Skip to content

Instantly share code, notes, and snippets.

@chuckremes
Created May 20, 2011 16:31
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save chuckremes/983278 to your computer and use it in GitHub Desktop.
Save chuckremes/983278 to your computer and use it in GitHub Desktop.
Microsoft (R) COFF/PE Dumper Version 10.00.30319.01
Copyright (C) Microsoft Corporation. All rights reserved.
Dump of file racob-x86.dll
File Type: DLL
10001000: 8B 44 24 04 mov eax,dword ptr [esp+4]
10001004: 8B 08 mov ecx,dword ptr [eax]
10001006: 8D 54 24 10 lea edx,[esp+10h]
1000100A: 52 push edx
1000100B: 8B 54 24 10 mov edx,dword ptr [esp+10h]
1000100F: 52 push edx
10001010: 8B 54 24 10 mov edx,dword ptr [esp+10h]
10001014: 52 push edx
10001015: 50 push eax
10001016: 8B 41 74 mov eax,dword ptr [ecx+74h]
10001019: FF D0 call eax
1000101B: C3 ret
1000101C: CC int 3
1000101D: CC int 3
1000101E: CC int 3
1000101F: CC int 3
10001020: 81 EC AC 00 00 00 sub esp,0ACh
10001026: A1 84 80 01 10 mov eax,dword ptr ds:[10018084h]
1000102B: 33 C4 xor eax,esp
1000102D: 89 84 24 A8 00 00 mov dword ptr [esp+000000A8h],eax
00
10001034: 8B 84 24 B8 00 00 mov eax,dword ptr [esp+000000B8h]
00
1000103B: 53 push ebx
1000103C: 56 push esi
1000103D: 8B B4 24 B8 00 00 mov esi,dword ptr [esp+000000B8h]
00
10001044: 57 push edi
10001045: 50 push eax
10001046: 56 push esi
10001047: E8 C4 35 00 00 call 10004610
1000104C: 83 C4 08 add esp,8
1000104F: 8B F8 mov edi,eax
10001051: 8D 44 24 0C lea eax,[esp+0Ch]
10001055: 50 push eax
10001056: 6A 02 push 2
10001058: 57 push edi
10001059: C7 44 24 18 00 00 mov dword ptr [esp+18h],0
00 00
10001061: FF 15 6C 31 01 10 call dword ptr ds:[1001316Ch]
10001067: 57 push edi
10001068: 8B D8 mov ebx,eax
1000106A: FF 15 70 31 01 10 call dword ptr ds:[10013170h]
10001070: 85 DB test ebx,ebx
10001072: 79 16 jns 1000108A
10001074: 53 push ebx
10001075: 68 C8 32 01 10 push 100132C8h
1000107A: 56 push esi
1000107B: E8 80 33 00 00 call 10004400
10001080: 83 C4 0C add esp,0Ch
10001083: 33 C0 xor eax,eax
10001085: E9 F0 00 00 00 jmp 1000117A
1000108A: 8B 44 24 0C mov eax,dword ptr [esp+0Ch]
1000108E: 8B 08 mov ecx,dword ptr [eax]
10001090: 8B 51 0C mov edx,dword ptr [ecx+0Ch]
10001093: 55 push ebp
10001094: 50 push eax
10001095: FF D2 call edx
10001097: 8B E8 mov ebp,eax
10001099: 81 FD 01 40 00 80 cmp ebp,80004001h
1000109F: 75 16 jne 100010B7
100010A1: 53 push ebx
100010A2: 68 A8 32 01 10 push 100132A8h
100010A7: 56 push esi
100010A8: E8 53 33 00 00 call 10004400
100010AD: 83 C4 0C add esp,0Ch
100010B0: 33 C0 xor eax,eax
100010B2: E9 C2 00 00 00 jmp 10001179
100010B7: 8B 44 24 10 mov eax,dword ptr [esp+10h]
100010BB: 8D 54 24 14 lea edx,[esp+14h]
100010BF: 33 DB xor ebx,ebx
100010C1: 89 5C 24 14 mov dword ptr [esp+14h],ebx
100010C5: 8B 08 mov ecx,dword ptr [eax]
100010C7: 52 push edx
100010C8: 50 push eax
100010C9: 8B 41 1C mov eax,dword ptr [ecx+1Ch]
100010CC: FF D0 call eax
100010CE: 3B C3 cmp eax,ebx
100010D0: 7D 16 jge 100010E8
100010D2: 50 push eax
100010D3: 68 C8 32 01 10 push 100132C8h
100010D8: 56 push esi
100010D9: E8 22 33 00 00 call 10004400
100010DE: 83 C4 0C add esp,0Ch
100010E1: 33 C0 xor eax,eax
100010E3: E9 91 00 00 00 jmp 10001179
100010E8: 8B 54 24 14 mov edx,dword ptr [esp+14h]
100010EC: 6A 50 push 50h
100010EE: 8D 4C 24 1C lea ecx,[esp+1Ch]
100010F2: 51 push ecx
100010F3: 52 push edx
100010F4: FF 15 B4 31 01 10 call dword ptr ds:[100131B4h]
100010FA: 8B F8 mov edi,eax
100010FC: 8D 44 24 18 lea eax,[esp+18h]
10001100: 50 push eax
10001101: FF 15 74 31 01 10 call dword ptr ds:[10013174h]
10001107: 83 FF 03 cmp edi,3
1000110A: 7E 0C jle 10001118
1000110C: 50 push eax
1000110D: 56 push esi
1000110E: E8 1D 34 00 00 call 10004530
10001113: 83 C4 08 add esp,8
10001116: 8B D8 mov ebx,eax
10001118: 8B 0E mov ecx,dword ptr [esi]
1000111A: 8B 51 18 mov edx,dword ptr [ecx+18h]
1000111D: 68 90 32 01 10 push 10013290h
10001122: 56 push esi
10001123: FF D2 call edx
10001125: 68 74 32 01 10 push 10013274h
1000112A: 8B F8 mov edi,eax
1000112C: 8B 06 mov eax,dword ptr [esi]
1000112E: 8B 88 84 00 00 00 mov ecx,dword ptr [eax+00000084h]
10001134: 68 6C 32 01 10 push 1001326Ch
10001139: 57 push edi
1000113A: 56 push esi
1000113B: FF D1 call ecx
1000113D: 8B 4C 24 14 mov ecx,dword ptr [esp+14h]
10001141: 0F B7 51 1A movzx edx,word ptr [ecx+1Ah]
10001145: 52 push edx
10001146: 0F B7 51 18 movzx edx,word ptr [ecx+18h]
1000114A: 0F B7 49 1C movzx ecx,word ptr [ecx+1Ch]
1000114E: 52 push edx
1000114F: 8B 54 24 18 mov edx,dword ptr [esp+18h]
10001153: 51 push ecx
10001154: 55 push ebp
10001155: 53 push ebx
10001156: 6A 00 push 0
10001158: 52 push edx
10001159: 50 push eax
1000115A: 57 push edi
1000115B: 56 push esi
1000115C: E8 9F FE FF FF call 10001000
10001161: 8B 54 24 3C mov edx,dword ptr [esp+3Ch]
10001165: 83 C4 28 add esp,28h
10001168: 8B F0 mov esi,eax
1000116A: 8B 44 24 10 mov eax,dword ptr [esp+10h]
1000116E: 8B 08 mov ecx,dword ptr [eax]
10001170: 52 push edx
10001171: 50 push eax
10001172: 8B 41 30 mov eax,dword ptr [ecx+30h]
10001175: FF D0 call eax
10001177: 8B C6 mov eax,esi
10001179: 5D pop ebp
1000117A: 8B 8C 24 B4 00 00 mov ecx,dword ptr [esp+000000B4h]
00
10001181: 5F pop edi
10001182: 5E pop esi
10001183: 5B pop ebx
10001184: 33 CC xor ecx,esp
10001186: E8 E5 4B 00 00 call 10005D70
1000118B: 81 C4 AC 00 00 00 add esp,0ACh
10001191: C2 0C 00 ret 0Ch
10001194: CC int 3
10001195: CC int 3
10001196: CC int 3
10001197: CC int 3
10001198: CC int 3
10001199: CC int 3
1000119A: CC int 3
1000119B: CC int 3
1000119C: CC int 3
1000119D: CC int 3
1000119E: CC int 3
1000119F: CC int 3
100011A0: 8B 44 24 0C mov eax,dword ptr [esp+0Ch]
100011A4: 50 push eax
100011A5: 6A 00 push 0
100011A7: FF 15 B0 31 01 10 call dword ptr ds:[100131B0h]
100011AD: C2 0C 00 ret 0Ch
100011B0: FF 15 AC 31 01 10 call dword ptr ds:[100131ACh]
100011B6: C2 08 00 ret 8
100011B9: CC int 3
100011BA: CC int 3
100011BB: CC int 3
100011BC: CC int 3
100011BD: CC int 3
100011BE: CC int 3
100011BF: CC int 3
100011C0: 66 8B 44 24 04 mov ax,word ptr [esp+4]
100011C5: B9 00 FE 00 00 mov ecx,0FE00h
100011CA: 66 3B C1 cmp ax,cx
100011CD: 72 06 jb 100011D5
100011CF: B8 FF FF 04 80 mov eax,8004FFFFh
100011D4: C3 ret
100011D5: 0F B7 C0 movzx eax,ax
100011D8: 2D 00 FE FB 7F sub eax,7FFBFE00h
100011DD: C3 ret
100011DE: CC int 3
100011DF: CC int 3
100011E0: 56 push esi
100011E1: 8B 74 24 08 mov esi,dword ptr [esp+8]
100011E5: 85 F6 test esi,esi
100011E7: 74 2C je 10001215
100011E9: 8B 44 24 0C mov eax,dword ptr [esp+0Ch]
100011ED: 85 C0 test eax,eax
100011EF: 74 24 je 10001215
100011F1: 8B 54 24 10 mov edx,dword ptr [esp+10h]
100011F5: 52 push edx
100011F6: 56 push esi
100011F7: 6A FF push 0FFFFFFFFh
100011F9: 50 push eax
100011FA: 8B 44 24 24 mov eax,dword ptr [esp+24h]
100011FE: 33 C9 xor ecx,ecx
10001200: 51 push ecx
10001201: 50 push eax
10001202: 66 89 0E mov word ptr [esi],cx
10001205: FF 15 88 30 01 10 call dword ptr ds:[10013088h]
1000120B: F7 D8 neg eax
1000120D: 1B C0 sbb eax,eax
1000120F: 23 C6 and eax,esi
10001211: 5E pop esi
10001212: C2 10 00 ret 10h
10001215: 33 C0 xor eax,eax
10001217: 5E pop esi
10001218: C2 10 00 ret 10h
1000121B: CC int 3
1000121C: CC int 3
1000121D: CC int 3
1000121E: CC int 3
1000121F: CC int 3
10001220: 55 push ebp
10001221: 8B EC mov ebp,esp
10001223: 83 EC 20 sub esp,20h
10001226: A1 84 80 01 10 mov eax,dword ptr ds:[10018084h]
1000122B: 33 C5 xor eax,ebp
1000122D: 89 45 FC mov dword ptr [ebp-4],eax
10001230: 8B 45 10 mov eax,dword ptr [ebp+10h]
10001233: 8B 4D 14 mov ecx,dword ptr [ebp+14h]
10001236: 53 push ebx
10001237: 56 push esi
10001238: 8B 75 08 mov esi,dword ptr [ebp+8]
1000123B: 57 push edi
1000123C: 89 45 E8 mov dword ptr [ebp-18h],eax
1000123F: 89 4D E0 mov dword ptr [ebp-20h],ecx
10001242: 85 C0 test eax,eax
10001244: 74 72 je 100012B8
10001246: 8B 06 mov eax,dword ptr [esi]
10001248: 6A 00 push 0
1000124A: 51 push ecx
1000124B: 8B 88 A4 02 00 00 mov ecx,dword ptr [eax+000002A4h]
10001251: 56 push esi
10001252: FF D1 call ecx
10001254: 8B F8 mov edi,eax
10001256: 85 FF test edi,edi
10001258: 75 04 jne 1000125E
1000125A: 33 DB xor ebx,ebx
1000125C: EB 2C jmp 1000128A
1000125E: 57 push edi
1000125F: FF 15 8C 30 01 10 call dword ptr ds:[1001308Ch]
10001265: 8D 58 01 lea ebx,[eax+1]
10001268: 81 FB FF FF FF 3F cmp ebx,3FFFFFFFh
1000126E: 7E 04 jle 10001274
10001270: 33 DB xor ebx,ebx
10001272: EB 16 jmp 1000128A
10001274: 8D 04 1B lea eax,[ebx+ebx]
10001277: E8 04 4B 00 00 call 10005D80
1000127C: 8B C4 mov eax,esp
1000127E: 6A 03 push 3
10001280: 53 push ebx
10001281: 57 push edi
10001282: 50 push eax
10001283: E8 58 FF FF FF call 100011E0
10001288: 8B D8 mov ebx,eax
1000128A: 8B 45 E0 mov eax,dword ptr [ebp-20h]
1000128D: 8B 16 mov edx,dword ptr [esi]
1000128F: 8B 8A A8 02 00 00 mov ecx,dword ptr [edx+000002A8h]
10001295: 57 push edi
10001296: 50 push eax
10001297: 56 push esi
10001298: FF D1 call ecx
1000129A: 8D 55 EC lea edx,[ebp-14h]
1000129D: 52 push edx
1000129E: 53 push ebx
1000129F: FF 15 A8 31 01 10 call dword ptr ds:[100131A8h]
100012A5: 85 C0 test eax,eax
100012A7: 79 13 jns 100012BC
100012A9: 50 push eax
100012AA: 68 68 33 01 10 push 10013368h
100012AF: 56 push esi
100012B0: E8 4B 31 00 00 call 10004400
100012B5: 83 C4 0C add esp,0Ch
100012B8: 33 C0 xor eax,eax
100012BA: EB 5D jmp 10001319
100012BC: 8B 45 E8 mov eax,dword ptr [ebp-18h]
100012BF: 8B 08 mov ecx,dword ptr [eax]
100012C1: 8D 55 E4 lea edx,[ebp-1Ch]
100012C4: 52 push edx
100012C5: 8D 55 EC lea edx,[ebp-14h]
100012C8: 52 push edx
100012C9: 50 push eax
100012CA: 8B 01 mov eax,dword ptr [ecx]
100012CC: FF D0 call eax
100012CE: 85 C0 test eax,eax
100012D0: 79 13 jns 100012E5
100012D2: 50 push eax
100012D3: 68 48 33 01 10 push 10013348h
100012D8: 56 push esi
100012D9: E8 22 31 00 00 call 10004400
100012DE: 83 C4 0C add esp,0Ch
100012E1: 33 C0 xor eax,eax
100012E3: EB 34 jmp 10001319
100012E5: 8B 0E mov ecx,dword ptr [esi]
100012E7: 8B 51 18 mov edx,dword ptr [ecx+18h]
100012EA: 68 30 33 01 10 push 10013330h
100012EF: 56 push esi
100012F0: FF D2 call edx
100012F2: 68 28 33 01 10 push 10013328h
100012F7: 8B F8 mov edi,eax
100012F9: 8B 06 mov eax,dword ptr [esi]
100012FB: 8B 88 84 00 00 00 mov ecx,dword ptr [eax+00000084h]
10001301: 68 6C 32 01 10 push 1001326Ch
10001306: 57 push edi
10001307: 56 push esi
10001308: FF D1 call ecx
1000130A: 8B 55 E4 mov edx,dword ptr [ebp-1Ch]
1000130D: 52 push edx
1000130E: 50 push eax
1000130F: 57 push edi
10001310: 56 push esi
10001311: E8 EA FC FF FF call 10001000
10001316: 83 C4 10 add esp,10h
10001319: 8D 65 D4 lea esp,[ebp-2Ch]
1000131C: 5F pop edi
1000131D: 5E pop esi
1000131E: 5B pop ebx
1000131F: 8B 4D FC mov ecx,dword ptr [ebp-4]
10001322: 33 CD xor ecx,ebp
10001324: E8 47 4A 00 00 call 10005D70
10001329: 8B E5 mov esp,ebp
1000132B: 5D pop ebp
1000132C: C2 10 00 ret 10h
1000132F: CC int 3
10001330: 55 push ebp
10001331: 8B EC mov ebp,esp
10001333: 83 EC 24 sub esp,24h
10001336: A1 84 80 01 10 mov eax,dword ptr ds:[10018084h]
1000133B: 33 C5 xor eax,ebp
1000133D: 89 45 FC mov dword ptr [ebp-4],eax
10001340: 8B 45 10 mov eax,dword ptr [ebp+10h]
10001343: 53 push ebx
10001344: 56 push esi
10001345: 8B 75 08 mov esi,dword ptr [ebp+8]
10001348: 8B 0E mov ecx,dword ptr [esi]
1000134A: 8B 91 A4 02 00 00 mov edx,dword ptr [ecx+000002A4h]
10001350: 57 push edi
10001351: 33 DB xor ebx,ebx
10001353: 53 push ebx
10001354: 50 push eax
10001355: 56 push esi
10001356: 89 45 E4 mov dword ptr [ebp-1Ch],eax
10001359: FF D2 call edx
1000135B: 8B F8 mov edi,eax
1000135D: 89 5D E8 mov dword ptr [ebp-18h],ebx
10001360: 3B FB cmp edi,ebx
10001362: 74 41 je 100013A5
10001364: 57 push edi
10001365: FF 15 8C 30 01 10 call dword ptr ds:[1001308Ch]
1000136B: 40 inc eax
1000136C: 89 45 E0 mov dword ptr [ebp-20h],eax
1000136F: 3D FF FF FF 3F cmp eax,3FFFFFFFh
10001374: 7F 2B jg 100013A1
10001376: 03 C0 add eax,eax
10001378: E8 03 4A 00 00 call 10005D80
1000137D: 8B DC mov ebx,esp
1000137F: 85 DB test ebx,ebx
10001381: 74 1E je 100013A1
10001383: 8B 4D E0 mov ecx,dword ptr [ebp-20h]
10001386: 51 push ecx
10001387: 53 push ebx
10001388: 6A FF push 0FFFFFFFFh
1000138A: 33 C0 xor eax,eax
1000138C: 57 push edi
1000138D: 50 push eax
1000138E: 6A 03 push 3
10001390: 66 89 03 mov word ptr [ebx],ax
10001393: FF 15 88 30 01 10 call dword ptr ds:[10013088h]
10001399: F7 D8 neg eax
1000139B: 1B C0 sbb eax,eax
1000139D: 23 C3 and eax,ebx
1000139F: EB 02 jmp 100013A3
100013A1: 33 C0 xor eax,eax
100013A3: 8B D8 mov ebx,eax
100013A5: 6A 3A push 3Ah
100013A7: 57 push edi
100013A8: E8 73 4E 00 00 call 10006220
100013AD: 83 C4 08 add esp,8
100013B0: 57 push edi
100013B1: 85 C0 test eax,eax
100013B3: 0F 84 C9 00 00 00 je 10001482
100013B9: 8B 45 E4 mov eax,dword ptr [ebp-1Ch]
100013BC: 8B 16 mov edx,dword ptr [esi]
100013BE: 8B 8A A8 02 00 00 mov ecx,dword ptr [edx+000002A8h]
100013C4: 50 push eax
100013C5: 56 push esi
100013C6: FF D1 call ecx
100013C8: 8D 55 E8 lea edx,[ebp-18h]
100013CB: 52 push edx
100013CC: 68 50 36 01 10 push 10013650h
100013D1: 6A 00 push 0
100013D3: 53 push ebx
100013D4: FF 15 9C 31 01 10 call dword ptr ds:[1001319Ch]
100013DA: 85 C0 test eax,eax
100013DC: 79 16 jns 100013F4
100013DE: 50 push eax
100013DF: 68 10 34 01 10 push 10013410h
100013E4: 56 push esi
100013E5: E8 16 30 00 00 call 10004400
100013EA: 83 C4 0C add esp,0Ch
100013ED: 33 C0 xor eax,eax
100013EF: E9 1B 01 00 00 jmp 1000150F
100013F4: 8B 45 E8 mov eax,dword ptr [ebp-18h]
100013F7: 8B 08 mov ecx,dword ptr [eax]
100013F9: 8D 55 E4 lea edx,[ebp-1Ch]
100013FC: 52 push edx
100013FD: 68 88 40 01 10 push 10014088h
10001402: 50 push eax
10001403: 8B 01 mov eax,dword ptr [ecx]
10001405: FF D0 call eax
10001407: 85 C0 test eax,eax
10001409: 78 46 js 10001451
1000140B: 8B 45 E8 mov eax,dword ptr [ebp-18h]
1000140E: 8B 08 mov ecx,dword ptr [eax]
10001410: 8B 51 08 mov edx,dword ptr [ecx+8]
10001413: 50 push eax
10001414: FF D2 call edx
10001416: 8B 45 E4 mov eax,dword ptr [ebp-1Ch]
10001419: 8B 08 mov ecx,dword ptr [eax]
1000141B: 8D 55 E8 lea edx,[ebp-18h]
1000141E: 52 push edx
1000141F: 68 50 36 01 10 push 10013650h
10001424: 6A 00 push 0
10001426: 50 push eax
10001427: 8B 41 0C mov eax,dword ptr [ecx+0Ch]
1000142A: FF D0 call eax
1000142C: 85 C0 test eax,eax
1000142E: 79 16 jns 10001446
10001430: 50 push eax
10001431: 68 EC 33 01 10 push 100133ECh
10001436: 56 push esi
10001437: E8 C4 2F 00 00 call 10004400
1000143C: 83 C4 0C add esp,0Ch
1000143F: 33 C0 xor eax,eax
10001441: E9 C9 00 00 00 jmp 1000150F
10001446: 8B 45 E4 mov eax,dword ptr [ebp-1Ch]
10001449: 8B 08 mov ecx,dword ptr [eax]
1000144B: 8B 51 08 mov edx,dword ptr [ecx+8]
1000144E: 50 push eax
1000144F: FF D2 call edx
10001451: 8B 45 E8 mov eax,dword ptr [ebp-18h]
10001454: 8B 08 mov ecx,dword ptr [eax]
10001456: 8D 55 DC lea edx,[ebp-24h]
10001459: 52 push edx
1000145A: 68 68 40 01 10 push 10014068h
1000145F: 50 push eax
10001460: 8B 01 mov eax,dword ptr [ecx]
10001462: FF D0 call eax
10001464: 85 C0 test eax,eax
10001466: 0F 89 95 00 00 00 jns 10001501
1000146C: 50 push eax
1000146D: 68 CC 33 01 10 push 100133CCh
10001472: 56 push esi
10001473: E8 88 2F 00 00 call 10004400
10001478: 83 C4 0C add esp,0Ch
1000147B: 33 C0 xor eax,eax
1000147D: E9 8D 00 00 00 jmp 1000150F
10001482: 68 C0 33 01 10 push 100133C0h
10001487: E8 BB 4C 00 00 call 10006147
1000148C: E8 01 4B 00 00 call 10005F92
10001491: 83 C0 20 add eax,20h
10001494: 50 push eax
10001495: E8 9C 4A 00 00 call 10005F36
1000149A: 8B 4D E4 mov ecx,dword ptr [ebp-1Ch]
1000149D: 8B 06 mov eax,dword ptr [esi]
1000149F: 8B 90 A8 02 00 00 mov edx,dword ptr [eax+000002A8h]
100014A5: 83 C4 0C add esp,0Ch
100014A8: 57 push edi
100014A9: 51 push ecx
100014AA: 56 push esi
100014AB: FF D2 call edx
100014AD: 8D 45 EC lea eax,[ebp-14h]
100014B0: 50 push eax
100014B1: 53 push ebx
100014B2: FF 15 A0 31 01 10 call dword ptr ds:[100131A0h]
100014B8: 85 C0 test eax,eax
100014BA: 79 13 jns 100014CF
100014BC: 50 push eax
100014BD: 68 9C 33 01 10 push 1001339Ch
100014C2: 56 push esi
100014C3: E8 38 2F 00 00 call 10004400
100014C8: 83 C4 0C add esp,0Ch
100014CB: 33 C0 xor eax,eax
100014CD: EB 40 jmp 1000150F
100014CF: 8D 4D E8 lea ecx,[ebp-18h]
100014D2: 51 push ecx
100014D3: 68 50 36 01 10 push 10013650h
100014D8: 6A 05 push 5
100014DA: 6A 00 push 0
100014DC: 8D 55 EC lea edx,[ebp-14h]
100014DF: 52 push edx
100014E0: FF 15 A4 31 01 10 call dword ptr ds:[100131A4h]
100014E6: 85 C0 test eax,eax
100014E8: 0F 89 63 FF FF FF jns 10001451
100014EE: 50 push eax
100014EF: 68 84 33 01 10 push 10013384h
100014F4: 56 push esi
100014F5: E8 06 2F 00 00 call 10004400
100014FA: 83 C4 0C add esp,0Ch
100014FD: 33 C0 xor eax,eax
100014FF: EB 0E jmp 1000150F
10001501: 8B 45 E8 mov eax,dword ptr [ebp-18h]
10001504: 8B 08 mov ecx,dword ptr [eax]
10001506: 8B 51 08 mov edx,dword ptr [ecx+8]
10001509: 50 push eax
1000150A: FF D2 call edx
1000150C: 8B 45 DC mov eax,dword ptr [ebp-24h]
1000150F: 8D 65 D0 lea esp,[ebp-30h]
10001512: 5F pop edi
10001513: 5E pop esi
10001514: 5B pop ebx
10001515: 8B 4D FC mov ecx,dword ptr [ebp-4]
10001518: 33 CD xor ecx,ebp
1000151A: E8 51 48 00 00 call 10005D70
1000151F: 8B E5 mov esp,ebp
10001521: 5D pop ebp
10001522: C2 0C 00 ret 0Ch
10001525: CC int 3
10001526: CC int 3
10001527: CC int 3
10001528: CC int 3
10001529: CC int 3
1000152A: CC int 3
1000152B: CC int 3
1000152C: CC int 3
1000152D: CC int 3
1000152E: CC int 3
1000152F: CC int 3
10001530: 55 push ebp
10001531: 8B EC mov ebp,esp
10001533: 83 EC 24 sub esp,24h
10001536: A1 84 80 01 10 mov eax,dword ptr ds:[10018084h]
1000153B: 33 C5 xor eax,ebp
1000153D: 89 45 FC mov dword ptr [ebp-4],eax
10001540: 53 push ebx
10001541: 8B 5D 10 mov ebx,dword ptr [ebp+10h]
10001544: 56 push esi
10001545: 57 push edi
10001546: 8B 7D 08 mov edi,dword ptr [ebp+8]
10001549: 8B 07 mov eax,dword ptr [edi]
1000154B: 8B 88 A4 02 00 00 mov ecx,dword ptr [eax+000002A4h]
10001551: 6A 00 push 0
10001553: 53 push ebx
10001554: 57 push edi
10001555: 89 5D E0 mov dword ptr [ebp-20h],ebx
10001558: FF D1 call ecx
1000155A: 8B F0 mov esi,eax
1000155C: 33 C0 xor eax,eax
1000155E: 89 75 E8 mov dword ptr [ebp-18h],esi
10001561: 89 45 E4 mov dword ptr [ebp-1Ch],eax
10001564: 3B F0 cmp esi,eax
10001566: 74 49 je 100015B1
10001568: 56 push esi
10001569: FF 15 8C 30 01 10 call dword ptr ds:[1001308Ch]
1000156F: 8D 58 01 lea ebx,[eax+1]
10001572: 81 FB FF FF FF 3F cmp ebx,3FFFFFFFh
10001578: 7F 32 jg 100015AC
1000157A: 8D 04 1B lea eax,[ebx+ebx]
1000157D: E8 FE 47 00 00 call 10005D80
10001582: 8B F4 mov esi,esp
10001584: 85 F6 test esi,esi
10001586: 74 21 je 100015A9
10001588: 8B 45 E8 mov eax,dword ptr [ebp-18h]
1000158B: 53 push ebx
1000158C: 56 push esi
1000158D: 6A FF push 0FFFFFFFFh
1000158F: 33 D2 xor edx,edx
10001591: 50 push eax
10001592: 52 push edx
10001593: 6A 03 push 3
10001595: 66 89 16 mov word ptr [esi],dx
10001598: FF 15 88 30 01 10 call dword ptr ds:[10013088h]
1000159E: F7 D8 neg eax
100015A0: 1B C0 sbb eax,eax
100015A2: 23 C6 and eax,esi
100015A4: 8B 75 E8 mov esi,dword ptr [ebp-18h]
100015A7: EB 05 jmp 100015AE
100015A9: 8B 75 E8 mov esi,dword ptr [ebp-18h]
100015AC: 33 C0 xor eax,eax
100015AE: 8B 5D E0 mov ebx,dword ptr [ebp-20h]
100015B1: 8B 0F mov ecx,dword ptr [edi]
100015B3: 8B 91 A8 02 00 00 mov edx,dword ptr [ecx+000002A8h]
100015B9: 56 push esi
100015BA: 53 push ebx
100015BB: 57 push edi
100015BC: 89 45 E8 mov dword ptr [ebp-18h],eax
100015BF: FF D2 call edx
100015C1: 8B 4D E8 mov ecx,dword ptr [ebp-18h]
100015C4: 8D 45 EC lea eax,[ebp-14h]
100015C7: 50 push eax
100015C8: 51 push ecx
100015C9: FF 15 A0 31 01 10 call dword ptr ds:[100131A0h]
100015CF: 85 C0 test eax,eax
100015D1: 79 13 jns 100015E6
100015D3: 50 push eax
100015D4: 68 9C 33 01 10 push 1001339Ch
100015D9: 57 push edi
100015DA: E8 21 2E 00 00 call 10004400
100015DF: 83 C4 0C add esp,0Ch
100015E2: 33 C0 xor eax,eax
100015E4: EB 5F jmp 10001645
100015E6: 8D 55 E4 lea edx,[ebp-1Ch]
100015E9: 52 push edx
100015EA: 6A 00 push 0
100015EC: 8D 45 EC lea eax,[ebp-14h]
100015EF: 50 push eax
100015F0: FF 15 68 31 01 10 call dword ptr ds:[10013168h]
100015F6: 85 C0 test eax,eax
100015F8: 79 13 jns 1000160D
100015FA: 50 push eax
100015FB: 68 24 34 01 10 push 10013424h
10001600: 57 push edi
10001601: E8 FA 2D 00 00 call 10004400
10001606: 83 C4 0C add esp,0Ch
10001609: 33 C0 xor eax,eax
1000160B: EB 38 jmp 10001645
1000160D: 8B 45 E4 mov eax,dword ptr [ebp-1Ch]
10001610: 8B 08 mov ecx,dword ptr [eax]
10001612: 8D 55 DC lea edx,[ebp-24h]
10001615: 52 push edx
10001616: 68 68 40 01 10 push 10014068h
1000161B: 50 push eax
1000161C: 8B 01 mov eax,dword ptr [ecx]
1000161E: FF D0 call eax
10001620: 85 C0 test eax,eax
10001622: 79 13 jns 10001637
10001624: 50 push eax
10001625: 68 CC 33 01 10 push 100133CCh
1000162A: 57 push edi
1000162B: E8 D0 2D 00 00 call 10004400
10001630: 83 C4 0C add esp,0Ch
10001633: 33 C0 xor eax,eax
10001635: EB 0E jmp 10001645
10001637: 8B 45 E4 mov eax,dword ptr [ebp-1Ch]
1000163A: 8B 08 mov ecx,dword ptr [eax]
1000163C: 8B 51 08 mov edx,dword ptr [ecx+8]
1000163F: 50 push eax
10001640: FF D2 call edx
10001642: 8B 45 DC mov eax,dword ptr [ebp-24h]
10001645: 8D 65 D0 lea esp,[ebp-30h]
10001648: 5F pop edi
10001649: 5E pop esi
1000164A: 5B pop ebx
1000164B: 8B 4D FC mov ecx,dword ptr [ebp-4]
1000164E: 33 CD xor ecx,ebp
10001650: E8 1B 47 00 00 call 10005D70
10001655: 8B E5 mov esp,ebp
10001657: 5D pop ebp
10001658: C2 0C 00 ret 0Ch
1000165B: CC int 3
1000165C: CC int 3
1000165D: CC int 3
1000165E: CC int 3
1000165F: CC int 3
10001660: 55 push ebp
10001661: 8B EC mov ebp,esp
10001663: 83 EC 24 sub esp,24h
10001666: A1 84 80 01 10 mov eax,dword ptr ds:[10018084h]
1000166B: 33 C5 xor eax,ebp
1000166D: 89 45 FC mov dword ptr [ebp-4],eax
10001670: 53 push ebx
10001671: 8B 5D 10 mov ebx,dword ptr [ebp+10h]
10001674: 56 push esi
10001675: 57 push edi
10001676: 8B 7D 08 mov edi,dword ptr [ebp+8]
10001679: 8B 07 mov eax,dword ptr [edi]
1000167B: 8B 88 A4 02 00 00 mov ecx,dword ptr [eax+000002A4h]
10001681: 6A 00 push 0
10001683: 53 push ebx
10001684: 57 push edi
10001685: 89 5D E0 mov dword ptr [ebp-20h],ebx
10001688: FF D1 call ecx
1000168A: 8B F0 mov esi,eax
1000168C: 33 C0 xor eax,eax
1000168E: 89 75 E8 mov dword ptr [ebp-18h],esi
10001691: 89 45 E4 mov dword ptr [ebp-1Ch],eax
10001694: 3B F0 cmp esi,eax
10001696: 74 49 je 100016E1
10001698: 56 push esi
10001699: FF 15 8C 30 01 10 call dword ptr ds:[1001308Ch]
1000169F: 8D 58 01 lea ebx,[eax+1]
100016A2: 81 FB FF FF FF 3F cmp ebx,3FFFFFFFh
100016A8: 7F 32 jg 100016DC
100016AA: 8D 04 1B lea eax,[ebx+ebx]
100016AD: E8 CE 46 00 00 call 10005D80
100016B2: 8B F4 mov esi,esp
100016B4: 85 F6 test esi,esi
100016B6: 74 21 je 100016D9
100016B8: 8B 45 E8 mov eax,dword ptr [ebp-18h]
100016BB: 53 push ebx
100016BC: 56 push esi
100016BD: 6A FF push 0FFFFFFFFh
100016BF: 33 D2 xor edx,edx
100016C1: 50 push eax
100016C2: 52 push edx
100016C3: 6A 03 push 3
100016C5: 66 89 16 mov word ptr [esi],dx
100016C8: FF 15 88 30 01 10 call dword ptr ds:[10013088h]
100016CE: F7 D8 neg eax
100016D0: 1B C0 sbb eax,eax
100016D2: 23 C6 and eax,esi
100016D4: 8B 75 E8 mov esi,dword ptr [ebp-18h]
100016D7: EB 05 jmp 100016DE
100016D9: 8B 75 E8 mov esi,dword ptr [ebp-18h]
100016DC: 33 C0 xor eax,eax
100016DE: 8B 5D E0 mov ebx,dword ptr [ebp-20h]
100016E1: 8B 0F mov ecx,dword ptr [edi]
100016E3: 8B 91 A8 02 00 00 mov edx,dword ptr [ecx+000002A8h]
100016E9: 56 push esi
100016EA: 53 push ebx
100016EB: 57 push edi
100016EC: 89 45 E8 mov dword ptr [ebp-18h],eax
100016EF: FF D2 call edx
100016F1: 8B 4D E8 mov ecx,dword ptr [ebp-18h]
100016F4: 8D 45 EC lea eax,[ebp-14h]
100016F7: 50 push eax
100016F8: 51 push ecx
100016F9: FF 15 A0 31 01 10 call dword ptr ds:[100131A0h]
100016FF: 85 C0 test eax,eax
10001701: 79 13 jns 10001716
10001703: 50 push eax
10001704: 68 9C 33 01 10 push 1001339Ch
10001709: 57 push edi
1000170A: E8 F1 2C 00 00 call 10004400
1000170F: 83 C4 0C add esp,0Ch
10001712: 33 C0 xor eax,eax
10001714: EB 66 jmp 1000177C
10001716: 8D 55 E4 lea edx,[ebp-1Ch]
10001719: 52 push edx
1000171A: 68 50 36 01 10 push 10013650h
1000171F: 6A 05 push 5
10001721: 6A 00 push 0
10001723: 8D 45 EC lea eax,[ebp-14h]
10001726: 50 push eax
10001727: FF 15 A4 31 01 10 call dword ptr ds:[100131A4h]
1000172D: 85 C0 test eax,eax
1000172F: 79 13 jns 10001744
10001731: 50 push eax
10001732: 68 84 33 01 10 push 10013384h
10001737: 57 push edi
10001738: E8 C3 2C 00 00 call 10004400
1000173D: 83 C4 0C add esp,0Ch
10001740: 33 C0 xor eax,eax
10001742: EB 38 jmp 1000177C
10001744: 8B 45 E4 mov eax,dword ptr [ebp-1Ch]
10001747: 8B 08 mov ecx,dword ptr [eax]
10001749: 8D 55 DC lea edx,[ebp-24h]
1000174C: 52 push edx
1000174D: 68 68 40 01 10 push 10014068h
10001752: 50 push eax
10001753: 8B 01 mov eax,dword ptr [ecx]
10001755: FF D0 call eax
10001757: 85 C0 test eax,eax
10001759: 79 13 jns 1000176E
1000175B: 50 push eax
1000175C: 68 CC 33 01 10 push 100133CCh
10001761: 57 push edi
10001762: E8 99 2C 00 00 call 10004400
10001767: 83 C4 0C add esp,0Ch
1000176A: 33 C0 xor eax,eax
1000176C: EB 0E jmp 1000177C
1000176E: 8B 45 E4 mov eax,dword ptr [ebp-1Ch]
10001771: 8B 08 mov ecx,dword ptr [eax]
10001773: 8B 51 08 mov edx,dword ptr [ecx+8]
10001776: 50 push eax
10001777: FF D2 call edx
10001779: 8B 45 DC mov eax,dword ptr [ebp-24h]
1000177C: 8D 65 D0 lea esp,[ebp-30h]
1000177F: 5F pop edi
10001780: 5E pop esi
10001781: 5B pop ebx
10001782: 8B 4D FC mov ecx,dword ptr [ebp-4]
10001785: 33 CD xor ecx,ebp
10001787: E8 E4 45 00 00 call 10005D70
1000178C: 8B E5 mov esp,ebp
1000178E: 5D pop ebp
1000178F: C2 0C 00 ret 0Ch
10001792: CC int 3
10001793: CC int 3
10001794: CC int 3
10001795: CC int 3
10001796: CC int 3
10001797: CC int 3
10001798: CC int 3
10001799: CC int 3
1000179A: CC int 3
1000179B: CC int 3
1000179C: CC int 3
1000179D: CC int 3
1000179E: CC int 3
1000179F: CC int 3
100017A0: 51 push ecx
100017A1: 57 push edi
100017A2: 8B 7C 24 14 mov edi,dword ptr [esp+14h]
100017A6: 85 FF test edi,edi
100017A8: 74 2C je 100017D6
100017AA: 8B 07 mov eax,dword ptr [edi]
100017AC: 8B 50 0C mov edx,dword ptr [eax+0Ch]
100017AF: 8D 4C 24 14 lea ecx,[esp+14h]
100017B3: 51 push ecx
100017B4: 57 push edi
100017B5: C7 44 24 1C 00 00 mov dword ptr [esp+1Ch],0
00 00
100017BD: FF D2 call edx
100017BF: 85 C0 test eax,eax
100017C1: 79 1A jns 100017DD
100017C3: 50 push eax
100017C4: 8B 44 24 10 mov eax,dword ptr [esp+10h]
100017C8: 68 50 34 01 10 push 10013450h
100017CD: 50 push eax
100017CE: E8 2D 2C 00 00 call 10004400
100017D3: 83 C4 0C add esp,0Ch
100017D6: 33 C0 xor eax,eax
100017D8: 5F pop edi
100017D9: 59 pop ecx
100017DA: C2 0C 00 ret 0Ch
100017DD: 83 7C 24 14 01 cmp dword ptr [esp+14h],1
100017E2: 75 F2 jne 100017D6
100017E4: 56 push esi
100017E5: 8B 37 mov esi,dword ptr [edi]
100017E7: 8D 4C 24 08 lea ecx,[esp+8]
100017EB: 51 push ecx
100017EC: C7 44 24 0C 00 00 mov dword ptr [esp+0Ch],0
00 00
100017F4: FF 15 90 30 01 10 call dword ptr ds:[10013090h]
100017FA: 8B 56 10 mov edx,dword ptr [esi+10h]
100017FD: 50 push eax
100017FE: 6A 00 push 0
10001800: 57 push edi
10001801: FF D2 call edx
10001803: 5E pop esi
10001804: 85 C0 test eax,eax
10001806: 79 1A jns 10001822
10001808: 50 push eax
10001809: 8B 44 24 10 mov eax,dword ptr [esp+10h]
1000180D: 68 3C 34 01 10 push 1001343Ch
10001812: 50 push eax
10001813: E8 E8 2B 00 00 call 10004400
10001818: 83 C4 0C add esp,0Ch
1000181B: 33 C0 xor eax,eax
1000181D: 5F pop edi
1000181E: 59 pop ecx
1000181F: C2 0C 00 ret 0Ch
10001822: 8B 4C 24 04 mov ecx,dword ptr [esp+4]
10001826: 8B 54 24 0C mov edx,dword ptr [esp+0Ch]
1000182A: 51 push ecx
1000182B: 52 push edx
1000182C: E8 2F 2E 00 00 call 10004660
10001831: 83 C4 08 add esp,8
10001834: 5F pop edi
10001835: 59 pop ecx
10001836: C2 0C 00 ret 0Ch
10001839: CC int 3
1000183A: CC int 3
1000183B: CC int 3
1000183C: CC int 3
1000183D: CC int 3
1000183E: CC int 3
1000183F: CC int 3
10001840: 55 push ebp
10001841: 8B EC mov ebp,esp
10001843: 83 EC 08 sub esp,8
10001846: A1 84 80 01 10 mov eax,dword ptr ds:[10018084h]
1000184B: 33 C5 xor eax,ebp
1000184D: 89 45 FC mov dword ptr [ebp-4],eax
10001850: 56 push esi
10001851: 57 push edi
10001852: 85 DB test ebx,ebx
10001854: 75 05 jne 1000185B
10001856: 89 5D F8 mov dword ptr [ebp-8],ebx
10001859: EB 40 jmp 1000189B
1000185B: 53 push ebx
1000185C: FF 15 8C 30 01 10 call dword ptr ds:[1001308Ch]
10001862: 8D 78 01 lea edi,[eax+1]
10001865: 81 FF FF FF FF 3F cmp edi,3FFFFFFFh
1000186B: 7F 29 jg 10001896
1000186D: 8D 04 3F lea eax,[edi+edi]
10001870: E8 0B 45 00 00 call 10005D80
10001875: 8B F4 mov esi,esp
10001877: 85 F6 test esi,esi
10001879: 74 1B je 10001896
1000187B: 57 push edi
1000187C: 56 push esi
1000187D: 6A FF push 0FFFFFFFFh
1000187F: 33 C0 xor eax,eax
10001881: 53 push ebx
10001882: 50 push eax
10001883: 6A 03 push 3
10001885: 66 89 06 mov word ptr [esi],ax
10001888: FF 15 88 30 01 10 call dword ptr ds:[10013088h]
1000188E: F7 D8 neg eax
10001890: 1B C0 sbb eax,eax
10001892: 23 C6 and eax,esi
10001894: EB 02 jmp 10001898
10001896: 33 C0 xor eax,eax
10001898: 89 45 F8 mov dword ptr [ebp-8],eax
1000189B: 8B 55 0C mov edx,dword ptr [ebp+0Ch]
1000189E: 8B 45 08 mov eax,dword ptr [ebp+8]
100018A1: 8B 08 mov ecx,dword ptr [eax]
100018A3: 52 push edx
100018A4: 8B 55 10 mov edx,dword ptr [ebp+10h]
100018A7: 52 push edx
100018A8: 6A 01 push 1
100018AA: 8D 55 F8 lea edx,[ebp-8]
100018AD: 52 push edx
100018AE: 68 98 40 01 10 push 10014098h
100018B3: 50 push eax
100018B4: 8B 41 14 mov eax,dword ptr [ecx+14h]
100018B7: FF D0 call eax
100018B9: 8D 65 F0 lea esp,[ebp-10h]
100018BC: 5F pop edi
100018BD: 5E pop esi
100018BE: 8B 4D FC mov ecx,dword ptr [ebp-4]
100018C1: 33 CD xor ecx,ebp
100018C3: E8 A8 44 00 00 call 10005D70
100018C8: 8B E5 mov esp,ebp
100018CA: 5D pop ebp
100018CB: C3 ret
100018CC: CC int 3
100018CD: CC int 3
100018CE: CC int 3
100018CF: CC int 3
100018D0: 51 push ecx
100018D1: 6A 00 push 0
100018D3: 6A 00 push 0
100018D5: 8D 44 24 08 lea eax,[esp+8]
100018D9: 50 push eax
100018DA: 68 00 04 00 00 push 400h
100018DF: 51 push ecx
100018E0: 6A 00 push 0
100018E2: 68 00 11 00 00 push 1100h
100018E7: C7 44 24 1C 00 00 mov dword ptr [esp+1Ch],0
00 00
100018EF: FF 15 98 30 01 10 call dword ptr ds:[10013098h]
100018F5: 8B 04 24 mov eax,dword ptr [esp]
100018F8: 85 C0 test eax,eax
100018FA: 75 22 jne 1000191E
100018FC: 6A 44 push 44h
100018FE: 6A 40 push 40h
10001900: FF 15 94 30 01 10 call dword ptr ds:[10013094h]
10001906: 68 70 34 01 10 push 10013470h
1000190B: 6A 44 push 44h
1000190D: 50 push eax
1000190E: 89 44 24 0C mov dword ptr [esp+0Ch],eax
10001912: E8 C7 49 00 00 call 100062DE
10001917: 8B 44 24 0C mov eax,dword ptr [esp+0Ch]
1000191B: 83 C4 0C add esp,0Ch
1000191E: 59 pop ecx
1000191F: C3 ret
10001920: 83 EC 0C sub esp,0Ch
10001923: 53 push ebx
10001924: 55 push ebp
10001925: 56 push esi
10001926: 57 push edi
10001927: 6A FF push 0FFFFFFFFh
10001929: 8B F0 mov esi,eax
1000192B: 56 push esi
1000192C: 6A 00 push 0
1000192E: 8D 44 24 1C lea eax,[esp+1Ch]
10001932: 6A 00 push 0
10001934: 50 push eax
10001935: 8B D9 mov ebx,ecx
10001937: 8B FA mov edi,edx
10001939: C7 44 24 24 00 00 mov dword ptr [esp+24h],0
00 00
10001941: E8 92 4E 00 00 call 100067D8
10001946: 8B 44 24 24 mov eax,dword ptr [esp+24h]
1000194A: 33 C9 xor ecx,ecx
1000194C: BA 02 00 00 00 mov edx,2
10001951: F7 E2 mul eax,edx
10001953: 0F 90 C1 seto cl
10001956: F7 D9 neg ecx
10001958: 0B C8 or ecx,eax
1000195A: 51 push ecx
1000195B: E8 84 4B 00 00 call 100064E4
10001960: 6A FF push 0FFFFFFFFh
10001962: 8B E8 mov ebp,eax
10001964: 8B 44 24 2C mov eax,dword ptr [esp+2Ch]
10001968: 56 push esi
10001969: 50 push eax
1000196A: 55 push ebp
1000196B: 6A 00 push 0
1000196D: E8 66 4E 00 00 call 100067D8
10001972: 83 C4 2C add esp,2Ch
10001975: 81 FF 09 00 02 80 cmp edi,80020009h
1000197B: 0F 85 FA 00 00 00 jne 10001A7B
10001981: 8B 43 18 mov eax,dword ptr [ebx+18h]
10001984: 85 C0 test eax,eax
10001986: 74 03 je 1000198B
10001988: 53 push ebx
10001989: FF D0 call eax
1000198B: 8B 4B 04 mov ecx,dword ptr [ebx+4]
1000198E: 8B 35 64 31 01 10 mov esi,dword ptr ds:[10013164h]
10001994: 51 push ecx
10001995: FF D6 call esi
10001997: 8B 53 08 mov edx,dword ptr [ebx+8]
1000199A: 8B F8 mov edi,eax
1000199C: 52 push edx
1000199D: 89 7C 24 18 mov dword ptr [esp+18h],edi
100019A1: FF D6 call esi
100019A3: 8B D0 mov edx,eax
100019A5: 8B C5 mov eax,ebp
100019A7: 89 54 24 18 mov dword ptr [esp+18h],edx
100019AB: 8D 70 02 lea esi,[eax+2]
100019AE: 8B FF mov edi,edi
100019B0: 66 8B 08 mov cx,word ptr [eax]
100019B3: 83 C0 02 add eax,2
100019B6: 66 85 C9 test cx,cx
100019B9: 75 F5 jne 100019B0
100019BB: 2B C6 sub eax,esi
100019BD: D1 F8 sar eax,1
100019BF: 03 C2 add eax,edx
100019C1: 8D BC 38 80 00 00 lea edi,[eax+edi+00000080h]
00
100019C8: 33 C9 xor ecx,ecx
100019CA: 8B C7 mov eax,edi
100019CC: BA 02 00 00 00 mov edx,2
100019D1: F7 E2 mul eax,edx
100019D3: 0F 90 C1 seto cl
100019D6: F7 D9 neg ecx
100019D8: 0B C8 or ecx,eax
100019DA: 51 push ecx
100019DB: E8 04 4B 00 00 call 100064E4
100019E0: 6A 0B push 0Bh
100019E2: 68 5C 35 01 10 push 1001355Ch
100019E7: 8B F0 mov esi,eax
100019E9: 57 push edi
100019EA: 56 push esi
100019EB: E8 27 4A 00 00 call 10006417
100019F0: 8B C5 mov eax,ebp
100019F2: 83 C4 14 add esp,14h
100019F5: 8D 50 02 lea edx,[eax+2]
100019F8: EB 06 jmp 10001A00
100019FA: 8D 9B 00 00 00 00 lea ebx,[ebx+00000000h]
10001A00: 66 8B 08 mov cx,word ptr [eax]
10001A03: 83 C0 02 add eax,2
10001A06: 66 85 C9 test cx,cx
10001A09: 75 F5 jne 10001A00
10001A0B: 2B C2 sub eax,edx
10001A0D: D1 F8 sar eax,1
10001A0F: 50 push eax
10001A10: 55 push ebp
10001A11: 57 push edi
10001A12: 56 push esi
10001A13: E8 29 49 00 00 call 10006341
10001A18: 6A 09 push 9
10001A1A: 68 48 35 01 10 push 10013548h
10001A1F: 57 push edi
10001A20: 56 push esi
10001A21: E8 1B 49 00 00 call 10006341
10001A26: 8B 44 24 34 mov eax,dword ptr [esp+34h]
10001A2A: 8B 4B 04 mov ecx,dword ptr [ebx+4]
10001A2D: 50 push eax
10001A2E: 51 push ecx
10001A2F: 57 push edi
10001A30: 56 push esi
10001A31: E8 0B 49 00 00 call 10006341
10001A36: 6A 0E push 0Eh
10001A38: 68 28 35 01 10 push 10013528h
10001A3D: 57 push edi
10001A3E: 56 push esi
10001A3F: E8 FD 48 00 00 call 10006341
10001A44: 8B 54 24 58 mov edx,dword ptr [esp+58h]
10001A48: 8B 43 08 mov eax,dword ptr [ebx+8]
10001A4B: 83 C4 40 add esp,40h
10001A4E: 52 push edx
10001A4F: 50 push eax
10001A50: 57 push edi
10001A51: 56 push esi
10001A52: E8 EA 48 00 00 call 10006341
10001A57: 6A 01 push 1
10001A59: 68 24 35 01 10 push 10013524h
10001A5E: 57 push edi
10001A5F: 56 push esi
10001A60: E8 DC 48 00 00 call 10006341
10001A65: 83 C4 20 add esp,20h
10001A68: 55 push ebp
10001A69: E8 A6 42 00 00 call 10005D14
10001A6E: 83 C4 04 add esp,4
10001A71: 5F pop edi
10001A72: 8B C6 mov eax,esi
10001A74: 5E pop esi
10001A75: 5D pop ebp
10001A76: 5B pop ebx
10001A77: 83 C4 0C add esp,0Ch
10001A7A: C3 ret
10001A7B: 8B CF mov ecx,edi
10001A7D: E8 4E FE FF FF call 100018D0
10001A82: 8B D8 mov ebx,eax
10001A84: 8B C5 mov eax,ebp
10001A86: 8D 50 02 lea edx,[eax+2]
10001A89: 8D A4 24 00 00 00 lea esp,[esp+00000000h]
00
10001A90: 66 8B 08 mov cx,word ptr [eax]
10001A93: 83 C0 02 add eax,2
10001A96: 66 85 C9 test cx,cx
10001A99: 75 F5 jne 10001A90
10001A9B: 2B C2 sub eax,edx
10001A9D: D1 F8 sar eax,1
10001A9F: 8B D0 mov edx,eax
10001AA1: 8B C3 mov eax,ebx
10001AA3: 8D 70 02 lea esi,[eax+2]
10001AA6: 66 8B 08 mov cx,word ptr [eax]
10001AA9: 83 C0 02 add eax,2
10001AAC: 66 85 C9 test cx,cx
10001AAF: 75 F5 jne 10001AA6
10001AB1: 2B C6 sub eax,esi
10001AB3: D1 F8 sar eax,1
10001AB5: 8D BC 10 00 01 00 lea edi,[eax+edx+00000100h]
00
10001ABC: 33 C9 xor ecx,ecx
10001ABE: 8B C7 mov eax,edi
10001AC0: BA 02 00 00 00 mov edx,2
10001AC5: F7 E2 mul eax,edx
10001AC7: 0F 90 C1 seto cl
10001ACA: F7 D9 neg ecx
10001ACC: 0B C8 or ecx,eax
10001ACE: 51 push ecx
10001ACF: E8 10 4A 00 00 call 100064E4
10001AD4: 6A 34 push 34h
10001AD6: 68 B8 34 01 10 push 100134B8h
10001ADB: 8B F0 mov esi,eax
10001ADD: 57 push edi
10001ADE: 56 push esi
10001ADF: E8 33 49 00 00 call 10006417
10001AE4: 8B C5 mov eax,ebp
10001AE6: 83 C4 14 add esp,14h
10001AE9: 8D 50 02 lea edx,[eax+2]
10001AEC: 8D 64 24 00 lea esp,[esp]
10001AF0: 66 8B 08 mov cx,word ptr [eax]
10001AF3: 83 C0 02 add eax,2
10001AF6: 66 85 C9 test cx,cx
10001AF9: 75 F5 jne 10001AF0
10001AFB: 2B C2 sub eax,edx
10001AFD: D1 F8 sar eax,1
10001AFF: 50 push eax
10001B00: 55 push ebp
10001B01: 57 push edi
10001B02: 56 push esi
10001B03: E8 39 48 00 00 call 10006341
10001B08: 6A 0E push 0Eh
10001B0A: 68 28 35 01 10 push 10013528h
10001B0F: 57 push edi
10001B10: 56 push esi
10001B11: E8 2B 48 00 00 call 10006341
10001B16: 8B C3 mov eax,ebx
10001B18: 83 C4 20 add esp,20h
10001B1B: 8D 50 02 lea edx,[eax+2]
10001B1E: 8B FF mov edi,edi
10001B20: 66 8B 08 mov cx,word ptr [eax]
10001B23: 83 C0 02 add eax,2
10001B26: 66 85 C9 test cx,cx
10001B29: 75 F5 jne 10001B20
10001B2B: 2B C2 sub eax,edx
10001B2D: D1 F8 sar eax,1
10001B2F: 50 push eax
10001B30: 53 push ebx
10001B31: 57 push edi
10001B32: 56 push esi
10001B33: E8 09 48 00 00 call 10006341
10001B38: 83 C4 10 add esp,10h
10001B3B: 53 push ebx
10001B3C: FF 15 9C 30 01 10 call dword ptr ds:[1001309Ch]
10001B42: 55 push ebp
10001B43: E8 CC 41 00 00 call 10005D14
10001B48: 83 C4 04 add esp,4
10001B4B: 5F pop edi
10001B4C: 8B C6 mov eax,esi
10001B4E: 5E pop esi
10001B4F: 5D pop ebp
10001B50: 5B pop ebx
10001B51: 83 C4 0C add esp,0Ch
10001B54: C3 ret
10001B55: CC int 3
10001B56: CC int 3
10001B57: CC int 3
10001B58: CC int 3
10001B59: CC int 3
10001B5A: CC int 3
10001B5B: CC int 3
10001B5C: CC int 3
10001B5D: CC int 3
10001B5E: CC int 3
10001B5F: CC int 3
10001B60: 81 EC 54 04 00 00 sub esp,454h
10001B66: A1 84 80 01 10 mov eax,dword ptr ds:[10018084h]
10001B6B: 33 C4 xor eax,esp
10001B6D: 89 84 24 50 04 00 mov dword ptr [esp+00000450h],eax
00
10001B74: 53 push ebx
10001B75: 55 push ebp
10001B76: 8B AC 24 6C 04 00 mov ebp,dword ptr [esp+0000046Ch]
00
10001B7D: 56 push esi
10001B7E: 8B B4 24 64 04 00 mov esi,dword ptr [esp+00000464h]
00
10001B85: 57 push edi
10001B86: 8B BC 24 70 04 00 mov edi,dword ptr [esp+00000470h]
00
10001B8D: 33 DB xor ebx,ebx
10001B8F: 3B FB cmp edi,ebx
10001B91: 74 5D je 10001BF0
10001B93: 8B 84 24 78 04 00 mov eax,dword ptr [esp+00000478h]
00
10001B9A: 89 44 24 10 mov dword ptr [esp+10h],eax
10001B9E: 3B EB cmp ebp,ebx
10001BA0: 74 63 je 10001C05
10001BA2: 8B 0E mov ecx,dword ptr [esi]
10001BA4: 8B 91 A4 02 00 00 mov edx,dword ptr [ecx+000002A4h]
10001BAA: 53 push ebx
10001BAB: 55 push ebp
10001BAC: 56 push esi
10001BAD: FF D2 call edx
10001BAF: 8B D8 mov ebx,eax
10001BB1: 8B 84 24 7C 04 00 mov eax,dword ptr [esp+0000047Ch]
00
10001BB8: 50 push eax
10001BB9: 8D 4C 24 14 lea ecx,[esp+14h]
10001BBD: 51 push ecx
10001BBE: 57 push edi
10001BBF: E8 7C FC FF FF call 10001840
10001BC4: 83 C4 0C add esp,0Ch
10001BC7: 53 push ebx
10001BC8: 85 C0 test eax,eax
10001BCA: 79 2B jns 10001BF7
10001BCC: 68 74 35 01 10 push 10013574h
10001BD1: 8D 54 24 68 lea edx,[esp+68h]
10001BD5: 68 00 04 00 00 push 400h
10001BDA: 52 push edx
10001BDB: E8 80 4D 00 00 call 10006960
10001BE0: 6A FF push 0FFFFFFFFh
10001BE2: 8D 44 24 74 lea eax,[esp+74h]
10001BE6: 50 push eax
10001BE7: 56 push esi
10001BE8: E8 13 28 00 00 call 10004400
10001BED: 83 C4 1C add esp,1Ch
10001BF0: 33 C0 xor eax,eax
10001BF2: E9 6C 01 00 00 jmp 10001D63
10001BF7: 8B 0E mov ecx,dword ptr [esi]
10001BF9: 8B 91 A8 02 00 00 mov edx,dword ptr [ecx+000002A8h]
10001BFF: 55 push ebp
10001C00: 56 push esi
10001C01: FF D2 call edx
10001C03: 33 DB xor ebx,ebx
10001C05: 8D 44 24 30 lea eax,[esp+30h]
10001C09: 50 push eax
10001C0A: C7 44 24 2C FD FF mov dword ptr [esp+2Ch],0FFFFFFFDh
FF FF
10001C12: FF 15 5C 31 01 10 call dword ptr ds:[1001315Ch]
10001C18: 8B 84 24 80 04 00 mov eax,dword ptr [esp+00000480h]
00
10001C1F: 8D 48 FF lea ecx,[eax-1]
10001C22: 83 F9 07 cmp ecx,7
10001C25: 77 30 ja 10001C57
10001C27: 0F B6 89 8C 1D 00 movzx ecx,byte ptr [ecx+10001D8Ch]
10
10001C2E: FF 24 8D 80 1D 00 jmp dword ptr [ecx*4+10001D80h]
10
10001C35: 89 5C 24 20 mov dword ptr [esp+20h],ebx
10001C39: 89 5C 24 18 mov dword ptr [esp+18h],ebx
10001C3D: EB 10 jmp 10001C4F
10001C3F: 8D 54 24 28 lea edx,[esp+28h]
10001C43: C7 44 24 20 01 00 mov dword ptr [esp+20h],1
00 00
10001C4B: 89 54 24 18 mov dword ptr [esp+18h],edx
10001C4F: 89 5C 24 14 mov dword ptr [esp+14h],ebx
10001C53: 89 5C 24 1C mov dword ptr [esp+1Ch],ebx
10001C57: 8B 0F mov ecx,dword ptr [edi]
10001C59: 53 push ebx
10001C5A: 8D 54 24 44 lea edx,[esp+44h]
10001C5E: 52 push edx
10001C5F: 8D 54 24 38 lea edx,[esp+38h]
10001C63: 52 push edx
10001C64: 8D 54 24 20 lea edx,[esp+20h]
10001C68: 52 push edx
10001C69: 8B 54 24 20 mov edx,dword ptr [esp+20h]
10001C6D: 50 push eax
10001C6E: 8B 84 24 90 04 00 mov eax,dword ptr [esp+00000490h]
00
10001C75: 50 push eax
10001C76: 8B 41 18 mov eax,dword ptr [ecx+18h]
10001C79: 68 98 40 01 10 push 10014098h
10001C7E: 52 push edx
10001C7F: 57 push edi
10001C80: FF D0 call eax
10001C82: 8B F8 mov edi,eax
10001C84: 85 FF test edi,edi
10001C86: 0F 89 BA 00 00 00 jns 10001D46
10001C8C: C7 44 24 2C 00 00 mov dword ptr [esp+2Ch],0
00 00
10001C94: 85 ED test ebp,ebp
10001C96: 74 36 je 10001CCE
10001C98: 8B 0E mov ecx,dword ptr [esi]
10001C9A: 8B 91 A4 02 00 00 mov edx,dword ptr [ecx+000002A4h]
10001CA0: 6A 00 push 0
10001CA2: 55 push ebp
10001CA3: 56 push esi
10001CA4: FF D2 call edx
10001CA6: 8D 4C 24 40 lea ecx,[esp+40h]
10001CAA: 8B D7 mov edx,edi
10001CAC: 8B D8 mov ebx,eax
10001CAE: E8 6D FC FF FF call 10001920
10001CB3: 53 push ebx
10001CB4: 89 44 24 28 mov dword ptr [esp+28h],eax
10001CB8: 8B 06 mov eax,dword ptr [esi]
10001CBA: 8B 88 A8 02 00 00 mov ecx,dword ptr [eax+000002A8h]
10001CC0: 55 push ebp
10001CC1: 56 push esi
10001CC2: FF D1 call ecx
10001CC4: 8B 6C 24 2C mov ebp,dword ptr [esp+2Ch]
10001CC8: 8B 5C 24 24 mov ebx,dword ptr [esp+24h]
10001CCC: EB 30 jmp 10001CFE
10001CCE: 68 00 01 00 00 push 100h
10001CD3: E8 0C 48 00 00 call 100064E4
10001CD8: 8B 54 24 14 mov edx,dword ptr [esp+14h]
10001CDC: 6A 0A push 0Ah
10001CDE: 8B E8 mov ebp,eax
10001CE0: 68 00 01 00 00 push 100h
10001CE5: 55 push ebp
10001CE6: 52 push edx
10001CE7: E8 C6 4B 00 00 call 100068B2
10001CEC: 83 C4 14 add esp,14h
10001CEF: 8B C5 mov eax,ebp
10001CF1: 8D 4C 24 40 lea ecx,[esp+40h]
10001CF5: 8B D7 mov edx,edi
10001CF7: E8 24 FC FF FF call 10001920
10001CFC: 8B D8 mov ebx,eax
10001CFE: 81 FF 09 00 02 80 cmp edi,80020009h
10001D04: 75 17 jne 10001D1D
10001D06: 8B 7C 24 5C mov edi,dword ptr [esp+5Ch]
10001D0A: 85 FF test edi,edi
10001D0C: 75 0F jne 10001D1D
10001D0E: 8B 44 24 40 mov eax,dword ptr [esp+40h]
10001D12: 50 push eax
10001D13: E8 A8 F4 FF FF call 100011C0
10001D18: 83 C4 04 add esp,4
10001D1B: 8B F8 mov edi,eax
10001D1D: 57 push edi
10001D1E: 53 push ebx
10001D1F: 56 push esi
10001D20: E8 4B 27 00 00 call 10004470
10001D25: 83 C4 0C add esp,0Ch
10001D28: 85 DB test ebx,ebx
10001D2A: 74 09 je 10001D35
10001D2C: 53 push ebx
10001D2D: E8 E2 3F 00 00 call 10005D14
10001D32: 83 C4 04 add esp,4
10001D35: 85 ED test ebp,ebp
10001D37: 74 09 je 10001D42
10001D39: 55 push ebp
10001D3A: E8 D5 3F 00 00 call 10005D14
10001D3F: 83 C4 04 add esp,4
10001D42: 33 C0 xor eax,eax
10001D44: EB 1D jmp 10001D63
10001D46: 8D 4C 24 30 lea ecx,[esp+30h]
10001D4A: 51 push ecx
10001D4B: 56 push esi
10001D4C: E8 3F 34 00 00 call 10005190
10001D51: 83 C4 08 add esp,8
10001D54: 8D 54 24 30 lea edx,[esp+30h]
10001D58: 52 push edx
10001D59: 8B F0 mov esi,eax
10001D5B: FF 15 60 31 01 10 call dword ptr ds:[10013160h]
10001D61: 8B C6 mov eax,esi
10001D63: 8B 8C 24 60 04 00 mov ecx,dword ptr [esp+00000460h]
00
10001D6A: 5F pop edi
10001D6B: 5E pop esi
10001D6C: 5D pop ebp
10001D6D: 5B pop ebx
10001D6E: 33 CC xor ecx,esp
10001D70: E8 FB 3F 00 00 call 10005D70
10001D75: 81 C4 54 04 00 00 add esp,454h
10001D7B: C2 1C 00 ret 1Ch
10001D7E: 8B FF mov edi,edi
10001D80: 35 1C 00 10 3F xor eax,3F10001Ch
10001D85: 1C 00 sbb al,0
10001D87: 10 57 1C adc byte ptr [edi+1Ch],dl
10001D8A: 00 10 add byte ptr [eax],dl
10001D8C: 00 00 add byte ptr [eax],al
10001D8E: 00 01 add byte ptr [ecx],al
10001D90: 02 02 add al,byte ptr [edx]
10001D92: 02 01 add al,byte ptr [ecx]
10001D94: CC int 3
10001D95: CC int 3
10001D96: CC int 3
10001D97: CC int 3
10001D98: CC int 3
10001D99: CC int 3
10001D9A: CC int 3
10001D9B: CC int 3
10001D9C: CC int 3
10001D9D: CC int 3
10001D9E: CC int 3
10001D9F: CC int 3
10001DA0: 81 EC 64 04 00 00 sub esp,464h
10001DA6: A1 84 80 01 10 mov eax,dword ptr ds:[10018084h]
10001DAB: 33 C4 xor eax,esp
10001DAD: 89 84 24 60 04 00 mov dword ptr [esp+00000460h],eax
00
10001DB4: 8B 84 24 84 04 00 mov eax,dword ptr [esp+00000484h]
00
10001DBB: 8B 8C 24 88 04 00 mov ecx,dword ptr [esp+00000488h]
00
10001DC2: 55 push ebp
10001DC3: 8B AC 24 74 04 00 mov ebp,dword ptr [esp+00000474h]
00
10001DCA: 56 push esi
10001DCB: 8B B4 24 70 04 00 mov esi,dword ptr [esp+00000470h]
00
10001DD2: 57 push edi
10001DD3: 8B BC 24 80 04 00 mov edi,dword ptr [esp+00000480h]
00
10001DDA: 89 6C 24 14 mov dword ptr [esp+14h],ebp
10001DDE: 89 7C 24 18 mov dword ptr [esp+18h],edi
10001DE2: 89 44 24 1C mov dword ptr [esp+1Ch],eax
10001DE6: 89 4C 24 20 mov dword ptr [esp+20h],ecx
10001DEA: 85 ED test ebp,ebp
10001DEC: 75 07 jne 10001DF5
10001DEE: 33 C0 xor eax,eax
10001DF0: E9 2C 03 00 00 jmp 10002121
10001DF5: 8B 94 24 84 04 00 mov edx,dword ptr [esp+00000484h]
00
10001DFC: 53 push ebx
10001DFD: 89 54 24 14 mov dword ptr [esp+14h],edx
10001E01: 85 FF test edi,edi
10001E03: 74 65 je 10001E6A
10001E05: 8B 06 mov eax,dword ptr [esi]
10001E07: 8B 88 A4 02 00 00 mov ecx,dword ptr [eax+000002A4h]
10001E0D: 6A 00 push 0
10001E0F: 57 push edi
10001E10: 56 push esi
10001E11: FF D1 call ecx
10001E13: 8B 94 24 8C 04 00 mov edx,dword ptr [esp+0000048Ch]
00
10001E1A: 8B D8 mov ebx,eax
10001E1C: 52 push edx
10001E1D: 8D 44 24 18 lea eax,[esp+18h]
10001E21: 50 push eax
10001E22: 55 push ebp
10001E23: E8 18 FA FF FF call 10001840
10001E28: 83 C4 0C add esp,0Ch
10001E2B: 53 push ebx
10001E2C: 85 C0 test eax,eax
10001E2E: 79 2E jns 10001E5E
10001E30: 68 74 35 01 10 push 10013574h
10001E35: 8D 4C 24 78 lea ecx,[esp+78h]
10001E39: 68 00 04 00 00 push 400h
10001E3E: 51 push ecx
10001E3F: E8 1C 4B 00 00 call 10006960
10001E44: 6A FF push 0FFFFFFFFh
10001E46: 8D 94 24 84 00 00 lea edx,[esp+00000084h]
00
10001E4D: 52 push edx
10001E4E: 56 push esi
10001E4F: E8 AC 25 00 00 call 10004400
10001E54: 83 C4 1C add esp,1Ch
10001E57: 33 C0 xor eax,eax
10001E59: E9 C2 02 00 00 jmp 10002120
10001E5E: 8B 06 mov eax,dword ptr [esi]
10001E60: 8B 88 A8 02 00 00 mov ecx,dword ptr [eax+000002A8h]
10001E66: 57 push edi
10001E67: 56 push esi
10001E68: FF D1 call ecx
10001E6A: 8B 44 24 20 mov eax,dword ptr [esp+20h]
10001E6E: 8B 16 mov edx,dword ptr [esi]
10001E70: 8B 8A AC 02 00 00 mov ecx,dword ptr [edx+000002ACh]
10001E76: 50 push eax
10001E77: 56 push esi
10001E78: FF D1 call ecx
10001E7A: 8B D8 mov ebx,eax
10001E7C: 89 5C 24 28 mov dword ptr [esp+28h],ebx
10001E80: C7 44 24 10 00 00 mov dword ptr [esp+10h],0
00 00
10001E88: 85 DB test ebx,ebx
10001E8A: 74 55 je 10001EE1
10001E8C: 8B D3 mov edx,ebx
10001E8E: C1 E2 04 shl edx,4
10001E91: 52 push edx
10001E92: FF 15 94 31 01 10 call dword ptr ds:[10013194h]
10001E98: 8D 7B FF lea edi,[ebx-1]
10001E9B: 89 44 24 10 mov dword ptr [esp+10h],eax
10001E9F: 85 FF test edi,edi
10001EA1: 78 3E js 10001EE1
10001EA3: 8B D8 mov ebx,eax
10001EA5: 53 push ebx
10001EA6: FF 15 5C 31 01 10 call dword ptr ds:[1001315Ch]
10001EAC: 8B 4C 24 20 mov ecx,dword ptr [esp+20h]
10001EB0: 8B 06 mov eax,dword ptr [esi]
10001EB2: 8B 90 B4 02 00 00 mov edx,dword ptr [eax+000002B4h]
10001EB8: 57 push edi
10001EB9: 51 push ecx
10001EBA: 56 push esi
10001EBB: FF D2 call edx
10001EBD: 8B E8 mov ebp,eax
10001EBF: 53 push ebx
10001EC0: 55 push ebp
10001EC1: 56 push esi
10001EC2: E8 A9 3B 00 00 call 10005A70
10001EC7: 8B 06 mov eax,dword ptr [esi]
10001EC9: 8B 48 5C mov ecx,dword ptr [eax+5Ch]
10001ECC: 83 C4 0C add esp,0Ch
10001ECF: 55 push ebp
10001ED0: 56 push esi
10001ED1: FF D1 call ecx
10001ED3: 83 C3 10 add ebx,10h
10001ED6: 4F dec edi
10001ED7: 79 CC jns 10001EA5
10001ED9: 8B 6C 24 18 mov ebp,dword ptr [esp+18h]
10001EDD: 8B 5C 24 28 mov ebx,dword ptr [esp+28h]
10001EE1: 8D 54 24 40 lea edx,[esp+40h]
10001EE5: 52 push edx
10001EE6: C7 44 24 40 FD FF mov dword ptr [esp+40h],0FFFFFFFDh
FF FF
10001EEE: FF 15 5C 31 01 10 call dword ptr ds:[1001315Ch]
10001EF4: 8B BC 24 90 04 00 mov edi,dword ptr [esp+00000490h]
00
10001EFB: 8D 47 FF lea eax,[edi-1]
10001EFE: 83 F8 07 cmp eax,7
10001F01: 77 3A ja 10001F3D
10001F03: 0F B6 80 48 21 00 movzx eax,byte ptr [eax+10002148h]
10
10001F0A: FF 24 85 3C 21 00 jmp dword ptr [eax*4+1000213Ch]
10
10001F11: 8B 4C 24 10 mov ecx,dword ptr [esp+10h]
10001F15: 33 C0 xor eax,eax
10001F17: 89 4C 24 2C mov dword ptr [esp+2Ch],ecx
10001F1B: 89 44 24 38 mov dword ptr [esp+38h],eax
10001F1F: EB 14 jmp 10001F35
10001F21: 8B 54 24 10 mov edx,dword ptr [esp+10h]
10001F25: 89 54 24 2C mov dword ptr [esp+2Ch],edx
10001F29: C7 44 24 38 01 00 mov dword ptr [esp+38h],1
00 00
10001F31: 8D 44 24 3C lea eax,[esp+3Ch]
10001F35: 89 44 24 30 mov dword ptr [esp+30h],eax
10001F39: 89 5C 24 34 mov dword ptr [esp+34h],ebx
10001F3D: 8B 54 24 24 mov edx,dword ptr [esp+24h]
10001F41: 8B 0E mov ecx,dword ptr [esi]
10001F43: 8B 81 AC 02 00 00 mov eax,dword ptr [ecx+000002ACh]
10001F49: 52 push edx
10001F4A: 56 push esi
10001F4B: FF D0 call eax
10001F4D: 6A 00 push 0
10001F4F: 85 C0 test eax,eax
10001F51: 74 59 je 10001FAC
10001F53: 8B 54 24 28 mov edx,dword ptr [esp+28h]
10001F57: 8B 0E mov ecx,dword ptr [esi]
10001F59: 8B 81 EC 02 00 00 mov eax,dword ptr [ecx+000002ECh]
10001F5F: 52 push edx
10001F60: 56 push esi
10001F61: FF D0 call eax
10001F63: 8B 4D 00 mov ecx,dword ptr [ebp]
10001F66: 8B D8 mov ebx,eax
10001F68: 53 push ebx
10001F69: 8D 54 24 54 lea edx,[esp+54h]
10001F6D: 52 push edx
10001F6E: 8D 44 24 48 lea eax,[esp+48h]
10001F72: 50 push eax
10001F73: 8B 84 24 98 04 00 mov eax,dword ptr [esp+00000498h]
00
10001F7A: 8D 54 24 38 lea edx,[esp+38h]
10001F7E: 52 push edx
10001F7F: 8B 54 24 24 mov edx,dword ptr [esp+24h]
10001F83: 57 push edi
10001F84: 50 push eax
10001F85: 8B 41 18 mov eax,dword ptr [ecx+18h]
10001F88: 68 98 40 01 10 push 10014098h
10001F8D: 52 push edx
10001F8E: 55 push ebp
10001F8F: FF D0 call eax
10001F91: 8B 54 24 24 mov edx,dword ptr [esp+24h]
10001F95: 8B 0E mov ecx,dword ptr [esi]
10001F97: 6A 00 push 0
10001F99: 53 push ebx
10001F9A: 52 push edx
10001F9B: 8B F8 mov edi,eax
10001F9D: 8B 81 0C 03 00 00 mov eax,dword ptr [ecx+0000030Ch]
10001FA3: 56 push esi
10001FA4: FF D0 call eax
10001FA6: 8B 5C 24 28 mov ebx,dword ptr [esp+28h]
10001FAA: EB 2D jmp 10001FD9
10001FAC: 8B 4D 00 mov ecx,dword ptr [ebp]
10001FAF: 8D 54 24 54 lea edx,[esp+54h]
10001FB3: 52 push edx
10001FB4: 8D 44 24 48 lea eax,[esp+48h]
10001FB8: 50 push eax
10001FB9: 8B 84 24 98 04 00 mov eax,dword ptr [esp+00000498h]
00
10001FC0: 8D 54 24 38 lea edx,[esp+38h]
10001FC4: 52 push edx
10001FC5: 8B 54 24 24 mov edx,dword ptr [esp+24h]
10001FC9: 57 push edi
10001FCA: 50 push eax
10001FCB: 8B 41 18 mov eax,dword ptr [ecx+18h]
10001FCE: 68 98 40 01 10 push 10014098h
10001FD3: 52 push edx
10001FD4: 55 push ebp
10001FD5: FF D0 call eax
10001FD7: 8B F8 mov edi,eax
10001FD9: 85 FF test edi,edi
10001FDB: 0F 89 DD 00 00 00 jns 100020BE
10001FE1: 8B 5C 24 1C mov ebx,dword ptr [esp+1Ch]
10001FE5: C7 44 24 18 00 00 mov dword ptr [esp+18h],0
00 00
10001FED: 85 DB test ebx,ebx
10001FEF: 74 36 je 10002027
10001FF1: 8B 0E mov ecx,dword ptr [esi]
10001FF3: 8B 91 A4 02 00 00 mov edx,dword ptr [ecx+000002A4h]
10001FF9: 6A 00 push 0
10001FFB: 53 push ebx
10001FFC: 56 push esi
10001FFD: FF D2 call edx
10001FFF: 8D 4C 24 50 lea ecx,[esp+50h]
10002003: 8B D7 mov edx,edi
10002005: 8B E8 mov ebp,eax
10002007: E8 14 F9 FF FF call 10001920
1000200C: 55 push ebp
1000200D: 89 44 24 20 mov dword ptr [esp+20h],eax
10002011: 8B 06 mov eax,dword ptr [esi]
10002013: 8B 88 A8 02 00 00 mov ecx,dword ptr [eax+000002A8h]
10002019: 53 push ebx
1000201A: 56 push esi
1000201B: FF D1 call ecx
1000201D: 8B 5C 24 1C mov ebx,dword ptr [esp+1Ch]
10002021: 8B 6C 24 18 mov ebp,dword ptr [esp+18h]
10002025: EB 30 jmp 10002057
10002027: 68 00 01 00 00 push 100h
1000202C: E8 B3 44 00 00 call 100064E4
10002031: 8B 54 24 18 mov edx,dword ptr [esp+18h]
10002035: 6A 0A push 0Ah
10002037: 8B E8 mov ebp,eax
10002039: 68 00 01 00 00 push 100h
1000203E: 55 push ebp
1000203F: 52 push edx
10002040: E8 6D 48 00 00 call 100068B2
10002045: 83 C4 14 add esp,14h
10002048: 8B C5 mov eax,ebp
1000204A: 8D 4C 24 50 lea ecx,[esp+50h]
1000204E: 8B D7 mov edx,edi
10002050: E8 CB F8 FF FF call 10001920
10002055: 8B D8 mov ebx,eax
10002057: 81 FF 09 00 02 80 cmp edi,80020009h
1000205D: 75 27 jne 10002086
1000205F: 8B 7C 24 6C mov edi,dword ptr [esp+6Ch]
10002063: 85 FF test edi,edi
10002065: 75 1F jne 10002086
10002067: 66 8B 44 24 50 mov ax,word ptr [esp+50h]
1000206C: B9 00 FE 00 00 mov ecx,0FE00h
10002071: 66 3B C1 cmp ax,cx
10002074: 72 07 jb 1000207D
10002076: BF FF FF 04 80 mov edi,8004FFFFh
1000207B: EB 09 jmp 10002086
1000207D: 0F B7 F8 movzx edi,ax
10002080: 81 EF 00 FE FB 7F sub edi,7FFBFE00h
10002086: 57 push edi
10002087: 53 push ebx
10002088: 56 push esi
10002089: E8 E2 23 00 00 call 10004470
1000208E: 8B 44 24 1C mov eax,dword ptr [esp+1Ch]
10002092: 83 C4 0C add esp,0Ch
10002095: 85 C0 test eax,eax
10002097: 74 07 je 100020A0
10002099: 50 push eax
1000209A: FF 15 98 31 01 10 call dword ptr ds:[10013198h]
100020A0: 85 DB test ebx,ebx
100020A2: 74 09 je 100020AD
100020A4: 53 push ebx
100020A5: E8 6A 3C 00 00 call 10005D14
100020AA: 83 C4 04 add esp,4
100020AD: 85 ED test ebp,ebp
100020AF: 74 09 je 100020BA
100020B1: 55 push ebp
100020B2: E8 5D 3C 00 00 call 10005D14
100020B7: 83 C4 04 add esp,4
100020BA: 33 C0 xor eax,eax
100020BC: EB 62 jmp 10002120
100020BE: 8B 2D 60 31 01 10 mov ebp,dword ptr ds:[10013160h]
100020C4: 85 DB test ebx,ebx
100020C6: 74 30 je 100020F8
100020C8: 8D 7B FF lea edi,[ebx-1]
100020CB: 85 FF test edi,edi
100020CD: 78 29 js 100020F8
100020CF: 8B 5C 24 10 mov ebx,dword ptr [esp+10h]
100020D3: 53 push ebx
100020D4: 56 push esi
100020D5: E8 56 37 00 00 call 10005830
100020DA: 8B 16 mov edx,dword ptr [esi]
100020DC: 8B 8A B8 02 00 00 mov ecx,dword ptr [edx+000002B8h]
100020E2: 83 C4 08 add esp,8
100020E5: 50 push eax
100020E6: 8B 44 24 24 mov eax,dword ptr [esp+24h]
100020EA: 57 push edi
100020EB: 50 push eax
100020EC: 56 push esi
100020ED: FF D1 call ecx
100020EF: 53 push ebx
100020F0: FF D5 call ebp
100020F2: 83 C3 10 add ebx,10h
100020F5: 4F dec edi
100020F6: 79 DB jns 100020D3
100020F8: 8B 44 24 10 mov eax,dword ptr [esp+10h]
100020FC: 85 C0 test eax,eax
100020FE: 74 07 je 10002107
10002100: 50 push eax
10002101: FF 15 98 31 01 10 call dword ptr ds:[10013198h]
10002107: 8D 54 24 40 lea edx,[esp+40h]
1000210B: 52 push edx
1000210C: 56 push esi
1000210D: E8 1E 37 00 00 call 10005830
10002112: 8B F0 mov esi,eax
10002114: 83 C4 08 add esp,8
10002117: 8D 44 24 40 lea eax,[esp+40h]
1000211B: 50 push eax
1000211C: FF D5 call ebp
1000211E: 8B C6 mov eax,esi
10002120: 5B pop ebx
10002121: 8B 8C 24 6C 04 00 mov ecx,dword ptr [esp+0000046Ch]
00
10002128: 5F pop edi
10002129: 5E pop esi
1000212A: 5D pop ebp
1000212B: 33 CC xor ecx,esp
1000212D: E8 3E 3C 00 00 call 10005D70
10002132: 81 C4 64 04 00 00 add esp,464h
10002138: C2 24 00 ret 24h
1000213B: 90 nop
1000213C: 11 1F adc dword ptr [edi],ebx
1000213E: 00 10 add byte ptr [eax],dl
10002140: 21 1F and dword ptr [edi],ebx
10002142: 00 10 add byte ptr [eax],dl
10002144: 3D 1F 00 10 00 cmp eax,10001Fh
10002149: 00 00 add byte ptr [eax],al
1000214B: 01 02 add dword ptr [edx],eax
1000214D: 02 02 add al,byte ptr [edx]
1000214F: 01 55 8D add dword ptr [ebp-73h],edx
10002152: AC lods byte ptr [esi]
10002153: 24 5C and al,5Ch
10002155: FC cld
10002156: FF
10002157: FF 81 EC 24 04 00 inc dword ptr [ecx+000424ECh]
1000215D: 00 A1 84 80 01 10 add byte ptr [ecx+10018084h],ah
10002163: 33 C5 xor eax,ebp
10002165: 89 85 A0 03 00 00 mov dword ptr [ebp+000003A0h],eax
1000216B: 8B 8D B4 03 00 00 mov ecx,dword ptr [ebp+000003B4h]
10002171: 8B 85 BC 03 00 00 mov eax,dword ptr [ebp+000003BCh]
10002177: 53 push ebx
10002178: 56 push esi
10002179: 8B B5 AC 03 00 00 mov esi,dword ptr [ebp+000003ACh]
1000217F: 57 push edi
10002180: 89 4D 8C mov dword ptr [ebp-74h],ecx
10002183: 89 45 88 mov dword ptr [ebp-78h],eax
10002186: 85 C9 test ecx,ecx
10002188: 0F 84 AA 01 00 00 je 10002338
1000218E: 8B 0E mov ecx,dword ptr [esi]
10002190: 8B 91 AC 02 00 00 mov edx,dword ptr [ecx+000002ACh]
10002196: 50 push eax
10002197: 56 push esi
10002198: FF D2 call edx
1000219A: 8B F8 mov edi,eax
1000219C: 8D 1C BD 00 00 00 lea ebx,[edi*4+00000000h]
00
100021A3: 53 push ebx
100021A4: 89 7D 80 mov dword ptr [ebp-80h],edi
100021A7: FF 15 94 31 01 10 call dword ptr ds:[10013194h]
100021AD: 53 push ebx
100021AE: 89 45 90 mov dword ptr [ebp-70h],eax
100021B1: FF 15 94 31 01 10 call dword ptr ds:[10013194h]
100021B7: 33 DB xor ebx,ebx
100021B9: 89 45 94 mov dword ptr [ebp-6Ch],eax
100021BC: 89 5D 9C mov dword ptr [ebp-64h],ebx
100021BF: 85 FF test edi,edi
100021C1: 0F 8E B6 00 00 00 jle 1000227D
100021C7: EB 07 jmp 100021D0
100021C9: 8D A4 24 00 00 00 lea esp,[esp+00000000h]
00
100021D0: 8B 4D 88 mov ecx,dword ptr [ebp-78h]
100021D3: 8B 06 mov eax,dword ptr [esi]
100021D5: 8B 90 B4 02 00 00 mov edx,dword ptr [eax+000002B4h]
100021DB: 53 push ebx
100021DC: 51 push ecx
100021DD: 56 push esi
100021DE: FF D2 call edx
100021E0: 8B 0E mov ecx,dword ptr [esi]
100021E2: 8B 91 A4 02 00 00 mov edx,dword ptr [ecx+000002A4h]
100021E8: 6A 00 push 0
100021EA: 50 push eax
100021EB: 56 push esi
100021EC: 89 45 98 mov dword ptr [ebp-68h],eax
100021EF: FF D2 call edx
100021F1: 89 45 84 mov dword ptr [ebp-7Ch],eax
100021F4: 85 C0 test eax,eax
100021F6: 75 05 jne 100021FD
100021F8: 89 45 9C mov dword ptr [ebp-64h],eax
100021FB: EB 4F jmp 1000224C
100021FD: 50 push eax
100021FE: FF 15 8C 30 01 10 call dword ptr ds:[1001308Ch]
10002204: 8D 78 01 lea edi,[eax+1]
10002207: 81 FF FF FF FF 3F cmp edi,3FFFFFFFh
1000220D: 7F 32 jg 10002241
1000220F: 8D 04 3F lea eax,[edi+edi]
10002212: E8 69 3B 00 00 call 10005D80
10002217: 8B DC mov ebx,esp
10002219: 85 DB test ebx,ebx
1000221B: 74 21 je 1000223E
1000221D: 8B 4D 84 mov ecx,dword ptr [ebp-7Ch]
10002220: 57 push edi
10002221: 53 push ebx
10002222: 6A FF push 0FFFFFFFFh
10002224: 33 C0 xor eax,eax
10002226: 51 push ecx
10002227: 50 push eax
10002228: 6A 03 push 3
1000222A: 66 89 03 mov word ptr [ebx],ax
1000222D: FF 15 88 30 01 10 call dword ptr ds:[10013088h]
10002233: F7 D8 neg eax
10002235: 1B C0 sbb eax,eax
10002237: 23 C3 and eax,ebx
10002239: 8B 5D 9C mov ebx,dword ptr [ebp-64h]
1000223C: EB 05 jmp 10002243
1000223E: 8B 5D 9C mov ebx,dword ptr [ebp-64h]
10002241: 33 C0 xor eax,eax
10002243: 8B 7D 80 mov edi,dword ptr [ebp-80h]
10002246: 89 45 9C mov dword ptr [ebp-64h],eax
10002249: 8B 45 84 mov eax,dword ptr [ebp-7Ch]
1000224C: 8B 16 mov edx,dword ptr [esi]
1000224E: 8B 8A A8 02 00 00 mov ecx,dword ptr [edx+000002A8h]
10002254: 50 push eax
10002255: 8B 45 98 mov eax,dword ptr [ebp-68h]
10002258: 50 push eax
10002259: 56 push esi
1000225A: FF D1 call ecx
1000225C: 8B 55 9C mov edx,dword ptr [ebp-64h]
1000225F: 8B 45 90 mov eax,dword ptr [ebp-70h]
10002262: 89 14 98 mov dword ptr [eax+ebx*4],edx
10002265: 8B 55 98 mov edx,dword ptr [ebp-68h]
10002268: 8B 0E mov ecx,dword ptr [esi]
1000226A: 8B 41 5C mov eax,dword ptr [ecx+5Ch]
1000226D: 52 push edx
1000226E: 56 push esi
1000226F: FF D0 call eax
10002271: 43 inc ebx
10002272: 89 5D 9C mov dword ptr [ebp-64h],ebx
10002275: 3B DF cmp ebx,edi
10002277: 0F 8C 53 FF FF FF jl 100021D0
1000227D: 8B 55 94 mov edx,dword ptr [ebp-6Ch]
10002280: 8B 5D 90 mov ebx,dword ptr [ebp-70h]
10002283: 8B 45 8C mov eax,dword ptr [ebp-74h]
10002286: 8B 08 mov ecx,dword ptr [eax]
10002288: 52 push edx
10002289: 8B 95 B8 03 00 00 mov edx,dword ptr [ebp+000003B8h]
1000228F: 52 push edx
10002290: 57 push edi
10002291: 53 push ebx
10002292: 68 98 40 01 10 push 10014098h
10002297: 50 push eax
10002298: 8B 41 14 mov eax,dword ptr [ecx+14h]
1000229B: FF D0 call eax
1000229D: 89 45 98 mov dword ptr [ebp-68h],eax
100022A0: 85 C0 test eax,eax
100022A2: 0F 89 94 00 00 00 jns 1000233C
100022A8: 53 push ebx
100022A9: 8B 1D 98 31 01 10 mov ebx,dword ptr ds:[10013198h]
100022AF: FF D3 call ebx
100022B1: 8B 4D 94 mov ecx,dword ptr [ebp-6Ch]
100022B4: 51 push ecx
100022B5: FF D3 call ebx
100022B7: 68 94 35 01 10 push 10013594h
100022BC: 8D 55 A0 lea edx,[ebp-60h]
100022BF: 68 00 04 00 00 push 400h
100022C4: 52 push edx
100022C5: E8 B4 46 00 00 call 1000697E
100022CA: 83 C4 0C add esp,0Ch
100022CD: 33 DB xor ebx,ebx
100022CF: 85 FF test edi,edi
100022D1: 7E 54 jle 10002327
100022D3: 8B 4D 88 mov ecx,dword ptr [ebp-78h]
100022D6: 8B 06 mov eax,dword ptr [esi]
100022D8: 8B 90 B4 02 00 00 mov edx,dword ptr [eax+000002B4h]
100022DE: 53 push ebx
100022DF: 51 push ecx
100022E0: 56 push esi
100022E1: FF D2 call edx
100022E3: 8B F8 mov edi,eax
100022E5: 8B 06 mov eax,dword ptr [esi]
100022E7: 8B 88 A4 02 00 00 mov ecx,dword ptr [eax+000002A4h]
100022ED: 6A 00 push 0
100022EF: 57 push edi
100022F0: 56 push esi
100022F1: FF D1 call ecx
100022F3: 50 push eax
100022F4: 8D 55 A0 lea edx,[ebp-60h]
100022F7: 68 00 04 00 00 push 400h
100022FC: 52 push edx
100022FD: 89 45 8C mov dword ptr [ebp-74h],eax
10002300: E8 D8 46 00 00 call 100069DD
10002305: 8B 4D 8C mov ecx,dword ptr [ebp-74h]
10002308: 8B 06 mov eax,dword ptr [esi]
1000230A: 8B 90 A8 02 00 00 mov edx,dword ptr [eax+000002A8h]
10002310: 83 C4 0C add esp,0Ch
10002313: 51 push ecx
10002314: 57 push edi
10002315: 56 push esi
10002316: FF D2 call edx
10002318: 8B 06 mov eax,dword ptr [esi]
1000231A: 8B 48 5C mov ecx,dword ptr [eax+5Ch]
1000231D: 57 push edi
1000231E: 56 push esi
1000231F: FF D1 call ecx
10002321: 43 inc ebx
10002322: 3B 5D 80 cmp ebx,dword ptr [ebp-80h]
10002325: 7C AC jl 100022D3
10002327: 8B 55 98 mov edx,dword ptr [ebp-68h]
1000232A: 52 push edx
1000232B: 8D 45 A0 lea eax,[ebp-60h]
1000232E: 50 push eax
1000232F: 56 push esi
10002330: E8 CB 20 00 00 call 10004400
10002335: 83 C4 0C add esp,0Ch
10002338: 33 C0 xor eax,eax
1000233A: EB 35 jmp 10002371
1000233C: 8B 0E mov ecx,dword ptr [esi]
1000233E: 8B 91 CC 02 00 00 mov edx,dword ptr [ecx+000002CCh]
10002344: 57 push edi
10002345: 56 push esi
10002346: FF D2 call edx
10002348: 8B 4D 94 mov ecx,dword ptr [ebp-6Ch]
1000234B: 51 push ecx
1000234C: 57 push edi
1000234D: 8B D8 mov ebx,eax
1000234F: 8B 06 mov eax,dword ptr [esi]
10002351: 8B 90 4C 03 00 00 mov edx,dword ptr [eax+0000034Ch]
10002357: 6A 00 push 0
10002359: 53 push ebx
1000235A: 56 push esi
1000235B: FF D2 call edx
1000235D: 8B 45 90 mov eax,dword ptr [ebp-70h]
10002360: 8B 35 98 31 01 10 mov esi,dword ptr ds:[10013198h]
10002366: 50 push eax
10002367: FF D6 call esi
10002369: 8B 4D 94 mov ecx,dword ptr [ebp-6Ch]
1000236C: 51 push ecx
1000236D: FF D6 call esi
1000236F: 8B C3 mov eax,ebx
10002371: 8D A5 74 FF FF FF lea esp,[ebp+FFFFFF74h]
10002377: 5F pop edi
10002378: 5E pop esi
10002379: 5B pop ebx
1000237A: 8B 8D A0 03 00 00 mov ecx,dword ptr [ebp+000003A0h]
10002380: 33 CD xor ecx,ebp
10002382: E8 E9 39 00 00 call 10005D70
10002387: 8D A5 A4 03 00 00 lea esp,[ebp+000003A4h]
1000238D: 5D pop ebp
1000238E: C2 14 00 ret 14h
10002391: CC int 3
10002392: CC int 3
10002393: CC int 3
10002394: CC int 3
10002395: CC int 3
10002396: CC int 3
10002397: CC int 3
10002398: CC int 3
10002399: CC int 3
1000239A: CC int 3
1000239B: CC int 3
1000239C: CC int 3
1000239D: CC int 3
1000239E: CC int 3
1000239F: CC int 3
100023A0: 8B 4C 24 08 mov ecx,dword ptr [esp+8]
100023A4: 8B 54 24 04 mov edx,dword ptr [esp+4]
100023A8: B8 10 00 00 00 mov eax,10h
100023AD: 56 push esi
100023AE: 8B FF mov edi,edi
100023B0: 8B 32 mov esi,dword ptr [edx]
100023B2: 3B 31 cmp esi,dword ptr [ecx]
100023B4: 75 1B jne 100023D1
100023B6: 83 E8 04 sub eax,4
100023B9: 83 C1 04 add ecx,4
100023BC: 83 C2 04 add edx,4
100023BF: 83 F8 04 cmp eax,4
100023C2: 73 EC jae 100023B0
100023C4: 33 C0 xor eax,eax
100023C6: 33 D2 xor edx,edx
100023C8: 85 C0 test eax,eax
100023CA: 0F 94 C2 sete dl
100023CD: 5E pop esi
100023CE: 8B C2 mov eax,edx
100023D0: C3 ret
100023D1: 0F B6 02 movzx eax,byte ptr [edx]
100023D4: 0F B6 31 movzx esi,byte ptr [ecx]
100023D7: 2B C6 sub eax,esi
100023D9: 75 22 jne 100023FD
100023DB: 0F B6 42 01 movzx eax,byte ptr [edx+1]
100023DF: 0F B6 71 01 movzx esi,byte ptr [ecx+1]
100023E3: 2B C6 sub eax,esi
100023E5: 75 16 jne 100023FD
100023E7: 0F B6 42 02 movzx eax,byte ptr [edx+2]
100023EB: 0F B6 71 02 movzx esi,byte ptr [ecx+2]
100023EF: 2B C6 sub eax,esi
100023F1: 75 0A jne 100023FD
100023F3: 0F B6 42 03 movzx eax,byte ptr [edx+3]
100023F7: 0F B6 49 03 movzx ecx,byte ptr [ecx+3]
100023FB: 2B C1 sub eax,ecx
100023FD: C1 F8 1F sar eax,1Fh
10002400: 83 C8 01 or eax,1
10002403: 33 D2 xor edx,edx
10002405: 85 C0 test eax,eax
10002407: 0F 94 C2 sete dl
1000240A: 5E pop esi
1000240B: 8B C2 mov eax,edx
1000240D: C3 ret
1000240E: CC int 3
1000240F: CC int 3
10002410: 56 push esi
10002411: 8B 74 24 08 mov esi,dword ptr [esp+8]
10002415: 85 F6 test esi,esi
10002417: 74 2F je 10002448
10002419: 8B 44 24 0C mov eax,dword ptr [esp+0Ch]
1000241D: 85 C0 test eax,eax
1000241F: 74 27 je 10002448
10002421: 8B 4C 24 10 mov ecx,dword ptr [esp+10h]
10002425: 8B 54 24 14 mov edx,dword ptr [esp+14h]
10002429: 6A 00 push 0
1000242B: 6A 00 push 0
1000242D: 51 push ecx
1000242E: 56 push esi
1000242F: 6A FF push 0FFFFFFFFh
10002431: 50 push eax
10002432: 6A 00 push 0
10002434: 52 push edx
10002435: C6 06 00 mov byte ptr [esi],0
10002438: FF 15 A0 30 01 10 call dword ptr ds:[100130A0h]
1000243E: F7 D8 neg eax
10002440: 1B C0 sbb eax,eax
10002442: 23 C6 and eax,esi
10002444: 5E pop esi
10002445: C2 10 00 ret 10h
10002448: 33 C0 xor eax,eax
1000244A: 5E pop esi
1000244B: C2 10 00 ret 10h
1000244E: CC int 3
1000244F: CC int 3
10002450: 8B C1 mov eax,ecx
10002452: C7 00 00 00 00 00 mov dword ptr [eax],0
10002458: C3 ret
10002459: CC int 3
1000245A: CC int 3
1000245B: CC int 3
1000245C: CC int 3
1000245D: CC int 3
1000245E: CC int 3
1000245F: CC int 3
10002460: 8B 01 mov eax,dword ptr [ecx]
10002462: 50 push eax
10002463: FF 15 70 31 01 10 call dword ptr ds:[10013170h]
10002469: C3 ret
1000246A: CC int 3
1000246B: CC int 3
1000246C: CC int 3
1000246D: CC int 3
1000246E: CC int 3
1000246F: CC int 3
10002470: 8B 44 24 08 mov eax,dword ptr [esp+8]
10002474: 8B 4C 24 14 mov ecx,dword ptr [esp+14h]
10002478: 83 EC 10 sub esp,10h
1000247B: 55 push ebp
1000247C: 0F B7 68 2C movzx ebp,word ptr [eax+2Ch]
10002480: 56 push esi
10002481: 57 push edi
10002482: 33 FF xor edi,edi
10002484: 89 29 mov dword ptr [ecx],ebp
10002486: 3B EF cmp ebp,edi
10002488: 75 0E jne 10002498
1000248A: 33 F6 xor esi,esi
1000248C: 33 C0 xor eax,eax
1000248E: 89 74 24 30 mov dword ptr [esp+30h],esi
10002492: 89 44 24 10 mov dword ptr [esp+10h],eax
10002496: EB 6E jmp 10002506
10002498: 33 C9 xor ecx,ecx
1000249A: 8B C5 mov eax,ebp
1000249C: BA 04 00 00 00 mov edx,4
100024A1: F7 E2 mul eax,edx
100024A3: 0F 90 C1 seto cl
100024A6: F7 D9 neg ecx
100024A8: 0B C8 or ecx,eax
100024AA: 33 C0 xor eax,eax
100024AC: 83 C1 04 add ecx,4
100024AF: 0F 92 C0 setb al
100024B2: F7 D8 neg eax
100024B4: 0B C1 or eax,ecx
100024B6: 50 push eax
100024B7: E8 28 40 00 00 call 100064E4
100024BC: 83 C4 04 add esp,4
100024BF: 3B C7 cmp eax,edi
100024C1: 0F 84 01 01 00 00 je 100025C8
100024C7: 68 60 24 00 10 push 10002460h
100024CC: 68 50 24 00 10 push 10002450h
100024D1: 55 push ebp
100024D2: 8D 70 04 lea esi,[eax+4]
100024D5: 6A 04 push 4
100024D7: 56 push esi
100024D8: 89 28 mov dword ptr [eax],ebp
100024DA: E8 A5 45 00 00 call 10006A84
100024DF: 89 74 24 30 mov dword ptr [esp+30h],esi
100024E3: 33 C9 xor ecx,ecx
100024E5: 8B C5 mov eax,ebp
100024E7: BA 04 00 00 00 mov edx,4
100024EC: F7 E2 mul eax,edx
100024EE: 0F 90 C1 seto cl
100024F1: F7 D9 neg ecx
100024F3: 0B C8 or ecx,eax
100024F5: 51 push ecx
100024F6: E8 E9 3F 00 00 call 100064E4
100024FB: 8B 74 24 34 mov esi,dword ptr [esp+34h]
100024FF: 83 C4 04 add esp,4
10002502: 89 44 24 10 mov dword ptr [esp+10h],eax
10002506: 89 7C 24 14 mov dword ptr [esp+14h],edi
1000250A: 3B EF cmp ebp,edi
1000250C: 0F 8E BF 00 00 00 jle 100025D1
10002512: 2B C6 sub eax,esi
10002514: 53 push ebx
10002515: 8B 5C 24 24 mov ebx,dword ptr [esp+24h]
10002519: 89 44 24 1C mov dword ptr [esp+1Ch],eax
1000251D: 8D 49 00 lea ecx,[ecx]
10002520: 8B 03 mov eax,dword ptr [ebx]
10002522: 8B 50 14 mov edx,dword ptr [eax+14h]
10002525: 8D 4C 24 10 lea ecx,[esp+10h]
10002529: 51 push ecx
1000252A: 57 push edi
1000252B: 53 push ebx
1000252C: FF D2 call edx
1000252E: 85 C0 test eax,eax
10002530: 78 6A js 1000259C
10002532: 8B 54 24 10 mov edx,dword ptr [esp+10h]
10002536: 8B 03 mov eax,dword ptr [ebx]
10002538: 6A 00 push 0
1000253A: 6A 00 push 0
1000253C: 6A 00 push 0
1000253E: 8D 4C 24 34 lea ecx,[esp+34h]
10002542: 51 push ecx
10002543: C7 44 24 38 00 00 mov dword ptr [esp+38h],0
00 00
1000254B: 8B 0A mov ecx,dword ptr [edx]
1000254D: 8B 50 30 mov edx,dword ptr [eax+30h]
10002550: 51 push ecx
10002551: 53 push ebx
10002552: FF D2 call edx
10002554: 85 C0 test eax,eax
10002556: 78 2C js 10002584
10002558: 8B 7C 24 28 mov edi,dword ptr [esp+28h]
1000255C: 8B 06 mov eax,dword ptr [esi]
1000255E: C7 44 24 28 00 00 mov dword ptr [esp+28h],0
00 00
10002566: 3B C7 cmp eax,edi
10002568: 74 09 je 10002573
1000256A: 50 push eax
1000256B: FF 15 70 31 01 10 call dword ptr ds:[10013170h]
10002571: 89 3E mov dword ptr [esi],edi
10002573: 8B 44 24 10 mov eax,dword ptr [esp+10h]
10002577: 8B 08 mov ecx,dword ptr [eax]
10002579: 8B 54 24 1C mov edx,dword ptr [esp+1Ch]
1000257D: 8B 7C 24 18 mov edi,dword ptr [esp+18h]
10002581: 89 0C 32 mov dword ptr [edx+esi],ecx
10002584: 8B 4C 24 10 mov ecx,dword ptr [esp+10h]
10002588: 8B 03 mov eax,dword ptr [ebx]
1000258A: 8B 50 50 mov edx,dword ptr [eax+50h]
1000258D: 51 push ecx
1000258E: 53 push ebx
1000258F: FF D2 call edx
10002591: 8B 44 24 28 mov eax,dword ptr [esp+28h]
10002595: 50 push eax
10002596: FF 15 70 31 01 10 call dword ptr ds:[10013170h]
1000259C: 47 inc edi
1000259D: 83 C6 04 add esi,4
100025A0: 89 7C 24 18 mov dword ptr [esp+18h],edi
100025A4: 3B FD cmp edi,ebp
100025A6: 0F 8C 74 FF FF FF jl 10002520
100025AC: 8B 4C 24 2C mov ecx,dword ptr [esp+2Ch]
100025B0: 8B 54 24 34 mov edx,dword ptr [esp+34h]
100025B4: 8B 44 24 30 mov eax,dword ptr [esp+30h]
100025B8: 5B pop ebx
100025B9: 5F pop edi
100025BA: 89 11 mov dword ptr [ecx],edx
100025BC: 8B 4C 24 0C mov ecx,dword ptr [esp+0Ch]
100025C0: 5E pop esi
100025C1: 89 08 mov dword ptr [eax],ecx
100025C3: 5D pop ebp
100025C4: 83 C4 10 add esp,10h
100025C7: C3 ret
100025C8: 89 7C 24 30 mov dword ptr [esp+30h],edi
100025CC: E9 12 FF FF FF jmp 100024E3
100025D1: 8B 54 24 28 mov edx,dword ptr [esp+28h]
100025D5: 8B 4C 24 2C mov ecx,dword ptr [esp+2Ch]
100025D9: 5F pop edi
100025DA: 89 32 mov dword ptr [edx],esi
100025DC: 5E pop esi
100025DD: 89 01 mov dword ptr [ecx],eax
100025DF: 5D pop ebp
100025E0: 83 C4 10 add esp,10h
100025E3: C3 ret
100025E4: CC int 3
100025E5: CC int 3
100025E6: CC int 3
100025E7: CC int 3
100025E8: CC int 3
100025E9: CC int 3
100025EA: CC int 3
100025EB: CC int 3
100025EC: CC int 3
100025ED: CC int 3
100025EE: CC int 3
100025EF: CC int 3
100025F0: 83 EC 10 sub esp,10h
100025F3: 53 push ebx
100025F4: 57 push edi
100025F5: 8B 7C 24 30 mov edi,dword ptr [esp+30h]
100025F9: 8B 07 mov eax,dword ptr [edi]
100025FB: 8B 50 0C mov edx,dword ptr [eax+0Ch]
100025FE: 8D 4C 24 08 lea ecx,[esp+8]
10002602: 51 push ecx
10002603: 57 push edi
10002604: FF D2 call edx
10002606: 8B 5C 24 1C mov ebx,dword ptr [esp+1Ch]
1000260A: 85 C0 test eax,eax
1000260C: 0F 88 EE 00 00 00 js 10002700
10002612: 8B 4C 24 08 mov ecx,dword ptr [esp+8]
10002616: 56 push esi
10002617: 33 C0 xor eax,eax
10002619: 33 F6 xor esi,esi
1000261B: 66 3B 41 30 cmp ax,word ptr [ecx+30h]
1000261F: 0F 83 CD 00 00 00 jae 100026F2
10002625: 8B 17 mov edx,dword ptr [edi]
10002627: 8B 4A 24 mov ecx,dword ptr [edx+24h]
1000262A: 8D 44 24 14 lea eax,[esp+14h]
1000262E: 50 push eax
1000262F: 56 push esi
10002630: 57 push edi
10002631: FF D1 call ecx
10002633: 85 C0 test eax,eax
10002635: 78 0C js 10002643
10002637: 8B 54 24 14 mov edx,dword ptr [esp+14h]
1000263B: 83 E2 07 and edx,7
1000263E: 80 FA 03 cmp dl,3
10002641: 74 12 je 10002655
10002643: 8B 44 24 0C mov eax,dword ptr [esp+0Ch]
10002647: 0F B7 48 30 movzx ecx,word ptr [eax+30h]
1000264B: 46 inc esi
1000264C: 3B F1 cmp esi,ecx
1000264E: 72 D5 jb 10002625
10002650: E9 9D 00 00 00 jmp 100026F2
10002655: 8B 17 mov edx,dword ptr [edi]
10002657: 8B 4A 20 mov ecx,dword ptr [edx+20h]
1000265A: 8D 44 24 18 lea eax,[esp+18h]
1000265E: 50 push eax
1000265F: 56 push esi
10002660: 57 push edi
10002661: C7 44 24 40 00 00 mov dword ptr [esp+40h],0
00 00
10002669: FF D1 call ecx
1000266B: 85 C0 test eax,eax
1000266D: 0F 88 7F 00 00 00 js 100026F2
10002673: 8B 4C 24 18 mov ecx,dword ptr [esp+18h]
10002677: 8B 17 mov edx,dword ptr [edi]
10002679: 8B 52 38 mov edx,dword ptr [edx+38h]
1000267C: 8D 44 24 34 lea eax,[esp+34h]
10002680: 50 push eax
10002681: 51 push ecx
10002682: 57 push edi
10002683: FF D2 call edx
10002685: 85 C0 test eax,eax
10002687: 78 69 js 100026F2
10002689: 8B 44 24 34 mov eax,dword ptr [esp+34h]
1000268D: 8B 08 mov ecx,dword ptr [eax]
1000268F: 8D 54 24 10 lea edx,[esp+10h]
10002693: 52 push edx
10002694: 50 push eax
10002695: 8B 41 0C mov eax,dword ptr [ecx+0Ch]
10002698: FF D0 call eax
1000269A: 85 C0 test eax,eax
1000269C: 78 48 js 100026E6
1000269E: 8B 4C 24 2C mov ecx,dword ptr [esp+2Ch]
100026A2: 8B 54 24 28 mov edx,dword ptr [esp+28h]
100026A6: 8B 44 24 24 mov eax,dword ptr [esp+24h]
100026AA: 51 push ecx
100026AB: 8B 4C 24 14 mov ecx,dword ptr [esp+14h]
100026AF: 52 push edx
100026B0: 8B 54 24 3C mov edx,dword ptr [esp+3Ch]
100026B4: 50 push eax
100026B5: 51 push ecx
100026B6: 52 push edx
100026B7: E8 B4 FD FF FF call 10002470
100026BC: 8B 44 24 24 mov eax,dword ptr [esp+24h]
100026C0: 8B 08 mov ecx,dword ptr [eax]
100026C2: 89 0B mov dword ptr [ebx],ecx
100026C4: 8B 50 04 mov edx,dword ptr [eax+4]
100026C7: 89 53 04 mov dword ptr [ebx+4],edx
100026CA: 8B 48 08 mov ecx,dword ptr [eax+8]
100026CD: 89 4B 08 mov dword ptr [ebx+8],ecx
100026D0: 8B 50 0C mov edx,dword ptr [eax+0Ch]
100026D3: 8B 4C 24 48 mov ecx,dword ptr [esp+48h]
100026D7: 83 C4 14 add esp,14h
100026DA: 89 53 0C mov dword ptr [ebx+0Ch],edx
100026DD: 8B 11 mov edx,dword ptr [ecx]
100026DF: 50 push eax
100026E0: 8B 42 4C mov eax,dword ptr [edx+4Ch]
100026E3: 51 push ecx
100026E4: FF D0 call eax
100026E6: 8B 44 24 34 mov eax,dword ptr [esp+34h]
100026EA: 8B 08 mov ecx,dword ptr [eax]
100026EC: 8B 51 08 mov edx,dword ptr [ecx+8]
100026EF: 50 push eax
100026F0: FF D2 call edx
100026F2: 8B 4C 24 0C mov ecx,dword ptr [esp+0Ch]
100026F6: 8B 07 mov eax,dword ptr [edi]
100026F8: 8B 50 4C mov edx,dword ptr [eax+4Ch]
100026FB: 51 push ecx
100026FC: 57 push edi
100026FD: FF D2 call edx
100026FF: 5E pop esi
10002700: 8B 07 mov eax,dword ptr [edi]
10002702: 8B 48 08 mov ecx,dword ptr [eax+8]
10002705: 57 push edi
10002706: FF D1 call ecx
10002708: 68 98 40 01 10 push 10014098h
1000270D: 53 push ebx
1000270E: E8 8D FC FF FF call 100023A0
10002713: 83 C4 08 add esp,8
10002716: F7 D8 neg eax
10002718: 1B C0 sbb eax,eax
1000271A: 5F pop edi
1000271B: 40 inc eax
1000271C: 5B pop ebx
1000271D: 83 C4 10 add esp,10h
10002720: C3 ret
10002721: CC int 3
10002722: CC int 3
10002723: CC int 3
10002724: CC int 3
10002725: CC int 3
10002726: CC int 3
10002727: CC int 3
10002728: CC int 3
10002729: CC int 3
1000272A: CC int 3
1000272B: CC int 3
1000272C: CC int 3
1000272D: CC int 3
1000272E: CC int 3
1000272F: CC int 3
10002730: 83 EC 1C sub esp,1Ch
10002733: A1 84 80 01 10 mov eax,dword ptr ds:[10018084h]
10002738: 33 C4 xor eax,esp
1000273A: 89 44 24 18 mov dword ptr [esp+18h],eax
1000273E: 8B 44 24 24 mov eax,dword ptr [esp+24h]
10002742: 56 push esi
10002743: 8B 74 24 2C mov esi,dword ptr [esp+2Ch]
10002747: 57 push edi
10002748: 8B 7C 24 28 mov edi,dword ptr [esp+28h]
1000274C: 8D 4C 24 10 lea ecx,[esp+10h]
10002750: 51 push ecx
10002751: 50 push eax
10002752: 89 44 24 14 mov dword ptr [esp+14h],eax
10002756: FF 15 A0 31 01 10 call dword ptr ds:[100131A0h]
1000275C: 85 C0 test eax,eax
1000275E: 79 13 jns 10002773
10002760: 5F pop edi
10002761: 33 C0 xor eax,eax
10002763: 5E pop esi
10002764: 8B 4C 24 18 mov ecx,dword ptr [esp+18h]
10002768: 33 CC xor ecx,esp
1000276A: E8 01 36 00 00 call 10005D70
1000276F: 83 C4 1C add esp,1Ch
10002772: C3 ret
10002773: 8D 54 24 0C lea edx,[esp+0Ch]
10002777: 52 push edx
10002778: 8D 44 24 14 lea eax,[esp+14h]
1000277C: 50 push eax
1000277D: FF 15 B8 31 01 10 call dword ptr ds:[100131B8h]
10002783: 85 C0 test eax,eax
10002785: 78 D9 js 10002760
10002787: 8D 4C 24 08 lea ecx,[esp+8]
1000278B: 51 push ecx
1000278C: 57 push edi
1000278D: FF 15 58 31 01 10 call dword ptr ds:[10013158h]
10002793: 85 C0 test eax,eax
10002795: 78 C9 js 10002760
10002797: 8B 44 24 08 mov eax,dword ptr [esp+8]
1000279B: 8B 10 mov edx,dword ptr [eax]
1000279D: 8B 52 18 mov edx,dword ptr [edx+18h]
100027A0: 56 push esi
100027A1: 8D 4C 24 14 lea ecx,[esp+14h]
100027A5: 51 push ecx
100027A6: 50 push eax
100027A7: FF D2 call edx
100027A9: 8B 44 24 08 mov eax,dword ptr [esp+8]
100027AD: 8B 08 mov ecx,dword ptr [eax]
100027AF: 8B 51 08 mov edx,dword ptr [ecx+8]
100027B2: 50 push eax
100027B3: FF D2 call edx
100027B5: 8B 4C 24 20 mov ecx,dword ptr [esp+20h]
100027B9: 5F pop edi
100027BA: 5E pop esi
100027BB: 33 CC xor ecx,esp
100027BD: B8 01 00 00 00 mov eax,1
100027C2: E8 A9 35 00 00 call 10005D70
100027C7: 83 C4 1C add esp,1Ch
100027CA: C3 ret
100027CB: CC int 3
100027CC: CC int 3
100027CD: CC int 3
100027CE: CC int 3
100027CF: CC int 3
100027D0: 51 push ecx
100027D1: 8B 4C 24 08 mov ecx,dword ptr [esp+8]
100027D5: 56 push esi
100027D6: 8B 74 24 20 mov esi,dword ptr [esp+20h]
100027DA: 8D 44 24 04 lea eax,[esp+4]
100027DE: 50 push eax
100027DF: 56 push esi
100027E0: 51 push ecx
100027E1: C7 44 24 10 00 00 mov dword ptr [esp+10h],0
00 00
100027E9: E8 42 FF FF FF call 10002730
100027EE: 83 C4 0C add esp,0Ch
100027F1: 85 C0 test eax,eax
100027F3: 74 39 je 1000282E
100027F5: 83 7C 24 04 00 cmp dword ptr [esp+4],0
100027FA: 75 0D jne 10002809
100027FC: 68 08 36 01 10 push 10013608h
10002801: E8 41 39 00 00 call 10006147
10002806: 83 C4 04 add esp,4
10002809: 8B 54 24 04 mov edx,dword ptr [esp+4]
1000280D: 8B 44 24 1C mov eax,dword ptr [esp+1Ch]
10002811: 8B 4C 24 18 mov ecx,dword ptr [esp+18h]
10002815: 52 push edx
10002816: 8B 54 24 18 mov edx,dword ptr [esp+18h]
1000281A: 56 push esi
1000281B: 50 push eax
1000281C: 8B 44 24 1C mov eax,dword ptr [esp+1Ch]
10002820: 51 push ecx
10002821: 52 push edx
10002822: 50 push eax
10002823: E8 C8 FD FF FF call 100025F0
10002828: 83 C4 18 add esp,18h
1000282B: 5E pop esi
1000282C: 59 pop ecx
1000282D: C3 ret
1000282E: 68 D0 35 01 10 push 100135D0h
10002833: E8 0F 39 00 00 call 10006147
10002838: 83 C4 04 add esp,4
1000283B: 33 C0 xor eax,eax
1000283D: 5E pop esi
1000283E: 59 pop ecx
1000283F: C3 ret
10002840: 83 EC 1C sub esp,1Ch
10002843: 56 push esi
10002844: 8B 35 84 31 01 10 mov esi,dword ptr ds:[10013184h]
1000284A: 6A 01 push 1
1000284C: 6A 00 push 0
1000284E: 6A 00 push 0
10002850: 6A 00 push 0
10002852: 8D 44 24 14 lea eax,[esp+14h]
10002856: 50 push eax
10002857: FF D6 call esi
10002859: 85 C0 test eax,eax
1000285B: 74 36 je 10002893
1000285D: 53 push ebx
1000285E: 8B 1D 80 31 01 10 mov ebx,dword ptr ds:[10013180h]
10002864: 57 push edi
10002865: 8B 3D 7C 31 01 10 mov edi,dword ptr ds:[1001317Ch]
1000286B: EB 03 jmp 10002870
1000286D: 8D 49 00 lea ecx,[ecx]
10002870: 8D 4C 24 0C lea ecx,[esp+0Ch]
10002874: 51 push ecx
10002875: FF D7 call edi
10002877: 8D 54 24 0C lea edx,[esp+0Ch]
1000287B: 52 push edx
1000287C: FF D3 call ebx
1000287E: 6A 01 push 1
10002880: 6A 00 push 0
10002882: 6A 00 push 0
10002884: 6A 00 push 0
10002886: 8D 44 24 1C lea eax,[esp+1Ch]
1000288A: 50 push eax
1000288B: FF D6 call esi
1000288D: 85 C0 test eax,eax
1000288F: 75 DF jne 10002870
10002891: 5F pop edi
10002892: 5B pop ebx
10002893: 5E pop esi
10002894: 83 C4 1C add esp,1Ch
10002897: C2 08 00 ret 8
1000289A: CC int 3
1000289B: CC int 3
1000289C: CC int 3
1000289D: CC int 3
1000289E: CC int 3
1000289F: CC int 3
100028A0: 56 push esi
100028A1: 8B F1 mov esi,ecx
100028A3: 83 3E 00 cmp dword ptr [esi],0
100028A6: 74 14 je 100028BC
100028A8: 8B 06 mov eax,dword ptr [esi]
100028AA: 8B 08 mov ecx,dword ptr [eax]
100028AC: 50 push eax
100028AD: 89 0E mov dword ptr [esi],ecx
100028AF: E8 96 41 00 00 call 10006A4A
100028B4: 83 C4 04 add esp,4
100028B7: 83 3E 00 cmp dword ptr [esi],0
100028BA: 75 EC jne 100028A8
100028BC: 5E pop esi
100028BD: C3 ret
100028BE: CC int 3
100028BF: CC int 3
100028C0: 53 push ebx
100028C1: 8B 5C 24 08 mov ebx,dword ptr [esp+8]
100028C5: 85 DB test ebx,ebx
100028C7: 74 5F je 10002928
100028C9: 55 push ebp
100028CA: 8B 2D 88 30 01 10 mov ebp,dword ptr ds:[10013088h]
100028D0: 56 push esi
100028D1: 57 push edi
100028D2: 6A 00 push 0
100028D4: 6A 00 push 0
100028D6: 6A FF push 0FFFFFFFFh
100028D8: 53 push ebx
100028D9: 6A 00 push 0
100028DB: 6A 03 push 3
100028DD: C7 44 24 2C 00 00 mov dword ptr [esp+2Ch],0
00 00
100028E5: FF D5 call ebp
100028E7: 8B F0 mov esi,eax
100028E9: 8D 46 FF lea eax,[esi-1]
100028EC: 50 push eax
100028ED: 6A 00 push 0
100028EF: FF 15 54 31 01 10 call dword ptr ds:[10013154h]
100028F5: 8B F8 mov edi,eax
100028F7: 85 FF test edi,edi
100028F9: 74 26 je 10002921
100028FB: 56 push esi
100028FC: 57 push edi
100028FD: 6A FF push 0FFFFFFFFh
100028FF: 53 push ebx
10002900: 6A 00 push 0
10002902: 6A 03 push 3
10002904: FF D5 call ebp
10002906: 3B C6 cmp eax,esi
10002908: 74 17 je 10002921
1000290A: 57 push edi
1000290B: FF 15 70 31 01 10 call dword ptr ds:[10013170h]
10002911: 8D 4C 24 14 lea ecx,[esp+14h]
10002915: E8 86 FF FF FF call 100028A0
1000291A: 5F pop edi
1000291B: 5E pop esi
1000291C: 5D pop ebp
1000291D: 33 C0 xor eax,eax
1000291F: 5B pop ebx
10002920: C3 ret
10002921: 8B C7 mov eax,edi
10002923: 5F pop edi
10002924: 5E pop esi
10002925: 5D pop ebp
10002926: 5B pop ebx
10002927: C3 ret
10002928: 33 C0 xor eax,eax
1000292A: 5B pop ebx
1000292B: C3 ret
1000292C: CC int 3
1000292D: CC int 3
1000292E: CC int 3
1000292F: CC int 3
10002930: 8B 01 mov eax,dword ptr [ecx]
10002932: 85 C0 test eax,eax
10002934: 74 08 je 1000293E
10002936: 8B 08 mov ecx,dword ptr [eax]
10002938: 8B 51 08 mov edx,dword ptr [ecx+8]
1000293B: 50 push eax
1000293C: FF D2 call edx
1000293E: C3 ret
1000293F: CC int 3
10002940: 55 push ebp
10002941: 8B EC mov ebp,esp
10002943: 81 EC 80 00 00 00 sub esp,80h
10002949: A1 84 80 01 10 mov eax,dword ptr ds:[10018084h]
1000294E: 33 C5 xor eax,ebp
10002950: 89 45 FC mov dword ptr [ebp-4],eax
10002953: 8B 45 08 mov eax,dword ptr [ebp+8]
10002956: 8B 4D 0C mov ecx,dword ptr [ebp+0Ch]
10002959: 53 push ebx
1000295A: 56 push esi
1000295B: 57 push edi
1000295C: 8D 55 B8 lea edx,[ebp-48h]
1000295F: 52 push edx
10002960: 50 push eax
10002961: 89 45 A0 mov dword ptr [ebp-60h],eax
10002964: 89 4D 88 mov dword ptr [ebp-78h],ecx
10002967: FF 15 A0 31 01 10 call dword ptr ds:[100131A0h]
1000296D: 85 C0 test eax,eax
1000296F: 79 07 jns 10002978
10002971: 33 C0 xor eax,eax
10002973: E9 8C 01 00 00 jmp 10002B04
10002978: 8D 45 A0 lea eax,[ebp-60h]
1000297B: 50 push eax
1000297C: 8D 4D B8 lea ecx,[ebp-48h]
1000297F: 51 push ecx
10002980: FF 15 B8 31 01 10 call dword ptr ds:[100131B8h]
10002986: 85 C0 test eax,eax
10002988: 78 E7 js 10002971
1000298A: 8B 3D 08 30 01 10 mov edi,dword ptr ds:[10013008h]
10002990: 8D 55 98 lea edx,[ebp-68h]
10002993: 52 push edx
10002994: 68 19 00 02 00 push 20019h
10002999: 6A 00 push 0
1000299B: 68 44 36 01 10 push 10013644h
100029A0: 68 02 00 00 80 push 80000002h
100029A5: C7 45 84 32 00 00 mov dword ptr [ebp-7Ch],32h
00
100029AC: FF D7 call edi
100029AE: 85 C0 test eax,eax
100029B0: 75 BF jne 10002971
100029B2: 8B 4D 98 mov ecx,dword ptr [ebp-68h]
100029B5: 8D 45 9C lea eax,[ebp-64h]
100029B8: 50 push eax
100029B9: 68 19 00 02 00 push 20019h
100029BE: 6A 00 push 0
100029C0: 68 3C 36 01 10 push 1001363Ch
100029C5: 51 push ecx
100029C6: FF D7 call edi
100029C8: 8B F0 mov esi,eax
100029CA: 85 F6 test esi,esi
100029CC: 0F 85 C6 00 00 00 jne 10002A98
100029D2: 8D 55 90 lea edx,[ebp-70h]
100029D5: 52 push edx
100029D6: 68 19 00 02 00 push 20019h
100029DB: 50 push eax
100029DC: 8B 45 9C mov eax,dword ptr [ebp-64h]
100029DF: 68 10 32 01 10 push 10013210h
100029E4: 50 push eax
100029E5: FF D7 call edi
100029E7: 8B F0 mov esi,eax
100029E9: 85 F6 test esi,esi
100029EB: 0F 85 9D 00 00 00 jne 10002A8E
100029F1: 8B 45 A0 mov eax,dword ptr [ebp-60h]
100029F4: 8B D8 mov ebx,eax
100029F6: 85 C0 test eax,eax
100029F8: 74 29 je 10002A23
100029FA: 50 push eax
100029FB: FF 15 A4 30 01 10 call dword ptr ds:[100130A4h]
10002A01: 40 inc eax
10002A02: 3D FF FF FF 3F cmp eax,3FFFFFFFh
10002A07: 7E 04 jle 10002A0D
10002A09: 33 C0 xor eax,eax
10002A0B: EB 16 jmp 10002A23
10002A0D: 8D 34 00 lea esi,[eax+eax]
10002A10: 8B C6 mov eax,esi
10002A12: E8 69 33 00 00 call 10005D80
10002A17: 8B C4 mov eax,esp
10002A19: 6A 03 push 3
10002A1B: 56 push esi
10002A1C: 53 push ebx
10002A1D: 50 push eax
10002A1E: E8 ED F9 FF FF call 10002410
10002A23: 8B 55 90 mov edx,dword ptr [ebp-70h]
10002A26: 8D 4D 8C lea ecx,[ebp-74h]
10002A29: 51 push ecx
10002A2A: 68 19 00 02 00 push 20019h
10002A2F: 6A 00 push 0
10002A31: 50 push eax
10002A32: 52 push edx
10002A33: FF D7 call edi
10002A35: 8B F0 mov esi,eax
10002A37: 85 F6 test esi,esi
10002A39: 75 49 jne 10002A84
10002A3B: 8B 4D 8C mov ecx,dword ptr [ebp-74h]
10002A3E: 8D 45 94 lea eax,[ebp-6Ch]
10002A41: 50 push eax
10002A42: 68 19 00 02 00 push 20019h
10002A47: 56 push esi
10002A48: 68 08 32 01 10 push 10013208h
10002A4D: 51 push ecx
10002A4E: FF D7 call edi
10002A50: 8B F0 mov esi,eax
10002A52: 85 F6 test esi,esi
10002A54: 75 24 jne 10002A7A
10002A56: 8D 55 84 lea edx,[ebp-7Ch]
10002A59: 52 push edx
10002A5A: 8B 55 94 mov edx,dword ptr [ebp-6Ch]
10002A5D: 8D 45 C8 lea eax,[ebp-38h]
10002A60: 50 push eax
10002A61: 8D 4D 80 lea ecx,[ebp-80h]
10002A64: 51 push ecx
10002A65: 56 push esi
10002A66: 56 push esi
10002A67: 52 push edx
10002A68: FF 15 00 30 01 10 call dword ptr ds:[10013000h]
10002A6E: 8B F0 mov esi,eax
10002A70: 8B 45 94 mov eax,dword ptr [ebp-6Ch]
10002A73: 50 push eax
10002A74: FF 15 04 30 01 10 call dword ptr ds:[10013004h]
10002A7A: 8B 4D 8C mov ecx,dword ptr [ebp-74h]
10002A7D: 51 push ecx
10002A7E: FF 15 04 30 01 10 call dword ptr ds:[10013004h]
10002A84: 8B 55 90 mov edx,dword ptr [ebp-70h]
10002A87: 52 push edx
10002A88: FF 15 04 30 01 10 call dword ptr ds:[10013004h]
10002A8E: 8B 45 9C mov eax,dword ptr [ebp-64h]
10002A91: 50 push eax
10002A92: FF 15 04 30 01 10 call dword ptr ds:[10013004h]
10002A98: 8B 4D 98 mov ecx,dword ptr [ebp-68h]
10002A9B: 51 push ecx
10002A9C: FF 15 04 30 01 10 call dword ptr ds:[10013004h]
10002AA2: 85 F6 test esi,esi
10002AA4: 0F 85 C7 FE FF FF jne 10002971
10002AAA: 8D 55 C8 lea edx,[ebp-38h]
10002AAD: 52 push edx
10002AAE: E8 0D FE FF FF call 100028C0
10002AB3: 83 C4 04 add esp,4
10002AB6: 8D 4D A8 lea ecx,[ebp-58h]
10002AB9: 51 push ecx
10002ABA: 50 push eax
10002ABB: FF 15 BC 31 01 10 call dword ptr ds:[100131BCh]
10002AC1: 85 C0 test eax,eax
10002AC3: 0F 88 A8 FE FF FF js 10002971
10002AC9: 8D 55 A4 lea edx,[ebp-5Ch]
10002ACC: 52 push edx
10002ACD: 56 push esi
10002ACE: 56 push esi
10002ACF: 6A 01 push 1
10002AD1: 8D 45 A8 lea eax,[ebp-58h]
10002AD4: 50 push eax
10002AD5: FF 15 50 31 01 10 call dword ptr ds:[10013150h]
10002ADB: 85 C0 test eax,eax
10002ADD: 0F 88 8E FE FF FF js 10002971
10002AE3: 8B 55 88 mov edx,dword ptr [ebp-78h]
10002AE6: 8B 45 A4 mov eax,dword ptr [ebp-5Ch]
10002AE9: 8B 08 mov ecx,dword ptr [eax]
10002AEB: 52 push edx
10002AEC: 8D 55 B8 lea edx,[ebp-48h]
10002AEF: 52 push edx
10002AF0: 50 push eax
10002AF1: 8B 41 18 mov eax,dword ptr [ecx+18h]
10002AF4: FF D0 call eax
10002AF6: 8B 45 A4 mov eax,dword ptr [ebp-5Ch]
10002AF9: 8B 08 mov ecx,dword ptr [eax]
10002AFB: 8B 51 08 mov edx,dword ptr [ecx+8]
10002AFE: 50 push eax
10002AFF: FF D2 call edx
10002B01: 8D 46 01 lea eax,[esi+1]
10002B04: 8D A5 74 FF FF FF lea esp,[ebp+FFFFFF74h]
10002B0A: 5F pop edi
10002B0B: 5E pop esi
10002B0C: 5B pop ebx
10002B0D: 8B 4D FC mov ecx,dword ptr [ebp-4]
10002B10: 33 CD xor ecx,ebp
10002B12: E8 59 32 00 00 call 10005D70
10002B17: 8B E5 mov esp,ebp
10002B19: 5D pop ebp
10002B1A: C3 ret
10002B1B: CC int 3
10002B1C: CC int 3
10002B1D: CC int 3
10002B1E: CC int 3
10002B1F: CC int 3
10002B20: 51 push ecx
10002B21: A1 98 40 01 10 mov eax,dword ptr ds:[10014098h]
10002B26: 55 push ebp
10002B27: 56 push esi
10002B28: 8B 74 24 14 mov esi,dword ptr [esp+14h]
10002B2C: 89 06 mov dword ptr [esi],eax
10002B2E: 8B 0D 9C 40 01 10 mov ecx,dword ptr ds:[1001409Ch]
10002B34: 89 4E 04 mov dword ptr [esi+4],ecx
10002B37: 8B 15 A0 40 01 10 mov edx,dword ptr ds:[100140A0h]
10002B3D: 89 56 08 mov dword ptr [esi+8],edx
10002B40: A1 A4 40 01 10 mov eax,dword ptr ds:[100140A4h]
10002B45: 89 46 0C mov dword ptr [esi+0Ch],eax
10002B48: 8B 44 24 10 mov eax,dword ptr [esp+10h]
10002B4C: 8B 08 mov ecx,dword ptr [eax]
10002B4E: 8D 54 24 14 lea edx,[esp+14h]
10002B52: 52 push edx
10002B53: 68 B8 40 01 10 push 100140B8h
10002B58: 50 push eax
10002B59: 8B 01 mov eax,dword ptr [ecx]
10002B5B: C7 44 24 20 00 00 mov dword ptr [esp+20h],0
00 00
10002B63: C7 44 24 14 00 00 mov dword ptr [esp+14h],0
00 00
10002B6B: FF D0 call eax
10002B6D: 8B 6C 24 24 mov ebp,dword ptr [esp+24h]
10002B71: 85 C0 test eax,eax
10002B73: 78 2B js 10002BA0
10002B75: 8B 44 24 14 mov eax,dword ptr [esp+14h]
10002B79: 8B 08 mov ecx,dword ptr [eax]
10002B7B: 57 push edi
10002B7C: 8D 54 24 0C lea edx,[esp+0Ch]
10002B80: 52 push edx
10002B81: 50 push eax
10002B82: 8B 41 0C mov eax,dword ptr [ecx+0Ch]
10002B85: FF D0 call eax
10002B87: 8B F8 mov edi,eax
10002B89: 8B 44 24 18 mov eax,dword ptr [esp+18h]
10002B8D: 8B 08 mov ecx,dword ptr [eax]
10002B8F: 8B 51 08 mov edx,dword ptr [ecx+8]
10002B92: 50 push eax
10002B93: FF D2 call edx
10002B95: 85 FF test edi,edi
10002B97: 5F pop edi
10002B98: 79 18 jns 10002BB2
10002B9A: 5E pop esi
10002B9B: 33 C0 xor eax,eax
10002B9D: 5D pop ebp
10002B9E: 59 pop ecx
10002B9F: C3 ret
10002BA0: 8D 44 24 08 lea eax,[esp+8]
10002BA4: 50 push eax
10002BA5: 55 push ebp
10002BA6: E8 95 FD FF FF call 10002940
10002BAB: 83 C4 08 add esp,8
10002BAE: 85 C0 test eax,eax
10002BB0: 74 22 je 10002BD4
10002BB2: 8B 4C 24 08 mov ecx,dword ptr [esp+8]
10002BB6: 8B 54 24 20 mov edx,dword ptr [esp+20h]
10002BBA: 8B 44 24 1C mov eax,dword ptr [esp+1Ch]
10002BBE: 51 push ecx
10002BBF: 8B 4C 24 1C mov ecx,dword ptr [esp+1Ch]
10002BC3: 55 push ebp
10002BC4: 52 push edx
10002BC5: 50 push eax
10002BC6: 51 push ecx
10002BC7: 56 push esi
10002BC8: E8 23 FA FF FF call 100025F0
10002BCD: 83 C4 18 add esp,18h
10002BD0: 5E pop esi
10002BD1: 5D pop ebp
10002BD2: 59 pop ecx
10002BD3: C3 ret
10002BD4: 68 60 36 01 10 push 10013660h
10002BD9: E8 69 35 00 00 call 10006147
10002BDE: 83 C4 04 add esp,4
10002BE1: 5E pop esi
10002BE2: 33 C0 xor eax,eax
10002BE4: 5D pop ebp
10002BE5: 59 pop ecx
10002BE6: C3 ret
10002BE7: CC int 3
10002BE8: CC int 3
10002BE9: CC int 3
10002BEA: CC int 3
10002BEB: CC int 3
10002BEC: CC int 3
10002BED: CC int 3
10002BEE: CC int 3
10002BEF: CC int 3
10002BF0: 55 push ebp
10002BF1: 8B EC mov ebp,esp
10002BF3: 83 EC 34 sub esp,34h
10002BF6: A1 84 80 01 10 mov eax,dword ptr ds:[10018084h]
10002BFB: 33 C5 xor eax,ebp
10002BFD: 89 45 FC mov dword ptr [ebp-4],eax
10002C00: 8B 45 10 mov eax,dword ptr [ebp+10h]
10002C03: 8B 4D 14 mov ecx,dword ptr [ebp+14h]
10002C06: 53 push ebx
10002C07: 8B 5D 08 mov ebx,dword ptr [ebp+8]
10002C0A: 56 push esi
10002C0B: 89 45 DC mov dword ptr [ebp-24h],eax
10002C0E: 8B 45 1C mov eax,dword ptr [ebp+1Ch]
10002C11: 89 4D CC mov dword ptr [ebp-34h],ecx
10002C14: 8B 4D 18 mov ecx,dword ptr [ebp+18h]
10002C17: 33 F6 xor esi,esi
10002C19: 57 push edi
10002C1A: 89 4D D4 mov dword ptr [ebp-2Ch],ecx
10002C1D: 89 45 D0 mov dword ptr [ebp-30h],eax
10002C20: 3B C6 cmp eax,esi
10002C22: 74 1B je 10002C3F
10002C24: 3B CE cmp ecx,esi
10002C26: 75 17 jne 10002C3F
10002C28: 6A FF push 0FFFFFFFFh
10002C2A: 68 10 37 01 10 push 10013710h
10002C2F: 53 push ebx
10002C30: E8 CB 17 00 00 call 10004400
10002C35: 83 C4 0C add esp,0Ch
10002C38: 33 C0 xor eax,eax
10002C3A: E9 46 02 00 00 jmp 10002E85
10002C3F: 89 75 E4 mov dword ptr [ebp-1Ch],esi
10002C42: 3B C6 cmp eax,esi
10002C44: 74 4A je 10002C90
10002C46: 8B 13 mov edx,dword ptr [ebx]
10002C48: 56 push esi
10002C49: 50 push eax
10002C4A: 8B 82 A4 02 00 00 mov eax,dword ptr [edx+000002A4h]
10002C50: 53 push ebx
10002C51: FF D0 call eax
10002C53: 8B F8 mov edi,eax
10002C55: 3B FE cmp edi,esi
10002C57: 75 05 jne 10002C5E
10002C59: 89 75 E4 mov dword ptr [ebp-1Ch],esi
10002C5C: EB 32 jmp 10002C90
10002C5E: 57 push edi
10002C5F: FF 15 8C 30 01 10 call dword ptr ds:[1001308Ch]
10002C65: 8D 70 01 lea esi,[eax+1]
10002C68: 81 FE FF FF FF 3F cmp esi,3FFFFFFFh
10002C6E: 7E 09 jle 10002C79
10002C70: C7 45 E4 00 00 00 mov dword ptr [ebp-1Ch],0
00
10002C77: EB 17 jmp 10002C90
10002C79: 8D 04 36 lea eax,[esi+esi]
10002C7C: E8 FF 30 00 00 call 10005D80
10002C81: 8B C4 mov eax,esp
10002C83: 6A 03 push 3
10002C85: 56 push esi
10002C86: 57 push edi
10002C87: 50 push eax
10002C88: E8 53 E5 FF FF call 100011E0
10002C8D: 89 45 E4 mov dword ptr [ebp-1Ch],eax
10002C90: 8B 45 D4 mov eax,dword ptr [ebp-2Ch]
10002C93: 33 F6 xor esi,esi
10002C95: 85 C0 test eax,eax
10002C97: 74 3F je 10002CD8
10002C99: 8B 0B mov ecx,dword ptr [ebx]
10002C9B: 8B 91 A4 02 00 00 mov edx,dword ptr [ecx+000002A4h]
10002CA1: 56 push esi
10002CA2: 50 push eax
10002CA3: 53 push ebx
10002CA4: FF D2 call edx
10002CA6: 8B F8 mov edi,eax
10002CA8: 85 FF test edi,edi
10002CAA: 74 2C je 10002CD8
10002CAC: 57 push edi
10002CAD: FF 15 8C 30 01 10 call dword ptr ds:[1001308Ch]
10002CB3: 8D 70 01 lea esi,[eax+1]
10002CB6: 81 FE FF FF FF 3F cmp esi,3FFFFFFFh
10002CBC: 7E 04 jle 10002CC2
10002CBE: 33 F6 xor esi,esi
10002CC0: EB 16 jmp 10002CD8
10002CC2: 8D 04 36 lea eax,[esi+esi]
10002CC5: E8 B6 30 00 00 call 10005D80
10002CCA: 8B C4 mov eax,esp
10002CCC: 6A 03 push 3
10002CCE: 56 push esi
10002CCF: 57 push edi
10002CD0: 50 push eax
10002CD1: E8 0A E5 FF FF call 100011E0
10002CD6: 8B F0 mov esi,eax
10002CD8: 8B 4D DC mov ecx,dword ptr [ebp-24h]
10002CDB: 33 FF xor edi,edi
10002CDD: 33 C0 xor eax,eax
10002CDF: 89 45 E8 mov dword ptr [ebp-18h],eax
10002CE2: 3B CF cmp ecx,edi
10002CE4: 74 13 je 10002CF9
10002CE6: 8B 01 mov eax,dword ptr [ecx]
10002CE8: 8B 00 mov eax,dword ptr [eax]
10002CEA: 8D 55 E8 lea edx,[ebp-18h]
10002CED: 52 push edx
10002CEE: 68 50 36 01 10 push 10013650h
10002CF3: 51 push ecx
10002CF4: FF D0 call eax
10002CF6: 8B 45 E8 mov eax,dword ptr [ebp-18h]
10002CF9: 89 7D E0 mov dword ptr [ebp-20h],edi
10002CFC: 3B C7 cmp eax,edi
10002CFE: 74 15 je 10002D15
10002D00: 8B 08 mov ecx,dword ptr [eax]
10002D02: 8D 55 E0 lea edx,[ebp-20h]
10002D05: 52 push edx
10002D06: 68 A8 40 01 10 push 100140A8h
10002D0B: 50 push eax
10002D0C: 8B 01 mov eax,dword ptr [ecx]
10002D0E: FF D0 call eax
10002D10: 39 7D E0 cmp dword ptr [ebp-20h],edi
10002D13: 75 35 jne 10002D4A
10002D15: 6A FF push 0FFFFFFFFh
10002D17: 68 E8 36 01 10 push 100136E8h
10002D1C: 53 push ebx
10002D1D: E8 DE 16 00 00 call 10004400
10002D22: 8B 45 E0 mov eax,dword ptr [ebp-20h]
10002D25: 83 C4 0C add esp,0Ch
10002D28: 3B C7 cmp eax,edi
10002D2A: 74 08 je 10002D34
10002D2C: 8B 08 mov ecx,dword ptr [eax]
10002D2E: 8B 51 08 mov edx,dword ptr [ecx+8]
10002D31: 50 push eax
10002D32: FF D2 call edx
10002D34: 8B 45 E8 mov eax,dword ptr [ebp-18h]
10002D37: 3B C7 cmp eax,edi
10002D39: 74 08 je 10002D43
10002D3B: 8B 08 mov ecx,dword ptr [eax]
10002D3D: 8B 51 08 mov edx,dword ptr [ecx+8]
10002D40: 50 push eax
10002D41: FF D2 call edx
10002D43: 33 C0 xor eax,eax
10002D45: E9 3B 01 00 00 jmp 10002E85
10002D4A: 56 push esi
10002D4B: 8D 45 E4 lea eax,[ebp-1Ch]
10002D4E: 50 push eax
10002D4F: 8D 4D DC lea ecx,[ebp-24h]
10002D52: 51 push ecx
10002D53: 8D 55 D4 lea edx,[ebp-2Ch]
10002D56: 8D 45 EC lea eax,[ebp-14h]
10002D59: 52 push edx
10002D5A: 50 push eax
10002D5B: 39 7D D0 cmp dword ptr [ebp-30h],edi
10002D5E: 75 31 jne 10002D91
10002D60: 8B 4D E8 mov ecx,dword ptr [ebp-18h]
10002D63: 51 push ecx
10002D64: E8 B7 FD FF FF call 10002B20
10002D69: 83 C4 18 add esp,18h
10002D6C: 85 C0 test eax,eax
10002D6E: 75 59 jne 10002DC9
10002D70: 6A FF push 0FFFFFFFFh
10002D72: 68 D0 36 01 10 push 100136D0h
10002D77: 53 push ebx
10002D78: E8 83 16 00 00 call 10004400
10002D7D: 8B 45 E0 mov eax,dword ptr [ebp-20h]
10002D80: 83 C4 0C add esp,0Ch
10002D83: 3B C7 cmp eax,edi
10002D85: 74 AD je 10002D34
10002D87: 8B 10 mov edx,dword ptr [eax]
10002D89: 50 push eax
10002D8A: 8B 42 08 mov eax,dword ptr [edx+8]
10002D8D: FF D0 call eax
10002D8F: EB A3 jmp 10002D34
10002D91: 8B 4D E4 mov ecx,dword ptr [ebp-1Ch]
10002D94: 51 push ecx
10002D95: E8 36 FA FF FF call 100027D0
10002D9A: 83 C4 18 add esp,18h
10002D9D: 85 C0 test eax,eax
10002D9F: 75 28 jne 10002DC9
10002DA1: 6A FF push 0FFFFFFFFh
10002DA3: 68 AC 36 01 10 push 100136ACh
10002DA8: 53 push ebx
10002DA9: E8 52 16 00 00 call 10004400
10002DAE: 8B 45 E0 mov eax,dword ptr [ebp-20h]
10002DB1: 83 C4 0C add esp,0Ch
10002DB4: 3B C7 cmp eax,edi
10002DB6: 0F 84 78 FF FF FF je 10002D34
10002DBC: 8B 10 mov edx,dword ptr [eax]
10002DBE: 50 push eax
10002DBF: 8B 42 08 mov eax,dword ptr [edx+8]
10002DC2: FF D0 call eax
10002DC4: E9 6B FF FF FF jmp 10002D34
10002DC9: 8B 45 E0 mov eax,dword ptr [ebp-20h]
10002DCC: 8D 55 D8 lea edx,[ebp-28h]
10002DCF: 52 push edx
10002DD0: 8D 55 EC lea edx,[ebp-14h]
10002DD3: 89 7D D8 mov dword ptr [ebp-28h],edi
10002DD6: 8B 08 mov ecx,dword ptr [eax]
10002DD8: 52 push edx
10002DD9: 50 push eax
10002DDA: 8B 41 10 mov eax,dword ptr [ecx+10h]
10002DDD: FF D0 call eax
10002DDF: 3B C7 cmp eax,edi
10002DE1: 7D 0F jge 10002DF2
10002DE3: 50 push eax
10002DE4: 68 90 36 01 10 push 10013690h
10002DE9: 53 push ebx
10002DEA: E8 11 16 00 00 call 10004400
10002DEF: 83 C4 0C add esp,0Ch
10002DF2: 6A 38 push 38h
10002DF4: E8 0B 3E 00 00 call 10006C04
10002DF9: 8B F0 mov esi,eax
10002DFB: 83 C4 04 add esp,4
10002DFE: 3B F7 cmp esi,edi
10002E00: 74 52 je 10002E54
10002E02: 8B 4D E4 mov ecx,dword ptr [ebp-1Ch]
10002E05: 8B 55 DC mov edx,dword ptr [ebp-24h]
10002E08: 8B 45 D4 mov eax,dword ptr [ebp-2Ch]
10002E0B: 51 push ecx
10002E0C: 8B 4D EC mov ecx,dword ptr [ebp-14h]
10002E0F: 52 push edx
10002E10: 8B 55 F0 mov edx,dword ptr [ebp-10h]
10002E13: 50 push eax
10002E14: 83 EC 10 sub esp,10h
10002E17: 8B C4 mov eax,esp
10002E19: 89 08 mov dword ptr [eax],ecx
10002E1B: 8B 4D F4 mov ecx,dword ptr [ebp-0Ch]
10002E1E: 89 50 04 mov dword ptr [eax+4],edx
10002E21: 8B 55 F8 mov edx,dword ptr [ebp-8]
10002E24: 89 48 08 mov dword ptr [eax+8],ecx
10002E27: 51 push ecx
10002E28: 8B 4D D8 mov ecx,dword ptr [ebp-28h]
10002E2B: 89 50 0C mov dword ptr [eax+0Ch],edx
10002E2E: 8B C4 mov eax,esp
10002E30: 89 08 mov dword ptr [eax],ecx
10002E32: 8B 45 D8 mov eax,dword ptr [ebp-28h]
10002E35: 89 65 D0 mov dword ptr [ebp-30h],esp
10002E38: 3B C7 cmp eax,edi
10002E3A: 74 08 je 10002E44
10002E3C: 8B 10 mov edx,dword ptr [eax]
10002E3E: 50 push eax
10002E3F: 8B 42 04 mov eax,dword ptr [edx+4]
10002E42: FF D0 call eax
10002E44: 8B 4D CC mov ecx,dword ptr [ebp-34h]
10002E47: 51 push ecx
10002E48: 53 push ebx
10002E49: 8B CE mov ecx,esi
10002E4B: E8 F0 06 00 00 call 10003540
10002E50: 8B F0 mov esi,eax
10002E52: EB 02 jmp 10002E56
10002E54: 33 F6 xor esi,esi
10002E56: 8B 45 D8 mov eax,dword ptr [ebp-28h]
10002E59: 3B C7 cmp eax,edi
10002E5B: 74 08 je 10002E65
10002E5D: 8B 10 mov edx,dword ptr [eax]
10002E5F: 50 push eax
10002E60: 8B 42 08 mov eax,dword ptr [edx+8]
10002E63: FF D0 call eax
10002E65: 8B 45 E0 mov eax,dword ptr [ebp-20h]
10002E68: 3B C7 cmp eax,edi
10002E6A: 74 08 je 10002E74
10002E6C: 8B 08 mov ecx,dword ptr [eax]
10002E6E: 8B 51 08 mov edx,dword ptr [ecx+8]
10002E71: 50 push eax
10002E72: FF D2 call edx
10002E74: 8B 45 E8 mov eax,dword ptr [ebp-18h]
10002E77: 3B C7 cmp eax,edi
10002E79: 74 08 je 10002E83
10002E7B: 8B 08 mov ecx,dword ptr [eax]
10002E7D: 8B 51 08 mov edx,dword ptr [ecx+8]
10002E80: 50 push eax
10002E81: FF D2 call edx
10002E83: 8B C6 mov eax,esi
10002E85: 8D 65 C0 lea esp,[ebp-40h]
10002E88: 5F pop edi
10002E89: 5E pop esi
10002E8A: 5B pop ebx
10002E8B: 8B 4D FC mov ecx,dword ptr [ebp-4]
10002E8E: 33 CD xor ecx,ebp
10002E90: E8 DB 2E 00 00 call 10005D70
10002E95: 8B E5 mov esp,ebp
10002E97: 5D pop ebp
10002E98: C2 18 00 ret 18h
10002E9B: CC int 3
10002E9C: CC int 3
10002E9D: CC int 3
10002E9E: CC int 3
10002E9F: CC int 3
10002EA0: 8B 44 24 0C mov eax,dword ptr [esp+0Ch]
10002EA4: 85 C0 test eax,eax
10002EA6: 74 28 je 10002ED0
10002EA8: 8D 4C 24 0C lea ecx,[esp+0Ch]
10002EAC: 51 push ecx
10002EAD: 50 push eax
10002EAE: 68 68 40 01 10 push 10014068h
10002EB3: FF 15 C0 31 01 10 call dword ptr ds:[100131C0h]
10002EB9: 85 C0 test eax,eax
10002EBB: 79 18 jns 10002ED5
10002EBD: 8B 54 24 04 mov edx,dword ptr [esp+4]
10002EC1: 50 push eax
10002EC2: 68 5C 37 01 10 push 1001375Ch
10002EC7: 52 push edx
10002EC8: E8 33 15 00 00 call 10004400
10002ECD: 83 C4 0C add esp,0Ch
10002ED0: 33 C0 xor eax,eax
10002ED2: C2 0C 00 ret 0Ch
10002ED5: 8B 44 24 0C mov eax,dword ptr [esp+0Ch]
10002ED9: C2 0C 00 ret 0Ch
10002EDC: CC int 3
10002EDD: CC int 3
10002EDE: CC int 3
10002EDF: CC int 3
10002EE0: 8B 44 24 0C mov eax,dword ptr [esp+0Ch]
10002EE4: 85 C0 test eax,eax
10002EE6: 75 19 jne 10002F01
10002EE8: 8B 44 24 04 mov eax,dword ptr [esp+4]
10002EEC: 6A FF push 0FFFFFFFFh
10002EEE: 68 AC 37 01 10 push 100137ACh
10002EF3: 50 push eax
10002EF4: E8 07 15 00 00 call 10004400
10002EF9: 83 C4 0C add esp,0Ch
10002EFC: 33 C0 xor eax,eax
10002EFE: C2 0C 00 ret 0Ch
10002F01: 8D 4C 24 0C lea ecx,[esp+0Ch]
10002F05: 51 push ecx
10002F06: 68 68 40 01 10 push 10014068h
10002F0B: 50 push eax
10002F0C: FF 15 C4 31 01 10 call dword ptr ds:[100131C4h]
10002F12: 85 C0 test eax,eax
10002F14: 79 18 jns 10002F2E
10002F16: 8B 54 24 04 mov edx,dword ptr [esp+4]
10002F1A: 50 push eax
10002F1B: 68 84 37 01 10 push 10013784h
10002F20: 52 push edx
10002F21: E8 DA 14 00 00 call 10004400
10002F26: 83 C4 0C add esp,0Ch
10002F29: 33 C0 xor eax,eax
10002F2B: C2 0C 00 ret 0Ch
10002F2E: 53 push ebx
10002F2F: 56 push esi
10002F30: 8B 74 24 0C mov esi,dword ptr [esp+0Ch]
10002F34: 8B 06 mov eax,dword ptr [esi]
10002F36: 8B 48 18 mov ecx,dword ptr [eax+18h]
10002F39: 57 push edi
10002F3A: 68 30 33 01 10 push 10013330h
10002F3F: 56 push esi
10002F40: FF D1 call ecx
10002F42: 8B 16 mov edx,dword ptr [esi]
10002F44: 68 28 33 01 10 push 10013328h
10002F49: 8B F8 mov edi,eax
10002F4B: 8B 82 84 00 00 00 mov eax,dword ptr [edx+00000084h]
10002F51: 68 6C 32 01 10 push 1001326Ch
10002F56: 57 push edi
10002F57: 56 push esi
10002F58: FF D0 call eax
10002F5A: 8B D8 mov ebx,eax
10002F5C: 8B 44 24 18 mov eax,dword ptr [esp+18h]
10002F60: 85 C0 test eax,eax
10002F62: 74 0C je 10002F70
10002F64: 8B 08 mov ecx,dword ptr [eax]
10002F66: 8B 51 04 mov edx,dword ptr [ecx+4]
10002F69: 50 push eax
10002F6A: FF D2 call edx
10002F6C: 8B 44 24 18 mov eax,dword ptr [esp+18h]
10002F70: 50 push eax
10002F71: 53 push ebx
10002F72: 57 push edi
10002F73: 56 push esi
10002F74: E8 87 E0 FF FF call 10001000
10002F79: 83 C4 10 add esp,10h
10002F7C: 5F pop edi
10002F7D: 5E pop esi
10002F7E: 5B pop ebx
10002F7F: C2 0C 00 ret 0Ch
10002F82: CC int 3
10002F83: CC int 3
10002F84: CC int 3
10002F85: CC int 3
10002F86: CC int 3
10002F87: CC int 3
10002F88: CC int 3
10002F89: CC int 3
10002F8A: CC int 3
10002F8B: CC int 3
10002F8C: CC int 3
10002F8D: CC int 3
10002F8E: CC int 3
10002F8F: CC int 3
10002F90: 83 EC 10 sub esp,10h
10002F93: 56 push esi
10002F94: 8B 74 24 20 mov esi,dword ptr [esp+20h]
10002F98: 85 F6 test esi,esi
10002F9A: 75 09 jne 10002FA5
10002F9C: 33 C0 xor eax,eax
10002F9E: 5E pop esi
10002F9F: 83 C4 10 add esp,10h
10002FA2: C2 0C 00 ret 0Ch
10002FA5: 57 push edi
10002FA6: 8D 44 24 08 lea eax,[esp+8]
10002FAA: 50 push eax
10002FAB: C7 44 24 28 00 00 mov dword ptr [esp+28h],0
00 00
Section contains the following exports for racob-x86.dll
00000000 characteristics
4D18D74F time date stamp Mon Dec 27 12:13:35 2010
0.00 version
1 ordinal base
36 number of functions
36 number of names
ordinal hint RVA name
1 0 00001020 _Java_org_racob_com_Automation_loadTypeLib@12
2 1 000011A0 _Java_org_racob_com_ComThread_doCoInitialize@12
3 2 000011B0 _Java_org_racob_com_ComThread_doCoUninitialize@8
4 3 00002BF0 _Java_org_racob_com_DispatchEvents_init3@24
5 4 00002840 _Java_org_racob_com_DispatchEvents_messageLoop@8
6 5 00002EE0 _Java_org_racob_com_DispatchProxy_MarshalFromStream@12
7 6 00002EA0 _Java_org_racob_com_DispatchProxy_MarshalIntoStream@12
8 7 00001220 _Java_org_racob_com_Dispatch_QueryInterface@16
9 8 00001660 _Java_org_racob_com_Dispatch_coCreateInstanceNative@12
10 9 00001330 _Java_org_racob_com_Dispatch_createInstanceNative@12
11 A 00001530 _Java_org_racob_com_Dispatch_getActiveInstanceNative@12
12 B 00002150 _Java_org_racob_com_Dispatch_getIDsOfNames@20
13 C 000017A0 _Java_org_racob_com_Dispatch_getTypeInfo@12
14 D 00001B60 _Java_org_racob_com_Dispatch_invokev0@28
15 E 00001DA0 _Java_org_racob_com_Dispatch_invokev@36
16 F 00003030 _Java_org_racob_com_EnumVariant_Next@20
17 10 00002F90 _Java_org_racob_com_EnumVariant_NextOne@12
18 11 00003170 _Java_org_racob_com_EnumVariant_Reset@12
19 12 000031A0 _Java_org_racob_com_EnumVariant_Skip@16
20 13 000038B0 _Java_org_racob_com_IUnknown_getReferenceCount@12
21 14 000039F0 _Java_org_racob_com_IUnknown_release@12
22 15 000038E0 _Java_org_racob_com_IUnknown_toEnumVariant@12
23 16 00003A10 _Java_org_racob_com_STA_doMessagePump@8
24 17 00003AC0 _Java_org_racob_com_STA_quitMessagePump@12
25 18 00003AE0 _Java_org_racob_com_TypeInfo_getContainingTypeLib@12
26 19 00003C40 _Java_org_racob_com_TypeInfo_getDocumentation@16
27 1A 00003DD0 _Java_org_racob_com_TypeInfo_getFuncDesc@16
28 1B 00004100 _Java_org_racob_com_TypeInfo_getImplTypeFlags@16
29 1C 00004030 _Java_org_racob_com_TypeInfo_getNames@16
30 1D 00004180 _Java_org_racob_com_TypeInfo_getRefTypeInfo@16
31 1E 00004140 _Java_org_racob_com_TypeInfo_getRefTypeOfImplType@16
32 1F 000041D0 _Java_org_racob_com_TypeInfo_getVarDesc@16
33 20 00004290 _Java_org_racob_com_TypeLib_getDocumentation@16
34 21 00004380 _Java_org_racob_com_TypeLib_getTypeInfo@16
35 22 000043D0 _Java_org_racob_com_TypeLib_getTypeInfoCount@12
36 23 000048B0 _Java_org_racob_com_Variant_initializeNative@8
Summary
4000 .data
5000 .rdata
2000 .reloc
1000 .rsrc
12000 .text
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment