Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- .data:0x00000801 8bc7 mov eax,edi
- .data:0x00000803 e86cffffff call func_00000774
- .data:0x00000808 84c0 test al,al
- ┏ .data:0x0000080a 7504 jne loc_00000810
- ┃ .data:0x0000080c 33c0 xor eax,eax
- ┃ .data:0x0000080e 8906 mov DWORD PTR [esi],eax
- ┃ .data:0x00000810
- ┃ .data:0x00000810 loc_00000810:
- ┗▶ .data:0x00000810 5f pop edi
- .data:0x00000811 5e pop esi
- .data:0x00000812 5b pop ebx
- .data:0x00000813 c3 ret
- .data:0x00000814 ; =============== F U N C T I O N ====================================
- .data:0x00000814 ; CODE XREF: 0x00000d6a
- .data:0x00000814 ; CODE XREF: 0x00001156
- .data:0x00000814
- .data:0x00000814 func_00000814:
- .data:0x00000814 53 push ebx
- .data:0x00000815 56 push esi
- .data:0x00000816 57 push edi
- .data:0x00000817 55 push ebp
- .data:0x00000818 83c4f8 add esp,0xfffffff8
- .data:0x0000081b 8bd8 mov ebx,eax
- .data:0x0000081d 8bfb mov edi,ebx
- .data:0x0000081f
- .data:0x0000081f loc_0000081f:
- ┏━━━━▶ .data:0x0000081f 8b32 mov esi,DWORD PTR [edx]
- ┃ .data:0x00000821 8b4308 mov eax,DWORD PTR [ebx+0x8]
- ┃ .data:0x00000824 3bf0 cmp esi,eax
- ┃┏━━━ .data:0x00000826 726c jb loc_00000894
- ┃┃ .data:0x00000828 8bce mov ecx,esi
- ┃┃ .data:0x0000082a 034a04 add ecx,DWORD PTR [edx+0x4]
- ┃┃ .data:0x0000082d 8be8 mov ebp,eax
- ┃┃ .data:0x0000082f 036b0c add ebp,DWORD PTR [ebx+0xc]
- ┃┃ .data:0x00000832 3bcd cmp ecx,ebp
- ┃┣━━━ .data:0x00000834 775e ja loc_00000894
- ┃┃ .data:0x00000836 3bf0 cmp esi,eax
- ┃┃ ┏ .data:0x00000838 751b jne loc_00000855
- ┃┃ ┃ .data:0x0000083a 8b4204 mov eax,DWORD PTR [edx+0x4]
- ┃┃ ┃ .data:0x0000083d 014308 add DWORD PTR [ebx+0x8],eax
- ┃┃ ┃ .data:0x00000840 8b4204 mov eax,DWORD PTR [edx+0x4]
- ┃┃ ┃ .data:0x00000843 29430c sub DWORD PTR [ebx+0xc],eax
- ┃┃ ┃ .data:0x00000846 837b0c00 cmp DWORD PTR [ebx+0xc],0x0
- ┃┃┏━╋ .data:0x0000084a 7544 jne loc_00000890
- ┃┃┃ ┃ .data:0x0000084c 8bc3 mov eax,ebx
- ┃┃┃ ┃ .data:0x0000084e e851ffffff call func_000007a4
- ┃┃┣━╋ .data:0x00000853 eb3b jmp loc_00000890
- ┃┃┃ ┃ .data:0x00000855
- ┃┃┃ ┃ .data:0x00000855 loc_00000855:
- ┃┃┃ ┗▶ .data:0x00000855 8b0a mov ecx,DWORD PTR [edx]
- ┃┃┃ .data:0x00000857 8b7204 mov esi,DWORD PTR [edx+0x4]
- ┃┃┃ .data:0x0000085a 03ce add ecx,esi
- ┃┃┃ .data:0x0000085c 8bf8 mov edi,eax
- ┃┃┃ .data:0x0000085e 037b0c add edi,DWORD PTR [ebx+0xc]
- ┃┃┃ .data:0x00000861 3bcf cmp ecx,edi
- ┃┃┃ ┏ .data:0x00000863 7505 jne loc_0000086a
- ┃┃┃ ┃ .data:0x00000865 29730c sub DWORD PTR [ebx+0xc],esi
- ┃┃┣━╋ .data:0x00000868 eb26 jmp loc_00000890
- ┃┃┃ ┃ .data:0x0000086a
- ┃┃┃ ┃ .data:0x0000086a loc_0000086a:
- ┃┃┃ ┗▶ .data:0x0000086a 8b0a mov ecx,DWORD PTR [edx]
- ┃┃┃ .data:0x0000086c 034a04 add ecx,DWORD PTR [edx+0x4]
- ┃┃┃ .data:0x0000086f 890c24 mov DWORD PTR [esp],ecx
- ┃┃┃ .data:0x00000872 2bf9 sub edi,ecx
- ┃┃┃ .data:0x00000874 897c2404 mov DWORD PTR [esp+0x4],edi
- ┃┃┃ .data:0x00000878 8b12 mov edx,DWORD PTR [edx]
- ┃┃┃ .data:0x0000087a 2bd0 sub edx,eax
- ┃┃┃ .data:0x0000087c 89530c mov DWORD PTR [ebx+0xc],edx
- ┃┃┃ .data:0x0000087f 8bd4 mov edx,esp
- ┃┃┃ .data:0x00000881 8bc3 mov eax,ebx
- ┃┃┃ .data:0x00000883 e8ecfeffff call func_00000774
- ┃┃┃ .data:0x00000888 84c0 test al,al
- ┃┃┣━━ .data:0x0000088a 7504 jne loc_00000890
- ┃┃┃ .data:0x0000088c 33c0 xor eax,eax
- ┃┃┃┏━ .data:0x0000088e eb0c jmp loc_0000089c
- ┃┃┃┃ .data:0x00000890
- ┃┃┃┃ .data:0x00000890 loc_00000890:
- ┃┃┗╋━▶ .data:0x00000890 b001 mov al,0x1
- ┃┃ ┣━ .data:0x00000892 eb08 jmp loc_0000089c
- ┃┃ ┃ .data:0x00000894
- ┃┃ ┃ .data:0x00000894 loc_00000894:
- ┃┗━╋━▶ .data:0x00000894 8b1b mov ebx,DWORD PTR [ebx]
- ┃ ┃ .data:0x00000896 3bfb cmp edi,ebx
- ┗━━╋━ .data:0x00000898 7585 jne loc_0000081f
- ┃ .data:0x0000089a 33c0 xor eax,eax
- ┃ .data:0x0000089c
- ┃ .data:0x0000089c loc_0000089c:
- ┗━▶ .data:0x0000089c 59 pop ecx
- .data:0x0000089d 5a pop edx
- .data:0x0000089e 5d pop ebp
- .data:0x0000089f 5f pop edi
- .data:0x000008a0 5e pop esi
- .data:0x000008a1 5b pop ebx
- .data:0x000008a2 c3 ret
- .data:0x000008a3 90 nop
- .data:0x000008a4 ; =============== F U N C T I O N ====================================
- .data:0x000008a4 ; CODE XREF: 0x00000b98
- .data:0x000008a4
- .data:0x000008a4 func_000008a4:
- .data:0x000008a4 53 push ebx
- .data:0x000008a5 56 push esi
- .data:0x000008a6 57 push edi
- .data:0x000008a7 8bda mov ebx,edx
- .data:0x000008a9 8bf0 mov esi,eax
- .data:0x000008ab 81fe00001000 cmp esi,0x100000
- ┏ .data:0x000008b1 7d07 jge loc_000008ba
- ┃ .data:0x000008b3 be00001000 mov esi,0x100000
- ┏╋ .data:0x000008b8 eb0c jmp loc_000008c6
- ┃┃ .data:0x000008ba
- ┃┃ .data:0x000008ba loc_000008ba:
- ┃┗▶ .data:0x000008ba 81c6ffff0000 add esi,0xffff
- ┃ .data:0x000008c0 81e60000ffff and esi,0xffff0000
- ┃ .data:0x000008c6
- ┃ .data:0x000008c6 loc_000008c6:
- ┗━▶ .data:0x000008c6 897304 mov DWORD PTR [ebx+0x4],esi
- .data:0x000008c9 6a01 push 0x1
- .data:0x000008cb 6800200000 push 0x2000
- .data:0x000008d0 56 push esi
- .data:0x000008d1 6a00 push 0x0
- .data:0x000008d3 e814feffff call func_000006ec
- .data:0x000008d8 8bf8 mov edi,eax
- .data:0x000008da 893b mov DWORD PTR [ebx],edi
- .data:0x000008dc 85ff test edi,edi
- ┏ .data:0x000008de 7423 je loc_00000903
- ┃ .data:0x000008e0 8bd3 mov edx,ebx
- ┃ .data:0x000008e2 b840244300 mov eax,0x432440
- ┃ .data:0x000008e7 e888feffff call func_00000774
- ┃ .data:0x000008ec 84c0 test al,al
- ┣ .data:0x000008ee 7513 jne loc_00000903
- ┃ .data:0x000008f0 6800800000 push 0x8000
- ┃ .data:0x000008f5 6a00 push 0x0
- ┃ .data:0x000008f7 8b03 mov eax,DWORD PTR [ebx]
- ┃ .data:0x000008f9 50 push eax
- ┃ .data:0x000008fa e8f5fdffff call func_000006f4
- ┃ .data:0x000008ff 33c0 xor eax,eax
- ┃ .data:0x00000901 8903 mov DWORD PTR [ebx],eax
- ┃ .data:0x00000903
- ┃ .data:0x00000903 loc_00000903:
- ┗▶ .data:0x00000903 5f pop edi
- .data:0x00000904 5e pop esi
- .data:0x00000905 5b pop ebx
- .data:0x00000906 c3 ret
- .data:0x00000907 90 nop
- .data:0x00000908 ; =============== F U N C T I O N ====================================
- .data:0x00000908 ; CODE XREF: 0x00000c18
- .data:0x00000908 ; CODE XREF: 0x00000c5f
- .data:0x00000908
- .data:0x00000908 func_00000908:
- .data:0x00000908 53 push ebx
- .data:0x00000909 56 push esi
- .data:0x0000090a 57 push edi
- .data:0x0000090b 55 push ebp
- .data:0x0000090c 8bd9 mov ebx,ecx
- .data:0x0000090e 8bf2 mov esi,edx
- .data:0x00000910 8be8 mov ebp,eax
- .data:0x00000912 c7430400001000 mov DWORD PTR [ebx+0x4],0x100000
- .data:0x00000919 6a04 push 0x4
- .data:0x0000091b 6800200000 push 0x2000
- .data:0x00000920 6800001000 push 0x100000
- .data:0x00000925 55 push ebp
- .data:0x00000926 e8c1fdffff call func_000006ec
- .data:0x0000092b 8bf8 mov edi,eax
- .data:0x0000092d 893b mov DWORD PTR [ebx],edi
- .data:0x0000092f 85ff test edi,edi
- ┏ .data:0x00000931 751f jne loc_00000952
- ┃ .data:0x00000933 81c6ffff0000 add esi,0xffff
- ┃ .data:0x00000939 81e60000ffff and esi,0xffff0000
- ┃ .data:0x0000093f 897304 mov DWORD PTR [ebx+0x4],esi
- ┃ .data:0x00000942 6a04 push 0x4
- ┃ .data:0x00000944 6800200000 push 0x2000
- ┃ .data:0x00000949 56 push esi
- ┃ .data:0x0000094a 55 push ebp
- ┃ .data:0x0000094b e89cfdffff call func_000006ec
- ┃ .data:0x00000950 8903 mov DWORD PTR [ebx],eax
- ┃ .data:0x00000952
- ┃ .data:0x00000952 loc_00000952:
- ┗▶ .data:0x00000952 833b00 cmp DWORD PTR [ebx],0x0
- ┏ .data:0x00000955 7423 je loc_0000097a
- ┃ .data:0x00000957 8bd3 mov edx,ebx
- ┃ .data:0x00000959 b840244300 mov eax,0x432440
- ┃ .data:0x0000095e e811feffff call func_00000774
- ┃ .data:0x00000963 84c0 test al,al
- ┣ .data:0x00000965 7513 jne loc_0000097a
- ┃ .data:0x00000967 6800800000 push 0x8000
- ┃ .data:0x0000096c 6a00 push 0x0
- ┃ .data:0x0000096e 8b03 mov eax,DWORD PTR [ebx]
- ┃ .data:0x00000970 50 push eax
- ┃ .data:0x00000971 e87efdffff call func_000006f4
- ┃ .data:0x00000976 33c0 xor eax,eax
- ┃ .data:0x00000978 8903 mov DWORD PTR [ebx],eax
- ┃ .data:0x0000097a
- ┃ .data:0x0000097a loc_0000097a:
- ┗▶ .data:0x0000097a 5d pop ebp
- .data:0x0000097b 5f pop edi
- .data:0x0000097c 5e pop esi
- .data:0x0000097d 5b pop ebx
- .data:0x0000097e c3 ret
- .data:0x0000097f 90 nop
- .data:0x00000980 ; =============== F U N C T I O N ====================================
- .data:0x00000980 ; CODE XREF: 0x00000c91
- .data:0x00000980 ; CODE XREF: 0x00000bba
- .data:0x00000980 ; CODE XREF: 0x00000d45
- .data:0x00000980 ; CODE XREF: 0x00000c46
- .data:0x00000980
- .data:0x00000980 func_00000980:
- .data:0x00000980 53 push ebx
- .data:0x00000981 56 push esi
- .data:0x00000982 57 push edi
- .data:0x00000983 55 push ebp
- .data:0x00000984 83c4f0 add esp,0xfffffff0
- .data:0x00000987 894c2404 mov DWORD PTR [esp+0x4],ecx
- .data:0x0000098b 891424 mov DWORD PTR [esp],edx
- .data:0x0000098e c7442408ffffffff mov DWORD PTR [esp+0x8],0xffffffff
- .data:0x00000996 33ed xor ebp,ebp
- .data:0x00000998 8bf8 mov edi,eax
- .data:0x0000099a 8b0424 mov eax,DWORD PTR [esp]
- .data:0x0000099d 03c7 add eax,edi
- .data:0x0000099f 8944240c mov DWORD PTR [esp+0xc],eax
- .data:0x000009a3 8b1d40244300 mov ebx,DWORD PTR ds:0x432440
- ┏━━ .data:0x000009a9 eb4b jmp loc_000009f6
- ┃ .data:0x000009ab
- ┃ .data:0x000009ab loc_000009ab:
- ┏╋━━▶ .data:0x000009ab 8b7308 mov esi,DWORD PTR [ebx+0x8]
- ┃┃ .data:0x000009ae 3bfe cmp edi,esi
- ┃┃┏━ .data:0x000009b0 7742 ja loc_000009f4
- ┃┃┃ .data:0x000009b2 8bc6 mov eax,esi
- ┃┃┃ .data:0x000009b4 03430c add eax,DWORD PTR [ebx+0xc]
- ┃┃┃ .data:0x000009b7 3b44240c cmp eax,DWORD PTR [esp+0xc]
- ┃┃┣━ .data:0x000009bb 7737 ja loc_000009f4
- ┃┃┃ .data:0x000009bd 3b742408 cmp esi,DWORD PTR [esp+0x8]
- ┃┃┃┏ .data:0x000009c1 7304 jae loc_000009c7
- ┃┃┃┃ .data:0x000009c3 89742408 mov DWORD PTR [esp+0x8],esi
- ┃┃┃┃ .data:0x000009c7
- ┃┃┃┃ .data:0x000009c7 loc_000009c7:
- ┃┃┃┗▶ .data:0x000009c7 8bc6 mov eax,esi
- ┃┃┃ .data:0x000009c9 03430c add eax,DWORD PTR [ebx+0xc]
- ┃┃┃ .data:0x000009cc 3be8 cmp ebp,eax
- ┃┃┃┏ .data:0x000009ce 7302 jae loc_000009d2
- ┃┃┃┃ .data:0x000009d0 8be8 mov ebp,eax
- ┃┃┃┃ .data:0x000009d2
- ┃┃┃┃ .data:0x000009d2 loc_000009d2:
- ┃┃┃┗▶ .data:0x000009d2 6800800000 push 0x8000
- ┃┃┃ .data:0x000009d7 6a00 push 0x0
- ┃┃┃ .data:0x000009d9 56 push esi
- ┃┃┃ .data:0x000009da e815fdffff call func_000006f4
- ┃┃┃ .data:0x000009df 85c0 test eax,eax
- ┃┃┃┏ .data:0x000009e1 750a jne loc_000009ed
- ┃┃┃┃ .data:0x000009e3 c7051c24430001000000 mov DWORD PTR ds:0x43241c,0x1
- ┃┃┃┃ .data:0x000009ed
- ┃┃┃┃ .data:0x000009ed loc_000009ed:
- ┃┃┃┗▶ .data:0x000009ed 8bc3 mov eax,ebx
- ┃┃┃ .data:0x000009ef e8b0fdffff call func_000007a4
- ┃┃┃ .data:0x000009f4
- ┃┃┃ .data:0x000009f4 loc_000009f4:
- ┃┃┗━▶ .data:0x000009f4 8b1b mov ebx,DWORD PTR [ebx]
- ┃┃ .data:0x000009f6
- ┃┃ .data:0x000009f6 loc_000009f6:
- ┃┗━━▶ .data:0x000009f6 81fb40244300 cmp ebx,0x432440
- ┗━━━ .data:0x000009fc 75ad jne loc_000009ab
- .data:0x000009fe 8b442404 mov eax,DWORD PTR [esp+0x4]
- .data:0x00000a02 33d2 xor edx,edx
- .data:0x00000a04 8910 mov DWORD PTR [eax],edx
- .data:0x00000a06 85ed test ebp,ebp
- ┏ .data:0x00000a08 7415 je loc_00000a1f
- ┃ .data:0x00000a0a 8b442404 mov eax,DWORD PTR [esp+0x4]
- ┃ .data:0x00000a0e 8b542408 mov edx,DWORD PTR [esp+0x8]
- ┃ .data:0x00000a12 8910 mov DWORD PTR [eax],edx
- ┃ .data:0x00000a14 2b6c2408 sub ebp,DWORD PTR [esp+0x8]
- ┃ .data:0x00000a18 8b442404 mov eax,DWORD PTR [esp+0x4]
- ┃ .data:0x00000a1c 896804 mov DWORD PTR [eax+0x4],ebp
- ┃ .data:0x00000a1f
- ┃ .data:0x00000a1f loc_00000a1f:
- ┗▶ .data:0x00000a1f 83c410 add esp,0x10
- .data:0x00000a22 5d pop ebp
- .data:0x00000a23 5f pop edi
- .data:0x00000a24 5e pop esi
- .data:0x00000a25 5b pop ebx
- .data:0x00000a26 c3 ret
- .data:0x00000a27 90 nop
- .data:0x00000a28 ; =============== F U N C T I O N ====================================
- .data:0x00000a28 ; CODE XREF: 0x00000b69
- .data:0x00000a28 ; CODE XREF: 0x00000cb2
- .data:0x00000a28
- .data:0x00000a28 func_00000a28:
- .data:0x00000a28 53 push ebx
- .data:0x00000a29 56 push esi
- .data:0x00000a2a 57 push edi
- .data:0x00000a2b 55 push ebp
- .data:0x00000a2c 83c4f4 add esp,0xfffffff4
- .data:0x00000a2f 894c2404 mov DWORD PTR [esp+0x4],ecx
- .data:0x00000a33 891424 mov DWORD PTR [esp],edx
- .data:0x00000a36 8bd0 mov edx,eax
- .data:0x00000a38 8bea mov ebp,edx
- .data:0x00000a3a 81e500f0ffff and ebp,0xfffff000
- .data:0x00000a40 031424 add edx,DWORD PTR [esp]
- .data:0x00000a43 81c2ff0f0000 add edx,0xfff
- .data:0x00000a49 81e200f0ffff and edx,0xfffff000
- .data:0x00000a4f 89542408 mov DWORD PTR [esp+0x8],edx
- .data:0x00000a53 8b442404 mov eax,DWORD PTR [esp+0x4]
- .data:0x00000a57 8928 mov DWORD PTR [eax],ebp
- .data:0x00000a59 8b442408 mov eax,DWORD PTR [esp+0x8]
- .data:0x00000a5d 2bc5 sub eax,ebp
- .data:0x00000a5f 8b542404 mov edx,DWORD PTR [esp+0x4]
- .data:0x00000a63 894204 mov DWORD PTR [edx+0x4],eax
- .data:0x00000a66 8b3540244300 mov esi,DWORD PTR ds:0x432440
- ┏━━ .data:0x00000a6c eb3c jmp loc_00000aaa
- ┃ .data:0x00000a6e
- ┃ .data:0x00000a6e loc_00000a6e:
- ┏╋━━▶ .data:0x00000a6e 8b5e08 mov ebx,DWORD PTR [esi+0x8]
- ┃┃ .data:0x00000a71 8b7e0c mov edi,DWORD PTR [esi+0xc]
- ┃┃ .data:0x00000a74 03fb add edi,ebx
- ┃┃ .data:0x00000a76 3beb cmp ebp,ebx
- ┃┃ ┏ .data:0x00000a78 7602 jbe loc_00000a7c
- ┃┃ ┃ .data:0x00000a7a 8bdd mov ebx,ebp
- ┃┃ ┃ .data:0x00000a7c
- ┃┃ ┃ .data:0x00000a7c loc_00000a7c:
- ┃┃ ┗▶ .data:0x00000a7c 3b7c2408 cmp edi,DWORD PTR [esp+0x8]
- ┃┃ ┏ .data:0x00000a80 7604 jbe loc_00000a86
- ┃┃ ┃ .data:0x00000a82 8b7c2408 mov edi,DWORD PTR [esp+0x8]
- ┃┃ ┃ .data:0x00000a86
- ┃┃ ┃ .data:0x00000a86 loc_00000a86:
- ┃┃ ┗▶ .data:0x00000a86 3bfb cmp edi,ebx
- ┃┃ ┏ .data:0x00000a88 761e jbe loc_00000aa8
- ┃┃ ┃ .data:0x00000a8a 6a04 push 0x4
- ┃┃ ┃ .data:0x00000a8c 6800100000 push 0x1000
- ┃┃ ┃ .data:0x00000a91 2bfb sub edi,ebx
- ┃┃ ┃ .data:0x00000a93 57 push edi
- ┃┃ ┃ .data:0x00000a94 53 push ebx
- ┃┃ ┃ .data:0x00000a95 e852fcffff call func_000006ec
- ┃┃ ┃ .data:0x00000a9a 85c0 test eax,eax
- ┃┃ ┣ .data:0x00000a9c 750a jne loc_00000aa8
- ┃┃ ┃ .data:0x00000a9e 8b442404 mov eax,DWORD PTR [esp+0x4]
- ┃┃ ┃ .data:0x00000aa2 33d2 xor edx,edx
- ┃┃ ┃ .data:0x00000aa4 8910 mov DWORD PTR [eax],edx
- ┃┃┏╋ .data:0x00000aa6 eb0a jmp loc_00000ab2
- ┃┃┃┃ .data:0x00000aa8
- ┃┃┃┃ .data:0x00000aa8 loc_00000aa8:
- ┃┃┃┗▶ .data:0x00000aa8 8b36 mov esi,DWORD PTR [esi]
- ┃┃┃ .data:0x00000aaa
- ┃┃┃ .data:0x00000aaa loc_00000aaa:
- ┃┗╋━▶ .data:0x00000aaa 81fe40244300 cmp esi,0x432440
- ┗━╋━ .data:0x00000ab0 75bc jne loc_00000a6e
- ┃ .data:0x00000ab2
- ┃ .data:0x00000ab2 loc_00000ab2:
- ┗━▶ .data:0x00000ab2 83c40c add esp,0xc
- .data:0x00000ab5 5d pop ebp
- .data:0x00000ab6 5f pop edi
- .data:0x00000ab7 5e pop esi
- .data:0x00000ab8 5b pop ebx
- .data:0x00000ab9 c3 ret
- .data:0x00000aba 8bc0 mov eax,eax
- .data:0x00000abc ; =============== F U N C T I O N ====================================
- .data:0x00000abc ; CODE XREF: 0x00000d1e
- .data:0x00000abc
- .data:0x00000abc func_00000abc:
- .data:0x00000abc 53 push ebx
- .data:0x00000abd 56 push esi
- .data:0x00000abe 57 push edi
- .data:0x00000abf 55 push ebp
- .data:0x00000ac0 51 push ecx
- .data:0x00000ac1 8bd8 mov ebx,eax
- .data:0x00000ac3 8bf3 mov esi,ebx
- .data:0x00000ac5 81c6ff0f0000 add esi,0xfff
- .data:0x00000acb 81e600f0ffff and esi,0xfffff000
- .data:0x00000ad1 893424 mov DWORD PTR [esp],esi
- .data:0x00000ad4 8beb mov ebp,ebx
- .data:0x00000ad6 03ea add ebp,edx
- .data:0x00000ad8 81e500f0ffff and ebp,0xfffff000
- .data:0x00000ade 8b0424 mov eax,DWORD PTR [esp]
- .data:0x00000ae1 8901 mov DWORD PTR [ecx],eax
- .data:0x00000ae3 8bc5 mov eax,ebp
- .data:0x00000ae5 2b0424 sub eax,DWORD PTR [esp]
- .data:0x00000ae8 894104 mov DWORD PTR [ecx+0x4],eax
- .data:0x00000aeb 8b3540244300 mov esi,DWORD PTR ds:0x432440
- ┏━ .data:0x00000af1 eb38 jmp loc_00000b2b
- ┃ .data:0x00000af3
- ┃ .data:0x00000af3 loc_00000af3:
- ┏╋━▶ .data:0x00000af3 8b5e08 mov ebx,DWORD PTR [esi+0x8]
- ┃┃ .data:0x00000af6 8b7e0c mov edi,DWORD PTR [esi+0xc]
- ┃┃ .data:0x00000af9 03fb add edi,ebx
- ┃┃ .data:0x00000afb 3b1c24 cmp ebx,DWORD PTR [esp]
- ┃┃┏ .data:0x00000afe 7303 jae loc_00000b03
- ┃┃┃ .data:0x00000b00 8b1c24 mov ebx,DWORD PTR [esp]
- ┃┃┃ .data:0x00000b03
- ┃┃┃ .data:0x00000b03 loc_00000b03:
- ┃┃┗▶ .data:0x00000b03 3bef cmp ebp,edi
- ┃┃┏ .data:0x00000b05 7302 jae loc_00000b09
- ┃┃┃ .data:0x00000b07 8bfd mov edi,ebp
- ┃┃┃ .data:0x00000b09
- ┃┃┃ .data:0x00000b09 loc_00000b09:
- ┃┃┗▶ .data:0x00000b09 3bfb cmp edi,ebx
- ┃┃┏ .data:0x00000b0b 761c jbe loc_00000b29
- ┃┃┃ .data:0x00000b0d 6800400000 push 0x4000
- ┃┃┃ .data:0x00000b12 2bfb sub edi,ebx
- ┃┃┃ .data:0x00000b14 57 push edi
- ┃┃┃ .data:0x00000b15 53 push ebx
- ┃┃┃ .data:0x00000b16 e8d9fbffff call func_000006f4
- ┃┃┃ .data:0x00000b1b 85c0 test eax,eax
- ┃┃┣ .data:0x00000b1d 750a jne loc_00000b29
- ┃┃┃ .data:0x00000b1f c7051c24430002000000 mov DWORD PTR ds:0x43241c,0x2
- ┃┃┃ .data:0x00000b29
- ┃┃┃ .data:0x00000b29 loc_00000b29:
- ┃┃┗▶ .data:0x00000b29 8b36 mov esi,DWORD PTR [esi]
- ┃┃ .data:0x00000b2b
- ┃┃ .data:0x00000b2b loc_00000b2b:
- ┃┗━▶ .data:0x00000b2b 81fe40244300 cmp esi,0x432440
- ┗━━ .data:0x00000b31 75c0 jne loc_00000af3
- .data:0x00000b33 5a pop edx
- .data:0x00000b34 5d pop ebp
- .data:0x00000b35 5f pop edi
- .data:0x00000b36 5e pop esi
- .data:0x00000b37 5b pop ebx
- .data:0x00000b38 c3 ret
- .data:0x00000b39 8d4000 lea eax,[eax+0x0]
- .data:0x00000b3c ; =============== F U N C T I O N ====================================
- .data:0x00000b3c ; CODE XREF: 0x000012c7
- .data:0x00000b3c
- .data:0x00000b3c func_00000b3c:
- .data:0x00000b3c 53 push ebx
- .data:0x00000b3d 56 push esi
- .data:0x00000b3e 57 push edi
- .data:0x00000b3f 55 push ebp
- .data:0x00000b40 83c4f8 add esp,0xfffffff8
- .data:0x00000b43 8bf2 mov esi,edx
- .data:0x00000b45 8bf8 mov edi,eax
- .data:0x00000b47 bd50244300 mov ebp,0x432450
- .data:0x00000b4c 81c7ff3f0000 add edi,0x3fff
- .data:0x00000b52 81e700c0ffff and edi,0xffffc000
- .data:0x00000b58
- .data:0x00000b58 loc_00000b58:
- ┏━━━━▶ .data:0x00000b58 8b5d00 mov ebx,DWORD PTR [ebp+0x0]
- ┃ ┏━ .data:0x00000b5b eb33 jmp loc_00000b90
- ┃ ┃ .data:0x00000b5d
- ┃ ┃ .data:0x00000b5d loc_00000b5d:
- ┃ ┏╋━▶ .data:0x00000b5d 3b7b0c cmp edi,DWORD PTR [ebx+0xc]
- ┃ ┃┃┏ .data:0x00000b60 7f2c jg loc_00000b8e
- ┃ ┃┃┃ .data:0x00000b62 8bce mov ecx,esi
- ┃ ┃┃┃ .data:0x00000b64 8bd7 mov edx,edi
- ┃ ┃┃┃ .data:0x00000b66 8b4308 mov eax,DWORD PTR [ebx+0x8]
- ┃ ┃┃┃ .data:0x00000b69 e8bafeffff call func_00000a28
- ┃ ┃┃┃ .data:0x00000b6e 833e00 cmp DWORD PTR [esi],0x0
- ┃┏╋╋╋ .data:0x00000b71 7450 je loc_00000bc3
- ┃┃┃┃┃ .data:0x00000b73 8b4604 mov eax,DWORD PTR [esi+0x4]
- ┃┃┃┃┃ .data:0x00000b76 014308 add DWORD PTR [ebx+0x8],eax
- ┃┃┃┃┃ .data:0x00000b79 8b4604 mov eax,DWORD PTR [esi+0x4]
- ┃┃┃┃┃ .data:0x00000b7c 29430c sub DWORD PTR [ebx+0xc],eax
- ┃┃┃┃┃ .data:0x00000b7f 837b0c00 cmp DWORD PTR [ebx+0xc],0x0
- ┃┣╋╋╋ .data:0x00000b83 753e jne loc_00000bc3
- ┃┃┃┃┃ .data:0x00000b85 8bc3 mov eax,ebx
- ┃┃┃┃┃ .data:0x00000b87 e818fcffff call func_000007a4
- ┃┣╋╋╋ .data:0x00000b8c eb35 jmp loc_00000bc3
- ┃┃┃┃┃ .data:0x00000b8e
- ┃┃┃┃┃ .data:0x00000b8e loc_00000b8e:
- ┃┃┃┃┗▶ .data:0x00000b8e 8b1b mov ebx,DWORD PTR [ebx]
- ┃┃┃┃ .data:0x00000b90
- ┃┃┃┃ .data:0x00000b90 loc_00000b90:
- ┃┃┃┗━▶ .data:0x00000b90 3bdd cmp ebx,ebp
- ┃┃┗━━ .data:0x00000b92 75c9 jne loc_00000b5d
- ┃┃ .data:0x00000b94 8bd6 mov edx,esi
- ┃┃ .data:0x00000b96 8bc7 mov eax,edi
- ┃┃ .data:0x00000b98 e807fdffff call func_000008a4
- ┃┃ .data:0x00000b9d 833e00 cmp DWORD PTR [esi],0x0
- ┃┣━━━ .data:0x00000ba0 7421 je loc_00000bc3
- ┃┃ .data:0x00000ba2 8bcc mov ecx,esp
- ┃┃ .data:0x00000ba4 8bd6 mov edx,esi
- ┃┃ .data:0x00000ba6 8bc5 mov eax,ebp
- ┃┃ .data:0x00000ba8 e803fcffff call func_000007b0
- ┃┃ .data:0x00000bad 833c2400 cmp DWORD PTR [esp],0x0
- ┗╋━━━ .data:0x00000bb1 75a5 jne loc_00000b58
- ┃ .data:0x00000bb3 8bcc mov ecx,esp
- ┃ .data:0x00000bb5 8b5604 mov edx,DWORD PTR [esi+0x4]
- ┃ .data:0x00000bb8 8b06 mov eax,DWORD PTR [esi]
- ┃ .data:0x00000bba e8c1fdffff call func_00000980
- ┃ .data:0x00000bbf 33c0 xor eax,eax
- ┃ .data:0x00000bc1 8906 mov DWORD PTR [esi],eax
- ┃ .data:0x00000bc3
- ┃ .data:0x00000bc3 loc_00000bc3:
- ┗━━━▶ .data:0x00000bc3 59 pop ecx
- .data:0x00000bc4 5a pop edx
- .data:0x00000bc5 5d pop ebp
- .data:0x00000bc6 5f pop edi
- .data:0x00000bc7 5e pop esi
- .data:0x00000bc8 5b pop ebx
- .data:0x00000bc9 c3 ret
- .data:0x00000bca 8bc0 mov eax,eax
- .data:0x00000bcc ; =============== F U N C T I O N ====================================
- .data:0x00000bcc ; CODE XREF: 0x000012f8
- .data:0x00000bcc
- .data:0x00000bcc func_00000bcc:
- .data:0x00000bcc 53 push ebx
- .data:0x00000bcd 56 push esi
- .data:0x00000bce 57 push edi
- .data:0x00000bcf 55 push ebp
- .data:0x00000bd0 83c4ec add esp,0xffffffec
- .data:0x00000bd3 890c24 mov DWORD PTR [esp],ecx
- .data:0x00000bd6 8bfa mov edi,edx
- .data:0x00000bd8 8bf0 mov esi,eax
- .data:0x00000bda bd50244300 mov ebp,0x432450
- .data:0x00000bdf 81c7ff3f0000 add edi,0x3fff
- .data:0x00000be5 81e700c0ffff and edi,0xffffc000
- .data:0x00000beb
- .data:0x00000beb loc_00000beb:
- ┏━━▶ .data:0x00000beb 8b5d00 mov ebx,DWORD PTR [ebp+0x0]
- ┃ ┏ .data:0x00000bee eb02 jmp loc_00000bf2
- ┃ ┃ .data:0x00000bf0
- ┃ ┃ .data:0x00000bf0 loc_00000bf0:
- ┃┏╋▶ .data:0x00000bf0 8b1b mov ebx,DWORD PTR [ebx]
- ┃┃┃ .data:0x00000bf2
- ┃┃┃ .data:0x00000bf2 loc_00000bf2:
- ┃┃┗▶ .data:0x00000bf2 3bdd cmp ebx,ebp
- ┃┃┏ .data:0x00000bf4 7405 je loc_00000bfb
- ┃┃┃ .data:0x00000bf6 3b7308 cmp esi,DWORD PTR [ebx+0x8]
- ┃┗╋ .data:0x00000bf9 75f5 jne loc_00000bf0
- ┃ ┃ .data:0x00000bfb
- ┃ ┃ .data:0x00000bfb loc_00000bfb:
- ┃ ┗▶ .data:0x00000bfb 3b7308 cmp esi,DWORD PTR [ebx+0x8]
- ┃ ┏ .data:0x00000bfe 7557 jne loc_00000c57
- ┃ ┃ .data:0x00000c00 3b7b0c cmp edi,DWORD PTR [ebx+0xc]
- ┃┏╋ .data:0x00000c03 0f8e96000000 jle loc_00000c9f
- ┃┃┃ .data:0x00000c09 8d4c2404 lea ecx,[esp+0x4]
- ┃┃┃ .data:0x00000c0d 8bd7 mov edx,edi
- ┃┃┃ .data:0x00000c0f 2b530c sub edx,DWORD PTR [ebx+0xc]
- ┃┃┃ .data:0x00000c12 8b4308 mov eax,DWORD PTR [ebx+0x8]
- ┃┃┃ .data:0x00000c15 03430c add eax,DWORD PTR [ebx+0xc]
- ┃┃┃ .data:0x00000c18 e8ebfcffff call func_00000908
- ┃┃┃ .data:0x00000c1d 837c240400 cmp DWORD PTR [esp+0x4],0x0
- ┃┃┣ .data:0x00000c22 7433 je loc_00000c57
- ┃┃┃ .data:0x00000c24 8d4c240c lea ecx,[esp+0xc]
- ┃┃┃ .data:0x00000c28 8d542404 lea edx,[esp+0x4]
- ┃┃┃ .data:0x00000c2c 8bc5 mov eax,ebp
- ┃┃┃ .data:0x00000c2e e87dfbffff call func_000007b0
- ┃┃┃ .data:0x00000c33 837c240c00 cmp DWORD PTR [esp+0xc],0x0
- ┣╋╋ .data:0x00000c38 75b1 jne loc_00000beb
- ┃┃┃ .data:0x00000c3a 8d4c240c lea ecx,[esp+0xc]
- ┃┃┃ .data:0x00000c3e 8b542408 mov edx,DWORD PTR [esp+0x8]
- ┃┃┃ .data:0x00000c42 8b442404 mov eax,DWORD PTR [esp+0x4]
- ┃┃┃ .data:0x00000c46 e835fdffff call func_00000980
- ┃┃┃ .data:0x00000c4b 8b0424 mov eax,DWORD PTR [esp]
- ┃┃┃ .data:0x00000c4e 33d2 xor edx,edx
- ┃┃┃ .data:0x00000c50 8910 mov DWORD PTR [eax],edx
- ┏╋╋╋ .data:0x00000c52 e990000000 jmp loc_00000ce7
- ┃┃┃┃ .data:0x00000c57
- ┃┃┃┃ .data:0x00000c57 loc_00000c57:
- ┃┃┃┗▶ .data:0x00000c57 8d4c2404 lea ecx,[esp+0x4]
- ┃┃┃ .data:0x00000c5b 8bd7 mov edx,edi
- ┃┃┃ .data:0x00000c5d 8bc6 mov eax,esi
- ┃┃┃ .data:0x00000c5f e8a4fcffff call func_00000908
- ┃┃┃ .data:0x00000c64 837c240400 cmp DWORD PTR [esp+0x4],0x0
- ┃┃┣━ .data:0x00000c69 7434 je loc_00000c9f
- ┃┃┃ .data:0x00000c6b 8d4c240c lea ecx,[esp+0xc]
- ┃┃┃ .data:0x00000c6f 8d542404 lea edx,[esp+0x4]
- ┃┃┃ .data:0x00000c73 8bc5 mov eax,ebp
- ┃┃┃ .data:0x00000c75 e836fbffff call func_000007b0
- ┃┃┃ .data:0x00000c7a 837c240c00 cmp DWORD PTR [esp+0xc],0x0
- ┃┗╋━ .data:0x00000c7f 0f8566ffffff jne loc_00000beb
- ┃ ┃ .data:0x00000c85 8d4c240c lea ecx,[esp+0xc]
- ┃ ┃ .data:0x00000c89 8b542408 mov edx,DWORD PTR [esp+0x8]
- ┃ ┃ .data:0x00000c8d 8b442404 mov eax,DWORD PTR [esp+0x4]
- ┃ ┃ .data:0x00000c91 e8eafcffff call func_00000980
- ┃ ┃ .data:0x00000c96 8b0424 mov eax,DWORD PTR [esp]
- ┃ ┃ .data:0x00000c99 33d2 xor edx,edx
- ┃ ┃ .data:0x00000c9b 8910 mov DWORD PTR [eax],edx
- ┣━╋━ .data:0x00000c9d eb48 jmp loc_00000ce7
- ┃ ┃ .data:0x00000c9f
- ┃ ┃ .data:0x00000c9f loc_00000c9f:
- ┃ ┗━▶ .data:0x00000c9f 8b6b08 mov ebp,DWORD PTR [ebx+0x8]
- ┃ .data:0x00000ca2 3bf5 cmp esi,ebp
- ┃ ┏━ .data:0x00000ca4 753a jne loc_00000ce0
- ┃ ┃ .data:0x00000ca6 3b7b0c cmp edi,DWORD PTR [ebx+0xc]
- ┃ ┣━ .data:0x00000ca9 7f35 jg loc_00000ce0
- ┃ ┃ .data:0x00000cab 8b0c24 mov ecx,DWORD PTR [esp]
- ┃ ┃ .data:0x00000cae 8bd7 mov edx,edi
- ┃ ┃ .data:0x00000cb0 8bc5 mov eax,ebp
- ┃ ┃ .data:0x00000cb2 e871fdffff call func_00000a28
- ┃ ┃ .data:0x00000cb7 8b0424 mov eax,DWORD PTR [esp]
- ┃ ┃ .data:0x00000cba 833800 cmp DWORD PTR [eax],0x0
- ┣━╋━ .data:0x00000cbd 7428 je loc_00000ce7
- ┃ ┃ .data:0x00000cbf 8b0424 mov eax,DWORD PTR [esp]
- ┃ ┃ .data:0x00000cc2 8b4004 mov eax,DWORD PTR [eax+0x4]
- ┃ ┃ .data:0x00000cc5 014308 add DWORD PTR [ebx+0x8],eax
- ┃ ┃ .data:0x00000cc8 8b0424 mov eax,DWORD PTR [esp]
- ┃ ┃ .data:0x00000ccb 8b4004 mov eax,DWORD PTR [eax+0x4]
- ┃ ┃ .data:0x00000cce 29430c sub DWORD PTR [ebx+0xc],eax
- ┃ ┃ .data:0x00000cd1 837b0c00 cmp DWORD PTR [ebx+0xc],0x0
- ┣━╋━ .data:0x00000cd5 7510 jne loc_00000ce7
- ┃ ┃ .data:0x00000cd7 8bc3 mov eax,ebx
- ┃ ┃ .data:0x00000cd9 e8c6faffff call func_000007a4
- ┣━╋━ .data:0x00000cde eb07 jmp loc_00000ce7
- ┃ ┃ .data:0x00000ce0
- ┃ ┃ .data:0x00000ce0 loc_00000ce0:
- ┃ ┗━▶ .data:0x00000ce0 8b0424 mov eax,DWORD PTR [esp]
- ┃ .data:0x00000ce3 33d2 xor edx,edx
- ┃ .data:0x00000ce5 8910 mov DWORD PTR [eax],edx
- ┃ .data:0x00000ce7
- ┃ .data:0x00000ce7 loc_00000ce7:
- ┗━━━▶ .data:0x00000ce7 83c414 add esp,0x14
- .data:0x00000cea 5d pop ebp
- .data:0x00000ceb 5f pop edi
- .data:0x00000cec 5e pop esi
- .data:0x00000ced 5b pop ebx
- .data:0x00000cee c3 ret
- .data:0x00000cef 90 nop
- .data:0x00000cf0 ; =============== F U N C T I O N ====================================
- .data:0x00000cf0 ; CODE XREF: 0x0000110c
- .data:0x00000cf0 ; CODE XREF: 0x0000111d
- .data:0x00000cf0
- .data:0x00000cf0 func_00000cf0:
- .data:0x00000cf0 53 push ebx
- .data:0x00000cf1 56 push esi
- .data:0x00000cf2 57 push edi
- .data:0x00000cf3 83c4ec add esp,0xffffffec
- .data:0x00000cf6 8bf9 mov edi,ecx
- .data:0x00000cf8 891424 mov DWORD PTR [esp],edx
- .data:0x00000cfb 8d98ff3f0000 lea ebx,[eax+0x3fff]
- .data:0x00000d01 81e300c0ffff and ebx,0xffffc000
- .data:0x00000d07 8b3424 mov esi,DWORD PTR [esp]
- .data:0x00000d0a 03f0 add esi,eax
- .data:0x00000d0c 81e600c0ffff and esi,0xffffc000
- .data:0x00000d12 3bde cmp ebx,esi
- ┏━ .data:0x00000d14 735b jae loc_00000d71
- ┃ .data:0x00000d16 8bcf mov ecx,edi
- ┃ .data:0x00000d18 8bd6 mov edx,esi
- ┃ .data:0x00000d1a 2bd3 sub edx,ebx
- ┃ .data:0x00000d1c 8bc3 mov eax,ebx
- ┃ .data:0x00000d1e e899fdffff call func_00000abc
- ┃ .data:0x00000d23 8d4c2404 lea ecx,[esp+0x4]
- ┃ .data:0x00000d27 8bd7 mov edx,edi
- ┃ .data:0x00000d29 b850244300 mov eax,0x432450
- ┃ .data:0x00000d2e e87dfaffff call func_000007b0
- ┃ .data:0x00000d33 8b5c2404 mov ebx,DWORD PTR [esp+0x4]
- ┃ .data:0x00000d37 85db test ebx,ebx
- ┃┏ .data:0x00000d39 741f je loc_00000d5a
- ┃┃ .data:0x00000d3b 8d4c240c lea ecx,[esp+0xc]
- ┃┃ .data:0x00000d3f 8b542408 mov edx,DWORD PTR [esp+0x8]
- ┃┃ .data:0x00000d43 8bc3 mov eax,ebx
- ┃┃ .data:0x00000d45 e836fcffff call func_00000980
- ┃┃ .data:0x00000d4a 8b44240c mov eax,DWORD PTR [esp+0xc]
- ┃┃ .data:0x00000d4e 89442404 mov DWORD PTR [esp+0x4],eax
- ┃┃ .data:0x00000d52 8b442410 mov eax,DWORD PTR [esp+0x10]
- ┃┃ .data:0x00000d56 89442408 mov DWORD PTR [esp+0x8],eax
- ┃┃ .data:0x00000d5a
- ┃┃ .data:0x00000d5a loc_00000d5a:
- ┃┗▶ .data:0x00000d5a 837c240400 cmp DWORD PTR [esp+0x4],0x0
- ┃┏ .data:0x00000d5f 7414 je loc_00000d75
- ┃┃ .data:0x00000d61 8d542404 lea edx,[esp+0x4]
- ┃┃ .data:0x00000d65 b850244300 mov eax,0x432450
- ┃┃ .data:0x00000d6a e8a5faffff call func_00000814
- ┃┣ .data:0x00000d6f eb04 jmp loc_00000d75
- ┃┃ .data:0x00000d71
- ┃┃ .data:0x00000d71 loc_00000d71:
- ┗╋▶ .data:0x00000d71 33c0 xor eax,eax
- ┃ .data:0x00000d73 8907 mov DWORD PTR [edi],eax
- ┃ .data:0x00000d75
- ┃ .data:0x00000d75 loc_00000d75:
- ┗▶ .data:0x00000d75 83c414 add esp,0x14
- .data:0x00000d78 5f pop edi
- .data:0x00000d79 5e pop esi
- .data:0x00000d7a 5b pop ebx
- .data:0x00000d7b c3 ret
- .data:0x00000d7c ; =============== F U N C T I O N ====================================
- .data:0x00000d7c ; CODE XREF: 0x000015d9
- .data:0x00000d7c ; CODE XREF: 0x0000144c
- .data:0x00000d7c
- .data:0x00000d7c func_00000d7c:
- .data:0x00000d7c 55 push ebp
- .data:0x00000d7d 8bec mov ebp,esp
- .data:0x00000d7f 33d2 xor edx,edx
- .data:0x00000d81 55 push ebp
- .data:0x00000d82 68321a4000 push 0x401a32
- .data:0x00000d87 64ff32 push DWORD PTR fs:[edx]
- .data:0x00000d8a 648922 mov DWORD PTR fs:[edx],esp
- .data:0x00000d8d 6820244300 push 0x432420
- .data:0x00000d92 e865f9ffff call func_000006fc
- .data:0x00000d97 803d3620430000 cmp BYTE PTR ds:0x432036,0x0
- ┏ .data:0x00000d9e 740a je loc_00000daa
- ┃ .data:0x00000da0 6820244300 push 0x432420
- ┃ .data:0x00000da5 e85af9ffff call func_00000704
- ┃ .data:0x00000daa
- ┃ .data:0x00000daa loc_00000daa:
- ┗▶ .data:0x00000daa b840244300 mov eax,0x432440
- .data:0x00000daf e8b8f9ffff call func_0000076c
- .data:0x00000db4 b850244300 mov eax,0x432450
- .data:0x00000db9 e8aef9ffff call func_0000076c
- .data:0x00000dbe b87c244300 mov eax,0x43247c
- .data:0x00000dc3 e8a4f9ffff call func_0000076c
- .data:0x00000dc8 68f80f0000 push 0xff8
- .data:0x00000dcd 6a00 push 0x0
- .data:0x00000dcf e808f9ffff call func_000006dc
- .data:0x00000dd4 a378244300 mov ds:0x432478,eax
- .data:0x00000dd9 833d7824430000 cmp DWORD PTR ds:0x432478,0x0
- ┏━ .data:0x00000de0 742f je loc_00000e11
- ┃ .data:0x00000de2 b803000000 mov eax,0x3
- ┃ .data:0x00000de7
- ┃ .data:0x00000de7 loc_00000de7:
- ┃┏▶ .data:0x00000de7 8b1578244300 mov edx,DWORD PTR ds:0x432478
- ┃┃ .data:0x00000ded 33c9 xor ecx,ecx
- ┃┃ .data:0x00000def 894c82f4 mov DWORD PTR [edx+eax*4-0xc],ecx
- ┃┃ .data:0x00000df3 40 inc eax
- ┃┃ .data:0x00000df4 3d01040000 cmp eax,0x401
- ┃┗ .data:0x00000df9 75ec jne loc_00000de7
- ┃ .data:0x00000dfb b860244300 mov eax,0x432460
- ┃ .data:0x00000e00 894004 mov DWORD PTR [eax+0x4],eax
- ┃ .data:0x00000e03 8900 mov DWORD PTR [eax],eax
- ┃ .data:0x00000e05 a36c244300 mov ds:0x43246c,eax
- ┃ .data:0x00000e0a c6051924430001 mov BYTE PTR ds:0x432419,0x1
- ┃ .data:0x00000e11
- ┃ .data:0x00000e11 loc_00000e11:
- ┗━▶ .data:0x00000e11 33c0 xor eax,eax
- .data:0x00000e13 5a pop edx
- .data:0x00000e14 59 pop ecx
- .data:0x00000e15 59 pop ecx
- .data:0x00000e16 648910 mov DWORD PTR fs:[eax],edx
- .data:0x00000e19 68391a4000 push 0x401a39
- .data:0x00000e1e
- .data:0x00000e1e loc_00000e1e:
- ┏━▶ .data:0x00000e1e 803d3620430000 cmp BYTE PTR ds:0x432036,0x0
- ┃┏ .data:0x00000e25 740a je loc_00000e31
- ┃┃ .data:0x00000e27 6820244300 push 0x432420
- ┃┃ .data:0x00000e2c e8dbf8ffff call func_0000070c
- ┃┃ .data:0x00000e31
- ┃┃ .data:0x00000e31 loc_00000e31:
- ┃┗▶ .data:0x00000e31 c3 ret
- ┃ .data:0x00000e32 e98d140000 jmp 0x000022c4
- ┗━ .data:0x00000e37 ebe5 jmp loc_00000e1e
- .data:0x00000e39 a019244300 mov al,ds:0x432419
- .data:0x00000e3e 5d pop ebp
- .data:0x00000e3f c3 ret
- .data:0x00000e40 55 push ebp
- .data:0x00000e41 8bec mov ebp,esp
- .data:0x00000e43 53 push ebx
- .data:0x00000e44 803d1924430000 cmp BYTE PTR ds:0x432419,0x0
- ┏━━ .data:0x00000e4b 0f84ce000000 je loc_00000f1f
- ┃ .data:0x00000e51 33d2 xor edx,edx
- ┃ .data:0x00000e53 55 push ebp
- ┃ .data:0x00000e54 68181b4000 push 0x401b18
- ┃ .data:0x00000e59 64ff32 push DWORD PTR fs:[edx]
- ┃ .data:0x00000e5c 648922 mov DWORD PTR fs:[edx],esp
- ┃ .data:0x00000e5f 803d3620430000 cmp BYTE PTR ds:0x432036,0x0
- ┃ ┏ .data:0x00000e66 740a je loc_00000e72
- ┃ ┃ .data:0x00000e68 6820244300 push 0x432420
- ┃ ┃ .data:0x00000e6d e892f8ffff call func_00000704
- ┃ ┃ .data:0x00000e72
- ┃ ┃ .data:0x00000e72 loc_00000e72:
- ┃ ┗▶ .data:0x00000e72 c6051924430000 mov BYTE PTR ds:0x432419,0x0
- ┃ .data:0x00000e79 a178244300 mov eax,ds:0x432478
- ┃ .data:0x00000e7e 50 push eax
- ┃ .data:0x00000e7f e860f8ffff call func_000006e4
- ┃ .data:0x00000e84 33c0 xor eax,eax
- ┃ .data:0x00000e86 a378244300 mov ds:0x432478,eax
- ┃ .data:0x00000e8b 8b1d40244300 mov ebx,DWORD PTR ds:0x432440
- ┃ ┏ .data:0x00000e91 eb12 jmp loc_00000ea5
- ┃ ┃ .data:0x00000e93
- ┃ ┃ .data:0x00000e93 loc_00000e93:
- ┃┏╋▶ .data:0x00000e93 6800800000 push 0x8000
- ┃┃┃ .data:0x00000e98 6a00 push 0x0
- ┃┃┃ .data:0x00000e9a 8b4308 mov eax,DWORD PTR [ebx+0x8]
- ┃┃┃ .data:0x00000e9d 50 push eax
- ┃┃┃ .data:0x00000e9e e851f8ffff call func_000006f4
- ┃┃┃ .data:0x00000ea3 8b1b mov ebx,DWORD PTR [ebx]
- ┃┃┃ .data:0x00000ea5
- ┃┃┃ .data:0x00000ea5 loc_00000ea5:
- ┃┃┗▶ .data:0x00000ea5 81fb40244300 cmp ebx,0x432440
- ┃┗━ .data:0x00000eab 75e6 jne loc_00000e93
- ┃ .data:0x00000ead b840244300 mov eax,0x432440
- ┃ .data:0x00000eb2 e8b5f8ffff call func_0000076c
- ┃ .data:0x00000eb7 b850244300 mov eax,0x432450
- ┃ .data:0x00000ebc e8abf8ffff call func_0000076c
- ┃ .data:0x00000ec1 b87c244300 mov eax,0x43247c
- ┃ .data:0x00000ec6 e8a1f8ffff call func_0000076c
- ┃ .data:0x00000ecb a138244300 mov eax,ds:0x432438
- ┃ .data:0x00000ed0 85c0 test eax,eax
- ┃┏━ .data:0x00000ed2 7417 je loc_00000eeb
- ┃┃ .data:0x00000ed4
- ┃┃ .data:0x00000ed4 loc_00000ed4:
- ┃┃┏▶ .data:0x00000ed4 8b10 mov edx,DWORD PTR [eax]
- ┃┃┃ .data:0x00000ed6 891538244300 mov DWORD PTR ds:0x432438,edx
- ┃┃┃ .data:0x00000edc 50 push eax
- ┃┃┃ .data:0x00000edd e802f8ffff call func_000006e4
- ┃┃┃ .data:0x00000ee2 a138244300 mov eax,ds:0x432438
- ┃┃┃ .data:0x00000ee7 85c0 test eax,eax
- ┃┃┗ .data:0x00000ee9 75e9 jne loc_00000ed4
- ┃┃ .data:0x00000eeb
- ┃┃ .data:0x00000eeb loc_00000eeb:
- ┃┗━▶ .data:0x00000eeb 648f0500000000 pop DWORD PTR fs:0x0
- ┃ .data:0x00000ef2 83c408 add esp,0x8
- ┃ .data:0x00000ef5 681f1b4000 push 0x401b1f
- ┃ .data:0x00000efa
- ┃ .data:0x00000efa loc_00000efa:
- ┃┏━▶ .data:0x00000efa 803d3620430000 cmp BYTE PTR ds:0x432036,0x0
- ┃┃┏ .data:0x00000f01 740a je loc_00000f0d
- ┃┃┃ .data:0x00000f03 6820244300 push 0x432420
- ┃┃┃ .data:0x00000f08 e8fff7ffff call func_0000070c
- ┃┃┃ .data:0x00000f0d
- ┃┃┃ .data:0x00000f0d loc_00000f0d:
- ┃┃┗▶ .data:0x00000f0d 6820244300 push 0x432420
- ┃┃ .data:0x00000f12 e8fdf7ffff call func_00000714
- ┃┃ .data:0x00000f17 c3 ret
- ┃┃ .data:0x00000f18 e9a7130000 jmp 0x000022c4
- ┃┗━ .data:0x00000f1d ebdb jmp loc_00000efa
- ┃ .data:0x00000f1f
- ┃ .data:0x00000f1f loc_00000f1f:
- ┗━━▶ .data:0x00000f1f 5b pop ebx
- .data:0x00000f20 5d pop ebp
- .data:0x00000f21 c3 ret
- .data:0x00000f22 8bc0 mov eax,eax
- .data:0x00000f24 ; =============== F U N C T I O N ====================================
- .data:0x00000f24 ; CODE XREF: 0x00001085
- .data:0x00000f24 ; CODE XREF: 0x000017ef
- .data:0x00000f24 ; CODE XREF: 0x000013e9
- .data:0x00000f24 ; CODE XREF: 0x0000168f
- .data:0x00000f24 ; CODE XREF: 0x000010b7
- .data:0x00000f24 ; CODE XREF: 0x0000171b
- .data:0x00000f24
- .data:0x00000f24 func_00000f24:
- .data:0x00000f24 53 push ebx
- .data:0x00000f25 3b056c244300 cmp eax,DWORD PTR ds:0x43246c
- ┏ .data:0x00000f2b 7509 jne loc_00000f36
- ┃ .data:0x00000f2d 8b5004 mov edx,DWORD PTR [eax+0x4]
- ┃ .data:0x00000f30 89156c244300 mov DWORD PTR ds:0x43246c,edx
- ┃ .data:0x00000f36
- ┃ .data:0x00000f36 loc_00000f36:
- ┗▶ .data:0x00000f36 8b5004 mov edx,DWORD PTR [eax+0x4]
- .data:0x00000f39 8b4808 mov ecx,DWORD PTR [eax+0x8]
- .data:0x00000f3c 81f900100000 cmp ecx,0x1000
- ┏━━ .data:0x00000f42 7f2a jg loc_00000f6e
- ┃ .data:0x00000f44 3bc2 cmp eax,edx
- ┃ ┏ .data:0x00000f46 7510 jne loc_00000f58
- ┃ ┃ .data:0x00000f48 c1e902 shr ecx,0x2
- ┃ ┃ .data:0x00000f4b a178244300 mov eax,ds:0x432478
- ┃ ┃ .data:0x00000f50 33d2 xor edx,edx
- ┃ ┃ .data:0x00000f52 895488f4 mov DWORD PTR [eax+ecx*4-0xc],edx
- ┃┏╋ .data:0x00000f56 eb1d jmp loc_00000f75
- ┃┃┃ .data:0x00000f58
- ┃┃┃ .data:0x00000f58 loc_00000f58:
- ┃┃┗▶ .data:0x00000f58 c1e902 shr ecx,0x2
- ┃┃ .data:0x00000f5b 8b1d78244300 mov ebx,DWORD PTR ds:0x432478
- ┃┃ .data:0x00000f61 89548bf4 mov DWORD PTR [ebx+ecx*4-0xc],edx
- ┃┃ .data:0x00000f65 8b00 mov eax,DWORD PTR [eax]
- ┃┃ .data:0x00000f67 8902 mov DWORD PTR [edx],eax
- ┃┃ .data:0x00000f69 895004 mov DWORD PTR [eax+0x4],edx
- ┃┃ .data:0x00000f6c 5b pop ebx
- ┃┃ .data:0x00000f6d c3 ret
- ┃┃ .data:0x00000f6e
- ┃┃ .data:0x00000f6e loc_00000f6e:
- ┗╋━▶ .data:0x00000f6e 8b00 mov eax,DWORD PTR [eax]
- ┃ .data:0x00000f70 8902 mov DWORD PTR [edx],eax
- ┃ .data:0x00000f72 895004 mov DWORD PTR [eax+0x4],edx
- ┃ .data:0x00000f75
- ┃ .data:0x00000f75 loc_00000f75:
- ┗━▶ .data:0x00000f75 5b pop ebx
- .data:0x00000f76 c3 ret
- .data:0x00000f77 90 nop
- .data:0x00000f78 ; =============== F U N C T I O N ====================================
- .data:0x00000f78 ; CODE XREF: 0x000010d9
- .data:0x00000f78
- .data:0x00000f78 func_00000f78:
- .data:0x00000f78 8b157c244300 mov edx,DWORD PTR ds:0x43247c
- ┏━ .data:0x00000f7e eb10 jmp loc_00000f90
- ┃ .data:0x00000f80
- ┃ .data:0x00000f80 loc_00000f80:
- ┏╋━▶ .data:0x00000f80 8b4a08 mov ecx,DWORD PTR [edx+0x8]
- ┃┃ .data:0x00000f83 3bc1 cmp eax,ecx
- ┃┃┏ .data:0x00000f85 7207 jb loc_00000f8e
- ┃┃┃ .data:0x00000f87 034a0c add ecx,DWORD PTR [edx+0xc]
- ┃┃┃ .data:0x00000f8a 3bc1 cmp eax,ecx
- ┏╋╋╋ .data:0x00000f8c 7216 jb loc_00000fa4
- ┃┃┃┃ .data:0x00000f8e
- ┃┃┃┃ .data:0x00000f8e loc_00000f8e:
- ┃┃┃┗▶ .data:0x00000f8e 8b12 mov edx,DWORD PTR [edx]
- ┃┃┃ .data:0x00000f90
- ┃┃┃ .data:0x00000f90 loc_00000f90:
- ┃┃┗━▶ .data:0x00000f90 81fa7c244300 cmp edx,0x43247c
- ┃┗━━ .data:0x00000f96 75e8 jne loc_00000f80
- ┃ .data:0x00000f98 c7051c24430003000000 mov DWORD PTR ds:0x43241c,0x3
- ┃ .data:0x00000fa2 33d2 xor edx,edx
- ┃ .data:0x00000fa4
- ┃ .data:0x00000fa4 loc_00000fa4:
- ┗━━━▶ .data:0x00000fa4 8bc2 mov eax,edx
- .data:0x00000fa6 c3 ret
- .data:0x00000fa7 90 nop
- .data:0x00000fa8 ; =============== F U N C T I O N ====================================
- .data:0x00000fa8 ; CODE XREF: 0x00001298
- .data:0x00000fa8 ; CODE XREF: 0x00001133
- .data:0x00000fa8
- .data:0x00000fa8 func_00000fa8:
- .data:0x00000fa8 53 push ebx
- .data:0x00000fa9 8bca mov ecx,edx
- .data:0x00000fab 83e904 sub ecx,0x4
- .data:0x00000fae 8d1c01 lea ebx,[ecx+eax*1]
- .data:0x00000fb1 83fa10 cmp edx,0x10
- ┏ .data:0x00000fb4 7c0f jl loc_00000fc5
- ┃ .data:0x00000fb6 c70307000080 mov DWORD PTR [ebx],0x80000007
- ┃ .data:0x00000fbc 8bd1 mov edx,ecx
- ┃ .data:0x00000fbe e8a1010000 call func_00001164
- ┃ .data:0x00000fc3 5b pop ebx
- ┃ .data:0x00000fc4 c3 ret
- ┃ .data:0x00000fc5
- ┃ .data:0x00000fc5 loc_00000fc5:
- ┗▶ .data:0x00000fc5 83fa04 cmp edx,0x4
- ┏ .data:0x00000fc8 7c0c jl loc_00000fd6
- ┃ .data:0x00000fca 8bca mov ecx,edx
- ┃ .data:0x00000fcc 81c902000080 or ecx,0x80000002
- ┃ .data:0x00000fd2 8908 mov DWORD PTR [eax],ecx
- ┃ .data:0x00000fd4 890b mov DWORD PTR [ebx],ecx
- ┃ .data:0x00000fd6
- ┃ .data:0x00000fd6 loc_00000fd6:
- ┗▶ .data:0x00000fd6 5b pop ebx
- .data:0x00000fd7 c3 ret
- .data:0x00000fd8 ; =============== F U N C T I O N ====================================
- .data:0x00000fd8 ; CODE XREF: 0x00001009
- .data:0x00000fd8 ; CODE XREF: 0x0000121a
- .data:0x00000fd8
- .data:0x00000fd8 func_00000fd8:
- .data:0x00000fd8 ff0500244300 inc DWORD PTR ds:0x432400
- .data:0x00000fde 8bd0 mov edx,eax
- .data:0x00000fe0 83ea04 sub edx,0x4
- .data:0x00000fe3 8b12 mov edx,DWORD PTR [edx]
- .data:0x00000fe5 81e2fcffff7f and edx,0x7ffffffc
- .data:0x00000feb 83ea04 sub edx,0x4
- .data:0x00000fee 011504244300 add DWORD PTR ds:0x432404,edx
- .data:0x00000ff4 e8c7050000 call func_000015c0
- .data:0x00000ff9 c3 ret
- .data:0x00000ffa 8bc0 mov eax,eax
- .data:0x00000ffc ; =============== F U N C T I O N ====================================
- .data:0x00000ffc ; CODE XREF: 0x0000114d
- .data:0x00000ffc
- .data:0x00000ffc func_00000ffc:
- .data:0x00000ffc 83fa0c cmp edx,0xc
- ┏ .data:0x00000fff 7c0e jl loc_0000100f
- ┃ .data:0x00001001 83ca02 or edx,0x2
- ┃ .data:0x00001004 8910 mov DWORD PTR [eax],edx
- ┃ .data:0x00001006 83c004 add eax,0x4
- ┃ .data:0x00001009 e8caffffff call func_00000fd8
- ┃ .data:0x0000100e c3 ret
- ┃ .data:0x0000100f
- ┃ .data:0x0000100f loc_0000100f:
- ┗▶ .data:0x0000100f 83fa04 cmp edx,0x4
- ┏ .data:0x00001012 7c0a jl loc_0000101e
- ┃ .data:0x00001014 8bca mov ecx,edx
- ┃ .data:0x00001016 81c902000080 or ecx,0x80000002
- ┃ .data:0x0000101c 8908 mov DWORD PTR [eax],ecx
- ┃ .data:0x0000101e
- ┃ .data:0x0000101e loc_0000101e:
- ┗▶ .data:0x0000101e 03c2 add eax,edx
- .data:0x00001020 8320fe and DWORD PTR [eax],0xfffffffe
- .data:0x00001023 c3 ret
- .data:0x00001024 ; =============== F U N C T I O N ====================================
- .data:0x00001024 ; CODE XREF: 0x00001266
- .data:0x00001024
- .data:0x00001024 func_00001024:
- .data:0x00001024 53 push ebx
- .data:0x00001025 56 push esi
- .data:0x00001026 8bd0 mov edx,eax
- .data:0x00001028 83ea04 sub edx,0x4
- .data:0x0000102b 8b12 mov edx,DWORD PTR [edx]
- .data:0x0000102d 8bca mov ecx,edx
- .data:0x0000102f 81e102000080 and ecx,0x80000002
- .data:0x00001035 81f902000080 cmp ecx,0x80000002
- ┏ .data:0x0000103b 740a je loc_00001047
- ┃ .data:0x0000103d c7051c24430004000000 mov DWORD PTR ds:0x43241c,0x4
- ┃ .data:0x00001047
- ┃ .data:0x00001047 loc_00001047:
- ┗▶ .data:0x00001047 8bda mov ebx,edx
- .data:0x00001049 81e3fcffff7f and ebx,0x7ffffffc
- .data:0x0000104f 2bc3 sub eax,ebx
- .data:0x00001051 8bc8 mov ecx,eax
- .data:0x00001053 3311 xor edx,DWORD PTR [ecx]
- .data:0x00001055 f7c2feffffff test edx,0xfffffffe
- ┏ .data:0x0000105b 740a je loc_00001067
- ┃ .data:0x0000105d c7051c24430005000000 mov DWORD PTR ds:0x43241c,0x5
- ┃ .data:0x00001067
- ┃ .data:0x00001067 loc_00001067:
- ┗▶ .data:0x00001067 f60101 test BYTE PTR [ecx],0x1
- ┏━ .data:0x0000106a 7420 je loc_0000108c
- ┃ .data:0x0000106c 8bd0 mov edx,eax
- ┃ .data:0x0000106e 83ea0c sub edx,0xc
- ┃ .data:0x00001071 8b7208 mov esi,DWORD PTR [edx+0x8]
- ┃ .data:0x00001074 2bc6 sub eax,esi
- ┃ .data:0x00001076 3b7008 cmp esi,DWORD PTR [eax+0x8]
- ┃┏ .data:0x00001079 740a je loc_00001085
- ┃┃ .data:0x0000107b c7051c24430006000000 mov DWORD PTR ds:0x43241c,0x6
- ┃┃ .data:0x00001085
- ┃┃ .data:0x00001085 loc_00001085:
- ┃┗▶ .data:0x00001085 e89afeffff call func_00000f24
- ┃ .data:0x0000108a 03de add ebx,esi
- ┃ .data:0x0000108c
- ┃ .data:0x0000108c loc_0000108c:
- ┗━▶ .data:0x0000108c 8bc3 mov eax,ebx
- .data:0x0000108e 5e pop esi
- .data:0x0000108f 5b pop ebx
- .data:0x00001090 c3 ret
- .data:0x00001091 8d4000 lea eax,[eax+0x0]
- .data:0x00001094 ; =============== F U N C T I O N ====================================
- .data:0x00001094 ; CODE XREF: 0x0000127f
- .data:0x00001094
- .data:0x00001094 func_00001094:
- .data:0x00001094 53 push ebx
- .data:0x00001095 56 push esi
- .data:0x00001096 57 push edi
- .data:0x00001097 8bd8 mov ebx,eax
- .data:0x00001099 33ff xor edi,edi
- .data:0x0000109b 8b03 mov eax,DWORD PTR [ebx]
- .data:0x0000109d a900000080 test eax,0x80000000
- ┏ .data:0x000010a2 740b je loc_000010af
- ┃ .data:0x000010a4 25fcffff7f and eax,0x7ffffffc
- ┃ .data:0x000010a9 03f8 add edi,eax
- ┃ .data:0x000010ab 03d8 add ebx,eax
- ┃ .data:0x000010ad 8b03 mov eax,DWORD PTR [ebx]
- ┃ .data:0x000010af
- ┃ .data:0x000010af loc_000010af:
- ┗▶ .data:0x000010af a802 test al,0x2
- ┏ .data:0x000010b1 7513 jne loc_000010c6
- ┃ .data:0x000010b3 8bf3 mov esi,ebx
- ┃ .data:0x000010b5 8bc6 mov eax,esi
- ┃ .data:0x000010b7 e868feffff call func_00000f24
- ┃ .data:0x000010bc 8b4608 mov eax,DWORD PTR [esi+0x8]
- ┃ .data:0x000010bf 03f8 add edi,eax
- ┃ .data:0x000010c1 03d8 add ebx,eax
- ┃ .data:0x000010c3 8323fe and DWORD PTR [ebx],0xfffffffe
- ┃ .data:0x000010c6
- ┃ .data:0x000010c6 loc_000010c6:
- ┗▶ .data:0x000010c6 8bc7 mov eax,edi
- .data:0x000010c8 5f pop edi
- .data:0x000010c9 5e pop esi
- .data:0x000010ca 5b pop ebx
- .data:0x000010cb c3 ret
- .data:0x000010cc ; =============== F U N C T I O N ====================================
- .data:0x000010cc ; CODE XREF: 0x000011be
- .data:0x000010cc
- .data:0x000010cc func_000010cc:
- .data:0x000010cc 53 push ebx
- .data:0x000010cd 56 push esi
- .data:0x000010ce 57 push edi
- .data:0x000010cf 55 push ebp
- .data:0x000010d0 83c4f8 add esp,0xfffffff8
- .data:0x000010d3 8bfa mov edi,edx
- .data:0x000010d5 8bf0 mov esi,eax
- .data:0x000010d7 8bc6 mov eax,esi
- .data:0x000010d9 e89afeffff call func_00000f78
- .data:0x000010de 8bd8 mov ebx,eax
- .data:0x000010e0 8b6b08 mov ebp,DWORD PTR [ebx+0x8]
- .data:0x000010e3 8bc5 mov eax,ebp
- .data:0x000010e5 03430c add eax,DWORD PTR [ebx+0xc]
- .data:0x000010e8 8bd0 mov edx,eax
- .data:0x000010ea 8d0c37 lea ecx,[edi+esi*1]
- .data:0x000010ed 2bd1 sub edx,ecx
- .data:0x000010ef 83fa0c cmp edx,0xc
- ┏ .data:0x000010f2 7f04 jg loc_000010f8
- ┃ .data:0x000010f4 8bf8 mov edi,eax
- ┃ .data:0x000010f6 2bfe sub edi,esi
- ┃ .data:0x000010f8
- ┃ .data:0x000010f8 loc_000010f8:
- ┗▶ .data:0x000010f8 8bc6 mov eax,esi
- .data:0x000010fa 2bc5 sub eax,ebp
- .data:0x000010fc 83f80c cmp eax,0xc
- ┏━ .data:0x000010ff 7d12 jge loc_00001113
- ┃ .data:0x00001101 8bcc mov ecx,esp
- ┃ .data:0x00001103 8bd6 mov edx,esi
- ┃ .data:0x00001105 2b5308 sub edx,DWORD PTR [ebx+0x8]
- ┃ .data:0x00001108 03d7 add edx,edi
- ┃ .data:0x0000110a 8bc5 mov eax,ebp
- ┃ .data:0x0000110c e8dffbffff call func_00000cf0
- ┃┏ .data:0x00001111 eb0f jmp loc_00001122
- ┃┃ .data:0x00001113
- ┃┃ .data:0x00001113 loc_00001113:
- ┗╋▶ .data:0x00001113 8bcc mov ecx,esp
- ┃ .data:0x00001115 8bd7 mov edx,edi
- ┃ .data:0x00001117 83ea04 sub edx,0x4
- ┃ .data:0x0000111a 8d4604 lea eax,[esi+0x4]
- ┃ .data:0x0000111d e8cefbffff call func_00000cf0
- ┃ .data:0x00001122
- ┃ .data:0x00001122 loc_00001122:
- ┗▶ .data:0x00001122 8b2c24 mov ebp,DWORD PTR [esp]
- .data:0x00001125 85ed test ebp,ebp
- ┏ .data:0x00001127 7504 jne loc_0000112d
- ┃ .data:0x00001129 33c0 xor eax,eax
- ┏╋ .data:0x0000112b eb30 jmp loc_0000115d
- ┃┃ .data:0x0000112d
- ┃┃ .data:0x0000112d loc_0000112d:
- ┃┗▶ .data:0x0000112d 8bd5 mov edx,ebp
- ┃ .data:0x0000112f 2bd6 sub edx,esi
- ┃ .data:0x00001131 8bc6 mov eax,esi
- ┃ .data:0x00001133 e870feffff call func_00000fa8
- ┃ .data:0x00001138 8bc5 mov eax,ebp
- ┃ .data:0x0000113a 03442404 add eax,DWORD PTR [esp+0x4]
- ┃ .data:0x0000113e 8b5308 mov edx,DWORD PTR [ebx+0x8]
- ┃ .data:0x00001141 03530c add edx,DWORD PTR [ebx+0xc]
- ┃ .data:0x00001144 3bc2 cmp eax,edx
- ┃┏ .data:0x00001146 730a jae loc_00001152
- ┃┃ .data:0x00001148 8d1437 lea edx,[edi+esi*1]
- ┃┃ .data:0x0000114b 2bd0 sub edx,eax
- ┃┃ .data:0x0000114d e8aafeffff call func_00000ffc
- ┃┃ .data:0x00001152
- ┃┃ .data:0x00001152 loc_00001152:
- ┃┗▶ .data:0x00001152 8bd4 mov edx,esp
- ┃ .data:0x00001154 8bc3 mov eax,ebx
- ┃ .data:0x00001156 e8b9f6ffff call func_00000814
- ┃ .data:0x0000115b b001 mov al,0x1
- ┃ .data:0x0000115d
- ┃ .data:0x0000115d loc_0000115d:
- ┗━▶ .data:0x0000115d 59 pop ecx
- .data:0x0000115e 5a pop edx
- .data:0x0000115f 5d pop ebp
- .data:0x00001160 5f pop edi
- .data:0x00001161 5e pop esi
- .data:0x00001162 5b pop ebx
- .data:0x00001163 c3 ret
- .data:0x00001164 ; =============== F U N C T I O N ====================================
- .data:0x00001164 ; CODE XREF: 0x00001724
- .data:0x00001164 ; CODE XREF: 0x00000fbe
- .data:0x00001164 ; CODE XREF: 0x000013ff
- .data:0x00001164
- .data:0x00001164 func_00001164:
- .data:0x00001164 53 push ebx
- .data:0x00001165 56 push esi
- .data:0x00001166 57 push edi
- .data:0x00001167 8bf2 mov esi,edx
- .data:0x00001169 8bf8 mov edi,eax
- .data:0x0000116b 8bdf mov ebx,edi
- .data:0x0000116d 897308 mov DWORD PTR [ebx+0x8],esi
- .data:0x00001170 8bc3 mov eax,ebx
- .data:0x00001172 03c6 add eax,esi
- .data:0x00001174 83e80c sub eax,0xc
- .data:0x00001177 897008 mov DWORD PTR [eax+0x8],esi
- .data:0x0000117a 81fe00100000 cmp esi,0x1000
- ┏━━ .data:0x00001180 7f30 jg loc_000011b2
- ┃ .data:0x00001182 8bd6 mov edx,esi
- ┃ .data:0x00001184 c1ea02 shr edx,0x2
- ┃ .data:0x00001187 a178244300 mov eax,ds:0x432478
- ┃ .data:0x0000118c 8b4490f4 mov eax,DWORD PTR [eax+edx*4-0xc]
- ┃ .data:0x00001190 85c0 test eax,eax
- ┃ ┏ .data:0x00001192 7510 jne loc_000011a4
- ┃ ┃ .data:0x00001194 a178244300 mov eax,ds:0x432478
- ┃ ┃ .data:0x00001199 895c90f4 mov DWORD PTR [eax+edx*4-0xc],ebx
- ┃ ┃ .data:0x0000119d 895b04 mov DWORD PTR [ebx+0x4],ebx
- ┃ ┃ .data:0x000011a0 891b mov DWORD PTR [ebx],ebx
- ┃┏╋ .data:0x000011a2 eb3a jmp loc_000011de
- ┃┃┃ .data:0x000011a4
- ┃┃┃ .data:0x000011a4 loc_000011a4:
- ┃┃┗▶ .data:0x000011a4 8b10 mov edx,DWORD PTR [eax]
- ┃┃ .data:0x000011a6 894304 mov DWORD PTR [ebx+0x4],eax
- ┃┃ .data:0x000011a9 8913 mov DWORD PTR [ebx],edx
- ┃┃ .data:0x000011ab 8918 mov DWORD PTR [eax],ebx
- ┃┃ .data:0x000011ad 895a04 mov DWORD PTR [edx+0x4],ebx
- ┃┣━ .data:0x000011b0 eb2c jmp loc_000011de
- ┃┃ .data:0x000011b2
- ┃┃ .data:0x000011b2 loc_000011b2:
- ┗╋━▶ .data:0x000011b2 81fe003c0000 cmp esi,0x3c00
- ┃┏ .data:0x000011b8 7c0d jl loc_000011c7
- ┃┃ .data:0x000011ba 8bd6 mov edx,esi
- ┃┃ .data:0x000011bc 8bc7 mov eax,edi
- ┃┃ .data:0x000011be e809ffffff call func_000010cc
- ┃┃ .data:0x000011c3 84c0 test al,al
- ┣╋ .data:0x000011c5 7517 jne loc_000011de
- ┃┃ .data:0x000011c7
- ┃┃ .data:0x000011c7 loc_000011c7:
- ┃┗▶ .data:0x000011c7 a16c244300 mov eax,ds:0x43246c
- ┃ .data:0x000011cc 891d6c244300 mov DWORD PTR ds:0x43246c,ebx
- ┃ .data:0x000011d2 8b10 mov edx,DWORD PTR [eax]
- ┃ .data:0x000011d4 894304 mov DWORD PTR [ebx+0x4],eax
- ┃ .data:0x000011d7 8913 mov DWORD PTR [ebx],edx
- ┃ .data:0x000011d9 8918 mov DWORD PTR [eax],ebx
- ┃ .data:0x000011db 895a04 mov DWORD PTR [edx+0x4],ebx
- ┃ .data:0x000011de
- ┃ .data:0x000011de loc_000011de:
- ┗━▶ .data:0x000011de 5f pop edi
- .data:0x000011df 5e pop esi
- .data:0x000011e0 5b pop ebx
- .data:0x000011e1 c3 ret
- .data:0x000011e2 8bc0 mov eax,eax
- .data:0x000011e4 ; =============== F U N C T I O N ====================================
- .data:0x000011e4 ; CODE XREF: 0x000016c0
- .data:0x000011e4 ; CODE XREF: 0x0000123f
- .data:0x000011e4
- .data:0x000011e4 func_000011e4:
- .data:0x000011e4 833d7024430000 cmp DWORD PTR ds:0x432470,0x0
- ┏━ .data:0x000011eb 7e40 jle loc_0000122d
- ┃ .data:0x000011ed 833d702443000c cmp DWORD PTR ds:0x432470,0xc
- ┃┏ .data:0x000011f4 7d0c jge loc_00001202
- ┃┃ .data:0x000011f6 c7051c24430007000000 mov DWORD PTR ds:0x43241c,0x7
- ┣╋ .data:0x00001200 eb2b jmp loc_0000122d
- ┃┃ .data:0x00001202
- ┃┃ .data:0x00001202 loc_00001202:
- ┃┗▶ .data:0x00001202 a170244300 mov eax,ds:0x432470
- ┃ .data:0x00001207 83c802 or eax,0x2
- ┃ .data:0x0000120a 8b1574244300 mov edx,DWORD PTR ds:0x432474
- ┃ .data:0x00001210 8902 mov DWORD PTR [edx],eax
- ┃ .data:0x00001212 a174244300 mov eax,ds:0x432474
- ┃ .data:0x00001217 83c004 add eax,0x4
- ┃ .data:0x0000121a e8b9fdffff call func_00000fd8
- ┃ .data:0x0000121f 33c0 xor eax,eax
- ┃ .data:0x00001221 a374244300 mov ds:0x432474,eax
- ┃ .data:0x00001226 33c0 xor eax,eax
- ┃ .data:0x00001228 a370244300 mov ds:0x432470,eax
- ┃ .data:0x0000122d
- ┃ .data:0x0000122d loc_0000122d:
- ┗━▶ .data:0x0000122d c3 ret
- .data:0x0000122e 8bc0 mov eax,eax
- .data:0x00001230 ; =============== F U N C T I O N ====================================
- .data:0x00001230 ; CODE XREF: 0x000012d4
- .data:0x00001230 ; CODE XREF: 0x00001305
- .data:0x00001230
- .data:0x00001230 func_00001230:
- .data:0x00001230 53 push ebx
- .data:0x00001231 56 push esi
- .data:0x00001232 57 push edi
- .data:0x00001233 83c4f0 add esp,0xfffffff0
- .data:0x00001236 8bf0 mov esi,eax
- .data:0x00001238 8d3c24 lea edi,[esp]
- .data:0x0000123b a5 movs DWORD PTR es:[edi],DWORD PTR ds:[esi]
- .data:0x0000123c a5 movs DWORD PTR es:[edi],DWORD PTR ds:[esi]
- .data:0x0000123d 8bfc mov edi,esp
- .data:0x0000123f e8a0ffffff call func_000011e4
- .data:0x00001244 8d4c2408 lea ecx,[esp+0x8]
- .data:0x00001248 8bd7 mov edx,edi
- .data:0x0000124a b87c244300 mov eax,0x43247c
- .data:0x0000124f e85cf5ffff call func_000007b0
- .data:0x00001254 8b5c2408 mov ebx,DWORD PTR [esp+0x8]
- .data:0x00001258 85db test ebx,ebx
- ┏ .data:0x0000125a 7504 jne loc_00001260
- ┃ .data:0x0000125c 33c0 xor eax,eax
- ┏╋ .data:0x0000125e eb52 jmp loc_000012b2
- ┃┃ .data:0x00001260
- ┃┃ .data:0x00001260 loc_00001260:
- ┃┗▶ .data:0x00001260 8b07 mov eax,DWORD PTR [edi]
- ┃ .data:0x00001262 3bd8 cmp ebx,eax
- ┃┏ .data:0x00001264 730a jae loc_00001270
- ┃┃ .data:0x00001266 e8b9fdffff call func_00001024
- ┃┃ .data:0x0000126b 2907 sub DWORD PTR [edi],eax
- ┃┃ .data:0x0000126d 014704 add DWORD PTR [edi+0x4],eax
- ┃┃ .data:0x00001270
- ┃┃ .data:0x00001270 loc_00001270:
- ┃┗▶ .data:0x00001270 8b07 mov eax,DWORD PTR [edi]
- ┃ .data:0x00001272 034704 add eax,DWORD PTR [edi+0x4]
- ┃ .data:0x00001275 8bf3 mov esi,ebx
- ┃ .data:0x00001277 0374240c add esi,DWORD PTR [esp+0xc]
- ┃ .data:0x0000127b 3bc6 cmp eax,esi
- ┃┏ .data:0x0000127d 7308 jae loc_00001287
- ┃┃ .data:0x0000127f e810feffff call func_00001094
- ┃┃ .data:0x00001284 014704 add DWORD PTR [edi+0x4],eax
- ┃┃ .data:0x00001287
- ┃┃ .data:0x00001287 loc_00001287:
- ┃┗▶ .data:0x00001287 8b07 mov eax,DWORD PTR [edi]
- ┃ .data:0x00001289 034704 add eax,DWORD PTR [edi+0x4]
- ┃ .data:0x0000128c 3bf0 cmp esi,eax
- ┃┏ .data:0x0000128e 7511 jne loc_000012a1
- ┃┃ .data:0x00001290 83e804 sub eax,0x4
- ┃┃ .data:0x00001293 ba04000000 mov edx,0x4
- ┃┃ .data:0x00001298 e80bfdffff call func_00000fa8
- ┃┃ .data:0x0000129d 836f0404 sub DWORD PTR [edi+0x4],0x4
- ┃┃ .data:0x000012a1
- ┃┃ .data:0x000012a1 loc_000012a1:
- ┃┗▶ .data:0x000012a1 8b07 mov eax,DWORD PTR [edi]
- ┃ .data:0x000012a3 a374244300 mov ds:0x432474,eax
- ┃ .data:0x000012a8 8b4704 mov eax,DWORD PTR [edi+0x4]
- ┃ .data:0x000012ab a370244300 mov ds:0x432470,eax
- ┃ .data:0x000012b0 b001 mov al,0x1
- ┃ .data:0x000012b2
- ┃ .data:0x000012b2 loc_000012b2:
- ┗━▶ .data:0x000012b2 83c410 add esp,0x10
- .data:0x000012b5 5f pop edi
- .data:0x000012b6 5e pop esi
- .data:0x000012b7 5b pop ebx
- .data:0x000012b8 c3 ret
- .data:0x000012b9 8d4000 lea eax,[eax+0x0]
- .data:0x000012bc ; =============== F U N C T I O N ====================================
- .data:0x000012bc ; CODE XREF: 0x0000139b
- .data:0x000012bc
- .data:0x000012bc func_000012bc:
- .data:0x000012bc 53 push ebx
- .data:0x000012bd 83c4f8 add esp,0xfffffff8
- .data:0x000012c0 8bd8 mov ebx,eax
- .data:0x000012c2 8bd4 mov edx,esp
- .data:0x000012c4 8d4304 lea eax,[ebx+0x4]
- .data:0x000012c7 e870f8ffff call func_00000b3c
- .data:0x000012cc 833c2400 cmp DWORD PTR [esp],0x0
- ┏ .data:0x000012d0 740b je loc_000012dd
- ┃ .data:0x000012d2 8bc4 mov eax,esp
- ┃ .data:0x000012d4 e857ffffff call func_00001230
- ┃ .data:0x000012d9 84c0 test al,al
- ┏╋ .data:0x000012db 7504 jne loc_000012e1
- ┃┃ .data:0x000012dd
- ┃┃ .data:0x000012dd loc_000012dd:
- ┃┗▶ .data:0x000012dd 33c0 xor eax,eax
- ┃┏ .data:0x000012df eb02 jmp loc_000012e3
- ┃┃ .data:0x000012e1
- ┃┃ .data:0x000012e1 loc_000012e1:
- ┗╋▶ .data:0x000012e1 b001 mov al,0x1
- ┃ .data:0x000012e3
- ┃ .data:0x000012e3 loc_000012e3:
- ┗▶ .data:0x000012e3 59 pop ecx
- .data:0x000012e4 5a pop edx
- .data:0x000012e5 5b pop ebx
- .data:0x000012e6 c3 ret
- .data:0x000012e7 90 nop
- .data:0x000012e8 53 push ebx
- .data:0x000012e9 56 push esi
- .data:0x000012ea 83c4f8 add esp,0xfffffff8
- .data:0x000012ed 8bf2 mov esi,edx
- .data:0x000012ef 8bd8 mov ebx,eax
- .data:0x000012f1 8bcc mov ecx,esp
- .data:0x000012f3 8d5604 lea edx,[esi+0x4]
- .data:0x000012f6 8bc3 mov eax,ebx
- .data:0x000012f8 e8cff8ffff call func_00000bcc
- .data:0x000012fd 833c2400 cmp DWORD PTR [esp],0x0
- ┏ .data:0x00001301 740b je loc_0000130e
- ┃ .data:0x00001303 8bc4 mov eax,esp
- ┃ .data:0x00001305 e826ffffff call func_00001230
- ┃ .data:0x0000130a 84c0 test al,al
- ┏╋ .data:0x0000130c 7504 jne loc_00001312
- ┃┃ .data:0x0000130e
- ┃┃ .data:0x0000130e loc_0000130e:
- ┃┗▶ .data:0x0000130e 33c0 xor eax,eax
- ┃┏ .data:0x00001310 eb02 jmp loc_00001314
- ┃┃ .data:0x00001312
- ┃┃ .data:0x00001312 loc_00001312:
- ┗╋▶ .data:0x00001312 b001 mov al,0x1
- ┃ .data:0x00001314
- ┃ .data:0x00001314 loc_00001314:
- ┗▶ .data:0x00001314 59 pop ecx
- .data:0x00001315 5a pop edx
- .data:0x00001316 5e pop esi
- .data:0x00001317 5b pop ebx
- .data:0x00001318 c3 ret
- .data:0x00001319 8d4000 lea eax,[eax+0x0]
- .data:0x0000131c ; =============== F U N C T I O N ====================================
- .data:0x0000131c ; CODE XREF: 0x0000138e
- .data:0x0000131c
- .data:0x0000131c func_0000131c:
- .data:0x0000131c 33d2 xor edx,edx
- .data:0x0000131e c1e802 shr eax,0x2
- .data:0x00001321 3d00040000 cmp eax,0x400
- ┏ .data:0x00001326 7716 ja loc_0000133e
- ┃ .data:0x00001328
- ┃ .data:0x00001328 loc_00001328:
- ┏╋▶ .data:0x00001328 8b1578244300 mov edx,DWORD PTR ds:0x432478
- ┃┃ .data:0x0000132e 8b5482f4 mov edx,DWORD PTR [edx+eax*4-0xc]
- ┃┃ .data:0x00001332 85d2 test edx,edx
- ┃┣ .data:0x00001334 7508 jne loc_0000133e
- ┃┃ .data:0x00001336 40 inc eax
- ┃┃ .data:0x00001337 3d01040000 cmp eax,0x401
- ┗╋ .data:0x0000133c 75ea jne loc_00001328
- ┃ .data:0x0000133e
- ┃ .data:0x0000133e loc_0000133e:
- ┗▶ .data:0x0000133e 8bc2 mov eax,edx
- .data:0x00001340 c3 ret
- .data:0x00001341 8d4000 lea eax,[eax+0x0]
- .data:0x00001344 ; =============== F U N C T I O N ====================================
- .data:0x00001344 ; CODE XREF: 0x00001583
- .data:0x00001344
- .data:0x00001344 func_00001344:
- .data:0x00001344 53 push ebx
- .data:0x00001345 56 push esi
- .data:0x00001346 57 push edi
- .data:0x00001347 55 push ebp
- .data:0x00001348 8bf0 mov esi,eax
- .data:0x0000134a bf6c244300 mov edi,0x43246c
- .data:0x0000134f bd70244300 mov ebp,0x432470
- .data:0x00001354
- .data:0x00001354 loc_00001354:
- ┏━━▶ .data:0x00001354 8b1d64244300 mov ebx,DWORD PTR ds:0x432464
- ┃ .data:0x0000135a 3b7308 cmp esi,DWORD PTR [ebx+0x8]
- ┃┏━ .data:0x0000135d 0f8e84000000 jle loc_000013e7
- ┃┃ .data:0x00001363 8b1f mov ebx,DWORD PTR [edi]
- ┃┃ .data:0x00001365 8b4308 mov eax,DWORD PTR [ebx+0x8]
- ┃┃ .data:0x00001368 3bf0 cmp esi,eax
- ┃┣━ .data:0x0000136a 7e7b jle loc_000013e7
- ┃┃ .data:0x0000136c 897308 mov DWORD PTR [ebx+0x8],esi
- ┃┃ .data:0x0000136f
- ┃┃ .data:0x0000136f loc_0000136f:
- ┃┃┏▶ .data:0x0000136f 8b5b04 mov ebx,DWORD PTR [ebx+0x4]
- ┃┃┃ .data:0x00001372 3b7308 cmp esi,DWORD PTR [ebx+0x8]
- ┃┃┗ .data:0x00001375 7ff8 jg loc_0000136f
- ┃┃ .data:0x00001377 8b17 mov edx,DWORD PTR [edi]
- ┃┃ .data:0x00001379 894208 mov DWORD PTR [edx+0x8],eax
- ┃┃ .data:0x0000137c 3b1f cmp ebx,DWORD PTR [edi]
- ┃┃┏ .data:0x0000137e 7404 je loc_00001384
- ┃┃┃ .data:0x00001380 891f mov DWORD PTR [edi],ebx
- ┃┣╋ .data:0x00001382 eb63 jmp loc_000013e7
- ┃┃┃ .data:0x00001384
- ┃┃┃ .data:0x00001384 loc_00001384:
- ┃┃┗▶ .data:0x00001384 81fe00100000 cmp esi,0x1000
- ┃┃┏ .data:0x0000138a 7f0d jg loc_00001399
- ┃┃┃ .data:0x0000138c 8bc6 mov eax,esi
- ┃┃┃ .data:0x0000138e e889ffffff call func_0000131c
- ┃┃┃ .data:0x00001393 8bd8 mov ebx,eax
- ┃┃┃ .data:0x00001395 85db test ebx,ebx
- ┃┣╋ .data:0x00001397 754e jne loc_000013e7
- ┃┃┃ .data:0x00001399
- ┃┃┃ .data:0x00001399 loc_00001399:
- ┃┃┗▶ .data:0x00001399 8bc6 mov eax,esi
- ┃┃ .data:0x0000139b e81cffffff call func_000012bc
- ┃┃ .data:0x000013a0 84c0 test al,al
- ┃┃┏ .data:0x000013a2 7507 jne loc_000013ab
- ┃┃┃ .data:0x000013a4 33c0 xor eax,eax
- ┏╋╋╋ .data:0x000013a6 e988000000 jmp loc_00001433
- ┃┃┃┃ .data:0x000013ab
- ┃┃┃┃ .data:0x000013ab loc_000013ab:
- ┃┃┃┗▶ .data:0x000013ab 3b7500 cmp esi,DWORD PTR [ebp+0x0]
- ┃┗╋━ .data:0x000013ae 7fa4 jg loc_00001354
- ┃ ┃ .data:0x000013b0 297500 sub DWORD PTR [ebp+0x0],esi
- ┃ ┃ .data:0x000013b3 837d000c cmp DWORD PTR [ebp+0x0],0xc
- ┃ ┃┏ .data:0x000013b7 7d08 jge loc_000013c1
- ┃ ┃┃ .data:0x000013b9 037500 add esi,DWORD PTR [ebp+0x0]
- ┃ ┃┃ .data:0x000013bc 33c0 xor eax,eax
- ┃ ┃┃ .data:0x000013be 894500 mov DWORD PTR [ebp+0x0],eax
- ┃ ┃┃ .data:0x000013c1
- ┃ ┃┃ .data:0x000013c1 loc_000013c1:
- ┃ ┃┗▶ .data:0x000013c1 a174244300 mov eax,ds:0x432474
- ┃ ┃ .data:0x000013c6 013574244300 add DWORD PTR ds:0x432474,esi
- ┃ ┃ .data:0x000013cc 8bd6 mov edx,esi
- ┃ ┃ .data:0x000013ce 83ca02 or edx,0x2
- ┃ ┃ .data:0x000013d1 8910 mov DWORD PTR [eax],edx
- ┃ ┃ .data:0x000013d3 83c004 add eax,0x4
- ┃ ┃ .data:0x000013d6 ff0500244300 inc DWORD PTR ds:0x432400
- ┃ ┃ .data:0x000013dc 83ee04 sub esi,0x4
- ┃ ┃ .data:0x000013df 013504244300 add DWORD PTR ds:0x432404,esi
- ┣━╋━ .data:0x000013e5 eb4c jmp loc_00001433
- ┃ ┃ .data:0x000013e7
- ┃ ┃ .data:0x000013e7 loc_000013e7:
- ┃ ┗━▶ .data:0x000013e7 8bc3 mov eax,ebx
- ┃ .data:0x000013e9 e836fbffff call func_00000f24
- ┃ .data:0x000013ee 8b5308 mov edx,DWORD PTR [ebx+0x8]
- ┃ .data:0x000013f1 8bc2 mov eax,edx
- ┃ .data:0x000013f3 2bc6 sub eax,esi
- ┃ .data:0x000013f5 83f80c cmp eax,0xc
- ┃ ┏ .data:0x000013f8 7c0c jl loc_00001406
- ┃ ┃ .data:0x000013fa 8bd3 mov edx,ebx
- ┃ ┃ .data:0x000013fc 03d6 add edx,esi
- ┃ ┃ .data:0x000013fe 92 xchg edx,eax
- ┃ ┃ .data:0x000013ff e860fdffff call func_00001164
- ┃ ┏╋ .data:0x00001404 eb12 jmp loc_00001418
- ┃ ┃┃ .data:0x00001406
- ┃ ┃┃ .data:0x00001406 loc_00001406:
- ┃ ┃┗▶ .data:0x00001406 8bf2 mov esi,edx
- ┃ ┃ .data:0x00001408 3b1f cmp ebx,DWORD PTR [edi]
- ┃ ┃┏ .data:0x0000140a 7505 jne loc_00001411
- ┃ ┃┃ .data:0x0000140c 8b4304 mov eax,DWORD PTR [ebx+0x4]
- ┃ ┃┃ .data:0x0000140f 8907 mov DWORD PTR [edi],eax
- ┃ ┃┃ .data:0x00001411
- ┃ ┃┃ .data:0x00001411 loc_00001411:
- ┃ ┃┗▶ .data:0x00001411 8bc3 mov eax,ebx
- ┃ ┃ .data:0x00001413 03c6 add eax,esi
- ┃ ┃ .data:0x00001415 8320fe and DWORD PTR [eax],0xfffffffe
- ┃ ┃ .data:0x00001418
- ┃ ┃ .data:0x00001418 loc_00001418:
- ┃ ┗━▶ .data:0x00001418 8bc3 mov eax,ebx
- ┃ .data:0x0000141a 8bd6 mov edx,esi
- ┃ .data:0x0000141c 83ca02 or edx,0x2
- ┃ .data:0x0000141f 8910 mov DWORD PTR [eax],edx
- ┃ .data:0x00001421 83c004 add eax,0x4
- ┃ .data:0x00001424 ff0500244300 inc DWORD PTR ds:0x432400
- ┃ .data:0x0000142a 83ee04 sub esi,0x4
- ┃ .data:0x0000142d 013504244300 add DWORD PTR ds:0x432404,esi
- ┃ .data:0x00001433
- ┃ .data:0x00001433 loc_00001433:
- ┗━━━▶ .data:0x00001433 5d pop ebp
- .data:0x00001434 5f pop edi
- .data:0x00001435 5e pop esi
- .data:0x00001436 5b pop ebx
- .data:0x00001437 c3 ret
- .data:0x00001438 55 push ebp
- .data:0x00001439 8bec mov ebp,esp
- .data:0x0000143b 83c4f8 add esp,0xfffffff8
- .data:0x0000143e 53 push ebx
- .data:0x0000143f 56 push esi
- .data:0x00001440 57 push edi
- .data:0x00001441 8bd8 mov ebx,eax
- .data:0x00001443 803d1924430000 cmp BYTE PTR ds:0x432419,0x0
- ┏ .data:0x0000144a 7513 jne loc_0000145f
- ┃ .data:0x0000144c e82bf9ffff call func_00000d7c
- ┃ .data:0x00001451 84c0 test al,al
- ┣ .data:0x00001453 750a jne loc_0000145f
- ┃ .data:0x00001455 33c0 xor eax,eax
- ┃ .data:0x00001457 8945fc mov DWORD PTR [ebp-0x4],eax
- ┏━━━╋ .data:0x0000145a e954010000 jmp loc_000015b3
- ┃ ┃ .data:0x0000145f
- ┃ ┃ .data:0x0000145f loc_0000145f:
- ┃ ┗▶ .data:0x0000145f 33f6 xor esi,esi
- ┃ .data:0x00001461 55 push ebp
- ┃ .data:0x00001462 68ac214000 push 0x4021ac
- ┃ .data:0x00001467 64ff36 push DWORD PTR fs:[esi]
- ┃ .data:0x0000146a 648926 mov DWORD PTR fs:[esi],esp
- ┃ .data:0x0000146d 803d3620430000 cmp BYTE PTR ds:0x432036,0x0
- ┃ ┏ .data:0x00001474 740a je loc_00001480
- ┃ ┃ .data:0x00001476 6820244300 push 0x432420
- ┃ ┃ .data:0x0000147b e884f2ffff call func_00000704
- ┃ ┃ .data:0x00001480
- ┃ ┃ .data:0x00001480 loc_00001480:
- ┃ ┗▶ .data:0x00001480 83c307 add ebx,0x7
- ┃ .data:0x00001483 83e3fc and ebx,0xfffffffc
- ┃ .data:0x00001486 83fb0c cmp ebx,0xc
- ┃ ┏ .data:0x00001489 7d05 jge loc_00001490
- ┃ ┃ .data:0x0000148b bb0c000000 mov ebx,0xc
- ┃ ┃ .data:0x00001490
- ┃ ┃ .data:0x00001490 loc_00001490:
- ┃ ┗▶ .data:0x00001490 81fb00100000 cmp ebx,0x1000
- ┃┏━━━ .data:0x00001496 0f8f93000000 jg loc_0000152f
- ┃┃ .data:0x0000149c 8bc3 mov eax,ebx
- ┃┃ .data:0x0000149e 85c0 test eax,eax
- ┃┃ ┏ .data:0x000014a0 7903 jns loc_000014a5
- ┃┃ ┃ .data:0x000014a2 83c003 add eax,0x3
- ┃┃ ┃ .data:0x000014a5
- ┃┃ ┃ .data:0x000014a5 loc_000014a5:
- ┃┃ ┗▶ .data:0x000014a5 c1f802 sar eax,0x2
- ┃┃ .data:0x000014a8 8b1578244300 mov edx,DWORD PTR ds:0x432478
- ┃┃ .data:0x000014ae 8b5482f4 mov edx,DWORD PTR [edx+eax*4-0xc]
- ┃┃ .data:0x000014b2 85d2 test edx,edx
- ┃┣━━━ .data:0x000014b4 7479 je loc_0000152f
- ┃┃ .data:0x000014b6 8bca mov ecx,edx
- ┃┃ .data:0x000014b8 8bc1 mov eax,ecx
- ┃┃ .data:0x000014ba 03c3 add eax,ebx
- ┃┃ .data:0x000014bc 8320fe and DWORD PTR [eax],0xfffffffe
- ┃┃ .data:0x000014bf 8b4204 mov eax,DWORD PTR [edx+0x4]
- ┃┃ .data:0x000014c2 3bd0 cmp edx,eax
- ┃┃ ┏━ .data:0x000014c4 751a jne loc_000014e0
- ┃┃ ┃ .data:0x000014c6 8bc3 mov eax,ebx
- ┃┃ ┃ .data:0x000014c8 85c0 test eax,eax
- ┃┃ ┃┏ .data:0x000014ca 7903 jns loc_000014cf
- ┃┃ ┃┃ .data:0x000014cc 83c003 add eax,0x3
- ┃┃ ┃┃ .data:0x000014cf
- ┃┃ ┃┃ .data:0x000014cf loc_000014cf:
- ┃┃ ┃┗▶ .data:0x000014cf c1f802 sar eax,0x2
- ┃┃ ┃ .data:0x000014d2 8b3578244300 mov esi,DWORD PTR ds:0x432478
- ┃┃ ┃ .data:0x000014d8 33ff xor edi,edi
- ┃┃ ┃ .data:0x000014da 897c86f4 mov DWORD PTR [esi+eax*4-0xc],edi
- ┃┃┏╋━ .data:0x000014de eb26 jmp loc_00001506
- ┃┃┃┃ .data:0x000014e0
- ┃┃┃┃ .data:0x000014e0 loc_000014e0:
- ┃┃┃┗━▶ .data:0x000014e0 8bf3 mov esi,ebx
- ┃┃┃ .data:0x000014e2 85f6 test esi,esi
- ┃┃┃ ┏ .data:0x000014e4 7903 jns loc_000014e9
- ┃┃┃ ┃ .data:0x000014e6 83c603 add esi,0x3
- ┃┃┃ ┃ .data:0x000014e9
- ┃┃┃ ┃ .data:0x000014e9 loc_000014e9:
- ┃┃┃ ┗▶ .data:0x000014e9 c1fe02 sar esi,0x2
- ┃┃┃ .data:0x000014ec 8b3d78244300 mov edi,DWORD PTR ds:0x432478
- ┃┃┃ .data:0x000014f2 8944b7f4 mov DWORD PTR [edi+esi*4-0xc],eax
- ┃┃┃ .data:0x000014f6 8b32 mov esi,DWORD PTR [edx]
- ┃┃┃ .data:0x000014f8 8975f8 mov DWORD PTR [ebp-0x8],esi
- ┃┃┃ .data:0x000014fb 8b75f8 mov esi,DWORD PTR [ebp-0x8]
- ┃┃┃ .data:0x000014fe 894604 mov DWORD PTR [esi+0x4],eax
- ┃┃┃ .data:0x00001501 8b75f8 mov esi,DWORD PTR [ebp-0x8]
- ┃┃┃ .data:0x00001504 8930 mov DWORD PTR [eax],esi
- ┃┃┃ .data:0x00001506
- ┃┃┃ .data:0x00001506 loc_00001506:
- ┃┃┗━━▶ .data:0x00001506 8bc1 mov eax,ecx
- ┃┃ .data:0x00001508 8b5208 mov edx,DWORD PTR [edx+0x8]
- ┃┃ .data:0x0000150b 83ca02 or edx,0x2
- ┃┃ .data:0x0000150e 8910 mov DWORD PTR [eax],edx
- ┃┃ .data:0x00001510 83c004 add eax,0x4
- ┃┃ .data:0x00001513 8945fc mov DWORD PTR [ebp-0x4],eax
- ┃┃ .data:0x00001516 ff0500244300 inc DWORD PTR ds:0x432400
- ┃┃ .data:0x0000151c 83eb04 sub ebx,0x4
- ┃┃ .data:0x0000151f 011d04244300 add DWORD PTR ds:0x432404,ebx
- ┃┃ .data:0x00001525 e8f20e0000 call func_0000241c
- ┣╋━━━ .data:0x0000152a e984000000 jmp loc_000015b3
- ┃┃ .data:0x0000152f
- ┃┃ .data:0x0000152f loc_0000152f:
- ┃┗━━━▶ .data:0x0000152f 3b1d70244300 cmp ebx,DWORD PTR ds:0x432470
- ┃ ┏━ .data:0x00001535 7f4a jg loc_00001581
- ┃ ┃ .data:0x00001537 291d70244300 sub DWORD PTR ds:0x432470,ebx
- ┃ ┃ .data:0x0000153d 833d702443000c cmp DWORD PTR ds:0x432470,0xc
- ┃ ┃┏ .data:0x00001544 7d0d jge loc_00001553
- ┃ ┃┃ .data:0x00001546 031d70244300 add ebx,DWORD PTR ds:0x432470
- ┃ ┃┃ .data:0x0000154c 33c0 xor eax,eax
- ┃ ┃┃ .data:0x0000154e a370244300 mov ds:0x432470,eax
- ┃ ┃┃ .data:0x00001553
- ┃ ┃┃ .data:0x00001553 loc_00001553:
- ┃ ┃┗▶ .data:0x00001553 a174244300 mov eax,ds:0x432474
- ┃ ┃ .data:0x00001558 011d74244300 add DWORD PTR ds:0x432474,ebx
- ┃ ┃ .data:0x0000155e 8bd3 mov edx,ebx
- ┃ ┃ .data:0x00001560 83ca02 or edx,0x2
- ┃ ┃ .data:0x00001563 8910 mov DWORD PTR [eax],edx
- ┃ ┃ .data:0x00001565 83c004 add eax,0x4
- ┃ ┃ .data:0x00001568 8945fc mov DWORD PTR [ebp-0x4],eax
- ┃ ┃ .data:0x0000156b ff0500244300 inc DWORD PTR ds:0x432400
- ┃ ┃ .data:0x00001571 83eb04 sub ebx,0x4
- ┃ ┃ .data:0x00001574 011d04244300 add DWORD PTR ds:0x432404,ebx
- ┃ ┃ .data:0x0000157a e89d0e0000 call func_0000241c
- ┣━━╋━ .data:0x0000157f eb32 jmp loc_000015b3
- ┃ ┃ .data:0x00001581
- ┃ ┃ .data:0x00001581 loc_00001581:
- ┃ ┗━▶ .data:0x00001581 8bc3 mov eax,ebx
- ┃ .data:0x00001583 e8bcfdffff call func_00001344
- ┃ .data:0x00001588 8945fc mov DWORD PTR [ebp-0x4],eax
- ┃ .data:0x0000158b 33c0 xor eax,eax
- ┃ .data:0x0000158d 5a pop edx
- ┃ .data:0x0000158e 59 pop ecx
- ┃ .data:0x0000158f 59 pop ecx
- ┃ .data:0x00001590 648910 mov DWORD PTR fs:[eax],edx
- ┃ .data:0x00001593 68b3214000 push 0x4021b3
- ┃ .data:0x00001598
- ┃ .data:0x00001598 loc_00001598:
- ┃ ┏━▶ .data:0x00001598 803d3620430000 cmp BYTE PTR ds:0x432036,0x0
- ┃ ┃┏ .data:0x0000159f 740a je loc_000015ab
- ┃ ┃┃ .data:0x000015a1 6820244300 push 0x432420
- ┃ ┃┃ .data:0x000015a6 e861f1ffff call func_0000070c
- ┃ ┃┃ .data:0x000015ab
- ┃ ┃┃ .data:0x000015ab loc_000015ab:
- ┃ ┃┗▶ .data:0x000015ab c3 ret
- ┃ ┃ .data:0x000015ac e9130d0000 jmp 0x000022c4
- ┃ ┗━ .data:0x000015b1 ebe5 jmp loc_00001598
- ┃ .data:0x000015b3
- ┃ .data:0x000015b3 loc_000015b3:
- ┗━━━━▶ .data:0x000015b3 8b45fc mov eax,DWORD PTR [ebp-0x4]
- .data:0x000015b6 5f pop edi
- .data:0x000015b7 5e pop esi
- .data:0x000015b8 5b pop ebx
- .data:0x000015b9 59 pop ecx
- .data:0x000015ba 59 pop ecx
- .data:0x000015bb 5d pop ebp
- .data:0x000015bc c3 ret
- .data:0x000015bd 8d4000 lea eax,[eax+0x0]
- .data:0x000015c0 ; =============== F U N C T I O N ====================================
- .data:0x000015c0 ; CODE XREF: 0x00000ff4
- .data:0x000015c0
- .data:0x000015c0 func_000015c0:
- .data:0x000015c0 55 push ebp
- .data:0x000015c1 8bec mov ebp,esp
- .data:0x000015c3 51 push ecx
- .data:0x000015c4 53 push ebx
- .data:0x000015c5 56 push esi
- .data:0x000015c6 57 push edi
- .data:0x000015c7 8bd8 mov ebx,eax
- .data:0x000015c9 33c0 xor eax,eax
- .data:0x000015cb a31c244300 mov ds:0x43241c,eax
- .data:0x000015d0 803d1924430000 cmp BYTE PTR ds:0x432419,0x0
- ┏ .data:0x000015d7 751f jne loc_000015f8
- ┃ .data:0x000015d9 e89ef7ffff call func_00000d7c
- ┃ .data:0x000015de 84c0 test al,al
- ┣ .data:0x000015e0 7516 jne loc_000015f8
- ┃ .data:0x000015e2 c7051c24430008000000 mov DWORD PTR ds:0x43241c,0x8
- ┃ .data:0x000015ec c745fc08000000 mov DWORD PTR [ebp-0x4],0x8
- ┏━━━╋ .data:0x000015f3 e961010000 jmp loc_00001759
- ┃ ┃ .data:0x000015f8
- ┃ ┃ .data:0x000015f8 loc_000015f8:
- ┃ ┗▶ .data:0x000015f8 33c9 xor ecx,ecx
- ┃ .data:0x000015fa 55 push ebp
- ┃ .data:0x000015fb 6852234000 push 0x402352
- ┃ .data:0x00001600 64ff31 push DWORD PTR fs:[ecx]
- ┃ .data:0x00001603 648921 mov DWORD PTR fs:[ecx],esp
- ┃ .data:0x00001606 803d3620430000 cmp BYTE PTR ds:0x432036,0x0
- ┃ ┏ .data:0x0000160d 740a je loc_00001619
- ┃ ┃ .data:0x0000160f 6820244300 push 0x432420
- ┃ ┃ .data:0x00001614 e8ebf0ffff call func_00000704
- ┃ ┃ .data:0x00001619
- ┃ ┃ .data:0x00001619 loc_00001619:
- ┃ ┗▶ .data:0x00001619 8bf3 mov esi,ebx
- ┃ .data:0x0000161b 83ee04 sub esi,0x4
- ┃ .data:0x0000161e 8b1e mov ebx,DWORD PTR [esi]
- ┃ .data:0x00001620 f6c302 test bl,0x2
- ┃ ┏ .data:0x00001623 750f jne loc_00001634
- ┃ ┃ .data:0x00001625 c7051c24430009000000 mov DWORD PTR ds:0x43241c,0x9
- ┃┏━━╋ .data:0x0000162f e9f5000000 jmp loc_00001729
- ┃┃ ┃ .data:0x00001634
- ┃┃ ┃ .data:0x00001634 loc_00001634:
- ┃┃ ┗▶ .data:0x00001634 ff0d00244300 dec DWORD PTR ds:0x432400
- ┃┃ .data:0x0000163a 8bc3 mov eax,ebx
- ┃┃ .data:0x0000163c 25fcffff7f and eax,0x7ffffffc
- ┃┃ .data:0x00001641 83e804 sub eax,0x4
- ┃┃ .data:0x00001644 290504244300 sub DWORD PTR ds:0x432404,eax
- ┃┃ .data:0x0000164a f6c301 test bl,0x1
- ┃┃┏━━ .data:0x0000164d 7445 je loc_00001694
- ┃┃┃ .data:0x0000164f 8bc6 mov eax,esi
- ┃┃┃ .data:0x00001651 83e80c sub eax,0xc
- ┃┃┃ .data:0x00001654 8b5008 mov edx,DWORD PTR [eax+0x8]
- ┃┃┃ .data:0x00001657 83fa0c cmp edx,0xc
- ┃┃┃ ┏ .data:0x0000165a 7c08 jl loc_00001664
- ┃┃┃ ┃ .data:0x0000165c f7c203000080 test edx,0x80000003
- ┃┃┃┏╋ .data:0x00001662 740f je loc_00001673
- ┃┃┃┃┃ .data:0x00001664
- ┃┃┃┃┃ .data:0x00001664 loc_00001664:
- ┃┃┃┃┗▶ .data:0x00001664 c7051c2443000a000000 mov DWORD PTR ds:0x43241c,0xa
- ┃┣╋╋━ .data:0x0000166e e9b6000000 jmp loc_00001729
- ┃┃┃┃ .data:0x00001673
- ┃┃┃┃ .data:0x00001673 loc_00001673:
- ┃┃┃┗━▶ .data:0x00001673 8bc6 mov eax,esi
- ┃┃┃ .data:0x00001675 2bc2 sub eax,edx
- ┃┃┃ .data:0x00001677 3b5008 cmp edx,DWORD PTR [eax+0x8]
- ┃┃┃ ┏ .data:0x0000167a 740f je loc_0000168b
- ┃┃┃ ┃ .data:0x0000167c c7051c2443000a000000 mov DWORD PTR ds:0x43241c,0xa
- ┃┣╋━╋ .data:0x00001686 e99e000000 jmp loc_00001729
- ┃┃┃ ┃ .data:0x0000168b
- ┃┃┃ ┃ .data:0x0000168b loc_0000168b:
- ┃┃┃ ┗▶ .data:0x0000168b 03da add ebx,edx
- ┃┃┃ .data:0x0000168d 8bf0 mov esi,eax
- ┃┃┃ .data:0x0000168f e890f8ffff call func_00000f24
- ┃┃┃ .data:0x00001694
- ┃┃┃ .data:0x00001694 loc_00001694:
- ┃┃┗━━▶ .data:0x00001694 81e3fcffff7f and ebx,0x7ffffffc
- ┃┃ .data:0x0000169a 8bc6 mov eax,esi
- ┃┃ .data:0x0000169c 03c3 add eax,ebx
- ┃┃ .data:0x0000169e 8bf8 mov edi,eax
- ┃┃ .data:0x000016a0 3b3d74244300 cmp edi,DWORD PTR ds:0x432474
- ┃┃ ┏━ .data:0x000016a6 752c jne loc_000016d4
- ┃┃ ┃ .data:0x000016a8 291d74244300 sub DWORD PTR ds:0x432474,ebx
- ┃┃ ┃ .data:0x000016ae 011d70244300 add DWORD PTR ds:0x432470,ebx
- ┃┃ ┃ .data:0x000016b4 813d70244300003c0000 cmp DWORD PTR ds:0x432470,0x3c00
- ┃┃ ┃┏ .data:0x000016be 7e05 jle loc_000016c5
- ┃┃ ┃┃ .data:0x000016c0 e81ffbffff call func_000011e4
- ┃┃ ┃┃ .data:0x000016c5
- ┃┃ ┃┃ .data:0x000016c5 loc_000016c5:
- ┃┃ ┃┗▶ .data:0x000016c5 33c0 xor eax,eax
- ┃┃ ┃ .data:0x000016c7 8945fc mov DWORD PTR [ebp-0x4],eax
- ┃┃ ┃ .data:0x000016ca e84d0d0000 call func_0000241c
- ┣╋━╋━ .data:0x000016cf e985000000 jmp loc_00001759
- ┃┃ ┃ .data:0x000016d4
- ┃┃ ┃ .data:0x000016d4 loc_000016d4:
- ┃┃ ┗━▶ .data:0x000016d4 8b10 mov edx,DWORD PTR [eax]
- ┃┃ .data:0x000016d6 f6c202 test dl,0x2
- ┃┃ ┏━ .data:0x000016d9 741c je loc_000016f7
- ┃┃ ┃ .data:0x000016db 81e2fcffff7f and edx,0x7ffffffc
- ┃┃ ┃ .data:0x000016e1 83fa04 cmp edx,0x4
- ┃┃ ┃┏ .data:0x000016e4 7d0c jge loc_000016f2
- ┃┃ ┃┃ .data:0x000016e6 c7051c2443000b000000 mov DWORD PTR ds:0x43241c,0xb
- ┃┣━╋╋ .data:0x000016f0 eb37 jmp loc_00001729
- ┃┃ ┃┃ .data:0x000016f2
- ┃┃ ┃┃ .data:0x000016f2 loc_000016f2:
- ┃┃ ┃┗▶ .data:0x000016f2 830801 or DWORD PTR [eax],0x1
- ┃┃┏╋━ .data:0x000016f5 eb29 jmp loc_00001720
- ┃┃┃┃ .data:0x000016f7
- ┃┃┃┃ .data:0x000016f7 loc_000016f7:
- ┃┃┃┗━▶ .data:0x000016f7 8bc7 mov eax,edi
- ┃┃┃ .data:0x000016f9 83780400 cmp DWORD PTR [eax+0x4],0x0
- ┃┃┃ ┏ .data:0x000016fd 740b je loc_0000170a
- ┃┃┃ ┃ .data:0x000016ff 833800 cmp DWORD PTR [eax],0x0
- ┃┃┃ ┣ .data:0x00001702 7406 je loc_0000170a
- ┃┃┃ ┃ .data:0x00001704 8378080c cmp DWORD PTR [eax+0x8],0xc
- ┃┃┃┏╋ .data:0x00001708 7d0c jge loc_00001716
- ┃┃┃┃┃ .data:0x0000170a
- ┃┃┃┃┃ .data:0x0000170a loc_0000170a:
- ┃┃┃┃┗▶ .data:0x0000170a c7051c2443000b000000 mov DWORD PTR ds:0x43241c,0xb
- ┃┣╋╋━ .data:0x00001714 eb13 jmp loc_00001729
- ┃┃┃┃ .data:0x00001716
- ┃┃┃┃ .data:0x00001716 loc_00001716:
- ┃┃┃┗━▶ .data:0x00001716 8b5008 mov edx,DWORD PTR [eax+0x8]
- ┃┃┃ .data:0x00001719 03da add ebx,edx
- ┃┃┃ .data:0x0000171b e804f8ffff call func_00000f24
- ┃┃┃ .data:0x00001720
- ┃┃┃ .data:0x00001720 loc_00001720:
- ┃┃┗━━▶ .data:0x00001720 8bd3 mov edx,ebx
- ┃┃ .data:0x00001722 8bc6 mov eax,esi
- ┃┃ .data:0x00001724 e83bfaffff call func_00001164
- ┃┃ .data:0x00001729
- ┃┃ .data:0x00001729 loc_00001729:
- ┃┗━━━▶ .data:0x00001729 a11c244300 mov eax,ds:0x43241c
- ┃ .data:0x0000172e 8945fc mov DWORD PTR [ebp-0x4],eax
- ┃ .data:0x00001731 33c0 xor eax,eax
- ┃ .data:0x00001733 5a pop edx
- ┃ .data:0x00001734 59 pop ecx
- ┃ .data:0x00001735 59 pop ecx
- ┃ .data:0x00001736 648910 mov DWORD PTR fs:[eax],edx
- ┃ .data:0x00001739 6859234000 push 0x402359
- ┃ .data:0x0000173e
- ┃ .data:0x0000173e loc_0000173e:
- ┃ ┏━▶ .data:0x0000173e 803d3620430000 cmp BYTE PTR ds:0x432036,0x0
- ┃ ┃┏ .data:0x00001745 740a je loc_00001751
- ┃ ┃┃ .data:0x00001747 6820244300 push 0x432420
- ┃ ┃┃ .data:0x0000174c e8bbefffff call func_0000070c
- ┃ ┃┃ .data:0x00001751
- ┃ ┃┃ .data:0x00001751 loc_00001751:
- ┃ ┃┗▶ .data:0x00001751 c3 ret
- ┃ ┃ .data:0x00001752 e96d0b0000 jmp 0x000022c4
- ┃ ┗━ .data:0x00001757 ebe5 jmp loc_0000173e
- ┃ .data:0x00001759
- ┃ .data:0x00001759 loc_00001759:
- ┗━━━━▶ .data:0x00001759 8b45fc mov eax,DWORD PTR [ebp-0x4]
- .data:0x0000175c 5f pop edi
- .data:0x0000175d 5e pop esi
- .data:0x0000175e 5b pop ebx
- .data:0x0000175f 59 pop ecx
- .data:0x00001760 5d pop ebp
- .data:0x00001761 c3 ret
- .data:0x00001762 8bc0 mov eax,eax
- .data:0x00001764 53 push ebx
- .data:0x00001765 56 push esi
- .data:0x00001766 57 push edi
- .data:0x00001767 55 push ebp
- .data:0x00001768 83c4f8 add esp,0xfffffff8
- .data:0x0000176b 8bf2 mov esi,edx
- .data:0x0000176d 83c607 add esi,0x7
- .data:0x00001770 83e6fc and esi,0xfffffffc
- .data:0x00001773 83fe0c cmp esi,0xc
- ┏ .data:0x00001776 7d05 jge loc_0000177d
- ┃ .data:0x00001778 be0c000000 mov esi,0xc
- ┃ .data:0x0000177d
- ┃ .data:0x0000177d loc_0000177d:
- ┗▶ .data:0x0000177d 8be8 mov ebp,eax
- .data:0x0000177f 83ed04 sub ebp,0x4
- .data:0x00001782 8b7d00 mov edi,DWORD PTR [ebp+0x0]
- .data:0x00001785 81e7fcffff7f and edi,0x7ffffffc
- .data:0x0000178b 8bc5 mov eax,ebp
- .data:0x0000178d 03c7 add eax,edi
- .data:0x0000178f 8bd8 mov ebx,eax
- .data:0x00001791 3bfe cmp edi,esi
- .data:0x00001793 0f8283000000 jb 0x0000181c
- .data:0x00001799 8bd7 mov edx,edi
- .data:0x0000179b 2bd6 sub edx,esi
- .data:0x0000179d 891424 mov DWORD PTR [esp],edx
- .data:0x000017a0 3b1d74244300 cmp ebx,DWORD PTR ds:0x432474
- ┏ .data:0x000017a6 7538 jne loc_000017e0
- ┃ .data:0x000017a8 8b0424 mov eax,DWORD PTR [esp]
- ┃ .data:0x000017ab 290574244300 sub DWORD PTR ds:0x432474,eax
- ┃ .data:0x000017b1 8b0424 mov eax,DWORD PTR [esp]
- ┃ .data:0x000017b4 010570244300 add DWORD PTR ds:0x432470,eax
- ┃ .data:0x000017ba 833d702443000c cmp DWORD PTR ds:0x432470,0xc
- ┃ .data:0x000017c1 0f8d4c010000 jge 0x00001913
- ┃ .data:0x000017c7 8b0424 mov eax,DWORD PTR [esp]
- ┃ .data:0x000017ca 010574244300 add DWORD PTR ds:0x432474,eax
- ┃ .data:0x000017d0 8b0424 mov eax,DWORD PTR [esp]
- ┃ .data:0x000017d3 290570244300 sub DWORD PTR ds:0x432470,eax
- ┃ .data:0x000017d9 8bf7 mov esi,edi
- ┃ .data:0x000017db e933010000 jmp 0x00001913
- ┃ .data:0x000017e0
- ┃ .data:0x000017e0 loc_000017e0:
- ┗▶ .data:0x000017e0 8bd8 mov ebx,eax
- .data:0x000017e2 f60302 test BYTE PTR [ebx],0x2
- ┏ .data:0x000017e5 750d jne loc_000017f4
- ┃ .data:0x000017e7 8bc3 mov eax,ebx
- ┃ .data:0x000017e9 8b5008 mov edx,DWORD PTR [eax+0x8]
- ┃ .data:0x000017ec 011424 add DWORD PTR [esp],edx
- ┃ .data:0x000017ef e830f7ffff call func_00000f24
- ┃ .data:0x000017f4
- ┃ .data:0x000017f4 loc_000017f4:
- ┗▶ .data:0x000017f4 833c240c cmp DWORD PTR [esp],0xc
- .data:0x000017f8 7c1b jl 0x00001815
- .data:0x000017fa 8bdd mov ebx,ebp
- .data:0x000017fc 03de add ebx,esi
- .data:0x000017fe 8b0424 mov eax,DWORD PTR [esp]
- .data:0x00001801 83c802 or eax,0x2
- .data:0x00001804 8903 mov DWORD PTR [ebx],eax
- .data:0x00001806 8bc3 mov eax,ebx
- .data:0x00001808 83c004 add eax,0x4
- .data:0x0000180b e8c8f7ffff call func_00000fd8
- ┏━━━━━ .data:0x00001810 e9fe000000 jmp loc_00001913
- ┃ .data:0x00001815 8bf7 mov esi,edi
- ┣━━━━━ .data:0x00001817 e9f7000000 jmp loc_00001913
- ┃ .data:0x0000181c
- ┃ .data:0x0000181c loc_0000181c:
- ┃┏━━━━▶ .data:0x0000181c 8bc6 mov eax,esi
- ┃┃ .data:0x0000181e 2bc7 sub eax,edi
- ┃┃ .data:0x00001820 89442404 mov DWORD PTR [esp+0x4],eax
- ┃┃ .data:0x00001824 3b1d74244300 cmp ebx,DWORD PTR ds:0x432474
- ┃┃ ┏━━ .data:0x0000182a 7567 jne loc_00001893
- ┃┃ ┃ .data:0x0000182c a170244300 mov eax,ds:0x432470
- ┃┃ ┃ .data:0x00001831 3b442404 cmp eax,DWORD PTR [esp+0x4]
- ┃┃ ┃┏━ .data:0x00001835 7c53 jl loc_0000188a
- ┃┃ ┃┃ .data:0x00001837 8b442404 mov eax,DWORD PTR [esp+0x4]
- ┃┃ ┃┃ .data:0x0000183b 290570244300 sub DWORD PTR ds:0x432470,eax
- ┃┃ ┃┃ .data:0x00001841 8b442404 mov eax,DWORD PTR [esp+0x4]
- ┃┃ ┃┃ .data:0x00001845 010574244300 add DWORD PTR ds:0x432474,eax
- ┃┃ ┃┃ .data:0x0000184b 833d702443000c cmp DWORD PTR ds:0x432470,0xc
- ┃┃ ┃┃┏ .data:0x00001852 7d18 jge loc_0000186c
- ┃┃ ┃┃┃ .data:0x00001854 a170244300 mov eax,ds:0x432470
- ┃┃ ┃┃┃ .data:0x00001859 010574244300 add DWORD PTR ds:0x432474,eax
- ┃┃ ┃┃┃ .data:0x0000185f 033570244300 add esi,DWORD PTR ds:0x432470
- ┃┃ ┃┃┃ .data:0x00001865 33c0 xor eax,eax
- ┃┃ ┃┃┃ .data:0x00001867 a370244300 mov ds:0x432470,eax
- ┃┃ ┃┃┃ .data:0x0000186c
- ┃┃ ┃┃┃ .data:0x0000186c loc_0000186c:
- ┃┃ ┃┃┗▶ .data:0x0000186c 8bc6 mov eax,esi
- ┃┃ ┃┃ .data:0x0000186e 2bc7 sub eax,edi
- ┃┃ ┃┃ .data:0x00001870 010504244300 add DWORD PTR ds:0x432404,eax
- ┃┃ ┃┃ .data:0x00001876 8b4500 mov eax,DWORD PTR [ebp+0x0]
- ┃┃ ┃┃ .data:0x00001879 2503000080 and eax,0x80000003
- ┃┃ ┃┃ .data:0x0000187e 0bf0 or esi,eax
- ┃┃ ┃┃ .data:0x00001880 897500 mov DWORD PTR [ebp+0x0],esi
- ┃┃ ┃┃ .data:0x00001883 b001 mov al,0x1
- ┃┃┏╋╋━ .data:0x00001885 e9a2000000 jmp loc_0000192c
- ┃┃┃┃┃ .data:0x0000188a
- ┃┃┃┃┃ .data:0x0000188a loc_0000188a:
- ┃┃┃┃┗━▶ .data:0x0000188a e855f9ffff call func_000011e4
- ┃┃┃┃ .data:0x0000188f 8bdd mov ebx,ebp
- ┃┃┃┃ .data:0x00001891 03df add ebx,edi
- ┃┃┃┃ .data:0x00001893
- ┃┃┃┃ .data:0x00001893 loc_00001893:
- ┃┃┃┗━━▶ .data:0x00001893 f60302 test BYTE PTR [ebx],0x2
- ┃┃┃ ┏━ .data:0x00001896 754d jne loc_000018e5
- ┃┃┃ ┃ .data:0x00001898 8bd3 mov edx,ebx
- ┃┃┃ ┃ .data:0x0000189a 8bc2 mov eax,edx
- ┃┃┃ ┃ .data:0x0000189c 8b4808 mov ecx,DWORD PTR [eax+0x8]
- ┃┃┃ ┃ .data:0x0000189f 890c24 mov DWORD PTR [esp],ecx
- ┃┃┃ ┃ .data:0x000018a2 8b0c24 mov ecx,DWORD PTR [esp]
- ┃┃┃ ┃ .data:0x000018a5 3b4c2404 cmp ecx,DWORD PTR [esp+0x4]
- ┃┃┃ ┃┏ .data:0x000018a9 730e jae loc_000018b9
- ┃┃┃ ┃┃ .data:0x000018ab 031424 add edx,DWORD PTR [esp]
- ┃┃┃ ┃┃ .data:0x000018ae 8bda mov ebx,edx
- ┃┃┃ ┃┃ .data:0x000018b0 8b0424 mov eax,DWORD PTR [esp]
- ┃┃┃ ┃┃ .data:0x000018b3 29442404 sub DWORD PTR [esp+0x4],eax
- ┃┃┃ ┣╋ .data:0x000018b7 eb2c jmp loc_000018e5
- ┃┃┃ ┃┃ .data:0x000018b9
- ┃┃┃ ┃┃ .data:0x000018b9 loc_000018b9:
- ┃┃┃ ┃┗▶ .data:0x000018b9 e866f6ffff call func_00000f24
- ┃┃┃ ┃ .data:0x000018be 8b442404 mov eax,DWORD PTR [esp+0x4]
- ┃┃┃ ┃ .data:0x000018c2 290424 sub DWORD PTR [esp],eax
- ┃┃┃ ┃ .data:0x000018c5 833c240c cmp DWORD PTR [esp],0xc
- ┃┃┃ ┃┏ .data:0x000018c9 7c0e jl loc_000018d9
- ┃┃┃ ┃┃ .data:0x000018cb 8bc5 mov eax,ebp
- ┃┃┃ ┃┃ .data:0x000018cd 03c6 add eax,esi
- ┃┃┃ ┃┃ .data:0x000018cf 8b1424 mov edx,DWORD PTR [esp]
- ┃┃┃ ┃┃ .data:0x000018d2 e88df8ffff call func_00001164
- ┣╋╋━╋╋ .data:0x000018d7 eb3a jmp loc_00001913
- ┃┃┃ ┃┃ .data:0x000018d9
- ┃┃┃ ┃┃ .data:0x000018d9 loc_000018d9:
- ┃┃┃ ┃┗▶ .data:0x000018d9 033424 add esi,DWORD PTR [esp]
- ┃┃┃ ┃ .data:0x000018dc 8bdd mov ebx,ebp
- ┃┃┃ ┃ .data:0x000018de 03de add ebx,esi
- ┃┃┃ ┃ .data:0x000018e0 8323fe and DWORD PTR [ebx],0xfffffffe
- ┣╋╋━╋━ .data:0x000018e3 eb2e jmp loc_00001913
- ┃┃┃ ┃ .data:0x000018e5
- ┃┃┃ ┃ .data:0x000018e5 loc_000018e5:
- ┃┃┃ ┗━▶ .data:0x000018e5 8b03 mov eax,DWORD PTR [ebx]
- ┃┃┃ .data:0x000018e7 a900000080 test eax,0x80000000
- ┃┃┃ ┏ .data:0x000018ec 7421 je loc_0000190f
- ┃┃┃ ┃ .data:0x000018ee 25fcffff7f and eax,0x7ffffffc
- ┃┃┃ ┃ .data:0x000018f3 03c3 add eax,ebx
- ┃┃┃ ┃ .data:0x000018f5 8bd8 mov ebx,eax
- ┃┃┃ ┃ .data:0x000018f7 8b542404 mov edx,DWORD PTR [esp+0x4]
- ┃┃┃ ┃ .data:0x000018fb 8bc3 mov eax,ebx
- ┃┃┃ ┃ .data:0x000018fd e8e6f9ffff call func_000012e8
- ┃┃┃ ┃ .data:0x00001902 84c0 test al,al
- ┃┃┃ ┣ .data:0x00001904 7409 je loc_0000190f
- ┃┃┃ ┃ .data:0x00001906 8bdd mov ebx,ebp
- ┃┃┃ ┃ .data:0x00001908 03df add ebx,edi
- ┃┗╋━━╋ .data:0x0000190a e90dffffff jmp loc_0000181c
- ┃ ┃ ┃ .data:0x0000190f
- ┃ ┃ ┃ .data:0x0000190f loc_0000190f:
- ┃ ┃ ┗▶ .data:0x0000190f 33c0 xor eax,eax
- ┃ ┣━━━ .data:0x00001911 eb19 jmp loc_0000192c
- ┃ ┃ .data:0x00001913
- ┃ ┃ .data:0x00001913 loc_00001913:
- ┗━╋━━━▶ .data:0x00001913 8bc6 mov eax,esi
- ┃ .data:0x00001915 2bc7 sub eax,edi
- ┃ .data:0x00001917 010504244300 add DWORD PTR ds:0x432404,eax
- ┃ .data:0x0000191d 8b4500 mov eax,DWORD PTR [ebp+0x0]
- ┃ .data:0x00001920 2503000080 and eax,0x80000003
- ┃ .data:0x00001925 0bf0 or esi,eax
- ┃ .data:0x00001927 897500 mov DWORD PTR [ebp+0x0],esi
- ┃ .data:0x0000192a b001 mov al,0x1
- ┃ .data:0x0000192c
- ┃ .data:0x0000192c loc_0000192c:
- ┗━━━▶ .data:0x0000192c 59 pop ecx
- .data:0x0000192d 5a pop edx
- .data:0x0000192e 5d pop ebp
- .data:0x0000192f 5f pop edi
- .data:0x00001930 5e pop esi
- .data:0x00001931 5b pop ebx
- .data:0x00001932 c3 ret
- .data:0x00001933 90 nop
- .data:0x00001934 55 push ebp
- .data:0x00001935 8bec mov ebp,esp
- .data:0x00001937 51 push ecx
- .data:0x00001938 53 push ebx
- .data:0x00001939 56 push esi
- .data:0x0000193a 57 push edi
- .data:0x0000193b 8bf2 mov esi,edx
- .data:0x0000193d 8bd8 mov ebx,eax
- .data:0x0000193f 803d1924430000 cmp BYTE PTR ds:0x432419,0x0
- ┏ .data:0x00001946 7513 jne loc_0000195b
- ┃ .data:0x00001948 e82ff4ffff call func_00000d7c
- ┃ .data:0x0000194d 84c0 test al,al
- ┣ .data:0x0000194f 750a jne loc_0000195b
- ┃ .data:0x00001951 33c0 xor eax,eax
- ┃ .data:0x00001953 8945fc mov DWORD PTR [ebp-0x4],eax
- ┏━╋ .data:0x00001956 e992000000 jmp loc_000019ed
- ┃ ┃ .data:0x0000195b
- ┃ ┃ .data:0x0000195b loc_0000195b:
- ┃ ┗▶ .data:0x0000195b 33d2 xor edx,edx
- ┃ .data:0x0000195d 55 push ebp
- ┃ .data:0x0000195e 68e6254000 push 0x4025e6
- ┃ .data:0x00001963 64ff32 push DWORD PTR fs:[edx]
- ┃ .data:0x00001966 648922 mov DWORD PTR fs:[edx],esp
- ┃ .data:0x00001969 803d3620430000 cmp BYTE PTR ds:0x432036,0x0
- ┃ ┏ .data:0x00001970 740a je loc_0000197c
- ┃ ┃ .data:0x00001972 6820244300 push 0x432420
- ┃ ┃ .data:0x00001977 e888edffff call func_00000704
- ┃ ┃ .data:0x0000197c
- ┃ ┃ .data:0x0000197c loc_0000197c:
- ┃ ┗▶ .data:0x0000197c 8bd6 mov edx,esi
- ┃ .data:0x0000197e 8bc3 mov eax,ebx
- ┃ .data:0x00001980 e8dffdffff call func_00001764
- ┃ .data:0x00001985 84c0 test al,al
- ┃ ┏ .data:0x00001987 7405 je loc_0000198e
- ┃ ┃ .data:0x00001989 895dfc mov DWORD PTR [ebp-0x4],ebx
- ┃┏╋ .data:0x0000198c eb37 jmp loc_000019c5
- ┃┃┃ .data:0x0000198e
- ┃┃┃ .data:0x0000198e loc_0000198e:
- ┃┃┗▶ .data:0x0000198e 8bc6 mov eax,esi
- ┃┃ .data:0x00001990 e8a3faffff call func_00001438
- ┃┃ .data:0x00001995 8bf8 mov edi,eax
- ┃┃ .data:0x00001997 8bc3 mov eax,ebx
- ┃┃ .data:0x00001999 83e804 sub eax,0x4
- ┃┃ .data:0x0000199c 8b00 mov eax,DWORD PTR [eax]
- ┃┃ .data:0x0000199e 25fcffff7f and eax,0x7ffffffc
- ┃┃ .data:0x000019a3 83e804 sub eax,0x4
- ┃┃ .data:0x000019a6 3bf0 cmp esi,eax
- ┃┃┏ .data:0x000019a8 7d02 jge loc_000019ac
- ┃┃┃ .data:0x000019aa 8bc6 mov eax,esi
- ┃┃┃ .data:0x000019ac
- ┃┃┃ .data:0x000019ac loc_000019ac:
- ┃┃┗▶ .data:0x000019ac 85ff test edi,edi
- ┃┃┏ .data:0x000019ae 7412 je loc_000019c2
- ┃┃┃ .data:0x000019b0 8bc8 mov ecx,eax
- ┃┃┃ .data:0x000019b2 8bd7 mov edx,edi
- ┃┃┃ .data:0x000019b4 8bc3 mov eax,ebx
- ┃┃┃ .data:0x000019b6 e82d010000 call func_00001ae8
- ┃┃┃ .data:0x000019bb 8bc3 mov eax,ebx
- ┃┃┃ .data:0x000019bd e8fefbffff call func_000015c0
- ┃┃┃ .data:0x000019c2
- ┃┃┃ .data:0x000019c2 loc_000019c2:
- ┃┃┗▶ .data:0x000019c2 897dfc mov DWORD PTR [ebp-0x4],edi
- ┃┃ .data:0x000019c5
- ┃┃ .data:0x000019c5 loc_000019c5:
- ┃┗━▶ .data:0x000019c5 33c0 xor eax,eax
- ┃ .data:0x000019c7 5a pop edx
- ┃ .data:0x000019c8 59 pop ecx
- ┃ .data:0x000019c9 59 pop ecx
- ┃ .data:0x000019ca 648910 mov DWORD PTR fs:[eax],edx
- ┃ .data:0x000019cd 68ed254000 push 0x4025ed
- ┃ .data:0x000019d2
- ┃ .data:0x000019d2 loc_000019d2:
- ┃┏━▶ .data:0x000019d2 803d3620430000 cmp BYTE PTR ds:0x432036,0x0
- ┃┃┏ .data:0x000019d9 740a je loc_000019e5
- ┃┃┃ .data:0x000019db 6820244300 push 0x432420
- ┃┃┃ .data:0x000019e0 e827edffff call func_0000070c
- ┃┃┃ .data:0x000019e5
- ┃┃┃ .data:0x000019e5 loc_000019e5:
- ┃┃┗▶ .data:0x000019e5 c3 ret
- ┃┃ .data:0x000019e6 e9d9080000 jmp 0x000022c4
- ┃┗━ .data:0x000019eb ebe5 jmp loc_000019d2
- ┃ .data:0x000019ed
- ┃ .data:0x000019ed loc_000019ed:
- ┗━━▶ .data:0x000019ed 8b45fc mov eax,DWORD PTR [ebp-0x4]
- .data:0x000019f0 5f pop edi
- .data:0x000019f1 5e pop esi
- .data:0x000019f2 5b pop ebx
- .data:0x000019f3 59 pop ecx
- .data:0x000019f4 5d pop ebp
- .data:0x000019f5 c3 ret
- .data:0x000019f6 8bc0 mov eax,eax
- .data:0x000019f8 ; =============== F U N C T I O N ====================================
- .data:0x000019f8 ; CODE XREF: 0x00001d45
- .data:0x000019f8
- .data:0x000019f8 func_000019f8:
- .data:0x000019f8 85c0 test eax,eax
- ┏━ .data:0x000019fa 740a je loc_00001a06
- ┃ .data:0x000019fc ff1508104300 call DWORD PTR ds:0x431008
- ┃ .data:0x00001a02 09c0 or eax,eax
- ┃┏ .data:0x00001a04 7401 je loc_00001a07
- ┃┃ .data:0x00001a06
- ┃┃ .data:0x00001a06 loc_00001a06:
- ┗╋▶ .data:0x00001a06 c3 ret
- ┃ .data:0x00001a07
- ┃ .data:0x00001a07 loc_00001a07:
- ┗▶ .data:0x00001a07 b001 mov al,0x1
- ┏━━━ .data:0x00001a09 e96a000000 jmp loc_00001a78
- ┃ .data:0x00001a0e c3 ret
- ┃ .data:0x00001a0f 90 nop
- ┃ .data:0x00001a10 ; =============== F U N C T I O N ====================================
- ┃ .data:0x00001a10 ; CODE XREF: 0x00001d83
- ┃ .data:0x00001a10
- ┃ .data:0x00001a10 func_00001a10:
- ┃ .data:0x00001a10 85c0 test eax,eax
- ┃ ┏━ .data:0x00001a12 740a je loc_00001a1e
- ┃ ┃ .data:0x00001a14 ff150c104300 call DWORD PTR ds:0x43100c
- ┃ ┃ .data:0x00001a1a 09c0 or eax,eax
- ┃ ┃┏ .data:0x00001a1c 7501 jne loc_00001a1f
- ┃ ┃┃ .data:0x00001a1e
- ┃ ┃┃ .data:0x00001a1e loc_00001a1e:
- ┃ ┗╋▶ .data:0x00001a1e c3 ret
- ┃ ┃ .data:0x00001a1f
- ┃ ┃ .data:0x00001a1f loc_00001a1f:
- ┃ ┗▶ .data:0x00001a1f b002 mov al,0x2
- ┣━━━ .data:0x00001a21 e952000000 jmp loc_00001a78
- ┃ .data:0x00001a26 c3 ret
- ┃ .data:0x00001a27 90 nop
- ┃ .data:0x00001a28 8b08 mov ecx,DWORD PTR [eax]
- ┃ .data:0x00001a2a 85c9 test ecx,ecx
- ┏╋━━━ .data:0x00001a2c 7432 je loc_00001a60
- ┃┃ .data:0x00001a2e 85d2 test edx,edx
- ┃┃ ┏━ .data:0x00001a30 7418 je loc_00001a4a
- ┃┃ ┃ .data:0x00001a32 50 push eax
- ┃┃ ┃ .data:0x00001a33 89c8 mov eax,ecx
- ┃┃ ┃ .data:0x00001a35 ff1510104300 call DWORD PTR ds:0x431010
- ┃┃ ┃ .data:0x00001a3b 59 pop ecx
- ┃┃ ┃ .data:0x00001a3c 09c0 or eax,eax
- ┃┃┏╋━ .data:0x00001a3e 7419 je loc_00001a59
- ┃┃┃┃ .data:0x00001a40 8901 mov DWORD PTR [ecx],eax
- ┃┃┃┃ .data:0x00001a42 c3 ret
- ┃┃┃┃ .data:0x00001a43
- ┃┃┃┃ .data:0x00001a43 loc_00001a43:
- ┃┃┃┃┏▶ .data:0x00001a43 b002 mov al,0x2
- ┃┣╋╋╋ .data:0x00001a45 e92e000000 jmp loc_00001a78
- ┃┃┃┃┃ .data:0x00001a4a
- ┃┃┃┃┃ .data:0x00001a4a loc_00001a4a:
- ┃┃┃┗╋▶ .data:0x00001a4a 8910 mov DWORD PTR [eax],edx
- ┃┃┃ ┃ .data:0x00001a4c 89c8 mov eax,ecx
- ┃┃┃ ┃ .data:0x00001a4e ff150c104300 call DWORD PTR ds:0x43100c
- ┃┃┃ ┃ .data:0x00001a54 09c0 or eax,eax
- ┃┃┃ ┗ .data:0x00001a56 75eb jne loc_00001a43
- ┃┃┃ .data:0x00001a58 c3 ret
- ┃┃┃ .data:0x00001a59
- ┃┃┃ .data:0x00001a59 loc_00001a59:
- ┃┃┗┳━▶ .data:0x00001a59 b001 mov al,0x1
- ┃┣━╋━ .data:0x00001a5b e918000000 jmp loc_00001a78
- ┃┃ ┃ .data:0x00001a60
- ┃┃ ┃ .data:0x00001a60 loc_00001a60:
- ┗╋━╋━▶ .data:0x00001a60 85d2 test edx,edx
- ┃ ┃┏ .data:0x00001a62 7410 je loc_00001a74
- ┃ ┃┃ .data:0x00001a64 50 push eax
- ┃ ┃┃ .data:0x00001a65 89d0 mov eax,edx
- ┃ ┃┃ .data:0x00001a67 ff1508104300 call DWORD PTR ds:0x431008
- ┃ ┃┃ .data:0x00001a6d 59 pop ecx
- ┃ ┃┃ .data:0x00001a6e 09c0 or eax,eax
- ┃ ┗╋ .data:0x00001a70 74e7 je loc_00001a59
- ┃ ┃ .data:0x00001a72 8901 mov DWORD PTR [ecx],eax
- ┃ ┃ .data:0x00001a74
- ┃ ┃ .data:0x00001a74 loc_00001a74:
- ┃ ┗▶ .data:0x00001a74 c3 ret
- ┃ .data:0x00001a75 8d4000 lea eax,[eax+0x0]
- ┃ .data:0x00001a78
- ┃ .data:0x00001a78 loc_00001a78:
- ┏━━━━━━━┻━━━▶ .data:0x00001a78 83e07f and eax,0x7f
- ┃ .data:0x00001a7b 8b0d04204300 mov ecx,DWORD PTR ds:0x432004
- ┃ .data:0x00001a81 85c9 test ecx,ecx
- ┃ ┏ .data:0x00001a83 7403 je loc_00001a88
- ┃ ┃ .data:0x00001a85 5a pop edx
- ┃ ┃ .data:0x00001a86 ffd1 call ecx
- ┃ ┃ .data:0x00001a88
- ┃ ┃ .data:0x00001a88 loc_00001a88:
- ┃ ┗▶ .data:0x00001a88 48 dec eax
- ┃ .data:0x00001a89 8a80a1264000 mov al,BYTE PTR [eax+0x4026a1]
- ┃ ┏ .data:0x00001a8f 790b jns loc_00001a9c
- ┃ ┃ .data:0x00001a91 e87a0b0000 call func_00002610
- ┃ ┃ .data:0x00001a96 8b8004000000 mov eax,DWORD PTR [eax+0x4]
- ┃ ┃ .data:0x00001a9c
- ┃ ┃ .data:0x00001a9c loc_00001a9c:
- ┃ ┗▶ .data:0x00001a9c e943190000 jmp 0x000033e4
- ┃ .data:0x00001aa1 cb retf
- ┃ .data:0x00001aa2 cc int3
- ┃ .data:0x00001aa3 c8c9d7cf enter 0xd7c9,0xcf
- ┃ .data:0x00001aa7 c8cdcedb enter 0xcecd,0xdb
- ┃ .data:0x00001aab d8ca fmul st,st(2)
- ┃ .data:0x00001ab3 e0e1 loopne 0x00001a96
- ┃ .data:0x00001ab5 c3 ret
- ┃ .data:0x00001ab6 8bc0 mov eax,eax
- ┃ .data:0x00001ab8 50 push eax
- ┃ .data:0x00001ab9 52 push edx
- ┃ .data:0x00001aba 51 push ecx
- ┃ .data:0x00001abb e8500b0000 call func_00002610
- ┃ .data:0x00001ac0 83b80400000000 cmp DWORD PTR [eax+0x4],0x0
- ┃ .data:0x00001ac7 59 pop ecx
- ┃ .data:0x00001ac8 5a pop edx
- ┃ .data:0x00001ac9 58 pop eax
- ┃ ┏ .data:0x00001aca 7501 jne loc_00001acd
- ┃ ┃ .data:0x00001acc c3 ret
- ┃ ┃ .data:0x00001acd
- ┃ ┃ .data:0x00001acd loc_00001acd:
- ┃ ┗▶ .data:0x00001acd 31c0 xor eax,eax
- ┣━━━━━━━━━━━ .data:0x00001acf e9a4ffffff jmp loc_00001a78
- ┃ .data:0x00001ad4 c3 ret
- ┃ .data:0x00001ad5 8d4000 lea eax,[eax+0x0]
- ┃ .data:0x00001ad8 50 push eax
- ┃ .data:0x00001ad9 e8320b0000 call func_00002610
- ┃ .data:0x00001ade 8f8004000000 pop DWORD PTR [eax+0x4]
- ┃ .data:0x00001ae4 c3 ret
- ┃ .data:0x00001ae5 8d4000 lea eax,[eax+0x0]
- ┃ .data:0x00001ae8 ; =============== F U N C T I O N ====================================
- ┃ .data:0x00001ae8 ; CODE XREF: 0x000019b6
- ┃ .data:0x00001ae8
- ┃ .data:0x00001ae8 func_00001ae8:
- ┃ .data:0x00001ae8 56 push esi
- ┃ .data:0x00001ae9 57 push edi
- ┃ .data:0x00001aea 89c6 mov esi,eax
- ┃ .data:0x00001aec 89d7 mov edi,edx
- ┃ .data:0x00001aee 89c8 mov eax,ecx
- ┃ .data:0x00001af0 39f7 cmp edi,esi
- ┃ ┏ .data:0x00001af2 7f13 jg loc_00001b07
- ┃ ┏╋ .data:0x00001af4 742f je loc_00001b25
- ┃ ┃┃ .data:0x00001af6 c1f902 sar ecx,0x2
- ┃ ┣╋ .data:0x00001af9 782a js loc_00001b25
- ┃ ┃┃ .data:0x00001afb f3a5 rep movs DWORD PTR es:[edi],DWORD PTR ds:[esi]
- ┃ ┃┃ .data:0x00001afd 89c1 mov ecx,eax
- ┃ ┃┃ .data:0x00001aff 83e103 and ecx,0x3
- ┃ ┃┃ .data:0x00001b02 f3a4 rep movs BYTE PTR es:[edi],BYTE PTR ds:[esi]
- ┃ ┃┃ .data:0x00001b04 5f pop edi
- ┃ ┃┃ .data:0x00001b05 5e pop esi
- ┃ ┃┃ .data:0x00001b06 c3 ret
- ┃ ┃┃ .data:0x00001b07
- ┃ ┃┃ .data:0x00001b07 loc_00001b07:
- ┃ ┃┗▶ .data:0x00001b07 8d740efc lea esi,[esi+ecx*1-0x4]
- ┃ ┃ .data:0x00001b0b 8d7c0ffc lea edi,[edi+ecx*1-0x4]
- ┃ ┃ .data:0x00001b0f c1f902 sar ecx,0x2
- ┃ ┣━ .data:0x00001b12 7811 js loc_00001b25
- ┃ ┃ .data:0x00001b14 fd std
- ┃ ┃ .data:0x00001b15 f3a5 rep movs DWORD PTR es:[edi],DWORD PTR ds:[esi]
- ┃ ┃ .data:0x00001b17 89c1 mov ecx,eax
- ┃ ┃ .data:0x00001b19 83e103 and ecx,0x3
- ┃ ┃ .data:0x00001b1c 83c603 add esi,0x3
- ┃ ┃ .data:0x00001b1f 83c703 add edi,0x3
- ┃ ┃ .data:0x00001b22 f3a4 rep movs BYTE PTR es:[edi],BYTE PTR ds:[esi]
- ┃ ┃ .data:0x00001b24 fc cld
- ┃ ┃ .data:0x00001b25
- ┃ ┃ .data:0x00001b25 loc_00001b25:
- ┃ ┗━▶ .data:0x00001b25 5f pop edi
- ┃ .data:0x00001b26 5e pop esi
- ┃ .data:0x00001b27 c3 ret
- ┃ .data:0x00001b28
- ┃ .data:0x00001b28 loc_00001b28:
- ┏╋━━━━━━━━━━━▶ .data:0x00001b28 b8d2000000 mov eax,0xd2
- ┃┃ .data:0x00001b2d e9b2180000 jmp 0x000033e4
- ┃┃ .data:0x00001b32 c3 ret
- ┃┃ .data:0x00001b33 90 nop
- ┃┃ .data:0x00001b34 56 push esi
- ┃┃ .data:0x00001b35 57 push edi
- ┃┃ .data:0x00001b36 89c7 mov edi,eax
- ┃┃ .data:0x00001b38 31c0 xor eax,eax
- ┃┃ .data:0x00001b3a 8a07 mov al,BYTE PTR [edi]
- ┃┃ .data:0x00001b3c 89d6 mov esi,edx
- ┃┃ .data:0x00001b3e 31d2 xor edx,edx
- ┃┃ .data:0x00001b40 8a16 mov dl,BYTE PTR [esi]
- ┃┃ .data:0x00001b42 46 inc esi
- ┃┃ .data:0x00001b43 00d0 add al,dl
- ┃┃ ┏━ .data:0x00001b45 7212 jb loc_00001b59
- ┃┃ ┃ .data:0x00001b47 38c8 cmp al,cl
- ┃┃ ┣━ .data:0x00001b49 770e ja loc_00001b59
- ┃┃ ┃ .data:0x00001b4b
- ┃┃ ┃ .data:0x00001b4b loc_00001b4b:
- ┃┃ ┏╋━▶ .data:0x00001b4b 89d1 mov ecx,edx
- ┃┃ ┃┃ .data:0x00001b4d 8a17 mov dl,BYTE PTR [edi]
- ┃┃ ┃┃ .data:0x00001b4f 8807 mov BYTE PTR [edi],al
- ┃┃ ┃┃ .data:0x00001b51 47 inc edi
- ┃┃ ┃┃ .data:0x00001b52 01d7 add edi,edx
- ┃┃ ┃┃ .data:0x00001b54 f3a4 rep movs BYTE PTR es:[edi],BYTE PTR ds:[esi]
- ┃┃ ┃┃ .data:0x00001b56
- ┃┃ ┃┃ .data:0x00001b56 loc_00001b56:
- ┃┃ ┃┃┏▶ .data:0x00001b56 5f pop edi
- ┃┃ ┃┃┃ .data:0x00001b57 5e pop esi
- ┃┃ ┃┃┃ .data:0x00001b58 c3 ret
- ┃┃ ┃┃┃ .data:0x00001b59
- ┃┃ ┃┃┃ .data:0x00001b59 loc_00001b59:
- ┃┃ ┃┗╋▶ .data:0x00001b59 88c8 mov al,cl
- ┃┃ ┃ ┃ .data:0x00001b5b 2a0f sub cl,BYTE PTR [edi]
- ┃┃ ┃ ┗ .data:0x00001b5d 76f7 jbe loc_00001b56
- ┃┃ ┃ .data:0x00001b5f 88ca mov dl,cl
- ┃┃ ┗━━ .data:0x00001b61 ebe8 jmp loc_00001b4b
- ┃┃ .data:0x00001b63 c3 ret
- ┃┃ .data:0x00001b64 31c9 xor ecx,ecx
- ┃┃ .data:0x00001b66 56 push esi
- ┃┃ .data:0x00001b67 57 push edi
- ┃┃ .data:0x00001b68 8a0a mov cl,BYTE PTR [edx]
- ┃┃ .data:0x00001b6a 89c7 mov edi,eax
- ┃┃ .data:0x00001b6c 41 inc ecx
- ┃┃ .data:0x00001b6d 89d6 mov esi,edx
- ┃┃ .data:0x00001b6f 89c8 mov eax,ecx
- ┃┃ .data:0x00001b71 c1e902 shr ecx,0x2
- ┃┃ .data:0x00001b74 83e003 and eax,0x3
- ┃┃ .data:0x00001b77 f3a5 rep movs DWORD PTR es:[edi],DWORD PTR ds:[esi]
- ┃┃ .data:0x00001b79 89c1 mov ecx,eax
- ┃┃ .data:0x00001b7b f3a4 rep movs BYTE PTR es:[edi],BYTE PTR ds:[esi]
- ┃┃ .data:0x00001b7d 5f pop edi
- ┃┃ .data:0x00001b7e 5e pop esi
- ┃┃ .data:0x00001b7f c3 ret
- ┃┃ .data:0x00001b80 56 push esi
- ┃┃ .data:0x00001b81 57 push edi
- ┃┃ .data:0x00001b82 89c7 mov edi,eax
- ┃┃ .data:0x00001b84 31c0 xor eax,eax
- ┃┃ .data:0x00001b86 89d6 mov esi,edx
- ┃┃ .data:0x00001b88 8a02 mov al,BYTE PTR [edx]
- ┃┃ .data:0x00001b8a 38c8 cmp al,cl
- ┃┃ ┏ .data:0x00001b8c 7712 ja loc_00001ba0
- ┃┃ ┃ .data:0x00001b8e 40 inc eax
- ┃┃ ┃ .data:0x00001b8f 89c1 mov ecx,eax
- ┃┃ ┃ .data:0x00001b91 83e003 and eax,0x3
- ┃┃ ┃ .data:0x00001b94 c1e902 shr ecx,0x2
- ┃┃ ┃ .data:0x00001b97 f3a5 rep movs DWORD PTR es:[edi],DWORD PTR ds:[esi]
- ┃┃ ┃ .data:0x00001b99 89c1 mov ecx,eax
- ┃┃ ┃ .data:0x00001b9b f3a4 rep movs BYTE PTR es:[edi],BYTE PTR ds:[esi]
- ┃┃ ┃ .data:0x00001b9d 5f pop edi
- ┃┃ ┃ .data:0x00001b9e 5e pop esi
- ┃┃ ┃ .data:0x00001b9f c3 ret
- ┃┃ ┃ .data:0x00001ba0
- ┃┃ ┃ .data:0x00001ba0 loc_00001ba0:
- ┃┃ ┗▶ .data:0x00001ba0 880f mov BYTE PTR [edi],cl
- ┃┃ .data:0x00001ba2 46 inc esi
- ┃┃ .data:0x00001ba3 47 inc edi
- ┃┃ .data:0x00001ba4 81e1ff000000 and ecx,0xff
- ┃┃ .data:0x00001baa f3a4 rep movs BYTE PTR es:[edi],BYTE PTR ds:[esi]
- ┃┃ .data:0x00001bac 5f pop edi
- ┃┃ .data:0x00001bad 5e pop esi
- ┃┃ .data:0x00001bae c3 ret
- ┃┃ .data:0x00001baf 90 nop
- ┃┃ .data:0x00001bb0 53 push ebx
- ┃┃ .data:0x00001bb1 56 push esi
- ┃┃ .data:0x00001bb2 51 push ecx
- ┃┃ .data:0x00001bb3 89ce mov esi,ecx
- ┃┃ .data:0x00001bb5 c1ee02 shr esi,0x2
- ┃┃ ┏━━ .data:0x00001bb8 7426 je loc_00001be0
- ┃┃ ┃ .data:0x00001bba
- ┃┃ ┃ .data:0x00001bba loc_00001bba:
- ┃┃ ┃ ┏▶ .data:0x00001bba 8b08 mov ecx,DWORD PTR [eax]
- ┃┃ ┃ ┃ .data:0x00001bbc 8b1a mov ebx,DWORD PTR [edx]
- ┃┃ ┃ ┃ .data:0x00001bbe 39d9 cmp ecx,ebx
- ┃┃ ┏╋━╋ .data:0x00001bc0 7545 jne loc_00001c07
- ┃┃ ┃┃ ┃ .data:0x00001bc2 4e dec esi
- ┃┃ ┃┃┏╋ .data:0x00001bc3 7415 je loc_00001bda
- ┃┃ ┃┃┃┃ .data:0x00001bc5 8b4804 mov ecx,DWORD PTR [eax+0x4]
- ┃┃ ┃┃┃┃ .data:0x00001bc8 8b5a04 mov ebx,DWORD PTR [edx+0x4]
- ┃┃ ┃┃┃┃ .data:0x00001bcb 39d9 cmp ecx,ebx
- ┃┃ ┣╋╋╋ .data:0x00001bcd 7538 jne loc_00001c07
- ┃┃ ┃┃┃┃ .data:0x00001bcf 83c008 add eax,0x8
- ┃┃ ┃┃┃┃ .data:0x00001bd2 83c208 add edx,0x8
- ┃┃ ┃┃┃┃ .data:0x00001bd5 4e dec esi
- ┃┃ ┃┃┃┗ .data:0x00001bd6 75e2 jne loc_00001bba
- ┃┃ ┃┣╋━ .data:0x00001bd8 eb06 jmp loc_00001be0
- ┃┃ ┃┃┃ .data:0x00001bda
- ┃┃ ┃┃┃ .data:0x00001bda loc_00001bda:
- ┃┃ ┃┃┗━▶ .data:0x00001bda 83c004 add eax,0x4
- ┃┃ ┃┃ .data:0x00001bdd 83c204 add edx,0x4
- ┃┃ ┃┃ .data:0x00001be0
- ┃┃ ┃┃ .data:0x00001be0 loc_00001be0:
- ┃┃ ┃┗━━▶ .data:0x00001be0 5e pop esi
- ┃┃ ┃ .data:0x00001be1 83e603 and esi,0x3
- ┃┃ ┃ ┏━ .data:0x00001be4 7436 je loc_00001c1c
- ┃┃ ┃ ┃ .data:0x00001be6 8a08 mov cl,BYTE PTR [eax]
- ┃┃ ┃ ┃ .data:0x00001be8 3a0a cmp cl,BYTE PTR [edx]
- ┃┃ ┃ ┣━ .data:0x00001bea 7530 jne loc_00001c1c
- ┃┃ ┃ ┃ .data:0x00001bec 4e dec esi
- ┃┃ ┃ ┃┏ .data:0x00001bed 7413 je loc_00001c02
- ┃┃ ┃ ┃┃ .data:0x00001bef 8a4801 mov cl,BYTE PTR [eax+0x1]
- ┃┃ ┃ ┃┃ .data:0x00001bf2 3a4a01 cmp cl,BYTE PTR [edx+0x1]
- ┃┃ ┃ ┣╋ .data:0x00001bf5 7525 jne loc_00001c1c
- ┃┃ ┃ ┃┃ .data:0x00001bf7 4e dec esi
- ┃┃ ┃ ┃┣ .data:0x00001bf8 7408 je loc_00001c02
- ┃┃ ┃ ┃┃ .data:0x00001bfa 8a4802 mov cl,BYTE PTR [eax+0x2]
- ┃┃ ┃ ┃┃ .data:0x00001bfd 3a4a02 cmp cl,BYTE PTR [edx+0x2]
- ┃┃ ┃ ┣╋ .data:0x00001c00 751a jne loc_00001c1c
- ┃┃ ┃ ┃┃ .data:0x00001c02
- ┃┃ ┃ ┃┃ .data:0x00001c02 loc_00001c02:
- ┃┃ ┃ ┃┗▶ .data:0x00001c02 31c0 xor eax,eax
- ┃┃ ┃ ┃ .data:0x00001c04 5e pop esi
- ┃┃ ┃ ┃ .data:0x00001c05 5b pop ebx
- ┃┃ ┃ ┃ .data:0x00001c06 c3 ret
- ┃┃ ┃ ┃ .data:0x00001c07
- ┃┃ ┃ ┃ .data:0x00001c07 loc_00001c07:
- ┃┃ ┗━╋━▶ .data:0x00001c07 5e pop esi
- ┃┃ ┃ .data:0x00001c08 38d9 cmp cl,bl
- ┃┃ ┣━ .data:0x00001c0a 7510 jne loc_00001c1c
- ┃┃ ┃ .data:0x00001c0c 38fd cmp ch,bh
- ┃┃ ┣━ .data:0x00001c0e 750c jne loc_00001c1c
- ┃┃ ┃ .data:0x00001c10 c1e910 shr ecx,0x10
- ┃┃ ┃ .data:0x00001c13 c1eb10 shr ebx,0x10
- ┃┃ ┃ .data:0x00001c16 38d9 cmp cl,bl
- ┃┃ ┣━ .data:0x00001c18 7502 jne loc_00001c1c
- ┃┃ ┃ .data:0x00001c1a 38fd cmp ch,bh
- ┃┃ ┃ .data:0x00001c1c
- ┃┃ ┃ .data:0x00001c1c loc_00001c1c:
- ┃┃ ┗━▶ .data:0x00001c1c 5e pop esi
- ┃┃ .data:0x00001c1d 5b pop ebx
- ┃┃ .data:0x00001c1e c3 ret
- ┃┃ .data:0x00001c1f 90 nop
- ┃┃ .data:0x00001c20 57 push edi
- ┃┃ .data:0x00001c21 89c7 mov edi,eax
- ┃┃ .data:0x00001c23 88cd mov ch,cl
- ┃┃ .data:0x00001c25 89c8 mov eax,ecx
- ┃┃ .data:0x00001c27 c1e010 shl eax,0x10
- ┃┃ .data:0x00001c2a 6689c8 mov ax,cx
- ┃┃ .data:0x00001c2d 89d1 mov ecx,edx
- ┃┃ .data:0x00001c2f c1f902 sar ecx,0x2
- ┃┃ ┏ .data:0x00001c32 7809 js loc_00001c3d
- ┃┃ ┃ .data:0x00001c34 f3ab rep stos DWORD PTR es:[edi],eax
- ┃┃ ┃ .data:0x00001c36 89d1 mov ecx,edx
- ┃┃ ┃ .data:0x00001c38 83e103 and ecx,0x3
- ┃┃ ┃ .data:0x00001c3b f3aa rep stos BYTE PTR es:[edi],al
- ┃┃ ┃ .data:0x00001c3d
- ┃┃ ┃ .data:0x00001c3d loc_00001c3d:
- ┃┃ ┗▶ .data:0x00001c3d 5f pop edi
- ┃┃ .data:0x00001c3e c3 ret
- ┃┃ .data:0x00001c3f 90 nop
- ┃┃ .data:0x00001c40 53 push ebx
- ┃┃ .data:0x00001c41 56 push esi
- ┃┃ .data:0x00001c42 57 push edi
- ┃┃ .data:0x00001c43 89c6 mov esi,eax
- ┃┃ .data:0x00001c45 50 push eax
- ┃┃ .data:0x00001c46 85c0 test eax,eax
- ┃┃ ┏━━━━ .data:0x00001c48 7451 je loc_00001c9b
- ┃┃ ┃ .data:0x00001c4a 31c0 xor eax,eax
- ┃┃ ┃ .data:0x00001c4c 31db xor ebx,ebx
- ┃┃ ┃ .data:0x00001c4e bfcccccc0c mov edi,0xccccccc
- ┃┃ ┃ .data:0x00001c53
- ┃┃ ┃ .data:0x00001c53 loc_00001c53:
- ┃┃ ┃ ┏▶ .data:0x00001c53 8a1e mov bl,BYTE PTR [esi]
- ┃┃ ┃ ┃ .data:0x00001c55 46 inc esi
- ┃┃ ┃ ┃ .data:0x00001c56 80fb20 cmp bl,0x20
- ┃┃ ┃ ┗ .data:0x00001c59 74f8 je loc_00001c53
- ┃┃ ┃ .data:0x00001c5b b500 mov ch,0x0
- ┃┃ ┃ .data:0x00001c5d 80fb2d cmp bl,0x2d
- ┃┃ ┏━━━━╋━━━━ .data:0x00001c60 7445 je loc_00001ca7
- ┃┃ ┃ ┃ .data:0x00001c62 80fb2b cmp bl,0x2b
- ┃┃ ┃ ┏━━╋━━━━ .data:0x00001c65 7442 je loc_00001ca9
- ┃┃ ┃ ┃ ┃ .data:0x00001c67 80fb24 cmp bl,0x24
- ┃┃ ┃┏╋━━╋━━━━ .data:0x00001c6a 7442 je loc_00001cae
- ┃┃ ┃┃┃ ┃ .data:0x00001c6c
- ┃┃ ┃┃┃ ┃ .data:0x00001c6c loc_00001c6c:
- ┃┃ ┃┃┃┏━╋━━━━▶ .data:0x00001c6c 84db test bl,bl
- ┃┃ ┃┃┃┃┏╋━━━━ .data:0x00001c6e 7432 je loc_00001ca2
- ┃┃ ┃┃┃┃┃┃ .data:0x00001c70
- ┃┃ ┃┃┃┃┃┃ .data:0x00001c70 loc_00001c70:
- ┃┃ ┃┃┃┃┃┃ ┏▶ .data:0x00001c70 80eb30 sub bl,0x30
- ┃┃ ┃┃┃┃┃┃ ┃ .data:0x00001c73 80fb09 cmp bl,0x9
- ┃┃ ┃┃┃┃┣╋━━━╋ .data:0x00001c76 772a ja loc_00001ca2
- ┃┃ ┃┃┃┃┃┃ ┃ .data:0x00001c78 39f8 cmp eax,edi
- ┃┃ ┃┃┃┃┣╋━━━╋ .data:0x00001c7a 7726 ja loc_00001ca2
- ┃┃ ┃┃┃┃┃┃ ┃ .data:0x00001c7c 8d0480 lea eax,[eax+eax*4]
- ┃┃ ┃┃┃┃┃┃ ┃ .data:0x00001c7f 01c0 add eax,eax
- ┃┃ ┃┃┃┃┃┃ ┃ .data:0x00001c81 01d8 add eax,ebx
- ┃┃ ┃┃┃┃┃┃ ┃ .data:0x00001c83 8a1e mov bl,BYTE PTR [esi]
- ┃┃ ┃┃┃┃┃┃ ┃ .data:0x00001c85 46 inc esi
- ┃┃ ┃┃┃┃┃┃ ┃ .data:0x00001c86 84db test bl,bl
- ┃┃ ┃┃┃┃┃┃ ┗ .data:0x00001c88 75e6 jne loc_00001c70
- ┃┃ ┃┃┃┃┃┃ .data:0x00001c8a fecd dec ch
- ┃┃ ┃┃┃┃┃┃┏━━━ .data:0x00001c8c 7410 je loc_00001c9e
- ┃┃ ┃┃┃┃┃┃┃ .data:0x00001c8e 85c0 test eax,eax
- ┃┃ ┃┃┃┃┣╋╋━━━ .data:0x00001c90 7c10 jl loc_00001ca2
- ┃┃ ┃┃┃┃┃┃┃ .data:0x00001c92
- ┃┃ ┃┃┃┃┃┃┃ .data:0x00001c92 loc_00001c92:
- ┃┃┏╋╋╋╋╋╋╋━━━▶ .data:0x00001c92 59 pop ecx
- ┃┃┃┃┃┃┃┃┃┃ .data:0x00001c93 31f6 xor esi,esi
- ┃┃┃┃┃┃┃┃┃┃ .data:0x00001c95
- ┃┃┃┃┃┃┃┃┃┃ .data:0x00001c95 loc_00001c95:
- ┃┃┃┃┃┃┃┃┃┃┏━━▶ .data:0x00001c95 8932 mov DWORD PTR [edx],esi
- ┃┃┃┃┃┃┃┃┃┃┃ .data:0x00001c97 5f pop edi
- ┃┃┃┃┃┃┃┃┃┃┃ .data:0x00001c98 5e pop esi
- ┃┃┃┃┃┃┃┃┃┃┃ .data:0x00001c99 5b pop ebx
- ┃┃┃┃┃┃┃┃┃┃┃ .data:0x00001c9a c3 ret
- ┃┃┃┃┃┃┃┃┃┃┃ .data:0x00001c9b
- ┃┃┃┃┃┃┃┃┃┃┃ .data:0x00001c9b loc_00001c9b:
- ┃┃┃┃┃┃┃┃┣╋╋━━▶ .data:0x00001c9b 46 inc esi
- ┃┃┃┃┃┃┃┣╋╋╋━━ .data:0x00001c9c eb04 jmp loc_00001ca2
- ┃┃┃┃┃┃┃┃┃┃┃ .data:0x00001c9e
- ┃┃┃┃┃┃┃┃┃┃┃ .data:0x00001c9e loc_00001c9e:
- ┃┃┃┃┃┃┃┃┃┗╋━━▶ .data:0x00001c9e f7d8 neg eax
- ┃┃┣╋╋╋╋╋╋━╋━━ .data:0x00001ca0 7ef0 jle loc_00001c92
- ┃┃┃┃┃┃┃┃┃ ┃ .data:0x00001ca2
- ┃┃┃┃┃┃┃┃┃ ┃ .data:0x00001ca2 loc_00001ca2:
- ┃┃┃┃┃┃┃┗╋┳╋━━▶ .data:0x00001ca2 5b pop ebx
- ┃┃┃┃┃┃┃ ┃┃┃ .data:0x00001ca3 29de sub esi,ebx
- ┃┃┃┃┃┃┃ ┃┃┗━━ .data:0x00001ca5 ebee jmp loc_00001c95
- ┃┃┃┃┃┃┃ ┃┃ .data:0x00001ca7
- ┃┃┃┃┃┃┃ ┃┃ .data:0x00001ca7 loc_00001ca7:
- ┃┃┃┗╋╋╋━╋╋━━━▶ .data:0x00001ca7 fec5 inc ch
- ┃┃┃ ┃┃┃ ┃┃ .data:0x00001ca9
- ┃┃┃ ┃┃┃ ┃┃ .data:0x00001ca9 loc_00001ca9:
- ┃┃┃ ┃┗╋━╋╋━━━▶ .data:0x00001ca9 8a1e mov bl,BYTE PTR [esi]
- ┃┃┃ ┃ ┃ ┃┃ .data:0x00001cab 46 inc esi
- ┃┃┃ ┃ ┗━╋╋━━━ .data:0x00001cac ebbe jmp loc_00001c6c
- ┃┃┃ ┃ ┃┃ .data:0x00001cae
- ┃┃┃ ┃ ┃┃ .data:0x00001cae loc_00001cae:
- ┃┃┃ ┗━━━╋╋━━━▶ .data:0x00001cae bfffffff0f mov edi,0xfffffff
- ┃┃┃ ┃┃ .data:0x00001cb3 8a1e mov bl,BYTE PTR [esi]
- ┃┃┃ ┃┃ .data:0x00001cb5 46 inc esi
- ┃┃┃ ┃┃ .data:0x00001cb6 84db test bl,bl
- ┃┃┃ ┗╋━━━ .data:0x00001cb8 74e1 je loc_00001c9b
- ┃┃┃ ┃ .data:0x00001cba
- ┃┃┃ ┃ .data:0x00001cba loc_00001cba:
- ┃┃┃ ┃ ┏━▶ .data:0x00001cba 80fb61 cmp bl,0x61
- ┃┃┃ ┃ ┃┏ .data:0x00001cbd 7203 jb loc_00001cc2
- ┃┃┃ ┃ ┃┃ .data:0x00001cbf 80eb20 sub bl,0x20
- ┃┃┃ ┃ ┃┃ .data:0x00001cc2
- ┃┃┃ ┃ ┃┃ .data:0x00001cc2 loc_00001cc2:
- ┃┃┃ ┃ ┃┗▶ .data:0x00001cc2 80eb30 sub bl,0x30
- ┃┃┃ ┃ ┃ .data:0x00001cc5 80fb09 cmp bl,0x9
- ┃┃┃ ┃ ┃┏ .data:0x00001cc8 760b jbe loc_00001cd5
- ┃┃┃ ┃ ┃┃ .data:0x00001cca 80eb11 sub bl,0x11
- ┃┃┃ ┃ ┃┃ .data:0x00001ccd 80fb05 cmp bl,0x5
- ┃┃┃ ┣━╋╋ .data:0x00001cd0 77d0 ja loc_00001ca2
- ┃┃┃ ┃ ┃┃ .data:0x00001cd2 80c30a add bl,0xa
- ┃┃┃ ┃ ┃┃ .data:0x00001cd5
- ┃┃┃ ┃ ┃┃ .data:0x00001cd5 loc_00001cd5:
- ┃┃┃ ┃ ┃┗▶ .data:0x00001cd5 39f8 cmp eax,edi
- ┃┃┃ ┗━╋━ .data:0x00001cd7 77c9 ja loc_00001ca2
- ┃┃┃ ┃ .data:0x00001cd9 c1e004 shl eax,0x4
- ┃┃┃ ┃ .data:0x00001cdc 01d8 add eax,ebx
- ┃┃┃ ┃ .data:0x00001cde 8a1e mov bl,BYTE PTR [esi]
- ┃┃┃ ┃ .data:0x00001ce0 46 inc esi
- ┃┃┃ ┃ .data:0x00001ce1 84db test bl,bl
- ┃┃┃ ┗━ .data:0x00001ce3 75d5 jne loc_00001cba
- ┃┃┗━━━━━━━━━━ .data:0x00001ce5 ebab jmp loc_00001c92
- ┃┃ .data:0x00001ce7 c3 ret
- ┃┃ .data:0x00001ce8 dbe3 fninit
- ┃┃ .data:0x00001cea 9bd92d14104300 fldcw WORD PTR ds:0x431014
- ┃┃ .data:0x00001cf1 c3 ret
- ┃┃ .data:0x00001cf2 8bc0 mov eax,eax
- ┃┃ .data:0x00001cf4 b005 mov al,0x5
- ┃┣━━━━━━━━━━━ .data:0x00001cf6 e97dfdffff jmp loc_00001a78
- ┃┃ .data:0x00001cfb c3 ret
- ┃┃ .data:0x00001cfc 8b00 mov eax,DWORD PTR [eax]
- ┃┃ .data:0x00001cfe c3 ret
- ┃┃ .data:0x00001cff 90 nop
- ┃┃ .data:0x00001d00 56 push esi
- ┃┃ .data:0x00001d01 57 push edi
- ┃┃ .data:0x00001d02 89d7 mov edi,edx
- ┃┃ .data:0x00001d04 8b70e4 mov esi,DWORD PTR [eax-0x1c]
- ┃┃ .data:0x00001d07 31c9 xor ecx,ecx
- ┃┃ .data:0x00001d09 8a0e mov cl,BYTE PTR [esi]
- ┃┃ .data:0x00001d0b 41 inc ecx
- ┃┃ .data:0x00001d0c f3a4 rep movs BYTE PTR es:[edi],BYTE PTR ds:[esi]
- ┃┃ .data:0x00001d0e 5f pop edi
- ┃┃ .data:0x00001d0f 5e pop esi
- ┃┃ .data:0x00001d10 c3 ret
- ┃┃ .data:0x00001d11 8d4000 lea eax,[eax+0x0]
- ┃┃ .data:0x00001d14 53 push ebx
- ┃┃ .data:0x00001d15 31db xor ebx,ebx
- ┃┃ .data:0x00001d17 09d2 or edx,edx
- ┃┃ ┏ .data:0x00001d19 741c je loc_00001d37
- ┃┃ ┃ .data:0x00001d1b 8b40e4 mov eax,DWORD PTR [eax-0x1c]
- ┃┃ ┃ .data:0x00001d1e 31c9 xor ecx,ecx
- ┃┃ ┃ .data:0x00001d20 8a08 mov cl,BYTE PTR [eax]
- ┃┃ ┃ .data:0x00001d22 3b4afc cmp ecx,DWORD PTR [edx-0x4]
- ┃┃ ┣ .data:0x00001d25 7510 jne loc_00001d37
- ┃┃ ┃ .data:0x00001d27 4a dec edx
- ┃┃ ┃ .data:0x00001d28
- ┃┃ ┃ .data:0x00001d28 loc_00001d28:
- ┃┃ ┏╋▶ .data:0x00001d28 8a3c08 mov bh,BYTE PTR [eax+ecx*1]
- ┃┃ ┃┃ .data:0x00001d2b 323c0a xor bh,BYTE PTR [edx+ecx*1]
- ┃┃ ┃┃ .data:0x00001d2e 80e7df and bh,0xdf
- ┃┃ ┃┣ .data:0x00001d31 7504 jne loc_00001d37
- ┃┃ ┃┃ .data:0x00001d33 49 dec ecx
- ┃┃ ┗╋ .data:0x00001d34 75f2 jne loc_00001d28
- ┃┃ ┃ .data:0x00001d36 43 inc ebx
- ┃┃ ┃ .data:0x00001d37
- ┃┃ ┃ .data:0x00001d37 loc_00001d37:
- ┃┃ ┗▶ .data:0x00001d37 88d8 mov al,bl
- ┃┃ .data:0x00001d39 5b pop ebx
- ┃┃ .data:0x00001d3a c3 ret
- ┃┃ .data:0x00001d3b 90 nop
- ┃┃ .data:0x00001d3c 8b40ec mov eax,DWORD PTR [eax-0x14]
- ┃┃ .data:0x00001d3f c3 ret
- ┃┃ .data:0x00001d40 57 push edi
- ┃┃ .data:0x00001d41 50 push eax
- ┃┃ .data:0x00001d42 8b40e8 mov eax,DWORD PTR [eax-0x18]
- ┃┃ .data:0x00001d45 e8aefcffff call func_000019f8
- ┃┃ .data:0x00001d4a 89c7 mov edi,eax
- ┃┃ .data:0x00001d4c 89c2 mov edx,eax
- ┃┃ .data:0x00001d4e 58 pop eax
- ┃┃ .data:0x00001d4f ab stos DWORD PTR es:[edi],eax
- ┃┃ .data:0x00001d50 8b48e8 mov ecx,DWORD PTR [eax-0x18]
- ┃┃ .data:0x00001d53 31c0 xor eax,eax
- ┃┃ .data:0x00001d55 51 push ecx
- ┃┃ .data:0x00001d56 c1e902 shr ecx,0x2
- ┃┃ .data:0x00001d59 49 dec ecx
- ┃┃ .data:0x00001d5a f3ab rep stos DWORD PTR es:[edi],eax
- ┃┃ .data:0x00001d5c 59 pop ecx
- ┃┃ .data:0x00001d5d 83e103 and ecx,0x3
- ┃┃ .data:0x00001d60 f3aa rep stos BYTE PTR es:[edi],al
- ┃┃ .data:0x00001d62 89d0 mov eax,edx
- ┃┃ .data:0x00001d64 5f pop edi
- ┃┃ .data:0x00001d65 c3 ret
- ┃┃ .data:0x00001d66 8bc0 mov eax,eax
- ┃┃ .data:0x00001d68 53 push ebx
- ┃┃ .data:0x00001d69 56 push esi
- ┃┃ .data:0x00001d6a 89c3 mov ebx,eax
- ┃┃ .data:0x00001d6c 8b30 mov esi,DWORD PTR [eax]
- ┃┃ .data:0x00001d6e
- ┃┃ .data:0x00001d6e loc_00001d6e:
- ┃┃ ┏━▶ .data:0x00001d6e 8b56d0 mov edx,DWORD PTR [esi-0x30]
- ┃┃ ┃ .data:0x00001d71 8b76ec mov esi,DWORD PTR [esi-0x14]
- ┃┃ ┃ .data:0x00001d74 85d2 test edx,edx
- ┃┃ ┃┏ .data:0x00001d76 7407 je loc_00001d7f
- ┃┃ ┃┃ .data:0x00001d78 e8970d0000 call func_00002b14
- ┃┃ ┃┃ .data:0x00001d7d 89d8 mov eax,ebx
- ┃┃ ┃┃ .data:0x00001d7f
- ┃┃ ┃┃ .data:0x00001d7f loc_00001d7f:
- ┃┃ ┃┗▶ .data:0x00001d7f 85f6 test esi,esi
- ┃┃ ┗━ .data:0x00001d81 75eb jne loc_00001d6e
- ┃┃ .data:0x00001d83 e888fcffff call func_00001a10
- ┃┃ .data:0x00001d88 5e pop esi
- ┃┃ .data:0x00001d89 5b pop ebx
- ┃┃ .data:0x00001d8a c3 ret
- ┃┃ .data:0x00001d8b 90 nop
- ┃┃ .data:0x00001d8c 8b40e8 mov eax,DWORD PTR [eax-0x18]
- ┃┃ .data:0x00001d8f c3 ret
- ┃┃ .data:0x00001d90 84d2 test dl,dl
- ┃┃ ┏ .data:0x00001d92 7408 je loc_00001d9c
- ┃┃ ┃ .data:0x00001d94 83c4f0 add esp,0xfffffff0
- ┃┃ ┃ .data:0x00001d97 e8f4010000 call func_00001f90
- ┃┃ ┃ .data:0x00001d9c
- ┃┃ ┃ .data:0x00001d9c loc_00001d9c:
- ┃┃ ┗▶ .data:0x00001d9c 84d2 test dl,dl
- ┃┃ ┏ .data:0x00001d9e 740a je loc_00001daa
- ┃┃ ┃ .data:0x00001da0 648f0500000000 pop DWORD PTR fs:0x0
- ┃┃ ┃ .data:0x00001da7 83c40c add esp,0xc
- ┃┃ ┃ .data:0x00001daa
- ┃┃ ┃ .data:0x00001daa loc_00001daa:
- ┃┃ ┗▶ .data:0x00001daa c3 ret
- ┃┃ .data:0x00001dab 90 nop
- ┃┃ .data:0x00001dac 84d2 test dl,dl
- ┃┃ ┏ .data:0x00001dae 7405 je loc_00001db5
- ┃┃ ┃ .data:0x00001db0 e817020000 call func_00001fcc
- ┃┃ ┃ .data:0x00001db5
- ┃┃ ┃ .data:0x00001db5 loc_00001db5:
- ┃┃ ┗▶ .data:0x00001db5 c3 ret
- ┃┃ .data:0x00001db6 8bc0 mov eax,eax
- ┃┃ .data:0x00001db8 ; =============== F U N C T I O N ====================================
- ┃┃ .data:0x00001db8 ; CODE XREF: 0x00001fc1
- ┃┃ .data:0x00001db8
- ┃┃ .data:0x00001db8 func_00001db8:
- ┃┃ .data:0x00001db8 85c0 test eax,eax
- ┃┃ ┏ .data:0x00001dba 7407 je loc_00001dc3
- ┃┃ ┃ .data:0x00001dbc 8b08 mov ecx,DWORD PTR [eax]
- ┃┃ ┃ .data:0x00001dbe b201 mov dl,0x1
- ┃┃ ┃ .data:0x00001dc0 ff51fc call DWORD PTR [ecx-0x4]
- ┃┃ ┃ .data:0x00001dc3
- ┃┃ ┃ .data:0x00001dc3 loc_00001dc3:
- ┃┃ ┗▶ .data:0x00001dc3 c3 ret
- ┃┃ .data:0x00001dc4 57 push edi
- ┃┃ .data:0x00001dc5 89d7 mov edi,edx
- ┃┃ .data:0x00001dc7 ab stos DWORD PTR es:[edi],eax
- ┃┃ .data:0x00001dc8 8b48e8 mov ecx,DWORD PTR [eax-0x18]
- ┃┃ .data:0x00001dcb 31c0 xor eax,eax
- ┃┃ .data:0x00001dcd 51 push ecx
- ┃┃ .data:0x00001dce c1e902 shr ecx,0x2
- ┃┃ .data:0x00001dd1 49 dec ecx
- ┃┃ .data:0x00001dd2 f3ab rep stos DWORD PTR es:[edi],eax
- ┃┃ .data:0x00001dd4 59 pop ecx
- ┃┃ .data:0x00001dd5 83e103 and ecx,0x3
- ┃┃ .data:0x00001dd8 f3aa rep stos BYTE PTR es:[edi],al
- ┃┃ .data:0x00001dda 89d0 mov eax,edx
- ┃┃ .data:0x00001ddc 5f pop edi
- ┃┃ .data:0x00001ddd c3 ret
- ┃┃ .data:0x00001dde 8bc0 mov eax,eax
- ┃┃ .data:0x00001de0 53 push ebx
- ┃┃ .data:0x00001de1 56 push esi
- ┃┃ .data:0x00001de2 89c3 mov ebx,eax
- ┃┃ .data:0x00001de4 8b30 mov esi,DWORD PTR [eax]
- ┃┃ .data:0x00001de6
- ┃┃ .data:0x00001de6 loc_00001de6:
- ┃┃ ┏━▶ .data:0x00001de6 8b56d0 mov edx,DWORD PTR [esi-0x30]
- ┃┃ ┃ .data:0x00001de9 8b76ec mov esi,DWORD PTR [esi-0x14]
- ┃┃ ┃ .data:0x00001dec 85d2 test edx,edx
- ┃┃ ┃┏ .data:0x00001dee 7407 je loc_00001df7
- ┃┃ ┃┃ .data:0x00001df0 e81f0d0000 call func_00002b14
- ┃┃ ┃┃ .data:0x00001df5 89d8 mov eax,ebx
- ┃┃ ┃┃ .data:0x00001df7
- ┃┃ ┃┃ .data:0x00001df7 loc_00001df7:
- ┃┃ ┃┗▶ .data:0x00001df7 85f6 test esi,esi
- ┃┃ ┗━ .data:0x00001df9 75eb jne loc_00001de6
- ┃┃ .data:0x00001dfb 5e pop esi
- ┃┃ .data:0x00001dfc 5b pop ebx
- ┃┃ .data:0x00001dfd c3 ret
- ┃┃ .data:0x00001dfe 8bc0 mov eax,eax
- ┃┃ .data:0x00001e00 85c0 test eax,eax
- ┃┃ ┏━━ .data:0x00001e02 7410 je loc_00001e14
- ┃┃ ┃ .data:0x00001e04 8b00 mov eax,DWORD PTR [eax]
- ┃┃ ┃ .data:0x00001e06
- ┃┃ ┃ .data:0x00001e06 loc_00001e06:
- ┃┃ ┃ ┏▶ .data:0x00001e06 39d0 cmp eax,edx
- ┃┃ ┃┏╋ .data:0x00001e08 7408 je loc_00001e12
- ┃┃ ┃┃┃ .data:0x00001e0a 8b40ec mov eax,DWORD PTR [eax-0x14]
- ┃┃ ┃┃┃ .data:0x00001e0d 85c0 test eax,eax
- ┃┃ ┃┃┗ .data:0x00001e0f 75f5 jne loc_00001e06
- ┃┃ ┃┃ .data:0x00001e11 c3 ret
- ┃┃ ┃┃ .data:0x00001e12
- ┃┃ ┃┃ .data:0x00001e12 loc_00001e12:
- ┃┃ ┃┗━▶ .data:0x00001e12 b001 mov al,0x1
- ┃┃ ┃ .data:0x00001e14
- ┃┃ ┃ .data:0x00001e14 loc_00001e14:
- ┃┃ ┗━━▶ .data:0x00001e14 c3 ret
- ┃┃ .data:0x00001e15 8d4000 lea eax,[eax+0x0]
- ┃┃ .data:0x00001e18 85c0 test eax,eax
- ┃┃ ┏━ .data:0x00001e1a 7414 je loc_00001e30
- ┃┃ ┃ .data:0x00001e1c 8b08 mov ecx,DWORD PTR [eax]
- ┃┃ ┃ .data:0x00001e1e
- ┃┃ ┃ .data:0x00001e1e loc_00001e1e:
- ┃┃ ┃┏▶ .data:0x00001e1e 39d1 cmp ecx,edx
- ┃┃ ┣╋ .data:0x00001e20 740e je loc_00001e30
- ┃┃ ┃┃ .data:0x00001e22 8b49ec mov ecx,DWORD PTR [ecx-0x14]
- ┃┃ ┃┃ .data:0x00001e25 85c9 test ecx,ecx
- ┃┃ ┃┗ .data:0x00001e27 75f5 jne loc_00001e1e
- ┃┃ ┃ .data:0x00001e29 b00a mov al,0xa
- ┃┗━━━━━━━━━╋━ .data:0x00001e2b e948fcffff jmp loc_00001a78
- ┃ ┃ .data:0x00001e30
- ┃ ┃ .data:0x00001e30 loc_00001e30:
- ┃ ┗━▶ .data:0x00001e30 c3 ret
- ┃ .data:0x00001e31 8d4000 lea eax,[eax+0x0]
- ┃ .data:0x00001e34 ; =============== F U N C T I O N ====================================
- ┃ .data:0x00001e34 ; CODE XREF: 0x00001ea3
- ┃ .data:0x00001e34 ; CODE XREF: 0x00001e64
- ┃ .data:0x00001e34
- ┃ .data:0x00001e34 func_00001e34:
- ┃ .data:0x00001e34 57 push edi
- ┃ .data:0x00001e35 93 xchg ebx,eax
- ┃ .data:0x00001e36
- ┃ .data:0x00001e36 loc_00001e36:
- ┃ ┏━━▶ .data:0x00001e36 8b7be0 mov edi,DWORD PTR [ebx-0x20]
- ┃ ┃ .data:0x00001e39 85ff test edi,edi
- ┃ ┃┏━ .data:0x00001e3b 740d je loc_00001e4a
- ┃ ┃┃ .data:0x00001e3d 0fb70f movzx ecx,WORD PTR [edi]
- ┃ ┃┃ .data:0x00001e40 51 push ecx
- ┃ ┃┃ .data:0x00001e41 83c702 add edi,0x2
- ┃ ┃┃ .data:0x00001e44 66f2af repnz scas ax,WORD PTR es:[edi]
- ┃ ┃┃┏ .data:0x00001e47 740a je loc_00001e53
- ┃ ┃┃┃ .data:0x00001e49 59 pop ecx
- ┃ ┃┃┃ .data:0x00001e4a
- ┃ ┃┃┃ .data:0x00001e4a loc_00001e4a:
- ┃ ┃┗╋▶ .data:0x00001e4a 8b5bec mov ebx,DWORD PTR [ebx-0x14]
- ┃ ┃ ┃ .data:0x00001e4d 85db test ebx,ebx
- ┃ ┗━╋ .data:0x00001e4f 75e5 jne loc_00001e36
- ┃ ┃ .data:0x00001e51 5f pop edi
- ┃ ┃ .data:0x00001e52 c3 ret
- ┃ ┃ .data:0x00001e53
- ┃ ┃ .data:0x00001e53 loc_00001e53:
- ┃ ┗▶ .data:0x00001e53 58 pop eax
- ┃ .data:0x00001e54 01c0 add eax,eax
- ┃ .data:0x00001e56 29c8 sub eax,ecx
- ┃ .data:0x00001e58 8b5c47fc mov ebx,DWORD PTR [edi+eax*2-0x4]
- ┃ .data:0x00001e5c 5f pop edi
- ┃ .data:0x00001e5d c3 ret
- ┃ .data:0x00001e5e 8bc0 mov eax,eax
- ┃ .data:0x00001e60 50 push eax
- ┃ .data:0x00001e61 51 push ecx
- ┃ .data:0x00001e62 8b00 mov eax,DWORD PTR [eax]
- ┃ .data:0x00001e64 e8cbffffff call func_00001e34
- ┃ .data:0x00001e69 59 pop ecx
- ┃ .data:0x00001e6a 58 pop eax
- ┃ ┏ .data:0x00001e6b 7402 je loc_00001e6f
- ┃ ┃ .data:0x00001e6d ffe3 jmp ebx
- ┃ ┃ .data:0x00001e6f
- ┃ ┃ .data:0x00001e6f loc_00001e6f:
- ┃ ┗▶ .data:0x00001e6f 59 pop ecx
- ┗━━━━━━━━━━━━ .data:0x00001e70 e9b3fcffff jmp loc_00001b28
- .data:0x00001e75 c3 ret
- .data:0x00001e76 8bc0 mov eax,eax
- .data:0x00001e78
- .data:0x00001e78 loc_00001e78:
- ┏▶ .data:0x00001e78 39d0 cmp eax,edx
- ┏╋ .data:0x00001e7a 7408 je loc_00001e84
- ┃┃ .data:0x00001e7c 8b40ec mov eax,DWORD PTR [eax-0x14]
- ┃┃ .data:0x00001e7f 85c0 test eax,eax
- ┃┗ .data:0x00001e81 75f5 jne loc_00001e78
- ┃ .data:0x00001e83 c3 ret
- ┃ .data:0x00001e84
- ┃ .data:0x00001e84 loc_00001e84:
- ┗━▶ .data:0x00001e84 b001 mov al,0x1
- .data:0x00001e86 c3 ret
- .data:0x00001e87 90 nop
- .data:0x00001e88 8b40d4 mov eax,DWORD PTR [eax-0x2c]
- .data:0x00001e8b c3 ret
- .data:0x00001e8c c3 ret
- .data:0x00001e8d 8d4000 lea eax,[eax+0x0]
- .data:0x00001e90 53 push ebx
- .data:0x00001e91 668b1a mov bx,WORD PTR [edx]
- .data:0x00001e94 6609db or bx,bx
- ┏ .data:0x00001e97 7417 je loc_00001eb0
- ┃ .data:0x00001e99 6681fb00c0 cmp bx,0xc000
- ┣ .data:0x00001e9e 7310 jae loc_00001eb0
- ┃ .data:0x00001ea0 50 push eax
- ┃ .data:0x00001ea1 8b00 mov eax,DWORD PTR [eax]
- ┃ .data:0x00001ea3 e88cffffff call func_00001e34
- ┃ .data:0x00001ea8 58 pop eax
- ┣ .data:0x00001ea9 7405 je loc_00001eb0
- ┃ .data:0x00001eab 89d9 mov ecx,ebx
- ┃ .data:0x00001ead 5b pop ebx
- ┃ .data:0x00001eae ffe1 jmp ecx
- ┃ .data:0x00001eb0
- ┃ .data:0x00001eb0 loc_00001eb0:
- ┗▶ .data:0x00001eb0 5b pop ebx
- .data:0x00001eb1 8b08 mov ecx,DWORD PTR [eax]
- .data:0x00001eb3 ff61f0 jmp DWORD PTR [ecx-0x10]
- .data:0x00001eb6 c3 ret
- .data:0x00001eb7 90 nop
- .data:0x00001eb8 53 push ebx
- .data:0x00001eb9 56 push esi
- .data:0x00001eba 57 push edi
- .data:0x00001ebb 31c9 xor ecx,ecx
- .data:0x00001ebd 31ff xor edi,edi
- .data:0x00001ebf 8a1a mov bl,BYTE PTR [edx]
- .data:0x00001ec1
- .data:0x00001ec1 loc_00001ec1:
- ┏━━━━▶ .data:0x00001ec1 8b70dc mov esi,DWORD PTR [eax-0x24]
- ┃ .data:0x00001ec4 85f6 test esi,esi
- ┃ ┏━ .data:0x00001ec6 7415 je loc_00001edd
- ┃ ┃ .data:0x00001ec8 668b3e mov di,WORD PTR [esi]
- ┃ ┃ .data:0x00001ecb 83c602 add esi,0x2
- ┃ ┃ .data:0x00001ece
- ┃ ┃ .data:0x00001ece loc_00001ece:
- ┃ ┃┏▶ .data:0x00001ece 8a4e06 mov cl,BYTE PTR [esi+0x6]
- ┃ ┃┃ .data:0x00001ed1 38d9 cmp cl,bl
- ┃┏━╋╋ .data:0x00001ed3 7415 je loc_00001eea
- ┃┃ ┃┃ .data:0x00001ed5
- ┃┃ ┃┃ .data:0x00001ed5 loc_00001ed5:
- ┃┃┏╋╋▶ .data:0x00001ed5 668b0e mov cx,WORD PTR [esi]
- ┃┃┃┃┃ .data:0x00001ed8 01ce add esi,ecx
- ┃┃┃┃┃ .data:0x00001eda 4f dec edi
- ┃┃┃┃┗ .data:0x00001edb 75f1 jne loc_00001ece
- ┃┃┃┃ .data:0x00001edd
- ┃┃┃┃ .data:0x00001edd loc_00001edd:
- ┃┃┃┗━▶ .data:0x00001edd 8b40ec mov eax,DWORD PTR [eax-0x14]
- ┃┃┃ .data:0x00001ee0 85c0 test eax,eax
- ┗╋╋━━ .data:0x00001ee2 75dd jne loc_00001ec1
- ┏╋╋━━ .data:0x00001ee4 eb18 jmp loc_00001efe
- ┃┃┃ .data:0x00001ee6
- ┃┃┃ .data:0x00001ee6 loc_00001ee6:
- ┃┃┃┏━▶ .data:0x00001ee6 8a1a mov bl,BYTE PTR [edx]
- ┃┃┗╋━ .data:0x00001ee8 ebeb jmp loc_00001ed5
- ┃┃ ┃ .data:0x00001eea
- ┃┃ ┃ .data:0x00001eea loc_00001eea:
- ┃┗━╋━▶ .data:0x00001eea b500 mov ch,0x0
- ┃ ┃ .data:0x00001eec
- ┃ ┃ .data:0x00001eec loc_00001eec:
- ┃ ┃┏▶ .data:0x00001eec 8a5c0e06 mov bl,BYTE PTR [esi+ecx*1+0x6]
- ┃ ┃┃ .data:0x00001ef0 321c0a xor bl,BYTE PTR [edx+ecx*1]
- ┃ ┃┃ .data:0x00001ef3 80e3df and bl,0xdf
- ┃ ┗╋ .data:0x00001ef6 75ee jne loc_00001ee6
- ┃ ┃ .data:0x00001ef8 49 dec ecx
- ┃ ┗ .data:0x00001ef9 75f1 jne loc_00001eec
- ┃ .data:0x00001efb 8b4602 mov eax,DWORD PTR [esi+0x2]
- ┃ .data:0x00001efe
- ┃ .data:0x00001efe loc_00001efe:
- ┗━━━━▶ .data:0x00001efe 5f pop edi
- .data:0x00001eff 5e pop esi
- .data:0x00001f00 5b pop ebx
- .data:0x00001f01 c3 ret
- .data:0x00001f02 8bc0 mov eax,eax
- .data:0x00001f04 53 push ebx
- .data:0x00001f05 56 push esi
- .data:0x00001f06 57 push edi
- .data:0x00001f07 89cf mov edi,ecx
- .data:0x00001f09 31db xor ebx,ebx
- .data:0x00001f0b 31c9 xor ecx,ecx
- .data:0x00001f0d
- .data:0x00001f0d loc_00001f0d:
- ┏━━━▶ .data:0x00001f0d 8b70dc mov esi,DWORD PTR [eax-0x24]
- ┃ .data:0x00001f10 85f6 test esi,esi
- ┃ ┏━ .data:0x00001f12 7413 je loc_00001f27
- ┃ ┃ .data:0x00001f14 668b0e mov cx,WORD PTR [esi]
- ┃ ┃ .data:0x00001f17 83c602 add esi,0x2
- ┃ ┃ .data:0x00001f1a
- ┃ ┃ .data:0x00001f1a loc_00001f1a:
- ┃ ┃┏▶ .data:0x00001f1a 3b5602 cmp edx,DWORD PTR [esi+0x2]
- ┃┏╋╋ .data:0x00001f1d 7413 je loc_00001f32
- ┃┃┃┃ .data:0x00001f1f 668b1e mov bx,WORD PTR [esi]
- ┃┃┃┃ .data:0x00001f22 01de add esi,ebx
- ┃┃┃┃ .data:0x00001f24 49 dec ecx
- ┃┃┃┗ .data:0x00001f25 75f3 jne loc_00001f1a
- ┃┃┃ .data:0x00001f27
- ┃┃┃ .data:0x00001f27 loc_00001f27:
- ┃┃┗━▶ .data:0x00001f27 8b40ec mov eax,DWORD PTR [eax-0x14]
- ┃┃ .data:0x00001f2a 85c0 test eax,eax
- ┗╋━━ .data:0x00001f2c 75df jne loc_00001f0d
- ┃ .data:0x00001f2e 8807 mov BYTE PTR [edi],al
- ┃ ┏ .data:0x00001f30 eb0a jmp loc_00001f3c
- ┃ ┃ .data:0x00001f32
- ┃ ┃ .data:0x00001f32 loc_00001f32:
- ┗━╋▶ .data:0x00001f32 83c606 add esi,0x6
- ┃ .data:0x00001f35 31c9 xor ecx,ecx
- ┃ .data:0x00001f37 8a0e mov cl,BYTE PTR [esi]
- ┃ .data:0x00001f39 41 inc ecx
- ┃ .data:0x00001f3a f3a4 rep movs BYTE PTR es:[edi],BYTE PTR ds:[esi]
- ┃ .data:0x00001f3c
- ┃ .data:0x00001f3c loc_00001f3c:
- ┗▶ .data:0x00001f3c 5f pop edi
- .data:0x00001f3d 5e pop esi
- .data:0x00001f3e 5b pop ebx
- .data:0x00001f3f c3 ret
- .data:0x00001f40 53 push ebx
- .data:0x00001f41 56 push esi
- .data:0x00001f42 57 push edi
- .data:0x00001f43 31c9 xor ecx,ecx
- .data:0x00001f45 31ff xor edi,edi
- .data:0x00001f47 8a1a mov bl,BYTE PTR [edx]
- .data:0x00001f49 50 push eax
- .data:0x00001f4a 8b00 mov eax,DWORD PTR [eax]
- .data:0x00001f4c
- .data:0x00001f4c loc_00001f4c:
- ┏━━━━▶ .data:0x00001f4c 8b70d8 mov esi,DWORD PTR [eax-0x28]
- ┃ .data:0x00001f4f 85f6 test esi,esi
- ┃ ┏━ .data:0x00001f51 7414 je loc_00001f67
- ┃ ┃ .data:0x00001f53 668b3e mov di,WORD PTR [esi]
- ┃ ┃ .data:0x00001f56 83c606 add esi,0x6
- ┃ ┃ .data:0x00001f59
- ┃ ┃ .data:0x00001f59 loc_00001f59:
- ┃ ┃┏▶ .data:0x00001f59 8a4e06 mov cl,BYTE PTR [esi+0x6]
- ┃ ┃┃ .data:0x00001f5c 38d9 cmp cl,bl
- ┃┏━╋╋ .data:0x00001f5e 7418 je loc_00001f78
- ┃┃ ┃┃ .data:0x00001f60
- ┃┃ ┃┃ .data:0x00001f60 loc_00001f60:
- ┃┃┏╋╋▶ .data:0x00001f60 8d740e07 lea esi,[esi+ecx*1+0x7]
- ┃┃┃┃┃ .data:0x00001f64 4f dec edi
- ┃┃┃┃┗ .data:0x00001f65 75f2 jne loc_00001f59
- ┃┃┃┃ .data:0x00001f67
- ┃┃┃┃ .data:0x00001f67 loc_00001f67:
- ┃┃┃┗━▶ .data:0x00001f67 8b40ec mov eax,DWORD PTR [eax-0x14]
- ┃┃┃ .data:0x00001f6a 85c0 test eax,eax
- ┗╋╋━━ .data:0x00001f6c 75de jne loc_00001f4c
- ┃┃ .data:0x00001f6e 5a pop edx
- ┏╋╋━━ .data:0x00001f6f eb1b jmp loc_00001f8c
- ┃┃┃ .data:0x00001f71
- ┃┃┃ .data:0x00001f71 loc_00001f71:
- ┃┃┃┏━▶ .data:0x00001f71 8a1a mov bl,BYTE PTR [edx]
- ┃┃┃┃ .data:0x00001f73 8a4e06 mov cl,BYTE PTR [esi+0x6]
- ┃┃┗╋━ .data:0x00001f76 ebe8 jmp loc_00001f60
- ┃┃ ┃ .data:0x00001f78
- ┃┃ ┃ .data:0x00001f78 loc_00001f78:
- ┃┗━╋┳▶ .data:0x00001f78 8a5c0e06 mov bl,BYTE PTR [esi+ecx*1+0x6]
- ┃ ┃┃ .data:0x00001f7c 321c0a xor bl,BYTE PTR [edx+ecx*1]
- ┃ ┃┃ .data:0x00001f7f 80e3df and bl,0xdf
- ┃ ┗╋ .data:0x00001f82 75ed jne loc_00001f71
- ┃ ┃ .data:0x00001f84 49 dec ecx
- ┃ ┗ .data:0x00001f85 75f1 jne loc_00001f78
- ┃ .data:0x00001f87 8b06 mov eax,DWORD PTR [esi]
- ┃ .data:0x00001f89 5a pop edx
- ┃ .data:0x00001f8a 01d0 add eax,edx
- ┃ .data:0x00001f8c
- ┃ .data:0x00001f8c loc_00001f8c:
- ┗━━━━▶ .data:0x00001f8c 5f pop edi
- .data:0x00001f8d 5e pop esi
- .data:0x00001f8e 5b pop ebx
- .data:0x00001f8f c3 ret
- .data:0x00001f90 ; =============== F U N C T I O N ====================================
- .data:0x00001f90 ; CODE XREF: 0x00001d97
- .data:0x00001f90
- .data:0x00001f90 func_00001f90:
- .data:0x00001f90 52 push edx
- .data:0x00001f91 51 push ecx
- .data:0x00001f92 53 push ebx
- .data:0x00001f93 ff50f4 call DWORD PTR [eax-0xc]
- .data:0x00001f96 31d2 xor edx,edx
- .data:0x00001f98 8d4c2410 lea ecx,[esp+0x10]
- .data:0x00001f9c 648b1a mov ebx,DWORD PTR fs:[edx]
- .data:0x00001f9f 8919 mov DWORD PTR [ecx],ebx
- .data:0x00001fa1 896908 mov DWORD PTR [ecx+0x8],ebp
- .data:0x00001fa4 c74104b52b4000 mov DWORD PTR [ecx+0x4],0x402bb5
- .data:0x00001fab 89410c mov DWORD PTR [ecx+0xc],eax
- .data:0x00001fae 64890a mov DWORD PTR fs:[edx],ecx
- .data:0x00001fb1 5b pop ebx
- .data:0x00001fb2 59 pop ecx
- .data:0x00001fb3 5a pop edx
- .data:0x00001fb4 c3 ret
- .data:0x00001fb5 e916010000 jmp 0x000020d0
- .data:0x00001fba 8b44242c mov eax,DWORD PTR [esp+0x2c]
- .data:0x00001fbe 8b400c mov eax,DWORD PTR [eax+0xc]
- .data:0x00001fc1 e8f2fdffff call func_00001db8
- .data:0x00001fc6 e8cd030000 call func_00002398
- .data:0x00001fcb c3 ret
- .data:0x00001fcc ; =============== F U N C T I O N ====================================
- .data:0x00001fcc ; CODE XREF: 0x00001db0
- .data:0x00001fcc
- .data:0x00001fcc func_00001fcc:
- .data:0x00001fcc 8b10 mov edx,DWORD PTR [eax]
- .data:0x00001fce ff52f8 call DWORD PTR [edx-0x8]
- .data:0x00001fd1 c3 ret
- .data:0x00001fd2 8bc0 mov eax,eax
- .data:0x00001fd4 803d0410430001 cmp BYTE PTR ds:0x431004,0x1
- ┏ .data:0x00001fdb 7610 jbe loc_00001fed
- ┃ .data:0x00001fdd 6a00 push 0x0
- ┃ .data:0x00001fdf 6a00 push 0x0
- ┃ .data:0x00001fe1 6a00 push 0x0
- ┃ .data:0x00001fe3 68cffaed0e push 0xeedfacf
- ┃ .data:0x00001fe8 e85fe6ffff call func_0000064c
- ┃ .data:0x00001fed
- ┃ .data:0x00001fed loc_00001fed:
- ┗▶ .data:0x00001fed c3 ret
- .data:0x00001fee 8bc0 mov eax,eax
- .data:0x00001ff0 803d0410430000 cmp BYTE PTR ds:0x431004,0x0
- .data:0x00001ff7 7416 je 0x0000200f
- .data:0x00001ff9 50 push eax
- .data:0x00001ffa 50 push eax
- .data:0x00001ffb 52 push edx
- .data:0x00001ffc 54 push esp
- .data:0x00001ffd 6a02 push 0x2
- .data:0x00001fff 6a00 push 0x0
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement