Function at 0x1002916e
Capabilities:
Allocate thread local storage

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007fed5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x158
push esi
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x10029236
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0x38], 0
jmp 0x100291b3
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x100291c9
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xfc], 0
jmp 0x100291ac
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xfc], 0
jmp 0x100291f7
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfc]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xfc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xfc], 0x18
jle 0x10029231
mov dword [ebp - 0xd0], 0
mov byte [ebp - 0x18], 0
movzx eax, byte [ebp - 0x18]
test eax, eax
je 0x10029223
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xd4], eax
jmp 0x100291dc
jmp 0x10029b9e
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x3c]
push eax
push 0x747e
push 0xf47
push 0x7587
push 0
call fcn.1002cf7d
add esp, 0x18
mov dword [ebp - 0x14c], 0x198a
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x140], 0x5c6f1bf5
mov dword [ebp - 0x150], 0xceafd94
mov dword [ebp - 0x148], 0x6dd8d130
push 2
lea ecx, [ebp - 0x164]
call fcn.10016d2b
and dword [ebp - 4], 0
mov dword [ebp - 0xcc], 0x815cbcef
mov dword [ebp - 0x34], 0
jmp 0x100292c9
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x100292e2
push dword [ebp - 0x34]
lea ecx, [ebp - 0x164]
call fcn.10016dc9
or dword [eax], 0xffffffff
jmp 0x100292c2
lea eax, [ebp - 0xcc]
push eax
push 0
call fcn.1002e00c
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x164]
call fcn.10016dad
mov eax, dword [ebp - 0x2c]
cmp dword [eax], 0
jne 0x10029b9e
mov dword [ebp - 0xf0], 8
push 3
lea ecx, [ebp - 0x120]
call fcn.10016d2b
mov dword [ebp - 4], 1
mov dword [ebp - 0x30], 0
jmp 0x1002933b
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x10029357
push dword [ebp - 0x30]
lea ecx, [ebp - 0x120]
call fcn.10016dc9
mov dword [eax], 0xcecb4571
jmp 0x10029334
mov byte [ebp - 0x17], 0
movzx eax, byte [ebp - 0x17]
test eax, eax
je 0x1002936b
push 0
call fcn.1002d3e6
pop ecx
mov esi, dword [ebp - 0xf0]
push 2
lea ecx, [ebp - 0x120]
call fcn.10016dc9
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x120]
call fcn.10016dad
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x24]
and eax, 0x40
je 0x100295ec
push 2
lea ecx, [ebp - 0xec]
call fcn.10016d2b
mov dword [ebp - 4], 2
mov dword [ebp - 0x24], 1
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0xec]
push eax
push 1
call fcn.10028e18
add esp, 0xc
mov dword [ebp - 0x24], 1
jmp 0x100293e1
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x100295c8
mov dword [ebp - 0x20], 8
mov byte [ebp - 0x16], 0
movzx eax, byte [ebp - 0x16]
test eax, eax
je 0x10029417
push 0x2387
push 0xf29
push 0x2c33
push 0
call fcn.10030524
add esp, 0x10
mov byte [ebp - 0x14], 0
movzx eax, byte [ebp - 0x14]
test eax, eax
je 0x1002943a
push 0xce7
push 0x26cd
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [ebp - 0x20], 0
jmp 0x1002944a
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jg 0x100295c3
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x74], 0x6c849023
mov dword [ebp - 0xd8], 0x2305aba9
mov dword [ebp - 0x1c], 1
jmp 0x1002947c
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x1002959e
mov dword [ebp - 0xc8], 0
mov byte [ebp - 0x11], 0
push 0
lea eax, [ebp - 0x11]
push eax
push 0x41e7
call fcn.1002fc24
add esp, 0xc
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xec]
call fcn.10016dc9
cmp dword [ebp - 0x1c], 0
je 0x100294cd
cmp dword [ebp - 0x20], 0
je 0x100294cd
mov dword [ebp - 0xbc], 1
jmp 0x100294d4
and dword [ebp - 0xbc], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xec]
call fcn.10016dc9
mov eax, dword [eax]
add eax, 0x184e5a94
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0xbc]
jl 0x10029503
mov dword [ebp - 0xc4], 1
jmp 0x1002950a
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0xc4], eax
jge 0x10029521
mov dword [ebp - 0x70], 1
jmp 0x10029525
and dword [ebp - 0x70], 0
push 1
lea ecx, [ebp - 0xec]
call fcn.10016dc9
mov ecx, dword [ebp - 0x70]
cmp ecx, dword [eax]
jne 0x10029545
mov dword [ebp - 0xdc], 1
jmp 0x1002954c
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x13c], eax
mov eax, 0xd1d2
imul eax, eax, 3
test eax, eax
jne 0x10029565
cmp dword [ebp - 0x24], 0
push 0xfffffffffffffffb
pop eax
imul eax, eax, 0xffffffff
cmp eax, 0xbbbc
jl 0x1002957e
mov dword [ebp - 0xb4], 1
jmp 0x10029585
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0xb4]
add eax, 0x13bc
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0xd8], eax
jmp 0x10029475
mov byte [ebp - 0x12], 0
movzx eax, byte [ebp - 0x12]
test eax, eax
je 0x100295be
push 0x1c25
push 0
push 0x41e7
call fcn.10028f53
add esp, 0xc
jmp 0x10029443
jmp 0x100293da
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xec]
call fcn.10016dad
mov eax, dword [ebp - 0xac]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [eax + 0x20]
mov dword [ecx], eax
jmp 0x10029b9e
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x24]
and eax, 0x80
je 0x10029b9e
push 2
lea ecx, [ebp - 0x58]
call fcn.10016d2b
mov dword [ebp - 4], 3
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x58]
push eax
push 0
push 0x7f77
call fcn.10029c8e
add esp, 0x10
mov dword [ebp - 0x28], 0
jmp 0x10029635
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x10029648
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x10], 0x9beb0647
jmp 0x1002962e
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x10], 1
jmp 0x1002966d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x10], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10], 0
jl 0x10029b69
push 3
lea ecx, [ebp - 0x4c]
call fcn.10016d2b
mov byte [ebp - 4], 4
mov dword [ebp - 0x84], 0xfffffff6
push 1
lea ecx, [ebp - 0x108]
call fcn.10016d2b
mov byte [ebp - 4], 5
push 0
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0x4c]
push eax
push 0x59c3
push 0x6a2c
push 0x2aea
call fcn.1002bcd7
add esp, 0x18
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0xe0]
push eax
push 0
call fcn.1002df97
add esp, 0xc
push 1
lea ecx, [ebp - 0x4c]
call fcn.10016dc9
mov dword [eax], 1
jmp 0x10029716
push 1
lea ecx, [ebp - 0x4c]
call fcn.10016dc9
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xb0]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x4c]
call fcn.10016dc9
cmp dword [eax], 0
jl 0x10029b29
push 3
lea ecx, [ebp - 0x64]
call fcn.10016d2b
mov byte [ebp - 4], 6
push 0
push 0x793a
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.10029bad
add esp, 0x10
push 0
lea ecx, [ebp - 0x64]
call fcn.10016dc9
mov dword [eax], 1
jmp 0x1002977b
push 0
lea ecx, [ebp - 0x64]
call fcn.10016dc9
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x78]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x64]
call fcn.10016dc9
cmp dword [eax], 0
jl 0x10029afb
mov dword [ebp - 0xb8], 0
push 2
lea ecx, [ebp - 0x12c]
call fcn.10016d2b
mov byte [ebp - 4], 7
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x12c]
push eax
push 1
call fcn.10028e84
add esp, 0xc
push 0
lea ecx, [ebp - 0x64]
call fcn.10016dc9
cmp dword [eax], 0xf2c9
jl 0x100297df
mov dword [ebp - 0xa0], 1
jmp 0x100297e6
and dword [ebp - 0xa0], 0
cmp dword [ebp - 0xa0], 0xfdda
je 0x10029805
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10], 0
jne 0x10029805
and dword [ebp - 0x80], 0
jmp 0x1002980c
mov dword [ebp - 0x80], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
cmp eax, dword [ebp - 0x80]
je 0x10029836
push 2
lea ecx, [ebp - 0x4c]
call fcn.10016dc9
cmp dword [eax], 0
je 0x10029836
mov dword [ebp - 0xc0], 1
jmp 0x1002983d
and dword [ebp - 0xc0], 0
push 1
lea ecx, [ebp - 0x4c]
call fcn.10016dc9
push dword [eax]
lea ecx, [ebp - 0x58]
call fcn.10016dc9
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc0]
jge 0x10029867
mov dword [ebp - 0x88], 1
jmp 0x1002986e
and dword [ebp - 0x88], 0
push 1
lea ecx, [ebp - 0x4c]
call fcn.10016dc9
mov ecx, dword [ebp - 0x88]
imul ecx, dword [eax]
cmp ecx, 0xfffffff6
jbe 0x10029892
mov dword [ebp - 0xa8], 1
jmp 0x10029899
and dword [ebp - 0xa8], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x10]
lea ecx, [ebp - 0x58]
call fcn.10016dc9
mov ecx, dword [ebp - 0xa8]
mov dword [eax], ecx
mov eax, 0x1f38
cmp eax, 0xaae0
jg 0x100298cb
mov dword [ebp - 0x90], 1
jmp 0x100298d2
and dword [ebp - 0x90], 0
push 0
lea ecx, [ebp - 0x64]
call fcn.10016dc9
mov ecx, dword [ebp - 0x90]
add ecx, dword [eax]
imul ecx, dword [ebp - 0xb8]
test ecx, ecx
je 0x10029914
push 1
lea ecx, [ebp - 0x4c]
call fcn.10016dc9
cmp dword [eax], 0
je 0x10029914
mov byte [ebp - 0x13], 0
push 1
lea eax, [ebp - 0x13]
push eax
call fcn.10028ef9
pop ecx
pop ecx
jmp 0x10029ae7
push 1
lea ecx, [ebp - 0x114]
call fcn.10016d2b
mov byte [ebp - 4], 8
lea eax, [ebp - 0x154]
push eax
push 1
lea eax, [ebp - 0x114]
push eax
call fcn.10028f53
add esp, 0xc
push 1
lea ecx, [ebp - 0x4c]
call fcn.10016dc9
push dword [eax]
lea ecx, [ebp - 0x58]
call fcn.10016dc9
push 0
lea ecx, [ebp - 0x114]
call fcn.10016dc9
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x10]
cmp dword [eax], ecx
jl 0x10029978
mov dword [ebp - 0x98], 1
jmp 0x1002997f
and dword [ebp - 0x98], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x138], eax
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x10]
lea ecx, [ebp - 0x58]
call fcn.10016dc9
imul eax, dword [eax], 0xffffffff
neg eax
cmp dword [ebp - 0x98], eax
je 0x100299b3
mov dword [ebp - 0x6c], 1
jmp 0x100299b7
and dword [ebp - 0x6c], 0
cmp dword [ebp - 0x6c], 1
jne 0x100299c6
mov dword [ebp - 0x68], 1
jmp 0x100299ca
and dword [ebp - 0x68], 0
cmp dword [ebp - 0x68], 0x23d3
jle 0x100299dc
mov dword [ebp - 0x7c], 1
jmp 0x100299e0
and dword [ebp - 0x7c], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x84], eax
mov esi, dword [ebp - 0x84]
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x10]
lea ecx, [ebp - 0x58]
call fcn.10016dc9
sub esi, dword [eax]
cmp esi, 0xbc01
jle 0x10029a17
mov dword [ebp - 0x8c], 1
jmp 0x10029a1e
and dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0x8c]
inc eax
cmp eax, 0x1f20
jne 0x10029a38
mov dword [ebp - 0x94], 1
jmp 0x10029a3f
and dword [ebp - 0x94], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x10]
lea ecx, [ebp - 0x58]
call fcn.10016dc9
mov ecx, dword [ebp - 0x94]
cmp ecx, dword [eax]
jg 0x10029a64
mov dword [ebp - 0x40], 1
jmp 0x10029a68
and dword [ebp - 0x40], 0
push 0
lea ecx, [ebp - 0x108]
call fcn.10016dc9
mov ecx, dword [ebp - 0x40]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
cmp dword [ebp - 0x40], eax
jne 0x10029a95
mov dword [ebp - 0x9c], 1
jmp 0x10029a9c
and dword [ebp - 0x9c], 0
push 0
lea ecx, [ebp - 0x64]
call fcn.10016dc9
mov ecx, dword [ebp - 0x9c]
cmp ecx, dword [eax]
jne 0x10029abc
mov dword [ebp - 0xa4], 1
jmp 0x10029ac3
and dword [ebp - 0xa4], 0
push 0
lea ecx, [ebp - 0x12c]
call fcn.10016dc9
mov ecx, dword [ebp - 0xa4]
mov dword [eax], ecx
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x114]
call fcn.10016dad
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x12c]
call fcn.10016dad
jmp 0x10029763
push 0
lea ecx, [ebp - 0x58]
call fcn.10016dc9
cmp dword [eax], 0
je 0x10029b18
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x64]
call fcn.10016dad
jmp 0x10029b29
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x64]
call fcn.10016dad
jmp 0x100296f5
mov byte [ebp - 0x15], 0
movzx eax, byte [ebp - 0x15]
test eax, eax
je 0x10029b49
push 1
push 0x3a06
push 0x9d3
call fcn.10028ff7
add esp, 0xc
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x108]
call fcn.10016dad
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4c]
call fcn.10016dad
jmp 0x10029658
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.10016dad
lea eax, [ebp - 0xac]
push eax
push 1
push 0x6008
push 0x121f
lea eax, [ebp - 0x2c]
push eax
push 0x72d6
push 0xffc
call fcn.1002905e
add esp, 0x1c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret