFFFCh - 10012F06: 83 CB 02 or ebx,2 - 10012F09: 0D 80 00 00 00 or eax,80h - 10012F0E: 89 45 FC mov dword ptr [ebp-4],eax - 10012F11: EB 7D jmp 10012F90 - 10012F13: 39 7D F8 cmp dword ptr [ebp-8],edi - 10012F16: 75 72 jne 10012F8A - 10012F18: C7 45 F8 01 00 00 mov dword ptr [ebp-8],1 - 00 - 10012F1F: 83 CB 20 or ebx,20h - 10012F22: EB 6C jmp 10012F90 - 10012F24: 83 E8 54 sub eax,54h - 10012F27: 74 58 je 10012F81 - 10012F29: 83 E8 0E sub eax,0Eh - 10012F2C: 74 43 je 10012F71 - 10012F2E: 48 dec eax - 10012F2F: 74 2F je 10012F60 - 10012F31: 83 E8 0B sub eax,0Bh - 10012F34: 74 15 je 10012F4B - 10012F36: 83 E8 06 sub eax,6 - 10012F39: 0F 85 EA FE FF FF jne 10012E29 - 10012F3F: F7 C3 00 C0 00 00 test ebx,0C000h - 10012F45: 75 43 jne 10012F8A - 10012F47: 0B DA or ebx,edx - 10012F49: EB 45 jmp 10012F90 - 10012F4B: 39 7D F4 cmp dword ptr [ebp-0Ch],edi - 10012F4E: 75 3A jne 10012F8A - 10012F50: 81 65 FC FF BF FF and dword ptr [ebp-4],0FFFFBFFFh - FF - 10012F57: C7 45 F4 01 00 00 mov dword ptr [ebp-0Ch],1 - 00 - 10012F5E: EB 30 jmp 10012F90 - 10012F60: 39 7D F4 cmp dword ptr [ebp-0Ch],edi - 10012F63: 75 25 jne 10012F8A - 10012F65: 09 55 FC or dword ptr [ebp-4],edx - 10012F68: C7 45 F4 01 00 00 mov dword ptr [ebp-0Ch],1 - 00 - 10012F6F: EB 1F jmp 10012F90 - 10012F71: F7 C3 00 C0 00 00 test ebx,0C000h - 10012F77: 75 11 jne 10012F8A - 10012F79: 81 CB 00 80 00 00 or ebx,8000h - 10012F7F: EB 0F jmp 10012F90 - 10012F81: B8 00 10 00 00 mov eax,1000h - 10012F86: 85 D8 test eax,ebx - 10012F88: 74 04 je 10012F8E - 10012F8A: 33 C9 xor ecx,ecx - 10012F8C: EB 02 jmp 10012F90 - 10012F8E: 0B D8 or ebx,eax - 10012F90: 46 inc esi - 10012F91: 46 inc esi - 10012F92: 0F B7 06 movzx eax,word ptr [esi] - 10012F95: 66 3B C7 cmp ax,di - 10012F98: 0F 85 D8 FE FF FF jne 10012E76 - 10012F9E: 39 7D F0 cmp dword ptr [ebp-10h],edi - 10012FA1: 0F 84 A5 00 00 00 je 1001304C - 10012FA7: EB 02 jmp 10012FAB - 10012FA9: 46 inc esi - 10012FAA: 46 inc esi - 10012FAB: 66 83 3E 20 cmp word ptr [esi],20h - 10012FAF: 74 F8 je 10012FA9 - 10012FB1: 6A 03 push 3 - 10012FB3: 56 push esi - 10012FB4: 68 44 00 02 10 push 10020044h - 10012FB9: E8 75 75 00 00 call 1001A533 - 10012FBE: 83 C4 0C add esp,0Ch - 10012FC1: 85 C0 test eax,eax - 10012FC3: 0F 85 60 FE FF FF jne 10012E29 - 10012FC9: 6A 20 push 20h - 10012FCB: 83 C6 06 add esi,6 - 10012FCE: 58 pop eax - 10012FCF: EB 02 jmp 10012FD3 - 10012FD1: 46 inc esi - 10012FD2: 46 inc esi - 10012FD3: 66 39 06 cmp word ptr [esi],ax - 10012FD6: 74 F9 je 10012FD1 - 10012FD8: 66 83 3E 3D cmp word ptr [esi],3Dh - 10012FDC: 0F 85 47 FE FF FF jne 10012E29 - 10012FE2: 46 inc esi - 10012FE3: 46 inc esi - 10012FE4: 66 39 06 cmp word ptr [esi],ax - 10012FE7: 74 F9 je 10012FE2 - 10012FE9: 6A 05 push 5 - 10012FEB: 68 4C 00 02 10 push 1002004Ch - 10012FF0: 56 push esi - 10012FF1: E8 97 74 00 00 call 1001A48D - 10012FF6: 83 C4 0C add esp,0Ch - 10012FF9: 85 C0 test eax,eax - 10012FFB: 75 0B jne 10013008 - 10012FFD: 83 C6 0A add esi,0Ah - 10013000: 81 CB 00 00 04 00 or ebx,40000h - 10013006: EB 44 jmp 1001304C - 10013008: 6A 08 push 8 - 1001300A: 68 58 00 02 10 push 10020058h - 1001300F: 56 push esi - 10013010: E8 78 74 00 00 call 1001A48D - 10013015: 83 C4 0C add esp,0Ch - 10013018: 85 C0 test eax,eax - 1001301A: 75 0B jne 10013027 - 1001301C: 83 C6 10 add esi,10h - 1001301F: 81 CB 00 00 02 00 or ebx,20000h - 10013025: EB 25 jmp 1001304C - 10013027: 6A 07 push 7 - 10013029: 68 6C 00 02 10 push 1002006Ch - 1001302E: 56 push esi - 1001302F: E8 59 74 00 00 call 1001A48D - 10013034: 83 C4 0C add esp,0Ch - 10013037: 85 C0 test eax,eax - 10013039: 0F 85 EA FD FF FF jne 10012E29 - 1001303F: 83 C6 0E add esi,0Eh - 10013042: 81 CB 00 00 01 00 or ebx,10000h - 10013048: EB 02 jmp 1001304C - 1001304A: 46 inc esi - 1001304B: 46 inc esi - 1001304C: 66 83 3E 20 cmp word ptr [esi],20h - 10013050: 74 F8 je 1001304A - 10013052: 66 39 3E cmp word ptr [esi],di - 10013055: 0F 85 CE FD FF FF jne 10012E29 - 1001305B: 68 80 01 00 00 push 180h - 10013060: FF 75 10 push dword ptr [ebp+10h] - 10013063: 8D 45 0C lea eax,[ebp+0Ch] - 10013066: 53 push ebx - 10013067: FF 75 08 push dword ptr [ebp+8] - 1001306A: 50 push eax - 1001306B: E8 13 73 00 00 call 1001A383 - 10013070: 83 C4 14 add esp,14h - 10013073: 85 C0 test eax,eax - 10013075: 0F 85 C6 FD FF FF jne 10012E41 - 1001307B: 8B 45 14 mov eax,dword ptr [ebp+14h] - 1001307E: FF 05 1C 61 02 10 inc dword ptr ds:[1002611Ch] - 10013084: 8B 4D FC mov ecx,dword ptr [ebp-4] - 10013087: 89 48 0C mov dword ptr [eax+0Ch],ecx - 1001308A: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch] - 1001308D: 89 78 04 mov dword ptr [eax+4],edi - 10013090: 89 38 mov dword ptr [eax],edi - 10013092: 89 78 08 mov dword ptr [eax+8],edi - 10013095: 89 78 1C mov dword ptr [eax+1Ch],edi - 10013098: 89 48 10 mov dword ptr [eax+10h],ecx - 1001309B: 5F pop edi - 1001309C: 5E pop esi - 1001309D: 5B pop ebx - 1001309E: C9 leave - 1001309F: C3 ret - 100130A0: 6A 10 push 10h - 100130A2: 68 40 1E 02 10 push 10021E40h - 100130A7: E8 DC CF FF FF call 10010088 - 100130AC: 33 DB xor ebx,ebx - 100130AE: 33 FF xor edi,edi - 100130B0: 89 7D E4 mov dword ptr [ebp-1Ch],edi - 100130B3: 6A 01 push 1 - 100130B5: E8 D4 C4 FF FF call 1000F58E - 100130BA: 59 pop ecx - 100130BB: 89 5D FC mov dword ptr [ebp-4],ebx - 100130BE: 33 F6 xor esi,esi - 100130C0: 89 75 E0 mov dword ptr [ebp-20h],esi - 100130C3: 3B 35 40 7D 02 10 cmp esi,dword ptr ds:[10027D40h] - 100130C9: 0F 8D CF 00 00 00 jge 1001319E - 100130CF: A1 24 6D 02 10 mov eax,dword ptr ds:[10026D24h] - 100130D4: 8D 04 B0 lea eax,[eax+esi*4] - 100130D7: 39 18 cmp dword ptr [eax],ebx - 100130D9: 74 5B je 10013136 - 100130DB: 8B 00 mov eax,dword ptr [eax] - 100130DD: 8B 40 0C mov eax,dword ptr [eax+0Ch] - 100130E0: A8 83 test al,83h - 100130E2: 75 48 jne 1001312C - 100130E4: A9 00 80 00 00 test eax,8000h - 100130E9: 75 41 jne 1001312C - 100130EB: 8D 46 FD lea eax,[esi-3] - 100130EE: 83 F8 10 cmp eax,10h - 100130F1: 77 12 ja 10013105 - 100130F3: 8D 46 10 lea eax,[esi+10h] - 100130F6: 50 push eax - 100130F7: E8 CF C3 FF FF call 1000F4CB - 100130FC: 59 pop ecx - 100130FD: 85 C0 test eax,eax - 100130FF: 0F 84 99 00 00 00 je 1001319E - 10013105: A1 24 6D 02 10 mov eax,dword ptr ds:[10026D24h] - 1001310A: FF 34 B0 push dword ptr [eax+esi*4] - 1001310D: 56 push esi - 1001310E: E8 12 7B FF FF call 1000AC25 - 10013113: 59 pop ecx - 10013114: 59 pop ecx - 10013115: A1 24 6D 02 10 mov eax,dword ptr ds:[10026D24h] - 1001311A: 8B 04 B0 mov eax,dword ptr [eax+esi*4] - 1001311D: F6 40 0C 83 test byte ptr [eax+0Ch],83h - 10013121: 74 0C je 1001312F - 10013123: 50 push eax - 10013124: 56 push esi - 10013125: E8 69 7B FF FF call 1000AC93 - 1001312A: 59 pop ecx - 1001312B: 59 pop ecx - 1001312C: 46 inc esi - 1001312D: EB 91 jmp 100130C0 - 1001312F: 8B F8 mov edi,eax - 10013131: 89 7D E4 mov dword ptr [ebp-1Ch],edi - 10013134: EB 68 jmp 1001319E - 10013136: C1 E6 02 shl esi,2 - 10013139: 6A 38 push 38h - 1001313B: E8 C9 F7 FF FF call 10012909 - 10013140: 59 pop ecx - 10013141: 8B 0D 24 6D 02 10 mov ecx,dword ptr ds:[10026D24h] - 10013147: 89 04 0E mov dword ptr [esi+ecx],eax - 1001314A: A1 24 6D 02 10 mov eax,dword ptr ds:[10026D24h] - 1001314F: 03 C6 add eax,esi - 10013151: 39 18 cmp dword ptr [eax],ebx - 10013153: 74 49 je 1001319E - 10013155: 68 A0 0F 00 00 push 0FA0h - 1001315A: 8B 00 mov eax,dword ptr [eax] - 1001315C: 83 C0 20 add eax,20h - 1001315F: 50 push eax - 10013160: E8 9F 4B 00 00 call 10017D04 - 10013165: 59 pop ecx - 10013166: 59 pop ecx - 10013167: 85 C0 test eax,eax - 10013169: A1 24 6D 02 10 mov eax,dword ptr ds:[10026D24h] - 1001316E: 75 13 jne 10013183 - 10013170: FF 34 06 push dword ptr [esi+eax] - 10013173: E8 BC 71 FF FF call 1000A334 - 10013178: 59 pop ecx - 10013179: A1 24 6D 02 10 mov eax,dword ptr ds:[10026D24h] - 1001317E: 89 1C 06 mov dword ptr [esi+eax],ebx - 10013181: EB 1B jmp 1001319E - 10013183: 8B 04 06 mov eax,dword ptr [esi+eax] - 10013186: 83 C0 20 add eax,20h - 10013189: 50 push eax - 1001318A: FF 15 64 F0 01 10 call dword ptr ds:[1001F064h] - 10013190: A1 24 6D 02 10 mov eax,dword ptr ds:[10026D24h] - 10013195: 8B 3C 06 mov edi,dword ptr [esi+eax] - 10013198: 89 7D E4 mov dword ptr [ebp-1Ch],edi - 1001319B: 89 5F 0C mov dword ptr [edi+0Ch],ebx - 1001319E: 3B FB cmp edi,ebx - 100131A0: 74 16 je 100131B8 - 100131A2: 81 67 0C 00 80 00 and dword ptr [edi+0Ch],8000h - 00 - 100131A9: 89 5F 04 mov dword ptr [edi+4],ebx - 100131AC: 89 5F 08 mov dword ptr [edi+8],ebx - 100131AF: 89 1F mov dword ptr [edi],ebx - 100131B1: 89 5F 1C mov dword ptr [edi+1Ch],ebx - 100131B4: 83 4F 10 FF or dword ptr [edi+10h],0FFFFFFFFh - 100131B8: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 100131BF: E8 0B 00 00 00 call 100131CF - 100131C4: 8B C7 mov eax,edi - 100131C6: E8 02 CF FF FF call 100100CD - 100131CB: C3 ret - 100131CC: 8B 7D E4 mov edi,dword ptr [ebp-1Ch] - 100131CF: 6A 01 push 1 - 100131D1: E8 DE C2 FF FF call 1000F4B4 - 100131D6: 59 pop ecx - 100131D7: C3 ret - 100131D8: 53 push ebx - 100131D9: 56 push esi - 100131DA: 57 push edi - 100131DB: 8B 54 24 10 mov edx,dword ptr [esp+10h] - 100131DF: 8B 44 24 14 mov eax,dword ptr [esp+14h] - 100131E3: 8B 4C 24 18 mov ecx,dword ptr [esp+18h] - 100131E7: 55 push ebp - 100131E8: 52 push edx - 100131E9: 50 push eax - 100131EA: 51 push ecx - 100131EB: 51 push ecx - 100131EC: 68 68 32 01 10 push 10013268h - 100131F1: 64 FF 35 00 00 00 push dword ptr fs:[00000000h] - 00 - 100131F8: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 100131FD: 33 C4 xor eax,esp - 100131FF: 89 44 24 08 mov dword ptr [esp+8],eax - 10013203: 64 89 25 00 00 00 mov dword ptr fs:[00000000h],esp - 00 - 1001320A: 8B 44 24 30 mov eax,dword ptr [esp+30h] - 1001320E: 8B 58 08 mov ebx,dword ptr [eax+8] - 10013211: 8B 4C 24 2C mov ecx,dword ptr [esp+2Ch] - 10013215: 33 19 xor ebx,dword ptr [ecx] - 10013217: 8B 70 0C mov esi,dword ptr [eax+0Ch] - 1001321A: 83 FE FE cmp esi,0FFFFFFFEh - 1001321D: 74 3B je 1001325A - 1001321F: 8B 54 24 34 mov edx,dword ptr [esp+34h] - 10013223: 83 FA FE cmp edx,0FFFFFFFEh - 10013226: 74 04 je 1001322C - 10013228: 3B F2 cmp esi,edx - 1001322A: 76 2E jbe 1001325A - 1001322C: 8D 34 76 lea esi,[esi+esi*2] - 1001322F: 8D 5C B3 10 lea ebx,[ebx+esi*4+10h] - 10013233: 8B 0B mov ecx,dword ptr [ebx] - 10013235: 89 48 0C mov dword ptr [eax+0Ch],ecx - 10013238: 83 7B 04 00 cmp dword ptr [ebx+4],0 - 1001323C: 75 CC jne 1001320A - 1001323E: 68 01 01 00 00 push 101h - 10013243: 8B 43 08 mov eax,dword ptr [ebx+8] - 10013246: E8 92 36 00 00 call 100168DD - 1001324B: B9 01 00 00 00 mov ecx,1 - 10013250: 8B 43 08 mov eax,dword ptr [ebx+8] - 10013253: E8 A4 36 00 00 call 100168FC - 10013258: EB B0 jmp 1001320A - 1001325A: 64 8F 05 00 00 00 pop dword ptr fs:[00000000h] - 00 - 10013261: 83 C4 18 add esp,18h - 10013264: 5F pop edi - 10013265: 5E pop esi - 10013266: 5B pop ebx - 10013267: C3 ret - 10013268: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 1001326C: F7 41 04 06 00 00 test dword ptr [ecx+4],6 - 00 - 10013273: B8 01 00 00 00 mov eax,1 - 10013278: 74 33 je 100132AD - 1001327A: 8B 44 24 08 mov eax,dword ptr [esp+8] - 1001327E: 8B 48 08 mov ecx,dword ptr [eax+8] - 10013281: 33 C8 xor ecx,eax - 10013283: E8 13 6E FF FF call 1000A09B - 10013288: 55 push ebp - 10013289: 8B 68 18 mov ebp,dword ptr [eax+18h] - 1001328C: FF 70 0C push dword ptr [eax+0Ch] - 1001328F: FF 70 10 push dword ptr [eax+10h] - 10013292: FF 70 14 push dword ptr [eax+14h] - 10013295: E8 3E FF FF FF call 100131D8 - 1001329A: 83 C4 0C add esp,0Ch - 1001329D: 5D pop ebp - 1001329E: 8B 44 24 08 mov eax,dword ptr [esp+8] - 100132A2: 8B 54 24 10 mov edx,dword ptr [esp+10h] - 100132A6: 89 02 mov dword ptr [edx],eax - 100132A8: B8 03 00 00 00 mov eax,3 - 100132AD: C3 ret - 100132AE: 55 push ebp - 100132AF: 8B 4C 24 08 mov ecx,dword ptr [esp+8] - 100132B3: 8B 29 mov ebp,dword ptr [ecx] - 100132B5: FF 71 1C push dword ptr [ecx+1Ch] - 100132B8: FF 71 18 push dword ptr [ecx+18h] - 100132BB: FF 71 28 push dword ptr [ecx+28h] - 100132BE: E8 15 FF FF FF call 100131D8 - 100132C3: 83 C4 0C add esp,0Ch - 100132C6: 5D pop ebp - 100132C7: C2 04 00 ret 4 - 100132CA: 55 push ebp - 100132CB: 56 push esi - 100132CC: 57 push edi - 100132CD: 53 push ebx - 100132CE: 8B EA mov ebp,edx - 100132D0: 33 C0 xor eax,eax - 100132D2: 33 DB xor ebx,ebx - 100132D4: 33 D2 xor edx,edx - 100132D6: 33 F6 xor esi,esi - 100132D8: 33 FF xor edi,edi - 100132DA: FF D1 call ecx - 100132DC: 5B pop ebx - 100132DD: 5F pop edi - 100132DE: 5E pop esi - 100132DF: 5D pop ebp - 100132E0: C3 ret - 100132E1: 8B EA mov ebp,edx - 100132E3: 8B F1 mov esi,ecx - 100132E5: 8B C1 mov eax,ecx - 100132E7: 6A 01 push 1 - 100132E9: E8 EF 35 00 00 call 100168DD - 100132EE: 33 C0 xor eax,eax - 100132F0: 33 DB xor ebx,ebx - 100132F2: 33 C9 xor ecx,ecx - 100132F4: 33 D2 xor edx,edx - 100132F6: 33 FF xor edi,edi - 100132F8: FF E6 jmp esi - 100132FA: 55 push ebp - 100132FB: 8B EC mov ebp,esp - 100132FD: 53 push ebx - 100132FE: 56 push esi - 100132FF: 57 push edi - 10013300: 6A 00 push 0 - 10013302: 6A 00 push 0 - 10013304: 68 0F 33 01 10 push 1001330Fh - 10013309: 51 push ecx - 1001330A: E8 4F B9 00 00 call 1001EC5E - 1001330F: 5F pop edi - 10013310: 5E pop esi - 10013311: 5B pop ebx - 10013312: 5D pop ebp - 10013313: C3 ret - 10013314: 55 push ebp - 10013315: 8B 6C 24 08 mov ebp,dword ptr [esp+8] - 10013319: 52 push edx - 1001331A: 51 push ecx - 1001331B: FF 74 24 14 push dword ptr [esp+14h] - 1001331F: E8 B4 FE FF FF call 100131D8 - 10013324: 83 C4 0C add esp,0Ch - 10013327: 5D pop ebp - 10013328: C2 08 00 ret 8 - 1001332B: 8B FF mov edi,edi - 1001332D: 55 push ebp - 1001332E: 8B EC mov ebp,esp - 10013330: F6 40 0C 40 test byte ptr [eax+0Ch],40h - 10013334: 74 06 je 1001333C - 10013336: 83 78 08 00 cmp dword ptr [eax+8],0 - 1001333A: 74 1A je 10013356 - 1001333C: 50 push eax - 1001333D: FF 75 08 push dword ptr [ebp+8] - 10013340: E8 FE 45 00 00 call 10017943 - 10013345: 59 pop ecx - 10013346: 59 pop ecx - 10013347: B9 FF FF 00 00 mov ecx,0FFFFh - 1001334C: 66 3B C1 cmp ax,cx - 1001334F: 75 05 jne 10013356 - 10013351: 83 0E FF or dword ptr [esi],0FFFFFFFFh - 10013354: 5D pop ebp - 10013355: C3 ret - 10013356: FF 06 inc dword ptr [esi] - 10013358: 5D pop ebp - 10013359: C3 ret - 1001335A: 8B FF mov edi,edi - 1001335C: 55 push ebp - 1001335D: 8B EC mov ebp,esp - 1001335F: 56 push esi - 10013360: 8B F0 mov esi,eax - 10013362: EB 14 jmp 10013378 - 10013364: FF 75 08 push dword ptr [ebp+8] - 10013367: 8B 45 10 mov eax,dword ptr [ebp+10h] - 1001336A: FF 4D 0C dec dword ptr [ebp+0Ch] - 1001336D: E8 B9 FF FF FF call 1001332B - 10013372: 83 3E FF cmp dword ptr [esi],0FFFFFFFFh - 10013375: 59 pop ecx - 10013376: 74 06 je 1001337E - 10013378: 83 7D 0C 00 cmp dword ptr [ebp+0Ch],0 - 1001337C: 7F E6 jg 10013364 - 1001337E: 5E pop esi - 1001337F: 5D pop ebp - 10013380: C3 ret - 10013381: 8B FF mov edi,edi - 10013383: 55 push ebp - 10013384: 8B EC mov ebp,esp - 10013386: F6 47 0C 40 test byte ptr [edi+0Ch],40h - 1001338A: 53 push ebx - 1001338B: 56 push esi - 1001338C: 8B F0 mov esi,eax - 1001338E: 8B D9 mov ebx,ecx - 10013390: 74 37 je 100133C9 - 10013392: 83 7F 08 00 cmp dword ptr [edi+8],0 - 10013396: 75 31 jne 100133C9 - 10013398: 8B 45 08 mov eax,dword ptr [ebp+8] - 1001339B: 01 06 add dword ptr [esi],eax - 1001339D: EB 30 jmp 100133CF - 1001339F: 0F B7 03 movzx eax,word ptr [ebx] - 100133A2: FF 4D 08 dec dword ptr [ebp+8] - 100133A5: 50 push eax - 100133A6: 8B C7 mov eax,edi - 100133A8: E8 7E FF FF FF call 1001332B - 100133AD: 43 inc ebx - 100133AE: 43 inc ebx - 100133AF: 83 3E FF cmp dword ptr [esi],0FFFFFFFFh - 100133B2: 59 pop ecx - 100133B3: 75 14 jne 100133C9 - 100133B5: E8 8F BC FF FF call 1000F049 - 100133BA: 83 38 2A cmp dword ptr [eax],2Ah - 100133BD: 75 10 jne 100133CF - 100133BF: 6A 3F push 3Fh - 100133C1: 8B C7 mov eax,edi - 100133C3: E8 63 FF FF FF call 1001332B - 100133C8: 59 pop ecx - 100133C9: 83 7D 08 00 cmp dword ptr [ebp+8],0 - 100133CD: 7F D0 jg 1001339F - 100133CF: 5E pop esi - 100133D0: 5B pop ebx - 100133D1: 5D pop ebp - 100133D2: C3 ret - 100133D3: 8B FF mov edi,edi - 100133D5: 55 push ebp - 100133D6: 8B EC mov ebp,esp - 100133D8: 81 EC 74 04 00 00 sub esp,474h - 100133DE: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 100133E3: 33 C5 xor eax,ebp - 100133E5: 89 45 FC mov dword ptr [ebp-4],eax - 100133E8: 53 push ebx - 100133E9: 8B 5D 14 mov ebx,dword ptr [ebp+14h] - 100133EC: 56 push esi - 100133ED: 8B 75 08 mov esi,dword ptr [ebp+8] - 100133F0: 33 C0 xor eax,eax - 100133F2: 57 push edi - 100133F3: FF 75 10 push dword ptr [ebp+10h] - 100133F6: 8B 7D 0C mov edi,dword ptr [ebp+0Ch] - 100133F9: 8D 8D B4 FB FF FF lea ecx,[ebp+FFFFFBB4h] - 100133FF: 89 B5 C4 FB FF FF mov dword ptr [ebp+FFFFFBC4h],esi - 10013405: 89 9D E8 FB FF FF mov dword ptr [ebp+FFFFFBE8h],ebx - 1001340B: 89 85 AC FB FF FF mov dword ptr [ebp+FFFFFBACh],eax - 10013411: 89 85 F8 FB FF FF mov dword ptr [ebp+FFFFFBF8h],eax - 10013417: 89 85 D4 FB FF FF mov dword ptr [ebp+FFFFFBD4h],eax - 1001341D: 89 85 F4 FB FF FF mov dword ptr [ebp+FFFFFBF4h],eax - 10013423: 89 85 DC FB FF FF mov dword ptr [ebp+FFFFFBDCh],eax - 10013429: 89 85 B0 FB FF FF mov dword ptr [ebp+FFFFFBB0h],eax - 1001342F: 89 85 D8 FB FF FF mov dword ptr [ebp+FFFFFBD8h],eax - 10013435: E8 C2 72 FF FF call 1000A6FC - 1001343A: 85 F6 test esi,esi - 1001343C: 75 35 jne 10013473 - 1001343E: E8 06 BC FF FF call 1000F049 - 10013443: C7 00 16 00 00 00 mov dword ptr [eax],16h - 10013449: 33 C0 xor eax,eax - 1001344B: 50 push eax - 1001344C: 50 push eax - 1001344D: 50 push eax - 1001344E: 50 push eax - 1001344F: 50 push eax - 10013450: E8 8C BB FF FF call 1000EFE1 - 10013455: 83 C4 14 add esp,14h - 10013458: 80 BD C0 FB FF FF cmp byte ptr [ebp+FFFFFBC0h],0 - 00 - 1001345F: 74 0A je 1001346B - 10013461: 8B 85 BC FB FF FF mov eax,dword ptr [ebp+FFFFFBBCh] - 10013467: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1001346B: 83 C8 FF or eax,0FFFFFFFFh - 1001346E: E9 CF 0A 00 00 jmp 10013F42 - 10013473: 33 F6 xor esi,esi - 10013475: 3B FE cmp edi,esi - 10013477: 75 12 jne 1001348B - 10013479: E8 CB BB FF FF call 1000F049 - 1001347E: 56 push esi - 1001347F: 56 push esi - 10013480: 56 push esi - 10013481: 56 push esi - 10013482: C7 00 16 00 00 00 mov dword ptr [eax],16h - 10013488: 56 push esi - 10013489: EB C5 jmp 10013450 - 1001348B: 0F B7 0F movzx ecx,word ptr [edi] - 1001348E: 89 B5 E0 FB FF FF mov dword ptr [ebp+FFFFFBE0h],esi - 10013494: 89 B5 EC FB FF FF mov dword ptr [ebp+FFFFFBECh],esi - 1001349A: 89 B5 CC FB FF FF mov dword ptr [ebp+FFFFFBCCh],esi - 100134A0: 89 B5 A8 FB FF FF mov dword ptr [ebp+FFFFFBA8h],esi - 100134A6: 89 8D E4 FB FF FF mov dword ptr [ebp+FFFFFBE4h],ecx - 100134AC: 66 3B CE cmp cx,si - 100134AF: 0F 84 74 0A 00 00 je 10013F29 - 100134B5: 6A 02 push 2 - 100134B7: 5A pop edx - 100134B8: 03 FA add edi,edx - 100134BA: 39 B5 E0 FB FF FF cmp dword ptr [ebp+FFFFFBE0h],esi - 100134C0: 89 BD A0 FB FF FF mov dword ptr [ebp+FFFFFBA0h],edi - 100134C6: 0F 8C 48 0A 00 00 jl 10013F14 - 100134CC: 8D 41 E0 lea eax,[ecx-20h] - 100134CF: 66 83 F8 58 cmp ax,58h - 100134D3: 77 0F ja 100134E4 - 100134D5: 0F B7 C1 movzx eax,cx - 100134D8: 0F B6 80 58 12 02 movzx eax,byte ptr [eax+10021258h] - 10 - 100134DF: 83 E0 0F and eax,0Fh - 100134E2: EB 02 jmp 100134E6 - 100134E4: 33 C0 xor eax,eax - 100134E6: 8B B5 CC FB FF FF mov esi,dword ptr [ebp+FFFFFBCCh] - 100134EC: 6B C0 09 imul eax,eax,9 - 100134EF: 0F B6 84 30 78 12 movzx eax,byte ptr [eax+esi+10021278h] - 02 10 - 100134F7: 6A 08 push 8 - 100134F9: C1 E8 04 shr eax,4 - 100134FC: 5E pop esi - 100134FD: 89 85 CC FB FF FF mov dword ptr [ebp+FFFFFBCCh],eax - 10013503: 3B C6 cmp eax,esi - 10013505: 0F 84 33 FF FF FF je 1001343E - 1001350B: 83 F8 07 cmp eax,7 - 1001350E: 0F 87 DD 09 00 00 ja 10013EF1 - 10013514: FF 24 85 53 3F 01 jmp dword ptr [eax*4+10013F53h] - 10 - 1001351B: 33 C0 xor eax,eax - 1001351D: 83 8D F4 FB FF FF or dword ptr [ebp+FFFFFBF4h],0FFFFFFFFh - FF - 10013524: 89 85 A4 FB FF FF mov dword ptr [ebp+FFFFFBA4h],eax - 1001352A: 89 85 B0 FB FF FF mov dword ptr [ebp+FFFFFBB0h],eax - 10013530: 89 85 D4 FB FF FF mov dword ptr [ebp+FFFFFBD4h],eax - 10013536: 89 85 DC FB FF FF mov dword ptr [ebp+FFFFFBDCh],eax - 1001353C: 89 85 F8 FB FF FF mov dword ptr [ebp+FFFFFBF8h],eax - 10013542: 89 85 D8 FB FF FF mov dword ptr [ebp+FFFFFBD8h],eax - 10013548: E9 B0 09 00 00 jmp 10013EFD - 1001354D: 0F B7 C1 movzx eax,cx - 10013550: 83 E8 20 sub eax,20h - 10013553: 74 48 je 1001359D - 10013555: 83 E8 03 sub eax,3 - 10013558: 74 34 je 1001358E - 1001355A: 2B C6 sub eax,esi - 1001355C: 74 24 je 10013582 - 1001355E: 2B C2 sub eax,edx - 10013560: 74 14 je 10013576 - 10013562: 83 E8 03 sub eax,3 - 10013565: 0F 85 86 09 00 00 jne 10013EF1 - 1001356B: 09 B5 F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],esi - 10013571: E9 87 09 00 00 jmp 10013EFD - 10013576: 83 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],4 - 04 - 1001357D: E9 7B 09 00 00 jmp 10013EFD - 10013582: 83 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],1 - 01 - 10013589: E9 6F 09 00 00 jmp 10013EFD - 1001358E: 81 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],80h - 80 00 00 00 - 10013598: E9 60 09 00 00 jmp 10013EFD - 1001359D: 09 95 F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],edx - 100135A3: E9 55 09 00 00 jmp 10013EFD - 100135A8: 66 83 F9 2A cmp cx,2Ah - 100135AC: 75 2B jne 100135D9 - 100135AE: 8B 03 mov eax,dword ptr [ebx] - 100135B0: 83 C3 04 add ebx,4 - 100135B3: 89 9D E8 FB FF FF mov dword ptr [ebp+FFFFFBE8h],ebx - 100135B9: 89 85 D4 FB FF FF mov dword ptr [ebp+FFFFFBD4h],eax - 100135BF: 85 C0 test eax,eax - 100135C1: 0F 8D 36 09 00 00 jge 10013EFD - 100135C7: 83 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],4 - 04 - 100135CE: F7 9D D4 FB FF FF neg dword ptr [ebp+FFFFFBD4h] - 100135D4: E9 24 09 00 00 jmp 10013EFD - 100135D9: 8B 85 D4 FB FF FF mov eax,dword ptr [ebp+FFFFFBD4h] - 100135DF: 6B C0 0A imul eax,eax,0Ah - 100135E2: 0F B7 C9 movzx ecx,cx - 100135E5: 8D 44 08 D0 lea eax,[eax+ecx-30h] - 100135E9: 89 85 D4 FB FF FF mov dword ptr [ebp+FFFFFBD4h],eax - 100135EF: E9 09 09 00 00 jmp 10013EFD - 100135F4: 83 A5 F4 FB FF FF and dword ptr [ebp+FFFFFBF4h],0 - 00 - 100135FB: E9 FD 08 00 00 jmp 10013EFD - 10013600: 66 83 F9 2A cmp cx,2Ah - 10013604: 75 25 jne 1001362B - 10013606: 8B 03 mov eax,dword ptr [ebx] - 10013608: 83 C3 04 add ebx,4 - 1001360B: 89 9D E8 FB FF FF mov dword ptr [ebp+FFFFFBE8h],ebx - 10013611: 89 85 F4 FB FF FF mov dword ptr [ebp+FFFFFBF4h],eax - 10013617: 85 C0 test eax,eax - 10013619: 0F 8D DE 08 00 00 jge 10013EFD - 1001361F: 83 8D F4 FB FF FF or dword ptr [ebp+FFFFFBF4h],0FFFFFFFFh - FF - 10013626: E9 D2 08 00 00 jmp 10013EFD - 1001362B: 8B 85 F4 FB FF FF mov eax,dword ptr [ebp+FFFFFBF4h] - 10013631: 6B C0 0A imul eax,eax,0Ah - 10013634: 0F B7 C9 movzx ecx,cx - 10013637: 8D 44 08 D0 lea eax,[eax+ecx-30h] - 1001363B: 89 85 F4 FB FF FF mov dword ptr [ebp+FFFFFBF4h],eax - 10013641: E9 B7 08 00 00 jmp 10013EFD - 10013646: 0F B7 C1 movzx eax,cx - 10013649: 83 F8 49 cmp eax,49h - 1001364C: 74 51 je 1001369F - 1001364E: 83 F8 68 cmp eax,68h - 10013651: 74 40 je 10013693 - 10013653: 83 F8 6C cmp eax,6Ch - 10013656: 74 18 je 10013670 - 10013658: 83 F8 77 cmp eax,77h - 1001365B: 0F 85 9C 08 00 00 jne 10013EFD - 10013661: 81 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],800h - 00 08 00 00 - 1001366B: E9 8D 08 00 00 jmp 10013EFD - 10013670: 66 83 3F 6C cmp word ptr [edi],6Ch - 10013674: 75 11 jne 10013687 - 10013676: 03 FA add edi,edx - 10013678: 81 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],1000h - 00 10 00 00 - 10013682: E9 76 08 00 00 jmp 10013EFD - 10013687: 83 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],10h - 10 - 1001368E: E9 6A 08 00 00 jmp 10013EFD - 10013693: 83 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],20h - 20 - 1001369A: E9 5E 08 00 00 jmp 10013EFD - 1001369F: 0F B7 07 movzx eax,word ptr [edi] - 100136A2: 66 83 F8 36 cmp ax,36h - 100136A6: 75 19 jne 100136C1 - 100136A8: 66 83 7F 02 34 cmp word ptr [edi+2],34h - 100136AD: 75 12 jne 100136C1 - 100136AF: 83 C7 04 add edi,4 - 100136B2: 81 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],8000h - 00 80 00 00 - 100136BC: E9 3C 08 00 00 jmp 10013EFD - 100136C1: 66 83 F8 33 cmp ax,33h - 100136C5: 75 19 jne 100136E0 - 100136C7: 66 83 7F 02 32 cmp word ptr [edi+2],32h - 100136CC: 75 12 jne 100136E0 - 100136CE: 83 C7 04 add edi,4 - 100136D1: 81 A5 F8 FB FF FF and dword ptr [ebp+FFFFFBF8h],0FFFF7FFFh - FF 7F FF FF - 100136DB: E9 1D 08 00 00 jmp 10013EFD - 100136E0: 66 83 F8 64 cmp ax,64h - 100136E4: 0F 84 13 08 00 00 je 10013EFD - 100136EA: 66 83 F8 69 cmp ax,69h - 100136EE: 0F 84 09 08 00 00 je 10013EFD - 100136F4: 66 83 F8 6F cmp ax,6Fh - 100136F8: 0F 84 FF 07 00 00 je 10013EFD - 100136FE: 66 83 F8 75 cmp ax,75h - 10013702: 0F 84 F5 07 00 00 je 10013EFD - 10013708: 66 83 F8 78 cmp ax,78h - 1001370C: 0F 84 EB 07 00 00 je 10013EFD - 10013712: 66 83 F8 58 cmp ax,58h - 10013716: 0F 84 E1 07 00 00 je 10013EFD - 1001371C: 83 A5 CC FB FF FF and dword ptr [ebp+FFFFFBCCh],0 - 00 - 10013723: 8B 85 C4 FB FF FF mov eax,dword ptr [ebp+FFFFFBC4h] - 10013729: 51 push ecx - 1001372A: 8D B5 E0 FB FF FF lea esi,[ebp+FFFFFBE0h] - 10013730: C7 85 D8 FB FF FF mov dword ptr [ebp+FFFFFBD8h],1 - 01 00 00 00 - 1001373A: E8 EC FB FF FF call 1001332B - 1001373F: 59 pop ecx - 10013740: E9 B8 07 00 00 jmp 10013EFD - 10013745: 0F B7 C1 movzx eax,cx - 10013748: 83 F8 64 cmp eax,64h - 1001374B: 0F 8F 30 02 00 00 jg 10013981 - 10013751: 0F 84 BD 02 00 00 je 10013A14 - 10013757: 83 F8 53 cmp eax,53h - 1001375A: 0F 8F 1B 01 00 00 jg 1001387B - 10013760: 74 7E je 100137E0 - 10013762: 83 E8 41 sub eax,41h - 10013765: 74 10 je 10013777 - 10013767: 2B C2 sub eax,edx - 10013769: 74 59 je 100137C4 - 1001376B: 2B C2 sub eax,edx - 1001376D: 74 08 je 10013777 - 1001376F: 2B C2 sub eax,edx - 10013771: 0F 85 EC 05 00 00 jne 10013D63 - 10013777: 83 C1 20 add ecx,20h - 1001377A: C7 85 A4 FB FF FF mov dword ptr [ebp+FFFFFBA4h],1 - 01 00 00 00 - 10013784: 89 8D E4 FB FF FF mov dword ptr [ebp+FFFFFBE4h],ecx - 1001378A: 83 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],40h - 40 - 10013791: 83 BD F4 FB FF FF cmp dword ptr [ebp+FFFFFBF4h],0 - 00 - 10013798: 8D B5 FC FB FF FF lea esi,[ebp+FFFFFBFCh] - 1001379E: B8 00 02 00 00 mov eax,200h - 100137A3: 89 B5 F0 FB FF FF mov dword ptr [ebp+FFFFFBF0h],esi - 100137A9: 89 85 EC FB FF FF mov dword ptr [ebp+FFFFFBECh],eax - 100137AF: 0F 8D 8D 02 00 00 jge 10013A42 - 100137B5: C7 85 F4 FB FF FF mov dword ptr [ebp+FFFFFBF4h],6 - 06 00 00 00 - 100137BF: E9 E9 02 00 00 jmp 10013AAD - 100137C4: F7 85 F8 FB FF FF test dword ptr [ebp+FFFFFBF8h],830h - 30 08 00 00 - 100137CE: 0F 85 C9 00 00 00 jne 1001389D - 100137D4: 83 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],20h - 20 - 100137DB: E9 BD 00 00 00 jmp 1001389D - 100137E0: F7 85 F8 FB FF FF test dword ptr [ebp+FFFFFBF8h],830h - 30 08 00 00 - 100137EA: 75 07 jne 100137F3 - 100137EC: 83 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],20h - 20 - 100137F3: 8B BD F4 FB FF FF mov edi,dword ptr [ebp+FFFFFBF4h] - 100137F9: 83 FF FF cmp edi,0FFFFFFFFh - 100137FC: 75 05 jne 10013803 - 100137FE: BF FF FF FF 7F mov edi,7FFFFFFFh - 10013803: 83 C3 04 add ebx,4 - 10013806: F6 85 F8 FB FF FF test byte ptr [ebp+FFFFFBF8h],20h - 20 - 1001380D: 89 9D E8 FB FF FF mov dword ptr [ebp+FFFFFBE8h],ebx - 10013813: 8B 5B FC mov ebx,dword ptr [ebx-4] - 10013816: 89 9D F0 FB FF FF mov dword ptr [ebp+FFFFFBF0h],ebx - 1001381C: 0F 84 05 05 00 00 je 10013D27 - 10013822: 85 DB test ebx,ebx - 10013824: 75 0B jne 10013831 - 10013826: A1 48 57 02 10 mov eax,dword ptr ds:[10025748h] - 1001382B: 89 85 F0 FB FF FF mov dword ptr [ebp+FFFFFBF0h],eax - 10013831: 83 A5 EC FB FF FF and dword ptr [ebp+FFFFFBECh],0 - 00 - 10013838: 8B B5 F0 FB FF FF mov esi,dword ptr [ebp+FFFFFBF0h] - 1001383E: 85 FF test edi,edi - 10013840: 0F 8E 1D 05 00 00 jle 10013D63 - 10013846: 8A 06 mov al,byte ptr [esi] - 10013848: 84 C0 test al,al - 1001384A: 0F 84 13 05 00 00 je 10013D63 - 10013850: 8D 8D B4 FB FF FF lea ecx,[ebp+FFFFFBB4h] - 10013856: 0F B6 C0 movzx eax,al - 10013859: 51 push ecx - 1001385A: 50 push eax - 1001385B: E8 B1 43 00 00 call 10017C11 - 10013860: 59 pop ecx - 10013861: 59 pop ecx - 10013862: 85 C0 test eax,eax - 10013864: 74 01 je 10013867 - 10013866: 46 inc esi - 10013867: 46 inc esi - 10013868: FF 85 EC FB FF FF inc dword ptr [ebp+FFFFFBECh] - 1001386E: 39 BD EC FB FF FF cmp dword ptr [ebp+FFFFFBECh],edi - 10013874: 7C D0 jl 10013846 - 10013876: E9 E8 04 00 00 jmp 10013D63 - 1001387B: 83 E8 58 sub eax,58h - 1001387E: 0F 84 F0 02 00 00 je 10013B74 - 10013884: 2B C2 sub eax,edx - 10013886: 0F 84 95 00 00 00 je 10013921 - 1001388C: 83 E8 07 sub eax,7 - 1001388F: 0F 84 F5 FE FF FF je 1001378A - 10013895: 2B C2 sub eax,edx - 10013897: 0F 85 C6 04 00 00 jne 10013D63 - 1001389D: 0F B7 03 movzx eax,word ptr [ebx] - 100138A0: 83 C3 04 add ebx,4 - 100138A3: 33 F6 xor esi,esi - 100138A5: 46 inc esi - 100138A6: F6 85 F8 FB FF FF test byte ptr [ebp+FFFFFBF8h],20h - 20 - 100138AD: 89 B5 D8 FB FF FF mov dword ptr [ebp+FFFFFBD8h],esi - 100138B3: 89 9D E8 FB FF FF mov dword ptr [ebp+FFFFFBE8h],ebx - 100138B9: 89 85 9C FB FF FF mov dword ptr [ebp+FFFFFB9Ch],eax - 100138BF: 74 42 je 10013903 - 100138C1: 88 85 C8 FB FF FF mov byte ptr [ebp+FFFFFBC8h],al - 100138C7: 8D 85 B4 FB FF FF lea eax,[ebp+FFFFFBB4h] - 100138CD: 50 push eax - 100138CE: 8B 85 B4 FB FF FF mov eax,dword ptr [ebp+FFFFFBB4h] - 100138D4: C6 85 C9 FB FF FF mov byte ptr [ebp+FFFFFBC9h],0 - 00 - 100138DB: FF B0 AC 00 00 00 push dword ptr [eax+000000ACh] - 100138E1: 8D 85 C8 FB FF FF lea eax,[ebp+FFFFFBC8h] - 100138E7: 50 push eax - 100138E8: 8D 85 FC FB FF FF lea eax,[ebp+FFFFFBFCh] - 100138EE: 50 push eax - 100138EF: E8 EC 41 00 00 call 10017AE0 - 100138F4: 83 C4 10 add esp,10h - 100138F7: 85 C0 test eax,eax - 100138F9: 7D 0F jge 1001390A - 100138FB: 89 B5 B0 FB FF FF mov dword ptr [ebp+FFFFFBB0h],esi - 10013901: EB 07 jmp 1001390A - 10013903: 66 89 85 FC FB FF mov word ptr [ebp+FFFFFBFCh],ax - FF - 1001390A: 8D 85 FC FB FF FF lea eax,[ebp+FFFFFBFCh] - 10013910: 89 85 F0 FB FF FF mov dword ptr [ebp+FFFFFBF0h],eax - 10013916: 89 B5 EC FB FF FF mov dword ptr [ebp+FFFFFBECh],esi - 1001391C: E9 42 04 00 00 jmp 10013D63 - 10013921: 8B 03 mov eax,dword ptr [ebx] - 10013923: 83 C3 04 add ebx,4 - 10013926: 89 9D E8 FB FF FF mov dword ptr [ebp+FFFFFBE8h],ebx - 1001392C: 85 C0 test eax,eax - 1001392E: 74 3A je 1001396A - 10013930: 8B 48 04 mov ecx,dword ptr [eax+4] - 10013933: 85 C9 test ecx,ecx - 10013935: 74 33 je 1001396A - 10013937: F7 85 F8 FB FF FF test dword ptr [ebp+FFFFFBF8h],800h - 00 08 00 00 - 10013941: 0F BF 00 movsx eax,word ptr [eax] - 10013944: 89 8D F0 FB FF FF mov dword ptr [ebp+FFFFFBF0h],ecx - 1001394A: 74 12 je 1001395E - 1001394C: 99 cdq - 1001394D: 2B C2 sub eax,edx - 1001394F: C7 85 D8 FB FF FF mov dword ptr [ebp+FFFFFBD8h],1 - 01 00 00 00 - 10013959: E9 FD 03 00 00 jmp 10013D5B - 1001395E: 83 A5 D8 FB FF FF and dword ptr [ebp+FFFFFBD8h],0 - 00 - 10013965: E9 F3 03 00 00 jmp 10013D5D - 1001396A: A1 48 57 02 10 mov eax,dword ptr ds:[10025748h] - 1001396F: 89 85 F0 FB FF FF mov dword ptr [ebp+FFFFFBF0h],eax - 10013975: 50 push eax - 10013976: E8 C5 0A 00 00 call 10014440 - 1001397B: 59 pop ecx - 1001397C: E9 DC 03 00 00 jmp 10013D5D - 10013981: 83 F8 70 cmp eax,70h - 10013984: 0F 8F F6 01 00 00 jg 10013B80 - 1001398A: 0F 84 DE 01 00 00 je 10013B6E - 10013990: 83 F8 65 cmp eax,65h - 10013993: 0F 8C CA 03 00 00 jl 10013D63 - 10013999: 83 F8 67 cmp eax,67h - 1001399C: 0F 8E E8 FD FF FF jle 1001378A - 100139A2: 83 F8 69 cmp eax,69h - 100139A5: 74 6D je 10013A14 - 100139A7: 83 F8 6E cmp eax,6Eh - 100139AA: 74 24 je 100139D0 - 100139AC: 83 F8 6F cmp eax,6Fh - 100139AF: 0F 85 AE 03 00 00 jne 10013D63 - 100139B5: F6 85 F8 FB FF FF test byte ptr [ebp+FFFFFBF8h],80h - 80 - 100139BC: 89 B5 E4 FB FF FF mov dword ptr [ebp+FFFFFBE4h],esi - 100139C2: 74 61 je 10013A25 - 100139C4: 81 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],200h - 00 02 00 00 - 100139CE: EB 55 jmp 10013A25 - 100139D0: 8B 33 mov esi,dword ptr [ebx] - 100139D2: 83 C3 04 add ebx,4 - 100139D5: 89 9D E8 FB FF FF mov dword ptr [ebp+FFFFFBE8h],ebx - 100139DB: E8 EA 40 00 00 call 10017ACA - 100139E0: 85 C0 test eax,eax - 100139E2: 0F 84 56 FA FF FF je 1001343E - 100139E8: F6 85 F8 FB FF FF test byte ptr [ebp+FFFFFBF8h],20h - 20 - 100139EF: 74 0C je 100139FD - 100139F1: 66 8B 85 E0 FB FF mov ax,word ptr [ebp+FFFFFBE0h] - FF - 100139F8: 66 89 06 mov word ptr [esi],ax - 100139FB: EB 08 jmp 10013A05 - 100139FD: 8B 85 E0 FB FF FF mov eax,dword ptr [ebp+FFFFFBE0h] - 10013A03: 89 06 mov dword ptr [esi],eax - 10013A05: C7 85 B0 FB FF FF mov dword ptr [ebp+FFFFFBB0h],1 - 01 00 00 00 - 10013A0F: E9 C1 04 00 00 jmp 10013ED5 - 10013A14: 83 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],40h - 40 - 10013A1B: C7 85 E4 FB FF FF mov dword ptr [ebp+FFFFFBE4h],0Ah - 0A 00 00 00 - 10013A25: F7 85 F8 FB FF FF test dword ptr [ebp+FFFFFBF8h],8000h - 00 80 00 00 - 10013A2F: 0F 84 AB 01 00 00 je 10013BE0 - 10013A35: 03 DE add ebx,esi - 10013A37: 8B 43 F8 mov eax,dword ptr [ebx-8] - 10013A3A: 8B 53 FC mov edx,dword ptr [ebx-4] - 10013A3D: E9 E7 01 00 00 jmp 10013C29 - 10013A42: 75 12 jne 10013A56 - 10013A44: 66 83 F9 67 cmp cx,67h - 10013A48: 75 63 jne 10013AAD - 10013A4A: C7 85 F4 FB FF FF mov dword ptr [ebp+FFFFFBF4h],1 - 01 00 00 00 - 10013A54: EB 57 jmp 10013AAD - 10013A56: 39 85 F4 FB FF FF cmp dword ptr [ebp+FFFFFBF4h],eax - 10013A5C: 7E 06 jle 10013A64 - 10013A5E: 89 85 F4 FB FF FF mov dword ptr [ebp+FFFFFBF4h],eax - 10013A64: 81 BD F4 FB FF FF cmp dword ptr [ebp+FFFFFBF4h],0A3h - A3 00 00 00 - 10013A6E: 7E 3D jle 10013AAD - 10013A70: 8B BD F4 FB FF FF mov edi,dword ptr [ebp+FFFFFBF4h] - 10013A76: 81 C7 5D 01 00 00 add edi,15Dh - 10013A7C: 57 push edi - 10013A7D: E8 87 EE FF FF call 10012909 - 10013A82: 59 pop ecx - 10013A83: 8B 8D E4 FB FF FF mov ecx,dword ptr [ebp+FFFFFBE4h] - 10013A89: 89 85 A8 FB FF FF mov dword ptr [ebp+FFFFFBA8h],eax - 10013A8F: 85 C0 test eax,eax - 10013A91: 74 10 je 10013AA3 - 10013A93: 89 85 F0 FB FF FF mov dword ptr [ebp+FFFFFBF0h],eax - 10013A99: 89 BD EC FB FF FF mov dword ptr [ebp+FFFFFBECh],edi - 10013A9F: 8B F0 mov esi,eax - 10013AA1: EB 0A jmp 10013AAD - 10013AA3: C7 85 F4 FB FF FF mov dword ptr [ebp+FFFFFBF4h],0A3h - A3 00 00 00 - 10013AAD: 8B 03 mov eax,dword ptr [ebx] - 10013AAF: 83 C3 08 add ebx,8 - 10013AB2: 89 85 94 FB FF FF mov dword ptr [ebp+FFFFFB94h],eax - 10013AB8: 8B 43 FC mov eax,dword ptr [ebx-4] - 10013ABB: 89 85 98 FB FF FF mov dword ptr [ebp+FFFFFB98h],eax - 10013AC1: 8D 85 B4 FB FF FF lea eax,[ebp+FFFFFBB4h] - 10013AC7: 50 push eax - 10013AC8: FF B5 A4 FB FF FF push dword ptr [ebp+FFFFFBA4h] - 10013ACE: 0F BE C1 movsx eax,cl - 10013AD1: FF B5 F4 FB FF FF push dword ptr [ebp+FFFFFBF4h] - 10013AD7: 89 9D E8 FB FF FF mov dword ptr [ebp+FFFFFBE8h],ebx - 10013ADD: 50 push eax - 10013ADE: FF B5 EC FB FF FF push dword ptr [ebp+FFFFFBECh] - 10013AE4: 8D 85 94 FB FF FF lea eax,[ebp+FFFFFB94h] - 10013AEA: 56 push esi - 10013AEB: 50 push eax - 10013AEC: FF 35 38 57 02 10 push dword ptr ds:[10025738h] - 10013AF2: E8 1F 97 FF FF call 1000D216 - 10013AF7: 59 pop ecx - 10013AF8: FF D0 call eax - 10013AFA: 8B 9D F8 FB FF FF mov ebx,dword ptr [ebp+FFFFFBF8h] - 10013B00: 83 C4 1C add esp,1Ch - 10013B03: 81 E3 80 00 00 00 and ebx,80h - 10013B09: 74 21 je 10013B2C - 10013B0B: 83 BD F4 FB FF FF cmp dword ptr [ebp+FFFFFBF4h],0 - 00 - 10013B12: 75 18 jne 10013B2C - 10013B14: 8D 85 B4 FB FF FF lea eax,[ebp+FFFFFBB4h] - 10013B1A: 50 push eax - 10013B1B: 56 push esi - 10013B1C: FF 35 44 57 02 10 push dword ptr ds:[10025744h] - 10013B22: E8 EF 96 FF FF call 1000D216 - 10013B27: 59 pop ecx - 10013B28: FF D0 call eax - 10013B2A: 59 pop ecx - 10013B2B: 59 pop ecx - 10013B2C: 66 83 BD E4 FB FF cmp word ptr [ebp+FFFFFBE4h],67h - FF 67 - 10013B34: 75 1C jne 10013B52 - 10013B36: 85 DB test ebx,ebx - 10013B38: 75 18 jne 10013B52 - 10013B3A: 8D 85 B4 FB FF FF lea eax,[ebp+FFFFFBB4h] - 10013B40: 50 push eax - 10013B41: 56 push esi - 10013B42: FF 35 40 57 02 10 push dword ptr ds:[10025740h] - 10013B48: E8 C9 96 FF FF call 1000D216 - 10013B4D: 59 pop ecx - 10013B4E: FF D0 call eax - 10013B50: 59 pop ecx - 10013B51: 59 pop ecx - 10013B52: 80 3E 2D cmp byte ptr [esi],2Dh - 10013B55: 75 11 jne 10013B68 - 10013B57: 81 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],100h - 00 01 00 00 - 10013B61: 46 inc esi - 10013B62: 89 B5 F0 FB FF FF mov dword ptr [ebp+FFFFFBF0h],esi - 10013B68: 56 push esi - 10013B69: E9 08 FE FF FF jmp 10013976 - 10013B6E: 89 B5 F4 FB FF FF mov dword ptr [ebp+FFFFFBF4h],esi - 10013B74: C7 85 AC FB FF FF mov dword ptr [ebp+FFFFFBACh],7 - 07 00 00 00 - 10013B7E: EB 24 jmp 10013BA4 - 10013B80: 83 E8 73 sub eax,73h - 10013B83: 0F 84 6A FC FF FF je 100137F3 - 10013B89: 2B C2 sub eax,edx - 10013B8B: 0F 84 8A FE FF FF je 10013A1B - 10013B91: 83 E8 03 sub eax,3 - 10013B94: 0F 85 C9 01 00 00 jne 10013D63 - 10013B9A: C7 85 AC FB FF FF mov dword ptr [ebp+FFFFFBACh],27h - 27 00 00 00 - 10013BA4: F6 85 F8 FB FF FF test byte ptr [ebp+FFFFFBF8h],80h - 80 - 10013BAB: C7 85 E4 FB FF FF mov dword ptr [ebp+FFFFFBE4h],10h - 10 00 00 00 - 10013BB5: 0F 84 6A FE FF FF je 10013A25 - 10013BBB: 6A 30 push 30h - 10013BBD: 58 pop eax - 10013BBE: 66 89 85 D0 FB FF mov word ptr [ebp+FFFFFBD0h],ax - FF - 10013BC5: 8B 85 AC FB FF FF mov eax,dword ptr [ebp+FFFFFBACh] - 10013BCB: 83 C0 51 add eax,51h - 10013BCE: 66 89 85 D2 FB FF mov word ptr [ebp+FFFFFBD2h],ax - FF - 10013BD5: 89 95 DC FB FF FF mov dword ptr [ebp+FFFFFBDCh],edx - 10013BDB: E9 45 FE FF FF jmp 10013A25 - 10013BE0: F7 85 F8 FB FF FF test dword ptr [ebp+FFFFFBF8h],1000h - 00 10 00 00 - 10013BEA: 0F 85 45 FE FF FF jne 10013A35 - 10013BF0: 83 C3 04 add ebx,4 - 10013BF3: F6 85 F8 FB FF FF test byte ptr [ebp+FFFFFBF8h],20h - 20 - 10013BFA: 74 1C je 10013C18 - 10013BFC: F6 85 F8 FB FF FF test byte ptr [ebp+FFFFFBF8h],40h - 40 - 10013C03: 89 9D E8 FB FF FF mov dword ptr [ebp+FFFFFBE8h],ebx - 10013C09: 74 06 je 10013C11 - 10013C0B: 0F BF 43 FC movsx eax,word ptr [ebx-4] - 10013C0F: EB 04 jmp 10013C15 - 10013C11: 0F B7 43 FC movzx eax,word ptr [ebx-4] - 10013C15: 99 cdq - 10013C16: EB 17 jmp 10013C2F - 10013C18: F6 85 F8 FB FF FF test byte ptr [ebp+FFFFFBF8h],40h - 40 - 10013C1F: 8B 43 FC mov eax,dword ptr [ebx-4] - 10013C22: 74 03 je 10013C27 - 10013C24: 99 cdq - 10013C25: EB 02 jmp 10013C29 - 10013C27: 33 D2 xor edx,edx - 10013C29: 89 9D E8 FB FF FF mov dword ptr [ebp+FFFFFBE8h],ebx - 10013C2F: F6 85 F8 FB FF FF test byte ptr [ebp+FFFFFBF8h],40h - 40 - 10013C36: 74 1B je 10013C53 - 10013C38: 85 D2 test edx,edx - 10013C3A: 7F 17 jg 10013C53 - 10013C3C: 7C 04 jl 10013C42 - 10013C3E: 85 C0 test eax,eax - 10013C40: 73 11 jae 10013C53 - 10013C42: F7 D8 neg eax - 10013C44: 83 D2 00 adc edx,0 - 10013C47: F7 DA neg edx - 10013C49: 81 8D F8 FB FF FF or dword ptr [ebp+FFFFFBF8h],100h - 00 01 00 00 - 10013C53: F7 85 F8 FB FF FF test dword ptr [ebp+FFFFFBF8h],9000h - 00 90 00 00 - 10013C5D: 8B DA mov ebx,edx - 10013C5F: 8B F8 mov edi,eax - 10013C61: 75 02 jne 10013C65 - 10013C63: 33 DB xor ebx,ebx - 10013C65: 83 BD F4 FB FF FF cmp dword ptr [ebp+FFFFFBF4h],0 - 00 - 10013C6C: 7D 0C jge 10013C7A - 10013C6E: C7 85 F4 FB FF FF mov dword ptr [ebp+FFFFFBF4h],1 - 01 00 00 00 - 10013C78: EB 1A jmp 10013C94 - 10013C7A: 83 A5 F8 FB FF FF and dword ptr [ebp+FFFFFBF8h],0FFFFFFF7h - F7 - 10013C81: B8 00 02 00 00 mov eax,200h - 10013C86: 39 85 F4 FB FF FF cmp dword ptr [ebp+FFFFFBF4h],eax - 10013C8C: 7E 06 jle 10013C94 - 10013C8E: 89 85 F4 FB FF FF mov dword ptr [ebp+FFFFFBF4h],eax - 10013C94: 8B C7 mov eax,edi - 10013C96: 0B C3 or eax,ebx - 10013C98: 75 06 jne 10013CA0 - 10013C9A: 21 85 DC FB FF FF and dword ptr [ebp+FFFFFBDCh],eax - 10013CA0: 8D B5 FB FD FF FF lea esi,[ebp+FFFFFDFBh] - 10013CA6: 8B 85 F4 FB FF FF mov eax,dword ptr [ebp+FFFFFBF4h] - 10013CAC: FF 8D F4 FB FF FF dec dword ptr [ebp+FFFFFBF4h] - 10013CB2: 85 C0 test eax,eax - 10013CB4: 7F 06 jg 10013CBC - 10013CB6: 8B C7 mov eax,edi - 10013CB8: 0B C3 or eax,ebx - 10013CBA: 74 2D je 10013CE9 - 10013CBC: 8B 85 E4 FB FF FF mov eax,dword ptr [ebp+FFFFFBE4h] - 10013CC2: 99 cdq - 10013CC3: 52 push edx - 10013CC4: 50 push eax - 10013CC5: 53 push ebx - 10013CC6: 57 push edi - 10013CC7: E8 94 3F 00 00 call 10017C60 - 10013CCC: 83 C1 30 add ecx,30h - 10013CCF: 83 F9 39 cmp ecx,39h - 10013CD2: 89 9D 90 FB FF FF mov dword ptr [ebp+FFFFFB90h],ebx - 10013CD8: 8B F8 mov edi,eax - 10013CDA: 8B DA mov ebx,edx - 10013CDC: 7E 06 jle 10013CE4 - 10013CDE: 03 8D AC FB FF FF add ecx,dword ptr [ebp+FFFFFBACh] - 10013CE4: 88 0E mov byte ptr [esi],cl - 10013CE6: 4E dec esi - 10013CE7: EB BD jmp 10013CA6 - 10013CE9: 8D 85 FB FD FF FF lea eax,[ebp+FFFFFDFBh] - 10013CEF: 2B C6 sub eax,esi - 10013CF1: 46 inc esi - 10013CF2: F7 85 F8 FB FF FF test dword ptr [ebp+FFFFFBF8h],200h - 00 02 00 00 - 10013CFC: 89 85 EC FB FF FF mov dword ptr [ebp+FFFFFBECh],eax - 10013D02: 89 B5 F0 FB FF FF mov dword ptr [ebp+FFFFFBF0h],esi - 10013D08: 74 59 je 10013D63 - 10013D0A: 85 C0 test eax,eax - 10013D0C: 74 07 je 10013D15 - 10013D0E: 8B CE mov ecx,esi - 10013D10: 80 39 30 cmp byte ptr [ecx],30h - 10013D13: 74 4E je 10013D63 - 10013D15: FF 8D F0 FB FF FF dec dword ptr [ebp+FFFFFBF0h] - 10013D1B: 8B 8D F0 FB FF FF mov ecx,dword ptr [ebp+FFFFFBF0h] - 10013D21: C6 01 30 mov byte ptr [ecx],30h - 10013D24: 40 inc eax - 10013D25: EB 36 jmp 10013D5D - 10013D27: 85 DB test ebx,ebx - 10013D29: 75 0B jne 10013D36 - 10013D2B: A1 4C 57 02 10 mov eax,dword ptr ds:[1002574Ch] - 10013D30: 89 85 F0 FB FF FF mov dword ptr [ebp+FFFFFBF0h],eax - 10013D36: 8B 85 F0 FB FF FF mov eax,dword ptr [ebp+FFFFFBF0h] - 10013D3C: C7 85 D8 FB FF FF mov dword ptr [ebp+FFFFFBD8h],1 - 01 00 00 00 - 10013D46: EB 09 jmp 10013D51 - 10013D48: 4F dec edi - 10013D49: 66 83 38 00 cmp word ptr [eax],0 - 10013D4D: 74 06 je 10013D55 - 10013D4F: 03 C2 add eax,edx - 10013D51: 85 FF test edi,edi - 10013D53: 75 F3 jne 10013D48 - 10013D55: 2B 85 F0 FB FF FF sub eax,dword ptr [ebp+FFFFFBF0h] - 10013D5B: D1 F8 sar eax,1 - 10013D5D: 89 85 EC FB FF FF mov dword ptr [ebp+FFFFFBECh],eax - 10013D63: 83 BD B0 FB FF FF cmp dword ptr [ebp+FFFFFBB0h],0 - 00 - 10013D6A: 0F 85 65 01 00 00 jne 10013ED5 - 10013D70: 8B 85 F8 FB FF FF mov eax,dword ptr [ebp+FFFFFBF8h] - 10013D76: A8 40 test al,40h - 10013D78: 74 2B je 10013DA5 - 10013D7A: A9 00 01 00 00 test eax,100h - 10013D7F: 74 04 je 10013D85 - 10013D81: 6A 2D push 2Dh - 10013D83: EB 0E jmp 10013D93 - 10013D85: A8 01 test al,1 - 10013D87: 74 04 je 10013D8D - 10013D89: 6A 2B push 2Bh - 10013D8B: EB 06 jmp 10013D93 - 10013D8D: A8 02 test al,2 - 10013D8F: 74 14 je 10013DA5 - 10013D91: 6A 20 push 20h - 10013D93: 58 pop eax - 10013D94: 66 89 85 D0 FB FF mov word ptr [ebp+FFFFFBD0h],ax - FF - 10013D9B: C7 85 DC FB FF FF mov dword ptr [ebp+FFFFFBDCh],1 - 01 00 00 00 - 10013DA5: 8B 9D D4 FB FF FF mov ebx,dword ptr [ebp+FFFFFBD4h] - 10013DAB: 8B B5 EC FB FF FF mov esi,dword ptr [ebp+FFFFFBECh] - 10013DB1: 2B DE sub ebx,esi - 10013DB3: 2B 9D DC FB FF FF sub ebx,dword ptr [ebp+FFFFFBDCh] - 10013DB9: F6 85 F8 FB FF FF test byte ptr [ebp+FFFFFBF8h],0Ch - 0C - 10013DC0: 75 17 jne 10013DD9 - 10013DC2: FF B5 C4 FB FF FF push dword ptr [ebp+FFFFFBC4h] - 10013DC8: 8D 85 E0 FB FF FF lea eax,[ebp+FFFFFBE0h] - 10013DCE: 53 push ebx - 10013DCF: 6A 20 push 20h - 10013DD1: E8 84 F5 FF FF call 1001335A - 10013DD6: 83 C4 0C add esp,0Ch - 10013DD9: FF B5 DC FB FF FF push dword ptr [ebp+FFFFFBDCh] - 10013DDF: 8B BD C4 FB FF FF mov edi,dword ptr [ebp+FFFFFBC4h] - 10013DE5: 8D 85 E0 FB FF FF lea eax,[ebp+FFFFFBE0h] - 10013DEB: 8D 8D D0 FB FF FF lea ecx,[ebp+FFFFFBD0h] - 10013DF1: E8 8B F5 FF FF call 10013381 - 10013DF6: F6 85 F8 FB FF FF test byte ptr [ebp+FFFFFBF8h],8 - 08 - 10013DFD: 59 pop ecx - 10013DFE: 74 1B je 10013E1B - 10013E00: F6 85 F8 FB FF FF test byte ptr [ebp+FFFFFBF8h],4 - 04 - 10013E07: 75 12 jne 10013E1B - 10013E09: 57 push edi - 10013E0A: 53 push ebx - 10013E0B: 6A 30 push 30h - 10013E0D: 8D 85 E0 FB FF FF lea eax,[ebp+FFFFFBE0h] - 10013E13: E8 42 F5 FF FF call 1001335A - 10013E18: 83 C4 0C add esp,0Ch - 10013E1B: 83 BD D8 FB FF FF cmp dword ptr [ebp+FFFFFBD8h],0 - 00 - 10013E22: 75 75 jne 10013E99 - 10013E24: 85 F6 test esi,esi - 10013E26: 7E 71 jle 10013E99 - 10013E28: 8B BD F0 FB FF FF mov edi,dword ptr [ebp+FFFFFBF0h] - 10013E2E: 89 B5 E4 FB FF FF mov dword ptr [ebp+FFFFFBE4h],esi - 10013E34: FF 8D E4 FB FF FF dec dword ptr [ebp+FFFFFBE4h] - 10013E3A: 8D 85 B4 FB FF FF lea eax,[ebp+FFFFFBB4h] - 10013E40: 50 push eax - 10013E41: 8B 85 B4 FB FF FF mov eax,dword ptr [ebp+FFFFFBB4h] - 10013E47: FF B0 AC 00 00 00 push dword ptr [eax+000000ACh] - 10013E4D: 8D 85 9C FB FF FF lea eax,[ebp+FFFFFB9Ch] - 10013E53: 57 push edi - 10013E54: 50 push eax - 10013E55: E8 86 3C 00 00 call 10017AE0 - 10013E5A: 83 C4 10 add esp,10h - 10013E5D: 89 85 90 FB FF FF mov dword ptr [ebp+FFFFFB90h],eax - 10013E63: 85 C0 test eax,eax - 10013E65: 7E 29 jle 10013E90 - 10013E67: FF B5 9C FB FF FF push dword ptr [ebp+FFFFFB9Ch] - 10013E6D: 8B 85 C4 FB FF FF mov eax,dword ptr [ebp+FFFFFBC4h] - 10013E73: 8D B5 E0 FB FF FF lea esi,[ebp+FFFFFBE0h] - 10013E79: E8 AD F4 FF FF call 1001332B - 10013E7E: 03 BD 90 FB FF FF add edi,dword ptr [ebp+FFFFFB90h] - 10013E84: 83 BD E4 FB FF FF cmp dword ptr [ebp+FFFFFBE4h],0 - 00 - 10013E8B: 59 pop ecx - 10013E8C: 7F A6 jg 10013E34 - 10013E8E: EB 1C jmp 10013EAC - 10013E90: 83 8D E0 FB FF FF or dword ptr [ebp+FFFFFBE0h],0FFFFFFFFh - FF - 10013E97: EB 13 jmp 10013EAC - 10013E99: 8B 8D F0 FB FF FF mov ecx,dword ptr [ebp+FFFFFBF0h] - 10013E9F: 56 push esi - 10013EA0: 8D 85 E0 FB FF FF lea eax,[ebp+FFFFFBE0h] - 10013EA6: E8 D6 F4 FF FF call 10013381 - 10013EAB: 59 pop ecx - 10013EAC: 83 BD E0 FB FF FF cmp dword ptr [ebp+FFFFFBE0h],0 - 00 - 10013EB3: 7C 20 jl 10013ED5 - 10013EB5: F6 85 F8 FB FF FF test byte ptr [ebp+FFFFFBF8h],4 - 04 - 10013EBC: 74 17 je 10013ED5 - 10013EBE: FF B5 C4 FB FF FF push dword ptr [ebp+FFFFFBC4h] - 10013EC4: 8D 85 E0 FB FF FF lea eax,[ebp+FFFFFBE0h] - 10013ECA: 53 push ebx - 10013ECB: 6A 20 push 20h - 10013ECD: E8 88 F4 FF FF call 1001335A - 10013ED2: 83 C4 0C add esp,0Ch - 10013ED5: 83 BD A8 FB FF FF cmp dword ptr [ebp+FFFFFBA8h],0 - 00 - 10013EDC: 74 13 je 10013EF1 - 10013EDE: FF B5 A8 FB FF FF push dword ptr [ebp+FFFFFBA8h] - 10013EE4: E8 4B 64 FF FF call 1000A334 - 10013EE9: 83 A5 A8 FB FF FF and dword ptr [ebp+FFFFFBA8h],0 - 00 - 10013EF0: 59 pop ecx - 10013EF1: 8B BD A0 FB FF FF mov edi,dword ptr [ebp+FFFFFBA0h] - 10013EF7: 8B 9D E8 FB FF FF mov ebx,dword ptr [ebp+FFFFFBE8h] - 10013EFD: 0F B7 07 movzx eax,word ptr [edi] - 10013F00: 33 F6 xor esi,esi - 10013F02: 89 85 E4 FB FF FF mov dword ptr [ebp+FFFFFBE4h],eax - 10013F08: 66 3B C6 cmp ax,si - 10013F0B: 74 07 je 10013F14 - 10013F0D: 8B C8 mov ecx,eax - 10013F0F: E9 A1 F5 FF FF jmp 100134B5 - 10013F14: 39 B5 CC FB FF FF cmp dword ptr [ebp+FFFFFBCCh],esi - 10013F1A: 74 0D je 10013F29 - 10013F1C: 83 BD CC FB FF FF cmp dword ptr [ebp+FFFFFBCCh],7 - 07 - 10013F23: 0F 85 50 F5 FF FF jne 10013479 - 10013F29: 80 BD C0 FB FF FF cmp byte ptr [ebp+FFFFFBC0h],0 - 00 - 10013F30: 74 0A je 10013F3C - 10013F32: 8B 85 BC FB FF FF mov eax,dword ptr [ebp+FFFFFBBCh] - 10013F38: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 10013F3C: 8B 85 E0 FB FF FF mov eax,dword ptr [ebp+FFFFFBE0h] - 10013F42: 8B 4D FC mov ecx,dword ptr [ebp-4] - 10013F45: 5F pop edi - 10013F46: 5E pop esi - 10013F47: 33 CD xor ecx,ebp - 10013F49: 5B pop ebx - 10013F4A: E8 4C 61 FF FF call 1000A09B - 10013F4F: C9 leave - 10013F50: C3 ret - 10013F51: 8B FF mov edi,edi - 10013F53: 23 37 and esi,dword ptr [edi] - 10013F55: 01 10 add dword ptr [eax],edx - 10013F57: 1B 35 01 10 4D 35 sbb esi,dword ptr ds:[354D1001h] - 10013F5D: 01 10 add dword ptr [eax],edx - 10013F5F: A8 35 test al,35h - 10013F61: 01 10 add dword ptr [eax],edx - 10013F63: F4 hlt - 10013F64: 35 01 10 00 36 xor eax,36001001h - 10013F69: 01 10 add dword ptr [eax],edx - 10013F6B: 46 inc esi - 10013F6C: 36 01 10 add dword ptr ss:[eax],edx - 10013F6F: 45 inc ebp - 10013F70: 37 aaa - 10013F71: 01 10 add dword ptr [eax],edx - 10013F73: 6A 0C push 0Ch - 10013F75: 68 60 1E 02 10 push 10021E60h - 10013F7A: E8 09 C1 FF FF call 10010088 - 10013F7F: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 10013F82: 33 FF xor edi,edi - 10013F84: 3B CF cmp ecx,edi - 10013F86: 76 2E jbe 10013FB6 - 10013F88: 6A E0 push 0FFFFFFE0h - 10013F8A: 58 pop eax - 10013F8B: 33 D2 xor edx,edx - 10013F8D: F7 F1 div eax,ecx - 10013F8F: 3B 45 0C cmp eax,dword ptr [ebp+0Ch] - 10013F92: 1B C0 sbb eax,eax - 10013F94: 40 inc eax - 10013F95: 75 1F jne 10013FB6 - 10013F97: E8 AD B0 FF FF call 1000F049 - 10013F9C: C7 00 0C 00 00 00 mov dword ptr [eax],0Ch - 10013FA2: 57 push edi - 10013FA3: 57 push edi - 10013FA4: 57 push edi - 10013FA5: 57 push edi - 10013FA6: 57 push edi - 10013FA7: E8 35 B0 FF FF call 1000EFE1 - 10013FAC: 83 C4 14 add esp,14h - 10013FAF: 33 C0 xor eax,eax - 10013FB1: E9 D5 00 00 00 jmp 1001408B - 10013FB6: 0F AF 4D 0C imul ecx,dword ptr [ebp+0Ch] - 10013FBA: 8B F1 mov esi,ecx - 10013FBC: 89 75 08 mov dword ptr [ebp+8],esi - 10013FBF: 3B F7 cmp esi,edi - 10013FC1: 75 03 jne 10013FC6 - 10013FC3: 33 F6 xor esi,esi - 10013FC5: 46 inc esi - 10013FC6: 33 DB xor ebx,ebx - 10013FC8: 89 5D E4 mov dword ptr [ebp-1Ch],ebx - 10013FCB: 83 FE E0 cmp esi,0FFFFFFE0h - 10013FCE: 77 69 ja 10014039 - 10013FD0: 83 3D 18 6D 02 10 cmp dword ptr ds:[10026D18h],3 - 03 - 10013FD7: 75 4B jne 10014024 - 10013FD9: 83 C6 0F add esi,0Fh - 10013FDC: 83 E6 F0 and esi,0FFFFFFF0h - 10013FDF: 89 75 0C mov dword ptr [ebp+0Ch],esi - 10013FE2: 8B 45 08 mov eax,dword ptr [ebp+8] - 10013FE5: 3B 05 08 6D 02 10 cmp eax,dword ptr ds:[10026D08h] - 10013FEB: 77 37 ja 10014024 - 10013FED: 6A 04 push 4 - 10013FEF: E8 9A B5 FF FF call 1000F58E - 10013FF4: 59 pop ecx - 10013FF5: 89 7D FC mov dword ptr [ebp-4],edi - 10013FF8: FF 75 08 push dword ptr [ebp+8] - 10013FFB: E8 A0 BD FF FF call 1000FDA0 - 10014000: 59 pop ecx - 10014001: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 10014004: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1001400B: E8 5F 00 00 00 call 1001406F - 10014010: 8B 5D E4 mov ebx,dword ptr [ebp-1Ch] - 10014013: 3B DF cmp ebx,edi - 10014015: 74 11 je 10014028 - 10014017: FF 75 08 push dword ptr [ebp+8] - 1001401A: 57 push edi - 1001401B: 53 push ebx - 1001401C: E8 4F 62 FF FF call 1000A270 - 10014021: 83 C4 0C add esp,0Ch - 10014024: 3B DF cmp ebx,edi - 10014026: 75 61 jne 10014089 - 10014028: 56 push esi - 10014029: 6A 08 push 8 - 1001402B: FF 35 64 68 02 10 push dword ptr ds:[10026864h] - 10014031: FF 15 AC F0 01 10 call dword ptr ds:[1001F0ACh] - 10014037: 8B D8 mov ebx,eax - 10014039: 3B DF cmp ebx,edi - 1001403B: 75 4C jne 10014089 - 1001403D: 39 3D 88 6B 02 10 cmp dword ptr ds:[10026B88h],edi - 10014043: 74 33 je 10014078 - 10014045: 56 push esi - 10014046: E8 C4 9D FF FF call 1000DE0F - 1001404B: 59 pop ecx - 1001404C: 85 C0 test eax,eax - 1001404E: 0F 85 72 FF FF FF jne 10013FC6 - 10014054: 8B 45 10 mov eax,dword ptr [ebp+10h] - 10014057: 3B C7 cmp eax,edi - 10014059: 0F 84 50 FF FF FF je 10013FAF - 1001405F: C7 00 0C 00 00 00 mov dword ptr [eax],0Ch - 10014065: E9 45 FF FF FF jmp 10013FAF - 1001406A: 33 FF xor edi,edi - 1001406C: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 1001406F: 6A 04 push 4 - 10014071: E8 3E B4 FF FF call 1000F4B4 - 10014076: 59 pop ecx - 10014077: C3 ret - 10014078: 3B DF cmp ebx,edi - 1001407A: 75 0D jne 10014089 - 1001407C: 8B 45 10 mov eax,dword ptr [ebp+10h] - 1001407F: 3B C7 cmp eax,edi - 10014081: 74 06 je 10014089 - 10014083: C7 00 0C 00 00 00 mov dword ptr [eax],0Ch - 10014089: 8B C3 mov eax,ebx - 1001408B: E8 3D C0 FF FF call 100100CD - 10014090: C3 ret - 10014091: CC int 3 - 10014092: CC int 3 - 10014093: CC int 3 - 10014094: CC int 3 - 10014095: CC int 3 - 10014096: CC int 3 - 10014097: CC int 3 - 10014098: CC int 3 - 10014099: CC int 3 - 1001409A: CC int 3 - 1001409B: CC int 3 - 1001409C: CC int 3 - 1001409D: CC int 3 - 1001409E: CC int 3 - 1001409F: CC int 3 - 100140A0: 8B 44 24 08 mov eax,dword ptr [esp+8] - 100140A4: 8B 4C 24 10 mov ecx,dword ptr [esp+10h] - 100140A8: 0B C8 or ecx,eax - 100140AA: 8B 4C 24 0C mov ecx,dword ptr [esp+0Ch] - 100140AE: 75 09 jne 100140B9 - 100140B0: 8B 44 24 04 mov eax,dword ptr [esp+4] - 100140B4: F7 E1 mul eax,ecx - 100140B6: C2 10 00 ret 10h - 100140B9: 53 push ebx - 100140BA: F7 E1 mul eax,ecx - 100140BC: 8B D8 mov ebx,eax - 100140BE: 8B 44 24 08 mov eax,dword ptr [esp+8] - 100140C2: F7 64 24 14 mul eax,dword ptr [esp+14h] - 100140C6: 03 D8 add ebx,eax - 100140C8: 8B 44 24 08 mov eax,dword ptr [esp+8] - 100140CC: F7 E1 mul eax,ecx - 100140CE: 03 D3 add edx,ebx - 100140D0: 5B pop ebx - 100140D1: C2 10 00 ret 10h - 100140D4: CC int 3 - 100140D5: CC int 3 - 100140D6: CC int 3 - 100140D7: CC int 3 - 100140D8: CC int 3 - 100140D9: CC int 3 - 100140DA: CC int 3 - 100140DB: CC int 3 - 100140DC: CC int 3 - 100140DD: CC int 3 - 100140DE: CC int 3 - 100140DF: CC int 3 - 100140E0: 57 push edi - 100140E1: 56 push esi - 100140E2: 53 push ebx - 100140E3: 33 FF xor edi,edi - 100140E5: 8B 44 24 14 mov eax,dword ptr [esp+14h] - 100140E9: 0B C0 or eax,eax - 100140EB: 7D 14 jge 10014101 - 100140ED: 47 inc edi - 100140EE: 8B 54 24 10 mov edx,dword ptr [esp+10h] - 100140F2: F7 D8 neg eax - 100140F4: F7 DA neg edx - 100140F6: 83 D8 00 sbb eax,0 - 100140F9: 89 44 24 14 mov dword ptr [esp+14h],eax - 100140FD: 89 54 24 10 mov dword ptr [esp+10h],edx - 10014101: 8B 44 24 1C mov eax,dword ptr [esp+1Ch] - 10014105: 0B C0 or eax,eax - 10014107: 7D 14 jge 1001411D - 10014109: 47 inc edi - 1001410A: 8B 54 24 18 mov edx,dword ptr [esp+18h] - 1001410E: F7 D8 neg eax - 10014110: F7 DA neg edx - 10014112: 83 D8 00 sbb eax,0 - 10014115: 89 44 24 1C mov dword ptr [esp+1Ch],eax - 10014119: 89 54 24 18 mov dword ptr [esp+18h],edx - 1001411D: 0B C0 or eax,eax - 1001411F: 75 18 jne 10014139 - 10014121: 8B 4C 24 18 mov ecx,dword ptr [esp+18h] - 10014125: 8B 44 24 14 mov eax,dword ptr [esp+14h] - 10014129: 33 D2 xor edx,edx - 1001412B: F7 F1 div eax,ecx - 1001412D: 8B D8 mov ebx,eax - 1001412F: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 10014133: F7 F1 div eax,ecx - 10014135: 8B D3 mov edx,ebx - 10014137: EB 41 jmp 1001417A - 10014139: 8B D8 mov ebx,eax - 1001413B: 8B 4C 24 18 mov ecx,dword ptr [esp+18h] - 1001413F: 8B 54 24 14 mov edx,dword ptr [esp+14h] - 10014143: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 10014147: D1 EB shr ebx,1 - 10014149: D1 D9 rcr ecx,1 - 1001414B: D1 EA shr edx,1 - 1001414D: D1 D8 rcr eax,1 - 1001414F: 0B DB or ebx,ebx - 10014151: 75 F4 jne 10014147 - 10014153: F7 F1 div eax,ecx - 10014155: 8B F0 mov esi,eax - 10014157: F7 64 24 1C mul eax,dword ptr [esp+1Ch] - 1001415B: 8B C8 mov ecx,eax - 1001415D: 8B 44 24 18 mov eax,dword ptr [esp+18h] - 10014161: F7 E6 mul eax,esi - 10014163: 03 D1 add edx,ecx - 10014165: 72 0E jb 10014175 - 10014167: 3B 54 24 14 cmp edx,dword ptr [esp+14h] - 1001416B: 77 08 ja 10014175 - 1001416D: 72 07 jb 10014176 - 1001416F: 3B 44 24 10 cmp eax,dword ptr [esp+10h] - 10014173: 76 01 jbe 10014176 - 10014175: 4E dec esi - 10014176: 33 D2 xor edx,edx - 10014178: 8B C6 mov eax,esi - 1001417A: 4F dec edi - 1001417B: 75 07 jne 10014184 - 1001417D: F7 DA neg edx - 1001417F: F7 D8 neg eax - 10014181: 83 DA 00 sbb edx,0 - 10014184: 5B pop ebx - 10014185: 5E pop esi - 10014186: 5F pop edi - 10014187: C2 10 00 ret 10h - 1001418A: 8B FF mov edi,edi - 1001418C: 56 push esi - 1001418D: E8 57 92 FF FF call 1000D3E9 - 10014192: 8B F0 mov esi,eax - 10014194: 85 F6 test esi,esi - 10014196: 75 0F jne 100141A7 - 10014198: E8 AC AE FF FF call 1000F049 - 1001419D: C7 00 0C 00 00 00 mov dword ptr [eax],0Ch - 100141A3: 33 C0 xor eax,eax - 100141A5: 5E pop esi - 100141A6: C3 ret - 100141A7: 83 7E 44 00 cmp dword ptr [esi+44h],0 - 100141AB: 75 0F jne 100141BC - 100141AD: 6A 24 push 24h - 100141AF: E8 55 E7 FF FF call 10012909 - 100141B4: 59 pop ecx - 100141B5: 89 46 44 mov dword ptr [esi+44h],eax - 100141B8: 85 C0 test eax,eax - 100141BA: 74 DC je 10014198 - 100141BC: 8B 46 44 mov eax,dword ptr [esi+44h] - 100141BF: 5E pop esi - 100141C0: C3 ret - 100141C1: CC int 3 - 100141C2: CC int 3 - 100141C3: CC int 3 - 100141C4: CC int 3 - 100141C5: CC int 3 - 100141C6: CC int 3 - 100141C7: CC int 3 - 100141C8: CC int 3 - 100141C9: CC int 3 - 100141CA: CC int 3 - 100141CB: CC int 3 - 100141CC: CC int 3 - 100141CD: CC int 3 - 100141CE: CC int 3 - 100141CF: CC int 3 - 100141D0: 53 push ebx - 100141D1: 57 push edi - 100141D2: 33 FF xor edi,edi - 100141D4: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 100141D8: 0B C0 or eax,eax - 100141DA: 7D 14 jge 100141F0 - 100141DC: 47 inc edi - 100141DD: 8B 54 24 0C mov edx,dword ptr [esp+0Ch] - 100141E1: F7 D8 neg eax - 100141E3: F7 DA neg edx - 100141E5: 83 D8 00 sbb eax,0 - 100141E8: 89 44 24 10 mov dword ptr [esp+10h],eax - 100141EC: 89 54 24 0C mov dword ptr [esp+0Ch],edx - 100141F0: 8B 44 24 18 mov eax,dword ptr [esp+18h] - 100141F4: 0B C0 or eax,eax - 100141F6: 7D 13 jge 1001420B - 100141F8: 8B 54 24 14 mov edx,dword ptr [esp+14h] - 100141FC: F7 D8 neg eax - 100141FE: F7 DA neg edx - 10014200: 83 D8 00 sbb eax,0 - 10014203: 89 44 24 18 mov dword ptr [esp+18h],eax - 10014207: 89 54 24 14 mov dword ptr [esp+14h],edx - 1001420B: 0B C0 or eax,eax - 1001420D: 75 1B jne 1001422A - 1001420F: 8B 4C 24 14 mov ecx,dword ptr [esp+14h] - 10014213: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 10014217: 33 D2 xor edx,edx - 10014219: F7 F1 div eax,ecx - 1001421B: 8B 44 24 0C mov eax,dword ptr [esp+0Ch] - 1001421F: F7 F1 div eax,ecx - 10014221: 8B C2 mov eax,edx - 10014223: 33 D2 xor edx,edx - 10014225: 4F dec edi - 10014226: 79 4E jns 10014276 - 10014228: EB 53 jmp 1001427D - 1001422A: 8B D8 mov ebx,eax - 1001422C: 8B 4C 24 14 mov ecx,dword ptr [esp+14h] - 10014230: 8B 54 24 10 mov edx,dword ptr [esp+10h] - 10014234: 8B 44 24 0C mov eax,dword ptr [esp+0Ch] - 10014238: D1 EB shr ebx,1 - 1001423A: D1 D9 rcr ecx,1 - 1001423C: D1 EA shr edx,1 - 1001423E: D1 D8 rcr eax,1 - 10014240: 0B DB or ebx,ebx - 10014242: 75 F4 jne 10014238 - 10014244: F7 F1 div eax,ecx - 10014246: 8B C8 mov ecx,eax - 10014248: F7 64 24 18 mul eax,dword ptr [esp+18h] - 1001424C: 91 xchg eax,ecx - 1001424D: F7 64 24 14 mul eax,dword ptr [esp+14h] - 10014251: 03 D1 add edx,ecx - 10014253: 72 0E jb 10014263 - 10014255: 3B 54 24 10 cmp edx,dword ptr [esp+10h] - 10014259: 77 08 ja 10014263 - 1001425B: 72 0E jb 1001426B - 1001425D: 3B 44 24 0C cmp eax,dword ptr [esp+0Ch] - 10014261: 76 08 jbe 1001426B - 10014263: 2B 44 24 14 sub eax,dword ptr [esp+14h] - 10014267: 1B 54 24 18 sbb edx,dword ptr [esp+18h] - 1001426B: 2B 44 24 0C sub eax,dword ptr [esp+0Ch] - 1001426F: 1B 54 24 10 sbb edx,dword ptr [esp+10h] - 10014273: 4F dec edi - 10014274: 79 07 jns 1001427D - 10014276: F7 DA neg edx - 10014278: F7 D8 neg eax - 1001427A: 83 DA 00 sbb edx,0 - 1001427D: 5F pop edi - 1001427E: 5B pop ebx - 1001427F: C2 10 00 ret 10h - 10014282: CC int 3 - 10014283: CC int 3 - 10014284: CC int 3 - 10014285: CC int 3 - 10014286: CC int 3 - 10014287: CC int 3 - 10014288: CC int 3 - 10014289: CC int 3 - 1001428A: CC int 3 - 1001428B: CC int 3 - 1001428C: CC int 3 - 1001428D: CC int 3 - 1001428E: CC int 3 - 1001428F: CC int 3 - 10014290: 53 push ebx - 10014291: 8B 44 24 14 mov eax,dword ptr [esp+14h] - 10014295: 0B C0 or eax,eax - 10014297: 75 18 jne 100142B1 - 10014299: 8B 4C 24 10 mov ecx,dword ptr [esp+10h] - 1001429D: 8B 44 24 0C mov eax,dword ptr [esp+0Ch] - 100142A1: 33 D2 xor edx,edx - 100142A3: F7 F1 div eax,ecx - 100142A5: 8B 44 24 08 mov eax,dword ptr [esp+8] - 100142A9: F7 F1 div eax,ecx - 100142AB: 8B C2 mov eax,edx - 100142AD: 33 D2 xor edx,edx - 100142AF: EB 50 jmp 10014301 - 100142B1: 8B C8 mov ecx,eax - 100142B3: 8B 5C 24 10 mov ebx,dword ptr [esp+10h] - 100142B7: 8B 54 24 0C mov edx,dword ptr [esp+0Ch] - 100142BB: 8B 44 24 08 mov eax,dword ptr [esp+8] - 100142BF: D1 E9 shr ecx,1 - 100142C1: D1 DB rcr ebx,1 - 100142C3: D1 EA shr edx,1 - 100142C5: D1 D8 rcr eax,1 - 100142C7: 0B C9 or ecx,ecx - 100142C9: 75 F4 jne 100142BF - 100142CB: F7 F3 div eax,ebx - 100142CD: 8B C8 mov ecx,eax - 100142CF: F7 64 24 14 mul eax,dword ptr [esp+14h] - 100142D3: 91 xchg eax,ecx - 100142D4: F7 64 24 10 mul eax,dword ptr [esp+10h] - 100142D8: 03 D1 add edx,ecx - 100142DA: 72 0E jb 100142EA - 100142DC: 3B 54 24 0C cmp edx,dword ptr [esp+0Ch] - 100142E0: 77 08 ja 100142EA - 100142E2: 72 0E jb 100142F2 - 100142E4: 3B 44 24 08 cmp eax,dword ptr [esp+8] - 100142E8: 76 08 jbe 100142F2 - 100142EA: 2B 44 24 10 sub eax,dword ptr [esp+10h] - 100142EE: 1B 54 24 14 sbb edx,dword ptr [esp+14h] - 100142F2: 2B 44 24 08 sub eax,dword ptr [esp+8] - 100142F6: 1B 54 24 0C sbb edx,dword ptr [esp+0Ch] - 100142FA: F7 DA neg edx - 100142FC: F7 D8 neg eax - 100142FE: 83 DA 00 sbb edx,0 - 10014301: 5B pop ebx - 10014302: C2 10 00 ret 10h - 10014305: 8B FF mov edi,edi - 10014307: 55 push ebp - 10014308: 8B EC mov ebp,esp - 1001430A: 6A 0A push 0Ah - 1001430C: 6A 00 push 0 - 1001430E: FF 75 08 push dword ptr [ebp+8] - 10014311: E8 83 64 00 00 call 1001A799 - 10014316: 83 C4 0C add esp,0Ch - 10014319: 5D pop ebp - 1001431A: C3 ret - 1001431B: 8B FF mov edi,edi - 1001431D: 55 push ebp - 1001431E: 8B EC mov ebp,esp - 10014320: 53 push ebx - 10014321: 56 push esi - 10014322: 8B 75 08 mov esi,dword ptr [ebp+8] - 10014325: 33 DB xor ebx,ebx - 10014327: 57 push edi - 10014328: 39 5D 14 cmp dword ptr [ebp+14h],ebx - 1001432B: 75 10 jne 1001433D - 1001432D: 3B F3 cmp esi,ebx - 1001432F: 75 10 jne 10014341 - 10014331: 39 5D 0C cmp dword ptr [ebp+0Ch],ebx - 10014334: 75 12 jne 10014348 - 10014336: 33 C0 xor eax,eax - 10014338: 5F pop edi - 10014339: 5E pop esi - 1001433A: 5B pop ebx - 1001433B: 5D pop ebp - 1001433C: C3 ret - 1001433D: 3B F3 cmp esi,ebx - 1001433F: 74 07 je 10014348 - 10014341: 8B 7D 0C mov edi,dword ptr [ebp+0Ch] - 10014344: 3B FB cmp edi,ebx - 10014346: 77 1B ja 10014363 - 10014348: E8 FC AC FF FF call 1000F049 - 1001434D: 6A 16 push 16h - 1001434F: 5E pop esi - 10014350: 89 30 mov dword ptr [eax],esi - 10014352: 53 push ebx - 10014353: 53 push ebx - 10014354: 53 push ebx - 10014355: 53 push ebx - 10014356: 53 push ebx - 10014357: E8 85 AC FF FF call 1000EFE1 - 1001435C: 83 C4 14 add esp,14h - 1001435F: 8B C6 mov eax,esi - 10014361: EB D5 jmp 10014338 - 10014363: 39 5D 14 cmp dword ptr [ebp+14h],ebx - 10014366: 75 04 jne 1001436C - 10014368: 88 1E mov byte ptr [esi],bl - 1001436A: EB CA jmp 10014336 - 1001436C: 8B 55 10 mov edx,dword ptr [ebp+10h] - 1001436F: 3B D3 cmp edx,ebx - 10014371: 75 04 jne 10014377 - 10014373: 88 1E mov byte ptr [esi],bl - 10014375: EB D1 jmp 10014348 - 10014377: 83 7D 14 FF cmp dword ptr [ebp+14h],0FFFFFFFFh - 1001437B: 8B C6 mov eax,esi - 1001437D: 75 0F jne 1001438E - 1001437F: 8A 0A mov cl,byte ptr [edx] - 10014381: 88 08 mov byte ptr [eax],cl - 10014383: 40 inc eax - 10014384: 42 inc edx - 10014385: 3A CB cmp cl,bl - 10014387: 74 1E je 100143A7 - 10014389: 4F dec edi - 1001438A: 75 F3 jne 1001437F - 1001438C: EB 19 jmp 100143A7 - 1001438E: 8A 0A mov cl,byte ptr [edx] - 10014390: 88 08 mov byte ptr [eax],cl - 10014392: 40 inc eax - 10014393: 42 inc edx - 10014394: 3A CB cmp cl,bl - 10014396: 74 08 je 100143A0 - 10014398: 4F dec edi - 10014399: 74 05 je 100143A0 - 1001439B: FF 4D 14 dec dword ptr [ebp+14h] - 1001439E: 75 EE jne 1001438E - 100143A0: 39 5D 14 cmp dword ptr [ebp+14h],ebx - 100143A3: 75 02 jne 100143A7 - 100143A5: 88 18 mov byte ptr [eax],bl - 100143A7: 3B FB cmp edi,ebx - 100143A9: 75 8B jne 10014336 - 100143AB: 83 7D 14 FF cmp dword ptr [ebp+14h],0FFFFFFFFh - 100143AF: 75 0F jne 100143C0 - 100143B1: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 100143B4: 6A 50 push 50h - 100143B6: 88 5C 06 FF mov byte ptr [esi+eax-1],bl - 100143BA: 58 pop eax - 100143BB: E9 78 FF FF FF jmp 10014338 - 100143C0: 88 1E mov byte ptr [esi],bl - 100143C2: E8 82 AC FF FF call 1000F049 - 100143C7: 6A 22 push 22h - 100143C9: 59 pop ecx - 100143CA: 89 08 mov dword ptr [eax],ecx - 100143CC: 8B F1 mov esi,ecx - 100143CE: EB 82 jmp 10014352 - 100143D0: 8B FF mov edi,edi - 100143D2: 55 push ebp - 100143D3: 8B EC mov ebp,esp - 100143D5: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 100143D8: 53 push ebx - 100143D9: 33 DB xor ebx,ebx - 100143DB: 56 push esi - 100143DC: 57 push edi - 100143DD: 3B CB cmp ecx,ebx - 100143DF: 74 07 je 100143E8 - 100143E1: 8B 7D 0C mov edi,dword ptr [ebp+0Ch] - 100143E4: 3B FB cmp edi,ebx - 100143E6: 77 1B ja 10014403 - 100143E8: E8 5C AC FF FF call 1000F049 - 100143ED: 6A 16 push 16h - 100143EF: 5E pop esi - 100143F0: 89 30 mov dword ptr [eax],esi - 100143F2: 53 push ebx - 100143F3: 53 push ebx - 100143F4: 53 push ebx - 100143F5: 53 push ebx - 100143F6: 53 push ebx - 100143F7: E8 E5 AB FF FF call 1000EFE1 - 100143FC: 83 C4 14 add esp,14h - 100143FF: 8B C6 mov eax,esi - 10014401: EB 30 jmp 10014433 - 10014403: 8B 75 10 mov esi,dword ptr [ebp+10h] - 10014406: 3B F3 cmp esi,ebx - 10014408: 75 04 jne 1001440E - 1001440A: 88 19 mov byte ptr [ecx],bl - 1001440C: EB DA jmp 100143E8 - 1001440E: 8B D1 mov edx,ecx - 10014410: 8A 06 mov al,byte ptr [esi] - 10014412: 88 02 mov byte ptr [edx],al - 10014414: 42 inc edx - 10014415: 46 inc esi - 10014416: 3A C3 cmp al,bl - 10014418: 74 03 je 1001441D - 1001441A: 4F dec edi - 1001441B: 75 F3 jne 10014410 - 1001441D: 3B FB cmp edi,ebx - 1001441F: 75 10 jne 10014431 - 10014421: 88 19 mov byte ptr [ecx],bl - 10014423: E8 21 AC FF FF call 1000F049 - 10014428: 6A 22 push 22h - 1001442A: 59 pop ecx - 1001442B: 89 08 mov dword ptr [eax],ecx - 1001442D: 8B F1 mov esi,ecx - 1001442F: EB C1 jmp 100143F2 - 10014431: 33 C0 xor eax,eax - 10014433: 5F pop edi - 10014434: 5E pop esi - 10014435: 5B pop ebx - 10014436: 5D pop ebp - 10014437: C3 ret - 10014438: CC int 3 - 10014439: CC int 3 - 1001443A: CC int 3 - 1001443B: CC int 3 - 1001443C: CC int 3 - 1001443D: CC int 3 - 1001443E: CC int 3 - 1001443F: CC int 3 - 10014440: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 10014444: F7 C1 03 00 00 00 test ecx,3 - 1001444A: 74 24 je 10014470 - 1001444C: 8A 01 mov al,byte ptr [ecx] - 1001444E: 83 C1 01 add ecx,1 - 10014451: 84 C0 test al,al - 10014453: 74 4E je 100144A3 - 10014455: F7 C1 03 00 00 00 test ecx,3 - 1001445B: 75 EF jne 1001444C - 1001445D: 05 00 00 00 00 add eax,0 - 10014462: 8D A4 24 00 00 00 lea esp,[esp+00000000h] - 00 - 10014469: 8D A4 24 00 00 00 lea esp,[esp+00000000h] - 00 - 10014470: 8B 01 mov eax,dword ptr [ecx] - 10014472: BA FF FE FE 7E mov edx,7EFEFEFFh - 10014477: 03 D0 add edx,eax - 10014479: 83 F0 FF xor eax,0FFFFFFFFh - 1001447C: 33 C2 xor eax,edx - 1001447E: 83 C1 04 add ecx,4 - 10014481: A9 00 01 01 81 test eax,81010100h - 10014486: 74 E8 je 10014470 - 10014488: 8B 41 FC mov eax,dword ptr [ecx-4] - 1001448B: 84 C0 test al,al - 1001448D: 74 32 je 100144C1 - 1001448F: 84 E4 test ah,ah - 10014491: 74 24 je 100144B7 - 10014493: A9 00 00 FF 00 test eax,0FF0000h - 10014498: 74 13 je 100144AD - 1001449A: A9 00 00 00 FF test eax,0FF000000h - 1001449F: 74 02 je 100144A3 - 100144A1: EB CD jmp 10014470 - 100144A3: 8D 41 FF lea eax,[ecx-1] - 100144A6: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 100144AA: 2B C1 sub eax,ecx - 100144AC: C3 ret - 100144AD: 8D 41 FE lea eax,[ecx-2] - 100144B0: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 100144B4: 2B C1 sub eax,ecx - 100144B6: C3 ret - 100144B7: 8D 41 FD lea eax,[ecx-3] - 100144BA: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 100144BE: 2B C1 sub eax,ecx - 100144C0: C3 ret - 100144C1: 8D 41 FC lea eax,[ecx-4] - 100144C4: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 100144C8: 2B C1 sub eax,ecx - 100144CA: C3 ret - 100144CB: 8B FF mov edi,edi - 100144CD: 55 push ebp - 100144CE: 8B EC mov ebp,esp - 100144D0: 83 3D E0 6B 02 10 cmp dword ptr ds:[10026BE0h],0 - 00 - 100144D7: 56 push esi - 100144D8: 8B 35 18 6A 02 10 mov esi,dword ptr ds:[10026A18h] - 100144DE: 75 04 jne 100144E4 - 100144E0: 33 C0 xor eax,eax - 100144E2: EB 63 jmp 10014547 - 100144E4: 57 push edi - 100144E5: 85 F6 test esi,esi - 100144E7: 75 1B jne 10014504 - 100144E9: 39 35 20 6A 02 10 cmp dword ptr ds:[10026A20h],esi - 100144EF: 74 53 je 10014544 - 100144F1: E8 D6 63 00 00 call 1001A8CC - 100144F6: 85 C0 test eax,eax - 100144F8: 75 4A jne 10014544 - 100144FA: 8B 35 18 6A 02 10 mov esi,dword ptr ds:[10026A18h] - 10014500: 85 F6 test esi,esi - 10014502: 74 40 je 10014544 - 10014504: 83 7D 08 00 cmp dword ptr [ebp+8],0 - 10014508: 74 3A je 10014544 - 1001450A: FF 75 08 push dword ptr [ebp+8] - 1001450D: E8 2E FF FF FF call 10014440 - 10014512: 59 pop ecx - 10014513: 8B F8 mov edi,eax - 10014515: EB 27 jmp 1001453E - 10014517: 50 push eax - 10014518: E8 23 FF FF FF call 10014440 - 1001451D: 59 pop ecx - 1001451E: 3B C7 cmp eax,edi - 10014520: 76 19 jbe 1001453B - 10014522: 8B 06 mov eax,dword ptr [esi] - 10014524: 80 3C 38 3D cmp byte ptr [eax+edi],3Dh - 10014528: 75 11 jne 1001453B - 1001452A: 57 push edi - 1001452B: FF 75 08 push dword ptr [ebp+8] - 1001452E: 50 push eax - 1001452F: E8 7E 63 00 00 call 1001A8B2 - 10014534: 83 C4 0C add esp,0Ch - 10014537: 85 C0 test eax,eax - 10014539: 74 0F je 1001454A - 1001453B: 83 C6 04 add esi,4 - 1001453E: 8B 06 mov eax,dword ptr [esi] - 10014540: 85 C0 test eax,eax - 10014542: 75 D3 jne 10014517 - 10014544: 33 C0 xor eax,eax - 10014546: 5F pop edi - 10014547: 5E pop esi - 10014548: 5D pop ebp - 10014549: C3 ret - 1001454A: 8B 06 mov eax,dword ptr [esi] - 1001454C: 8D 44 38 01 lea eax,[eax+edi+1] - 10014550: EB F4 jmp 10014546 - 10014552: E8 0B 8F FF FF call 1000D462 - 10014557: 8B C8 mov ecx,eax - 10014559: 8B 41 6C mov eax,dword ptr [ecx+6Ch] - 1001455C: 3B 05 60 56 02 10 cmp eax,dword ptr ds:[10025660h] - 10014562: 74 10 je 10014574 - 10014564: 8B 15 7C 55 02 10 mov edx,dword ptr ds:[1002557Ch] - 1001456A: 85 51 70 test dword ptr [ecx+70h],edx - 1001456D: 75 05 jne 10014574 - 1001456F: E8 F0 DC FF FF call 10012264 - 10014574: 8B 40 04 mov eax,dword ptr [eax+4] - 10014577: C3 ret - 10014578: 8B FF mov edi,edi - 1001457A: 55 push ebp - 1001457B: 8B EC mov ebp,esp - 1001457D: 83 EC 10 sub esp,10h - 10014580: 56 push esi - 10014581: FF 75 0C push dword ptr [ebp+0Ch] - 10014584: 8D 4D F0 lea ecx,[ebp-10h] - 10014587: E8 70 61 FF FF call 1000A6FC - 1001458C: 8B 75 08 mov esi,dword ptr [ebp+8] - 1001458F: 0F BE 06 movsx eax,byte ptr [esi] - 10014592: 50 push eax - 10014593: E8 1A 65 00 00 call 1001AAB2 - 10014598: 83 F8 65 cmp eax,65h - 1001459B: EB 0C jmp 100145A9 - 1001459D: 46 inc esi - 1001459E: 0F B6 06 movzx eax,byte ptr [esi] - 100145A1: 50 push eax - 100145A2: E8 8E 28 00 00 call 10016E35 - 100145A7: 85 C0 test eax,eax - 100145A9: 59 pop ecx - 100145AA: 75 F1 jne 1001459D - 100145AC: 0F BE 06 movsx eax,byte ptr [esi] - 100145AF: 50 push eax - 100145B0: E8 FD 64 00 00 call 1001AAB2 - 100145B5: 59 pop ecx - 100145B6: 83 F8 78 cmp eax,78h - 100145B9: 75 02 jne 100145BD - 100145BB: 46 inc esi - 100145BC: 46 inc esi - 100145BD: 8B 4D F0 mov ecx,dword ptr [ebp-10h] - 100145C0: 8B 89 BC 00 00 00 mov ecx,dword ptr [ecx+000000BCh] - 100145C6: 8B 09 mov ecx,dword ptr [ecx] - 100145C8: 8A 06 mov al,byte ptr [esi] - 100145CA: 8A 09 mov cl,byte ptr [ecx] - 100145CC: 88 0E mov byte ptr [esi],cl - 100145CE: 46 inc esi - 100145CF: 8A 0E mov cl,byte ptr [esi] - 100145D1: 88 06 mov byte ptr [esi],al - 100145D3: 8A C1 mov al,cl - 100145D5: 8A 0E mov cl,byte ptr [esi] - 100145D7: 46 inc esi - 100145D8: 84 C9 test cl,cl - 100145DA: 75 F3 jne 100145CF - 100145DC: 5E pop esi - 100145DD: 38 4D FC cmp byte ptr [ebp-4],cl - 100145E0: 74 07 je 100145E9 - 100145E2: 8B 45 F8 mov eax,dword ptr [ebp-8] - 100145E5: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 100145E9: C9 leave - 100145EA: C3 ret - 100145EB: 8B FF mov edi,edi - 100145ED: 55 push ebp - 100145EE: 8B EC mov ebp,esp - 100145F0: 83 EC 10 sub esp,10h - 100145F3: 56 push esi - 100145F4: FF 75 0C push dword ptr [ebp+0Ch] - 100145F7: 8D 4D F0 lea ecx,[ebp-10h] - 100145FA: E8 FD 60 FF FF call 1000A6FC - 100145FF: 8B 45 08 mov eax,dword ptr [ebp+8] - 10014602: 8A 08 mov cl,byte ptr [eax] - 10014604: 8B 75 F0 mov esi,dword ptr [ebp-10h] - 10014607: 84 C9 test cl,cl - 10014609: 74 15 je 10014620 - 1001460B: 8B 96 BC 00 00 00 mov edx,dword ptr [esi+000000BCh] - 10014611: 8B 12 mov edx,dword ptr [edx] - 10014613: 8A 12 mov dl,byte ptr [edx] - 10014615: 3A CA cmp cl,dl - 10014617: 74 07 je 10014620 - 10014619: 40 inc eax - 1001461A: 8A 08 mov cl,byte ptr [eax] - 1001461C: 84 C9 test cl,cl - 1001461E: 75 F5 jne 10014615 - 10014620: 8A 08 mov cl,byte ptr [eax] - 10014622: 40 inc eax - 10014623: 84 C9 test cl,cl - 10014625: 74 36 je 1001465D - 10014627: EB 0B jmp 10014634 - 10014629: 80 F9 65 cmp cl,65h - 1001462C: 74 0C je 1001463A - 1001462E: 80 F9 45 cmp cl,45h - 10014631: 74 07 je 1001463A - 10014633: 40 inc eax - 10014634: 8A 08 mov cl,byte ptr [eax] - 10014636: 84 C9 test cl,cl - 10014638: 75 EF jne 10014629 - 1001463A: 8B D0 mov edx,eax - 1001463C: 48 dec eax - 1001463D: 80 38 30 cmp byte ptr [eax],30h - 10014640: 74 FA je 1001463C - 10014642: 8B 8E BC 00 00 00 mov ecx,dword ptr [esi+000000BCh] - 10014648: 8B 09 mov ecx,dword ptr [ecx] - 1001464A: 53 push ebx - 1001464B: 8A 18 mov bl,byte ptr [eax] - 1001464D: 3A 19 cmp bl,byte ptr [ecx] - 1001464F: 5B pop ebx - 10014650: 75 01 jne 10014653 - 10014652: 48 dec eax - 10014653: 8A 0A mov cl,byte ptr [edx] - 10014655: 40 inc eax - 10014656: 42 inc edx - 10014657: 88 08 mov byte ptr [eax],cl - 10014659: 84 C9 test cl,cl - 1001465B: 75 F6 jne 10014653 - 1001465D: 80 7D FC 00 cmp byte ptr [ebp-4],0 - 10014661: 5E pop esi - 10014662: 74 07 je 1001466B - 10014664: 8B 45 F8 mov eax,dword ptr [ebp-8] - 10014667: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1001466B: C9 leave - 1001466C: C3 ret - 1001466D: 8B FF mov edi,edi - 1001466F: 55 push ebp - 10014670: 8B EC mov ebp,esp - 10014672: D9 EE fldz - 10014674: 8B 45 08 mov eax,dword ptr [ebp+8] - 10014677: DC 18 fcomp qword ptr [eax] - 10014679: DF E0 fnstsw ax - 1001467B: F6 C4 41 test ah,41h - 1001467E: 7A 05 jp 10014685 - 10014680: 33 C0 xor eax,eax - 10014682: 40 inc eax - 10014683: 5D pop ebp - 10014684: C3 ret - 10014685: 33 C0 xor eax,eax - 10014687: 5D pop ebp - 10014688: C3 ret - 10014689: 8B FF mov edi,edi - 1001468B: 55 push ebp - 1001468C: 8B EC mov ebp,esp - 1001468E: 51 push ecx - 1001468F: 51 push ecx - 10014690: 83 7D 08 00 cmp dword ptr [ebp+8],0 - 10014694: FF 75 14 push dword ptr [ebp+14h] - 10014697: FF 75 10 push dword ptr [ebp+10h] - 1001469A: 74 19 je 100146B5 - 1001469C: 8D 45 F8 lea eax,[ebp-8] - 1001469F: 50 push eax - 100146A0: E8 39 64 00 00 call 1001AADE - 100146A5: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 100146A8: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 100146AB: 89 08 mov dword ptr [eax],ecx - 100146AD: 8B 4D FC mov ecx,dword ptr [ebp-4] - 100146B0: 89 48 04 mov dword ptr [eax+4],ecx - 100146B3: EB 11 jmp 100146C6 - 100146B5: 8D 45 08 lea eax,[ebp+8] - 100146B8: 50 push eax - 100146B9: E8 C8 64 00 00 call 1001AB86 - 100146BE: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 100146C1: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 100146C4: 89 08 mov dword ptr [eax],ecx - 100146C6: 83 C4 0C add esp,0Ch - 100146C9: C9 leave - 100146CA: C3 ret - 100146CB: 8B FF mov edi,edi - 100146CD: 55 push ebp - 100146CE: 8B EC mov ebp,esp - 100146D0: 6A 00 push 0 - 100146D2: FF 75 10 push dword ptr [ebp+10h] - 100146D5: FF 75 0C push dword ptr [ebp+0Ch] - 100146D8: FF 75 08 push dword ptr [ebp+8] - 100146DB: E8 A9 FF FF FF call 10014689 - 100146E0: 83 C4 10 add esp,10h - 100146E3: 5D pop ebp - 100146E4: C3 ret - 100146E5: 8B FF mov edi,edi - 100146E7: 56 push esi - 100146E8: 8B F0 mov esi,eax - 100146EA: 85 FF test edi,edi - 100146EC: 74 14 je 10014702 - 100146EE: 56 push esi - 100146EF: E8 4C FD FF FF call 10014440 - 100146F4: 40 inc eax - 100146F5: 50 push eax - 100146F6: 56 push esi - 100146F7: 03 F7 add esi,edi - 100146F9: 56 push esi - 100146FA: E8 61 1D 00 00 call 10016460 - 100146FF: 83 C4 10 add esp,10h - 10014702: 5E pop esi - 10014703: C3 ret - 10014704: 8B FF mov edi,edi - 10014706: 55 push ebp - 10014707: 8B EC mov ebp,esp - 10014709: 6A 00 push 0 - 1001470B: FF 75 08 push dword ptr [ebp+8] - 1001470E: E8 65 FE FF FF call 10014578 - 10014713: 59 pop ecx - 10014714: 59 pop ecx - 10014715: 5D pop ebp - 10014716: C3 ret - 10014717: 8B FF mov edi,edi - 10014719: 55 push ebp - 1001471A: 8B EC mov ebp,esp - 1001471C: 6A 00 push 0 - 1001471E: FF 75 08 push dword ptr [ebp+8] - 10014721: E8 C5 FE FF FF call 100145EB - 10014726: 59 pop ecx - 10014727: 59 pop ecx - 10014728: 5D pop ebp - 10014729: C3 ret - 1001472A: 8B FF mov edi,edi - 1001472C: 55 push ebp - 1001472D: 8B EC mov ebp,esp - 1001472F: 83 EC 10 sub esp,10h - 10014732: 53 push ebx - 10014733: 56 push esi - 10014734: 57 push edi - 10014735: FF 75 1C push dword ptr [ebp+1Ch] - 10014738: 8D 4D F0 lea ecx,[ebp-10h] - 1001473B: 8B D8 mov ebx,eax - 1001473D: E8 BA 5F FF FF call 1000A6FC - 10014742: 33 F6 xor esi,esi - 10014744: 3B DE cmp ebx,esi - 10014746: 75 2B jne 10014773 - 10014748: E8 FC A8 FF FF call 1000F049 - 1001474D: 6A 16 push 16h - 1001474F: 5F pop edi - 10014750: 56 push esi - 10014751: 56 push esi - 10014752: 56 push esi - 10014753: 56 push esi - 10014754: 56 push esi - 10014755: 89 38 mov dword ptr [eax],edi - 10014757: E8 85 A8 FF FF call 1000EFE1 - 1001475C: 83 C4 14 add esp,14h - 1001475F: 80 7D FC 00 cmp byte ptr [ebp-4],0 - 10014763: 74 07 je 1001476C - 10014765: 8B 45 F8 mov eax,dword ptr [ebp-8] - 10014768: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1001476C: 8B C7 mov eax,edi - 1001476E: E9 21 01 00 00 jmp 10014894 - 10014773: 39 75 08 cmp dword ptr [ebp+8],esi - 10014776: 76 D0 jbe 10014748 - 10014778: 39 75 0C cmp dword ptr [ebp+0Ch],esi - 1001477B: 7E 05 jle 10014782 - 1001477D: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 10014780: EB 02 jmp 10014784 - 10014782: 33 C0 xor eax,eax - 10014784: 83 C0 09 add eax,9 - 10014787: 39 45 08 cmp dword ptr [ebp+8],eax - 1001478A: 77 09 ja 10014795 - 1001478C: E8 B8 A8 FF FF call 1000F049 - 10014791: 6A 22 push 22h - 10014793: EB BA jmp 1001474F - 10014795: 80 7D 18 00 cmp byte ptr [ebp+18h],0 - 10014799: 74 1E je 100147B9 - 1001479B: 8B 55 14 mov edx,dword ptr [ebp+14h] - 1001479E: 33 C0 xor eax,eax - 100147A0: 39 75 0C cmp dword ptr [ebp+0Ch],esi - 100147A3: 0F 9F C0 setg al - 100147A6: 33 C9 xor ecx,ecx - 100147A8: 83 3A 2D cmp dword ptr [edx],2Dh - 100147AB: 0F 94 C1 sete cl - 100147AE: 8B F8 mov edi,eax - 100147B0: 03 CB add ecx,ebx - 100147B2: 8B C1 mov eax,ecx - 100147B4: E8 2C FF FF FF call 100146E5 - 100147B9: 8B 7D 14 mov edi,dword ptr [ebp+14h] - 100147BC: 83 3F 2D cmp dword ptr [edi],2Dh - 100147BF: 8B F3 mov esi,ebx - 100147C1: 75 06 jne 100147C9 - 100147C3: C6 03 2D mov byte ptr [ebx],2Dh - 100147C6: 8D 73 01 lea esi,[ebx+1] - 100147C9: 83 7D 0C 00 cmp dword ptr [ebp+0Ch],0 - 100147CD: 7E 18 jle 100147E7 - 100147CF: 8D 46 01 lea eax,[esi+1] - 100147D2: 8A 08 mov cl,byte ptr [eax] - 100147D4: 88 0E mov byte ptr [esi],cl - 100147D6: 8B F0 mov esi,eax - 100147D8: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 100147DB: 8B 80 BC 00 00 00 mov eax,dword ptr [eax+000000BCh] - 100147E1: 8B 00 mov eax,dword ptr [eax] - 100147E3: 8A 00 mov al,byte ptr [eax] - 100147E5: 88 06 mov byte ptr [esi],al - 100147E7: 33 C0 xor eax,eax - 100147E9: 38 45 18 cmp byte ptr [ebp+18h],al - 100147EC: 0F 94 C0 sete al - 100147EF: 03 45 0C add eax,dword ptr [ebp+0Ch] - 100147F2: 03 F0 add esi,eax - 100147F4: 83 7D 08 FF cmp dword ptr [ebp+8],0FFFFFFFFh - 100147F8: 75 05 jne 100147FF - 100147FA: 83 CB FF or ebx,0FFFFFFFFh - 100147FD: EB 05 jmp 10014804 - 100147FF: 2B DE sub ebx,esi - 10014801: 03 5D 08 add ebx,dword ptr [ebp+8] - 10014804: 68 7C 00 02 10 push 1002007Ch - 10014809: 53 push ebx - 1001480A: 56 push esi - 1001480B: E8 C0 FB FF FF call 100143D0 - 10014810: 83 C4 0C add esp,0Ch - 10014813: 33 DB xor ebx,ebx - 10014815: 85 C0 test eax,eax - 10014817: 74 0D je 10014826 - 10014819: 53 push ebx - 1001481A: 53 push ebx - 1001481B: 53 push ebx - 1001481C: 53 push ebx - 1001481D: 53 push ebx - 1001481E: E8 96 A6 FF FF call 1000EEB9 - 10014823: 83 C4 14 add esp,14h - 10014826: 8D 4E 02 lea ecx,[esi+2] - 10014829: 39 5D 10 cmp dword ptr [ebp+10h],ebx - 1001482C: 74 03 je 10014831 - 1001482E: C6 06 45 mov byte ptr [esi],45h - 10014831: 8B 47 0C mov eax,dword ptr [edi+0Ch] - 10014834: 46 inc esi - 10014835: 80 38 30 cmp byte ptr [eax],30h - 10014838: 74 2E je 10014868 - 1001483A: 8B 47 04 mov eax,dword ptr [edi+4] - 1001483D: 48 dec eax - 1001483E: 79 05 jns 10014845 - 10014840: F7 D8 neg eax - 10014842: C6 06 2D mov byte ptr [esi],2Dh - 10014845: 46 inc esi - 10014846: 83 F8 64 cmp eax,64h - 10014849: 7C 0A jl 10014855 - 1001484B: 99 cdq - 1001484C: 6A 64 push 64h - 1001484E: 5F pop edi - 1001484F: F7 FF idiv eax,edi - 10014851: 00 06 add byte ptr [esi],al - 10014853: 8B C2 mov eax,edx - 10014855: 46 inc esi - 10014856: 83 F8 0A cmp eax,0Ah - 10014859: 7C 0A jl 10014865 - 1001485B: 99 cdq - 1001485C: 6A 0A push 0Ah - 1001485E: 5F pop edi - 1001485F: F7 FF idiv eax,edi - 10014861: 00 06 add byte ptr [esi],al - 10014863: 8B C2 mov eax,edx - 10014865: 00 46 01 add byte ptr [esi+1],al - 10014868: F6 05 D0 6B 02 10 test byte ptr ds:[10026BD0h],1 - 01 - 1001486F: 74 14 je 10014885 - 10014871: 80 39 30 cmp byte ptr [ecx],30h - 10014874: 75 0F jne 10014885 - 10014876: 6A 03 push 3 - 10014878: 8D 41 01 lea eax,[ecx+1] - 1001487B: 50 push eax - 1001487C: 51 push ecx - 1001487D: E8 DE 1B 00 00 call 10016460 - 10014882: 83 C4 0C add esp,0Ch - 10014885: 80 7D FC 00 cmp byte ptr [ebp-4],0 - 10014889: 74 07 je 10014892 - 1001488B: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1001488E: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 10014892: 33 C0 xor eax,eax - 10014894: 5F pop edi - 10014895: 5E pop esi - 10014896: 5B pop ebx - 10014897: C9 leave - 10014898: C3 ret - 10014899: 8B FF mov edi,edi - 1001489B: 55 push ebp - 1001489C: 8B EC mov ebp,esp - 1001489E: 83 EC 2C sub esp,2Ch - 100148A1: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 100148A6: 33 C5 xor eax,ebp - 100148A8: 89 45 FC mov dword ptr [ebp-4],eax - 100148AB: 8B 45 08 mov eax,dword ptr [ebp+8] - 100148AE: 53 push ebx - 100148AF: 56 push esi - 100148B0: 57 push edi - 100148B1: 8B 7D 0C mov edi,dword ptr [ebp+0Ch] - 100148B4: 6A 16 push 16h - 100148B6: 5E pop esi - 100148B7: 56 push esi - 100148B8: 8D 4D E4 lea ecx,[ebp-1Ch] - 100148BB: 51 push ecx - 100148BC: 8D 4D D4 lea ecx,[ebp-2Ch] - 100148BF: 51 push ecx - 100148C0: FF 70 04 push dword ptr [eax+4] - 100148C3: FF 30 push dword ptr [eax] - 100148C5: E8 E0 64 00 00 call 1001ADAA - 100148CA: 33 DB xor ebx,ebx - 100148CC: 83 C4 14 add esp,14h - 100148CF: 3B FB cmp edi,ebx - 100148D1: 75 18 jne 100148EB - 100148D3: E8 71 A7 FF FF call 1000F049 - 100148D8: 53 push ebx - 100148D9: 53 push ebx - 100148DA: 53 push ebx - 100148DB: 53 push ebx - 100148DC: 53 push ebx - 100148DD: 89 30 mov dword ptr [eax],esi - 100148DF: E8 FD A6 FF FF call 1000EFE1 - 100148E4: 83 C4 14 add esp,14h - 100148E7: 8B C6 mov eax,esi - 100148E9: EB 6F jmp 1001495A - 100148EB: 8B 45 10 mov eax,dword ptr [ebp+10h] - 100148EE: 3B C3 cmp eax,ebx - 100148F0: 76 E1 jbe 100148D3 - 100148F2: 8B 75 14 mov esi,dword ptr [ebp+14h] - 100148F5: 83 F8 FF cmp eax,0FFFFFFFFh - 100148F8: 75 05 jne 100148FF - 100148FA: 83 C8 FF or eax,0FFFFFFFFh - 100148FD: EB 14 jmp 10014913 - 100148FF: 33 C9 xor ecx,ecx - 10014901: 83 7D D4 2D cmp dword ptr [ebp-2Ch],2Dh - 10014905: 0F 94 C1 sete cl - 10014908: 2B C1 sub eax,ecx - 1001490A: 33 C9 xor ecx,ecx - 1001490C: 3B F3 cmp esi,ebx - 1001490E: 0F 9F C1 setg cl - 10014911: 2B C1 sub eax,ecx - 10014913: 8D 4D D4 lea ecx,[ebp-2Ch] - 10014916: 51 push ecx - 10014917: 8D 4E 01 lea ecx,[esi+1] - 1001491A: 51 push ecx - 1001491B: 50 push eax - 1001491C: 33 C0 xor eax,eax - 1001491E: 83 7D D4 2D cmp dword ptr [ebp-2Ch],2Dh - 10014922: 0F 94 C0 sete al - 10014925: 33 C9 xor ecx,ecx - 10014927: 3B F3 cmp esi,ebx - 10014929: 0F 9F C1 setg cl - 1001492C: 03 C7 add eax,edi - 1001492E: 03 C8 add ecx,eax - 10014930: 51 push ecx - 10014931: E8 F8 62 00 00 call 1001AC2E - 10014936: 83 C4 10 add esp,10h - 10014939: 3B C3 cmp eax,ebx - 1001493B: 74 04 je 10014941 - 1001493D: 88 1F mov byte ptr [edi],bl - 1001493F: EB 19 jmp 1001495A - 10014941: FF 75 1C push dword ptr [ebp+1Ch] - 10014944: 8D 45 D4 lea eax,[ebp-2Ch] - 10014947: 53 push ebx - 10014948: 50 push eax - 10014949: FF 75 18 push dword ptr [ebp+18h] - 1001494C: 8B C7 mov eax,edi - 1001494E: 56 push esi - 1001494F: FF 75 10 push dword ptr [ebp+10h] - 10014952: E8 D3 FD FF FF call 1001472A - 10014957: 83 C4 18 add esp,18h - 1001495A: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1001495D: 5F pop edi - 1001495E: 5E pop esi - 1001495F: 33 CD xor ecx,ebp - 10014961: 5B pop ebx - 10014962: E8 34 57 FF FF call 1000A09B - 10014967: C9 leave - 10014968: C3 ret - 10014969: 8B FF mov edi,edi - 1001496B: 55 push ebp - 1001496C: 8B EC mov ebp,esp - 1001496E: 6A 00 push 0 - 10014970: FF 75 18 push dword ptr [ebp+18h] - 10014973: FF 75 14 push dword ptr [ebp+14h] - 10014976: FF 75 10 push dword ptr [ebp+10h] - 10014979: FF 75 0C push dword ptr [ebp+0Ch] - 1001497C: FF 75 08 push dword ptr [ebp+8] - 1001497F: E8 15 FF FF FF call 10014899 - 10014984: 83 C4 18 add esp,18h - 10014987: 5D pop ebp - 10014988: C3 ret - 10014989: 8B FF mov edi,edi - 1001498B: 55 push ebp - 1001498C: 8B EC mov ebp,esp - 1001498E: 83 EC 24 sub esp,24h - 10014991: 56 push esi - 10014992: 57 push edi - 10014993: FF 75 1C push dword ptr [ebp+1Ch] - 10014996: 8D 4D DC lea ecx,[ebp-24h] - 10014999: C7 45 EC FF 03 00 mov dword ptr [ebp-14h],3FFh - 00 - 100149A0: 33 FF xor edi,edi - 100149A2: C7 45 FC 30 00 00 mov dword ptr [ebp-4],30h - 00 - 100149A9: E8 4E 5D FF FF call 1000A6FC - 100149AE: 39 7D 14 cmp dword ptr [ebp+14h],edi - 100149B1: 7D 03 jge 100149B6 - 100149B3: 89 7D 14 mov dword ptr [ebp+14h],edi - 100149B6: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 100149B9: 3B F7 cmp esi,edi - 100149BB: 75 2B jne 100149E8 - 100149BD: E8 87 A6 FF FF call 1000F049 - 100149C2: 6A 16 push 16h - 100149C4: 5E pop esi - 100149C5: 57 push edi - 100149C6: 57 push edi - 100149C7: 57 push edi - 100149C8: 57 push edi - 100149C9: 57 push edi - 100149CA: 89 30 mov dword ptr [eax],esi - 100149CC: E8 10 A6 FF FF call 1000EFE1 - 100149D1: 83 C4 14 add esp,14h - 100149D4: 80 7D E8 00 cmp byte ptr [ebp-18h],0 - 100149D8: 74 07 je 100149E1 - 100149DA: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 100149DD: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 100149E1: 8B C6 mov eax,esi - 100149E3: E9 10 03 00 00 jmp 10014CF8 - 100149E8: 39 7D 10 cmp dword ptr [ebp+10h],edi - 100149EB: 76 D0 jbe 100149BD - 100149ED: 8B 45 14 mov eax,dword ptr [ebp+14h] - 100149F0: 83 C0 0B add eax,0Bh - 100149F3: C6 06 00 mov byte ptr [esi],0 - 100149F6: 39 45 10 cmp dword ptr [ebp+10h],eax - 100149F9: 77 09 ja 10014A04 - 100149FB: E8 49 A6 FF FF call 1000F049 - 10014A00: 6A 22 push 22h - 10014A02: EB C0 jmp 100149C4 - 10014A04: 8B 7D 08 mov edi,dword ptr [ebp+8] - 10014A07: 8B 07 mov eax,dword ptr [edi] - 10014A09: 89 45 F4 mov dword ptr [ebp-0Ch],eax - 10014A0C: 8B 47 04 mov eax,dword ptr [edi+4] - 10014A0F: 8B C8 mov ecx,eax - 10014A11: C1 E9 14 shr ecx,14h - 10014A14: BA FF 07 00 00 mov edx,7FFh - 10014A19: 53 push ebx - 10014A1A: 23 CA and ecx,edx - 10014A1C: 33 DB xor ebx,ebx - 10014A1E: 3B CA cmp ecx,edx - 10014A20: 0F 85 90 00 00 00 jne 10014AB6 - 10014A26: 85 DB test ebx,ebx - 10014A28: 0F 85 88 00 00 00 jne 10014AB6 - 10014A2E: 8B 45 10 mov eax,dword ptr [ebp+10h] - 10014A31: 83 F8 FF cmp eax,0FFFFFFFFh - 10014A34: 75 04 jne 10014A3A - 10014A36: 0B C0 or eax,eax - 10014A38: EB 03 jmp 10014A3D - 10014A3A: 83 C0 FE add eax,0FFFFFFFEh - 10014A3D: 6A 00 push 0 - 10014A3F: FF 75 14 push dword ptr [ebp+14h] - 10014A42: 8D 5E 02 lea ebx,[esi+2] - 10014A45: 50 push eax - 10014A46: 53 push ebx - 10014A47: 57 push edi - 10014A48: E8 1C FF FF FF call 10014969 - 10014A4D: 83 C4 14 add esp,14h - 10014A50: 85 C0 test eax,eax - 10014A52: 74 19 je 10014A6D - 10014A54: 80 7D E8 00 cmp byte ptr [ebp-18h],0 - 10014A58: C6 06 00 mov byte ptr [esi],0 - 10014A5B: 0F 84 96 02 00 00 je 10014CF7 - 10014A61: 8B 4D E4 mov ecx,dword ptr [ebp-1Ch] - 10014A64: 83 61 70 FD and dword ptr [ecx+70h],0FFFFFFFDh - 10014A68: E9 8A 02 00 00 jmp 10014CF7 - 10014A6D: 80 3B 2D cmp byte ptr [ebx],2Dh - 10014A70: 75 04 jne 10014A76 - 10014A72: C6 06 2D mov byte ptr [esi],2Dh - 10014A75: 46 inc esi - 10014A76: C6 06 30 mov byte ptr [esi],30h - 10014A79: 46 inc esi - 10014A7A: 83 7D 18 00 cmp dword ptr [ebp+18h],0 - 10014A7E: 6A 65 push 65h - 10014A80: 0F 94 C0 sete al - 10014A83: FE C8 dec al - 10014A85: 24 E0 and al,0E0h - 10014A87: 04 78 add al,78h - 10014A89: 88 06 mov byte ptr [esi],al - 10014A8B: 46 inc esi - 10014A8C: 56 push esi - 10014A8D: E8 DE 5E 00 00 call 1001A970 - 10014A92: 59 pop ecx - 10014A93: 59 pop ecx - 10014A94: 85 C0 test eax,eax - 10014A96: 0F 84 4C 02 00 00 je 10014CE8 - 10014A9C: 83 7D 18 00 cmp dword ptr [ebp+18h],0 - 10014AA0: 0F 94 C1 sete cl - 10014AA3: FE C9 dec cl - 10014AA5: 80 E1 E0 and cl,0E0h - 10014AA8: 80 C1 70 add cl,70h - 10014AAB: 88 08 mov byte ptr [eax],cl - 10014AAD: C6 40 03 00 mov byte ptr [eax+3],0 - 10014AB1: E9 32 02 00 00 jmp 10014CE8 - 10014AB6: 25 00 00 00 80 and eax,80000000h - 10014ABB: 33 C9 xor ecx,ecx - 10014ABD: 0B C8 or ecx,eax - 10014ABF: 74 04 je 10014AC5 - 10014AC1: C6 06 2D mov byte ptr [esi],2Dh - 10014AC4: 46 inc esi - 10014AC5: 8B 5D 18 mov ebx,dword ptr [ebp+18h] - 10014AC8: C6 06 30 mov byte ptr [esi],30h - 10014ACB: 46 inc esi - 10014ACC: 85 DB test ebx,ebx - 10014ACE: 0F 94 C0 sete al - 10014AD1: FE C8 dec al - 10014AD3: 24 E0 and al,0E0h - 10014AD5: 04 78 add al,78h - 10014AD7: 88 06 mov byte ptr [esi],al - 10014AD9: 8B 4F 04 mov ecx,dword ptr [edi+4] - 10014ADC: 46 inc esi - 10014ADD: F7 DB neg ebx - 10014ADF: 1B DB sbb ebx,ebx - 10014AE1: 83 E3 E0 and ebx,0FFFFFFE0h - 10014AE4: 81 E1 00 00 F0 7F and ecx,7FF00000h - 10014AEA: 33 C0 xor eax,eax - 10014AEC: 83 C3 27 add ebx,27h - 10014AEF: 33 D2 xor edx,edx - 10014AF1: 0B C1 or eax,ecx - 10014AF3: 75 21 jne 10014B16 - 10014AF5: C6 06 30 mov byte ptr [esi],30h - 10014AF8: 8B 4F 04 mov ecx,dword ptr [edi+4] - 10014AFB: 8B 07 mov eax,dword ptr [edi] - 10014AFD: 81 E1 FF FF 0F 00 and ecx,0FFFFFh - 10014B03: 46 inc esi - 10014B04: 0B C1 or eax,ecx - 10014B06: 75 05 jne 10014B0D - 10014B08: 89 55 EC mov dword ptr [ebp-14h],edx - 10014B0B: EB 0D jmp 10014B1A - 10014B0D: C7 45 EC FE 03 00 mov dword ptr [ebp-14h],3FEh - 00 - 10014B14: EB 04 jmp 10014B1A - 10014B16: C6 06 31 mov byte ptr [esi],31h - 10014B19: 46 inc esi - 10014B1A: 8B C6 mov eax,esi - 10014B1C: 46 inc esi - 10014B1D: 89 45 0C mov dword ptr [ebp+0Ch],eax - 10014B20: 39 55 14 cmp dword ptr [ebp+14h],edx - 10014B23: 75 04 jne 10014B29 - 10014B25: 88 10 mov byte ptr [eax],dl - 10014B27: EB 0F jmp 10014B38 - 10014B29: 8B 4D DC mov ecx,dword ptr [ebp-24h] - 10014B2C: 8B 89 BC 00 00 00 mov ecx,dword ptr [ecx+000000BCh] - 10014B32: 8B 09 mov ecx,dword ptr [ecx] - 10014B34: 8A 09 mov cl,byte ptr [ecx] - 10014B36: 88 08 mov byte ptr [eax],cl - 10014B38: 8B 4F 04 mov ecx,dword ptr [edi+4] - 10014B3B: 8B 07 mov eax,dword ptr [edi] - 10014B3D: 81 E1 FF FF 0F 00 and ecx,0FFFFFh - 10014B43: 89 4D F8 mov dword ptr [ebp-8],ecx - 10014B46: 77 08 ja 10014B50 - 10014B48: 3B C2 cmp eax,edx - 10014B4A: 0F 86 B5 00 00 00 jbe 10014C05 - 10014B50: 89 55 F4 mov dword ptr [ebp-0Ch],edx - 10014B53: C7 45 F8 00 00 0F mov dword ptr [ebp-8],0F0000h - 00 - 10014B5A: 83 7D 14 00 cmp dword ptr [ebp+14h],0 - 10014B5E: 7E 4D jle 10014BAD - 10014B60: 8B 57 04 mov edx,dword ptr [edi+4] - 10014B63: 23 55 F8 and edx,dword ptr [ebp-8] - 10014B66: 8B 07 mov eax,dword ptr [edi] - 10014B68: 0F BF 4D FC movsx ecx,word ptr [ebp-4] - 10014B6C: 23 45 F4 and eax,dword ptr [ebp-0Ch] - 10014B6F: 81 E2 FF FF 0F 00 and edx,0FFFFFh - 10014B75: E8 A6 63 00 00 call 1001AF20 - 10014B7A: 66 83 C0 30 add ax,30h - 10014B7E: 0F B7 C0 movzx eax,ax - 10014B81: 66 83 F8 39 cmp ax,39h - 10014B85: 76 02 jbe 10014B89 - 10014B87: 03 C3 add eax,ebx - 10014B89: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 10014B8C: 83 6D FC 04 sub dword ptr [ebp-4],4 - 10014B90: 88 06 mov byte ptr [esi],al - 10014B92: 8B 45 F4 mov eax,dword ptr [ebp-0Ch] - 10014B95: 0F AC C8 04 shrd eax,ecx,4 - 10014B99: C1 E9 04 shr ecx,4 - 10014B9C: 46 inc esi - 10014B9D: FF 4D 14 dec dword ptr [ebp+14h] - 10014BA0: 66 83 7D FC 00 cmp word ptr [ebp-4],0 - 10014BA5: 89 45 F4 mov dword ptr [ebp-0Ch],eax - 10014BA8: 89 4D F8 mov dword ptr [ebp-8],ecx - 10014BAB: 7D AD jge 10014B5A - 10014BAD: 66 83 7D FC 00 cmp word ptr [ebp-4],0 - 10014BB2: 7C 51 jl 10014C05 - 10014BB4: 8B 57 04 mov edx,dword ptr [edi+4] - 10014BB7: 23 55 F8 and edx,dword ptr [ebp-8] - 10014BBA: 8B 07 mov eax,dword ptr [edi] - 10014BBC: 0F BF 4D FC movsx ecx,word ptr [ebp-4] - 10014BC0: 23 45 F4 and eax,dword ptr [ebp-0Ch] - 10014BC3: 81 E2 FF FF 0F 00 and edx,0FFFFFh - 10014BC9: E8 52 63 00 00 call 1001AF20 - 10014BCE: 66 83 F8 08 cmp ax,8 - 10014BD2: 76 31 jbe 10014C05 - 10014BD4: 8D 46 FF lea eax,[esi-1] - 10014BD7: 8A 08 mov cl,byte ptr [eax] - 10014BD9: 80 F9 66 cmp cl,66h - 10014BDC: 74 05 je 10014BE3 - 10014BDE: 80 F9 46 cmp cl,46h - 10014BE1: 75 06 jne 10014BE9 - 10014BE3: C6 00 30 mov byte ptr [eax],30h - 10014BE6: 48 dec eax - 10014BE7: EB EE jmp 10014BD7 - 10014BE9: 3B 45 0C cmp eax,dword ptr [ebp+0Ch] - 10014BEC: 74 14 je 10014C02 - 10014BEE: 8A 08 mov cl,byte ptr [eax] - 10014BF0: 80 F9 39 cmp cl,39h - 10014BF3: 75 07 jne 10014BFC - 10014BF5: 80 C3 3A add bl,3Ah - 10014BF8: 88 18 mov byte ptr [eax],bl - 10014BFA: EB 09 jmp 10014C05 - 10014BFC: FE C1 inc cl - 10014BFE: 88 08 mov byte ptr [eax],cl - 10014C00: EB 03 jmp 10014C05 - 10014C02: FE 40 FF inc byte ptr [eax-1] - 10014C05: 83 7D 14 00 cmp dword ptr [ebp+14h],0 - 10014C09: 7E 11 jle 10014C1C - 10014C0B: FF 75 14 push dword ptr [ebp+14h] - 10014C0E: 6A 30 push 30h - 10014C10: 56 push esi - 10014C11: E8 5A 56 FF FF call 1000A270 - 10014C16: 83 C4 0C add esp,0Ch - 10014C19: 03 75 14 add esi,dword ptr [ebp+14h] - 10014C1C: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 10014C1F: 80 38 00 cmp byte ptr [eax],0 - 10014C22: 75 02 jne 10014C26 - 10014C24: 8B F0 mov esi,eax - 10014C26: 83 7D 18 00 cmp dword ptr [ebp+18h],0 - 10014C2A: B1 34 mov cl,34h - 10014C2C: 0F 94 C0 sete al - 10014C2F: FE C8 dec al - 10014C31: 24 E0 and al,0E0h - 10014C33: 04 70 add al,70h - 10014C35: 88 06 mov byte ptr [esi],al - 10014C37: 8B 07 mov eax,dword ptr [edi] - 10014C39: 8B 57 04 mov edx,dword ptr [edi+4] - 10014C3C: 46 inc esi - 10014C3D: E8 DE 62 00 00 call 1001AF20 - 10014C42: 33 DB xor ebx,ebx - 10014C44: 25 FF 07 00 00 and eax,7FFh - 10014C49: 23 D3 and edx,ebx - 10014C4B: 2B 45 EC sub eax,dword ptr [ebp-14h] - 10014C4E: 53 push ebx - 10014C4F: 59 pop ecx - 10014C50: 1B D1 sbb edx,ecx - 10014C52: 78 0C js 10014C60 - 10014C54: 7F 04 jg 10014C5A - 10014C56: 3B C3 cmp eax,ebx - 10014C58: 72 06 jb 10014C60 - 10014C5A: C6 06 2B mov byte ptr [esi],2Bh - 10014C5D: 46 inc esi - 10014C5E: EB 0A jmp 10014C6A - 10014C60: C6 06 2D mov byte ptr [esi],2Dh - 10014C63: 46 inc esi - 10014C64: F7 D8 neg eax - 10014C66: 13 D3 adc edx,ebx - 10014C68: F7 DA neg edx - 10014C6A: 3B D3 cmp edx,ebx - 10014C6C: 8B FE mov edi,esi - 10014C6E: C6 06 30 mov byte ptr [esi],30h - 10014C71: 7C 24 jl 10014C97 - 10014C73: B9 E8 03 00 00 mov ecx,3E8h - 10014C78: 7F 04 jg 10014C7E - 10014C7A: 3B C1 cmp eax,ecx - 10014C7C: 72 19 jb 10014C97 - 10014C7E: 53 push ebx - 10014C7F: 51 push ecx - 10014C80: 52 push edx - 10014C81: 50 push eax - 10014C82: E8 B9 61 00 00 call 1001AE40 - 10014C87: 04 30 add al,30h - 10014C89: 88 06 mov byte ptr [esi],al - 10014C8B: 46 inc esi - 10014C8C: 89 55 F0 mov dword ptr [ebp-10h],edx - 10014C8F: 8B C1 mov eax,ecx - 10014C91: 8B D3 mov edx,ebx - 10014C93: 3B F7 cmp esi,edi - 10014C95: 75 0B jne 10014CA2 - 10014C97: 85 D2 test edx,edx - 10014C99: 7C 1E jl 10014CB9 - 10014C9B: 7F 05 jg 10014CA2 - 10014C9D: 83 F8 64 cmp eax,64h - 10014CA0: 72 17 jb 10014CB9 - 10014CA2: 6A 00 push 0 - 10014CA4: 6A 64 push 64h - 10014CA6: 52 push edx - 10014CA7: 50 push eax - 10014CA8: E8 93 61 00 00 call 1001AE40 - 10014CAD: 04 30 add al,30h - 10014CAF: 88 06 mov byte ptr [esi],al - 10014CB1: 89 55 F0 mov dword ptr [ebp-10h],edx - 10014CB4: 46 inc esi - 10014CB5: 8B C1 mov eax,ecx - 10014CB7: 8B D3 mov edx,ebx - 10014CB9: 3B F7 cmp esi,edi - 10014CBB: 75 0B jne 10014CC8 - 10014CBD: 85 D2 test edx,edx - 10014CBF: 7C 1F jl 10014CE0 - 10014CC1: 7F 05 jg 10014CC8 - 10014CC3: 83 F8 0A cmp eax,0Ah - 10014CC6: 72 18 jb 10014CE0 - 10014CC8: 6A 00 push 0 - 10014CCA: 6A 0A push 0Ah - 10014CCC: 52 push edx - 10014CCD: 50 push eax - 10014CCE: E8 6D 61 00 00 call 1001AE40 - 10014CD3: 04 30 add al,30h - 10014CD5: 88 06 mov byte ptr [esi],al - 10014CD7: 89 55 F0 mov dword ptr [ebp-10h],edx - 10014CDA: 46 inc esi - 10014CDB: 8B C1 mov eax,ecx - 10014CDD: 89 5D F0 mov dword ptr [ebp-10h],ebx - 10014CE0: 04 30 add al,30h - 10014CE2: 88 06 mov byte ptr [esi],al - 10014CE4: C6 46 01 00 mov byte ptr [esi+1],0 - 10014CE8: 80 7D E8 00 cmp byte ptr [ebp-18h],0 - 10014CEC: 74 07 je 10014CF5 - 10014CEE: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 10014CF1: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 10014CF5: 33 C0 xor eax,eax - 10014CF7: 5B pop ebx - 10014CF8: 5F pop edi - 10014CF9: 5E pop esi - 10014CFA: C9 leave - 10014CFB: C3 ret - 10014CFC: 8B FF mov edi,edi - 10014CFE: 55 push ebp - 10014CFF: 8B EC mov ebp,esp - 10014D01: 83 EC 10 sub esp,10h - 10014D04: 53 push ebx - 10014D05: 56 push esi - 10014D06: 57 push edi - 10014D07: FF 75 14 push dword ptr [ebp+14h] - 10014D0A: 8B D8 mov ebx,eax - 10014D0C: 8B 73 04 mov esi,dword ptr [ebx+4] - 10014D0F: 8B F9 mov edi,ecx - 10014D11: 8D 4D F0 lea ecx,[ebp-10h] - 10014D14: 4E dec esi - 10014D15: E8 E2 59 FF FF call 1000A6FC - 10014D1A: 85 FF test edi,edi - 10014D1C: 75 2D jne 10014D4B - 10014D1E: E8 26 A3 FF FF call 1000F049 - 10014D23: 6A 16 push 16h - 10014D25: 5E pop esi - 10014D26: 89 30 mov dword ptr [eax],esi - 10014D28: 33 C0 xor eax,eax - 10014D2A: 50 push eax - 10014D2B: 50 push eax - 10014D2C: 50 push eax - 10014D2D: 50 push eax - 10014D2E: 50 push eax - 10014D2F: E8 AD A2 FF FF call 1000EFE1 - 10014D34: 83 C4 14 add esp,14h - 10014D37: 80 7D FC 00 cmp byte ptr [ebp-4],0 - 10014D3B: 74 07 je 10014D44 - 10014D3D: 8B 45 F8 mov eax,dword ptr [ebp-8] - 10014D40: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 10014D44: 8B C6 mov eax,esi - 10014D46: E9 A3 00 00 00 jmp 10014DEE - 10014D4B: 83 7D 08 00 cmp dword ptr [ebp+8],0 - 10014D4F: 76 CD jbe 10014D1E - 10014D51: 80 7D 10 00 cmp byte ptr [ebp+10h],0 - 10014D55: 74 18 je 10014D6F - 10014D57: 3B 75 0C cmp esi,dword ptr [ebp+0Ch] - 10014D5A: 75 13 jne 10014D6F - 10014D5C: 33 C0 xor eax,eax - 10014D5E: 83 3B 2D cmp dword ptr [ebx],2Dh - 10014D61: 0F 94 C0 sete al - 10014D64: 03 C6 add eax,esi - 10014D66: 03 C7 add eax,edi - 10014D68: C6 00 30 mov byte ptr [eax],30h - 10014D6B: C6 40 01 00 mov byte ptr [eax+1],0 - 10014D6F: 83 3B 2D cmp dword ptr [ebx],2Dh - 10014D72: 8B F7 mov esi,edi - 10014D74: 75 06 jne 10014D7C - 10014D76: C6 07 2D mov byte ptr [edi],2Dh - 10014D79: 8D 77 01 lea esi,[edi+1] - 10014D7C: 8B 43 04 mov eax,dword ptr [ebx+4] - 10014D7F: 33 FF xor edi,edi - 10014D81: 47 inc edi - 10014D82: 85 C0 test eax,eax - 10014D84: 7F 0D jg 10014D93 - 10014D86: 8B C6 mov eax,esi - 10014D88: E8 58 F9 FF FF call 100146E5 - 10014D8D: C6 06 30 mov byte ptr [esi],30h - 10014D90: 46 inc esi - 10014D91: EB 02 jmp 10014D95 - 10014D93: 03 F0 add esi,eax - 10014D95: 83 7D 0C 00 cmp dword ptr [ebp+0Ch],0 - 10014D99: 7E 44 jle 10014DDF - 10014D9B: 8B C6 mov eax,esi - 10014D9D: E8 43 F9 FF FF call 100146E5 - 10014DA2: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 10014DA5: 8B 80 BC 00 00 00 mov eax,dword ptr [eax+000000BCh] - 10014DAB: 8B 00 mov eax,dword ptr [eax] - 10014DAD: 8A 00 mov al,byte ptr [eax] - 10014DAF: 88 06 mov byte ptr [esi],al - 10014DB1: 8B 5B 04 mov ebx,dword ptr [ebx+4] - 10014DB4: 46 inc esi - 10014DB5: 85 DB test ebx,ebx - 10014DB7: 7D 26 jge 10014DDF - 10014DB9: F7 DB neg ebx - 10014DBB: 80 7D 10 00 cmp byte ptr [ebp+10h],0 - 10014DBF: 75 05 jne 10014DC6 - 10014DC1: 39 5D 0C cmp dword ptr [ebp+0Ch],ebx - 10014DC4: 7C 03 jl 10014DC9 - 10014DC6: 89 5D 0C mov dword ptr [ebp+0Ch],ebx - 10014DC9: 8B 7D 0C mov edi,dword ptr [ebp+0Ch] - 10014DCC: 8B C6 mov eax,esi - 10014DCE: E8 12 F9 FF FF call 100146E5 - 10014DD3: 57 push edi - 10014DD4: 6A 30 push 30h - 10014DD6: 56 push esi - 10014DD7: E8 94 54 FF FF call 1000A270 - 10014DDC: 83 C4 0C add esp,0Ch - 10014DDF: 80 7D FC 00 cmp byte ptr [ebp-4],0 - 10014DE3: 74 07 je 10014DEC - 10014DE5: 8B 45 F8 mov eax,dword ptr [ebp-8] - 10014DE8: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 10014DEC: 33 C0 xor eax,eax - 10014DEE: 5F pop edi - 10014DEF: 5E pop esi - 10014DF0: 5B pop ebx - 10014DF1: C9 leave - 10014DF2: C3 ret - 10014DF3: 8B FF mov edi,edi - 10014DF5: 55 push ebp - 10014DF6: 8B EC mov ebp,esp - 10014DF8: 83 EC 2C sub esp,2Ch - 10014DFB: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10014E00: 33 C5 xor eax,ebp - 10014E02: 89 45 FC mov dword ptr [ebp-4],eax - 10014E05: 8B 45 08 mov eax,dword ptr [ebp+8] - 10014E08: 53 push ebx - 10014E09: 56 push esi - 10014E0A: 57 push edi - 10014E0B: 8B 7D 0C mov edi,dword ptr [ebp+0Ch] - 10014E0E: 6A 16 push 16h - 10014E10: 5E pop esi - 10014E11: 56 push esi - 10014E12: 8D 4D E4 lea ecx,[ebp-1Ch] - 10014E15: 51 push ecx - 10014E16: 8D 4D D4 lea ecx,[ebp-2Ch] - 10014E19: 51 push ecx - 10014E1A: FF 70 04 push dword ptr [eax+4] - 10014E1D: FF 30 push dword ptr [eax] - 10014E1F: E8 86 5F 00 00 call 1001ADAA - 10014E24: 33 DB xor ebx,ebx - 10014E26: 83 C4 14 add esp,14h - 10014E29: 3B FB cmp edi,ebx - 10014E2B: 75 18 jne 10014E45 - 10014E2D: E8 17 A2 FF FF call 1000F049 - 10014E32: 53 push ebx - 10014E33: 53 push ebx - 10014E34: 53 push ebx - 10014E35: 53 push ebx - 10014E36: 53 push ebx - 10014E37: 89 30 mov dword ptr [eax],esi - 10014E39: E8 A3 A1 FF FF call 1000EFE1 - 10014E3E: 83 C4 14 add esp,14h - 10014E41: 8B C6 mov eax,esi - 10014E43: EB 5A jmp 10014E9F - 10014E45: 8B 45 10 mov eax,dword ptr [ebp+10h] - 10014E48: 3B C3 cmp eax,ebx - 10014E4A: 76 E1 jbe 10014E2D - 10014E4C: 83 F8 FF cmp eax,0FFFFFFFFh - 10014E4F: 75 04 jne 10014E55 - 10014E51: 0B C0 or eax,eax - 10014E53: EB 0B jmp 10014E60 - 10014E55: 33 C9 xor ecx,ecx - 10014E57: 83 7D D4 2D cmp dword ptr [ebp-2Ch],2Dh - 10014E5B: 0F 94 C1 sete cl - 10014E5E: 2B C1 sub eax,ecx - 10014E60: 8B 75 14 mov esi,dword ptr [ebp+14h] - 10014E63: 8D 4D D4 lea ecx,[ebp-2Ch] - 10014E66: 51 push ecx - 10014E67: 8B 4D D8 mov ecx,dword ptr [ebp-28h] - 10014E6A: 03 CE add ecx,esi - 10014E6C: 51 push ecx - 10014E6D: 50 push eax - 10014E6E: 33 C0 xor eax,eax - 10014E70: 83 7D D4 2D cmp dword ptr [ebp-2Ch],2Dh - 10014E74: 0F 94 C0 sete al - 10014E77: 03 C7 add eax,edi - 10014E79: 50 push eax - 10014E7A: E8 AF 5D 00 00 call 1001AC2E - 10014E7F: 83 C4 10 add esp,10h - 10014E82: 3B C3 cmp eax,ebx - 10014E84: 74 04 je 10014E8A - 10014E86: 88 1F mov byte ptr [edi],bl - 10014E88: EB 15 jmp 10014E9F - 10014E8A: FF 75 18 push dword ptr [ebp+18h] - 10014E8D: 8D 45 D4 lea eax,[ebp-2Ch] - 10014E90: 53 push ebx - 10014E91: 56 push esi - 10014E92: FF 75 10 push dword ptr [ebp+10h] - 10014E95: 8B CF mov ecx,edi - 10014E97: E8 60 FE FF FF call 10014CFC - 10014E9C: 83 C4 10 add esp,10h - 10014E9F: 8B 4D FC mov ecx,dword ptr [ebp-4] - 10014EA2: 5F pop edi - 10014EA3: 5E pop esi - 10014EA4: 33 CD xor ecx,ebp - 10014EA6: 5B pop ebx - 10014EA7: E8 EF 51 FF FF call 1000A09B - 10014EAC: C9 leave - 10014EAD: C3 ret - 10014EAE: 8B FF mov edi,edi - 10014EB0: 55 push ebp - 10014EB1: 8B EC mov ebp,esp - 10014EB3: 83 EC 30 sub esp,30h - 10014EB6: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10014EBB: 33 C5 xor eax,ebp - 10014EBD: 89 45 FC mov dword ptr [ebp-4],eax - 10014EC0: 8B 45 08 mov eax,dword ptr [ebp+8] - 10014EC3: 53 push ebx - 10014EC4: 56 push esi - 10014EC5: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 10014EC8: 57 push edi - 10014EC9: 6A 16 push 16h - 10014ECB: 5F pop edi - 10014ECC: 57 push edi - 10014ECD: 8D 4D E4 lea ecx,[ebp-1Ch] - 10014ED0: 51 push ecx - 10014ED1: 8D 4D D0 lea ecx,[ebp-30h] - 10014ED4: 51 push ecx - 10014ED5: FF 70 04 push dword ptr [eax+4] - 10014ED8: FF 30 push dword ptr [eax] - 10014EDA: E8 CB 5E 00 00 call 1001ADAA - 10014EDF: 33 DB xor ebx,ebx - 10014EE1: 83 C4 14 add esp,14h - 10014EE4: 3B F3 cmp esi,ebx - 10014EE6: 75 1B jne 10014F03 - 10014EE8: E8 5C A1 FF FF call 1000F049 - 10014EED: 53 push ebx - 10014EEE: 53 push ebx - 10014EEF: 53 push ebx - 10014EF0: 53 push ebx - 10014EF1: 53 push ebx - 10014EF2: 89 38 mov dword ptr [eax],edi - 10014EF4: E8 E8 A0 FF FF call 1000EFE1 - 10014EF9: 83 C4 14 add esp,14h - 10014EFC: 8B C7 mov eax,edi - 10014EFE: E9 96 00 00 00 jmp 10014F99 - 10014F03: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 10014F06: 3B CB cmp ecx,ebx - 10014F08: 76 DE jbe 10014EE8 - 10014F0A: 8B 45 D4 mov eax,dword ptr [ebp-2Ch] - 10014F0D: 48 dec eax - 10014F0E: 89 45 E0 mov dword ptr [ebp-20h],eax - 10014F11: 33 C0 xor eax,eax - 10014F13: 83 7D D0 2D cmp dword ptr [ebp-30h],2Dh - 10014F17: 0F 94 C0 sete al - 10014F1A: 8D 3C 30 lea edi,[eax+esi] - 10014F1D: 83 F9 FF cmp ecx,0FFFFFFFFh - 10014F20: 75 04 jne 10014F26 - 10014F22: 0B C9 or ecx,ecx - 10014F24: EB 02 jmp 10014F28 - 10014F26: 2B C8 sub ecx,eax - 10014F28: 8D 45 D0 lea eax,[ebp-30h] - 10014F2B: 50 push eax - 10014F2C: FF 75 14 push dword ptr [ebp+14h] - 10014F2F: 51 push ecx - 10014F30: 57 push edi - 10014F31: E8 F8 5C 00 00 call 1001AC2E - 10014F36: 83 C4 10 add esp,10h - 10014F39: 3B C3 cmp eax,ebx - 10014F3B: 74 04 je 10014F41 - 10014F3D: 88 1E mov byte ptr [esi],bl - 10014F3F: EB 58 jmp 10014F99 - 10014F41: 8B 45 D4 mov eax,dword ptr [ebp-2Ch] - 10014F44: 48 dec eax - 10014F45: 39 45 E0 cmp dword ptr [ebp-20h],eax - 10014F48: 0F 9C C1 setl cl - 10014F4B: 83 F8 FC cmp eax,0FFFFFFFCh - 10014F4E: 7C 2D jl 10014F7D - 10014F50: 3B 45 14 cmp eax,dword ptr [ebp+14h] - 10014F53: 7D 28 jge 10014F7D - 10014F55: 3A CB cmp cl,bl - 10014F57: 74 0A je 10014F63 - 10014F59: 8A 07 mov al,byte ptr [edi] - 10014F5B: 47 inc edi - 10014F5C: 84 C0 test al,al - 10014F5E: 75 F9 jne 10014F59 - 10014F60: 88 5F FE mov byte ptr [edi-2],bl - 10014F63: FF 75 1C push dword ptr [ebp+1Ch] - 10014F66: 8D 45 D0 lea eax,[ebp-30h] - 10014F69: 6A 01 push 1 - 10014F6B: FF 75 14 push dword ptr [ebp+14h] - 10014F6E: 8B CE mov ecx,esi - 10014F70: FF 75 10 push dword ptr [ebp+10h] - 10014F73: E8 84 FD FF FF call 10014CFC - 10014F78: 83 C4 10 add esp,10h - 10014F7B: EB 1C jmp 10014F99 - 10014F7D: FF 75 1C push dword ptr [ebp+1Ch] - 10014F80: 8D 45 D0 lea eax,[ebp-30h] - 10014F83: 6A 01 push 1 - 10014F85: 50 push eax - 10014F86: FF 75 18 push dword ptr [ebp+18h] - 10014F89: 8B C6 mov eax,esi - 10014F8B: FF 75 14 push dword ptr [ebp+14h] - 10014F8E: FF 75 10 push dword ptr [ebp+10h] - 10014F91: E8 94 F7 FF FF call 1001472A - 10014F96: 83 C4 18 add esp,18h - 10014F99: 8B 4D FC mov ecx,dword ptr [ebp-4] - 10014F9C: 5F pop edi - 10014F9D: 5E pop esi - 10014F9E: 33 CD xor ecx,ebp - 10014FA0: 5B pop ebx - 10014FA1: E8 F5 50 FF FF call 1000A09B - 10014FA6: C9 leave - 10014FA7: C3 ret - 10014FA8: 8B FF mov edi,edi - 10014FAA: 55 push ebp - 10014FAB: 8B EC mov ebp,esp - 10014FAD: 8B 45 14 mov eax,dword ptr [ebp+14h] - 10014FB0: 83 F8 65 cmp eax,65h - 10014FB3: 74 5F je 10015014 - 10014FB5: 83 F8 45 cmp eax,45h - 10014FB8: 74 5A je 10015014 - 10014FBA: 83 F8 66 cmp eax,66h - 10014FBD: 75 19 jne 10014FD8 - 10014FBF: FF 75 20 push dword ptr [ebp+20h] - 10014FC2: FF 75 18 push dword ptr [ebp+18h] - 10014FC5: FF 75 10 push dword ptr [ebp+10h] - 10014FC8: FF 75 0C push dword ptr [ebp+0Ch] - 10014FCB: FF 75 08 push dword ptr [ebp+8] - 10014FCE: E8 20 FE FF FF call 10014DF3 - 10014FD3: 83 C4 14 add esp,14h - 10014FD6: 5D pop ebp - 10014FD7: C3 ret - 10014FD8: 83 F8 61 cmp eax,61h - 10014FDB: 74 1E je 10014FFB - 10014FDD: 83 F8 41 cmp eax,41h - 10014FE0: 74 19 je 10014FFB - 10014FE2: FF 75 20 push dword ptr [ebp+20h] - 10014FE5: FF 75 1C push dword ptr [ebp+1Ch] - 10014FE8: FF 75 18 push dword ptr [ebp+18h] - 10014FEB: FF 75 10 push dword ptr [ebp+10h] - 10014FEE: FF 75 0C push dword ptr [ebp+0Ch] - 10014FF1: FF 75 08 push dword ptr [ebp+8] - 10014FF4: E8 B5 FE FF FF call 10014EAE - 10014FF9: EB 30 jmp 1001502B - 10014FFB: FF 75 20 push dword ptr [ebp+20h] - 10014FFE: FF 75 1C push dword ptr [ebp+1Ch] - 10015001: FF 75 18 push dword ptr [ebp+18h] - 10015004: FF 75 10 push dword ptr [ebp+10h] - 10015007: FF 75 0C push dword ptr [ebp+0Ch] - 1001500A: FF 75 08 push dword ptr [ebp+8] - 1001500D: E8 77 F9 FF FF call 10014989 - 10015012: EB 17 jmp 1001502B - 10015014: FF 75 20 push dword ptr [ebp+20h] - 10015017: FF 75 1C push dword ptr [ebp+1Ch] - 1001501A: FF 75 18 push dword ptr [ebp+18h] - 1001501D: FF 75 10 push dword ptr [ebp+10h] - 10015020: FF 75 0C push dword ptr [ebp+0Ch] - 10015023: FF 75 08 push dword ptr [ebp+8] - 10015026: E8 6E F8 FF FF call 10014899 - 1001502B: 83 C4 18 add esp,18h - 1001502E: 5D pop ebp - 1001502F: C3 ret - 10015030: 8B FF mov edi,edi - 10015032: 55 push ebp - 10015033: 8B EC mov ebp,esp - 10015035: 6A 00 push 0 - 10015037: FF 75 1C push dword ptr [ebp+1Ch] - 1001503A: FF 75 18 push dword ptr [ebp+18h] - 1001503D: FF 75 14 push dword ptr [ebp+14h] - 10015040: FF 75 10 push dword ptr [ebp+10h] - 10015043: FF 75 0C push dword ptr [ebp+0Ch] - 10015046: FF 75 08 push dword ptr [ebp+8] - 10015049: E8 5A FF FF FF call 10014FA8 - 1001504E: 83 C4 1C add esp,1Ch - 10015051: 5D pop ebp - 10015052: C3 ret - 10015053: 8B FF mov edi,edi - 10015055: 56 push esi - 10015056: 57 push edi - 10015057: 33 FF xor edi,edi - 10015059: 8D B7 20 57 02 10 lea esi,[edi+10025720h] - 1001505F: FF 36 push dword ptr [esi] - 10015061: E8 35 81 FF FF call 1000D19B - 10015066: 83 C7 04 add edi,4 - 10015069: 59 pop ecx - 1001506A: 89 06 mov dword ptr [esi],eax - 1001506C: 83 FF 28 cmp edi,28h - 1001506F: 72 E8 jb 10015059 - 10015071: 5F pop edi - 10015072: 5E pop esi - 10015073: C3 ret - 10015074: 8B FF mov edi,edi - 10015076: 56 push esi - 10015077: 68 00 00 03 00 push 30000h - 1001507C: 68 00 00 01 00 push 10000h - 10015081: 33 F6 xor esi,esi - 10015083: 56 push esi - 10015084: E8 BF 5E 00 00 call 1001AF48 - 10015089: 83 C4 0C add esp,0Ch - 1001508C: 85 C0 test eax,eax - 1001508E: 74 0D je 1001509D - 10015090: 56 push esi - 10015091: 56 push esi - 10015092: 56 push esi - 10015093: 56 push esi - 10015094: 56 push esi - 10015095: E8 1F 9E FF FF call 1000EEB9 - 1001509A: 83 C4 14 add esp,14h - 1001509D: 5E pop esi - 1001509E: C3 ret - 1001509F: 8B FF mov edi,edi - 100150A1: 55 push ebp - 100150A2: 8B EC mov ebp,esp - 100150A4: 83 EC 18 sub esp,18h - 100150A7: DD 05 90 00 02 10 fld qword ptr ds:[10020090h] - 100150AD: DD 5D F0 fstp qword ptr [ebp-10h] - 100150B0: DD 05 88 00 02 10 fld qword ptr ds:[10020088h] - 100150B6: DD 5D E8 fstp qword ptr [ebp-18h] - 100150B9: DD 45 E8 fld qword ptr [ebp-18h] - 100150BC: DC 75 F0 fdiv qword ptr [ebp-10h] - 100150BF: DC 4D F0 fmul qword ptr [ebp-10h] - 100150C2: DC 6D E8 fsubr qword ptr [ebp-18h] - 100150C5: DD 5D F8 fstp qword ptr [ebp-8] - 100150C8: D9 E8 fld1 - 100150CA: DC 5D F8 fcomp qword ptr [ebp-8] - 100150CD: DF E0 fnstsw ax - 100150CF: F6 C4 05 test ah,5 - 100150D2: 7A 05 jp 100150D9 - 100150D4: 33 C0 xor eax,eax - 100150D6: 40 inc eax - 100150D7: C9 leave - 100150D8: C3 ret - 100150D9: 33 C0 xor eax,eax - 100150DB: C9 leave - 100150DC: C3 ret - 100150DD: 68 B4 00 02 10 push 100200B4h - 100150E2: FF 15 00 F1 01 10 call dword ptr ds:[1001F100h] - 100150E8: 85 C0 test eax,eax - 100150EA: 74 15 je 10015101 - 100150EC: 68 98 00 02 10 push 10020098h - 100150F1: 50 push eax - 100150F2: FF 15 80 F0 01 10 call dword ptr ds:[1001F080h] - 100150F8: 85 C0 test eax,eax - 100150FA: 74 05 je 10015101 - 100150FC: 6A 00 push 0 - 100150FE: FF D0 call eax - 10015100: C3 ret - 10015101: E9 99 FF FF FF jmp 1001509F - 10015106: F6 41 0C 40 test byte ptr [ecx+0Ch],40h - 1001510A: 74 06 je 10015112 - 1001510C: 83 79 08 00 cmp dword ptr [ecx+8],0 - 10015110: 74 24 je 10015136 - 10015112: FF 49 04 dec dword ptr [ecx+4] - 10015115: 78 0B js 10015122 - 10015117: 8B 11 mov edx,dword ptr [ecx] - 10015119: 88 02 mov byte ptr [edx],al - 1001511B: FF 01 inc dword ptr [ecx] - 1001511D: 0F B6 C0 movzx eax,al - 10015120: EB 0C jmp 1001512E - 10015122: 0F BE C0 movsx eax,al - 10015125: 51 push ecx - 10015126: 50 push eax - 10015127: E8 82 90 FF FF call 1000E1AE - 1001512C: 59 pop ecx - 1001512D: 59 pop ecx - 1001512E: 83 F8 FF cmp eax,0FFFFFFFFh - 10015131: 75 03 jne 10015136 - 10015133: 09 06 or dword ptr [esi],eax - 10015135: C3 ret - 10015136: FF 06 inc dword ptr [esi] - 10015138: C3 ret - 10015139: 8B FF mov edi,edi - 1001513B: 55 push ebp - 1001513C: 8B EC mov ebp,esp - 1001513E: 56 push esi - 1001513F: 8B F0 mov esi,eax - 10015141: EB 13 jmp 10015156 - 10015143: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 10015146: 8A 45 08 mov al,byte ptr [ebp+8] - 10015149: FF 4D 0C dec dword ptr [ebp+0Ch] - 1001514C: E8 B5 FF FF FF call 10015106 - 10015151: 83 3E FF cmp dword ptr [esi],0FFFFFFFFh - 10015154: 74 06 je 1001515C - 10015156: 83 7D 0C 00 cmp dword ptr [ebp+0Ch],0 - 1001515A: 7F E7 jg 10015143 - 1001515C: 5E pop esi - 1001515D: 5D pop ebp - 1001515E: C3 ret - 1001515F: 8B FF mov edi,edi - 10015161: 55 push ebp - 10015162: 8B EC mov ebp,esp - 10015164: F6 47 0C 40 test byte ptr [edi+0Ch],40h - 10015168: 53 push ebx - 10015169: 56 push esi - 1001516A: 8B F0 mov esi,eax - 1001516C: 8B D9 mov ebx,ecx - 1001516E: 74 32 je 100151A2 - 10015170: 83 7F 08 00 cmp dword ptr [edi+8],0 - 10015174: 75 2C jne 100151A2 - 10015176: 8B 45 08 mov eax,dword ptr [ebp+8] - 10015179: 01 06 add dword ptr [esi],eax - 1001517B: EB 2B jmp 100151A8 - 1001517D: 8A 03 mov al,byte ptr [ebx] - 1001517F: FF 4D 08 dec dword ptr [ebp+8] - 10015182: 8B CF mov ecx,edi - 10015184: E8 7D FF FF FF call 10015106 - 10015189: 43 inc ebx - 1001518A: 83 3E FF cmp dword ptr [esi],0FFFFFFFFh - 1001518D: 75 13 jne 100151A2 - 1001518F: E8 B5 9E FF FF call 1000F049 - 10015194: 83 38 2A cmp dword ptr [eax],2Ah - 10015197: 75 0F jne 100151A8 - 10015199: 8B CF mov ecx,edi - 1001519B: B0 3F mov al,3Fh - 1001519D: E8 64 FF FF FF call 10015106 - 100151A2: 83 7D 08 00 cmp dword ptr [ebp+8],0 - 100151A6: 7F D5 jg 1001517D - 100151A8: 5E pop esi - 100151A9: 5B pop ebx - 100151AA: 5D pop ebp - 100151AB: C3 ret - 100151AC: 8B FF mov edi,edi - 100151AE: 55 push ebp - 100151AF: 8B EC mov ebp,esp - 100151B1: 81 EC 78 02 00 00 sub esp,278h - 100151B7: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 100151BC: 33 C5 xor eax,ebp - 100151BE: 89 45 FC mov dword ptr [ebp-4],eax - 100151C1: 53 push ebx - 100151C2: 8B 5D 0C mov ebx,dword ptr [ebp+0Ch] - 100151C5: 56 push esi - 100151C6: 8B 75 08 mov esi,dword ptr [ebp+8] - 100151C9: 33 C0 xor eax,eax - 100151CB: 57 push edi - 100151CC: 8B 7D 14 mov edi,dword ptr [ebp+14h] - 100151CF: FF 75 10 push dword ptr [ebp+10h] - 100151D2: 8D 8D A4 FD FF FF lea ecx,[ebp+FFFFFDA4h] - 100151D8: 89 B5 B4 FD FF FF mov dword ptr [ebp+FFFFFDB4h],esi - 100151DE: 89 BD DC FD FF FF mov dword ptr [ebp+FFFFFDDCh],edi - 100151E4: 89 85 B8 FD FF FF mov dword ptr [ebp+FFFFFDB8h],eax - 100151EA: 89 85 F0 FD FF FF mov dword ptr [ebp+FFFFFDF0h],eax - 100151F0: 89 85 CC FD FF FF mov dword ptr [ebp+FFFFFDCCh],eax - 100151F6: 89 85 E8 FD FF FF mov dword ptr [ebp+FFFFFDE8h],eax - 100151FC: 89 85 D0 FD FF FF mov dword ptr [ebp+FFFFFDD0h],eax - 10015202: 89 85 C0 FD FF FF mov dword ptr [ebp+FFFFFDC0h],eax - 10015208: 89 85 C8 FD FF FF mov dword ptr [ebp+FFFFFDC8h],eax - 1001520E: E8 E9 54 FF FF call 1000A6FC - 10015213: 85 F6 test esi,esi - 10015215: 75 35 jne 1001524C - 10015217: E8 2D 9E FF FF call 1000F049 - 1001521C: C7 00 16 00 00 00 mov dword ptr [eax],16h - 10015222: 33 C0 xor eax,eax - 10015224: 50 push eax - 10015225: 50 push eax - 10015226: 50 push eax - 10015227: 50 push eax - 10015228: 50 push eax - 10015229: E8 B3 9D FF FF call 1000EFE1 - 1001522E: 83 C4 14 add esp,14h - 10015231: 80 BD B0 FD FF FF cmp byte ptr [ebp+FFFFFDB0h],0 - 00 - 10015238: 74 0A je 10015244 - 1001523A: 8B 85 AC FD FF FF mov eax,dword ptr [ebp+FFFFFDACh] - 10015240: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 10015244: 83 C8 FF or eax,0FFFFFFFFh - 10015247: E9 C8 0A 00 00 jmp 10015D14 - 1001524C: F6 46 0C 40 test byte ptr [esi+0Ch],40h - 10015250: 75 5E jne 100152B0 - 10015252: 56 push esi - 10015253: E8 8F B2 FF FF call 100104E7 - 10015258: 59 pop ecx - 10015259: BA 70 56 02 10 mov edx,10025670h - 1001525E: 83 F8 FF cmp eax,0FFFFFFFFh - 10015261: 74 1B je 1001527E - 10015263: 83 F8 FE cmp eax,0FFFFFFFEh - 10015266: 74 16 je 1001527E - 10015268: 8B C8 mov ecx,eax - 1001526A: 83 E1 1F and ecx,1Fh - 1001526D: 8B F0 mov esi,eax - 1001526F: C1 FE 05 sar esi,5 - 10015272: C1 E1 06 shl ecx,6 - 10015275: 03 0C B5 00 6C 02 add ecx,dword ptr [esi*4+10026C00h] - 10 - 1001527C: EB 02 jmp 10015280 - 1001527E: 8B CA mov ecx,edx - 10015280: F6 41 24 7F test byte ptr [ecx+24h],7Fh - 10015284: 75 91 jne 10015217 - 10015286: 83 F8 FF cmp eax,0FFFFFFFFh - 10015289: 74 19 je 100152A4 - 1001528B: 83 F8 FE cmp eax,0FFFFFFFEh - 1001528E: 74 14 je 100152A4 - 10015290: 8B C8 mov ecx,eax - 10015292: 83 E0 1F and eax,1Fh - 10015295: C1 F9 05 sar ecx,5 - 10015298: C1 E0 06 shl eax,6 - 1001529B: 03 04 8D 00 6C 02 add eax,dword ptr [ecx*4+10026C00h] - 10 - 100152A2: EB 02 jmp 100152A6 - 100152A4: 8B C2 mov eax,edx - 100152A6: F6 40 24 80 test byte ptr [eax+24h],80h - 100152AA: 0F 85 67 FF FF FF jne 10015217 - 100152B0: 33 C9 xor ecx,ecx - 100152B2: 3B D9 cmp ebx,ecx - 100152B4: 0F 84 5D FF FF FF je 10015217 - 100152BA: 8A 13 mov dl,byte ptr [ebx] - 100152BC: 89 8D D8 FD FF FF mov dword ptr [ebp+FFFFFDD8h],ecx - 100152C2: 89 8D E0 FD FF FF mov dword ptr [ebp+FFFFFDE0h],ecx - 100152C8: 89 8D BC FD FF FF mov dword ptr [ebp+FFFFFDBCh],ecx - 100152CE: 88 95 EF FD FF FF mov byte ptr [ebp+FFFFFDEFh],dl - 100152D4: 84 D2 test dl,dl - 100152D6: 0F 84 1F 0A 00 00 je 10015CFB - 100152DC: 43 inc ebx - 100152DD: 83 BD D8 FD FF FF cmp dword ptr [ebp+FFFFFDD8h],0 - 00 - 100152E4: 89 9D C4 FD FF FF mov dword ptr [ebp+FFFFFDC4h],ebx - 100152EA: 0F 8C 0B 0A 00 00 jl 10015CFB - 100152F0: 8A C2 mov al,dl - 100152F2: 2C 20 sub al,20h - 100152F4: 3C 58 cmp al,58h - 100152F6: 77 11 ja 10015309 - 100152F8: 0F BE C2 movsx eax,dl - 100152FB: 0F BE 80 B8 00 02 movsx eax,byte ptr [eax+100200B8h] - 10 - 10015302: 83 E0 0F and eax,0Fh - 10015305: 33 F6 xor esi,esi - 10015307: EB 04 jmp 1001530D - 10015309: 33 F6 xor esi,esi - 1001530B: 33 C0 xor eax,eax - 1001530D: 0F BE 84 C1 D8 00 movsx eax,byte ptr [ecx+eax*8+100200D8h] - 02 10 - 10015315: 6A 07 push 7 - 10015317: C1 F8 04 sar eax,4 - 1001531A: 59 pop ecx - 1001531B: 89 85 94 FD FF FF mov dword ptr [ebp+FFFFFD94h],eax - 10015321: 3B C1 cmp eax,ecx - 10015323: 0F 87 AD 09 00 00 ja 10015CD6 - 10015329: FF 24 85 24 5D 01 jmp dword ptr [eax*4+10015D24h] - 10 - 10015330: 83 8D E8 FD FF FF or dword ptr [ebp+FFFFFDE8h],0FFFFFFFFh - FF - 10015337: 89 B5 90 FD FF FF mov dword ptr [ebp+FFFFFD90h],esi - 1001533D: 89 B5 C0 FD FF FF mov dword ptr [ebp+FFFFFDC0h],esi - 10015343: 89 B5 CC FD FF FF mov dword ptr [ebp+FFFFFDCCh],esi - 10015349: 89 B5 D0 FD FF FF mov dword ptr [ebp+FFFFFDD0h],esi - 1001534F: 89 B5 F0 FD FF FF mov dword ptr [ebp+FFFFFDF0h],esi - 10015355: 89 B5 C8 FD FF FF mov dword ptr [ebp+FFFFFDC8h],esi - 1001535B: E9 76 09 00 00 jmp 10015CD6 - 10015360: 0F BE C2 movsx eax,dl - 10015363: 83 E8 20 sub eax,20h - 10015366: 74 4A je 100153B2 - 10015368: 83 E8 03 sub eax,3 - 1001536B: 74 36 je 100153A3 - 1001536D: 83 E8 08 sub eax,8 - 10015370: 74 25 je 10015397 - 10015372: 48 dec eax - 10015373: 48 dec eax - 10015374: 74 15 je 1001538B - 10015376: 83 E8 03 sub eax,3 - 10015379: 0F 85 57 09 00 00 jne 10015CD6 - 1001537F: 83 8D F0 FD FF FF or dword ptr [ebp+FFFFFDF0h],8 - 08 - 10015386: E9 4B 09 00 00 jmp 10015CD6 - 1001538B: 83 8D F0 FD FF FF or dword ptr [ebp+FFFFFDF0h],4 - 04 - 10015392: E9 3F 09 00 00 jmp 10015CD6 - 10015397: 83 8D F0 FD FF FF or dword ptr [ebp+FFFFFDF0h],1 - 01 - 1001539E: E9 33 09 00 00 jmp 10015CD6 - 100153A3: 81 8D F0 FD FF FF or dword ptr [ebp+FFFFFDF0h],80h - 80 00 00 00 - 100153AD: E9 24 09 00 00 jmp 10015CD6 - 100153B2: 83 8D F0 FD FF FF or dword ptr [ebp+FFFFFDF0h],2 - 02 - 100153B9: E9 18 09 00 00 jmp 10015CD6 - 100153BE: 80 FA 2A cmp dl,2Ah - 100153C1: 75 2C jne 100153EF - 100153C3: 83 C7 04 add edi,4 - 100153C6: 89 BD DC FD FF FF mov dword ptr [ebp+FFFFFDDCh],edi - 100153CC: 8B 7F FC mov edi,dword ptr [edi-4] - 100153CF: 3B FE cmp edi,esi - 100153D1: 89 BD CC FD FF FF mov dword ptr [ebp+FFFFFDCCh],edi - 100153D7: 0F 8D F9 08 00 00 jge 10015CD6 - 100153DD: 83 8D F0 FD FF FF or dword ptr [ebp+FFFFFDF0h],4 - 04 - 100153E4: F7 9D CC FD FF FF neg dword ptr [ebp+FFFFFDCCh] - 100153EA: E9 E7 08 00 00 jmp 10015CD6 - 100153EF: 8B 85 CC FD FF FF mov eax,dword ptr [ebp+FFFFFDCCh] - 100153F5: 6B C0 0A imul eax,eax,0Ah - 100153F8: 0F BE CA movsx ecx,dl - 100153FB: 8D 44 08 D0 lea eax,[eax+ecx-30h] - 100153FF: 89 85 CC FD FF FF mov dword ptr [ebp+FFFFFDCCh],eax - 10015405: E9 CC 08 00 00 jmp 10015CD6 - 1001540A: 89 B5 E8 FD FF FF mov dword ptr [ebp+FFFFFDE8h],esi - 10015410: E9 C1 08 00 00 jmp 10015CD6 - 10015415: 80 FA 2A cmp dl,2Ah - 10015418: 75 26 jne 10015440 - 1001541A: 83 C7 04 add edi,4 - 1001541D: 89 BD DC FD FF FF mov dword ptr [ebp+FFFFFDDCh],edi - 10015423: 8B 7F FC mov edi,dword ptr [edi-4] - 10015426: 3B FE cmp edi,esi - 10015428: 89 BD E8 FD FF FF mov dword ptr [ebp+FFFFFDE8h],edi - 1001542E: 0F 8D A2 08 00 00 jge 10015CD6 - 10015434: 83 8D E8 FD FF FF or dword ptr [ebp+FFFFFDE8h],0FFFFFFFFh - FF - 1001543B: E9 96 08 00 00 jmp 10015CD6 - 10015440: 8B 85 E8 FD FF FF mov eax,dword ptr [ebp+FFFFFDE8h] - 10015446: 6B C0 0A imul eax,eax,0Ah - 10015449: 0F BE CA movsx ecx,dl - 1001544C: 8D 44 08 D0 lea eax,[eax+ecx-30h] - 10015450: 89 85 E8 FD FF FF mov dword ptr [ebp+FFFFFDE8h],eax - 10015456: E9 7B 08 00 00 jmp 10015CD6 - 1001545B: 80 FA 49 cmp dl,49h - 1001545E: 74 55 je 100154B5 - 10015460: 80 FA 68 cmp dl,68h - 10015463: 74 44 je 100154A9 - 10015465: 80 FA 6C cmp dl,6Ch - 10015468: 74 18 je 10015482 - 1001546A: 80 FA 77 cmp dl,77h - 1001546D: 0F 85 63 08 00 00 jne 10015CD6 - 10015473: 81 8D F0 FD FF FF or dword ptr [ebp+FFFFFDF0h],800h - 00 08 00 00 - 1001547D: E9 54 08 00 00 jmp 10015CD6 - 10015482: 80 3B 6C cmp byte ptr [ebx],6Ch - 10015485: 75 16 jne 1001549D - 10015487: 43 inc ebx - 10015488: 81 8D F0 FD FF FF or dword ptr [ebp+FFFFFDF0h],1000h - 00 10 00 00 - 10015492: 89 9D C4 FD FF FF mov dword ptr [ebp+FFFFFDC4h],ebx - 10015498: E9 39 08 00 00 jmp 10015CD6 - 1001549D: 83 8D F0 FD FF FF or dword ptr [ebp+FFFFFDF0h],10h - 10 - 100154A4: E9 2D 08 00 00 jmp 10015CD6 - 100154A9: 83 8D F0 FD FF FF or dword ptr [ebp+FFFFFDF0h],20h - 20 - 100154B0: E9 21 08 00 00 jmp 10015CD6 - 100154B5: 8A 03 mov al,byte ptr [ebx] - 100154B7: 3C 36 cmp al,36h - 100154B9: 75 1D jne 100154D8 - 100154BB: 80 7B 01 34 cmp byte ptr [ebx+1],34h - 100154BF: 75 17 jne 100154D8 - 100154C1: 43 inc ebx - 100154C2: 43 inc ebx - 100154C3: 81 8D F0 FD FF FF or dword ptr [ebp+FFFFFDF0h],8000h - 00 80 00 00 - 100154CD: 89 9D C4 FD FF FF mov dword ptr [ebp+FFFFFDC4h],ebx - 100154D3: E9 FE 07 00 00 jmp 10015CD6 - 100154D8: 3C 33 cmp al,33h - 100154DA: 75 1D jne 100154F9 - 100154DC: 80 7B 01 32 cmp byte ptr [ebx+1],32h - 100154E0: 75 17 jne 100154F9 - 100154E2: 43 inc ebx - 100154E3: 43 inc ebx - 100154E4: 81 A5 F0 FD FF FF and dword ptr [ebp+FFFFFDF0h],0FFFF7FFFh - FF 7F FF FF - 100154EE: 89 9D C4 FD FF FF mov dword ptr [ebp+FFFFFDC4h],ebx - 100154F4: E9 DD 07 00 00 jmp 10015CD6 - 100154F9: 3C 64 cmp al,64h - 100154FB: 0F 84 D5 07 00 00 je 10015CD6 - 10015501: 3C 69 cmp al,69h - 10015503: 0F 84 CD 07 00 00 je 10015CD6 - 10015509: 3C 6F cmp al,6Fh - 1001550B: 0F 84 C5 07 00 00 je 10015CD6 - 10015511: 3C 75 cmp al,75h - 10015513: 0F 84 BD 07 00 00 je 10015CD6 - 10015519: 3C 78 cmp al,78h - 1001551B: 0F 84 B5 07 00 00 je 10015CD6 - 10015521: 3C 58 cmp al,58h - 10015523: 0F 84 AD 07 00 00 je 10015CD6 - 10015529: 89 B5 94 FD FF FF mov dword ptr [ebp+FFFFFD94h],esi - 1001552F: 8D 85 A4 FD FF FF lea eax,[ebp+FFFFFDA4h] - 10015535: 50 push eax - 10015536: 0F B6 C2 movzx eax,dl - 10015539: 50 push eax - 1001553A: 89 B5 C8 FD FF FF mov dword ptr [ebp+FFFFFDC8h],esi - 10015540: E8 CC 26 00 00 call 10017C11 - 10015545: 59 pop ecx - 10015546: 85 C0 test eax,eax - 10015548: 8A 85 EF FD FF FF mov al,byte ptr [ebp+FFFFFDEFh] - 1001554E: 59 pop ecx - 1001554F: 74 22 je 10015573 - 10015551: 8B 8D B4 FD FF FF mov ecx,dword ptr [ebp+FFFFFDB4h] - 10015557: 8D B5 D8 FD FF FF lea esi,[ebp+FFFFFDD8h] - 1001555D: E8 A4 FB FF FF call 10015106 - 10015562: 8A 03 mov al,byte ptr [ebx] - 10015564: 43 inc ebx - 10015565: 89 9D C4 FD FF FF mov dword ptr [ebp+FFFFFDC4h],ebx - 1001556B: 84 C0 test al,al - 1001556D: 0F 84 A4 FC FF FF je 10015217 - 10015573: 8B 8D B4 FD FF FF mov ecx,dword ptr [ebp+FFFFFDB4h] - 10015579: 8D B5 D8 FD FF FF lea esi,[ebp+FFFFFDD8h] - 1001557F: E8 82 FB FF FF call 10015106 - 10015584: E9 4D 07 00 00 jmp 10015CD6 - 10015589: 0F BE C2 movsx eax,dl - 1001558C: 83 F8 64 cmp eax,64h - 1001558F: 0F 8F E8 01 00 00 jg 1001577D - 10015595: 0F 84 79 02 00 00 je 10015814 - 1001559B: 83 F8 53 cmp eax,53h - 1001559E: 0F 8F F2 00 00 00 jg 10015696 - 100155A4: 0F 84 80 00 00 00 je 1001562A - 100155AA: 83 E8 41 sub eax,41h - 100155AD: 74 10 je 100155BF - 100155AF: 48 dec eax - 100155B0: 48 dec eax - 100155B1: 74 58 je 1001560B - 100155B3: 48 dec eax - 100155B4: 48 dec eax - 100155B5: 74 08 je 100155BF - 100155B7: 48 dec eax - 100155B8: 48 dec eax - 100155B9: 0F 85 92 05 00 00 jne 10015B51 - 100155BF: 80 C2 20 add dl,20h - 100155C2: C7 85 90 FD FF FF mov dword ptr [ebp+FFFFFD90h],1 - 01 00 00 00 - 100155CC: 88 95 EF FD FF FF mov byte ptr [ebp+FFFFFDEFh],dl - 100155D2: 83 8D F0 FD FF FF or dword ptr [ebp+FFFFFDF0h],40h - 40 - 100155D9: 39 B5 E8 FD FF FF cmp dword ptr [ebp+FFFFFDE8h],esi - 100155DF: 8D 9D F4 FD FF FF lea ebx,[ebp+FFFFFDF4h] - 100155E5: B8 00 02 00 00 mov eax,200h - 100155EA: 89 9D E4 FD FF FF mov dword ptr [ebp+FFFFFDE4h],ebx - 100155F0: 89 85 A0 FD FF FF mov dword ptr [ebp+FFFFFDA0h],eax - 100155F6: 0F 8D 48 02 00 00 jge 10015844 - 100155FC: C7 85 E8 FD FF FF mov dword ptr [ebp+FFFFFDE8h],6 - 06 00 00 00 - 10015606: E9 A5 02 00 00 jmp 100158B0 - 1001560B: F7 85 F0 FD FF FF test dword ptr [ebp+FFFFFDF0h],830h - 30 08 00 00 - 10015615: 0F 85 98 00 00 00 jne 100156B3 - 1001561B: 81 8D F0 FD FF FF or dword ptr [ebp+FFFFFDF0h],800h - 00 08 00 00 - 10015625: E9 89 00 00 00 jmp 100156B3 - 1001562A: F7 85 F0 FD FF FF test dword ptr [ebp+FFFFFDF0h],830h - 30 08 00 00 - 10015634: 75 0A jne 10015640 - 10015636: 81 8D F0 FD FF FF or dword ptr [ebp+FFFFFDF0h],800h - 00 08 00 00 - 10015640: 8B 8D E8 FD FF FF mov ecx,dword ptr [ebp+FFFFFDE8h] - 10015646: 83 F9 FF cmp ecx,0FFFFFFFFh - 10015649: 75 05 jne 10015650 - 1001564B: B9 FF FF FF 7F mov ecx,7FFFFFFFh - 10015650: 83 C7 04 add edi,4 - 10015653: F7 85 F0 FD FF FF test dword ptr [ebp+FFFFFDF0h],810h - 10 08 00 00 - 1001565D: 89 BD DC FD FF FF mov dword ptr [ebp+FFFFFDDCh],edi - 10015663: 8B 7F FC mov edi,dword ptr [edi-4] - 10015666: 89 BD E4 FD FF FF mov dword ptr [ebp+FFFFFDE4h],edi - 1001566C: 0F 84 B1 04 00 00 je 10015B23 - 10015672: 3B FE cmp edi,esi - 10015674: 75 0B jne 10015681 - 10015676: A1 4C 57 02 10 mov eax,dword ptr ds:[1002574Ch] - 1001567B: 89 85 E4 FD FF FF mov dword ptr [ebp+FFFFFDE4h],eax - 10015681: 8B 85 E4 FD FF FF mov eax,dword ptr [ebp+FFFFFDE4h] - 10015687: C7 85 C8 FD FF FF mov dword ptr [ebp+FFFFFDC8h],1 - 01 00 00 00 - 10015691: E9 7F 04 00 00 jmp 10015B15 - 10015696: 83 E8 58 sub eax,58h - 10015699: 0F 84 DA 02 00 00 je 10015979 - 1001569F: 48 dec eax - 100156A0: 48 dec eax - 100156A1: 74 79 je 1001571C - 100156A3: 2B C1 sub eax,ecx - 100156A5: 0F 84 27 FF FF FF je 100155D2 - 100156AB: 48 dec eax - 100156AC: 48 dec eax - 100156AD: 0F 85 9E 04 00 00 jne 10015B51 - 100156B3: 83 C7 04 add edi,4 - 100156B6: F7 85 F0 FD FF FF test dword ptr [ebp+FFFFFDF0h],810h - 10 08 00 00 - 100156C0: 89 BD DC FD FF FF mov dword ptr [ebp+FFFFFDDCh],edi - 100156C6: 74 30 je 100156F8 - 100156C8: 0F B7 47 FC movzx eax,word ptr [edi-4] - 100156CC: 50 push eax - 100156CD: 68 00 02 00 00 push 200h - 100156D2: 8D 85 F4 FD FF FF lea eax,[ebp+FFFFFDF4h] - 100156D8: 50 push eax - 100156D9: 8D 85 E0 FD FF FF lea eax,[ebp+FFFFFDE0h] - 100156DF: 50 push eax - 100156E0: E8 00 32 00 00 call 100188E5 - 100156E5: 83 C4 10 add esp,10h - 100156E8: 85 C0 test eax,eax - 100156EA: 74 1F je 1001570B - 100156EC: C7 85 C0 FD FF FF mov dword ptr [ebp+FFFFFDC0h],1 - 01 00 00 00 - 100156F6: EB 13 jmp 1001570B - 100156F8: 8A 47 FC mov al,byte ptr [edi-4] - 100156FB: 88 85 F4 FD FF FF mov byte ptr [ebp+FFFFFDF4h],al - 10015701: C7 85 E0 FD FF FF mov dword ptr [ebp+FFFFFDE0h],1 - 01 00 00 00 - 1001570B: 8D 85 F4 FD FF FF lea eax,[ebp+FFFFFDF4h] - 10015711: 89 85 E4 FD FF FF mov dword ptr [ebp+FFFFFDE4h],eax - 10015717: E9 35 04 00 00 jmp 10015B51 - 1001571C: 8B 07 mov eax,dword ptr [edi] - 1001571E: 83 C7 04 add edi,4 - 10015721: 89 BD DC FD FF FF mov dword ptr [ebp+FFFFFDDCh],edi - 10015727: 3B C6 cmp eax,esi - 10015729: 74 3B je 10015766 - 1001572B: 8B 48 04 mov ecx,dword ptr [eax+4] - 1001572E: 3B CE cmp ecx,esi - 10015730: 74 34 je 10015766 - 10015732: F7 85 F0 FD FF FF test dword ptr [ebp+FFFFFDF0h],800h - 00 08 00 00 - 1001573C: 0F BF 00 movsx eax,word ptr [eax] - 1001573F: 89 8D E4 FD FF FF mov dword ptr [ebp+FFFFFDE4h],ecx - 10015745: 74 14 je 1001575B - 10015747: 99 cdq - 10015748: 2B C2 sub eax,edx - 1001574A: D1 F8 sar eax,1 - 1001574C: C7 85 C8 FD FF FF mov dword ptr [ebp+FFFFFDC8h],1 - 01 00 00 00 - 10015756: E9 F0 03 00 00 jmp 10015B4B - 1001575B: 89 B5 C8 FD FF FF mov dword ptr [ebp+FFFFFDC8h],esi - 10015761: E9 E5 03 00 00 jmp 10015B4B - 10015766: A1 48 57 02 10 mov eax,dword ptr ds:[10025748h] - 1001576B: 89 85 E4 FD FF FF mov dword ptr [ebp+FFFFFDE4h],eax - 10015771: 50 push eax - 10015772: E8 C9 EC FF FF call 10014440 - 10015777: 59 pop ecx - 10015778: E9 CE 03 00 00 jmp 10015B4B - 1001577D: 83 F8 70 cmp eax,70h - 10015780: 0F 8F FB 01 00 00 jg 10015981 - 10015786: 0F 84 E3 01 00 00 je 1001596F - 1001578C: 83 F8 65 cmp eax,65h - 1001578F: 0F 8C BC 03 00 00 jl 10015B51 - 10015795: 83 F8 67 cmp eax,67h - 10015798: 0F 8E 34 FE FF FF jle 100155D2 - 1001579E: 83 F8 69 cmp eax,69h - 100157A1: 74 71 je 10015814 - 100157A3: 83 F8 6E cmp eax,6Eh - 100157A6: 74 28 je 100157D0 - 100157A8: 83 F8 6F cmp eax,6Fh - 100157AB: 0F 85 A0 03 00 00 jne 10015B51 - 100157B1: F6 85 F0 FD FF FF test byte ptr [ebp+FFFFFDF0h],80h - 80 - 100157B8: C7 85 E0 FD FF FF mov dword ptr [ebp+FFFFFDE0h],8 - 08 00 00 00 - 100157C2: 74 61 je 10015825 - 100157C4: 81 8D F0 FD FF FF or dword ptr [ebp+FFFFFDF0h],200h - 00 02 00 00 - 100157CE: EB 55 jmp 10015825 - 100157D0: 8B 37 mov esi,dword ptr [edi] - 100157D2: 83 C7 04 add edi,4 - 100157D5: 89 BD DC FD FF FF mov dword ptr [ebp+FFFFFDDCh],edi - 100157DB: E8 EA 22 00 00 call 10017ACA - 100157E0: 85 C0 test eax,eax - 100157E2: 0F 84 2F FA FF FF je 10015217 - 100157E8: F6 85 F0 FD FF FF test byte ptr [ebp+FFFFFDF0h],20h - 20 - 100157EF: 74 0C je 100157FD - 100157F1: 66 8B 85 D8 FD FF mov ax,word ptr [ebp+FFFFFDD8h] - FF - 100157F8: 66 89 06 mov word ptr [esi],ax - 100157FB: EB 08 jmp 10015805 - 100157FD: 8B 85 D8 FD FF FF mov eax,dword ptr [ebp+FFFFFDD8h] - 10015803: 89 06 mov dword ptr [esi],eax - 10015805: C7 85 C0 FD FF FF mov dword ptr [ebp+FFFFFDC0h],1 - 01 00 00 00 - 1001580F: E9 A6 04 00 00 jmp 10015CBA - 10015814: 83 8D F0 FD FF FF or dword ptr [ebp+FFFFFDF0h],40h - 40 - 1001581B: C7 85 E0 FD FF FF mov dword ptr [ebp+FFFFFDE0h],0Ah - 0A 00 00 00 - 10015825: 8B 8D F0 FD FF FF mov ecx,dword ptr [ebp+FFFFFDF0h] - 1001582B: F7 C1 00 80 00 00 test ecx,8000h - 10015831: 0F 84 A9 01 00 00 je 100159E0 - 10015837: 8B 07 mov eax,dword ptr [edi] - 10015839: 8B 57 04 mov edx,dword ptr [edi+4] - 1001583C: 83 C7 08 add edi,8 - 1001583F: E9 D5 01 00 00 jmp 10015A19 - 10015844: 75 11 jne 10015857 - 10015846: 80 FA 67 cmp dl,67h - 10015849: 75 65 jne 100158B0 - 1001584B: C7 85 E8 FD FF FF mov dword ptr [ebp+FFFFFDE8h],1 - 01 00 00 00 - 10015855: EB 59 jmp 100158B0 - 10015857: 39 85 E8 FD FF FF cmp dword ptr [ebp+FFFFFDE8h],eax - 1001585D: 7E 06 jle 10015865 - 1001585F: 89 85 E8 FD FF FF mov dword ptr [ebp+FFFFFDE8h],eax - 10015865: 81 BD E8 FD FF FF cmp dword ptr [ebp+FFFFFDE8h],0A3h - A3 00 00 00 - 1001586F: 7E 3F jle 100158B0 - 10015871: 8B B5 E8 FD FF FF mov esi,dword ptr [ebp+FFFFFDE8h] - 10015877: 81 C6 5D 01 00 00 add esi,15Dh - 1001587D: 56 push esi - 1001587E: E8 86 D0 FF FF call 10012909 - 10015883: 8A 95 EF FD FF FF mov dl,byte ptr [ebp+FFFFFDEFh] - 10015889: 59 pop ecx - 1001588A: 89 85 BC FD FF FF mov dword ptr [ebp+FFFFFDBCh],eax - 10015890: 85 C0 test eax,eax - 10015892: 74 10 je 100158A4 - 10015894: 89 85 E4 FD FF FF mov dword ptr [ebp+FFFFFDE4h],eax - 1001589A: 89 B5 A0 FD FF FF mov dword ptr [ebp+FFFFFDA0h],esi - 100158A0: 8B D8 mov ebx,eax - 100158A2: EB 0A jmp 100158AE - 100158A4: C7 85 E8 FD FF FF mov dword ptr [ebp+FFFFFDE8h],0A3h - A3 00 00 00 - 100158AE: 33 F6 xor esi,esi - 100158B0: 8B 07 mov eax,dword ptr [edi] - 100158B2: 83 C7 08 add edi,8 - 100158B5: 89 85 88 FD FF FF mov dword ptr [ebp+FFFFFD88h],eax - 100158BB: 8B 47 FC mov eax,dword ptr [edi-4] - 100158BE: 89 85 8C FD FF FF mov dword ptr [ebp+FFFFFD8Ch],eax - 100158C4: 8D 85 A4 FD FF FF lea eax,[ebp+FFFFFDA4h] - 100158CA: 50 push eax - 100158CB: FF B5 90 FD FF FF push dword ptr [ebp+FFFFFD90h] - 100158D1: 0F BE C2 movsx eax,dl - 100158D4: FF B5 E8 FD FF FF push dword ptr [ebp+FFFFFDE8h] - 100158DA: 89 BD DC FD FF FF mov dword ptr [ebp+FFFFFDDCh],edi - 100158E0: 50 push eax - 100158E1: FF B5 A0 FD FF FF push dword ptr [ebp+FFFFFDA0h] - 100158E7: 8D 85 88 FD FF FF lea eax,[ebp+FFFFFD88h] - 100158ED: 53 push ebx - 100158EE: 50 push eax - 100158EF: FF 35 38 57 02 10 push dword ptr ds:[10025738h] - 100158F5: E8 1C 79 FF FF call 1000D216 - 100158FA: 59 pop ecx - 100158FB: FF D0 call eax - 100158FD: 8B BD F0 FD FF FF mov edi,dword ptr [ebp+FFFFFDF0h] - 10015903: 83 C4 1C add esp,1Ch - 10015906: 81 E7 80 00 00 00 and edi,80h - 1001590C: 74 20 je 1001592E - 1001590E: 39 B5 E8 FD FF FF cmp dword ptr [ebp+FFFFFDE8h],esi - 10015914: 75 18 jne 1001592E - 10015916: 8D 85 A4 FD FF FF lea eax,[ebp+FFFFFDA4h] - 1001591C: 50 push eax - 1001591D: 53 push ebx - 1001591E: FF 35 44 57 02 10 push dword ptr ds:[10025744h] - 10015924: E8 ED 78 FF FF call 1000D216 - 10015929: 59 pop ecx - 1001592A: FF D0 call eax - 1001592C: 59 pop ecx - 1001592D: 59 pop ecx - 1001592E: 80 BD EF FD FF FF cmp byte ptr [ebp+FFFFFDEFh],67h - 67 - 10015935: 75 1C jne 10015953 - 10015937: 3B FE cmp edi,esi - 10015939: 75 18 jne 10015953 - 1001593B: 8D 85 A4 FD FF FF lea eax,[ebp+FFFFFDA4h] - 10015941: 50 push eax - 10015942: 53 push ebx - 10015943: FF 35 40 57 02 10 push dword ptr ds:[10025740h] - 10015949: E8 C8 78 FF FF call 1000D216 - 1001594E: 59 pop ecx - 1001594F: FF D0 call eax - 10015951: 59 pop ecx - 10015952: 59 pop ecx - 10015953: 80 3B 2D cmp byte ptr [ebx],2Dh - 10015956: 75 11 jne 10015969 - 10015958: 81 8D F0 FD FF FF or dword ptr [ebp+FFFFFDF0h],100h - 00 01 00 00 - 10015962: 43 inc ebx - 10015963: 89 9D E4 FD FF FF mov dword ptr [ebp+FFFFFDE4h],ebx - 10015969: 53 push ebx - 1001596A: E9 03 FE FF FF jmp 10015772 - 1001596F: C7 85 E8 FD FF FF mov dword ptr [ebp+FFFFFDE8h],8 - 08 00 00 00 - 10015979: 89 8D B8 FD FF FF mov dword ptr [ebp+FFFFFDB8h],ecx - 1001597F: EB 24 jmp 100159A5 - 10015981: 83 E8 73 sub eax,73h - 10015984: 0F 84 B6 FC FF FF je 10015640 - 1001598A: 48 dec eax - 1001598B: 48 dec eax - 1001598C: 0F 84 89 FE FF FF je 1001581B - 10015992: 83 E8 03 sub eax,3 - 10015995: 0F 85 B6 01 00 00 jne 10015B51 - 1001599B: C7 85 B8 FD FF FF mov dword ptr [ebp+FFFFFDB8h],27h - 27 00 00 00 - 100159A5: F6 85 F0 FD FF FF test byte ptr [ebp+FFFFFDF0h],80h - 80 - 100159AC: C7 85 E0 FD FF FF mov dword ptr [ebp+FFFFFDE0h],10h - 10 00 00 00 - 100159B6: 0F 84 69 FE FF FF je 10015825 - 100159BC: 8A 85 B8 FD FF FF mov al,byte ptr [ebp+FFFFFDB8h] - 100159C2: 04 51 add al,51h - 100159C4: C6 85 D4 FD FF FF mov byte ptr [ebp+FFFFFDD4h],30h - 30 - 100159CB: 88 85 D5 FD FF FF mov byte ptr [ebp+FFFFFDD5h],al - 100159D1: C7 85 D0 FD FF FF mov dword ptr [ebp+FFFFFDD0h],2 - 02 00 00 00 - 100159DB: E9 45 FE FF FF jmp 10015825 - 100159E0: F7 C1 00 10 00 00 test ecx,1000h - 100159E6: 0F 85 4B FE FF FF jne 10015837 - 100159EC: 83 C7 04 add edi,4 - 100159EF: F6 C1 20 test cl,20h - 100159F2: 74 18 je 10015A0C - 100159F4: 89 BD DC FD FF FF mov dword ptr [ebp+FFFFFDDCh],edi - 100159FA: F6 C1 40 test cl,40h - 100159FD: 74 06 je 10015A05 - 100159FF: 0F BF 47 FC movsx eax,word ptr [edi-4] - 10015A03: EB 04 jmp 10015A09 - 10015A05: 0F B7 47 FC movzx eax,word ptr [edi-4] - 10015A09: 99 cdq - 10015A0A: EB 13 jmp 10015A1F - 10015A0C: 8B 47 FC mov eax,dword ptr [edi-4] - 10015A0F: F6 C1 40 test cl,40h - 10015A12: 74 03 je 10015A17 - 10015A14: 99 cdq - 10015A15: EB 02 jmp 10015A19 - 10015A17: 33 D2 xor edx,edx - 10015A19: 89 BD DC FD FF FF mov dword ptr [ebp+FFFFFDDCh],edi - 10015A1F: F6 C1 40 test cl,40h - 10015A22: 74 1B je 10015A3F - 10015A24: 3B D6 cmp edx,esi - 10015A26: 7F 17 jg 10015A3F - 10015A28: 7C 04 jl 10015A2E - 10015A2A: 3B C6 cmp eax,esi - 10015A2C: 73 11 jae 10015A3F - 10015A2E: F7 D8 neg eax - 10015A30: 83 D2 00 adc edx,0 - 10015A33: F7 DA neg edx - 10015A35: 81 8D F0 FD FF FF or dword ptr [ebp+FFFFFDF0h],100h - 00 01 00 00 - 10015A3F: F7 85 F0 FD FF FF test dword ptr [ebp+FFFFFDF0h],9000h - 00 90 00 00 - 10015A49: 8B DA mov ebx,edx - 10015A4B: 8B F8 mov edi,eax - 10015A4D: 75 02 jne 10015A51 - 10015A4F: 33 DB xor ebx,ebx - 10015A51: 83 BD E8 FD FF FF cmp dword ptr [ebp+FFFFFDE8h],0 - 00 - 10015A58: 7D 0C jge 10015A66 - 10015A5A: C7 85 E8 FD FF FF mov dword ptr [ebp+FFFFFDE8h],1 - 01 00 00 00 - 10015A64: EB 1A jmp 10015A80 - 10015A66: 83 A5 F0 FD FF FF and dword ptr [ebp+FFFFFDF0h],0FFFFFFF7h - F7 - 10015A6D: B8 00 02 00 00 mov eax,200h - 10015A72: 39 85 E8 FD FF FF cmp dword ptr [ebp+FFFFFDE8h],eax - 10015A78: 7E 06 jle 10015A80 - 10015A7A: 89 85 E8 FD FF FF mov dword ptr [ebp+FFFFFDE8h],eax - 10015A80: 8B C7 mov eax,edi - 10015A82: 0B C3 or eax,ebx - 10015A84: 75 06 jne 10015A8C - 10015A86: 21 85 D0 FD FF FF and dword ptr [ebp+FFFFFDD0h],eax - 10015A8C: 8D 75 F3 lea esi,[ebp-0Dh] - 10015A8F: 8B 85 E8 FD FF FF mov eax,dword ptr [ebp+FFFFFDE8h] - 10015A95: FF 8D E8 FD FF FF dec dword ptr [ebp+FFFFFDE8h] - 10015A9B: 85 C0 test eax,eax - 10015A9D: 7F 06 jg 10015AA5 - 10015A9F: 8B C7 mov eax,edi - 10015AA1: 0B C3 or eax,ebx - 10015AA3: 74 2D je 10015AD2 - 10015AA5: 8B 85 E0 FD FF FF mov eax,dword ptr [ebp+FFFFFDE0h] - 10015AAB: 99 cdq - 10015AAC: 52 push edx - 10015AAD: 50 push eax - 10015AAE: 53 push ebx - 10015AAF: 57 push edi - 10015AB0: E8 AB 21 00 00 call 10017C60 - 10015AB5: 83 C1 30 add ecx,30h - 10015AB8: 83 F9 39 cmp ecx,39h - 10015ABB: 89 9D A0 FD FF FF mov dword ptr [ebp+FFFFFDA0h],ebx - 10015AC1: 8B F8 mov edi,eax - 10015AC3: 8B DA mov ebx,edx - 10015AC5: 7E 06 jle 10015ACD - 10015AC7: 03 8D B8 FD FF FF add ecx,dword ptr [ebp+FFFFFDB8h] - 10015ACD: 88 0E mov byte ptr [esi],cl - 10015ACF: 4E dec esi - 10015AD0: EB BD jmp 10015A8F - 10015AD2: 8D 45 F3 lea eax,[ebp-0Dh] - 10015AD5: 2B C6 sub eax,esi - 10015AD7: 46 inc esi - 10015AD8: F7 85 F0 FD FF FF test dword ptr [ebp+FFFFFDF0h],200h - 00 02 00 00 - 10015AE2: 89 85 E0 FD FF FF mov dword ptr [ebp+FFFFFDE0h],eax - 10015AE8: 89 B5 E4 FD FF FF mov dword ptr [ebp+FFFFFDE4h],esi - 10015AEE: 74 61 je 10015B51 - 10015AF0: 85 C0 test eax,eax - 10015AF2: 74 07 je 10015AFB - 10015AF4: 8B CE mov ecx,esi - 10015AF6: 80 39 30 cmp byte ptr [ecx],30h - 10015AF9: 74 56 je 10015B51 - 10015AFB: FF 8D E4 FD FF FF dec dword ptr [ebp+FFFFFDE4h] - 10015B01: 8B 8D E4 FD FF FF mov ecx,dword ptr [ebp+FFFFFDE4h] - 10015B07: C6 01 30 mov byte ptr [ecx],30h - 10015B0A: 40 inc eax - 10015B0B: EB 3E jmp 10015B4B - 10015B0D: 49 dec ecx - 10015B0E: 66 39 30 cmp word ptr [eax],si - 10015B11: 74 06 je 10015B19 - 10015B13: 40 inc eax - 10015B14: 40 inc eax - 10015B15: 3B CE cmp ecx,esi - 10015B17: 75 F4 jne 10015B0D - 10015B19: 2B 85 E4 FD FF FF sub eax,dword ptr [ebp+FFFFFDE4h] - 10015B1F: D1 F8 sar eax,1 - 10015B21: EB 28 jmp 10015B4B - 10015B23: 3B FE cmp edi,esi - 10015B25: 75 0B jne 10015B32 - 10015B27: A1 48 57 02 10 mov eax,dword ptr ds:[10025748h] - 10015B2C: 89 85 E4 FD FF FF mov dword ptr [ebp+FFFFFDE4h],eax - 10015B32: 8B 85 E4 FD FF FF mov eax,dword ptr [ebp+FFFFFDE4h] - 10015B38: EB 07 jmp 10015B41 - 10015B3A: 49 dec ecx - 10015B3B: 80 38 00 cmp byte ptr [eax],0 - 10015B3E: 74 05 je 10015B45 - 10015B40: 40 inc eax - 10015B41: 3B CE cmp ecx,esi - 10015B43: 75 F5 jne 10015B3A - 10015B45: 2B 85 E4 FD FF FF sub eax,dword ptr [ebp+FFFFFDE4h] - 10015B4B: 89 85 E0 FD FF FF mov dword ptr [ebp+FFFFFDE0h],eax - 10015B51: 83 BD C0 FD FF FF cmp dword ptr [ebp+FFFFFDC0h],0 - 00 - 10015B58: 0F 85 5C 01 00 00 jne 10015CBA - 10015B5E: 8B 85 F0 FD FF FF mov eax,dword ptr [ebp+FFFFFDF0h] - 10015B64: A8 40 test al,40h - 10015B66: 74 32 je 10015B9A - 10015B68: A9 00 01 00 00 test eax,100h - 10015B6D: 74 09 je 10015B78 - 10015B6F: C6 85 D4 FD FF FF mov byte ptr [ebp+FFFFFDD4h],2Dh - 2D - 10015B76: EB 18 jmp 10015B90 - 10015B78: A8 01 test al,1 - 10015B7A: 74 09 je 10015B85 - 10015B7C: C6 85 D4 FD FF FF mov byte ptr [ebp+FFFFFDD4h],2Bh - 2B - 10015B83: EB 0B jmp 10015B90 - 10015B85: A8 02 test al,2 - 10015B87: 74 11 je 10015B9A - 10015B89: C6 85 D4 FD FF FF mov byte ptr [ebp+FFFFFDD4h],20h - 20 - 10015B90: C7 85 D0 FD FF FF mov dword ptr [ebp+FFFFFDD0h],1 - 01 00 00 00 - 10015B9A: 8B 9D CC FD FF FF mov ebx,dword ptr [ebp+FFFFFDCCh] - 10015BA0: 2B 9D E0 FD FF FF sub ebx,dword ptr [ebp+FFFFFDE0h] - 10015BA6: 2B 9D D0 FD FF FF sub ebx,dword ptr [ebp+FFFFFDD0h] - 10015BAC: F6 85 F0 FD FF FF test byte ptr [ebp+FFFFFDF0h],0Ch - 0C - 10015BB3: 75 17 jne 10015BCC - 10015BB5: FF B5 B4 FD FF FF push dword ptr [ebp+FFFFFDB4h] - 10015BBB: 8D 85 D8 FD FF FF lea eax,[ebp+FFFFFDD8h] - 10015BC1: 53 push ebx - 10015BC2: 6A 20 push 20h - 10015BC4: E8 70 F5 FF FF call 10015139 - 10015BC9: 83 C4 0C add esp,0Ch - 10015BCC: FF B5 D0 FD FF FF push dword ptr [ebp+FFFFFDD0h] - 10015BD2: 8B BD B4 FD FF FF mov edi,dword ptr [ebp+FFFFFDB4h] - 10015BD8: 8D 85 D8 FD FF FF lea eax,[ebp+FFFFFDD8h] - 10015BDE: 8D 8D D4 FD FF FF lea ecx,[ebp+FFFFFDD4h] - 10015BE4: E8 76 F5 FF FF call 1001515F - 10015BE9: F6 85 F0 FD FF FF test byte ptr [ebp+FFFFFDF0h],8 - 08 - 10015BF0: 59 pop ecx - 10015BF1: 74 1B je 10015C0E - 10015BF3: F6 85 F0 FD FF FF test byte ptr [ebp+FFFFFDF0h],4 - 04 - 10015BFA: 75 12 jne 10015C0E - 10015BFC: 57 push edi - 10015BFD: 53 push ebx - 10015BFE: 6A 30 push 30h - 10015C00: 8D 85 D8 FD FF FF lea eax,[ebp+FFFFFDD8h] - 10015C06: E8 2E F5 FF FF call 10015139 - 10015C0B: 83 C4 0C add esp,0Ch - 10015C0E: 83 BD C8 FD FF FF cmp dword ptr [ebp+FFFFFDC8h],0 - 00 - 10015C15: 8B 85 E0 FD FF FF mov eax,dword ptr [ebp+FFFFFDE0h] - 10015C1B: 74 66 je 10015C83 - 10015C1D: 85 C0 test eax,eax - 10015C1F: 7E 62 jle 10015C83 - 10015C21: 8B B5 E4 FD FF FF mov esi,dword ptr [ebp+FFFFFDE4h] - 10015C27: 89 85 A0 FD FF FF mov dword ptr [ebp+FFFFFDA0h],eax - 10015C2D: 0F B7 06 movzx eax,word ptr [esi] - 10015C30: FF 8D A0 FD FF FF dec dword ptr [ebp+FFFFFDA0h] - 10015C36: 50 push eax - 10015C37: 6A 06 push 6 - 10015C39: 8D 45 F4 lea eax,[ebp-0Ch] - 10015C3C: 50 push eax - 10015C3D: 8D 85 98 FD FF FF lea eax,[ebp+FFFFFD98h] - 10015C43: 46 inc esi - 10015C44: 50 push eax - 10015C45: 46 inc esi - 10015C46: E8 9A 2C 00 00 call 100188E5 - 10015C4B: 83 C4 10 add esp,10h - 10015C4E: 85 C0 test eax,eax - 10015C50: 75 28 jne 10015C7A - 10015C52: 39 85 98 FD FF FF cmp dword ptr [ebp+FFFFFD98h],eax - 10015C58: 74 20 je 10015C7A - 10015C5A: FF B5 98 FD FF FF push dword ptr [ebp+FFFFFD98h] - 10015C60: 8D 85 D8 FD FF FF lea eax,[ebp+FFFFFDD8h] - 10015C66: 8D 4D F4 lea ecx,[ebp-0Ch] - 10015C69: E8 F1 F4 FF FF call 1001515F - 10015C6E: 83 BD A0 FD FF FF cmp dword ptr [ebp+FFFFFDA0h],0 - 00 - 10015C75: 59 pop ecx - 10015C76: 75 B5 jne 10015C2D - 10015C78: EB 1C jmp 10015C96 - 10015C7A: 83 8D D8 FD FF FF or dword ptr [ebp+FFFFFDD8h],0FFFFFFFFh - FF - 10015C81: EB 13 jmp 10015C96 - 10015C83: 8B 8D E4 FD FF FF mov ecx,dword ptr [ebp+FFFFFDE4h] - 10015C89: 50 push eax - 10015C8A: 8D 85 D8 FD FF FF lea eax,[ebp+FFFFFDD8h] - 10015C90: E8 CA F4 FF FF call 1001515F - 10015C95: 59 pop ecx - 10015C96: 83 BD D8 FD FF FF cmp dword ptr [ebp+FFFFFDD8h],0 - 00 - 10015C9D: 7C 1B jl 10015CBA - 10015C9F: F6 85 F0 FD FF FF test byte ptr [ebp+FFFFFDF0h],4 - 04 - 10015CA6: 74 12 je 10015CBA - 10015CA8: 57 push edi - 10015CA9: 53 push ebx - 10015CAA: 6A 20 push 20h - 10015CAC: 8D 85 D8 FD FF FF lea eax,[ebp+FFFFFDD8h] - 10015CB2: E8 82 F4 FF FF call 10015139 - 10015CB7: 83 C4 0C add esp,0Ch - 10015CBA: 83 BD BC FD FF FF cmp dword ptr [ebp+FFFFFDBCh],0 - 00 - 10015CC1: 74 13 je 10015CD6 - 10015CC3: FF B5 BC FD FF FF push dword ptr [ebp+FFFFFDBCh] - 10015CC9: E8 66 46 FF FF call 1000A334 - 10015CCE: 83 A5 BC FD FF FF and dword ptr [ebp+FFFFFDBCh],0 - 00 - 10015CD5: 59 pop ecx - 10015CD6: 8B 9D C4 FD FF FF mov ebx,dword ptr [ebp+FFFFFDC4h] - 10015CDC: 8A 03 mov al,byte ptr [ebx] - 10015CDE: 88 85 EF FD FF FF mov byte ptr [ebp+FFFFFDEFh],al - 10015CE4: 84 C0 test al,al - 10015CE6: 74 13 je 10015CFB - 10015CE8: 8B 8D 94 FD FF FF mov ecx,dword ptr [ebp+FFFFFD94h] - 10015CEE: 8B BD DC FD FF FF mov edi,dword ptr [ebp+FFFFFDDCh] - 10015CF4: 8A D0 mov dl,al - 10015CF6: E9 E1 F5 FF FF jmp 100152DC - 10015CFB: 80 BD B0 FD FF FF cmp byte ptr [ebp+FFFFFDB0h],0 - 00 - 10015D02: 74 0A je 10015D0E - 10015D04: 8B 85 AC FD FF FF mov eax,dword ptr [ebp+FFFFFDACh] - 10015D0A: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 10015D0E: 8B 85 D8 FD FF FF mov eax,dword ptr [ebp+FFFFFDD8h] - 10015D14: 8B 4D FC mov ecx,dword ptr [ebp-4] - 10015D17: 5F pop edi - 10015D18: 5E pop esi - 10015D19: 33 CD xor ecx,ebp - 10015D1B: 5B pop ebx - 10015D1C: E8 7A 43 FF FF call 1000A09B - 10015D21: C9 leave - 10015D22: C3 ret - 10015D23: 90 nop - 10015D24: 2F das - 10015D25: 55 push ebp - 10015D26: 01 10 add dword ptr [eax],edx - 10015D28: 30 53 01 xor byte ptr [ebx+1],dl - 10015D2B: 10 60 53 adc byte ptr [eax+53h],ah - 10015D2E: 01 10 add dword ptr [eax],edx - 10015D30: BE 53 01 10 0A mov esi,0A100153h - 10015D35: 54 push esp - 10015D36: 01 10 add dword ptr [eax],edx - 10015D38: 15 54 01 10 5B adc eax,5B100154h - 10015D3D: 54 push esp - 10015D3E: 01 10 add dword ptr [eax],edx - 10015D40: 89 55 01 mov dword ptr [ebp+1],edx - 10015D43: 10 83 3D EC 6B 02 adc byte ptr [ebx+026BEC3Dh],al - 10015D49: 10 00 adc byte ptr [eax],al - 10015D4B: 75 05 jne 10015D52 - 10015D4D: E8 45 C2 FF FF call 10011F97 - 10015D52: 56 push esi - 10015D53: 8B 35 EC 61 02 10 mov esi,dword ptr ds:[100261ECh] - 10015D59: 57 push edi - 10015D5A: 33 FF xor edi,edi - 10015D5C: 85 F6 test esi,esi - 10015D5E: 75 18 jne 10015D78 - 10015D60: 83 C8 FF or eax,0FFFFFFFFh - 10015D63: E9 A0 00 00 00 jmp 10015E08 - 10015D68: 3C 3D cmp al,3Dh - 10015D6A: 74 01 je 10015D6D - 10015D6C: 47 inc edi - 10015D6D: 56 push esi - 10015D6E: E8 CD E6 FF FF call 10014440 - 10015D73: 59 pop ecx - 10015D74: 8D 74 06 01 lea esi,[esi+eax+1] - 10015D78: 8A 06 mov al,byte ptr [esi] - 10015D7A: 84 C0 test al,al - 10015D7C: 75 EA jne 10015D68 - 10015D7E: 6A 04 push 4 - 10015D80: 47 inc edi - 10015D81: 57 push edi - 10015D82: E8 C7 CB FF FF call 1001294E - 10015D87: 8B F8 mov edi,eax - 10015D89: 59 pop ecx - 10015D8A: 59 pop ecx - 10015D8B: 89 3D 18 6A 02 10 mov dword ptr ds:[10026A18h],edi - 10015D91: 85 FF test edi,edi - 10015D93: 74 CB je 10015D60 - 10015D95: 8B 35 EC 61 02 10 mov esi,dword ptr ds:[100261ECh] - 10015D9B: 53 push ebx - 10015D9C: EB 42 jmp 10015DE0 - 10015D9E: 56 push esi - 10015D9F: E8 9C E6 FF FF call 10014440 - 10015DA4: 8B D8 mov ebx,eax - 10015DA6: 43 inc ebx - 10015DA7: 80 3E 3D cmp byte ptr [esi],3Dh - 10015DAA: 59 pop ecx - 10015DAB: 74 31 je 10015DDE - 10015DAD: 6A 01 push 1 - 10015DAF: 53 push ebx - 10015DB0: E8 99 CB FF FF call 1001294E - 10015DB5: 59 pop ecx - 10015DB6: 59 pop ecx - 10015DB7: 89 07 mov dword ptr [edi],eax - 10015DB9: 85 C0 test eax,eax - 10015DBB: 74 4E je 10015E0B - 10015DBD: 56 push esi - 10015DBE: 53 push ebx - 10015DBF: 50 push eax - 10015DC0: E8 0B E6 FF FF call 100143D0 - 10015DC5: 83 C4 0C add esp,0Ch - 10015DC8: 85 C0 test eax,eax - 10015DCA: 74 0F je 10015DDB - 10015DCC: 33 C0 xor eax,eax - 10015DCE: 50 push eax - 10015DCF: 50 push eax - 10015DD0: 50 push eax - 10015DD1: 50 push eax - 10015DD2: 50 push eax - 10015DD3: E8 E1 90 FF FF call 1000EEB9 - 10015DD8: 83 C4 14 add esp,14h - 10015DDB: 83 C7 04 add edi,4 - 10015DDE: 03 F3 add esi,ebx - 10015DE0: 80 3E 00 cmp byte ptr [esi],0 - 10015DE3: 75 B9 jne 10015D9E - 10015DE5: FF 35 EC 61 02 10 push dword ptr ds:[100261ECh] - 10015DEB: E8 44 45 FF FF call 1000A334 - 10015DF0: 83 25 EC 61 02 10 and dword ptr ds:[100261ECh],0 - 00 - 10015DF7: 83 27 00 and dword ptr [edi],0 - 10015DFA: C7 05 E0 6B 02 10 mov dword ptr ds:[10026BE0h],1 - 01 00 00 00 - 10015E04: 33 C0 xor eax,eax - 10015E06: 59 pop ecx - 10015E07: 5B pop ebx - 10015E08: 5F pop edi - 10015E09: 5E pop esi - 10015E0A: C3 ret - 10015E0B: FF 35 18 6A 02 10 push dword ptr ds:[10026A18h] - 10015E11: E8 1E 45 FF FF call 1000A334 - 10015E16: 83 25 18 6A 02 10 and dword ptr ds:[10026A18h],0 - 00 - 10015E1D: 83 C8 FF or eax,0FFFFFFFFh - 10015E20: EB E4 jmp 10015E06 - 10015E22: 8B FF mov edi,edi - 10015E24: 55 push ebp - 10015E25: 8B EC mov ebp,esp - 10015E27: 51 push ecx - 10015E28: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 10015E2B: 53 push ebx - 10015E2C: 33 C0 xor eax,eax - 10015E2E: 56 push esi - 10015E2F: 89 07 mov dword ptr [edi],eax - 10015E31: 8B F2 mov esi,edx - 10015E33: 8B 55 0C mov edx,dword ptr [ebp+0Ch] - 10015E36: C7 01 01 00 00 00 mov dword ptr [ecx],1 - 10015E3C: 39 45 08 cmp dword ptr [ebp+8],eax - 10015E3F: 74 09 je 10015E4A - 10015E41: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 10015E44: 83 45 08 04 add dword ptr [ebp+8],4 - 10015E48: 89 13 mov dword ptr [ebx],edx - 10015E4A: 89 45 FC mov dword ptr [ebp-4],eax - 10015E4D: 80 3E 22 cmp byte ptr [esi],22h - 10015E50: 75 10 jne 10015E62 - 10015E52: 33 C0 xor eax,eax - 10015E54: 39 45 FC cmp dword ptr [ebp-4],eax - 10015E57: B3 22 mov bl,22h - 10015E59: 0F 94 C0 sete al - 10015E5C: 46 inc esi - 10015E5D: 89 45 FC mov dword ptr [ebp-4],eax - 10015E60: EB 3C jmp 10015E9E - 10015E62: FF 07 inc dword ptr [edi] - 10015E64: 85 D2 test edx,edx - 10015E66: 74 08 je 10015E70 - 10015E68: 8A 06 mov al,byte ptr [esi] - 10015E6A: 88 02 mov byte ptr [edx],al - 10015E6C: 42 inc edx - 10015E6D: 89 55 0C mov dword ptr [ebp+0Ch],edx - 10015E70: 8A 1E mov bl,byte ptr [esi] - 10015E72: 0F B6 C3 movzx eax,bl - 10015E75: 50 push eax - 10015E76: 46 inc esi - 10015E77: E8 8B 51 00 00 call 1001B007 - 10015E7C: 59 pop ecx - 10015E7D: 85 C0 test eax,eax - 10015E7F: 74 13 je 10015E94 - 10015E81: FF 07 inc dword ptr [edi] - 10015E83: 83 7D 0C 00 cmp dword ptr [ebp+0Ch],0 - 10015E87: 74 0A je 10015E93 - 10015E89: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch] - 10015E8C: 8A 06 mov al,byte ptr [esi] - 10015E8E: FF 45 0C inc dword ptr [ebp+0Ch] - 10015E91: 88 01 mov byte ptr [ecx],al - 10015E93: 46 inc esi - 10015E94: 8B 55 0C mov edx,dword ptr [ebp+0Ch] - 10015E97: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 10015E9A: 84 DB test bl,bl - 10015E9C: 74 32 je 10015ED0 - 10015E9E: 83 7D FC 00 cmp dword ptr [ebp-4],0 - 10015EA2: 75 A9 jne 10015E4D - 10015EA4: 80 FB 20 cmp bl,20h - 10015EA7: 74 05 je 10015EAE - 10015EA9: 80 FB 09 cmp bl,9 - 10015EAC: 75 9F jne 10015E4D - 10015EAE: 85 D2 test edx,edx - 10015EB0: 74 04 je 10015EB6 - 10015EB2: C6 42 FF 00 mov byte ptr [edx-1],0 - 10015EB6: 83 65 FC 00 and dword ptr [ebp-4],0 - 10015EBA: 80 3E 00 cmp byte ptr [esi],0 - 10015EBD: 0F 84 E9 00 00 00 je 10015FAC - 10015EC3: 8A 06 mov al,byte ptr [esi] - 10015EC5: 3C 20 cmp al,20h - 10015EC7: 74 04 je 10015ECD - 10015EC9: 3C 09 cmp al,9 - 10015ECB: 75 06 jne 10015ED3 - 10015ECD: 46 inc esi - 10015ECE: EB F3 jmp 10015EC3 - 10015ED0: 4E dec esi - 10015ED1: EB E3 jmp 10015EB6 - 10015ED3: 80 3E 00 cmp byte ptr [esi],0 - 10015ED6: 0F 84 D0 00 00 00 je 10015FAC - 10015EDC: 83 7D 08 00 cmp dword ptr [ebp+8],0 - 10015EE0: 74 09 je 10015EEB - 10015EE2: 8B 45 08 mov eax,dword ptr [ebp+8] - 10015EE5: 83 45 08 04 add dword ptr [ebp+8],4 - 10015EE9: 89 10 mov dword ptr [eax],edx - 10015EEB: FF 01 inc dword ptr [ecx] - 10015EED: 33 DB xor ebx,ebx - 10015EEF: 43 inc ebx - 10015EF0: 33 C9 xor ecx,ecx - 10015EF2: EB 02 jmp 10015EF6 - 10015EF4: 46 inc esi - 10015EF5: 41 inc ecx - 10015EF6: 80 3E 5C cmp byte ptr [esi],5Ch - 10015EF9: 74 F9 je 10015EF4 - 10015EFB: 80 3E 22 cmp byte ptr [esi],22h - 10015EFE: 75 26 jne 10015F26 - 10015F00: F6 C1 01 test cl,1 - 10015F03: 75 1F jne 10015F24 - 10015F05: 83 7D FC 00 cmp dword ptr [ebp-4],0 - 10015F09: 74 0C je 10015F17 - 10015F0B: 8D 46 01 lea eax,[esi+1] - 10015F0E: 80 38 22 cmp byte ptr [eax],22h - 10015F11: 75 04 jne 10015F17 - 10015F13: 8B F0 mov esi,eax - 10015F15: EB 0D jmp 10015F24 - 10015F17: 33 C0 xor eax,eax - 10015F19: 33 DB xor ebx,ebx - 10015F1B: 39 45 FC cmp dword ptr [ebp-4],eax - 10015F1E: 0F 94 C0 sete al - 10015F21: 89 45 FC mov dword ptr [ebp-4],eax - 10015F24: D1 E9 shr ecx,1 - 10015F26: 85 C9 test ecx,ecx - 10015F28: 74 12 je 10015F3C - 10015F2A: 49 dec ecx - 10015F2B: 85 D2 test edx,edx - 10015F2D: 74 04 je 10015F33 - 10015F2F: C6 02 5C mov byte ptr [edx],5Ch - 10015F32: 42 inc edx - 10015F33: FF 07 inc dword ptr [edi] - 10015F35: 85 C9 test ecx,ecx - 10015F37: 75 F1 jne 10015F2A - 10015F39: 89 55 0C mov dword ptr [ebp+0Ch],edx - 10015F3C: 8A 06 mov al,byte ptr [esi] - 10015F3E: 84 C0 test al,al - 10015F40: 74 55 je 10015F97 - 10015F42: 83 7D FC 00 cmp dword ptr [ebp-4],0 - 10015F46: 75 08 jne 10015F50 - 10015F48: 3C 20 cmp al,20h - 10015F4A: 74 4B je 10015F97 - 10015F4C: 3C 09 cmp al,9 - 10015F4E: 74 47 je 10015F97 - 10015F50: 85 DB test ebx,ebx - 10015F52: 74 3D je 10015F91 - 10015F54: 0F BE C0 movsx eax,al - 10015F57: 50 push eax - 10015F58: 85 D2 test edx,edx - 10015F5A: 74 23 je 10015F7F - 10015F5C: E8 A6 50 00 00 call 1001B007 - 10015F61: 59 pop ecx - 10015F62: 85 C0 test eax,eax - 10015F64: 74 0D je 10015F73 - 10015F66: 8A 06 mov al,byte ptr [esi] - 10015F68: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch] - 10015F6B: FF 45 0C inc dword ptr [ebp+0Ch] - 10015F6E: 88 01 mov byte ptr [ecx],al - 10015F70: 46 inc esi - 10015F71: FF 07 inc dword ptr [edi] - 10015F73: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch] - 10015F76: 8A 06 mov al,byte ptr [esi] - 10015F78: FF 45 0C inc dword ptr [ebp+0Ch] - 10015F7B: 88 01 mov byte ptr [ecx],al - 10015F7D: EB 0D jmp 10015F8C - 10015F7F: E8 83 50 00 00 call 1001B007 - 10015F84: 59 pop ecx - 10015F85: 85 C0 test eax,eax - 10015F87: 74 03 je 10015F8C - 10015F89: 46 inc esi - 10015F8A: FF 07 inc dword ptr [edi] - 10015F8C: FF 07 inc dword ptr [edi] - 10015F8E: 8B 55 0C mov edx,dword ptr [ebp+0Ch] - 10015F91: 46 inc esi - 10015F92: E9 56 FF FF FF jmp 10015EED - 10015F97: 85 D2 test edx,edx - 10015F99: 74 07 je 10015FA2 - 10015F9B: C6 02 00 mov byte ptr [edx],0 - 10015F9E: 42 inc edx - 10015F9F: 89 55 0C mov dword ptr [ebp+0Ch],edx - 10015FA2: FF 07 inc dword ptr [edi] - 10015FA4: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 10015FA7: E9 0E FF FF FF jmp 10015EBA - 10015FAC: 8B 45 08 mov eax,dword ptr [ebp+8] - 10015FAF: 5E pop esi - 10015FB0: 5B pop ebx - 10015FB1: 85 C0 test eax,eax - 10015FB3: 74 03 je 10015FB8 - 10015FB5: 83 20 00 and dword ptr [eax],0 - 10015FB8: FF 01 inc dword ptr [ecx] - 10015FBA: C9 leave - 10015FBB: C3 ret - 10015FBC: 8B FF mov edi,edi - 10015FBE: 55 push ebp - 10015FBF: 8B EC mov ebp,esp - 10015FC1: 83 EC 0C sub esp,0Ch - 10015FC4: 53 push ebx - 10015FC5: 33 DB xor ebx,ebx - 10015FC7: 56 push esi - 10015FC8: 57 push edi - 10015FC9: 39 1D EC 6B 02 10 cmp dword ptr ds:[10026BECh],ebx - 10015FCF: 75 05 jne 10015FD6 - 10015FD1: E8 C1 BF FF FF call 10011F97 - 10015FD6: 68 04 01 00 00 push 104h - 10015FDB: BE 40 6A 02 10 mov esi,10026A40h - 10015FE0: 56 push esi - 10015FE1: 53 push ebx - 10015FE2: 88 1D 44 6B 02 10 mov byte ptr ds:[10026B44h],bl - 10015FE8: FF 15 B8 F0 01 10 call dword ptr ds:[1001F0B8h] - 10015FEE: A1 20 6D 02 10 mov eax,dword ptr ds:[10026D20h] - 10015FF3: 89 35 28 6A 02 10 mov dword ptr ds:[10026A28h],esi - 10015FF9: 3B C3 cmp eax,ebx - 10015FFB: 74 07 je 10016004 - 10015FFD: 89 45 FC mov dword ptr [ebp-4],eax - 10016000: 38 18 cmp byte ptr [eax],bl - 10016002: 75 03 jne 10016007 - 10016004: 89 75 FC mov dword ptr [ebp-4],esi - 10016007: 8B 55 FC mov edx,dword ptr [ebp-4] - 1001600A: 8D 45 F8 lea eax,[ebp-8] - 1001600D: 50 push eax - 1001600E: 53 push ebx - 1001600F: 53 push ebx - 10016010: 8D 7D F4 lea edi,[ebp-0Ch] - 10016013: E8 0A FE FF FF call 10015E22 - 10016018: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1001601B: 83 C4 0C add esp,0Ch - 1001601E: 3D FF FF FF 3F cmp eax,3FFFFFFFh - 10016023: 73 4A jae 1001606F - 10016025: 8B 4D F4 mov ecx,dword ptr [ebp-0Ch] - 10016028: 83 F9 FF cmp ecx,0FFFFFFFFh - 1001602B: 73 42 jae 1001606F - 1001602D: 8B F8 mov edi,eax - 1001602F: C1 E7 02 shl edi,2 - 10016032: 8D 04 0F lea eax,[edi+ecx] - 10016035: 3B C1 cmp eax,ecx - 10016037: 72 36 jb 1001606F - 10016039: 50 push eax - 1001603A: E8 CA C8 FF FF call 10012909 - 1001603F: 8B F0 mov esi,eax - 10016041: 59 pop ecx - 10016042: 3B F3 cmp esi,ebx - 10016044: 74 29 je 1001606F - 10016046: 8B 55 FC mov edx,dword ptr [ebp-4] - 10016049: 8D 45 F8 lea eax,[ebp-8] - 1001604C: 50 push eax - 1001604D: 03 FE add edi,esi - 1001604F: 57 push edi - 10016050: 56 push esi - 10016051: 8D 7D F4 lea edi,[ebp-0Ch] - 10016054: E8 C9 FD FF FF call 10015E22 - 10016059: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1001605C: 83 C4 0C add esp,0Ch - 1001605F: 48 dec eax - 10016060: A3 0C 6A 02 10 mov dword ptr ds:[10026A0Ch],eax - 10016065: 89 35 10 6A 02 10 mov dword ptr ds:[10026A10h],esi - 1001606B: 33 C0 xor eax,eax - 1001606D: EB 03 jmp 10016072 - 1001606F: 83 C8 FF or eax,0FFFFFFFFh - 10016072: 5F pop edi - 10016073: 5E pop esi - 10016074: 5B pop ebx - 10016075: C9 leave - 10016076: C3 ret - 10016077: 8B FF mov edi,edi - 10016079: 55 push ebp - 1001607A: 8B EC mov ebp,esp - 1001607C: A1 48 6B 02 10 mov eax,dword ptr ds:[10026B48h] - 10016081: 83 EC 0C sub esp,0Ch - 10016084: 53 push ebx - 10016085: 56 push esi - 10016086: 8B 35 10 F1 01 10 mov esi,dword ptr ds:[1001F110h] - 1001608C: 57 push edi - 1001608D: 33 DB xor ebx,ebx - 1001608F: 33 FF xor edi,edi - 10016091: 3B C3 cmp eax,ebx - 10016093: 75 2E jne 100160C3 - 10016095: FF D6 call esi - 10016097: 8B F8 mov edi,eax - 10016099: 3B FB cmp edi,ebx - 1001609B: 74 0C je 100160A9 - 1001609D: C7 05 48 6B 02 10 mov dword ptr ds:[10026B48h],1 - 01 00 00 00 - 100160A7: EB 23 jmp 100160CC - 100160A9: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 100160AF: 83 F8 78 cmp eax,78h - 100160B2: 75 0A jne 100160BE - 100160B4: 6A 02 push 2 - 100160B6: 58 pop eax - 100160B7: A3 48 6B 02 10 mov dword ptr ds:[10026B48h],eax - 100160BC: EB 05 jmp 100160C3 - 100160BE: A1 48 6B 02 10 mov eax,dword ptr ds:[10026B48h] - 100160C3: 83 F8 01 cmp eax,1 - 100160C6: 0F 85 81 00 00 00 jne 1001614D - 100160CC: 3B FB cmp edi,ebx - 100160CE: 75 0F jne 100160DF - 100160D0: FF D6 call esi - 100160D2: 8B F8 mov edi,eax - 100160D4: 3B FB cmp edi,ebx - 100160D6: 75 07 jne 100160DF - 100160D8: 33 C0 xor eax,eax - 100160DA: E9 CA 00 00 00 jmp 100161A9 - 100160DF: 8B C7 mov eax,edi - 100160E1: 66 39 1F cmp word ptr [edi],bx - 100160E4: 74 0E je 100160F4 - 100160E6: 40 inc eax - 100160E7: 40 inc eax - 100160E8: 66 39 18 cmp word ptr [eax],bx - 100160EB: 75 F9 jne 100160E6 - 100160ED: 40 inc eax - 100160EE: 40 inc eax - 100160EF: 66 39 18 cmp word ptr [eax],bx - 100160F2: 75 F2 jne 100160E6 - 100160F4: 8B 35 70 F0 01 10 mov esi,dword ptr ds:[1001F070h] - 100160FA: 53 push ebx - 100160FB: 53 push ebx - 100160FC: 53 push ebx - 100160FD: 2B C7 sub eax,edi - 100160FF: 53 push ebx - 10016100: D1 F8 sar eax,1 - 10016102: 40 inc eax - 10016103: 50 push eax - 10016104: 57 push edi - 10016105: 53 push ebx - 10016106: 53 push ebx - 10016107: 89 45 F4 mov dword ptr [ebp-0Ch],eax - 1001610A: FF D6 call esi - 1001610C: 89 45 F8 mov dword ptr [ebp-8],eax - 1001610F: 3B C3 cmp eax,ebx - 10016111: 74 2F je 10016142 - 10016113: 50 push eax - 10016114: E8 F0 C7 FF FF call 10012909 - 10016119: 59 pop ecx - 1001611A: 89 45 FC mov dword ptr [ebp-4],eax - 1001611D: 3B C3 cmp eax,ebx - 1001611F: 74 21 je 10016142 - 10016121: 53 push ebx - 10016122: 53 push ebx - 10016123: FF 75 F8 push dword ptr [ebp-8] - 10016126: 50 push eax - 10016127: FF 75 F4 push dword ptr [ebp-0Ch] - 1001612A: 57 push edi - 1001612B: 53 push ebx - 1001612C: 53 push ebx - 1001612D: FF D6 call esi - 1001612F: 85 C0 test eax,eax - 10016131: 75 0C jne 1001613F - 10016133: FF 75 FC push dword ptr [ebp-4] - 10016136: E8 F9 41 FF FF call 1000A334 - 1001613B: 59 pop ecx - 1001613C: 89 5D FC mov dword ptr [ebp-4],ebx - 1001613F: 8B 5D FC mov ebx,dword ptr [ebp-4] - 10016142: 57 push edi - 10016143: FF 15 0C F1 01 10 call dword ptr ds:[1001F10Ch] - 10016149: 8B C3 mov eax,ebx - 1001614B: EB 5C jmp 100161A9 - 1001614D: 83 F8 02 cmp eax,2 - 10016150: 74 04 je 10016156 - 10016152: 3B C3 cmp eax,ebx - 10016154: 75 82 jne 100160D8 - 10016156: FF 15 08 F1 01 10 call dword ptr ds:[1001F108h] - 1001615C: 8B F0 mov esi,eax - 1001615E: 3B F3 cmp esi,ebx - 10016160: 0F 84 72 FF FF FF je 100160D8 - 10016166: 38 1E cmp byte ptr [esi],bl - 10016168: 74 0A je 10016174 - 1001616A: 40 inc eax - 1001616B: 38 18 cmp byte ptr [eax],bl - 1001616D: 75 FB jne 1001616A - 1001616F: 40 inc eax - 10016170: 38 18 cmp byte ptr [eax],bl - 10016172: 75 F6 jne 1001616A - 10016174: 2B C6 sub eax,esi - 10016176: 40 inc eax - 10016177: 50 push eax - 10016178: 89 45 F8 mov dword ptr [ebp-8],eax - 1001617B: E8 89 C7 FF FF call 10012909 - 10016180: 8B F8 mov edi,eax - 10016182: 59 pop ecx - 10016183: 3B FB cmp edi,ebx - 10016185: 75 0C jne 10016193 - 10016187: 56 push esi - 10016188: FF 15 04 F1 01 10 call dword ptr ds:[1001F104h] - 1001618E: E9 45 FF FF FF jmp 100160D8 - 10016193: FF 75 F8 push dword ptr [ebp-8] - 10016196: 56 push esi - 10016197: 57 push edi - 10016198: E8 B3 37 FF FF call 10009950 - 1001619D: 83 C4 0C add esp,0Ch - 100161A0: 56 push esi - 100161A1: FF 15 04 F1 01 10 call dword ptr ds:[1001F104h] - 100161A7: 8B C7 mov eax,edi - 100161A9: 5F pop edi - 100161AA: 5E pop esi - 100161AB: 5B pop ebx - 100161AC: C9 leave - 100161AD: C3 ret - 100161AE: 8B FF mov edi,edi - 100161B0: 56 push esi - 100161B1: B8 B4 17 02 10 mov eax,100217B4h - 100161B6: BE B4 17 02 10 mov esi,100217B4h - 100161BB: 57 push edi - 100161BC: 8B F8 mov edi,eax - 100161BE: 3B C6 cmp eax,esi - 100161C0: 73 0F jae 100161D1 - 100161C2: 8B 07 mov eax,dword ptr [edi] - 100161C4: 85 C0 test eax,eax - 100161C6: 74 02 je 100161CA - 100161C8: FF D0 call eax - 100161CA: 83 C7 04 add edi,4 - 100161CD: 3B FE cmp edi,esi - 100161CF: 72 F1 jb 100161C2 - 100161D1: 5F pop edi - 100161D2: 5E pop esi - 100161D3: C3 ret - 100161D4: 8B FF mov edi,edi - 100161D6: 56 push esi - 100161D7: B8 BC 17 02 10 mov eax,100217BCh - 100161DC: BE BC 17 02 10 mov esi,100217BCh - 100161E1: 57 push edi - 100161E2: 8B F8 mov edi,eax - 100161E4: 3B C6 cmp eax,esi - 100161E6: 73 0F jae 100161F7 - 100161E8: 8B 07 mov eax,dword ptr [edi] - 100161EA: 85 C0 test eax,eax - 100161EC: 74 02 je 100161F0 - 100161EE: FF D0 call eax - 100161F0: 83 C7 04 add edi,4 - 100161F3: 3B FE cmp edi,esi - 100161F5: 72 F1 jb 100161E8 - 100161F7: 5F pop edi - 100161F8: 5E pop esi - 100161F9: C3 ret - 100161FA: C3 ret - 100161FB: 8B FF mov edi,edi - 100161FD: 55 push ebp - 100161FE: 8B EC mov ebp,esp - 10016200: 51 push ecx - 10016201: 51 push ecx - 10016202: 56 push esi - 10016203: E8 E1 71 FF FF call 1000D3E9 - 10016208: 8B F0 mov esi,eax - 1001620A: 85 F6 test esi,esi - 1001620C: 0F 84 46 01 00 00 je 10016358 - 10016212: 8B 56 5C mov edx,dword ptr [esi+5Ch] - 10016215: A1 5C 57 02 10 mov eax,dword ptr ds:[1002575Ch] - 1001621A: 57 push edi - 1001621B: 8B 7D 08 mov edi,dword ptr [ebp+8] - 1001621E: 8B CA mov ecx,edx - 10016220: 53 push ebx - 10016221: 39 39 cmp dword ptr [ecx],edi - 10016223: 74 0E je 10016233 - 10016225: 8B D8 mov ebx,eax - 10016227: 6B DB 0C imul ebx,ebx,0Ch - 1001622A: 83 C1 0C add ecx,0Ch - 1001622D: 03 DA add ebx,edx - 1001622F: 3B CB cmp ecx,ebx - 10016231: 72 EE jb 10016221 - 10016233: 6B C0 0C imul eax,eax,0Ch - 10016236: 03 C2 add eax,edx - 10016238: 3B C8 cmp ecx,eax - 1001623A: 73 08 jae 10016244 - 1001623C: 39 39 cmp dword ptr [ecx],edi - 1001623E: 75 04 jne 10016244 - 10016240: 8B C1 mov eax,ecx - 10016242: EB 02 jmp 10016246 - 10016244: 33 C0 xor eax,eax - 10016246: 85 C0 test eax,eax - 10016248: 74 0A je 10016254 - 1001624A: 8B 58 08 mov ebx,dword ptr [eax+8] - 1001624D: 89 5D FC mov dword ptr [ebp-4],ebx - 10016250: 85 DB test ebx,ebx - 10016252: 75 07 jne 1001625B - 10016254: 33 C0 xor eax,eax - 10016256: E9 FB 00 00 00 jmp 10016356 - 1001625B: 83 FB 05 cmp ebx,5 - 1001625E: 75 0C jne 1001626C - 10016260: 83 60 08 00 and dword ptr [eax+8],0 - 10016264: 33 C0 xor eax,eax - 10016266: 40 inc eax - 10016267: E9 EA 00 00 00 jmp 10016356 - 1001626C: 83 FB 01 cmp ebx,1 - 1001626F: 0F 84 DE 00 00 00 je 10016353 - 10016275: 8B 4E 60 mov ecx,dword ptr [esi+60h] - 10016278: 89 4D F8 mov dword ptr [ebp-8],ecx - 1001627B: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch] - 1001627E: 89 4E 60 mov dword ptr [esi+60h],ecx - 10016281: 8B 48 04 mov ecx,dword ptr [eax+4] - 10016284: 83 F9 08 cmp ecx,8 - 10016287: 0F 85 B8 00 00 00 jne 10016345 - 1001628D: 8B 0D 50 57 02 10 mov ecx,dword ptr ds:[10025750h] - 10016293: 8B 3D 54 57 02 10 mov edi,dword ptr ds:[10025754h] - 10016299: 8B D1 mov edx,ecx - 1001629B: 03 F9 add edi,ecx - 1001629D: 3B D7 cmp edx,edi - 1001629F: 7D 24 jge 100162C5 - 100162A1: 6B C9 0C imul ecx,ecx,0Ch - 100162A4: 8B 7E 5C mov edi,dword ptr [esi+5Ch] - 100162A7: 83 64 39 08 00 and dword ptr [ecx+edi+8],0 - 100162AC: 8B 3D 50 57 02 10 mov edi,dword ptr ds:[10025750h] - 100162B2: 8B 1D 54 57 02 10 mov ebx,dword ptr ds:[10025754h] - 100162B8: 42 inc edx - 100162B9: 03 DF add ebx,edi - 100162BB: 83 C1 0C add ecx,0Ch - 100162BE: 3B D3 cmp edx,ebx - 100162C0: 7C E2 jl 100162A4 - 100162C2: 8B 5D FC mov ebx,dword ptr [ebp-4] - 100162C5: 8B 00 mov eax,dword ptr [eax] - 100162C7: 8B 7E 64 mov edi,dword ptr [esi+64h] - 100162CA: 3D 8E 00 00 C0 cmp eax,0C000008Eh - 100162CF: 75 09 jne 100162DA - 100162D1: C7 46 64 83 00 00 mov dword ptr [esi+64h],83h - 00 - 100162D8: EB 5E jmp 10016338 - 100162DA: 3D 90 00 00 C0 cmp eax,0C0000090h - 100162DF: 75 09 jne 100162EA - 100162E1: C7 46 64 81 00 00 mov dword ptr [esi+64h],81h - 00 - 100162E8: EB 4E jmp 10016338 - 100162EA: 3D 91 00 00 C0 cmp eax,0C0000091h - 100162EF: 75 09 jne 100162FA - 100162F1: C7 46 64 84 00 00 mov dword ptr [esi+64h],84h - 00 - 100162F8: EB 3E jmp 10016338 - 100162FA: 3D 93 00 00 C0 cmp eax,0C0000093h - 100162FF: 75 09 jne 1001630A - 10016301: C7 46 64 85 00 00 mov dword ptr [esi+64h],85h - 00 - 10016308: EB 2E jmp 10016338 - 1001630A: 3D 8D 00 00 C0 cmp eax,0C000008Dh - 1001630F: 75 09 jne 1001631A - 10016311: C7 46 64 82 00 00 mov dword ptr [esi+64h],82h - 00 - 10016318: EB 1E jmp 10016338 - 1001631A: 3D 8F 00 00 C0 cmp eax,0C000008Fh - 1001631F: 75 09 jne 1001632A - 10016321: C7 46 64 86 00 00 mov dword ptr [esi+64h],86h - 00 - 10016328: EB 0E jmp 10016338 - 1001632A: 3D 92 00 00 C0 cmp eax,0C0000092h - 1001632F: 75 07 jne 10016338 - 10016331: C7 46 64 8A 00 00 mov dword ptr [esi+64h],8Ah - 00 - 10016338: FF 76 64 push dword ptr [esi+64h] - 1001633B: 6A 08 push 8 - 1001633D: FF D3 call ebx - 1001633F: 59 pop ecx - 10016340: 89 7E 64 mov dword ptr [esi+64h],edi - 10016343: EB 07 jmp 1001634C - 10016345: 83 60 08 00 and dword ptr [eax+8],0 - 10016349: 51 push ecx - 1001634A: FF D3 call ebx - 1001634C: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1001634F: 59 pop ecx - 10016350: 89 46 60 mov dword ptr [esi+60h],eax - 10016353: 83 C8 FF or eax,0FFFFFFFFh - 10016356: 5B pop ebx - 10016357: 5F pop edi - 10016358: 5E pop esi - 10016359: C9 leave - 1001635A: C3 ret - 1001635B: 8B FF mov edi,edi - 1001635D: 55 push ebp - 1001635E: 8B EC mov ebp,esp - 10016360: B8 63 73 6D E0 mov eax,0E06D7363h - 10016365: 39 45 08 cmp dword ptr [ebp+8],eax - 10016368: 75 0D jne 10016377 - 1001636A: FF 75 0C push dword ptr [ebp+0Ch] - 1001636D: 50 push eax - 1001636E: E8 88 FE FF FF call 100161FB - 10016373: 59 pop ecx - 10016374: 59 pop ecx - 10016375: 5D pop ebp - 10016376: C3 ret - 10016377: 33 C0 xor eax,eax - 10016379: 5D pop ebp - 1001637A: C3 ret - 1001637B: 8B FF mov edi,edi - 1001637D: 55 push ebp - 1001637E: 8B EC mov ebp,esp - 10016380: 83 EC 10 sub esp,10h - 10016383: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10016388: 83 65 F8 00 and dword ptr [ebp-8],0 - 1001638C: 83 65 FC 00 and dword ptr [ebp-4],0 - 10016390: 53 push ebx - 10016391: 57 push edi - 10016392: BF 4E E6 40 BB mov edi,0BB40E64Eh - 10016397: BB 00 00 FF FF mov ebx,0FFFF0000h - 1001639C: 3B C7 cmp eax,edi - 1001639E: 74 0D je 100163AD - 100163A0: 85 C3 test ebx,eax - 100163A2: 74 09 je 100163AD - 100163A4: F7 D0 not eax - 100163A6: A3 14 49 02 10 mov dword ptr ds:[10024914h],eax - 100163AB: EB 60 jmp 1001640D - 100163AD: 56 push esi - 100163AE: 8D 45 F8 lea eax,[ebp-8] - 100163B1: 50 push eax - 100163B2: FF 15 58 F0 01 10 call dword ptr ds:[1001F058h] - 100163B8: 8B 75 FC mov esi,dword ptr [ebp-4] - 100163BB: 33 75 F8 xor esi,dword ptr [ebp-8] - 100163BE: FF 15 1C F1 01 10 call dword ptr ds:[1001F11Ch] - 100163C4: 33 F0 xor esi,eax - 100163C6: FF 15 74 F0 01 10 call dword ptr ds:[1001F074h] - 100163CC: 33 F0 xor esi,eax - 100163CE: FF 15 18 F1 01 10 call dword ptr ds:[1001F118h] - 100163D4: 33 F0 xor esi,eax - 100163D6: 8D 45 F0 lea eax,[ebp-10h] - 100163D9: 50 push eax - 100163DA: FF 15 14 F1 01 10 call dword ptr ds:[1001F114h] - 100163E0: 8B 45 F4 mov eax,dword ptr [ebp-0Ch] - 100163E3: 33 45 F0 xor eax,dword ptr [ebp-10h] - 100163E6: 33 F0 xor esi,eax - 100163E8: 3B F7 cmp esi,edi - 100163EA: 75 07 jne 100163F3 - 100163EC: BE 4F E6 40 BB mov esi,0BB40E64Fh - 100163F1: EB 0B jmp 100163FE - 100163F3: 85 F3 test ebx,esi - 100163F5: 75 07 jne 100163FE - 100163F7: 8B C6 mov eax,esi - 100163F9: C1 E0 10 shl eax,10h - 100163FC: 0B F0 or esi,eax - 100163FE: 89 35 10 49 02 10 mov dword ptr ds:[10024910h],esi - 10016404: F7 D6 not esi - 10016406: 89 35 14 49 02 10 mov dword ptr ds:[10024914h],esi - 1001640C: 5E pop esi - 1001640D: 5F pop edi - 1001640E: 5B pop ebx - 1001640F: C9 leave - 10016410: C3 ret - 10016411: 50 push eax - 10016412: 64 FF 35 00 00 00 push dword ptr fs:[00000000h] - 00 - 10016419: 8D 44 24 0C lea eax,[esp+0Ch] - 1001641D: 2B 64 24 0C sub esp,dword ptr [esp+0Ch] - 10016421: 53 push ebx - 10016422: 56 push esi - 10016423: 57 push edi - 10016424: 89 28 mov dword ptr [eax],ebp - 10016426: 8B E8 mov ebp,eax - 10016428: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1001642D: 33 C5 xor eax,ebp - 1001642F: 50 push eax - 10016430: 89 65 F0 mov dword ptr [ebp-10h],esp - 10016433: FF 75 FC push dword ptr [ebp-4] - 10016436: C7 45 FC FF FF FF mov dword ptr [ebp-4],0FFFFFFFFh - FF - 1001643D: 8D 45 F4 lea eax,[ebp-0Ch] - 10016440: 64 A3 00 00 00 00 mov dword ptr fs:[00000000h],eax - 10016446: C3 ret - 10016447: 8B FF mov edi,edi - 10016449: 55 push ebp - 1001644A: 8B EC mov ebp,esp - 1001644C: 33 C0 xor eax,eax - 1001644E: 40 inc eax - 1001644F: 83 7D 08 00 cmp dword ptr [ebp+8],0 - 10016453: 75 02 jne 10016457 - 10016455: 33 C0 xor eax,eax - 10016457: 5D pop ebp - 10016458: C3 ret - 10016459: CC int 3 - 1001645A: CC int 3 - 1001645B: CC int 3 - 1001645C: CC int 3 - 1001645D: CC int 3 - 1001645E: CC int 3 - 1001645F: CC int 3 - 10016460: 55 push ebp - 10016461: 8B EC mov ebp,esp - 10016463: 57 push edi - 10016464: 56 push esi - 10016465: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 10016468: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 1001646B: 8B 7D 08 mov edi,dword ptr [ebp+8] - 1001646E: 8B C1 mov eax,ecx - 10016470: 8B D1 mov edx,ecx - 10016472: 03 C6 add eax,esi - 10016474: 3B FE cmp edi,esi - 10016476: 76 08 jbe 10016480 - 10016478: 3B F8 cmp edi,eax - 1001647A: 0F 82 A4 01 00 00 jb 10016624 - 10016480: 81 F9 00 01 00 00 cmp ecx,100h - 10016486: 72 1F jb 100164A7 - 10016488: 83 3D 1C 6D 02 10 cmp dword ptr ds:[10026D1Ch],0 - 00 - 1001648F: 74 16 je 100164A7 - 10016491: 57 push edi - 10016492: 56 push esi - 10016493: 83 E7 0F and edi,0Fh - 10016496: 83 E6 0F and esi,0Fh - 10016499: 3B FE cmp edi,esi - 1001649B: 5E pop esi - 1001649C: 5F pop edi - 1001649D: 75 08 jne 100164A7 - 1001649F: 5E pop esi - 100164A0: 5F pop edi - 100164A1: 5D pop ebp - 100164A2: E9 99 5E FF FF jmp 1000C340 - 100164A7: F7 C7 03 00 00 00 test edi,3 - 100164AD: 75 15 jne 100164C4 - 100164AF: C1 E9 02 shr ecx,2 - 100164B2: 83 E2 03 and edx,3 - 100164B5: 83 F9 08 cmp ecx,8 - 100164B8: 72 2A jb 100164E4 - 100164BA: F3 A5 rep movs dword ptr es:[edi],dword ptr [esi] - 100164BC: FF 24 95 D4 65 01 jmp dword ptr [edx*4+100165D4h] - 10 - 100164C3: 90 nop - 100164C4: 8B C7 mov eax,edi - 100164C6: BA 03 00 00 00 mov edx,3 - 100164CB: 83 E9 04 sub ecx,4 - 100164CE: 72 0C jb 100164DC - 100164D0: 83 E0 03 and eax,3 - 100164D3: 03 C8 add ecx,eax - 100164D5: FF 24 85 E8 64 01 jmp dword ptr [eax*4+100164E8h] - 10 - 100164DC: FF 24 8D E4 65 01 jmp dword ptr [ecx*4+100165E4h] - 10 - 100164E3: 90 nop - 100164E4: FF 24 8D 68 65 01 jmp dword ptr [ecx*4+10016568h] - 10 - 100164EB: 90 nop - 100164EC: F8 clc - 100164ED: 64 01 10 add dword ptr fs:[eax],edx - 100164F0: 24 65 and al,65h - 100164F2: 01 10 add dword ptr [eax],edx - 100164F4: 48 dec eax - 100164F5: 65 01 10 add dword ptr gs:[eax],edx - 100164F8: 23 D1 and edx,ecx - 100164FA: 8A 06 mov al,byte ptr [esi] - 100164FC: 88 07 mov byte ptr [edi],al - 100164FE: 8A 46 01 mov al,byte ptr [esi+1] - 10016501: 88 47 01 mov byte ptr [edi+1],al - 10016504: 8A 46 02 mov al,byte ptr [esi+2] - 10016507: C1 E9 02 shr ecx,2 - 1001650A: 88 47 02 mov byte ptr [edi+2],al - 1001650D: 83 C6 03 add esi,3 - 10016510: 83 C7 03 add edi,3 - 10016513: 83 F9 08 cmp ecx,8 - 10016516: 72 CC jb 100164E4 - 10016518: F3 A5 rep movs dword ptr es:[edi],dword ptr [esi] - 1001651A: FF 24 95 D4 65 01 jmp dword ptr [edx*4+100165D4h] - 10 - 10016521: 8D 49 00 lea ecx,[ecx] - 10016524: 23 D1 and edx,ecx - 10016526: 8A 06 mov al,byte ptr [esi] - 10016528: 88 07 mov byte ptr [edi],al - 1001652A: 8A 46 01 mov al,byte ptr [esi+1] - 1001652D: C1 E9 02 shr ecx,2 - 10016530: 88 47 01 mov byte ptr [edi+1],al - 10016533: 83 C6 02 add esi,2 - 10016536: 83 C7 02 add edi,2 - 10016539: 83 F9 08 cmp ecx,8 - 1001653C: 72 A6 jb 100164E4 - 1001653E: F3 A5 rep movs dword ptr es:[edi],dword ptr [esi] - 10016540: FF 24 95 D4 65 01 jmp dword ptr [edx*4+100165D4h] - 10 - 10016547: 90 nop - 10016548: 23 D1 and edx,ecx - 1001654A: 8A 06 mov al,byte ptr [esi] - 1001654C: 88 07 mov byte ptr [edi],al - 1001654E: 83 C6 01 add esi,1 - 10016551: C1 E9 02 shr ecx,2 - 10016554: 83 C7 01 add edi,1 - 10016557: 83 F9 08 cmp ecx,8 - 1001655A: 72 88 jb 100164E4 - 1001655C: F3 A5 rep movs dword ptr es:[edi],dword ptr [esi] - 1001655E: FF 24 95 D4 65 01 jmp dword ptr [edx*4+100165D4h] - 10 - 10016565: 8D 49 00 lea ecx,[ecx] - 10016568: CB retf - 10016569: 65 01 10 add dword ptr gs:[eax],edx - 1001656C: B8 65 01 10 B0 mov eax,0B0100165h - 10016571: 65 01 10 add dword ptr gs:[eax],edx - 10016574: A8 65 test al,65h - 10016576: 01 10 add dword ptr [eax],edx - 10016578: A0 65 01 10 98 mov al,byte ptr ds:[98100165h] - 1001657D: 65 01 10 add dword ptr gs:[eax],edx - 10016580: 90 nop - 10016581: 65 01 10 add dword ptr gs:[eax],edx - 10016584: 88 65 01 mov byte ptr [ebp+1],ah - 10016587: 10 8B 44 8E E4 89 adc byte ptr [ebx+89E48E44h],cl - 1001658D: 44 inc esp - 1001658E: 8F - 1001658F: E4 8B in al,8Bh - 10016591: 44 inc esp - 10016592: 8E E8 mov gs,ax - 10016594: 89 44 8F E8 mov dword ptr [edi+ecx*4-18h],eax - 10016598: 8B 44 8E EC mov eax,dword ptr [esi+ecx*4-14h] - 1001659C: 89 44 8F EC mov dword ptr [edi+ecx*4-14h],eax - 100165A0: 8B 44 8E F0 mov eax,dword ptr [esi+ecx*4-10h] - 100165A4: 89 44 8F F0 mov dword ptr [edi+ecx*4-10h],eax - 100165A8: 8B 44 8E F4 mov eax,dword ptr [esi+ecx*4-0Ch] - 100165AC: 89 44 8F F4 mov dword ptr [edi+ecx*4-0Ch],eax - 100165B0: 8B 44 8E F8 mov eax,dword ptr [esi+ecx*4-8] - 100165B4: 89 44 8F F8 mov dword ptr [edi+ecx*4-8],eax - 100165B8: 8B 44 8E FC mov eax,dword ptr [esi+ecx*4-4] - 100165BC: 89 44 8F FC mov dword ptr [edi+ecx*4-4],eax - 100165C0: 8D 04 8D 00 00 00 lea eax,[ecx*4+00000000h] - 00 - 100165C7: 03 F0 add esi,eax - 100165C9: 03 F8 add edi,eax - 100165CB: FF 24 95 D4 65 01 jmp dword ptr [edx*4+100165D4h] - 10 - 100165D2: 8B FF mov edi,edi - 100165D4: E4 65 in al,65h - 100165D6: 01 10 add dword ptr [eax],edx - 100165D8: EC in al,dx - 100165D9: 65 01 10 add dword ptr gs:[eax],edx - 100165DC: F8 clc - 100165DD: 65 01 10 add dword ptr gs:[eax],edx - 100165E0: 0C 66 or al,66h - 100165E2: 01 10 add dword ptr [eax],edx - 100165E4: 8B 45 08 mov eax,dword ptr [ebp+8] - 100165E7: 5E pop esi - 100165E8: 5F pop edi - 100165E9: C9 leave - 100165EA: C3 ret - 100165EB: 90 nop - 100165EC: 8A 06 mov al,byte ptr [esi] - 100165EE: 88 07 mov byte ptr [edi],al - 100165F0: 8B 45 08 mov eax,dword ptr [ebp+8] - 100165F3: 5E pop esi - 100165F4: 5F pop edi - 100165F5: C9 leave - 100165F6: C3 ret - 100165F7: 90 nop - 100165F8: 8A 06 mov al,byte ptr [esi] - 100165FA: 88 07 mov byte ptr [edi],al - 100165FC: 8A 46 01 mov al,byte ptr [esi+1] - 100165FF: 88 47 01 mov byte ptr [edi+1],al - 10016602: 8B 45 08 mov eax,dword ptr [ebp+8] - 10016605: 5E pop esi - 10016606: 5F pop edi - 10016607: C9 leave - 10016608: C3 ret - 10016609: 8D 49 00 lea ecx,[ecx] - 1001660C: 8A 06 mov al,byte ptr [esi] - 1001660E: 88 07 mov byte ptr [edi],al - 10016610: 8A 46 01 mov al,byte ptr [esi+1] - 10016613: 88 47 01 mov byte ptr [edi+1],al - 10016616: 8A 46 02 mov al,byte ptr [esi+2] - 10016619: 88 47 02 mov byte ptr [edi+2],al - 1001661C: 8B 45 08 mov eax,dword ptr [ebp+8] - 1001661F: 5E pop esi - 10016620: 5F pop edi - 10016621: C9 leave - 10016622: C3 ret - 10016623: 90 nop - 10016624: 8D 74 31 FC lea esi,[ecx+esi-4] - 10016628: 8D 7C 39 FC lea edi,[ecx+edi-4] - 1001662C: F7 C7 03 00 00 00 test edi,3 - 10016632: 75 24 jne 10016658 - 10016634: C1 E9 02 shr ecx,2 - 10016637: 83 E2 03 and edx,3 - 1001663A: 83 F9 08 cmp ecx,8 - 1001663D: 72 0D jb 1001664C - 1001663F: FD std - 10016640: F3 A5 rep movs dword ptr es:[edi],dword ptr [esi] - 10016642: FC cld - 10016643: FF 24 95 70 67 01 jmp dword ptr [edx*4+10016770h] - 10 - 1001664A: 8B FF mov edi,edi - 1001664C: F7 D9 neg ecx - 1001664E: FF 24 8D 20 67 01 jmp dword ptr [ecx*4+10016720h] - 10 - 10016655: 8D 49 00 lea ecx,[ecx] - 10016658: 8B C7 mov eax,edi - 1001665A: BA 03 00 00 00 mov edx,3 - 1001665F: 83 F9 04 cmp ecx,4 - 10016662: 72 0C jb 10016670 - 10016664: 83 E0 03 and eax,3 - 10016667: 2B C8 sub ecx,eax - 10016669: FF 24 85 74 66 01 jmp dword ptr [eax*4+10016674h] - 10 - 10016670: FF 24 8D 70 67 01 jmp dword ptr [ecx*4+10016770h] - 10 - 10016677: 90 nop - 10016678: 84 66 01 test byte ptr [esi+1],ah - 1001667B: 10 A8 66 01 10 D0 adc byte ptr [eax+D0100166h],ch - 10016681: 66 01 10 add word ptr [eax],dx - 10016684: 8A 46 03 mov al,byte ptr [esi+3] - 10016687: 23 D1 and edx,ecx - 10016689: 88 47 03 mov byte ptr [edi+3],al - 1001668C: 83 EE 01 sub esi,1 - 1001668F: C1 E9 02 shr ecx,2 - 10016692: 83 EF 01 sub edi,1 - 10016695: 83 F9 08 cmp ecx,8 - 10016698: 72 B2 jb 1001664C - 1001669A: FD std - 1001669B: F3 A5 rep movs dword ptr es:[edi],dword ptr [esi] - 1001669D: FC cld - 1001669E: FF 24 95 70 67 01 jmp dword ptr [edx*4+10016770h] - 10 - 100166A5: 8D 49 00 lea ecx,[ecx] - 100166A8: 8A 46 03 mov al,byte ptr [esi+3] - 100166AB: 23 D1 and edx,ecx - 100166AD: 88 47 03 mov byte ptr [edi+3],al - 100166B0: 8A 46 02 mov al,byte ptr [esi+2] - 100166B3: C1 E9 02 shr ecx,2 - 100166B6: 88 47 02 mov byte ptr [edi+2],al - 100166B9: 83 EE 02 sub esi,2 - 100166BC: 83 EF 02 sub edi,2 - 100166BF: 83 F9 08 cmp ecx,8 - 100166C2: 72 88 jb 1001664C - 100166C4: FD std - 100166C5: F3 A5 rep movs dword ptr es:[edi],dword ptr [esi] - 100166C7: FC cld - 100166C8: FF 24 95 70 67 01 jmp dword ptr [edx*4+10016770h] - 10 - 100166CF: 90 nop - 100166D0: 8A 46 03 mov al,byte ptr [esi+3] - 100166D3: 23 D1 and edx,ecx - 100166D5: 88 47 03 mov byte ptr [edi+3],al - 100166D8: 8A 46 02 mov al,byte ptr [esi+2] - 100166DB: 88 47 02 mov byte ptr [edi+2],al - 100166DE: 8A 46 01 mov al,byte ptr [esi+1] - 100166E1: C1 E9 02 shr ecx,2 - 100166E4: 88 47 01 mov byte ptr [edi+1],al - 100166E7: 83 EE 03 sub esi,3 - 100166EA: 83 EF 03 sub edi,3 - 100166ED: 83 F9 08 cmp ecx,8 - 100166F0: 0F 82 56 FF FF FF jb 1001664C - 100166F6: FD std - 100166F7: F3 A5 rep movs dword ptr es:[edi],dword ptr [esi] - 100166F9: FC cld - 100166FA: FF 24 95 70 67 01 jmp dword ptr [edx*4+10016770h] - 10 - 10016701: 8D 49 00 lea ecx,[ecx] - 10016704: 24 67 and al,67h - 10016706: 01 10 add dword ptr [eax],edx - 10016708: 2C 67 sub al,67h - 1001670A: 01 10 add dword ptr [eax],edx - 1001670C: 34 67 xor al,67h - 1001670E: 01 10 add dword ptr [eax],edx - 10016710: 3C 67 cmp al,67h - 10016712: 01 10 add dword ptr [eax],edx - 10016714: 44 inc esp - 10016715: 67 01 10 add dword ptr [bx+si],edx - 10016718: 4C dec esp - 10016719: 67 01 10 add dword ptr [bx+si],edx - 1001671C: 54 push esp - 1001671D: 67 01 10 add dword ptr [bx+si],edx - 10016720: 67 67 01 10 add dword ptr [bx+si],edx - 10016724: 8B 44 8E 1C mov eax,dword ptr [esi+ecx*4+1Ch] - 10016728: 89 44 8F 1C mov dword ptr [edi+ecx*4+1Ch],eax - 1001672C: 8B 44 8E 18 mov eax,dword ptr [esi+ecx*4+18h] - 10016730: 89 44 8F 18 mov dword ptr [edi+ecx*4+18h],eax - 10016734: 8B 44 8E 14 mov eax,dword ptr [esi+ecx*4+14h] - 10016738: 89 44 8F 14 mov dword ptr [edi+ecx*4+14h],eax - 1001673C: 8B 44 8E 10 mov eax,dword ptr [esi+ecx*4+10h] - 10016740: 89 44 8F 10 mov dword ptr [edi+ecx*4+10h],eax - 10016744: 8B 44 8E 0C mov eax,dword ptr [esi+ecx*4+0Ch] - 10016748: 89 44 8F 0C mov dword ptr [edi+ecx*4+0Ch],eax - 1001674C: 8B 44 8E 08 mov eax,dword ptr [esi+ecx*4+8] - 10016750: 89 44 8F 08 mov dword ptr [edi+ecx*4+8],eax - 10016754: 8B 44 8E 04 mov eax,dword ptr [esi+ecx*4+4] - 10016758: 89 44 8F 04 mov dword ptr [edi+ecx*4+4],eax - 1001675C: 8D 04 8D 00 00 00 lea eax,[ecx*4+00000000h] - 00 - 10016763: 03 F0 add esi,eax - 10016765: 03 F8 add edi,eax - 10016767: FF 24 95 70 67 01 jmp dword ptr [edx*4+10016770h] - 10 - 1001676E: 8B FF mov edi,edi - 10016770: 80 67 01 10 and byte ptr [edi+1],10h - 10016774: 88 67 01 mov byte ptr [edi+1],ah - 10016777: 10 98 67 01 10 AC adc byte ptr [eax+AC100167h],bl - 1001677D: 67 01 10 add dword ptr [bx+si],edx - 10016780: 8B 45 08 mov eax,dword ptr [ebp+8] - 10016783: 5E pop esi - 10016784: 5F pop edi - 10016785: C9 leave - 10016786: C3 ret - 10016787: 90 nop - 10016788: 8A 46 03 mov al,byte ptr [esi+3] - 1001678B: 88 47 03 mov byte ptr [edi+3],al - 1001678E: 8B 45 08 mov eax,dword ptr [ebp+8] - 10016791: 5E pop esi - 10016792: 5F pop edi - 10016793: C9 leave - 10016794: C3 ret - 10016795: 8D 49 00 lea ecx,[ecx] - 10016798: 8A 46 03 mov al,byte ptr [esi+3] - 1001679B: 88 47 03 mov byte ptr [edi+3],al - 1001679E: 8A 46 02 mov al,byte ptr [esi+2] - 100167A1: 88 47 02 mov byte ptr [edi+2],al - 100167A4: 8B 45 08 mov eax,dword ptr [ebp+8] - 100167A7: 5E pop esi - 100167A8: 5F pop edi - 100167A9: C9 leave - 100167AA: C3 ret - 100167AB: 90 nop - 100167AC: 8A 46 03 mov al,byte ptr [esi+3] - 100167AF: 88 47 03 mov byte ptr [edi+3],al - 100167B2: 8A 46 02 mov al,byte ptr [esi+2] - 100167B5: 88 47 02 mov byte ptr [edi+2],al - 100167B8: 8A 46 01 mov al,byte ptr [esi+1] - 100167BB: 88 47 01 mov byte ptr [edi+1],al - 100167BE: 8B 45 08 mov eax,dword ptr [ebp+8] - 100167C1: 5E pop esi - 100167C2: 5F pop edi - 100167C3: C9 leave - 100167C4: C3 ret - 100167C5: CC int 3 - 100167C6: CC int 3 - 100167C7: CC int 3 - 100167C8: 55 push ebp - 100167C9: 8B EC mov ebp,esp - 100167CB: 53 push ebx - 100167CC: 56 push esi - 100167CD: 57 push edi - 100167CE: 55 push ebp - 100167CF: 6A 00 push 0 - 100167D1: 6A 00 push 0 - 100167D3: 68 E0 67 01 10 push 100167E0h - 100167D8: FF 75 08 push dword ptr [ebp+8] - 100167DB: E8 7E 84 00 00 call 1001EC5E - 100167E0: 5D pop ebp - 100167E1: 5F pop edi - 100167E2: 5E pop esi - 100167E3: 5B pop ebx - 100167E4: 8B E5 mov esp,ebp - 100167E6: 5D pop ebp - 100167E7: C3 ret - 100167E8: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 100167EC: F7 41 04 06 00 00 test dword ptr [ecx+4],6 - 00 - 100167F3: B8 01 00 00 00 mov eax,1 - 100167F8: 74 32 je 1001682C - 100167FA: 8B 44 24 14 mov eax,dword ptr [esp+14h] - 100167FE: 8B 48 FC mov ecx,dword ptr [eax-4] - 10016801: 33 C8 xor ecx,eax - 10016803: E8 93 38 FF FF call 1000A09B - 10016808: 55 push ebp - 10016809: 8B 68 10 mov ebp,dword ptr [eax+10h] - 1001680C: 8B 50 28 mov edx,dword ptr [eax+28h] - 1001680F: 52 push edx - 10016810: 8B 50 24 mov edx,dword ptr [eax+24h] - 10016813: 52 push edx - 10016814: E8 14 00 00 00 call 1001682D - 10016819: 83 C4 08 add esp,8 - 1001681C: 5D pop ebp - 1001681D: 8B 44 24 08 mov eax,dword ptr [esp+8] - 10016821: 8B 54 24 10 mov edx,dword ptr [esp+10h] - 10016825: 89 02 mov dword ptr [edx],eax - 10016827: B8 03 00 00 00 mov eax,3 - 1001682C: C3 ret - 1001682D: 53 push ebx - 1001682E: 56 push esi - 1001682F: 57 push edi - 10016830: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 10016834: 55 push ebp - 10016835: 50 push eax - 10016836: 6A FE push 0FFFFFFFEh - 10016838: 68 E8 67 01 10 push 100167E8h - 1001683D: 64 FF 35 00 00 00 push dword ptr fs:[00000000h] - 00 - 10016844: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10016849: 33 C4 xor eax,esp - 1001684B: 50 push eax - 1001684C: 8D 44 24 04 lea eax,[esp+4] - 10016850: 64 A3 00 00 00 00 mov dword ptr fs:[00000000h],eax - 10016856: 8B 44 24 28 mov eax,dword ptr [esp+28h] - 1001685A: 8B 58 08 mov ebx,dword ptr [eax+8] - 1001685D: 8B 70 0C mov esi,dword ptr [eax+0Ch] - 10016860: 83 FE FF cmp esi,0FFFFFFFFh - 10016863: 74 3A je 1001689F - 10016865: 83 7C 24 2C FF cmp dword ptr [esp+2Ch],0FFFFFFFFh - 1001686A: 74 06 je 10016872 - 1001686C: 3B 74 24 2C cmp esi,dword ptr [esp+2Ch] - 10016870: 76 2D jbe 1001689F - 10016872: 8D 34 76 lea esi,[esi+esi*2] - 10016875: 8B 0C B3 mov ecx,dword ptr [ebx+esi*4] - 10016878: 89 4C 24 0C mov dword ptr [esp+0Ch],ecx - 1001687C: 89 48 0C mov dword ptr [eax+0Ch],ecx - 1001687F: 83 7C B3 04 00 cmp dword ptr [ebx+esi*4+4],0 - 10016884: 75 17 jne 1001689D - 10016886: 68 01 01 00 00 push 101h - 1001688B: 8B 44 B3 08 mov eax,dword ptr [ebx+esi*4+8] - 1001688F: E8 49 00 00 00 call 100168DD - 10016894: 8B 44 B3 08 mov eax,dword ptr [ebx+esi*4+8] - 10016898: E8 5F 00 00 00 call 100168FC - 1001689D: EB B7 jmp 10016856 - 1001689F: 8B 4C 24 04 mov ecx,dword ptr [esp+4] - 100168A3: 64 89 0D 00 00 00 mov dword ptr fs:[00000000h],ecx - 00 - 100168AA: 83 C4 18 add esp,18h - 100168AD: 5F pop edi - 100168AE: 5E pop esi - 100168AF: 5B pop ebx - 100168B0: C3 ret - 100168B1: 33 C0 xor eax,eax - 100168B3: 64 8B 0D 00 00 00 mov ecx,dword ptr fs:[00000000h] - 00 - 100168BA: 81 79 04 E8 67 01 cmp dword ptr [ecx+4],100167E8h - 10 - 100168C1: 75 10 jne 100168D3 - 100168C3: 8B 51 0C mov edx,dword ptr [ecx+0Ch] - 100168C6: 8B 52 0C mov edx,dword ptr [edx+0Ch] - 100168C9: 39 51 08 cmp dword ptr [ecx+8],edx - 100168CC: 75 05 jne 100168D3 - 100168CE: B8 01 00 00 00 mov eax,1 - 100168D3: C3 ret - 100168D4: 53 push ebx - 100168D5: 51 push ecx - 100168D6: BB 60 57 02 10 mov ebx,10025760h - 100168DB: EB 0B jmp 100168E8 - 100168DD: 53 push ebx - 100168DE: 51 push ecx - 100168DF: BB 60 57 02 10 mov ebx,10025760h - 100168E4: 8B 4C 24 0C mov ecx,dword ptr [esp+0Ch] - 100168E8: 89 4B 08 mov dword ptr [ebx+8],ecx - 100168EB: 89 43 04 mov dword ptr [ebx+4],eax - 100168EE: 89 6B 0C mov dword ptr [ebx+0Ch],ebp - 100168F1: 55 push ebp - 100168F2: 51 push ecx - 100168F3: 50 push eax - 100168F4: 58 pop eax - 100168F5: 59 pop ecx - 100168F6: 5D pop ebp - 100168F7: 59 pop ecx - 100168F8: 5B pop ebx - 100168F9: C2 04 00 ret 4 - 100168FC: FF D0 call eax - 100168FE: C3 ret - 100168FF: 83 25 DC 6B 02 10 and dword ptr ds:[10026BDCh],0 - 00 - 10016906: C3 ret - 10016907: 6A 10 push 10h - 10016909: 68 80 1E 02 10 push 10021E80h - 1001690E: E8 75 97 FF FF call 10010088 - 10016913: 33 C0 xor eax,eax - 10016915: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 10016918: 33 FF xor edi,edi - 1001691A: 3B DF cmp ebx,edi - 1001691C: 0F 95 C0 setne al - 1001691F: 3B C7 cmp eax,edi - 10016921: 75 1D jne 10016940 - 10016923: E8 21 87 FF FF call 1000F049 - 10016928: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1001692E: 57 push edi - 1001692F: 57 push edi - 10016930: 57 push edi - 10016931: 57 push edi - 10016932: 57 push edi - 10016933: E8 A9 86 FF FF call 1000EFE1 - 10016938: 83 C4 14 add esp,14h - 1001693B: 83 C8 FF or eax,0FFFFFFFFh - 1001693E: EB 53 jmp 10016993 - 10016940: 83 3D 18 6D 02 10 cmp dword ptr ds:[10026D18h],3 - 03 - 10016947: 75 38 jne 10016981 - 10016949: 6A 04 push 4 - 1001694B: E8 3E 8C FF FF call 1000F58E - 10016950: 59 pop ecx - 10016951: 89 7D FC mov dword ptr [ebp-4],edi - 10016954: 53 push ebx - 10016955: E8 67 8C FF FF call 1000F5C1 - 1001695A: 59 pop ecx - 1001695B: 89 45 E0 mov dword ptr [ebp-20h],eax - 1001695E: 3B C7 cmp eax,edi - 10016960: 74 0B je 1001696D - 10016962: 8B 73 FC mov esi,dword ptr [ebx-4] - 10016965: 83 EE 09 sub esi,9 - 10016968: 89 75 E4 mov dword ptr [ebp-1Ch],esi - 1001696B: EB 03 jmp 10016970 - 1001696D: 8B 75 E4 mov esi,dword ptr [ebp-1Ch] - 10016970: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 10016977: E8 25 00 00 00 call 100169A1 - 1001697C: 39 7D E0 cmp dword ptr [ebp-20h],edi - 1001697F: 75 10 jne 10016991 - 10016981: 53 push ebx - 10016982: 57 push edi - 10016983: FF 35 64 68 02 10 push dword ptr ds:[10026864h] - 10016989: FF 15 20 F1 01 10 call dword ptr ds:[1001F120h] - 1001698F: 8B F0 mov esi,eax - 10016991: 8B C6 mov eax,esi - 10016993: E8 35 97 FF FF call 100100CD - 10016998: C3 ret - 10016999: 33 FF xor edi,edi - 1001699B: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 1001699E: 8B 75 E4 mov esi,dword ptr [ebp-1Ch] - 100169A1: 6A 04 push 4 - 100169A3: E8 0C 8B FF FF call 1000F4B4 - 100169A8: 59 pop ecx - 100169A9: C3 ret - 100169AA: 8B FF mov edi,edi - 100169AC: 55 push ebp - 100169AD: 8B EC mov ebp,esp - 100169AF: 8B 45 08 mov eax,dword ptr [ebp+8] - 100169B2: A3 8C 6B 02 10 mov dword ptr ds:[10026B8Ch],eax - 100169B7: A3 90 6B 02 10 mov dword ptr ds:[10026B90h],eax - 100169BC: A3 94 6B 02 10 mov dword ptr ds:[10026B94h],eax - 100169C1: A3 98 6B 02 10 mov dword ptr ds:[10026B98h],eax - 100169C6: 5D pop ebp - 100169C7: C3 ret - 100169C8: 8B FF mov edi,edi - 100169CA: 55 push ebp - 100169CB: 8B EC mov ebp,esp - 100169CD: 8B 45 08 mov eax,dword ptr [ebp+8] - 100169D0: 8B 0D 5C 57 02 10 mov ecx,dword ptr ds:[1002575Ch] - 100169D6: 56 push esi - 100169D7: 39 50 04 cmp dword ptr [eax+4],edx - 100169DA: 74 0F je 100169EB - 100169DC: 8B F1 mov esi,ecx - 100169DE: 6B F6 0C imul esi,esi,0Ch - 100169E1: 03 75 08 add esi,dword ptr [ebp+8] - 100169E4: 83 C0 0C add eax,0Ch - 100169E7: 3B C6 cmp eax,esi - 100169E9: 72 EC jb 100169D7 - 100169EB: 6B C9 0C imul ecx,ecx,0Ch - 100169EE: 03 4D 08 add ecx,dword ptr [ebp+8] - 100169F1: 5E pop esi - 100169F2: 3B C1 cmp eax,ecx - 100169F4: 73 05 jae 100169FB - 100169F6: 39 50 04 cmp dword ptr [eax+4],edx - 100169F9: 74 02 je 100169FD - 100169FB: 33 C0 xor eax,eax - 100169FD: 5D pop ebp - 100169FE: C3 ret - 100169FF: FF 35 94 6B 02 10 push dword ptr ds:[10026B94h] - 10016A05: E8 0C 68 FF FF call 1000D216 - 10016A0A: 59 pop ecx - 10016A0B: C3 ret - 10016A0C: 6A 20 push 20h - 10016A0E: 68 A0 1E 02 10 push 10021EA0h - 10016A13: E8 70 96 FF FF call 10010088 - 10016A18: 33 FF xor edi,edi - 10016A1A: 89 7D E4 mov dword ptr [ebp-1Ch],edi - 10016A1D: 89 7D D8 mov dword ptr [ebp-28h],edi - 10016A20: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 10016A23: 83 FB 0B cmp ebx,0Bh - 10016A26: 7F 4C jg 10016A74 - 10016A28: 74 15 je 10016A3F - 10016A2A: 8B C3 mov eax,ebx - 10016A2C: 6A 02 push 2 - 10016A2E: 59 pop ecx - 10016A2F: 2B C1 sub eax,ecx - 10016A31: 74 22 je 10016A55 - 10016A33: 2B C1 sub eax,ecx - 10016A35: 74 08 je 10016A3F - 10016A37: 2B C1 sub eax,ecx - 10016A39: 74 64 je 10016A9F - 10016A3B: 2B C1 sub eax,ecx - 10016A3D: 75 44 jne 10016A83 - 10016A3F: E8 A5 69 FF FF call 1000D3E9 - 10016A44: 8B F8 mov edi,eax - 10016A46: 89 7D D8 mov dword ptr [ebp-28h],edi - 10016A49: 85 FF test edi,edi - 10016A4B: 75 14 jne 10016A61 - 10016A4D: 83 C8 FF or eax,0FFFFFFFFh - 10016A50: E9 61 01 00 00 jmp 10016BB6 - 10016A55: BE 8C 6B 02 10 mov esi,10026B8Ch - 10016A5A: A1 8C 6B 02 10 mov eax,dword ptr ds:[10026B8Ch] - 10016A5F: EB 60 jmp 10016AC1 - 10016A61: FF 77 5C push dword ptr [edi+5Ch] - 10016A64: 8B D3 mov edx,ebx - 10016A66: E8 5D FF FF FF call 100169C8 - 10016A6B: 8B F0 mov esi,eax - 10016A6D: 83 C6 08 add esi,8 - 10016A70: 8B 06 mov eax,dword ptr [esi] - 10016A72: EB 5A jmp 10016ACE - 10016A74: 8B C3 mov eax,ebx - 10016A76: 83 E8 0F sub eax,0Fh - 10016A79: 74 3C je 10016AB7 - 10016A7B: 83 E8 06 sub eax,6 - 10016A7E: 74 2B je 10016AAB - 10016A80: 48 dec eax - 10016A81: 74 1C je 10016A9F - 10016A83: E8 C1 85 FF FF call 1000F049 - 10016A88: C7 00 16 00 00 00 mov dword ptr [eax],16h - 10016A8E: 33 C0 xor eax,eax - 10016A90: 50 push eax - 10016A91: 50 push eax - 10016A92: 50 push eax - 10016A93: 50 push eax - 10016A94: 50 push eax - 10016A95: E8 47 85 FF FF call 1000EFE1 - 10016A9A: 83 C4 14 add esp,14h - 10016A9D: EB AE jmp 10016A4D - 10016A9F: BE 94 6B 02 10 mov esi,10026B94h - 10016AA4: A1 94 6B 02 10 mov eax,dword ptr ds:[10026B94h] - 10016AA9: EB 16 jmp 10016AC1 - 10016AAB: BE 90 6B 02 10 mov esi,10026B90h - 10016AB0: A1 90 6B 02 10 mov eax,dword ptr ds:[10026B90h] - 10016AB5: EB 0A jmp 10016AC1 - 10016AB7: BE 98 6B 02 10 mov esi,10026B98h - 10016ABC: A1 98 6B 02 10 mov eax,dword ptr ds:[10026B98h] - 10016AC1: C7 45 E4 01 00 00 mov dword ptr [ebp-1Ch],1 - 00 - 10016AC8: 50 push eax - 10016AC9: E8 48 67 FF FF call 1000D216 - 10016ACE: 89 45 E0 mov dword ptr [ebp-20h],eax - 10016AD1: 59 pop ecx - 10016AD2: 33 C0 xor eax,eax - 10016AD4: 83 7D E0 01 cmp dword ptr [ebp-20h],1 - 10016AD8: 0F 84 D8 00 00 00 je 10016BB6 - 10016ADE: 39 45 E0 cmp dword ptr [ebp-20h],eax - 10016AE1: 75 07 jne 10016AEA - 10016AE3: 6A 03 push 3 - 10016AE5: E8 8F C2 FF FF call 10012D79 - 10016AEA: 39 45 E4 cmp dword ptr [ebp-1Ch],eax - 10016AED: 74 07 je 10016AF6 - 10016AEF: 50 push eax - 10016AF0: E8 99 8A FF FF call 1000F58E - 10016AF5: 59 pop ecx - 10016AF6: 33 C0 xor eax,eax - 10016AF8: 89 45 FC mov dword ptr [ebp-4],eax - 10016AFB: 83 FB 08 cmp ebx,8 - 10016AFE: 74 0A je 10016B0A - 10016B00: 83 FB 0B cmp ebx,0Bh - 10016B03: 74 05 je 10016B0A - 10016B05: 83 FB 04 cmp ebx,4 - 10016B08: 75 1B jne 10016B25 - 10016B0A: 8B 4F 60 mov ecx,dword ptr [edi+60h] - 10016B0D: 89 4D D4 mov dword ptr [ebp-2Ch],ecx - 10016B10: 89 47 60 mov dword ptr [edi+60h],eax - 10016B13: 83 FB 08 cmp ebx,8 - 10016B16: 75 40 jne 10016B58 - 10016B18: 8B 4F 64 mov ecx,dword ptr [edi+64h] - 10016B1B: 89 4D D0 mov dword ptr [ebp-30h],ecx - 10016B1E: C7 47 64 8C 00 00 mov dword ptr [edi+64h],8Ch - 00 - 10016B25: 83 FB 08 cmp ebx,8 - 10016B28: 75 2E jne 10016B58 - 10016B2A: 8B 0D 50 57 02 10 mov ecx,dword ptr ds:[10025750h] - 10016B30: 89 4D DC mov dword ptr [ebp-24h],ecx - 10016B33: 8B 0D 54 57 02 10 mov ecx,dword ptr ds:[10025754h] - 10016B39: 8B 15 50 57 02 10 mov edx,dword ptr ds:[10025750h] - 10016B3F: 03 CA add ecx,edx - 10016B41: 39 4D DC cmp dword ptr [ebp-24h],ecx - 10016B44: 7D 19 jge 10016B5F - 10016B46: 8B 4D DC mov ecx,dword ptr [ebp-24h] - 10016B49: 6B C9 0C imul ecx,ecx,0Ch - 10016B4C: 8B 57 5C mov edx,dword ptr [edi+5Ch] - 10016B4F: 89 44 11 08 mov dword ptr [ecx+edx+8],eax - 10016B53: FF 45 DC inc dword ptr [ebp-24h] - 10016B56: EB DB jmp 10016B33 - 10016B58: E8 B0 66 FF FF call 1000D20D - 10016B5D: 89 06 mov dword ptr [esi],eax - 10016B5F: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 10016B66: E8 15 00 00 00 call 10016B80 - 10016B6B: 83 FB 08 cmp ebx,8 - 10016B6E: 75 1F jne 10016B8F - 10016B70: FF 77 64 push dword ptr [edi+64h] - 10016B73: 53 push ebx - 10016B74: FF 55 E0 call dword ptr [ebp-20h] - 10016B77: 59 pop ecx - 10016B78: EB 19 jmp 10016B93 - 10016B7A: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 10016B7D: 8B 7D D8 mov edi,dword ptr [ebp-28h] - 10016B80: 83 7D E4 00 cmp dword ptr [ebp-1Ch],0 - 10016B84: 74 08 je 10016B8E - 10016B86: 6A 00 push 0 - 10016B88: E8 27 89 FF FF call 1000F4B4 - 10016B8D: 59 pop ecx - 10016B8E: C3 ret - 10016B8F: 53 push ebx - 10016B90: FF 55 E0 call dword ptr [ebp-20h] - 10016B93: 59 pop ecx - 10016B94: 83 FB 08 cmp ebx,8 - 10016B97: 74 0A je 10016BA3 - 10016B99: 83 FB 0B cmp ebx,0Bh - 10016B9C: 74 05 je 10016BA3 - 10016B9E: 83 FB 04 cmp ebx,4 - 10016BA1: 75 11 jne 10016BB4 - 10016BA3: 8B 45 D4 mov eax,dword ptr [ebp-2Ch] - 10016BA6: 89 47 60 mov dword ptr [edi+60h],eax - 10016BA9: 83 FB 08 cmp ebx,8 - 10016BAC: 75 06 jne 10016BB4 - 10016BAE: 8B 45 D0 mov eax,dword ptr [ebp-30h] - 10016BB1: 89 47 64 mov dword ptr [edi+64h],eax - 10016BB4: 33 C0 xor eax,eax - 10016BB6: E8 12 95 FF FF call 100100CD - 10016BBB: C3 ret - 10016BBC: 8B FF mov edi,edi - 10016BBE: 55 push ebp - 10016BBF: 8B EC mov ebp,esp - 10016BC1: 83 EC 14 sub esp,14h - 10016BC4: 53 push ebx - 10016BC5: 56 push esi - 10016BC6: 57 push edi - 10016BC7: E8 41 66 FF FF call 1000D20D - 10016BCC: 83 65 FC 00 and dword ptr [ebp-4],0 - 10016BD0: 83 3D A0 6B 02 10 cmp dword ptr ds:[10026BA0h],0 - 00 - 10016BD7: 8B D8 mov ebx,eax - 10016BD9: 0F 85 8E 00 00 00 jne 10016C6D - 10016BDF: 68 2C 09 02 10 push 1002092Ch - 10016BE4: FF 15 24 F1 01 10 call dword ptr ds:[1001F124h] - 10016BEA: 8B F8 mov edi,eax - 10016BEC: 85 FF test edi,edi - 10016BEE: 0F 84 2A 01 00 00 je 10016D1E - 10016BF4: 8B 35 80 F0 01 10 mov esi,dword ptr ds:[1001F080h] - 10016BFA: 68 20 09 02 10 push 10020920h - 10016BFF: 57 push edi - 10016C00: FF D6 call esi - 10016C02: 85 C0 test eax,eax - 10016C04: 0F 84 14 01 00 00 je 10016D1E - 10016C0A: 50 push eax - 10016C0B: E8 8B 65 FF FF call 1000D19B - 10016C10: C7 04 24 10 09 02 mov dword ptr [esp],10020910h - 10 - 10016C17: 57 push edi - 10016C18: A3 A0 6B 02 10 mov dword ptr ds:[10026BA0h],eax - 10016C1D: FF D6 call esi - 10016C1F: 50 push eax - 10016C20: E8 76 65 FF FF call 1000D19B - 10016C25: C7 04 24 FC 08 02 mov dword ptr [esp],100208FCh - 10 - 10016C2C: 57 push edi - 10016C2D: A3 A4 6B 02 10 mov dword ptr ds:[10026BA4h],eax - 10016C32: FF D6 call esi - 10016C34: 50 push eax - 10016C35: E8 61 65 FF FF call 1000D19B - 10016C3A: C7 04 24 E0 08 02 mov dword ptr [esp],100208E0h - 10 - 10016C41: 57 push edi - 10016C42: A3 A8 6B 02 10 mov dword ptr ds:[10026BA8h],eax - 10016C47: FF D6 call esi - 10016C49: 50 push eax - 10016C4A: E8 4C 65 FF FF call 1000D19B - 10016C4F: 59 pop ecx - 10016C50: A3 B0 6B 02 10 mov dword ptr ds:[10026BB0h],eax - 10016C55: 85 C0 test eax,eax - 10016C57: 74 14 je 10016C6D - 10016C59: 68 C8 08 02 10 push 100208C8h - 10016C5E: 57 push edi - 10016C5F: FF D6 call esi - 10016C61: 50 push eax - 10016C62: E8 34 65 FF FF call 1000D19B - 10016C67: 59 pop ecx - 10016C68: A3 AC 6B 02 10 mov dword ptr ds:[10026BACh],eax - 10016C6D: A1 AC 6B 02 10 mov eax,dword ptr ds:[10026BACh] - 10016C72: 3B C3 cmp eax,ebx - 10016C74: 74 4F je 10016CC5 - 10016C76: 39 1D B0 6B 02 10 cmp dword ptr ds:[10026BB0h],ebx - 10016C7C: 74 47 je 10016CC5 - 10016C7E: 50 push eax - 10016C7F: E8 92 65 FF FF call 1000D216 - 10016C84: FF 35 B0 6B 02 10 push dword ptr ds:[10026BB0h] - 10016C8A: 8B F0 mov esi,eax - 10016C8C: E8 85 65 FF FF call 1000D216 - 10016C91: 59 pop ecx - 10016C92: 59 pop ecx - 10016C93: 8B F8 mov edi,eax - 10016C95: 85 F6 test esi,esi - 10016C97: 74 2C je 10016CC5 - 10016C99: 85 FF test edi,edi - 10016C9B: 74 28 je 10016CC5 - 10016C9D: FF D6 call esi - 10016C9F: 85 C0 test eax,eax - 10016CA1: 74 19 je 10016CBC - 10016CA3: 8D 4D F8 lea ecx,[ebp-8] - 10016CA6: 51 push ecx - 10016CA7: 6A 0C push 0Ch - 10016CA9: 8D 4D EC lea ecx,[ebp-14h] - 10016CAC: 51 push ecx - 10016CAD: 6A 01 push 1 - 10016CAF: 50 push eax - 10016CB0: FF D7 call edi - 10016CB2: 85 C0 test eax,eax - 10016CB4: 74 06 je 10016CBC - 10016CB6: F6 45 F4 01 test byte ptr [ebp-0Ch],1 - 10016CBA: 75 09 jne 10016CC5 - 10016CBC: 81 4D 10 00 00 20 or dword ptr [ebp+10h],200000h - 00 - 10016CC3: EB 39 jmp 10016CFE - 10016CC5: A1 A4 6B 02 10 mov eax,dword ptr ds:[10026BA4h] - 10016CCA: 3B C3 cmp eax,ebx - 10016CCC: 74 30 je 10016CFE - 10016CCE: 50 push eax - 10016CCF: E8 42 65 FF FF call 1000D216 - 10016CD4: 59 pop ecx - 10016CD5: 85 C0 test eax,eax - 10016CD7: 74 25 je 10016CFE - 10016CD9: FF D0 call eax - 10016CDB: 89 45 FC mov dword ptr [ebp-4],eax - 10016CDE: 85 C0 test eax,eax - 10016CE0: 74 1C je 10016CFE - 10016CE2: A1 A8 6B 02 10 mov eax,dword ptr ds:[10026BA8h] - 10016CE7: 3B C3 cmp eax,ebx - 10016CE9: 74 13 je 10016CFE - 10016CEB: 50 push eax - 10016CEC: E8 25 65 FF FF call 1000D216 - 10016CF1: 59 pop ecx - 10016CF2: 85 C0 test eax,eax - 10016CF4: 74 08 je 10016CFE - 10016CF6: FF 75 FC push dword ptr [ebp-4] - 10016CF9: FF D0 call eax - 10016CFB: 89 45 FC mov dword ptr [ebp-4],eax - 10016CFE: FF 35 A0 6B 02 10 push dword ptr ds:[10026BA0h] - 10016D04: E8 0D 65 FF FF call 1000D216 - 10016D09: 59 pop ecx - 10016D0A: 85 C0 test eax,eax - 10016D0C: 74 10 je 10016D1E - 10016D0E: FF 75 10 push dword ptr [ebp+10h] - 10016D11: FF 75 0C push dword ptr [ebp+0Ch] - 10016D14: FF 75 08 push dword ptr [ebp+8] - 10016D17: FF 75 FC push dword ptr [ebp-4] - 10016D1A: FF D0 call eax - 10016D1C: EB 02 jmp 10016D20 - 10016D1E: 33 C0 xor eax,eax - 10016D20: 5F pop edi - 10016D21: 5E pop esi - 10016D22: 5B pop ebx - 10016D23: C9 leave - 10016D24: C3 ret - 10016D25: 8B FF mov edi,edi - 10016D27: 55 push ebp - 10016D28: 8B EC mov ebp,esp - 10016D2A: 8B 45 08 mov eax,dword ptr [ebp+8] - 10016D2D: 53 push ebx - 10016D2E: 33 DB xor ebx,ebx - 10016D30: 56 push esi - 10016D31: 57 push edi - 10016D32: 3B C3 cmp eax,ebx - 10016D34: 74 07 je 10016D3D - 10016D36: 8B 7D 0C mov edi,dword ptr [ebp+0Ch] - 10016D39: 3B FB cmp edi,ebx - 10016D3B: 77 1B ja 10016D58 - 10016D3D: E8 07 83 FF FF call 1000F049 - 10016D42: 6A 16 push 16h - 10016D44: 5E pop esi - 10016D45: 89 30 mov dword ptr [eax],esi - 10016D47: 53 push ebx - 10016D48: 53 push ebx - 10016D49: 53 push ebx - 10016D4A: 53 push ebx - 10016D4B: 53 push ebx - 10016D4C: E8 90 82 FF FF call 1000EFE1 - 10016D51: 83 C4 14 add esp,14h - 10016D54: 8B C6 mov eax,esi - 10016D56: EB 3C jmp 10016D94 - 10016D58: 8B 75 10 mov esi,dword ptr [ebp+10h] - 10016D5B: 3B F3 cmp esi,ebx - 10016D5D: 75 04 jne 10016D63 - 10016D5F: 88 18 mov byte ptr [eax],bl - 10016D61: EB DA jmp 10016D3D - 10016D63: 8B D0 mov edx,eax - 10016D65: 38 1A cmp byte ptr [edx],bl - 10016D67: 74 04 je 10016D6D - 10016D69: 42 inc edx - 10016D6A: 4F dec edi - 10016D6B: 75 F8 jne 10016D65 - 10016D6D: 3B FB cmp edi,ebx - 10016D6F: 74 EE je 10016D5F - 10016D71: 8A 0E mov cl,byte ptr [esi] - 10016D73: 88 0A mov byte ptr [edx],cl - 10016D75: 42 inc edx - 10016D76: 46 inc esi - 10016D77: 3A CB cmp cl,bl - 10016D79: 74 03 je 10016D7E - 10016D7B: 4F dec edi - 10016D7C: 75 F3 jne 10016D71 - 10016D7E: 3B FB cmp edi,ebx - 10016D80: 75 10 jne 10016D92 - 10016D82: 88 18 mov byte ptr [eax],bl - 10016D84: E8 C0 82 FF FF call 1000F049 - 10016D89: 6A 22 push 22h - 10016D8B: 59 pop ecx - 10016D8C: 89 08 mov dword ptr [eax],ecx - 10016D8E: 8B F1 mov esi,ecx - 10016D90: EB B5 jmp 10016D47 - 10016D92: 33 C0 xor eax,eax - 10016D94: 5F pop edi - 10016D95: 5E pop esi - 10016D96: 5B pop ebx - 10016D97: 5D pop ebp - 10016D98: C3 ret - 10016D99: 8B FF mov edi,edi - 10016D9B: 55 push ebp - 10016D9C: 8B EC mov ebp,esp - 10016D9E: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 10016DA1: 56 push esi - 10016DA2: 33 F6 xor esi,esi - 10016DA4: 3B CE cmp ecx,esi - 10016DA6: 7C 1E jl 10016DC6 - 10016DA8: 83 F9 02 cmp ecx,2 - 10016DAB: 7E 0C jle 10016DB9 - 10016DAD: 83 F9 03 cmp ecx,3 - 10016DB0: 75 14 jne 10016DC6 - 10016DB2: A1 F4 61 02 10 mov eax,dword ptr ds:[100261F4h] - 10016DB7: EB 28 jmp 10016DE1 - 10016DB9: A1 F4 61 02 10 mov eax,dword ptr ds:[100261F4h] - 10016DBE: 89 0D F4 61 02 10 mov dword ptr ds:[100261F4h],ecx - 10016DC4: EB 1B jmp 10016DE1 - 10016DC6: E8 7E 82 FF FF call 1000F049 - 10016DCB: 56 push esi - 10016DCC: 56 push esi - 10016DCD: 56 push esi - 10016DCE: 56 push esi - 10016DCF: 56 push esi - 10016DD0: C7 00 16 00 00 00 mov dword ptr [eax],16h - 10016DD6: E8 06 82 FF FF call 1000EFE1 - 10016DDB: 83 C4 14 add esp,14h - 10016DDE: 83 C8 FF or eax,0FFFFFFFFh - 10016DE1: 5E pop esi - 10016DE2: 5D pop ebp - 10016DE3: C3 ret - 10016DE4: 8B FF mov edi,edi - 10016DE6: 55 push ebp - 10016DE7: 8B EC mov ebp,esp - 10016DE9: 83 EC 10 sub esp,10h - 10016DEC: FF 75 0C push dword ptr [ebp+0Ch] - 10016DEF: 8D 4D F0 lea ecx,[ebp-10h] - 10016DF2: E8 05 39 FF FF call 1000A6FC - 10016DF7: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 10016DFA: 83 B8 AC 00 00 00 cmp dword ptr [eax+000000ACh],1 - 01 - 10016E01: 7E 13 jle 10016E16 - 10016E03: 8D 45 F0 lea eax,[ebp-10h] - 10016E06: 50 push eax - 10016E07: 6A 04 push 4 - 10016E09: FF 75 08 push dword ptr [ebp+8] - 10016E0C: E8 0E 42 00 00 call 1001B01F - 10016E11: 83 C4 0C add esp,0Ch - 10016E14: EB 10 jmp 10016E26 - 10016E16: 8B 80 C8 00 00 00 mov eax,dword ptr [eax+000000C8h] - 10016E1C: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 10016E1F: 0F B7 04 48 movzx eax,word ptr [eax+ecx*2] - 10016E23: 83 E0 04 and eax,4 - 10016E26: 80 7D FC 00 cmp byte ptr [ebp-4],0 - 10016E2A: 74 07 je 10016E33 - 10016E2C: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 10016E2F: 83 61 70 FD and dword ptr [ecx+70h],0FFFFFFFDh - 10016E33: C9 leave - 10016E34: C3 ret - 10016E35: 8B FF mov edi,edi - 10016E37: 55 push ebp - 10016E38: 8B EC mov ebp,esp - 10016E3A: 83 3D D8 69 02 10 cmp dword ptr ds:[100269D8h],0 - 00 - 10016E41: 75 12 jne 10016E55 - 10016E43: 8B 45 08 mov eax,dword ptr [ebp+8] - 10016E46: 8B 0D 50 56 02 10 mov ecx,dword ptr ds:[10025650h] - 10016E4C: 0F B7 04 41 movzx eax,word ptr [ecx+eax*2] - 10016E50: 83 E0 04 and eax,4 - 10016E53: 5D pop ebp - 10016E54: C3 ret - 10016E55: 6A 00 push 0 - 10016E57: FF 75 08 push dword ptr [ebp+8] - 10016E5A: E8 85 FF FF FF call 10016DE4 - 10016E5F: 59 pop ecx - 10016E60: 59 pop ecx - 10016E61: 5D pop ebp - 10016E62: C3 ret - 10016E63: 8B FF mov edi,edi - 10016E65: 55 push ebp - 10016E66: 8B EC mov ebp,esp - 10016E68: 83 EC 10 sub esp,10h - 10016E6B: FF 75 0C push dword ptr [ebp+0Ch] - 10016E6E: 8D 4D F0 lea ecx,[ebp-10h] - 10016E71: E8 86 38 FF FF call 1000A6FC - 10016E76: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 10016E79: 83 B8 AC 00 00 00 cmp dword ptr [eax+000000ACh],1 - 01 - 10016E80: 7E 16 jle 10016E98 - 10016E82: 8D 45 F0 lea eax,[ebp-10h] - 10016E85: 50 push eax - 10016E86: 68 80 00 00 00 push 80h - 10016E8B: FF 75 08 push dword ptr [ebp+8] - 10016E8E: E8 8C 41 00 00 call 1001B01F - 10016E93: 83 C4 0C add esp,0Ch - 10016E96: EB 12 jmp 10016EAA - 10016E98: 8B 80 C8 00 00 00 mov eax,dword ptr [eax+000000C8h] - 10016E9E: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 10016EA1: 0F B7 04 48 movzx eax,word ptr [eax+ecx*2] - 10016EA5: 25 80 00 00 00 and eax,80h - 10016EAA: 80 7D FC 00 cmp byte ptr [ebp-4],0 - 10016EAE: 74 07 je 10016EB7 - 10016EB0: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 10016EB3: 83 61 70 FD and dword ptr [ecx+70h],0FFFFFFFDh - 10016EB7: C9 leave - 10016EB8: C3 ret - 10016EB9: 8B FF mov edi,edi - 10016EBB: 55 push ebp - 10016EBC: 8B EC mov ebp,esp - 10016EBE: 83 3D D8 69 02 10 cmp dword ptr ds:[100269D8h],0 - 00 - 10016EC5: 75 14 jne 10016EDB - 10016EC7: 8B 45 08 mov eax,dword ptr [ebp+8] - 10016ECA: 8B 0D 50 56 02 10 mov ecx,dword ptr ds:[10025650h] - 10016ED0: 0F B7 04 41 movzx eax,word ptr [ecx+eax*2] - 10016ED4: 25 80 00 00 00 and eax,80h - 10016ED9: 5D pop ebp - 10016EDA: C3 ret - 10016EDB: 6A 00 push 0 - 10016EDD: FF 75 08 push dword ptr [ebp+8] - 10016EE0: E8 7E FF FF FF call 10016E63 - 10016EE5: 59 pop ecx - 10016EE6: 59 pop ecx - 10016EE7: 5D pop ebp - 10016EE8: C3 ret - 10016EE9: 8B FF mov edi,edi - 10016EEB: 55 push ebp - 10016EEC: 8B EC mov ebp,esp - 10016EEE: 51 push ecx - 10016EEF: 51 push ecx - 10016EF0: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 10016EF3: 56 push esi - 10016EF4: 8B 75 08 mov esi,dword ptr [ebp+8] - 10016EF7: 89 45 F8 mov dword ptr [ebp-8],eax - 10016EFA: 8B 45 10 mov eax,dword ptr [ebp+10h] - 10016EFD: 57 push edi - 10016EFE: 56 push esi - 10016EFF: 89 45 FC mov dword ptr [ebp-4],eax - 10016F02: E8 FF 11 00 00 call 10018106 - 10016F07: 83 CF FF or edi,0FFFFFFFFh - 10016F0A: 59 pop ecx - 10016F0B: 3B C7 cmp eax,edi - 10016F0D: 75 11 jne 10016F20 - 10016F0F: E8 35 81 FF FF call 1000F049 - 10016F14: C7 00 09 00 00 00 mov dword ptr [eax],9 - 10016F1A: 8B C7 mov eax,edi - 10016F1C: 8B D7 mov edx,edi - 10016F1E: EB 4A jmp 10016F6A - 10016F20: FF 75 14 push dword ptr [ebp+14h] - 10016F23: 8D 4D FC lea ecx,[ebp-4] - 10016F26: 51 push ecx - 10016F27: FF 75 F8 push dword ptr [ebp-8] - 10016F2A: 50 push eax - 10016F2B: FF 15 2C F1 01 10 call dword ptr ds:[1001F12Ch] - 10016F31: 89 45 F8 mov dword ptr [ebp-8],eax - 10016F34: 3B C7 cmp eax,edi - 10016F36: 75 13 jne 10016F4B - 10016F38: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 10016F3E: 85 C0 test eax,eax - 10016F40: 74 09 je 10016F4B - 10016F42: 50 push eax - 10016F43: E8 27 81 FF FF call 1000F06F - 10016F48: 59 pop ecx - 10016F49: EB CF jmp 10016F1A - 10016F4B: 8B C6 mov eax,esi - 10016F4D: C1 F8 05 sar eax,5 - 10016F50: 8B 04 85 00 6C 02 mov eax,dword ptr [eax*4+10026C00h] - 10 - 10016F57: 83 E6 1F and esi,1Fh - 10016F5A: C1 E6 06 shl esi,6 - 10016F5D: 8D 44 30 04 lea eax,[eax+esi+4] - 10016F61: 80 20 FD and byte ptr [eax],0FDh - 10016F64: 8B 45 F8 mov eax,dword ptr [ebp-8] - 10016F67: 8B 55 FC mov edx,dword ptr [ebp-4] - 10016F6A: 5F pop edi - 10016F6B: 5E pop esi - 10016F6C: C9 leave - 10016F6D: C3 ret - 10016F6E: 6A 14 push 14h - 10016F70: 68 C0 1E 02 10 push 10021EC0h - 10016F75: E8 0E 91 FF FF call 10010088 - 10016F7A: 83 CE FF or esi,0FFFFFFFFh - 10016F7D: 89 75 DC mov dword ptr [ebp-24h],esi - 10016F80: 89 75 E0 mov dword ptr [ebp-20h],esi - 10016F83: 8B 45 08 mov eax,dword ptr [ebp+8] - 10016F86: 83 F8 FE cmp eax,0FFFFFFFEh - 10016F89: 75 1C jne 10016FA7 - 10016F8B: E8 CC 80 FF FF call 1000F05C - 10016F90: 83 20 00 and dword ptr [eax],0 - 10016F93: E8 B1 80 FF FF call 1000F049 - 10016F98: C7 00 09 00 00 00 mov dword ptr [eax],9 - 10016F9E: 8B C6 mov eax,esi - 10016FA0: 8B D6 mov edx,esi - 10016FA2: E9 D0 00 00 00 jmp 10017077 - 10016FA7: 33 FF xor edi,edi - 10016FA9: 3B C7 cmp eax,edi - 10016FAB: 7C 08 jl 10016FB5 - 10016FAD: 3B 05 F4 6B 02 10 cmp eax,dword ptr ds:[10026BF4h] - 10016FB3: 72 21 jb 10016FD6 - 10016FB5: E8 A2 80 FF FF call 1000F05C - 10016FBA: 89 38 mov dword ptr [eax],edi - 10016FBC: E8 88 80 FF FF call 1000F049 - 10016FC1: C7 00 09 00 00 00 mov dword ptr [eax],9 - 10016FC7: 57 push edi - 10016FC8: 57 push edi - 10016FC9: 57 push edi - 10016FCA: 57 push edi - 10016FCB: 57 push edi - 10016FCC: E8 10 80 FF FF call 1000EFE1 - 10016FD1: 83 C4 14 add esp,14h - 10016FD4: EB C8 jmp 10016F9E - 10016FD6: 8B C8 mov ecx,eax - 10016FD8: C1 F9 05 sar ecx,5 - 10016FDB: 8D 1C 8D 00 6C 02 lea ebx,[ecx*4+10026C00h] - 10 - 10016FE2: 8B F0 mov esi,eax - 10016FE4: 83 E6 1F and esi,1Fh - 10016FE7: C1 E6 06 shl esi,6 - 10016FEA: 8B 0B mov ecx,dword ptr [ebx] - 10016FEC: 0F BE 4C 31 04 movsx ecx,byte ptr [ecx+esi+4] - 10016FF1: 83 E1 01 and ecx,1 - 10016FF4: 75 26 jne 1001701C - 10016FF6: E8 61 80 FF FF call 1000F05C - 10016FFB: 89 38 mov dword ptr [eax],edi - 10016FFD: E8 47 80 FF FF call 1000F049 - 10017002: C7 00 09 00 00 00 mov dword ptr [eax],9 - 10017008: 57 push edi - 10017009: 57 push edi - 1001700A: 57 push edi - 1001700B: 57 push edi - 1001700C: 57 push edi - 1001700D: E8 CF 7F FF FF call 1000EFE1 - 10017012: 83 C4 14 add esp,14h - 10017015: 83 CA FF or edx,0FFFFFFFFh - 10017018: 8B C2 mov eax,edx - 1001701A: EB 5B jmp 10017077 - 1001701C: 50 push eax - 1001701D: E8 5B 11 00 00 call 1001817D - 10017022: 59 pop ecx - 10017023: 89 7D FC mov dword ptr [ebp-4],edi - 10017026: 8B 03 mov eax,dword ptr [ebx] - 10017028: F6 44 30 04 01 test byte ptr [eax+esi+4],1 - 1001702D: 74 1C je 1001704B - 1001702F: FF 75 14 push dword ptr [ebp+14h] - 10017032: FF 75 10 push dword ptr [ebp+10h] - 10017035: FF 75 0C push dword ptr [ebp+0Ch] - 10017038: FF 75 08 push dword ptr [ebp+8] - 1001703B: E8 A9 FE FF FF call 10016EE9 - 10017040: 83 C4 10 add esp,10h - 10017043: 89 45 DC mov dword ptr [ebp-24h],eax - 10017046: 89 55 E0 mov dword ptr [ebp-20h],edx - 10017049: EB 1A jmp 10017065 - 1001704B: E8 F9 7F FF FF call 1000F049 - 10017050: C7 00 09 00 00 00 mov dword ptr [eax],9 - 10017056: E8 01 80 FF FF call 1000F05C - 1001705B: 89 38 mov dword ptr [eax],edi - 1001705D: 83 4D DC FF or dword ptr [ebp-24h],0FFFFFFFFh - 10017061: 83 4D E0 FF or dword ptr [ebp-20h],0FFFFFFFFh - 10017065: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1001706C: E8 0C 00 00 00 call 1001707D - 10017071: 8B 45 DC mov eax,dword ptr [ebp-24h] - 10017074: 8B 55 E0 mov edx,dword ptr [ebp-20h] - 10017077: E8 51 90 FF FF call 100100CD - 1001707C: C3 ret - 1001707D: FF 75 08 push dword ptr [ebp+8] - 10017080: E8 98 11 00 00 call 1001821D - 10017085: 59 pop ecx - 10017086: C3 ret - 10017087: 8B FF mov edi,edi - 10017089: 55 push ebp - 1001708A: 8B EC mov ebp,esp - 1001708C: B8 E4 1A 00 00 mov eax,1AE4h - 10017091: E8 6A 24 00 00 call 10019500 - 10017096: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1001709B: 33 C5 xor eax,ebp - 1001709D: 89 45 FC mov dword ptr [ebp-4],eax - 100170A0: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 100170A3: 56 push esi - 100170A4: 33 F6 xor esi,esi - 100170A6: 89 85 34 E5 FF FF mov dword ptr [ebp+FFFFE534h],eax - 100170AC: 89 B5 38 E5 FF FF mov dword ptr [ebp+FFFFE538h],esi - 100170B2: 89 B5 30 E5 FF FF mov dword ptr [ebp+FFFFE530h],esi - 100170B8: 39 75 10 cmp dword ptr [ebp+10h],esi - 100170BB: 75 07 jne 100170C4 - 100170BD: 33 C0 xor eax,eax - 100170BF: E9 E9 06 00 00 jmp 100177AD - 100170C4: 3B C6 cmp eax,esi - 100170C6: 75 27 jne 100170EF - 100170C8: E8 8F 7F FF FF call 1000F05C - 100170CD: 89 30 mov dword ptr [eax],esi - 100170CF: E8 75 7F FF FF call 1000F049 - 100170D4: 56 push esi - 100170D5: 56 push esi - 100170D6: 56 push esi - 100170D7: 56 push esi - 100170D8: 56 push esi - 100170D9: C7 00 16 00 00 00 mov dword ptr [eax],16h - 100170DF: E8 FD 7E FF FF call 1000EFE1 - 100170E4: 83 C4 14 add esp,14h - 100170E7: 83 C8 FF or eax,0FFFFFFFFh - 100170EA: E9 BE 06 00 00 jmp 100177AD - 100170EF: 53 push ebx - 100170F0: 57 push edi - 100170F1: 8B 7D 08 mov edi,dword ptr [ebp+8] - 100170F4: 8B C7 mov eax,edi - 100170F6: C1 F8 05 sar eax,5 - 100170F9: 8D 34 85 00 6C 02 lea esi,[eax*4+10026C00h] - 10 - 10017100: 8B 06 mov eax,dword ptr [esi] - 10017102: 83 E7 1F and edi,1Fh - 10017105: C1 E7 06 shl edi,6 - 10017108: 03 C7 add eax,edi - 1001710A: 8A 58 24 mov bl,byte ptr [eax+24h] - 1001710D: 02 DB add bl,bl - 1001710F: D0 FB sar bl,1 - 10017111: 89 B5 28 E5 FF FF mov dword ptr [ebp+FFFFE528h],esi - 10017117: 88 9D 27 E5 FF FF mov byte ptr [ebp+FFFFE527h],bl - 1001711D: 80 FB 02 cmp bl,2 - 10017120: 74 05 je 10017127 - 10017122: 80 FB 01 cmp bl,1 - 10017125: 75 30 jne 10017157 - 10017127: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 1001712A: F7 D1 not ecx - 1001712C: F6 C1 01 test cl,1 - 1001712F: 75 26 jne 10017157 - 10017131: E8 26 7F FF FF call 1000F05C - 10017136: 33 F6 xor esi,esi - 10017138: 89 30 mov dword ptr [eax],esi - 1001713A: E8 0A 7F FF FF call 1000F049 - 1001713F: 56 push esi - 10017140: 56 push esi - 10017141: 56 push esi - 10017142: 56 push esi - 10017143: 56 push esi - 10017144: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1001714A: E8 92 7E FF FF call 1000EFE1 - 1001714F: 83 C4 14 add esp,14h - 10017152: E9 43 06 00 00 jmp 1001779A - 10017157: F6 40 04 20 test byte ptr [eax+4],20h - 1001715B: 74 11 je 1001716E - 1001715D: 6A 02 push 2 - 1001715F: 6A 00 push 0 - 10017161: 6A 00 push 0 - 10017163: FF 75 08 push dword ptr [ebp+8] - 10017166: E8 7E FD FF FF call 10016EE9 - 1001716B: 83 C4 10 add esp,10h - 1001716E: FF 75 08 push dword ptr [ebp+8] - 10017171: E8 69 07 00 00 call 100178DF - 10017176: 59 pop ecx - 10017177: 85 C0 test eax,eax - 10017179: 0F 84 9D 02 00 00 je 1001741C - 1001717F: 8B 06 mov eax,dword ptr [esi] - 10017181: F6 44 07 04 80 test byte ptr [edi+eax+4],80h - 10017186: 0F 84 90 02 00 00 je 1001741C - 1001718C: E8 D1 62 FF FF call 1000D462 - 10017191: 8B 40 6C mov eax,dword ptr [eax+6Ch] - 10017194: 33 C9 xor ecx,ecx - 10017196: 39 48 14 cmp dword ptr [eax+14h],ecx - 10017199: 8D 85 1C E5 FF FF lea eax,[ebp+FFFFE51Ch] - 1001719F: 0F 94 C1 sete cl - 100171A2: 50 push eax - 100171A3: 8B 06 mov eax,dword ptr [esi] - 100171A5: FF 34 07 push dword ptr [edi+eax] - 100171A8: 89 8D 20 E5 FF FF mov dword ptr [ebp+FFFFE520h],ecx - 100171AE: FF 15 34 F1 01 10 call dword ptr ds:[1001F134h] - 100171B4: 85 C0 test eax,eax - 100171B6: 0F 84 60 02 00 00 je 1001741C - 100171BC: 33 C9 xor ecx,ecx - 100171BE: 39 8D 20 E5 FF FF cmp dword ptr [ebp+FFFFE520h],ecx - 100171C4: 74 08 je 100171CE - 100171C6: 84 DB test bl,bl - 100171C8: 0F 84 50 02 00 00 je 1001741E - 100171CE: FF 15 30 F1 01 10 call dword ptr ds:[1001F130h] - 100171D4: 8B 9D 34 E5 FF FF mov ebx,dword ptr [ebp+FFFFE534h] - 100171DA: 89 85 1C E5 FF FF mov dword ptr [ebp+FFFFE51Ch],eax - 100171E0: 33 C0 xor eax,eax - 100171E2: 89 85 3C E5 FF FF mov dword ptr [ebp+FFFFE53Ch],eax - 100171E8: 39 45 10 cmp dword ptr [ebp+10h],eax - 100171EB: 0F 86 42 05 00 00 jbe 10017733 - 100171F1: 89 85 44 E5 FF FF mov dword ptr [ebp+FFFFE544h],eax - 100171F7: 8A 85 27 E5 FF FF mov al,byte ptr [ebp+FFFFE527h] - 100171FD: 84 C0 test al,al - 100171FF: 0F 85 67 01 00 00 jne 1001736C - 10017205: 8A 0B mov cl,byte ptr [ebx] - 10017207: 8B B5 28 E5 FF FF mov esi,dword ptr [ebp+FFFFE528h] - 1001720D: 33 C0 xor eax,eax - 1001720F: 80 F9 0A cmp cl,0Ah - 10017212: 0F 94 C0 sete al - 10017215: 89 85 20 E5 FF FF mov dword ptr [ebp+FFFFE520h],eax - 1001721B: 8B 06 mov eax,dword ptr [esi] - 1001721D: 03 C7 add eax,edi - 1001721F: 83 78 38 00 cmp dword ptr [eax+38h],0 - 10017223: 74 15 je 1001723A - 10017225: 8A 50 34 mov dl,byte ptr [eax+34h] - 10017228: 88 55 F4 mov byte ptr [ebp-0Ch],dl - 1001722B: 88 4D F5 mov byte ptr [ebp-0Bh],cl - 1001722E: 83 60 38 00 and dword ptr [eax+38h],0 - 10017232: 6A 02 push 2 - 10017234: 8D 45 F4 lea eax,[ebp-0Ch] - 10017237: 50 push eax - 10017238: EB 4B jmp 10017285 - 1001723A: 0F BE C1 movsx eax,cl - 1001723D: 50 push eax - 1001723E: E8 06 0A 00 00 call 10017C49 - 10017243: 59 pop ecx - 10017244: 85 C0 test eax,eax - 10017246: 74 3A je 10017282 - 10017248: 8B 8D 34 E5 FF FF mov ecx,dword ptr [ebp+FFFFE534h] - 1001724E: 2B CB sub ecx,ebx - 10017250: 03 4D 10 add ecx,dword ptr [ebp+10h] - 10017253: 33 C0 xor eax,eax - 10017255: 40 inc eax - 10017256: 3B C8 cmp ecx,eax - 10017258: 0F 86 A5 01 00 00 jbe 10017403 - 1001725E: 6A 02 push 2 - 10017260: 8D 85 40 E5 FF FF lea eax,[ebp+FFFFE540h] - 10017266: 53 push ebx - 10017267: 50 push eax - 10017268: E8 8A 09 00 00 call 10017BF7 - 1001726D: 83 C4 0C add esp,0Ch - 10017270: 83 F8 FF cmp eax,0FFFFFFFFh - 10017273: 0F 84 B1 04 00 00 je 1001772A - 10017279: 43 inc ebx - 1001727A: FF 85 44 E5 FF FF inc dword ptr [ebp+FFFFE544h] - 10017280: EB 1B jmp 1001729D - 10017282: 6A 01 push 1 - 10017284: 53 push ebx - 10017285: 8D 85 40 E5 FF FF lea eax,[ebp+FFFFE540h] - 1001728B: 50 push eax - 1001728C: E8 66 09 00 00 call 10017BF7 - 10017291: 83 C4 0C add esp,0Ch - 10017294: 83 F8 FF cmp eax,0FFFFFFFFh - 10017297: 0F 84 8D 04 00 00 je 1001772A - 1001729D: 33 C0 xor eax,eax - 1001729F: 50 push eax - 100172A0: 50 push eax - 100172A1: 6A 05 push 5 - 100172A3: 8D 4D F4 lea ecx,[ebp-0Ch] - 100172A6: 51 push ecx - 100172A7: 6A 01 push 1 - 100172A9: 8D 8D 40 E5 FF FF lea ecx,[ebp+FFFFE540h] - 100172AF: 51 push ecx - 100172B0: 50 push eax - 100172B1: FF B5 1C E5 FF FF push dword ptr [ebp+FFFFE51Ch] - 100172B7: 43 inc ebx - 100172B8: FF 85 44 E5 FF FF inc dword ptr [ebp+FFFFE544h] - 100172BE: FF 15 70 F0 01 10 call dword ptr ds:[1001F070h] - 100172C4: 8B F0 mov esi,eax - 100172C6: 85 F6 test esi,esi - 100172C8: 0F 84 5C 04 00 00 je 1001772A - 100172CE: 6A 00 push 0 - 100172D0: 8D 85 3C E5 FF FF lea eax,[ebp+FFFFE53Ch] - 100172D6: 50 push eax - 100172D7: 56 push esi - 100172D8: 8D 45 F4 lea eax,[ebp-0Ch] - 100172DB: 50 push eax - 100172DC: 8B 85 28 E5 FF FF mov eax,dword ptr [ebp+FFFFE528h] - 100172E2: 8B 00 mov eax,dword ptr [eax] - 100172E4: FF 34 07 push dword ptr [edi+eax] - 100172E7: FF 15 1C F0 01 10 call dword ptr ds:[1001F01Ch] - 100172ED: 85 C0 test eax,eax - 100172EF: 0F 84 29 04 00 00 je 1001771E - 100172F5: 8B 85 44 E5 FF FF mov eax,dword ptr [ebp+FFFFE544h] - 100172FB: 8B 8D 30 E5 FF FF mov ecx,dword ptr [ebp+FFFFE530h] - 10017301: 03 C1 add eax,ecx - 10017303: 39 B5 3C E5 FF FF cmp dword ptr [ebp+FFFFE53Ch],esi - 10017309: 89 85 38 E5 FF FF mov dword ptr [ebp+FFFFE538h],eax - 1001730F: 0F 8C 15 04 00 00 jl 1001772A - 10017315: 83 BD 20 E5 FF FF cmp dword ptr [ebp+FFFFE520h],0 - 00 - 1001731C: 0F 84 CD 00 00 00 je 100173EF - 10017322: 6A 00 push 0 - 10017324: 8D 85 3C E5 FF FF lea eax,[ebp+FFFFE53Ch] - 1001732A: 50 push eax - 1001732B: 6A 01 push 1 - 1001732D: 8D 45 F4 lea eax,[ebp-0Ch] - 10017330: 50 push eax - 10017331: 8B 85 28 E5 FF FF mov eax,dword ptr [ebp+FFFFE528h] - 10017337: 8B 00 mov eax,dword ptr [eax] - 10017339: C6 45 F4 0D mov byte ptr [ebp-0Ch],0Dh - 1001733D: FF 34 07 push dword ptr [edi+eax] - 10017340: FF 15 1C F0 01 10 call dword ptr ds:[1001F01Ch] - 10017346: 85 C0 test eax,eax - 10017348: 0F 84 D0 03 00 00 je 1001771E - 1001734E: 83 BD 3C E5 FF FF cmp dword ptr [ebp+FFFFE53Ch],1 - 01 - 10017355: 0F 8C CF 03 00 00 jl 1001772A - 1001735B: FF 85 30 E5 FF FF inc dword ptr [ebp+FFFFE530h] - 10017361: FF 85 38 E5 FF FF inc dword ptr [ebp+FFFFE538h] - 10017367: E9 83 00 00 00 jmp 100173EF - 1001736C: 3C 01 cmp al,1 - 1001736E: 74 04 je 10017374 - 10017370: 3C 02 cmp al,2 - 10017372: 75 21 jne 10017395 - 10017374: 0F B7 33 movzx esi,word ptr [ebx] - 10017377: 33 C9 xor ecx,ecx - 10017379: 66 83 FE 0A cmp si,0Ah - 1001737D: 0F 94 C1 sete cl - 10017380: 43 inc ebx - 10017381: 43 inc ebx - 10017382: 83 85 44 E5 FF FF add dword ptr [ebp+FFFFE544h],2 - 02 - 10017389: 89 B5 40 E5 FF FF mov dword ptr [ebp+FFFFE540h],esi - 1001738F: 89 8D 20 E5 FF FF mov dword ptr [ebp+FFFFE520h],ecx - 10017395: 3C 01 cmp al,1 - 10017397: 74 04 je 1001739D - 10017399: 3C 02 cmp al,2 - 1001739B: 75 52 jne 100173EF - 1001739D: FF B5 40 E5 FF FF push dword ptr [ebp+FFFFE540h] - 100173A3: E8 2F 3D 00 00 call 1001B0D7 - 100173A8: 59 pop ecx - 100173A9: 66 3B 85 40 E5 FF cmp ax,word ptr [ebp+FFFFE540h] - FF - 100173B0: 0F 85 68 03 00 00 jne 1001771E - 100173B6: 83 85 38 E5 FF FF add dword ptr [ebp+FFFFE538h],2 - 02 - 100173BD: 83 BD 20 E5 FF FF cmp dword ptr [ebp+FFFFE520h],0 - 00 - 100173C4: 74 29 je 100173EF - 100173C6: 6A 0D push 0Dh - 100173C8: 58 pop eax - 100173C9: 50 push eax - 100173CA: 89 85 40 E5 FF FF mov dword ptr [ebp+FFFFE540h],eax - 100173D0: E8 02 3D 00 00 call 1001B0D7 - 100173D5: 59 pop ecx - 100173D6: 66 3B 85 40 E5 FF cmp ax,word ptr [ebp+FFFFE540h] - FF - 100173DD: 0F 85 3B 03 00 00 jne 1001771E - 100173E3: FF 85 38 E5 FF FF inc dword ptr [ebp+FFFFE538h] - 100173E9: FF 85 30 E5 FF FF inc dword ptr [ebp+FFFFE530h] - 100173EF: 8B 45 10 mov eax,dword ptr [ebp+10h] - 100173F2: 39 85 44 E5 FF FF cmp dword ptr [ebp+FFFFE544h],eax - 100173F8: 0F 82 F9 FD FF FF jb 100171F7 - 100173FE: E9 27 03 00 00 jmp 1001772A - 10017403: 8B 0E mov ecx,dword ptr [esi] - 10017405: 8A 13 mov dl,byte ptr [ebx] - 10017407: FF 85 38 E5 FF FF inc dword ptr [ebp+FFFFE538h] - 1001740D: 88 54 0F 34 mov byte ptr [edi+ecx+34h],dl - 10017411: 8B 0E mov ecx,dword ptr [esi] - 10017413: 89 44 0F 38 mov dword ptr [edi+ecx+38h],eax - 10017417: E9 0E 03 00 00 jmp 1001772A - 1001741C: 33 C9 xor ecx,ecx - 1001741E: 8B 06 mov eax,dword ptr [esi] - 10017420: 03 C7 add eax,edi - 10017422: F6 40 04 80 test byte ptr [eax+4],80h - 10017426: 0F 84 BF 02 00 00 je 100176EB - 1001742C: 8B 85 34 E5 FF FF mov eax,dword ptr [ebp+FFFFE534h] - 10017432: 89 8D 40 E5 FF FF mov dword ptr [ebp+FFFFE540h],ecx - 10017438: 84 DB test bl,bl - 1001743A: 0F 85 CA 00 00 00 jne 1001750A - 10017440: 89 85 3C E5 FF FF mov dword ptr [ebp+FFFFE53Ch],eax - 10017446: 39 4D 10 cmp dword ptr [ebp+10h],ecx - 10017449: 0F 86 20 03 00 00 jbe 1001776F - 1001744F: EB 06 jmp 10017457 - 10017451: 8B B5 28 E5 FF FF mov esi,dword ptr [ebp+FFFFE528h] - 10017457: 8B 8D 3C E5 FF FF mov ecx,dword ptr [ebp+FFFFE53Ch] - 1001745D: 83 A5 44 E5 FF FF and dword ptr [ebp+FFFFE544h],0 - 00 - 10017464: 2B 8D 34 E5 FF FF sub ecx,dword ptr [ebp+FFFFE534h] - 1001746A: 8D 85 48 E5 FF FF lea eax,[ebp+FFFFE548h] - 10017470: 3B 4D 10 cmp ecx,dword ptr [ebp+10h] - 10017473: 73 39 jae 100174AE - 10017475: 8B 95 3C E5 FF FF mov edx,dword ptr [ebp+FFFFE53Ch] - 1001747B: FF 85 3C E5 FF FF inc dword ptr [ebp+FFFFE53Ch] - 10017481: 8A 12 mov dl,byte ptr [edx] - 10017483: 41 inc ecx - 10017484: 80 FA 0A cmp dl,0Ah - 10017487: 75 10 jne 10017499 - 10017489: FF 85 30 E5 FF FF inc dword ptr [ebp+FFFFE530h] - 1001748F: C6 00 0D mov byte ptr [eax],0Dh - 10017492: 40 inc eax - 10017493: FF 85 44 E5 FF FF inc dword ptr [ebp+FFFFE544h] - 10017499: 88 10 mov byte ptr [eax],dl - 1001749B: 40 inc eax - 1001749C: FF 85 44 E5 FF FF inc dword ptr [ebp+FFFFE544h] - 100174A2: 81 BD 44 E5 FF FF cmp dword ptr [ebp+FFFFE544h],13FFh - FF 13 00 00 - 100174AC: 72 C2 jb 10017470 - 100174AE: 8B D8 mov ebx,eax - 100174B0: 8D 85 48 E5 FF FF lea eax,[ebp+FFFFE548h] - 100174B6: 2B D8 sub ebx,eax - 100174B8: 6A 00 push 0 - 100174BA: 8D 85 2C E5 FF FF lea eax,[ebp+FFFFE52Ch] - 100174C0: 50 push eax - 100174C1: 53 push ebx - 100174C2: 8D 85 48 E5 FF FF lea eax,[ebp+FFFFE548h] - 100174C8: 50 push eax - 100174C9: 8B 06 mov eax,dword ptr [esi] - 100174CB: FF 34 07 push dword ptr [edi+eax] - 100174CE: FF 15 1C F0 01 10 call dword ptr ds:[1001F01Ch] - 100174D4: 85 C0 test eax,eax - 100174D6: 0F 84 42 02 00 00 je 1001771E - 100174DC: 8B 85 2C E5 FF FF mov eax,dword ptr [ebp+FFFFE52Ch] - 100174E2: 01 85 38 E5 FF FF add dword ptr [ebp+FFFFE538h],eax - 100174E8: 3B C3 cmp eax,ebx - 100174EA: 0F 8C 3A 02 00 00 jl 1001772A - 100174F0: 8B 85 3C E5 FF FF mov eax,dword ptr [ebp+FFFFE53Ch] - 100174F6: 2B 85 34 E5 FF FF sub eax,dword ptr [ebp+FFFFE534h] - 100174FC: 3B 45 10 cmp eax,dword ptr [ebp+10h] - 100174FF: 0F 82 4C FF FF FF jb 10017451 - 10017505: E9 20 02 00 00 jmp 1001772A - 1001750A: 89 85 44 E5 FF FF mov dword ptr [ebp+FFFFE544h],eax - 10017510: 80 FB 02 cmp bl,2 - 10017513: 0F 85 D1 00 00 00 jne 100175EA - 10017519: 39 4D 10 cmp dword ptr [ebp+10h],ecx - 1001751C: 0F 86 4D 02 00 00 jbe 1001776F - 10017522: EB 06 jmp 1001752A - 10017524: 8B B5 28 E5 FF FF mov esi,dword ptr [ebp+FFFFE528h] - 1001752A: 8B 8D 44 E5 FF FF mov ecx,dword ptr [ebp+FFFFE544h] - 10017530: 83 A5 3C E5 FF FF and dword ptr [ebp+FFFFE53Ch],0 - 00 - 10017537: 2B 8D 34 E5 FF FF sub ecx,dword ptr [ebp+FFFFE534h] - 1001753D: 8D 85 48 E5 FF FF lea eax,[ebp+FFFFE548h] - 10017543: 3B 4D 10 cmp ecx,dword ptr [ebp+10h] - 10017546: 73 46 jae 1001758E - 10017548: 8B 95 44 E5 FF FF mov edx,dword ptr [ebp+FFFFE544h] - 1001754E: 83 85 44 E5 FF FF add dword ptr [ebp+FFFFE544h],2 - 02 - 10017555: 0F B7 12 movzx edx,word ptr [edx] - 10017558: 41 inc ecx - 10017559: 41 inc ecx - 1001755A: 66 83 FA 0A cmp dx,0Ah - 1001755E: 75 16 jne 10017576 - 10017560: 83 85 30 E5 FF FF add dword ptr [ebp+FFFFE530h],2 - 02 - 10017567: 6A 0D push 0Dh - 10017569: 5B pop ebx - 1001756A: 66 89 18 mov word ptr [eax],bx - 1001756D: 40 inc eax - 1001756E: 40 inc eax - 1001756F: 83 85 3C E5 FF FF add dword ptr [ebp+FFFFE53Ch],2 - 02 - 10017576: 83 85 3C E5 FF FF add dword ptr [ebp+FFFFE53Ch],2 - 02 - 1001757D: 66 89 10 mov word ptr [eax],dx - 10017580: 40 inc eax - 10017581: 40 inc eax - 10017582: 81 BD 3C E5 FF FF cmp dword ptr [ebp+FFFFE53Ch],13FEh - FE 13 00 00 - 1001758C: 72 B5 jb 10017543 - 1001758E: 8B D8 mov ebx,eax - 10017590: 8D 85 48 E5 FF FF lea eax,[ebp+FFFFE548h] - 10017596: 2B D8 sub ebx,eax - 10017598: 6A 00 push 0 - 1001759A: 8D 85 2C E5 FF FF lea eax,[ebp+FFFFE52Ch] - 100175A0: 50 push eax - 100175A1: 53 push ebx - 100175A2: 8D 85 48 E5 FF FF lea eax,[ebp+FFFFE548h] - 100175A8: 50 push eax - 100175A9: 8B 06 mov eax,dword ptr [esi] - 100175AB: FF 34 07 push dword ptr [edi+eax] - 100175AE: FF 15 1C F0 01 10 call dword ptr ds:[1001F01Ch] - 100175B4: 85 C0 test eax,eax - 100175B6: 0F 84 62 01 00 00 je 1001771E - 100175BC: 8B 85 2C E5 FF FF mov eax,dword ptr [ebp+FFFFE52Ch] - 100175C2: 01 85 38 E5 FF FF add dword ptr [ebp+FFFFE538h],eax - 100175C8: 3B C3 cmp eax,ebx - 100175CA: 0F 8C 5A 01 00 00 jl 1001772A - 100175D0: 8B 85 44 E5 FF FF mov eax,dword ptr [ebp+FFFFE544h] - 100175D6: 2B 85 34 E5 FF FF sub eax,dword ptr [ebp+FFFFE534h] - 100175DC: 3B 45 10 cmp eax,dword ptr [ebp+10h] - 100175DF: 0F 82 3F FF FF FF jb 10017524 - 100175E5: E9 40 01 00 00 jmp 1001772A - 100175EA: 39 4D 10 cmp dword ptr [ebp+10h],ecx - 100175ED: 0F 86 7C 01 00 00 jbe 1001776F - 100175F3: 8B 8D 44 E5 FF FF mov ecx,dword ptr [ebp+FFFFE544h] - 100175F9: 83 A5 3C E5 FF FF and dword ptr [ebp+FFFFE53Ch],0 - 00 - 10017600: 2B 8D 34 E5 FF FF sub ecx,dword ptr [ebp+FFFFE534h] - 10017606: 6A 02 push 2 - 10017608: 8D 85 48 F9 FF FF lea eax,[ebp+FFFFF948h] - 1001760E: 5E pop esi - 1001760F: 3B 4D 10 cmp ecx,dword ptr [ebp+10h] - 10017612: 73 3C jae 10017650 - 10017614: 8B 95 44 E5 FF FF mov edx,dword ptr [ebp+FFFFE544h] - 1001761A: 0F B7 12 movzx edx,word ptr [edx] - 1001761D: 01 B5 44 E5 FF FF add dword ptr [ebp+FFFFE544h],esi - 10017623: 03 CE add ecx,esi - 10017625: 66 83 FA 0A cmp dx,0Ah - 10017629: 75 0E jne 10017639 - 1001762B: 6A 0D push 0Dh - 1001762D: 5B pop ebx - 1001762E: 66 89 18 mov word ptr [eax],bx - 10017631: 03 C6 add eax,esi - 10017633: 01 B5 3C E5 FF FF add dword ptr [ebp+FFFFE53Ch],esi - 10017639: 01 B5 3C E5 FF FF add dword ptr [ebp+FFFFE53Ch],esi - 1001763F: 66 89 10 mov word ptr [eax],dx - 10017642: 03 C6 add eax,esi - 10017644: 81 BD 3C E5 FF FF cmp dword ptr [ebp+FFFFE53Ch],6A8h - A8 06 00 00 - 1001764E: 72 BF jb 1001760F - 10017650: 33 F6 xor esi,esi - 10017652: 56 push esi - 10017653: 56 push esi - 10017654: 68 55 0D 00 00 push 0D55h - 10017659: 8D 8D F0 EB FF FF lea ecx,[ebp+FFFFEBF0h] - 1001765F: 51 push ecx - 10017660: 8D 8D 48 F9 FF FF lea ecx,[ebp+FFFFF948h] - 10017666: 2B C1 sub eax,ecx - 10017668: 99 cdq - 10017669: 2B C2 sub eax,edx - 1001766B: D1 F8 sar eax,1 - 1001766D: 50 push eax - 1001766E: 8B C1 mov eax,ecx - 10017670: 50 push eax - 10017671: 56 push esi - 10017672: 68 E9 FD 00 00 push 0FDE9h - 10017677: FF 15 70 F0 01 10 call dword ptr ds:[1001F070h] - 1001767D: 8B D8 mov ebx,eax - 1001767F: 3B DE cmp ebx,esi - 10017681: 0F 84 97 00 00 00 je 1001771E - 10017687: 6A 00 push 0 - 10017689: 8D 85 2C E5 FF FF lea eax,[ebp+FFFFE52Ch] - 1001768F: 50 push eax - 10017690: 8B C3 mov eax,ebx - 10017692: 2B C6 sub eax,esi - 10017694: 50 push eax - 10017695: 8D 84 35 F0 EB FF lea eax,[ebp+esi+FFFFEBF0h] - FF - 1001769C: 50 push eax - 1001769D: 8B 85 28 E5 FF FF mov eax,dword ptr [ebp+FFFFE528h] - 100176A3: 8B 00 mov eax,dword ptr [eax] - 100176A5: FF 34 07 push dword ptr [edi+eax] - 100176A8: FF 15 1C F0 01 10 call dword ptr ds:[1001F01Ch] - 100176AE: 85 C0 test eax,eax - 100176B0: 74 0C je 100176BE - 100176B2: 03 B5 2C E5 FF FF add esi,dword ptr [ebp+FFFFE52Ch] - 100176B8: 3B DE cmp ebx,esi - 100176BA: 7F CB jg 10017687 - 100176BC: EB 0C jmp 100176CA - 100176BE: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 100176C4: 89 85 40 E5 FF FF mov dword ptr [ebp+FFFFE540h],eax - 100176CA: 3B DE cmp ebx,esi - 100176CC: 7F 5C jg 1001772A - 100176CE: 8B 85 44 E5 FF FF mov eax,dword ptr [ebp+FFFFE544h] - 100176D4: 2B 85 34 E5 FF FF sub eax,dword ptr [ebp+FFFFE534h] - 100176DA: 89 85 38 E5 FF FF mov dword ptr [ebp+FFFFE538h],eax - 100176E0: 3B 45 10 cmp eax,dword ptr [ebp+10h] - 100176E3: 0F 82 0A FF FF FF jb 100175F3 - 100176E9: EB 3F jmp 1001772A - 100176EB: 6A 00 push 0 - 100176ED: 8D 8D 2C E5 FF FF lea ecx,[ebp+FFFFE52Ch] - 100176F3: 51 push ecx - 100176F4: FF 75 10 push dword ptr [ebp+10h] - 100176F7: FF B5 34 E5 FF FF push dword ptr [ebp+FFFFE534h] - 100176FD: FF 30 push dword ptr [eax] - 100176FF: FF 15 1C F0 01 10 call dword ptr ds:[1001F01Ch] - 10017705: 85 C0 test eax,eax - 10017707: 74 15 je 1001771E - 10017709: 8B 85 2C E5 FF FF mov eax,dword ptr [ebp+FFFFE52Ch] - 1001770F: 83 A5 40 E5 FF FF and dword ptr [ebp+FFFFE540h],0 - 00 - 10017716: 89 85 38 E5 FF FF mov dword ptr [ebp+FFFFE538h],eax - 1001771C: EB 0C jmp 1001772A - 1001771E: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 10017724: 89 85 40 E5 FF FF mov dword ptr [ebp+FFFFE540h],eax - 1001772A: 83 BD 38 E5 FF FF cmp dword ptr [ebp+FFFFE538h],0 - 00 - 10017731: 75 6C jne 1001779F - 10017733: 83 BD 40 E5 FF FF cmp dword ptr [ebp+FFFFE540h],0 - 00 - 1001773A: 74 2D je 10017769 - 1001773C: 6A 05 push 5 - 1001773E: 5E pop esi - 1001773F: 39 B5 40 E5 FF FF cmp dword ptr [ebp+FFFFE540h],esi - 10017745: 75 14 jne 1001775B - 10017747: E8 FD 78 FF FF call 1000F049 - 1001774C: C7 00 09 00 00 00 mov dword ptr [eax],9 - 10017752: E8 05 79 FF FF call 1000F05C - 10017757: 89 30 mov dword ptr [eax],esi - 10017759: EB 3F jmp 1001779A - 1001775B: FF B5 40 E5 FF FF push dword ptr [ebp+FFFFE540h] - 10017761: E8 09 79 FF FF call 1000F06F - 10017766: 59 pop ecx - 10017767: EB 31 jmp 1001779A - 10017769: 8B B5 28 E5 FF FF mov esi,dword ptr [ebp+FFFFE528h] - 1001776F: 8B 06 mov eax,dword ptr [esi] - 10017771: F6 44 07 04 40 test byte ptr [edi+eax+4],40h - 10017776: 74 0F je 10017787 - 10017778: 8B 85 34 E5 FF FF mov eax,dword ptr [ebp+FFFFE534h] - 1001777E: 80 38 1A cmp byte ptr [eax],1Ah - 10017781: 75 04 jne 10017787 - 10017783: 33 C0 xor eax,eax - 10017785: EB 24 jmp 100177AB - 10017787: E8 BD 78 FF FF call 1000F049 - 1001778C: C7 00 1C 00 00 00 mov dword ptr [eax],1Ch - 10017792: E8 C5 78 FF FF call 1000F05C - 10017797: 83 20 00 and dword ptr [eax],0 - 1001779A: 83 C8 FF or eax,0FFFFFFFFh - 1001779D: EB 0C jmp 100177AB - 1001779F: 8B 85 38 E5 FF FF mov eax,dword ptr [ebp+FFFFE538h] - 100177A5: 2B 85 30 E5 FF FF sub eax,dword ptr [ebp+FFFFE530h] - 100177AB: 5F pop edi - 100177AC: 5B pop ebx - 100177AD: 8B 4D FC mov ecx,dword ptr [ebp-4] - 100177B0: 33 CD xor ecx,ebp - 100177B2: 5E pop esi - 100177B3: E8 E3 28 FF FF call 1000A09B - 100177B8: C9 leave - 100177B9: C3 ret - 100177BA: 6A 10 push 10h - 100177BC: 68 E0 1E 02 10 push 10021EE0h - 100177C1: E8 C2 88 FF FF call 10010088 - 100177C6: 8B 45 08 mov eax,dword ptr [ebp+8] - 100177C9: 83 F8 FE cmp eax,0FFFFFFFEh - 100177CC: 75 1B jne 100177E9 - 100177CE: E8 89 78 FF FF call 1000F05C - 100177D3: 83 20 00 and dword ptr [eax],0 - 100177D6: E8 6E 78 FF FF call 1000F049 - 100177DB: C7 00 09 00 00 00 mov dword ptr [eax],9 - 100177E1: 83 C8 FF or eax,0FFFFFFFFh - 100177E4: E9 9D 00 00 00 jmp 10017886 - 100177E9: 33 FF xor edi,edi - 100177EB: 3B C7 cmp eax,edi - 100177ED: 7C 08 jl 100177F7 - 100177EF: 3B 05 F4 6B 02 10 cmp eax,dword ptr ds:[10026BF4h] - 100177F5: 72 21 jb 10017818 - 100177F7: E8 60 78 FF FF call 1000F05C - 100177FC: 89 38 mov dword ptr [eax],edi - 100177FE: E8 46 78 FF FF call 1000F049 - 10017803: C7 00 09 00 00 00 mov dword ptr [eax],9 - 10017809: 57 push edi - 1001780A: 57 push edi - 1001780B: 57 push edi - 1001780C: 57 push edi - 1001780D: 57 push edi - 1001780E: E8 CE 77 FF FF call 1000EFE1 - 10017813: 83 C4 14 add esp,14h - 10017816: EB C9 jmp 100177E1 - 10017818: 8B C8 mov ecx,eax - 1001781A: C1 F9 05 sar ecx,5 - 1001781D: 8D 1C 8D 00 6C 02 lea ebx,[ecx*4+10026C00h] - 10 - 10017824: 8B F0 mov esi,eax - 10017826: 83 E6 1F and esi,1Fh - 10017829: C1 E6 06 shl esi,6 - 1001782C: 8B 0B mov ecx,dword ptr [ebx] - 1001782E: 0F BE 4C 31 04 movsx ecx,byte ptr [ecx+esi+4] - 10017833: 83 E1 01 and ecx,1 - 10017836: 74 BF je 100177F7 - 10017838: 50 push eax - 10017839: E8 3F 09 00 00 call 1001817D - 1001783E: 59 pop ecx - 1001783F: 89 7D FC mov dword ptr [ebp-4],edi - 10017842: 8B 03 mov eax,dword ptr [ebx] - 10017844: F6 44 30 04 01 test byte ptr [eax+esi+4],1 - 10017849: 74 16 je 10017861 - 1001784B: FF 75 10 push dword ptr [ebp+10h] - 1001784E: FF 75 0C push dword ptr [ebp+0Ch] - 10017851: FF 75 08 push dword ptr [ebp+8] - 10017854: E8 2E F8 FF FF call 10017087 - 10017859: 83 C4 0C add esp,0Ch - 1001785C: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1001785F: EB 16 jmp 10017877 - 10017861: E8 E3 77 FF FF call 1000F049 - 10017866: C7 00 09 00 00 00 mov dword ptr [eax],9 - 1001786C: E8 EB 77 FF FF call 1000F05C - 10017871: 89 38 mov dword ptr [eax],edi - 10017873: 83 4D E4 FF or dword ptr [ebp-1Ch],0FFFFFFFFh - 10017877: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1001787E: E8 09 00 00 00 call 1001788C - 10017883: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 10017886: E8 42 88 FF FF call 100100CD - 1001788B: C3 ret - 1001788C: FF 75 08 push dword ptr [ebp+8] - 1001788F: E8 89 09 00 00 call 1001821D - 10017894: 59 pop ecx - 10017895: C3 ret - 10017896: 8B FF mov edi,edi - 10017898: 55 push ebp - 10017899: 8B EC mov ebp,esp - 1001789B: FF 05 1C 61 02 10 inc dword ptr ds:[1002611Ch] - 100178A1: 68 00 10 00 00 push 1000h - 100178A6: E8 5E B0 FF FF call 10012909 - 100178AB: 59 pop ecx - 100178AC: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 100178AF: 89 41 08 mov dword ptr [ecx+8],eax - 100178B2: 85 C0 test eax,eax - 100178B4: 74 0D je 100178C3 - 100178B6: 83 49 0C 08 or dword ptr [ecx+0Ch],8 - 100178BA: C7 41 18 00 10 00 mov dword ptr [ecx+18h],1000h - 00 - 100178C1: EB 11 jmp 100178D4 - 100178C3: 83 49 0C 04 or dword ptr [ecx+0Ch],4 - 100178C7: 8D 41 14 lea eax,[ecx+14h] - 100178CA: 89 41 08 mov dword ptr [ecx+8],eax - 100178CD: C7 41 18 02 00 00 mov dword ptr [ecx+18h],2 - 00 - 100178D4: 8B 41 08 mov eax,dword ptr [ecx+8] - 100178D7: 83 61 04 00 and dword ptr [ecx+4],0 - 100178DB: 89 01 mov dword ptr [ecx],eax - 100178DD: 5D pop ebp - 100178DE: C3 ret - 100178DF: 8B FF mov edi,edi - 100178E1: 55 push ebp - 100178E2: 8B EC mov ebp,esp - 100178E4: 8B 45 08 mov eax,dword ptr [ebp+8] - 100178E7: 83 F8 FE cmp eax,0FFFFFFFEh - 100178EA: 75 0F jne 100178FB - 100178EC: E8 58 77 FF FF call 1000F049 - 100178F1: C7 00 09 00 00 00 mov dword ptr [eax],9 - 100178F7: 33 C0 xor eax,eax - 100178F9: 5D pop ebp - 100178FA: C3 ret - 100178FB: 56 push esi - 100178FC: 33 F6 xor esi,esi - 100178FE: 3B C6 cmp eax,esi - 10017900: 7C 08 jl 1001790A - 10017902: 3B 05 F4 6B 02 10 cmp eax,dword ptr ds:[10026BF4h] - 10017908: 72 1C jb 10017926 - 1001790A: E8 3A 77 FF FF call 1000F049 - 1001790F: 56 push esi - 10017910: 56 push esi - 10017911: 56 push esi - 10017912: 56 push esi - 10017913: 56 push esi - 10017914: C7 00 09 00 00 00 mov dword ptr [eax],9 - 1001791A: E8 C2 76 FF FF call 1000EFE1 - 1001791F: 83 C4 14 add esp,14h - 10017922: 33 C0 xor eax,eax - 10017924: EB 1A jmp 10017940 - 10017926: 8B C8 mov ecx,eax - 10017928: 83 E0 1F and eax,1Fh - 1001792B: C1 F9 05 sar ecx,5 - 1001792E: 8B 0C 8D 00 6C 02 mov ecx,dword ptr [ecx*4+10026C00h] - 10 - 10017935: C1 E0 06 shl eax,6 - 10017938: 0F BE 44 01 04 movsx eax,byte ptr [ecx+eax+4] - 1001793D: 83 E0 40 and eax,40h - 10017940: 5E pop esi - 10017941: 5D pop ebp - 10017942: C3 ret - 10017943: 8B FF mov edi,edi - 10017945: 55 push ebp - 10017946: 8B EC mov ebp,esp - 10017948: 83 EC 10 sub esp,10h - 1001794B: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10017950: 33 C5 xor eax,ebp - 10017952: 89 45 FC mov dword ptr [ebp-4],eax - 10017955: 53 push ebx - 10017956: 56 push esi - 10017957: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 1001795A: F6 46 0C 40 test byte ptr [esi+0Ch],40h - 1001795E: 57 push edi - 1001795F: 0F 85 36 01 00 00 jne 10017A9B - 10017965: 56 push esi - 10017966: E8 7C 8B FF FF call 100104E7 - 1001796B: 59 pop ecx - 1001796C: BB 70 56 02 10 mov ebx,10025670h - 10017971: 83 F8 FF cmp eax,0FFFFFFFFh - 10017974: 74 2E je 100179A4 - 10017976: 56 push esi - 10017977: E8 6B 8B FF FF call 100104E7 - 1001797C: 59 pop ecx - 1001797D: 83 F8 FE cmp eax,0FFFFFFFEh - 10017980: 74 22 je 100179A4 - 10017982: 56 push esi - 10017983: E8 5F 8B FF FF call 100104E7 - 10017988: C1 F8 05 sar eax,5 - 1001798B: 56 push esi - 1001798C: 8D 3C 85 00 6C 02 lea edi,[eax*4+10026C00h] - 10 - 10017993: E8 4F 8B FF FF call 100104E7 - 10017998: 83 E0 1F and eax,1Fh - 1001799B: 59 pop ecx - 1001799C: C1 E0 06 shl eax,6 - 1001799F: 03 07 add eax,dword ptr [edi] - 100179A1: 59 pop ecx - 100179A2: EB 02 jmp 100179A6 - 100179A4: 8B C3 mov eax,ebx - 100179A6: 8A 40 24 mov al,byte ptr [eax+24h] - 100179A9: 24 7F and al,7Fh - 100179AB: 3C 02 cmp al,2 - 100179AD: 0F 84 E8 00 00 00 je 10017A9B - 100179B3: 56 push esi - 100179B4: E8 2E 8B FF FF call 100104E7 - 100179B9: 59 pop ecx - 100179BA: 83 F8 FF cmp eax,0FFFFFFFFh - 100179BD: 74 2E je 100179ED - 100179BF: 56 push esi - 100179C0: E8 22 8B FF FF call 100104E7 - 100179C5: 59 pop ecx - 100179C6: 83 F8 FE cmp eax,0FFFFFFFEh - 100179C9: 74 22 je 100179ED - 100179CB: 56 push esi - 100179CC: E8 16 8B FF FF call 100104E7 - 100179D1: C1 F8 05 sar eax,5 - 100179D4: 56 push esi - 100179D5: 8D 3C 85 00 6C 02 lea edi,[eax*4+10026C00h] - 10 - 100179DC: E8 06 8B FF FF call 100104E7 - 100179E1: 83 E0 1F and eax,1Fh - 100179E4: 59 pop ecx - 100179E5: C1 E0 06 shl eax,6 - 100179E8: 03 07 add eax,dword ptr [edi] - 100179EA: 59 pop ecx - 100179EB: EB 02 jmp 100179EF - 100179ED: 8B C3 mov eax,ebx - 100179EF: 8A 40 24 mov al,byte ptr [eax+24h] - 100179F2: 24 7F and al,7Fh - 100179F4: 3C 01 cmp al,1 - 100179F6: 0F 84 9F 00 00 00 je 10017A9B - 100179FC: 56 push esi - 100179FD: E8 E5 8A FF FF call 100104E7 - 10017A02: 59 pop ecx - 10017A03: 83 F8 FF cmp eax,0FFFFFFFFh - 10017A06: 74 2E je 10017A36 - 10017A08: 56 push esi - 10017A09: E8 D9 8A FF FF call 100104E7 - 10017A0E: 59 pop ecx - 10017A0F: 83 F8 FE cmp eax,0FFFFFFFEh - 10017A12: 74 22 je 10017A36 - 10017A14: 56 push esi - 10017A15: E8 CD 8A FF FF call 100104E7 - 10017A1A: C1 F8 05 sar eax,5 - 10017A1D: 56 push esi - 10017A1E: 8D 3C 85 00 6C 02 lea edi,[eax*4+10026C00h] - 10 - 10017A25: E8 BD 8A FF FF call 100104E7 - 10017A2A: 83 E0 1F and eax,1Fh - 10017A2D: 59 pop ecx - 10017A2E: C1 E0 06 shl eax,6 - 10017A31: 03 07 add eax,dword ptr [edi] - 10017A33: 59 pop ecx - 10017A34: EB 02 jmp 10017A38 - 10017A36: 8B C3 mov eax,ebx - 10017A38: F6 40 04 80 test byte ptr [eax+4],80h - 10017A3C: 74 5D je 10017A9B - 10017A3E: FF 75 08 push dword ptr [ebp+8] - 10017A41: 8D 45 F4 lea eax,[ebp-0Ch] - 10017A44: 6A 05 push 5 - 10017A46: 50 push eax - 10017A47: 8D 45 F0 lea eax,[ebp-10h] - 10017A4A: 50 push eax - 10017A4B: E8 95 0E 00 00 call 100188E5 - 10017A50: 83 C4 10 add esp,10h - 10017A53: 85 C0 test eax,eax - 10017A55: 74 07 je 10017A5E - 10017A57: B8 FF FF 00 00 mov eax,0FFFFh - 10017A5C: EB 5D jmp 10017ABB - 10017A5E: 33 FF xor edi,edi - 10017A60: 39 7D F0 cmp dword ptr [ebp-10h],edi - 10017A63: 7E 30 jle 10017A95 - 10017A65: FF 4E 04 dec dword ptr [esi+4] - 10017A68: 78 12 js 10017A7C - 10017A6A: 8B 06 mov eax,dword ptr [esi] - 10017A6C: 8A 4C 3D F4 mov cl,byte ptr [ebp+edi-0Ch] - 10017A70: 88 08 mov byte ptr [eax],cl - 10017A72: 8B 0E mov ecx,dword ptr [esi] - 10017A74: 0F B6 01 movzx eax,byte ptr [ecx] - 10017A77: 41 inc ecx - 10017A78: 89 0E mov dword ptr [esi],ecx - 10017A7A: EB 0E jmp 10017A8A - 10017A7C: 0F BE 44 3D F4 movsx eax,byte ptr [ebp+edi-0Ch] - 10017A81: 56 push esi - 10017A82: 50 push eax - 10017A83: E8 26 67 FF FF call 1000E1AE - 10017A88: 59 pop ecx - 10017A89: 59 pop ecx - 10017A8A: 83 F8 FF cmp eax,0FFFFFFFFh - 10017A8D: 74 C8 je 10017A57 - 10017A8F: 47 inc edi - 10017A90: 3B 7D F0 cmp edi,dword ptr [ebp-10h] - 10017A93: 7C D0 jl 10017A65 - 10017A95: 66 8B 45 08 mov ax,word ptr [ebp+8] - 10017A99: EB 20 jmp 10017ABB - 10017A9B: 83 46 04 FE add dword ptr [esi+4],0FFFFFFFEh - 10017A9F: 78 0D js 10017AAE - 10017AA1: 8B 0E mov ecx,dword ptr [esi] - 10017AA3: 8B 45 08 mov eax,dword ptr [ebp+8] - 10017AA6: 66 89 01 mov word ptr [ecx],ax - 10017AA9: 83 06 02 add dword ptr [esi],2 - 10017AAC: EB 0D jmp 10017ABB - 10017AAE: 0F B7 45 08 movzx eax,word ptr [ebp+8] - 10017AB2: 56 push esi - 10017AB3: 50 push eax - 10017AB4: E8 E3 36 00 00 call 1001B19C - 10017AB9: 59 pop ecx - 10017ABA: 59 pop ecx - 10017ABB: 8B 4D FC mov ecx,dword ptr [ebp-4] - 10017ABE: 5F pop edi - 10017ABF: 5E pop esi - 10017AC0: 33 CD xor ecx,ebp - 10017AC2: 5B pop ebx - 10017AC3: E8 D3 25 FF FF call 1000A09B - 10017AC8: C9 leave - 10017AC9: C3 ret - 10017ACA: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10017ACF: 83 C8 01 or eax,1 - 10017AD2: 33 C9 xor ecx,ecx - 10017AD4: 39 05 B4 6B 02 10 cmp dword ptr ds:[10026BB4h],eax - 10017ADA: 0F 94 C1 sete cl - 10017ADD: 8B C1 mov eax,ecx - 10017ADF: C3 ret - 10017AE0: 8B FF mov edi,edi - 10017AE2: 55 push ebp - 10017AE3: 8B EC mov ebp,esp - 10017AE5: 83 EC 10 sub esp,10h - 10017AE8: 53 push ebx - 10017AE9: 56 push esi - 10017AEA: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 10017AED: 33 DB xor ebx,ebx - 10017AEF: 3B F3 cmp esi,ebx - 10017AF1: 74 15 je 10017B08 - 10017AF3: 39 5D 10 cmp dword ptr [ebp+10h],ebx - 10017AF6: 74 10 je 10017B08 - 10017AF8: 38 1E cmp byte ptr [esi],bl - 10017AFA: 75 12 jne 10017B0E - 10017AFC: 8B 45 08 mov eax,dword ptr [ebp+8] - 10017AFF: 3B C3 cmp eax,ebx - 10017B01: 74 05 je 10017B08 - 10017B03: 33 C9 xor ecx,ecx - 10017B05: 66 89 08 mov word ptr [eax],cx - 10017B08: 33 C0 xor eax,eax - 10017B0A: 5E pop esi - 10017B0B: 5B pop ebx - 10017B0C: C9 leave - 10017B0D: C3 ret - 10017B0E: FF 75 14 push dword ptr [ebp+14h] - 10017B11: 8D 4D F0 lea ecx,[ebp-10h] - 10017B14: E8 E3 2B FF FF call 1000A6FC - 10017B19: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 10017B1C: 39 58 14 cmp dword ptr [eax+14h],ebx - 10017B1F: 75 1F jne 10017B40 - 10017B21: 8B 45 08 mov eax,dword ptr [ebp+8] - 10017B24: 3B C3 cmp eax,ebx - 10017B26: 74 07 je 10017B2F - 10017B28: 66 0F B6 0E movzx cx,byte ptr [esi] - 10017B2C: 66 89 08 mov word ptr [eax],cx - 10017B2F: 38 5D FC cmp byte ptr [ebp-4],bl - 10017B32: 74 07 je 10017B3B - 10017B34: 8B 45 F8 mov eax,dword ptr [ebp-8] - 10017B37: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 10017B3B: 33 C0 xor eax,eax - 10017B3D: 40 inc eax - 10017B3E: EB CA jmp 10017B0A - 10017B40: 8D 45 F0 lea eax,[ebp-10h] - 10017B43: 50 push eax - 10017B44: 0F B6 06 movzx eax,byte ptr [esi] - 10017B47: 50 push eax - 10017B48: E8 C4 00 00 00 call 10017C11 - 10017B4D: 59 pop ecx - 10017B4E: 59 pop ecx - 10017B4F: 85 C0 test eax,eax - 10017B51: 74 7D je 10017BD0 - 10017B53: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 10017B56: 8B 88 AC 00 00 00 mov ecx,dword ptr [eax+000000ACh] - 10017B5C: 83 F9 01 cmp ecx,1 - 10017B5F: 7E 25 jle 10017B86 - 10017B61: 39 4D 10 cmp dword ptr [ebp+10h],ecx - 10017B64: 7C 20 jl 10017B86 - 10017B66: 33 D2 xor edx,edx - 10017B68: 39 5D 08 cmp dword ptr [ebp+8],ebx - 10017B6B: 0F 95 C2 setne dl - 10017B6E: 52 push edx - 10017B6F: FF 75 08 push dword ptr [ebp+8] - 10017B72: 51 push ecx - 10017B73: 56 push esi - 10017B74: 6A 09 push 9 - 10017B76: FF 70 04 push dword ptr [eax+4] - 10017B79: FF 15 38 F1 01 10 call dword ptr ds:[1001F138h] - 10017B7F: 85 C0 test eax,eax - 10017B81: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 10017B84: 75 10 jne 10017B96 - 10017B86: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 10017B89: 3B 88 AC 00 00 00 cmp ecx,dword ptr [eax+000000ACh] - 10017B8F: 72 20 jb 10017BB1 - 10017B91: 38 5E 01 cmp byte ptr [esi+1],bl - 10017B94: 74 1B je 10017BB1 - 10017B96: 8B 80 AC 00 00 00 mov eax,dword ptr [eax+000000ACh] - 10017B9C: 38 5D FC cmp byte ptr [ebp-4],bl - 10017B9F: 0F 84 65 FF FF FF je 10017B0A - 10017BA5: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 10017BA8: 83 61 70 FD and dword ptr [ecx+70h],0FFFFFFFDh - 10017BAC: E9 59 FF FF FF jmp 10017B0A - 10017BB1: E8 93 74 FF FF call 1000F049 - 10017BB6: C7 00 2A 00 00 00 mov dword ptr [eax],2Ah - 10017BBC: 38 5D FC cmp byte ptr [ebp-4],bl - 10017BBF: 74 07 je 10017BC8 - 10017BC1: 8B 45 F8 mov eax,dword ptr [ebp-8] - 10017BC4: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 10017BC8: 83 C8 FF or eax,0FFFFFFFFh - 10017BCB: E9 3A FF FF FF jmp 10017B0A - 10017BD0: 33 C0 xor eax,eax - 10017BD2: 39 5D 08 cmp dword ptr [ebp+8],ebx - 10017BD5: 0F 95 C0 setne al - 10017BD8: 50 push eax - 10017BD9: FF 75 08 push dword ptr [ebp+8] - 10017BDC: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 10017BDF: 6A 01 push 1 - 10017BE1: 56 push esi - 10017BE2: 6A 09 push 9 - 10017BE4: FF 70 04 push dword ptr [eax+4] - 10017BE7: FF 15 38 F1 01 10 call dword ptr ds:[1001F138h] - 10017BED: 85 C0 test eax,eax - 10017BEF: 0F 85 3A FF FF FF jne 10017B2F - 10017BF5: EB BA jmp 10017BB1 - 10017BF7: 8B FF mov edi,edi - 10017BF9: 55 push ebp - 10017BFA: 8B EC mov ebp,esp - 10017BFC: 6A 00 push 0 - 10017BFE: FF 75 10 push dword ptr [ebp+10h] - 10017C01: FF 75 0C push dword ptr [ebp+0Ch] - 10017C04: FF 75 08 push dword ptr [ebp+8] - 10017C07: E8 D4 FE FF FF call 10017AE0 - 10017C0C: 83 C4 10 add esp,10h - 10017C0F: 5D pop ebp - 10017C10: C3 ret - 10017C11: 8B FF mov edi,edi - 10017C13: 55 push ebp - 10017C14: 8B EC mov ebp,esp - 10017C16: 83 EC 10 sub esp,10h - 10017C19: FF 75 0C push dword ptr [ebp+0Ch] - 10017C1C: 8D 4D F0 lea ecx,[ebp-10h] - 10017C1F: E8 D8 2A FF FF call 1000A6FC - 10017C24: 0F B6 45 08 movzx eax,byte ptr [ebp+8] - 10017C28: 8B 4D F0 mov ecx,dword ptr [ebp-10h] - 10017C2B: 8B 89 C8 00 00 00 mov ecx,dword ptr [ecx+000000C8h] - 10017C31: 0F B7 04 41 movzx eax,word ptr [ecx+eax*2] - 10017C35: 25 00 80 00 00 and eax,8000h - 10017C3A: 80 7D FC 00 cmp byte ptr [ebp-4],0 - 10017C3E: 74 07 je 10017C47 - 10017C40: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 10017C43: 83 61 70 FD and dword ptr [ecx+70h],0FFFFFFFDh - 10017C47: C9 leave - 10017C48: C3 ret - 10017C49: 8B FF mov edi,edi - 10017C4B: 55 push ebp - 10017C4C: 8B EC mov ebp,esp - 10017C4E: 6A 00 push 0 - 10017C50: FF 75 08 push dword ptr [ebp+8] - 10017C53: E8 B9 FF FF FF call 10017C11 - 10017C58: 59 pop ecx - 10017C59: 59 pop ecx - 10017C5A: 5D pop ebp - 10017C5B: C3 ret - 10017C5C: CC int 3 - 10017C5D: CC int 3 - 10017C5E: CC int 3 - 10017C5F: CC int 3 - 10017C60: 56 push esi - 10017C61: 8B 44 24 14 mov eax,dword ptr [esp+14h] - 10017C65: 0B C0 or eax,eax - 10017C67: 75 28 jne 10017C91 - 10017C69: 8B 4C 24 10 mov ecx,dword ptr [esp+10h] - 10017C6D: 8B 44 24 0C mov eax,dword ptr [esp+0Ch] - 10017C71: 33 D2 xor edx,edx - 10017C73: F7 F1 div eax,ecx - 10017C75: 8B D8 mov ebx,eax - 10017C77: 8B 44 24 08 mov eax,dword ptr [esp+8] - 10017C7B: F7 F1 div eax,ecx - 10017C7D: 8B F0 mov esi,eax - 10017C7F: 8B C3 mov eax,ebx - 10017C81: F7 64 24 10 mul eax,dword ptr [esp+10h] - 10017C85: 8B C8 mov ecx,eax - 10017C87: 8B C6 mov eax,esi - 10017C89: F7 64 24 10 mul eax,dword ptr [esp+10h] - 10017C8D: 03 D1 add edx,ecx - 10017C8F: EB 47 jmp 10017CD8 - 10017C91: 8B C8 mov ecx,eax - 10017C93: 8B 5C 24 10 mov ebx,dword ptr [esp+10h] - 10017C97: 8B 54 24 0C mov edx,dword ptr [esp+0Ch] - 10017C9B: 8B 44 24 08 mov eax,dword ptr [esp+8] - 10017C9F: D1 E9 shr ecx,1 - 10017CA1: D1 DB rcr ebx,1 - 10017CA3: D1 EA shr edx,1 - 10017CA5: D1 D8 rcr eax,1 - 10017CA7: 0B C9 or ecx,ecx - 10017CA9: 75 F4 jne 10017C9F - 10017CAB: F7 F3 div eax,ebx - 10017CAD: 8B F0 mov esi,eax - 10017CAF: F7 64 24 14 mul eax,dword ptr [esp+14h] - 10017CB3: 8B C8 mov ecx,eax - 10017CB5: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 10017CB9: F7 E6 mul eax,esi - 10017CBB: 03 D1 add edx,ecx - 10017CBD: 72 0E jb 10017CCD - 10017CBF: 3B 54 24 0C cmp edx,dword ptr [esp+0Ch] - 10017CC3: 77 08 ja 10017CCD - 10017CC5: 72 0F jb 10017CD6 - 10017CC7: 3B 44 24 08 cmp eax,dword ptr [esp+8] - 10017CCB: 76 09 jbe 10017CD6 - 10017CCD: 4E dec esi - 10017CCE: 2B 44 24 10 sub eax,dword ptr [esp+10h] - 10017CD2: 1B 54 24 14 sbb edx,dword ptr [esp+14h] - 10017CD6: 33 DB xor ebx,ebx - 10017CD8: 2B 44 24 08 sub eax,dword ptr [esp+8] - 10017CDC: 1B 54 24 0C sbb edx,dword ptr [esp+0Ch] - 10017CE0: F7 DA neg edx - 10017CE2: F7 D8 neg eax - 10017CE4: 83 DA 00 sbb edx,0 - 10017CE7: 8B CA mov ecx,edx - 10017CE9: 8B D3 mov edx,ebx - 10017CEB: 8B D9 mov ebx,ecx - 10017CED: 8B C8 mov ecx,eax - 10017CEF: 8B C6 mov eax,esi - 10017CF1: 5E pop esi - 10017CF2: C2 10 00 ret 10h - 10017CF5: 8B FF mov edi,edi - 10017CF7: 55 push ebp - 10017CF8: 8B EC mov ebp,esp - 10017CFA: 8B 45 08 mov eax,dword ptr [ebp+8] - 10017CFD: A3 B8 6B 02 10 mov dword ptr ds:[10026BB8h],eax - 10017D02: 5D pop ebp - 10017D03: C3 ret - 10017D04: 6A 10 push 10h - 10017D06: 68 00 1F 02 10 push 10021F00h - 10017D0B: E8 78 83 FF FF call 10010088 - 10017D10: 83 65 FC 00 and dword ptr [ebp-4],0 - 10017D14: FF 75 0C push dword ptr [ebp+0Ch] - 10017D17: FF 75 08 push dword ptr [ebp+8] - 10017D1A: FF 15 3C F1 01 10 call dword ptr ds:[1001F13Ch] - 10017D20: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 10017D23: EB 2F jmp 10017D54 - 10017D25: 8B 45 EC mov eax,dword ptr [ebp-14h] - 10017D28: 8B 00 mov eax,dword ptr [eax] - 10017D2A: 8B 00 mov eax,dword ptr [eax] - 10017D2C: 89 45 E0 mov dword ptr [ebp-20h],eax - 10017D2F: 33 C9 xor ecx,ecx - 10017D31: 3D 17 00 00 C0 cmp eax,0C0000017h - 10017D36: 0F 94 C1 sete cl - 10017D39: 8B C1 mov eax,ecx - 10017D3B: C3 ret - 10017D3C: 8B 65 E8 mov esp,dword ptr [ebp-18h] - 10017D3F: 81 7D E0 17 00 00 cmp dword ptr [ebp-20h],0C0000017h - C0 - 10017D46: 75 08 jne 10017D50 - 10017D48: 6A 08 push 8 - 10017D4A: FF 15 90 F0 01 10 call dword ptr ds:[1001F090h] - 10017D50: 83 65 E4 00 and dword ptr [ebp-1Ch],0 - 10017D54: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 10017D5B: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 10017D5E: E8 6A 83 FF FF call 100100CD - 10017D63: C3 ret - 10017D64: CC int 3 - 10017D65: CC int 3 - 10017D66: CC int 3 - 10017D67: CC int 3 - 10017D68: CC int 3 - 10017D69: CC int 3 - 10017D6A: CC int 3 - 10017D6B: CC int 3 - 10017D6C: CC int 3 - 10017D6D: CC int 3 - 10017D6E: CC int 3 - 10017D6F: CC int 3 - 10017D70: 8B FF mov edi,edi - 10017D72: 55 push ebp - 10017D73: 8B EC mov ebp,esp - 10017D75: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 10017D78: B8 4D 5A 00 00 mov eax,5A4Dh - 10017D7D: 66 39 01 cmp word ptr [ecx],ax - 10017D80: 74 04 je 10017D86 - 10017D82: 33 C0 xor eax,eax - 10017D84: 5D pop ebp - 10017D85: C3 ret - 10017D86: 8B 41 3C mov eax,dword ptr [ecx+3Ch] - 10017D89: 03 C1 add eax,ecx - 10017D8B: 81 38 50 45 00 00 cmp dword ptr [eax],4550h - 10017D91: 75 EF jne 10017D82 - 10017D93: 33 D2 xor edx,edx - 10017D95: B9 0B 01 00 00 mov ecx,10Bh - 10017D9A: 66 39 48 18 cmp word ptr [eax+18h],cx - 10017D9E: 0F 94 C2 sete dl - 10017DA1: 8B C2 mov eax,edx - 10017DA3: 5D pop ebp - 10017DA4: C3 ret - 10017DA5: CC int 3 - 10017DA6: CC int 3 - 10017DA7: CC int 3 - 10017DA8: CC int 3 - 10017DA9: CC int 3 - 10017DAA: CC int 3 - 10017DAB: CC int 3 - 10017DAC: CC int 3 - 10017DAD: CC int 3 - 10017DAE: CC int 3 - 10017DAF: CC int 3 - 10017DB0: 8B FF mov edi,edi - 10017DB2: 55 push ebp - 10017DB3: 8B EC mov ebp,esp - 10017DB5: 8B 45 08 mov eax,dword ptr [ebp+8] - 10017DB8: 8B 48 3C mov ecx,dword ptr [eax+3Ch] - 10017DBB: 03 C8 add ecx,eax - 10017DBD: 0F B7 41 14 movzx eax,word ptr [ecx+14h] - 10017DC1: 53 push ebx - 10017DC2: 56 push esi - 10017DC3: 0F B7 71 06 movzx esi,word ptr [ecx+6] - 10017DC7: 33 D2 xor edx,edx - 10017DC9: 57 push edi - 10017DCA: 8D 44 08 18 lea eax,[eax+ecx+18h] - 10017DCE: 85 F6 test esi,esi - 10017DD0: 76 1B jbe 10017DED - 10017DD2: 8B 7D 0C mov edi,dword ptr [ebp+0Ch] - 10017DD5: 8B 48 0C mov ecx,dword ptr [eax+0Ch] - 10017DD8: 3B F9 cmp edi,ecx - 10017DDA: 72 09 jb 10017DE5 - 10017DDC: 8B 58 08 mov ebx,dword ptr [eax+8] - 10017DDF: 03 D9 add ebx,ecx - 10017DE1: 3B FB cmp edi,ebx - 10017DE3: 72 0A jb 10017DEF - 10017DE5: 42 inc edx - 10017DE6: 83 C0 28 add eax,28h - 10017DE9: 3B D6 cmp edx,esi - 10017DEB: 72 E8 jb 10017DD5 - 10017DED: 33 C0 xor eax,eax - 10017DEF: 5F pop edi - 10017DF0: 5E pop esi - 10017DF1: 5B pop ebx - 10017DF2: 5D pop ebp - 10017DF3: C3 ret - 10017DF4: CC int 3 - 10017DF5: CC int 3 - 10017DF6: CC int 3 - 10017DF7: CC int 3 - 10017DF8: CC int 3 - 10017DF9: CC int 3 - 10017DFA: CC int 3 - 10017DFB: CC int 3 - 10017DFC: CC int 3 - 10017DFD: CC int 3 - 10017DFE: CC int 3 - 10017DFF: CC int 3 - 10017E00: 8B FF mov edi,edi - 10017E02: 55 push ebp - 10017E03: 8B EC mov ebp,esp - 10017E05: 6A FE push 0FFFFFFFEh - 10017E07: 68 20 1F 02 10 push 10021F20h - 10017E0C: 68 F0 00 01 10 push 100100F0h - 10017E11: 64 A1 00 00 00 00 mov eax,dword ptr fs:[00000000h] - 10017E17: 50 push eax - 10017E18: 83 EC 08 sub esp,8 - 10017E1B: 53 push ebx - 10017E1C: 56 push esi - 10017E1D: 57 push edi - 10017E1E: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10017E23: 31 45 F8 xor dword ptr [ebp-8],eax - 10017E26: 33 C5 xor eax,ebp - 10017E28: 50 push eax - 10017E29: 8D 45 F0 lea eax,[ebp-10h] - 10017E2C: 64 A3 00 00 00 00 mov dword ptr fs:[00000000h],eax - 10017E32: 89 65 E8 mov dword ptr [ebp-18h],esp - 10017E35: C7 45 FC 00 00 00 mov dword ptr [ebp-4],0 - 00 - 10017E3C: 68 00 00 00 10 push 10000000h - 10017E41: E8 2A FF FF FF call 10017D70 - 10017E46: 83 C4 04 add esp,4 - 10017E49: 85 C0 test eax,eax - 10017E4B: 74 55 je 10017EA2 - 10017E4D: 8B 45 08 mov eax,dword ptr [ebp+8] - 10017E50: 2D 00 00 00 10 sub eax,10000000h - 10017E55: 50 push eax - 10017E56: 68 00 00 00 10 push 10000000h - 10017E5B: E8 50 FF FF FF call 10017DB0 - 10017E60: 83 C4 08 add esp,8 - 10017E63: 85 C0 test eax,eax - 10017E65: 74 3B je 10017EA2 - 10017E67: 8B 40 24 mov eax,dword ptr [eax+24h] - 10017E6A: C1 E8 1F shr eax,1Fh - 10017E6D: F7 D0 not eax - 10017E6F: 83 E0 01 and eax,1 - 10017E72: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 10017E79: 8B 4D F0 mov ecx,dword ptr [ebp-10h] - 10017E7C: 64 89 0D 00 00 00 mov dword ptr fs:[00000000h],ecx - 00 - 10017E83: 59 pop ecx - 10017E84: 5F pop edi - 10017E85: 5E pop esi - 10017E86: 5B pop ebx - 10017E87: 8B E5 mov esp,ebp - 10017E89: 5D pop ebp - 10017E8A: C3 ret - 10017E8B: 8B 45 EC mov eax,dword ptr [ebp-14h] - 10017E8E: 8B 08 mov ecx,dword ptr [eax] - 10017E90: 8B 01 mov eax,dword ptr [ecx] - 10017E92: 33 D2 xor edx,edx - 10017E94: 3D 05 00 00 C0 cmp eax,0C0000005h - 10017E99: 0F 94 C2 sete dl - 10017E9C: 8B C2 mov eax,edx - 10017E9E: C3 ret - 10017E9F: 8B 65 E8 mov esp,dword ptr [ebp-18h] - 10017EA2: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 10017EA9: 33 C0 xor eax,eax - 10017EAB: 8B 4D F0 mov ecx,dword ptr [ebp-10h] - 10017EAE: 64 89 0D 00 00 00 mov dword ptr fs:[00000000h],ecx - 00 - 10017EB5: 59 pop ecx - 10017EB6: 5F pop edi - 10017EB7: 5E pop esi - 10017EB8: 5B pop ebx - 10017EB9: 8B E5 mov esp,ebp - 10017EBB: 5D pop ebp - 10017EBC: C3 ret - 10017EBD: 8B FF mov edi,edi - 10017EBF: 55 push ebp - 10017EC0: 8B EC mov ebp,esp - 10017EC2: 83 EC 18 sub esp,18h - 10017EC5: 53 push ebx - 10017EC6: FF 75 0C push dword ptr [ebp+0Ch] - 10017EC9: 8D 4D E8 lea ecx,[ebp-18h] - 10017ECC: E8 2B 28 FF FF call 1000A6FC - 10017ED1: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 10017ED4: 81 FB 00 01 00 00 cmp ebx,100h - 10017EDA: 73 54 jae 10017F30 - 10017EDC: 8B 4D E8 mov ecx,dword ptr [ebp-18h] - 10017EDF: 83 B9 AC 00 00 00 cmp dword ptr [ecx+000000ACh],1 - 01 - 10017EE6: 7E 14 jle 10017EFC - 10017EE8: 8D 45 E8 lea eax,[ebp-18h] - 10017EEB: 50 push eax - 10017EEC: 6A 02 push 2 - 10017EEE: 53 push ebx - 10017EEF: E8 2B 31 00 00 call 1001B01F - 10017EF4: 8B 4D E8 mov ecx,dword ptr [ebp-18h] - 10017EF7: 83 C4 0C add esp,0Ch - 10017EFA: EB 0D jmp 10017F09 - 10017EFC: 8B 81 C8 00 00 00 mov eax,dword ptr [ecx+000000C8h] - 10017F02: 0F B7 04 58 movzx eax,word ptr [eax+ebx*2] - 10017F06: 83 E0 02 and eax,2 - 10017F09: 85 C0 test eax,eax - 10017F0B: 74 0F je 10017F1C - 10017F0D: 8B 81 D0 00 00 00 mov eax,dword ptr [ecx+000000D0h] - 10017F13: 0F B6 04 18 movzx eax,byte ptr [eax+ebx] - 10017F17: E9 A7 00 00 00 jmp 10017FC3 - 10017F1C: 80 7D F4 00 cmp byte ptr [ebp-0Ch],0 - 10017F20: 74 07 je 10017F29 - 10017F22: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 10017F25: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 10017F29: 8B C3 mov eax,ebx - 10017F2B: E9 A0 00 00 00 jmp 10017FD0 - 10017F30: 8B 45 E8 mov eax,dword ptr [ebp-18h] - 10017F33: 83 B8 AC 00 00 00 cmp dword ptr [eax+000000ACh],1 - 01 - 10017F3A: 7E 31 jle 10017F6D - 10017F3C: 89 5D 08 mov dword ptr [ebp+8],ebx - 10017F3F: C1 7D 08 08 sar dword ptr [ebp+8],8 - 10017F43: 8D 45 E8 lea eax,[ebp-18h] - 10017F46: 50 push eax - 10017F47: 8B 45 08 mov eax,dword ptr [ebp+8] - 10017F4A: 25 FF 00 00 00 and eax,0FFh - 10017F4F: 50 push eax - 10017F50: E8 BC FC FF FF call 10017C11 - 10017F55: 59 pop ecx - 10017F56: 59 pop ecx - 10017F57: 85 C0 test eax,eax - 10017F59: 74 12 je 10017F6D - 10017F5B: 8A 45 08 mov al,byte ptr [ebp+8] - 10017F5E: 6A 02 push 2 - 10017F60: 88 45 FC mov byte ptr [ebp-4],al - 10017F63: 88 5D FD mov byte ptr [ebp-3],bl - 10017F66: C6 45 FE 00 mov byte ptr [ebp-2],0 - 10017F6A: 59 pop ecx - 10017F6B: EB 15 jmp 10017F82 - 10017F6D: E8 D7 70 FF FF call 1000F049 - 10017F72: C7 00 2A 00 00 00 mov dword ptr [eax],2Ah - 10017F78: 33 C9 xor ecx,ecx - 10017F7A: 88 5D FC mov byte ptr [ebp-4],bl - 10017F7D: C6 45 FD 00 mov byte ptr [ebp-3],0 - 10017F81: 41 inc ecx - 10017F82: 8B 45 E8 mov eax,dword ptr [ebp-18h] - 10017F85: 6A 01 push 1 - 10017F87: FF 70 04 push dword ptr [eax+4] - 10017F8A: 8D 55 F8 lea edx,[ebp-8] - 10017F8D: 6A 03 push 3 - 10017F8F: 52 push edx - 10017F90: 51 push ecx - 10017F91: 8D 4D FC lea ecx,[ebp-4] - 10017F94: 51 push ecx - 10017F95: 68 00 02 00 00 push 200h - 10017F9A: FF 70 14 push dword ptr [eax+14h] - 10017F9D: 8D 45 E8 lea eax,[ebp-18h] - 10017FA0: 50 push eax - 10017FA1: E8 1D 10 00 00 call 10018FC3 - 10017FA6: 83 C4 24 add esp,24h - 10017FA9: 85 C0 test eax,eax - 10017FAB: 0F 84 6B FF FF FF je 10017F1C - 10017FB1: 83 F8 01 cmp eax,1 - 10017FB4: 0F B6 45 F8 movzx eax,byte ptr [ebp-8] - 10017FB8: 74 09 je 10017FC3 - 10017FBA: 0F B6 4D F9 movzx ecx,byte ptr [ebp-7] - 10017FBE: C1 E0 08 shl eax,8 - 10017FC1: 0B C1 or eax,ecx - 10017FC3: 80 7D F4 00 cmp byte ptr [ebp-0Ch],0 - 10017FC7: 74 07 je 10017FD0 - 10017FC9: 8B 4D F0 mov ecx,dword ptr [ebp-10h] - 10017FCC: 83 61 70 FD and dword ptr [ecx+70h],0FFFFFFFDh - 10017FD0: 5B pop ebx - 10017FD1: C9 leave - 10017FD2: C3 ret - 10017FD3: 8B FF mov edi,edi - 10017FD5: 55 push ebp - 10017FD6: 8B EC mov ebp,esp - 10017FD8: 83 3D D8 69 02 10 cmp dword ptr ds:[100269D8h],0 - 00 - 10017FDF: 75 10 jne 10017FF1 - 10017FE1: 8B 45 08 mov eax,dword ptr [ebp+8] - 10017FE4: 8D 48 9F lea ecx,[eax-61h] - 10017FE7: 83 F9 19 cmp ecx,19h - 10017FEA: 77 11 ja 10017FFD - 10017FEC: 83 C0 E0 add eax,0FFFFFFE0h - 10017FEF: 5D pop ebp - 10017FF0: C3 ret - 10017FF1: 6A 00 push 0 - 10017FF3: FF 75 08 push dword ptr [ebp+8] - 10017FF6: E8 C2 FE FF FF call 10017EBD - 10017FFB: 59 pop ecx - 10017FFC: 59 pop ecx - 10017FFD: 5D pop ebp - 10017FFE: C3 ret - 10017FFF: 8B FF mov edi,edi - 10018001: 55 push ebp - 10018002: 8B EC mov ebp,esp - 10018004: 8B 45 08 mov eax,dword ptr [ebp+8] - 10018007: 56 push esi - 10018008: 57 push edi - 10018009: 85 C0 test eax,eax - 1001800B: 7C 59 jl 10018066 - 1001800D: 3B 05 F4 6B 02 10 cmp eax,dword ptr ds:[10026BF4h] - 10018013: 73 51 jae 10018066 - 10018015: 8B C8 mov ecx,eax - 10018017: C1 F9 05 sar ecx,5 - 1001801A: 8B F0 mov esi,eax - 1001801C: 83 E6 1F and esi,1Fh - 1001801F: 8D 3C 8D 00 6C 02 lea edi,[ecx*4+10026C00h] - 10 - 10018026: 8B 0F mov ecx,dword ptr [edi] - 10018028: C1 E6 06 shl esi,6 - 1001802B: 83 3C 0E FF cmp dword ptr [esi+ecx],0FFFFFFFFh - 1001802F: 75 35 jne 10018066 - 10018031: 83 3D F8 61 02 10 cmp dword ptr ds:[100261F8h],1 - 01 - 10018038: 53 push ebx - 10018039: 8B 5D 0C mov ebx,dword ptr [ebp+0Ch] - 1001803C: 75 1E jne 1001805C - 1001803E: 83 E8 00 sub eax,0 - 10018041: 74 10 je 10018053 - 10018043: 48 dec eax - 10018044: 74 08 je 1001804E - 10018046: 48 dec eax - 10018047: 75 13 jne 1001805C - 10018049: 53 push ebx - 1001804A: 6A F4 push 0FFFFFFF4h - 1001804C: EB 08 jmp 10018056 - 1001804E: 53 push ebx - 1001804F: 6A F5 push 0FFFFFFF5h - 10018051: EB 03 jmp 10018056 - 10018053: 53 push ebx - 10018054: 6A F6 push 0FFFFFFF6h - 10018056: FF 15 40 F1 01 10 call dword ptr ds:[1001F140h] - 1001805C: 8B 07 mov eax,dword ptr [edi] - 1001805E: 89 1C 06 mov dword ptr [esi+eax],ebx - 10018061: 33 C0 xor eax,eax - 10018063: 5B pop ebx - 10018064: EB 16 jmp 1001807C - 10018066: E8 DE 6F FF FF call 1000F049 - 1001806B: C7 00 09 00 00 00 mov dword ptr [eax],9 - 10018071: E8 E6 6F FF FF call 1000F05C - 10018076: 83 20 00 and dword ptr [eax],0 - 10018079: 83 C8 FF or eax,0FFFFFFFFh - 1001807C: 5F pop edi - 1001807D: 5E pop esi - 1001807E: 5D pop ebp - 1001807F: C3 ret - 10018080: 8B FF mov edi,edi - 10018082: 55 push ebp - 10018083: 8B EC mov ebp,esp - 10018085: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 10018088: 53 push ebx - 10018089: 33 DB xor ebx,ebx - 1001808B: 3B CB cmp ecx,ebx - 1001808D: 56 push esi - 1001808E: 57 push edi - 1001808F: 7C 5B jl 100180EC - 10018091: 3B 0D F4 6B 02 10 cmp ecx,dword ptr ds:[10026BF4h] - 10018097: 73 53 jae 100180EC - 10018099: 8B C1 mov eax,ecx - 1001809B: C1 F8 05 sar eax,5 - 1001809E: 8B F1 mov esi,ecx - 100180A0: 8D 3C 85 00 6C 02 lea edi,[eax*4+10026C00h] - 10 - 100180A7: 8B 07 mov eax,dword ptr [edi] - 100180A9: 83 E6 1F and esi,1Fh - 100180AC: C1 E6 06 shl esi,6 - 100180AF: 03 C6 add eax,esi - 100180B1: F6 40 04 01 test byte ptr [eax+4],1 - 100180B5: 74 35 je 100180EC - 100180B7: 83 38 FF cmp dword ptr [eax],0FFFFFFFFh - 100180BA: 74 30 je 100180EC - 100180BC: 83 3D F8 61 02 10 cmp dword ptr ds:[100261F8h],1 - 01 - 100180C3: 75 1D jne 100180E2 - 100180C5: 2B CB sub ecx,ebx - 100180C7: 74 10 je 100180D9 - 100180C9: 49 dec ecx - 100180CA: 74 08 je 100180D4 - 100180CC: 49 dec ecx - 100180CD: 75 13 jne 100180E2 - 100180CF: 53 push ebx - 100180D0: 6A F4 push 0FFFFFFF4h - 100180D2: EB 08 jmp 100180DC - 100180D4: 53 push ebx - 100180D5: 6A F5 push 0FFFFFFF5h - 100180D7: EB 03 jmp 100180DC - 100180D9: 53 push ebx - 100180DA: 6A F6 push 0FFFFFFF6h - 100180DC: FF 15 40 F1 01 10 call dword ptr ds:[1001F140h] - 100180E2: 8B 07 mov eax,dword ptr [edi] - 100180E4: 83 0C 06 FF or dword ptr [esi+eax],0FFFFFFFFh - 100180E8: 33 C0 xor eax,eax - 100180EA: EB 15 jmp 10018101 - 100180EC: E8 58 6F FF FF call 1000F049 - 100180F1: C7 00 09 00 00 00 mov dword ptr [eax],9 - 100180F7: E8 60 6F FF FF call 1000F05C - 100180FC: 89 18 mov dword ptr [eax],ebx - 100180FE: 83 C8 FF or eax,0FFFFFFFFh - 10018101: 5F pop edi - 10018102: 5E pop esi - 10018103: 5B pop ebx - 10018104: 5D pop ebp - 10018105: C3 ret - 10018106: 8B FF mov edi,edi - 10018108: 55 push ebp - 10018109: 8B EC mov ebp,esp - 1001810B: 8B 45 08 mov eax,dword ptr [ebp+8] - 1001810E: 83 F8 FE cmp eax,0FFFFFFFEh - 10018111: 75 18 jne 1001812B - 10018113: E8 44 6F FF FF call 1000F05C - 10018118: 83 20 00 and dword ptr [eax],0 - 1001811B: E8 29 6F FF FF call 1000F049 - 10018120: C7 00 09 00 00 00 mov dword ptr [eax],9 - 10018126: 83 C8 FF or eax,0FFFFFFFFh - 10018129: 5D pop ebp - 1001812A: C3 ret - 1001812B: 56 push esi - 1001812C: 33 F6 xor esi,esi - 1001812E: 3B C6 cmp eax,esi - 10018130: 7C 22 jl 10018154 - 10018132: 3B 05 F4 6B 02 10 cmp eax,dword ptr ds:[10026BF4h] - 10018138: 73 1A jae 10018154 - 1001813A: 8B C8 mov ecx,eax - 1001813C: 83 E0 1F and eax,1Fh - 1001813F: C1 F9 05 sar ecx,5 - 10018142: 8B 0C 8D 00 6C 02 mov ecx,dword ptr [ecx*4+10026C00h] - 10 - 10018149: C1 E0 06 shl eax,6 - 1001814C: 03 C1 add eax,ecx - 1001814E: F6 40 04 01 test byte ptr [eax+4],1 - 10018152: 75 24 jne 10018178 - 10018154: E8 03 6F FF FF call 1000F05C - 10018159: 89 30 mov dword ptr [eax],esi - 1001815B: E8 E9 6E FF FF call 1000F049 - 10018160: 56 push esi - 10018161: 56 push esi - 10018162: 56 push esi - 10018163: 56 push esi - 10018164: 56 push esi - 10018165: C7 00 09 00 00 00 mov dword ptr [eax],9 - 1001816B: E8 71 6E FF FF call 1000EFE1 - 10018170: 83 C4 14 add esp,14h - 10018173: 83 C8 FF or eax,0FFFFFFFFh - 10018176: EB 02 jmp 1001817A - 10018178: 8B 00 mov eax,dword ptr [eax] - 1001817A: 5E pop esi - 1001817B: 5D pop ebp - 1001817C: C3 ret - 1001817D: 6A 0C push 0Ch - 1001817F: 68 40 1F 02 10 push 10021F40h - 10018184: E8 FF 7E FF FF call 10010088 - 10018189: 8B 7D 08 mov edi,dword ptr [ebp+8] - 1001818C: 8B C7 mov eax,edi - 1001818E: C1 F8 05 sar eax,5 - 10018191: 8B F7 mov esi,edi - 10018193: 83 E6 1F and esi,1Fh - 10018196: C1 E6 06 shl esi,6 - 10018199: 03 34 85 00 6C 02 add esi,dword ptr [eax*4+10026C00h] - 10 - 100181A0: C7 45 E4 01 00 00 mov dword ptr [ebp-1Ch],1 - 00 - 100181A7: 33 DB xor ebx,ebx - 100181A9: 39 5E 08 cmp dword ptr [esi+8],ebx - 100181AC: 75 36 jne 100181E4 - 100181AE: 6A 0A push 0Ah - 100181B0: E8 D9 73 FF FF call 1000F58E - 100181B5: 59 pop ecx - 100181B6: 89 5D FC mov dword ptr [ebp-4],ebx - 100181B9: 39 5E 08 cmp dword ptr [esi+8],ebx - 100181BC: 75 1A jne 100181D8 - 100181BE: 68 A0 0F 00 00 push 0FA0h - 100181C3: 8D 46 0C lea eax,[esi+0Ch] - 100181C6: 50 push eax - 100181C7: E8 38 FB FF FF call 10017D04 - 100181CC: 59 pop ecx - 100181CD: 59 pop ecx - 100181CE: 85 C0 test eax,eax - 100181D0: 75 03 jne 100181D5 - 100181D2: 89 5D E4 mov dword ptr [ebp-1Ch],ebx - 100181D5: FF 46 08 inc dword ptr [esi+8] - 100181D8: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 100181DF: E8 30 00 00 00 call 10018214 - 100181E4: 39 5D E4 cmp dword ptr [ebp-1Ch],ebx - 100181E7: 74 1D je 10018206 - 100181E9: 8B C7 mov eax,edi - 100181EB: C1 F8 05 sar eax,5 - 100181EE: 83 E7 1F and edi,1Fh - 100181F1: C1 E7 06 shl edi,6 - 100181F4: 8B 04 85 00 6C 02 mov eax,dword ptr [eax*4+10026C00h] - 10 - 100181FB: 8D 44 38 0C lea eax,[eax+edi+0Ch] - 100181FF: 50 push eax - 10018200: FF 15 64 F0 01 10 call dword ptr ds:[1001F064h] - 10018206: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 10018209: E8 BF 7E FF FF call 100100CD - 1001820E: C3 ret - 1001820F: 33 DB xor ebx,ebx - 10018211: 8B 7D 08 mov edi,dword ptr [ebp+8] - 10018214: 6A 0A push 0Ah - 10018216: E8 99 72 FF FF call 1000F4B4 - 1001821B: 59 pop ecx - 1001821C: C3 ret - 1001821D: 8B FF mov edi,edi - 1001821F: 55 push ebp - 10018220: 8B EC mov ebp,esp - 10018222: 8B 45 08 mov eax,dword ptr [ebp+8] - 10018225: 8B C8 mov ecx,eax - 10018227: 83 E0 1F and eax,1Fh - 1001822A: C1 F9 05 sar ecx,5 - 1001822D: 8B 0C 8D 00 6C 02 mov ecx,dword ptr [ecx*4+10026C00h] - 10 - 10018234: C1 E0 06 shl eax,6 - 10018237: 8D 44 01 0C lea eax,[ecx+eax+0Ch] - 1001823B: 50 push eax - 1001823C: FF 15 68 F0 01 10 call dword ptr ds:[1001F068h] - 10018242: 5D pop ebp - 10018243: C3 ret - 10018244: 6A 18 push 18h - 10018246: 68 60 1F 02 10 push 10021F60h - 1001824B: E8 38 7E FF FF call 10010088 - 10018250: 83 4D E4 FF or dword ptr [ebp-1Ch],0FFFFFFFFh - 10018254: 33 FF xor edi,edi - 10018256: 89 7D DC mov dword ptr [ebp-24h],edi - 10018259: 6A 0B push 0Bh - 1001825B: E8 6B 72 FF FF call 1000F4CB - 10018260: 59 pop ecx - 10018261: 85 C0 test eax,eax - 10018263: 75 08 jne 1001826D - 10018265: 83 C8 FF or eax,0FFFFFFFFh - 10018268: E9 62 01 00 00 jmp 100183CF - 1001826D: 6A 0B push 0Bh - 1001826F: E8 1A 73 FF FF call 1000F58E - 10018274: 59 pop ecx - 10018275: 89 7D FC mov dword ptr [ebp-4],edi - 10018278: 89 7D D8 mov dword ptr [ebp-28h],edi - 1001827B: 83 FF 40 cmp edi,40h - 1001827E: 0F 8D 3C 01 00 00 jge 100183C0 - 10018284: 8B 34 BD 00 6C 02 mov esi,dword ptr [edi*4+10026C00h] - 10 - 1001828B: 85 F6 test esi,esi - 1001828D: 0F 84 BA 00 00 00 je 1001834D - 10018293: 89 75 E0 mov dword ptr [ebp-20h],esi - 10018296: 8B 04 BD 00 6C 02 mov eax,dword ptr [edi*4+10026C00h] - 10 - 1001829D: 05 00 08 00 00 add eax,800h - 100182A2: 3B F0 cmp esi,eax - 100182A4: 0F 83 97 00 00 00 jae 10018341 - 100182AA: F6 46 04 01 test byte ptr [esi+4],1 - 100182AE: 75 5C jne 1001830C - 100182B0: 83 7E 08 00 cmp dword ptr [esi+8],0 - 100182B4: 75 39 jne 100182EF - 100182B6: 6A 0A push 0Ah - 100182B8: E8 D1 72 FF FF call 1000F58E - 100182BD: 59 pop ecx - 100182BE: 33 DB xor ebx,ebx - 100182C0: 43 inc ebx - 100182C1: 89 5D FC mov dword ptr [ebp-4],ebx - 100182C4: 83 7E 08 00 cmp dword ptr [esi+8],0 - 100182C8: 75 1C jne 100182E6 - 100182CA: 68 A0 0F 00 00 push 0FA0h - 100182CF: 8D 46 0C lea eax,[esi+0Ch] - 100182D2: 50 push eax - 100182D3: E8 2C FA FF FF call 10017D04 - 100182D8: 59 pop ecx - 100182D9: 59 pop ecx - 100182DA: 85 C0 test eax,eax - 100182DC: 75 05 jne 100182E3 - 100182DE: 89 5D DC mov dword ptr [ebp-24h],ebx - 100182E1: EB 03 jmp 100182E6 - 100182E3: FF 46 08 inc dword ptr [esi+8] - 100182E6: 83 65 FC 00 and dword ptr [ebp-4],0 - 100182EA: E8 28 00 00 00 call 10018317 - 100182EF: 83 7D DC 00 cmp dword ptr [ebp-24h],0 - 100182F3: 75 17 jne 1001830C - 100182F5: 8D 5E 0C lea ebx,[esi+0Ch] - 100182F8: 53 push ebx - 100182F9: FF 15 64 F0 01 10 call dword ptr ds:[1001F064h] - 100182FF: F6 46 04 01 test byte ptr [esi+4],1 - 10018303: 74 1B je 10018320 - 10018305: 53 push ebx - 10018306: FF 15 68 F0 01 10 call dword ptr ds:[1001F068h] - 1001830C: 83 C6 40 add esi,40h - 1001830F: EB 82 jmp 10018293 - 10018311: 8B 7D D8 mov edi,dword ptr [ebp-28h] - 10018314: 8B 75 E0 mov esi,dword ptr [ebp-20h] - 10018317: 6A 0A push 0Ah - 10018319: E8 96 71 FF FF call 1000F4B4 - 1001831E: 59 pop ecx - 1001831F: C3 ret - 10018320: 83 7D DC 00 cmp dword ptr [ebp-24h],0 - 10018324: 75 E6 jne 1001830C - 10018326: C6 46 04 01 mov byte ptr [esi+4],1 - 1001832A: 83 0E FF or dword ptr [esi],0FFFFFFFFh - 1001832D: 2B 34 BD 00 6C 02 sub esi,dword ptr [edi*4+10026C00h] - 10 - 10018334: C1 FE 06 sar esi,6 - 10018337: 8B C7 mov eax,edi - 10018339: C1 E0 05 shl eax,5 - 1001833C: 03 F0 add esi,eax - 1001833E: 89 75 E4 mov dword ptr [ebp-1Ch],esi - 10018341: 83 7D E4 FF cmp dword ptr [ebp-1Ch],0FFFFFFFFh - 10018345: 75 79 jne 100183C0 - 10018347: 47 inc edi - 10018348: E9 2B FF FF FF jmp 10018278 - 1001834D: 6A 40 push 40h - 1001834F: 6A 20 push 20h - 10018351: E8 F8 A5 FF FF call 1001294E - 10018356: 59 pop ecx - 10018357: 59 pop ecx - 10018358: 89 45 E0 mov dword ptr [ebp-20h],eax - 1001835B: 85 C0 test eax,eax - 1001835D: 74 61 je 100183C0 - 1001835F: 8D 0C BD 00 6C 02 lea ecx,[edi*4+10026C00h] - 10 - 10018366: 89 01 mov dword ptr [ecx],eax - 10018368: 83 05 F4 6B 02 10 add dword ptr ds:[10026BF4h],20h - 20 - 1001836F: 8B 11 mov edx,dword ptr [ecx] - 10018371: 81 C2 00 08 00 00 add edx,800h - 10018377: 3B C2 cmp eax,edx - 10018379: 73 17 jae 10018392 - 1001837B: C6 40 04 00 mov byte ptr [eax+4],0 - 1001837F: 83 08 FF or dword ptr [eax],0FFFFFFFFh - 10018382: C6 40 05 0A mov byte ptr [eax+5],0Ah - 10018386: 83 60 08 00 and dword ptr [eax+8],0 - 1001838A: 83 C0 40 add eax,40h - 1001838D: 89 45 E0 mov dword ptr [ebp-20h],eax - 10018390: EB DD jmp 1001836F - 10018392: C1 E7 05 shl edi,5 - 10018395: 89 7D E4 mov dword ptr [ebp-1Ch],edi - 10018398: 8B C7 mov eax,edi - 1001839A: C1 F8 05 sar eax,5 - 1001839D: 8B CF mov ecx,edi - 1001839F: 83 E1 1F and ecx,1Fh - 100183A2: C1 E1 06 shl ecx,6 - 100183A5: 8B 04 85 00 6C 02 mov eax,dword ptr [eax*4+10026C00h] - 10 - 100183AC: C6 44 08 04 01 mov byte ptr [eax+ecx+4],1 - 100183B1: 57 push edi - 100183B2: E8 C6 FD FF FF call 1001817D - 100183B7: 59 pop ecx - 100183B8: 85 C0 test eax,eax - 100183BA: 75 04 jne 100183C0 - 100183BC: 83 4D E4 FF or dword ptr [ebp-1Ch],0FFFFFFFFh - 100183C0: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 100183C7: E8 09 00 00 00 call 100183D5 - 100183CC: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 100183CF: E8 F9 7C FF FF call 100100CD - 100183D4: C3 ret - 100183D5: 6A 0B push 0Bh - 100183D7: E8 D8 70 FF FF call 1000F4B4 - 100183DC: 59 pop ecx - 100183DD: C3 ret - 100183DE: 6A 10 push 10h - 100183E0: 68 88 1F 02 10 push 10021F88h - 100183E5: E8 9E 7C FF FF call 10010088 - 100183EA: 8B 45 08 mov eax,dword ptr [ebp+8] - 100183ED: 83 F8 FE cmp eax,0FFFFFFFEh - 100183F0: 75 13 jne 10018405 - 100183F2: E8 52 6C FF FF call 1000F049 - 100183F7: C7 00 09 00 00 00 mov dword ptr [eax],9 - 100183FD: 83 C8 FF or eax,0FFFFFFFFh - 10018400: E9 AA 00 00 00 jmp 100184AF - 10018405: 33 DB xor ebx,ebx - 10018407: 3B C3 cmp eax,ebx - 10018409: 7C 08 jl 10018413 - 1001840B: 3B 05 F4 6B 02 10 cmp eax,dword ptr ds:[10026BF4h] - 10018411: 72 1A jb 1001842D - 10018413: E8 31 6C FF FF call 1000F049 - 10018418: C7 00 09 00 00 00 mov dword ptr [eax],9 - 1001841E: 53 push ebx - 1001841F: 53 push ebx - 10018420: 53 push ebx - 10018421: 53 push ebx - 10018422: 53 push ebx - 10018423: E8 B9 6B FF FF call 1000EFE1 - 10018428: 83 C4 14 add esp,14h - 1001842B: EB D0 jmp 100183FD - 1001842D: 8B C8 mov ecx,eax - 1001842F: C1 F9 05 sar ecx,5 - 10018432: 8D 3C 8D 00 6C 02 lea edi,[ecx*4+10026C00h] - 10 - 10018439: 8B F0 mov esi,eax - 1001843B: 83 E6 1F and esi,1Fh - 1001843E: C1 E6 06 shl esi,6 - 10018441: 8B 0F mov ecx,dword ptr [edi] - 10018443: 0F BE 4C 0E 04 movsx ecx,byte ptr [esi+ecx+4] - 10018448: 83 E1 01 and ecx,1 - 1001844B: 74 C6 je 10018413 - 1001844D: 50 push eax - 1001844E: E8 2A FD FF FF call 1001817D - 10018453: 59 pop ecx - 10018454: 89 5D FC mov dword ptr [ebp-4],ebx - 10018457: 8B 07 mov eax,dword ptr [edi] - 10018459: F6 44 06 04 01 test byte ptr [esi+eax+4],1 - 1001845E: 74 31 je 10018491 - 10018460: FF 75 08 push dword ptr [ebp+8] - 10018463: E8 9E FC FF FF call 10018106 - 10018468: 59 pop ecx - 10018469: 50 push eax - 1001846A: FF 15 44 F1 01 10 call dword ptr ds:[1001F144h] - 10018470: 85 C0 test eax,eax - 10018472: 75 0B jne 1001847F - 10018474: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 1001847A: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1001847D: EB 03 jmp 10018482 - 1001847F: 89 5D E4 mov dword ptr [ebp-1Ch],ebx - 10018482: 39 5D E4 cmp dword ptr [ebp-1Ch],ebx - 10018485: 74 19 je 100184A0 - 10018487: E8 D0 6B FF FF call 1000F05C - 1001848C: 8B 4D E4 mov ecx,dword ptr [ebp-1Ch] - 1001848F: 89 08 mov dword ptr [eax],ecx - 10018491: E8 B3 6B FF FF call 1000F049 - 10018496: C7 00 09 00 00 00 mov dword ptr [eax],9 - 1001849C: 83 4D E4 FF or dword ptr [ebp-1Ch],0FFFFFFFFh - 100184A0: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 100184A7: E8 09 00 00 00 call 100184B5 - 100184AC: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 100184AF: E8 19 7C FF FF call 100100CD - 100184B4: C3 ret - 100184B5: FF 75 08 push dword ptr [ebp+8] - 100184B8: E8 60 FD FF FF call 1001821D - 100184BD: 59 pop ecx - 100184BE: C3 ret - 100184BF: 8B FF mov edi,edi - 100184C1: 55 push ebp - 100184C2: 8B EC mov ebp,esp - 100184C4: 83 EC 10 sub esp,10h - 100184C7: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 100184CC: 33 C5 xor eax,ebp - 100184CE: 89 45 FC mov dword ptr [ebp-4],eax - 100184D1: 53 push ebx - 100184D2: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 100184D5: 56 push esi - 100184D6: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 100184D9: 57 push edi - 100184DA: BF FF FF 00 00 mov edi,0FFFFh - 100184DF: 8B C7 mov eax,edi - 100184E1: 66 3B D8 cmp bx,ax - 100184E4: 0F 84 66 01 00 00 je 10018650 - 100184EA: 8B 46 0C mov eax,dword ptr [esi+0Ch] - 100184ED: A8 01 test al,1 - 100184EF: 75 10 jne 10018501 - 100184F1: 84 C0 test al,al - 100184F3: 0F 89 57 01 00 00 jns 10018650 - 100184F9: A8 02 test al,2 - 100184FB: 0F 85 4F 01 00 00 jne 10018650 - 10018501: 83 7E 08 00 cmp dword ptr [esi+8],0 - 10018505: 75 07 jne 1001850E - 10018507: 56 push esi - 10018508: E8 89 F3 FF FF call 10017896 - 1001850D: 59 pop ecx - 1001850E: F6 46 0C 40 test byte ptr [esi+0Ch],40h - 10018512: 0F 85 0B 01 00 00 jne 10018623 - 10018518: 56 push esi - 10018519: E8 C9 7F FF FF call 100104E7 - 1001851E: 59 pop ecx - 1001851F: BB 70 56 02 10 mov ebx,10025670h - 10018524: 83 F8 FF cmp eax,0FFFFFFFFh - 10018527: 74 33 je 1001855C - 10018529: 56 push esi - 1001852A: E8 B8 7F FF FF call 100104E7 - 1001852F: 59 pop ecx - 10018530: 83 F8 FE cmp eax,0FFFFFFFEh - 10018533: 74 27 je 1001855C - 10018535: 56 push esi - 10018536: E8 AC 7F FF FF call 100104E7 - 1001853B: C1 F8 05 sar eax,5 - 1001853E: 56 push esi - 1001853F: 8D 3C 85 00 6C 02 lea edi,[eax*4+10026C00h] - 10 - 10018546: E8 9C 7F FF FF call 100104E7 - 1001854B: 83 E0 1F and eax,1Fh - 1001854E: C1 E0 06 shl eax,6 - 10018551: 03 07 add eax,dword ptr [edi] - 10018553: 59 pop ecx - 10018554: 59 pop ecx - 10018555: BF FF FF 00 00 mov edi,0FFFFh - 1001855A: EB 02 jmp 1001855E - 1001855C: 8B C3 mov eax,ebx - 1001855E: F6 40 04 80 test byte ptr [eax+4],80h - 10018562: 0F 84 B8 00 00 00 je 10018620 - 10018568: 56 push esi - 10018569: E8 79 7F FF FF call 100104E7 - 1001856E: 59 pop ecx - 1001856F: 83 F8 FF cmp eax,0FFFFFFFFh - 10018572: 74 33 je 100185A7 - 10018574: 56 push esi - 10018575: E8 6D 7F FF FF call 100104E7 - 1001857A: 59 pop ecx - 1001857B: 83 F8 FE cmp eax,0FFFFFFFEh - 1001857E: 74 27 je 100185A7 - 10018580: 56 push esi - 10018581: E8 61 7F FF FF call 100104E7 - 10018586: C1 F8 05 sar eax,5 - 10018589: 56 push esi - 1001858A: 8D 3C 85 00 6C 02 lea edi,[eax*4+10026C00h] - 10 - 10018591: E8 51 7F FF FF call 100104E7 - 10018596: 83 E0 1F and eax,1Fh - 10018599: C1 E0 06 shl eax,6 - 1001859C: 03 07 add eax,dword ptr [edi] - 1001859E: 59 pop ecx - 1001859F: 59 pop ecx - 100185A0: BF FF FF 00 00 mov edi,0FFFFh - 100185A5: EB 02 jmp 100185A9 - 100185A7: 8B C3 mov eax,ebx - 100185A9: F6 40 24 7F test byte ptr [eax+24h],7Fh - 100185AD: 74 11 je 100185C0 - 100185AF: 8B 55 08 mov edx,dword ptr [ebp+8] - 100185B2: 6A 02 push 2 - 100185B4: 58 pop eax - 100185B5: 88 55 F4 mov byte ptr [ebp-0Ch],dl - 100185B8: 88 75 F5 mov byte ptr [ebp-0Bh],dh - 100185BB: 89 45 F0 mov dword ptr [ebp-10h],eax - 100185BE: EB 1F jmp 100185DF - 100185C0: FF 75 08 push dword ptr [ebp+8] - 100185C3: 8D 45 F4 lea eax,[ebp-0Ch] - 100185C6: 6A 05 push 5 - 100185C8: 50 push eax - 100185C9: 8D 45 F0 lea eax,[ebp-10h] - 100185CC: 50 push eax - 100185CD: E8 13 03 00 00 call 100188E5 - 100185D2: 83 C4 10 add esp,10h - 100185D5: 85 C0 test eax,eax - 100185D7: 75 77 jne 10018650 - 100185D9: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 100185DC: 8B 55 08 mov edx,dword ptr [ebp+8] - 100185DF: 8B 4E 08 mov ecx,dword ptr [esi+8] - 100185E2: 03 C8 add ecx,eax - 100185E4: 39 0E cmp dword ptr [esi],ecx - 100185E6: 73 0D jae 100185F5 - 100185E8: 83 7E 04 00 cmp dword ptr [esi+4],0 - 100185EC: 75 62 jne 10018650 - 100185EE: 3B 46 18 cmp eax,dword ptr [esi+18h] - 100185F1: 7F 5D jg 10018650 - 100185F3: 89 0E mov dword ptr [esi],ecx - 100185F5: 8D 48 FF lea ecx,[eax-1] - 100185F8: 85 C9 test ecx,ecx - 100185FA: 7C 10 jl 1001860C - 100185FC: FF 0E dec dword ptr [esi] - 100185FE: 49 dec ecx - 100185FF: 8A 5C 0D F5 mov bl,byte ptr [ebp+ecx-0Bh] - 10018603: 8B 06 mov eax,dword ptr [esi] - 10018605: 88 18 mov byte ptr [eax],bl - 10018607: 79 F3 jns 100185FC - 10018609: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 1001860C: 01 46 04 add dword ptr [esi+4],eax - 1001860F: 8B 46 0C mov eax,dword ptr [esi+0Ch] - 10018612: 83 E0 EF and eax,0FFFFFFEFh - 10018615: 83 C8 01 or eax,1 - 10018618: 89 46 0C mov dword ptr [esi+0Ch],eax - 1001861B: 66 8B C2 mov ax,dx - 1001861E: EB 32 jmp 10018652 - 10018620: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 10018623: 8B 46 08 mov eax,dword ptr [esi+8] - 10018626: 83 C0 02 add eax,2 - 10018629: 39 06 cmp dword ptr [esi],eax - 1001862B: 73 0E jae 1001863B - 1001862D: 83 7E 04 00 cmp dword ptr [esi+4],0 - 10018631: 75 1D jne 10018650 - 10018633: 83 7E 18 02 cmp dword ptr [esi+18h],2 - 10018637: 72 17 jb 10018650 - 10018639: 89 06 mov dword ptr [esi],eax - 1001863B: 83 06 FE add dword ptr [esi],0FFFFFFFEh - 1001863E: F6 46 0C 40 test byte ptr [esi+0Ch],40h - 10018642: 8B 06 mov eax,dword ptr [esi] - 10018644: 74 1B je 10018661 - 10018646: 66 39 18 cmp word ptr [eax],bx - 10018649: 74 19 je 10018664 - 1001864B: 83 C0 02 add eax,2 - 1001864E: 89 06 mov dword ptr [esi],eax - 10018650: 8B C7 mov eax,edi - 10018652: 8B 4D FC mov ecx,dword ptr [ebp-4] - 10018655: 5F pop edi - 10018656: 5E pop esi - 10018657: 33 CD xor ecx,ebp - 10018659: 5B pop ebx - 1001865A: E8 3C 1A FF FF call 1000A09B - 1001865F: C9 leave - 10018660: C3 ret - 10018661: 66 89 18 mov word ptr [eax],bx - 10018664: 8B 46 0C mov eax,dword ptr [esi+0Ch] - 10018667: 83 46 04 02 add dword ptr [esi+4],2 - 1001866B: 83 E0 EF and eax,0FFFFFFEFh - 1001866E: 83 C8 01 or eax,1 - 10018671: 89 46 0C mov dword ptr [esi+0Ch],eax - 10018674: 66 8B C3 mov ax,bx - 10018677: EB D9 jmp 10018652 - 10018679: 8B FF mov edi,edi - 1001867B: 55 push ebp - 1001867C: 8B EC mov ebp,esp - 1001867E: B8 FF FF 00 00 mov eax,0FFFFh - 10018683: 83 EC 14 sub esp,14h - 10018686: 66 39 45 08 cmp word ptr [ebp+8],ax - 1001868A: 75 06 jne 10018692 - 1001868C: 83 65 FC 00 and dword ptr [ebp-4],0 - 10018690: EB 65 jmp 100186F7 - 10018692: B8 00 01 00 00 mov eax,100h - 10018697: 66 39 45 08 cmp word ptr [ebp+8],ax - 1001869B: 73 1A jae 100186B7 - 1001869D: 0F B7 45 08 movzx eax,word ptr [ebp+8] - 100186A1: 8B 0D 74 57 02 10 mov ecx,dword ptr ds:[10025774h] - 100186A7: 66 8B 04 41 mov ax,word ptr [ecx+eax*2] - 100186AB: 66 23 45 0C and ax,word ptr [ebp+0Ch] - 100186AF: 0F B7 C0 movzx eax,ax - 100186B2: 89 45 FC mov dword ptr [ebp-4],eax - 100186B5: EB 40 jmp 100186F7 - 100186B7: FF 75 10 push dword ptr [ebp+10h] - 100186BA: 8D 4D EC lea ecx,[ebp-14h] - 100186BD: E8 3A 20 FF FF call 1000A6FC - 100186C2: 8B 45 EC mov eax,dword ptr [ebp-14h] - 100186C5: FF 70 14 push dword ptr [eax+14h] - 100186C8: FF 70 04 push dword ptr [eax+4] - 100186CB: 8D 45 FC lea eax,[ebp-4] - 100186CE: 50 push eax - 100186CF: 6A 01 push 1 - 100186D1: 8D 45 08 lea eax,[ebp+8] - 100186D4: 50 push eax - 100186D5: 8D 45 EC lea eax,[ebp-14h] - 100186D8: 6A 01 push 1 - 100186DA: 50 push eax - 100186DB: E8 30 2C 00 00 call 1001B310 - 100186E0: 83 C4 1C add esp,1Ch - 100186E3: 85 C0 test eax,eax - 100186E5: 75 03 jne 100186EA - 100186E7: 21 45 FC and dword ptr [ebp-4],eax - 100186EA: 80 7D F8 00 cmp byte ptr [ebp-8],0 - 100186EE: 74 07 je 100186F7 - 100186F0: 8B 45 F4 mov eax,dword ptr [ebp-0Ch] - 100186F3: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 100186F7: 0F B7 45 FC movzx eax,word ptr [ebp-4] - 100186FB: 0F B7 4D 0C movzx ecx,word ptr [ebp+0Ch] - 100186FF: 23 C1 and eax,ecx - 10018701: C9 leave - 10018702: C3 ret - 10018703: 8B FF mov edi,edi - 10018705: 55 push ebp - 10018706: 8B EC mov ebp,esp - 10018708: 51 push ecx - 10018709: B8 FF FF 00 00 mov eax,0FFFFh - 1001870E: 66 39 45 08 cmp word ptr [ebp+8],ax - 10018712: 75 04 jne 10018718 - 10018714: 33 C0 xor eax,eax - 10018716: C9 leave - 10018717: C3 ret - 10018718: B8 00 01 00 00 mov eax,100h - 1001871D: 66 39 45 08 cmp word ptr [ebp+8],ax - 10018721: 73 16 jae 10018739 - 10018723: 0F B7 45 08 movzx eax,word ptr [ebp+8] - 10018727: 8B 0D 74 57 02 10 mov ecx,dword ptr ds:[10025774h] - 1001872D: 0F B7 04 41 movzx eax,word ptr [ecx+eax*2] - 10018731: 0F B7 4D 0C movzx ecx,word ptr [ebp+0Ch] - 10018735: 23 C1 and eax,ecx - 10018737: C9 leave - 10018738: C3 ret - 10018739: 83 3D D8 69 02 10 cmp dword ptr ds:[100269D8h],0 - 00 - 10018740: 75 25 jne 10018767 - 10018742: FF 35 9C 55 02 10 push dword ptr ds:[1002559Ch] - 10018748: 8D 45 FC lea eax,[ebp-4] - 1001874B: FF 35 8C 55 02 10 push dword ptr ds:[1002558Ch] - 10018751: 50 push eax - 10018752: 6A 01 push 1 - 10018754: 8D 45 08 lea eax,[ebp+8] - 10018757: 50 push eax - 10018758: 6A 01 push 1 - 1001875A: 68 68 56 02 10 push 10025668h - 1001875F: E8 AC 2B 00 00 call 1001B310 - 10018764: 83 C4 1C add esp,1Ch - 10018767: 6A 00 push 0 - 10018769: FF 75 0C push dword ptr [ebp+0Ch] - 1001876C: FF 75 08 push dword ptr [ebp+8] - 1001876F: E8 05 FF FF FF call 10018679 - 10018774: 83 C4 0C add esp,0Ch - 10018777: C9 leave - 10018778: C3 ret - 10018779: 8B FF mov edi,edi - 1001877B: 55 push ebp - 1001877C: 8B EC mov ebp,esp - 1001877E: 83 EC 10 sub esp,10h - 10018781: 53 push ebx - 10018782: 56 push esi - 10018783: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 10018786: 33 DB xor ebx,ebx - 10018788: 57 push edi - 10018789: 8B 7D 10 mov edi,dword ptr [ebp+10h] - 1001878C: 3B F3 cmp esi,ebx - 1001878E: 75 14 jne 100187A4 - 10018790: 3B FB cmp edi,ebx - 10018792: 76 10 jbe 100187A4 - 10018794: 8B 45 08 mov eax,dword ptr [ebp+8] - 10018797: 3B C3 cmp eax,ebx - 10018799: 74 02 je 1001879D - 1001879B: 89 18 mov dword ptr [eax],ebx - 1001879D: 33 C0 xor eax,eax - 1001879F: E9 83 00 00 00 jmp 10018827 - 100187A4: 8B 45 08 mov eax,dword ptr [ebp+8] - 100187A7: 3B C3 cmp eax,ebx - 100187A9: 74 03 je 100187AE - 100187AB: 83 08 FF or dword ptr [eax],0FFFFFFFFh - 100187AE: 81 FF FF FF FF 7F cmp edi,7FFFFFFFh - 100187B4: 76 1B jbe 100187D1 - 100187B6: E8 8E 68 FF FF call 1000F049 - 100187BB: 6A 16 push 16h - 100187BD: 5E pop esi - 100187BE: 53 push ebx - 100187BF: 53 push ebx - 100187C0: 53 push ebx - 100187C1: 53 push ebx - 100187C2: 53 push ebx - 100187C3: 89 30 mov dword ptr [eax],esi - 100187C5: E8 17 68 FF FF call 1000EFE1 - 100187CA: 83 C4 14 add esp,14h - 100187CD: 8B C6 mov eax,esi - 100187CF: EB 56 jmp 10018827 - 100187D1: FF 75 18 push dword ptr [ebp+18h] - 100187D4: 8D 4D F0 lea ecx,[ebp-10h] - 100187D7: E8 20 1F FF FF call 1000A6FC - 100187DC: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 100187DF: 39 58 14 cmp dword ptr [eax+14h],ebx - 100187E2: 0F 85 9C 00 00 00 jne 10018884 - 100187E8: 66 8B 45 14 mov ax,word ptr [ebp+14h] - 100187EC: B9 FF 00 00 00 mov ecx,0FFh - 100187F1: 66 3B C1 cmp ax,cx - 100187F4: 76 36 jbe 1001882C - 100187F6: 3B F3 cmp esi,ebx - 100187F8: 74 0F je 10018809 - 100187FA: 3B FB cmp edi,ebx - 100187FC: 76 0B jbe 10018809 - 100187FE: 57 push edi - 100187FF: 53 push ebx - 10018800: 56 push esi - 10018801: E8 6A 1A FF FF call 1000A270 - 10018806: 83 C4 0C add esp,0Ch - 10018809: E8 3B 68 FF FF call 1000F049 - 1001880E: C7 00 2A 00 00 00 mov dword ptr [eax],2Ah - 10018814: E8 30 68 FF FF call 1000F049 - 10018819: 8B 00 mov eax,dword ptr [eax] - 1001881B: 38 5D FC cmp byte ptr [ebp-4],bl - 1001881E: 74 07 je 10018827 - 10018820: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 10018823: 83 61 70 FD and dword ptr [ecx+70h],0FFFFFFFDh - 10018827: 5F pop edi - 10018828: 5E pop esi - 10018829: 5B pop ebx - 1001882A: C9 leave - 1001882B: C3 ret - 1001882C: 3B F3 cmp esi,ebx - 1001882E: 74 32 je 10018862 - 10018830: 3B FB cmp edi,ebx - 10018832: 77 2C ja 10018860 - 10018834: E8 10 68 FF FF call 1000F049 - 10018839: 6A 22 push 22h - 1001883B: 5E pop esi - 1001883C: 53 push ebx - 1001883D: 53 push ebx - 1001883E: 53 push ebx - 1001883F: 53 push ebx - 10018840: 53 push ebx - 10018841: 89 30 mov dword ptr [eax],esi - 10018843: E8 99 67 FF FF call 1000EFE1 - 10018848: 83 C4 14 add esp,14h - 1001884B: 38 5D FC cmp byte ptr [ebp-4],bl - 1001884E: 0F 84 79 FF FF FF je 100187CD - 10018854: 8B 45 F8 mov eax,dword ptr [ebp-8] - 10018857: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1001885B: E9 6D FF FF FF jmp 100187CD - 10018860: 88 06 mov byte ptr [esi],al - 10018862: 8B 45 08 mov eax,dword ptr [ebp+8] - 10018865: 3B C3 cmp eax,ebx - 10018867: 74 06 je 1001886F - 10018869: C7 00 01 00 00 00 mov dword ptr [eax],1 - 1001886F: 38 5D FC cmp byte ptr [ebp-4],bl - 10018872: 0F 84 25 FF FF FF je 1001879D - 10018878: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1001887B: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1001887F: E9 19 FF FF FF jmp 1001879D - 10018884: 8D 4D 0C lea ecx,[ebp+0Ch] - 10018887: 51 push ecx - 10018888: 53 push ebx - 10018889: 57 push edi - 1001888A: 56 push esi - 1001888B: 6A 01 push 1 - 1001888D: 8D 4D 14 lea ecx,[ebp+14h] - 10018890: 51 push ecx - 10018891: 53 push ebx - 10018892: 89 5D 0C mov dword ptr [ebp+0Ch],ebx - 10018895: FF 70 04 push dword ptr [eax+4] - 10018898: FF 15 70 F0 01 10 call dword ptr ds:[1001F070h] - 1001889E: 3B C3 cmp eax,ebx - 100188A0: 74 14 je 100188B6 - 100188A2: 39 5D 0C cmp dword ptr [ebp+0Ch],ebx - 100188A5: 0F 85 5E FF FF FF jne 10018809 - 100188AB: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 100188AE: 3B CB cmp ecx,ebx - 100188B0: 74 BD je 1001886F - 100188B2: 89 01 mov dword ptr [ecx],eax - 100188B4: EB B9 jmp 1001886F - 100188B6: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 100188BC: 83 F8 7A cmp eax,7Ah - 100188BF: 0F 85 44 FF FF FF jne 10018809 - 100188C5: 3B F3 cmp esi,ebx - 100188C7: 0F 84 67 FF FF FF je 10018834 - 100188CD: 3B FB cmp edi,ebx - 100188CF: 0F 86 5F FF FF FF jbe 10018834 - 100188D5: 57 push edi - 100188D6: 53 push ebx - 100188D7: 56 push esi - 100188D8: E8 93 19 FF FF call 1000A270 - 100188DD: 83 C4 0C add esp,0Ch - 100188E0: E9 4F FF FF FF jmp 10018834 - 100188E5: 8B FF mov edi,edi - 100188E7: 55 push ebp - 100188E8: 8B EC mov ebp,esp - 100188EA: 6A 00 push 0 - 100188EC: FF 75 14 push dword ptr [ebp+14h] - 100188EF: FF 75 10 push dword ptr [ebp+10h] - 100188F2: FF 75 0C push dword ptr [ebp+0Ch] - 100188F5: FF 75 08 push dword ptr [ebp+8] - 100188F8: E8 7C FE FF FF call 10018779 - 100188FD: 83 C4 14 add esp,14h - 10018900: 5D pop ebp - 10018901: C3 ret - 10018902: 8B FF mov edi,edi - 10018904: 55 push ebp - 10018905: 8B EC mov ebp,esp - 10018907: 83 EC 2C sub esp,2Ch - 1001890A: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1001890F: 33 C5 xor eax,ebp - 10018911: 89 45 FC mov dword ptr [ebp-4],eax - 10018914: 53 push ebx - 10018915: 56 push esi - 10018916: 8B 75 08 mov esi,dword ptr [ebp+8] - 10018919: 33 DB xor ebx,ebx - 1001891B: 57 push edi - 1001891C: 8B 7D 0C mov edi,dword ptr [ebp+0Ch] - 1001891F: 89 75 D8 mov dword ptr [ebp-28h],esi - 10018922: 89 7D D4 mov dword ptr [ebp-2Ch],edi - 10018925: 89 5D DC mov dword ptr [ebp-24h],ebx - 10018928: 89 5D F0 mov dword ptr [ebp-10h],ebx - 1001892B: 3B F3 cmp esi,ebx - 1001892D: 74 0C je 1001893B - 1001892F: 39 5D 10 cmp dword ptr [ebp+10h],ebx - 10018932: 75 07 jne 1001893B - 10018934: 33 C0 xor eax,eax - 10018936: E9 4C 01 00 00 jmp 10018A87 - 1001893B: 3B FB cmp edi,ebx - 1001893D: 75 1D jne 1001895C - 1001893F: E8 05 67 FF FF call 1000F049 - 10018944: 53 push ebx - 10018945: 53 push ebx - 10018946: 53 push ebx - 10018947: 53 push ebx - 10018948: 53 push ebx - 10018949: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1001894F: E8 8D 66 FF FF call 1000EFE1 - 10018954: 83 C4 14 add esp,14h - 10018957: E9 28 01 00 00 jmp 10018A84 - 1001895C: FF 75 14 push dword ptr [ebp+14h] - 1001895F: 8D 4D E0 lea ecx,[ebp-20h] - 10018962: E8 95 1D FF FF call 1000A6FC - 10018967: 3B F3 cmp esi,ebx - 10018969: 0F 84 96 01 00 00 je 10018B05 - 1001896F: 8B 75 E0 mov esi,dword ptr [ebp-20h] - 10018972: 39 5E 14 cmp dword ptr [esi+14h],ebx - 10018975: 75 5A jne 100189D1 - 10018977: 39 5D 10 cmp dword ptr [ebp+10h],ebx - 1001897A: 76 2C jbe 100189A8 - 1001897C: B8 FF 00 00 00 mov eax,0FFh - 10018981: 66 39 07 cmp word ptr [edi],ax - 10018984: 0F 87 E3 00 00 00 ja 10018A6D - 1001898A: 8A 0F mov cl,byte ptr [edi] - 1001898C: 8B 55 D8 mov edx,dword ptr [ebp-28h] - 1001898F: 8B 45 DC mov eax,dword ptr [ebp-24h] - 10018992: 88 0C 02 mov byte ptr [edx+eax],cl - 10018995: 66 8B 0F mov cx,word ptr [edi] - 10018998: 47 inc edi - 10018999: 47 inc edi - 1001899A: 66 85 C9 test cx,cx - 1001899D: 74 1D je 100189BC - 1001899F: 40 inc eax - 100189A0: 89 45 DC mov dword ptr [ebp-24h],eax - 100189A3: 3B 45 10 cmp eax,dword ptr [ebp+10h] - 100189A6: 72 D4 jb 1001897C - 100189A8: 38 5D EC cmp byte ptr [ebp-14h],bl - 100189AB: 74 07 je 100189B4 - 100189AD: 8B 45 E8 mov eax,dword ptr [ebp-18h] - 100189B0: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 100189B4: 8B 45 DC mov eax,dword ptr [ebp-24h] - 100189B7: E9 CB 00 00 00 jmp 10018A87 - 100189BC: 38 5D EC cmp byte ptr [ebp-14h],bl - 100189BF: 0F 84 C2 00 00 00 je 10018A87 - 100189C5: 8B 4D E8 mov ecx,dword ptr [ebp-18h] - 100189C8: 83 61 70 FD and dword ptr [ecx+70h],0FFFFFFFDh - 100189CC: E9 B6 00 00 00 jmp 10018A87 - 100189D1: 83 BE AC 00 00 00 cmp dword ptr [esi+000000ACh],1 - 01 - 100189D8: 75 54 jne 10018A2E - 100189DA: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 100189DD: 3B CB cmp ecx,ebx - 100189DF: 76 1D jbe 100189FE - 100189E1: 8B C7 mov eax,edi - 100189E3: 66 39 18 cmp word ptr [eax],bx - 100189E6: 74 05 je 100189ED - 100189E8: 40 inc eax - 100189E9: 40 inc eax - 100189EA: 49 dec ecx - 100189EB: 75 F6 jne 100189E3 - 100189ED: 3B CB cmp ecx,ebx - 100189EF: 74 0D je 100189FE - 100189F1: 66 39 18 cmp word ptr [eax],bx - 100189F4: 75 08 jne 100189FE - 100189F6: 2B C7 sub eax,edi - 100189F8: D1 F8 sar eax,1 - 100189FA: 40 inc eax - 100189FB: 89 45 10 mov dword ptr [ebp+10h],eax - 100189FE: 8D 45 F0 lea eax,[ebp-10h] - 10018A01: 50 push eax - 10018A02: 53 push ebx - 10018A03: FF 75 10 push dword ptr [ebp+10h] - 10018A06: FF 75 D8 push dword ptr [ebp-28h] - 10018A09: FF 75 10 push dword ptr [ebp+10h] - 10018A0C: 57 push edi - 10018A0D: 53 push ebx - 10018A0E: FF 76 04 push dword ptr [esi+4] - 10018A11: FF 15 70 F0 01 10 call dword ptr ds:[1001F070h] - 10018A17: 3B C3 cmp eax,ebx - 10018A19: 74 52 je 10018A6D - 10018A1B: 39 5D F0 cmp dword ptr [ebp-10h],ebx - 10018A1E: 75 4D jne 10018A6D - 10018A20: 8B 4D D8 mov ecx,dword ptr [ebp-28h] - 10018A23: 38 5C 01 FF cmp byte ptr [ecx+eax-1],bl - 10018A27: 75 93 jne 100189BC - 10018A29: E9 10 01 00 00 jmp 10018B3E - 10018A2E: 8D 45 F0 lea eax,[ebp-10h] - 10018A31: 50 push eax - 10018A32: 53 push ebx - 10018A33: FF 75 10 push dword ptr [ebp+10h] - 10018A36: FF 75 D8 push dword ptr [ebp-28h] - 10018A39: 6A FF push 0FFFFFFFFh - 10018A3B: 57 push edi - 10018A3C: 53 push ebx - 10018A3D: FF 76 04 push dword ptr [esi+4] - 10018A40: FF 15 70 F0 01 10 call dword ptr ds:[1001F070h] - 10018A46: 8B F8 mov edi,eax - 10018A48: 3B FB cmp edi,ebx - 10018A4A: 74 0D je 10018A59 - 10018A4C: 39 5D F0 cmp dword ptr [ebp-10h],ebx - 10018A4F: 75 1C jne 10018A6D - 10018A51: 8D 47 FF lea eax,[edi-1] - 10018A54: E9 63 FF FF FF jmp 100189BC - 10018A59: 39 5D F0 cmp dword ptr [ebp-10h],ebx - 10018A5C: 75 0F jne 10018A6D - 10018A5E: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 10018A64: 83 F8 7A cmp eax,7Ah - 10018A67: 0F 84 83 00 00 00 je 10018AF0 - 10018A6D: E8 D7 65 FF FF call 1000F049 - 10018A72: C7 00 2A 00 00 00 mov dword ptr [eax],2Ah - 10018A78: 38 5D EC cmp byte ptr [ebp-14h],bl - 10018A7B: 74 07 je 10018A84 - 10018A7D: 8B 45 E8 mov eax,dword ptr [ebp-18h] - 10018A80: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 10018A84: 83 C8 FF or eax,0FFFFFFFFh - 10018A87: 8B 4D FC mov ecx,dword ptr [ebp-4] - 10018A8A: 5F pop edi - 10018A8B: 5E pop esi - 10018A8C: 33 CD xor ecx,ebp - 10018A8E: 5B pop ebx - 10018A8F: E8 07 16 FF FF call 1000A09B - 10018A94: C9 leave - 10018A95: C3 ret - 10018A96: 8D 45 F0 lea eax,[ebp-10h] - 10018A99: 50 push eax - 10018A9A: 53 push ebx - 10018A9B: FF B6 AC 00 00 00 push dword ptr [esi+000000ACh] - 10018AA1: 8D 45 F4 lea eax,[ebp-0Ch] - 10018AA4: 50 push eax - 10018AA5: 6A 01 push 1 - 10018AA7: FF 75 D4 push dword ptr [ebp-2Ch] - 10018AAA: 53 push ebx - 10018AAB: FF 76 04 push dword ptr [esi+4] - 10018AAE: FF 15 70 F0 01 10 call dword ptr ds:[1001F070h] - 10018AB4: 89 45 DC mov dword ptr [ebp-24h],eax - 10018AB7: 3B C3 cmp eax,ebx - 10018AB9: 74 B2 je 10018A6D - 10018ABB: 39 5D F0 cmp dword ptr [ebp-10h],ebx - 10018ABE: 75 AD jne 10018A6D - 10018AC0: 3B C3 cmp eax,ebx - 10018AC2: 7C A9 jl 10018A6D - 10018AC4: 83 F8 05 cmp eax,5 - 10018AC7: 77 A4 ja 10018A6D - 10018AC9: 8D 0C 38 lea ecx,[eax+edi] - 10018ACC: 3B 4D 10 cmp ecx,dword ptr [ebp+10h] - 10018ACF: 77 24 ja 10018AF5 - 10018AD1: 33 D2 xor edx,edx - 10018AD3: 3B C3 cmp eax,ebx - 10018AD5: 7E 15 jle 10018AEC - 10018AD7: 8A 4C 15 F4 mov cl,byte ptr [ebp+edx-0Ch] - 10018ADB: 8B 45 D8 mov eax,dword ptr [ebp-28h] - 10018ADE: 88 0C 38 mov byte ptr [eax+edi],cl - 10018AE1: 3A CB cmp cl,bl - 10018AE3: 74 10 je 10018AF5 - 10018AE5: 42 inc edx - 10018AE6: 47 inc edi - 10018AE7: 3B 55 DC cmp edx,dword ptr [ebp-24h] - 10018AEA: 7C EB jl 10018AD7 - 10018AEC: 83 45 D4 02 add dword ptr [ebp-2Ch],2 - 10018AF0: 3B 7D 10 cmp edi,dword ptr [ebp+10h] - 10018AF3: 72 A1 jb 10018A96 - 10018AF5: 38 5D EC cmp byte ptr [ebp-14h],bl - 10018AF8: 74 07 je 10018B01 - 10018AFA: 8B 45 E8 mov eax,dword ptr [ebp-18h] - 10018AFD: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 10018B01: 8B C7 mov eax,edi - 10018B03: EB 82 jmp 10018A87 - 10018B05: 8B 45 E0 mov eax,dword ptr [ebp-20h] - 10018B08: 39 58 14 cmp dword ptr [eax+14h],ebx - 10018B0B: 75 0C jne 10018B19 - 10018B0D: 57 push edi - 10018B0E: E8 CA 7B FF FF call 100106DD - 10018B13: 59 pop ecx - 10018B14: E9 A3 FE FF FF jmp 100189BC - 10018B19: 8D 4D F0 lea ecx,[ebp-10h] - 10018B1C: 51 push ecx - 10018B1D: 53 push ebx - 10018B1E: 53 push ebx - 10018B1F: 53 push ebx - 10018B20: 6A FF push 0FFFFFFFFh - 10018B22: 57 push edi - 10018B23: 53 push ebx - 10018B24: FF 70 04 push dword ptr [eax+4] - 10018B27: FF 15 70 F0 01 10 call dword ptr ds:[1001F070h] - 10018B2D: 3B C3 cmp eax,ebx - 10018B2F: 0F 84 38 FF FF FF je 10018A6D - 10018B35: 39 5D F0 cmp dword ptr [ebp-10h],ebx - 10018B38: 0F 85 2F FF FF FF jne 10018A6D - 10018B3E: 48 dec eax - 10018B3F: E9 78 FE FF FF jmp 100189BC - 10018B44: 8B FF mov edi,edi - 10018B46: 55 push ebp - 10018B47: 8B EC mov ebp,esp - 10018B49: 51 push ecx - 10018B4A: 53 push ebx - 10018B4B: 56 push esi - 10018B4C: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 10018B4F: 33 DB xor ebx,ebx - 10018B51: 57 push edi - 10018B52: 8B 7D 10 mov edi,dword ptr [ebp+10h] - 10018B55: 89 5D FC mov dword ptr [ebp-4],ebx - 10018B58: 3B F3 cmp esi,ebx - 10018B5A: 74 47 je 10018BA3 - 10018B5C: 3B FB cmp edi,ebx - 10018B5E: 76 47 jbe 10018BA7 - 10018B60: 3B F3 cmp esi,ebx - 10018B62: 74 02 je 10018B66 - 10018B64: 88 1E mov byte ptr [esi],bl - 10018B66: 8B 45 08 mov eax,dword ptr [ebp+8] - 10018B69: 3B C3 cmp eax,ebx - 10018B6B: 74 02 je 10018B6F - 10018B6D: 89 18 mov dword ptr [eax],ebx - 10018B6F: 8B 45 18 mov eax,dword ptr [ebp+18h] - 10018B72: 3B C7 cmp eax,edi - 10018B74: 76 02 jbe 10018B78 - 10018B76: 8B C7 mov eax,edi - 10018B78: 3D FF FF FF 7F cmp eax,7FFFFFFFh - 10018B7D: 77 28 ja 10018BA7 - 10018B7F: FF 75 1C push dword ptr [ebp+1Ch] - 10018B82: 50 push eax - 10018B83: FF 75 14 push dword ptr [ebp+14h] - 10018B86: 56 push esi - 10018B87: E8 76 FD FF FF call 10018902 - 10018B8C: 83 C4 10 add esp,10h - 10018B8F: 83 F8 FF cmp eax,0FFFFFFFFh - 10018B92: 75 2E jne 10018BC2 - 10018B94: 3B F3 cmp esi,ebx - 10018B96: 74 02 je 10018B9A - 10018B98: 88 1E mov byte ptr [esi],bl - 10018B9A: E8 AA 64 FF FF call 1000F049 - 10018B9F: 8B 00 mov eax,dword ptr [eax] - 10018BA1: EB 56 jmp 10018BF9 - 10018BA3: 3B FB cmp edi,ebx - 10018BA5: 74 B9 je 10018B60 - 10018BA7: E8 9D 64 FF FF call 1000F049 - 10018BAC: 6A 16 push 16h - 10018BAE: 5E pop esi - 10018BAF: 53 push ebx - 10018BB0: 53 push ebx - 10018BB1: 53 push ebx - 10018BB2: 53 push ebx - 10018BB3: 53 push ebx - 10018BB4: 89 30 mov dword ptr [eax],esi - 10018BB6: E8 26 64 FF FF call 1000EFE1 - 10018BBB: 83 C4 14 add esp,14h - 10018BBE: 8B C6 mov eax,esi - 10018BC0: EB 37 jmp 10018BF9 - 10018BC2: 40 inc eax - 10018BC3: 3B F3 cmp esi,ebx - 10018BC5: 74 26 je 10018BED - 10018BC7: 3B C7 cmp eax,edi - 10018BC9: 76 1E jbe 10018BE9 - 10018BCB: 83 7D 18 FF cmp dword ptr [ebp+18h],0FFFFFFFFh - 10018BCF: 74 0F je 10018BE0 - 10018BD1: 88 1E mov byte ptr [esi],bl - 10018BD3: 3B F8 cmp edi,eax - 10018BD5: 77 09 ja 10018BE0 - 10018BD7: E8 6D 64 FF FF call 1000F049 - 10018BDC: 6A 22 push 22h - 10018BDE: EB CE jmp 10018BAE - 10018BE0: 8B C7 mov eax,edi - 10018BE2: C7 45 FC 50 00 00 mov dword ptr [ebp-4],50h - 00 - 10018BE9: 88 5C 30 FF mov byte ptr [eax+esi-1],bl - 10018BED: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 10018BF0: 3B CB cmp ecx,ebx - 10018BF2: 74 02 je 10018BF6 - 10018BF4: 89 01 mov dword ptr [ecx],eax - 10018BF6: 8B 45 FC mov eax,dword ptr [ebp-4] - 10018BF9: 5F pop edi - 10018BFA: 5E pop esi - 10018BFB: 5B pop ebx - 10018BFC: C9 leave - 10018BFD: C3 ret - 10018BFE: 8B FF mov edi,edi - 10018C00: 55 push ebp - 10018C01: 8B EC mov ebp,esp - 10018C03: 6A 00 push 0 - 10018C05: FF 75 18 push dword ptr [ebp+18h] - 10018C08: FF 75 14 push dword ptr [ebp+14h] - 10018C0B: FF 75 10 push dword ptr [ebp+10h] - 10018C0E: FF 75 0C push dword ptr [ebp+0Ch] - 10018C11: FF 75 08 push dword ptr [ebp+8] - 10018C14: E8 2B FF FF FF call 10018B44 - 10018C19: 83 C4 18 add esp,18h - 10018C1C: 5D pop ebp - 10018C1D: C3 ret - 10018C1E: 8B FF mov edi,edi - 10018C20: 55 push ebp - 10018C21: 8B EC mov ebp,esp - 10018C23: 83 EC 14 sub esp,14h - 10018C26: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10018C2B: 33 C5 xor eax,ebp - 10018C2D: 89 45 FC mov dword ptr [ebp-4],eax - 10018C30: 53 push ebx - 10018C31: 56 push esi - 10018C32: 33 DB xor ebx,ebx - 10018C34: 57 push edi - 10018C35: 8B F1 mov esi,ecx - 10018C37: 39 1D BC 6B 02 10 cmp dword ptr ds:[10026BBCh],ebx - 10018C3D: 75 38 jne 10018C77 - 10018C3F: 53 push ebx - 10018C40: 53 push ebx - 10018C41: 33 FF xor edi,edi - 10018C43: 47 inc edi - 10018C44: 57 push edi - 10018C45: 68 38 09 02 10 push 10020938h - 10018C4A: 68 00 01 00 00 push 100h - 10018C4F: 53 push ebx - 10018C50: FF 15 EC F0 01 10 call dword ptr ds:[1001F0ECh] - 10018C56: 85 C0 test eax,eax - 10018C58: 74 08 je 10018C62 - 10018C5A: 89 3D BC 6B 02 10 mov dword ptr ds:[10026BBCh],edi - 10018C60: EB 15 jmp 10018C77 - 10018C62: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 10018C68: 83 F8 78 cmp eax,78h - 10018C6B: 75 0A jne 10018C77 - 10018C6D: C7 05 BC 6B 02 10 mov dword ptr ds:[10026BBCh],2 - 02 00 00 00 - 10018C77: 39 5D 14 cmp dword ptr [ebp+14h],ebx - 10018C7A: 7E 22 jle 10018C9E - 10018C7C: 8B 4D 14 mov ecx,dword ptr [ebp+14h] - 10018C7F: 8B 45 10 mov eax,dword ptr [ebp+10h] - 10018C82: 49 dec ecx - 10018C83: 38 18 cmp byte ptr [eax],bl - 10018C85: 74 08 je 10018C8F - 10018C87: 40 inc eax - 10018C88: 3B CB cmp ecx,ebx - 10018C8A: 75 F6 jne 10018C82 - 10018C8C: 83 C9 FF or ecx,0FFFFFFFFh - 10018C8F: 8B 45 14 mov eax,dword ptr [ebp+14h] - 10018C92: 2B C1 sub eax,ecx - 10018C94: 48 dec eax - 10018C95: 3B 45 14 cmp eax,dword ptr [ebp+14h] - 10018C98: 7D 01 jge 10018C9B - 10018C9A: 40 inc eax - 10018C9B: 89 45 14 mov dword ptr [ebp+14h],eax - 10018C9E: A1 BC 6B 02 10 mov eax,dword ptr ds:[10026BBCh] - 10018CA3: 83 F8 02 cmp eax,2 - 10018CA6: 0F 84 AC 01 00 00 je 10018E58 - 10018CAC: 3B C3 cmp eax,ebx - 10018CAE: 0F 84 A4 01 00 00 je 10018E58 - 10018CB4: 83 F8 01 cmp eax,1 - 10018CB7: 0F 85 CC 01 00 00 jne 10018E89 - 10018CBD: 89 5D F8 mov dword ptr [ebp-8],ebx - 10018CC0: 39 5D 20 cmp dword ptr [ebp+20h],ebx - 10018CC3: 75 08 jne 10018CCD - 10018CC5: 8B 06 mov eax,dword ptr [esi] - 10018CC7: 8B 40 04 mov eax,dword ptr [eax+4] - 10018CCA: 89 45 20 mov dword ptr [ebp+20h],eax - 10018CCD: 8B 35 38 F1 01 10 mov esi,dword ptr ds:[1001F138h] - 10018CD3: 33 C0 xor eax,eax - 10018CD5: 39 5D 24 cmp dword ptr [ebp+24h],ebx - 10018CD8: 53 push ebx - 10018CD9: 53 push ebx - 10018CDA: FF 75 14 push dword ptr [ebp+14h] - 10018CDD: 0F 95 C0 setne al - 10018CE0: FF 75 10 push dword ptr [ebp+10h] - 10018CE3: 8D 04 C5 01 00 00 lea eax,[eax*8+00000001h] - 00 - 10018CEA: 50 push eax - 10018CEB: FF 75 20 push dword ptr [ebp+20h] - 10018CEE: FF D6 call esi - 10018CF0: 8B F8 mov edi,eax - 10018CF2: 3B FB cmp edi,ebx - 10018CF4: 0F 84 8F 01 00 00 je 10018E89 - 10018CFA: 7E 43 jle 10018D3F - 10018CFC: 6A E0 push 0FFFFFFE0h - 10018CFE: 33 D2 xor edx,edx - 10018D00: 58 pop eax - 10018D01: F7 F7 div eax,edi - 10018D03: 83 F8 02 cmp eax,2 - 10018D06: 72 37 jb 10018D3F - 10018D08: 8D 44 3F 08 lea eax,[edi+edi+8] - 10018D0C: 3D 00 04 00 00 cmp eax,400h - 10018D11: 77 13 ja 10018D26 - 10018D13: E8 A8 96 FF FF call 100123C0 - 10018D18: 8B C4 mov eax,esp - 10018D1A: 3B C3 cmp eax,ebx - 10018D1C: 74 1C je 10018D3A - 10018D1E: C7 00 CC CC 00 00 mov dword ptr [eax],0CCCCh - 10018D24: EB 11 jmp 10018D37 - 10018D26: 50 push eax - 10018D27: E8 0A 50 FF FF call 1000DD36 - 10018D2C: 59 pop ecx - 10018D2D: 3B C3 cmp eax,ebx - 10018D2F: 74 09 je 10018D3A - 10018D31: C7 00 DD DD 00 00 mov dword ptr [eax],0DDDDh - 10018D37: 83 C0 08 add eax,8 - 10018D3A: 89 45 F4 mov dword ptr [ebp-0Ch],eax - 10018D3D: EB 03 jmp 10018D42 - 10018D3F: 89 5D F4 mov dword ptr [ebp-0Ch],ebx - 10018D42: 39 5D F4 cmp dword ptr [ebp-0Ch],ebx - 10018D45: 0F 84 3E 01 00 00 je 10018E89 - 10018D4B: 57 push edi - 10018D4C: FF 75 F4 push dword ptr [ebp-0Ch] - 10018D4F: FF 75 14 push dword ptr [ebp+14h] - 10018D52: FF 75 10 push dword ptr [ebp+10h] - 10018D55: 6A 01 push 1 - 10018D57: FF 75 20 push dword ptr [ebp+20h] - 10018D5A: FF D6 call esi - 10018D5C: 85 C0 test eax,eax - 10018D5E: 0F 84 E3 00 00 00 je 10018E47 - 10018D64: 8B 35 EC F0 01 10 mov esi,dword ptr ds:[1001F0ECh] - 10018D6A: 53 push ebx - 10018D6B: 53 push ebx - 10018D6C: 57 push edi - 10018D6D: FF 75 F4 push dword ptr [ebp-0Ch] - 10018D70: FF 75 0C push dword ptr [ebp+0Ch] - 10018D73: FF 75 08 push dword ptr [ebp+8] - 10018D76: FF D6 call esi - 10018D78: 8B C8 mov ecx,eax - 10018D7A: 89 4D F8 mov dword ptr [ebp-8],ecx - 10018D7D: 3B CB cmp ecx,ebx - 10018D7F: 0F 84 C2 00 00 00 je 10018E47 - 10018D85: F7 45 0C 00 04 00 test dword ptr [ebp+0Ch],400h - 00 - 10018D8C: 74 29 je 10018DB7 - 10018D8E: 39 5D 1C cmp dword ptr [ebp+1Ch],ebx - 10018D91: 0F 84 B0 00 00 00 je 10018E47 - 10018D97: 3B 4D 1C cmp ecx,dword ptr [ebp+1Ch] - 10018D9A: 0F 8F A7 00 00 00 jg 10018E47 - 10018DA0: FF 75 1C push dword ptr [ebp+1Ch] - 10018DA3: FF 75 18 push dword ptr [ebp+18h] - 10018DA6: 57 push edi - 10018DA7: FF 75 F4 push dword ptr [ebp-0Ch] - 10018DAA: FF 75 0C push dword ptr [ebp+0Ch] - 10018DAD: FF 75 08 push dword ptr [ebp+8] - 10018DB0: FF D6 call esi - 10018DB2: E9 90 00 00 00 jmp 10018E47 - 10018DB7: 3B CB cmp ecx,ebx - 10018DB9: 7E 45 jle 10018E00 - 10018DBB: 6A E0 push 0FFFFFFE0h - 10018DBD: 33 D2 xor edx,edx - 10018DBF: 58 pop eax - 10018DC0: F7 F1 div eax,ecx - 10018DC2: 83 F8 02 cmp eax,2 - 10018DC5: 72 39 jb 10018E00 - 10018DC7: 8D 44 09 08 lea eax,[ecx+ecx+8] - 10018DCB: 3D 00 04 00 00 cmp eax,400h - 10018DD0: 77 16 ja 10018DE8 - 10018DD2: E8 E9 95 FF FF call 100123C0 - 10018DD7: 8B F4 mov esi,esp - 10018DD9: 3B F3 cmp esi,ebx - 10018DDB: 74 6A je 10018E47 - 10018DDD: C7 06 CC CC 00 00 mov dword ptr [esi],0CCCCh - 10018DE3: 83 C6 08 add esi,8 - 10018DE6: EB 1A jmp 10018E02 - 10018DE8: 50 push eax - 10018DE9: E8 48 4F FF FF call 1000DD36 - 10018DEE: 59 pop ecx - 10018DEF: 3B C3 cmp eax,ebx - 10018DF1: 74 09 je 10018DFC - 10018DF3: C7 00 DD DD 00 00 mov dword ptr [eax],0DDDDh - 10018DF9: 83 C0 08 add eax,8 - 10018DFC: 8B F0 mov esi,eax - 10018DFE: EB 02 jmp 10018E02 - 10018E00: 33 F6 xor esi,esi - 10018E02: 3B F3 cmp esi,ebx - 10018E04: 74 41 je 10018E47 - 10018E06: FF 75 F8 push dword ptr [ebp-8] - 10018E09: 56 push esi - 10018E0A: 57 push edi - 10018E0B: FF 75 F4 push dword ptr [ebp-0Ch] - 10018E0E: FF 75 0C push dword ptr [ebp+0Ch] - 10018E11: FF 75 08 push dword ptr [ebp+8] - 10018E14: FF 15 EC F0 01 10 call dword ptr ds:[1001F0ECh] - 10018E1A: 85 C0 test eax,eax - 10018E1C: 74 22 je 10018E40 - 10018E1E: 53 push ebx - 10018E1F: 53 push ebx - 10018E20: 39 5D 1C cmp dword ptr [ebp+1Ch],ebx - 10018E23: 75 04 jne 10018E29 - 10018E25: 53 push ebx - 10018E26: 53 push ebx - 10018E27: EB 06 jmp 10018E2F - 10018E29: FF 75 1C push dword ptr [ebp+1Ch] - 10018E2C: FF 75 18 push dword ptr [ebp+18h] - 10018E2F: FF 75 F8 push dword ptr [ebp-8] - 10018E32: 56 push esi - 10018E33: 53 push ebx - 10018E34: FF 75 20 push dword ptr [ebp+20h] - 10018E37: FF 15 70 F0 01 10 call dword ptr ds:[1001F070h] - 10018E3D: 89 45 F8 mov dword ptr [ebp-8],eax - 10018E40: 56 push esi - 10018E41: E8 96 18 FF FF call 1000A6DC - 10018E46: 59 pop ecx - 10018E47: FF 75 F4 push dword ptr [ebp-0Ch] - 10018E4A: E8 8D 18 FF FF call 1000A6DC - 10018E4F: 8B 45 F8 mov eax,dword ptr [ebp-8] - 10018E52: 59 pop ecx - 10018E53: E9 59 01 00 00 jmp 10018FB1 - 10018E58: 89 5D F4 mov dword ptr [ebp-0Ch],ebx - 10018E5B: 89 5D F0 mov dword ptr [ebp-10h],ebx - 10018E5E: 39 5D 08 cmp dword ptr [ebp+8],ebx - 10018E61: 75 08 jne 10018E6B - 10018E63: 8B 06 mov eax,dword ptr [esi] - 10018E65: 8B 40 14 mov eax,dword ptr [eax+14h] - 10018E68: 89 45 08 mov dword ptr [ebp+8],eax - 10018E6B: 39 5D 20 cmp dword ptr [ebp+20h],ebx - 10018E6E: 75 08 jne 10018E78 - 10018E70: 8B 06 mov eax,dword ptr [esi] - 10018E72: 8B 40 04 mov eax,dword ptr [eax+4] - 10018E75: 89 45 20 mov dword ptr [ebp+20h],eax - 10018E78: FF 75 08 push dword ptr [ebp+8] - 10018E7B: E8 CE 24 00 00 call 1001B34E - 10018E80: 59 pop ecx - 10018E81: 89 45 EC mov dword ptr [ebp-14h],eax - 10018E84: 83 F8 FF cmp eax,0FFFFFFFFh - 10018E87: 75 07 jne 10018E90 - 10018E89: 33 C0 xor eax,eax - 10018E8B: E9 21 01 00 00 jmp 10018FB1 - 10018E90: 3B 45 20 cmp eax,dword ptr [ebp+20h] - 10018E93: 0F 84 DB 00 00 00 je 10018F74 - 10018E99: 53 push ebx - 10018E9A: 53 push ebx - 10018E9B: 8D 4D 14 lea ecx,[ebp+14h] - 10018E9E: 51 push ecx - 10018E9F: FF 75 10 push dword ptr [ebp+10h] - 10018EA2: 50 push eax - 10018EA3: FF 75 20 push dword ptr [ebp+20h] - 10018EA6: E8 EC 24 00 00 call 1001B397 - 10018EAB: 83 C4 18 add esp,18h - 10018EAE: 89 45 F4 mov dword ptr [ebp-0Ch],eax - 10018EB1: 3B C3 cmp eax,ebx - 10018EB3: 74 D4 je 10018E89 - 10018EB5: 8B 35 48 F1 01 10 mov esi,dword ptr ds:[1001F148h] - 10018EBB: 53 push ebx - 10018EBC: 53 push ebx - 10018EBD: FF 75 14 push dword ptr [ebp+14h] - 10018EC0: 50 push eax - 10018EC1: FF 75 0C push dword ptr [ebp+0Ch] - 10018EC4: FF 75 08 push dword ptr [ebp+8] - 10018EC7: FF D6 call esi - 10018EC9: 89 45 F8 mov dword ptr [ebp-8],eax - 10018ECC: 3B C3 cmp eax,ebx - 10018ECE: 75 07 jne 10018ED7 - 10018ED0: 33 F6 xor esi,esi - 10018ED2: E9 B7 00 00 00 jmp 10018F8E - 10018ED7: 7E 3D jle 10018F16 - 10018ED9: 83 F8 E0 cmp eax,0FFFFFFE0h - 10018EDC: 77 38 ja 10018F16 - 10018EDE: 83 C0 08 add eax,8 - 10018EE1: 3D 00 04 00 00 cmp eax,400h - 10018EE6: 77 16 ja 10018EFE - 10018EE8: E8 D3 94 FF FF call 100123C0 - 10018EED: 8B FC mov edi,esp - 10018EEF: 3B FB cmp edi,ebx - 10018EF1: 74 DD je 10018ED0 - 10018EF3: C7 07 CC CC 00 00 mov dword ptr [edi],0CCCCh - 10018EF9: 83 C7 08 add edi,8 - 10018EFC: EB 1A jmp 10018F18 - 10018EFE: 50 push eax - 10018EFF: E8 32 4E FF FF call 1000DD36 - 10018F04: 59 pop ecx - 10018F05: 3B C3 cmp eax,ebx - 10018F07: 74 09 je 10018F12 - 10018F09: C7 00 DD DD 00 00 mov dword ptr [eax],0DDDDh - 10018F0F: 83 C0 08 add eax,8 - 10018F12: 8B F8 mov edi,eax - 10018F14: EB 02 jmp 10018F18 - 10018F16: 33 FF xor edi,edi - 10018F18: 3B FB cmp edi,ebx - 10018F1A: 74 B4 je 10018ED0 - 10018F1C: FF 75 F8 push dword ptr [ebp-8] - 10018F1F: 53 push ebx - 10018F20: 57 push edi - 10018F21: E8 4A 13 FF FF call 1000A270 - 10018F26: 83 C4 0C add esp,0Ch - 10018F29: FF 75 F8 push dword ptr [ebp-8] - 10018F2C: 57 push edi - 10018F2D: FF 75 14 push dword ptr [ebp+14h] - 10018F30: FF 75 F4 push dword ptr [ebp-0Ch] - 10018F33: FF 75 0C push dword ptr [ebp+0Ch] - 10018F36: FF 75 08 push dword ptr [ebp+8] - 10018F39: FF D6 call esi - 10018F3B: 89 45 F8 mov dword ptr [ebp-8],eax - 10018F3E: 3B C3 cmp eax,ebx - 10018F40: 75 04 jne 10018F46 - 10018F42: 33 F6 xor esi,esi - 10018F44: EB 25 jmp 10018F6B - 10018F46: FF 75 1C push dword ptr [ebp+1Ch] - 10018F49: 8D 45 F8 lea eax,[ebp-8] - 10018F4C: FF 75 18 push dword ptr [ebp+18h] - 10018F4F: 50 push eax - 10018F50: 57 push edi - 10018F51: FF 75 20 push dword ptr [ebp+20h] - 10018F54: FF 75 EC push dword ptr [ebp-14h] - 10018F57: E8 3B 24 00 00 call 1001B397 - 10018F5C: 8B F0 mov esi,eax - 10018F5E: 89 75 F0 mov dword ptr [ebp-10h],esi - 10018F61: 83 C4 18 add esp,18h - 10018F64: F7 DE neg esi - 10018F66: 1B F6 sbb esi,esi - 10018F68: 23 75 F8 and esi,dword ptr [ebp-8] - 10018F6B: 57 push edi - 10018F6C: E8 6B 17 FF FF call 1000A6DC - 10018F71: 59 pop ecx - 10018F72: EB 1A jmp 10018F8E - 10018F74: FF 75 1C push dword ptr [ebp+1Ch] - 10018F77: FF 75 18 push dword ptr [ebp+18h] - 10018F7A: FF 75 14 push dword ptr [ebp+14h] - 10018F7D: FF 75 10 push dword ptr [ebp+10h] - 10018F80: FF 75 0C push dword ptr [ebp+0Ch] - 10018F83: FF 75 08 push dword ptr [ebp+8] - 10018F86: FF 15 48 F1 01 10 call dword ptr ds:[1001F148h] - 10018F8C: 8B F0 mov esi,eax - 10018F8E: 39 5D F4 cmp dword ptr [ebp-0Ch],ebx - 10018F91: 74 09 je 10018F9C - 10018F93: FF 75 F4 push dword ptr [ebp-0Ch] - 10018F96: E8 99 13 FF FF call 1000A334 - 10018F9B: 59 pop ecx - 10018F9C: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 10018F9F: 3B C3 cmp eax,ebx - 10018FA1: 74 0C je 10018FAF - 10018FA3: 39 45 18 cmp dword ptr [ebp+18h],eax - 10018FA6: 74 07 je 10018FAF - 10018FA8: 50 push eax - 10018FA9: E8 86 13 FF FF call 1000A334 - 10018FAE: 59 pop ecx - 10018FAF: 8B C6 mov eax,esi - 10018FB1: 8D 65 E0 lea esp,[ebp-20h] - 10018FB4: 5F pop edi - 10018FB5: 5E pop esi - 10018FB6: 5B pop ebx - 10018FB7: 8B 4D FC mov ecx,dword ptr [ebp-4] - 10018FBA: 33 CD xor ecx,ebp - 10018FBC: E8 DA 10 FF FF call 1000A09B - 10018FC1: C9 leave - 10018FC2: C3 ret - 10018FC3: 8B FF mov edi,edi - 10018FC5: 55 push ebp - 10018FC6: 8B EC mov ebp,esp - 10018FC8: 83 EC 10 sub esp,10h - 10018FCB: FF 75 08 push dword ptr [ebp+8] - 10018FCE: 8D 4D F0 lea ecx,[ebp-10h] - 10018FD1: E8 26 17 FF FF call 1000A6FC - 10018FD6: FF 75 28 push dword ptr [ebp+28h] - 10018FD9: 8D 4D F0 lea ecx,[ebp-10h] - 10018FDC: FF 75 24 push dword ptr [ebp+24h] - 10018FDF: FF 75 20 push dword ptr [ebp+20h] - 10018FE2: FF 75 1C push dword ptr [ebp+1Ch] - 10018FE5: FF 75 18 push dword ptr [ebp+18h] - 10018FE8: FF 75 14 push dword ptr [ebp+14h] - 10018FEB: FF 75 10 push dword ptr [ebp+10h] - 10018FEE: FF 75 0C push dword ptr [ebp+0Ch] - 10018FF1: E8 28 FC FF FF call 10018C1E - 10018FF6: 83 C4 20 add esp,20h - 10018FF9: 80 7D FC 00 cmp byte ptr [ebp-4],0 - 10018FFD: 74 07 je 10019006 - 10018FFF: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 10019002: 83 61 70 FD and dword ptr [ecx+70h],0FFFFFFFDh - 10019006: C9 leave - 10019007: C3 ret - 10019008: 8B FF mov edi,edi - 1001900A: 55 push ebp - 1001900B: 8B EC mov ebp,esp - 1001900D: 51 push ecx - 1001900E: 51 push ecx - 1001900F: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 10019014: 33 C5 xor eax,ebp - 10019016: 89 45 FC mov dword ptr [ebp-4],eax - 10019019: A1 C0 6B 02 10 mov eax,dword ptr ds:[10026BC0h] - 1001901E: 53 push ebx - 1001901F: 56 push esi - 10019020: 33 DB xor ebx,ebx - 10019022: 57 push edi - 10019023: 8B F9 mov edi,ecx - 10019025: 3B C3 cmp eax,ebx - 10019027: 75 3A jne 10019063 - 10019029: 8D 45 F8 lea eax,[ebp-8] - 1001902C: 50 push eax - 1001902D: 33 F6 xor esi,esi - 1001902F: 46 inc esi - 10019030: 56 push esi - 10019031: 68 38 09 02 10 push 10020938h - 10019036: 56 push esi - 10019037: FF 15 50 F1 01 10 call dword ptr ds:[1001F150h] - 1001903D: 85 C0 test eax,eax - 1001903F: 74 08 je 10019049 - 10019041: 89 35 C0 6B 02 10 mov dword ptr ds:[10026BC0h],esi - 10019047: EB 34 jmp 1001907D - 10019049: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 1001904F: 83 F8 78 cmp eax,78h - 10019052: 75 0A jne 1001905E - 10019054: 6A 02 push 2 - 10019056: 58 pop eax - 10019057: A3 C0 6B 02 10 mov dword ptr ds:[10026BC0h],eax - 1001905C: EB 05 jmp 10019063 - 1001905E: A1 C0 6B 02 10 mov eax,dword ptr ds:[10026BC0h] - 10019063: 83 F8 02 cmp eax,2 - 10019066: 0F 84 CF 00 00 00 je 1001913B - 1001906C: 3B C3 cmp eax,ebx - 1001906E: 0F 84 C7 00 00 00 je 1001913B - 10019074: 83 F8 01 cmp eax,1 - 10019077: 0F 85 E8 00 00 00 jne 10019165 - 1001907D: 89 5D F8 mov dword ptr [ebp-8],ebx - 10019080: 39 5D 18 cmp dword ptr [ebp+18h],ebx - 10019083: 75 08 jne 1001908D - 10019085: 8B 07 mov eax,dword ptr [edi] - 10019087: 8B 40 04 mov eax,dword ptr [eax+4] - 1001908A: 89 45 18 mov dword ptr [ebp+18h],eax - 1001908D: 8B 35 38 F1 01 10 mov esi,dword ptr ds:[1001F138h] - 10019093: 33 C0 xor eax,eax - 10019095: 39 5D 20 cmp dword ptr [ebp+20h],ebx - 10019098: 53 push ebx - 10019099: 53 push ebx - 1001909A: FF 75 10 push dword ptr [ebp+10h] - 1001909D: 0F 95 C0 setne al - 100190A0: FF 75 0C push dword ptr [ebp+0Ch] - 100190A3: 8D 04 C5 01 00 00 lea eax,[eax*8+00000001h] - 00 - 100190AA: 50 push eax - 100190AB: FF 75 18 push dword ptr [ebp+18h] - 100190AE: FF D6 call esi - 100190B0: 8B F8 mov edi,eax - 100190B2: 3B FB cmp edi,ebx - 100190B4: 0F 84 AB 00 00 00 je 10019165 - 100190BA: 7E 3C jle 100190F8 - 100190BC: 81 FF F0 FF FF 7F cmp edi,7FFFFFF0h - 100190C2: 77 34 ja 100190F8 - 100190C4: 8D 44 3F 08 lea eax,[edi+edi+8] - 100190C8: 3D 00 04 00 00 cmp eax,400h - 100190CD: 77 13 ja 100190E2 - 100190CF: E8 EC 92 FF FF call 100123C0 - 100190D4: 8B C4 mov eax,esp - 100190D6: 3B C3 cmp eax,ebx - 100190D8: 74 1C je 100190F6 - 100190DA: C7 00 CC CC 00 00 mov dword ptr [eax],0CCCCh - 100190E0: EB 11 jmp 100190F3 - 100190E2: 50 push eax - 100190E3: E8 4E 4C FF FF call 1000DD36 - 100190E8: 59 pop ecx - 100190E9: 3B C3 cmp eax,ebx - 100190EB: 74 09 je 100190F6 - 100190ED: C7 00 DD DD 00 00 mov dword ptr [eax],0DDDDh - 100190F3: 83 C0 08 add eax,8 - 100190F6: 8B D8 mov ebx,eax - 100190F8: 85 DB test ebx,ebx - 100190FA: 74 69 je 10019165 - 100190FC: 8D 04 3F lea eax,[edi+edi] - 100190FF: 50 push eax - 10019100: 6A 00 push 0 - 10019102: 53 push ebx - 10019103: E8 68 11 FF FF call 1000A270 - 10019108: 83 C4 0C add esp,0Ch - 1001910B: 57 push edi - 1001910C: 53 push ebx - 1001910D: FF 75 10 push dword ptr [ebp+10h] - 10019110: FF 75 0C push dword ptr [ebp+0Ch] - 10019113: 6A 01 push 1 - 10019115: FF 75 18 push dword ptr [ebp+18h] - 10019118: FF D6 call esi - 1001911A: 85 C0 test eax,eax - 1001911C: 74 11 je 1001912F - 1001911E: FF 75 14 push dword ptr [ebp+14h] - 10019121: 50 push eax - 10019122: 53 push ebx - 10019123: FF 75 08 push dword ptr [ebp+8] - 10019126: FF 15 50 F1 01 10 call dword ptr ds:[1001F150h] - 1001912C: 89 45 F8 mov dword ptr [ebp-8],eax - 1001912F: 53 push ebx - 10019130: E8 A7 15 FF FF call 1000A6DC - 10019135: 8B 45 F8 mov eax,dword ptr [ebp-8] - 10019138: 59 pop ecx - 10019139: EB 75 jmp 100191B0 - 1001913B: 33 F6 xor esi,esi - 1001913D: 39 5D 1C cmp dword ptr [ebp+1Ch],ebx - 10019140: 75 08 jne 1001914A - 10019142: 8B 07 mov eax,dword ptr [edi] - 10019144: 8B 40 14 mov eax,dword ptr [eax+14h] - 10019147: 89 45 1C mov dword ptr [ebp+1Ch],eax - 1001914A: 39 5D 18 cmp dword ptr [ebp+18h],ebx - 1001914D: 75 08 jne 10019157 - 1001914F: 8B 07 mov eax,dword ptr [edi] - 10019151: 8B 40 04 mov eax,dword ptr [eax+4] - 10019154: 89 45 18 mov dword ptr [ebp+18h],eax - 10019157: FF 75 1C push dword ptr [ebp+1Ch] - 1001915A: E8 EF 21 00 00 call 1001B34E - 1001915F: 59 pop ecx - 10019160: 83 F8 FF cmp eax,0FFFFFFFFh - 10019163: 75 04 jne 10019169 - 10019165: 33 C0 xor eax,eax - 10019167: EB 47 jmp 100191B0 - 10019169: 3B 45 18 cmp eax,dword ptr [ebp+18h] - 1001916C: 74 1E je 1001918C - 1001916E: 53 push ebx - 1001916F: 53 push ebx - 10019170: 8D 4D 10 lea ecx,[ebp+10h] - 10019173: 51 push ecx - 10019174: FF 75 0C push dword ptr [ebp+0Ch] - 10019177: 50 push eax - 10019178: FF 75 18 push dword ptr [ebp+18h] - 1001917B: E8 17 22 00 00 call 1001B397 - 10019180: 8B F0 mov esi,eax - 10019182: 83 C4 18 add esp,18h - 10019185: 3B F3 cmp esi,ebx - 10019187: 74 DC je 10019165 - 10019189: 89 75 0C mov dword ptr [ebp+0Ch],esi - 1001918C: FF 75 14 push dword ptr [ebp+14h] - 1001918F: FF 75 10 push dword ptr [ebp+10h] - 10019192: FF 75 0C push dword ptr [ebp+0Ch] - 10019195: FF 75 08 push dword ptr [ebp+8] - 10019198: FF 75 1C push dword ptr [ebp+1Ch] - 1001919B: FF 15 4C F1 01 10 call dword ptr ds:[1001F14Ch] - 100191A1: 8B F8 mov edi,eax - 100191A3: 3B F3 cmp esi,ebx - 100191A5: 74 07 je 100191AE - 100191A7: 56 push esi - 100191A8: E8 87 11 FF FF call 1000A334 - 100191AD: 59 pop ecx - 100191AE: 8B C7 mov eax,edi - 100191B0: 8D 65 EC lea esp,[ebp-14h] - 100191B3: 5F pop edi - 100191B4: 5E pop esi - 100191B5: 5B pop ebx - 100191B6: 8B 4D FC mov ecx,dword ptr [ebp-4] - 100191B9: 33 CD xor ecx,ebp - 100191BB: E8 DB 0E FF FF call 1000A09B - 100191C0: C9 leave - 100191C1: C3 ret - 100191C2: 8B FF mov edi,edi - 100191C4: 55 push ebp - 100191C5: 8B EC mov ebp,esp - 100191C7: 83 EC 10 sub esp,10h - 100191CA: FF 75 08 push dword ptr [ebp+8] - 100191CD: 8D 4D F0 lea ecx,[ebp-10h] - 100191D0: E8 27 15 FF FF call 1000A6FC - 100191D5: FF 75 24 push dword ptr [ebp+24h] - 100191D8: 8D 4D F0 lea ecx,[ebp-10h] - 100191DB: FF 75 20 push dword ptr [ebp+20h] - 100191DE: FF 75 1C push dword ptr [ebp+1Ch] - 100191E1: FF 75 18 push dword ptr [ebp+18h] - 100191E4: FF 75 14 push dword ptr [ebp+14h] - 100191E7: FF 75 10 push dword ptr [ebp+10h] - 100191EA: FF 75 0C push dword ptr [ebp+0Ch] - 100191ED: E8 16 FE FF FF call 10019008 - 100191F2: 83 C4 1C add esp,1Ch - 100191F5: 80 7D FC 00 cmp byte ptr [ebp-4],0 - 100191F9: 74 07 je 10019202 - 100191FB: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 100191FE: 83 61 70 FD and dword ptr [ecx+70h],0FFFFFFFDh - 10019202: C9 leave - 10019203: C3 ret - 10019204: 8B FF mov edi,edi - 10019206: 55 push ebp - 10019207: 8B EC mov ebp,esp - 10019209: 56 push esi - 1001920A: 8B 75 08 mov esi,dword ptr [ebp+8] - 1001920D: 85 F6 test esi,esi - 1001920F: 0F 84 81 01 00 00 je 10019396 - 10019215: FF 76 04 push dword ptr [esi+4] - 10019218: E8 17 11 FF FF call 1000A334 - 1001921D: FF 76 08 push dword ptr [esi+8] - 10019220: E8 0F 11 FF FF call 1000A334 - 10019225: FF 76 0C push dword ptr [esi+0Ch] - 10019228: E8 07 11 FF FF call 1000A334 - 1001922D: FF 76 10 push dword ptr [esi+10h] - 10019230: E8 FF 10 FF FF call 1000A334 - 10019235: FF 76 14 push dword ptr [esi+14h] - 10019238: E8 F7 10 FF FF call 1000A334 - 1001923D: FF 76 18 push dword ptr [esi+18h] - 10019240: E8 EF 10 FF FF call 1000A334 - 10019245: FF 36 push dword ptr [esi] - 10019247: E8 E8 10 FF FF call 1000A334 - 1001924C: FF 76 20 push dword ptr [esi+20h] - 1001924F: E8 E0 10 FF FF call 1000A334 - 10019254: FF 76 24 push dword ptr [esi+24h] - 10019257: E8 D8 10 FF FF call 1000A334 - 1001925C: FF 76 28 push dword ptr [esi+28h] - 1001925F: E8 D0 10 FF FF call 1000A334 - 10019264: FF 76 2C push dword ptr [esi+2Ch] - 10019267: E8 C8 10 FF FF call 1000A334 - 1001926C: FF 76 30 push dword ptr [esi+30h] - 1001926F: E8 C0 10 FF FF call 1000A334 - 10019274: FF 76 34 push dword ptr [esi+34h] - 10019277: E8 B8 10 FF FF call 1000A334 - 1001927C: FF 76 1C push dword ptr [esi+1Ch] - 1001927F: E8 B0 10 FF FF call 1000A334 - 10019284: FF 76 38 push dword ptr [esi+38h] - 10019287: E8 A8 10 FF FF call 1000A334 - 1001928C: FF 76 3C push dword ptr [esi+3Ch] - 1001928F: E8 A0 10 FF FF call 1000A334 - 10019294: 83 C4 40 add esp,40h - 10019297: FF 76 40 push dword ptr [esi+40h] - 1001929A: E8 95 10 FF FF call 1000A334 - 1001929F: FF 76 44 push dword ptr [esi+44h] - 100192A2: E8 8D 10 FF FF call 1000A334 - 100192A7: FF 76 48 push dword ptr [esi+48h] - 100192AA: E8 85 10 FF FF call 1000A334 - 100192AF: FF 76 4C push dword ptr [esi+4Ch] - 100192B2: E8 7D 10 FF FF call 1000A334 - 100192B7: FF 76 50 push dword ptr [esi+50h] - 100192BA: E8 75 10 FF FF call 1000A334 - 100192BF: FF 76 54 push dword ptr [esi+54h] - 100192C2: E8 6D 10 FF FF call 1000A334 - 100192C7: FF 76 58 push dword ptr [esi+58h] - 100192CA: E8 65 10 FF FF call 1000A334 - 100192CF: FF 76 5C push dword ptr [esi+5Ch] - 100192D2: E8 5D 10 FF FF call 1000A334 - 100192D7: FF 76 60 push dword ptr [esi+60h] - 100192DA: E8 55 10 FF FF call 1000A334 - 100192DF: FF 76 64 push dword ptr [esi+64h] - 100192E2: E8 4D 10 FF FF call 1000A334 - 100192E7: FF 76 68 push dword ptr [esi+68h] - 100192EA: E8 45 10 FF FF call 1000A334 - 100192EF: FF 76 6C push dword ptr [esi+6Ch] - 100192F2: E8 3D 10 FF FF call 1000A334 - 100192F7: FF 76 70 push dword ptr [esi+70h] - 100192FA: E8 35 10 FF FF call 1000A334 - 100192FF: FF 76 74 push dword ptr [esi+74h] - 10019302: E8 2D 10 FF FF call 1000A334 - 10019307: FF 76 78 push dword ptr [esi+78h] - 1001930A: E8 25 10 FF FF call 1000A334 - 1001930F: FF 76 7C push dword ptr [esi+7Ch] - 10019312: E8 1D 10 FF FF call 1000A334 - 10019317: 83 C4 40 add esp,40h - 1001931A: FF B6 80 00 00 00 push dword ptr [esi+00000080h] - 10019320: E8 0F 10 FF FF call 1000A334 - 10019325: FF B6 84 00 00 00 push dword ptr [esi+00000084h] - 1001932B: E8 04 10 FF FF call 1000A334 - 10019330: FF B6 88 00 00 00 push dword ptr [esi+00000088h] - 10019336: E8 F9 0F FF FF call 1000A334 - 1001933B: FF B6 8C 00 00 00 push dword ptr [esi+0000008Ch] - 10019341: E8 EE 0F FF FF call 1000A334 - 10019346: FF B6 90 00 00 00 push dword ptr [esi+00000090h] - 1001934C: E8 E3 0F FF FF call 1000A334 - 10019351: FF B6 94 00 00 00 push dword ptr [esi+00000094h] - 10019357: E8 D8 0F FF FF call 1000A334 - 1001935C: FF B6 98 00 00 00 push dword ptr [esi+00000098h] - 10019362: E8 CD 0F FF FF call 1000A334 - 10019367: FF B6 9C 00 00 00 push dword ptr [esi+0000009Ch] - 1001936D: E8 C2 0F FF FF call 1000A334 - 10019372: FF B6 A0 00 00 00 push dword ptr [esi+000000A0h] - 10019378: E8 B7 0F FF FF call 1000A334 - 1001937D: FF B6 A4 00 00 00 push dword ptr [esi+000000A4h] - 10019383: E8 AC 0F FF FF call 1000A334 - 10019388: FF B6 A8 00 00 00 push dword ptr [esi+000000A8h] - 1001938E: E8 A1 0F FF FF call 1000A334 - 10019393: 83 C4 2C add esp,2Ch - 10019396: 5E pop esi - 10019397: 5D pop ebp - 10019398: C3 ret - 10019399: 8B FF mov edi,edi - 1001939B: 55 push ebp - 1001939C: 8B EC mov ebp,esp - 1001939E: 56 push esi - 1001939F: 8B 75 08 mov esi,dword ptr [ebp+8] - 100193A2: 85 F6 test esi,esi - 100193A4: 74 35 je 100193DB - 100193A6: 8B 06 mov eax,dword ptr [esi] - 100193A8: 3B 05 38 58 02 10 cmp eax,dword ptr ds:[10025838h] - 100193AE: 74 07 je 100193B7 - 100193B0: 50 push eax - 100193B1: E8 7E 0F FF FF call 1000A334 - 100193B6: 59 pop ecx - 100193B7: 8B 46 04 mov eax,dword ptr [esi+4] - 100193BA: 3B 05 3C 58 02 10 cmp eax,dword ptr ds:[1002583Ch] - 100193C0: 74 07 je 100193C9 - 100193C2: 50 push eax - 100193C3: E8 6C 0F FF FF call 1000A334 - 100193C8: 59 pop ecx - 100193C9: 8B 76 08 mov esi,dword ptr [esi+8] - 100193CC: 3B 35 40 58 02 10 cmp esi,dword ptr ds:[10025840h] - 100193D2: 74 07 je 100193DB - 100193D4: 56 push esi - 100193D5: E8 5A 0F FF FF call 1000A334 - 100193DA: 59 pop ecx - 100193DB: 5E pop esi - 100193DC: 5D pop ebp - 100193DD: C3 ret - 100193DE: 8B FF mov edi,edi - 100193E0: 55 push ebp - 100193E1: 8B EC mov ebp,esp - 100193E3: 56 push esi - 100193E4: 8B 75 08 mov esi,dword ptr [ebp+8] - 100193E7: 85 F6 test esi,esi - 100193E9: 74 7E je 10019469 - 100193EB: 8B 46 0C mov eax,dword ptr [esi+0Ch] - 100193EE: 3B 05 44 58 02 10 cmp eax,dword ptr ds:[10025844h] - 100193F4: 74 07 je 100193FD - 100193F6: 50 push eax - 100193F7: E8 38 0F FF FF call 1000A334 - 100193FC: 59 pop ecx - 100193FD: 8B 46 10 mov eax,dword ptr [esi+10h] - 10019400: 3B 05 48 58 02 10 cmp eax,dword ptr ds:[10025848h] - 10019406: 74 07 je 1001940F - 10019408: 50 push eax - 10019409: E8 26 0F FF FF call 1000A334 - 1001940E: 59 pop ecx - 1001940F: 8B 46 14 mov eax,dword ptr [esi+14h] - 10019412: 3B 05 4C 58 02 10 cmp eax,dword ptr ds:[1002584Ch] - 10019418: 74 07 je 10019421 - 1001941A: 50 push eax - 1001941B: E8 14 0F FF FF call 1000A334 - 10019420: 59 pop ecx - 10019421: 8B 46 18 mov eax,dword ptr [esi+18h] - 10019424: 3B 05 50 58 02 10 cmp eax,dword ptr ds:[10025850h] - 1001942A: 74 07 je 10019433 - 1001942C: 50 push eax - 1001942D: E8 02 0F FF FF call 1000A334 - 10019432: 59 pop ecx - 10019433: 8B 46 1C mov eax,dword ptr [esi+1Ch] - 10019436: 3B 05 54 58 02 10 cmp eax,dword ptr ds:[10025854h] - 1001943C: 74 07 je 10019445 - 1001943E: 50 push eax - 1001943F: E8 F0 0E FF FF call 1000A334 - 10019444: 59 pop ecx - 10019445: 8B 46 20 mov eax,dword ptr [esi+20h] - 10019448: 3B 05 58 58 02 10 cmp eax,dword ptr ds:[10025858h] - 1001944E: 74 07 je 10019457 - 10019450: 50 push eax - 10019451: E8 DE 0E FF FF call 1000A334 - 10019456: 59 pop ecx - 10019457: 8B 76 24 mov esi,dword ptr [esi+24h] - 1001945A: 3B 35 5C 58 02 10 cmp esi,dword ptr ds:[1002585Ch] - 10019460: 74 07 je 10019469 - 10019462: 56 push esi - 10019463: E8 CC 0E FF FF call 1000A334 - 10019468: 59 pop ecx - 10019469: 5E pop esi - 1001946A: 5D pop ebp - 1001946B: C3 ret - 1001946C: CC int 3 - 1001946D: CC int 3 - 1001946E: CC int 3 - 1001946F: CC int 3 - 10019470: 55 push ebp - 10019471: 8B EC mov ebp,esp - 10019473: 56 push esi - 10019474: 33 C0 xor eax,eax - 10019476: 50 push eax - 10019477: 50 push eax - 10019478: 50 push eax - 10019479: 50 push eax - 1001947A: 50 push eax - 1001947B: 50 push eax - 1001947C: 50 push eax - 1001947D: 50 push eax - 1001947E: 8B 55 0C mov edx,dword ptr [ebp+0Ch] - 10019481: 8D 49 00 lea ecx,[ecx] - 10019484: 8A 02 mov al,byte ptr [edx] - 10019486: 0A C0 or al,al - 10019488: 74 09 je 10019493 - 1001948A: 83 C2 01 add edx,1 - 1001948D: 0F AB 04 24 bts dword ptr [esp],eax - 10019491: EB F1 jmp 10019484 - 10019493: 8B 75 08 mov esi,dword ptr [ebp+8] - 10019496: 83 C9 FF or ecx,0FFFFFFFFh - 10019499: 8D 49 00 lea ecx,[ecx] - 1001949C: 83 C1 01 add ecx,1 - 1001949F: 8A 06 mov al,byte ptr [esi] - 100194A1: 0A C0 or al,al - 100194A3: 74 09 je 100194AE - 100194A5: 83 C6 01 add esi,1 - 100194A8: 0F A3 04 24 bt dword ptr [esp],eax - 100194AC: 73 EE jae 1001949C - 100194AE: 8B C1 mov eax,ecx - 100194B0: 83 C4 20 add esp,20h - 100194B3: 5E pop esi - 100194B4: C9 leave - 100194B5: C3 ret - 100194B6: CC int 3 - 100194B7: CC int 3 - 100194B8: CC int 3 - 100194B9: CC int 3 - 100194BA: CC int 3 - 100194BB: CC int 3 - 100194BC: CC int 3 - 100194BD: CC int 3 - 100194BE: CC int 3 - 100194BF: CC int 3 - 100194C0: 55 push ebp - 100194C1: 8B EC mov ebp,esp - 100194C3: 56 push esi - 100194C4: 33 C0 xor eax,eax - 100194C6: 50 push eax - 100194C7: 50 push eax - 100194C8: 50 push eax - 100194C9: 50 push eax - 100194CA: 50 push eax - 100194CB: 50 push eax - 100194CC: 50 push eax - 100194CD: 50 push eax - 100194CE: 8B 55 0C mov edx,dword ptr [ebp+0Ch] - 100194D1: 8D 49 00 lea ecx,[ecx] - 100194D4: 8A 02 mov al,byte ptr [edx] - 100194D6: 0A C0 or al,al - 100194D8: 74 09 je 100194E3 - 100194DA: 83 C2 01 add edx,1 - 100194DD: 0F AB 04 24 bts dword ptr [esp],eax - 100194E1: EB F1 jmp 100194D4 - 100194E3: 8B 75 08 mov esi,dword ptr [ebp+8] - 100194E6: 8B FF mov edi,edi - 100194E8: 8A 06 mov al,byte ptr [esi] - 100194EA: 0A C0 or al,al - 100194EC: 74 0C je 100194FA - 100194EE: 83 C6 01 add esi,1 - 100194F1: 0F A3 04 24 bt dword ptr [esp],eax - 100194F5: 73 F1 jae 100194E8 - 100194F7: 8D 46 FF lea eax,[esi-1] - 100194FA: 83 C4 20 add esp,20h - 100194FD: 5E pop esi - 100194FE: C9 leave - 100194FF: C3 ret - 10019500: 51 push ecx - 10019501: 8D 4C 24 04 lea ecx,[esp+4] - 10019505: 2B C8 sub ecx,eax - 10019507: 1B C0 sbb eax,eax - 10019509: F7 D0 not eax - 1001950B: 23 C8 and ecx,eax - 1001950D: 8B C4 mov eax,esp - 1001950F: 25 00 F0 FF FF and eax,0FFFFF000h - 10019514: 3B C8 cmp ecx,eax - 10019516: 72 0A jb 10019522 - 10019518: 8B C1 mov eax,ecx - 1001951A: 59 pop ecx - 1001951B: 94 xchg eax,esp - 1001951C: 8B 00 mov eax,dword ptr [eax] - 1001951E: 89 04 24 mov dword ptr [esp],eax - 10019521: C3 ret - 10019522: 2D 00 10 00 00 sub eax,1000h - 10019527: 85 00 test dword ptr [eax],eax - 10019529: EB E9 jmp 10019514 - 1001952B: 8B FF mov edi,edi - 1001952D: 55 push ebp - 1001952E: 8B EC mov ebp,esp - 10019530: 56 push esi - 10019531: 8B 75 08 mov esi,dword ptr [ebp+8] - 10019534: 57 push edi - 10019535: 33 FF xor edi,edi - 10019537: 3B F7 cmp esi,edi - 10019539: 75 1D jne 10019558 - 1001953B: E8 09 5B FF FF call 1000F049 - 10019540: 57 push edi - 10019541: 57 push edi - 10019542: 57 push edi - 10019543: 57 push edi - 10019544: 57 push edi - 10019545: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1001954B: E8 91 5A FF FF call 1000EFE1 - 10019550: 83 C4 14 add esp,14h - 10019553: E9 03 01 00 00 jmp 1001965B - 10019558: 8B 46 0C mov eax,dword ptr [esi+0Ch] - 1001955B: A8 83 test al,83h - 1001955D: 0F 84 F8 00 00 00 je 1001965B - 10019563: A8 40 test al,40h - 10019565: 0F 85 F0 00 00 00 jne 1001965B - 1001956B: A8 02 test al,2 - 1001956D: 74 0B je 1001957A - 1001956F: 83 C8 20 or eax,20h - 10019572: 89 46 0C mov dword ptr [esi+0Ch],eax - 10019575: E9 E1 00 00 00 jmp 1001965B - 1001957A: 83 C8 01 or eax,1 - 1001957D: 89 46 0C mov dword ptr [esi+0Ch],eax - 10019580: A9 0C 01 00 00 test eax,10Ch - 10019585: 75 09 jne 10019590 - 10019587: 56 push esi - 10019588: E8 09 E3 FF FF call 10017896 - 1001958D: 59 pop ecx - 1001958E: EB 05 jmp 10019595 - 10019590: 8B 46 08 mov eax,dword ptr [esi+8] - 10019593: 89 06 mov dword ptr [esi],eax - 10019595: FF 76 18 push dword ptr [esi+18h] - 10019598: FF 76 08 push dword ptr [esi+8] - 1001959B: 56 push esi - 1001959C: E8 46 6F FF FF call 100104E7 - 100195A1: 59 pop ecx - 100195A2: 50 push eax - 100195A3: E8 57 26 00 00 call 1001BBFF - 100195A8: 83 C4 0C add esp,0Ch - 100195AB: 89 46 04 mov dword ptr [esi+4],eax - 100195AE: 3B C7 cmp eax,edi - 100195B0: 0F 84 95 00 00 00 je 1001964B - 100195B6: 83 F8 01 cmp eax,1 - 100195B9: 0F 84 8C 00 00 00 je 1001964B - 100195BF: 83 F8 FF cmp eax,0FFFFFFFFh - 100195C2: 0F 84 83 00 00 00 je 1001964B - 100195C8: F6 46 0C 82 test byte ptr [esi+0Ch],82h - 100195CC: 75 4F jne 1001961D - 100195CE: 56 push esi - 100195CF: E8 13 6F FF FF call 100104E7 - 100195D4: 59 pop ecx - 100195D5: 83 F8 FF cmp eax,0FFFFFFFFh - 100195D8: 74 2E je 10019608 - 100195DA: 56 push esi - 100195DB: E8 07 6F FF FF call 100104E7 - 100195E0: 59 pop ecx - 100195E1: 83 F8 FE cmp eax,0FFFFFFFEh - 100195E4: 74 22 je 10019608 - 100195E6: 56 push esi - 100195E7: E8 FB 6E FF FF call 100104E7 - 100195EC: C1 F8 05 sar eax,5 - 100195EF: 56 push esi - 100195F0: 8D 3C 85 00 6C 02 lea edi,[eax*4+10026C00h] - 10 - 100195F7: E8 EB 6E FF FF call 100104E7 - 100195FC: 83 E0 1F and eax,1Fh - 100195FF: 59 pop ecx - 10019600: C1 E0 06 shl eax,6 - 10019603: 03 07 add eax,dword ptr [edi] - 10019605: 59 pop ecx - 10019606: EB 05 jmp 1001960D - 10019608: B8 70 56 02 10 mov eax,10025670h - 1001960D: 8A 40 04 mov al,byte ptr [eax+4] - 10019610: 24 82 and al,82h - 10019612: 3C 82 cmp al,82h - 10019614: 75 07 jne 1001961D - 10019616: 81 4E 0C 00 20 00 or dword ptr [esi+0Ch],2000h - 00 - 1001961D: 81 7E 18 00 02 00 cmp dword ptr [esi+18h],200h - 00 - 10019624: 75 15 jne 1001963B - 10019626: 8B 46 0C mov eax,dword ptr [esi+0Ch] - 10019629: A8 08 test al,8 - 1001962B: 74 0E je 1001963B - 1001962D: A9 00 04 00 00 test eax,400h - 10019632: 75 07 jne 1001963B - 10019634: C7 46 18 00 10 00 mov dword ptr [esi+18h],1000h - 00 - 1001963B: 8B 0E mov ecx,dword ptr [esi] - 1001963D: 83 46 04 FE add dword ptr [esi+4],0FFFFFFFEh - 10019641: 0F B7 01 movzx eax,word ptr [ecx] - 10019644: 83 C1 02 add ecx,2 - 10019647: 89 0E mov dword ptr [esi],ecx - 10019649: EB 15 jmp 10019660 - 1001964B: F7 D8 neg eax - 1001964D: 1B C0 sbb eax,eax - 1001964F: 83 E0 10 and eax,10h - 10019652: 83 C0 10 add eax,10h - 10019655: 09 46 0C or dword ptr [esi+0Ch],eax - 10019658: 89 7E 04 mov dword ptr [esi+4],edi - 1001965B: B8 FF FF 00 00 mov eax,0FFFFh - 10019660: 5F pop edi - 10019661: 5E pop esi - 10019662: 5D pop ebp - 10019663: C3 ret - 10019664: 8B FF mov edi,edi - 10019666: 55 push ebp - 10019667: 8B EC mov ebp,esp - 10019669: 56 push esi - 1001966A: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 1001966D: F6 46 0C 40 test byte ptr [esi+0Ch],40h - 10019671: 57 push edi - 10019672: 75 79 jne 100196ED - 10019674: 56 push esi - 10019675: E8 6D 6E FF FF call 100104E7 - 1001967A: 59 pop ecx - 1001967B: BA 70 56 02 10 mov edx,10025670h - 10019680: 83 F8 FF cmp eax,0FFFFFFFFh - 10019683: 74 1B je 100196A0 - 10019685: 83 F8 FE cmp eax,0FFFFFFFEh - 10019688: 74 16 je 100196A0 - 1001968A: 8B C8 mov ecx,eax - 1001968C: 83 E1 1F and ecx,1Fh - 1001968F: 8B F8 mov edi,eax - 10019691: C1 FF 05 sar edi,5 - 10019694: C1 E1 06 shl ecx,6 - 10019697: 03 0C BD 00 6C 02 add ecx,dword ptr [edi*4+10026C00h] - 10 - 1001969E: EB 02 jmp 100196A2 - 100196A0: 8B CA mov ecx,edx - 100196A2: F6 41 24 7F test byte ptr [ecx+24h],7Fh - 100196A6: 75 26 jne 100196CE - 100196A8: 83 F8 FF cmp eax,0FFFFFFFFh - 100196AB: 74 19 je 100196C6 - 100196AD: 83 F8 FE cmp eax,0FFFFFFFEh - 100196B0: 74 14 je 100196C6 - 100196B2: 8B C8 mov ecx,eax - 100196B4: 83 E0 1F and eax,1Fh - 100196B7: C1 F9 05 sar ecx,5 - 100196BA: C1 E0 06 shl eax,6 - 100196BD: 03 04 8D 00 6C 02 add eax,dword ptr [ecx*4+10026C00h] - 10 - 100196C4: EB 02 jmp 100196C8 - 100196C6: 8B C2 mov eax,edx - 100196C8: F6 40 24 80 test byte ptr [eax+24h],80h - 100196CC: 74 1F je 100196ED - 100196CE: E8 76 59 FF FF call 1000F049 - 100196D3: 33 FF xor edi,edi - 100196D5: 57 push edi - 100196D6: 57 push edi - 100196D7: 57 push edi - 100196D8: 57 push edi - 100196D9: 57 push edi - 100196DA: C7 00 16 00 00 00 mov dword ptr [eax],16h - 100196E0: E8 FC 58 FF FF call 1000EFE1 - 100196E5: 83 C4 14 add esp,14h - 100196E8: 83 C8 FF or eax,0FFFFFFFFh - 100196EB: EB 4A jmp 10019737 - 100196ED: 53 push ebx - 100196EE: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 100196F1: 83 FB FF cmp ebx,0FFFFFFFFh - 100196F4: 74 3D je 10019733 - 100196F6: 8B 46 0C mov eax,dword ptr [esi+0Ch] - 100196F9: A8 01 test al,1 - 100196FB: 75 08 jne 10019705 - 100196FD: 84 C0 test al,al - 100196FF: 79 32 jns 10019733 - 10019701: A8 02 test al,2 - 10019703: 75 2E jne 10019733 - 10019705: 33 FF xor edi,edi - 10019707: 39 7E 08 cmp dword ptr [esi+8],edi - 1001970A: 75 07 jne 10019713 - 1001970C: 56 push esi - 1001970D: E8 84 E1 FF FF call 10017896 - 10019712: 59 pop ecx - 10019713: 8B 06 mov eax,dword ptr [esi] - 10019715: 3B 46 08 cmp eax,dword ptr [esi+8] - 10019718: 75 08 jne 10019722 - 1001971A: 39 7E 04 cmp dword ptr [esi+4],edi - 1001971D: 75 14 jne 10019733 - 1001971F: 40 inc eax - 10019720: 89 06 mov dword ptr [esi],eax - 10019722: FF 0E dec dword ptr [esi] - 10019724: F6 46 0C 40 test byte ptr [esi+0Ch],40h - 10019728: 8B 06 mov eax,dword ptr [esi] - 1001972A: 74 0F je 1001973B - 1001972C: 38 18 cmp byte ptr [eax],bl - 1001972E: 74 0D je 1001973D - 10019730: 40 inc eax - 10019731: 89 06 mov dword ptr [esi],eax - 10019733: 83 C8 FF or eax,0FFFFFFFFh - 10019736: 5B pop ebx - 10019737: 5F pop edi - 10019738: 5E pop esi - 10019739: 5D pop ebp - 1001973A: C3 ret - 1001973B: 88 18 mov byte ptr [eax],bl - 1001973D: 8B 46 0C mov eax,dword ptr [esi+0Ch] - 10019740: FF 46 04 inc dword ptr [esi+4] - 10019743: 83 E0 EF and eax,0FFFFFFEFh - 10019746: 83 C8 01 or eax,1 - 10019749: 89 46 0C mov dword ptr [esi+0Ch],eax - 1001974C: 8B C3 mov eax,ebx - 1001974E: 25 FF 00 00 00 and eax,0FFh - 10019753: EB E1 jmp 10019736 - 10019755: 6A 0C push 0Ch - 10019757: 68 A8 1F 02 10 push 10021FA8h - 1001975C: E8 27 69 FF FF call 10010088 - 10019761: 33 C0 xor eax,eax - 10019763: 33 F6 xor esi,esi - 10019765: 39 75 0C cmp dword ptr [ebp+0Ch],esi - 10019768: 0F 95 C0 setne al - 1001976B: 3B C6 cmp eax,esi - 1001976D: 75 1D jne 1001978C - 1001976F: E8 D5 58 FF FF call 1000F049 - 10019774: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1001977A: 56 push esi - 1001977B: 56 push esi - 1001977C: 56 push esi - 1001977D: 56 push esi - 1001977E: 56 push esi - 1001977F: E8 5D 58 FF FF call 1000EFE1 - 10019784: 83 C4 14 add esp,14h - 10019787: 83 C8 FF or eax,0FFFFFFFFh - 1001978A: EB 2B jmp 100197B7 - 1001978C: FF 75 0C push dword ptr [ebp+0Ch] - 1001978F: E8 50 14 FF FF call 1000ABE4 - 10019794: 59 pop ecx - 10019795: 89 75 FC mov dword ptr [ebp-4],esi - 10019798: FF 75 0C push dword ptr [ebp+0Ch] - 1001979B: FF 75 08 push dword ptr [ebp+8] - 1001979E: E8 C1 FE FF FF call 10019664 - 100197A3: 59 pop ecx - 100197A4: 59 pop ecx - 100197A5: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 100197A8: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 100197AF: E8 09 00 00 00 call 100197BD - 100197B4: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 100197B7: E8 11 69 FF FF call 100100CD - 100197BC: C3 ret - 100197BD: FF 75 0C push dword ptr [ebp+0Ch] - 100197C0: E8 92 14 FF FF call 1000AC57 - 100197C5: 59 pop ecx - 100197C6: C3 ret - 100197C7: 8B FF mov edi,edi - 100197C9: 55 push ebp - 100197CA: 8B EC mov ebp,esp - 100197CC: 56 push esi - 100197CD: 8B 75 08 mov esi,dword ptr [ebp+8] - 100197D0: 57 push edi - 100197D1: 33 FF xor edi,edi - 100197D3: 3B F7 cmp esi,edi - 100197D5: 75 1D jne 100197F4 - 100197D7: E8 6D 58 FF FF call 1000F049 - 100197DC: 57 push edi - 100197DD: 57 push edi - 100197DE: 57 push edi - 100197DF: 57 push edi - 100197E0: 57 push edi - 100197E1: C7 00 16 00 00 00 mov dword ptr [eax],16h - 100197E7: E8 F5 57 FF FF call 1000EFE1 - 100197EC: 83 C4 14 add esp,14h - 100197EF: E9 F7 00 00 00 jmp 100198EB - 100197F4: 8B 46 0C mov eax,dword ptr [esi+0Ch] - 100197F7: A8 83 test al,83h - 100197F9: 0F 84 EC 00 00 00 je 100198EB - 100197FF: A8 40 test al,40h - 10019801: 0F 85 E4 00 00 00 jne 100198EB - 10019807: A8 02 test al,2 - 10019809: 74 0B je 10019816 - 1001980B: 83 C8 20 or eax,20h - 1001980E: 89 46 0C mov dword ptr [esi+0Ch],eax - 10019811: E9 D5 00 00 00 jmp 100198EB - 10019816: 83 C8 01 or eax,1 - 10019819: 89 46 0C mov dword ptr [esi+0Ch],eax - 1001981C: A9 0C 01 00 00 test eax,10Ch - 10019821: 75 09 jne 1001982C - 10019823: 56 push esi - 10019824: E8 6D E0 FF FF call 10017896 - 10019829: 59 pop ecx - 1001982A: EB 05 jmp 10019831 - 1001982C: 8B 46 08 mov eax,dword ptr [esi+8] - 1001982F: 89 06 mov dword ptr [esi],eax - 10019831: FF 76 18 push dword ptr [esi+18h] - 10019834: FF 76 08 push dword ptr [esi+8] - 10019837: 56 push esi - 10019838: E8 AA 6C FF FF call 100104E7 - 1001983D: 59 pop ecx - 1001983E: 50 push eax - 1001983F: E8 BB 23 00 00 call 1001BBFF - 10019844: 83 C4 0C add esp,0Ch - 10019847: 89 46 04 mov dword ptr [esi+4],eax - 1001984A: 3B C7 cmp eax,edi - 1001984C: 0F 84 89 00 00 00 je 100198DB - 10019852: 83 F8 FF cmp eax,0FFFFFFFFh - 10019855: 0F 84 80 00 00 00 je 100198DB - 1001985B: F6 46 0C 82 test byte ptr [esi+0Ch],82h - 1001985F: 75 4F jne 100198B0 - 10019861: 56 push esi - 10019862: E8 80 6C FF FF call 100104E7 - 10019867: 59 pop ecx - 10019868: 83 F8 FF cmp eax,0FFFFFFFFh - 1001986B: 74 2E je 1001989B - 1001986D: 56 push esi - 1001986E: E8 74 6C FF FF call 100104E7 - 10019873: 59 pop ecx - 10019874: 83 F8 FE cmp eax,0FFFFFFFEh - 10019877: 74 22 je 1001989B - 10019879: 56 push esi - 1001987A: E8 68 6C FF FF call 100104E7 - 1001987F: C1 F8 05 sar eax,5 - 10019882: 56 push esi - 10019883: 8D 3C 85 00 6C 02 lea edi,[eax*4+10026C00h] - 10 - 1001988A: E8 58 6C FF FF call 100104E7 - 1001988F: 83 E0 1F and eax,1Fh - 10019892: 59 pop ecx - 10019893: C1 E0 06 shl eax,6 - 10019896: 03 07 add eax,dword ptr [edi] - 10019898: 59 pop ecx - 10019899: EB 05 jmp 100198A0 - 1001989B: B8 70 56 02 10 mov eax,10025670h - 100198A0: 8A 40 04 mov al,byte ptr [eax+4] - 100198A3: 24 82 and al,82h - 100198A5: 3C 82 cmp al,82h - 100198A7: 75 07 jne 100198B0 - 100198A9: 81 4E 0C 00 20 00 or dword ptr [esi+0Ch],2000h - 00 - 100198B0: 81 7E 18 00 02 00 cmp dword ptr [esi+18h],200h - 00 - 100198B7: 75 15 jne 100198CE - 100198B9: 8B 46 0C mov eax,dword ptr [esi+0Ch] - 100198BC: A8 08 test al,8 - 100198BE: 74 0E je 100198CE - 100198C0: A9 00 04 00 00 test eax,400h - 100198C5: 75 07 jne 100198CE - 100198C7: C7 46 18 00 10 00 mov dword ptr [esi+18h],1000h - 00 - 100198CE: 8B 0E mov ecx,dword ptr [esi] - 100198D0: FF 4E 04 dec dword ptr [esi+4] - 100198D3: 0F B6 01 movzx eax,byte ptr [ecx] - 100198D6: 41 inc ecx - 100198D7: 89 0E mov dword ptr [esi],ecx - 100198D9: EB 13 jmp 100198EE - 100198DB: F7 D8 neg eax - 100198DD: 1B C0 sbb eax,eax - 100198DF: 83 E0 10 and eax,10h - 100198E2: 83 C0 10 add eax,10h - 100198E5: 09 46 0C or dword ptr [esi+0Ch],eax - 100198E8: 89 7E 04 mov dword ptr [esi+4],edi - 100198EB: 83 C8 FF or eax,0FFFFFFFFh - 100198EE: 5F pop edi - 100198EF: 5E pop esi - 100198F0: 5D pop ebp - 100198F1: C3 ret - 100198F2: 6A 10 push 10h - 100198F4: 68 C8 1F 02 10 push 10021FC8h - 100198F9: E8 8A 67 FF FF call 10010088 - 100198FE: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 10019901: 85 DB test ebx,ebx - 10019903: 75 0E jne 10019913 - 10019905: FF 75 0C push dword ptr [ebp+0Ch] - 10019908: E8 29 44 FF FF call 1000DD36 - 1001990D: 59 pop ecx - 1001990E: E9 CC 01 00 00 jmp 10019ADF - 10019913: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 10019916: 85 F6 test esi,esi - 10019918: 75 0C jne 10019926 - 1001991A: 53 push ebx - 1001991B: E8 14 0A FF FF call 1000A334 - 10019920: 59 pop ecx - 10019921: E9 B7 01 00 00 jmp 10019ADD - 10019926: 83 3D 18 6D 02 10 cmp dword ptr ds:[10026D18h],3 - 03 - 1001992D: 0F 85 93 01 00 00 jne 10019AC6 - 10019933: 33 FF xor edi,edi - 10019935: 89 7D E4 mov dword ptr [ebp-1Ch],edi - 10019938: 83 FE E0 cmp esi,0FFFFFFE0h - 1001993B: 0F 87 8A 01 00 00 ja 10019ACB - 10019941: 6A 04 push 4 - 10019943: E8 46 5C FF FF call 1000F58E - 10019948: 59 pop ecx - 10019949: 89 7D FC mov dword ptr [ebp-4],edi - 1001994C: 53 push ebx - 1001994D: E8 6F 5C FF FF call 1000F5C1 - 10019952: 59 pop ecx - 10019953: 89 45 E0 mov dword ptr [ebp-20h],eax - 10019956: 3B C7 cmp eax,edi - 10019958: 0F 84 9E 00 00 00 je 100199FC - 1001995E: 3B 35 08 6D 02 10 cmp esi,dword ptr ds:[10026D08h] - 10019964: 77 49 ja 100199AF - 10019966: 56 push esi - 10019967: 53 push ebx - 10019968: 50 push eax - 10019969: E8 51 61 FF FF call 1000FABF - 1001996E: 83 C4 0C add esp,0Ch - 10019971: 85 C0 test eax,eax - 10019973: 74 05 je 1001997A - 10019975: 89 5D E4 mov dword ptr [ebp-1Ch],ebx - 10019978: EB 35 jmp 100199AF - 1001997A: 56 push esi - 1001997B: E8 20 64 FF FF call 1000FDA0 - 10019980: 59 pop ecx - 10019981: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 10019984: 3B C7 cmp eax,edi - 10019986: 74 27 je 100199AF - 10019988: 8B 43 FC mov eax,dword ptr [ebx-4] - 1001998B: 48 dec eax - 1001998C: 3B C6 cmp eax,esi - 1001998E: 72 02 jb 10019992 - 10019990: 8B C6 mov eax,esi - 10019992: 50 push eax - 10019993: 53 push ebx - 10019994: FF 75 E4 push dword ptr [ebp-1Ch] - 10019997: E8 B4 FF FE FF call 10009950 - 1001999C: 53 push ebx - 1001999D: E8 1F 5C FF FF call 1000F5C1 - 100199A2: 89 45 E0 mov dword ptr [ebp-20h],eax - 100199A5: 53 push ebx - 100199A6: 50 push eax - 100199A7: E8 45 5C FF FF call 1000F5F1 - 100199AC: 83 C4 18 add esp,18h - 100199AF: 39 7D E4 cmp dword ptr [ebp-1Ch],edi - 100199B2: 75 48 jne 100199FC - 100199B4: 3B F7 cmp esi,edi - 100199B6: 75 06 jne 100199BE - 100199B8: 33 F6 xor esi,esi - 100199BA: 46 inc esi - 100199BB: 89 75 0C mov dword ptr [ebp+0Ch],esi - 100199BE: 83 C6 0F add esi,0Fh - 100199C1: 83 E6 F0 and esi,0FFFFFFF0h - 100199C4: 89 75 0C mov dword ptr [ebp+0Ch],esi - 100199C7: 56 push esi - 100199C8: 57 push edi - 100199C9: FF 35 64 68 02 10 push dword ptr ds:[10026864h] - 100199CF: FF 15 AC F0 01 10 call dword ptr ds:[1001F0ACh] - 100199D5: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 100199D8: 3B C7 cmp eax,edi - 100199DA: 74 20 je 100199FC - 100199DC: 8B 43 FC mov eax,dword ptr [ebx-4] - 100199DF: 48 dec eax - 100199E0: 3B C6 cmp eax,esi - 100199E2: 72 02 jb 100199E6 - 100199E4: 8B C6 mov eax,esi - 100199E6: 50 push eax - 100199E7: 53 push ebx - 100199E8: FF 75 E4 push dword ptr [ebp-1Ch] - 100199EB: E8 60 FF FE FF call 10009950 - 100199F0: 53 push ebx - 100199F1: FF 75 E0 push dword ptr [ebp-20h] - 100199F4: E8 F8 5B FF FF call 1000F5F1 - 100199F9: 83 C4 14 add esp,14h - 100199FC: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 10019A03: E8 2E 00 00 00 call 10019A36 - 10019A08: 83 7D E0 00 cmp dword ptr [ebp-20h],0 - 10019A0C: 75 31 jne 10019A3F - 10019A0E: 85 F6 test esi,esi - 10019A10: 75 01 jne 10019A13 - 10019A12: 46 inc esi - 10019A13: 83 C6 0F add esi,0Fh - 10019A16: 83 E6 F0 and esi,0FFFFFFF0h - 10019A19: 89 75 0C mov dword ptr [ebp+0Ch],esi - 10019A1C: 56 push esi - 10019A1D: 53 push ebx - 10019A1E: 6A 00 push 0 - 10019A20: FF 35 64 68 02 10 push dword ptr ds:[10026864h] - 10019A26: FF 15 D0 F0 01 10 call dword ptr ds:[1001F0D0h] - 10019A2C: 8B F8 mov edi,eax - 10019A2E: EB 12 jmp 10019A42 - 10019A30: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 10019A33: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 10019A36: 6A 04 push 4 - 10019A38: E8 77 5A FF FF call 1000F4B4 - 10019A3D: 59 pop ecx - 10019A3E: C3 ret - 10019A3F: 8B 7D E4 mov edi,dword ptr [ebp-1Ch] - 10019A42: 85 FF test edi,edi - 10019A44: 0F 85 BF 00 00 00 jne 10019B09 - 10019A4A: 39 3D 88 6B 02 10 cmp dword ptr ds:[10026B88h],edi - 10019A50: 74 2C je 10019A7E - 10019A52: 56 push esi - 10019A53: E8 B7 43 FF FF call 1000DE0F - 10019A58: 59 pop ecx - 10019A59: 85 C0 test eax,eax - 10019A5B: 0F 85 D2 FE FF FF jne 10019933 - 10019A61: E8 E3 55 FF FF call 1000F049 - 10019A66: 39 7D E0 cmp dword ptr [ebp-20h],edi - 10019A69: 75 6C jne 10019AD7 - 10019A6B: 8B F0 mov esi,eax - 10019A6D: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 10019A73: 50 push eax - 10019A74: E8 8E 55 FF FF call 1000F007 - 10019A79: 59 pop ecx - 10019A7A: 89 06 mov dword ptr [esi],eax - 10019A7C: EB 5F jmp 10019ADD - 10019A7E: 85 FF test edi,edi - 10019A80: 0F 85 83 00 00 00 jne 10019B09 - 10019A86: E8 BE 55 FF FF call 1000F049 - 10019A8B: 39 7D E0 cmp dword ptr [ebp-20h],edi - 10019A8E: 74 68 je 10019AF8 - 10019A90: C7 00 0C 00 00 00 mov dword ptr [eax],0Ch - 10019A96: EB 71 jmp 10019B09 - 10019A98: 85 F6 test esi,esi - 10019A9A: 75 01 jne 10019A9D - 10019A9C: 46 inc esi - 10019A9D: 56 push esi - 10019A9E: 53 push ebx - 10019A9F: 6A 00 push 0 - 10019AA1: FF 35 64 68 02 10 push dword ptr ds:[10026864h] - 10019AA7: FF 15 D0 F0 01 10 call dword ptr ds:[1001F0D0h] - 10019AAD: 8B F8 mov edi,eax - 10019AAF: 85 FF test edi,edi - 10019AB1: 75 56 jne 10019B09 - 10019AB3: 39 05 88 6B 02 10 cmp dword ptr ds:[10026B88h],eax - 10019AB9: 74 34 je 10019AEF - 10019ABB: 56 push esi - 10019ABC: E8 4E 43 FF FF call 1000DE0F - 10019AC1: 59 pop ecx - 10019AC2: 85 C0 test eax,eax - 10019AC4: 74 1F je 10019AE5 - 10019AC6: 83 FE E0 cmp esi,0FFFFFFE0h - 10019AC9: 76 CD jbe 10019A98 - 10019ACB: 56 push esi - 10019ACC: E8 3E 43 FF FF call 1000DE0F - 10019AD1: 59 pop ecx - 10019AD2: E8 72 55 FF FF call 1000F049 - 10019AD7: C7 00 0C 00 00 00 mov dword ptr [eax],0Ch - 10019ADD: 33 C0 xor eax,eax - 10019ADF: E8 E9 65 FF FF call 100100CD - 10019AE4: C3 ret - 10019AE5: E8 5F 55 FF FF call 1000F049 - 10019AEA: E9 7C FF FF FF jmp 10019A6B - 10019AEF: 85 FF test edi,edi - 10019AF1: 75 16 jne 10019B09 - 10019AF3: E8 51 55 FF FF call 1000F049 - 10019AF8: 8B F0 mov esi,eax - 10019AFA: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 10019B00: 50 push eax - 10019B01: E8 01 55 FF FF call 1000F007 - 10019B06: 89 06 mov dword ptr [esi],eax - 10019B08: 59 pop ecx - 10019B09: 8B C7 mov eax,edi - 10019B0B: EB D2 jmp 10019ADF - 10019B0D: 8B FF mov edi,edi - 10019B0F: 55 push ebp - 10019B10: 8B EC mov ebp,esp - 10019B12: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch] - 10019B15: 53 push ebx - 10019B16: 33 DB xor ebx,ebx - 10019B18: 3B CB cmp ecx,ebx - 10019B1A: 76 28 jbe 10019B44 - 10019B1C: 6A E0 push 0FFFFFFE0h - 10019B1E: 33 D2 xor edx,edx - 10019B20: 58 pop eax - 10019B21: F7 F1 div eax,ecx - 10019B23: 3B 45 10 cmp eax,dword ptr [ebp+10h] - 10019B26: 73 1C jae 10019B44 - 10019B28: E8 1C 55 FF FF call 1000F049 - 10019B2D: 53 push ebx - 10019B2E: 53 push ebx - 10019B2F: 53 push ebx - 10019B30: 53 push ebx - 10019B31: 53 push ebx - 10019B32: C7 00 0C 00 00 00 mov dword ptr [eax],0Ch - 10019B38: E8 A4 54 FF FF call 1000EFE1 - 10019B3D: 83 C4 14 add esp,14h - 10019B40: 33 C0 xor eax,eax - 10019B42: EB 41 jmp 10019B85 - 10019B44: 0F AF 4D 10 imul ecx,dword ptr [ebp+10h] - 10019B48: 56 push esi - 10019B49: 57 push edi - 10019B4A: 8B F1 mov esi,ecx - 10019B4C: 39 5D 08 cmp dword ptr [ebp+8],ebx - 10019B4F: 74 0B je 10019B5C - 10019B51: FF 75 08 push dword ptr [ebp+8] - 10019B54: E8 AE CD FF FF call 10016907 - 10019B59: 59 pop ecx - 10019B5A: 8B D8 mov ebx,eax - 10019B5C: 56 push esi - 10019B5D: FF 75 08 push dword ptr [ebp+8] - 10019B60: E8 8D FD FF FF call 100198F2 - 10019B65: 8B F8 mov edi,eax - 10019B67: 59 pop ecx - 10019B68: 59 pop ecx - 10019B69: 85 FF test edi,edi - 10019B6B: 74 14 je 10019B81 - 10019B6D: 3B DE cmp ebx,esi - 10019B6F: 73 10 jae 10019B81 - 10019B71: 2B F3 sub esi,ebx - 10019B73: 56 push esi - 10019B74: 6A 00 push 0 - 10019B76: 03 DF add ebx,edi - 10019B78: 53 push ebx - 10019B79: E8 F2 06 FF FF call 1000A270 - 10019B7E: 83 C4 0C add esp,0Ch - 10019B81: 8B C7 mov eax,edi - 10019B83: 5F pop edi - 10019B84: 5E pop esi - 10019B85: 5B pop ebx - 10019B86: 5D pop ebp - 10019B87: C3 ret - 10019B88: 8B FF mov edi,edi - 10019B8A: 55 push ebp - 10019B8B: 8B EC mov ebp,esp - 10019B8D: 8B 45 08 mov eax,dword ptr [ebp+8] - 10019B90: A3 C8 6B 02 10 mov dword ptr ds:[10026BC8h],eax - 10019B95: 5D pop ebp - 10019B96: C3 ret - 10019B97: 8B FF mov edi,edi - 10019B99: 55 push ebp - 10019B9A: 8B EC mov ebp,esp - 10019B9C: 83 EC 34 sub esp,34h - 10019B9F: 53 push ebx - 10019BA0: 33 DB xor ebx,ebx - 10019BA2: F6 45 10 80 test byte ptr [ebp+10h],80h - 10019BA6: 56 push esi - 10019BA7: 57 push edi - 10019BA8: 8B F0 mov esi,eax - 10019BAA: 89 5D E0 mov dword ptr [ebp-20h],ebx - 10019BAD: 88 5D FE mov byte ptr [ebp-2],bl - 10019BB0: C7 45 CC 0C 00 00 mov dword ptr [ebp-34h],0Ch - 00 - 10019BB7: 89 5D D0 mov dword ptr [ebp-30h],ebx - 10019BBA: 74 09 je 10019BC5 - 10019BBC: 89 5D D4 mov dword ptr [ebp-2Ch],ebx - 10019BBF: C6 45 FF 10 mov byte ptr [ebp-1],10h - 10019BC3: EB 0A jmp 10019BCF - 10019BC5: C7 45 D4 01 00 00 mov dword ptr [ebp-2Ch],1 - 00 - 10019BCC: 88 5D FF mov byte ptr [ebp-1],bl - 10019BCF: 8D 45 E0 lea eax,[ebp-20h] - 10019BD2: 50 push eax - 10019BD3: E8 0B 24 00 00 call 1001BFE3 - 10019BD8: 59 pop ecx - 10019BD9: 85 C0 test eax,eax - 10019BDB: 74 0D je 10019BEA - 10019BDD: 53 push ebx - 10019BDE: 53 push ebx - 10019BDF: 53 push ebx - 10019BE0: 53 push ebx - 10019BE1: 53 push ebx - 10019BE2: E8 D2 52 FF FF call 1000EEB9 - 10019BE7: 83 C4 14 add esp,14h - 10019BEA: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 10019BED: B8 00 80 00 00 mov eax,8000h - 10019BF2: 85 C8 test eax,ecx - 10019BF4: 75 11 jne 10019C07 - 10019BF6: F7 C1 00 40 07 00 test ecx,74000h - 10019BFC: 75 05 jne 10019C03 - 10019BFE: 39 45 E0 cmp dword ptr [ebp-20h],eax - 10019C01: 74 04 je 10019C07 - 10019C03: 80 4D FF 80 or byte ptr [ebp-1],80h - 10019C07: 8B C1 mov eax,ecx - 10019C09: 83 E0 03 and eax,3 - 10019C0C: 2B C3 sub eax,ebx - 10019C0E: BA 00 00 00 C0 mov edx,0C0000000h - 10019C13: BF 00 00 00 80 mov edi,80000000h - 10019C18: 74 47 je 10019C61 - 10019C1A: 48 dec eax - 10019C1B: 74 2E je 10019C4B - 10019C1D: 48 dec eax - 10019C1E: 74 26 je 10019C46 - 10019C20: E8 37 54 FF FF call 1000F05C - 10019C25: 89 18 mov dword ptr [eax],ebx - 10019C27: 83 0E FF or dword ptr [esi],0FFFFFFFFh - 10019C2A: E8 1A 54 FF FF call 1000F049 - 10019C2F: 6A 16 push 16h - 10019C31: 5E pop esi - 10019C32: 53 push ebx - 10019C33: 53 push ebx - 10019C34: 53 push ebx - 10019C35: 53 push ebx - 10019C36: 53 push ebx - 10019C37: 89 30 mov dword ptr [eax],esi - 10019C39: E8 A3 53 FF FF call 1000EFE1 - 10019C3E: 83 C4 14 add esp,14h - 10019C41: E9 01 05 00 00 jmp 1001A147 - 10019C46: 89 55 F8 mov dword ptr [ebp-8],edx - 10019C49: EB 19 jmp 10019C64 - 10019C4B: F6 C1 08 test cl,8 - 10019C4E: 74 08 je 10019C58 - 10019C50: F7 C1 00 00 07 00 test ecx,70000h - 10019C56: 75 EE jne 10019C46 - 10019C58: C7 45 F8 00 00 00 mov dword ptr [ebp-8],40000000h - 40 - 10019C5F: EB 03 jmp 10019C64 - 10019C61: 89 7D F8 mov dword ptr [ebp-8],edi - 10019C64: 8B 45 14 mov eax,dword ptr [ebp+14h] - 10019C67: 6A 10 push 10h - 10019C69: 59 pop ecx - 10019C6A: 2B C1 sub eax,ecx - 10019C6C: 74 37 je 10019CA5 - 10019C6E: 2B C1 sub eax,ecx - 10019C70: 74 2A je 10019C9C - 10019C72: 2B C1 sub eax,ecx - 10019C74: 74 1D je 10019C93 - 10019C76: 2B C1 sub eax,ecx - 10019C78: 74 10 je 10019C8A - 10019C7A: 83 E8 40 sub eax,40h - 10019C7D: 75 A1 jne 10019C20 - 10019C7F: 39 7D F8 cmp dword ptr [ebp-8],edi - 10019C82: 0F 94 C0 sete al - 10019C85: 89 45 F0 mov dword ptr [ebp-10h],eax - 10019C88: EB 1E jmp 10019CA8 - 10019C8A: C7 45 F0 03 00 00 mov dword ptr [ebp-10h],3 - 00 - 10019C91: EB 15 jmp 10019CA8 - 10019C93: C7 45 F0 02 00 00 mov dword ptr [ebp-10h],2 - 00 - 10019C9A: EB 0C jmp 10019CA8 - 10019C9C: C7 45 F0 01 00 00 mov dword ptr [ebp-10h],1 - 00 - 10019CA3: EB 03 jmp 10019CA8 - 10019CA5: 89 5D F0 mov dword ptr [ebp-10h],ebx - 10019CA8: 8B 45 10 mov eax,dword ptr [ebp+10h] - 10019CAB: BA 00 07 00 00 mov edx,700h - 10019CB0: 23 C2 and eax,edx - 10019CB2: B9 00 04 00 00 mov ecx,400h - 10019CB7: 3B C1 cmp eax,ecx - 10019CB9: BF 00 01 00 00 mov edi,100h - 10019CBE: 7F 3B jg 10019CFB - 10019CC0: 74 30 je 10019CF2 - 10019CC2: 3B C3 cmp eax,ebx - 10019CC4: 74 2C je 10019CF2 - 10019CC6: 3B C7 cmp eax,edi - 10019CC8: 74 1F je 10019CE9 - 10019CCA: 3D 00 02 00 00 cmp eax,200h - 10019CCF: 0F 84 94 00 00 00 je 10019D69 - 10019CD5: 3D 00 03 00 00 cmp eax,300h - 10019CDA: 0F 85 40 FF FF FF jne 10019C20 - 10019CE0: C7 45 EC 02 00 00 mov dword ptr [ebp-14h],2 - 00 - 10019CE7: EB 2F jmp 10019D18 - 10019CE9: C7 45 EC 04 00 00 mov dword ptr [ebp-14h],4 - 00 - 10019CF0: EB 26 jmp 10019D18 - 10019CF2: C7 45 EC 03 00 00 mov dword ptr [ebp-14h],3 - 00 - 10019CF9: EB 1D jmp 10019D18 - 10019CFB: 3D 00 05 00 00 cmp eax,500h - 10019D00: 74 0F je 10019D11 - 10019D02: 3D 00 06 00 00 cmp eax,600h - 10019D07: 74 60 je 10019D69 - 10019D09: 3B C2 cmp eax,edx - 10019D0B: 0F 85 0F FF FF FF jne 10019C20 - 10019D11: C7 45 EC 01 00 00 mov dword ptr [ebp-14h],1 - 00 - 10019D18: 8B 45 10 mov eax,dword ptr [ebp+10h] - 10019D1B: C7 45 F4 80 00 00 mov dword ptr [ebp-0Ch],80h - 00 - 10019D22: 85 C7 test edi,eax - 10019D24: 74 16 je 10019D3C - 10019D26: 8B 0D 08 6A 02 10 mov ecx,dword ptr ds:[10026A08h] - 10019D2C: F7 D1 not ecx - 10019D2E: 23 4D 18 and ecx,dword ptr [ebp+18h] - 10019D31: 84 C9 test cl,cl - 10019D33: 78 07 js 10019D3C - 10019D35: C7 45 F4 01 00 00 mov dword ptr [ebp-0Ch],1 - 00 - 10019D3C: A8 40 test al,40h - 10019D3E: 74 12 je 10019D52 - 10019D40: 81 4D F4 00 00 00 or dword ptr [ebp-0Ch],4000000h - 04 - 10019D47: 81 4D F8 00 00 01 or dword ptr [ebp-8],10000h - 00 - 10019D4E: 83 4D F0 04 or dword ptr [ebp-10h],4 - 10019D52: A9 00 10 00 00 test eax,1000h - 10019D57: 74 03 je 10019D5C - 10019D59: 09 7D F4 or dword ptr [ebp-0Ch],edi - 10019D5C: A8 20 test al,20h - 10019D5E: 74 12 je 10019D72 - 10019D60: 81 4D F4 00 00 00 or dword ptr [ebp-0Ch],8000000h - 08 - 10019D67: EB 14 jmp 10019D7D - 10019D69: C7 45 EC 05 00 00 mov dword ptr [ebp-14h],5 - 00 - 10019D70: EB A6 jmp 10019D18 - 10019D72: A8 10 test al,10h - 10019D74: 74 07 je 10019D7D - 10019D76: 81 4D F4 00 00 00 or dword ptr [ebp-0Ch],10000000h - 10 - 10019D7D: E8 C2 E4 FF FF call 10018244 - 10019D82: 89 06 mov dword ptr [esi],eax - 10019D84: 83 F8 FF cmp eax,0FFFFFFFFh - 10019D87: 75 1A jne 10019DA3 - 10019D89: E8 CE 52 FF FF call 1000F05C - 10019D8E: 89 18 mov dword ptr [eax],ebx - 10019D90: 83 0E FF or dword ptr [esi],0FFFFFFFFh - 10019D93: E8 B1 52 FF FF call 1000F049 - 10019D98: C7 00 18 00 00 00 mov dword ptr [eax],18h - 10019D9E: E9 8E 00 00 00 jmp 10019E31 - 10019DA3: 8B 45 08 mov eax,dword ptr [ebp+8] - 10019DA6: 8B 3D 10 F0 01 10 mov edi,dword ptr ds:[1001F010h] - 10019DAC: 53 push ebx - 10019DAD: FF 75 F4 push dword ptr [ebp-0Ch] - 10019DB0: C7 00 01 00 00 00 mov dword ptr [eax],1 - 10019DB6: FF 75 EC push dword ptr [ebp-14h] - 10019DB9: 8D 45 CC lea eax,[ebp-34h] - 10019DBC: 50 push eax - 10019DBD: FF 75 F0 push dword ptr [ebp-10h] - 10019DC0: FF 75 F8 push dword ptr [ebp-8] - 10019DC3: FF 75 0C push dword ptr [ebp+0Ch] - 10019DC6: FF D7 call edi - 10019DC8: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 10019DCB: 83 F8 FF cmp eax,0FFFFFFFFh - 10019DCE: 75 6D jne 10019E3D - 10019DD0: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 10019DD3: B8 00 00 00 C0 mov eax,0C0000000h - 10019DD8: 23 C8 and ecx,eax - 10019DDA: 3B C8 cmp ecx,eax - 10019DDC: 75 2B jne 10019E09 - 10019DDE: F6 45 10 01 test byte ptr [ebp+10h],1 - 10019DE2: 74 25 je 10019E09 - 10019DE4: 81 65 F8 FF FF FF and dword ptr [ebp-8],7FFFFFFFh - 7F - 10019DEB: 53 push ebx - 10019DEC: FF 75 F4 push dword ptr [ebp-0Ch] - 10019DEF: 8D 45 CC lea eax,[ebp-34h] - 10019DF2: FF 75 EC push dword ptr [ebp-14h] - 10019DF5: 50 push eax - 10019DF6: FF 75 F0 push dword ptr [ebp-10h] - 10019DF9: FF 75 F8 push dword ptr [ebp-8] - 10019DFC: FF 75 0C push dword ptr [ebp+0Ch] - 10019DFF: FF D7 call edi - 10019E01: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 10019E04: 83 F8 FF cmp eax,0FFFFFFFFh - 10019E07: 75 34 jne 10019E3D - 10019E09: 8B 36 mov esi,dword ptr [esi] - 10019E0B: 8B C6 mov eax,esi - 10019E0D: C1 F8 05 sar eax,5 - 10019E10: 8B 04 85 00 6C 02 mov eax,dword ptr [eax*4+10026C00h] - 10 - 10019E17: 83 E6 1F and esi,1Fh - 10019E1A: C1 E6 06 shl esi,6 - 10019E1D: 8D 44 30 04 lea eax,[eax+esi+4] - 10019E21: 80 20 FE and byte ptr [eax],0FEh - 10019E24: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 10019E2A: 50 push eax - 10019E2B: E8 3F 52 FF FF call 1000F06F - 10019E30: 59 pop ecx - 10019E31: E8 13 52 FF FF call 1000F049 - 10019E36: 8B 00 mov eax,dword ptr [eax] - 10019E38: E9 75 04 00 00 jmp 1001A2B2 - 10019E3D: FF 75 E4 push dword ptr [ebp-1Ch] - 10019E40: FF 15 F4 F0 01 10 call dword ptr ds:[1001F0F4h] - 10019E46: 3B C3 cmp eax,ebx - 10019E48: 75 44 jne 10019E8E - 10019E4A: 8B 36 mov esi,dword ptr [esi] - 10019E4C: 8B C6 mov eax,esi - 10019E4E: C1 F8 05 sar eax,5 - 10019E51: 8B 04 85 00 6C 02 mov eax,dword ptr [eax*4+10026C00h] - 10 - 10019E58: 83 E6 1F and esi,1Fh - 10019E5B: C1 E6 06 shl esi,6 - 10019E5E: 8D 44 30 04 lea eax,[eax+esi+4] - 10019E62: 80 20 FE and byte ptr [eax],0FEh - 10019E65: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 10019E6B: 8B F0 mov esi,eax - 10019E6D: 56 push esi - 10019E6E: E8 FC 51 FF FF call 1000F06F - 10019E73: 59 pop ecx - 10019E74: FF 75 E4 push dword ptr [ebp-1Ch] - 10019E77: FF 15 14 F0 01 10 call dword ptr ds:[1001F014h] - 10019E7D: 3B F3 cmp esi,ebx - 10019E7F: 75 B0 jne 10019E31 - 10019E81: E8 C3 51 FF FF call 1000F049 - 10019E86: C7 00 0D 00 00 00 mov dword ptr [eax],0Dh - 10019E8C: EB A3 jmp 10019E31 - 10019E8E: 83 F8 02 cmp eax,2 - 10019E91: 75 06 jne 10019E99 - 10019E93: 80 4D FF 40 or byte ptr [ebp-1],40h - 10019E97: EB 09 jmp 10019EA2 - 10019E99: 83 F8 03 cmp eax,3 - 10019E9C: 75 04 jne 10019EA2 - 10019E9E: 80 4D FF 08 or byte ptr [ebp-1],8 - 10019EA2: FF 75 E4 push dword ptr [ebp-1Ch] - 10019EA5: FF 36 push dword ptr [esi] - 10019EA7: E8 53 E1 FF FF call 10017FFF - 10019EAC: 8B 06 mov eax,dword ptr [esi] - 10019EAE: 8B D0 mov edx,eax - 10019EB0: 83 E0 1F and eax,1Fh - 10019EB3: C1 FA 05 sar edx,5 - 10019EB6: 8B 14 95 00 6C 02 mov edx,dword ptr [edx*4+10026C00h] - 10 - 10019EBD: 59 pop ecx - 10019EBE: C1 E0 06 shl eax,6 - 10019EC1: 59 pop ecx - 10019EC2: 8A 4D FF mov cl,byte ptr [ebp-1] - 10019EC5: 80 C9 01 or cl,1 - 10019EC8: 88 4C 02 04 mov byte ptr [edx+eax+4],cl - 10019ECC: 8B 06 mov eax,dword ptr [esi] - 10019ECE: 8B D0 mov edx,eax - 10019ED0: 83 E0 1F and eax,1Fh - 10019ED3: C1 FA 05 sar edx,5 - 10019ED6: 8B 14 95 00 6C 02 mov edx,dword ptr [edx*4+10026C00h] - 10 - 10019EDD: C1 E0 06 shl eax,6 - 10019EE0: 8D 44 02 24 lea eax,[edx+eax+24h] - 10019EE4: 80 20 80 and byte ptr [eax],80h - 10019EE7: 88 4D FD mov byte ptr [ebp-3],cl - 10019EEA: 80 65 FD 48 and byte ptr [ebp-3],48h - 10019EEE: 88 4D FF mov byte ptr [ebp-1],cl - 10019EF1: 0F 85 81 00 00 00 jne 10019F78 - 10019EF7: F6 C1 80 test cl,80h - 10019EFA: 0F 84 B2 02 00 00 je 1001A1B2 - 10019F00: F6 45 10 02 test byte ptr [ebp+10h],2 - 10019F04: 74 72 je 10019F78 - 10019F06: 6A 02 push 2 - 10019F08: 83 CF FF or edi,0FFFFFFFFh - 10019F0B: 57 push edi - 10019F0C: FF 36 push dword ptr [esi] - 10019F0E: E8 9F 1F 00 00 call 1001BEB2 - 10019F13: 83 C4 0C add esp,0Ch - 10019F16: 89 45 E8 mov dword ptr [ebp-18h],eax - 10019F19: 3B C7 cmp eax,edi - 10019F1B: 75 19 jne 10019F36 - 10019F1D: E8 3A 51 FF FF call 1000F05C - 10019F22: 81 38 83 00 00 00 cmp dword ptr [eax],83h - 10019F28: 74 4E je 10019F78 - 10019F2A: FF 36 push dword ptr [esi] - 10019F2C: E8 4D 64 FF FF call 1001037E - 10019F31: E9 FA FE FF FF jmp 10019E30 - 10019F36: 6A 01 push 1 - 10019F38: 8D 45 DC lea eax,[ebp-24h] - 10019F3B: 50 push eax - 10019F3C: FF 36 push dword ptr [esi] - 10019F3E: 89 5D DC mov dword ptr [ebp-24h],ebx - 10019F41: E8 F7 16 00 00 call 1001B63D - 10019F46: 83 C4 0C add esp,0Ch - 10019F49: 85 C0 test eax,eax - 10019F4B: 75 1B jne 10019F68 - 10019F4D: 66 83 7D DC 1A cmp word ptr [ebp-24h],1Ah - 10019F52: 75 14 jne 10019F68 - 10019F54: 8B 45 E8 mov eax,dword ptr [ebp-18h] - 10019F57: 99 cdq - 10019F58: 52 push edx - 10019F59: 50 push eax - 10019F5A: FF 36 push dword ptr [esi] - 10019F5C: E8 9B 1D 00 00 call 1001BCFC - 10019F61: 83 C4 0C add esp,0Ch - 10019F64: 3B C7 cmp eax,edi - 10019F66: 74 C2 je 10019F2A - 10019F68: 53 push ebx - 10019F69: 53 push ebx - 10019F6A: FF 36 push dword ptr [esi] - 10019F6C: E8 41 1F 00 00 call 1001BEB2 - 10019F71: 83 C4 0C add esp,0Ch - 10019F74: 3B C7 cmp eax,edi - 10019F76: 74 B2 je 10019F2A - 10019F78: F6 45 FF 80 test byte ptr [ebp-1],80h - 10019F7C: 0F 84 30 02 00 00 je 1001A1B2 - 10019F82: BF 00 40 07 00 mov edi,74000h - 10019F87: B9 00 40 00 00 mov ecx,4000h - 10019F8C: 85 7D 10 test dword ptr [ebp+10h],edi - 10019F8F: 75 0F jne 10019FA0 - 10019F91: 8B 45 E0 mov eax,dword ptr [ebp-20h] - 10019F94: 23 C7 and eax,edi - 10019F96: 75 05 jne 10019F9D - 10019F98: 09 4D 10 or dword ptr [ebp+10h],ecx - 10019F9B: EB 03 jmp 10019FA0 - 10019F9D: 09 45 10 or dword ptr [ebp+10h],eax - 10019FA0: 8B 45 10 mov eax,dword ptr [ebp+10h] - 10019FA3: 23 C7 and eax,edi - 10019FA5: 3B C1 cmp eax,ecx - 10019FA7: 74 44 je 10019FED - 10019FA9: 3D 00 00 01 00 cmp eax,10000h - 10019FAE: 74 29 je 10019FD9 - 10019FB0: 3D 00 40 01 00 cmp eax,14000h - 10019FB5: 74 22 je 10019FD9 - 10019FB7: 3D 00 00 02 00 cmp eax,20000h - 10019FBC: 74 29 je 10019FE7 - 10019FBE: 3D 00 40 02 00 cmp eax,24000h - 10019FC3: 74 22 je 10019FE7 - 10019FC5: 3D 00 00 04 00 cmp eax,40000h - 10019FCA: 74 07 je 10019FD3 - 10019FCC: 3D 00 40 04 00 cmp eax,44000h - 10019FD1: 75 1D jne 10019FF0 - 10019FD3: C6 45 FE 01 mov byte ptr [ebp-2],1 - 10019FD7: EB 17 jmp 10019FF0 - 10019FD9: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 10019FDC: B8 01 03 00 00 mov eax,301h - 10019FE1: 23 C8 and ecx,eax - 10019FE3: 3B C8 cmp ecx,eax - 10019FE5: 75 09 jne 10019FF0 - 10019FE7: C6 45 FE 02 mov byte ptr [ebp-2],2 - 10019FEB: EB 03 jmp 10019FF0 - 10019FED: 88 5D FE mov byte ptr [ebp-2],bl - 10019FF0: F7 45 10 00 00 07 test dword ptr [ebp+10h],70000h - 00 - 10019FF7: 0F 84 B5 01 00 00 je 1001A1B2 - 10019FFD: F6 45 FF 40 test byte ptr [ebp-1],40h - 1001A001: 89 5D E8 mov dword ptr [ebp-18h],ebx - 1001A004: 0F 85 A8 01 00 00 jne 1001A1B2 - 1001A00A: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1001A00D: B9 00 00 00 C0 mov ecx,0C0000000h - 1001A012: 23 C1 and eax,ecx - 1001A014: 3D 00 00 00 40 cmp eax,40000000h - 1001A019: 0F 84 B7 00 00 00 je 1001A0D6 - 1001A01F: 3D 00 00 00 80 cmp eax,80000000h - 1001A024: 74 77 je 1001A09D - 1001A026: 3B C1 cmp eax,ecx - 1001A028: 0F 85 84 01 00 00 jne 1001A1B2 - 1001A02E: 8B 45 EC mov eax,dword ptr [ebp-14h] - 1001A031: 3B C3 cmp eax,ebx - 1001A033: 0F 86 79 01 00 00 jbe 1001A1B2 - 1001A039: 83 F8 02 cmp eax,2 - 1001A03C: 76 0E jbe 1001A04C - 1001A03E: 83 F8 04 cmp eax,4 - 1001A041: 76 30 jbe 1001A073 - 1001A043: 83 F8 05 cmp eax,5 - 1001A046: 0F 85 66 01 00 00 jne 1001A1B2 - 1001A04C: 0F BE 45 FE movsx eax,byte ptr [ebp-2] - 1001A050: 33 FF xor edi,edi - 1001A052: 48 dec eax - 1001A053: 0F 84 26 01 00 00 je 1001A17F - 1001A059: 48 dec eax - 1001A05A: 0F 85 52 01 00 00 jne 1001A1B2 - 1001A060: C7 45 E8 FF FE 00 mov dword ptr [ebp-18h],0FEFFh - 00 - 1001A067: C7 45 EC 02 00 00 mov dword ptr [ebp-14h],2 - 00 - 1001A06E: E9 1A 01 00 00 jmp 1001A18D - 1001A073: 6A 02 push 2 - 1001A075: 53 push ebx - 1001A076: 53 push ebx - 1001A077: FF 36 push dword ptr [esi] - 1001A079: E8 6B CE FF FF call 10016EE9 - 1001A07E: 83 C4 10 add esp,10h - 1001A081: 0B C2 or eax,edx - 1001A083: 74 C7 je 1001A04C - 1001A085: 53 push ebx - 1001A086: 53 push ebx - 1001A087: 53 push ebx - 1001A088: FF 36 push dword ptr [esi] - 1001A08A: E8 5A CE FF FF call 10016EE9 - 1001A08F: 23 C2 and eax,edx - 1001A091: 83 C4 10 add esp,10h - 1001A094: 83 F8 FF cmp eax,0FFFFFFFFh - 1001A097: 0F 84 8D FE FF FF je 10019F2A - 1001A09D: 6A 03 push 3 - 1001A09F: 8D 45 E8 lea eax,[ebp-18h] - 1001A0A2: 50 push eax - 1001A0A3: FF 36 push dword ptr [esi] - 1001A0A5: E8 93 15 00 00 call 1001B63D - 1001A0AA: 83 C4 0C add esp,0Ch - 1001A0AD: 83 F8 FF cmp eax,0FFFFFFFFh - 1001A0B0: 0F 84 74 FE FF FF je 10019F2A - 1001A0B6: 83 F8 02 cmp eax,2 - 1001A0B9: 74 6B je 1001A126 - 1001A0BB: 83 F8 03 cmp eax,3 - 1001A0BE: 0F 85 AD 00 00 00 jne 1001A171 - 1001A0C4: 81 7D E8 EF BB BF cmp dword ptr [ebp-18h],0BFBBEFh - 00 - 1001A0CB: 75 59 jne 1001A126 - 1001A0CD: C6 45 FE 01 mov byte ptr [ebp-2],1 - 1001A0D1: E9 DC 00 00 00 jmp 1001A1B2 - 1001A0D6: 8B 45 EC mov eax,dword ptr [ebp-14h] - 1001A0D9: 3B C3 cmp eax,ebx - 1001A0DB: 0F 86 D1 00 00 00 jbe 1001A1B2 - 1001A0E1: 83 F8 02 cmp eax,2 - 1001A0E4: 0F 86 62 FF FF FF jbe 1001A04C - 1001A0EA: 83 F8 04 cmp eax,4 - 1001A0ED: 0F 87 50 FF FF FF ja 1001A043 - 1001A0F3: 6A 02 push 2 - 1001A0F5: 53 push ebx - 1001A0F6: 53 push ebx - 1001A0F7: FF 36 push dword ptr [esi] - 1001A0F9: E8 EB CD FF FF call 10016EE9 - 1001A0FE: 83 C4 10 add esp,10h - 1001A101: 0B C2 or eax,edx - 1001A103: 0F 84 43 FF FF FF je 1001A04C - 1001A109: 53 push ebx - 1001A10A: 53 push ebx - 1001A10B: 53 push ebx - 1001A10C: FF 36 push dword ptr [esi] - 1001A10E: E8 D6 CD FF FF call 10016EE9 - 1001A113: 83 C4 10 add esp,10h - 1001A116: 23 C2 and eax,edx - 1001A118: 83 F8 FF cmp eax,0FFFFFFFFh - 1001A11B: 0F 85 91 00 00 00 jne 1001A1B2 - 1001A121: E9 04 FE FF FF jmp 10019F2A - 1001A126: 8B 45 E8 mov eax,dword ptr [ebp-18h] - 1001A129: 25 FF FF 00 00 and eax,0FFFFh - 1001A12E: 3D FE FF 00 00 cmp eax,0FFFEh - 1001A133: 75 19 jne 1001A14E - 1001A135: FF 36 push dword ptr [esi] - 1001A137: E8 42 62 FF FF call 1001037E - 1001A13C: 59 pop ecx - 1001A13D: E8 07 4F FF FF call 1000F049 - 1001A142: 6A 16 push 16h - 1001A144: 5E pop esi - 1001A145: 89 30 mov dword ptr [eax],esi - 1001A147: 8B C6 mov eax,esi - 1001A149: E9 64 01 00 00 jmp 1001A2B2 - 1001A14E: 3D FF FE 00 00 cmp eax,0FEFFh - 1001A153: 75 1C jne 1001A171 - 1001A155: 53 push ebx - 1001A156: 6A 02 push 2 - 1001A158: FF 36 push dword ptr [esi] - 1001A15A: E8 53 1D 00 00 call 1001BEB2 - 1001A15F: 83 C4 0C add esp,0Ch - 1001A162: 83 F8 FF cmp eax,0FFFFFFFFh - 1001A165: 0F 84 BF FD FF FF je 10019F2A - 1001A16B: C6 45 FE 02 mov byte ptr [ebp-2],2 - 1001A16F: EB 41 jmp 1001A1B2 - 1001A171: 53 push ebx - 1001A172: 53 push ebx - 1001A173: FF 36 push dword ptr [esi] - 1001A175: E8 38 1D 00 00 call 1001BEB2 - 1001A17A: 83 C4 0C add esp,0Ch - 1001A17D: EB 99 jmp 1001A118 - 1001A17F: C7 45 E8 EF BB BF mov dword ptr [ebp-18h],0BFBBEFh - 00 - 1001A186: C7 45 EC 03 00 00 mov dword ptr [ebp-14h],3 - 00 - 1001A18D: 8B 45 EC mov eax,dword ptr [ebp-14h] - 1001A190: 2B C7 sub eax,edi - 1001A192: 50 push eax - 1001A193: 8D 44 3D E8 lea eax,[ebp+edi-18h] - 1001A197: 50 push eax - 1001A198: FF 36 push dword ptr [esi] - 1001A19A: E8 1B D6 FF FF call 100177BA - 1001A19F: 83 C4 0C add esp,0Ch - 1001A1A2: 83 F8 FF cmp eax,0FFFFFFFFh - 1001A1A5: 0F 84 7F FD FF FF je 10019F2A - 1001A1AB: 03 F8 add edi,eax - 1001A1AD: 39 7D EC cmp dword ptr [ebp-14h],edi - 1001A1B0: 7F DB jg 1001A18D - 1001A1B2: 8B 06 mov eax,dword ptr [esi] - 1001A1B4: 8B C8 mov ecx,eax - 1001A1B6: C1 F9 05 sar ecx,5 - 1001A1B9: 8B 0C 8D 00 6C 02 mov ecx,dword ptr [ecx*4+10026C00h] - 10 - 1001A1C0: 83 E0 1F and eax,1Fh - 1001A1C3: C1 E0 06 shl eax,6 - 1001A1C6: 8D 44 01 24 lea eax,[ecx+eax+24h] - 1001A1CA: 8A 08 mov cl,byte ptr [eax] - 1001A1CC: 32 4D FE xor cl,byte ptr [ebp-2] - 1001A1CF: 80 E1 7F and cl,7Fh - 1001A1D2: 30 08 xor byte ptr [eax],cl - 1001A1D4: 8B 06 mov eax,dword ptr [esi] - 1001A1D6: 8B C8 mov ecx,eax - 1001A1D8: C1 F9 05 sar ecx,5 - 1001A1DB: 8B 0C 8D 00 6C 02 mov ecx,dword ptr [ecx*4+10026C00h] - 10 - 1001A1E2: 83 E0 1F and eax,1Fh - 1001A1E5: C1 E0 06 shl eax,6 - 1001A1E8: 8D 44 01 24 lea eax,[ecx+eax+24h] - 1001A1EC: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 1001A1EF: 8A 10 mov dl,byte ptr [eax] - 1001A1F1: C1 E9 10 shr ecx,10h - 1001A1F4: C0 E1 07 shl cl,7 - 1001A1F7: 80 E2 7F and dl,7Fh - 1001A1FA: 0A CA or cl,dl - 1001A1FC: 88 08 mov byte ptr [eax],cl - 1001A1FE: 38 5D FD cmp byte ptr [ebp-3],bl - 1001A201: 75 21 jne 1001A224 - 1001A203: F6 45 10 08 test byte ptr [ebp+10h],8 - 1001A207: 74 1B je 1001A224 - 1001A209: 8B 06 mov eax,dword ptr [esi] - 1001A20B: 8B C8 mov ecx,eax - 1001A20D: 83 E0 1F and eax,1Fh - 1001A210: C1 F9 05 sar ecx,5 - 1001A213: 8B 0C 8D 00 6C 02 mov ecx,dword ptr [ecx*4+10026C00h] - 10 - 1001A21A: C1 E0 06 shl eax,6 - 1001A21D: 8D 44 01 04 lea eax,[ecx+eax+4] - 1001A221: 80 08 20 or byte ptr [eax],20h - 1001A224: 8B 7D F8 mov edi,dword ptr [ebp-8] - 1001A227: B8 00 00 00 C0 mov eax,0C0000000h - 1001A22C: 8B CF mov ecx,edi - 1001A22E: 23 C8 and ecx,eax - 1001A230: 3B C8 cmp ecx,eax - 1001A232: 75 7C jne 1001A2B0 - 1001A234: F6 45 10 01 test byte ptr [ebp+10h],1 - 1001A238: 74 76 je 1001A2B0 - 1001A23A: FF 75 E4 push dword ptr [ebp-1Ch] - 1001A23D: FF 15 14 F0 01 10 call dword ptr ds:[1001F014h] - 1001A243: 53 push ebx - 1001A244: FF 75 F4 push dword ptr [ebp-0Ch] - 1001A247: 8D 45 CC lea eax,[ebp-34h] - 1001A24A: 6A 03 push 3 - 1001A24C: 50 push eax - 1001A24D: FF 75 F0 push dword ptr [ebp-10h] - 1001A250: 81 E7 FF FF FF 7F and edi,7FFFFFFFh - 1001A256: 57 push edi - 1001A257: FF 75 0C push dword ptr [ebp+0Ch] - 1001A25A: FF 15 10 F0 01 10 call dword ptr ds:[1001F010h] - 1001A260: 83 F8 FF cmp eax,0FFFFFFFFh - 1001A263: 75 34 jne 1001A299 - 1001A265: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 1001A26B: 50 push eax - 1001A26C: E8 FE 4D FF FF call 1000F06F - 1001A271: 8B 06 mov eax,dword ptr [esi] - 1001A273: 8B C8 mov ecx,eax - 1001A275: 83 E0 1F and eax,1Fh - 1001A278: C1 F9 05 sar ecx,5 - 1001A27B: 8B 0C 8D 00 6C 02 mov ecx,dword ptr [ecx*4+10026C00h] - 10 - 1001A282: C1 E0 06 shl eax,6 - 1001A285: 8D 44 01 04 lea eax,[ecx+eax+4] - 1001A289: 80 20 FE and byte ptr [eax],0FEh - 1001A28C: FF 36 push dword ptr [esi] - 1001A28E: E8 ED DD FF FF call 10018080 - 1001A293: 59 pop ecx - 1001A294: E9 97 FB FF FF jmp 10019E30 - 1001A299: 8B 36 mov esi,dword ptr [esi] - 1001A29B: 8B CE mov ecx,esi - 1001A29D: C1 F9 05 sar ecx,5 - 1001A2A0: 8B 0C 8D 00 6C 02 mov ecx,dword ptr [ecx*4+10026C00h] - 10 - 1001A2A7: 83 E6 1F and esi,1Fh - 1001A2AA: C1 E6 06 shl esi,6 - 1001A2AD: 89 04 0E mov dword ptr [esi+ecx],eax - 1001A2B0: 8B C3 mov eax,ebx - 1001A2B2: 5F pop edi - 1001A2B3: 5E pop esi - 1001A2B4: 5B pop ebx - 1001A2B5: C9 leave - 1001A2B6: C3 ret - 1001A2B7: 6A 14 push 14h - 1001A2B9: 68 E8 1F 02 10 push 10021FE8h - 1001A2BE: E8 C5 5D FF FF call 10010088 - 1001A2C3: 33 F6 xor esi,esi - 1001A2C5: 89 75 E4 mov dword ptr [ebp-1Ch],esi - 1001A2C8: 33 C0 xor eax,eax - 1001A2CA: 8B 7D 18 mov edi,dword ptr [ebp+18h] - 1001A2CD: 3B FE cmp edi,esi - 1001A2CF: 0F 95 C0 setne al - 1001A2D2: 3B C6 cmp eax,esi - 1001A2D4: 75 1B jne 1001A2F1 - 1001A2D6: E8 6E 4D FF FF call 1000F049 - 1001A2DB: 6A 16 push 16h - 1001A2DD: 5F pop edi - 1001A2DE: 89 38 mov dword ptr [eax],edi - 1001A2E0: 56 push esi - 1001A2E1: 56 push esi - 1001A2E2: 56 push esi - 1001A2E3: 56 push esi - 1001A2E4: 56 push esi - 1001A2E5: E8 F7 4C FF FF call 1000EFE1 - 1001A2EA: 83 C4 14 add esp,14h - 1001A2ED: 8B C7 mov eax,edi - 1001A2EF: EB 59 jmp 1001A34A - 1001A2F1: 83 0F FF or dword ptr [edi],0FFFFFFFFh - 1001A2F4: 33 C0 xor eax,eax - 1001A2F6: 39 75 08 cmp dword ptr [ebp+8],esi - 1001A2F9: 0F 95 C0 setne al - 1001A2FC: 3B C6 cmp eax,esi - 1001A2FE: 74 D6 je 1001A2D6 - 1001A300: 39 75 1C cmp dword ptr [ebp+1Ch],esi - 1001A303: 74 0F je 1001A314 - 1001A305: 8B 45 14 mov eax,dword ptr [ebp+14h] - 1001A308: 25 7F FE FF FF and eax,0FFFFFE7Fh - 1001A30D: F7 D8 neg eax - 1001A30F: 1B C0 sbb eax,eax - 1001A311: 40 inc eax - 1001A312: 74 C2 je 1001A2D6 - 1001A314: 89 75 FC mov dword ptr [ebp-4],esi - 1001A317: FF 75 14 push dword ptr [ebp+14h] - 1001A31A: FF 75 10 push dword ptr [ebp+10h] - 1001A31D: FF 75 0C push dword ptr [ebp+0Ch] - 1001A320: FF 75 08 push dword ptr [ebp+8] - 1001A323: 8D 45 E4 lea eax,[ebp-1Ch] - 1001A326: 50 push eax - 1001A327: 8B C7 mov eax,edi - 1001A329: E8 69 F8 FF FF call 10019B97 - 1001A32E: 83 C4 14 add esp,14h - 1001A331: 89 45 E0 mov dword ptr [ebp-20h],eax - 1001A334: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1001A33B: E8 15 00 00 00 call 1001A355 - 1001A340: 8B 45 E0 mov eax,dword ptr [ebp-20h] - 1001A343: 3B C6 cmp eax,esi - 1001A345: 74 03 je 1001A34A - 1001A347: 83 0F FF or dword ptr [edi],0FFFFFFFFh - 1001A34A: E8 7E 5D FF FF call 100100CD - 1001A34F: C3 ret - 1001A350: 33 F6 xor esi,esi - 1001A352: 8B 7D 18 mov edi,dword ptr [ebp+18h] - 1001A355: 39 75 E4 cmp dword ptr [ebp-1Ch],esi - 1001A358: 74 28 je 1001A382 - 1001A35A: 39 75 E0 cmp dword ptr [ebp-20h],esi - 1001A35D: 74 1B je 1001A37A - 1001A35F: 8B 07 mov eax,dword ptr [edi] - 1001A361: 8B C8 mov ecx,eax - 1001A363: C1 F9 05 sar ecx,5 - 1001A366: 83 E0 1F and eax,1Fh - 1001A369: C1 E0 06 shl eax,6 - 1001A36C: 8B 0C 8D 00 6C 02 mov ecx,dword ptr [ecx*4+10026C00h] - 10 - 1001A373: 8D 44 01 04 lea eax,[ecx+eax+4] - 1001A377: 80 20 FE and byte ptr [eax],0FEh - 1001A37A: FF 37 push dword ptr [edi] - 1001A37C: E8 9C DE FF FF call 1001821D - 1001A381: 59 pop ecx - 1001A382: C3 ret - 1001A383: 8B FF mov edi,edi - 1001A385: 55 push ebp - 1001A386: 8B EC mov ebp,esp - 1001A388: 6A 01 push 1 - 1001A38A: FF 75 08 push dword ptr [ebp+8] - 1001A38D: FF 75 18 push dword ptr [ebp+18h] - 1001A390: FF 75 14 push dword ptr [ebp+14h] - 1001A393: FF 75 10 push dword ptr [ebp+10h] - 1001A396: FF 75 0C push dword ptr [ebp+0Ch] - 1001A399: E8 19 FF FF FF call 1001A2B7 - 1001A39E: 83 C4 18 add esp,18h - 1001A3A1: 5D pop ebp - 1001A3A2: C3 ret - 1001A3A3: 8B FF mov edi,edi - 1001A3A5: 55 push ebp - 1001A3A6: 8B EC mov ebp,esp - 1001A3A8: 83 EC 10 sub esp,10h - 1001A3AB: 53 push ebx - 1001A3AC: 56 push esi - 1001A3AD: 33 F6 xor esi,esi - 1001A3AF: 33 C0 xor eax,eax - 1001A3B1: 57 push edi - 1001A3B2: 39 75 10 cmp dword ptr [ebp+10h],esi - 1001A3B5: 0F 84 CD 00 00 00 je 1001A488 - 1001A3BB: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 1001A3BE: 3B DE cmp ebx,esi - 1001A3C0: 75 22 jne 1001A3E4 - 1001A3C2: E8 82 4C FF FF call 1000F049 - 1001A3C7: 56 push esi - 1001A3C8: 56 push esi - 1001A3C9: 56 push esi - 1001A3CA: 56 push esi - 1001A3CB: 56 push esi - 1001A3CC: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1001A3D2: E8 0A 4C FF FF call 1000EFE1 - 1001A3D7: 83 C4 14 add esp,14h - 1001A3DA: B8 FF FF FF 7F mov eax,7FFFFFFFh - 1001A3DF: E9 A4 00 00 00 jmp 1001A488 - 1001A3E4: 8B 7D 0C mov edi,dword ptr [ebp+0Ch] - 1001A3E7: 3B FE cmp edi,esi - 1001A3E9: 74 D7 je 1001A3C2 - 1001A3EB: FF 75 14 push dword ptr [ebp+14h] - 1001A3EE: 8D 4D F0 lea ecx,[ebp-10h] - 1001A3F1: E8 06 03 FF FF call 1000A6FC - 1001A3F6: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 1001A3F9: 39 70 14 cmp dword ptr [eax+14h],esi - 1001A3FC: 75 3F jne 1001A43D - 1001A3FE: 0F B7 03 movzx eax,word ptr [ebx] - 1001A401: 66 83 F8 41 cmp ax,41h - 1001A405: 72 09 jb 1001A410 - 1001A407: 66 83 F8 5A cmp ax,5Ah - 1001A40B: 77 03 ja 1001A410 - 1001A40D: 83 C0 20 add eax,20h - 1001A410: 0F B7 F0 movzx esi,ax - 1001A413: 0F B7 07 movzx eax,word ptr [edi] - 1001A416: 66 83 F8 41 cmp ax,41h - 1001A41A: 72 09 jb 1001A425 - 1001A41C: 66 83 F8 5A cmp ax,5Ah - 1001A420: 77 03 ja 1001A425 - 1001A422: 83 C0 20 add eax,20h - 1001A425: 43 inc ebx - 1001A426: 43 inc ebx - 1001A427: 47 inc edi - 1001A428: 47 inc edi - 1001A429: FF 4D 10 dec dword ptr [ebp+10h] - 1001A42C: 0F B7 C0 movzx eax,ax - 1001A42F: 74 42 je 1001A473 - 1001A431: 66 85 F6 test si,si - 1001A434: 74 3D je 1001A473 - 1001A436: 66 3B F0 cmp si,ax - 1001A439: 74 C3 je 1001A3FE - 1001A43B: EB 36 jmp 1001A473 - 1001A43D: 8D 45 F0 lea eax,[ebp-10h] - 1001A440: 50 push eax - 1001A441: 0F B7 03 movzx eax,word ptr [ebx] - 1001A444: 50 push eax - 1001A445: E8 D2 1B 00 00 call 1001C01C - 1001A44A: 0F B7 F0 movzx esi,ax - 1001A44D: 8D 45 F0 lea eax,[ebp-10h] - 1001A450: 50 push eax - 1001A451: 0F B7 07 movzx eax,word ptr [edi] - 1001A454: 50 push eax - 1001A455: E8 C2 1B 00 00 call 1001C01C - 1001A45A: 83 C4 10 add esp,10h - 1001A45D: 43 inc ebx - 1001A45E: 43 inc ebx - 1001A45F: 47 inc edi - 1001A460: 47 inc edi - 1001A461: FF 4D 10 dec dword ptr [ebp+10h] - 1001A464: 0F B7 C0 movzx eax,ax - 1001A467: 74 0A je 1001A473 - 1001A469: 66 85 F6 test si,si - 1001A46C: 74 05 je 1001A473 - 1001A46E: 66 3B F0 cmp si,ax - 1001A471: 74 CA je 1001A43D - 1001A473: 0F B7 C8 movzx ecx,ax - 1001A476: 0F B7 C6 movzx eax,si - 1001A479: 2B C1 sub eax,ecx - 1001A47B: 80 7D FC 00 cmp byte ptr [ebp-4],0 - 1001A47F: 74 07 je 1001A488 - 1001A481: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 1001A484: 83 61 70 FD and dword ptr [ecx+70h],0FFFFFFFDh - 1001A488: 5F pop edi - 1001A489: 5E pop esi - 1001A48A: 5B pop ebx - 1001A48B: C9 leave - 1001A48C: C3 ret - 1001A48D: 8B FF mov edi,edi - 1001A48F: 55 push ebp - 1001A490: 8B EC mov ebp,esp - 1001A492: 56 push esi - 1001A493: 33 F6 xor esi,esi - 1001A495: 57 push edi - 1001A496: 39 35 D8 69 02 10 cmp dword ptr ds:[100269D8h],esi - 1001A49C: 75 7F jne 1001A51D - 1001A49E: 33 C0 xor eax,eax - 1001A4A0: 39 75 10 cmp dword ptr [ebp+10h],esi - 1001A4A3: 0F 84 86 00 00 00 je 1001A52F - 1001A4A9: 8B 7D 08 mov edi,dword ptr [ebp+8] - 1001A4AC: 3B FE cmp edi,esi - 1001A4AE: 75 1F jne 1001A4CF - 1001A4B0: E8 94 4B FF FF call 1000F049 - 1001A4B5: 56 push esi - 1001A4B6: 56 push esi - 1001A4B7: 56 push esi - 1001A4B8: 56 push esi - 1001A4B9: 56 push esi - 1001A4BA: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1001A4C0: E8 1C 4B FF FF call 1000EFE1 - 1001A4C5: 83 C4 14 add esp,14h - 1001A4C8: B8 FF FF FF 7F mov eax,7FFFFFFFh - 1001A4CD: EB 60 jmp 1001A52F - 1001A4CF: 8B 55 0C mov edx,dword ptr [ebp+0Ch] - 1001A4D2: 3B D6 cmp edx,esi - 1001A4D4: 74 DA je 1001A4B0 - 1001A4D6: 0F B7 07 movzx eax,word ptr [edi] - 1001A4D9: 66 83 F8 41 cmp ax,41h - 1001A4DD: 72 09 jb 1001A4E8 - 1001A4DF: 66 83 F8 5A cmp ax,5Ah - 1001A4E3: 77 03 ja 1001A4E8 - 1001A4E5: 83 C0 20 add eax,20h - 1001A4E8: 0F B7 C8 movzx ecx,ax - 1001A4EB: 0F B7 02 movzx eax,word ptr [edx] - 1001A4EE: 66 83 F8 41 cmp ax,41h - 1001A4F2: 72 09 jb 1001A4FD - 1001A4F4: 66 83 F8 5A cmp ax,5Ah - 1001A4F8: 77 03 ja 1001A4FD - 1001A4FA: 83 C0 20 add eax,20h - 1001A4FD: 47 inc edi - 1001A4FE: 47 inc edi - 1001A4FF: 42 inc edx - 1001A500: 42 inc edx - 1001A501: FF 4D 10 dec dword ptr [ebp+10h] - 1001A504: 0F B7 C0 movzx eax,ax - 1001A507: 74 0A je 1001A513 - 1001A509: 66 3B CE cmp cx,si - 1001A50C: 74 05 je 1001A513 - 1001A50E: 66 3B C8 cmp cx,ax - 1001A511: 74 C3 je 1001A4D6 - 1001A513: 0F B7 D0 movzx edx,ax - 1001A516: 0F B7 C1 movzx eax,cx - 1001A519: 2B C2 sub eax,edx - 1001A51B: EB 12 jmp 1001A52F - 1001A51D: 56 push esi - 1001A51E: FF 75 10 push dword ptr [ebp+10h] - 1001A521: FF 75 0C push dword ptr [ebp+0Ch] - 1001A524: FF 75 08 push dword ptr [ebp+8] - 1001A527: E8 77 FE FF FF call 1001A3A3 - 1001A52C: 83 C4 10 add esp,10h - 1001A52F: 5F pop edi - 1001A530: 5E pop esi - 1001A531: 5D pop ebp - 1001A532: C3 ret - 1001A533: 8B FF mov edi,edi - 1001A535: 55 push ebp - 1001A536: 8B EC mov ebp,esp - 1001A538: 83 7D 10 00 cmp dword ptr [ebp+10h],0 - 1001A53C: 75 04 jne 1001A542 - 1001A53E: 33 C0 xor eax,eax - 1001A540: 5D pop ebp - 1001A541: C3 ret - 1001A542: 8B 55 0C mov edx,dword ptr [ebp+0Ch] - 1001A545: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1001A548: FF 4D 10 dec dword ptr [ebp+10h] - 1001A54B: 74 13 je 1001A560 - 1001A54D: 0F B7 01 movzx eax,word ptr [ecx] - 1001A550: 66 85 C0 test ax,ax - 1001A553: 74 0B je 1001A560 - 1001A555: 66 3B 02 cmp ax,word ptr [edx] - 1001A558: 75 06 jne 1001A560 - 1001A55A: 41 inc ecx - 1001A55B: 41 inc ecx - 1001A55C: 42 inc edx - 1001A55D: 42 inc edx - 1001A55E: EB E8 jmp 1001A548 - 1001A560: 0F B7 01 movzx eax,word ptr [ecx] - 1001A563: 0F B7 0A movzx ecx,word ptr [edx] - 1001A566: 2B C1 sub eax,ecx - 1001A568: 5D pop ebp - 1001A569: C3 ret - 1001A56A: 8B FF mov edi,edi - 1001A56C: 55 push ebp - 1001A56D: 8B EC mov ebp,esp - 1001A56F: 83 EC 14 sub esp,14h - 1001A572: 56 push esi - 1001A573: 57 push edi - 1001A574: FF 75 08 push dword ptr [ebp+8] - 1001A577: 8D 4D EC lea ecx,[ebp-14h] - 1001A57A: E8 7D 01 FF FF call 1000A6FC - 1001A57F: 8B 45 10 mov eax,dword ptr [ebp+10h] - 1001A582: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 1001A585: 33 FF xor edi,edi - 1001A587: 3B C7 cmp eax,edi - 1001A589: 74 02 je 1001A58D - 1001A58B: 89 30 mov dword ptr [eax],esi - 1001A58D: 3B F7 cmp esi,edi - 1001A58F: 75 2C jne 1001A5BD - 1001A591: E8 B3 4A FF FF call 1000F049 - 1001A596: 57 push edi - 1001A597: 57 push edi - 1001A598: 57 push edi - 1001A599: 57 push edi - 1001A59A: 57 push edi - 1001A59B: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1001A5A1: E8 3B 4A FF FF call 1000EFE1 - 1001A5A6: 83 C4 14 add esp,14h - 1001A5A9: 80 7D F8 00 cmp byte ptr [ebp-8],0 - 1001A5AD: 74 07 je 1001A5B6 - 1001A5AF: 8B 45 F4 mov eax,dword ptr [ebp-0Ch] - 1001A5B2: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1001A5B6: 33 C0 xor eax,eax - 1001A5B8: E9 D8 01 00 00 jmp 1001A795 - 1001A5BD: 39 7D 14 cmp dword ptr [ebp+14h],edi - 1001A5C0: 74 0C je 1001A5CE - 1001A5C2: 83 7D 14 02 cmp dword ptr [ebp+14h],2 - 1001A5C6: 7C C9 jl 1001A591 - 1001A5C8: 83 7D 14 24 cmp dword ptr [ebp+14h],24h - 1001A5CC: 7F C3 jg 1001A591 - 1001A5CE: 8B 4D EC mov ecx,dword ptr [ebp-14h] - 1001A5D1: 53 push ebx - 1001A5D2: 8A 1E mov bl,byte ptr [esi] - 1001A5D4: 89 7D FC mov dword ptr [ebp-4],edi - 1001A5D7: 8D 7E 01 lea edi,[esi+1] - 1001A5DA: 83 B9 AC 00 00 00 cmp dword ptr [ecx+000000ACh],1 - 01 - 1001A5E1: 7E 17 jle 1001A5FA - 1001A5E3: 8D 45 EC lea eax,[ebp-14h] - 1001A5E6: 50 push eax - 1001A5E7: 0F B6 C3 movzx eax,bl - 1001A5EA: 6A 08 push 8 - 1001A5EC: 50 push eax - 1001A5ED: E8 2D 0A 00 00 call 1001B01F - 1001A5F2: 8B 4D EC mov ecx,dword ptr [ebp-14h] - 1001A5F5: 83 C4 0C add esp,0Ch - 1001A5F8: EB 10 jmp 1001A60A - 1001A5FA: 8B 91 C8 00 00 00 mov edx,dword ptr [ecx+000000C8h] - 1001A600: 0F B6 C3 movzx eax,bl - 1001A603: 0F B7 04 42 movzx eax,word ptr [edx+eax*2] - 1001A607: 83 E0 08 and eax,8 - 1001A60A: 85 C0 test eax,eax - 1001A60C: 74 05 je 1001A613 - 1001A60E: 8A 1F mov bl,byte ptr [edi] - 1001A610: 47 inc edi - 1001A611: EB C7 jmp 1001A5DA - 1001A613: 80 FB 2D cmp bl,2Dh - 1001A616: 75 06 jne 1001A61E - 1001A618: 83 4D 18 02 or dword ptr [ebp+18h],2 - 1001A61C: EB 05 jmp 1001A623 - 1001A61E: 80 FB 2B cmp bl,2Bh - 1001A621: 75 03 jne 1001A626 - 1001A623: 8A 1F mov bl,byte ptr [edi] - 1001A625: 47 inc edi - 1001A626: 8B 45 14 mov eax,dword ptr [ebp+14h] - 1001A629: 85 C0 test eax,eax - 1001A62B: 0F 8C 4B 01 00 00 jl 1001A77C - 1001A631: 83 F8 01 cmp eax,1 - 1001A634: 0F 84 42 01 00 00 je 1001A77C - 1001A63A: 83 F8 24 cmp eax,24h - 1001A63D: 0F 8F 39 01 00 00 jg 1001A77C - 1001A643: 85 C0 test eax,eax - 1001A645: 75 2A jne 1001A671 - 1001A647: 80 FB 30 cmp bl,30h - 1001A64A: 74 09 je 1001A655 - 1001A64C: C7 45 14 0A 00 00 mov dword ptr [ebp+14h],0Ah - 00 - 1001A653: EB 34 jmp 1001A689 - 1001A655: 8A 07 mov al,byte ptr [edi] - 1001A657: 3C 78 cmp al,78h - 1001A659: 74 0D je 1001A668 - 1001A65B: 3C 58 cmp al,58h - 1001A65D: 74 09 je 1001A668 - 1001A65F: C7 45 14 08 00 00 mov dword ptr [ebp+14h],8 - 00 - 1001A666: EB 21 jmp 1001A689 - 1001A668: C7 45 14 10 00 00 mov dword ptr [ebp+14h],10h - 00 - 1001A66F: EB 0A jmp 1001A67B - 1001A671: 83 F8 10 cmp eax,10h - 1001A674: 75 13 jne 1001A689 - 1001A676: 80 FB 30 cmp bl,30h - 1001A679: 75 0E jne 1001A689 - 1001A67B: 8A 07 mov al,byte ptr [edi] - 1001A67D: 3C 78 cmp al,78h - 1001A67F: 74 04 je 1001A685 - 1001A681: 3C 58 cmp al,58h - 1001A683: 75 04 jne 1001A689 - 1001A685: 47 inc edi - 1001A686: 8A 1F mov bl,byte ptr [edi] - 1001A688: 47 inc edi - 1001A689: 8B B1 C8 00 00 00 mov esi,dword ptr [ecx+000000C8h] - 1001A68F: B8 FF FF FF FF mov eax,0FFFFFFFFh - 1001A694: 33 D2 xor edx,edx - 1001A696: F7 75 14 div eax,dword ptr [ebp+14h] - 1001A699: 0F B6 CB movzx ecx,bl - 1001A69C: 0F B7 0C 4E movzx ecx,word ptr [esi+ecx*2] - 1001A6A0: F6 C1 04 test cl,4 - 1001A6A3: 74 08 je 1001A6AD - 1001A6A5: 0F BE CB movsx ecx,bl - 1001A6A8: 83 E9 30 sub ecx,30h - 1001A6AB: EB 1B jmp 1001A6C8 - 1001A6AD: F7 C1 03 01 00 00 test ecx,103h - 1001A6B3: 74 31 je 1001A6E6 - 1001A6B5: 8A CB mov cl,bl - 1001A6B7: 80 E9 61 sub cl,61h - 1001A6BA: 80 F9 19 cmp cl,19h - 1001A6BD: 0F BE CB movsx ecx,bl - 1001A6C0: 77 03 ja 1001A6C5 - 1001A6C2: 83 E9 20 sub ecx,20h - 1001A6C5: 83 C1 C9 add ecx,0FFFFFFC9h - 1001A6C8: 3B 4D 14 cmp ecx,dword ptr [ebp+14h] - 1001A6CB: 73 19 jae 1001A6E6 - 1001A6CD: 83 4D 18 08 or dword ptr [ebp+18h],8 - 1001A6D1: 39 45 FC cmp dword ptr [ebp-4],eax - 1001A6D4: 72 27 jb 1001A6FD - 1001A6D6: 75 04 jne 1001A6DC - 1001A6D8: 3B CA cmp ecx,edx - 1001A6DA: 76 21 jbe 1001A6FD - 1001A6DC: 83 4D 18 04 or dword ptr [ebp+18h],4 - 1001A6E0: 83 7D 10 00 cmp dword ptr [ebp+10h],0 - 1001A6E4: 75 23 jne 1001A709 - 1001A6E6: 8B 45 18 mov eax,dword ptr [ebp+18h] - 1001A6E9: 4F dec edi - 1001A6EA: A8 08 test al,8 - 1001A6EC: 75 20 jne 1001A70E - 1001A6EE: 83 7D 10 00 cmp dword ptr [ebp+10h],0 - 1001A6F2: 74 03 je 1001A6F7 - 1001A6F4: 8B 7D 0C mov edi,dword ptr [ebp+0Ch] - 1001A6F7: 83 65 FC 00 and dword ptr [ebp-4],0 - 1001A6FB: EB 5B jmp 1001A758 - 1001A6FD: 8B 5D FC mov ebx,dword ptr [ebp-4] - 1001A700: 0F AF 5D 14 imul ebx,dword ptr [ebp+14h] - 1001A704: 03 D9 add ebx,ecx - 1001A706: 89 5D FC mov dword ptr [ebp-4],ebx - 1001A709: 8A 1F mov bl,byte ptr [edi] - 1001A70B: 47 inc edi - 1001A70C: EB 8B jmp 1001A699 - 1001A70E: BE FF FF FF 7F mov esi,7FFFFFFFh - 1001A713: A8 04 test al,4 - 1001A715: 75 1B jne 1001A732 - 1001A717: A8 01 test al,1 - 1001A719: 75 3D jne 1001A758 - 1001A71B: 83 E0 02 and eax,2 - 1001A71E: 74 09 je 1001A729 - 1001A720: 81 7D FC 00 00 00 cmp dword ptr [ebp-4],80000000h - 80 - 1001A727: 77 09 ja 1001A732 - 1001A729: 85 C0 test eax,eax - 1001A72B: 75 2B jne 1001A758 - 1001A72D: 39 75 FC cmp dword ptr [ebp-4],esi - 1001A730: 76 26 jbe 1001A758 - 1001A732: E8 12 49 FF FF call 1000F049 - 1001A737: F6 45 18 01 test byte ptr [ebp+18h],1 - 1001A73B: C7 00 22 00 00 00 mov dword ptr [eax],22h - 1001A741: 74 06 je 1001A749 - 1001A743: 83 4D FC FF or dword ptr [ebp-4],0FFFFFFFFh - 1001A747: EB 0F jmp 1001A758 - 1001A749: F6 45 18 02 test byte ptr [ebp+18h],2 - 1001A74D: 6A 00 push 0 - 1001A74F: 58 pop eax - 1001A750: 0F 95 C0 setne al - 1001A753: 03 C6 add eax,esi - 1001A755: 89 45 FC mov dword ptr [ebp-4],eax - 1001A758: 8B 45 10 mov eax,dword ptr [ebp+10h] - 1001A75B: 85 C0 test eax,eax - 1001A75D: 74 02 je 1001A761 - 1001A75F: 89 38 mov dword ptr [eax],edi - 1001A761: F6 45 18 02 test byte ptr [ebp+18h],2 - 1001A765: 74 03 je 1001A76A - 1001A767: F7 5D FC neg dword ptr [ebp-4] - 1001A76A: 80 7D F8 00 cmp byte ptr [ebp-8],0 - 1001A76E: 74 07 je 1001A777 - 1001A770: 8B 45 F4 mov eax,dword ptr [ebp-0Ch] - 1001A773: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1001A777: 8B 45 FC mov eax,dword ptr [ebp-4] - 1001A77A: EB 18 jmp 1001A794 - 1001A77C: 8B 45 10 mov eax,dword ptr [ebp+10h] - 1001A77F: 85 C0 test eax,eax - 1001A781: 74 02 je 1001A785 - 1001A783: 89 30 mov dword ptr [eax],esi - 1001A785: 80 7D F8 00 cmp byte ptr [ebp-8],0 - 1001A789: 74 07 je 1001A792 - 1001A78B: 8B 45 F4 mov eax,dword ptr [ebp-0Ch] - 1001A78E: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1001A792: 33 C0 xor eax,eax - 1001A794: 5B pop ebx - 1001A795: 5F pop edi - 1001A796: 5E pop esi - 1001A797: C9 leave - 1001A798: C3 ret - 1001A799: 8B FF mov edi,edi - 1001A79B: 55 push ebp - 1001A79C: 8B EC mov ebp,esp - 1001A79E: 33 C0 xor eax,eax - 1001A7A0: 50 push eax - 1001A7A1: FF 75 10 push dword ptr [ebp+10h] - 1001A7A4: FF 75 0C push dword ptr [ebp+0Ch] - 1001A7A7: FF 75 08 push dword ptr [ebp+8] - 1001A7AA: 39 05 D8 69 02 10 cmp dword ptr ds:[100269D8h],eax - 1001A7B0: 75 07 jne 1001A7B9 - 1001A7B2: 68 68 56 02 10 push 10025668h - 1001A7B7: EB 01 jmp 1001A7BA - 1001A7B9: 50 push eax - 1001A7BA: E8 AB FD FF FF call 1001A56A - 1001A7BF: 83 C4 14 add esp,14h - 1001A7C2: 5D pop ebp - 1001A7C3: C3 ret - 1001A7C4: 8B FF mov edi,edi - 1001A7C6: 55 push ebp - 1001A7C7: 8B EC mov ebp,esp - 1001A7C9: 83 EC 10 sub esp,10h - 1001A7CC: 53 push ebx - 1001A7CD: FF 75 14 push dword ptr [ebp+14h] - 1001A7D0: 8D 4D F0 lea ecx,[ebp-10h] - 1001A7D3: E8 24 FF FE FF call 1000A6FC - 1001A7D8: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 1001A7DB: 33 DB xor ebx,ebx - 1001A7DD: 3B CB cmp ecx,ebx - 1001A7DF: 75 13 jne 1001A7F4 - 1001A7E1: 38 5D FC cmp byte ptr [ebp-4],bl - 1001A7E4: 74 07 je 1001A7ED - 1001A7E6: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1001A7E9: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1001A7ED: 33 C0 xor eax,eax - 1001A7EF: E9 BB 00 00 00 jmp 1001A8AF - 1001A7F4: 39 5D 08 cmp dword ptr [ebp+8],ebx - 1001A7F7: 75 2E jne 1001A827 - 1001A7F9: E8 4B 48 FF FF call 1000F049 - 1001A7FE: 53 push ebx - 1001A7FF: 53 push ebx - 1001A800: 53 push ebx - 1001A801: 53 push ebx - 1001A802: 53 push ebx - 1001A803: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1001A809: E8 D3 47 FF FF call 1000EFE1 - 1001A80E: 83 C4 14 add esp,14h - 1001A811: 38 5D FC cmp byte ptr [ebp-4],bl - 1001A814: 74 07 je 1001A81D - 1001A816: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1001A819: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1001A81D: B8 FF FF FF 7F mov eax,7FFFFFFFh - 1001A822: E9 88 00 00 00 jmp 1001A8AF - 1001A827: 39 5D 0C cmp dword ptr [ebp+0Ch],ebx - 1001A82A: 74 CD je 1001A7F9 - 1001A82C: 56 push esi - 1001A82D: BE FF FF FF 7F mov esi,7FFFFFFFh - 1001A832: 3B CE cmp ecx,esi - 1001A834: 76 1A jbe 1001A850 - 1001A836: E8 0E 48 FF FF call 1000F049 - 1001A83B: 53 push ebx - 1001A83C: 53 push ebx - 1001A83D: 53 push ebx - 1001A83E: 53 push ebx - 1001A83F: 53 push ebx - 1001A840: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1001A846: E8 96 47 FF FF call 1000EFE1 - 1001A84B: 83 C4 14 add esp,14h - 1001A84E: EB 3F jmp 1001A88F - 1001A850: 8B 45 F4 mov eax,dword ptr [ebp-0Ch] - 1001A853: 39 58 08 cmp dword ptr [eax+8],ebx - 1001A856: 75 14 jne 1001A86C - 1001A858: FF 75 14 push dword ptr [ebp+14h] - 1001A85B: 51 push ecx - 1001A85C: FF 75 0C push dword ptr [ebp+0Ch] - 1001A85F: FF 75 08 push dword ptr [ebp+8] - 1001A862: E8 3A 1C 00 00 call 1001C4A1 - 1001A867: 83 C4 10 add esp,10h - 1001A86A: EB 36 jmp 1001A8A2 - 1001A86C: FF 70 04 push dword ptr [eax+4] - 1001A86F: 51 push ecx - 1001A870: FF 75 0C push dword ptr [ebp+0Ch] - 1001A873: 51 push ecx - 1001A874: FF 75 08 push dword ptr [ebp+8] - 1001A877: 68 01 10 00 00 push 1001h - 1001A87C: FF 70 0C push dword ptr [eax+0Ch] - 1001A87F: 8D 45 F0 lea eax,[ebp-10h] - 1001A882: 50 push eax - 1001A883: E8 D7 1B 00 00 call 1001C45F - 1001A888: 83 C4 20 add esp,20h - 1001A88B: 3B C3 cmp eax,ebx - 1001A88D: 75 10 jne 1001A89F - 1001A88F: 38 5D FC cmp byte ptr [ebp-4],bl - 1001A892: 74 07 je 1001A89B - 1001A894: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1001A897: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1001A89B: 8B C6 mov eax,esi - 1001A89D: EB 0F jmp 1001A8AE - 1001A89F: 83 C0 FE add eax,0FFFFFFFEh - 1001A8A2: 38 5D FC cmp byte ptr [ebp-4],bl - 1001A8A5: 74 07 je 1001A8AE - 1001A8A7: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 1001A8AA: 83 61 70 FD and dword ptr [ecx+70h],0FFFFFFFDh - 1001A8AE: 5E pop esi - 1001A8AF: 5B pop ebx - 1001A8B0: C9 leave - 1001A8B1: C3 ret - 1001A8B2: 8B FF mov edi,edi - 1001A8B4: 55 push ebp - 1001A8B5: 8B EC mov ebp,esp - 1001A8B7: 6A 00 push 0 - 1001A8B9: FF 75 10 push dword ptr [ebp+10h] - 1001A8BC: FF 75 0C push dword ptr [ebp+0Ch] - 1001A8BF: FF 75 08 push dword ptr [ebp+8] - 1001A8C2: E8 FD FE FF FF call 1001A7C4 - 1001A8C7: 83 C4 10 add esp,10h - 1001A8CA: 5D pop ebp - 1001A8CB: C3 ret - 1001A8CC: 8B FF mov edi,edi - 1001A8CE: 55 push ebp - 1001A8CF: 8B EC mov ebp,esp - 1001A8D1: 51 push ecx - 1001A8D2: 51 push ecx - 1001A8D3: 53 push ebx - 1001A8D4: 56 push esi - 1001A8D5: 33 F6 xor esi,esi - 1001A8D7: 57 push edi - 1001A8D8: 8B 3D 20 6A 02 10 mov edi,dword ptr ds:[10026A20h] - 1001A8DE: 89 75 FC mov dword ptr [ebp-4],esi - 1001A8E1: 8B 07 mov eax,dword ptr [edi] - 1001A8E3: 3B C6 cmp eax,esi - 1001A8E5: 74 65 je 1001A94C - 1001A8E7: 8B 1D 70 F0 01 10 mov ebx,dword ptr ds:[1001F070h] - 1001A8ED: 56 push esi - 1001A8EE: 56 push esi - 1001A8EF: 56 push esi - 1001A8F0: 56 push esi - 1001A8F1: 6A FF push 0FFFFFFFFh - 1001A8F3: 50 push eax - 1001A8F4: 56 push esi - 1001A8F5: 56 push esi - 1001A8F6: FF D3 call ebx - 1001A8F8: 89 45 F8 mov dword ptr [ebp-8],eax - 1001A8FB: 3B C6 cmp eax,esi - 1001A8FD: 74 54 je 1001A953 - 1001A8FF: 6A 01 push 1 - 1001A901: 50 push eax - 1001A902: E8 47 80 FF FF call 1001294E - 1001A907: 59 pop ecx - 1001A908: 59 pop ecx - 1001A909: 89 45 FC mov dword ptr [ebp-4],eax - 1001A90C: 3B C6 cmp eax,esi - 1001A90E: 74 43 je 1001A953 - 1001A910: 56 push esi - 1001A911: 56 push esi - 1001A912: FF 75 F8 push dword ptr [ebp-8] - 1001A915: 50 push eax - 1001A916: 6A FF push 0FFFFFFFFh - 1001A918: FF 37 push dword ptr [edi] - 1001A91A: 56 push esi - 1001A91B: 56 push esi - 1001A91C: FF D3 call ebx - 1001A91E: 85 C0 test eax,eax - 1001A920: 74 36 je 1001A958 - 1001A922: 8D 45 FC lea eax,[ebp-4] - 1001A925: 56 push esi - 1001A926: 50 push eax - 1001A927: E8 1B 1D 00 00 call 1001C647 - 1001A92C: 59 pop ecx - 1001A92D: 59 pop ecx - 1001A92E: 85 C0 test eax,eax - 1001A930: 7D 11 jge 1001A943 - 1001A932: 39 75 FC cmp dword ptr [ebp-4],esi - 1001A935: 74 0C je 1001A943 - 1001A937: FF 75 FC push dword ptr [ebp-4] - 1001A93A: E8 F5 F9 FE FF call 1000A334 - 1001A93F: 59 pop ecx - 1001A940: 89 75 FC mov dword ptr [ebp-4],esi - 1001A943: 83 C7 04 add edi,4 - 1001A946: 8B 07 mov eax,dword ptr [edi] - 1001A948: 3B C6 cmp eax,esi - 1001A94A: 75 A1 jne 1001A8ED - 1001A94C: 33 C0 xor eax,eax - 1001A94E: 5F pop edi - 1001A94F: 5E pop esi - 1001A950: 5B pop ebx - 1001A951: C9 leave - 1001A952: C3 ret - 1001A953: 83 C8 FF or eax,0FFFFFFFFh - 1001A956: EB F6 jmp 1001A94E - 1001A958: FF 75 FC push dword ptr [ebp-4] - 1001A95B: E8 D4 F9 FE FF call 1000A334 - 1001A960: 59 pop ecx - 1001A961: EB F0 jmp 1001A953 - 1001A963: CC int 3 - 1001A964: CC int 3 - 1001A965: CC int 3 - 1001A966: CC int 3 - 1001A967: CC int 3 - 1001A968: CC int 3 - 1001A969: CC int 3 - 1001A96A: CC int 3 - 1001A96B: CC int 3 - 1001A96C: CC int 3 - 1001A96D: CC int 3 - 1001A96E: CC int 3 - 1001A96F: CC int 3 - 1001A970: 55 push ebp - 1001A971: 8B EC mov ebp,esp - 1001A973: 57 push edi - 1001A974: 8B 7D 08 mov edi,dword ptr [ebp+8] - 1001A977: 33 C0 xor eax,eax - 1001A979: 83 C9 FF or ecx,0FFFFFFFFh - 1001A97C: F2 AE repne scas byte ptr es:[edi] - 1001A97E: 83 C1 01 add ecx,1 - 1001A981: F7 D9 neg ecx - 1001A983: 83 EF 01 sub edi,1 - 1001A986: 8A 45 0C mov al,byte ptr [ebp+0Ch] - 1001A989: FD std - 1001A98A: F2 AE repne scas byte ptr es:[edi] - 1001A98C: 83 C7 01 add edi,1 - 1001A98F: 38 07 cmp byte ptr [edi],al - 1001A991: 74 04 je 1001A997 - 1001A993: 33 C0 xor eax,eax - 1001A995: EB 02 jmp 1001A999 - 1001A997: 8B C7 mov eax,edi - 1001A999: FC cld - 1001A99A: 5F pop edi - 1001A99B: C9 leave - 1001A99C: C3 ret - 1001A99D: 8B FF mov edi,edi - 1001A99F: 55 push ebp - 1001A9A0: 8B EC mov ebp,esp - 1001A9A2: 83 EC 18 sub esp,18h - 1001A9A5: 53 push ebx - 1001A9A6: 56 push esi - 1001A9A7: FF 75 0C push dword ptr [ebp+0Ch] - 1001A9AA: 8D 4D E8 lea ecx,[ebp-18h] - 1001A9AD: E8 4A FD FE FF call 1000A6FC - 1001A9B2: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 1001A9B5: BE 00 01 00 00 mov esi,100h - 1001A9BA: 3B DE cmp ebx,esi - 1001A9BC: 73 54 jae 1001AA12 - 1001A9BE: 8B 4D E8 mov ecx,dword ptr [ebp-18h] - 1001A9C1: 83 B9 AC 00 00 00 cmp dword ptr [ecx+000000ACh],1 - 01 - 1001A9C8: 7E 14 jle 1001A9DE - 1001A9CA: 8D 45 E8 lea eax,[ebp-18h] - 1001A9CD: 50 push eax - 1001A9CE: 6A 01 push 1 - 1001A9D0: 53 push ebx - 1001A9D1: E8 49 06 00 00 call 1001B01F - 1001A9D6: 8B 4D E8 mov ecx,dword ptr [ebp-18h] - 1001A9D9: 83 C4 0C add esp,0Ch - 1001A9DC: EB 0D jmp 1001A9EB - 1001A9DE: 8B 81 C8 00 00 00 mov eax,dword ptr [ecx+000000C8h] - 1001A9E4: 0F B7 04 58 movzx eax,word ptr [eax+ebx*2] - 1001A9E8: 83 E0 01 and eax,1 - 1001A9EB: 85 C0 test eax,eax - 1001A9ED: 74 0F je 1001A9FE - 1001A9EF: 8B 81 CC 00 00 00 mov eax,dword ptr [ecx+000000CCh] - 1001A9F5: 0F B6 04 18 movzx eax,byte ptr [eax+ebx] - 1001A9F9: E9 A3 00 00 00 jmp 1001AAA1 - 1001A9FE: 80 7D F4 00 cmp byte ptr [ebp-0Ch],0 - 1001AA02: 74 07 je 1001AA0B - 1001AA04: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 1001AA07: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1001AA0B: 8B C3 mov eax,ebx - 1001AA0D: E9 9C 00 00 00 jmp 1001AAAE - 1001AA12: 8B 45 E8 mov eax,dword ptr [ebp-18h] - 1001AA15: 83 B8 AC 00 00 00 cmp dword ptr [eax+000000ACh],1 - 01 - 1001AA1C: 7E 31 jle 1001AA4F - 1001AA1E: 89 5D 08 mov dword ptr [ebp+8],ebx - 1001AA21: C1 7D 08 08 sar dword ptr [ebp+8],8 - 1001AA25: 8D 45 E8 lea eax,[ebp-18h] - 1001AA28: 50 push eax - 1001AA29: 8B 45 08 mov eax,dword ptr [ebp+8] - 1001AA2C: 25 FF 00 00 00 and eax,0FFh - 1001AA31: 50 push eax - 1001AA32: E8 DA D1 FF FF call 10017C11 - 1001AA37: 59 pop ecx - 1001AA38: 59 pop ecx - 1001AA39: 85 C0 test eax,eax - 1001AA3B: 74 12 je 1001AA4F - 1001AA3D: 8A 45 08 mov al,byte ptr [ebp+8] - 1001AA40: 6A 02 push 2 - 1001AA42: 88 45 FC mov byte ptr [ebp-4],al - 1001AA45: 88 5D FD mov byte ptr [ebp-3],bl - 1001AA48: C6 45 FE 00 mov byte ptr [ebp-2],0 - 1001AA4C: 59 pop ecx - 1001AA4D: EB 15 jmp 1001AA64 - 1001AA4F: E8 F5 45 FF FF call 1000F049 - 1001AA54: C7 00 2A 00 00 00 mov dword ptr [eax],2Ah - 1001AA5A: 33 C9 xor ecx,ecx - 1001AA5C: 88 5D FC mov byte ptr [ebp-4],bl - 1001AA5F: C6 45 FD 00 mov byte ptr [ebp-3],0 - 1001AA63: 41 inc ecx - 1001AA64: 8B 45 E8 mov eax,dword ptr [ebp-18h] - 1001AA67: 6A 01 push 1 - 1001AA69: FF 70 04 push dword ptr [eax+4] - 1001AA6C: 8D 55 F8 lea edx,[ebp-8] - 1001AA6F: 6A 03 push 3 - 1001AA71: 52 push edx - 1001AA72: 51 push ecx - 1001AA73: 8D 4D FC lea ecx,[ebp-4] - 1001AA76: 51 push ecx - 1001AA77: 56 push esi - 1001AA78: FF 70 14 push dword ptr [eax+14h] - 1001AA7B: 8D 45 E8 lea eax,[ebp-18h] - 1001AA7E: 50 push eax - 1001AA7F: E8 3F E5 FF FF call 10018FC3 - 1001AA84: 83 C4 24 add esp,24h - 1001AA87: 85 C0 test eax,eax - 1001AA89: 0F 84 6F FF FF FF je 1001A9FE - 1001AA8F: 83 F8 01 cmp eax,1 - 1001AA92: 0F B6 45 F8 movzx eax,byte ptr [ebp-8] - 1001AA96: 74 09 je 1001AAA1 - 1001AA98: 0F B6 4D F9 movzx ecx,byte ptr [ebp-7] - 1001AA9C: C1 E0 08 shl eax,8 - 1001AA9F: 0B C1 or eax,ecx - 1001AAA1: 80 7D F4 00 cmp byte ptr [ebp-0Ch],0 - 1001AAA5: 74 07 je 1001AAAE - 1001AAA7: 8B 4D F0 mov ecx,dword ptr [ebp-10h] - 1001AAAA: 83 61 70 FD and dword ptr [ecx+70h],0FFFFFFFDh - 1001AAAE: 5E pop esi - 1001AAAF: 5B pop ebx - 1001AAB0: C9 leave - 1001AAB1: C3 ret - 1001AAB2: 8B FF mov edi,edi - 1001AAB4: 55 push ebp - 1001AAB5: 8B EC mov ebp,esp - 1001AAB7: 83 3D D8 69 02 10 cmp dword ptr ds:[100269D8h],0 - 00 - 1001AABE: 75 10 jne 1001AAD0 - 1001AAC0: 8B 45 08 mov eax,dword ptr [ebp+8] - 1001AAC3: 8D 48 BF lea ecx,[eax-41h] - 1001AAC6: 83 F9 19 cmp ecx,19h - 1001AAC9: 77 11 ja 1001AADC - 1001AACB: 83 C0 20 add eax,20h - 1001AACE: 5D pop ebp - 1001AACF: C3 ret - 1001AAD0: 6A 00 push 0 - 1001AAD2: FF 75 08 push dword ptr [ebp+8] - 1001AAD5: E8 C3 FE FF FF call 1001A99D - 1001AADA: 59 pop ecx - 1001AADB: 59 pop ecx - 1001AADC: 5D pop ebp - 1001AADD: C3 ret - 1001AADE: 8B FF mov edi,edi - 1001AAE0: 55 push ebp - 1001AAE1: 8B EC mov ebp,esp - 1001AAE3: 83 EC 28 sub esp,28h - 1001AAE6: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1001AAEB: 33 C5 xor eax,ebp - 1001AAED: 89 45 FC mov dword ptr [ebp-4],eax - 1001AAF0: 53 push ebx - 1001AAF1: 56 push esi - 1001AAF2: 8B 75 08 mov esi,dword ptr [ebp+8] - 1001AAF5: 57 push edi - 1001AAF6: FF 75 10 push dword ptr [ebp+10h] - 1001AAF9: 8B 7D 0C mov edi,dword ptr [ebp+0Ch] - 1001AAFC: 8D 4D DC lea ecx,[ebp-24h] - 1001AAFF: E8 F8 FB FE FF call 1000A6FC - 1001AB04: 8D 45 DC lea eax,[ebp-24h] - 1001AB07: 50 push eax - 1001AB08: 33 DB xor ebx,ebx - 1001AB0A: 53 push ebx - 1001AB0B: 53 push ebx - 1001AB0C: 53 push ebx - 1001AB0D: 53 push ebx - 1001AB0E: 57 push edi - 1001AB0F: 8D 45 D8 lea eax,[ebp-28h] - 1001AB12: 50 push eax - 1001AB13: 8D 45 F0 lea eax,[ebp-10h] - 1001AB16: 50 push eax - 1001AB17: E8 FE 27 00 00 call 1001D31A - 1001AB1C: 89 45 EC mov dword ptr [ebp-14h],eax - 1001AB1F: 8D 45 F0 lea eax,[ebp-10h] - 1001AB22: 56 push esi - 1001AB23: 50 push eax - 1001AB24: E8 69 1D 00 00 call 1001C892 - 1001AB29: 83 C4 28 add esp,28h - 1001AB2C: F6 45 EC 03 test byte ptr [ebp-14h],3 - 1001AB30: 75 2B jne 1001AB5D - 1001AB32: 83 F8 01 cmp eax,1 - 1001AB35: 75 11 jne 1001AB48 - 1001AB37: 38 5D E8 cmp byte ptr [ebp-18h],bl - 1001AB3A: 74 07 je 1001AB43 - 1001AB3C: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 1001AB3F: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1001AB43: 6A 03 push 3 - 1001AB45: 58 pop eax - 1001AB46: EB 2F jmp 1001AB77 - 1001AB48: 83 F8 02 cmp eax,2 - 1001AB4B: 75 1C jne 1001AB69 - 1001AB4D: 38 5D E8 cmp byte ptr [ebp-18h],bl - 1001AB50: 74 07 je 1001AB59 - 1001AB52: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 1001AB55: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1001AB59: 6A 04 push 4 - 1001AB5B: EB E8 jmp 1001AB45 - 1001AB5D: F6 45 EC 01 test byte ptr [ebp-14h],1 - 1001AB61: 75 EA jne 1001AB4D - 1001AB63: F6 45 EC 02 test byte ptr [ebp-14h],2 - 1001AB67: 75 CE jne 1001AB37 - 1001AB69: 38 5D E8 cmp byte ptr [ebp-18h],bl - 1001AB6C: 74 07 je 1001AB75 - 1001AB6E: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 1001AB71: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1001AB75: 33 C0 xor eax,eax - 1001AB77: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1001AB7A: 5F pop edi - 1001AB7B: 5E pop esi - 1001AB7C: 33 CD xor ecx,ebp - 1001AB7E: 5B pop ebx - 1001AB7F: E8 17 F5 FE FF call 1000A09B - 1001AB84: C9 leave - 1001AB85: C3 ret - 1001AB86: 8B FF mov edi,edi - 1001AB88: 55 push ebp - 1001AB89: 8B EC mov ebp,esp - 1001AB8B: 83 EC 28 sub esp,28h - 1001AB8E: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1001AB93: 33 C5 xor eax,ebp - 1001AB95: 89 45 FC mov dword ptr [ebp-4],eax - 1001AB98: 53 push ebx - 1001AB99: 56 push esi - 1001AB9A: 8B 75 08 mov esi,dword ptr [ebp+8] - 1001AB9D: 57 push edi - 1001AB9E: FF 75 10 push dword ptr [ebp+10h] - 1001ABA1: 8B 7D 0C mov edi,dword ptr [ebp+0Ch] - 1001ABA4: 8D 4D DC lea ecx,[ebp-24h] - 1001ABA7: E8 50 FB FE FF call 1000A6FC - 1001ABAC: 8D 45 DC lea eax,[ebp-24h] - 1001ABAF: 50 push eax - 1001ABB0: 33 DB xor ebx,ebx - 1001ABB2: 53 push ebx - 1001ABB3: 53 push ebx - 1001ABB4: 53 push ebx - 1001ABB5: 53 push ebx - 1001ABB6: 57 push edi - 1001ABB7: 8D 45 D8 lea eax,[ebp-28h] - 1001ABBA: 50 push eax - 1001ABBB: 8D 45 F0 lea eax,[ebp-10h] - 1001ABBE: 50 push eax - 1001ABBF: E8 56 27 00 00 call 1001D31A - 1001ABC4: 89 45 EC mov dword ptr [ebp-14h],eax - 1001ABC7: 8D 45 F0 lea eax,[ebp-10h] - 1001ABCA: 56 push esi - 1001ABCB: 50 push eax - 1001ABCC: E8 05 22 00 00 call 1001CDD6 - 1001ABD1: 83 C4 28 add esp,28h - 1001ABD4: F6 45 EC 03 test byte ptr [ebp-14h],3 - 1001ABD8: 75 2B jne 1001AC05 - 1001ABDA: 83 F8 01 cmp eax,1 - 1001ABDD: 75 11 jne 1001ABF0 - 1001ABDF: 38 5D E8 cmp byte ptr [ebp-18h],bl - 1001ABE2: 74 07 je 1001ABEB - 1001ABE4: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 1001ABE7: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1001ABEB: 6A 03 push 3 - 1001ABED: 58 pop eax - 1001ABEE: EB 2F jmp 1001AC1F - 1001ABF0: 83 F8 02 cmp eax,2 - 1001ABF3: 75 1C jne 1001AC11 - 1001ABF5: 38 5D E8 cmp byte ptr [ebp-18h],bl - 1001ABF8: 74 07 je 1001AC01 - 1001ABFA: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 1001ABFD: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1001AC01: 6A 04 push 4 - 1001AC03: EB E8 jmp 1001ABED - 1001AC05: F6 45 EC 01 test byte ptr [ebp-14h],1 - 1001AC09: 75 EA jne 1001ABF5 - 1001AC0B: F6 45 EC 02 test byte ptr [ebp-14h],2 - 1001AC0F: 75 CE jne 1001ABDF - 1001AC11: 38 5D E8 cmp byte ptr [ebp-18h],bl - 1001AC14: 74 07 je 1001AC1D - 1001AC16: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 1001AC19: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1001AC1D: 33 C0 xor eax,eax - 1001AC1F: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1001AC22: 5F pop edi - 1001AC23: 5E pop esi - 1001AC24: 33 CD xor ecx,ebp - 1001AC26: 5B pop ebx - 1001AC27: E8 6F F4 FE FF call 1000A09B - 1001AC2C: C9 leave - 1001AC2D: C3 ret - 1001AC2E: 8B FF mov edi,edi - 1001AC30: 55 push ebp - 1001AC31: 8B EC mov ebp,esp - 1001AC33: 8B 4D 14 mov ecx,dword ptr [ebp+14h] - 1001AC36: 53 push ebx - 1001AC37: 56 push esi - 1001AC38: 8B 75 08 mov esi,dword ptr [ebp+8] - 1001AC3B: 33 DB xor ebx,ebx - 1001AC3D: 57 push edi - 1001AC3E: 8B 79 0C mov edi,dword ptr [ecx+0Ch] - 1001AC41: 3B F3 cmp esi,ebx - 1001AC43: 75 1E jne 1001AC63 - 1001AC45: E8 FF 43 FF FF call 1000F049 - 1001AC4A: 6A 16 push 16h - 1001AC4C: 5E pop esi - 1001AC4D: 89 30 mov dword ptr [eax],esi - 1001AC4F: 53 push ebx - 1001AC50: 53 push ebx - 1001AC51: 53 push ebx - 1001AC52: 53 push ebx - 1001AC53: 53 push ebx - 1001AC54: E8 88 43 FF FF call 1000EFE1 - 1001AC59: 83 C4 14 add esp,14h - 1001AC5C: 8B C6 mov eax,esi - 1001AC5E: E9 85 00 00 00 jmp 1001ACE8 - 1001AC63: 39 5D 0C cmp dword ptr [ebp+0Ch],ebx - 1001AC66: 76 DD jbe 1001AC45 - 1001AC68: 8B 55 10 mov edx,dword ptr [ebp+10h] - 1001AC6B: 3B D3 cmp edx,ebx - 1001AC6D: 88 1E mov byte ptr [esi],bl - 1001AC6F: 7E 04 jle 1001AC75 - 1001AC71: 8B C2 mov eax,edx - 1001AC73: EB 02 jmp 1001AC77 - 1001AC75: 33 C0 xor eax,eax - 1001AC77: 40 inc eax - 1001AC78: 39 45 0C cmp dword ptr [ebp+0Ch],eax - 1001AC7B: 77 0E ja 1001AC8B - 1001AC7D: E8 C7 43 FF FF call 1000F049 - 1001AC82: 6A 22 push 22h - 1001AC84: 59 pop ecx - 1001AC85: 89 08 mov dword ptr [eax],ecx - 1001AC87: 8B F1 mov esi,ecx - 1001AC89: EB C4 jmp 1001AC4F - 1001AC8B: 3B D3 cmp edx,ebx - 1001AC8D: C6 06 30 mov byte ptr [esi],30h - 1001AC90: 8D 46 01 lea eax,[esi+1] - 1001AC93: 7E 1A jle 1001ACAF - 1001AC95: 8A 0F mov cl,byte ptr [edi] - 1001AC97: 3A CB cmp cl,bl - 1001AC99: 74 06 je 1001ACA1 - 1001AC9B: 0F BE C9 movsx ecx,cl - 1001AC9E: 47 inc edi - 1001AC9F: EB 03 jmp 1001ACA4 - 1001ACA1: 6A 30 push 30h - 1001ACA3: 59 pop ecx - 1001ACA4: 88 08 mov byte ptr [eax],cl - 1001ACA6: 40 inc eax - 1001ACA7: 4A dec edx - 1001ACA8: 3B D3 cmp edx,ebx - 1001ACAA: 7F E9 jg 1001AC95 - 1001ACAC: 8B 4D 14 mov ecx,dword ptr [ebp+14h] - 1001ACAF: 3B D3 cmp edx,ebx - 1001ACB1: 88 18 mov byte ptr [eax],bl - 1001ACB3: 7C 12 jl 1001ACC7 - 1001ACB5: 80 3F 35 cmp byte ptr [edi],35h - 1001ACB8: 7C 0D jl 1001ACC7 - 1001ACBA: EB 03 jmp 1001ACBF - 1001ACBC: C6 00 30 mov byte ptr [eax],30h - 1001ACBF: 48 dec eax - 1001ACC0: 80 38 39 cmp byte ptr [eax],39h - 1001ACC3: 74 F7 je 1001ACBC - 1001ACC5: FE 00 inc byte ptr [eax] - 1001ACC7: 80 3E 31 cmp byte ptr [esi],31h - 1001ACCA: 75 05 jne 1001ACD1 - 1001ACCC: FF 41 04 inc dword ptr [ecx+4] - 1001ACCF: EB 15 jmp 1001ACE6 - 1001ACD1: 8D 7E 01 lea edi,[esi+1] - 1001ACD4: 57 push edi - 1001ACD5: E8 66 97 FF FF call 10014440 - 1001ACDA: 40 inc eax - 1001ACDB: 50 push eax - 1001ACDC: 57 push edi - 1001ACDD: 56 push esi - 1001ACDE: E8 7D B7 FF FF call 10016460 - 1001ACE3: 83 C4 10 add esp,10h - 1001ACE6: 33 C0 xor eax,eax - 1001ACE8: 5F pop edi - 1001ACE9: 5E pop esi - 1001ACEA: 5B pop ebx - 1001ACEB: 5D pop ebp - 1001ACEC: C3 ret - 1001ACED: 8B FF mov edi,edi - 1001ACEF: 55 push ebp - 1001ACF0: 8B EC mov ebp,esp - 1001ACF2: 51 push ecx - 1001ACF3: 8B 55 0C mov edx,dword ptr [ebp+0Ch] - 1001ACF6: 0F B7 42 06 movzx eax,word ptr [edx+6] - 1001ACFA: 53 push ebx - 1001ACFB: 8B C8 mov ecx,eax - 1001ACFD: 56 push esi - 1001ACFE: 57 push edi - 1001ACFF: C1 E9 04 shr ecx,4 - 1001AD02: 25 00 80 00 00 and eax,8000h - 1001AD07: BF FF 07 00 00 mov edi,7FFh - 1001AD0C: 23 CF and ecx,edi - 1001AD0E: 89 45 0C mov dword ptr [ebp+0Ch],eax - 1001AD11: 8B 42 04 mov eax,dword ptr [edx+4] - 1001AD14: 8B 12 mov edx,dword ptr [edx] - 1001AD16: 0F B7 D9 movzx ebx,cx - 1001AD19: BE 00 00 00 80 mov esi,80000000h - 1001AD1E: 25 FF FF 0F 00 and eax,0FFFFFh - 1001AD23: 89 75 FC mov dword ptr [ebp-4],esi - 1001AD26: 85 DB test ebx,ebx - 1001AD28: 74 13 je 1001AD3D - 1001AD2A: 3B DF cmp ebx,edi - 1001AD2C: 74 08 je 1001AD36 - 1001AD2E: 81 C1 00 3C 00 00 add ecx,3C00h - 1001AD34: EB 28 jmp 1001AD5E - 1001AD36: BF FF 7F 00 00 mov edi,7FFFh - 1001AD3B: EB 24 jmp 1001AD61 - 1001AD3D: 33 DB xor ebx,ebx - 1001AD3F: 3B C3 cmp eax,ebx - 1001AD41: 75 12 jne 1001AD55 - 1001AD43: 3B D3 cmp edx,ebx - 1001AD45: 75 0E jne 1001AD55 - 1001AD47: 8B 45 08 mov eax,dword ptr [ebp+8] - 1001AD4A: 66 8B 4D 0C mov cx,word ptr [ebp+0Ch] - 1001AD4E: 89 58 04 mov dword ptr [eax+4],ebx - 1001AD51: 89 18 mov dword ptr [eax],ebx - 1001AD53: EB 4C jmp 1001ADA1 - 1001AD55: 81 C1 01 3C 00 00 add ecx,3C01h - 1001AD5B: 89 5D FC mov dword ptr [ebp-4],ebx - 1001AD5E: 0F B7 F9 movzx edi,cx - 1001AD61: 8B CA mov ecx,edx - 1001AD63: C1 E9 15 shr ecx,15h - 1001AD66: C1 E0 0B shl eax,0Bh - 1001AD69: 0B C8 or ecx,eax - 1001AD6B: 0B 4D FC or ecx,dword ptr [ebp-4] - 1001AD6E: 8B 45 08 mov eax,dword ptr [ebp+8] - 1001AD71: C1 E2 0B shl edx,0Bh - 1001AD74: 89 48 04 mov dword ptr [eax+4],ecx - 1001AD77: 89 10 mov dword ptr [eax],edx - 1001AD79: 85 CE test esi,ecx - 1001AD7B: 75 1F jne 1001AD9C - 1001AD7D: 8B 08 mov ecx,dword ptr [eax] - 1001AD7F: 8B 50 04 mov edx,dword ptr [eax+4] - 1001AD82: 8B D9 mov ebx,ecx - 1001AD84: 03 D2 add edx,edx - 1001AD86: C1 EB 1F shr ebx,1Fh - 1001AD89: 0B D3 or edx,ebx - 1001AD8B: 03 C9 add ecx,ecx - 1001AD8D: 81 C7 FF FF 00 00 add edi,0FFFFh - 1001AD93: 89 50 04 mov dword ptr [eax+4],edx - 1001AD96: 89 08 mov dword ptr [eax],ecx - 1001AD98: 85 D6 test esi,edx - 1001AD9A: 74 E1 je 1001AD7D - 1001AD9C: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch] - 1001AD9F: 0B CF or ecx,edi - 1001ADA1: 5F pop edi - 1001ADA2: 5E pop esi - 1001ADA3: 66 89 48 08 mov word ptr [eax+8],cx - 1001ADA7: 5B pop ebx - 1001ADA8: C9 leave - 1001ADA9: C3 ret - 1001ADAA: 8B FF mov edi,edi - 1001ADAC: 55 push ebp - 1001ADAD: 8B EC mov ebp,esp - 1001ADAF: 83 EC 30 sub esp,30h - 1001ADB2: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1001ADB7: 33 C5 xor eax,ebp - 1001ADB9: 89 45 FC mov dword ptr [ebp-4],eax - 1001ADBC: 8B 45 14 mov eax,dword ptr [ebp+14h] - 1001ADBF: 53 push ebx - 1001ADC0: 8B 5D 10 mov ebx,dword ptr [ebp+10h] - 1001ADC3: 56 push esi - 1001ADC4: 89 45 D0 mov dword ptr [ebp-30h],eax - 1001ADC7: 57 push edi - 1001ADC8: 8D 45 08 lea eax,[ebp+8] - 1001ADCB: 50 push eax - 1001ADCC: 8D 45 F0 lea eax,[ebp-10h] - 1001ADCF: 50 push eax - 1001ADD0: E8 18 FF FF FF call 1001ACED - 1001ADD5: 59 pop ecx - 1001ADD6: 59 pop ecx - 1001ADD7: 8D 45 D4 lea eax,[ebp-2Ch] - 1001ADDA: 50 push eax - 1001ADDB: 6A 00 push 0 - 1001ADDD: 6A 11 push 11h - 1001ADDF: 83 EC 0C sub esp,0Ch - 1001ADE2: 8D 75 F0 lea esi,[ebp-10h] - 1001ADE5: 8B FC mov edi,esp - 1001ADE7: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001ADE8: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001ADE9: 66 A5 movs word ptr es:[edi],word ptr [esi] - 1001ADEB: E8 22 2C 00 00 call 1001DA12 - 1001ADF0: 8B 75 D0 mov esi,dword ptr [ebp-30h] - 1001ADF3: 89 43 08 mov dword ptr [ebx+8],eax - 1001ADF6: 0F BE 45 D6 movsx eax,byte ptr [ebp-2Ah] - 1001ADFA: 89 03 mov dword ptr [ebx],eax - 1001ADFC: 0F BF 45 D4 movsx eax,word ptr [ebp-2Ch] - 1001AE00: 89 43 04 mov dword ptr [ebx+4],eax - 1001AE03: 8D 45 D8 lea eax,[ebp-28h] - 1001AE06: 50 push eax - 1001AE07: FF 75 18 push dword ptr [ebp+18h] - 1001AE0A: 56 push esi - 1001AE0B: E8 C0 95 FF FF call 100143D0 - 1001AE10: 83 C4 24 add esp,24h - 1001AE13: 85 C0 test eax,eax - 1001AE15: 74 0F je 1001AE26 - 1001AE17: 33 C0 xor eax,eax - 1001AE19: 50 push eax - 1001AE1A: 50 push eax - 1001AE1B: 50 push eax - 1001AE1C: 50 push eax - 1001AE1D: 50 push eax - 1001AE1E: E8 96 40 FF FF call 1000EEB9 - 1001AE23: 83 C4 14 add esp,14h - 1001AE26: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1001AE29: 5F pop edi - 1001AE2A: 89 73 0C mov dword ptr [ebx+0Ch],esi - 1001AE2D: 5E pop esi - 1001AE2E: 8B C3 mov eax,ebx - 1001AE30: 33 CD xor ecx,ebp - 1001AE32: 5B pop ebx - 1001AE33: E8 63 F2 FE FF call 1000A09B - 1001AE38: C9 leave - 1001AE39: C3 ret - 1001AE3A: CC int 3 - 1001AE3B: CC int 3 - 1001AE3C: CC int 3 - 1001AE3D: CC int 3 - 1001AE3E: CC int 3 - 1001AE3F: CC int 3 - 1001AE40: 57 push edi - 1001AE41: 56 push esi - 1001AE42: 55 push ebp - 1001AE43: 33 FF xor edi,edi - 1001AE45: 33 ED xor ebp,ebp - 1001AE47: 8B 44 24 14 mov eax,dword ptr [esp+14h] - 1001AE4B: 0B C0 or eax,eax - 1001AE4D: 7D 15 jge 1001AE64 - 1001AE4F: 47 inc edi - 1001AE50: 45 inc ebp - 1001AE51: 8B 54 24 10 mov edx,dword ptr [esp+10h] - 1001AE55: F7 D8 neg eax - 1001AE57: F7 DA neg edx - 1001AE59: 83 D8 00 sbb eax,0 - 1001AE5C: 89 44 24 14 mov dword ptr [esp+14h],eax - 1001AE60: 89 54 24 10 mov dword ptr [esp+10h],edx - 1001AE64: 8B 44 24 1C mov eax,dword ptr [esp+1Ch] - 1001AE68: 0B C0 or eax,eax - 1001AE6A: 7D 14 jge 1001AE80 - 1001AE6C: 47 inc edi - 1001AE6D: 8B 54 24 18 mov edx,dword ptr [esp+18h] - 1001AE71: F7 D8 neg eax - 1001AE73: F7 DA neg edx - 1001AE75: 83 D8 00 sbb eax,0 - 1001AE78: 89 44 24 1C mov dword ptr [esp+1Ch],eax - 1001AE7C: 89 54 24 18 mov dword ptr [esp+18h],edx - 1001AE80: 0B C0 or eax,eax - 1001AE82: 75 28 jne 1001AEAC - 1001AE84: 8B 4C 24 18 mov ecx,dword ptr [esp+18h] - 1001AE88: 8B 44 24 14 mov eax,dword ptr [esp+14h] - 1001AE8C: 33 D2 xor edx,edx - 1001AE8E: F7 F1 div eax,ecx - 1001AE90: 8B D8 mov ebx,eax - 1001AE92: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 1001AE96: F7 F1 div eax,ecx - 1001AE98: 8B F0 mov esi,eax - 1001AE9A: 8B C3 mov eax,ebx - 1001AE9C: F7 64 24 18 mul eax,dword ptr [esp+18h] - 1001AEA0: 8B C8 mov ecx,eax - 1001AEA2: 8B C6 mov eax,esi - 1001AEA4: F7 64 24 18 mul eax,dword ptr [esp+18h] - 1001AEA8: 03 D1 add edx,ecx - 1001AEAA: EB 47 jmp 1001AEF3 - 1001AEAC: 8B D8 mov ebx,eax - 1001AEAE: 8B 4C 24 18 mov ecx,dword ptr [esp+18h] - 1001AEB2: 8B 54 24 14 mov edx,dword ptr [esp+14h] - 1001AEB6: 8B 44 24 10 mov eax,dword ptr [esp+10h] - 1001AEBA: D1 EB shr ebx,1 - 1001AEBC: D1 D9 rcr ecx,1 - 1001AEBE: D1 EA shr edx,1 - 1001AEC0: D1 D8 rcr eax,1 - 1001AEC2: 0B DB or ebx,ebx - 1001AEC4: 75 F4 jne 1001AEBA - 1001AEC6: F7 F1 div eax,ecx - 1001AEC8: 8B F0 mov esi,eax - 1001AECA: F7 64 24 1C mul eax,dword ptr [esp+1Ch] - 1001AECE: 8B C8 mov ecx,eax - 1001AED0: 8B 44 24 18 mov eax,dword ptr [esp+18h] - 1001AED4: F7 E6 mul eax,esi - 1001AED6: 03 D1 add edx,ecx - 1001AED8: 72 0E jb 1001AEE8 - 1001AEDA: 3B 54 24 14 cmp edx,dword ptr [esp+14h] - 1001AEDE: 77 08 ja 1001AEE8 - 1001AEE0: 72 0F jb 1001AEF1 - 1001AEE2: 3B 44 24 10 cmp eax,dword ptr [esp+10h] - 1001AEE6: 76 09 jbe 1001AEF1 - 1001AEE8: 4E dec esi - 1001AEE9: 2B 44 24 18 sub eax,dword ptr [esp+18h] - 1001AEED: 1B 54 24 1C sbb edx,dword ptr [esp+1Ch] - 1001AEF1: 33 DB xor ebx,ebx - 1001AEF3: 2B 44 24 10 sub eax,dword ptr [esp+10h] - 1001AEF7: 1B 54 24 14 sbb edx,dword ptr [esp+14h] - 1001AEFB: 4D dec ebp - 1001AEFC: 79 07 jns 1001AF05 - 1001AEFE: F7 DA neg edx - 1001AF00: F7 D8 neg eax - 1001AF02: 83 DA 00 sbb edx,0 - 1001AF05: 8B CA mov ecx,edx - 1001AF07: 8B D3 mov edx,ebx - 1001AF09: 8B D9 mov ebx,ecx - 1001AF0B: 8B C8 mov ecx,eax - 1001AF0D: 8B C6 mov eax,esi - 1001AF0F: 4F dec edi - 1001AF10: 75 07 jne 1001AF19 - 1001AF12: F7 DA neg edx - 1001AF14: F7 D8 neg eax - 1001AF16: 83 DA 00 sbb edx,0 - 1001AF19: 5D pop ebp - 1001AF1A: 5E pop esi - 1001AF1B: 5F pop edi - 1001AF1C: C2 10 00 ret 10h - 1001AF1F: CC int 3 - 1001AF20: 80 F9 40 cmp cl,40h - 1001AF23: 73 15 jae 1001AF3A - 1001AF25: 80 F9 20 cmp cl,20h - 1001AF28: 73 06 jae 1001AF30 - 1001AF2A: 0F AD D0 shrd eax,edx,cl - 1001AF2D: D3 EA shr edx,cl - 1001AF2F: C3 ret - 1001AF30: 8B C2 mov eax,edx - 1001AF32: 33 D2 xor edx,edx - 1001AF34: 80 E1 1F and cl,1Fh - 1001AF37: D3 E8 shr eax,cl - 1001AF39: C3 ret - 1001AF3A: 33 C0 xor eax,eax - 1001AF3C: 33 D2 xor edx,edx - 1001AF3E: C3 ret - 1001AF3F: 6A 02 push 2 - 1001AF41: E8 C3 7B FF FF call 10012B09 - 1001AF46: 59 pop ecx - 1001AF47: C3 ret - 1001AF48: 8B FF mov edi,edi - 1001AF4A: 55 push ebp - 1001AF4B: 8B EC mov ebp,esp - 1001AF4D: 8B 45 10 mov eax,dword ptr [ebp+10h] - 1001AF50: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch] - 1001AF53: 25 FF FF F7 FF and eax,0FFF7FFFFh - 1001AF58: 23 C8 and ecx,eax - 1001AF5A: 56 push esi - 1001AF5B: F7 C1 E0 FC F0 FC test ecx,0FCF0FCE0h - 1001AF61: 74 31 je 1001AF94 - 1001AF63: 57 push edi - 1001AF64: 8B 7D 08 mov edi,dword ptr [ebp+8] - 1001AF67: 33 F6 xor esi,esi - 1001AF69: 3B FE cmp edi,esi - 1001AF6B: 74 0B je 1001AF78 - 1001AF6D: 56 push esi - 1001AF6E: 56 push esi - 1001AF6F: E8 F0 34 00 00 call 1001E464 - 1001AF74: 59 pop ecx - 1001AF75: 59 pop ecx - 1001AF76: 89 07 mov dword ptr [edi],eax - 1001AF78: E8 CC 40 FF FF call 1000F049 - 1001AF7D: 6A 16 push 16h - 1001AF7F: 5F pop edi - 1001AF80: 56 push esi - 1001AF81: 56 push esi - 1001AF82: 56 push esi - 1001AF83: 56 push esi - 1001AF84: 56 push esi - 1001AF85: 89 38 mov dword ptr [eax],edi - 1001AF87: E8 55 40 FF FF call 1000EFE1 - 1001AF8C: 83 C4 14 add esp,14h - 1001AF8F: 8B C7 mov eax,edi - 1001AF91: 5F pop edi - 1001AF92: EB 1D jmp 1001AFB1 - 1001AF94: 8B 75 08 mov esi,dword ptr [ebp+8] - 1001AF97: 50 push eax - 1001AF98: FF 75 0C push dword ptr [ebp+0Ch] - 1001AF9B: 85 F6 test esi,esi - 1001AF9D: 74 09 je 1001AFA8 - 1001AF9F: E8 C0 34 00 00 call 1001E464 - 1001AFA4: 89 06 mov dword ptr [esi],eax - 1001AFA6: EB 05 jmp 1001AFAD - 1001AFA8: E8 B7 34 00 00 call 1001E464 - 1001AFAD: 59 pop ecx - 1001AFAE: 59 pop ecx - 1001AFAF: 33 C0 xor eax,eax - 1001AFB1: 5E pop esi - 1001AFB2: 5D pop ebp - 1001AFB3: C3 ret - 1001AFB4: 8B FF mov edi,edi - 1001AFB6: 55 push ebp - 1001AFB7: 8B EC mov ebp,esp - 1001AFB9: 83 EC 10 sub esp,10h - 1001AFBC: FF 75 08 push dword ptr [ebp+8] - 1001AFBF: 8D 4D F0 lea ecx,[ebp-10h] - 1001AFC2: E8 35 F7 FE FF call 1000A6FC - 1001AFC7: 0F B6 45 0C movzx eax,byte ptr [ebp+0Ch] - 1001AFCB: 8B 4D F4 mov ecx,dword ptr [ebp-0Ch] - 1001AFCE: 8A 55 14 mov dl,byte ptr [ebp+14h] - 1001AFD1: 84 54 01 1D test byte ptr [ecx+eax+1Dh],dl - 1001AFD5: 75 1E jne 1001AFF5 - 1001AFD7: 83 7D 10 00 cmp dword ptr [ebp+10h],0 - 1001AFDB: 74 12 je 1001AFEF - 1001AFDD: 8B 4D F0 mov ecx,dword ptr [ebp-10h] - 1001AFE0: 8B 89 C8 00 00 00 mov ecx,dword ptr [ecx+000000C8h] - 1001AFE6: 0F B7 04 41 movzx eax,word ptr [ecx+eax*2] - 1001AFEA: 23 45 10 and eax,dword ptr [ebp+10h] - 1001AFED: EB 02 jmp 1001AFF1 - 1001AFEF: 33 C0 xor eax,eax - 1001AFF1: 85 C0 test eax,eax - 1001AFF3: 74 03 je 1001AFF8 - 1001AFF5: 33 C0 xor eax,eax - 1001AFF7: 40 inc eax - 1001AFF8: 80 7D FC 00 cmp byte ptr [ebp-4],0 - 1001AFFC: 74 07 je 1001B005 - 1001AFFE: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 1001B001: 83 61 70 FD and dword ptr [ecx+70h],0FFFFFFFDh - 1001B005: C9 leave - 1001B006: C3 ret - 1001B007: 8B FF mov edi,edi - 1001B009: 55 push ebp - 1001B00A: 8B EC mov ebp,esp - 1001B00C: 6A 04 push 4 - 1001B00E: 6A 00 push 0 - 1001B010: FF 75 08 push dword ptr [ebp+8] - 1001B013: 6A 00 push 0 - 1001B015: E8 9A FF FF FF call 1001AFB4 - 1001B01A: 83 C4 10 add esp,10h - 1001B01D: 5D pop ebp - 1001B01E: C3 ret - 1001B01F: 8B FF mov edi,edi - 1001B021: 55 push ebp - 1001B022: 8B EC mov ebp,esp - 1001B024: 83 EC 18 sub esp,18h - 1001B027: 53 push ebx - 1001B028: FF 75 10 push dword ptr [ebp+10h] - 1001B02B: 8D 4D E8 lea ecx,[ebp-18h] - 1001B02E: E8 C9 F6 FE FF call 1000A6FC - 1001B033: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 1001B036: 8D 43 01 lea eax,[ebx+1] - 1001B039: 3D 00 01 00 00 cmp eax,100h - 1001B03E: 77 0F ja 1001B04F - 1001B040: 8B 45 E8 mov eax,dword ptr [ebp-18h] - 1001B043: 8B 80 C8 00 00 00 mov eax,dword ptr [eax+000000C8h] - 1001B049: 0F B7 04 58 movzx eax,word ptr [eax+ebx*2] - 1001B04D: EB 75 jmp 1001B0C4 - 1001B04F: 89 5D 08 mov dword ptr [ebp+8],ebx - 1001B052: C1 7D 08 08 sar dword ptr [ebp+8],8 - 1001B056: 8D 45 E8 lea eax,[ebp-18h] - 1001B059: 50 push eax - 1001B05A: 8B 45 08 mov eax,dword ptr [ebp+8] - 1001B05D: 25 FF 00 00 00 and eax,0FFh - 1001B062: 50 push eax - 1001B063: E8 A9 CB FF FF call 10017C11 - 1001B068: 59 pop ecx - 1001B069: 59 pop ecx - 1001B06A: 85 C0 test eax,eax - 1001B06C: 74 12 je 1001B080 - 1001B06E: 8A 45 08 mov al,byte ptr [ebp+8] - 1001B071: 6A 02 push 2 - 1001B073: 88 45 F8 mov byte ptr [ebp-8],al - 1001B076: 88 5D F9 mov byte ptr [ebp-7],bl - 1001B079: C6 45 FA 00 mov byte ptr [ebp-6],0 - 1001B07D: 59 pop ecx - 1001B07E: EB 0A jmp 1001B08A - 1001B080: 33 C9 xor ecx,ecx - 1001B082: 88 5D F8 mov byte ptr [ebp-8],bl - 1001B085: C6 45 F9 00 mov byte ptr [ebp-7],0 - 1001B089: 41 inc ecx - 1001B08A: 8B 45 E8 mov eax,dword ptr [ebp-18h] - 1001B08D: 6A 01 push 1 - 1001B08F: FF 70 14 push dword ptr [eax+14h] - 1001B092: FF 70 04 push dword ptr [eax+4] - 1001B095: 8D 45 FC lea eax,[ebp-4] - 1001B098: 50 push eax - 1001B099: 51 push ecx - 1001B09A: 8D 45 F8 lea eax,[ebp-8] - 1001B09D: 50 push eax - 1001B09E: 8D 45 E8 lea eax,[ebp-18h] - 1001B0A1: 6A 01 push 1 - 1001B0A3: 50 push eax - 1001B0A4: E8 19 E1 FF FF call 100191C2 - 1001B0A9: 83 C4 20 add esp,20h - 1001B0AC: 85 C0 test eax,eax - 1001B0AE: 75 10 jne 1001B0C0 - 1001B0B0: 38 45 F4 cmp byte ptr [ebp-0Ch],al - 1001B0B3: 74 07 je 1001B0BC - 1001B0B5: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 1001B0B8: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1001B0BC: 33 C0 xor eax,eax - 1001B0BE: EB 14 jmp 1001B0D4 - 1001B0C0: 0F B7 45 FC movzx eax,word ptr [ebp-4] - 1001B0C4: 23 45 0C and eax,dword ptr [ebp+0Ch] - 1001B0C7: 80 7D F4 00 cmp byte ptr [ebp-0Ch],0 - 1001B0CB: 74 07 je 1001B0D4 - 1001B0CD: 8B 4D F0 mov ecx,dword ptr [ebp-10h] - 1001B0D0: 83 61 70 FD and dword ptr [ecx+70h],0FFFFFFFDh - 1001B0D4: 5B pop ebx - 1001B0D5: C9 leave - 1001B0D6: C3 ret - 1001B0D7: 8B FF mov edi,edi - 1001B0D9: 55 push ebp - 1001B0DA: 8B EC mov ebp,esp - 1001B0DC: 83 EC 10 sub esp,10h - 1001B0DF: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1001B0E4: 33 C5 xor eax,ebp - 1001B0E6: 89 45 FC mov dword ptr [ebp-4],eax - 1001B0E9: 56 push esi - 1001B0EA: 33 F6 xor esi,esi - 1001B0EC: 39 35 80 58 02 10 cmp dword ptr ds:[10025880h],esi - 1001B0F2: 74 4F je 1001B143 - 1001B0F4: 83 3D BC 59 02 10 cmp dword ptr ds:[100259BCh],0FFFFFFFEh - FE - 1001B0FB: 75 05 jne 1001B102 - 1001B0FD: E8 71 36 00 00 call 1001E773 - 1001B102: A1 BC 59 02 10 mov eax,dword ptr ds:[100259BCh] - 1001B107: 83 F8 FF cmp eax,0FFFFFFFFh - 1001B10A: 75 07 jne 1001B113 - 1001B10C: B8 FF FF 00 00 mov eax,0FFFFh - 1001B111: EB 70 jmp 1001B183 - 1001B113: 56 push esi - 1001B114: 8D 4D F0 lea ecx,[ebp-10h] - 1001B117: 51 push ecx - 1001B118: 6A 01 push 1 - 1001B11A: 8D 4D 08 lea ecx,[ebp+8] - 1001B11D: 51 push ecx - 1001B11E: 50 push eax - 1001B11F: FF 15 5C F1 01 10 call dword ptr ds:[1001F15Ch] - 1001B125: 85 C0 test eax,eax - 1001B127: 75 67 jne 1001B190 - 1001B129: 83 3D 80 58 02 10 cmp dword ptr ds:[10025880h],2 - 02 - 1001B130: 75 DA jne 1001B10C - 1001B132: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 1001B138: 83 F8 78 cmp eax,78h - 1001B13B: 75 CF jne 1001B10C - 1001B13D: 89 35 80 58 02 10 mov dword ptr ds:[10025880h],esi - 1001B143: 56 push esi - 1001B144: 56 push esi - 1001B145: 6A 05 push 5 - 1001B147: 8D 45 F4 lea eax,[ebp-0Ch] - 1001B14A: 50 push eax - 1001B14B: 6A 01 push 1 - 1001B14D: 8D 45 08 lea eax,[ebp+8] - 1001B150: 50 push eax - 1001B151: 56 push esi - 1001B152: FF 15 58 F1 01 10 call dword ptr ds:[1001F158h] - 1001B158: 50 push eax - 1001B159: FF 15 70 F0 01 10 call dword ptr ds:[1001F070h] - 1001B15F: 8B 0D BC 59 02 10 mov ecx,dword ptr ds:[100259BCh] - 1001B165: 83 F9 FF cmp ecx,0FFFFFFFFh - 1001B168: 74 A2 je 1001B10C - 1001B16A: 56 push esi - 1001B16B: 8D 55 F0 lea edx,[ebp-10h] - 1001B16E: 52 push edx - 1001B16F: 50 push eax - 1001B170: 8D 45 F4 lea eax,[ebp-0Ch] - 1001B173: 50 push eax - 1001B174: 51 push ecx - 1001B175: FF 15 54 F1 01 10 call dword ptr ds:[1001F154h] - 1001B17B: 85 C0 test eax,eax - 1001B17D: 74 8D je 1001B10C - 1001B17F: 66 8B 45 08 mov ax,word ptr [ebp+8] - 1001B183: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1001B186: 33 CD xor ecx,ebp - 1001B188: 5E pop esi - 1001B189: E8 0D EF FE FF call 1000A09B - 1001B18E: C9 leave - 1001B18F: C3 ret - 1001B190: C7 05 80 58 02 10 mov dword ptr ds:[10025880h],1 - 01 00 00 00 - 1001B19A: EB E3 jmp 1001B17F - 1001B19C: 8B FF mov edi,edi - 1001B19E: 55 push ebp - 1001B19F: 8B EC mov ebp,esp - 1001B1A1: 51 push ecx - 1001B1A2: 56 push esi - 1001B1A3: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 1001B1A6: 56 push esi - 1001B1A7: E8 3B 53 FF FF call 100104E7 - 1001B1AC: 89 45 0C mov dword ptr [ebp+0Ch],eax - 1001B1AF: 8B 46 0C mov eax,dword ptr [esi+0Ch] - 1001B1B2: 59 pop ecx - 1001B1B3: A8 82 test al,82h - 1001B1B5: 75 19 jne 1001B1D0 - 1001B1B7: E8 8D 3E FF FF call 1000F049 - 1001B1BC: C7 00 09 00 00 00 mov dword ptr [eax],9 - 1001B1C2: 83 4E 0C 20 or dword ptr [esi+0Ch],20h - 1001B1C6: B8 FF FF 00 00 mov eax,0FFFFh - 1001B1CB: E9 3D 01 00 00 jmp 1001B30D - 1001B1D0: A8 40 test al,40h - 1001B1D2: 74 0D je 1001B1E1 - 1001B1D4: E8 70 3E FF FF call 1000F049 - 1001B1D9: C7 00 22 00 00 00 mov dword ptr [eax],22h - 1001B1DF: EB E1 jmp 1001B1C2 - 1001B1E1: A8 01 test al,1 - 1001B1E3: 74 17 je 1001B1FC - 1001B1E5: 83 66 04 00 and dword ptr [esi+4],0 - 1001B1E9: A8 10 test al,10h - 1001B1EB: 0F 84 8D 00 00 00 je 1001B27E - 1001B1F1: 8B 4E 08 mov ecx,dword ptr [esi+8] - 1001B1F4: 83 E0 FE and eax,0FFFFFFFEh - 1001B1F7: 89 0E mov dword ptr [esi],ecx - 1001B1F9: 89 46 0C mov dword ptr [esi+0Ch],eax - 1001B1FC: 8B 46 0C mov eax,dword ptr [esi+0Ch] - 1001B1FF: 83 66 04 00 and dword ptr [esi+4],0 - 1001B203: 83 65 FC 00 and dword ptr [ebp-4],0 - 1001B207: 53 push ebx - 1001B208: 6A 02 push 2 - 1001B20A: 83 E0 EF and eax,0FFFFFFEFh - 1001B20D: 5B pop ebx - 1001B20E: 0B C3 or eax,ebx - 1001B210: 89 46 0C mov dword ptr [esi+0Ch],eax - 1001B213: A9 0C 01 00 00 test eax,10Ch - 1001B218: 75 2C jne 1001B246 - 1001B21A: E8 EE F8 FE FF call 1000AB0D - 1001B21F: 83 C0 20 add eax,20h - 1001B222: 3B F0 cmp esi,eax - 1001B224: 74 0C je 1001B232 - 1001B226: E8 E2 F8 FE FF call 1000AB0D - 1001B22B: 83 C0 40 add eax,40h - 1001B22E: 3B F0 cmp esi,eax - 1001B230: 75 0D jne 1001B23F - 1001B232: FF 75 0C push dword ptr [ebp+0Ch] - 1001B235: E8 A5 C6 FF FF call 100178DF - 1001B23A: 59 pop ecx - 1001B23B: 85 C0 test eax,eax - 1001B23D: 75 07 jne 1001B246 - 1001B23F: 56 push esi - 1001B240: E8 51 C6 FF FF call 10017896 - 1001B245: 59 pop ecx - 1001B246: F7 46 0C 08 01 00 test dword ptr [esi+0Ch],108h - 00 - 1001B24D: 57 push edi - 1001B24E: 0F 84 83 00 00 00 je 1001B2D7 - 1001B254: 8B 46 08 mov eax,dword ptr [esi+8] - 1001B257: 8B 3E mov edi,dword ptr [esi] - 1001B259: 8D 48 02 lea ecx,[eax+2] - 1001B25C: 89 0E mov dword ptr [esi],ecx - 1001B25E: 8B 4E 18 mov ecx,dword ptr [esi+18h] - 1001B261: 2B F8 sub edi,eax - 1001B263: 2B CB sub ecx,ebx - 1001B265: 89 4E 04 mov dword ptr [esi+4],ecx - 1001B268: 85 FF test edi,edi - 1001B26A: 7E 1D jle 1001B289 - 1001B26C: 57 push edi - 1001B26D: 50 push eax - 1001B26E: FF 75 0C push dword ptr [ebp+0Ch] - 1001B271: E8 44 C5 FF FF call 100177BA - 1001B276: 83 C4 0C add esp,0Ch - 1001B279: 89 45 FC mov dword ptr [ebp-4],eax - 1001B27C: EB 4E jmp 1001B2CC - 1001B27E: 83 C8 20 or eax,20h - 1001B281: 89 46 0C mov dword ptr [esi+0Ch],eax - 1001B284: E9 3D FF FF FF jmp 1001B1C6 - 1001B289: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch] - 1001B28C: 83 F9 FF cmp ecx,0FFFFFFFFh - 1001B28F: 74 1B je 1001B2AC - 1001B291: 83 F9 FE cmp ecx,0FFFFFFFEh - 1001B294: 74 16 je 1001B2AC - 1001B296: 8B C1 mov eax,ecx - 1001B298: 83 E0 1F and eax,1Fh - 1001B29B: 8B D1 mov edx,ecx - 1001B29D: C1 FA 05 sar edx,5 - 1001B2A0: C1 E0 06 shl eax,6 - 1001B2A3: 03 04 95 00 6C 02 add eax,dword ptr [edx*4+10026C00h] - 10 - 1001B2AA: EB 05 jmp 1001B2B1 - 1001B2AC: B8 70 56 02 10 mov eax,10025670h - 1001B2B1: F6 40 04 20 test byte ptr [eax+4],20h - 1001B2B5: 74 15 je 1001B2CC - 1001B2B7: 53 push ebx - 1001B2B8: 6A 00 push 0 - 1001B2BA: 6A 00 push 0 - 1001B2BC: 51 push ecx - 1001B2BD: E8 AC BC FF FF call 10016F6E - 1001B2C2: 23 C2 and eax,edx - 1001B2C4: 83 C4 10 add esp,10h - 1001B2C7: 83 F8 FF cmp eax,0FFFFFFFFh - 1001B2CA: 74 2D je 1001B2F9 - 1001B2CC: 8B 46 08 mov eax,dword ptr [esi+8] - 1001B2CF: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 1001B2D2: 66 89 18 mov word ptr [eax],bx - 1001B2D5: EB 1D jmp 1001B2F4 - 1001B2D7: 6A 02 push 2 - 1001B2D9: 8D 45 FC lea eax,[ebp-4] - 1001B2DC: 50 push eax - 1001B2DD: FF 75 0C push dword ptr [ebp+0Ch] - 1001B2E0: 8B FB mov edi,ebx - 1001B2E2: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 1001B2E5: 66 89 5D FC mov word ptr [ebp-4],bx - 1001B2E9: E8 CC C4 FF FF call 100177BA - 1001B2EE: 83 C4 0C add esp,0Ch - 1001B2F1: 89 45 FC mov dword ptr [ebp-4],eax - 1001B2F4: 39 7D FC cmp dword ptr [ebp-4],edi - 1001B2F7: 74 0B je 1001B304 - 1001B2F9: 83 4E 0C 20 or dword ptr [esi+0Ch],20h - 1001B2FD: B8 FF FF 00 00 mov eax,0FFFFh - 1001B302: EB 07 jmp 1001B30B - 1001B304: 8B C3 mov eax,ebx - 1001B306: 25 FF FF 00 00 and eax,0FFFFh - 1001B30B: 5F pop edi - 1001B30C: 5B pop ebx - 1001B30D: 5E pop esi - 1001B30E: C9 leave - 1001B30F: C3 ret - 1001B310: 8B FF mov edi,edi - 1001B312: 55 push ebp - 1001B313: 8B EC mov ebp,esp - 1001B315: 83 EC 10 sub esp,10h - 1001B318: FF 75 08 push dword ptr [ebp+8] - 1001B31B: 8D 4D F0 lea ecx,[ebp-10h] - 1001B31E: E8 D9 F3 FE FF call 1000A6FC - 1001B323: 83 7D 14 FF cmp dword ptr [ebp+14h],0FFFFFFFFh - 1001B327: 7D 04 jge 1001B32D - 1001B329: 33 C0 xor eax,eax - 1001B32B: EB 12 jmp 1001B33F - 1001B32D: FF 75 18 push dword ptr [ebp+18h] - 1001B330: FF 75 14 push dword ptr [ebp+14h] - 1001B333: FF 75 10 push dword ptr [ebp+10h] - 1001B336: FF 75 0C push dword ptr [ebp+0Ch] - 1001B339: FF 15 50 F1 01 10 call dword ptr ds:[1001F150h] - 1001B33F: 80 7D FC 00 cmp byte ptr [ebp-4],0 - 1001B343: 74 07 je 1001B34C - 1001B345: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 1001B348: 83 61 70 FD and dword ptr [ecx+70h],0FFFFFFFDh - 1001B34C: C9 leave - 1001B34D: C3 ret - 1001B34E: 8B FF mov edi,edi - 1001B350: 55 push ebp - 1001B351: 8B EC mov ebp,esp - 1001B353: 83 EC 0C sub esp,0Ch - 1001B356: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1001B35B: 33 C5 xor eax,ebp - 1001B35D: 89 45 FC mov dword ptr [ebp-4],eax - 1001B360: 6A 06 push 6 - 1001B362: 8D 45 F4 lea eax,[ebp-0Ch] - 1001B365: 50 push eax - 1001B366: 68 04 10 00 00 push 1004h - 1001B36B: FF 75 08 push dword ptr [ebp+8] - 1001B36E: C6 45 FA 00 mov byte ptr [ebp-6],0 - 1001B372: FF 15 28 F1 01 10 call dword ptr ds:[1001F128h] - 1001B378: 85 C0 test eax,eax - 1001B37A: 75 05 jne 1001B381 - 1001B37C: 83 C8 FF or eax,0FFFFFFFFh - 1001B37F: EB 0A jmp 1001B38B - 1001B381: 8D 45 F4 lea eax,[ebp-0Ch] - 1001B384: 50 push eax - 1001B385: E8 7B 8F FF FF call 10014305 - 1001B38A: 59 pop ecx - 1001B38B: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1001B38E: 33 CD xor ecx,ebp - 1001B390: E8 06 ED FE FF call 1000A09B - 1001B395: C9 leave - 1001B396: C3 ret - 1001B397: 8B FF mov edi,edi - 1001B399: 55 push ebp - 1001B39A: 8B EC mov ebp,esp - 1001B39C: 83 EC 34 sub esp,34h - 1001B39F: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1001B3A4: 33 C5 xor eax,ebp - 1001B3A6: 89 45 FC mov dword ptr [ebp-4],eax - 1001B3A9: 8B 45 10 mov eax,dword ptr [ebp+10h] - 1001B3AC: 8B 4D 18 mov ecx,dword ptr [ebp+18h] - 1001B3AF: 89 45 D8 mov dword ptr [ebp-28h],eax - 1001B3B2: 8B 45 14 mov eax,dword ptr [ebp+14h] - 1001B3B5: 53 push ebx - 1001B3B6: 89 45 D0 mov dword ptr [ebp-30h],eax - 1001B3B9: 8B 00 mov eax,dword ptr [eax] - 1001B3BB: 56 push esi - 1001B3BC: 89 45 DC mov dword ptr [ebp-24h],eax - 1001B3BF: 8B 45 08 mov eax,dword ptr [ebp+8] - 1001B3C2: 57 push edi - 1001B3C3: 33 FF xor edi,edi - 1001B3C5: 89 4D CC mov dword ptr [ebp-34h],ecx - 1001B3C8: 89 7D E0 mov dword ptr [ebp-20h],edi - 1001B3CB: 89 7D D4 mov dword ptr [ebp-2Ch],edi - 1001B3CE: 3B 45 0C cmp eax,dword ptr [ebp+0Ch] - 1001B3D1: 0F 84 5F 01 00 00 je 1001B536 - 1001B3D7: 8B 35 DC F0 01 10 mov esi,dword ptr ds:[1001F0DCh] - 1001B3DD: 8D 4D E8 lea ecx,[ebp-18h] - 1001B3E0: 51 push ecx - 1001B3E1: 50 push eax - 1001B3E2: FF D6 call esi - 1001B3E4: 8B 1D 38 F1 01 10 mov ebx,dword ptr ds:[1001F138h] - 1001B3EA: 85 C0 test eax,eax - 1001B3EC: 74 5E je 1001B44C - 1001B3EE: 83 7D E8 01 cmp dword ptr [ebp-18h],1 - 1001B3F2: 75 58 jne 1001B44C - 1001B3F4: 8D 45 E8 lea eax,[ebp-18h] - 1001B3F7: 50 push eax - 1001B3F8: FF 75 0C push dword ptr [ebp+0Ch] - 1001B3FB: FF D6 call esi - 1001B3FD: 85 C0 test eax,eax - 1001B3FF: 74 4B je 1001B44C - 1001B401: 83 7D E8 01 cmp dword ptr [ebp-18h],1 - 1001B405: 75 45 jne 1001B44C - 1001B407: 8B 75 DC mov esi,dword ptr [ebp-24h] - 1001B40A: C7 45 D4 01 00 00 mov dword ptr [ebp-2Ch],1 - 00 - 1001B411: 83 FE FF cmp esi,0FFFFFFFFh - 1001B414: 75 0C jne 1001B422 - 1001B416: FF 75 D8 push dword ptr [ebp-28h] - 1001B419: E8 22 90 FF FF call 10014440 - 1001B41E: 8B F0 mov esi,eax - 1001B420: 59 pop ecx - 1001B421: 46 inc esi - 1001B422: 3B F7 cmp esi,edi - 1001B424: 7E 5B jle 1001B481 - 1001B426: 81 FE F0 FF FF 7F cmp esi,7FFFFFF0h - 1001B42C: 77 53 ja 1001B481 - 1001B42E: 8D 44 36 08 lea eax,[esi+esi+8] - 1001B432: 3D 00 04 00 00 cmp eax,400h - 1001B437: 77 2F ja 1001B468 - 1001B439: E8 82 6F FF FF call 100123C0 - 1001B43E: 8B C4 mov eax,esp - 1001B440: 3B C7 cmp eax,edi - 1001B442: 74 38 je 1001B47C - 1001B444: C7 00 CC CC 00 00 mov dword ptr [eax],0CCCCh - 1001B44A: EB 2D jmp 1001B479 - 1001B44C: 57 push edi - 1001B44D: 57 push edi - 1001B44E: FF 75 DC push dword ptr [ebp-24h] - 1001B451: FF 75 D8 push dword ptr [ebp-28h] - 1001B454: 6A 01 push 1 - 1001B456: FF 75 08 push dword ptr [ebp+8] - 1001B459: FF D3 call ebx - 1001B45B: 8B F0 mov esi,eax - 1001B45D: 3B F7 cmp esi,edi - 1001B45F: 75 C3 jne 1001B424 - 1001B461: 33 C0 xor eax,eax - 1001B463: E9 D1 00 00 00 jmp 1001B539 - 1001B468: 50 push eax - 1001B469: E8 C8 28 FF FF call 1000DD36 - 1001B46E: 59 pop ecx - 1001B46F: 3B C7 cmp eax,edi - 1001B471: 74 09 je 1001B47C - 1001B473: C7 00 DD DD 00 00 mov dword ptr [eax],0DDDDh - 1001B479: 83 C0 08 add eax,8 - 1001B47C: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1001B47F: EB 03 jmp 1001B484 - 1001B481: 89 7D E4 mov dword ptr [ebp-1Ch],edi - 1001B484: 39 7D E4 cmp dword ptr [ebp-1Ch],edi - 1001B487: 74 D8 je 1001B461 - 1001B489: 8D 04 36 lea eax,[esi+esi] - 1001B48C: 50 push eax - 1001B48D: 57 push edi - 1001B48E: FF 75 E4 push dword ptr [ebp-1Ch] - 1001B491: E8 DA ED FE FF call 1000A270 - 1001B496: 83 C4 0C add esp,0Ch - 1001B499: 56 push esi - 1001B49A: FF 75 E4 push dword ptr [ebp-1Ch] - 1001B49D: FF 75 DC push dword ptr [ebp-24h] - 1001B4A0: FF 75 D8 push dword ptr [ebp-28h] - 1001B4A3: 6A 01 push 1 - 1001B4A5: FF 75 08 push dword ptr [ebp+8] - 1001B4A8: FF D3 call ebx - 1001B4AA: 85 C0 test eax,eax - 1001B4AC: 74 7F je 1001B52D - 1001B4AE: 8B 5D CC mov ebx,dword ptr [ebp-34h] - 1001B4B1: 3B DF cmp ebx,edi - 1001B4B3: 74 1D je 1001B4D2 - 1001B4B5: 57 push edi - 1001B4B6: 57 push edi - 1001B4B7: FF 75 1C push dword ptr [ebp+1Ch] - 1001B4BA: 53 push ebx - 1001B4BB: 56 push esi - 1001B4BC: FF 75 E4 push dword ptr [ebp-1Ch] - 1001B4BF: 57 push edi - 1001B4C0: FF 75 0C push dword ptr [ebp+0Ch] - 1001B4C3: FF 15 70 F0 01 10 call dword ptr ds:[1001F070h] - 1001B4C9: 85 C0 test eax,eax - 1001B4CB: 74 60 je 1001B52D - 1001B4CD: 89 5D E0 mov dword ptr [ebp-20h],ebx - 1001B4D0: EB 5B jmp 1001B52D - 1001B4D2: 8B 1D 70 F0 01 10 mov ebx,dword ptr ds:[1001F070h] - 1001B4D8: 39 7D D4 cmp dword ptr [ebp-2Ch],edi - 1001B4DB: 75 14 jne 1001B4F1 - 1001B4DD: 57 push edi - 1001B4DE: 57 push edi - 1001B4DF: 57 push edi - 1001B4E0: 57 push edi - 1001B4E1: 56 push esi - 1001B4E2: FF 75 E4 push dword ptr [ebp-1Ch] - 1001B4E5: 57 push edi - 1001B4E6: FF 75 0C push dword ptr [ebp+0Ch] - 1001B4E9: FF D3 call ebx - 1001B4EB: 8B F0 mov esi,eax - 1001B4ED: 3B F7 cmp esi,edi - 1001B4EF: 74 3C je 1001B52D - 1001B4F1: 56 push esi - 1001B4F2: 6A 01 push 1 - 1001B4F4: E8 55 74 FF FF call 1001294E - 1001B4F9: 59 pop ecx - 1001B4FA: 59 pop ecx - 1001B4FB: 89 45 E0 mov dword ptr [ebp-20h],eax - 1001B4FE: 3B C7 cmp eax,edi - 1001B500: 74 2B je 1001B52D - 1001B502: 57 push edi - 1001B503: 57 push edi - 1001B504: 56 push esi - 1001B505: 50 push eax - 1001B506: 56 push esi - 1001B507: FF 75 E4 push dword ptr [ebp-1Ch] - 1001B50A: 57 push edi - 1001B50B: FF 75 0C push dword ptr [ebp+0Ch] - 1001B50E: FF D3 call ebx - 1001B510: 3B C7 cmp eax,edi - 1001B512: 75 0E jne 1001B522 - 1001B514: FF 75 E0 push dword ptr [ebp-20h] - 1001B517: E8 18 EE FE FF call 1000A334 - 1001B51C: 59 pop ecx - 1001B51D: 89 7D E0 mov dword ptr [ebp-20h],edi - 1001B520: EB 0B jmp 1001B52D - 1001B522: 83 7D DC FF cmp dword ptr [ebp-24h],0FFFFFFFFh - 1001B526: 74 05 je 1001B52D - 1001B528: 8B 4D D0 mov ecx,dword ptr [ebp-30h] - 1001B52B: 89 01 mov dword ptr [ecx],eax - 1001B52D: FF 75 E4 push dword ptr [ebp-1Ch] - 1001B530: E8 A7 F1 FE FF call 1000A6DC - 1001B535: 59 pop ecx - 1001B536: 8B 45 E0 mov eax,dword ptr [ebp-20h] - 1001B539: 8D 65 C0 lea esp,[ebp-40h] - 1001B53C: 5F pop edi - 1001B53D: 5E pop esi - 1001B53E: 5B pop ebx - 1001B53F: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1001B542: 33 CD xor ecx,ebp - 1001B544: E8 52 EB FE FF call 1000A09B - 1001B549: C9 leave - 1001B54A: C3 ret - 1001B54B: 8B FF mov edi,edi - 1001B54D: 55 push ebp - 1001B54E: 8B EC mov ebp,esp - 1001B550: 83 EC 10 sub esp,10h - 1001B553: 53 push ebx - 1001B554: 33 DB xor ebx,ebx - 1001B556: 56 push esi - 1001B557: 57 push edi - 1001B558: 39 5D 10 cmp dword ptr [ebp+10h],ebx - 1001B55B: 0F 84 D5 00 00 00 je 1001B636 - 1001B561: FF 75 14 push dword ptr [ebp+14h] - 1001B564: 8D 4D F0 lea ecx,[ebp-10h] - 1001B567: E8 90 F1 FE FF call 1000A6FC - 1001B56C: 39 5D 08 cmp dword ptr [ebp+8],ebx - 1001B56F: 75 2E jne 1001B59F - 1001B571: E8 D3 3A FF FF call 1000F049 - 1001B576: 53 push ebx - 1001B577: 53 push ebx - 1001B578: 53 push ebx - 1001B579: 53 push ebx - 1001B57A: 53 push ebx - 1001B57B: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1001B581: E8 5B 3A FF FF call 1000EFE1 - 1001B586: 83 C4 14 add esp,14h - 1001B589: 38 5D FC cmp byte ptr [ebp-4],bl - 1001B58C: 74 07 je 1001B595 - 1001B58E: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1001B591: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1001B595: B8 FF FF FF 7F mov eax,7FFFFFFFh - 1001B59A: E9 99 00 00 00 jmp 1001B638 - 1001B59F: 8B 7D 0C mov edi,dword ptr [ebp+0Ch] - 1001B5A2: 3B FB cmp edi,ebx - 1001B5A4: 74 CB je 1001B571 - 1001B5A6: BE FF FF FF 7F mov esi,7FFFFFFFh - 1001B5AB: 39 75 10 cmp dword ptr [ebp+10h],esi - 1001B5AE: 76 28 jbe 1001B5D8 - 1001B5B0: E8 94 3A FF FF call 1000F049 - 1001B5B5: 53 push ebx - 1001B5B6: 53 push ebx - 1001B5B7: 53 push ebx - 1001B5B8: 53 push ebx - 1001B5B9: 53 push ebx - 1001B5BA: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1001B5C0: E8 1C 3A FF FF call 1000EFE1 - 1001B5C5: 83 C4 14 add esp,14h - 1001B5C8: 38 5D FC cmp byte ptr [ebp-4],bl - 1001B5CB: 74 07 je 1001B5D4 - 1001B5CD: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1001B5D0: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1001B5D4: 8B C6 mov eax,esi - 1001B5D6: EB 60 jmp 1001B638 - 1001B5D8: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 1001B5DB: 39 58 14 cmp dword ptr [eax+14h],ebx - 1001B5DE: 75 1D jne 1001B5FD - 1001B5E0: FF 75 10 push dword ptr [ebp+10h] - 1001B5E3: 57 push edi - 1001B5E4: FF 75 08 push dword ptr [ebp+8] - 1001B5E7: E8 D4 31 00 00 call 1001E7C0 - 1001B5EC: 83 C4 0C add esp,0Ch - 1001B5EF: 38 5D FC cmp byte ptr [ebp-4],bl - 1001B5F2: 74 44 je 1001B638 - 1001B5F4: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 1001B5F7: 83 61 70 FD and dword ptr [ecx+70h],0FFFFFFFDh - 1001B5FB: EB 3B jmp 1001B638 - 1001B5FD: 8B 45 08 mov eax,dword ptr [ebp+8] - 1001B600: 0F B6 00 movzx eax,byte ptr [eax] - 1001B603: 8D 4D F0 lea ecx,[ebp-10h] - 1001B606: 51 push ecx - 1001B607: 50 push eax - 1001B608: E8 90 F3 FF FF call 1001A99D - 1001B60D: FF 45 08 inc dword ptr [ebp+8] - 1001B610: 8B F0 mov esi,eax - 1001B612: 0F B6 07 movzx eax,byte ptr [edi] - 1001B615: 8D 4D F0 lea ecx,[ebp-10h] - 1001B618: 51 push ecx - 1001B619: 50 push eax - 1001B61A: E8 7E F3 FF FF call 1001A99D - 1001B61F: 83 C4 10 add esp,10h - 1001B622: 47 inc edi - 1001B623: FF 4D 10 dec dword ptr [ebp+10h] - 1001B626: 74 08 je 1001B630 - 1001B628: 3B F3 cmp esi,ebx - 1001B62A: 74 04 je 1001B630 - 1001B62C: 3B F0 cmp esi,eax - 1001B62E: 74 CD je 1001B5FD - 1001B630: 2B F0 sub esi,eax - 1001B632: 8B C6 mov eax,esi - 1001B634: EB B9 jmp 1001B5EF - 1001B636: 33 C0 xor eax,eax - 1001B638: 5F pop edi - 1001B639: 5E pop esi - 1001B63A: 5B pop ebx - 1001B63B: C9 leave - 1001B63C: C3 ret - 1001B63D: 8B FF mov edi,edi - 1001B63F: 55 push ebp - 1001B640: 8B EC mov ebp,esp - 1001B642: 83 EC 1C sub esp,1Ch - 1001B645: 8B 55 10 mov edx,dword ptr [ebp+10h] - 1001B648: 56 push esi - 1001B649: 8B 75 08 mov esi,dword ptr [ebp+8] - 1001B64C: 6A FE push 0FFFFFFFEh - 1001B64E: 58 pop eax - 1001B64F: 89 45 EC mov dword ptr [ebp-14h],eax - 1001B652: 89 55 E4 mov dword ptr [ebp-1Ch],edx - 1001B655: 3B F0 cmp esi,eax - 1001B657: 75 1B jne 1001B674 - 1001B659: E8 FE 39 FF FF call 1000F05C - 1001B65E: 83 20 00 and dword ptr [eax],0 - 1001B661: E8 E3 39 FF FF call 1000F049 - 1001B666: C7 00 09 00 00 00 mov dword ptr [eax],9 - 1001B66C: 83 C8 FF or eax,0FFFFFFFFh - 1001B66F: E9 88 05 00 00 jmp 1001BBFC - 1001B674: 53 push ebx - 1001B675: 33 DB xor ebx,ebx - 1001B677: 3B F3 cmp esi,ebx - 1001B679: 7C 08 jl 1001B683 - 1001B67B: 3B 35 F4 6B 02 10 cmp esi,dword ptr ds:[10026BF4h] - 1001B681: 72 27 jb 1001B6AA - 1001B683: E8 D4 39 FF FF call 1000F05C - 1001B688: 89 18 mov dword ptr [eax],ebx - 1001B68A: E8 BA 39 FF FF call 1000F049 - 1001B68F: 53 push ebx - 1001B690: 53 push ebx - 1001B691: 53 push ebx - 1001B692: 53 push ebx - 1001B693: 53 push ebx - 1001B694: C7 00 09 00 00 00 mov dword ptr [eax],9 - 1001B69A: E8 42 39 FF FF call 1000EFE1 - 1001B69F: 83 C4 14 add esp,14h - 1001B6A2: 83 C8 FF or eax,0FFFFFFFFh - 1001B6A5: E9 51 05 00 00 jmp 1001BBFB - 1001B6AA: 8B C6 mov eax,esi - 1001B6AC: C1 F8 05 sar eax,5 - 1001B6AF: 57 push edi - 1001B6B0: 8D 3C 85 00 6C 02 lea edi,[eax*4+10026C00h] - 10 - 1001B6B7: 8B 07 mov eax,dword ptr [edi] - 1001B6B9: 83 E6 1F and esi,1Fh - 1001B6BC: C1 E6 06 shl esi,6 - 1001B6BF: 03 C6 add eax,esi - 1001B6C1: 8A 48 04 mov cl,byte ptr [eax+4] - 1001B6C4: F6 C1 01 test cl,1 - 1001B6C7: 75 14 jne 1001B6DD - 1001B6C9: E8 8E 39 FF FF call 1000F05C - 1001B6CE: 89 18 mov dword ptr [eax],ebx - 1001B6D0: E8 74 39 FF FF call 1000F049 - 1001B6D5: C7 00 09 00 00 00 mov dword ptr [eax],9 - 1001B6DB: EB 6A jmp 1001B747 - 1001B6DD: 81 FA FF FF FF 7F cmp edx,7FFFFFFFh - 1001B6E3: 77 50 ja 1001B735 - 1001B6E5: 89 5D F0 mov dword ptr [ebp-10h],ebx - 1001B6E8: 3B D3 cmp edx,ebx - 1001B6EA: 0F 84 08 05 00 00 je 1001BBF8 - 1001B6F0: F6 C1 02 test cl,2 - 1001B6F3: 0F 85 FF 04 00 00 jne 1001BBF8 - 1001B6F9: 39 5D 0C cmp dword ptr [ebp+0Ch],ebx - 1001B6FC: 74 37 je 1001B735 - 1001B6FE: 8A 40 24 mov al,byte ptr [eax+24h] - 1001B701: 02 C0 add al,al - 1001B703: D0 F8 sar al,1 - 1001B705: 88 45 FE mov byte ptr [ebp-2],al - 1001B708: 0F BE C0 movsx eax,al - 1001B70B: 48 dec eax - 1001B70C: 6A 04 push 4 - 1001B70E: 59 pop ecx - 1001B70F: 74 1C je 1001B72D - 1001B711: 48 dec eax - 1001B712: 75 0E jne 1001B722 - 1001B714: 8B C2 mov eax,edx - 1001B716: F7 D0 not eax - 1001B718: A8 01 test al,1 - 1001B71A: 74 19 je 1001B735 - 1001B71C: 83 E2 FE and edx,0FFFFFFFEh - 1001B71F: 89 55 10 mov dword ptr [ebp+10h],edx - 1001B722: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 1001B725: 89 45 F4 mov dword ptr [ebp-0Ch],eax - 1001B728: E9 81 00 00 00 jmp 1001B7AE - 1001B72D: 8B C2 mov eax,edx - 1001B72F: F7 D0 not eax - 1001B731: A8 01 test al,1 - 1001B733: 75 21 jne 1001B756 - 1001B735: E8 22 39 FF FF call 1000F05C - 1001B73A: 89 18 mov dword ptr [eax],ebx - 1001B73C: E8 08 39 FF FF call 1000F049 - 1001B741: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1001B747: 53 push ebx - 1001B748: 53 push ebx - 1001B749: 53 push ebx - 1001B74A: 53 push ebx - 1001B74B: 53 push ebx - 1001B74C: E8 90 38 FF FF call 1000EFE1 - 1001B751: 83 C4 14 add esp,14h - 1001B754: EB 34 jmp 1001B78A - 1001B756: 8B C2 mov eax,edx - 1001B758: D1 E8 shr eax,1 - 1001B75A: 89 4D 10 mov dword ptr [ebp+10h],ecx - 1001B75D: 3B C1 cmp eax,ecx - 1001B75F: 72 03 jb 1001B764 - 1001B761: 89 45 10 mov dword ptr [ebp+10h],eax - 1001B764: FF 75 10 push dword ptr [ebp+10h] - 1001B767: E8 9D 71 FF FF call 10012909 - 1001B76C: 59 pop ecx - 1001B76D: 89 45 F4 mov dword ptr [ebp-0Ch],eax - 1001B770: 3B C3 cmp eax,ebx - 1001B772: 75 1E jne 1001B792 - 1001B774: E8 D0 38 FF FF call 1000F049 - 1001B779: C7 00 0C 00 00 00 mov dword ptr [eax],0Ch - 1001B77F: E8 D8 38 FF FF call 1000F05C - 1001B784: C7 00 08 00 00 00 mov dword ptr [eax],8 - 1001B78A: 83 C8 FF or eax,0FFFFFFFFh - 1001B78D: E9 68 04 00 00 jmp 1001BBFA - 1001B792: 6A 01 push 1 - 1001B794: 53 push ebx - 1001B795: 53 push ebx - 1001B796: FF 75 08 push dword ptr [ebp+8] - 1001B799: E8 4B B7 FF FF call 10016EE9 - 1001B79E: 8B 0F mov ecx,dword ptr [edi] - 1001B7A0: 89 44 0E 28 mov dword ptr [esi+ecx+28h],eax - 1001B7A4: 8B 45 F4 mov eax,dword ptr [ebp-0Ch] - 1001B7A7: 83 C4 10 add esp,10h - 1001B7AA: 89 54 0E 2C mov dword ptr [esi+ecx+2Ch],edx - 1001B7AE: 8B 0F mov ecx,dword ptr [edi] - 1001B7B0: 03 CE add ecx,esi - 1001B7B2: F6 41 04 48 test byte ptr [ecx+4],48h - 1001B7B6: 74 74 je 1001B82C - 1001B7B8: 8A 49 05 mov cl,byte ptr [ecx+5] - 1001B7BB: 80 F9 0A cmp cl,0Ah - 1001B7BE: 74 6C je 1001B82C - 1001B7C0: 39 5D 10 cmp dword ptr [ebp+10h],ebx - 1001B7C3: 74 67 je 1001B82C - 1001B7C5: 88 08 mov byte ptr [eax],cl - 1001B7C7: 8B 0F mov ecx,dword ptr [edi] - 1001B7C9: 40 inc eax - 1001B7CA: FF 4D 10 dec dword ptr [ebp+10h] - 1001B7CD: C7 45 F0 01 00 00 mov dword ptr [ebp-10h],1 - 00 - 1001B7D4: C6 44 0E 05 0A mov byte ptr [esi+ecx+5],0Ah - 1001B7D9: 38 5D FE cmp byte ptr [ebp-2],bl - 1001B7DC: 74 4E je 1001B82C - 1001B7DE: 8B 0F mov ecx,dword ptr [edi] - 1001B7E0: 8A 4C 0E 25 mov cl,byte ptr [esi+ecx+25h] - 1001B7E4: 80 F9 0A cmp cl,0Ah - 1001B7E7: 74 43 je 1001B82C - 1001B7E9: 39 5D 10 cmp dword ptr [ebp+10h],ebx - 1001B7EC: 74 3E je 1001B82C - 1001B7EE: 88 08 mov byte ptr [eax],cl - 1001B7F0: 8B 0F mov ecx,dword ptr [edi] - 1001B7F2: 40 inc eax - 1001B7F3: FF 4D 10 dec dword ptr [ebp+10h] - 1001B7F6: 80 7D FE 01 cmp byte ptr [ebp-2],1 - 1001B7FA: C7 45 F0 02 00 00 mov dword ptr [ebp-10h],2 - 00 - 1001B801: C6 44 0E 25 0A mov byte ptr [esi+ecx+25h],0Ah - 1001B806: 75 24 jne 1001B82C - 1001B808: 8B 0F mov ecx,dword ptr [edi] - 1001B80A: 8A 4C 0E 26 mov cl,byte ptr [esi+ecx+26h] - 1001B80E: 80 F9 0A cmp cl,0Ah - 1001B811: 74 19 je 1001B82C - 1001B813: 39 5D 10 cmp dword ptr [ebp+10h],ebx - 1001B816: 74 14 je 1001B82C - 1001B818: 88 08 mov byte ptr [eax],cl - 1001B81A: 8B 0F mov ecx,dword ptr [edi] - 1001B81C: 40 inc eax - 1001B81D: FF 4D 10 dec dword ptr [ebp+10h] - 1001B820: C7 45 F0 03 00 00 mov dword ptr [ebp-10h],3 - 00 - 1001B827: C6 44 0E 26 0A mov byte ptr [esi+ecx+26h],0Ah - 1001B82C: 53 push ebx - 1001B82D: 8D 4D E8 lea ecx,[ebp-18h] - 1001B830: 51 push ecx - 1001B831: FF 75 10 push dword ptr [ebp+10h] - 1001B834: 50 push eax - 1001B835: 8B 07 mov eax,dword ptr [edi] - 1001B837: FF 34 06 push dword ptr [esi+eax] - 1001B83A: FF 15 20 F0 01 10 call dword ptr ds:[1001F020h] - 1001B840: 85 C0 test eax,eax - 1001B842: 0F 84 7B 03 00 00 je 1001BBC3 - 1001B848: 8B 4D E8 mov ecx,dword ptr [ebp-18h] - 1001B84B: 3B CB cmp ecx,ebx - 1001B84D: 0F 8C 70 03 00 00 jl 1001BBC3 - 1001B853: 3B 4D 10 cmp ecx,dword ptr [ebp+10h] - 1001B856: 0F 87 67 03 00 00 ja 1001BBC3 - 1001B85C: 8B 07 mov eax,dword ptr [edi] - 1001B85E: 01 4D F0 add dword ptr [ebp-10h],ecx - 1001B861: 8D 44 06 04 lea eax,[esi+eax+4] - 1001B865: F6 00 80 test byte ptr [eax],80h - 1001B868: 0F 84 E6 01 00 00 je 1001BA54 - 1001B86E: 80 7D FE 02 cmp byte ptr [ebp-2],2 - 1001B872: 0F 84 16 02 00 00 je 1001BA8E - 1001B878: 3B CB cmp ecx,ebx - 1001B87A: 74 0D je 1001B889 - 1001B87C: 8B 4D F4 mov ecx,dword ptr [ebp-0Ch] - 1001B87F: 80 39 0A cmp byte ptr [ecx],0Ah - 1001B882: 75 05 jne 1001B889 - 1001B884: 80 08 04 or byte ptr [eax],4 - 1001B887: EB 03 jmp 1001B88C - 1001B889: 80 20 FB and byte ptr [eax],0FBh - 1001B88C: 8B 5D F4 mov ebx,dword ptr [ebp-0Ch] - 1001B88F: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 1001B892: 03 C3 add eax,ebx - 1001B894: 89 5D 10 mov dword ptr [ebp+10h],ebx - 1001B897: 89 45 F0 mov dword ptr [ebp-10h],eax - 1001B89A: 3B D8 cmp ebx,eax - 1001B89C: 0F 83 D0 00 00 00 jae 1001B972 - 1001B8A2: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 1001B8A5: 8A 01 mov al,byte ptr [ecx] - 1001B8A7: 3C 1A cmp al,1Ah - 1001B8A9: 0F 84 AE 00 00 00 je 1001B95D - 1001B8AF: 3C 0D cmp al,0Dh - 1001B8B1: 74 0C je 1001B8BF - 1001B8B3: 88 03 mov byte ptr [ebx],al - 1001B8B5: 43 inc ebx - 1001B8B6: 41 inc ecx - 1001B8B7: 89 4D 10 mov dword ptr [ebp+10h],ecx - 1001B8BA: E9 90 00 00 00 jmp 1001B94F - 1001B8BF: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 1001B8C2: 48 dec eax - 1001B8C3: 3B C8 cmp ecx,eax - 1001B8C5: 73 17 jae 1001B8DE - 1001B8C7: 8D 41 01 lea eax,[ecx+1] - 1001B8CA: 80 38 0A cmp byte ptr [eax],0Ah - 1001B8CD: 75 0A jne 1001B8D9 - 1001B8CF: 41 inc ecx - 1001B8D0: 41 inc ecx - 1001B8D1: 89 4D 10 mov dword ptr [ebp+10h],ecx - 1001B8D4: C6 03 0A mov byte ptr [ebx],0Ah - 1001B8D7: EB 75 jmp 1001B94E - 1001B8D9: 89 45 10 mov dword ptr [ebp+10h],eax - 1001B8DC: EB 6D jmp 1001B94B - 1001B8DE: FF 45 10 inc dword ptr [ebp+10h] - 1001B8E1: 6A 00 push 0 - 1001B8E3: 8D 45 E8 lea eax,[ebp-18h] - 1001B8E6: 50 push eax - 1001B8E7: 6A 01 push 1 - 1001B8E9: 8D 45 FF lea eax,[ebp-1] - 1001B8EC: 50 push eax - 1001B8ED: 8B 07 mov eax,dword ptr [edi] - 1001B8EF: FF 34 06 push dword ptr [esi+eax] - 1001B8F2: FF 15 20 F0 01 10 call dword ptr ds:[1001F020h] - 1001B8F8: 85 C0 test eax,eax - 1001B8FA: 75 0A jne 1001B906 - 1001B8FC: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 1001B902: 85 C0 test eax,eax - 1001B904: 75 45 jne 1001B94B - 1001B906: 83 7D E8 00 cmp dword ptr [ebp-18h],0 - 1001B90A: 74 3F je 1001B94B - 1001B90C: 8B 07 mov eax,dword ptr [edi] - 1001B90E: F6 44 06 04 48 test byte ptr [esi+eax+4],48h - 1001B913: 74 14 je 1001B929 - 1001B915: 80 7D FF 0A cmp byte ptr [ebp-1],0Ah - 1001B919: 74 B9 je 1001B8D4 - 1001B91B: C6 03 0D mov byte ptr [ebx],0Dh - 1001B91E: 8B 07 mov eax,dword ptr [edi] - 1001B920: 8A 4D FF mov cl,byte ptr [ebp-1] - 1001B923: 88 4C 06 05 mov byte ptr [esi+eax+5],cl - 1001B927: EB 25 jmp 1001B94E - 1001B929: 3B 5D F4 cmp ebx,dword ptr [ebp-0Ch] - 1001B92C: 75 06 jne 1001B934 - 1001B92E: 80 7D FF 0A cmp byte ptr [ebp-1],0Ah - 1001B932: 74 A0 je 1001B8D4 - 1001B934: 6A 01 push 1 - 1001B936: 6A FF push 0FFFFFFFFh - 1001B938: 6A FF push 0FFFFFFFFh - 1001B93A: FF 75 08 push dword ptr [ebp+8] - 1001B93D: E8 A7 B5 FF FF call 10016EE9 - 1001B942: 83 C4 10 add esp,10h - 1001B945: 80 7D FF 0A cmp byte ptr [ebp-1],0Ah - 1001B949: 74 04 je 1001B94F - 1001B94B: C6 03 0D mov byte ptr [ebx],0Dh - 1001B94E: 43 inc ebx - 1001B94F: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 1001B952: 39 45 10 cmp dword ptr [ebp+10h],eax - 1001B955: 0F 82 47 FF FF FF jb 1001B8A2 - 1001B95B: EB 15 jmp 1001B972 - 1001B95D: 8B 07 mov eax,dword ptr [edi] - 1001B95F: 8D 44 06 04 lea eax,[esi+eax+4] - 1001B963: F6 00 40 test byte ptr [eax],40h - 1001B966: 75 05 jne 1001B96D - 1001B968: 80 08 02 or byte ptr [eax],2 - 1001B96B: EB 05 jmp 1001B972 - 1001B96D: 8A 01 mov al,byte ptr [ecx] - 1001B96F: 88 03 mov byte ptr [ebx],al - 1001B971: 43 inc ebx - 1001B972: 8B C3 mov eax,ebx - 1001B974: 2B 45 F4 sub eax,dword ptr [ebp-0Ch] - 1001B977: 80 7D FE 01 cmp byte ptr [ebp-2],1 - 1001B97B: 89 45 F0 mov dword ptr [ebp-10h],eax - 1001B97E: 0F 85 D0 00 00 00 jne 1001BA54 - 1001B984: 85 C0 test eax,eax - 1001B986: 0F 84 C8 00 00 00 je 1001BA54 - 1001B98C: 4B dec ebx - 1001B98D: 8A 0B mov cl,byte ptr [ebx] - 1001B98F: 84 C9 test cl,cl - 1001B991: 78 06 js 1001B999 - 1001B993: 43 inc ebx - 1001B994: E9 86 00 00 00 jmp 1001BA1F - 1001B999: 33 C0 xor eax,eax - 1001B99B: 40 inc eax - 1001B99C: 0F B6 C9 movzx ecx,cl - 1001B99F: EB 0F jmp 1001B9B0 - 1001B9A1: 83 F8 04 cmp eax,4 - 1001B9A4: 7F 13 jg 1001B9B9 - 1001B9A6: 3B 5D F4 cmp ebx,dword ptr [ebp-0Ch] - 1001B9A9: 72 0E jb 1001B9B9 - 1001B9AB: 4B dec ebx - 1001B9AC: 0F B6 0B movzx ecx,byte ptr [ebx] - 1001B9AF: 40 inc eax - 1001B9B0: 80 B9 88 58 02 10 cmp byte ptr [ecx+10025888h],0 - 00 - 1001B9B7: 74 E8 je 1001B9A1 - 1001B9B9: 8A 13 mov dl,byte ptr [ebx] - 1001B9BB: 0F B6 CA movzx ecx,dl - 1001B9BE: 0F BE 89 88 58 02 movsx ecx,byte ptr [ecx+10025888h] - 10 - 1001B9C5: 85 C9 test ecx,ecx - 1001B9C7: 75 0D jne 1001B9D6 - 1001B9C9: E8 7B 36 FF FF call 1000F049 - 1001B9CE: C7 00 2A 00 00 00 mov dword ptr [eax],2Ah - 1001B9D4: EB 7A jmp 1001BA50 - 1001B9D6: 41 inc ecx - 1001B9D7: 3B C8 cmp ecx,eax - 1001B9D9: 75 04 jne 1001B9DF - 1001B9DB: 03 D8 add ebx,eax - 1001B9DD: EB 40 jmp 1001BA1F - 1001B9DF: 8B 0F mov ecx,dword ptr [edi] - 1001B9E1: 03 CE add ecx,esi - 1001B9E3: F6 41 04 48 test byte ptr [ecx+4],48h - 1001B9E7: 74 24 je 1001BA0D - 1001B9E9: 43 inc ebx - 1001B9EA: 83 F8 02 cmp eax,2 - 1001B9ED: 88 51 05 mov byte ptr [ecx+5],dl - 1001B9F0: 7C 09 jl 1001B9FB - 1001B9F2: 8A 13 mov dl,byte ptr [ebx] - 1001B9F4: 8B 0F mov ecx,dword ptr [edi] - 1001B9F6: 88 54 0E 25 mov byte ptr [esi+ecx+25h],dl - 1001B9FA: 43 inc ebx - 1001B9FB: 83 F8 03 cmp eax,3 - 1001B9FE: 75 09 jne 1001BA09 - 1001BA00: 8A 13 mov dl,byte ptr [ebx] - 1001BA02: 8B 0F mov ecx,dword ptr [edi] - 1001BA04: 88 54 0E 26 mov byte ptr [esi+ecx+26h],dl - 1001BA08: 43 inc ebx - 1001BA09: 2B D8 sub ebx,eax - 1001BA0B: EB 12 jmp 1001BA1F - 1001BA0D: F7 D8 neg eax - 1001BA0F: 99 cdq - 1001BA10: 6A 01 push 1 - 1001BA12: 52 push edx - 1001BA13: 50 push eax - 1001BA14: FF 75 08 push dword ptr [ebp+8] - 1001BA17: E8 CD B4 FF FF call 10016EE9 - 1001BA1C: 83 C4 10 add esp,10h - 1001BA1F: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 1001BA22: 2B 5D F4 sub ebx,dword ptr [ebp-0Ch] - 1001BA25: D1 E8 shr eax,1 - 1001BA27: 50 push eax - 1001BA28: FF 75 0C push dword ptr [ebp+0Ch] - 1001BA2B: 53 push ebx - 1001BA2C: FF 75 F4 push dword ptr [ebp-0Ch] - 1001BA2F: 6A 00 push 0 - 1001BA31: 68 E9 FD 00 00 push 0FDE9h - 1001BA36: FF 15 38 F1 01 10 call dword ptr ds:[1001F138h] - 1001BA3C: 89 45 F0 mov dword ptr [ebp-10h],eax - 1001BA3F: 85 C0 test eax,eax - 1001BA41: 75 34 jne 1001BA77 - 1001BA43: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 1001BA49: 50 push eax - 1001BA4A: E8 20 36 FF FF call 1000F06F - 1001BA4F: 59 pop ecx - 1001BA50: 83 4D EC FF or dword ptr [ebp-14h],0FFFFFFFFh - 1001BA54: 8B 45 F4 mov eax,dword ptr [ebp-0Ch] - 1001BA57: 3B 45 0C cmp eax,dword ptr [ebp+0Ch] - 1001BA5A: 74 07 je 1001BA63 - 1001BA5C: 50 push eax - 1001BA5D: E8 D2 E8 FE FF call 1000A334 - 1001BA62: 59 pop ecx - 1001BA63: 8B 45 EC mov eax,dword ptr [ebp-14h] - 1001BA66: 83 F8 FE cmp eax,0FFFFFFFEh - 1001BA69: 0F 85 8B 01 00 00 jne 1001BBFA - 1001BA6F: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 1001BA72: E9 83 01 00 00 jmp 1001BBFA - 1001BA77: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 1001BA7A: 8B 17 mov edx,dword ptr [edi] - 1001BA7C: 33 C9 xor ecx,ecx - 1001BA7E: 3B C3 cmp eax,ebx - 1001BA80: 0F 95 C1 setne cl - 1001BA83: 03 C0 add eax,eax - 1001BA85: 89 45 F0 mov dword ptr [ebp-10h],eax - 1001BA88: 89 4C 16 30 mov dword ptr [esi+edx+30h],ecx - 1001BA8C: EB C6 jmp 1001BA54 - 1001BA8E: 3B CB cmp ecx,ebx - 1001BA90: 74 0E je 1001BAA0 - 1001BA92: 8B 4D F4 mov ecx,dword ptr [ebp-0Ch] - 1001BA95: 66 83 39 0A cmp word ptr [ecx],0Ah - 1001BA99: 75 05 jne 1001BAA0 - 1001BA9B: 80 08 04 or byte ptr [eax],4 - 1001BA9E: EB 03 jmp 1001BAA3 - 1001BAA0: 80 20 FB and byte ptr [eax],0FBh - 1001BAA3: 8B 5D F4 mov ebx,dword ptr [ebp-0Ch] - 1001BAA6: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 1001BAA9: 03 C3 add eax,ebx - 1001BAAB: 89 5D 10 mov dword ptr [ebp+10h],ebx - 1001BAAE: 89 45 F0 mov dword ptr [ebp-10h],eax - 1001BAB1: 3B D8 cmp ebx,eax - 1001BAB3: 0F 83 FF 00 00 00 jae 1001BBB8 - 1001BAB9: 8B 45 10 mov eax,dword ptr [ebp+10h] - 1001BABC: 0F B7 08 movzx ecx,word ptr [eax] - 1001BABF: 66 83 F9 1A cmp cx,1Ah - 1001BAC3: 0F 84 D7 00 00 00 je 1001BBA0 - 1001BAC9: 66 83 F9 0D cmp cx,0Dh - 1001BACD: 74 0F je 1001BADE - 1001BACF: 66 89 0B mov word ptr [ebx],cx - 1001BAD2: 43 inc ebx - 1001BAD3: 43 inc ebx - 1001BAD4: 40 inc eax - 1001BAD5: 40 inc eax - 1001BAD6: 89 45 10 mov dword ptr [ebp+10h],eax - 1001BAD9: E9 B4 00 00 00 jmp 1001BB92 - 1001BADE: 8B 4D F0 mov ecx,dword ptr [ebp-10h] - 1001BAE1: 83 C1 FE add ecx,0FFFFFFFEh - 1001BAE4: 3B C1 cmp eax,ecx - 1001BAE6: 73 1E jae 1001BB06 - 1001BAE8: 8D 48 02 lea ecx,[eax+2] - 1001BAEB: 66 83 39 0A cmp word ptr [ecx],0Ah - 1001BAEF: 75 0D jne 1001BAFE - 1001BAF1: 83 C0 04 add eax,4 - 1001BAF4: 89 45 10 mov dword ptr [ebp+10h],eax - 1001BAF7: 6A 0A push 0Ah - 1001BAF9: E9 8E 00 00 00 jmp 1001BB8C - 1001BAFE: 89 4D 10 mov dword ptr [ebp+10h],ecx - 1001BB01: E9 84 00 00 00 jmp 1001BB8A - 1001BB06: 83 45 10 02 add dword ptr [ebp+10h],2 - 1001BB0A: 6A 00 push 0 - 1001BB0C: 8D 45 E8 lea eax,[ebp-18h] - 1001BB0F: 50 push eax - 1001BB10: 6A 02 push 2 - 1001BB12: 8D 45 F8 lea eax,[ebp-8] - 1001BB15: 50 push eax - 1001BB16: 8B 07 mov eax,dword ptr [edi] - 1001BB18: FF 34 06 push dword ptr [esi+eax] - 1001BB1B: FF 15 20 F0 01 10 call dword ptr ds:[1001F020h] - 1001BB21: 85 C0 test eax,eax - 1001BB23: 75 0A jne 1001BB2F - 1001BB25: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 1001BB2B: 85 C0 test eax,eax - 1001BB2D: 75 5B jne 1001BB8A - 1001BB2F: 83 7D E8 00 cmp dword ptr [ebp-18h],0 - 1001BB33: 74 55 je 1001BB8A - 1001BB35: 8B 07 mov eax,dword ptr [edi] - 1001BB37: F6 44 06 04 48 test byte ptr [esi+eax+4],48h - 1001BB3C: 74 28 je 1001BB66 - 1001BB3E: 66 83 7D F8 0A cmp word ptr [ebp-8],0Ah - 1001BB43: 74 B2 je 1001BAF7 - 1001BB45: 6A 0D push 0Dh - 1001BB47: 58 pop eax - 1001BB48: 66 89 03 mov word ptr [ebx],ax - 1001BB4B: 8B 07 mov eax,dword ptr [edi] - 1001BB4D: 8A 4D F8 mov cl,byte ptr [ebp-8] - 1001BB50: 88 4C 06 05 mov byte ptr [esi+eax+5],cl - 1001BB54: 8B 07 mov eax,dword ptr [edi] - 1001BB56: 8A 4D F9 mov cl,byte ptr [ebp-7] - 1001BB59: 88 4C 06 25 mov byte ptr [esi+eax+25h],cl - 1001BB5D: 8B 07 mov eax,dword ptr [edi] - 1001BB5F: C6 44 06 26 0A mov byte ptr [esi+eax+26h],0Ah - 1001BB64: EB 2A jmp 1001BB90 - 1001BB66: 3B 5D F4 cmp ebx,dword ptr [ebp-0Ch] - 1001BB69: 75 07 jne 1001BB72 - 1001BB6B: 66 83 7D F8 0A cmp word ptr [ebp-8],0Ah - 1001BB70: 74 85 je 1001BAF7 - 1001BB72: 6A 01 push 1 - 1001BB74: 6A FF push 0FFFFFFFFh - 1001BB76: 6A FE push 0FFFFFFFEh - 1001BB78: FF 75 08 push dword ptr [ebp+8] - 1001BB7B: E8 69 B3 FF FF call 10016EE9 - 1001BB80: 83 C4 10 add esp,10h - 1001BB83: 66 83 7D F8 0A cmp word ptr [ebp-8],0Ah - 1001BB88: 74 08 je 1001BB92 - 1001BB8A: 6A 0D push 0Dh - 1001BB8C: 58 pop eax - 1001BB8D: 66 89 03 mov word ptr [ebx],ax - 1001BB90: 43 inc ebx - 1001BB91: 43 inc ebx - 1001BB92: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 1001BB95: 39 45 10 cmp dword ptr [ebp+10h],eax - 1001BB98: 0F 82 1B FF FF FF jb 1001BAB9 - 1001BB9E: EB 18 jmp 1001BBB8 - 1001BBA0: 8B 0F mov ecx,dword ptr [edi] - 1001BBA2: 8D 74 0E 04 lea esi,[esi+ecx+4] - 1001BBA6: F6 06 40 test byte ptr [esi],40h - 1001BBA9: 75 05 jne 1001BBB0 - 1001BBAB: 80 0E 02 or byte ptr [esi],2 - 1001BBAE: EB 08 jmp 1001BBB8 - 1001BBB0: 66 8B 00 mov ax,word ptr [eax] - 1001BBB3: 66 89 03 mov word ptr [ebx],ax - 1001BBB6: 43 inc ebx - 1001BBB7: 43 inc ebx - 1001BBB8: 2B 5D F4 sub ebx,dword ptr [ebp-0Ch] - 1001BBBB: 89 5D F0 mov dword ptr [ebp-10h],ebx - 1001BBBE: E9 91 FE FF FF jmp 1001BA54 - 1001BBC3: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 1001BBC9: 6A 05 push 5 - 1001BBCB: 5E pop esi - 1001BBCC: 3B C6 cmp eax,esi - 1001BBCE: 75 17 jne 1001BBE7 - 1001BBD0: E8 74 34 FF FF call 1000F049 - 1001BBD5: C7 00 09 00 00 00 mov dword ptr [eax],9 - 1001BBDB: E8 7C 34 FF FF call 1000F05C - 1001BBE0: 89 30 mov dword ptr [eax],esi - 1001BBE2: E9 69 FE FF FF jmp 1001BA50 - 1001BBE7: 83 F8 6D cmp eax,6Dh - 1001BBEA: 0F 85 59 FE FF FF jne 1001BA49 - 1001BBF0: 89 5D EC mov dword ptr [ebp-14h],ebx - 1001BBF3: E9 5C FE FF FF jmp 1001BA54 - 1001BBF8: 33 C0 xor eax,eax - 1001BBFA: 5F pop edi - 1001BBFB: 5B pop ebx - 1001BBFC: 5E pop esi - 1001BBFD: C9 leave - 1001BBFE: C3 ret - 1001BBFF: 6A 10 push 10h - 1001BC01: 68 08 20 02 10 push 10022008h - 1001BC06: E8 7D 44 FF FF call 10010088 - 1001BC0B: 8B 45 08 mov eax,dword ptr [ebp+8] - 1001BC0E: 83 F8 FE cmp eax,0FFFFFFFEh - 1001BC11: 75 1B jne 1001BC2E - 1001BC13: E8 44 34 FF FF call 1000F05C - 1001BC18: 83 20 00 and dword ptr [eax],0 - 1001BC1B: E8 29 34 FF FF call 1000F049 - 1001BC20: C7 00 09 00 00 00 mov dword ptr [eax],9 - 1001BC26: 83 C8 FF or eax,0FFFFFFFFh - 1001BC29: E9 BE 00 00 00 jmp 1001BCEC - 1001BC2E: 33 F6 xor esi,esi - 1001BC30: 3B C6 cmp eax,esi - 1001BC32: 7C 08 jl 1001BC3C - 1001BC34: 3B 05 F4 6B 02 10 cmp eax,dword ptr ds:[10026BF4h] - 1001BC3A: 72 21 jb 1001BC5D - 1001BC3C: E8 1B 34 FF FF call 1000F05C - 1001BC41: 89 30 mov dword ptr [eax],esi - 1001BC43: E8 01 34 FF FF call 1000F049 - 1001BC48: C7 00 09 00 00 00 mov dword ptr [eax],9 - 1001BC4E: 56 push esi - 1001BC4F: 56 push esi - 1001BC50: 56 push esi - 1001BC51: 56 push esi - 1001BC52: 56 push esi - 1001BC53: E8 89 33 FF FF call 1000EFE1 - 1001BC58: 83 C4 14 add esp,14h - 1001BC5B: EB C9 jmp 1001BC26 - 1001BC5D: 8B C8 mov ecx,eax - 1001BC5F: C1 F9 05 sar ecx,5 - 1001BC62: 8D 1C 8D 00 6C 02 lea ebx,[ecx*4+10026C00h] - 10 - 1001BC69: 8B F8 mov edi,eax - 1001BC6B: 83 E7 1F and edi,1Fh - 1001BC6E: C1 E7 06 shl edi,6 - 1001BC71: 8B 0B mov ecx,dword ptr [ebx] - 1001BC73: 0F BE 4C 39 04 movsx ecx,byte ptr [ecx+edi+4] - 1001BC78: 83 E1 01 and ecx,1 - 1001BC7B: 74 BF je 1001BC3C - 1001BC7D: B9 FF FF FF 7F mov ecx,7FFFFFFFh - 1001BC82: 3B 4D 10 cmp ecx,dword ptr [ebp+10h] - 1001BC85: 1B C9 sbb ecx,ecx - 1001BC87: 41 inc ecx - 1001BC88: 75 14 jne 1001BC9E - 1001BC8A: E8 CD 33 FF FF call 1000F05C - 1001BC8F: 89 30 mov dword ptr [eax],esi - 1001BC91: E8 B3 33 FF FF call 1000F049 - 1001BC96: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1001BC9C: EB B0 jmp 1001BC4E - 1001BC9E: 50 push eax - 1001BC9F: E8 D9 C4 FF FF call 1001817D - 1001BCA4: 59 pop ecx - 1001BCA5: 89 75 FC mov dword ptr [ebp-4],esi - 1001BCA8: 8B 03 mov eax,dword ptr [ebx] - 1001BCAA: F6 44 38 04 01 test byte ptr [eax+edi+4],1 - 1001BCAF: 74 16 je 1001BCC7 - 1001BCB1: FF 75 10 push dword ptr [ebp+10h] - 1001BCB4: FF 75 0C push dword ptr [ebp+0Ch] - 1001BCB7: FF 75 08 push dword ptr [ebp+8] - 1001BCBA: E8 7E F9 FF FF call 1001B63D - 1001BCBF: 83 C4 0C add esp,0Ch - 1001BCC2: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1001BCC5: EB 16 jmp 1001BCDD - 1001BCC7: E8 7D 33 FF FF call 1000F049 - 1001BCCC: C7 00 09 00 00 00 mov dword ptr [eax],9 - 1001BCD2: E8 85 33 FF FF call 1000F05C - 1001BCD7: 89 30 mov dword ptr [eax],esi - 1001BCD9: 83 4D E4 FF or dword ptr [ebp-1Ch],0FFFFFFFFh - 1001BCDD: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1001BCE4: E8 09 00 00 00 call 1001BCF2 - 1001BCE9: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 1001BCEC: E8 DC 43 FF FF call 100100CD - 1001BCF1: C3 ret - 1001BCF2: FF 75 08 push dword ptr [ebp+8] - 1001BCF5: E8 23 C5 FF FF call 1001821D - 1001BCFA: 59 pop ecx - 1001BCFB: C3 ret - 1001BCFC: 8B FF mov edi,edi - 1001BCFE: 55 push ebp - 1001BCFF: 8B EC mov ebp,esp - 1001BD01: 83 EC 18 sub esp,18h - 1001BD04: 53 push ebx - 1001BD05: 56 push esi - 1001BD06: 57 push edi - 1001BD07: 33 DB xor ebx,ebx - 1001BD09: 6A 01 push 1 - 1001BD0B: 53 push ebx - 1001BD0C: 53 push ebx - 1001BD0D: FF 75 08 push dword ptr [ebp+8] - 1001BD10: 89 5D F0 mov dword ptr [ebp-10h],ebx - 1001BD13: 89 5D F4 mov dword ptr [ebp-0Ch],ebx - 1001BD16: E8 CE B1 FF FF call 10016EE9 - 1001BD1B: 89 45 E8 mov dword ptr [ebp-18h],eax - 1001BD1E: 23 C2 and eax,edx - 1001BD20: 83 C4 10 add esp,10h - 1001BD23: 89 55 EC mov dword ptr [ebp-14h],edx - 1001BD26: 83 F8 FF cmp eax,0FFFFFFFFh - 1001BD29: 74 59 je 1001BD84 - 1001BD2B: 6A 02 push 2 - 1001BD2D: 53 push ebx - 1001BD2E: 53 push ebx - 1001BD2F: FF 75 08 push dword ptr [ebp+8] - 1001BD32: E8 B2 B1 FF FF call 10016EE9 - 1001BD37: 8B C8 mov ecx,eax - 1001BD39: 23 CA and ecx,edx - 1001BD3B: 83 C4 10 add esp,10h - 1001BD3E: 83 F9 FF cmp ecx,0FFFFFFFFh - 1001BD41: 74 41 je 1001BD84 - 1001BD43: 8B 75 0C mov esi,dword ptr [ebp+0Ch] - 1001BD46: 8B 7D 10 mov edi,dword ptr [ebp+10h] - 1001BD49: 2B F0 sub esi,eax - 1001BD4B: 1B FA sbb edi,edx - 1001BD4D: 0F 88 C6 00 00 00 js 1001BE19 - 1001BD53: 7F 08 jg 1001BD5D - 1001BD55: 3B F3 cmp esi,ebx - 1001BD57: 0F 86 BC 00 00 00 jbe 1001BE19 - 1001BD5D: BB 00 10 00 00 mov ebx,1000h - 1001BD62: 53 push ebx - 1001BD63: 6A 08 push 8 - 1001BD65: FF 15 64 F1 01 10 call dword ptr ds:[1001F164h] - 1001BD6B: 50 push eax - 1001BD6C: FF 15 AC F0 01 10 call dword ptr ds:[1001F0ACh] - 1001BD72: 89 45 FC mov dword ptr [ebp-4],eax - 1001BD75: 85 C0 test eax,eax - 1001BD77: 75 17 jne 1001BD90 - 1001BD79: E8 CB 32 FF FF call 1000F049 - 1001BD7E: C7 00 0C 00 00 00 mov dword ptr [eax],0Ch - 1001BD84: E8 C0 32 FF FF call 1000F049 - 1001BD89: 8B 00 mov eax,dword ptr [eax] - 1001BD8B: 5F pop edi - 1001BD8C: 5E pop esi - 1001BD8D: 5B pop ebx - 1001BD8E: C9 leave - 1001BD8F: C3 ret - 1001BD90: 68 00 80 00 00 push 8000h - 1001BD95: FF 75 08 push dword ptr [ebp+8] - 1001BD98: E8 8A 01 00 00 call 1001BF27 - 1001BD9D: 59 pop ecx - 1001BD9E: 59 pop ecx - 1001BD9F: 89 45 F8 mov dword ptr [ebp-8],eax - 1001BDA2: 85 FF test edi,edi - 1001BDA4: 7C 0A jl 1001BDB0 - 1001BDA6: 7F 04 jg 1001BDAC - 1001BDA8: 3B F3 cmp esi,ebx - 1001BDAA: 72 04 jb 1001BDB0 - 1001BDAC: 8B C3 mov eax,ebx - 1001BDAE: EB 02 jmp 1001BDB2 - 1001BDB0: 8B C6 mov eax,esi - 1001BDB2: 50 push eax - 1001BDB3: FF 75 FC push dword ptr [ebp-4] - 1001BDB6: FF 75 08 push dword ptr [ebp+8] - 1001BDB9: E8 C9 B2 FF FF call 10017087 - 1001BDBE: 83 C4 0C add esp,0Ch - 1001BDC1: 83 F8 FF cmp eax,0FFFFFFFFh - 1001BDC4: 74 36 je 1001BDFC - 1001BDC6: 99 cdq - 1001BDC7: 2B F0 sub esi,eax - 1001BDC9: 1B FA sbb edi,edx - 1001BDCB: 78 06 js 1001BDD3 - 1001BDCD: 7F D3 jg 1001BDA2 - 1001BDCF: 85 F6 test esi,esi - 1001BDD1: 77 CF ja 1001BDA2 - 1001BDD3: 8B 75 F0 mov esi,dword ptr [ebp-10h] - 1001BDD6: FF 75 F8 push dword ptr [ebp-8] - 1001BDD9: FF 75 08 push dword ptr [ebp+8] - 1001BDDC: E8 46 01 00 00 call 1001BF27 - 1001BDE1: 59 pop ecx - 1001BDE2: 59 pop ecx - 1001BDE3: FF 75 FC push dword ptr [ebp-4] - 1001BDE6: 6A 00 push 0 - 1001BDE8: FF 15 64 F1 01 10 call dword ptr ds:[1001F164h] - 1001BDEE: 50 push eax - 1001BDEF: FF 15 5C F0 01 10 call dword ptr ds:[1001F05Ch] - 1001BDF5: 33 DB xor ebx,ebx - 1001BDF7: E9 86 00 00 00 jmp 1001BE82 - 1001BDFC: E8 5B 32 FF FF call 1000F05C - 1001BE01: 83 38 05 cmp dword ptr [eax],5 - 1001BE04: 75 0B jne 1001BE11 - 1001BE06: E8 3E 32 FF FF call 1000F049 - 1001BE0B: C7 00 0D 00 00 00 mov dword ptr [eax],0Dh - 1001BE11: 83 CE FF or esi,0FFFFFFFFh - 1001BE14: 89 75 F4 mov dword ptr [ebp-0Ch],esi - 1001BE17: EB BD jmp 1001BDD6 - 1001BE19: 3B FB cmp edi,ebx - 1001BE1B: 7F 71 jg 1001BE8E - 1001BE1D: 7C 04 jl 1001BE23 - 1001BE1F: 3B F3 cmp esi,ebx - 1001BE21: 73 6B jae 1001BE8E - 1001BE23: 53 push ebx - 1001BE24: FF 75 10 push dword ptr [ebp+10h] - 1001BE27: FF 75 0C push dword ptr [ebp+0Ch] - 1001BE2A: FF 75 08 push dword ptr [ebp+8] - 1001BE2D: E8 B7 B0 FF FF call 10016EE9 - 1001BE32: 23 C2 and eax,edx - 1001BE34: 83 C4 10 add esp,10h - 1001BE37: 83 F8 FF cmp eax,0FFFFFFFFh - 1001BE3A: 0F 84 44 FF FF FF je 1001BD84 - 1001BE40: FF 75 08 push dword ptr [ebp+8] - 1001BE43: E8 BE C2 FF FF call 10018106 - 1001BE48: 59 pop ecx - 1001BE49: 50 push eax - 1001BE4A: FF 15 60 F1 01 10 call dword ptr ds:[1001F160h] - 1001BE50: F7 D8 neg eax - 1001BE52: 1B C0 sbb eax,eax - 1001BE54: F7 D8 neg eax - 1001BE56: 48 dec eax - 1001BE57: 99 cdq - 1001BE58: 89 45 F0 mov dword ptr [ebp-10h],eax - 1001BE5B: 23 C2 and eax,edx - 1001BE5D: 89 55 F4 mov dword ptr [ebp-0Ch],edx - 1001BE60: 83 F8 FF cmp eax,0FFFFFFFFh - 1001BE63: 75 29 jne 1001BE8E - 1001BE65: E8 DF 31 FF FF call 1000F049 - 1001BE6A: C7 00 0D 00 00 00 mov dword ptr [eax],0Dh - 1001BE70: E8 E7 31 FF FF call 1000F05C - 1001BE75: 8B F0 mov esi,eax - 1001BE77: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 1001BE7D: 89 06 mov dword ptr [esi],eax - 1001BE7F: 8B 75 F0 mov esi,dword ptr [ebp-10h] - 1001BE82: 23 75 F4 and esi,dword ptr [ebp-0Ch] - 1001BE85: 83 FE FF cmp esi,0FFFFFFFFh - 1001BE88: 0F 84 F6 FE FF FF je 1001BD84 - 1001BE8E: 53 push ebx - 1001BE8F: FF 75 EC push dword ptr [ebp-14h] - 1001BE92: FF 75 E8 push dword ptr [ebp-18h] - 1001BE95: FF 75 08 push dword ptr [ebp+8] - 1001BE98: E8 4C B0 FF FF call 10016EE9 - 1001BE9D: 23 C2 and eax,edx - 1001BE9F: 83 C4 10 add esp,10h - 1001BEA2: 83 F8 FF cmp eax,0FFFFFFFFh - 1001BEA5: 0F 84 D9 FE FF FF je 1001BD84 - 1001BEAB: 33 C0 xor eax,eax - 1001BEAD: E9 D9 FE FF FF jmp 1001BD8B - 1001BEB2: 8B FF mov edi,edi - 1001BEB4: 55 push ebp - 1001BEB5: 8B EC mov ebp,esp - 1001BEB7: 56 push esi - 1001BEB8: 8B 75 08 mov esi,dword ptr [ebp+8] - 1001BEBB: 56 push esi - 1001BEBC: E8 45 C2 FF FF call 10018106 - 1001BEC1: 59 pop ecx - 1001BEC2: 83 F8 FF cmp eax,0FFFFFFFFh - 1001BEC5: 75 10 jne 1001BED7 - 1001BEC7: E8 7D 31 FF FF call 1000F049 - 1001BECC: C7 00 09 00 00 00 mov dword ptr [eax],9 - 1001BED2: 83 C8 FF or eax,0FFFFFFFFh - 1001BED5: EB 4D jmp 1001BF24 - 1001BED7: 57 push edi - 1001BED8: FF 75 10 push dword ptr [ebp+10h] - 1001BEDB: 6A 00 push 0 - 1001BEDD: FF 75 0C push dword ptr [ebp+0Ch] - 1001BEE0: 50 push eax - 1001BEE1: FF 15 2C F1 01 10 call dword ptr ds:[1001F12Ch] - 1001BEE7: 8B F8 mov edi,eax - 1001BEE9: 83 FF FF cmp edi,0FFFFFFFFh - 1001BEEC: 75 08 jne 1001BEF6 - 1001BEEE: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 1001BEF4: EB 02 jmp 1001BEF8 - 1001BEF6: 33 C0 xor eax,eax - 1001BEF8: 85 C0 test eax,eax - 1001BEFA: 74 0C je 1001BF08 - 1001BEFC: 50 push eax - 1001BEFD: E8 6D 31 FF FF call 1000F06F - 1001BF02: 59 pop ecx - 1001BF03: 83 C8 FF or eax,0FFFFFFFFh - 1001BF06: EB 1B jmp 1001BF23 - 1001BF08: 8B C6 mov eax,esi - 1001BF0A: C1 F8 05 sar eax,5 - 1001BF0D: 8B 04 85 00 6C 02 mov eax,dword ptr [eax*4+10026C00h] - 10 - 1001BF14: 83 E6 1F and esi,1Fh - 1001BF17: C1 E6 06 shl esi,6 - 1001BF1A: 8D 44 30 04 lea eax,[eax+esi+4] - 1001BF1E: 80 20 FD and byte ptr [eax],0FDh - 1001BF21: 8B C7 mov eax,edi - 1001BF23: 5F pop edi - 1001BF24: 5E pop esi - 1001BF25: 5D pop ebp - 1001BF26: C3 ret - 1001BF27: 8B FF mov edi,edi - 1001BF29: 55 push ebp - 1001BF2A: 8B EC mov ebp,esp - 1001BF2C: 53 push ebx - 1001BF2D: 8B 5D 0C mov ebx,dword ptr [ebp+0Ch] - 1001BF30: 56 push esi - 1001BF31: 8B 75 08 mov esi,dword ptr [ebp+8] - 1001BF34: 8B C6 mov eax,esi - 1001BF36: C1 F8 05 sar eax,5 - 1001BF39: 8D 14 85 00 6C 02 lea edx,[eax*4+10026C00h] - 10 - 1001BF40: 8B 02 mov eax,dword ptr [edx] - 1001BF42: 83 E6 1F and esi,1Fh - 1001BF45: C1 E6 06 shl esi,6 - 1001BF48: 8D 0C 30 lea ecx,[eax+esi] - 1001BF4B: 8A 41 24 mov al,byte ptr [ecx+24h] - 1001BF4E: 02 C0 add al,al - 1001BF50: 57 push edi - 1001BF51: 0F B6 79 04 movzx edi,byte ptr [ecx+4] - 1001BF55: 0F BE C0 movsx eax,al - 1001BF58: 81 E7 80 00 00 00 and edi,80h - 1001BF5E: D1 F8 sar eax,1 - 1001BF60: 81 FB 00 40 00 00 cmp ebx,4000h - 1001BF66: 74 50 je 1001BFB8 - 1001BF68: 81 FB 00 80 00 00 cmp ebx,8000h - 1001BF6E: 74 42 je 1001BFB2 - 1001BF70: 81 FB 00 00 01 00 cmp ebx,10000h - 1001BF76: 74 26 je 1001BF9E - 1001BF78: 81 FB 00 00 02 00 cmp ebx,20000h - 1001BF7E: 74 1E je 1001BF9E - 1001BF80: 81 FB 00 00 04 00 cmp ebx,40000h - 1001BF86: 75 3D jne 1001BFC5 - 1001BF88: 80 49 04 80 or byte ptr [ecx+4],80h - 1001BF8C: 8B 0A mov ecx,dword ptr [edx] - 1001BF8E: 8D 4C 31 24 lea ecx,[ecx+esi+24h] - 1001BF92: 8A 11 mov dl,byte ptr [ecx] - 1001BF94: 80 E2 81 and dl,81h - 1001BF97: 80 CA 01 or dl,1 - 1001BF9A: 88 11 mov byte ptr [ecx],dl - 1001BF9C: EB 27 jmp 1001BFC5 - 1001BF9E: 80 49 04 80 or byte ptr [ecx+4],80h - 1001BFA2: 8B 0A mov ecx,dword ptr [edx] - 1001BFA4: 8D 4C 31 24 lea ecx,[ecx+esi+24h] - 1001BFA8: 8A 11 mov dl,byte ptr [ecx] - 1001BFAA: 80 E2 82 and dl,82h - 1001BFAD: 80 CA 02 or dl,2 - 1001BFB0: EB E8 jmp 1001BF9A - 1001BFB2: 80 61 04 7F and byte ptr [ecx+4],7Fh - 1001BFB6: EB 0D jmp 1001BFC5 - 1001BFB8: 80 49 04 80 or byte ptr [ecx+4],80h - 1001BFBC: 8B 0A mov ecx,dword ptr [edx] - 1001BFBE: 8D 4C 31 24 lea ecx,[ecx+esi+24h] - 1001BFC2: 80 21 80 and byte ptr [ecx],80h - 1001BFC5: 85 FF test edi,edi - 1001BFC7: 5F pop edi - 1001BFC8: 5E pop esi - 1001BFC9: 5B pop ebx - 1001BFCA: 75 07 jne 1001BFD3 - 1001BFCC: B8 00 80 00 00 mov eax,8000h - 1001BFD1: 5D pop ebp - 1001BFD2: C3 ret - 1001BFD3: F7 D8 neg eax - 1001BFD5: 1B C0 sbb eax,eax - 1001BFD7: 25 00 C0 00 00 and eax,0C000h - 1001BFDC: 05 00 40 00 00 add eax,4000h - 1001BFE1: 5D pop ebp - 1001BFE2: C3 ret - 1001BFE3: 8B FF mov edi,edi - 1001BFE5: 55 push ebp - 1001BFE6: 8B EC mov ebp,esp - 1001BFE8: 8B 45 08 mov eax,dword ptr [ebp+8] - 1001BFEB: 56 push esi - 1001BFEC: 33 F6 xor esi,esi - 1001BFEE: 3B C6 cmp eax,esi - 1001BFF0: 75 1D jne 1001C00F - 1001BFF2: E8 52 30 FF FF call 1000F049 - 1001BFF7: 56 push esi - 1001BFF8: 56 push esi - 1001BFF9: 56 push esi - 1001BFFA: 56 push esi - 1001BFFB: 56 push esi - 1001BFFC: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1001C002: E8 DA 2F FF FF call 1000EFE1 - 1001C007: 83 C4 14 add esp,14h - 1001C00A: 6A 16 push 16h - 1001C00C: 58 pop eax - 1001C00D: EB 0A jmp 1001C019 - 1001C00F: 8B 0D D8 6B 02 10 mov ecx,dword ptr ds:[10026BD8h] - 1001C015: 89 08 mov dword ptr [eax],ecx - 1001C017: 33 C0 xor eax,eax - 1001C019: 5E pop esi - 1001C01A: 5D pop ebp - 1001C01B: C3 ret - 1001C01C: 8B FF mov edi,edi - 1001C01E: 55 push ebp - 1001C01F: 8B EC mov ebp,esp - 1001C021: B8 FF FF 00 00 mov eax,0FFFFh - 1001C026: 8B C8 mov ecx,eax - 1001C028: 83 EC 14 sub esp,14h - 1001C02B: 66 39 4D 08 cmp word ptr [ebp+8],cx - 1001C02F: 0F 84 9A 00 00 00 je 1001C0CF - 1001C035: 53 push ebx - 1001C036: FF 75 0C push dword ptr [ebp+0Ch] - 1001C039: 8D 4D EC lea ecx,[ebp-14h] - 1001C03C: E8 BB E6 FE FF call 1000A6FC - 1001C041: 8B 4D EC mov ecx,dword ptr [ebp-14h] - 1001C044: 8B 51 14 mov edx,dword ptr [ecx+14h] - 1001C047: 33 DB xor ebx,ebx - 1001C049: 3B D3 cmp edx,ebx - 1001C04B: 75 14 jne 1001C061 - 1001C04D: 8B 45 08 mov eax,dword ptr [ebp+8] - 1001C050: 8D 48 BF lea ecx,[eax-41h] - 1001C053: 66 83 F9 19 cmp cx,19h - 1001C057: 77 03 ja 1001C05C - 1001C059: 83 C0 20 add eax,20h - 1001C05C: 0F B7 C0 movzx eax,ax - 1001C05F: EB 61 jmp 1001C0C2 - 1001C061: 56 push esi - 1001C062: B8 00 01 00 00 mov eax,100h - 1001C067: 8B F0 mov esi,eax - 1001C069: 66 39 75 08 cmp word ptr [ebp+8],si - 1001C06D: 5E pop esi - 1001C06E: 73 29 jae 1001C099 - 1001C070: 8D 45 EC lea eax,[ebp-14h] - 1001C073: 50 push eax - 1001C074: 6A 01 push 1 - 1001C076: FF 75 08 push dword ptr [ebp+8] - 1001C079: E8 FB C5 FF FF call 10018679 - 1001C07E: 83 C4 0C add esp,0Ch - 1001C081: 85 C0 test eax,eax - 1001C083: 0F B7 45 08 movzx eax,word ptr [ebp+8] - 1001C087: 74 39 je 1001C0C2 - 1001C089: 8B 4D EC mov ecx,dword ptr [ebp-14h] - 1001C08C: 8B 89 CC 00 00 00 mov ecx,dword ptr [ecx+000000CCh] - 1001C092: 66 0F B6 04 01 movzx ax,byte ptr [ecx+eax] - 1001C097: EB C3 jmp 1001C05C - 1001C099: FF 71 04 push dword ptr [ecx+4] - 1001C09C: 8D 4D FC lea ecx,[ebp-4] - 1001C09F: 6A 01 push 1 - 1001C0A1: 51 push ecx - 1001C0A2: 6A 01 push 1 - 1001C0A4: 8D 4D 08 lea ecx,[ebp+8] - 1001C0A7: 51 push ecx - 1001C0A8: 50 push eax - 1001C0A9: 52 push edx - 1001C0AA: 8D 45 EC lea eax,[ebp-14h] - 1001C0AD: 50 push eax - 1001C0AE: E8 96 62 FF FF call 10012349 - 1001C0B3: 83 C4 20 add esp,20h - 1001C0B6: 85 C0 test eax,eax - 1001C0B8: 0F B7 45 08 movzx eax,word ptr [ebp+8] - 1001C0BC: 74 04 je 1001C0C2 - 1001C0BE: 0F B7 45 FC movzx eax,word ptr [ebp-4] - 1001C0C2: 38 5D F8 cmp byte ptr [ebp-8],bl - 1001C0C5: 74 07 je 1001C0CE - 1001C0C7: 8B 4D F4 mov ecx,dword ptr [ebp-0Ch] - 1001C0CA: 83 61 70 FD and dword ptr [ecx+70h],0FFFFFFFDh - 1001C0CE: 5B pop ebx - 1001C0CF: C9 leave - 1001C0D0: C3 ret - 1001C0D1: 8B FF mov edi,edi - 1001C0D3: 55 push ebp - 1001C0D4: 8B EC mov ebp,esp - 1001C0D6: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1001C0D9: EB 07 jmp 1001C0E2 - 1001C0DB: 49 dec ecx - 1001C0DC: 80 38 00 cmp byte ptr [eax],0 - 1001C0DF: 74 06 je 1001C0E7 - 1001C0E1: 40 inc eax - 1001C0E2: 85 C9 test ecx,ecx - 1001C0E4: 75 F5 jne 1001C0DB - 1001C0E6: 49 dec ecx - 1001C0E7: 8B 45 08 mov eax,dword ptr [ebp+8] - 1001C0EA: 2B C1 sub eax,ecx - 1001C0EC: 48 dec eax - 1001C0ED: 5D pop ebp - 1001C0EE: C3 ret - 1001C0EF: 8B FF mov edi,edi - 1001C0F1: 55 push ebp - 1001C0F2: 8B EC mov ebp,esp - 1001C0F4: 83 EC 2C sub esp,2Ch - 1001C0F7: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1001C0FC: 33 C5 xor eax,ebp - 1001C0FE: 89 45 FC mov dword ptr [ebp-4],eax - 1001C101: 8B 45 14 mov eax,dword ptr [ebp+14h] - 1001C104: 53 push ebx - 1001C105: 56 push esi - 1001C106: 57 push edi - 1001C107: 33 FF xor edi,edi - 1001C109: 8B DA mov ebx,edx - 1001C10B: 8B F1 mov esi,ecx - 1001C10D: 89 5D DC mov dword ptr [ebp-24h],ebx - 1001C110: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1001C113: 39 3D D4 6B 02 10 cmp dword ptr ds:[10026BD4h],edi - 1001C119: 75 38 jne 1001C153 - 1001C11B: 6A 01 push 1 - 1001C11D: B8 38 09 02 10 mov eax,10020938h - 1001C122: 50 push eax - 1001C123: 6A 01 push 1 - 1001C125: 50 push eax - 1001C126: 57 push edi - 1001C127: 57 push edi - 1001C128: FF 15 50 F0 01 10 call dword ptr ds:[1001F050h] - 1001C12E: 85 C0 test eax,eax - 1001C130: 74 0C je 1001C13E - 1001C132: C7 05 D4 6B 02 10 mov dword ptr ds:[10026BD4h],1 - 01 00 00 00 - 1001C13C: EB 15 jmp 1001C153 - 1001C13E: FF 15 34 F0 01 10 call dword ptr ds:[1001F034h] - 1001C144: 83 F8 78 cmp eax,78h - 1001C147: 75 0A jne 1001C153 - 1001C149: C7 05 D4 6B 02 10 mov dword ptr ds:[10026BD4h],2 - 02 00 00 00 - 1001C153: 39 7D 10 cmp dword ptr [ebp+10h],edi - 1001C156: 7E 26 jle 1001C17E - 1001C158: FF 75 10 push dword ptr [ebp+10h] - 1001C15B: 8B C3 mov eax,ebx - 1001C15D: E8 6F FF FF FF call 1001C0D1 - 1001C162: 59 pop ecx - 1001C163: 89 45 10 mov dword ptr [ebp+10h],eax - 1001C166: 8B 55 18 mov edx,dword ptr [ebp+18h] - 1001C169: 3B D7 cmp edx,edi - 1001C16B: 7E 1E jle 1001C18B - 1001C16D: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 1001C170: 52 push edx - 1001C171: E8 5B FF FF FF call 1001C0D1 - 1001C176: 8B D0 mov edx,eax - 1001C178: 59 pop ecx - 1001C179: 89 55 18 mov dword ptr [ebp+18h],edx - 1001C17C: EB 12 jmp 1001C190 - 1001C17E: 83 7D 10 FF cmp dword ptr [ebp+10h],0FFFFFFFFh - 1001C182: 7D E2 jge 1001C166 - 1001C184: 33 C0 xor eax,eax - 1001C186: E9 C2 02 00 00 jmp 1001C44D - 1001C18B: 83 FA FF cmp edx,0FFFFFFFFh - 1001C18E: 7C F4 jl 1001C184 - 1001C190: 8B 0D D4 6B 02 10 mov ecx,dword ptr ds:[10026BD4h] - 1001C196: 83 F9 02 cmp ecx,2 - 1001C199: 0F 84 F9 01 00 00 je 1001C398 - 1001C19F: 3B CF cmp ecx,edi - 1001C1A1: 0F 84 F1 01 00 00 je 1001C398 - 1001C1A7: 33 C0 xor eax,eax - 1001C1A9: 40 inc eax - 1001C1AA: 3B C8 cmp ecx,eax - 1001C1AC: 75 D6 jne 1001C184 - 1001C1AE: 89 7D D8 mov dword ptr [ebp-28h],edi - 1001C1B1: 39 7D 1C cmp dword ptr [ebp+1Ch],edi - 1001C1B4: 75 08 jne 1001C1BE - 1001C1B6: 8B 0E mov ecx,dword ptr [esi] - 1001C1B8: 8B 49 04 mov ecx,dword ptr [ecx+4] - 1001C1BB: 89 4D 1C mov dword ptr [ebp+1Ch],ecx - 1001C1BE: 39 7D 10 cmp dword ptr [ebp+10h],edi - 1001C1C1: 74 08 je 1001C1CB - 1001C1C3: 3B D7 cmp edx,edi - 1001C1C5: 0F 85 9A 00 00 00 jne 1001C265 - 1001C1CB: 39 55 10 cmp dword ptr [ebp+10h],edx - 1001C1CE: 75 08 jne 1001C1D8 - 1001C1D0: 6A 02 push 2 - 1001C1D2: 58 pop eax - 1001C1D3: E9 75 02 00 00 jmp 1001C44D - 1001C1D8: 3B D0 cmp edx,eax - 1001C1DA: 0F 8F 6D 02 00 00 jg 1001C44D - 1001C1E0: 39 45 10 cmp dword ptr [ebp+10h],eax - 1001C1E3: 7E 04 jle 1001C1E9 - 1001C1E5: 6A 03 push 3 - 1001C1E7: EB E9 jmp 1001C1D2 - 1001C1E9: 8D 45 E8 lea eax,[ebp-18h] - 1001C1EC: 50 push eax - 1001C1ED: FF 75 1C push dword ptr [ebp+1Ch] - 1001C1F0: FF 15 DC F0 01 10 call dword ptr ds:[1001F0DCh] - 1001C1F6: 85 C0 test eax,eax - 1001C1F8: 74 8A je 1001C184 - 1001C1FA: 39 7D 10 cmp dword ptr [ebp+10h],edi - 1001C1FD: 7E 29 jle 1001C228 - 1001C1FF: 83 7D E8 02 cmp dword ptr [ebp-18h],2 - 1001C203: 72 E0 jb 1001C1E5 - 1001C205: 80 7D EE 00 cmp byte ptr [ebp-12h],0 - 1001C209: 8D 45 EE lea eax,[ebp-12h] - 1001C20C: 74 D7 je 1001C1E5 - 1001C20E: 8A 50 01 mov dl,byte ptr [eax+1] - 1001C211: 84 D2 test dl,dl - 1001C213: 74 D0 je 1001C1E5 - 1001C215: 8A 0B mov cl,byte ptr [ebx] - 1001C217: 3A 08 cmp cl,byte ptr [eax] - 1001C219: 72 04 jb 1001C21F - 1001C21B: 3A CA cmp cl,dl - 1001C21D: 76 B1 jbe 1001C1D0 - 1001C21F: 40 inc eax - 1001C220: 40 inc eax - 1001C221: 80 38 00 cmp byte ptr [eax],0 - 1001C224: 75 E8 jne 1001C20E - 1001C226: EB BD jmp 1001C1E5 - 1001C228: 39 7D 18 cmp dword ptr [ebp+18h],edi - 1001C22B: 7E 38 jle 1001C265 - 1001C22D: 83 7D E8 02 cmp dword ptr [ebp-18h],2 - 1001C231: 73 08 jae 1001C23B - 1001C233: 33 C0 xor eax,eax - 1001C235: 40 inc eax - 1001C236: E9 12 02 00 00 jmp 1001C44D - 1001C23B: 80 7D EE 00 cmp byte ptr [ebp-12h],0 - 1001C23F: 8D 45 EE lea eax,[ebp-12h] - 1001C242: 74 EF je 1001C233 - 1001C244: 8A 50 01 mov dl,byte ptr [eax+1] - 1001C247: 84 D2 test dl,dl - 1001C249: 74 E8 je 1001C233 - 1001C24B: 8B 4D E4 mov ecx,dword ptr [ebp-1Ch] - 1001C24E: 8A 09 mov cl,byte ptr [ecx] - 1001C250: 3A 08 cmp cl,byte ptr [eax] - 1001C252: 72 08 jb 1001C25C - 1001C254: 3A CA cmp cl,dl - 1001C256: 0F 86 74 FF FF FF jbe 1001C1D0 - 1001C25C: 40 inc eax - 1001C25D: 40 inc eax - 1001C25E: 80 38 00 cmp byte ptr [eax],0 - 1001C261: 75 E1 jne 1001C244 - 1001C263: EB CE jmp 1001C233 - 1001C265: 8B 35 38 F1 01 10 mov esi,dword ptr ds:[1001F138h] - 1001C26B: 57 push edi - 1001C26C: 57 push edi - 1001C26D: FF 75 10 push dword ptr [ebp+10h] - 1001C270: 53 push ebx - 1001C271: 6A 09 push 9 - 1001C273: FF 75 1C push dword ptr [ebp+1Ch] - 1001C276: FF D6 call esi - 1001C278: 8B D8 mov ebx,eax - 1001C27A: 89 5D D4 mov dword ptr [ebp-2Ch],ebx - 1001C27D: 3B DF cmp ebx,edi - 1001C27F: 0F 84 FF FE FF FF je 1001C184 - 1001C285: BF 00 04 00 00 mov edi,400h - 1001C28A: 85 DB test ebx,ebx - 1001C28C: 7E 40 jle 1001C2CE - 1001C28E: 6A E0 push 0FFFFFFE0h - 1001C290: 33 D2 xor edx,edx - 1001C292: 58 pop eax - 1001C293: F7 F3 div eax,ebx - 1001C295: 83 F8 02 cmp eax,2 - 1001C298: 72 34 jb 1001C2CE - 1001C29A: 8D 44 1B 08 lea eax,[ebx+ebx+8] - 1001C29E: 3B C7 cmp eax,edi - 1001C2A0: 77 13 ja 1001C2B5 - 1001C2A2: E8 19 61 FF FF call 100123C0 - 1001C2A7: 8B C4 mov eax,esp - 1001C2A9: 85 C0 test eax,eax - 1001C2AB: 74 1C je 1001C2C9 - 1001C2AD: C7 00 CC CC 00 00 mov dword ptr [eax],0CCCCh - 1001C2B3: EB 11 jmp 1001C2C6 - 1001C2B5: 50 push eax - 1001C2B6: E8 7B 1A FF FF call 1000DD36 - 1001C2BB: 59 pop ecx - 1001C2BC: 85 C0 test eax,eax - 1001C2BE: 74 09 je 1001C2C9 - 1001C2C0: C7 00 DD DD 00 00 mov dword ptr [eax],0DDDDh - 1001C2C6: 83 C0 08 add eax,8 - 1001C2C9: 89 45 E0 mov dword ptr [ebp-20h],eax - 1001C2CC: EB 04 jmp 1001C2D2 - 1001C2CE: 83 65 E0 00 and dword ptr [ebp-20h],0 - 1001C2D2: 83 7D E0 00 cmp dword ptr [ebp-20h],0 - 1001C2D6: 0F 84 A8 FE FF FF je 1001C184 - 1001C2DC: 53 push ebx - 1001C2DD: FF 75 E0 push dword ptr [ebp-20h] - 1001C2E0: FF 75 10 push dword ptr [ebp+10h] - 1001C2E3: FF 75 DC push dword ptr [ebp-24h] - 1001C2E6: 6A 01 push 1 - 1001C2E8: FF 75 1C push dword ptr [ebp+1Ch] - 1001C2EB: FF D6 call esi - 1001C2ED: 85 C0 test eax,eax - 1001C2EF: 0F 84 92 00 00 00 je 1001C387 - 1001C2F5: 6A 00 push 0 - 1001C2F7: 6A 00 push 0 - 1001C2F9: FF 75 18 push dword ptr [ebp+18h] - 1001C2FC: FF 75 E4 push dword ptr [ebp-1Ch] - 1001C2FF: 6A 09 push 9 - 1001C301: FF 75 1C push dword ptr [ebp+1Ch] - 1001C304: FF D6 call esi - 1001C306: 8B D8 mov ebx,eax - 1001C308: 85 DB test ebx,ebx - 1001C30A: 74 7B je 1001C387 - 1001C30C: 7E 42 jle 1001C350 - 1001C30E: 6A E0 push 0FFFFFFE0h - 1001C310: 33 D2 xor edx,edx - 1001C312: 58 pop eax - 1001C313: F7 F3 div eax,ebx - 1001C315: 83 F8 02 cmp eax,2 - 1001C318: 72 36 jb 1001C350 - 1001C31A: 8D 44 1B 08 lea eax,[ebx+ebx+8] - 1001C31E: 3B C7 cmp eax,edi - 1001C320: 77 16 ja 1001C338 - 1001C322: E8 99 60 FF FF call 100123C0 - 1001C327: 8B FC mov edi,esp - 1001C329: 85 FF test edi,edi - 1001C32B: 74 5A je 1001C387 - 1001C32D: C7 07 CC CC 00 00 mov dword ptr [edi],0CCCCh - 1001C333: 83 C7 08 add edi,8 - 1001C336: EB 1A jmp 1001C352 - 1001C338: 50 push eax - 1001C339: E8 F8 19 FF FF call 1000DD36 - 1001C33E: 59 pop ecx - 1001C33F: 85 C0 test eax,eax - 1001C341: 74 09 je 1001C34C - 1001C343: C7 00 DD DD 00 00 mov dword ptr [eax],0DDDDh - 1001C349: 83 C0 08 add eax,8 - 1001C34C: 8B F8 mov edi,eax - 1001C34E: EB 02 jmp 1001C352 - 1001C350: 33 FF xor edi,edi - 1001C352: 85 FF test edi,edi - 1001C354: 74 31 je 1001C387 - 1001C356: 53 push ebx - 1001C357: 57 push edi - 1001C358: FF 75 18 push dword ptr [ebp+18h] - 1001C35B: FF 75 E4 push dword ptr [ebp-1Ch] - 1001C35E: 6A 01 push 1 - 1001C360: FF 75 1C push dword ptr [ebp+1Ch] - 1001C363: FF D6 call esi - 1001C365: 85 C0 test eax,eax - 1001C367: 74 17 je 1001C380 - 1001C369: 53 push ebx - 1001C36A: 57 push edi - 1001C36B: FF 75 D4 push dword ptr [ebp-2Ch] - 1001C36E: FF 75 E0 push dword ptr [ebp-20h] - 1001C371: FF 75 0C push dword ptr [ebp+0Ch] - 1001C374: FF 75 08 push dword ptr [ebp+8] - 1001C377: FF 15 50 F0 01 10 call dword ptr ds:[1001F050h] - 1001C37D: 89 45 D8 mov dword ptr [ebp-28h],eax - 1001C380: 57 push edi - 1001C381: E8 56 E3 FE FF call 1000A6DC - 1001C386: 59 pop ecx - 1001C387: FF 75 E0 push dword ptr [ebp-20h] - 1001C38A: E8 4D E3 FE FF call 1000A6DC - 1001C38F: 8B 45 D8 mov eax,dword ptr [ebp-28h] - 1001C392: 59 pop ecx - 1001C393: E9 B5 00 00 00 jmp 1001C44D - 1001C398: 33 FF xor edi,edi - 1001C39A: 33 DB xor ebx,ebx - 1001C39C: 39 7D 08 cmp dword ptr [ebp+8],edi - 1001C39F: 75 08 jne 1001C3A9 - 1001C3A1: 8B 06 mov eax,dword ptr [esi] - 1001C3A3: 8B 40 14 mov eax,dword ptr [eax+14h] - 1001C3A6: 89 45 08 mov dword ptr [ebp+8],eax - 1001C3A9: 39 7D 1C cmp dword ptr [ebp+1Ch],edi - 1001C3AC: 75 08 jne 1001C3B6 - 1001C3AE: 8B 06 mov eax,dword ptr [esi] - 1001C3B0: 8B 40 04 mov eax,dword ptr [eax+4] - 1001C3B3: 89 45 1C mov dword ptr [ebp+1Ch],eax - 1001C3B6: FF 75 08 push dword ptr [ebp+8] - 1001C3B9: E8 90 EF FF FF call 1001B34E - 1001C3BE: 8B F0 mov esi,eax - 1001C3C0: 59 pop ecx - 1001C3C1: 83 FE FF cmp esi,0FFFFFFFFh - 1001C3C4: 0F 84 BA FD FF FF je 1001C184 - 1001C3CA: 3B 75 1C cmp esi,dword ptr [ebp+1Ch] - 1001C3CD: 74 50 je 1001C41F - 1001C3CF: 6A 00 push 0 - 1001C3D1: 6A 00 push 0 - 1001C3D3: 8D 45 10 lea eax,[ebp+10h] - 1001C3D6: 50 push eax - 1001C3D7: FF 75 DC push dword ptr [ebp-24h] - 1001C3DA: 56 push esi - 1001C3DB: FF 75 1C push dword ptr [ebp+1Ch] - 1001C3DE: E8 B4 EF FF FF call 1001B397 - 1001C3E3: 8B D8 mov ebx,eax - 1001C3E5: 83 C4 18 add esp,18h - 1001C3E8: 85 DB test ebx,ebx - 1001C3EA: 0F 84 94 FD FF FF je 1001C184 - 1001C3F0: 6A 00 push 0 - 1001C3F2: 6A 00 push 0 - 1001C3F4: 8D 45 18 lea eax,[ebp+18h] - 1001C3F7: 50 push eax - 1001C3F8: FF 75 E4 push dword ptr [ebp-1Ch] - 1001C3FB: 56 push esi - 1001C3FC: FF 75 1C push dword ptr [ebp+1Ch] - 1001C3FF: E8 93 EF FF FF call 1001B397 - 1001C404: 8B F8 mov edi,eax - 1001C406: 83 C4 18 add esp,18h - 1001C409: 85 FF test edi,edi - 1001C40B: 75 0C jne 1001C419 - 1001C40D: 53 push ebx - 1001C40E: E8 21 DF FE FF call 1000A334 - 1001C413: 59 pop ecx - 1001C414: E9 6B FD FF FF jmp 1001C184 - 1001C419: 89 5D DC mov dword ptr [ebp-24h],ebx - 1001C41C: 89 7D E4 mov dword ptr [ebp-1Ch],edi - 1001C41F: FF 75 18 push dword ptr [ebp+18h] - 1001C422: FF 75 E4 push dword ptr [ebp-1Ch] - 1001C425: FF 75 10 push dword ptr [ebp+10h] - 1001C428: FF 75 DC push dword ptr [ebp-24h] - 1001C42B: FF 75 0C push dword ptr [ebp+0Ch] - 1001C42E: FF 75 08 push dword ptr [ebp+8] - 1001C431: FF 15 68 F1 01 10 call dword ptr ds:[1001F168h] - 1001C437: 8B F0 mov esi,eax - 1001C439: 85 DB test ebx,ebx - 1001C43B: 74 0E je 1001C44B - 1001C43D: 53 push ebx - 1001C43E: E8 F1 DE FE FF call 1000A334 - 1001C443: 57 push edi - 1001C444: E8 EB DE FE FF call 1000A334 - 1001C449: 59 pop ecx - 1001C44A: 59 pop ecx - 1001C44B: 8B C6 mov eax,esi - 1001C44D: 8D 65 C8 lea esp,[ebp-38h] - 1001C450: 5F pop edi - 1001C451: 5E pop esi - 1001C452: 5B pop ebx - 1001C453: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1001C456: 33 CD xor ecx,ebp - 1001C458: E8 3E DC FE FF call 1000A09B - 1001C45D: C9 leave - 1001C45E: C3 ret - 1001C45F: 8B FF mov edi,edi - 1001C461: 55 push ebp - 1001C462: 8B EC mov ebp,esp - 1001C464: 83 EC 10 sub esp,10h - 1001C467: FF 75 08 push dword ptr [ebp+8] - 1001C46A: 8D 4D F0 lea ecx,[ebp-10h] - 1001C46D: E8 8A E2 FE FF call 1000A6FC - 1001C472: FF 75 24 push dword ptr [ebp+24h] - 1001C475: 8B 55 14 mov edx,dword ptr [ebp+14h] - 1001C478: FF 75 20 push dword ptr [ebp+20h] - 1001C47B: 8D 4D F0 lea ecx,[ebp-10h] - 1001C47E: FF 75 1C push dword ptr [ebp+1Ch] - 1001C481: FF 75 18 push dword ptr [ebp+18h] - 1001C484: FF 75 10 push dword ptr [ebp+10h] - 1001C487: FF 75 0C push dword ptr [ebp+0Ch] - 1001C48A: E8 60 FC FF FF call 1001C0EF - 1001C48F: 83 C4 18 add esp,18h - 1001C492: 80 7D FC 00 cmp byte ptr [ebp-4],0 - 1001C496: 74 07 je 1001C49F - 1001C498: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 1001C49B: 83 61 70 FD and dword ptr [ecx+70h],0FFFFFFFDh - 1001C49F: C9 leave - 1001C4A0: C3 ret - 1001C4A1: 8B FF mov edi,edi - 1001C4A3: 55 push ebp - 1001C4A4: 8B EC mov ebp,esp - 1001C4A6: 83 EC 10 sub esp,10h - 1001C4A9: 53 push ebx - 1001C4AA: FF 75 14 push dword ptr [ebp+14h] - 1001C4AD: 8D 4D F0 lea ecx,[ebp-10h] - 1001C4B0: E8 47 E2 FE FF call 1000A6FC - 1001C4B5: 8B 55 10 mov edx,dword ptr [ebp+10h] - 1001C4B8: 33 DB xor ebx,ebx - 1001C4BA: 3B D3 cmp edx,ebx - 1001C4BC: 75 13 jne 1001C4D1 - 1001C4BE: 38 5D FC cmp byte ptr [ebp-4],bl - 1001C4C1: 74 07 je 1001C4CA - 1001C4C3: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1001C4C6: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1001C4CA: 33 C0 xor eax,eax - 1001C4CC: E9 C7 00 00 00 jmp 1001C598 - 1001C4D1: 39 5D 08 cmp dword ptr [ebp+8],ebx - 1001C4D4: 75 2E jne 1001C504 - 1001C4D6: E8 6E 2B FF FF call 1000F049 - 1001C4DB: 53 push ebx - 1001C4DC: 53 push ebx - 1001C4DD: 53 push ebx - 1001C4DE: 53 push ebx - 1001C4DF: 53 push ebx - 1001C4E0: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1001C4E6: E8 F6 2A FF FF call 1000EFE1 - 1001C4EB: 83 C4 14 add esp,14h - 1001C4EE: 38 5D FC cmp byte ptr [ebp-4],bl - 1001C4F1: 74 07 je 1001C4FA - 1001C4F3: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1001C4F6: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1001C4FA: B8 FF FF FF 7F mov eax,7FFFFFFFh - 1001C4FF: E9 94 00 00 00 jmp 1001C598 - 1001C504: 39 5D 0C cmp dword ptr [ebp+0Ch],ebx - 1001C507: 74 CD je 1001C4D6 - 1001C509: 56 push esi - 1001C50A: BE FF FF FF 7F mov esi,7FFFFFFFh - 1001C50F: 3B D6 cmp edx,esi - 1001C511: 76 1A jbe 1001C52D - 1001C513: E8 31 2B FF FF call 1000F049 - 1001C518: 53 push ebx - 1001C519: 53 push ebx - 1001C51A: 53 push ebx - 1001C51B: 53 push ebx - 1001C51C: 53 push ebx - 1001C51D: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1001C523: E8 B9 2A FF FF call 1000EFE1 - 1001C528: 83 C4 14 add esp,14h - 1001C52B: EB 4B jmp 1001C578 - 1001C52D: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 1001C530: 8B 48 10 mov ecx,dword ptr [eax+10h] - 1001C533: 3B CB cmp ecx,ebx - 1001C535: 75 15 jne 1001C54C - 1001C537: 8D 45 F0 lea eax,[ebp-10h] - 1001C53A: 50 push eax - 1001C53B: 52 push edx - 1001C53C: FF 75 0C push dword ptr [ebp+0Ch] - 1001C53F: FF 75 08 push dword ptr [ebp+8] - 1001C542: E8 04 F0 FF FF call 1001B54B - 1001C547: 83 C4 10 add esp,10h - 1001C54A: EB 3F jmp 1001C58B - 1001C54C: FF 70 08 push dword ptr [eax+8] - 1001C54F: 8D 45 F0 lea eax,[ebp-10h] - 1001C552: 52 push edx - 1001C553: FF 75 0C push dword ptr [ebp+0Ch] - 1001C556: 52 push edx - 1001C557: FF 75 08 push dword ptr [ebp+8] - 1001C55A: 68 01 10 00 00 push 1001h - 1001C55F: 51 push ecx - 1001C560: 50 push eax - 1001C561: E8 F9 FE FF FF call 1001C45F - 1001C566: 83 C4 20 add esp,20h - 1001C569: 3B C3 cmp eax,ebx - 1001C56B: 75 1B jne 1001C588 - 1001C56D: E8 D7 2A FF FF call 1000F049 - 1001C572: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1001C578: 38 5D FC cmp byte ptr [ebp-4],bl - 1001C57B: 74 07 je 1001C584 - 1001C57D: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1001C580: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1001C584: 8B C6 mov eax,esi - 1001C586: EB 0F jmp 1001C597 - 1001C588: 83 C0 FE add eax,0FFFFFFFEh - 1001C58B: 38 5D FC cmp byte ptr [ebp-4],bl - 1001C58E: 74 07 je 1001C597 - 1001C590: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 1001C593: 83 61 70 FD and dword ptr [ecx+70h],0FFFFFFFDh - 1001C597: 5E pop esi - 1001C598: 5B pop ebx - 1001C599: C9 leave - 1001C59A: C3 ret - 1001C59B: 8B FF mov edi,edi - 1001C59D: 55 push ebp - 1001C59E: 8B EC mov ebp,esp - 1001C5A0: 56 push esi - 1001C5A1: 8B 35 18 6A 02 10 mov esi,dword ptr ds:[10026A18h] - 1001C5A7: EB 21 jmp 1001C5CA - 1001C5A9: 57 push edi - 1001C5AA: 50 push eax - 1001C5AB: FF 75 08 push dword ptr [ebp+8] - 1001C5AE: E8 FF E2 FF FF call 1001A8B2 - 1001C5B3: 83 C4 0C add esp,0Ch - 1001C5B6: 85 C0 test eax,eax - 1001C5B8: 75 0D jne 1001C5C7 - 1001C5BA: 8B 06 mov eax,dword ptr [esi] - 1001C5BC: 8A 04 07 mov al,byte ptr [edi+eax] - 1001C5BF: 3C 3D cmp al,3Dh - 1001C5C1: 74 1D je 1001C5E0 - 1001C5C3: 84 C0 test al,al - 1001C5C5: 74 19 je 1001C5E0 - 1001C5C7: 83 C6 04 add esi,4 - 1001C5CA: 8B 06 mov eax,dword ptr [esi] - 1001C5CC: 85 C0 test eax,eax - 1001C5CE: 75 D9 jne 1001C5A9 - 1001C5D0: 8B C6 mov eax,esi - 1001C5D2: 2B 05 18 6A 02 10 sub eax,dword ptr ds:[10026A18h] - 1001C5D8: C1 F8 02 sar eax,2 - 1001C5DB: F7 D8 neg eax - 1001C5DD: 5E pop esi - 1001C5DE: 5D pop ebp - 1001C5DF: C3 ret - 1001C5E0: 8B C6 mov eax,esi - 1001C5E2: 2B 05 18 6A 02 10 sub eax,dword ptr ds:[10026A18h] - 1001C5E8: C1 F8 02 sar eax,2 - 1001C5EB: EB F0 jmp 1001C5DD - 1001C5ED: 8B FF mov edi,edi - 1001C5EF: 55 push ebp - 1001C5F0: 8B EC mov ebp,esp - 1001C5F2: 51 push ecx - 1001C5F3: 57 push edi - 1001C5F4: 8B F8 mov edi,eax - 1001C5F6: 33 C0 xor eax,eax - 1001C5F8: 8B CF mov ecx,edi - 1001C5FA: 85 FF test edi,edi - 1001C5FC: 74 46 je 1001C644 - 1001C5FE: 39 07 cmp dword ptr [edi],eax - 1001C600: 74 09 je 1001C60B - 1001C602: 83 C1 04 add ecx,4 - 1001C605: 40 inc eax - 1001C606: 83 39 00 cmp dword ptr [ecx],0 - 1001C609: 75 F7 jne 1001C602 - 1001C60B: 56 push esi - 1001C60C: 40 inc eax - 1001C60D: 6A 04 push 4 - 1001C60F: 50 push eax - 1001C610: E8 39 63 FF FF call 1001294E - 1001C615: 8B F0 mov esi,eax - 1001C617: 59 pop ecx - 1001C618: 59 pop ecx - 1001C619: 89 75 FC mov dword ptr [ebp-4],esi - 1001C61C: 85 F6 test esi,esi - 1001C61E: 75 18 jne 1001C638 - 1001C620: 6A 09 push 9 - 1001C622: E8 E2 64 FF FF call 10012B09 - 1001C627: EB 0E jmp 1001C637 - 1001C629: 50 push eax - 1001C62A: E8 F2 21 00 00 call 1001E821 - 1001C62F: 89 06 mov dword ptr [esi],eax - 1001C631: 83 C6 04 add esi,4 - 1001C634: 83 C7 04 add edi,4 - 1001C637: 59 pop ecx - 1001C638: 8B 07 mov eax,dword ptr [edi] - 1001C63A: 85 C0 test eax,eax - 1001C63C: 75 EB jne 1001C629 - 1001C63E: 21 06 and dword ptr [esi],eax - 1001C640: 8B 45 FC mov eax,dword ptr [ebp-4] - 1001C643: 5E pop esi - 1001C644: 5F pop edi - 1001C645: C9 leave - 1001C646: C3 ret - 1001C647: 8B FF mov edi,edi - 1001C649: 55 push ebp - 1001C64A: 8B EC mov ebp,esp - 1001C64C: 83 EC 14 sub esp,14h - 1001C64F: 8B 45 08 mov eax,dword ptr [ebp+8] - 1001C652: 53 push ebx - 1001C653: 33 DB xor ebx,ebx - 1001C655: 89 5D F4 mov dword ptr [ebp-0Ch],ebx - 1001C658: 3B C3 cmp eax,ebx - 1001C65A: 75 1D jne 1001C679 - 1001C65C: E8 E8 29 FF FF call 1000F049 - 1001C661: 53 push ebx - 1001C662: 53 push ebx - 1001C663: 53 push ebx - 1001C664: 53 push ebx - 1001C665: 53 push ebx - 1001C666: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1001C66C: E8 70 29 FF FF call 1000EFE1 - 1001C671: 83 C4 14 add esp,14h - 1001C674: 83 C8 FF or eax,0FFFFFFFFh - 1001C677: EB 6E jmp 1001C6E7 - 1001C679: 56 push esi - 1001C67A: 8B 30 mov esi,dword ptr [eax] - 1001C67C: 57 push edi - 1001C67D: 89 75 FC mov dword ptr [ebp-4],esi - 1001C680: 3B F3 cmp esi,ebx - 1001C682: 74 53 je 1001C6D7 - 1001C684: 6A 3D push 3Dh - 1001C686: 56 push esi - 1001C687: E8 A6 22 00 00 call 1001E932 - 1001C68C: 8B F8 mov edi,eax - 1001C68E: 59 pop ecx - 1001C68F: 59 pop ecx - 1001C690: 89 7D EC mov dword ptr [ebp-14h],edi - 1001C693: 3B FB cmp edi,ebx - 1001C695: 74 40 je 1001C6D7 - 1001C697: 3B F7 cmp esi,edi - 1001C699: 74 3C je 1001C6D7 - 1001C69B: 33 C0 xor eax,eax - 1001C69D: 38 5F 01 cmp byte ptr [edi+1],bl - 1001C6A0: 0F 94 C0 sete al - 1001C6A3: 89 45 F8 mov dword ptr [ebp-8],eax - 1001C6A6: A1 18 6A 02 10 mov eax,dword ptr ds:[10026A18h] - 1001C6AB: 3B 05 1C 6A 02 10 cmp eax,dword ptr ds:[10026A1Ch] - 1001C6B1: 75 0A jne 1001C6BD - 1001C6B3: E8 35 FF FF FF call 1001C5ED - 1001C6B8: A3 18 6A 02 10 mov dword ptr ds:[10026A18h],eax - 1001C6BD: 3B C3 cmp eax,ebx - 1001C6BF: 75 60 jne 1001C721 - 1001C6C1: 39 5D 0C cmp dword ptr [ebp+0Ch],ebx - 1001C6C4: 74 24 je 1001C6EA - 1001C6C6: 39 1D 20 6A 02 10 cmp dword ptr ds:[10026A20h],ebx - 1001C6CC: 74 1C je 1001C6EA - 1001C6CE: E8 F9 E1 FF FF call 1001A8CC - 1001C6D3: 85 C0 test eax,eax - 1001C6D5: 74 4A je 1001C721 - 1001C6D7: E8 6D 29 FF FF call 1000F049 - 1001C6DC: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1001C6E2: 83 C8 FF or eax,0FFFFFFFFh - 1001C6E5: 5F pop edi - 1001C6E6: 5E pop esi - 1001C6E7: 5B pop ebx - 1001C6E8: C9 leave - 1001C6E9: C3 ret - 1001C6EA: 39 5D F8 cmp dword ptr [ebp-8],ebx - 1001C6ED: 0F 85 98 01 00 00 jne 1001C88B - 1001C6F3: 6A 04 push 4 - 1001C6F5: E8 0F 62 FF FF call 10012909 - 1001C6FA: 59 pop ecx - 1001C6FB: A3 18 6A 02 10 mov dword ptr ds:[10026A18h],eax - 1001C700: 3B C3 cmp eax,ebx - 1001C702: 74 DE je 1001C6E2 - 1001C704: 89 18 mov dword ptr [eax],ebx - 1001C706: 39 1D 20 6A 02 10 cmp dword ptr ds:[10026A20h],ebx - 1001C70C: 75 13 jne 1001C721 - 1001C70E: 6A 04 push 4 - 1001C710: E8 F4 61 FF FF call 10012909 - 1001C715: 59 pop ecx - 1001C716: A3 20 6A 02 10 mov dword ptr ds:[10026A20h],eax - 1001C71B: 3B C3 cmp eax,ebx - 1001C71D: 74 C3 je 1001C6E2 - 1001C71F: 89 18 mov dword ptr [eax],ebx - 1001C721: 8B 35 18 6A 02 10 mov esi,dword ptr ds:[10026A18h] - 1001C727: 89 75 F0 mov dword ptr [ebp-10h],esi - 1001C72A: 3B F3 cmp esi,ebx - 1001C72C: 74 B4 je 1001C6E2 - 1001C72E: 2B 7D FC sub edi,dword ptr [ebp-4] - 1001C731: FF 75 FC push dword ptr [ebp-4] - 1001C734: E8 62 FE FF FF call 1001C59B - 1001C739: 8B F8 mov edi,eax - 1001C73B: 3B FB cmp edi,ebx - 1001C73D: 59 pop ecx - 1001C73E: 7C 52 jl 1001C792 - 1001C740: 39 1E cmp dword ptr [esi],ebx - 1001C742: 74 4E je 1001C792 - 1001C744: 8D 34 BE lea esi,[esi+edi*4] - 1001C747: FF 36 push dword ptr [esi] - 1001C749: E8 E6 DB FE FF call 1000A334 - 1001C74E: 59 pop ecx - 1001C74F: 39 5D F8 cmp dword ptr [ebp-8],ebx - 1001C752: 75 1B jne 1001C76F - 1001C754: 8B 45 FC mov eax,dword ptr [ebp-4] - 1001C757: 89 06 mov dword ptr [esi],eax - 1001C759: 8B 45 08 mov eax,dword ptr [ebp+8] - 1001C75C: 89 18 mov dword ptr [eax],ebx - 1001C75E: E9 82 00 00 00 jmp 1001C7E5 - 1001C763: 8B 46 04 mov eax,dword ptr [esi+4] - 1001C766: 89 06 mov dword ptr [esi],eax - 1001C768: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 1001C76B: 47 inc edi - 1001C76C: 8D 34 B8 lea esi,[eax+edi*4] - 1001C76F: 39 1E cmp dword ptr [esi],ebx - 1001C771: 75 F0 jne 1001C763 - 1001C773: 81 FF FF FF FF 3F cmp edi,3FFFFFFFh - 1001C779: 73 6A jae 1001C7E5 - 1001C77B: 6A 04 push 4 - 1001C77D: 57 push edi - 1001C77E: FF 35 18 6A 02 10 push dword ptr ds:[10026A18h] - 1001C784: E8 5F 62 FF FF call 100129E8 - 1001C789: 83 C4 0C add esp,0Ch - 1001C78C: 3B C3 cmp eax,ebx - 1001C78E: 74 55 je 1001C7E5 - 1001C790: EB 4E jmp 1001C7E0 - 1001C792: 39 5D F8 cmp dword ptr [ebp-8],ebx - 1001C795: 0F 85 E2 00 00 00 jne 1001C87D - 1001C79B: 3B FB cmp edi,ebx - 1001C79D: 7D 02 jge 1001C7A1 - 1001C79F: F7 DF neg edi - 1001C7A1: 8D 47 02 lea eax,[edi+2] - 1001C7A4: 3B C7 cmp eax,edi - 1001C7A6: 0F 8C 36 FF FF FF jl 1001C6E2 - 1001C7AC: 3D FF FF FF 3F cmp eax,3FFFFFFFh - 1001C7B1: 0F 83 2B FF FF FF jae 1001C6E2 - 1001C7B7: 50 push eax - 1001C7B8: 6A 04 push 4 - 1001C7BA: FF 35 18 6A 02 10 push dword ptr ds:[10026A18h] - 1001C7C0: E8 23 62 FF FF call 100129E8 - 1001C7C5: 83 C4 0C add esp,0Ch - 1001C7C8: 3B C3 cmp eax,ebx - 1001C7CA: 0F 84 12 FF FF FF je 1001C6E2 - 1001C7D0: 8B 55 FC mov edx,dword ptr [ebp-4] - 1001C7D3: 8D 0C B8 lea ecx,[eax+edi*4] - 1001C7D6: 89 11 mov dword ptr [ecx],edx - 1001C7D8: 89 59 04 mov dword ptr [ecx+4],ebx - 1001C7DB: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1001C7DE: 89 19 mov dword ptr [ecx],ebx - 1001C7E0: A3 18 6A 02 10 mov dword ptr ds:[10026A18h],eax - 1001C7E5: 39 5D 0C cmp dword ptr [ebp+0Ch],ebx - 1001C7E8: 74 78 je 1001C862 - 1001C7EA: 8B 75 FC mov esi,dword ptr [ebp-4] - 1001C7ED: 6A 01 push 1 - 1001C7EF: 56 push esi - 1001C7F0: E8 4B 7C FF FF call 10014440 - 1001C7F5: 40 inc eax - 1001C7F6: 59 pop ecx - 1001C7F7: 40 inc eax - 1001C7F8: 50 push eax - 1001C7F9: E8 50 61 FF FF call 1001294E - 1001C7FE: 8B F8 mov edi,eax - 1001C800: 59 pop ecx - 1001C801: 59 pop ecx - 1001C802: 3B FB cmp edi,ebx - 1001C804: 74 5C je 1001C862 - 1001C806: 56 push esi - 1001C807: 56 push esi - 1001C808: E8 33 7C FF FF call 10014440 - 1001C80D: 40 inc eax - 1001C80E: 59 pop ecx - 1001C80F: 40 inc eax - 1001C810: 50 push eax - 1001C811: 57 push edi - 1001C812: E8 B9 7B FF FF call 100143D0 - 1001C817: 83 C4 0C add esp,0Ch - 1001C81A: 85 C0 test eax,eax - 1001C81C: 74 0D je 1001C82B - 1001C81E: 53 push ebx - 1001C81F: 53 push ebx - 1001C820: 53 push ebx - 1001C821: 53 push ebx - 1001C822: 53 push ebx - 1001C823: E8 91 26 FF FF call 1000EEB9 - 1001C828: 83 C4 14 add esp,14h - 1001C82B: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 1001C82E: 8B C7 mov eax,edi - 1001C830: 2B C6 sub eax,esi - 1001C832: 03 45 EC add eax,dword ptr [ebp-14h] - 1001C835: 88 18 mov byte ptr [eax],bl - 1001C837: 40 inc eax - 1001C838: F7 D9 neg ecx - 1001C83A: 1B C9 sbb ecx,ecx - 1001C83C: F7 D1 not ecx - 1001C83E: 23 C8 and ecx,eax - 1001C840: 51 push ecx - 1001C841: 57 push edi - 1001C842: FF 15 4C F0 01 10 call dword ptr ds:[1001F04Ch] - 1001C848: 85 C0 test eax,eax - 1001C84A: 75 0F jne 1001C85B - 1001C84C: 83 4D F4 FF or dword ptr [ebp-0Ch],0FFFFFFFFh - 1001C850: E8 F4 27 FF FF call 1000F049 - 1001C855: C7 00 2A 00 00 00 mov dword ptr [eax],2Ah - 1001C85B: 57 push edi - 1001C85C: E8 D3 DA FE FF call 1000A334 - 1001C861: 59 pop ecx - 1001C862: 39 5D F8 cmp dword ptr [ebp-8],ebx - 1001C865: 74 0E je 1001C875 - 1001C867: FF 75 FC push dword ptr [ebp-4] - 1001C86A: E8 C5 DA FE FF call 1000A334 - 1001C86F: 8B 45 08 mov eax,dword ptr [ebp+8] - 1001C872: 59 pop ecx - 1001C873: 89 18 mov dword ptr [eax],ebx - 1001C875: 8B 45 F4 mov eax,dword ptr [ebp-0Ch] - 1001C878: E9 68 FE FF FF jmp 1001C6E5 - 1001C87D: FF 75 FC push dword ptr [ebp-4] - 1001C880: E8 AF DA FE FF call 1000A334 - 1001C885: 8B 45 08 mov eax,dword ptr [ebp+8] - 1001C888: 59 pop ecx - 1001C889: 89 18 mov dword ptr [eax],ebx - 1001C88B: 33 C0 xor eax,eax - 1001C88D: E9 53 FE FF FF jmp 1001C6E5 - 1001C892: 8B FF mov edi,edi - 1001C894: 55 push ebp - 1001C895: 8B EC mov ebp,esp - 1001C897: 83 EC 2C sub esp,2Ch - 1001C89A: 8B 45 08 mov eax,dword ptr [ebp+8] - 1001C89D: 0F B7 48 0A movzx ecx,word ptr [eax+0Ah] - 1001C8A1: 53 push ebx - 1001C8A2: 8B D9 mov ebx,ecx - 1001C8A4: 81 E1 00 80 00 00 and ecx,8000h - 1001C8AA: 89 4D EC mov dword ptr [ebp-14h],ecx - 1001C8AD: 8B 48 06 mov ecx,dword ptr [eax+6] - 1001C8B0: 89 4D E0 mov dword ptr [ebp-20h],ecx - 1001C8B3: 8B 48 02 mov ecx,dword ptr [eax+2] - 1001C8B6: 0F B7 00 movzx eax,word ptr [eax] - 1001C8B9: 81 E3 FF 7F 00 00 and ebx,7FFFh - 1001C8BF: 81 EB FF 3F 00 00 sub ebx,3FFFh - 1001C8C5: C1 E0 10 shl eax,10h - 1001C8C8: 57 push edi - 1001C8C9: 89 4D E4 mov dword ptr [ebp-1Ch],ecx - 1001C8CC: 89 45 E8 mov dword ptr [ebp-18h],eax - 1001C8CF: 81 FB 01 C0 FF FF cmp ebx,0FFFFC001h - 1001C8D5: 75 27 jne 1001C8FE - 1001C8D7: 33 DB xor ebx,ebx - 1001C8D9: 33 C0 xor eax,eax - 1001C8DB: 39 5C 85 E0 cmp dword ptr [ebp+eax*4-20h],ebx - 1001C8DF: 75 0D jne 1001C8EE - 1001C8E1: 40 inc eax - 1001C8E2: 83 F8 03 cmp eax,3 - 1001C8E5: 7C F4 jl 1001C8DB - 1001C8E7: 33 C0 xor eax,eax - 1001C8E9: E9 A5 04 00 00 jmp 1001CD93 - 1001C8EE: 33 C0 xor eax,eax - 1001C8F0: 8D 7D E0 lea edi,[ebp-20h] - 1001C8F3: AB stos dword ptr es:[edi] - 1001C8F4: AB stos dword ptr es:[edi] - 1001C8F5: 6A 02 push 2 - 1001C8F7: AB stos dword ptr es:[edi] - 1001C8F8: 58 pop eax - 1001C8F9: E9 95 04 00 00 jmp 1001CD93 - 1001C8FE: 83 65 08 00 and dword ptr [ebp+8],0 - 1001C902: 56 push esi - 1001C903: 8D 75 E0 lea esi,[ebp-20h] - 1001C906: 8D 7D D4 lea edi,[ebp-2Ch] - 1001C909: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001C90A: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001C90B: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001C90C: 8B 35 90 59 02 10 mov esi,dword ptr ds:[10025990h] - 1001C912: 4E dec esi - 1001C913: 8D 4E 01 lea ecx,[esi+1] - 1001C916: 8B C1 mov eax,ecx - 1001C918: 99 cdq - 1001C919: 83 E2 1F and edx,1Fh - 1001C91C: 03 C2 add eax,edx - 1001C91E: C1 F8 05 sar eax,5 - 1001C921: 8B D1 mov edx,ecx - 1001C923: 81 E2 1F 00 00 80 and edx,8000001Fh - 1001C929: 89 5D F0 mov dword ptr [ebp-10h],ebx - 1001C92C: 89 45 F4 mov dword ptr [ebp-0Ch],eax - 1001C92F: 79 05 jns 1001C936 - 1001C931: 4A dec edx - 1001C932: 83 CA E0 or edx,0FFFFFFE0h - 1001C935: 42 inc edx - 1001C936: 8D 7C 85 E0 lea edi,[ebp+eax*4-20h] - 1001C93A: 6A 1F push 1Fh - 1001C93C: 33 C0 xor eax,eax - 1001C93E: 59 pop ecx - 1001C93F: 2B CA sub ecx,edx - 1001C941: 40 inc eax - 1001C942: D3 E0 shl eax,cl - 1001C944: 89 4D F8 mov dword ptr [ebp-8],ecx - 1001C947: 85 07 test dword ptr [edi],eax - 1001C949: 0F 84 8D 00 00 00 je 1001C9DC - 1001C94F: 8B 45 F4 mov eax,dword ptr [ebp-0Ch] - 1001C952: 83 CA FF or edx,0FFFFFFFFh - 1001C955: D3 E2 shl edx,cl - 1001C957: F7 D2 not edx - 1001C959: 85 54 85 E0 test dword ptr [ebp+eax*4-20h],edx - 1001C95D: EB 05 jmp 1001C964 - 1001C95F: 83 7C 85 E0 00 cmp dword ptr [ebp+eax*4-20h],0 - 1001C964: 75 08 jne 1001C96E - 1001C966: 40 inc eax - 1001C967: 83 F8 03 cmp eax,3 - 1001C96A: 7C F3 jl 1001C95F - 1001C96C: EB 6E jmp 1001C9DC - 1001C96E: 8B C6 mov eax,esi - 1001C970: 99 cdq - 1001C971: 6A 1F push 1Fh - 1001C973: 59 pop ecx - 1001C974: 23 D1 and edx,ecx - 1001C976: 03 C2 add eax,edx - 1001C978: C1 F8 05 sar eax,5 - 1001C97B: 81 E6 1F 00 00 80 and esi,8000001Fh - 1001C981: 79 05 jns 1001C988 - 1001C983: 4E dec esi - 1001C984: 83 CE E0 or esi,0FFFFFFE0h - 1001C987: 46 inc esi - 1001C988: 83 65 FC 00 and dword ptr [ebp-4],0 - 1001C98C: 2B CE sub ecx,esi - 1001C98E: 33 D2 xor edx,edx - 1001C990: 42 inc edx - 1001C991: D3 E2 shl edx,cl - 1001C993: 8D 4C 85 E0 lea ecx,[ebp+eax*4-20h] - 1001C997: 8B 31 mov esi,dword ptr [ecx] - 1001C999: 03 F2 add esi,edx - 1001C99B: 89 75 08 mov dword ptr [ebp+8],esi - 1001C99E: 8B 31 mov esi,dword ptr [ecx] - 1001C9A0: 39 75 08 cmp dword ptr [ebp+8],esi - 1001C9A3: 72 22 jb 1001C9C7 - 1001C9A5: 39 55 08 cmp dword ptr [ebp+8],edx - 1001C9A8: EB 1B jmp 1001C9C5 - 1001C9AA: 85 C9 test ecx,ecx - 1001C9AC: 74 2B je 1001C9D9 - 1001C9AE: 83 65 FC 00 and dword ptr [ebp-4],0 - 1001C9B2: 8D 4C 85 E0 lea ecx,[ebp+eax*4-20h] - 1001C9B6: 8B 11 mov edx,dword ptr [ecx] - 1001C9B8: 8D 72 01 lea esi,[edx+1] - 1001C9BB: 89 75 08 mov dword ptr [ebp+8],esi - 1001C9BE: 3B F2 cmp esi,edx - 1001C9C0: 72 05 jb 1001C9C7 - 1001C9C2: 83 FE 01 cmp esi,1 - 1001C9C5: 73 07 jae 1001C9CE - 1001C9C7: C7 45 FC 01 00 00 mov dword ptr [ebp-4],1 - 00 - 1001C9CE: 48 dec eax - 1001C9CF: 8B 55 08 mov edx,dword ptr [ebp+8] - 1001C9D2: 89 11 mov dword ptr [ecx],edx - 1001C9D4: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1001C9D7: 79 D1 jns 1001C9AA - 1001C9D9: 89 4D 08 mov dword ptr [ebp+8],ecx - 1001C9DC: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 1001C9DF: 83 C8 FF or eax,0FFFFFFFFh - 1001C9E2: D3 E0 shl eax,cl - 1001C9E4: 21 07 and dword ptr [edi],eax - 1001C9E6: 8B 45 F4 mov eax,dword ptr [ebp-0Ch] - 1001C9E9: 40 inc eax - 1001C9EA: 83 F8 03 cmp eax,3 - 1001C9ED: 7D 0D jge 1001C9FC - 1001C9EF: 6A 03 push 3 - 1001C9F1: 59 pop ecx - 1001C9F2: 8D 7C 85 E0 lea edi,[ebp+eax*4-20h] - 1001C9F6: 2B C8 sub ecx,eax - 1001C9F8: 33 C0 xor eax,eax - 1001C9FA: F3 AB rep stos dword ptr es:[edi] - 1001C9FC: 83 7D 08 00 cmp dword ptr [ebp+8],0 - 1001CA00: 74 01 je 1001CA03 - 1001CA02: 43 inc ebx - 1001CA03: A1 8C 59 02 10 mov eax,dword ptr ds:[1002598Ch] - 1001CA08: 8B C8 mov ecx,eax - 1001CA0A: 2B 0D 90 59 02 10 sub ecx,dword ptr ds:[10025990h] - 1001CA10: 3B D9 cmp ebx,ecx - 1001CA12: 7D 0D jge 1001CA21 - 1001CA14: 33 C0 xor eax,eax - 1001CA16: 8D 7D E0 lea edi,[ebp-20h] - 1001CA19: AB stos dword ptr es:[edi] - 1001CA1A: AB stos dword ptr es:[edi] - 1001CA1B: AB stos dword ptr es:[edi] - 1001CA1C: E9 0D 02 00 00 jmp 1001CC2E - 1001CA21: 3B D8 cmp ebx,eax - 1001CA23: 0F 8F 0F 02 00 00 jg 1001CC38 - 1001CA29: 2B 45 F0 sub eax,dword ptr [ebp-10h] - 1001CA2C: 8D 75 D4 lea esi,[ebp-2Ch] - 1001CA2F: 8B C8 mov ecx,eax - 1001CA31: 8D 7D E0 lea edi,[ebp-20h] - 1001CA34: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001CA35: 99 cdq - 1001CA36: 83 E2 1F and edx,1Fh - 1001CA39: 03 C2 add eax,edx - 1001CA3B: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001CA3C: 8B D1 mov edx,ecx - 1001CA3E: C1 F8 05 sar eax,5 - 1001CA41: 81 E2 1F 00 00 80 and edx,8000001Fh - 1001CA47: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001CA48: 79 05 jns 1001CA4F - 1001CA4A: 4A dec edx - 1001CA4B: 83 CA E0 or edx,0FFFFFFE0h - 1001CA4E: 42 inc edx - 1001CA4F: 83 65 F4 00 and dword ptr [ebp-0Ch],0 - 1001CA53: 83 65 08 00 and dword ptr [ebp+8],0 - 1001CA57: 83 CF FF or edi,0FFFFFFFFh - 1001CA5A: 8B CA mov ecx,edx - 1001CA5C: D3 E7 shl edi,cl - 1001CA5E: C7 45 FC 20 00 00 mov dword ptr [ebp-4],20h - 00 - 1001CA65: 29 55 FC sub dword ptr [ebp-4],edx - 1001CA68: F7 D7 not edi - 1001CA6A: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 1001CA6D: 8D 5C 9D E0 lea ebx,[ebp+ebx*4-20h] - 1001CA71: 8B 33 mov esi,dword ptr [ebx] - 1001CA73: 8B CE mov ecx,esi - 1001CA75: 23 CF and ecx,edi - 1001CA77: 89 4D F0 mov dword ptr [ebp-10h],ecx - 1001CA7A: 8B CA mov ecx,edx - 1001CA7C: D3 EE shr esi,cl - 1001CA7E: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1001CA81: 0B 75 F4 or esi,dword ptr [ebp-0Ch] - 1001CA84: 89 33 mov dword ptr [ebx],esi - 1001CA86: 8B 75 F0 mov esi,dword ptr [ebp-10h] - 1001CA89: D3 E6 shl esi,cl - 1001CA8B: FF 45 08 inc dword ptr [ebp+8] - 1001CA8E: 83 7D 08 03 cmp dword ptr [ebp+8],3 - 1001CA92: 89 75 F4 mov dword ptr [ebp-0Ch],esi - 1001CA95: 7C D3 jl 1001CA6A - 1001CA97: 8B F0 mov esi,eax - 1001CA99: 6A 02 push 2 - 1001CA9B: C1 E6 02 shl esi,2 - 1001CA9E: 8D 4D E8 lea ecx,[ebp-18h] - 1001CAA1: 5A pop edx - 1001CAA2: 2B CE sub ecx,esi - 1001CAA4: 3B D0 cmp edx,eax - 1001CAA6: 7C 08 jl 1001CAB0 - 1001CAA8: 8B 31 mov esi,dword ptr [ecx] - 1001CAAA: 89 74 95 E0 mov dword ptr [ebp+edx*4-20h],esi - 1001CAAE: EB 05 jmp 1001CAB5 - 1001CAB0: 83 64 95 E0 00 and dword ptr [ebp+edx*4-20h],0 - 1001CAB5: 4A dec edx - 1001CAB6: 83 E9 04 sub ecx,4 - 1001CAB9: 85 D2 test edx,edx - 1001CABB: 7D E7 jge 1001CAA4 - 1001CABD: 8B 35 90 59 02 10 mov esi,dword ptr ds:[10025990h] - 1001CAC3: 4E dec esi - 1001CAC4: 8D 4E 01 lea ecx,[esi+1] - 1001CAC7: 8B C1 mov eax,ecx - 1001CAC9: 99 cdq - 1001CACA: 83 E2 1F and edx,1Fh - 1001CACD: 03 C2 add eax,edx - 1001CACF: C1 F8 05 sar eax,5 - 1001CAD2: 8B D1 mov edx,ecx - 1001CAD4: 81 E2 1F 00 00 80 and edx,8000001Fh - 1001CADA: 89 45 F4 mov dword ptr [ebp-0Ch],eax - 1001CADD: 79 05 jns 1001CAE4 - 1001CADF: 4A dec edx - 1001CAE0: 83 CA E0 or edx,0FFFFFFE0h - 1001CAE3: 42 inc edx - 1001CAE4: 6A 1F push 1Fh - 1001CAE6: 59 pop ecx - 1001CAE7: 2B CA sub ecx,edx - 1001CAE9: 33 D2 xor edx,edx - 1001CAEB: 42 inc edx - 1001CAEC: D3 E2 shl edx,cl - 1001CAEE: 8D 5C 85 E0 lea ebx,[ebp+eax*4-20h] - 1001CAF2: 89 4D F0 mov dword ptr [ebp-10h],ecx - 1001CAF5: 85 13 test dword ptr [ebx],edx - 1001CAF7: 0F 84 82 00 00 00 je 1001CB7F - 1001CAFD: 83 CA FF or edx,0FFFFFFFFh - 1001CB00: D3 E2 shl edx,cl - 1001CB02: F7 D2 not edx - 1001CB04: 85 54 85 E0 test dword ptr [ebp+eax*4-20h],edx - 1001CB08: EB 05 jmp 1001CB0F - 1001CB0A: 83 7C 85 E0 00 cmp dword ptr [ebp+eax*4-20h],0 - 1001CB0F: 75 08 jne 1001CB19 - 1001CB11: 40 inc eax - 1001CB12: 83 F8 03 cmp eax,3 - 1001CB15: 7C F3 jl 1001CB0A - 1001CB17: EB 66 jmp 1001CB7F - 1001CB19: 8B C6 mov eax,esi - 1001CB1B: 99 cdq - 1001CB1C: 6A 1F push 1Fh - 1001CB1E: 59 pop ecx - 1001CB1F: 23 D1 and edx,ecx - 1001CB21: 03 C2 add eax,edx - 1001CB23: C1 F8 05 sar eax,5 - 1001CB26: 81 E6 1F 00 00 80 and esi,8000001Fh - 1001CB2C: 79 05 jns 1001CB33 - 1001CB2E: 4E dec esi - 1001CB2F: 83 CE E0 or esi,0FFFFFFE0h - 1001CB32: 46 inc esi - 1001CB33: 83 65 08 00 and dword ptr [ebp+8],0 - 1001CB37: 33 D2 xor edx,edx - 1001CB39: 2B CE sub ecx,esi - 1001CB3B: 42 inc edx - 1001CB3C: D3 E2 shl edx,cl - 1001CB3E: 8D 4C 85 E0 lea ecx,[ebp+eax*4-20h] - 1001CB42: 8B 31 mov esi,dword ptr [ecx] - 1001CB44: 8D 3C 16 lea edi,[esi+edx] - 1001CB47: 3B FE cmp edi,esi - 1001CB49: 72 04 jb 1001CB4F - 1001CB4B: 3B FA cmp edi,edx - 1001CB4D: 73 07 jae 1001CB56 - 1001CB4F: C7 45 08 01 00 00 mov dword ptr [ebp+8],1 - 00 - 1001CB56: 89 39 mov dword ptr [ecx],edi - 1001CB58: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1001CB5B: EB 1F jmp 1001CB7C - 1001CB5D: 85 C9 test ecx,ecx - 1001CB5F: 74 1E je 1001CB7F - 1001CB61: 8D 4C 85 E0 lea ecx,[ebp+eax*4-20h] - 1001CB65: 8B 11 mov edx,dword ptr [ecx] - 1001CB67: 8D 72 01 lea esi,[edx+1] - 1001CB6A: 33 FF xor edi,edi - 1001CB6C: 3B F2 cmp esi,edx - 1001CB6E: 72 05 jb 1001CB75 - 1001CB70: 83 FE 01 cmp esi,1 - 1001CB73: 73 03 jae 1001CB78 - 1001CB75: 33 FF xor edi,edi - 1001CB77: 47 inc edi - 1001CB78: 89 31 mov dword ptr [ecx],esi - 1001CB7A: 8B CF mov ecx,edi - 1001CB7C: 48 dec eax - 1001CB7D: 79 DE jns 1001CB5D - 1001CB7F: 8B 4D F0 mov ecx,dword ptr [ebp-10h] - 1001CB82: 83 C8 FF or eax,0FFFFFFFFh - 1001CB85: D3 E0 shl eax,cl - 1001CB87: 21 03 and dword ptr [ebx],eax - 1001CB89: 8B 45 F4 mov eax,dword ptr [ebp-0Ch] - 1001CB8C: 40 inc eax - 1001CB8D: 83 F8 03 cmp eax,3 - 1001CB90: 7D 0D jge 1001CB9F - 1001CB92: 6A 03 push 3 - 1001CB94: 59 pop ecx - 1001CB95: 8D 7C 85 E0 lea edi,[ebp+eax*4-20h] - 1001CB99: 2B C8 sub ecx,eax - 1001CB9B: 33 C0 xor eax,eax - 1001CB9D: F3 AB rep stos dword ptr es:[edi] - 1001CB9F: 8B 0D 94 59 02 10 mov ecx,dword ptr ds:[10025994h] - 1001CBA5: 41 inc ecx - 1001CBA6: 8B C1 mov eax,ecx - 1001CBA8: 99 cdq - 1001CBA9: 83 E2 1F and edx,1Fh - 1001CBAC: 03 C2 add eax,edx - 1001CBAE: 8B D1 mov edx,ecx - 1001CBB0: C1 F8 05 sar eax,5 - 1001CBB3: 81 E2 1F 00 00 80 and edx,8000001Fh - 1001CBB9: 79 05 jns 1001CBC0 - 1001CBBB: 4A dec edx - 1001CBBC: 83 CA E0 or edx,0FFFFFFE0h - 1001CBBF: 42 inc edx - 1001CBC0: 83 65 F4 00 and dword ptr [ebp-0Ch],0 - 1001CBC4: 83 65 08 00 and dword ptr [ebp+8],0 - 1001CBC8: 83 CF FF or edi,0FFFFFFFFh - 1001CBCB: 8B CA mov ecx,edx - 1001CBCD: D3 E7 shl edi,cl - 1001CBCF: C7 45 FC 20 00 00 mov dword ptr [ebp-4],20h - 00 - 1001CBD6: 29 55 FC sub dword ptr [ebp-4],edx - 1001CBD9: F7 D7 not edi - 1001CBDB: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 1001CBDE: 8D 5C 9D E0 lea ebx,[ebp+ebx*4-20h] - 1001CBE2: 8B 33 mov esi,dword ptr [ebx] - 1001CBE4: 8B CE mov ecx,esi - 1001CBE6: 23 CF and ecx,edi - 1001CBE8: 89 4D F0 mov dword ptr [ebp-10h],ecx - 1001CBEB: 8B CA mov ecx,edx - 1001CBED: D3 EE shr esi,cl - 1001CBEF: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1001CBF2: 0B 75 F4 or esi,dword ptr [ebp-0Ch] - 1001CBF5: 89 33 mov dword ptr [ebx],esi - 1001CBF7: 8B 75 F0 mov esi,dword ptr [ebp-10h] - 1001CBFA: D3 E6 shl esi,cl - 1001CBFC: FF 45 08 inc dword ptr [ebp+8] - 1001CBFF: 83 7D 08 03 cmp dword ptr [ebp+8],3 - 1001CC03: 89 75 F4 mov dword ptr [ebp-0Ch],esi - 1001CC06: 7C D3 jl 1001CBDB - 1001CC08: 8B F0 mov esi,eax - 1001CC0A: 6A 02 push 2 - 1001CC0C: C1 E6 02 shl esi,2 - 1001CC0F: 8D 4D E8 lea ecx,[ebp-18h] - 1001CC12: 5A pop edx - 1001CC13: 2B CE sub ecx,esi - 1001CC15: 3B D0 cmp edx,eax - 1001CC17: 7C 08 jl 1001CC21 - 1001CC19: 8B 31 mov esi,dword ptr [ecx] - 1001CC1B: 89 74 95 E0 mov dword ptr [ebp+edx*4-20h],esi - 1001CC1F: EB 05 jmp 1001CC26 - 1001CC21: 83 64 95 E0 00 and dword ptr [ebp+edx*4-20h],0 - 1001CC26: 4A dec edx - 1001CC27: 83 E9 04 sub ecx,4 - 1001CC2A: 85 D2 test edx,edx - 1001CC2C: 7D E7 jge 1001CC15 - 1001CC2E: 6A 02 push 2 - 1001CC30: 33 DB xor ebx,ebx - 1001CC32: 58 pop eax - 1001CC33: E9 5A 01 00 00 jmp 1001CD92 - 1001CC38: 3B 1D 88 59 02 10 cmp ebx,dword ptr ds:[10025988h] - 1001CC3E: 8B 0D 94 59 02 10 mov ecx,dword ptr ds:[10025994h] - 1001CC44: 0F 8C AD 00 00 00 jl 1001CCF7 - 1001CC4A: 33 C0 xor eax,eax - 1001CC4C: 8D 7D E0 lea edi,[ebp-20h] - 1001CC4F: AB stos dword ptr es:[edi] - 1001CC50: AB stos dword ptr es:[edi] - 1001CC51: AB stos dword ptr es:[edi] - 1001CC52: 81 4D E0 00 00 00 or dword ptr [ebp-20h],80000000h - 80 - 1001CC59: 8B C1 mov eax,ecx - 1001CC5B: 99 cdq - 1001CC5C: 83 E2 1F and edx,1Fh - 1001CC5F: 03 C2 add eax,edx - 1001CC61: 8B D1 mov edx,ecx - 1001CC63: C1 F8 05 sar eax,5 - 1001CC66: 81 E2 1F 00 00 80 and edx,8000001Fh - 1001CC6C: 79 05 jns 1001CC73 - 1001CC6E: 4A dec edx - 1001CC6F: 83 CA E0 or edx,0FFFFFFE0h - 1001CC72: 42 inc edx - 1001CC73: 83 65 F4 00 and dword ptr [ebp-0Ch],0 - 1001CC77: 83 65 08 00 and dword ptr [ebp+8],0 - 1001CC7B: 83 CF FF or edi,0FFFFFFFFh - 1001CC7E: 8B CA mov ecx,edx - 1001CC80: D3 E7 shl edi,cl - 1001CC82: C7 45 FC 20 00 00 mov dword ptr [ebp-4],20h - 00 - 1001CC89: 29 55 FC sub dword ptr [ebp-4],edx - 1001CC8C: F7 D7 not edi - 1001CC8E: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 1001CC91: 8D 5C 9D E0 lea ebx,[ebp+ebx*4-20h] - 1001CC95: 8B 33 mov esi,dword ptr [ebx] - 1001CC97: 8B CE mov ecx,esi - 1001CC99: 23 CF and ecx,edi - 1001CC9B: 89 4D F0 mov dword ptr [ebp-10h],ecx - 1001CC9E: 8B CA mov ecx,edx - 1001CCA0: D3 EE shr esi,cl - 1001CCA2: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1001CCA5: 0B 75 F4 or esi,dword ptr [ebp-0Ch] - 1001CCA8: 89 33 mov dword ptr [ebx],esi - 1001CCAA: 8B 75 F0 mov esi,dword ptr [ebp-10h] - 1001CCAD: D3 E6 shl esi,cl - 1001CCAF: FF 45 08 inc dword ptr [ebp+8] - 1001CCB2: 83 7D 08 03 cmp dword ptr [ebp+8],3 - 1001CCB6: 89 75 F4 mov dword ptr [ebp-0Ch],esi - 1001CCB9: 7C D3 jl 1001CC8E - 1001CCBB: 8B F0 mov esi,eax - 1001CCBD: 6A 02 push 2 - 1001CCBF: C1 E6 02 shl esi,2 - 1001CCC2: 8D 4D E8 lea ecx,[ebp-18h] - 1001CCC5: 5A pop edx - 1001CCC6: 2B CE sub ecx,esi - 1001CCC8: 3B D0 cmp edx,eax - 1001CCCA: 7C 08 jl 1001CCD4 - 1001CCCC: 8B 31 mov esi,dword ptr [ecx] - 1001CCCE: 89 74 95 E0 mov dword ptr [ebp+edx*4-20h],esi - 1001CCD2: EB 05 jmp 1001CCD9 - 1001CCD4: 83 64 95 E0 00 and dword ptr [ebp+edx*4-20h],0 - 1001CCD9: 4A dec edx - 1001CCDA: 83 E9 04 sub ecx,4 - 1001CCDD: 85 D2 test edx,edx - 1001CCDF: 7D E7 jge 1001CCC8 - 1001CCE1: A1 88 59 02 10 mov eax,dword ptr ds:[10025988h] - 1001CCE6: 8B 0D 9C 59 02 10 mov ecx,dword ptr ds:[1002599Ch] - 1001CCEC: 8D 1C 01 lea ebx,[ecx+eax] - 1001CCEF: 33 C0 xor eax,eax - 1001CCF1: 40 inc eax - 1001CCF2: E9 9B 00 00 00 jmp 1001CD92 - 1001CCF7: A1 9C 59 02 10 mov eax,dword ptr ds:[1002599Ch] - 1001CCFC: 81 65 E0 FF FF FF and dword ptr [ebp-20h],7FFFFFFFh - 7F - 1001CD03: 03 D8 add ebx,eax - 1001CD05: 8B C1 mov eax,ecx - 1001CD07: 99 cdq - 1001CD08: 83 E2 1F and edx,1Fh - 1001CD0B: 03 C2 add eax,edx - 1001CD0D: 8B D1 mov edx,ecx - 1001CD0F: C1 F8 05 sar eax,5 - 1001CD12: 81 E2 1F 00 00 80 and edx,8000001Fh - 1001CD18: 79 05 jns 1001CD1F - 1001CD1A: 4A dec edx - 1001CD1B: 83 CA E0 or edx,0FFFFFFE0h - 1001CD1E: 42 inc edx - 1001CD1F: 83 65 F4 00 and dword ptr [ebp-0Ch],0 - 1001CD23: 83 65 08 00 and dword ptr [ebp+8],0 - 1001CD27: 83 CE FF or esi,0FFFFFFFFh - 1001CD2A: 8B CA mov ecx,edx - 1001CD2C: D3 E6 shl esi,cl - 1001CD2E: C7 45 FC 20 00 00 mov dword ptr [ebp-4],20h - 00 - 1001CD35: 29 55 FC sub dword ptr [ebp-4],edx - 1001CD38: F7 D6 not esi - 1001CD3A: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1001CD3D: 8B 7C 8D E0 mov edi,dword ptr [ebp+ecx*4-20h] - 1001CD41: 8B CF mov ecx,edi - 1001CD43: 23 CE and ecx,esi - 1001CD45: 89 4D F0 mov dword ptr [ebp-10h],ecx - 1001CD48: 8B CA mov ecx,edx - 1001CD4A: D3 EF shr edi,cl - 1001CD4C: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1001CD4F: 0B 7D F4 or edi,dword ptr [ebp-0Ch] - 1001CD52: 89 7C 8D E0 mov dword ptr [ebp+ecx*4-20h],edi - 1001CD56: 8B 7D F0 mov edi,dword ptr [ebp-10h] - 1001CD59: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1001CD5C: D3 E7 shl edi,cl - 1001CD5E: FF 45 08 inc dword ptr [ebp+8] - 1001CD61: 83 7D 08 03 cmp dword ptr [ebp+8],3 - 1001CD65: 89 7D F4 mov dword ptr [ebp-0Ch],edi - 1001CD68: 7C D0 jl 1001CD3A - 1001CD6A: 8B F0 mov esi,eax - 1001CD6C: 6A 02 push 2 - 1001CD6E: C1 E6 02 shl esi,2 - 1001CD71: 8D 4D E8 lea ecx,[ebp-18h] - 1001CD74: 5A pop edx - 1001CD75: 2B CE sub ecx,esi - 1001CD77: 3B D0 cmp edx,eax - 1001CD79: 7C 08 jl 1001CD83 - 1001CD7B: 8B 31 mov esi,dword ptr [ecx] - 1001CD7D: 89 74 95 E0 mov dword ptr [ebp+edx*4-20h],esi - 1001CD81: EB 05 jmp 1001CD88 - 1001CD83: 83 64 95 E0 00 and dword ptr [ebp+edx*4-20h],0 - 1001CD88: 4A dec edx - 1001CD89: 83 E9 04 sub ecx,4 - 1001CD8C: 85 D2 test edx,edx - 1001CD8E: 7D E7 jge 1001CD77 - 1001CD90: 33 C0 xor eax,eax - 1001CD92: 5E pop esi - 1001CD93: 6A 1F push 1Fh - 1001CD95: 59 pop ecx - 1001CD96: 2B 0D 94 59 02 10 sub ecx,dword ptr ds:[10025994h] - 1001CD9C: D3 E3 shl ebx,cl - 1001CD9E: 8B 4D EC mov ecx,dword ptr [ebp-14h] - 1001CDA1: F7 D9 neg ecx - 1001CDA3: 1B C9 sbb ecx,ecx - 1001CDA5: 81 E1 00 00 00 80 and ecx,80000000h - 1001CDAB: 0B D9 or ebx,ecx - 1001CDAD: 8B 0D 98 59 02 10 mov ecx,dword ptr ds:[10025998h] - 1001CDB3: 0B 5D E0 or ebx,dword ptr [ebp-20h] - 1001CDB6: 83 F9 40 cmp ecx,40h - 1001CDB9: 75 0D jne 1001CDC8 - 1001CDBB: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch] - 1001CDBE: 8B 55 E4 mov edx,dword ptr [ebp-1Ch] - 1001CDC1: 89 59 04 mov dword ptr [ecx+4],ebx - 1001CDC4: 89 11 mov dword ptr [ecx],edx - 1001CDC6: EB 0A jmp 1001CDD2 - 1001CDC8: 83 F9 20 cmp ecx,20h - 1001CDCB: 75 05 jne 1001CDD2 - 1001CDCD: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch] - 1001CDD0: 89 19 mov dword ptr [ecx],ebx - 1001CDD2: 5F pop edi - 1001CDD3: 5B pop ebx - 1001CDD4: C9 leave - 1001CDD5: C3 ret - 1001CDD6: 8B FF mov edi,edi - 1001CDD8: 55 push ebp - 1001CDD9: 8B EC mov ebp,esp - 1001CDDB: 83 EC 2C sub esp,2Ch - 1001CDDE: 8B 45 08 mov eax,dword ptr [ebp+8] - 1001CDE1: 0F B7 48 0A movzx ecx,word ptr [eax+0Ah] - 1001CDE5: 53 push ebx - 1001CDE6: 8B D9 mov ebx,ecx - 1001CDE8: 81 E1 00 80 00 00 and ecx,8000h - 1001CDEE: 89 4D EC mov dword ptr [ebp-14h],ecx - 1001CDF1: 8B 48 06 mov ecx,dword ptr [eax+6] - 1001CDF4: 89 4D E0 mov dword ptr [ebp-20h],ecx - 1001CDF7: 8B 48 02 mov ecx,dword ptr [eax+2] - 1001CDFA: 0F B7 00 movzx eax,word ptr [eax] - 1001CDFD: 81 E3 FF 7F 00 00 and ebx,7FFFh - 1001CE03: 81 EB FF 3F 00 00 sub ebx,3FFFh - 1001CE09: C1 E0 10 shl eax,10h - 1001CE0C: 57 push edi - 1001CE0D: 89 4D E4 mov dword ptr [ebp-1Ch],ecx - 1001CE10: 89 45 E8 mov dword ptr [ebp-18h],eax - 1001CE13: 81 FB 01 C0 FF FF cmp ebx,0FFFFC001h - 1001CE19: 75 27 jne 1001CE42 - 1001CE1B: 33 DB xor ebx,ebx - 1001CE1D: 33 C0 xor eax,eax - 1001CE1F: 39 5C 85 E0 cmp dword ptr [ebp+eax*4-20h],ebx - 1001CE23: 75 0D jne 1001CE32 - 1001CE25: 40 inc eax - 1001CE26: 83 F8 03 cmp eax,3 - 1001CE29: 7C F4 jl 1001CE1F - 1001CE2B: 33 C0 xor eax,eax - 1001CE2D: E9 A5 04 00 00 jmp 1001D2D7 - 1001CE32: 33 C0 xor eax,eax - 1001CE34: 8D 7D E0 lea edi,[ebp-20h] - 1001CE37: AB stos dword ptr es:[edi] - 1001CE38: AB stos dword ptr es:[edi] - 1001CE39: 6A 02 push 2 - 1001CE3B: AB stos dword ptr es:[edi] - 1001CE3C: 58 pop eax - 1001CE3D: E9 95 04 00 00 jmp 1001D2D7 - 1001CE42: 83 65 08 00 and dword ptr [ebp+8],0 - 1001CE46: 56 push esi - 1001CE47: 8D 75 E0 lea esi,[ebp-20h] - 1001CE4A: 8D 7D D4 lea edi,[ebp-2Ch] - 1001CE4D: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001CE4E: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001CE4F: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001CE50: 8B 35 A8 59 02 10 mov esi,dword ptr ds:[100259A8h] - 1001CE56: 4E dec esi - 1001CE57: 8D 4E 01 lea ecx,[esi+1] - 1001CE5A: 8B C1 mov eax,ecx - 1001CE5C: 99 cdq - 1001CE5D: 83 E2 1F and edx,1Fh - 1001CE60: 03 C2 add eax,edx - 1001CE62: C1 F8 05 sar eax,5 - 1001CE65: 8B D1 mov edx,ecx - 1001CE67: 81 E2 1F 00 00 80 and edx,8000001Fh - 1001CE6D: 89 5D F0 mov dword ptr [ebp-10h],ebx - 1001CE70: 89 45 F4 mov dword ptr [ebp-0Ch],eax - 1001CE73: 79 05 jns 1001CE7A - 1001CE75: 4A dec edx - 1001CE76: 83 CA E0 or edx,0FFFFFFE0h - 1001CE79: 42 inc edx - 1001CE7A: 8D 7C 85 E0 lea edi,[ebp+eax*4-20h] - 1001CE7E: 6A 1F push 1Fh - 1001CE80: 33 C0 xor eax,eax - 1001CE82: 59 pop ecx - 1001CE83: 2B CA sub ecx,edx - 1001CE85: 40 inc eax - 1001CE86: D3 E0 shl eax,cl - 1001CE88: 89 4D F8 mov dword ptr [ebp-8],ecx - 1001CE8B: 85 07 test dword ptr [edi],eax - 1001CE8D: 0F 84 8D 00 00 00 je 1001CF20 - 1001CE93: 8B 45 F4 mov eax,dword ptr [ebp-0Ch] - 1001CE96: 83 CA FF or edx,0FFFFFFFFh - 1001CE99: D3 E2 shl edx,cl - 1001CE9B: F7 D2 not edx - 1001CE9D: 85 54 85 E0 test dword ptr [ebp+eax*4-20h],edx - 1001CEA1: EB 05 jmp 1001CEA8 - 1001CEA3: 83 7C 85 E0 00 cmp dword ptr [ebp+eax*4-20h],0 - 1001CEA8: 75 08 jne 1001CEB2 - 1001CEAA: 40 inc eax - 1001CEAB: 83 F8 03 cmp eax,3 - 1001CEAE: 7C F3 jl 1001CEA3 - 1001CEB0: EB 6E jmp 1001CF20 - 1001CEB2: 8B C6 mov eax,esi - 1001CEB4: 99 cdq - 1001CEB5: 6A 1F push 1Fh - 1001CEB7: 59 pop ecx - 1001CEB8: 23 D1 and edx,ecx - 1001CEBA: 03 C2 add eax,edx - 1001CEBC: C1 F8 05 sar eax,5 - 1001CEBF: 81 E6 1F 00 00 80 and esi,8000001Fh - 1001CEC5: 79 05 jns 1001CECC - 1001CEC7: 4E dec esi - 1001CEC8: 83 CE E0 or esi,0FFFFFFE0h - 1001CECB: 46 inc esi - 1001CECC: 83 65 FC 00 and dword ptr [ebp-4],0 - 1001CED0: 2B CE sub ecx,esi - 1001CED2: 33 D2 xor edx,edx - 1001CED4: 42 inc edx - 1001CED5: D3 E2 shl edx,cl - 1001CED7: 8D 4C 85 E0 lea ecx,[ebp+eax*4-20h] - 1001CEDB: 8B 31 mov esi,dword ptr [ecx] - 1001CEDD: 03 F2 add esi,edx - 1001CEDF: 89 75 08 mov dword ptr [ebp+8],esi - 1001CEE2: 8B 31 mov esi,dword ptr [ecx] - 1001CEE4: 39 75 08 cmp dword ptr [ebp+8],esi - 1001CEE7: 72 22 jb 1001CF0B - 1001CEE9: 39 55 08 cmp dword ptr [ebp+8],edx - 1001CEEC: EB 1B jmp 1001CF09 - 1001CEEE: 85 C9 test ecx,ecx - 1001CEF0: 74 2B je 1001CF1D - 1001CEF2: 83 65 FC 00 and dword ptr [ebp-4],0 - 1001CEF6: 8D 4C 85 E0 lea ecx,[ebp+eax*4-20h] - 1001CEFA: 8B 11 mov edx,dword ptr [ecx] - 1001CEFC: 8D 72 01 lea esi,[edx+1] - 1001CEFF: 89 75 08 mov dword ptr [ebp+8],esi - 1001CF02: 3B F2 cmp esi,edx - 1001CF04: 72 05 jb 1001CF0B - 1001CF06: 83 FE 01 cmp esi,1 - 1001CF09: 73 07 jae 1001CF12 - 1001CF0B: C7 45 FC 01 00 00 mov dword ptr [ebp-4],1 - 00 - 1001CF12: 48 dec eax - 1001CF13: 8B 55 08 mov edx,dword ptr [ebp+8] - 1001CF16: 89 11 mov dword ptr [ecx],edx - 1001CF18: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1001CF1B: 79 D1 jns 1001CEEE - 1001CF1D: 89 4D 08 mov dword ptr [ebp+8],ecx - 1001CF20: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 1001CF23: 83 C8 FF or eax,0FFFFFFFFh - 1001CF26: D3 E0 shl eax,cl - 1001CF28: 21 07 and dword ptr [edi],eax - 1001CF2A: 8B 45 F4 mov eax,dword ptr [ebp-0Ch] - 1001CF2D: 40 inc eax - 1001CF2E: 83 F8 03 cmp eax,3 - 1001CF31: 7D 0D jge 1001CF40 - 1001CF33: 6A 03 push 3 - 1001CF35: 59 pop ecx - 1001CF36: 8D 7C 85 E0 lea edi,[ebp+eax*4-20h] - 1001CF3A: 2B C8 sub ecx,eax - 1001CF3C: 33 C0 xor eax,eax - 1001CF3E: F3 AB rep stos dword ptr es:[edi] - 1001CF40: 83 7D 08 00 cmp dword ptr [ebp+8],0 - 1001CF44: 74 01 je 1001CF47 - 1001CF46: 43 inc ebx - 1001CF47: A1 A4 59 02 10 mov eax,dword ptr ds:[100259A4h] - 1001CF4C: 8B C8 mov ecx,eax - 1001CF4E: 2B 0D A8 59 02 10 sub ecx,dword ptr ds:[100259A8h] - 1001CF54: 3B D9 cmp ebx,ecx - 1001CF56: 7D 0D jge 1001CF65 - 1001CF58: 33 C0 xor eax,eax - 1001CF5A: 8D 7D E0 lea edi,[ebp-20h] - 1001CF5D: AB stos dword ptr es:[edi] - 1001CF5E: AB stos dword ptr es:[edi] - 1001CF5F: AB stos dword ptr es:[edi] - 1001CF60: E9 0D 02 00 00 jmp 1001D172 - 1001CF65: 3B D8 cmp ebx,eax - 1001CF67: 0F 8F 0F 02 00 00 jg 1001D17C - 1001CF6D: 2B 45 F0 sub eax,dword ptr [ebp-10h] - 1001CF70: 8D 75 D4 lea esi,[ebp-2Ch] - 1001CF73: 8B C8 mov ecx,eax - 1001CF75: 8D 7D E0 lea edi,[ebp-20h] - 1001CF78: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001CF79: 99 cdq - 1001CF7A: 83 E2 1F and edx,1Fh - 1001CF7D: 03 C2 add eax,edx - 1001CF7F: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001CF80: 8B D1 mov edx,ecx - 1001CF82: C1 F8 05 sar eax,5 - 1001CF85: 81 E2 1F 00 00 80 and edx,8000001Fh - 1001CF8B: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001CF8C: 79 05 jns 1001CF93 - 1001CF8E: 4A dec edx - 1001CF8F: 83 CA E0 or edx,0FFFFFFE0h - 1001CF92: 42 inc edx - 1001CF93: 83 65 F4 00 and dword ptr [ebp-0Ch],0 - 1001CF97: 83 65 08 00 and dword ptr [ebp+8],0 - 1001CF9B: 83 CF FF or edi,0FFFFFFFFh - 1001CF9E: 8B CA mov ecx,edx - 1001CFA0: D3 E7 shl edi,cl - 1001CFA2: C7 45 FC 20 00 00 mov dword ptr [ebp-4],20h - 00 - 1001CFA9: 29 55 FC sub dword ptr [ebp-4],edx - 1001CFAC: F7 D7 not edi - 1001CFAE: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 1001CFB1: 8D 5C 9D E0 lea ebx,[ebp+ebx*4-20h] - 1001CFB5: 8B 33 mov esi,dword ptr [ebx] - 1001CFB7: 8B CE mov ecx,esi - 1001CFB9: 23 CF and ecx,edi - 1001CFBB: 89 4D F0 mov dword ptr [ebp-10h],ecx - 1001CFBE: 8B CA mov ecx,edx - 1001CFC0: D3 EE shr esi,cl - 1001CFC2: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1001CFC5: 0B 75 F4 or esi,dword ptr [ebp-0Ch] - 1001CFC8: 89 33 mov dword ptr [ebx],esi - 1001CFCA: 8B 75 F0 mov esi,dword ptr [ebp-10h] - 1001CFCD: D3 E6 shl esi,cl - 1001CFCF: FF 45 08 inc dword ptr [ebp+8] - 1001CFD2: 83 7D 08 03 cmp dword ptr [ebp+8],3 - 1001CFD6: 89 75 F4 mov dword ptr [ebp-0Ch],esi - 1001CFD9: 7C D3 jl 1001CFAE - 1001CFDB: 8B F0 mov esi,eax - 1001CFDD: 6A 02 push 2 - 1001CFDF: C1 E6 02 shl esi,2 - 1001CFE2: 8D 4D E8 lea ecx,[ebp-18h] - 1001CFE5: 5A pop edx - 1001CFE6: 2B CE sub ecx,esi - 1001CFE8: 3B D0 cmp edx,eax - 1001CFEA: 7C 08 jl 1001CFF4 - 1001CFEC: 8B 31 mov esi,dword ptr [ecx] - 1001CFEE: 89 74 95 E0 mov dword ptr [ebp+edx*4-20h],esi - 1001CFF2: EB 05 jmp 1001CFF9 - 1001CFF4: 83 64 95 E0 00 and dword ptr [ebp+edx*4-20h],0 - 1001CFF9: 4A dec edx - 1001CFFA: 83 E9 04 sub ecx,4 - 1001CFFD: 85 D2 test edx,edx - 1001CFFF: 7D E7 jge 1001CFE8 - 1001D001: 8B 35 A8 59 02 10 mov esi,dword ptr ds:[100259A8h] - 1001D007: 4E dec esi - 1001D008: 8D 4E 01 lea ecx,[esi+1] - 1001D00B: 8B C1 mov eax,ecx - 1001D00D: 99 cdq - 1001D00E: 83 E2 1F and edx,1Fh - 1001D011: 03 C2 add eax,edx - 1001D013: C1 F8 05 sar eax,5 - 1001D016: 8B D1 mov edx,ecx - 1001D018: 81 E2 1F 00 00 80 and edx,8000001Fh - 1001D01E: 89 45 F4 mov dword ptr [ebp-0Ch],eax - 1001D021: 79 05 jns 1001D028 - 1001D023: 4A dec edx - 1001D024: 83 CA E0 or edx,0FFFFFFE0h - 1001D027: 42 inc edx - 1001D028: 6A 1F push 1Fh - 1001D02A: 59 pop ecx - 1001D02B: 2B CA sub ecx,edx - 1001D02D: 33 D2 xor edx,edx - 1001D02F: 42 inc edx - 1001D030: D3 E2 shl edx,cl - 1001D032: 8D 5C 85 E0 lea ebx,[ebp+eax*4-20h] - 1001D036: 89 4D F0 mov dword ptr [ebp-10h],ecx - 1001D039: 85 13 test dword ptr [ebx],edx - 1001D03B: 0F 84 82 00 00 00 je 1001D0C3 - 1001D041: 83 CA FF or edx,0FFFFFFFFh - 1001D044: D3 E2 shl edx,cl - 1001D046: F7 D2 not edx - 1001D048: 85 54 85 E0 test dword ptr [ebp+eax*4-20h],edx - 1001D04C: EB 05 jmp 1001D053 - 1001D04E: 83 7C 85 E0 00 cmp dword ptr [ebp+eax*4-20h],0 - 1001D053: 75 08 jne 1001D05D - 1001D055: 40 inc eax - 1001D056: 83 F8 03 cmp eax,3 - 1001D059: 7C F3 jl 1001D04E - 1001D05B: EB 66 jmp 1001D0C3 - 1001D05D: 8B C6 mov eax,esi - 1001D05F: 99 cdq - 1001D060: 6A 1F push 1Fh - 1001D062: 59 pop ecx - 1001D063: 23 D1 and edx,ecx - 1001D065: 03 C2 add eax,edx - 1001D067: C1 F8 05 sar eax,5 - 1001D06A: 81 E6 1F 00 00 80 and esi,8000001Fh - 1001D070: 79 05 jns 1001D077 - 1001D072: 4E dec esi - 1001D073: 83 CE E0 or esi,0FFFFFFE0h - 1001D076: 46 inc esi - 1001D077: 83 65 08 00 and dword ptr [ebp+8],0 - 1001D07B: 33 D2 xor edx,edx - 1001D07D: 2B CE sub ecx,esi - 1001D07F: 42 inc edx - 1001D080: D3 E2 shl edx,cl - 1001D082: 8D 4C 85 E0 lea ecx,[ebp+eax*4-20h] - 1001D086: 8B 31 mov esi,dword ptr [ecx] - 1001D088: 8D 3C 16 lea edi,[esi+edx] - 1001D08B: 3B FE cmp edi,esi - 1001D08D: 72 04 jb 1001D093 - 1001D08F: 3B FA cmp edi,edx - 1001D091: 73 07 jae 1001D09A - 1001D093: C7 45 08 01 00 00 mov dword ptr [ebp+8],1 - 00 - 1001D09A: 89 39 mov dword ptr [ecx],edi - 1001D09C: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1001D09F: EB 1F jmp 1001D0C0 - 1001D0A1: 85 C9 test ecx,ecx - 1001D0A3: 74 1E je 1001D0C3 - 1001D0A5: 8D 4C 85 E0 lea ecx,[ebp+eax*4-20h] - 1001D0A9: 8B 11 mov edx,dword ptr [ecx] - 1001D0AB: 8D 72 01 lea esi,[edx+1] - 1001D0AE: 33 FF xor edi,edi - 1001D0B0: 3B F2 cmp esi,edx - 1001D0B2: 72 05 jb 1001D0B9 - 1001D0B4: 83 FE 01 cmp esi,1 - 1001D0B7: 73 03 jae 1001D0BC - 1001D0B9: 33 FF xor edi,edi - 1001D0BB: 47 inc edi - 1001D0BC: 89 31 mov dword ptr [ecx],esi - 1001D0BE: 8B CF mov ecx,edi - 1001D0C0: 48 dec eax - 1001D0C1: 79 DE jns 1001D0A1 - 1001D0C3: 8B 4D F0 mov ecx,dword ptr [ebp-10h] - 1001D0C6: 83 C8 FF or eax,0FFFFFFFFh - 1001D0C9: D3 E0 shl eax,cl - 1001D0CB: 21 03 and dword ptr [ebx],eax - 1001D0CD: 8B 45 F4 mov eax,dword ptr [ebp-0Ch] - 1001D0D0: 40 inc eax - 1001D0D1: 83 F8 03 cmp eax,3 - 1001D0D4: 7D 0D jge 1001D0E3 - 1001D0D6: 6A 03 push 3 - 1001D0D8: 59 pop ecx - 1001D0D9: 8D 7C 85 E0 lea edi,[ebp+eax*4-20h] - 1001D0DD: 2B C8 sub ecx,eax - 1001D0DF: 33 C0 xor eax,eax - 1001D0E1: F3 AB rep stos dword ptr es:[edi] - 1001D0E3: 8B 0D AC 59 02 10 mov ecx,dword ptr ds:[100259ACh] - 1001D0E9: 41 inc ecx - 1001D0EA: 8B C1 mov eax,ecx - 1001D0EC: 99 cdq - 1001D0ED: 83 E2 1F and edx,1Fh - 1001D0F0: 03 C2 add eax,edx - 1001D0F2: 8B D1 mov edx,ecx - 1001D0F4: C1 F8 05 sar eax,5 - 1001D0F7: 81 E2 1F 00 00 80 and edx,8000001Fh - 1001D0FD: 79 05 jns 1001D104 - 1001D0FF: 4A dec edx - 1001D100: 83 CA E0 or edx,0FFFFFFE0h - 1001D103: 42 inc edx - 1001D104: 83 65 F4 00 and dword ptr [ebp-0Ch],0 - 1001D108: 83 65 08 00 and dword ptr [ebp+8],0 - 1001D10C: 83 CF FF or edi,0FFFFFFFFh - 1001D10F: 8B CA mov ecx,edx - 1001D111: D3 E7 shl edi,cl - 1001D113: C7 45 FC 20 00 00 mov dword ptr [ebp-4],20h - 00 - 1001D11A: 29 55 FC sub dword ptr [ebp-4],edx - 1001D11D: F7 D7 not edi - 1001D11F: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 1001D122: 8D 5C 9D E0 lea ebx,[ebp+ebx*4-20h] - 1001D126: 8B 33 mov esi,dword ptr [ebx] - 1001D128: 8B CE mov ecx,esi - 1001D12A: 23 CF and ecx,edi - 1001D12C: 89 4D F0 mov dword ptr [ebp-10h],ecx - 1001D12F: 8B CA mov ecx,edx - 1001D131: D3 EE shr esi,cl - 1001D133: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1001D136: 0B 75 F4 or esi,dword ptr [ebp-0Ch] - 1001D139: 89 33 mov dword ptr [ebx],esi - 1001D13B: 8B 75 F0 mov esi,dword ptr [ebp-10h] - 1001D13E: D3 E6 shl esi,cl - 1001D140: FF 45 08 inc dword ptr [ebp+8] - 1001D143: 83 7D 08 03 cmp dword ptr [ebp+8],3 - 1001D147: 89 75 F4 mov dword ptr [ebp-0Ch],esi - 1001D14A: 7C D3 jl 1001D11F - 1001D14C: 8B F0 mov esi,eax - 1001D14E: 6A 02 push 2 - 1001D150: C1 E6 02 shl esi,2 - 1001D153: 8D 4D E8 lea ecx,[ebp-18h] - 1001D156: 5A pop edx - 1001D157: 2B CE sub ecx,esi - 1001D159: 3B D0 cmp edx,eax - 1001D15B: 7C 08 jl 1001D165 - 1001D15D: 8B 31 mov esi,dword ptr [ecx] - 1001D15F: 89 74 95 E0 mov dword ptr [ebp+edx*4-20h],esi - 1001D163: EB 05 jmp 1001D16A - 1001D165: 83 64 95 E0 00 and dword ptr [ebp+edx*4-20h],0 - 1001D16A: 4A dec edx - 1001D16B: 83 E9 04 sub ecx,4 - 1001D16E: 85 D2 test edx,edx - 1001D170: 7D E7 jge 1001D159 - 1001D172: 6A 02 push 2 - 1001D174: 33 DB xor ebx,ebx - 1001D176: 58 pop eax - 1001D177: E9 5A 01 00 00 jmp 1001D2D6 - 1001D17C: 3B 1D A0 59 02 10 cmp ebx,dword ptr ds:[100259A0h] - 1001D182: 8B 0D AC 59 02 10 mov ecx,dword ptr ds:[100259ACh] - 1001D188: 0F 8C AD 00 00 00 jl 1001D23B - 1001D18E: 33 C0 xor eax,eax - 1001D190: 8D 7D E0 lea edi,[ebp-20h] - 1001D193: AB stos dword ptr es:[edi] - 1001D194: AB stos dword ptr es:[edi] - 1001D195: AB stos dword ptr es:[edi] - 1001D196: 81 4D E0 00 00 00 or dword ptr [ebp-20h],80000000h - 80 - 1001D19D: 8B C1 mov eax,ecx - 1001D19F: 99 cdq - 1001D1A0: 83 E2 1F and edx,1Fh - 1001D1A3: 03 C2 add eax,edx - 1001D1A5: 8B D1 mov edx,ecx - 1001D1A7: C1 F8 05 sar eax,5 - 1001D1AA: 81 E2 1F 00 00 80 and edx,8000001Fh - 1001D1B0: 79 05 jns 1001D1B7 - 1001D1B2: 4A dec edx - 1001D1B3: 83 CA E0 or edx,0FFFFFFE0h - 1001D1B6: 42 inc edx - 1001D1B7: 83 65 F4 00 and dword ptr [ebp-0Ch],0 - 1001D1BB: 83 65 08 00 and dword ptr [ebp+8],0 - 1001D1BF: 83 CF FF or edi,0FFFFFFFFh - 1001D1C2: 8B CA mov ecx,edx - 1001D1C4: D3 E7 shl edi,cl - 1001D1C6: C7 45 FC 20 00 00 mov dword ptr [ebp-4],20h - 00 - 1001D1CD: 29 55 FC sub dword ptr [ebp-4],edx - 1001D1D0: F7 D7 not edi - 1001D1D2: 8B 5D 08 mov ebx,dword ptr [ebp+8] - 1001D1D5: 8D 5C 9D E0 lea ebx,[ebp+ebx*4-20h] - 1001D1D9: 8B 33 mov esi,dword ptr [ebx] - 1001D1DB: 8B CE mov ecx,esi - 1001D1DD: 23 CF and ecx,edi - 1001D1DF: 89 4D F0 mov dword ptr [ebp-10h],ecx - 1001D1E2: 8B CA mov ecx,edx - 1001D1E4: D3 EE shr esi,cl - 1001D1E6: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1001D1E9: 0B 75 F4 or esi,dword ptr [ebp-0Ch] - 1001D1EC: 89 33 mov dword ptr [ebx],esi - 1001D1EE: 8B 75 F0 mov esi,dword ptr [ebp-10h] - 1001D1F1: D3 E6 shl esi,cl - 1001D1F3: FF 45 08 inc dword ptr [ebp+8] - 1001D1F6: 83 7D 08 03 cmp dword ptr [ebp+8],3 - 1001D1FA: 89 75 F4 mov dword ptr [ebp-0Ch],esi - 1001D1FD: 7C D3 jl 1001D1D2 - 1001D1FF: 8B F0 mov esi,eax - 1001D201: 6A 02 push 2 - 1001D203: C1 E6 02 shl esi,2 - 1001D206: 8D 4D E8 lea ecx,[ebp-18h] - 1001D209: 5A pop edx - 1001D20A: 2B CE sub ecx,esi - 1001D20C: 3B D0 cmp edx,eax - 1001D20E: 7C 08 jl 1001D218 - 1001D210: 8B 31 mov esi,dword ptr [ecx] - 1001D212: 89 74 95 E0 mov dword ptr [ebp+edx*4-20h],esi - 1001D216: EB 05 jmp 1001D21D - 1001D218: 83 64 95 E0 00 and dword ptr [ebp+edx*4-20h],0 - 1001D21D: 4A dec edx - 1001D21E: 83 E9 04 sub ecx,4 - 1001D221: 85 D2 test edx,edx - 1001D223: 7D E7 jge 1001D20C - 1001D225: A1 A0 59 02 10 mov eax,dword ptr ds:[100259A0h] - 1001D22A: 8B 0D B4 59 02 10 mov ecx,dword ptr ds:[100259B4h] - 1001D230: 8D 1C 01 lea ebx,[ecx+eax] - 1001D233: 33 C0 xor eax,eax - 1001D235: 40 inc eax - 1001D236: E9 9B 00 00 00 jmp 1001D2D6 - 1001D23B: A1 B4 59 02 10 mov eax,dword ptr ds:[100259B4h] - 1001D240: 81 65 E0 FF FF FF and dword ptr [ebp-20h],7FFFFFFFh - 7F - 1001D247: 03 D8 add ebx,eax - 1001D249: 8B C1 mov eax,ecx - 1001D24B: 99 cdq - 1001D24C: 83 E2 1F and edx,1Fh - 1001D24F: 03 C2 add eax,edx - 1001D251: 8B D1 mov edx,ecx - 1001D253: C1 F8 05 sar eax,5 - 1001D256: 81 E2 1F 00 00 80 and edx,8000001Fh - 1001D25C: 79 05 jns 1001D263 - 1001D25E: 4A dec edx - 1001D25F: 83 CA E0 or edx,0FFFFFFE0h - 1001D262: 42 inc edx - 1001D263: 83 65 F4 00 and dword ptr [ebp-0Ch],0 - 1001D267: 83 65 08 00 and dword ptr [ebp+8],0 - 1001D26B: 83 CE FF or esi,0FFFFFFFFh - 1001D26E: 8B CA mov ecx,edx - 1001D270: D3 E6 shl esi,cl - 1001D272: C7 45 FC 20 00 00 mov dword ptr [ebp-4],20h - 00 - 1001D279: 29 55 FC sub dword ptr [ebp-4],edx - 1001D27C: F7 D6 not esi - 1001D27E: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1001D281: 8B 7C 8D E0 mov edi,dword ptr [ebp+ecx*4-20h] - 1001D285: 8B CF mov ecx,edi - 1001D287: 23 CE and ecx,esi - 1001D289: 89 4D F0 mov dword ptr [ebp-10h],ecx - 1001D28C: 8B CA mov ecx,edx - 1001D28E: D3 EF shr edi,cl - 1001D290: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1001D293: 0B 7D F4 or edi,dword ptr [ebp-0Ch] - 1001D296: 89 7C 8D E0 mov dword ptr [ebp+ecx*4-20h],edi - 1001D29A: 8B 7D F0 mov edi,dword ptr [ebp-10h] - 1001D29D: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1001D2A0: D3 E7 shl edi,cl - 1001D2A2: FF 45 08 inc dword ptr [ebp+8] - 1001D2A5: 83 7D 08 03 cmp dword ptr [ebp+8],3 - 1001D2A9: 89 7D F4 mov dword ptr [ebp-0Ch],edi - 1001D2AC: 7C D0 jl 1001D27E - 1001D2AE: 8B F0 mov esi,eax - 1001D2B0: 6A 02 push 2 - 1001D2B2: C1 E6 02 shl esi,2 - 1001D2B5: 8D 4D E8 lea ecx,[ebp-18h] - 1001D2B8: 5A pop edx - 1001D2B9: 2B CE sub ecx,esi - 1001D2BB: 3B D0 cmp edx,eax - 1001D2BD: 7C 08 jl 1001D2C7 - 1001D2BF: 8B 31 mov esi,dword ptr [ecx] - 1001D2C1: 89 74 95 E0 mov dword ptr [ebp+edx*4-20h],esi - 1001D2C5: EB 05 jmp 1001D2CC - 1001D2C7: 83 64 95 E0 00 and dword ptr [ebp+edx*4-20h],0 - 1001D2CC: 4A dec edx - 1001D2CD: 83 E9 04 sub ecx,4 - 1001D2D0: 85 D2 test edx,edx - 1001D2D2: 7D E7 jge 1001D2BB - 1001D2D4: 33 C0 xor eax,eax - 1001D2D6: 5E pop esi - 1001D2D7: 6A 1F push 1Fh - 1001D2D9: 59 pop ecx - 1001D2DA: 2B 0D AC 59 02 10 sub ecx,dword ptr ds:[100259ACh] - 1001D2E0: D3 E3 shl ebx,cl - 1001D2E2: 8B 4D EC mov ecx,dword ptr [ebp-14h] - 1001D2E5: F7 D9 neg ecx - 1001D2E7: 1B C9 sbb ecx,ecx - 1001D2E9: 81 E1 00 00 00 80 and ecx,80000000h - 1001D2EF: 0B D9 or ebx,ecx - 1001D2F1: 8B 0D B0 59 02 10 mov ecx,dword ptr ds:[100259B0h] - 1001D2F7: 0B 5D E0 or ebx,dword ptr [ebp-20h] - 1001D2FA: 83 F9 40 cmp ecx,40h - 1001D2FD: 75 0D jne 1001D30C - 1001D2FF: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch] - 1001D302: 8B 55 E4 mov edx,dword ptr [ebp-1Ch] - 1001D305: 89 59 04 mov dword ptr [ecx+4],ebx - 1001D308: 89 11 mov dword ptr [ecx],edx - 1001D30A: EB 0A jmp 1001D316 - 1001D30C: 83 F9 20 cmp ecx,20h - 1001D30F: 75 05 jne 1001D316 - 1001D311: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch] - 1001D314: 89 19 mov dword ptr [ecx],ebx - 1001D316: 5F pop edi - 1001D317: 5B pop ebx - 1001D318: C9 leave - 1001D319: C3 ret - 1001D31A: 8B FF mov edi,edi - 1001D31C: 55 push ebp - 1001D31D: 8B EC mov ebp,esp - 1001D31F: 83 EC 7C sub esp,7Ch - 1001D322: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1001D327: 33 C5 xor eax,ebp - 1001D329: 89 45 FC mov dword ptr [ebp-4],eax - 1001D32C: 8B 45 08 mov eax,dword ptr [ebp+8] - 1001D32F: 53 push ebx - 1001D330: 33 DB xor ebx,ebx - 1001D332: 56 push esi - 1001D333: 33 F6 xor esi,esi - 1001D335: 89 45 88 mov dword ptr [ebp-78h],eax - 1001D338: 8B 45 0C mov eax,dword ptr [ebp+0Ch] - 1001D33B: 46 inc esi - 1001D33C: 33 C9 xor ecx,ecx - 1001D33E: 57 push edi - 1001D33F: 89 45 90 mov dword ptr [ebp-70h],eax - 1001D342: 8D 7D E0 lea edi,[ebp-20h] - 1001D345: 89 5D 8C mov dword ptr [ebp-74h],ebx - 1001D348: 89 75 98 mov dword ptr [ebp-68h],esi - 1001D34B: 89 5D B4 mov dword ptr [ebp-4Ch],ebx - 1001D34E: 89 5D A8 mov dword ptr [ebp-58h],ebx - 1001D351: 89 5D A4 mov dword ptr [ebp-5Ch],ebx - 1001D354: 89 5D A0 mov dword ptr [ebp-60h],ebx - 1001D357: 89 5D 9C mov dword ptr [ebp-64h],ebx - 1001D35A: 89 5D B0 mov dword ptr [ebp-50h],ebx - 1001D35D: 89 5D 94 mov dword ptr [ebp-6Ch],ebx - 1001D360: 39 5D 24 cmp dword ptr [ebp+24h],ebx - 1001D363: 75 1F jne 1001D384 - 1001D365: E8 DF 1C FF FF call 1000F049 - 1001D36A: 53 push ebx - 1001D36B: 53 push ebx - 1001D36C: 53 push ebx - 1001D36D: 53 push ebx - 1001D36E: 53 push ebx - 1001D36F: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1001D375: E8 67 1C FF FF call 1000EFE1 - 1001D37A: 83 C4 14 add esp,14h - 1001D37D: 33 C0 xor eax,eax - 1001D37F: E9 4E 06 00 00 jmp 1001D9D2 - 1001D384: 8B 55 10 mov edx,dword ptr [ebp+10h] - 1001D387: 89 55 AC mov dword ptr [ebp-54h],edx - 1001D38A: 8A 02 mov al,byte ptr [edx] - 1001D38C: 3C 20 cmp al,20h - 1001D38E: 74 0C je 1001D39C - 1001D390: 3C 09 cmp al,9 - 1001D392: 74 08 je 1001D39C - 1001D394: 3C 0A cmp al,0Ah - 1001D396: 74 04 je 1001D39C - 1001D398: 3C 0D cmp al,0Dh - 1001D39A: 75 03 jne 1001D39F - 1001D39C: 42 inc edx - 1001D39D: EB EB jmp 1001D38A - 1001D39F: B3 30 mov bl,30h - 1001D3A1: 8A 02 mov al,byte ptr [edx] - 1001D3A3: 42 inc edx - 1001D3A4: 83 F9 0B cmp ecx,0Bh - 1001D3A7: 0F 87 2F 02 00 00 ja 1001D5DC - 1001D3AD: FF 24 8D E2 D9 01 jmp dword ptr [ecx*4+1001D9E2h] - 10 - 1001D3B4: 8A C8 mov cl,al - 1001D3B6: 80 E9 31 sub cl,31h - 1001D3B9: 80 F9 08 cmp cl,8 - 1001D3BC: 77 06 ja 1001D3C4 - 1001D3BE: 6A 03 push 3 - 1001D3C0: 59 pop ecx - 1001D3C1: 4A dec edx - 1001D3C2: EB DD jmp 1001D3A1 - 1001D3C4: 8B 4D 24 mov ecx,dword ptr [ebp+24h] - 1001D3C7: 8B 09 mov ecx,dword ptr [ecx] - 1001D3C9: 8B 89 BC 00 00 00 mov ecx,dword ptr [ecx+000000BCh] - 1001D3CF: 8B 09 mov ecx,dword ptr [ecx] - 1001D3D1: 3A 01 cmp al,byte ptr [ecx] - 1001D3D3: 75 05 jne 1001D3DA - 1001D3D5: 6A 05 push 5 - 1001D3D7: 59 pop ecx - 1001D3D8: EB C7 jmp 1001D3A1 - 1001D3DA: 0F BE C0 movsx eax,al - 1001D3DD: 83 E8 2B sub eax,2Bh - 1001D3E0: 74 1D je 1001D3FF - 1001D3E2: 48 dec eax - 1001D3E3: 48 dec eax - 1001D3E4: 74 0D je 1001D3F3 - 1001D3E6: 83 E8 03 sub eax,3 - 1001D3E9: 0F 85 8B 01 00 00 jne 1001D57A - 1001D3EF: 8B CE mov ecx,esi - 1001D3F1: EB AE jmp 1001D3A1 - 1001D3F3: 6A 02 push 2 - 1001D3F5: 59 pop ecx - 1001D3F6: C7 45 8C 00 80 00 mov dword ptr [ebp-74h],8000h - 00 - 1001D3FD: EB A2 jmp 1001D3A1 - 1001D3FF: 83 65 8C 00 and dword ptr [ebp-74h],0 - 1001D403: 6A 02 push 2 - 1001D405: 59 pop ecx - 1001D406: EB 99 jmp 1001D3A1 - 1001D408: 8A C8 mov cl,al - 1001D40A: 80 E9 31 sub cl,31h - 1001D40D: 89 75 A8 mov dword ptr [ebp-58h],esi - 1001D410: 80 F9 08 cmp cl,8 - 1001D413: 76 A9 jbe 1001D3BE - 1001D415: 8B 4D 24 mov ecx,dword ptr [ebp+24h] - 1001D418: 8B 09 mov ecx,dword ptr [ecx] - 1001D41A: 8B 89 BC 00 00 00 mov ecx,dword ptr [ecx+000000BCh] - 1001D420: 8B 09 mov ecx,dword ptr [ecx] - 1001D422: 3A 01 cmp al,byte ptr [ecx] - 1001D424: 75 04 jne 1001D42A - 1001D426: 6A 04 push 4 - 1001D428: EB AD jmp 1001D3D7 - 1001D42A: 3C 2B cmp al,2Bh - 1001D42C: 74 28 je 1001D456 - 1001D42E: 3C 2D cmp al,2Dh - 1001D430: 74 24 je 1001D456 - 1001D432: 3A C3 cmp al,bl - 1001D434: 74 B9 je 1001D3EF - 1001D436: 3C 43 cmp al,43h - 1001D438: 0F 8E 3C 01 00 00 jle 1001D57A - 1001D43E: 3C 45 cmp al,45h - 1001D440: 7E 10 jle 1001D452 - 1001D442: 3C 63 cmp al,63h - 1001D444: 0F 8E 30 01 00 00 jle 1001D57A - 1001D44A: 3C 65 cmp al,65h - 1001D44C: 0F 8F 28 01 00 00 jg 1001D57A - 1001D452: 6A 06 push 6 - 1001D454: EB 81 jmp 1001D3D7 - 1001D456: 4A dec edx - 1001D457: 6A 0B push 0Bh - 1001D459: E9 79 FF FF FF jmp 1001D3D7 - 1001D45E: 8A C8 mov cl,al - 1001D460: 80 E9 31 sub cl,31h - 1001D463: 80 F9 08 cmp cl,8 - 1001D466: 0F 86 52 FF FF FF jbe 1001D3BE - 1001D46C: 8B 4D 24 mov ecx,dword ptr [ebp+24h] - 1001D46F: 8B 09 mov ecx,dword ptr [ecx] - 1001D471: 8B 89 BC 00 00 00 mov ecx,dword ptr [ecx+000000BCh] - 1001D477: 8B 09 mov ecx,dword ptr [ecx] - 1001D479: 3A 01 cmp al,byte ptr [ecx] - 1001D47B: 0F 84 54 FF FF FF je 1001D3D5 - 1001D481: 3A C3 cmp al,bl - 1001D483: 0F 84 66 FF FF FF je 1001D3EF - 1001D489: 8B 55 AC mov edx,dword ptr [ebp-54h] - 1001D48C: E9 14 01 00 00 jmp 1001D5A5 - 1001D491: 89 75 A8 mov dword ptr [ebp-58h],esi - 1001D494: EB 1A jmp 1001D4B0 - 1001D496: 3C 39 cmp al,39h - 1001D498: 7F 1A jg 1001D4B4 - 1001D49A: 83 7D B4 19 cmp dword ptr [ebp-4Ch],19h - 1001D49E: 73 0A jae 1001D4AA - 1001D4A0: FF 45 B4 inc dword ptr [ebp-4Ch] - 1001D4A3: 2A C3 sub al,bl - 1001D4A5: 88 07 mov byte ptr [edi],al - 1001D4A7: 47 inc edi - 1001D4A8: EB 03 jmp 1001D4AD - 1001D4AA: FF 45 B0 inc dword ptr [ebp-50h] - 1001D4AD: 8A 02 mov al,byte ptr [edx] - 1001D4AF: 42 inc edx - 1001D4B0: 3A C3 cmp al,bl - 1001D4B2: 7D E2 jge 1001D496 - 1001D4B4: 8B 4D 24 mov ecx,dword ptr [ebp+24h] - 1001D4B7: 8B 09 mov ecx,dword ptr [ecx] - 1001D4B9: 8B 89 BC 00 00 00 mov ecx,dword ptr [ecx+000000BCh] - 1001D4BF: 8B 09 mov ecx,dword ptr [ecx] - 1001D4C1: 3A 01 cmp al,byte ptr [ecx] - 1001D4C3: 0F 84 5D FF FF FF je 1001D426 - 1001D4C9: 3C 2B cmp al,2Bh - 1001D4CB: 74 89 je 1001D456 - 1001D4CD: 3C 2D cmp al,2Dh - 1001D4CF: 74 85 je 1001D456 - 1001D4D1: E9 60 FF FF FF jmp 1001D436 - 1001D4D6: 83 7D B4 00 cmp dword ptr [ebp-4Ch],0 - 1001D4DA: 89 75 A8 mov dword ptr [ebp-58h],esi - 1001D4DD: 89 75 A4 mov dword ptr [ebp-5Ch],esi - 1001D4E0: 75 26 jne 1001D508 - 1001D4E2: EB 06 jmp 1001D4EA - 1001D4E4: FF 4D B0 dec dword ptr [ebp-50h] - 1001D4E7: 8A 02 mov al,byte ptr [edx] - 1001D4E9: 42 inc edx - 1001D4EA: 3A C3 cmp al,bl - 1001D4EC: 74 F6 je 1001D4E4 - 1001D4EE: EB 18 jmp 1001D508 - 1001D4F0: 3C 39 cmp al,39h - 1001D4F2: 7F D5 jg 1001D4C9 - 1001D4F4: 83 7D B4 19 cmp dword ptr [ebp-4Ch],19h - 1001D4F8: 73 0B jae 1001D505 - 1001D4FA: FF 45 B4 inc dword ptr [ebp-4Ch] - 1001D4FD: 2A C3 sub al,bl - 1001D4FF: 88 07 mov byte ptr [edi],al - 1001D501: 47 inc edi - 1001D502: FF 4D B0 dec dword ptr [ebp-50h] - 1001D505: 8A 02 mov al,byte ptr [edx] - 1001D507: 42 inc edx - 1001D508: 3A C3 cmp al,bl - 1001D50A: 7D E4 jge 1001D4F0 - 1001D50C: EB BB jmp 1001D4C9 - 1001D50E: 2A C3 sub al,bl - 1001D510: 89 75 A4 mov dword ptr [ebp-5Ch],esi - 1001D513: 3C 09 cmp al,9 - 1001D515: 0F 87 6E FF FF FF ja 1001D489 - 1001D51B: 6A 04 push 4 - 1001D51D: E9 9E FE FF FF jmp 1001D3C0 - 1001D522: 8D 4A FE lea ecx,[edx-2] - 1001D525: 89 4D AC mov dword ptr [ebp-54h],ecx - 1001D528: 8A C8 mov cl,al - 1001D52A: 80 E9 31 sub cl,31h - 1001D52D: 80 F9 08 cmp cl,8 - 1001D530: 77 07 ja 1001D539 - 1001D532: 6A 09 push 9 - 1001D534: E9 87 FE FF FF jmp 1001D3C0 - 1001D539: 0F BE C0 movsx eax,al - 1001D53C: 83 E8 2B sub eax,2Bh - 1001D53F: 74 20 je 1001D561 - 1001D541: 48 dec eax - 1001D542: 48 dec eax - 1001D543: 74 10 je 1001D555 - 1001D545: 83 E8 03 sub eax,3 - 1001D548: 0F 85 3B FF FF FF jne 1001D489 - 1001D54E: 6A 08 push 8 - 1001D550: E9 82 FE FF FF jmp 1001D3D7 - 1001D555: 83 4D 98 FF or dword ptr [ebp-68h],0FFFFFFFFh - 1001D559: 6A 07 push 7 - 1001D55B: 59 pop ecx - 1001D55C: E9 40 FE FF FF jmp 1001D3A1 - 1001D561: 6A 07 push 7 - 1001D563: E9 6F FE FF FF jmp 1001D3D7 - 1001D568: 89 75 A0 mov dword ptr [ebp-60h],esi - 1001D56B: EB 03 jmp 1001D570 - 1001D56D: 8A 02 mov al,byte ptr [edx] - 1001D56F: 42 inc edx - 1001D570: 3A C3 cmp al,bl - 1001D572: 74 F9 je 1001D56D - 1001D574: 2C 31 sub al,31h - 1001D576: 3C 08 cmp al,8 - 1001D578: 76 B8 jbe 1001D532 - 1001D57A: 4A dec edx - 1001D57B: EB 28 jmp 1001D5A5 - 1001D57D: 8A C8 mov cl,al - 1001D57F: 80 E9 31 sub cl,31h - 1001D582: 80 F9 08 cmp cl,8 - 1001D585: 76 AB jbe 1001D532 - 1001D587: 3A C3 cmp al,bl - 1001D589: EB BD jmp 1001D548 - 1001D58B: 83 7D 20 00 cmp dword ptr [ebp+20h],0 - 1001D58F: 74 47 je 1001D5D8 - 1001D591: 0F BE C0 movsx eax,al - 1001D594: 83 E8 2B sub eax,2Bh - 1001D597: 8D 4A FF lea ecx,[edx-1] - 1001D59A: 89 4D AC mov dword ptr [ebp-54h],ecx - 1001D59D: 74 C2 je 1001D561 - 1001D59F: 48 dec eax - 1001D5A0: 48 dec eax - 1001D5A1: 74 B2 je 1001D555 - 1001D5A3: 8B D1 mov edx,ecx - 1001D5A5: 83 7D A8 00 cmp dword ptr [ebp-58h],0 - 1001D5A9: 8B 45 90 mov eax,dword ptr [ebp-70h] - 1001D5AC: 89 10 mov dword ptr [eax],edx - 1001D5AE: 0F 84 D9 03 00 00 je 1001D98D - 1001D5B4: 6A 18 push 18h - 1001D5B6: 58 pop eax - 1001D5B7: 39 45 B4 cmp dword ptr [ebp-4Ch],eax - 1001D5BA: 76 10 jbe 1001D5CC - 1001D5BC: 80 7D F7 05 cmp byte ptr [ebp-9],5 - 1001D5C0: 7C 03 jl 1001D5C5 - 1001D5C2: FE 45 F7 inc byte ptr [ebp-9] - 1001D5C5: 4F dec edi - 1001D5C6: FF 45 B0 inc dword ptr [ebp-50h] - 1001D5C9: 89 45 B4 mov dword ptr [ebp-4Ch],eax - 1001D5CC: 83 7D B4 00 cmp dword ptr [ebp-4Ch],0 - 1001D5D0: 0F 86 DE 03 00 00 jbe 1001D9B4 - 1001D5D6: EB 59 jmp 1001D631 - 1001D5D8: 6A 0A push 0Ah - 1001D5DA: 59 pop ecx - 1001D5DB: 4A dec edx - 1001D5DC: 83 F9 0A cmp ecx,0Ah - 1001D5DF: 0F 85 BC FD FF FF jne 1001D3A1 - 1001D5E5: EB BE jmp 1001D5A5 - 1001D5E7: 89 75 A0 mov dword ptr [ebp-60h],esi - 1001D5EA: 33 C9 xor ecx,ecx - 1001D5EC: EB 19 jmp 1001D607 - 1001D5EE: 3C 39 cmp al,39h - 1001D5F0: 7F 20 jg 1001D612 - 1001D5F2: 6B C9 0A imul ecx,ecx,0Ah - 1001D5F5: 0F BE F0 movsx esi,al - 1001D5F8: 8D 4C 31 D0 lea ecx,[ecx+esi-30h] - 1001D5FC: 81 F9 50 14 00 00 cmp ecx,1450h - 1001D602: 7F 09 jg 1001D60D - 1001D604: 8A 02 mov al,byte ptr [edx] - 1001D606: 42 inc edx - 1001D607: 3A C3 cmp al,bl - 1001D609: 7D E3 jge 1001D5EE - 1001D60B: EB 05 jmp 1001D612 - 1001D60D: B9 51 14 00 00 mov ecx,1451h - 1001D612: 89 4D 9C mov dword ptr [ebp-64h],ecx - 1001D615: EB 0B jmp 1001D622 - 1001D617: 3C 39 cmp al,39h - 1001D619: 0F 8F 5B FF FF FF jg 1001D57A - 1001D61F: 8A 02 mov al,byte ptr [edx] - 1001D621: 42 inc edx - 1001D622: 3A C3 cmp al,bl - 1001D624: 7D F1 jge 1001D617 - 1001D626: E9 4F FF FF FF jmp 1001D57A - 1001D62B: FF 4D B4 dec dword ptr [ebp-4Ch] - 1001D62E: FF 45 B0 inc dword ptr [ebp-50h] - 1001D631: 4F dec edi - 1001D632: 80 3F 00 cmp byte ptr [edi],0 - 1001D635: 74 F4 je 1001D62B - 1001D637: 8D 45 C4 lea eax,[ebp-3Ch] - 1001D63A: 50 push eax - 1001D63B: FF 75 B4 push dword ptr [ebp-4Ch] - 1001D63E: 8D 45 E0 lea eax,[ebp-20h] - 1001D641: 50 push eax - 1001D642: E8 02 13 00 00 call 1001E949 - 1001D647: 8B 45 9C mov eax,dword ptr [ebp-64h] - 1001D64A: 33 D2 xor edx,edx - 1001D64C: 83 C4 0C add esp,0Ch - 1001D64F: 39 55 98 cmp dword ptr [ebp-68h],edx - 1001D652: 7D 02 jge 1001D656 - 1001D654: F7 D8 neg eax - 1001D656: 03 45 B0 add eax,dword ptr [ebp-50h] - 1001D659: 39 55 A0 cmp dword ptr [ebp-60h],edx - 1001D65C: 75 03 jne 1001D661 - 1001D65E: 03 45 18 add eax,dword ptr [ebp+18h] - 1001D661: 39 55 A4 cmp dword ptr [ebp-5Ch],edx - 1001D664: 75 03 jne 1001D669 - 1001D666: 2B 45 1C sub eax,dword ptr [ebp+1Ch] - 1001D669: 3D 50 14 00 00 cmp eax,1450h - 1001D66E: 0F 8F 22 03 00 00 jg 1001D996 - 1001D674: 3D B0 EB FF FF cmp eax,0FFFFEBB0h - 1001D679: 0F 8C 2E 03 00 00 jl 1001D9AD - 1001D67F: B9 C0 59 02 10 mov ecx,100259C0h - 1001D684: 83 E9 60 sub ecx,60h - 1001D687: 89 45 AC mov dword ptr [ebp-54h],eax - 1001D68A: 3B C2 cmp eax,edx - 1001D68C: 0F 84 E9 02 00 00 je 1001D97B - 1001D692: 7D 0D jge 1001D6A1 - 1001D694: F7 D8 neg eax - 1001D696: B9 20 5B 02 10 mov ecx,10025B20h - 1001D69B: 89 45 AC mov dword ptr [ebp-54h],eax - 1001D69E: 83 E9 60 sub ecx,60h - 1001D6A1: 39 55 14 cmp dword ptr [ebp+14h],edx - 1001D6A4: 75 06 jne 1001D6AC - 1001D6A6: 33 C0 xor eax,eax - 1001D6A8: 66 89 45 C4 mov word ptr [ebp-3Ch],ax - 1001D6AC: 39 55 AC cmp dword ptr [ebp-54h],edx - 1001D6AF: 0F 84 C6 02 00 00 je 1001D97B - 1001D6B5: EB 05 jmp 1001D6BC - 1001D6B7: 8B 4D 84 mov ecx,dword ptr [ebp-7Ch] - 1001D6BA: 33 D2 xor edx,edx - 1001D6BC: 8B 45 AC mov eax,dword ptr [ebp-54h] - 1001D6BF: C1 7D AC 03 sar dword ptr [ebp-54h],3 - 1001D6C3: 83 C1 54 add ecx,54h - 1001D6C6: 83 E0 07 and eax,7 - 1001D6C9: 89 4D 84 mov dword ptr [ebp-7Ch],ecx - 1001D6CC: 3B C2 cmp eax,edx - 1001D6CE: 0F 84 9D 02 00 00 je 1001D971 - 1001D6D4: 6B C0 0C imul eax,eax,0Ch - 1001D6D7: 03 C1 add eax,ecx - 1001D6D9: 8B D8 mov ebx,eax - 1001D6DB: B8 00 80 00 00 mov eax,8000h - 1001D6E0: 66 39 03 cmp word ptr [ebx],ax - 1001D6E3: 72 0E jb 1001D6F3 - 1001D6E5: 8B F3 mov esi,ebx - 1001D6E7: 8D 7D B8 lea edi,[ebp-48h] - 1001D6EA: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001D6EB: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001D6EC: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001D6ED: FF 4D BA dec dword ptr [ebp-46h] - 1001D6F0: 8D 5D B8 lea ebx,[ebp-48h] - 1001D6F3: 0F B7 4B 0A movzx ecx,word ptr [ebx+0Ah] - 1001D6F7: 33 C0 xor eax,eax - 1001D6F9: 89 45 B0 mov dword ptr [ebp-50h],eax - 1001D6FC: 89 45 D4 mov dword ptr [ebp-2Ch],eax - 1001D6FF: 89 45 D8 mov dword ptr [ebp-28h],eax - 1001D702: 89 45 DC mov dword ptr [ebp-24h],eax - 1001D705: 8B 45 CE mov eax,dword ptr [ebp-32h] - 1001D708: 8B F1 mov esi,ecx - 1001D70A: BA FF 7F 00 00 mov edx,7FFFh - 1001D70F: 33 F0 xor esi,eax - 1001D711: 23 C2 and eax,edx - 1001D713: 23 CA and ecx,edx - 1001D715: 81 E6 00 80 00 00 and esi,8000h - 1001D71B: BF FF 7F 00 00 mov edi,7FFFh - 1001D720: 8D 14 01 lea edx,[ecx+eax] - 1001D723: 89 75 90 mov dword ptr [ebp-70h],esi - 1001D726: 0F B7 D2 movzx edx,dx - 1001D729: 66 3B C7 cmp ax,di - 1001D72C: 0F 83 21 02 00 00 jae 1001D953 - 1001D732: 66 3B CF cmp cx,di - 1001D735: 0F 83 18 02 00 00 jae 1001D953 - 1001D73B: BF FD BF 00 00 mov edi,0BFFDh - 1001D740: 66 3B D7 cmp dx,di - 1001D743: 0F 87 0A 02 00 00 ja 1001D953 - 1001D749: BE BF 3F 00 00 mov esi,3FBFh - 1001D74E: 66 3B D6 cmp dx,si - 1001D751: 77 0D ja 1001D760 - 1001D753: 33 C0 xor eax,eax - 1001D755: 89 45 C8 mov dword ptr [ebp-38h],eax - 1001D758: 89 45 C4 mov dword ptr [ebp-3Ch],eax - 1001D75B: E9 0E 02 00 00 jmp 1001D96E - 1001D760: 33 F6 xor esi,esi - 1001D762: 66 3B C6 cmp ax,si - 1001D765: 75 1F jne 1001D786 - 1001D767: 42 inc edx - 1001D768: F7 45 CC FF FF FF test dword ptr [ebp-34h],7FFFFFFFh - 7F - 1001D76F: 75 15 jne 1001D786 - 1001D771: 39 75 C8 cmp dword ptr [ebp-38h],esi - 1001D774: 75 10 jne 1001D786 - 1001D776: 39 75 C4 cmp dword ptr [ebp-3Ch],esi - 1001D779: 75 0B jne 1001D786 - 1001D77B: 33 C0 xor eax,eax - 1001D77D: 66 89 45 CE mov word ptr [ebp-32h],ax - 1001D781: E9 EB 01 00 00 jmp 1001D971 - 1001D786: 66 3B CE cmp cx,si - 1001D789: 75 21 jne 1001D7AC - 1001D78B: 42 inc edx - 1001D78C: F7 43 08 FF FF FF test dword ptr [ebx+8],7FFFFFFFh - 7F - 1001D793: 75 17 jne 1001D7AC - 1001D795: 39 73 04 cmp dword ptr [ebx+4],esi - 1001D798: 75 12 jne 1001D7AC - 1001D79A: 39 33 cmp dword ptr [ebx],esi - 1001D79C: 75 0E jne 1001D7AC - 1001D79E: 89 75 CC mov dword ptr [ebp-34h],esi - 1001D7A1: 89 75 C8 mov dword ptr [ebp-38h],esi - 1001D7A4: 89 75 C4 mov dword ptr [ebp-3Ch],esi - 1001D7A7: E9 C5 01 00 00 jmp 1001D971 - 1001D7AC: 89 75 98 mov dword ptr [ebp-68h],esi - 1001D7AF: 8D 7D D8 lea edi,[ebp-28h] - 1001D7B2: C7 45 A8 05 00 00 mov dword ptr [ebp-58h],5 - 00 - 1001D7B9: 8B 45 98 mov eax,dword ptr [ebp-68h] - 1001D7BC: 8B 4D A8 mov ecx,dword ptr [ebp-58h] - 1001D7BF: 03 C0 add eax,eax - 1001D7C1: 89 4D 9C mov dword ptr [ebp-64h],ecx - 1001D7C4: 85 C9 test ecx,ecx - 1001D7C6: 7E 52 jle 1001D81A - 1001D7C8: 8D 44 05 C4 lea eax,[ebp+eax-3Ch] - 1001D7CC: 89 45 A4 mov dword ptr [ebp-5Ch],eax - 1001D7CF: 8D 43 08 lea eax,[ebx+8] - 1001D7D2: 89 45 A0 mov dword ptr [ebp-60h],eax - 1001D7D5: 8B 45 A0 mov eax,dword ptr [ebp-60h] - 1001D7D8: 8B 4D A4 mov ecx,dword ptr [ebp-5Ch] - 1001D7DB: 0F B7 09 movzx ecx,word ptr [ecx] - 1001D7DE: 0F B7 00 movzx eax,word ptr [eax] - 1001D7E1: 83 65 B4 00 and dword ptr [ebp-4Ch],0 - 1001D7E5: 0F AF C1 imul eax,ecx - 1001D7E8: 8B 4F FC mov ecx,dword ptr [edi-4] - 1001D7EB: 8D 34 01 lea esi,[ecx+eax] - 1001D7EE: 3B F1 cmp esi,ecx - 1001D7F0: 72 04 jb 1001D7F6 - 1001D7F2: 3B F0 cmp esi,eax - 1001D7F4: 73 07 jae 1001D7FD - 1001D7F6: C7 45 B4 01 00 00 mov dword ptr [ebp-4Ch],1 - 00 - 1001D7FD: 83 7D B4 00 cmp dword ptr [ebp-4Ch],0 - 1001D801: 89 77 FC mov dword ptr [edi-4],esi - 1001D804: 74 03 je 1001D809 - 1001D806: 66 FF 07 inc word ptr [edi] - 1001D809: 83 45 A4 02 add dword ptr [ebp-5Ch],2 - 1001D80D: 83 6D A0 02 sub dword ptr [ebp-60h],2 - 1001D811: FF 4D 9C dec dword ptr [ebp-64h] - 1001D814: 83 7D 9C 00 cmp dword ptr [ebp-64h],0 - 1001D818: 7F BB jg 1001D7D5 - 1001D81A: 47 inc edi - 1001D81B: 47 inc edi - 1001D81C: FF 45 98 inc dword ptr [ebp-68h] - 1001D81F: FF 4D A8 dec dword ptr [ebp-58h] - 1001D822: 83 7D A8 00 cmp dword ptr [ebp-58h],0 - 1001D826: 7F 91 jg 1001D7B9 - 1001D828: 81 C2 02 C0 00 00 add edx,0C002h - 1001D82E: 66 85 D2 test dx,dx - 1001D831: 7E 37 jle 1001D86A - 1001D833: 8B 7D DC mov edi,dword ptr [ebp-24h] - 1001D836: 85 FF test edi,edi - 1001D838: 78 2B js 1001D865 - 1001D83A: 8B 75 D8 mov esi,dword ptr [ebp-28h] - 1001D83D: 8B 45 D4 mov eax,dword ptr [ebp-2Ch] - 1001D840: D1 65 D4 shl dword ptr [ebp-2Ch],1 - 1001D843: C1 E8 1F shr eax,1Fh - 1001D846: 8B CE mov ecx,esi - 1001D848: 03 F6 add esi,esi - 1001D84A: 0B F0 or esi,eax - 1001D84C: C1 E9 1F shr ecx,1Fh - 1001D84F: 8D 04 3F lea eax,[edi+edi] - 1001D852: 0B C1 or eax,ecx - 1001D854: 81 C2 FF FF 00 00 add edx,0FFFFh - 1001D85A: 89 75 D8 mov dword ptr [ebp-28h],esi - 1001D85D: 89 45 DC mov dword ptr [ebp-24h],eax - 1001D860: 66 85 D2 test dx,dx - 1001D863: 7F CE jg 1001D833 - 1001D865: 66 85 D2 test dx,dx - 1001D868: 7F 4D jg 1001D8B7 - 1001D86A: 81 C2 FF FF 00 00 add edx,0FFFFh - 1001D870: 66 85 D2 test dx,dx - 1001D873: 7D 42 jge 1001D8B7 - 1001D875: 8B C2 mov eax,edx - 1001D877: F7 D8 neg eax - 1001D879: 0F B7 F0 movzx esi,ax - 1001D87C: 03 D6 add edx,esi - 1001D87E: F6 45 D4 01 test byte ptr [ebp-2Ch],1 - 1001D882: 74 03 je 1001D887 - 1001D884: FF 45 B0 inc dword ptr [ebp-50h] - 1001D887: 8B 45 DC mov eax,dword ptr [ebp-24h] - 1001D88A: 8B 7D D8 mov edi,dword ptr [ebp-28h] - 1001D88D: 8B 4D D8 mov ecx,dword ptr [ebp-28h] - 1001D890: D1 6D DC shr dword ptr [ebp-24h],1 - 1001D893: C1 E0 1F shl eax,1Fh - 1001D896: D1 EF shr edi,1 - 1001D898: 0B F8 or edi,eax - 1001D89A: 8B 45 D4 mov eax,dword ptr [ebp-2Ch] - 1001D89D: C1 E1 1F shl ecx,1Fh - 1001D8A0: D1 E8 shr eax,1 - 1001D8A2: 0B C1 or eax,ecx - 1001D8A4: 4E dec esi - 1001D8A5: 89 7D D8 mov dword ptr [ebp-28h],edi - 1001D8A8: 89 45 D4 mov dword ptr [ebp-2Ch],eax - 1001D8AB: 75 D1 jne 1001D87E - 1001D8AD: 39 75 B0 cmp dword ptr [ebp-50h],esi - 1001D8B0: 74 05 je 1001D8B7 - 1001D8B2: 66 83 4D D4 01 or word ptr [ebp-2Ch],1 - 1001D8B7: B8 00 80 00 00 mov eax,8000h - 1001D8BC: 8B C8 mov ecx,eax - 1001D8BE: 66 39 4D D4 cmp word ptr [ebp-2Ch],cx - 1001D8C2: 77 11 ja 1001D8D5 - 1001D8C4: 8B 4D D4 mov ecx,dword ptr [ebp-2Ch] - 1001D8C7: 81 E1 FF FF 01 00 and ecx,1FFFFh - 1001D8CD: 81 F9 00 80 01 00 cmp ecx,18000h - 1001D8D3: 75 34 jne 1001D909 - 1001D8D5: 83 7D D6 FF cmp dword ptr [ebp-2Ah],0FFFFFFFFh - 1001D8D9: 75 2B jne 1001D906 - 1001D8DB: 83 65 D6 00 and dword ptr [ebp-2Ah],0 - 1001D8DF: 83 7D DA FF cmp dword ptr [ebp-26h],0FFFFFFFFh - 1001D8E3: 75 1C jne 1001D901 - 1001D8E5: 83 65 DA 00 and dword ptr [ebp-26h],0 - 1001D8E9: B9 FF FF 00 00 mov ecx,0FFFFh - 1001D8EE: 66 39 4D DE cmp word ptr [ebp-22h],cx - 1001D8F2: 75 07 jne 1001D8FB - 1001D8F4: 66 89 45 DE mov word ptr [ebp-22h],ax - 1001D8F8: 42 inc edx - 1001D8F9: EB 0E jmp 1001D909 - 1001D8FB: 66 FF 45 DE inc word ptr [ebp-22h] - 1001D8FF: EB 08 jmp 1001D909 - 1001D901: FF 45 DA inc dword ptr [ebp-26h] - 1001D904: EB 03 jmp 1001D909 - 1001D906: FF 45 D6 inc dword ptr [ebp-2Ah] - 1001D909: B8 FF 7F 00 00 mov eax,7FFFh - 1001D90E: 66 3B D0 cmp dx,ax - 1001D911: 72 23 jb 1001D936 - 1001D913: 33 C0 xor eax,eax - 1001D915: 33 C9 xor ecx,ecx - 1001D917: 66 39 45 90 cmp word ptr [ebp-70h],ax - 1001D91B: 89 45 C8 mov dword ptr [ebp-38h],eax - 1001D91E: 0F 94 C1 sete cl - 1001D921: 89 45 C4 mov dword ptr [ebp-3Ch],eax - 1001D924: 49 dec ecx - 1001D925: 81 E1 00 00 00 80 and ecx,80000000h - 1001D92B: 81 C1 00 80 FF 7F add ecx,7FFF8000h - 1001D931: 89 4D CC mov dword ptr [ebp-34h],ecx - 1001D934: EB 3B jmp 1001D971 - 1001D936: 66 8B 45 D6 mov ax,word ptr [ebp-2Ah] - 1001D93A: 0B 55 90 or edx,dword ptr [ebp-70h] - 1001D93D: 66 89 45 C4 mov word ptr [ebp-3Ch],ax - 1001D941: 8B 45 D8 mov eax,dword ptr [ebp-28h] - 1001D944: 89 45 C6 mov dword ptr [ebp-3Ah],eax - 1001D947: 8B 45 DC mov eax,dword ptr [ebp-24h] - 1001D94A: 89 45 CA mov dword ptr [ebp-36h],eax - 1001D94D: 66 89 55 CE mov word ptr [ebp-32h],dx - 1001D951: EB 1E jmp 1001D971 - 1001D953: 33 C0 xor eax,eax - 1001D955: 66 85 F6 test si,si - 1001D958: 0F 94 C0 sete al - 1001D95B: 83 65 C8 00 and dword ptr [ebp-38h],0 - 1001D95F: 48 dec eax - 1001D960: 25 00 00 00 80 and eax,80000000h - 1001D965: 05 00 80 FF 7F add eax,7FFF8000h - 1001D96A: 83 65 C4 00 and dword ptr [ebp-3Ch],0 - 1001D96E: 89 45 CC mov dword ptr [ebp-34h],eax - 1001D971: 83 7D AC 00 cmp dword ptr [ebp-54h],0 - 1001D975: 0F 85 3C FD FF FF jne 1001D6B7 - 1001D97B: 8B 45 CC mov eax,dword ptr [ebp-34h] - 1001D97E: 0F B7 4D C4 movzx ecx,word ptr [ebp-3Ch] - 1001D982: 8B 75 C6 mov esi,dword ptr [ebp-3Ah] - 1001D985: 8B 55 CA mov edx,dword ptr [ebp-36h] - 1001D988: C1 E8 10 shr eax,10h - 1001D98B: EB 2F jmp 1001D9BC - 1001D98D: C7 45 94 04 00 00 mov dword ptr [ebp-6Ch],4 - 00 - 1001D994: EB 1E jmp 1001D9B4 - 1001D996: 33 F6 xor esi,esi - 1001D998: B8 FF 7F 00 00 mov eax,7FFFh - 1001D99D: BA 00 00 00 80 mov edx,80000000h - 1001D9A2: 33 C9 xor ecx,ecx - 1001D9A4: C7 45 94 02 00 00 mov dword ptr [ebp-6Ch],2 - 00 - 1001D9AB: EB 0F jmp 1001D9BC - 1001D9AD: C7 45 94 01 00 00 mov dword ptr [ebp-6Ch],1 - 00 - 1001D9B4: 33 C9 xor ecx,ecx - 1001D9B6: 33 C0 xor eax,eax - 1001D9B8: 33 D2 xor edx,edx - 1001D9BA: 33 F6 xor esi,esi - 1001D9BC: 8B 7D 88 mov edi,dword ptr [ebp-78h] - 1001D9BF: 0B 45 8C or eax,dword ptr [ebp-74h] - 1001D9C2: 66 89 0F mov word ptr [edi],cx - 1001D9C5: 66 89 47 0A mov word ptr [edi+0Ah],ax - 1001D9C9: 8B 45 94 mov eax,dword ptr [ebp-6Ch] - 1001D9CC: 89 77 02 mov dword ptr [edi+2],esi - 1001D9CF: 89 57 06 mov dword ptr [edi+6],edx - 1001D9D2: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1001D9D5: 5F pop edi - 1001D9D6: 5E pop esi - 1001D9D7: 33 CD xor ecx,ebp - 1001D9D9: 5B pop ebx - 1001D9DA: E8 BC C6 FE FF call 1000A09B - 1001D9DF: C9 leave - 1001D9E0: C3 ret - 1001D9E1: 90 nop - 1001D9E2: B4 D3 mov ah,0D3h - 1001D9E4: 01 10 add dword ptr [eax],edx - 1001D9E6: 08 D4 or ah,dl - 1001D9E8: 01 10 add dword ptr [eax],edx - 1001D9EA: 5E pop esi - 1001D9EB: D4 01 aamb 1 - 1001D9ED: 10 91 D4 01 10 D6 adc byte ptr [ecx+D61001D4h],dl - 1001D9F3: D4 01 aamb 1 - 1001D9F5: 10 0E adc byte ptr [esi],cl - 1001D9F7: D5 01 aadb 1 - 1001D9F9: 10 22 adc byte ptr [edx],ah - 1001D9FB: D5 01 aadb 1 - 1001D9FD: 10 7D D5 adc byte ptr [ebp-2Bh],bh - 1001DA00: 01 10 add dword ptr [eax],edx - 1001DA02: 68 D5 01 10 E7 push 0E71001D5h - 1001DA07: D5 01 aadb 1 - 1001DA09: 10 DC adc ah,bl - 1001DA0B: D5 01 aadb 1 - 1001DA0D: 10 8B D5 01 10 8B adc byte ptr [ebx+8B1001D5h],cl - 1001DA13: FF 55 8B call dword ptr [ebp-75h] - 1001DA16: EC in al,dx - 1001DA17: 83 EC 74 sub esp,74h - 1001DA1A: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1001DA1F: 33 C5 xor eax,ebp - 1001DA21: 89 45 FC mov dword ptr [ebp-4],eax - 1001DA24: 53 push ebx - 1001DA25: 8B 5D 1C mov ebx,dword ptr [ebp+1Ch] - 1001DA28: 56 push esi - 1001DA29: 57 push edi - 1001DA2A: 8D 75 08 lea esi,[ebp+8] - 1001DA2D: 8D 7D F0 lea edi,[ebp-10h] - 1001DA30: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001DA31: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001DA32: 66 A5 movs word ptr es:[edi],word ptr [esi] - 1001DA34: 8B 55 F8 mov edx,dword ptr [ebp-8] - 1001DA37: 8B CA mov ecx,edx - 1001DA39: B8 00 80 00 00 mov eax,8000h - 1001DA3E: 23 C8 and ecx,eax - 1001DA40: 81 E2 FF 7F 00 00 and edx,7FFFh - 1001DA46: 89 5D A0 mov dword ptr [ebp-60h],ebx - 1001DA49: C6 45 D0 CC mov byte ptr [ebp-30h],0CCh - 1001DA4D: C6 45 D1 CC mov byte ptr [ebp-2Fh],0CCh - 1001DA51: C6 45 D2 CC mov byte ptr [ebp-2Eh],0CCh - 1001DA55: C6 45 D3 CC mov byte ptr [ebp-2Dh],0CCh - 1001DA59: C6 45 D4 CC mov byte ptr [ebp-2Ch],0CCh - 1001DA5D: C6 45 D5 CC mov byte ptr [ebp-2Bh],0CCh - 1001DA61: C6 45 D6 CC mov byte ptr [ebp-2Ah],0CCh - 1001DA65: C6 45 D7 CC mov byte ptr [ebp-29h],0CCh - 1001DA69: C6 45 D8 CC mov byte ptr [ebp-28h],0CCh - 1001DA6D: C6 45 D9 CC mov byte ptr [ebp-27h],0CCh - 1001DA71: C6 45 DA FB mov byte ptr [ebp-26h],0FBh - 1001DA75: C6 45 DB 3F mov byte ptr [ebp-25h],3Fh - 1001DA79: C7 45 8C 01 00 00 mov dword ptr [ebp-74h],1 - 00 - 1001DA80: 89 4D 90 mov dword ptr [ebp-70h],ecx - 1001DA83: 66 85 C9 test cx,cx - 1001DA86: 74 06 je 1001DA8E - 1001DA88: C6 43 02 2D mov byte ptr [ebx+2],2Dh - 1001DA8C: EB 04 jmp 1001DA92 - 1001DA8E: C6 43 02 20 mov byte ptr [ebx+2],20h - 1001DA92: 8B 75 F4 mov esi,dword ptr [ebp-0Ch] - 1001DA95: 8B 7D F0 mov edi,dword ptr [ebp-10h] - 1001DA98: 66 85 D2 test dx,dx - 1001DA9B: 75 2F jne 1001DACC - 1001DA9D: 85 F6 test esi,esi - 1001DA9F: 75 2B jne 1001DACC - 1001DAA1: 85 FF test edi,edi - 1001DAA3: 75 27 jne 1001DACC - 1001DAA5: 33 D2 xor edx,edx - 1001DAA7: 66 3B C8 cmp cx,ax - 1001DAAA: 0F 95 C0 setne al - 1001DAAD: FE C8 dec al - 1001DAAF: 24 0D and al,0Dh - 1001DAB1: 04 20 add al,20h - 1001DAB3: 66 89 13 mov word ptr [ebx],dx - 1001DAB6: 88 43 02 mov byte ptr [ebx+2],al - 1001DAB9: C6 43 03 01 mov byte ptr [ebx+3],1 - 1001DABD: C6 43 04 30 mov byte ptr [ebx+4],30h - 1001DAC1: 88 53 05 mov byte ptr [ebx+5],dl - 1001DAC4: 33 C0 xor eax,eax - 1001DAC6: 40 inc eax - 1001DAC7: E9 1E 08 00 00 jmp 1001E2EA - 1001DACC: B8 FF 7F 00 00 mov eax,7FFFh - 1001DAD1: 66 3B D0 cmp dx,ax - 1001DAD4: 0F 85 9F 00 00 00 jne 1001DB79 - 1001DADA: 33 C0 xor eax,eax - 1001DADC: 40 inc eax - 1001DADD: 66 89 03 mov word ptr [ebx],ax - 1001DAE0: B8 00 00 00 80 mov eax,80000000h - 1001DAE5: 3B F0 cmp esi,eax - 1001DAE7: 75 04 jne 1001DAED - 1001DAE9: 85 FF test edi,edi - 1001DAEB: 74 0F je 1001DAFC - 1001DAED: F7 C6 00 00 00 40 test esi,40000000h - 1001DAF3: 75 07 jne 1001DAFC - 1001DAF5: 68 EC 12 02 10 push 100212ECh - 1001DAFA: EB 51 jmp 1001DB4D - 1001DAFC: 66 85 C9 test cx,cx - 1001DAFF: 74 13 je 1001DB14 - 1001DB01: 81 FE 00 00 00 C0 cmp esi,0C0000000h - 1001DB07: 75 0B jne 1001DB14 - 1001DB09: 85 FF test edi,edi - 1001DB0B: 75 3B jne 1001DB48 - 1001DB0D: 68 E4 12 02 10 push 100212E4h - 1001DB12: EB 0D jmp 1001DB21 - 1001DB14: 3B F0 cmp esi,eax - 1001DB16: 75 30 jne 1001DB48 - 1001DB18: 85 FF test edi,edi - 1001DB1A: 75 2C jne 1001DB48 - 1001DB1C: 68 DC 12 02 10 push 100212DCh - 1001DB21: 8D 43 04 lea eax,[ebx+4] - 1001DB24: 6A 16 push 16h - 1001DB26: 50 push eax - 1001DB27: E8 A4 68 FF FF call 100143D0 - 1001DB2C: 83 C4 0C add esp,0Ch - 1001DB2F: 33 F6 xor esi,esi - 1001DB31: 85 C0 test eax,eax - 1001DB33: 74 0D je 1001DB42 - 1001DB35: 56 push esi - 1001DB36: 56 push esi - 1001DB37: 56 push esi - 1001DB38: 56 push esi - 1001DB39: 56 push esi - 1001DB3A: E8 7A 13 FF FF call 1000EEB9 - 1001DB3F: 83 C4 14 add esp,14h - 1001DB42: C6 43 03 05 mov byte ptr [ebx+3],5 - 1001DB46: EB 2A jmp 1001DB72 - 1001DB48: 68 D4 12 02 10 push 100212D4h - 1001DB4D: 8D 43 04 lea eax,[ebx+4] - 1001DB50: 6A 16 push 16h - 1001DB52: 50 push eax - 1001DB53: E8 78 68 FF FF call 100143D0 - 1001DB58: 83 C4 0C add esp,0Ch - 1001DB5B: 33 F6 xor esi,esi - 1001DB5D: 85 C0 test eax,eax - 1001DB5F: 74 0D je 1001DB6E - 1001DB61: 56 push esi - 1001DB62: 56 push esi - 1001DB63: 56 push esi - 1001DB64: 56 push esi - 1001DB65: 56 push esi - 1001DB66: E8 4E 13 FF FF call 1000EEB9 - 1001DB6B: 83 C4 14 add esp,14h - 1001DB6E: C6 43 03 06 mov byte ptr [ebx+3],6 - 1001DB72: 33 C0 xor eax,eax - 1001DB74: E9 71 07 00 00 jmp 1001E2EA - 1001DB79: 0F B7 CA movzx ecx,dx - 1001DB7C: 8B D9 mov ebx,ecx - 1001DB7E: 69 C9 10 4D 00 00 imul ecx,ecx,4D10h - 1001DB84: C1 EB 08 shr ebx,8 - 1001DB87: 8B C6 mov eax,esi - 1001DB89: C1 E8 18 shr eax,18h - 1001DB8C: 8D 04 43 lea eax,[ebx+eax*2] - 1001DB8F: 6B C0 4D imul eax,eax,4Dh - 1001DB92: 8D 84 08 0C ED BC lea eax,[eax+ecx+ECBCED0Ch] - EC - 1001DB99: C1 F8 10 sar eax,10h - 1001DB9C: 0F B7 C0 movzx eax,ax - 1001DB9F: 33 C9 xor ecx,ecx - 1001DBA1: 0F BF D8 movsx ebx,ax - 1001DBA4: 66 89 4D E0 mov word ptr [ebp-20h],cx - 1001DBA8: B9 C0 59 02 10 mov ecx,100259C0h - 1001DBAD: F7 DB neg ebx - 1001DBAF: 83 E9 60 sub ecx,60h - 1001DBB2: 89 45 B4 mov dword ptr [ebp-4Ch],eax - 1001DBB5: 66 89 55 EA mov word ptr [ebp-16h],dx - 1001DBB9: 89 75 E6 mov dword ptr [ebp-1Ah],esi - 1001DBBC: 89 7D E2 mov dword ptr [ebp-1Eh],edi - 1001DBBF: 89 4D 9C mov dword ptr [ebp-64h],ecx - 1001DBC2: 85 DB test ebx,ebx - 1001DBC4: 0F 84 9C 02 00 00 je 1001DE66 - 1001DBCA: 7D 0D jge 1001DBD9 - 1001DBCC: B8 20 5B 02 10 mov eax,10025B20h - 1001DBD1: F7 DB neg ebx - 1001DBD3: 83 E8 60 sub eax,60h - 1001DBD6: 89 45 9C mov dword ptr [ebp-64h],eax - 1001DBD9: 85 DB test ebx,ebx - 1001DBDB: 0F 84 85 02 00 00 je 1001DE66 - 1001DBE1: 83 45 9C 54 add dword ptr [ebp-64h],54h - 1001DBE5: 8B CB mov ecx,ebx - 1001DBE7: 83 E1 07 and ecx,7 - 1001DBEA: C1 FB 03 sar ebx,3 - 1001DBED: 85 C9 test ecx,ecx - 1001DBEF: 0F 84 67 02 00 00 je 1001DE5C - 1001DBF5: 6B C9 0C imul ecx,ecx,0Ch - 1001DBF8: 03 4D 9C add ecx,dword ptr [ebp-64h] - 1001DBFB: 8B C1 mov eax,ecx - 1001DBFD: 89 4D BC mov dword ptr [ebp-44h],ecx - 1001DC00: B9 00 80 00 00 mov ecx,8000h - 1001DC05: 66 39 08 cmp word ptr [eax],cx - 1001DC08: 72 11 jb 1001DC1B - 1001DC0A: 8B F0 mov esi,eax - 1001DC0C: 8D 7D C4 lea edi,[ebp-3Ch] - 1001DC0F: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001DC10: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001DC11: 8D 45 C4 lea eax,[ebp-3Ch] - 1001DC14: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001DC15: FF 4D C6 dec dword ptr [ebp-3Ah] - 1001DC18: 89 45 BC mov dword ptr [ebp-44h],eax - 1001DC1B: 0F B7 50 0A movzx edx,word ptr [eax+0Ah] - 1001DC1F: 33 C9 xor ecx,ecx - 1001DC21: 89 4D AC mov dword ptr [ebp-54h],ecx - 1001DC24: 89 4D F0 mov dword ptr [ebp-10h],ecx - 1001DC27: 89 4D F4 mov dword ptr [ebp-0Ch],ecx - 1001DC2A: 89 4D F8 mov dword ptr [ebp-8],ecx - 1001DC2D: 8B 4D EA mov ecx,dword ptr [ebp-16h] - 1001DC30: 8B F2 mov esi,edx - 1001DC32: 33 F1 xor esi,ecx - 1001DC34: 81 E6 00 80 00 00 and esi,8000h - 1001DC3A: 89 75 B8 mov dword ptr [ebp-48h],esi - 1001DC3D: BE FF 7F 00 00 mov esi,7FFFh - 1001DC42: 23 CE and ecx,esi - 1001DC44: 23 D6 and edx,esi - 1001DC46: 8D 34 0A lea esi,[edx+ecx] - 1001DC49: 0F B7 FE movzx edi,si - 1001DC4C: BE FF 7F 00 00 mov esi,7FFFh - 1001DC51: 66 3B CE cmp cx,si - 1001DC54: 0F 83 AC 02 00 00 jae 1001DF06 - 1001DC5A: 66 3B D6 cmp dx,si - 1001DC5D: 0F 83 A3 02 00 00 jae 1001DF06 - 1001DC63: BE FD BF 00 00 mov esi,0BFFDh - 1001DC68: 66 3B FE cmp di,si - 1001DC6B: 0F 87 95 02 00 00 ja 1001DF06 - 1001DC71: BE BF 3F 00 00 mov esi,3FBFh - 1001DC76: 66 3B FE cmp di,si - 1001DC79: 77 10 ja 1001DC8B - 1001DC7B: 33 F6 xor esi,esi - 1001DC7D: 89 75 E8 mov dword ptr [ebp-18h],esi - 1001DC80: 89 75 E4 mov dword ptr [ebp-1Ch],esi - 1001DC83: 89 75 E0 mov dword ptr [ebp-20h],esi - 1001DC86: E9 D3 01 00 00 jmp 1001DE5E - 1001DC8B: 33 F6 xor esi,esi - 1001DC8D: 66 3B CE cmp cx,si - 1001DC90: 75 1F jne 1001DCB1 - 1001DC92: 47 inc edi - 1001DC93: F7 45 E8 FF FF FF test dword ptr [ebp-18h],7FFFFFFFh - 7F - 1001DC9A: 75 15 jne 1001DCB1 - 1001DC9C: 39 75 E4 cmp dword ptr [ebp-1Ch],esi - 1001DC9F: 75 10 jne 1001DCB1 - 1001DCA1: 39 75 E0 cmp dword ptr [ebp-20h],esi - 1001DCA4: 75 0B jne 1001DCB1 - 1001DCA6: 33 C0 xor eax,eax - 1001DCA8: 66 89 45 EA mov word ptr [ebp-16h],ax - 1001DCAC: E9 AD 01 00 00 jmp 1001DE5E - 1001DCB1: 66 3B D6 cmp dx,si - 1001DCB4: 75 13 jne 1001DCC9 - 1001DCB6: 47 inc edi - 1001DCB7: F7 40 08 FF FF FF test dword ptr [eax+8],7FFFFFFFh - 7F - 1001DCBE: 75 09 jne 1001DCC9 - 1001DCC0: 39 70 04 cmp dword ptr [eax+4],esi - 1001DCC3: 75 04 jne 1001DCC9 - 1001DCC5: 39 30 cmp dword ptr [eax],esi - 1001DCC7: 74 B4 je 1001DC7D - 1001DCC9: 21 75 A8 and dword ptr [ebp-58h],esi - 1001DCCC: 8D 75 F4 lea esi,[ebp-0Ch] - 1001DCCF: C7 45 C0 05 00 00 mov dword ptr [ebp-40h],5 - 00 - 1001DCD6: 8B 4D A8 mov ecx,dword ptr [ebp-58h] - 1001DCD9: 8B 55 C0 mov edx,dword ptr [ebp-40h] - 1001DCDC: 03 C9 add ecx,ecx - 1001DCDE: 89 55 B0 mov dword ptr [ebp-50h],edx - 1001DCE1: 85 D2 test edx,edx - 1001DCE3: 7E 55 jle 1001DD3A - 1001DCE5: 8D 4C 0D E0 lea ecx,[ebp+ecx-20h] - 1001DCE9: 83 C0 08 add eax,8 - 1001DCEC: 89 4D 94 mov dword ptr [ebp-6Ch],ecx - 1001DCEF: 89 45 98 mov dword ptr [ebp-68h],eax - 1001DCF2: 8B 45 94 mov eax,dword ptr [ebp-6Ch] - 1001DCF5: 0F B7 08 movzx ecx,word ptr [eax] - 1001DCF8: 8B 45 98 mov eax,dword ptr [ebp-68h] - 1001DCFB: 0F B7 00 movzx eax,word ptr [eax] - 1001DCFE: 8B 56 FC mov edx,dword ptr [esi-4] - 1001DD01: 0F AF C8 imul ecx,eax - 1001DD04: 83 65 A4 00 and dword ptr [ebp-5Ch],0 - 1001DD08: 8D 04 0A lea eax,[edx+ecx] - 1001DD0B: 3B C2 cmp eax,edx - 1001DD0D: 72 04 jb 1001DD13 - 1001DD0F: 3B C1 cmp eax,ecx - 1001DD11: 73 07 jae 1001DD1A - 1001DD13: C7 45 A4 01 00 00 mov dword ptr [ebp-5Ch],1 - 00 - 1001DD1A: 83 7D A4 00 cmp dword ptr [ebp-5Ch],0 - 1001DD1E: 89 46 FC mov dword ptr [esi-4],eax - 1001DD21: 74 03 je 1001DD26 - 1001DD23: 66 FF 06 inc word ptr [esi] - 1001DD26: 83 45 94 02 add dword ptr [ebp-6Ch],2 - 1001DD2A: 83 6D 98 02 sub dword ptr [ebp-68h],2 - 1001DD2E: FF 4D B0 dec dword ptr [ebp-50h] - 1001DD31: 83 7D B0 00 cmp dword ptr [ebp-50h],0 - 1001DD35: 7F BB jg 1001DCF2 - 1001DD37: 8B 45 BC mov eax,dword ptr [ebp-44h] - 1001DD3A: 46 inc esi - 1001DD3B: 46 inc esi - 1001DD3C: FF 45 A8 inc dword ptr [ebp-58h] - 1001DD3F: FF 4D C0 dec dword ptr [ebp-40h] - 1001DD42: 83 7D C0 00 cmp dword ptr [ebp-40h],0 - 1001DD46: 7F 8E jg 1001DCD6 - 1001DD48: 81 C7 02 C0 00 00 add edi,0C002h - 1001DD4E: 66 85 FF test di,di - 1001DD51: 7E 3B jle 1001DD8E - 1001DD53: F7 45 F8 00 00 00 test dword ptr [ebp-8],80000000h - 80 - 1001DD5A: 75 2D jne 1001DD89 - 1001DD5C: 8B 45 F4 mov eax,dword ptr [ebp-0Ch] - 1001DD5F: 8B 4D F0 mov ecx,dword ptr [ebp-10h] - 1001DD62: D1 65 F0 shl dword ptr [ebp-10h],1 - 1001DD65: 8B D0 mov edx,eax - 1001DD67: 03 C0 add eax,eax - 1001DD69: C1 E9 1F shr ecx,1Fh - 1001DD6C: 0B C1 or eax,ecx - 1001DD6E: 89 45 F4 mov dword ptr [ebp-0Ch],eax - 1001DD71: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1001DD74: C1 EA 1F shr edx,1Fh - 1001DD77: 03 C0 add eax,eax - 1001DD79: 0B C2 or eax,edx - 1001DD7B: 81 C7 FF FF 00 00 add edi,0FFFFh - 1001DD81: 89 45 F8 mov dword ptr [ebp-8],eax - 1001DD84: 66 85 FF test di,di - 1001DD87: 7F CA jg 1001DD53 - 1001DD89: 66 85 FF test di,di - 1001DD8C: 7F 4D jg 1001DDDB - 1001DD8E: 81 C7 FF FF 00 00 add edi,0FFFFh - 1001DD94: 66 85 FF test di,di - 1001DD97: 7D 42 jge 1001DDDB - 1001DD99: 8B C7 mov eax,edi - 1001DD9B: F7 D8 neg eax - 1001DD9D: 0F B7 C0 movzx eax,ax - 1001DDA0: 03 F8 add edi,eax - 1001DDA2: F6 45 F0 01 test byte ptr [ebp-10h],1 - 1001DDA6: 74 03 je 1001DDAB - 1001DDA8: FF 45 AC inc dword ptr [ebp-54h] - 1001DDAB: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 1001DDAE: 8B 75 F4 mov esi,dword ptr [ebp-0Ch] - 1001DDB1: 8B 55 F4 mov edx,dword ptr [ebp-0Ch] - 1001DDB4: D1 6D F8 shr dword ptr [ebp-8],1 - 1001DDB7: C1 E1 1F shl ecx,1Fh - 1001DDBA: D1 EE shr esi,1 - 1001DDBC: 0B F1 or esi,ecx - 1001DDBE: 8B 4D F0 mov ecx,dword ptr [ebp-10h] - 1001DDC1: C1 E2 1F shl edx,1Fh - 1001DDC4: D1 E9 shr ecx,1 - 1001DDC6: 0B CA or ecx,edx - 1001DDC8: 48 dec eax - 1001DDC9: 89 75 F4 mov dword ptr [ebp-0Ch],esi - 1001DDCC: 89 4D F0 mov dword ptr [ebp-10h],ecx - 1001DDCF: 75 D1 jne 1001DDA2 - 1001DDD1: 39 45 AC cmp dword ptr [ebp-54h],eax - 1001DDD4: 74 05 je 1001DDDB - 1001DDD6: 66 83 4D F0 01 or word ptr [ebp-10h],1 - 1001DDDB: B8 00 80 00 00 mov eax,8000h - 1001DDE0: 8B C8 mov ecx,eax - 1001DDE2: 66 39 4D F0 cmp word ptr [ebp-10h],cx - 1001DDE6: 77 11 ja 1001DDF9 - 1001DDE8: 8B 4D F0 mov ecx,dword ptr [ebp-10h] - 1001DDEB: 81 E1 FF FF 01 00 and ecx,1FFFFh - 1001DDF1: 81 F9 00 80 01 00 cmp ecx,18000h - 1001DDF7: 75 34 jne 1001DE2D - 1001DDF9: 83 7D F2 FF cmp dword ptr [ebp-0Eh],0FFFFFFFFh - 1001DDFD: 75 2B jne 1001DE2A - 1001DDFF: 83 65 F2 00 and dword ptr [ebp-0Eh],0 - 1001DE03: 83 7D F6 FF cmp dword ptr [ebp-0Ah],0FFFFFFFFh - 1001DE07: 75 1C jne 1001DE25 - 1001DE09: 83 65 F6 00 and dword ptr [ebp-0Ah],0 - 1001DE0D: B9 FF FF 00 00 mov ecx,0FFFFh - 1001DE12: 66 39 4D FA cmp word ptr [ebp-6],cx - 1001DE16: 75 07 jne 1001DE1F - 1001DE18: 66 89 45 FA mov word ptr [ebp-6],ax - 1001DE1C: 47 inc edi - 1001DE1D: EB 0E jmp 1001DE2D - 1001DE1F: 66 FF 45 FA inc word ptr [ebp-6] - 1001DE23: EB 08 jmp 1001DE2D - 1001DE25: FF 45 F6 inc dword ptr [ebp-0Ah] - 1001DE28: EB 03 jmp 1001DE2D - 1001DE2A: FF 45 F2 inc dword ptr [ebp-0Eh] - 1001DE2D: B8 FF 7F 00 00 mov eax,7FFFh - 1001DE32: 66 3B F8 cmp di,ax - 1001DE35: 0F 82 AB 00 00 00 jb 1001DEE6 - 1001DE3B: 33 C0 xor eax,eax - 1001DE3D: 33 C9 xor ecx,ecx - 1001DE3F: 66 39 45 B8 cmp word ptr [ebp-48h],ax - 1001DE43: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1001DE46: 0F 94 C1 sete cl - 1001DE49: 89 45 E0 mov dword ptr [ebp-20h],eax - 1001DE4C: 49 dec ecx - 1001DE4D: 81 E1 00 00 00 80 and ecx,80000000h - 1001DE53: 81 C1 00 80 FF 7F add ecx,7FFF8000h - 1001DE59: 89 4D E8 mov dword ptr [ebp-18h],ecx - 1001DE5C: 33 F6 xor esi,esi - 1001DE5E: 3B DE cmp ebx,esi - 1001DE60: 0F 85 7B FD FF FF jne 1001DBE1 - 1001DE66: 8B 4D E8 mov ecx,dword ptr [ebp-18h] - 1001DE69: C1 E9 10 shr ecx,10h - 1001DE6C: BA FF 3F 00 00 mov edx,3FFFh - 1001DE71: B8 FF 7F 00 00 mov eax,7FFFh - 1001DE76: 66 3B CA cmp cx,dx - 1001DE79: 0F 82 A3 02 00 00 jb 1001E122 - 1001DE7F: FF 45 B4 inc dword ptr [ebp-4Ch] - 1001DE82: 33 D2 xor edx,edx - 1001DE84: 89 55 B0 mov dword ptr [ebp-50h],edx - 1001DE87: 89 55 F0 mov dword ptr [ebp-10h],edx - 1001DE8A: 89 55 F4 mov dword ptr [ebp-0Ch],edx - 1001DE8D: 89 55 F8 mov dword ptr [ebp-8],edx - 1001DE90: 8B 55 DA mov edx,dword ptr [ebp-26h] - 1001DE93: 0F B7 C9 movzx ecx,cx - 1001DE96: 8B DA mov ebx,edx - 1001DE98: 33 D9 xor ebx,ecx - 1001DE9A: 23 C8 and ecx,eax - 1001DE9C: 23 D0 and edx,eax - 1001DE9E: 81 E3 00 80 00 00 and ebx,8000h - 1001DEA4: 8B F8 mov edi,eax - 1001DEA6: 8D 34 0A lea esi,[edx+ecx] - 1001DEA9: 89 5D A4 mov dword ptr [ebp-5Ch],ebx - 1001DEAC: 0F B7 F6 movzx esi,si - 1001DEAF: 66 3B CF cmp cx,di - 1001DEB2: 0F 83 4C 02 00 00 jae 1001E104 - 1001DEB8: 66 3B D0 cmp dx,ax - 1001DEBB: 0F 83 43 02 00 00 jae 1001E104 - 1001DEC1: B8 FD BF 00 00 mov eax,0BFFDh - 1001DEC6: 66 3B F0 cmp si,ax - 1001DEC9: 0F 87 35 02 00 00 ja 1001E104 - 1001DECF: B8 BF 3F 00 00 mov eax,3FBFh - 1001DED4: 66 3B F0 cmp si,ax - 1001DED7: 77 4B ja 1001DF24 - 1001DED9: 33 C0 xor eax,eax - 1001DEDB: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1001DEDE: 89 45 E0 mov dword ptr [ebp-20h],eax - 1001DEE1: E9 39 02 00 00 jmp 1001E11F - 1001DEE6: 66 8B 45 F2 mov ax,word ptr [ebp-0Eh] - 1001DEEA: 0B 7D B8 or edi,dword ptr [ebp-48h] - 1001DEED: 66 89 45 E0 mov word ptr [ebp-20h],ax - 1001DEF1: 8B 45 F4 mov eax,dword ptr [ebp-0Ch] - 1001DEF4: 89 45 E2 mov dword ptr [ebp-1Eh],eax - 1001DEF7: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1001DEFA: 89 45 E6 mov dword ptr [ebp-1Ah],eax - 1001DEFD: 66 89 7D EA mov word ptr [ebp-16h],di - 1001DF01: E9 56 FF FF FF jmp 1001DE5C - 1001DF06: 33 C0 xor eax,eax - 1001DF08: 33 F6 xor esi,esi - 1001DF0A: 66 39 75 B8 cmp word ptr [ebp-48h],si - 1001DF0E: 0F 94 C0 sete al - 1001DF11: 48 dec eax - 1001DF12: 25 00 00 00 80 and eax,80000000h - 1001DF17: 05 00 80 FF 7F add eax,7FFF8000h - 1001DF1C: 89 45 E8 mov dword ptr [ebp-18h],eax - 1001DF1F: E9 5C FD FF FF jmp 1001DC80 - 1001DF24: 33 C0 xor eax,eax - 1001DF26: 66 3B C8 cmp cx,ax - 1001DF29: 75 1D jne 1001DF48 - 1001DF2B: 46 inc esi - 1001DF2C: F7 45 E8 FF FF FF test dword ptr [ebp-18h],7FFFFFFFh - 7F - 1001DF33: 75 13 jne 1001DF48 - 1001DF35: 39 45 E4 cmp dword ptr [ebp-1Ch],eax - 1001DF38: 75 0E jne 1001DF48 - 1001DF3A: 39 45 E0 cmp dword ptr [ebp-20h],eax - 1001DF3D: 75 09 jne 1001DF48 - 1001DF3F: 66 89 45 EA mov word ptr [ebp-16h],ax - 1001DF43: E9 DA 01 00 00 jmp 1001E122 - 1001DF48: 66 3B D0 cmp dx,ax - 1001DF4B: 75 18 jne 1001DF65 - 1001DF4D: 46 inc esi - 1001DF4E: F7 45 D8 FF FF FF test dword ptr [ebp-28h],7FFFFFFFh - 7F - 1001DF55: 75 0E jne 1001DF65 - 1001DF57: 39 45 D4 cmp dword ptr [ebp-2Ch],eax - 1001DF5A: 75 09 jne 1001DF65 - 1001DF5C: 39 45 D0 cmp dword ptr [ebp-30h],eax - 1001DF5F: 0F 84 76 FF FF FF je 1001DEDB - 1001DF65: 89 45 A8 mov dword ptr [ebp-58h],eax - 1001DF68: 8D 7D F4 lea edi,[ebp-0Ch] - 1001DF6B: C7 45 C0 05 00 00 mov dword ptr [ebp-40h],5 - 00 - 1001DF72: 8B 45 A8 mov eax,dword ptr [ebp-58h] - 1001DF75: 8B 4D C0 mov ecx,dword ptr [ebp-40h] - 1001DF78: 03 C0 add eax,eax - 1001DF7A: 89 4D AC mov dword ptr [ebp-54h],ecx - 1001DF7D: 85 C9 test ecx,ecx - 1001DF7F: 7E 4A jle 1001DFCB - 1001DF81: 8D 4D D8 lea ecx,[ebp-28h] - 1001DF84: 89 4D B8 mov dword ptr [ebp-48h],ecx - 1001DF87: 8D 44 05 E0 lea eax,[ebp+eax-20h] - 1001DF8B: 8B 4D B8 mov ecx,dword ptr [ebp-48h] - 1001DF8E: 0F B7 10 movzx edx,word ptr [eax] - 1001DF91: 0F B7 09 movzx ecx,word ptr [ecx] - 1001DF94: 83 65 BC 00 and dword ptr [ebp-44h],0 - 1001DF98: 0F AF CA imul ecx,edx - 1001DF9B: 8B 57 FC mov edx,dword ptr [edi-4] - 1001DF9E: 8D 1C 0A lea ebx,[edx+ecx] - 1001DFA1: 3B DA cmp ebx,edx - 1001DFA3: 72 04 jb 1001DFA9 - 1001DFA5: 3B D9 cmp ebx,ecx - 1001DFA7: 73 07 jae 1001DFB0 - 1001DFA9: C7 45 BC 01 00 00 mov dword ptr [ebp-44h],1 - 00 - 1001DFB0: 83 7D BC 00 cmp dword ptr [ebp-44h],0 - 1001DFB4: 89 5F FC mov dword ptr [edi-4],ebx - 1001DFB7: 74 03 je 1001DFBC - 1001DFB9: 66 FF 07 inc word ptr [edi] - 1001DFBC: 83 6D B8 02 sub dword ptr [ebp-48h],2 - 1001DFC0: 40 inc eax - 1001DFC1: 40 inc eax - 1001DFC2: FF 4D AC dec dword ptr [ebp-54h] - 1001DFC5: 83 7D AC 00 cmp dword ptr [ebp-54h],0 - 1001DFC9: 7F C0 jg 1001DF8B - 1001DFCB: 47 inc edi - 1001DFCC: 47 inc edi - 1001DFCD: FF 45 A8 inc dword ptr [ebp-58h] - 1001DFD0: FF 4D C0 dec dword ptr [ebp-40h] - 1001DFD3: 83 7D C0 00 cmp dword ptr [ebp-40h],0 - 1001DFD7: 7F 99 jg 1001DF72 - 1001DFD9: 81 C6 02 C0 00 00 add esi,0C002h - 1001DFDF: 66 85 F6 test si,si - 1001DFE2: 7E 37 jle 1001E01B - 1001DFE4: 8B 7D F8 mov edi,dword ptr [ebp-8] - 1001DFE7: 85 FF test edi,edi - 1001DFE9: 78 2B js 1001E016 - 1001DFEB: 8B 45 F4 mov eax,dword ptr [ebp-0Ch] - 1001DFEE: 8B 4D F0 mov ecx,dword ptr [ebp-10h] - 1001DFF1: D1 65 F0 shl dword ptr [ebp-10h],1 - 1001DFF4: 8B D0 mov edx,eax - 1001DFF6: 03 C0 add eax,eax - 1001DFF8: C1 E9 1F shr ecx,1Fh - 1001DFFB: 0B C1 or eax,ecx - 1001DFFD: 89 45 F4 mov dword ptr [ebp-0Ch],eax - 1001E000: C1 EA 1F shr edx,1Fh - 1001E003: 8D 04 3F lea eax,[edi+edi] - 1001E006: 0B C2 or eax,edx - 1001E008: 81 C6 FF FF 00 00 add esi,0FFFFh - 1001E00E: 89 45 F8 mov dword ptr [ebp-8],eax - 1001E011: 66 85 F6 test si,si - 1001E014: 7F CE jg 1001DFE4 - 1001E016: 66 85 F6 test si,si - 1001E019: 7F 4D jg 1001E068 - 1001E01B: 81 C6 FF FF 00 00 add esi,0FFFFh - 1001E021: 66 85 F6 test si,si - 1001E024: 7D 42 jge 1001E068 - 1001E026: 8B C6 mov eax,esi - 1001E028: F7 D8 neg eax - 1001E02A: 0F B7 C0 movzx eax,ax - 1001E02D: 03 F0 add esi,eax - 1001E02F: F6 45 F0 01 test byte ptr [ebp-10h],1 - 1001E033: 74 03 je 1001E038 - 1001E035: FF 45 B0 inc dword ptr [ebp-50h] - 1001E038: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 1001E03B: 8B 7D F4 mov edi,dword ptr [ebp-0Ch] - 1001E03E: 8B 55 F4 mov edx,dword ptr [ebp-0Ch] - 1001E041: D1 6D F8 shr dword ptr [ebp-8],1 - 1001E044: C1 E1 1F shl ecx,1Fh - 1001E047: D1 EF shr edi,1 - 1001E049: 0B F9 or edi,ecx - 1001E04B: 8B 4D F0 mov ecx,dword ptr [ebp-10h] - 1001E04E: C1 E2 1F shl edx,1Fh - 1001E051: D1 E9 shr ecx,1 - 1001E053: 0B CA or ecx,edx - 1001E055: 48 dec eax - 1001E056: 89 7D F4 mov dword ptr [ebp-0Ch],edi - 1001E059: 89 4D F0 mov dword ptr [ebp-10h],ecx - 1001E05C: 75 D1 jne 1001E02F - 1001E05E: 39 45 B0 cmp dword ptr [ebp-50h],eax - 1001E061: 74 05 je 1001E068 - 1001E063: 66 83 4D F0 01 or word ptr [ebp-10h],1 - 1001E068: B8 00 80 00 00 mov eax,8000h - 1001E06D: 8B C8 mov ecx,eax - 1001E06F: 66 39 4D F0 cmp word ptr [ebp-10h],cx - 1001E073: 77 11 ja 1001E086 - 1001E075: 8B 4D F0 mov ecx,dword ptr [ebp-10h] - 1001E078: 81 E1 FF FF 01 00 and ecx,1FFFFh - 1001E07E: 81 F9 00 80 01 00 cmp ecx,18000h - 1001E084: 75 34 jne 1001E0BA - 1001E086: 83 7D F2 FF cmp dword ptr [ebp-0Eh],0FFFFFFFFh - 1001E08A: 75 2B jne 1001E0B7 - 1001E08C: 83 65 F2 00 and dword ptr [ebp-0Eh],0 - 1001E090: 83 7D F6 FF cmp dword ptr [ebp-0Ah],0FFFFFFFFh - 1001E094: 75 1C jne 1001E0B2 - 1001E096: 83 65 F6 00 and dword ptr [ebp-0Ah],0 - 1001E09A: B9 FF FF 00 00 mov ecx,0FFFFh - 1001E09F: 66 39 4D FA cmp word ptr [ebp-6],cx - 1001E0A3: 75 07 jne 1001E0AC - 1001E0A5: 66 89 45 FA mov word ptr [ebp-6],ax - 1001E0A9: 46 inc esi - 1001E0AA: EB 0E jmp 1001E0BA - 1001E0AC: 66 FF 45 FA inc word ptr [ebp-6] - 1001E0B0: EB 08 jmp 1001E0BA - 1001E0B2: FF 45 F6 inc dword ptr [ebp-0Ah] - 1001E0B5: EB 03 jmp 1001E0BA - 1001E0B7: FF 45 F2 inc dword ptr [ebp-0Eh] - 1001E0BA: B8 FF 7F 00 00 mov eax,7FFFh - 1001E0BF: 66 3B F0 cmp si,ax - 1001E0C2: 72 23 jb 1001E0E7 - 1001E0C4: 33 C0 xor eax,eax - 1001E0C6: 33 C9 xor ecx,ecx - 1001E0C8: 66 39 45 A4 cmp word ptr [ebp-5Ch],ax - 1001E0CC: 89 45 E4 mov dword ptr [ebp-1Ch],eax - 1001E0CF: 0F 94 C1 sete cl - 1001E0D2: 89 45 E0 mov dword ptr [ebp-20h],eax - 1001E0D5: 49 dec ecx - 1001E0D6: 81 E1 00 00 00 80 and ecx,80000000h - 1001E0DC: 81 C1 00 80 FF 7F add ecx,7FFF8000h - 1001E0E2: 89 4D E8 mov dword ptr [ebp-18h],ecx - 1001E0E5: EB 3B jmp 1001E122 - 1001E0E7: 66 8B 45 F2 mov ax,word ptr [ebp-0Eh] - 1001E0EB: 0B 75 A4 or esi,dword ptr [ebp-5Ch] - 1001E0EE: 66 89 45 E0 mov word ptr [ebp-20h],ax - 1001E0F2: 8B 45 F4 mov eax,dword ptr [ebp-0Ch] - 1001E0F5: 89 45 E2 mov dword ptr [ebp-1Eh],eax - 1001E0F8: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1001E0FB: 89 45 E6 mov dword ptr [ebp-1Ah],eax - 1001E0FE: 66 89 75 EA mov word ptr [ebp-16h],si - 1001E102: EB 1E jmp 1001E122 - 1001E104: 33 C0 xor eax,eax - 1001E106: 66 85 DB test bx,bx - 1001E109: 0F 94 C0 sete al - 1001E10C: 83 65 E4 00 and dword ptr [ebp-1Ch],0 - 1001E110: 48 dec eax - 1001E111: 25 00 00 00 80 and eax,80000000h - 1001E116: 05 00 80 FF 7F add eax,7FFF8000h - 1001E11B: 83 65 E0 00 and dword ptr [ebp-20h],0 - 1001E11F: 89 45 E8 mov dword ptr [ebp-18h],eax - 1001E122: F6 45 18 01 test byte ptr [ebp+18h],1 - 1001E126: 8B 55 A0 mov edx,dword ptr [ebp-60h] - 1001E129: 8B 45 B4 mov eax,dword ptr [ebp-4Ch] - 1001E12C: 8B 7D 14 mov edi,dword ptr [ebp+14h] - 1001E12F: 66 89 02 mov word ptr [edx],ax - 1001E132: 74 32 je 1001E166 - 1001E134: 98 cwde - 1001E135: 03 F8 add edi,eax - 1001E137: 85 FF test edi,edi - 1001E139: 7F 2B jg 1001E166 - 1001E13B: 33 C0 xor eax,eax - 1001E13D: 66 89 02 mov word ptr [edx],ax - 1001E140: B8 00 80 00 00 mov eax,8000h - 1001E145: 66 39 45 90 cmp word ptr [ebp-70h],ax - 1001E149: C6 42 03 01 mov byte ptr [edx+3],1 - 1001E14D: 0F 95 C0 setne al - 1001E150: FE C8 dec al - 1001E152: 24 0D and al,0Dh - 1001E154: 04 20 add al,20h - 1001E156: 88 42 02 mov byte ptr [edx+2],al - 1001E159: C6 42 04 30 mov byte ptr [edx+4],30h - 1001E15D: C6 42 05 00 mov byte ptr [edx+5],0 - 1001E161: E9 5E F9 FF FF jmp 1001DAC4 - 1001E166: 83 FF 15 cmp edi,15h - 1001E169: 7E 03 jle 1001E16E - 1001E16B: 6A 15 push 15h - 1001E16D: 5F pop edi - 1001E16E: 8B 75 E8 mov esi,dword ptr [ebp-18h] - 1001E171: C1 EE 10 shr esi,10h - 1001E174: 81 EE FE 3F 00 00 sub esi,3FFEh - 1001E17A: 33 C0 xor eax,eax - 1001E17C: 66 89 45 EA mov word ptr [ebp-16h],ax - 1001E180: C7 45 BC 08 00 00 mov dword ptr [ebp-44h],8 - 00 - 1001E187: 8B 45 E0 mov eax,dword ptr [ebp-20h] - 1001E18A: 8B 5D E4 mov ebx,dword ptr [ebp-1Ch] - 1001E18D: 8B 4D E4 mov ecx,dword ptr [ebp-1Ch] - 1001E190: D1 65 E0 shl dword ptr [ebp-20h],1 - 1001E193: C1 E8 1F shr eax,1Fh - 1001E196: 03 DB add ebx,ebx - 1001E198: 0B D8 or ebx,eax - 1001E19A: 8B 45 E8 mov eax,dword ptr [ebp-18h] - 1001E19D: C1 E9 1F shr ecx,1Fh - 1001E1A0: 03 C0 add eax,eax - 1001E1A2: 0B C1 or eax,ecx - 1001E1A4: FF 4D BC dec dword ptr [ebp-44h] - 1001E1A7: 89 5D E4 mov dword ptr [ebp-1Ch],ebx - 1001E1AA: 89 45 E8 mov dword ptr [ebp-18h],eax - 1001E1AD: 75 D8 jne 1001E187 - 1001E1AF: 85 F6 test esi,esi - 1001E1B1: 7D 32 jge 1001E1E5 - 1001E1B3: F7 DE neg esi - 1001E1B5: 81 E6 FF 00 00 00 and esi,0FFh - 1001E1BB: 7E 28 jle 1001E1E5 - 1001E1BD: 8B 45 E8 mov eax,dword ptr [ebp-18h] - 1001E1C0: 8B 5D E4 mov ebx,dword ptr [ebp-1Ch] - 1001E1C3: 8B 4D E4 mov ecx,dword ptr [ebp-1Ch] - 1001E1C6: D1 6D E8 shr dword ptr [ebp-18h],1 - 1001E1C9: C1 E0 1F shl eax,1Fh - 1001E1CC: D1 EB shr ebx,1 - 1001E1CE: 0B D8 or ebx,eax - 1001E1D0: 8B 45 E0 mov eax,dword ptr [ebp-20h] - 1001E1D3: C1 E1 1F shl ecx,1Fh - 1001E1D6: D1 E8 shr eax,1 - 1001E1D8: 0B C1 or eax,ecx - 1001E1DA: 4E dec esi - 1001E1DB: 89 5D E4 mov dword ptr [ebp-1Ch],ebx - 1001E1DE: 89 45 E0 mov dword ptr [ebp-20h],eax - 1001E1E1: 85 F6 test esi,esi - 1001E1E3: 7F D8 jg 1001E1BD - 1001E1E5: 8D 47 01 lea eax,[edi+1] - 1001E1E8: 8D 5A 04 lea ebx,[edx+4] - 1001E1EB: 89 5D C0 mov dword ptr [ebp-40h],ebx - 1001E1EE: 89 45 B4 mov dword ptr [ebp-4Ch],eax - 1001E1F1: 85 C0 test eax,eax - 1001E1F3: 0F 8E B5 00 00 00 jle 1001E2AE - 1001E1F9: 8B 55 E0 mov edx,dword ptr [ebp-20h] - 1001E1FC: 8B 45 E4 mov eax,dword ptr [ebp-1Ch] - 1001E1FF: 8D 75 E0 lea esi,[ebp-20h] - 1001E202: 8D 7D C4 lea edi,[ebp-3Ch] - 1001E205: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001E206: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001E207: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001E208: D1 65 E0 shl dword ptr [ebp-20h],1 - 1001E20B: 8B 7D E0 mov edi,dword ptr [ebp-20h] - 1001E20E: D1 65 E0 shl dword ptr [ebp-20h],1 - 1001E211: C1 EA 1F shr edx,1Fh - 1001E214: 8D 0C 00 lea ecx,[eax+eax] - 1001E217: 0B CA or ecx,edx - 1001E219: 8B 55 E8 mov edx,dword ptr [ebp-18h] - 1001E21C: 8B F0 mov esi,eax - 1001E21E: C1 EE 1F shr esi,1Fh - 1001E221: 03 D2 add edx,edx - 1001E223: 0B D6 or edx,esi - 1001E225: 8B C1 mov eax,ecx - 1001E227: 8D 34 09 lea esi,[ecx+ecx] - 1001E22A: C1 E8 1F shr eax,1Fh - 1001E22D: 8D 0C 12 lea ecx,[edx+edx] - 1001E230: 8B 55 C4 mov edx,dword ptr [ebp-3Ch] - 1001E233: C1 EF 1F shr edi,1Fh - 1001E236: 0B C8 or ecx,eax - 1001E238: 8B 45 E0 mov eax,dword ptr [ebp-20h] - 1001E23B: 0B F7 or esi,edi - 1001E23D: 8D 3C 02 lea edi,[edx+eax] - 1001E240: 3B F8 cmp edi,eax - 1001E242: 72 04 jb 1001E248 - 1001E244: 3B FA cmp edi,edx - 1001E246: 73 18 jae 1001E260 - 1001E248: 8D 46 01 lea eax,[esi+1] - 1001E24B: 33 D2 xor edx,edx - 1001E24D: 3B C6 cmp eax,esi - 1001E24F: 72 05 jb 1001E256 - 1001E251: 83 F8 01 cmp eax,1 - 1001E254: 73 03 jae 1001E259 - 1001E256: 33 D2 xor edx,edx - 1001E258: 42 inc edx - 1001E259: 8B F0 mov esi,eax - 1001E25B: 85 D2 test edx,edx - 1001E25D: 74 01 je 1001E260 - 1001E25F: 41 inc ecx - 1001E260: 8B 45 C8 mov eax,dword ptr [ebp-38h] - 1001E263: 8D 14 30 lea edx,[eax+esi] - 1001E266: 89 55 BC mov dword ptr [ebp-44h],edx - 1001E269: 3B D6 cmp edx,esi - 1001E26B: 72 04 jb 1001E271 - 1001E26D: 3B D0 cmp edx,eax - 1001E26F: 73 01 jae 1001E272 - 1001E271: 41 inc ecx - 1001E272: 03 4D CC add ecx,dword ptr [ebp-34h] - 1001E275: C1 EA 1F shr edx,1Fh - 1001E278: 03 C9 add ecx,ecx - 1001E27A: 0B CA or ecx,edx - 1001E27C: 8D 34 3F lea esi,[edi+edi] - 1001E27F: 89 75 E0 mov dword ptr [ebp-20h],esi - 1001E282: 8B 75 BC mov esi,dword ptr [ebp-44h] - 1001E285: 89 4D E8 mov dword ptr [ebp-18h],ecx - 1001E288: C1 E9 18 shr ecx,18h - 1001E28B: 03 F6 add esi,esi - 1001E28D: 80 C1 30 add cl,30h - 1001E290: 8B C7 mov eax,edi - 1001E292: C1 E8 1F shr eax,1Fh - 1001E295: 0B F0 or esi,eax - 1001E297: 88 0B mov byte ptr [ebx],cl - 1001E299: 43 inc ebx - 1001E29A: FF 4D B4 dec dword ptr [ebp-4Ch] - 1001E29D: 83 7D B4 00 cmp dword ptr [ebp-4Ch],0 - 1001E2A1: 89 75 E4 mov dword ptr [ebp-1Ch],esi - 1001E2A4: C6 45 EB 00 mov byte ptr [ebp-15h],0 - 1001E2A8: 0F 8F 4B FF FF FF jg 1001E1F9 - 1001E2AE: 4B dec ebx - 1001E2AF: 8A 03 mov al,byte ptr [ebx] - 1001E2B1: 4B dec ebx - 1001E2B2: 3C 35 cmp al,35h - 1001E2B4: 7D 0E jge 1001E2C4 - 1001E2B6: 8B 4D C0 mov ecx,dword ptr [ebp-40h] - 1001E2B9: EB 44 jmp 1001E2FF - 1001E2BB: 80 3B 39 cmp byte ptr [ebx],39h - 1001E2BE: 75 09 jne 1001E2C9 - 1001E2C0: C6 03 30 mov byte ptr [ebx],30h - 1001E2C3: 4B dec ebx - 1001E2C4: 3B 5D C0 cmp ebx,dword ptr [ebp-40h] - 1001E2C7: 73 F2 jae 1001E2BB - 1001E2C9: 8B 45 A0 mov eax,dword ptr [ebp-60h] - 1001E2CC: 3B 5D C0 cmp ebx,dword ptr [ebp-40h] - 1001E2CF: 73 04 jae 1001E2D5 - 1001E2D1: 43 inc ebx - 1001E2D2: 66 FF 00 inc word ptr [eax] - 1001E2D5: FE 03 inc byte ptr [ebx] - 1001E2D7: 2A D8 sub bl,al - 1001E2D9: 80 EB 03 sub bl,3 - 1001E2DC: 0F BE CB movsx ecx,bl - 1001E2DF: 88 58 03 mov byte ptr [eax+3],bl - 1001E2E2: C6 44 01 04 00 mov byte ptr [ecx+eax+4],0 - 1001E2E7: 8B 45 8C mov eax,dword ptr [ebp-74h] - 1001E2EA: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1001E2ED: 5F pop edi - 1001E2EE: 5E pop esi - 1001E2EF: 33 CD xor ecx,ebp - 1001E2F1: 5B pop ebx - 1001E2F2: E8 A4 BD FE FF call 1000A09B - 1001E2F7: C9 leave - 1001E2F8: C3 ret - 1001E2F9: 80 3B 30 cmp byte ptr [ebx],30h - 1001E2FC: 75 05 jne 1001E303 - 1001E2FE: 4B dec ebx - 1001E2FF: 3B D9 cmp ebx,ecx - 1001E301: 73 F6 jae 1001E2F9 - 1001E303: 8B 45 A0 mov eax,dword ptr [ebp-60h] - 1001E306: 3B D9 cmp ebx,ecx - 1001E308: 73 CD jae 1001E2D7 - 1001E30A: 33 D2 xor edx,edx - 1001E30C: 66 89 10 mov word ptr [eax],dx - 1001E30F: BA 00 80 00 00 mov edx,8000h - 1001E314: 66 39 55 90 cmp word ptr [ebp-70h],dx - 1001E318: C6 40 03 01 mov byte ptr [eax+3],1 - 1001E31C: 0F 95 C2 setne dl - 1001E31F: FE CA dec dl - 1001E321: 80 E2 0D and dl,0Dh - 1001E324: 80 C2 20 add dl,20h - 1001E327: 88 50 02 mov byte ptr [eax+2],dl - 1001E32A: C6 01 30 mov byte ptr [ecx],30h - 1001E32D: C6 40 05 00 mov byte ptr [eax+5],0 - 1001E331: E9 8E F7 FF FF jmp 1001DAC4 - 1001E336: 33 C0 xor eax,eax - 1001E338: F6 C3 10 test bl,10h - 1001E33B: 74 01 je 1001E33E - 1001E33D: 40 inc eax - 1001E33E: F6 C3 08 test bl,8 - 1001E341: 74 03 je 1001E346 - 1001E343: 83 C8 04 or eax,4 - 1001E346: F6 C3 04 test bl,4 - 1001E349: 74 03 je 1001E34E - 1001E34B: 83 C8 08 or eax,8 - 1001E34E: F6 C3 02 test bl,2 - 1001E351: 74 03 je 1001E356 - 1001E353: 83 C8 10 or eax,10h - 1001E356: F6 C3 01 test bl,1 - 1001E359: 74 03 je 1001E35E - 1001E35B: 83 C8 20 or eax,20h - 1001E35E: F7 C3 00 00 08 00 test ebx,80000h - 1001E364: 74 03 je 1001E369 - 1001E366: 83 C8 02 or eax,2 - 1001E369: 8B CB mov ecx,ebx - 1001E36B: BA 00 03 00 00 mov edx,300h - 1001E370: 23 CA and ecx,edx - 1001E372: 56 push esi - 1001E373: BE 00 02 00 00 mov esi,200h - 1001E378: 74 23 je 1001E39D - 1001E37A: 81 F9 00 01 00 00 cmp ecx,100h - 1001E380: 74 16 je 1001E398 - 1001E382: 3B CE cmp ecx,esi - 1001E384: 74 0B je 1001E391 - 1001E386: 3B CA cmp ecx,edx - 1001E388: 75 13 jne 1001E39D - 1001E38A: 0D 00 0C 00 00 or eax,0C00h - 1001E38F: EB 0C jmp 1001E39D - 1001E391: 0D 00 08 00 00 or eax,800h - 1001E396: EB 05 jmp 1001E39D - 1001E398: 0D 00 04 00 00 or eax,400h - 1001E39D: 8B CB mov ecx,ebx - 1001E39F: 81 E1 00 00 03 00 and ecx,30000h - 1001E3A5: 74 0C je 1001E3B3 - 1001E3A7: 81 F9 00 00 01 00 cmp ecx,10000h - 1001E3AD: 75 06 jne 1001E3B5 - 1001E3AF: 0B C6 or eax,esi - 1001E3B1: EB 02 jmp 1001E3B5 - 1001E3B3: 0B C2 or eax,edx - 1001E3B5: 5E pop esi - 1001E3B6: F7 C3 00 00 04 00 test ebx,40000h - 1001E3BC: 74 05 je 1001E3C3 - 1001E3BE: 0D 00 10 00 00 or eax,1000h - 1001E3C3: C3 ret - 1001E3C4: 33 C0 xor eax,eax - 1001E3C6: F6 C2 10 test dl,10h - 1001E3C9: 74 05 je 1001E3D0 - 1001E3CB: B8 80 00 00 00 mov eax,80h - 1001E3D0: 53 push ebx - 1001E3D1: 56 push esi - 1001E3D2: 57 push edi - 1001E3D3: BB 00 02 00 00 mov ebx,200h - 1001E3D8: F6 C2 08 test dl,8 - 1001E3DB: 74 02 je 1001E3DF - 1001E3DD: 0B C3 or eax,ebx - 1001E3DF: F6 C2 04 test dl,4 - 1001E3E2: 74 05 je 1001E3E9 - 1001E3E4: 0D 00 04 00 00 or eax,400h - 1001E3E9: F6 C2 02 test dl,2 - 1001E3EC: 74 05 je 1001E3F3 - 1001E3EE: 0D 00 08 00 00 or eax,800h - 1001E3F3: F6 C2 01 test dl,1 - 1001E3F6: 74 05 je 1001E3FD - 1001E3F8: 0D 00 10 00 00 or eax,1000h - 1001E3FD: BF 00 01 00 00 mov edi,100h - 1001E402: F7 C2 00 00 08 00 test edx,80000h - 1001E408: 74 02 je 1001E40C - 1001E40A: 0B C7 or eax,edi - 1001E40C: 8B CA mov ecx,edx - 1001E40E: BE 00 03 00 00 mov esi,300h - 1001E413: 23 CE and ecx,esi - 1001E415: 74 1F je 1001E436 - 1001E417: 3B CF cmp ecx,edi - 1001E419: 74 16 je 1001E431 - 1001E41B: 3B CB cmp ecx,ebx - 1001E41D: 74 0B je 1001E42A - 1001E41F: 3B CE cmp ecx,esi - 1001E421: 75 13 jne 1001E436 - 1001E423: 0D 00 60 00 00 or eax,6000h - 1001E428: EB 0C jmp 1001E436 - 1001E42A: 0D 00 40 00 00 or eax,4000h - 1001E42F: EB 05 jmp 1001E436 - 1001E431: 0D 00 20 00 00 or eax,2000h - 1001E436: B9 00 00 00 03 mov ecx,3000000h - 1001E43B: 5F pop edi - 1001E43C: 23 D1 and edx,ecx - 1001E43E: 5E pop esi - 1001E43F: 5B pop ebx - 1001E440: 81 FA 00 00 00 01 cmp edx,1000000h - 1001E446: 74 16 je 1001E45E - 1001E448: 81 FA 00 00 00 02 cmp edx,2000000h - 1001E44E: 74 0A je 1001E45A - 1001E450: 3B D1 cmp edx,ecx - 1001E452: 75 0F jne 1001E463 - 1001E454: 0D 00 80 00 00 or eax,8000h - 1001E459: C3 ret - 1001E45A: 83 C8 40 or eax,40h - 1001E45D: C3 ret - 1001E45E: 0D 40 80 00 00 or eax,8040h - 1001E463: C3 ret - 1001E464: 8B FF mov edi,edi - 1001E466: 55 push ebp - 1001E467: 8B EC mov ebp,esp - 1001E469: 83 EC 14 sub esp,14h - 1001E46C: 53 push ebx - 1001E46D: 56 push esi - 1001E46E: 57 push edi - 1001E46F: 9B wait - 1001E470: D9 7D F8 fnstcw word ptr [ebp-8] - 1001E473: 8B 5D F8 mov ebx,dword ptr [ebp-8] - 1001E476: 33 D2 xor edx,edx - 1001E478: F6 C3 01 test bl,1 - 1001E47B: 74 03 je 1001E480 - 1001E47D: 6A 10 push 10h - 1001E47F: 5A pop edx - 1001E480: F6 C3 04 test bl,4 - 1001E483: 74 03 je 1001E488 - 1001E485: 83 CA 08 or edx,8 - 1001E488: F6 C3 08 test bl,8 - 1001E48B: 74 03 je 1001E490 - 1001E48D: 83 CA 04 or edx,4 - 1001E490: F6 C3 10 test bl,10h - 1001E493: 74 03 je 1001E498 - 1001E495: 83 CA 02 or edx,2 - 1001E498: F6 C3 20 test bl,20h - 1001E49B: 74 03 je 1001E4A0 - 1001E49D: 83 CA 01 or edx,1 - 1001E4A0: F6 C3 02 test bl,2 - 1001E4A3: 74 06 je 1001E4AB - 1001E4A5: 81 CA 00 00 08 00 or edx,80000h - 1001E4AB: 0F B7 CB movzx ecx,bx - 1001E4AE: 8B C1 mov eax,ecx - 1001E4B0: BE 00 0C 00 00 mov esi,0C00h - 1001E4B5: 23 C6 and eax,esi - 1001E4B7: BF 00 03 00 00 mov edi,300h - 1001E4BC: 74 24 je 1001E4E2 - 1001E4BE: 3D 00 04 00 00 cmp eax,400h - 1001E4C3: 74 17 je 1001E4DC - 1001E4C5: 3D 00 08 00 00 cmp eax,800h - 1001E4CA: 74 08 je 1001E4D4 - 1001E4CC: 3B C6 cmp eax,esi - 1001E4CE: 75 12 jne 1001E4E2 - 1001E4D0: 0B D7 or edx,edi - 1001E4D2: EB 0E jmp 1001E4E2 - 1001E4D4: 81 CA 00 02 00 00 or edx,200h - 1001E4DA: EB 06 jmp 1001E4E2 - 1001E4DC: 81 CA 00 01 00 00 or edx,100h - 1001E4E2: 23 CF and ecx,edi - 1001E4E4: 74 10 je 1001E4F6 - 1001E4E6: 81 F9 00 02 00 00 cmp ecx,200h - 1001E4EC: 75 0E jne 1001E4FC - 1001E4EE: 81 CA 00 00 01 00 or edx,10000h - 1001E4F4: EB 06 jmp 1001E4FC - 1001E4F6: 81 CA 00 00 02 00 or edx,20000h - 1001E4FC: F7 C3 00 10 00 00 test ebx,1000h - 1001E502: 74 06 je 1001E50A - 1001E504: 81 CA 00 00 04 00 or edx,40000h - 1001E50A: 8B 7D 0C mov edi,dword ptr [ebp+0Ch] - 1001E50D: 8B 4D 08 mov ecx,dword ptr [ebp+8] - 1001E510: 8B C7 mov eax,edi - 1001E512: F7 D0 not eax - 1001E514: 23 C2 and eax,edx - 1001E516: 23 CF and ecx,edi - 1001E518: 0B C1 or eax,ecx - 1001E51A: 89 45 0C mov dword ptr [ebp+0Ch],eax - 1001E51D: 3B C2 cmp eax,edx - 1001E51F: 0F 84 AE 00 00 00 je 1001E5D3 - 1001E525: 8B D8 mov ebx,eax - 1001E527: E8 0A FE FF FF call 1001E336 - 1001E52C: 0F B7 C0 movzx eax,ax - 1001E52F: 89 45 FC mov dword ptr [ebp-4],eax - 1001E532: D9 6D FC fldcw word ptr [ebp-4] - 1001E535: 9B wait - 1001E536: D9 7D FC fnstcw word ptr [ebp-4] - 1001E539: 8B 5D FC mov ebx,dword ptr [ebp-4] - 1001E53C: 33 D2 xor edx,edx - 1001E53E: F6 C3 01 test bl,1 - 1001E541: 74 03 je 1001E546 - 1001E543: 6A 10 push 10h - 1001E545: 5A pop edx - 1001E546: F6 C3 04 test bl,4 - 1001E549: 74 03 je 1001E54E - 1001E54B: 83 CA 08 or edx,8 - 1001E54E: F6 C3 08 test bl,8 - 1001E551: 74 03 je 1001E556 - 1001E553: 83 CA 04 or edx,4 - 1001E556: F6 C3 10 test bl,10h - 1001E559: 74 03 je 1001E55E - 1001E55B: 83 CA 02 or edx,2 - 1001E55E: F6 C3 20 test bl,20h - 1001E561: 74 03 je 1001E566 - 1001E563: 83 CA 01 or edx,1 - 1001E566: F6 C3 02 test bl,2 - 1001E569: 74 06 je 1001E571 - 1001E56B: 81 CA 00 00 08 00 or edx,80000h - 1001E571: 0F B7 CB movzx ecx,bx - 1001E574: 8B C1 mov eax,ecx - 1001E576: 23 C6 and eax,esi - 1001E578: 74 28 je 1001E5A2 - 1001E57A: 3D 00 04 00 00 cmp eax,400h - 1001E57F: 74 1B je 1001E59C - 1001E581: 3D 00 08 00 00 cmp eax,800h - 1001E586: 74 0C je 1001E594 - 1001E588: 3B C6 cmp eax,esi - 1001E58A: 75 16 jne 1001E5A2 - 1001E58C: 81 CA 00 03 00 00 or edx,300h - 1001E592: EB 0E jmp 1001E5A2 - 1001E594: 81 CA 00 02 00 00 or edx,200h - 1001E59A: EB 06 jmp 1001E5A2 - 1001E59C: 81 CA 00 01 00 00 or edx,100h - 1001E5A2: 81 E1 00 03 00 00 and ecx,300h - 1001E5A8: 74 10 je 1001E5BA - 1001E5AA: 81 F9 00 02 00 00 cmp ecx,200h - 1001E5B0: 75 0E jne 1001E5C0 - 1001E5B2: 81 CA 00 00 01 00 or edx,10000h - 1001E5B8: EB 06 jmp 1001E5C0 - 1001E5BA: 81 CA 00 00 02 00 or edx,20000h - 1001E5C0: F7 C3 00 10 00 00 test ebx,1000h - 1001E5C6: 74 06 je 1001E5CE - 1001E5C8: 81 CA 00 00 04 00 or edx,40000h - 1001E5CE: 89 55 0C mov dword ptr [ebp+0Ch],edx - 1001E5D1: 8B C2 mov eax,edx - 1001E5D3: 33 F6 xor esi,esi - 1001E5D5: 39 35 1C 6D 02 10 cmp dword ptr ds:[10026D1Ch],esi - 1001E5DB: 0F 84 8D 01 00 00 je 1001E76E - 1001E5E1: 81 E7 1F 03 08 03 and edi,308031Fh - 1001E5E7: 89 7D EC mov dword ptr [ebp-14h],edi - 1001E5EA: 0F AE 5D F0 stmxcsr dword ptr [ebp-10h] - 1001E5EE: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 1001E5F1: 84 C0 test al,al - 1001E5F3: 79 03 jns 1001E5F8 - 1001E5F5: 6A 10 push 10h - 1001E5F7: 5E pop esi - 1001E5F8: A9 00 02 00 00 test eax,200h - 1001E5FD: 74 03 je 1001E602 - 1001E5FF: 83 CE 08 or esi,8 - 1001E602: A9 00 04 00 00 test eax,400h - 1001E607: 74 03 je 1001E60C - 1001E609: 83 CE 04 or esi,4 - 1001E60C: A9 00 08 00 00 test eax,800h - 1001E611: 74 03 je 1001E616 - 1001E613: 83 CE 02 or esi,2 - 1001E616: A9 00 10 00 00 test eax,1000h - 1001E61B: 74 03 je 1001E620 - 1001E61D: 83 CE 01 or esi,1 - 1001E620: A9 00 01 00 00 test eax,100h - 1001E625: 74 06 je 1001E62D - 1001E627: 81 CE 00 00 08 00 or esi,80000h - 1001E62D: 8B C8 mov ecx,eax - 1001E62F: BB 00 60 00 00 mov ebx,6000h - 1001E634: 23 CB and ecx,ebx - 1001E636: 74 2A je 1001E662 - 1001E638: 81 F9 00 20 00 00 cmp ecx,2000h - 1001E63E: 74 1C je 1001E65C - 1001E640: 81 F9 00 40 00 00 cmp ecx,4000h - 1001E646: 74 0C je 1001E654 - 1001E648: 3B CB cmp ecx,ebx - 1001E64A: 75 16 jne 1001E662 - 1001E64C: 81 CE 00 03 00 00 or esi,300h - 1001E652: EB 0E jmp 1001E662 - 1001E654: 81 CE 00 02 00 00 or esi,200h - 1001E65A: EB 06 jmp 1001E662 - 1001E65C: 81 CE 00 01 00 00 or esi,100h - 1001E662: BF 40 80 00 00 mov edi,8040h - 1001E667: 23 C7 and eax,edi - 1001E669: 83 E8 40 sub eax,40h - 1001E66C: 74 1C je 1001E68A - 1001E66E: 2D C0 7F 00 00 sub eax,7FC0h - 1001E673: 74 0D je 1001E682 - 1001E675: 83 E8 40 sub eax,40h - 1001E678: 75 16 jne 1001E690 - 1001E67A: 81 CE 00 00 00 01 or esi,1000000h - 1001E680: EB 0E jmp 1001E690 - 1001E682: 81 CE 00 00 00 03 or esi,3000000h - 1001E688: EB 06 jmp 1001E690 - 1001E68A: 81 CE 00 00 00 02 or esi,2000000h - 1001E690: 8B 45 EC mov eax,dword ptr [ebp-14h] - 1001E693: 8B D0 mov edx,eax - 1001E695: 23 45 08 and eax,dword ptr [ebp+8] - 1001E698: F7 D2 not edx - 1001E69A: 23 D6 and edx,esi - 1001E69C: 0B D0 or edx,eax - 1001E69E: 3B D6 cmp edx,esi - 1001E6A0: 75 07 jne 1001E6A9 - 1001E6A2: 8B C6 mov eax,esi - 1001E6A4: E9 B0 00 00 00 jmp 1001E759 - 1001E6A9: E8 16 FD FF FF call 1001E3C4 - 1001E6AE: 50 push eax - 1001E6AF: 89 45 F4 mov dword ptr [ebp-0Ch],eax - 1001E6B2: E8 60 04 00 00 call 1001EB17 - 1001E6B7: 59 pop ecx - 1001E6B8: 0F AE 5D F4 stmxcsr dword ptr [ebp-0Ch] - 1001E6BC: 8B 4D F4 mov ecx,dword ptr [ebp-0Ch] - 1001E6BF: 33 D2 xor edx,edx - 1001E6C1: 84 C9 test cl,cl - 1001E6C3: 79 03 jns 1001E6C8 - 1001E6C5: 6A 10 push 10h - 1001E6C7: 5A pop edx - 1001E6C8: F7 C1 00 02 00 00 test ecx,200h - 1001E6CE: 74 03 je 1001E6D3 - 1001E6D0: 83 CA 08 or edx,8 - 1001E6D3: F7 C1 00 04 00 00 test ecx,400h - 1001E6D9: 74 03 je 1001E6DE - 1001E6DB: 83 CA 04 or edx,4 - 1001E6DE: F7 C1 00 08 00 00 test ecx,800h - 1001E6E4: 74 03 je 1001E6E9 - 1001E6E6: 83 CA 02 or edx,2 - 1001E6E9: F7 C1 00 10 00 00 test ecx,1000h - 1001E6EF: 74 03 je 1001E6F4 - 1001E6F1: 83 CA 01 or edx,1 - 1001E6F4: BE 00 01 00 00 mov esi,100h - 1001E6F9: 85 CE test esi,ecx - 1001E6FB: 74 06 je 1001E703 - 1001E6FD: 81 CA 00 00 08 00 or edx,80000h - 1001E703: 8B C1 mov eax,ecx - 1001E705: 23 C3 and eax,ebx - 1001E707: 74 24 je 1001E72D - 1001E709: 3D 00 20 00 00 cmp eax,2000h - 1001E70E: 74 1B je 1001E72B - 1001E710: 3D 00 40 00 00 cmp eax,4000h - 1001E715: 74 0C je 1001E723 - 1001E717: 3B C3 cmp eax,ebx - 1001E719: 75 12 jne 1001E72D - 1001E71B: 81 CA 00 03 00 00 or edx,300h - 1001E721: EB 0A jmp 1001E72D - 1001E723: 81 CA 00 02 00 00 or edx,200h - 1001E729: EB 02 jmp 1001E72D - 1001E72B: 0B D6 or edx,esi - 1001E72D: 23 CF and ecx,edi - 1001E72F: 83 E9 40 sub ecx,40h - 1001E732: 74 1D je 1001E751 - 1001E734: 81 E9 C0 7F 00 00 sub ecx,7FC0h - 1001E73A: 74 0D je 1001E749 - 1001E73C: 83 E9 40 sub ecx,40h - 1001E73F: 75 16 jne 1001E757 - 1001E741: 81 CA 00 00 00 01 or edx,1000000h - 1001E747: EB 0E jmp 1001E757 - 1001E749: 81 CA 00 00 00 03 or edx,3000000h - 1001E74F: EB 06 jmp 1001E757 - 1001E751: 81 CA 00 00 00 02 or edx,2000000h - 1001E757: 8B C2 mov eax,edx - 1001E759: 8B C8 mov ecx,eax - 1001E75B: 33 4D 0C xor ecx,dword ptr [ebp+0Ch] - 1001E75E: 0B 45 0C or eax,dword ptr [ebp+0Ch] - 1001E761: F7 C1 1F 03 08 00 test ecx,8031Fh - 1001E767: 74 05 je 1001E76E - 1001E769: 0D 00 00 00 80 or eax,80000000h - 1001E76E: 5F pop edi - 1001E76F: 5E pop esi - 1001E770: 5B pop ebx - 1001E771: C9 leave - 1001E772: C3 ret - 1001E773: 33 C0 xor eax,eax - 1001E775: 50 push eax - 1001E776: 50 push eax - 1001E777: 6A 03 push 3 - 1001E779: 50 push eax - 1001E77A: 6A 03 push 3 - 1001E77C: 68 00 00 00 40 push 40000000h - 1001E781: 68 F4 12 02 10 push 100212F4h - 1001E786: FF 15 6C F1 01 10 call dword ptr ds:[1001F16Ch] - 1001E78C: A3 BC 59 02 10 mov dword ptr ds:[100259BCh],eax - 1001E791: C3 ret - 1001E792: A1 BC 59 02 10 mov eax,dword ptr ds:[100259BCh] - 1001E797: 56 push esi - 1001E798: 8B 35 14 F0 01 10 mov esi,dword ptr ds:[1001F014h] - 1001E79E: 83 F8 FF cmp eax,0FFFFFFFFh - 1001E7A1: 74 08 je 1001E7AB - 1001E7A3: 83 F8 FE cmp eax,0FFFFFFFEh - 1001E7A6: 74 03 je 1001E7AB - 1001E7A8: 50 push eax - 1001E7A9: FF D6 call esi - 1001E7AB: A1 B8 59 02 10 mov eax,dword ptr ds:[100259B8h] - 1001E7B0: 83 F8 FF cmp eax,0FFFFFFFFh - 1001E7B3: 74 08 je 1001E7BD - 1001E7B5: 83 F8 FE cmp eax,0FFFFFFFEh - 1001E7B8: 74 03 je 1001E7BD - 1001E7BA: 50 push eax - 1001E7BB: FF D6 call esi - 1001E7BD: 5E pop esi - 1001E7BE: C3 ret - 1001E7BF: CC int 3 - 1001E7C0: 55 push ebp - 1001E7C1: 8B EC mov ebp,esp - 1001E7C3: 57 push edi - 1001E7C4: 56 push esi - 1001E7C5: 53 push ebx - 1001E7C6: 8B 4D 10 mov ecx,dword ptr [ebp+10h] - 1001E7C9: 0B C9 or ecx,ecx - 1001E7CB: 74 4D je 1001E81A - 1001E7CD: 8B 75 08 mov esi,dword ptr [ebp+8] - 1001E7D0: 8B 7D 0C mov edi,dword ptr [ebp+0Ch] - 1001E7D3: B7 41 mov bh,41h - 1001E7D5: B3 5A mov bl,5Ah - 1001E7D7: B6 20 mov dh,20h - 1001E7D9: 8D 49 00 lea ecx,[ecx] - 1001E7DC: 8A 26 mov ah,byte ptr [esi] - 1001E7DE: 0A E4 or ah,ah - 1001E7E0: 8A 07 mov al,byte ptr [edi] - 1001E7E2: 74 27 je 1001E80B - 1001E7E4: 0A C0 or al,al - 1001E7E6: 74 23 je 1001E80B - 1001E7E8: 83 C6 01 add esi,1 - 1001E7EB: 83 C7 01 add edi,1 - 1001E7EE: 3A E7 cmp ah,bh - 1001E7F0: 72 06 jb 1001E7F8 - 1001E7F2: 3A E3 cmp ah,bl - 1001E7F4: 77 02 ja 1001E7F8 - 1001E7F6: 02 E6 add ah,dh - 1001E7F8: 3A C7 cmp al,bh - 1001E7FA: 72 06 jb 1001E802 - 1001E7FC: 3A C3 cmp al,bl - 1001E7FE: 77 02 ja 1001E802 - 1001E800: 02 C6 add al,dh - 1001E802: 3A E0 cmp ah,al - 1001E804: 75 0B jne 1001E811 - 1001E806: 83 E9 01 sub ecx,1 - 1001E809: 75 D1 jne 1001E7DC - 1001E80B: 33 C9 xor ecx,ecx - 1001E80D: 3A E0 cmp ah,al - 1001E80F: 74 09 je 1001E81A - 1001E811: B9 FF FF FF FF mov ecx,0FFFFFFFFh - 1001E816: 72 02 jb 1001E81A - 1001E818: F7 D9 neg ecx - 1001E81A: 8B C1 mov eax,ecx - 1001E81C: 5B pop ebx - 1001E81D: 5E pop esi - 1001E81E: 5F pop edi - 1001E81F: C9 leave - 1001E820: C3 ret - 1001E821: 8B FF mov edi,edi - 1001E823: 55 push ebp - 1001E824: 8B EC mov ebp,esp - 1001E826: 53 push ebx - 1001E827: 33 DB xor ebx,ebx - 1001E829: 39 5D 08 cmp dword ptr [ebp+8],ebx - 1001E82C: 75 04 jne 1001E832 - 1001E82E: 33 C0 xor eax,eax - 1001E830: EB 41 jmp 1001E873 - 1001E832: 56 push esi - 1001E833: 57 push edi - 1001E834: FF 75 08 push dword ptr [ebp+8] - 1001E837: E8 04 5C FF FF call 10014440 - 1001E83C: 8B F0 mov esi,eax - 1001E83E: 46 inc esi - 1001E83F: 56 push esi - 1001E840: E8 F1 F4 FE FF call 1000DD36 - 1001E845: 8B F8 mov edi,eax - 1001E847: 59 pop ecx - 1001E848: 59 pop ecx - 1001E849: 3B FB cmp edi,ebx - 1001E84B: 74 22 je 1001E86F - 1001E84D: FF 75 08 push dword ptr [ebp+8] - 1001E850: 56 push esi - 1001E851: 57 push edi - 1001E852: E8 79 5B FF FF call 100143D0 - 1001E857: 83 C4 0C add esp,0Ch - 1001E85A: 85 C0 test eax,eax - 1001E85C: 74 0D je 1001E86B - 1001E85E: 53 push ebx - 1001E85F: 53 push ebx - 1001E860: 53 push ebx - 1001E861: 53 push ebx - 1001E862: 53 push ebx - 1001E863: E8 51 06 FF FF call 1000EEB9 - 1001E868: 83 C4 14 add esp,14h - 1001E86B: 8B C7 mov eax,edi - 1001E86D: EB 02 jmp 1001E871 - 1001E86F: 33 C0 xor eax,eax - 1001E871: 5F pop edi - 1001E872: 5E pop esi - 1001E873: 5B pop ebx - 1001E874: 5D pop ebp - 1001E875: C3 ret - 1001E876: 8B FF mov edi,edi - 1001E878: 55 push ebp - 1001E879: 8B EC mov ebp,esp - 1001E87B: 83 EC 10 sub esp,10h - 1001E87E: 53 push ebx - 1001E87F: FF 75 10 push dword ptr [ebp+10h] - 1001E882: 8D 4D F0 lea ecx,[ebp-10h] - 1001E885: E8 72 BE FE FF call 1000A6FC - 1001E88A: 8B 45 08 mov eax,dword ptr [ebp+8] - 1001E88D: 33 DB xor ebx,ebx - 1001E88F: 3B C3 cmp eax,ebx - 1001E891: 75 28 jne 1001E8BB - 1001E893: E8 B1 07 FF FF call 1000F049 - 1001E898: 53 push ebx - 1001E899: 53 push ebx - 1001E89A: 53 push ebx - 1001E89B: 53 push ebx - 1001E89C: 53 push ebx - 1001E89D: C7 00 16 00 00 00 mov dword ptr [eax],16h - 1001E8A3: E8 39 07 FF FF call 1000EFE1 - 1001E8A8: 83 C4 14 add esp,14h - 1001E8AB: 38 5D FC cmp byte ptr [ebp-4],bl - 1001E8AE: 74 07 je 1001E8B7 - 1001E8B0: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1001E8B3: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1001E8B7: 33 C0 xor eax,eax - 1001E8B9: EB 74 jmp 1001E92F - 1001E8BB: 56 push esi - 1001E8BC: 8B 75 F4 mov esi,dword ptr [ebp-0Ch] - 1001E8BF: 39 5E 08 cmp dword ptr [esi+8],ebx - 1001E8C2: 75 3A jne 1001E8FE - 1001E8C4: FF 75 0C push dword ptr [ebp+0Ch] - 1001E8C7: 50 push eax - 1001E8C8: E8 D3 02 00 00 call 1001EBA0 - 1001E8CD: 59 pop ecx - 1001E8CE: 59 pop ecx - 1001E8CF: EB 41 jmp 1001E912 - 1001E8D1: 0F B6 D1 movzx edx,cl - 1001E8D4: F6 44 32 1D 04 test byte ptr [edx+esi+1Dh],4 - 1001E8D9: 74 1A je 1001E8F5 - 1001E8DB: 40 inc eax - 1001E8DC: 8A 10 mov dl,byte ptr [eax] - 1001E8DE: 3A D3 cmp dl,bl - 1001E8E0: 74 3E je 1001E920 - 1001E8E2: 0F B7 C9 movzx ecx,cx - 1001E8E5: 0F B6 D2 movzx edx,dl - 1001E8E8: C1 E1 08 shl ecx,8 - 1001E8EB: 0B CA or ecx,edx - 1001E8ED: 39 4D 0C cmp dword ptr [ebp+0Ch],ecx - 1001E8F0: 75 0B jne 1001E8FD - 1001E8F2: 48 dec eax - 1001E8F3: EB 1D jmp 1001E912 - 1001E8F5: 0F B7 D1 movzx edx,cx - 1001E8F8: 39 55 0C cmp dword ptr [ebp+0Ch],edx - 1001E8FB: 74 0D je 1001E90A - 1001E8FD: 40 inc eax - 1001E8FE: 66 0F B6 08 movzx cx,byte ptr [eax] - 1001E902: 0F B7 C9 movzx ecx,cx - 1001E905: 66 3B CB cmp cx,bx - 1001E908: 75 C7 jne 1001E8D1 - 1001E90A: 0F B7 C9 movzx ecx,cx - 1001E90D: 39 4D 0C cmp dword ptr [ebp+0Ch],ecx - 1001E910: 75 0E jne 1001E920 - 1001E912: 38 5D FC cmp byte ptr [ebp-4],bl - 1001E915: 74 17 je 1001E92E - 1001E917: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 1001E91A: 83 61 70 FD and dword ptr [ecx+70h],0FFFFFFFDh - 1001E91E: EB 0E jmp 1001E92E - 1001E920: 38 5D FC cmp byte ptr [ebp-4],bl - 1001E923: 74 07 je 1001E92C - 1001E925: 8B 45 F8 mov eax,dword ptr [ebp-8] - 1001E928: 83 60 70 FD and dword ptr [eax+70h],0FFFFFFFDh - 1001E92C: 33 C0 xor eax,eax - 1001E92E: 5E pop esi - 1001E92F: 5B pop ebx - 1001E930: C9 leave - 1001E931: C3 ret - 1001E932: 8B FF mov edi,edi - 1001E934: 55 push ebp - 1001E935: 8B EC mov ebp,esp - 1001E937: 6A 00 push 0 - 1001E939: FF 75 0C push dword ptr [ebp+0Ch] - 1001E93C: FF 75 08 push dword ptr [ebp+8] - 1001E93F: E8 32 FF FF FF call 1001E876 - 1001E944: 83 C4 0C add esp,0Ch - 1001E947: 5D pop ebp - 1001E948: C3 ret - 1001E949: 8B FF mov edi,edi - 1001E94B: 55 push ebp - 1001E94C: 8B EC mov ebp,esp - 1001E94E: 83 EC 18 sub esp,18h - 1001E951: A1 10 49 02 10 mov eax,dword ptr ds:[10024910h] - 1001E956: 33 C5 xor eax,ebp - 1001E958: 89 45 FC mov dword ptr [ebp-4],eax - 1001E95B: 8B 45 10 mov eax,dword ptr [ebp+10h] - 1001E95E: 53 push ebx - 1001E95F: 56 push esi - 1001E960: 33 F6 xor esi,esi - 1001E962: 57 push edi - 1001E963: C7 45 E8 4E 40 00 mov dword ptr [ebp-18h],404Eh - 00 - 1001E96A: 89 30 mov dword ptr [eax],esi - 1001E96C: 89 70 04 mov dword ptr [eax+4],esi - 1001E96F: 89 70 08 mov dword ptr [eax+8],esi - 1001E972: 39 75 0C cmp dword ptr [ebp+0Ch],esi - 1001E975: 0F 86 46 01 00 00 jbe 1001EAC1 - 1001E97B: 8B 10 mov edx,dword ptr [eax] - 1001E97D: 8B 58 04 mov ebx,dword ptr [eax+4] - 1001E980: 8B F0 mov esi,eax - 1001E982: 8D 7D F0 lea edi,[ebp-10h] - 1001E985: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001E986: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001E987: A5 movs dword ptr es:[edi],dword ptr [esi] - 1001E988: 8B CA mov ecx,edx - 1001E98A: C1 E9 1F shr ecx,1Fh - 1001E98D: 8D 3C 12 lea edi,[edx+edx] - 1001E990: 8D 14 1B lea edx,[ebx+ebx] - 1001E993: 0B D1 or edx,ecx - 1001E995: 8B 48 08 mov ecx,dword ptr [eax+8] - 1001E998: 8B F3 mov esi,ebx - 1001E99A: C1 EE 1F shr esi,1Fh - 1001E99D: 03 C9 add ecx,ecx - 1001E99F: 0B CE or ecx,esi - 1001E9A1: 89 7D EC mov dword ptr [ebp-14h],edi - 1001E9A4: 8B F7 mov esi,edi - 1001E9A6: 83 65 EC 00 and dword ptr [ebp-14h],0 - 1001E9AA: 8B DA mov ebx,edx - 1001E9AC: C1 EB 1F shr ebx,1Fh - 1001E9AF: 03 C9 add ecx,ecx - 1001E9B1: C1 EF 1F shr edi,1Fh - 1001E9B4: 0B CB or ecx,ebx - 1001E9B6: 8B 5D F0 mov ebx,dword ptr [ebp-10h] - 1001E9B9: 03 F6 add esi,esi - 1001E9BB: 03 D2 add edx,edx - 1001E9BD: 0B D7 or edx,edi - 1001E9BF: 8D 3C 1E lea edi,[esi+ebx] - 1001E9C2: 89 30 mov dword ptr [eax],esi - 1001E9C4: 89 50 04 mov dword ptr [eax+4],edx - 1001E9C7: 89 48 08 mov dword ptr [eax+8],ecx - 1001E9CA: 3B FE cmp edi,esi - 1001E9CC: 72 04 jb 1001E9D2 - 1001E9CE: 3B FB cmp edi,ebx - 1001E9D0: 73 07 jae 1001E9D9 - 1001E9D2: C7 45 EC 01 00 00 mov dword ptr [ebp-14h],1 - 00 - 1001E9D9: 33 DB xor ebx,ebx - 1001E9DB: 89 38 mov dword ptr [eax],edi - 1001E9DD: 39 5D EC cmp dword ptr [ebp-14h],ebx - 1001E9E0: 74 1A je 1001E9FC - 1001E9E2: 8D 72 01 lea esi,[edx+1] - 1001E9E5: 3B F2 cmp esi,edx - 1001E9E7: 72 05 jb 1001E9EE - 1001E9E9: 83 FE 01 cmp esi,1 - 1001E9EC: 73 03 jae 1001E9F1 - 1001E9EE: 33 DB xor ebx,ebx - 1001E9F0: 43 inc ebx - 1001E9F1: 89 70 04 mov dword ptr [eax+4],esi - 1001E9F4: 85 DB test ebx,ebx - 1001E9F6: 74 04 je 1001E9FC - 1001E9F8: 41 inc ecx - 1001E9F9: 89 48 08 mov dword ptr [eax+8],ecx - 1001E9FC: 8B 48 04 mov ecx,dword ptr [eax+4] - 1001E9FF: 8B 55 F4 mov edx,dword ptr [ebp-0Ch] - 1001EA02: 8D 1C 11 lea ebx,[ecx+edx] - 1001EA05: 33 F6 xor esi,esi - 1001EA07: 3B D9 cmp ebx,ecx - 1001EA09: 72 04 jb 1001EA0F - 1001EA0B: 3B DA cmp ebx,edx - 1001EA0D: 73 03 jae 1001EA12 - 1001EA0F: 33 F6 xor esi,esi - 1001EA11: 46 inc esi - 1001EA12: 89 58 04 mov dword ptr [eax+4],ebx - 1001EA15: 85 F6 test esi,esi - 1001EA17: 74 03 je 1001EA1C - 1001EA19: FF 40 08 inc dword ptr [eax+8] - 1001EA1C: 8B 4D F8 mov ecx,dword ptr [ebp-8] - 1001EA1F: 01 48 08 add dword ptr [eax+8],ecx - 1001EA22: 83 65 EC 00 and dword ptr [ebp-14h],0 - 1001EA26: 8D 0C 3F lea ecx,[edi+edi] - 1001EA29: 8B D7 mov edx,edi - 1001EA2B: C1 EA 1F shr edx,1Fh - 1001EA2E: 8D 3C 1B lea edi,[ebx+ebx] - 1001EA31: 0B FA or edi,edx - 1001EA33: 8B 50 08 mov edx,dword ptr [eax+8] - 1001EA36: 8B F3 mov esi,ebx - 1001EA38: C1 EE 1F shr esi,1Fh - 1001EA3B: 8D 1C 12 lea ebx,[edx+edx] - 1001EA3E: 8B 55 08 mov edx,dword ptr [ebp+8] - 1001EA41: 0B DE or ebx,esi - 1001EA43: 89 08 mov dword ptr [eax],ecx - 1001EA45: 89 78 04 mov dword ptr [eax+4],edi - 1001EA48: 89 58 08 mov dword ptr [eax+8],ebx - 1001EA4B: 0F BE 12 movsx edx,byte ptr [edx] - 1001EA4E: 8D 34 11 lea esi,[ecx+edx] - 1001EA51: 89 55 F0 mov dword ptr [ebp-10h],edx - 1001EA54: 3B F1 cmp esi,ecx - 1001EA56: 72 04 jb 1001EA5C - 1001EA58: 3B F2 cmp esi,edx - 1001EA5A: 73 07 jae 1001EA63 - 1001EA5C: C7 45 EC 01 00 00 mov dword ptr [ebp-14h],1 - 00 - 1001EA63: 83 7D EC 00 cmp dword ptr [ebp-14h],0 - 1001EA67: 89 30 mov dword ptr [eax],esi - 1001EA69: 74 1C je 1001EA87 - 1001EA6B: 8D 4F 01 lea ecx,[edi+1] - 1001EA6E: 33 D2 xor edx,edx - 1001EA70: 3B CF cmp ecx,edi - 1001EA72: 72 05 jb 1001EA79 - 1001EA74: 83 F9 01 cmp ecx,1 - 1001EA77: 73 03 jae 1001EA7C - 1001EA79: 33 D2 xor edx,edx - 1001EA7B: 42 inc edx - 1001EA7C: 89 48 04 mov dword ptr [eax+4],ecx - 1001EA7F: 85 D2 test edx,edx - 1001EA81: 74 04 je 1001EA87 - 1001EA83: 43 inc ebx - 1001EA84: 89 58 08 mov dword ptr [eax+8],ebx - 1001EA87: FF 4D 0C dec dword ptr [ebp+0Ch] - 1001EA8A: FF 45 08 inc dword ptr [ebp+8] - 1001EA8D: 83 7D 0C 00 cmp dword ptr [ebp+0Ch],0 - 1001EA91: 0F 87 E4 FE FF FF ja 1001E97B - 1001EA97: 33 F6 xor esi,esi - 1001EA99: EB 26 jmp 1001EAC1 - 1001EA9B: 8B 48 04 mov ecx,dword ptr [eax+4] - 1001EA9E: 8B D1 mov edx,ecx - 1001EAA0: C1 EA 10 shr edx,10h - 1001EAA3: 89 50 08 mov dword ptr [eax+8],edx - 1001EAA6: 8B 10 mov edx,dword ptr [eax] - 1001EAA8: 8B FA mov edi,edx - 1001EAAA: C1 E1 10 shl ecx,10h - 1001EAAD: C1 EF 10 shr edi,10h - 1001EAB0: 0B CF or ecx,edi - 1001EAB2: C1 E2 10 shl edx,10h - 1001EAB5: 81 45 E8 F0 FF 00 add dword ptr [ebp-18h],0FFF0h - 00 - 1001EABC: 89 48 04 mov dword ptr [eax+4],ecx - 1001EABF: 89 10 mov dword ptr [eax],edx - 1001EAC1: 39 70 08 cmp dword ptr [eax+8],esi - 1001EAC4: 74 D5 je 1001EA9B - 1001EAC6: BB 00 80 00 00 mov ebx,8000h - 1001EACB: 85 58 08 test dword ptr [eax+8],ebx - 1001EACE: 75 30 jne 1001EB00 - 1001EAD0: 8B 30 mov esi,dword ptr [eax] - 1001EAD2: 8B 78 04 mov edi,dword ptr [eax+4] - 1001EAD5: 81 45 E8 FF FF 00 add dword ptr [ebp-18h],0FFFFh - 00 - 1001EADC: 8B CE mov ecx,esi - 1001EADE: 03 F6 add esi,esi - 1001EAE0: C1 E9 1F shr ecx,1Fh - 1001EAE3: 89 30 mov dword ptr [eax],esi - 1001EAE5: 8D 34 3F lea esi,[edi+edi] - 1001EAE8: 0B F1 or esi,ecx - 1001EAEA: 8B 48 08 mov ecx,dword ptr [eax+8] - 1001EAED: 8B D7 mov edx,edi - 1001EAEF: C1 EA 1F shr edx,1Fh - 1001EAF2: 03 C9 add ecx,ecx - 1001EAF4: 0B CA or ecx,edx - 1001EAF6: 89 70 04 mov dword ptr [eax+4],esi - 1001EAF9: 89 48 08 mov dword ptr [eax+8],ecx - 1001EAFC: 85 CB test ebx,ecx - 1001EAFE: 74 D0 je 1001EAD0 - 1001EB00: 66 8B 4D E8 mov cx,word ptr [ebp-18h] - 1001EB04: 66 89 48 0A mov word ptr [eax+0Ah],cx - 1001EB08: 8B 4D FC mov ecx,dword ptr [ebp-4] - 1001EB0B: 5F pop edi - 1001EB0C: 5E pop esi - 1001EB0D: 33 CD xor ecx,ebp - 1001EB0F: 5B pop ebx - 1001EB10: E8 86 B5 FE FF call 1000A09B - 1001EB15: C9 leave - 1001EB16: C3 ret - 1001EB17: 6A 08 push 8 - 1001EB19: 68 28 20 02 10 push 10022028h - 1001EB1E: E8 65 15 FF FF call 10010088 - 1001EB23: 33 C0 xor eax,eax - 1001EB25: 39 05 1C 6D 02 10 cmp dword ptr ds:[10026D1Ch],eax - 1001EB2B: 74 56 je 1001EB83 - 1001EB2D: F6 45 08 40 test byte ptr [ebp+8],40h - 1001EB31: 74 48 je 1001EB7B - 1001EB33: 39 05 94 5C 02 10 cmp dword ptr ds:[10025C94h],eax - 1001EB39: 74 40 je 1001EB7B - 1001EB3B: 89 45 FC mov dword ptr [ebp-4],eax - 1001EB3E: 0F AE 55 08 ldmxcsr dword ptr [ebp+8] - 1001EB42: EB 2E jmp 1001EB72 - 1001EB44: 8B 45 EC mov eax,dword ptr [ebp-14h] - 1001EB47: 8B 00 mov eax,dword ptr [eax] - 1001EB49: 8B 00 mov eax,dword ptr [eax] - 1001EB4B: 3D 05 00 00 C0 cmp eax,0C0000005h - 1001EB50: 74 0A je 1001EB5C - 1001EB52: 3D 1D 00 00 C0 cmp eax,0C000001Dh - 1001EB57: 74 03 je 1001EB5C - 1001EB59: 33 C0 xor eax,eax - 1001EB5B: C3 ret - 1001EB5C: 33 C0 xor eax,eax - 1001EB5E: 40 inc eax - 1001EB5F: C3 ret - 1001EB60: 8B 65 E8 mov esp,dword ptr [ebp-18h] - 1001EB63: 83 25 94 5C 02 10 and dword ptr ds:[10025C94h],0 - 00 - 1001EB6A: 83 65 08 BF and dword ptr [ebp+8],0FFFFFFBFh - 1001EB6E: 0F AE 55 08 ldmxcsr dword ptr [ebp+8] - 1001EB72: C7 45 FC FE FF FF mov dword ptr [ebp-4],0FFFFFFFEh - FF - 1001EB79: EB 08 jmp 1001EB83 - 1001EB7B: 83 65 08 BF and dword ptr [ebp+8],0FFFFFFBFh - 1001EB7F: 0F AE 55 08 ldmxcsr dword ptr [ebp+8] - 1001EB83: E8 45 15 FF FF call 100100CD - 1001EB88: C3 ret - 1001EB89: CC int 3 - 1001EB8A: CC int 3 - 1001EB8B: CC int 3 - 1001EB8C: CC int 3 - 1001EB8D: CC int 3 - 1001EB8E: CC int 3 - 1001EB8F: CC int 3 - 1001EB90: 8D 42 FF lea eax,[edx-1] - 1001EB93: 5B pop ebx - 1001EB94: C3 ret - 1001EB95: 8D A4 24 00 00 00 lea esp,[esp+00000000h] - 00 - 1001EB9C: 8D 64 24 00 lea esp,[esp] - 1001EBA0: 33 C0 xor eax,eax - 1001EBA2: 8A 44 24 08 mov al,byte ptr [esp+8] - 1001EBA6: 53 push ebx - 1001EBA7: 8B D8 mov ebx,eax - 1001EBA9: C1 E0 08 shl eax,8 - 1001EBAC: 8B 54 24 08 mov edx,dword ptr [esp+8] - 1001EBB0: F7 C2 03 00 00 00 test edx,3 - 1001EBB6: 74 15 je 1001EBCD - 1001EBB8: 8A 0A mov cl,byte ptr [edx] - 1001EBBA: 83 C2 01 add edx,1 - 1001EBBD: 3A CB cmp cl,bl - 1001EBBF: 74 CF je 1001EB90 - 1001EBC1: 84 C9 test cl,cl - 1001EBC3: 74 51 je 1001EC16 - 1001EBC5: F7 C2 03 00 00 00 test edx,3 - 1001EBCB: 75 EB jne 1001EBB8 - 1001EBCD: 0B D8 or ebx,eax - 1001EBCF: 57 push edi - 1001EBD0: 8B C3 mov eax,ebx - 1001EBD2: C1 E3 10 shl ebx,10h - 1001EBD5: 56 push esi - 1001EBD6: 0B D8 or ebx,eax - 1001EBD8: 8B 0A mov ecx,dword ptr [edx] - 1001EBDA: BF FF FE FE 7E mov edi,7EFEFEFFh - 1001EBDF: 8B C1 mov eax,ecx - 1001EBE1: 8B F7 mov esi,edi - 1001EBE3: 33 CB xor ecx,ebx - 1001EBE5: 03 F0 add esi,eax - 1001EBE7: 03 F9 add edi,ecx - 1001EBE9: 83 F1 FF xor ecx,0FFFFFFFFh - 1001EBEC: 83 F0 FF xor eax,0FFFFFFFFh - 1001EBEF: 33 CF xor ecx,edi - 1001EBF1: 33 C6 xor eax,esi - 1001EBF3: 83 C2 04 add edx,4 - 1001EBF6: 81 E1 00 01 01 81 and ecx,81010100h - 1001EBFC: 75 1C jne 1001EC1A - 1001EBFE: 25 00 01 01 81 and eax,81010100h - 1001EC03: 74 D3 je 1001EBD8 - 1001EC05: 25 00 01 01 01 and eax,1010100h - 1001EC0A: 75 08 jne 1001EC14 - 1001EC0C: 81 E6 00 00 00 80 and esi,80000000h - 1001EC12: 75 C4 jne 1001EBD8 - 1001EC14: 5E pop esi - 1001EC15: 5F pop edi - 1001EC16: 5B pop ebx - 1001EC17: 33 C0 xor eax,eax - 1001EC19: C3 ret - 1001EC1A: 8B 42 FC mov eax,dword ptr [edx-4] - 1001EC1D: 3A C3 cmp al,bl - 1001EC1F: 74 36 je 1001EC57 - 1001EC21: 84 C0 test al,al - 1001EC23: 74 EF je 1001EC14 - 1001EC25: 3A E3 cmp ah,bl - 1001EC27: 74 27 je 1001EC50 - 1001EC29: 84 E4 test ah,ah - 1001EC2B: 74 E7 je 1001EC14 - 1001EC2D: C1 E8 10 shr eax,10h - 1001EC30: 3A C3 cmp al,bl - 1001EC32: 74 15 je 1001EC49 - 1001EC34: 84 C0 test al,al - 1001EC36: 74 DC je 1001EC14 - 1001EC38: 3A E3 cmp ah,bl - 1001EC3A: 74 06 je 1001EC42 - 1001EC3C: 84 E4 test ah,ah - 1001EC3E: 74 D4 je 1001EC14 - 1001EC40: EB 96 jmp 1001EBD8 - 1001EC42: 5E pop esi - 1001EC43: 5F pop edi - 1001EC44: 8D 42 FF lea eax,[edx-1] - 1001EC47: 5B pop ebx - 1001EC48: C3 ret - 1001EC49: 8D 42 FE lea eax,[edx-2] - 1001EC4C: 5E pop esi - 1001EC4D: 5F pop edi - 1001EC4E: 5B pop ebx - 1001EC4F: C3 ret - 1001EC50: 8D 42 FD lea eax,[edx-3] - 1001EC53: 5E pop esi - 1001EC54: 5F pop edi - 1001EC55: 5B pop ebx - 1001EC56: C3 ret - 1001EC57: 8D 42 FC lea eax,[edx-4] - 1001EC5A: 5E pop esi - 1001EC5B: 5F pop edi - 1001EC5C: 5B pop ebx - 1001EC5D: C3 ret - 1001EC5E: FF 25 54 F0 01 10 jmp dword ptr ds:[1001F054h] - 1001EC64: CC int 3 - 1001EC65: CC int 3 - 1001EC66: CC int 3 - 1001EC67: CC int 3 - 1001EC68: CC int 3 - 1001EC69: CC int 3 - 1001EC6A: CC int 3 - 1001EC6B: CC int 3 - 1001EC6C: CC int 3 - 1001EC6D: CC int 3 - 1001EC6E: CC int 3 - 1001EC6F: CC int 3 - 1001EC70: 8B 4D F0 mov ecx,dword ptr [ebp-10h] - 1001EC73: 83 C1 08 add ecx,8 - 1001EC76: E9 15 8F FE FF jmp 10007B90 - 1001EC7B: 8B 54 24 08 mov edx,dword ptr [esp+8] - 1001EC7F: 8D 42 F8 lea eax,[edx-8] - 1001EC82: 8B 4A F4 mov ecx,dword ptr [edx-0Ch] - 1001EC85: 33 C8 xor ecx,eax - 1001EC87: E8 0F B4 FE FF call 1000A09B - 1001EC8C: B8 C8 17 02 10 mov eax,100217C8h - 1001EC91: E9 AC B0 FE FF jmp 10009D42 - 1001EC96: CC int 3 - 1001EC97: CC int 3 - 1001EC98: CC int 3 - 1001EC99: CC int 3 - 1001EC9A: CC int 3 - 1001EC9B: CC int 3 - 1001EC9C: CC int 3 - 1001EC9D: CC int 3 - 1001EC9E: CC int 3 - 1001EC9F: CC int 3 - 1001ECA0: 8B 4D EC mov ecx,dword ptr [ebp-14h] - 1001ECA3: E9 68 38 FE FF jmp 10002510 - 1001ECA8: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 1001ECAB: 50 push eax - 1001ECAC: E8 4A B4 FE FF call 1000A0FB - 1001ECB1: 59 pop ecx - 1001ECB2: C3 ret - 1001ECB3: 8B 54 24 08 mov edx,dword ptr [esp+8] - 1001ECB7: 8D 42 F0 lea eax,[edx-10h] - 1001ECBA: 8B 4A EC mov ecx,dword ptr [edx-14h] - 1001ECBD: 33 C8 xor ecx,eax - 1001ECBF: E8 D7 B3 FE FF call 1000A09B - 1001ECC4: B8 FC 17 02 10 mov eax,100217FCh - 1001ECC9: E9 74 B0 FE FF jmp 10009D42 - 1001ECCE: CC int 3 - 1001ECCF: CC int 3 - 1001ECD0: 8B 4D F0 mov ecx,dword ptr [ebp-10h] - 1001ECD3: E9 38 38 FE FF jmp 10002510 - 1001ECD8: 8B 54 24 08 mov edx,dword ptr [esp+8] - 1001ECDC: 8D 42 F4 lea eax,[edx-0Ch] - 1001ECDF: 8B 4A F0 mov ecx,dword ptr [edx-10h] - 1001ECE2: 33 C8 xor ecx,eax - 1001ECE4: E8 B2 B3 FE FF call 1000A09B - 1001ECE9: B8 28 18 02 10 mov eax,10021828h - 1001ECEE: E9 4F B0 FE FF jmp 10009D42 - 1001ECF3: CC int 3 - 1001ECF4: CC int 3 - 1001ECF5: CC int 3 - 1001ECF6: CC int 3 - 1001ECF7: CC int 3 - 1001ECF8: CC int 3 - 1001ECF9: CC int 3 - 1001ECFA: CC int 3 - 1001ECFB: CC int 3 - 1001ECFC: CC int 3 - 1001ECFD: CC int 3 - 1001ECFE: CC int 3 - 1001ECFF: CC int 3 - 1001ED00: 8B 4D F0 mov ecx,dword ptr [ebp-10h] - 1001ED03: E9 48 9E FE FF jmp 10008B50 - 1001ED08: 8B 54 24 08 mov edx,dword ptr [esp+8] - 1001ED0C: 8D 42 F4 lea eax,[edx-0Ch] - 1001ED0F: 8B 4A F0 mov ecx,dword ptr [edx-10h] - 1001ED12: 33 C8 xor ecx,eax - 1001ED14: E8 82 B3 FE FF call 1000A09B - 1001ED19: B8 54 18 02 10 mov eax,10021854h - 1001ED1E: E9 1F B0 FE FF jmp 10009D42 - 1001ED23: CC int 3 - 1001ED24: CC int 3 - 1001ED25: CC int 3 - 1001ED26: CC int 3 - 1001ED27: CC int 3 - 1001ED28: CC int 3 - 1001ED29: CC int 3 - 1001ED2A: CC int 3 - 1001ED2B: CC int 3 - 1001ED2C: CC int 3 - 1001ED2D: CC int 3 - 1001ED2E: CC int 3 - 1001ED2F: CC int 3 - 1001ED30: 8B 4D F0 mov ecx,dword ptr [ebp-10h] - 1001ED33: E9 18 9E FE FF jmp 10008B50 - 1001ED38: 8B 54 24 08 mov edx,dword ptr [esp+8] - 1001ED3C: 8D 42 F8 lea eax,[edx-8] - 1001ED3F: 8B 4A F4 mov ecx,dword ptr [edx-0Ch] - 1001ED42: 33 C8 xor ecx,eax - 1001ED44: E8 52 B3 FE FF call 1000A09B - 1001ED49: B8 80 18 02 10 mov eax,10021880h - 1001ED4E: E9 EF AF FE FF jmp 10009D42 - 1001ED53: CC int 3 - 1001ED54: CC int 3 - 1001ED55: CC int 3 - 1001ED56: CC int 3 - 1001ED57: CC int 3 - 1001ED58: CC int 3 - 1001ED59: CC int 3 - 1001ED5A: CC int 3 - 1001ED5B: CC int 3 - 1001ED5C: CC int 3 - 1001ED5D: CC int 3 - 1001ED5E: CC int 3 - 1001ED5F: CC int 3 - 1001ED60: 8B 45 F0 mov eax,dword ptr [ebp-10h] - 1001ED63: 50 push eax - 1001ED64: E8 92 B3 FE FF call 1000A0FB - 1001ED69: 59 pop ecx - 1001ED6A: C3 ret - 1001ED6B: 8B 54 24 08 mov edx,dword ptr [esp+8] - 1001ED6F: 8D 42 FC lea eax,[edx-4] - 1001ED72: 8B 4A F8 mov ecx,dword ptr [edx-8] - 1001ED75: 33 C8 xor ecx,eax - 1001ED77: E8 1F B3 FE FF call 1000A09B - 1001ED7C: B8 AC 18 02 10 mov eax,100218ACh - 1001ED81: E9 BC AF FE FF jmp 10009D42 - 1001ED86: 8B 54 24 08 mov edx,dword ptr [esp+8] - 1001ED8A: 8D 42 0C lea eax,[edx+0Ch] - 1001ED8D: 8B 4A EC mov ecx,dword ptr [edx-14h] - 1001ED90: 33 C8 xor ecx,eax - 1001ED92: E8 04 B3 FE FF call 1000A09B - 1001ED97: B8 60 1B 02 10 mov eax,10021B60h - 1001ED9C: E9 A1 AF FE FF jmp 10009D42 - 1001EDA1: C7 05 0C 61 02 10 mov dword ptr ds:[1002610Ch],1001F8A4h - A4 F8 01 10 - 1001EDAB: B9 0C 61 02 10 mov ecx,1002610Ch - 1001EDB0: E9 B0 ED FE FF jmp 1000DB65 - - Summary - - 4000 .data - 5000 .rdata - 2000 .reloc - 1000 .rsrc - 1E000 .text diff --git a/eDosStation/x.zip b/eDosStation/x.zip deleted file mode 100644 index 10de086..0000000 Binary files a/eDosStation/x.zip and /dev/null differ diff --git a/eDosStation/y.txt b/eDosStation/y.txt deleted file mode 100644 index e214901..0000000 --- a/eDosStation/y.txt +++ /dev/null @@ -1,124 +0,0 @@ -Microsoft (R) COFF/PE Dumper Version 14.51.36252.0 -Copyright (C) Microsoft Corporation. All rights reserved. - - -Dump of file reader2.dll - -File Type: DLL - - Section contains the following imports: - - KERNEL32.dll - 1001F000 Import Address Table - 10022080 Import Name Table - 0 time date stamp - 0 Index of first forwarder reference - - 3A0 SetCommTimeouts - 39F SetCommState - 16E GetCommTimeouts - 16D GetCommState - 7F CreateFileW - 43 CloseHandle - 349 PurgeComm - 48D WriteFile - 368 ReadFile - 41D SetupComm - 41 ClearCommError - 103 EscapeCommFunction - 421 Sleep - 1E6 GetLastError - C3 DeleteFileW - 71 CreateDirectoryW - 124 FindFirstFileW - 432 TlsAlloc - 433 TlsFree - 3D0 SetEnvironmentVariableA - 55 CompareStringW - 392 RtlUnwind - 24F GetSystemTimeAsFileTime - 2A1 HeapFree - 1DF GetFullPathNameW - D9 EnterCriticalSection - 2EF LeaveCriticalSection - 26B GetTimeZoneInformation - 47A WideCharToMultiByte - 1AD GetCurrentThreadId - 16F GetCommandLineA - 1F9 GetModuleHandleW - 220 GetProcAddress - 434 TlsGetValue - 435 TlsSetValue - 2C0 InterlockedIncrement - 3EC SetLastError - 2BC InterlockedDecrement - 42D TerminateProcess - 1A9 GetCurrentProcess - 43E UnhandledExceptionFilter - 415 SetUnhandledExceptionFilter - 2D1 IsDebuggerPresent - 29D HeapAlloc - 35A RaiseException - 23B GetStdHandle - 1F4 GetModuleFileNameA - 29F HeapCreate - 2A0 HeapDestroy - 457 VirtualFree - BE DeleteCriticalSection - 454 VirtualAlloc - 2A4 HeapReAlloc - 1A7 GetCurrentDirectoryA - 1BA GetDriveTypeA - 15B GetCPInfo - 152 GetACP - 213 GetOEMCP - 2DB IsValidCodePage - 2E3 LCMapStringW - 3E8 SetHandleCount - 1D7 GetFileType - 239 GetStartupInfoA - 104 ExitProcess - 1F6 GetModuleHandleA - 14A FreeEnvironmentStringsA - 1BF GetEnvironmentStrings - 14B FreeEnvironmentStringsW - 1C1 GetEnvironmentStringsW - 354 QueryPerformanceCounter - 266 GetTickCount - 1AA GetCurrentProcessId - 2A6 HeapSize - 2F1 LoadLibraryA - 1E8 GetLocaleInfoA - 3DF SetFilePointer - 183 GetConsoleCP - 195 GetConsoleMode - 31A MultiByteToWideChar - 2B5 InitializeCriticalSectionAndSpinCount - 3FC SetStdHandle - 141 FlushFileBuffers - 2E1 LCMapStringA - 23D GetStringTypeA - 240 GetStringTypeW - 482 WriteConsoleA - 199 GetConsoleOutputCP - 48C WriteConsoleW - 3CD SetEndOfFile - 223 GetProcessHeap - 52 CompareStringA - 78 CreateFileA - - SHELL32.dll - 1001F174 Import Address Table - 100221F4 Import Name Table - 0 time date stamp - 0 Index of first forwarder reference - - C0 SHGetFolderPathW - - Summary - - 4000 .data - 5000 .rdata - 2000 .reloc - 1000 .rsrc - 1E000 .text diff --git a/eDosStation/z.txt b/eDosStation/z.txt deleted file mode 100644 index e948be5..0000000 --- a/eDosStation/z.txt +++ /dev/null @@ -1,158 +0,0 @@ -Microsoft (R) COFF/PE Dumper Version 14.51.36252.0 -Copyright (C) Microsoft Corporation. All rights reserved. - - -Dump of file reader2.dll - -File Type: DLL - - Section contains the following exports for IR_READER_MS_DLL.dll - - 00000000 characteristics - 534E87DE time date stamp Wed Apr 16 15:38:38 2014 - 0.00 version - 1 ordinal base - 131 number of functions - 131 number of names - - ordinal hint RVA name - - 1 0 00007D60 ?GetLogDirectory@@YGXPA_WG@Z - 2 1 00008370 ?GetLogFilename@@YGXPA_WG@Z - 3 2 000082A0 ?GetLogIniFilename@@YGXPA_WG@Z - 4 3 000084F0 ?GetLoggingLevel@@YGGXZ - 5 4 00008550 ?GetRawLoggingLevel@@YGGXZ - 6 5 00008430 ?GetRejectLogFilename@@YGXPA_WG@Z - 7 6 00008520 ?GetRejectLoggingLevel@@YGGXZ - 8 7 00007DB0 ?InitLogDirectory@@YGXXZ - 9 8 00008160 ?Initialize@@YGXXZ - 10 9 00008580 ?Log@@YAXQBDIGQB_WZZ - 11 A 00007D90 ?LogPort@@YGXPA_WG@Z - 12 B 00008740 ?LogReject@@YGXGPAEK@Z - 13 C 000083A0 ?SetLogFilename@@YGXQB_W@Z - 14 D 000082D0 ?SetLogIniFilename@@YGXQB_W@Z - 15 E 00008500 ?SetLoggingLevel@@YGXG@Z - 16 F 00008560 ?SetRawLoggingLevel@@YGXG@Z - 17 10 00008460 ?SetRejectLogFilename@@YGXQB_W@Z - 18 11 00008530 ?SetRejectLoggingLevel@@YGXG@Z - 19 12 00005520 ADSClearData - 20 13 000055B0 ADSClearOffEnable - 21 14 00005420 ADSClearWearer - 22 15 00005500 ADSDeIssue - 23 16 00005490 ADSIssue - 24 17 000053D0 ADSLogin - 25 18 00003DB0 ADSReadData - 26 19 00005440 ADSReadWearer - 27 1A 00005590 ADSSetOffEnable - 28 1B 00005540 ADSWritePassword - 29 1C 00002940 Abort - 30 1D 00002540 AllocateMemory - 31 1E 000039B0 BaseLineCounts - 32 1F 00004840 ClearDose - 33 20 00009560 ClearErrorStore - 34 21 000039F0 ClearFailFlag - 35 22 00003A30 ClearFaultFlags - 36 23 00003A10 ClearLatchedAlarms - 37 24 000049A0 ClearPeakRates - 38 25 00004920 ClearTotalDose - 39 26 00003670 CloseDevice - 40 27 00002F90 Commit - 41 28 00002F10 Connect - 42 29 00003930 DeIssueEpd - 43 2A 00002880 DeinitComms - 44 2B 00002BE0 Discover - 45 2C 00003D90 DisplayFaultCode - 46 2D 00005100 EndSession - 47 2E 00003030 EpdOff - 48 2F 00003750 EpdOn - 51 30 00002790 GetDataMetric - 52 31 00002740 GetErrorDetails - 53 32 000027A0 InitComms - 54 33 000038D0 IssueEpd - 55 34 00003580 MFRClearAlwaysCount - 56 35 00003580 MFRClearGolden - 57 36 00003580 MFRFormatEEPROM - 58 37 000055D0 MFRLogin - 59 38 00003580 MFRResetEpd - 60 39 00003580 MFRSetAlwaysCount - 61 3A 00003580 MFRSetGolden - 62 3B 00003570 MFRWriteASIC - 63 3C 00005620 MFRWriteCalFactors - 64 3D 000056B0 MFRWriteDetectorThresholds - 65 3E 00003560 MFRWriteDirectEEPROM - 66 3F 00003590 MFRWriteEpdID - 67 40 00005980 MFRWritePassword - 68 41 00003560 MFRWriteRAM - 69 42 00002590 MemoryAllocated - 70 43 00002DD0 OpenDevice - 71 44 000059D0 ReadA2Config - 72 45 00005A30 ReadA2ConfigStatus - 73 46 00005320 ReadASIC - 74 47 00004560 ReadAlarmConfig - 75 48 00003CF0 ReadAlarmDoseThresholds - 76 49 00003D30 ReadAlarmRateThresholds - 77 4A 00003B90 ReadBaseCounts - 78 4B 00003BE0 ReadCalibrationData - 79 4C 000036F0 ReadCommsStats - 80 4D 000044D0 ReadConfig - 81 4E 00003AB0 ReadCounts - 82 4F 00005360 ReadDirectEEPROM - 83 50 000045B0 ReadDisplayConfig - 84 51 00004390 ReadDoseProfile - 85 52 00003390 ReadDoseProfileCache - 86 53 00004430 ReadDoseProfileSince - 87 54 00003A50 ReadDosesQuality - 88 55 00003080 ReadEpdID - 89 56 00003770 ReadEpdStatus - 90 57 00004610 ReadErrorStore - 91 58 00002620 ReadMemory - 92 59 00003B00 ReadPeaks - 93 5A 00003E20 ReadProfileControl - 94 5B 000052B0 ReadRAM - 95 5C 00003B50 ReadRates - 96 5D 00005130 ReadScratchPad - 97 5E 000047A0 ReadSpecialDoseStore - 98 5F 00004760 ReadSpecialWriteTimes - 99 60 00003880 ReadWearer - 100 61 00003800 ReadWearerID - 101 62 00003840 ReadWearerName - 103 63 000025D0 ReleaseMemory - 104 64 00002CF0 SetAutoCommit - 105 65 00002A20 SetDiscoveryExpirationPeriod - 106 66 00002B00 SetDiscoveryTimeslotCount - 107 67 00002A90 SetDiscoveryTimeslotPeriod - 108 68 000039D0 SetFailFlag - 109 69 00002CA0 SetRetryCounts - 110 6A 000029A0 SetTimeouts - 111 6B 00005C50 TestBattery - 112 6C 000037E0 TestDetectors - 114 6D 00005A80 WriteA2Config - 115 6E 00004B10 WriteAlarmConfig - 116 6F 00004A10 WriteAlarmDoseThresholds - 117 70 00004A80 WriteAlarmRateThresholds - 118 71 00005260 WriteChirpRate - 119 72 00004EE0 WriteConfig - 120 73 000048C0 WriteCountdownTimer - 121 74 00004CB0 WriteDisplayConfig - 122 75 00005830 WriteDisplayControlBits - 123 76 00005860 WriteDisplayEnables - 124 77 00004860 WriteDose - 125 78 000026B0 WriteMemory - 126 79 00004FB0 WriteProfileControl - 127 7A 000049C0 WriteReturnForReadTime - 128 7B 000051A0 WriteScratchPad - 129 7C 00005010 WriteSpecialWriteTimes - 130 7D 00004940 WriteTotalDose - 131 7E 00003950 WriteWearerName - 49 7F 00002EA0 _FlushBuffers@4 - 50 80 00002B70 _FlushDiscoveryCache@4 - 102 81 00002D80 _Receive@8 - 113 82 00002D30 _Transmit@8 - - Summary - - 4000 .data - 5000 .rdata - 2000 .reloc - 1000 .rsrc - 1E000 .text diff --git a/scripts/Upgrader.ps1 b/scripts/Upgrader.ps1 index d4b27b0..17475ea 100644 --- a/scripts/Upgrader.ps1 +++ b/scripts/Upgrader.ps1 @@ -37,211 +37,203 @@ Start-ScheduledTask -TaskName $taskname exit # SIG # Begin signature block -# MIImpAYJKoZIhvcNAQcCoIImlTCCJpECAQExDzANBglghkgBZQMEAgEFADB5Bgor -# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG -# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBOScG177DVwwy3 -# b/0s74/nYVBfoa9OI4AdIt4yzJ6gDqCCDDYwggW8MIIDpKADAgECAgEfMA0GCSqG -# SIb3DQEBCwUAMGYxCzAJBgNVBAYTAkJFMRIwEAYDVQQIEwlBbnR3ZXJwZW4xDDAK -# BgNVBAcTA01vbDEPMA0GA1UEChMGU0NLQ0VOMQwwCgYDVQQLEwNJQ1QxFjAUBgNV -# BAMTDVNDS0NFTiBJQ1QgQ0EwHhcNMTgwNTI0MDYxMTAwWhcNMzAwNjAxMTIwMDAw -# WjBPMSEwHwYDVQQDExhWYW5kZW5icm91Y2tlIEx1YyBDUzIwMjExKjAoBgkqhkiG -# 9w0BCQEWG2x1Yy52YW5kZW5icm91Y2tlQHNja2Nlbi5iZTCCASIwDQYJKoZIhvcN -# AQEBBQADggEPADCCAQoCggEBAPRbMPSAdMsURs6M9TChuXZWe1LSQlVXYVHPGRln -# QeF719tgHS1Ern70aW0PuvCECkzUTbGHw3o+bF+vj1UZWw82oOEZGannAoTyG1CI -# xdOMc85Mdmy+Kb++9Ivxa6i4ahfpNDHE0F58TomaNyDY0dtRUDEMZw/A0AMkFmdg -# 9BOnqrYeeLB0O/86ZkzUklRifi/Wa3ti1LV4U7fR6S4bMm7dZBh46IU2G3/oBdlN -# YAtC3DNol+bnrcBvF+ccGwG5kVxEZg8TtpEMj00hnI+rNPjI4Ar6mE83XKak1X5/ -# xddZppx9ldJaiVujyOqy0cONhiN/vsWPdZU37LQbG1OydGUCAwEAAaOCAYowggGG -# MAkGA1UdEwQCMAAwHQYDVR0OBBYEFN+1bIhLi6eWlLbzynleh97QuIFlMB8GA1Ud -# IwQYMBaAFPApFPVqIRSSVlQTpD3VrfAhOsV4MAsGA1UdDwQEAwIHgDAfBgNVHSUE -# GDAWBggrBgEFBQcDAwYKKwYBBAGCNwIBFTA6BgNVHREEMzAxgRtsdWMudmFuZGVu -# YnJvdWNrZUBzY2tjZW4uYmWBEmx2YW5kZW5iQHNja2Nlbi5iZTA1BgNVHRIELjAs -# hipodHRwOi8vY3JsLnNja2Nlbi5iZS9TQ0tDRU4lMjBJQ1QlMjBDQS5jcnQwOwYD -# VR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2tjZW4uYmUvU0NLQ0VOJTIwSUNU -# JTIwQ0EuY3JsMD4GCSsGAQQBgjcVBwQxMC8GJysGAQQBgjcVCISMvCGCyP13gqGT -# IoSXlEaExpIugQGC1IQhgfrIaQIBZAIBCDAbBgkrBgEEAYI3FQoEDjAMMAoGCCsG -# AQUFBwMDMA0GCSqGSIb3DQEBCwUAA4ICAQBGH87fu9sNbcCPVQCdJ9jP4jT59WTZ -# m6s5BquO10UL9i7UAEmdd0yfCHW3myNUigR6O+Oc6Wa74HbUhAk+nEimHxzP5KcN -# nKE6lwqsIOf49J5G+2HRmTgW9tewsr39ZiB3NE5s04fHEA0I45zs8wsgyp4Mlr5v -# 3AfzYB7gxh0Hxdm+ion7PXvbKhAyI3F7pQTYauilmLAkHnoXD6T+Osp04wR9m1+H -# NGqLMKYyVOSdu0UnmGuqHBxpMD7hAJ8LCi5yR6t6s4BNCczwhzUpo6ZgrtLmKCac -# DmZ6SJMqsGFwan/GxnLSvw5QpVXUVJidDfTflMeJrfWhDOEt7jx9oQWQ249uzxlq -# JMVfBt1YZDq4gr76yjK6VY7F6540ECog4auPte4NoiT5UPdE3QHSD/82/cdLoVuh -# ELR4p4bfJ7PONT7x8iZzI8BoASh9SKJBh06mcmyJosOkc77Wv3ykqal7R+/LQi9g -# eJwku6Ti0XIy9UFGBbUD4m18e5cKdqDzyIHwAne0JR0ZEILPzITWviFuSXKqGP0b -# kSbGgpl+LuaCHcKAv+1FQBc2oWW0yPdxCUYpwo9QfTTh0qYXABQAbibOw7VKTnRL -# sS92m9pb6wn9tYyNfMu6r7EXCuxJNDbYpKbxeadfY0arCzlOT6mpC6lzBqfgKyN+ -# VWoy9rmdzhjEjjCCBnIwggRaoAMCAQICEzgAAAACbukOrXYB5dcAAAAAAAIwDQYJ -# KoZIhvcNAQELBQAwZzELMAkGA1UEBhMCQkUxEjAQBgNVBAgTCUFudHdlcnBlbjEM -# MAoGA1UEBxMDTW9sMQ8wDQYDVQQKEwZTQ0tDRU4xDDAKBgNVBAsTA0lDVDEXMBUG -# A1UEAxMOU0NLQ0VOIFJvb3QgQ0EwHhcNMTcwNjIzMTEzOTM0WhcNMzIwNjIzMTE0 -# OTM0WjBmMQswCQYDVQQGEwJCRTESMBAGA1UECBMJQW50d2VycGVuMQwwCgYDVQQH -# EwNNb2wxDzANBgNVBAoTBlNDS0NFTjEMMAoGA1UECxMDSUNUMRYwFAYDVQQDEw1T -# Q0tDRU4gSUNUIENBMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsW1u -# J8gCKQwjdhAhr6eJJNXw+wffi5p2RB48uzTaQh2Y89P+75NFhk7qeOW0tVwacxYk -# ubMvgNqasA9RslymREsxLfloMCidRPSQj8o0KE2cfLYojYre1TChFxc0PZobibZ7 -# BTsU2v75GQjnsEEMmxzwJLAjSU2mFVKJKjrKs4Xt/q6j3w0fdrRz0ba8zSMbTHO2 -# K8Cd1Rq3GQDLPythJyDxzo6YRE7TFOFcXGrIpFXvmy1XPc/ItiHwTocOmQ1msF+4 -# 6W0gfWtbFLt8bC/CnuE2ZQPnAmpq3lOUu8cOq/2eqhihAeAli5McYepaK+qr1JtL -# NfgTSkkFFw27c5cPXwFCCE0ryJdN+qN4Xdk3J2iz0hayEJ4sGaimdJTXv/OTmSxx -# KGMnPYV+BTvk/PDJnGjWQqOryf0PWgmwVQ1KAowaPjBAXJOEotzNnzW0/FKtvgJY -# Lk3xFs3sJJ6EG6D02wB2RNszNGM66tyqqx/Z3651xwzgkYYR1ETdmddcqL6/3a+H -# ifS5K99N+q7rX/Rp31AUlNsb53xhh43NWUAg5Tzrb9J54mBR6Z/MafmTVHcK2nK6 -# RRYaUfxs/WuE2+OzX7MdG/URi1lVuOu7hp7AKnSjcLnOcBG7lkSK1Q1pCuACYMkv -# Cl+7keio376akUfumX3HqEVgK8ttZiRgiVHR7Q0CAwEAAaOCARYwggESMBAGCSsG -# AQQBgjcVAQQDAgEAMB0GA1UdDgQWBBTwKRT1aiEUklZUE6Q91a3wITrFeDAZBgkr -# BgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUw -# AwEB/zAfBgNVHSMEGDAWgBRSvxsquCggUTGvI6e+I5TG0fkUMDA8BgNVHR8ENTAz -# MDGgL6AthitodHRwOi8vY3JsLnNja2Nlbi5iZS9TQ0tDRU4lMjBSb290JTIwQ0Eu -# Y3JsMEcGCCsGAQUFBwEBBDswOTA3BggrBgEFBQcwAoYraHR0cDovL2NybC5zY2tj -# ZW4uYmUvU0NLQ0VOJTIwUm9vdCUyMENBLmNydDANBgkqhkiG9w0BAQsFAAOCAgEA -# hsQ1eNAeFzKKGY9KW0VMGrLUbtccjHoeKlGdVn+yhS9xhSaIFgm00IPVO5zh9jKt -# gCA3o81TqY0w1WoRK1U8t89On5RZYVy39pDyu+oBlHgul9KOuJbIKLgh0VgEPvY3 -# vM0h0bLdxIrnlIxchVxgs5y/h/wLKmXLjsg+AuYzsJ4+9GAD5SsdFGp2jiKPf9aw -# 6zG67an2yTqtvPfeoRpkMWO+Mx39CWWwfU3MaQySlAx0/JzZcqWzk6QFgN1h89wS -# BHD0mMFdnahEth5y9QhPkLydPniibF5VZ59gbUVlpFFz8VddmBtx9xfe5aIYEjkj -# 35HmEW/FN7qwnJP3dCljzFiqSueKqiFIN3punjHbMUoAxJnibx11Xz4pFm5mdk8v -# 95r+sncH8SFK/P5nUjjEYIBRInZiovl7C8KfI1RD9lXJDPdw5yVfkCpkCr/rYNNM -# BHfDYZ+G1NEu9WzE2NrknC4H4qoNJLmMjVPTswcIT780iOvFZRf1ql+0e2TKUHCO -# kZ+plXtl3H6MimrNk6B/ZQAy4mETNH6ceaoudV7X5Y7HzbTwSXCSw6GCiQMdYXgs -# Fp+lioorEmFZhVc2PTs+oUXbMi8IUaCyKEm6tMZHJ+PGU1YBE8Szyj5nI1SUhb+a -# HunRGlhgXPb4bnEdZVaMruxFM0UbriGwmkOEv9cPVpAxghnEMIIZwAIBATBrMGYx -# CzAJBgNVBAYTAkJFMRIwEAYDVQQIEwlBbnR3ZXJwZW4xDDAKBgNVBAcTA01vbDEP -# MA0GA1UEChMGU0NLQ0VOMQwwCgYDVQQLEwNJQ1QxFjAUBgNVBAMTDVNDS0NFTiBJ -# Q1QgQ0ECAR8wDQYJYIZIAWUDBAIBBQCggbAwGQYJKoZIhvcNAQkDMQwGCisGAQQB -# gjcCAQQwHAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkE -# MSIEIDMWPB5w3NRergKWT3y2A5OABYWsRPNSv7Hd8g5WyJV6MEQGCisGAQQBgjcC -# AQwxNjA0oDKAMABJAG4AdABlAGcAcgBpAHQAeQAgACYAIABBAHUAdABoAGUAbgB0 -# AGkAYwBpAHQAeTANBgkqhkiG9w0BAQEFAASCAQAwjcunSf5/Xqh/Fk4yHtMzGycJ -# 4UbsZRkFFVKraWtRkw+4aHMyuDJQ87TP2dnLGe5C6nGmCxFUSgLRauIDwMm1lV1B -# V8DmVbh2P22H8RITDl8AVddq0FKG1bm1rvslaTFvP6X/ohYoMtCg7lG7UYmXw16J -# 15+3jG70kAjBHE7SLOu1fRevQJBIgRR5tURvkDw3J5vqTgU5e10rIEvOXk2e0e+w -# Vwnh1/BWhaHneAuEpXr8igfLZV6UrGFFPQrRCA6nsq2SZnvHo+vVtbcrj6WxPjGW -# MrBcfz78IBX9CJE8gCBiUZSPUU4mkRkUlljkatai3FD9DFVoD55xOzTPmvyGoYIX -# dzCCF3MGCisGAQQBgjcDAwExghdjMIIXXwYJKoZIhvcNAQcCoIIXUDCCF0wCAQMx -# DzANBglghkgBZQMEAgEFADB4BgsqhkiG9w0BCRABBKBpBGcwZQIBAQYJYIZIAYb9 -# bAcBMDEwDQYJYIZIAWUDBAIBBQAEIHRH+2nsrMPwh5xxgTf6URi1kDUted6an73B -# R1MNPo2HAhEA39dPBubUOQXsk88cPaQ2UBgPMjAyNjAyMDUwOTQ2NTJaoIITOjCC -# Bu0wggTVoAMCAQICEAqA7xhLjfEFgtHEdqeVdGgwDQYJKoZIhvcNAQELBQAwaTEL -# MAkGA1UEBhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMUEwPwYDVQQDEzhE -# aWdpQ2VydCBUcnVzdGVkIEc0IFRpbWVTdGFtcGluZyBSU0E0MDk2IFNIQTI1NiAy -# MDI1IENBMTAeFw0yNTA2MDQwMDAwMDBaFw0zNjA5MDMyMzU5NTlaMGMxCzAJBgNV -# BAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjE7MDkGA1UEAxMyRGlnaUNl -# cnQgU0hBMjU2IFJTQTQwOTYgVGltZXN0YW1wIFJlc3BvbmRlciAyMDI1IDEwggIi -# MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDQRqwtEsae0OquYFazK1e6b1H/ -# hnAKAd/KN8wZQjBjMqiZ3xTWcfsLwOvRxUwXcGx8AUjni6bz52fGTfr6PHRNv6T7 -# zsf1Y/E3IU8kgNkeECqVQ+3bzWYesFtkepErvUSbf+EIYLkrLKd6qJnuzK8Vcn0D -# vbDMemQFoxQ2Dsw4vEjoT1FpS54dNApZfKY61HAldytxNM89PZXUP/5wWWURK+If -# xiOg8W9lKMqzdIo7VA1R0V3Zp3DjjANwqAf4lEkTlCDQ0/fKJLKLkzGBTpx6EYev -# vOi7XOc4zyh1uSqgr6UnbksIcFJqLbkIXIPbcNmA98Oskkkrvt6lPAw/p4oDSRZr -# eiwB7x9ykrjS6GS3NR39iTTFS+ENTqW8m6THuOmHHjQNC3zbJ6nJ6SXiLSvw4Smz -# 8U07hqF+8CTXaETkVWz0dVVZw7knh1WZXOLHgDvundrAtuvz0D3T+dYaNcwafsVC -# GZKUhQPL1naFKBy1p6llN3QgshRta6Eq4B40h5avMcpi54wm0i2ePZD5pPIssosz -# QyF4//3DoK2O65Uck5Wggn8O2klETsJ7u8xEehGifgJYi+6I03UuT1j7FnrqVrOz -# aQoVJOeeStPeldYRNMmSF3voIgMFtNGh86w3ISHNm0IaadCKCkUe2LnwJKa8TIlw -# CUNVwppwn4D3/Pt5pwIDAQABo4IBlTCCAZEwDAYDVR0TAQH/BAIwADAdBgNVHQ4E -# FgQU5Dv88jHt/f3X85FxYxlQQ89hjOgwHwYDVR0jBBgwFoAU729TSunkBnx6yuKQ -# VvYv1Ensy04wDgYDVR0PAQH/BAQDAgeAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMI -# MIGVBggrBgEFBQcBAQSBiDCBhTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGln -# aWNlcnQuY29tMF0GCCsGAQUFBzAChlFodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5j -# b20vRGlnaUNlcnRUcnVzdGVkRzRUaW1lU3RhbXBpbmdSU0E0MDk2U0hBMjU2MjAy -# NUNBMS5jcnQwXwYDVR0fBFgwVjBUoFKgUIZOaHR0cDovL2NybDMuZGlnaWNlcnQu -# Y29tL0RpZ2lDZXJ0VHJ1c3RlZEc0VGltZVN0YW1waW5nUlNBNDA5NlNIQTI1NjIw -# MjVDQTEuY3JsMCAGA1UdIAQZMBcwCAYGZ4EMAQQCMAsGCWCGSAGG/WwHATANBgkq -# hkiG9w0BAQsFAAOCAgEAZSqt8RwnBLmuYEHs0QhEnmNAciH45PYiT9s1i6UKtW+F -# ERp8FgXRGQ/YAavXzWjZhY+hIfP2JkQ38U+wtJPBVBajYfrbIYG+Dui4I4PCvHpQ -# uPqFgqp1PzC/ZRX4pvP/ciZmUnthfAEP1HShTrY+2DE5qjzvZs7JIIgt0GCFD9kt -# x0LxxtRQ7vllKluHWiKk6FxRPyUPxAAYH2Vy1lNM4kzekd8oEARzFAWgeW3az2xe -# jEWLNN4eKGxDJ8WDl/FQUSntbjZ80FU3i54tpx5F/0Kr15zW/mJAxZMVBrTE2oi0 -# fcI8VMbtoRAmaaslNXdCG1+lqvP4FbrQ6IwSBXkZagHLhFU9HCrG/syTRLLhAezu -# /3Lr00GrJzPQFnCEH1Y58678IgmfORBPC1JKkYaEt2OdDh4GmO0/5cHelAK2/gTl -# QJINqDr6JfwyYHXSd+V08X1JUPvB4ILfJdmL+66Gp3CSBXG6IwXMZUXBhtCyIaeh -# r0XkBoDIGMUG1dUtwq1qmcwbdUfcSYCn+OwncVUXf53VJUNOaMWMts0VlRYxe5nK -# +At+DI96HAlXHAL5SlfYxJ7La54i71McVWRP66bW+yERNpbJCjyCYG2j+bdpxo/1 -# Cy4uPcU3AWVPGrbn5PhDBf3Froguzzhk++ami+r3Qrx5bIbY3TVzgiFI7Gq3zWcw -# gga0MIIEnKADAgECAhANx6xXBf8hmS5AQyIMOkmGMA0GCSqGSIb3DQEBCwUAMGIx -# CzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3 -# dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0IFRydXN0ZWQgUm9vdCBH -# NDAeFw0yNTA1MDcwMDAwMDBaFw0zODAxMTQyMzU5NTlaMGkxCzAJBgNVBAYTAlVT -# MRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UEAxM4RGlnaUNlcnQgVHJ1 -# c3RlZCBHNCBUaW1lU3RhbXBpbmcgUlNBNDA5NiBTSEEyNTYgMjAyNSBDQTEwggIi -# MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC0eDHTCphBcr48RsAcrHXbo0Zo -# dLRRF51NrY0NlLWZloMsVO1DahGPNRcybEKq+RuwOnPhof6pvF4uGjwjqNjfEvUi -# 6wuim5bap+0lgloM2zX4kftn5B1IpYzTqpyFQ/4Bt0mAxAHeHYNnQxqXmRinvuNg -# xVBdJkf77S2uPoCj7GH8BLuxBG5AvftBdsOECS1UkxBvMgEdgkFiDNYiOTx4OtiF -# cMSkqTtF2hfQz3zQSku2Ws3IfDReb6e3mmdglTcaarps0wjUjsZvkgFkriK9tUKJ -# m/s80FiocSk1VYLZlDwFt+cVFBURJg6zMUjZa/zbCclF83bRVFLeGkuAhHiGPMvS -# GmhgaTzVyhYn4p0+8y9oHRaQT/aofEnS5xLrfxnGpTXiUOeSLsJygoLPp66bkDX1 -# ZlAeSpQl92QOMeRxykvq6gbylsXQskBBBnGy3tW/AMOMCZIVNSaz7BX8VtYGqLt9 -# MmeOreGPRdtBx3yGOP+rx3rKWDEJlIqLXvJWnY0v5ydPpOjL6s36czwzsucuoKs7 -# Yk/ehb//Wx+5kMqIMRvUBDx6z1ev+7psNOdgJMoiwOrUG2ZdSoQbU2rMkpLiQ6bG -# RinZbI4OLu9BMIFm1UUl9VnePs6BaaeEWvjJSjNm2qA+sdFUeEY0qVjPKOWug/G6 -# X5uAiynM7Bu2ayBjUwIDAQABo4IBXTCCAVkwEgYDVR0TAQH/BAgwBgEB/wIBADAd -# BgNVHQ4EFgQU729TSunkBnx6yuKQVvYv1Ensy04wHwYDVR0jBBgwFoAU7NfjgtJx -# XWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGGMBMGA1UdJQQMMAoGCCsGAQUF -# BwMIMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGln -# aWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5j -# b20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBDBgNVHR8EPDA6MDigNqA0hjJo -# dHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNy -# bDAgBgNVHSAEGTAXMAgGBmeBDAEEAjALBglghkgBhv1sBwEwDQYJKoZIhvcNAQEL -# BQADggIBABfO+xaAHP4HPRF2cTC9vgvItTSmf83Qh8WIGjB/T8ObXAZz8OjuhUxj -# aaFdleMM0lBryPTQM2qEJPe36zwbSI/mS83afsl3YTj+IQhQE7jU/kXjjytJgnn0 -# hvrV6hqWGd3rLAUt6vJy9lMDPjTLxLgXf9r5nWMQwr8Myb9rEVKChHyfpzee5kH0 -# F8HABBgr0UdqirZ7bowe9Vj2AIMD8liyrukZ2iA/wdG2th9y1IsA0QF8dTXqvcnT -# mpfeQh35k5zOCPmSNq1UH410ANVko43+Cdmu4y81hjajV/gxdEkMx1NKU4uHQcKf -# ZxAvBAKqMVuqte69M9J6A47OvgRaPs+2ykgcGV00TYr2Lr3ty9qIijanrUR3anzE -# wlvzZiiyfTPjLbnFRsjsYg39OlV8cipDoq7+qNNjqFzeGxcytL5TTLL4ZaoBdqbh -# OhZ3ZRDUphPvSRmMThi0vw9vODRzW6AxnJll38F0cuJG7uEBYTptMSbhdhGQDpOX -# gpIUsWTjd6xpR6oaQf/DJbg3s6KCLPAlZ66RzIg9sC+NJpud/v4+7RWsWCiKi9EO -# LLHfMR2ZyJ/+xhCx9yHbxtl5TPau1j/1MIDpMPx0LckTetiSuEtQvLsNz3Qbp7wG -# WqbIiOWCnb5WqxL3/BAPvIXKUjPSxyZsq8WhbaM2tszWkPZPubdcMIIFjTCCBHWg -# AwIBAgIQDpsYjvnQLefv21DiCEAYWjANBgkqhkiG9w0BAQwFADBlMQswCQYDVQQG -# EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNl -# cnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgQ0EwHhcN -# MjIwODAxMDAwMDAwWhcNMzExMTA5MjM1OTU5WjBiMQswCQYDVQQGEwJVUzEVMBMG -# A1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSEw -# HwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQwggIiMA0GCSqGSIb3DQEB -# AQUAA4ICDwAwggIKAoICAQC/5pBzaN675F1KPDAiMGkz7MKnJS7JIT3yithZwuEp -# pz1Yq3aaza57G4QNxDAf8xukOBbrVsaXbR2rsnnyyhHS5F/WBTxSD1Ifxp4VpX6+ -# n6lXFllVcq9ok3DCsrp1mWpzMpTREEQQLt+C8weE5nQ7bXHiLQwb7iDVySAdYykt -# zuxeTsiT+CFhmzTrBcZe7FsavOvJz82sNEBfsXpm7nfISKhmV1efVFiODCu3T6cw -# 2Vbuyntd463JT17lNecxy9qTXtyOj4DatpGYQJB5w3jHtrHEtWoYOAMQjdjUN6Qu -# BX2I9YI+EJFwq1WCQTLX2wRzKm6RAXwhTNS8rhsDdV14Ztk6MUSaM0C/CNdaSaTC -# 5qmgZ92kJ7yhTzm1EVgX9yRcRo9k98FpiHaYdj1ZXUJ2h4mXaXpI8OCiEhtmmnTK -# 3kse5w5jrubU75KSOp493ADkRSWJtppEGSt+wJS00mFt6zPZxd9LBADMfRyVw4/3 -# IbKyEbe7f/LVjHAsQWCqsWMYRJUadmJ+9oCw++hkpjPRiQfhvbfmQ6QYuKZ3AeEP -# lAwhHbJUKSWJbOUOUlFHdL4mrLZBdd56rF+NP8m800ERElvlEFDrMcXKchYiCd98 -# THU/Y+whX8QgUWtvsauGi0/C1kVfnSD8oR7FwI+isX4KJpn15GkvmB0t9dmpsh3l -# GwIDAQABo4IBOjCCATYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU7NfjgtJx -# XWRM3y5nP+e6mK4cD08wHwYDVR0jBBgwFoAUReuir/SSy4IxLVGLp6chnfNtyA8w -# DgYDVR0PAQH/BAQDAgGGMHkGCCsGAQUFBwEBBG0wazAkBggrBgEFBQcwAYYYaHR0 -# cDovL29jc3AuZGlnaWNlcnQuY29tMEMGCCsGAQUFBzAChjdodHRwOi8vY2FjZXJ0 -# cy5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVkSURSb290Q0EuY3J0MEUGA1Ud -# HwQ+MDwwOqA4oDaGNGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFz -# c3VyZWRJRFJvb3RDQS5jcmwwEQYDVR0gBAowCDAGBgRVHSAAMA0GCSqGSIb3DQEB -# DAUAA4IBAQBwoL9DXFXnOF+go3QbPbYW1/e/Vwe9mqyhhyzshV6pGrsi+IcaaVQi -# 7aSId229GhT0E0p6Ly23OO/0/4C5+KH38nLeJLxSA8hO0Cre+i1Wz/n096wwepqL -# sl7Uz9FDRJtDIeuWcqFItJnLnU+nBgMTdydE1Od/6Fmo8L8vC6bp8jQ87PcDx4eo -# 0kxAGTVGamlUsLihVo7spNU96LHc/RzY9HdaXFSMb++hUD38dglohJ9vytsgjTVg -# HAIDyyCwrFigDkBjxZgiwbJZ9VVrzyerbHbObyMt9H5xaiNrIv8SuFQtJ37YOtnw -# toeW/VvRXKwYw02fc7cBqZ9Xql4o4rmUMYIDfDCCA3gCAQEwfTBpMQswCQYDVQQG -# EwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xQTA/BgNVBAMTOERpZ2lDZXJ0 -# IFRydXN0ZWQgRzQgVGltZVN0YW1waW5nIFJTQTQwOTYgU0hBMjU2IDIwMjUgQ0Ex -# AhAKgO8YS43xBYLRxHanlXRoMA0GCWCGSAFlAwQCAQUAoIHRMBoGCSqGSIb3DQEJ -# AzENBgsqhkiG9w0BCRABBDAcBgkqhkiG9w0BCQUxDxcNMjYwMjA1MDk0NjUyWjAr -# BgsqhkiG9w0BCRACDDEcMBowGDAWBBTdYjCshgotMGvaOLFoeVIwB/tBfjAvBgkq -# hkiG9w0BCQQxIgQgKEGXO1vjLP2kUFHIPE+JatJrvCLVUgi/Xs27uDCd6lkwNwYL -# KoZIhvcNAQkQAi8xKDAmMCQwIgQgSqA/oizXXITFXJOPgo5na5yuyrM/420mmqM0 -# 8UYRCjMwDQYJKoZIhvcNAQEBBQAEggIAtyuXWDxFHyQSVx2HEemwzEnzuSh9IiAf -# sSKWhC0wUjQhOIk2kwvDnirwE3o2Co6tDC44UOUmlMr5ZKqPUgyBTxdvWBJ24t97 -# 9ZOPKM3vyyzLWI/wL0yG11InNMhja4i+jz0hplsN8hQObBhtAhUyO88B/asaHHxR -# RZHObxkUEQ3kltLrjOirqiQ2sHf9SwZZ1xmSDG/TrhkHyDixjB4D8mIUsJ2JfInz -# rhJ3kCtdSX/c5k8H++sbI1gtdmkZV+EeZHh31SuBQ6LCYxypB0EXv+8e/jkIXvMv -# ujUXBwD6Fnc+2TjLxzQwlUy3gx7wfqC9H1/OxLHZ4LzND4mjrq2yzM91aTKp2Hay -# zqjd5uCk+UK1Uqc1Jq3FMx85u33AGg4/Ay46rMQU1/IqUTt5Pdd9g//rJomZywg/ -# 87X5DUA61KyQyPsneb6a7kasPpjuB7Dz7HOPYfJ8i+nZcJ8rHevc2OJU1NES3giT -# 8oTBnNbxO27nwh5ZJAm3NBB8gvjD/ACaIoQXYOGgg+Q5cymAkdeLmUnGxKI1tDdC -# SpX9CB9VrPraajcRQe6m/p1CNVDZptJvv0HC9KEAM+kjzvh/Jl7RROOlTlXjYVv5 -# IbvFdhX2BQSDWffIEQIjarj5htnxvLHy4UQtmcC5r/S+eQFEvx59fJCXiQg+5/Pu -# HedfzqKTJEo= +# MIIlPAYJKoZIhvcNAQcCoIIlLTCCJSkCAQExCzAJBgUrDgMCGgUAMGkGCisGAQQB +# gjcCAQSgWzBZMDQGCisGAQQBgjcCAR4wJgIDAQAABBAfzDtgWUsITrck0sYpfvNR +# AgEAAgEAAgEAAgEAAgEAMCEwCQYFKw4DAhoFAAQUQ69lbjQoUZQw9k230yqRHkDl +# ZVOggh9wMIIFjTCCBHWgAwIBAgIQDpsYjvnQLefv21DiCEAYWjANBgkqhkiG9w0B +# AQwFADBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYD +# VQQLExB3d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVk +# IElEIFJvb3QgQ0EwHhcNMjIwODAxMDAwMDAwWhcNMzExMTA5MjM1OTU5WjBiMQsw +# CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu +# ZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQw +# ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC/5pBzaN675F1KPDAiMGkz +# 7MKnJS7JIT3yithZwuEppz1Yq3aaza57G4QNxDAf8xukOBbrVsaXbR2rsnnyyhHS +# 5F/WBTxSD1Ifxp4VpX6+n6lXFllVcq9ok3DCsrp1mWpzMpTREEQQLt+C8weE5nQ7 +# bXHiLQwb7iDVySAdYyktzuxeTsiT+CFhmzTrBcZe7FsavOvJz82sNEBfsXpm7nfI +# SKhmV1efVFiODCu3T6cw2Vbuyntd463JT17lNecxy9qTXtyOj4DatpGYQJB5w3jH +# trHEtWoYOAMQjdjUN6QuBX2I9YI+EJFwq1WCQTLX2wRzKm6RAXwhTNS8rhsDdV14 +# Ztk6MUSaM0C/CNdaSaTC5qmgZ92kJ7yhTzm1EVgX9yRcRo9k98FpiHaYdj1ZXUJ2 +# h4mXaXpI8OCiEhtmmnTK3kse5w5jrubU75KSOp493ADkRSWJtppEGSt+wJS00mFt +# 6zPZxd9LBADMfRyVw4/3IbKyEbe7f/LVjHAsQWCqsWMYRJUadmJ+9oCw++hkpjPR +# iQfhvbfmQ6QYuKZ3AeEPlAwhHbJUKSWJbOUOUlFHdL4mrLZBdd56rF+NP8m800ER +# ElvlEFDrMcXKchYiCd98THU/Y+whX8QgUWtvsauGi0/C1kVfnSD8oR7FwI+isX4K +# Jpn15GkvmB0t9dmpsh3lGwIDAQABo4IBOjCCATYwDwYDVR0TAQH/BAUwAwEB/zAd +# BgNVHQ4EFgQU7NfjgtJxXWRM3y5nP+e6mK4cD08wHwYDVR0jBBgwFoAUReuir/SS +# y4IxLVGLp6chnfNtyA8wDgYDVR0PAQH/BAQDAgGGMHkGCCsGAQUFBwEBBG0wazAk +# BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEMGCCsGAQUFBzAC +# hjdodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVkSURS +# b290Q0EuY3J0MEUGA1UdHwQ+MDwwOqA4oDaGNGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0 +# LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwEQYDVR0gBAowCDAGBgRV +# HSAAMA0GCSqGSIb3DQEBDAUAA4IBAQBwoL9DXFXnOF+go3QbPbYW1/e/Vwe9mqyh +# hyzshV6pGrsi+IcaaVQi7aSId229GhT0E0p6Ly23OO/0/4C5+KH38nLeJLxSA8hO +# 0Cre+i1Wz/n096wwepqLsl7Uz9FDRJtDIeuWcqFItJnLnU+nBgMTdydE1Od/6Fmo +# 8L8vC6bp8jQ87PcDx4eo0kxAGTVGamlUsLihVo7spNU96LHc/RzY9HdaXFSMb++h +# UD38dglohJ9vytsgjTVgHAIDyyCwrFigDkBjxZgiwbJZ9VVrzyerbHbObyMt9H5x +# aiNrIv8SuFQtJ37YOtnwtoeW/VvRXKwYw02fc7cBqZ9Xql4o4rmUMIIFvDCCA6Sg +# AwIBAgIBHzANBgkqhkiG9w0BAQsFADBmMQswCQYDVQQGEwJCRTESMBAGA1UECBMJ +# QW50d2VycGVuMQwwCgYDVQQHEwNNb2wxDzANBgNVBAoTBlNDS0NFTjEMMAoGA1UE +# CxMDSUNUMRYwFAYDVQQDEw1TQ0tDRU4gSUNUIENBMB4XDTE4MDUyNDA2MTEwMFoX +# DTMwMDYwMTEyMDAwMFowTzEhMB8GA1UEAxMYVmFuZGVuYnJvdWNrZSBMdWMgQ1My +# MDIxMSowKAYJKoZIhvcNAQkBFhtsdWMudmFuZGVuYnJvdWNrZUBzY2tjZW4uYmUw +# ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0WzD0gHTLFEbOjPUwobl2 +# VntS0kJVV2FRzxkZZ0Hhe9fbYB0tRK5+9GltD7rwhApM1E2xh8N6Pmxfr49VGVsP +# NqDhGRmp5wKE8htQiMXTjHPOTHZsvim/vvSL8WuouGoX6TQxxNBefE6Jmjcg2NHb +# UVAxDGcPwNADJBZnYPQTp6q2HniwdDv/OmZM1JJUYn4v1mt7YtS1eFO30ekuGzJu +# 3WQYeOiFNht/6AXZTWALQtwzaJfm563AbxfnHBsBuZFcRGYPE7aRDI9NIZyPqzT4 +# yOAK+phPN1ympNV+f8XXWaacfZXSWolbo8jqstHDjYYjf77Fj3WVN+y0GxtTsnRl +# AgMBAAGjggGKMIIBhjAJBgNVHRMEAjAAMB0GA1UdDgQWBBTftWyIS4unlpS288p5 +# Xofe0LiBZTAfBgNVHSMEGDAWgBTwKRT1aiEUklZUE6Q91a3wITrFeDALBgNVHQ8E +# BAMCB4AwHwYDVR0lBBgwFgYIKwYBBQUHAwMGCisGAQQBgjcCARUwOgYDVR0RBDMw +# MYEbbHVjLnZhbmRlbmJyb3Vja2VAc2NrY2VuLmJlgRJsdmFuZGVuYkBzY2tjZW4u +# YmUwNQYDVR0SBC4wLIYqaHR0cDovL2NybC5zY2tjZW4uYmUvU0NLQ0VOJTIwSUNU +# JTIwQ0EuY3J0MDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NrY2VuLmJl +# L1NDS0NFTiUyMElDVCUyMENBLmNybDA+BgkrBgEEAYI3FQcEMTAvBicrBgEEAYI3 +# FQiEjLwhgsj9d4KhkyKEl5RGhMaSLoEBgtSEIYH6yGkCAWQCAQgwGwYJKwYBBAGC +# NxUKBA4wDDAKBggrBgEFBQcDAzANBgkqhkiG9w0BAQsFAAOCAgEARh/O37vbDW3A +# j1UAnSfYz+I0+fVk2ZurOQarjtdFC/Yu1ABJnXdMnwh1t5sjVIoEejvjnOlmu+B2 +# 1IQJPpxIph8cz+SnDZyhOpcKrCDn+PSeRvth0Zk4FvbXsLK9/WYgdzRObNOHxxAN +# COOc7PMLIMqeDJa+b9wH82Ae4MYdB8XZvoqJ+z172yoQMiNxe6UE2GropZiwJB56 +# Fw+k/jrKdOMEfZtfhzRqizCmMlTknbtFJ5hrqhwcaTA+4QCfCwouckererOATQnM +# 8Ic1KaOmYK7S5igmnA5mekiTKrBhcGp/xsZy0r8OUKVV1FSYnQ3035THia31oQzh +# Le48faEFkNuPbs8ZaiTFXwbdWGQ6uIK++soyulWOxeueNBAqIOGrj7XuDaIk+VD3 +# RN0B0g//Nv3HS6FboRC0eKeG3yezzjU+8fImcyPAaAEofUiiQYdOpnJsiaLDpHO+ +# 1r98pKmpe0fvy0IvYHicJLuk4tFyMvVBRgW1A+JtfHuXCnag88iB8AJ3tCUdGRCC +# z8yE1r4hbklyqhj9G5EmxoKZfi7mgh3CgL/tRUAXNqFltMj3cQlGKcKPUH004dKm +# FwAUAG4mzsO1Sk50S7EvdpvaW+sJ/bWMjXzLuq+xFwrsSTQ22KSm8XmnX2NGqws5 +# Tk+pqQupcwan4CsjflVqMva5nc4YxI4wggZyMIIEWqADAgECAhM4AAAAAm7pDq12 +# AeXXAAAAAAACMA0GCSqGSIb3DQEBCwUAMGcxCzAJBgNVBAYTAkJFMRIwEAYDVQQI +# EwlBbnR3ZXJwZW4xDDAKBgNVBAcTA01vbDEPMA0GA1UEChMGU0NLQ0VOMQwwCgYD +# VQQLEwNJQ1QxFzAVBgNVBAMTDlNDS0NFTiBSb290IENBMB4XDTE3MDYyMzExMzkz +# NFoXDTMyMDYyMzExNDkzNFowZjELMAkGA1UEBhMCQkUxEjAQBgNVBAgTCUFudHdl +# cnBlbjEMMAoGA1UEBxMDTW9sMQ8wDQYDVQQKEwZTQ0tDRU4xDDAKBgNVBAsTA0lD +# VDEWMBQGA1UEAxMNU0NLQ0VOIElDVCBDQTCCAiIwDQYJKoZIhvcNAQEBBQADggIP +# ADCCAgoCggIBALFtbifIAikMI3YQIa+niSTV8PsH34uadkQePLs02kIdmPPT/u+T +# RYZO6njltLVcGnMWJLmzL4DamrAPUbJcpkRLMS35aDAonUT0kI/KNChNnHy2KI2K +# 3tUwoRcXND2aG4m2ewU7FNr++RkI57BBDJsc8CSwI0lNphVSiSo6yrOF7f6uo98N +# H3a0c9G2vM0jG0xztivAndUatxkAyz8rYScg8c6OmERO0xThXFxqyKRV75stVz3P +# yLYh8E6HDpkNZrBfuOltIH1rWxS7fGwvwp7hNmUD5wJqat5TlLvHDqv9nqoYoQHg +# JYuTHGHqWivqq9SbSzX4E0pJBRcNu3OXD18BQghNK8iXTfqjeF3ZNydos9IWshCe +# LBmopnSU17/zk5kscShjJz2FfgU75PzwyZxo1kKjq8n9D1oJsFUNSgKMGj4wQFyT +# hKLczZ81tPxSrb4CWC5N8RbN7CSehBug9NsAdkTbMzRjOurcqqsf2d+udccM4JGG +# EdRE3ZnXXKi+v92vh4n0uSvfTfqu61/0ad9QFJTbG+d8YYeNzVlAIOU862/SeeJg +# UemfzGn5k1R3CtpyukUWGlH8bP1rhNvjs1+zHRv1EYtZVbjru4aewCp0o3C5znAR +# u5ZEitUNaQrgAmDJLwpfu5HoqN++mpFH7pl9x6hFYCvLbWYkYIlR0e0NAgMBAAGj +# ggEWMIIBEjAQBgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQU8CkU9WohFJJWVBOk +# PdWt8CE6xXgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGG +# MA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUUr8bKrgoIFExryOnviOUxtH5 +# FDAwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL2NybC5zY2tjZW4uYmUvU0NLQ0VO +# JTIwUm9vdCUyMENBLmNybDBHBggrBgEFBQcBAQQ7MDkwNwYIKwYBBQUHMAKGK2h0 +# dHA6Ly9jcmwuc2NrY2VuLmJlL1NDS0NFTiUyMFJvb3QlMjBDQS5jcnQwDQYJKoZI +# hvcNAQELBQADggIBAIbENXjQHhcyihmPSltFTBqy1G7XHIx6HipRnVZ/soUvcYUm +# iBYJtNCD1Tuc4fYyrYAgN6PNU6mNMNVqEStVPLfPTp+UWWFct/aQ8rvqAZR4LpfS +# jriWyCi4IdFYBD72N7zNIdGy3cSK55SMXIVcYLOcv4f8Cyply47IPgLmM7CePvRg +# A+UrHRRqdo4ij3/WsOsxuu2p9sk6rbz33qEaZDFjvjMd/QllsH1NzGkMkpQMdPyc +# 2XKls5OkBYDdYfPcEgRw9JjBXZ2oRLYecvUIT5C8nT54omxeVWefYG1FZaRRc/FX +# XZgbcfcX3uWiGBI5I9+R5hFvxTe6sJyT93QpY8xYqkrniqohSDd6bp4x2zFKAMSZ +# 4m8ddV8+KRZuZnZPL/ea/rJ3B/EhSvz+Z1I4xGCAUSJ2YqL5ewvCnyNUQ/ZVyQz3 +# cOclX5AqZAq/62DTTAR3w2GfhtTRLvVsxNja5JwuB+KqDSS5jI1T07MHCE+/NIjr +# xWUX9apftHtkylBwjpGfqZV7Zdx+jIpqzZOgf2UAMuJhEzR+nHmqLnVe1+WOx820 +# 8ElwksOhgokDHWF4LBafpYqKKxJhWYVXNj07PqFF2zIvCFGgsihJurTGRyfjxlNW +# ARPEs8o+ZyNUlIW/mh7p0RpYYFz2+G5xHWVWjK7sRTNFG64hsJpDhL/XD1aQMIIG +# tDCCBJygAwIBAgIQDcesVwX/IZkuQEMiDDpJhjANBgkqhkiG9w0BAQsFADBiMQsw +# CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu +# ZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQw +# HhcNMjUwNTA3MDAwMDAwWhcNMzgwMTE0MjM1OTU5WjBpMQswCQYDVQQGEwJVUzEX +# MBUGA1UEChMORGlnaUNlcnQsIEluYy4xQTA/BgNVBAMTOERpZ2lDZXJ0IFRydXN0 +# ZWQgRzQgVGltZVN0YW1waW5nIFJTQTQwOTYgU0hBMjU2IDIwMjUgQ0ExMIICIjAN +# BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtHgx0wqYQXK+PEbAHKx126NGaHS0 +# URedTa2NDZS1mZaDLFTtQ2oRjzUXMmxCqvkbsDpz4aH+qbxeLho8I6jY3xL1IusL +# opuW2qftJYJaDNs1+JH7Z+QdSKWM06qchUP+AbdJgMQB3h2DZ0Mal5kYp77jYMVQ +# XSZH++0trj6Ao+xh/AS7sQRuQL37QXbDhAktVJMQbzIBHYJBYgzWIjk8eDrYhXDE +# pKk7RdoX0M980EpLtlrNyHw0Xm+nt5pnYJU3Gmq6bNMI1I7Gb5IBZK4ivbVCiZv7 +# PNBYqHEpNVWC2ZQ8BbfnFRQVESYOszFI2Wv82wnJRfN20VRS3hpLgIR4hjzL0hpo +# YGk81coWJ+KdPvMvaB0WkE/2qHxJ0ucS638ZxqU14lDnki7CcoKCz6eum5A19WZQ +# HkqUJfdkDjHkccpL6uoG8pbF0LJAQQZxst7VvwDDjAmSFTUms+wV/FbWBqi7fTJn +# jq3hj0XbQcd8hjj/q8d6ylgxCZSKi17yVp2NL+cnT6Toy+rN+nM8M7LnLqCrO2JP +# 3oW//1sfuZDKiDEb1AQ8es9Xr/u6bDTnYCTKIsDq1BtmXUqEG1NqzJKS4kOmxkYp +# 2WyODi7vQTCBZtVFJfVZ3j7OgWmnhFr4yUozZtqgPrHRVHhGNKlYzyjlroPxul+b +# gIspzOwbtmsgY1MCAwEAAaOCAV0wggFZMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYD +# VR0OBBYEFO9vU0rp5AZ8esrikFb2L9RJ7MtOMB8GA1UdIwQYMBaAFOzX44LScV1k +# TN8uZz/nupiuHA9PMA4GA1UdDwEB/wQEAwIBhjATBgNVHSUEDDAKBggrBgEFBQcD +# CDB3BggrBgEFBQcBAQRrMGkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2lj +# ZXJ0LmNvbTBBBggrBgEFBQcwAoY1aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29t +# L0RpZ2lDZXJ0VHJ1c3RlZFJvb3RHNC5jcnQwQwYDVR0fBDwwOjA4oDagNIYyaHR0 +# cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZFJvb3RHNC5jcmww +# IAYDVR0gBBkwFzAIBgZngQwBBAIwCwYJYIZIAYb9bAcBMA0GCSqGSIb3DQEBCwUA +# A4ICAQAXzvsWgBz+Bz0RdnEwvb4LyLU0pn/N0IfFiBowf0/Dm1wGc/Do7oVMY2mh +# XZXjDNJQa8j00DNqhCT3t+s8G0iP5kvN2n7Jd2E4/iEIUBO41P5F448rSYJ59Ib6 +# 1eoalhnd6ywFLerycvZTAz40y8S4F3/a+Z1jEMK/DMm/axFSgoR8n6c3nuZB9BfB +# wAQYK9FHaoq2e26MHvVY9gCDA/JYsq7pGdogP8HRtrYfctSLANEBfHU16r3J05qX +# 3kId+ZOczgj5kjatVB+NdADVZKON/gnZruMvNYY2o1f4MXRJDMdTSlOLh0HCn2cQ +# LwQCqjFbqrXuvTPSegOOzr4EWj7PtspIHBldNE2K9i697cvaiIo2p61Ed2p8xMJb +# 82Yosn0z4y25xUbI7GIN/TpVfHIqQ6Ku/qjTY6hc3hsXMrS+U0yy+GWqAXam4ToW +# d2UQ1KYT70kZjE4YtL8Pbzg0c1ugMZyZZd/BdHLiRu7hAWE6bTEm4XYRkA6Tl4KS +# FLFk43esaUeqGkH/wyW4N7OigizwJWeukcyIPbAvjSabnf7+Pu0VrFgoiovRDiyx +# 3zEdmcif/sYQsfch28bZeUz2rtY/9TCA6TD8dC3JE3rYkrhLULy7Dc90G6e8Blqm +# yIjlgp2+VqsS9/wQD7yFylIz0scmbKvFoW2jNrbM1pD2T7m3XDCCBu0wggTVoAMC +# AQICEAqA7xhLjfEFgtHEdqeVdGgwDQYJKoZIhvcNAQELBQAwaTELMAkGA1UEBhMC +# VVMxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMUEwPwYDVQQDEzhEaWdpQ2VydCBU +# cnVzdGVkIEc0IFRpbWVTdGFtcGluZyBSU0E0MDk2IFNIQTI1NiAyMDI1IENBMTAe +# Fw0yNTA2MDQwMDAwMDBaFw0zNjA5MDMyMzU5NTlaMGMxCzAJBgNVBAYTAlVTMRcw +# FQYDVQQKEw5EaWdpQ2VydCwgSW5jLjE7MDkGA1UEAxMyRGlnaUNlcnQgU0hBMjU2 +# IFJTQTQwOTYgVGltZXN0YW1wIFJlc3BvbmRlciAyMDI1IDEwggIiMA0GCSqGSIb3 +# DQEBAQUAA4ICDwAwggIKAoICAQDQRqwtEsae0OquYFazK1e6b1H/hnAKAd/KN8wZ +# QjBjMqiZ3xTWcfsLwOvRxUwXcGx8AUjni6bz52fGTfr6PHRNv6T7zsf1Y/E3IU8k +# gNkeECqVQ+3bzWYesFtkepErvUSbf+EIYLkrLKd6qJnuzK8Vcn0DvbDMemQFoxQ2 +# Dsw4vEjoT1FpS54dNApZfKY61HAldytxNM89PZXUP/5wWWURK+IfxiOg8W9lKMqz +# dIo7VA1R0V3Zp3DjjANwqAf4lEkTlCDQ0/fKJLKLkzGBTpx6EYevvOi7XOc4zyh1 +# uSqgr6UnbksIcFJqLbkIXIPbcNmA98Oskkkrvt6lPAw/p4oDSRZreiwB7x9ykrjS +# 6GS3NR39iTTFS+ENTqW8m6THuOmHHjQNC3zbJ6nJ6SXiLSvw4Smz8U07hqF+8CTX +# aETkVWz0dVVZw7knh1WZXOLHgDvundrAtuvz0D3T+dYaNcwafsVCGZKUhQPL1naF +# KBy1p6llN3QgshRta6Eq4B40h5avMcpi54wm0i2ePZD5pPIssoszQyF4//3DoK2O +# 65Uck5Wggn8O2klETsJ7u8xEehGifgJYi+6I03UuT1j7FnrqVrOzaQoVJOeeStPe +# ldYRNMmSF3voIgMFtNGh86w3ISHNm0IaadCKCkUe2LnwJKa8TIlwCUNVwppwn4D3 +# /Pt5pwIDAQABo4IBlTCCAZEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU5Dv88jHt +# /f3X85FxYxlQQ89hjOgwHwYDVR0jBBgwFoAU729TSunkBnx6yuKQVvYv1Ensy04w +# DgYDVR0PAQH/BAQDAgeAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMIGVBggrBgEF +# BQcBAQSBiDCBhTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29t +# MF0GCCsGAQUFBzAChlFodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNl +# cnRUcnVzdGVkRzRUaW1lU3RhbXBpbmdSU0E0MDk2U0hBMjU2MjAyNUNBMS5jcnQw +# XwYDVR0fBFgwVjBUoFKgUIZOaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lD +# ZXJ0VHJ1c3RlZEc0VGltZVN0YW1waW5nUlNBNDA5NlNIQTI1NjIwMjVDQTEuY3Js +# MCAGA1UdIAQZMBcwCAYGZ4EMAQQCMAsGCWCGSAGG/WwHATANBgkqhkiG9w0BAQsF +# AAOCAgEAZSqt8RwnBLmuYEHs0QhEnmNAciH45PYiT9s1i6UKtW+FERp8FgXRGQ/Y +# AavXzWjZhY+hIfP2JkQ38U+wtJPBVBajYfrbIYG+Dui4I4PCvHpQuPqFgqp1PzC/ +# ZRX4pvP/ciZmUnthfAEP1HShTrY+2DE5qjzvZs7JIIgt0GCFD9ktx0LxxtRQ7vll +# KluHWiKk6FxRPyUPxAAYH2Vy1lNM4kzekd8oEARzFAWgeW3az2xejEWLNN4eKGxD +# J8WDl/FQUSntbjZ80FU3i54tpx5F/0Kr15zW/mJAxZMVBrTE2oi0fcI8VMbtoRAm +# aaslNXdCG1+lqvP4FbrQ6IwSBXkZagHLhFU9HCrG/syTRLLhAezu/3Lr00GrJzPQ +# FnCEH1Y58678IgmfORBPC1JKkYaEt2OdDh4GmO0/5cHelAK2/gTlQJINqDr6Jfwy +# YHXSd+V08X1JUPvB4ILfJdmL+66Gp3CSBXG6IwXMZUXBhtCyIaehr0XkBoDIGMUG +# 1dUtwq1qmcwbdUfcSYCn+OwncVUXf53VJUNOaMWMts0VlRYxe5nK+At+DI96HAlX +# HAL5SlfYxJ7La54i71McVWRP66bW+yERNpbJCjyCYG2j+bdpxo/1Cy4uPcU3AWVP +# Grbn5PhDBf3Froguzzhk++ami+r3Qrx5bIbY3TVzgiFI7Gq3zWcxggU2MIIFMgIB +# ATBrMGYxCzAJBgNVBAYTAkJFMRIwEAYDVQQIEwlBbnR3ZXJwZW4xDDAKBgNVBAcT +# A01vbDEPMA0GA1UEChMGU0NLQ0VOMQwwCgYDVQQLEwNJQ1QxFjAUBgNVBAMTDVND +# S0NFTiBJQ1QgQ0ECAR8wCQYFKw4DAhoFAKB4MBgGCisGAQQBgjcCAQwxCjAIoAKA +# AKECgAAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEO +# MAwGCisGAQQBgjcCARUwIwYJKoZIhvcNAQkEMRYEFOocoqSgBisB+uNnAiSpmNBt +# aWgGMA0GCSqGSIb3DQEBAQUABIIBAHXjeZ+Hjw2yFnp7MIZwGMx99yG7bMaNGS+8 +# mScbkg8lVlEypybQsnk/5kO7fcoK6OvEdguxsQY/ZeoQLWuVjNojjMB4p1ldusoS +# NLDEDq16kQNn3OElytte9mvS0Wx5o6f5f1YZ7SQUWZKNmMG+9htKAG6UjH/uShPt +# Pbwz7fEpjalNl/Cqn8ZKwmhTijD56sHw0h5S4MPPEnnRRK91iLItkuvMFlDbr2IQ +# VlksyHbv+6vjoOvh2srr9M4H1SnEOZTalCXLc1OgsJINDGlY0tjK1mDzsMkke8Ip +# jX/KdUC56iA3dlP/2WNRFcFMu3gma2NxZXFf0CqDTpFbeXlvLByhggMmMIIDIgYJ +# KoZIhvcNAQkGMYIDEzCCAw8CAQEwfTBpMQswCQYDVQQGEwJVUzEXMBUGA1UEChMO +# RGlnaUNlcnQsIEluYy4xQTA/BgNVBAMTOERpZ2lDZXJ0IFRydXN0ZWQgRzQgVGlt +# ZVN0YW1waW5nIFJTQTQwOTYgU0hBMjU2IDIwMjUgQ0ExAhAKgO8YS43xBYLRxHan +# lXRoMA0GCWCGSAFlAwQCAQUAoGkwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAc +# BgkqhkiG9w0BCQUxDxcNMjYwODI3MTAwMzA4WjAvBgkqhkiG9w0BCQQxIgQgsMdV +# 9Sh4Cj+vBhVpptTDi+Hjs5+mW9qo0JXX+/oGAjwwDQYJKoZIhvcNAQEBBQAEggIA +# ehkBFEbtRczKku9Ye6rmFbWVaj5vPhnN5CB4so2q5LTuhr50AxiWKp3YOIIiG/5t +# E48CqrMr6eF5ZZZo4xX5JHpu0POtvJWbrrgKL4y6Gq7tnpcD15yLPA80jU7gc4MD +# Bg0BsmK4jRBTIeFb5jHZ18b4ECWPKrFVd0hJF63R7RocVOdVMRg9L2F7w+solbTs +# ZSQhWXZr3tZXmgDRPAyjjnaSX6lDLIwGqNsGwKM3kftoIvNUM0+V2GKisNpFT1Yg +# +9nERlksL2LDPpFNxiUaMsb1Qf/MjhfHdQoOIj8n/0Vm2gdaORNMFtxaOouMHsub +# dTYZXHVnXtcD1GL9yj2Jwqof323eOZbl2L3yqmyPlyOEDFrzhjWvsyb0mWsMf8pV +# mdGCgS/E4oG3dygeq2LwJj2X/nZfxv4lU7CtYT+5AjSsfX+rcpe8dNwuwNYK8HOC +# 1YG18LOhDAbdomxFo9TwLNDppA48heEACsgT/Wg1kXuNW+7nTXIqZtlRj5t4llLO +# wxBj3Un+bIUa3n071kVP/sNKHgGTXwatJlNsgSmZyHpKuzQc0mqW5YE6aG6pc0Rg +# zCVCtxqw8+repCJWJD1OHH3p8Y+LHsyyvFL4DEaEFYMkhmmqXT9KwZvB1nMTeaBz +# sYRN6W9NhQSy7L2dpld6mNFZDvKBmkguvszOd6M+KW0= # SIG # End signature block diff --git a/scripts/eDosSync.zip b/scripts/eDosSync.zip deleted file mode 100644 index f302724..0000000 Binary files a/scripts/eDosSync.zip and /dev/null differ diff --git a/scripts/installatie.ps1 b/scripts/installatie.ps1 index 4849ec7..42bf648 100644 --- a/scripts/installatie.ps1 +++ b/scripts/installatie.ps1 @@ -32,7 +32,7 @@ w32tm /resync write-host "Time server ok" echo "OpenSSH" -Expand-Archive -Force c:\software\OpenSSH98b2Signed.zip C:\Windows\System32\OpenSSH-Win64 +Expand-Archive -Force c:\software\OpenSSH10p2Signed.zip C:\Windows\System32\OpenSSH-Win64 $sshf = $env:UserProfile+"\.ssh" New-Item -ItemType Directory -Force -Path $sshf set-location $sshf @@ -145,8 +145,8 @@ exit # SIG # Begin signature block # MIIlPAYJKoZIhvcNAQcCoIIlLTCCJSkCAQExCzAJBgUrDgMCGgUAMGkGCisGAQQB # gjcCAQSgWzBZMDQGCisGAQQBgjcCAR4wJgIDAQAABBAfzDtgWUsITrck0sYpfvNR -# AgEAAgEAAgEAAgEAAgEAMCEwCQYFKw4DAhoFAAQU7gxnXo94kz4VskIqBeSa4hC/ -# 9b2ggh9wMIIFjTCCBHWgAwIBAgIQDpsYjvnQLefv21DiCEAYWjANBgkqhkiG9w0B +# AgEAAgEAAgEAAgEAAgEAMCEwCQYFKw4DAhoFAAQUf82QANFp92c6JMwC0tIUnnnC +# 7dSggh9wMIIFjTCCBHWgAwIBAgIQDpsYjvnQLefv21DiCEAYWjANBgkqhkiG9w0B # AQwFADBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYD # VQQLExB3d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVk # IElEIFJvb3QgQ0EwHhcNMjIwODAxMDAwMDAwWhcNMzExMTA5MjM1OTU5WjBiMQsw @@ -318,28 +318,28 @@ exit # A01vbDEPMA0GA1UEChMGU0NLQ0VOMQwwCgYDVQQLEwNJQ1QxFjAUBgNVBAMTDVND # S0NFTiBJQ1QgQ0ECAR8wCQYFKw4DAhoFAKB4MBgGCisGAQQBgjcCAQwxCjAIoAKA # AKECgAAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEO -# MAwGCisGAQQBgjcCARUwIwYJKoZIhvcNAQkEMRYEFBp9TE94ccz4r95KqhM4X3Zu -# QYTUMA0GCSqGSIb3DQEBAQUABIIBAHEtCD3JqBs2R75KB4IAcrUoOnx1qqokNhjC -# XJZSqrRZASCQAI9dV7y84gWMZS6jt+M+bjB04xdnefOimxbaV5dQoWsLqFmvXynz -# zF05Jt0NQ/5UwquRffZ7moWW71qM6ojpho36oj0kJta6SmHJG6pQ+teiZI7xuzJ5 -# qtvBoMlc5FRIcoQhWWdnOtAWHn+HfEUby7BLGZ9V4P7lBH5UXV7n+Tt3DGXNTpG2 -# z0nmPEh5hR8cvtIMBYBsMR3lfhTLkD02udMCwy44PAGna8pDxiClPXKSG6O4lSRA -# Aj1abUP7ruBLGUrxoPMEgWuF+2WLhKPx6KdbMyqvElY4YCCWNO2hggMmMIIDIgYJ +# MAwGCisGAQQBgjcCARUwIwYJKoZIhvcNAQkEMRYEFHx0HnKIPw3IdwnI5ILv7uDG +# DfHIMA0GCSqGSIb3DQEBAQUABIIBANAr94xvvtUnCgXYPC5WoRV8Iw/93Zd8i0FA +# ybDWmXe6FkrqiUAI8nqfre0xnBrAu8A3QthFsELnZ5G6p63xFVKxxOqrpsRaJ7U0 +# DlelqAec6EMZaPPEhuFeicy+LY2sO2OaytfA4bCoGxcFS2JG5MkAagRZEkw3yq07 +# 8b2SpABmqcFSglJ2Y3pYaWSzLcQJRA//6aWvBjEcHt+7oXbG2aywTOPufMsIqIpx +# gPjKKJuijTY3N6YrjMXahe6jfkjr5lYrBTA2LRVN34zQx4/n5HKGBkZ5ezLnu0Qm +# DRiQQoMUPhuL5O+AMDxtwojvemO2WSOVpNBBZL9SPcrX5oXwH0ShggMmMIIDIgYJ # KoZIhvcNAQkGMYIDEzCCAw8CAQEwfTBpMQswCQYDVQQGEwJVUzEXMBUGA1UEChMO # RGlnaUNlcnQsIEluYy4xQTA/BgNVBAMTOERpZ2lDZXJ0IFRydXN0ZWQgRzQgVGlt # ZVN0YW1waW5nIFJTQTQwOTYgU0hBMjU2IDIwMjUgQ0ExAhAKgO8YS43xBYLRxHan # lXRoMA0GCWCGSAFlAwQCAQUAoGkwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAc -# BgkqhkiG9w0BCQUxDxcNMjYwMTA3MTM1NDM3WjAvBgkqhkiG9w0BCQQxIgQg0fLw -# YqTrDYwOtdAwzWCh356gFoJCKLJNGluDk8wfCS8wDQYJKoZIhvcNAQEBBQAEggIA -# aQINn5EIit7iiG8GjmhTTEoj7AEJ7rWLT2OZUpvChNfRVnAvnsBNA4qlUH8dRY6l -# PFBJiT+ijYg5cIR1JEbkfNmg2oViwZTAiCGzpTEawIlpTkZFMJc8cG6UsGxWxuEF -# E1S2rsVxtXwrgjUqeU/nkX9AnEA/hb0V6j6iGV5uF4eXLYRScEbyxatFk+mG9ypI -# InKkAJ3MKBoFXqBgbisWAXV1RlHWfyMi7sTiXCL4ZQkxMq89hzK2oFHtW+0O46wp -# WRRPa4QQlgridFqBio5OQV+hWk+1tSO/ObCBAHIh8TEMra1SLLKAV0EUACmBxO0y -# OAhae+/HmB73U4K0KgZC6Cwdcs26KuaqcKS2MZkRXjHSZGp4RgFvzkLXb5M8fhVW -# QkCaD0Nk2d4/NfqR7FAKuauWwmz/QkcjZjdxC48s1rURm1K8DDvQwlQLBU10y5dw -# YXRhcz871KEtbI2Tajrt6HrxEwZYwyGNnFmVSt669foq+NSYJ6uLh0Fj2DLdpXRt -# o64QGhseTr7MxtHh7j6pgk6/AHnfywypra+JyK6Afr4t+nhLi8295VOVhK/iZ+rn -# 10VuAg9b4sJgPbUMIHY3ZePbG/7fJo0U3oZE8ad7wMXoex7wS/zKfgFQM7YDBidg -# 8nI3o5OrKdRvXgKhA5BzToU7xZDG8D7fX+x+6kVSxZA= +# BgkqhkiG9w0BCQUxDxcNMjYwODI3MTAwMzA4WjAvBgkqhkiG9w0BCQQxIgQgGtui +# 82paX11KDIN86kiIL1XH+uGmvG+Fu6AqHv/faOkwDQYJKoZIhvcNAQEBBQAEggIA +# lyj7Pd/mhrxl0eYo6WOF/dAi+Fva6oLNeXVo9qWNfkPz2YuuqdQd/gvI0kiWji3P +# Z+YUa96/NSTqMkEVSF+XvFjPVB1OEud1WGyJM/mWbmB7PGyerB2zouZ7zlgO4oj1 +# LY/79COSGrphnVhHF6cI8FezBc4PvUs+A1SA+egmbZxRYGWLTZGF57kd9jBOJsQL +# PzP54tThr6eVSkxH0R8Vo+qQXso73SMQ7Qz9drUTKi6s8rLCC8loKlioNjsfh/z0 +# jtNuh3uRxzXrLSmUhPVqeObZNtZerB+C4RGLWC+re1pSr+LZKMSPW85929UItGtu +# Toq61xQLP7qyUVeph4nRmrx4BfcC629jR3aDc+BqvhZ2AQ7moDgdE/X8CRX+8vdl +# WWm6gHmBzfUzZ8fCrg2pBxFoT0Xm1BH9HFTMrcK27P9yym1lxU3mwEq+9Ur0vJAf +# 0K2VKFjayM673sl292euKQC2i99wWj3+xG+RiiS6ducdQUc3v6UE+FTTBfBEiUhn +# qLO7l3H5Uf+PUpLEjBfnllqViKO0qZ21vTPZc6u+HirI0m3Skx5I+2Sbh6GbG7tP +# IwknCiKLmSeRLyzBccn/vGYrxqmJwmYi6gKXrPMywhhPPuNpkjR2fEXAxHnFpBB1 +# CgGeRJO4xdvUUbCQLMG8UCpwbGa4IouxqI+YW88q5UA= # SIG # End signature block diff --git a/scripts/installatie2.ps1 b/scripts/installatie2.ps1 index 613eb1b..7e8d044 100644 --- a/scripts/installatie2.ps1 +++ b/scripts/installatie2.ps1 @@ -193,17 +193,17 @@ exit # RGlnaUNlcnQsIEluYy4xQTA/BgNVBAMTOERpZ2lDZXJ0IFRydXN0ZWQgRzQgVGlt # ZVN0YW1waW5nIFJTQTQwOTYgU0hBMjU2IDIwMjUgQ0ExAhAKgO8YS43xBYLRxHan # lXRoMA0GCWCGSAFlAwQCAQUAoGkwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAc -# BgkqhkiG9w0BCQUxDxcNMjYwMTA3MTM1NDM4WjAvBgkqhkiG9w0BCQQxIgQg6Tgk +# BgkqhkiG9w0BCQUxDxcNMjYwODI3MTAwMzA4WjAvBgkqhkiG9w0BCQQxIgQg6Tgk # d9vgRJTrKaa/aNqr0ugqtMxl17/Df7q35ywcJSEwDQYJKoZIhvcNAQEBBQAEggIA -# RlOKZ7aRdh5/ghp6qWehCxWBhpSEPOrh5d7H0eypSWML3WUYvY/Z0a2Hd8HAIn5q -# UyZVI87tk1jB/J1fZMXwMHXrlGp1vAUQLqvOQgDH5pGJBhLibzjnfN6+4ebtrUw4 -# /qp3Lqsv1tN5xuKtYyEpPj4ke+0Wqk92FptioGEKvuVAmPIGhR2Vs/rull1qF04b -# wU1jzgL8B9vbLkqj3XN/dAqTk7ED00+rj8+VUc8lnNfB8EqPaAEpBDEG286rnvfT -# A78mKSLX+3mEKVZnm88k3UB2Nq21LA/H6OWQP5twiebK8Wk2ctP07Cv3VkGAxmN2 -# 5qj97uDcHyGQccEOCdzSkdEsF/5yTDGclEeXznMAZhkESboUEFfyCJRXZwbUm+p8 -# 35UqiJSAn8kk/SwqXMakmoz+rfjTqIYBu12YM9kXVjzHj+aS5J4FTuIXMBM2bHeG -# 1Hf0qrMUcEdUdLzqi9Y+QwDmhSwH7dGaJ9+KxiHveM9GfU3Vjh3WTOHj7W0E++GG -# ltZoIRr0Qd/tsL18Kpji72mHMx1aCjO94nYg56U6J2e1uSZLHM9OxEK/9N/Va3Tu -# lDICX7APiymDr/8w1ZMK0sadk0Wncxwa36HmQg72SpEtA75TqljQDkaxmOWQR1k6 -# z8yNUw9CTLxgl/ySXqTdQ7GTJkhJ8kdMTPDN8u+Z3qU= +# roHEl+sxHtNEt7R4ya9BSDSLcXN8ImybetR42y1XolYlXdvG4/zLyL7gzlowxCoR +# h1d354aw+7PS56YCPSKMGwIzjELIybN4Wc6a23l7jZp2LVRTMZzZ13VlrPoJXtd+ +# v/fh0QJirLRwlB42disWNwEvyARIONOK11YrbPeQbxcdSL4oNIAvoyATBvRa/TmG +# zFgTB479XxuCjenrphwdtMFdnqpUFyq4jMZXjcDl9Obi3dGRBHZAzd8azyVeFOb+ +# uq21Leu/f7z0WDtVXjm2INXRmVVHH+J/ZvGsQGvtkZibFKtpYwTy+TSDgW5JhQ/k +# PQH4je3+tzcFG0Tqx2lGo3EtdAItv8eJcnyOCQELQQYx6ddRt5vL5bfsQKJuYgdy +# prOX3tIkyl9xSVAvO0CWEk7zM/VsXl4VzHH/g9oB42x1lcLClXVQ9QBquoPJ7kKS +# MuytoKgpoI6Ed3qzUrXZabFzgo0r7zZWrw99NEeHPsIAshuSryPuYNicT8vCpxWh +# WZZNmh0sG2qQ10kAnCFKp98E80jtpRgIkg8ytROuh2E7NSAkYol8diR8GFS+A8lI +# pggc+51YEvjfZniO8sXEUQv3/+hQjkx941kNDbVkQI9O3mphUURArTuRLaQpDzQU +# JGeQtnEm62I3yXUWKfBD6wvV4LCmWtkA4elF4Gyd/+E= # SIG # End signature block