Function at 0x100278a0
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1002c920
mov eax, dword fs:[0]
push eax
sub esp, 0xc38
mov eax, dword [0x10030904]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, dword [ebp + 8]
mov dword [ebp - 0xc30], esi
xor eax, eax
mov dword [ebp - 0xc20], eax
mov dword [ebp - 0xc18], eax
mov dword [ebp - 0xc24], eax
mov dword [ebp - 0xc1c], eax
mov dword [ebp - 0xc3c], eax
mov dword [ebp - 0xc2c], eax
mov dword [ebp - 0xc38], eax
mov dword [ebp - 4], eax
lea ecx, [ebp - 0xc28]
call fcn.10027860
lea ecx, [ebp - 0x24]
call fcn.1001bc10
mov byte [ebp - 0xc31], 4
lea eax, [ebp - 0xc31]
push eax
lea ecx, [ebp - 0xc28]
call fcn.1002a130
mov byte [ebp - 0xc32], 0x8f
lea eax, [ebp - 0xc32]
push eax
lea ecx, [ebp - 0xc28]
call fcn.1002a0e0
lea ecx, [ebp - 0x24]
call fcn.10027890
lea ecx, [ebp - 0xc28]
call fcn.100026f0
mov dword [ebp - 4], 0xffffffff
jmp 0x100279a1
mov eax, dword [esi]
lea ecx, [eax + 4]
mov dword [ebp - 0xc24], ecx
mov ecx, dword [eax]
mov dword [ebp - 0xc44], ecx
add eax, 8
add eax, ecx
mov dword [0x10031768], eax
mov eax, dword [esi]
mov eax, dword [eax + ecx + 4]
mov dword [0x1003176c], eax
mov dword [ebp - 0xc40], 0
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xa8], 0xf
mov al, byte [0x10030743]
mov dword [ebp - 0xac], 1
mov byte [ebp - 0xbc], al
mov byte [ebp - 0xbb], 0
movups xmm0, xmmword [ebp - 0xbc]
movups xmmword [ebp - 0x554], xmm0
movq xmm0, qword [ebp - 0xac]
movq qword [ebp - 0x544], xmm0
mov dword [ebp - 0xac], 0
mov byte [ebp - 0xbc], 0
mov dword [ebp - 0x47c], 0
mov dword [ebp - 0x46c], 0
mov dword [ebp - 0x468], 0xf
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0x43c], 0
mov dword [ebp - 0x438], 0xf
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0x90], 0xf
mov al, byte [0x100300c0]
mov dword [ebp - 0x94], 1
mov byte [ebp - 0xa4], al
mov byte [ebp - 0xa3], 0
movups xmm0, xmmword [ebp - 0xa4]
movups xmmword [ebp - 0x53c], xmm0
movq xmm0, qword [ebp - 0x94]
movq qword [ebp - 0x52c], xmm0
mov dword [ebp - 0x94], 0
mov byte [ebp - 0xa4], 0
mov esi, 0x100303b8
cmp dword [0x100303cc], 0x10
cmovae esi, dword [0x100303b8]
mov dword [ebp - 0x434], 0
mov dword [ebp - 0x424], 0
mov dword [ebp - 0x420], 0xf
mov dword [ebp - 0x41c], 0
mov dword [ebp - 0x40c], 0
mov dword [ebp - 0x408], 0xf
mov dword [ebp - 0x404], 0
mov dword [ebp - 0x3f4], 0
mov dword [ebp - 0x3f0], 0xf
mov dword [ebp - 0x3ec], 0
mov dword [ebp - 0x3dc], 0
mov dword [ebp - 0x3d8], 0xf
lea eax, [ebp - 0x3ec]
push eax
movsx eax, byte [0x100302b8]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
add esp, 4
push eax
lea eax, [ebp - 0x98c]
push eax
call fcn.1001bb90
add esp, 0xc
lea ecx, [ebp - 0x404]
push ecx
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x17c]
call fcn.1001cb90
movzx eax, byte [0x100300c0]
mov byte [ebp - 0xc30], al
push dword [ebp - 0xc30]
lea ecx, [ebp - 0x17c]
call fcn.1001ca30
movups xmm0, xmmword [ebp - 0x17c]
movups xmmword [ebp - 0x524], xmm0
movq xmm0, qword [ebp - 0x16c]
movq qword [ebp - 0x514], xmm0
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 0xf
mov byte [ebp - 0x17c], 0
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x524]
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x164]
call fcn.1001cb90
movzx eax, byte [0x100305d3]
mov byte [ebp - 0xc30], al
push dword [ebp - 0xc30]
lea ecx, [ebp - 0x164]
call fcn.1001ca30
movups xmm0, xmmword [ebp - 0x164]
movups xmmword [ebp - 0x5e4], xmm0
movq xmm0, qword [ebp - 0x154]
movq qword [ebp - 0x5d4], xmm0
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x150], 0xf
mov byte [ebp - 0x164], 0
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x5e4]
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x1c4]
call fcn.1001cb90
movzx eax, byte [esi + 3]
push eax
lea ecx, [ebp - 0x1c4]
call fcn.1001ca30
movups xmm0, xmmword [ebp - 0x1c4]
movups xmmword [ebp - 0x5cc], xmm0
movq xmm0, qword [ebp - 0x1b4]
movq qword [ebp - 0x5bc], xmm0
mov dword [ebp - 0x1b4], 0
mov dword [ebp - 0x1b0], 0xf
mov byte [ebp - 0x1c4], 0
lea eax, [ebp - 0x53c]
push eax
lea eax, [ebp - 0x5cc]
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x1ac]
call fcn.1001cb90
movzx eax, byte [0x10030342]
mov byte [ebp - 0xc30], al
push dword [ebp - 0xc30]
lea ecx, [ebp - 0x1ac]
call fcn.1001ca30
movups xmm0, xmmword [ebp - 0x1ac]
movups xmmword [ebp - 0x5b4], xmm0
movq xmm0, qword [ebp - 0x19c]
movq qword [ebp - 0x5a4], xmm0
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x198], 0xf
mov byte [ebp - 0x1ac], 0
lea eax, [ebp - 0x44c]
push eax
lea eax, [ebp - 0x5b4]
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x6a4]
call fcn.1001cb90
lea eax, [ebp - 0x47c]
push eax
lea eax, [ebp - 0x6a4]
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x194]
call fcn.1001cb90
movzx eax, byte [0x100307c6]
mov byte [ebp - 0xc30], al
push dword [ebp - 0xc30]
lea ecx, [ebp - 0x194]
call fcn.1001ca30
movups xmm0, xmmword [ebp - 0x194]
movups xmmword [ebp - 0x59c], xmm0
movq xmm0, qword [ebp - 0x184]
movq qword [ebp - 0x58c], xmm0
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x180], 0xf
mov byte [ebp - 0x194], 0
lea eax, [ebp - 0x554]
push eax
lea eax, [ebp - 0x59c]
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x464]
call fcn.1001cb90
lea eax, [ebp - 0x464]
cmp dword [ebp - 0x450], 0x10
cmovae eax, dword [ebp - 0x464]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x10031778], eax
test eax, eax
je 0x10028372
mov eax, str.ttth
cmp dword [0x10030664], 0x10
cmovae eax, dword [str.ttth]
mov dword [ebp - 0xc38], eax
mov dword [ebp - 0x4f4], 0
mov dword [ebp - 0x4e4], 0
mov dword [ebp - 0x4e0], 0xf
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x78], 0xf
mov al, byte [0x10030039]
mov dword [ebp - 0x7c], 1
mov byte [ebp - 0x8c], al
mov byte [ebp - 0x8b], 0
movups xmm0, xmmword [ebp - 0x8c]
movups xmmword [ebp - 0x584], xmm0
movq xmm0, qword [ebp - 0x7c]
movq qword [ebp - 0x574], xmm0
mov dword [ebp - 0x7c], 0
mov byte [ebp - 0x8c], 0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x60], 0xf
mov al, byte [0x100300c0]
mov dword [ebp - 0x64], 1
mov byte [ebp - 0x74], al
mov byte [ebp - 0x73], 0
movups xmm0, xmmword [ebp - 0x74]
movups xmmword [ebp - 0x56c], xmm0
movq xmm0, qword [ebp - 0x64]
movq qword [ebp - 0x55c], xmm0
mov dword [ebp - 0x64], 0
mov byte [ebp - 0x74], 0
mov eax, str.ttth
cmp dword [0x10030664], 0x10
cmovae eax, dword [str.ttth]
mov dword [ebp - 0xc30], eax
mov dword [ebp - 0x4dc], 0
mov dword [ebp - 0x4cc], 0
mov dword [ebp - 0x4c8], 0xf
mov dword [ebp - 0x4c4], 0
mov dword [ebp - 0x4b4], 0
mov dword [ebp - 0x4b0], 0xf
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov dword [ebp - 0x3d4], 0
mov dword [ebp - 0x3c4], 0
mov dword [ebp - 0x3c0], 0xf
mov dword [ebp - 0x3bc], 0
mov dword [ebp - 0x3ac], 0
mov dword [ebp - 0x3a8], 0xf
mov eax, 0x10030004
cmp dword [0x10030018], 0x10
cmovae eax, dword [0x10030004]
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x30], 0xf
mov al, byte [eax + 9]
mov dword [ebp - 0x34], 1
mov byte [ebp - 0x44], al
mov byte [ebp - 0x43], 0
movups xmm0, xmmword [ebp - 0x44]
movups xmmword [ebp - 0x4ac], xmm0
movq xmm0, qword [ebp - 0x34]
movq qword [ebp - 0x49c], xmm0
mov byte [ebp - 0x44], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x18], 0xf
mov al, byte [0x1003066f]
mov dword [ebp - 0x1c], 1
mov byte [ebp - 0x2c], al
mov byte [ebp - 0x2b], 0
movups xmm0, xmmword [ebp - 0x2c]
movups xmmword [ebp - 0x494], xmm0
movq xmm0, qword [ebp - 0x1c]
movq qword [ebp - 0x484], xmm0
mov byte [ebp - 0x2c], 0
mov dword [ebp - 0x3a4], 0
mov dword [ebp - 0x394], 0
mov dword [ebp - 0x390], 0xf
mov edi, str.ttth
cmp dword [0x10030664], 0x10
cmovae edi, dword [str.ttth]
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 0xf
mov dword [ebp - 0x38c], 0
mov dword [ebp - 0x37c], 0
mov dword [ebp - 0x378], 0xf
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0xf
movzx eax, byte [0x100301c1]
push eax
lea eax, [ebp - 0x38c]
push eax
lea eax, [ebp - 0x944]
push eax
call fcn.1001bbe0
add esp, 0xc
mov esi, eax
lea eax, [ebp - 0x14c]
push eax
movsx ecx, byte [0x100306eb]
push ecx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
add esp, 4
push eax
lea eax, [ebp - 0x92c]
push eax
call fcn.1001bb90
add esp, 0xc
push esi
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x6bc]
call fcn.1001cb90
lea eax, [ebp - 0xd4]
push eax
movzx eax, byte [0x100305d3]
push eax
lea eax, [ebp - 0x95c]
push eax
call fcn.1001bb90
add esp, 0xc
push eax
lea eax, [ebp - 0x6bc]
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x6ec]
call fcn.1001cb90
movzx eax, byte [edi]
push eax
lea eax, [ebp - 0x6ec]
push eax
lea eax, [ebp - 0x914]
push eax
call fcn.1001bbe0
add esp, 0xc
lea ecx, [ebp - 0x3a4]
push ecx
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x704]
call fcn.1001cb90
lea eax, [ebp - 0x494]
push eax
lea eax, [ebp - 0x704]
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x7ac]
call fcn.1001cb90
lea eax, [ebp - 0x4ac]
push eax
lea eax, [ebp - 0x7ac]
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x6d4]
call fcn.1001cb90
lea eax, [ebp - 0x3bc]
push eax
lea eax, [ebp - 0x6d4]
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x68c]
call fcn.1001cb90
movsx eax, byte [0x100304d4]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
add esp, 4
push eax
movzx eax, byte [0x1003033e]
push eax
lea eax, [ebp - 0x68c]
push eax
lea eax, [ebp - 0xc14]
push eax
call fcn.1001bbe0
add esp, 0xc
push eax
lea eax, [ebp - 0xbfc]
push eax
call fcn.1001bbe0
add esp, 0xc
lea ecx, [ebp - 0x3d4]
push ecx
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x674]
call fcn.1001cb90
lea eax, [ebp - 0x5c]
push eax
movzx eax, byte [0x100305d3]
push eax
lea eax, [ebp - 0x974]
push eax
call fcn.1001bb90
add esp, 0xc
push eax
lea eax, [ebp - 0x674]
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x65c]
call fcn.1001cb90
lea eax, [ebp - 0x4c4]
push eax
lea eax, [ebp - 0x65c]
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x644]
call fcn.1001cb90
movzx eax, byte [0x100303d7]
push eax
lea eax, [ebp - 0x644]
push eax
lea eax, [ebp - 0xbe4]
push eax
call fcn.1001bbe0
add esp, 0xc
lea ecx, [ebp - 0x4dc]
push ecx
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x62c]
call fcn.1001cb90
mov ecx, dword [ebp - 0xc30]
movzx eax, byte [ecx + 2]
push eax
lea eax, [ebp - 0x62c]
push eax
lea eax, [ebp - 0x9a4]
push eax
call fcn.1001bbe0
add esp, 0xc
lea ecx, [ebp - 0x56c]
push ecx
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x614]
call fcn.1001cb90
lea eax, [ebp - 0x584]
push eax
lea eax, [ebp - 0x614]
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x8fc]
call fcn.1001cb90
lea eax, [ebp - 0x4f4]
push eax
lea eax, [ebp - 0x8fc]
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x8e4]
call fcn.1001cb90
mov ecx, dword [ebp - 0xc38]
movzx eax, byte [ecx + 2]
push eax
lea eax, [ebp - 0x8e4]
push eax
lea eax, [ebp - 0xbcc]
push eax
call fcn.1001bbe0
add esp, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x10028350
mov eax, dword [eax]
push eax
push dword [0x10031778]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, eax
mov ecx, 0x1ff
or eax, 0xffffffff
mov dword [ebp - 0xc20], eax
jmp 0x10028b66
mov dword [ebp - 0x374], 0
mov dword [ebp - 0x364], 0
mov dword [ebp - 0x360], 0xf
mov dword [ebp - 0x35c], 0
mov dword [ebp - 0x34c], 0
mov dword [ebp - 0x348], 0xf
mov dword [ebp - 0x344], 0
mov dword [ebp - 0x334], 0
mov dword [ebp - 0x330], 0xf
mov dword [ebp - 0x32c], 0
mov dword [ebp - 0x31c], 0
mov dword [ebp - 0x318], 0xf
mov edi, 0x100303b8
cmp dword [0x100303cc], 0x10
cmovae edi, dword [0x100303b8]
mov dword [ebp - 0x314], 0
mov dword [ebp - 0x304], 0
mov dword [ebp - 0x300], 0xf
mov dword [ebp - 0x2fc], 0
mov dword [ebp - 0x2ec], 0
mov dword [ebp - 0x2e8], 0xf
mov dword [ebp - 0x2e4], 0
mov dword [ebp - 0x2d4], 0
mov dword [ebp - 0x2d0], 0xf
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0xf
lea eax, [ebp - 0x134]
push eax
movsx eax, byte [0x100302b8]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
add esp, 4
push eax
lea eax, [ebp - 0xb84]
push eax
call fcn.1001bb90
add esp, 0xc
lea ecx, [ebp - 0x2e4]
push ecx
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x8cc]
call fcn.1001cb90
movzx eax, byte [0x100300c0]
push eax
lea eax, [ebp - 0x8cc]
push eax
lea eax, [ebp - 0xb6c]
push eax
call fcn.1001bbe0
add esp, 0xc
lea ecx, [ebp - 0x2fc]
push ecx
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x8b4]
call fcn.1001cb90
movzx eax, byte [0x100305d3]
push eax
lea eax, [ebp - 0x8b4]
push eax
lea eax, [ebp - 0xb54]
push eax
call fcn.1001bbe0
add esp, 0xc
lea ecx, [ebp - 0x314]
push ecx
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x89c]
call fcn.1001cb90
movzx eax, byte [0x100300c0]
push eax
lea eax, [ebp - 0x32c]
push eax
lea eax, [ebp - 0xb9c]
push eax
call fcn.1001bbe0
mov esi, eax
movzx ecx, byte [edi + 3]
push ecx
lea eax, [ebp - 0x89c]
push eax
lea eax, [ebp - 0xb3c]
push eax
call fcn.1001bbe0
add esp, 0x18
push esi
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x884]
call fcn.1001cb90
movzx eax, byte [0x10030342]
push eax
lea eax, [ebp - 0x884]
push eax
lea eax, [ebp - 0xb24]
push eax
call fcn.1001bbe0
add esp, 0xc
lea ecx, [ebp - 0x344]
push ecx
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x86c]
call fcn.1001cb90
lea eax, [ebp - 0x35c]
push eax
lea eax, [ebp - 0x86c]
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x854]
call fcn.1001cb90
movzx eax, byte [0x10030743]
push eax
lea eax, [ebp - 0x374]
push eax
lea eax, [ebp - 0xbb4]
push eax
call fcn.1001bbe0
mov esi, eax
movzx ecx, byte [0x100307c6]
push ecx
lea eax, [ebp - 0x854]
push eax
lea eax, [ebp - 0xb0c]
push eax
call fcn.1001bbe0
add esp, 0x18
push esi
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x50c]
call fcn.1001cb90
lea eax, [ebp - 0x50c]
cmp dword [ebp - 0x4f8], 0x10
cmovae eax, dword [ebp - 0x50c]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x10031778], eax
test eax, eax
je 0x10028b5f
mov edx, str.ttth
cmp dword [0x10030664], 0x10
mov eax, dword [str.ttth]
cmovae edx, eax
mov dword [ebp - 0xc3c], edx
mov dword [ebp - 0x2cc], 0
mov dword [ebp - 0x2bc], 0
mov dword [ebp - 0x2b8], 0xf
mov dword [ebp - 0x2b4], 0
mov dword [ebp - 0x2a4], 0
mov dword [ebp - 0x2a0], 0xf
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0x28c], 0
mov dword [ebp - 0x288], 0xf
mov edx, str.ttth
cmovae edx, eax
mov dword [ebp - 0xc38], edx
mov dword [ebp - 0x284], 0
mov dword [ebp - 0x274], 0
mov dword [ebp - 0x270], 0xf
mov dword [ebp - 0x26c], 0
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0x258], 0xf
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x108], 0xf
mov dword [ebp - 0x1dc], 0
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov dword [ebp - 0x1f4], 0
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov edx, 0x10030004
cmp dword [0x10030018], 0x10
cmovae edx, dword [0x10030004]
mov dword [ebp - 0xc30], edx
mov dword [ebp - 0x254], 0
mov dword [ebp - 0x244], 0
mov dword [ebp - 0x240], 0xf
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x228], 0xf
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x210], 0xf
mov edi, str.ttth
cmp dword [0x10030664], 0x10
cmovae edi, eax
mov dword [ebp - 0x104], 0
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf0], 0xf
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x1fc], 0
mov dword [ebp - 0x1f8], 0xf
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 0xf
movzx eax, byte [0x100301c1]
push eax
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0xa64]
push eax
call fcn.1001bbe0
add esp, 0xc
mov esi, eax
lea eax, [ebp - 0xec]
push eax
movsx ecx, byte [0x100306eb]
push ecx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
add esp, 4
push eax
lea eax, [ebp - 0xa4c]
push eax
call fcn.1001bb90
add esp, 0xc
push esi
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x83c]
call fcn.1001cb90
lea eax, [ebp - 0x104]
push eax
movzx eax, byte [0x100305d3]
push eax
lea eax, [ebp - 0xa7c]
push eax
call fcn.1001bb90
add esp, 0xc
push eax
lea eax, [ebp - 0x83c]
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x824]
call fcn.1001cb90
movzx eax, byte [edi]
push eax
lea eax, [ebp - 0x824]
push eax
lea eax, [ebp - 0xa34]
push eax
call fcn.1001bbe0
add esp, 0xc
lea ecx, [ebp - 0x224]
push ecx
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x80c]
call fcn.1001cb90
movzx eax, byte [0x1003066f]
push eax
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0xa94]
push eax
call fcn.1001bbe0
add esp, 0xc
push eax
lea eax, [ebp - 0x80c]
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x7f4]
call fcn.1001cb90
mov ecx, dword [ebp - 0xc30]
movzx eax, byte [ecx + 9]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0xaac]
push eax
call fcn.1001bbe0
add esp, 0xc
push eax
lea eax, [ebp - 0x7f4]
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x7dc]
call fcn.1001cb90
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x7dc]
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x7c4]
call fcn.1001cb90
movsx eax, byte [0x100304d4]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
add esp, 4
push eax
movzx eax, byte [0x1003033e]
push eax
lea eax, [ebp - 0x7c4]
push eax
lea eax, [ebp - 0xa1c]
push eax
call fcn.1001bbe0
add esp, 0xc
push eax
lea eax, [ebp - 0xa04]
push eax
call fcn.1001bbe0
add esp, 0xc
lea ecx, [ebp - 0x1dc]
push ecx
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x5fc]
call fcn.1001cb90
lea eax, [ebp - 0x11c]
push eax
movzx eax, byte [0x100305d3]
push eax
lea eax, [ebp - 0xac4]
push eax
call fcn.1001bb90
add esp, 0xc
push eax
lea eax, [ebp - 0x5fc]
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x794]
call fcn.1001cb90
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x794]
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x77c]
call fcn.1001cb90
movzx eax, byte [0x100303d7]
push eax
lea eax, [ebp - 0x77c]
push eax
lea eax, [ebp - 0x9ec]
push eax
call fcn.1001bbe0
add esp, 0xc
lea ecx, [ebp - 0x284]
push ecx
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x764]
call fcn.1001cb90
movzx eax, byte [0x100300c0]
push eax
lea eax, [ebp - 0x29c]
push eax
lea eax, [ebp - 0xadc]
push eax
call fcn.1001bbe0
mov esi, eax
mov eax, dword [ebp - 0xc38]
movzx ecx, byte [eax + 2]
push ecx
lea eax, [ebp - 0x764]
push eax
lea eax, [ebp - 0x9d4]
push eax
call fcn.1001bbe0
add esp, 0x18
push esi
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x74c]
call fcn.1001cb90
movzx eax, byte [0x10030039]
push eax
lea eax, [ebp - 0x2b4]
push eax
lea eax, [ebp - 0xaf4]
push eax
call fcn.1001bbe0
add esp, 0xc
push eax
lea eax, [ebp - 0x74c]
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x734]
call fcn.1001cb90
lea eax, [ebp - 0x2cc]
push eax
lea eax, [ebp - 0x734]
push eax
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x71c]
call fcn.1001cb90
mov ecx, dword [ebp - 0xc3c]
movzx eax, byte [ecx + 2]
push eax
lea eax, [ebp - 0x71c]
push eax
lea eax, [ebp - 0x9bc]
push eax
call fcn.1001bbe0
add esp, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x10028b3a
mov eax, dword [eax]
push eax
push dword [0x10031778]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, eax
mov eax, 0x1ff
mov dword [ebp - 0xc2c], eax
or eax, 0xffffffff
mov dword [ebp - 0xc1c], eax
jmp 0x10028b61
xor edx, edx
mov ecx, 0xfffffe00
mov dword [ebp - 0xc18], ecx
lea eax, [ebp - 0xc40]
push eax
push 0x40
push dword [ebp - 0xc44]
mov esi, dword [ebp - 0xc24]
push esi
call edx
mov edi, eax
mov eax, dword [ebp - 0xc2c]
test eax, 0x100
je 0x10028baf
and eax, 0xfffffeff
mov dword [ebp - 0xc2c], eax
lea ecx, [ebp - 0x9bc]
call fcn.10002b00
mov eax, dword [ebp - 0xc2c]
test al, al
jns 0x10028bcf
and eax, 0xffffff7f
mov dword [ebp - 0xc2c], eax
lea ecx, [ebp - 0x71c]
call fcn.10002b00
mov eax, dword [ebp - 0xc2c]
test al, 0x40
je 0x10028bed
and eax, 0xffffffbf
mov dword [ebp - 0xc2c], eax
lea ecx, [ebp - 0x734]
call fcn.10002b00
mov eax, dword [ebp - 0xc2c]
test al, 0x20
je 0x10028c0b
and eax, 0xffffffdf
mov dword [ebp - 0xc2c], eax
lea ecx, [ebp - 0x74c]
call fcn.10002b00
mov eax, dword [ebp - 0xc2c]
test al, 0x10
je 0x10028c29
and eax, 0xffffffef
mov dword [ebp - 0xc2c], eax
lea ecx, [ebp - 0x9d4]
call fcn.10002b00
mov eax, dword [ebp - 0xc2c]
test al, 8
je 0x10028c47
and eax, 0xfffffff7
mov dword [ebp - 0xc2c], eax
lea ecx, [ebp - 0x764]
call fcn.10002b00
mov eax, dword [ebp - 0xc2c]
test al, 4
je 0x10028c65
and eax, 0xfffffffb
mov dword [ebp - 0xc2c], eax
lea ecx, [ebp - 0x9ec]
call fcn.10002b00
mov eax, dword [ebp - 0xc2c]
test al, 2
je 0x10028c83
and eax, 0xfffffffd
mov dword [ebp - 0xc2c], eax
lea ecx, [ebp - 0x77c]
call fcn.10002b00
mov eax, dword [ebp - 0xc2c]
test al, 1
je 0x10028c92
lea ecx, [ebp - 0x794]
call fcn.10002b00
mov eax, dword [ebp - 0xc1c]
test eax, eax
jns 0x10028cb8
and eax, 0x7fffffff
mov dword [ebp - 0xc1c], eax
lea ecx, [ebp - 0x5fc]
call fcn.10002b00
mov eax, dword [ebp - 0xc1c]
test eax, 0x40000000
je 0x10028cdb
and eax, 0xbfffffff
mov dword [ebp - 0xc1c], eax
lea ecx, [ebp - 0xa04]
call fcn.10002b00
mov eax, dword [ebp - 0xc1c]
test eax, 0x20000000
je 0x10028cfe
and eax, 0xdfffffff
mov dword [ebp - 0xc1c], eax
lea ecx, [ebp - 0xa1c]
call fcn.10002b00
mov eax, dword [ebp - 0xc1c]
test eax, 0x10000000
je 0x10028d21
and eax, 0xefffffff
mov dword [ebp - 0xc1c], eax
lea ecx, [ebp - 0x7c4]
call fcn.10002b00
mov eax, dword [ebp - 0xc1c]
test eax, 0x8000000
je 0x10028d44
and eax, 0xf7ffffff
mov dword [ebp - 0xc1c], eax
lea ecx, [ebp - 0x7dc]
call fcn.10002b00
mov eax, dword [ebp - 0xc1c]
test eax, 0x4000000
je 0x10028d67
and eax, 0xfbffffff
mov dword [ebp - 0xc1c], eax
lea ecx, [ebp - 0x7f4]
call fcn.10002b00
mov eax, dword [ebp - 0xc1c]
test eax, 0x2000000
je 0x10028d8a
and eax, 0xfdffffff
mov dword [ebp - 0xc1c], eax
lea ecx, [ebp - 0x80c]
call fcn.10002b00
mov eax, dword [ebp - 0xc1c]
test eax, 0x1000000
je 0x10028dad
and eax, 0xfeffffff
mov dword [ebp - 0xc1c], eax
lea ecx, [ebp - 0xa34]
call fcn.10002b00
mov eax, dword [ebp - 0xc1c]
test eax, 0x800000
je 0x10028dd0
and eax, 0xff7fffff
mov dword [ebp - 0xc1c], eax
lea ecx, [ebp - 0x824]
call fcn.10002b00
mov eax, dword [ebp - 0xc1c]
test eax, 0x400000
je 0x10028df3
and eax, 0xffbfffff
mov dword [ebp - 0xc1c], eax
lea ecx, [ebp - 0x83c]
call fcn.10002b00
mov eax, dword [ebp - 0xc1c]
test eax, 0x200000
je 0x10028e16
and eax, 0xffdfffff
mov dword [ebp - 0xc1c], eax
lea ecx, [ebp - 0xa4c]
call fcn.10002b00
mov eax, dword [ebp - 0xc1c]
test eax, 0x100000
je 0x10028e83
and eax, 0xffefffff
mov dword [ebp - 0xc1c], eax
mov edx, dword [ebp - 0xd8]
cmp edx, 0x10
jb 0x10028e68
inc edx
mov ecx, dword [ebp - 0xec]
mov eax, ecx
cmp edx, 0x1000
jb 0x10028e58
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc1c]
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 0xf
mov byte [ebp - 0xec], 0
test eax, 0x80000
je 0x10028ea6
and eax, 0xfff7ffff
mov dword [ebp - 0xc1c], eax
lea ecx, [ebp - 0xa64]
call fcn.10002b00
mov eax, dword [ebp - 0xc1c]
test eax, 0x40000
je 0x10028ef8
and eax, 0xfffbffff
mov dword [ebp - 0xc1c], eax
mov edx, dword [ebp - 0x1f8]
cmp edx, 0x10
jb 0x10028ef8
inc edx
mov ecx, dword [ebp - 0x20c]
mov eax, ecx
cmp edx, 0x1000
jb 0x10028ee8
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc1c]
test eax, 0x20000
je 0x10028f1b
and eax, 0xfffdffff
mov dword [ebp - 0xc1c], eax
lea ecx, [ebp - 0xa7c]
call fcn.10002b00
mov eax, dword [ebp - 0xc1c]
test eax, 0x10000
je 0x10028f88
and eax, 0xfffeffff
mov dword [ebp - 0xc1c], eax
mov edx, dword [ebp - 0xf0]
cmp edx, 0x10
jb 0x10028f6d
inc edx
mov ecx, dword [ebp - 0x104]
mov eax, ecx
cmp edx, 0x1000
jb 0x10028f5d
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc1c]
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf0], 0xf
mov byte [ebp - 0x104], 0
test eax, 0x8000
je 0x10028fda
and eax, 0xffff7fff
mov dword [ebp - 0xc1c], eax
mov edx, dword [ebp - 0x210]
cmp edx, 0x10
jb 0x10028fda
inc edx
mov ecx, dword [ebp - 0x224]
mov eax, ecx
cmp edx, 0x1000
jb 0x10028fca
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc1c]
test eax, 0x4000
je 0x10028ffd
and eax, 0xffffbfff
mov dword [ebp - 0xc1c], eax
lea ecx, [ebp - 0xa94]
call fcn.10002b00
mov eax, dword [ebp - 0xc1c]
test eax, 0x2000
je 0x1002904f
and eax, 0xffffdfff
mov dword [ebp - 0xc1c], eax
mov edx, dword [ebp - 0x228]
cmp edx, 0x10
jb 0x1002904f
inc edx
mov ecx, dword [ebp - 0x23c]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002903f
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc1c]
test eax, 0x1000
je 0x10029072
and eax, 0xffffefff
mov dword [ebp - 0xc1c], eax
lea ecx, [ebp - 0xaac]
call fcn.10002b00
mov eax, dword [ebp - 0xc1c]
test eax, 0x800
je 0x100290c4
and eax, 0xfffff7ff
mov dword [ebp - 0xc1c], eax
mov edx, dword [ebp - 0x240]
cmp edx, 0x10
jb 0x100290c4
inc edx
mov ecx, dword [ebp - 0x254]
mov eax, ecx
cmp edx, 0x1000
jb 0x100290b4
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc1c]
test eax, 0x400
je 0x10029116
and eax, 0xfffffbff
mov dword [ebp - 0xc1c], eax
mov edx, dword [ebp - 0x1e0]
cmp edx, 0x10
jb 0x10029116
inc edx
mov ecx, dword [ebp - 0x1f4]
mov eax, ecx
cmp edx, 0x1000
jb 0x10029106
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc1c]
test eax, 0x200
je 0x10029168
and eax, 0xfffffdff
mov dword [ebp - 0xc1c], eax
mov edx, dword [ebp - 0x1c8]
cmp edx, 0x10
jb 0x10029168
inc edx
mov ecx, dword [ebp - 0x1dc]
mov eax, ecx
cmp edx, 0x1000
jb 0x10029158
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc1c]
test eax, 0x100
je 0x1002918b
and eax, 0xfffffeff
mov dword [ebp - 0xc1c], eax
lea ecx, [ebp - 0xac4]
call fcn.10002b00
mov eax, dword [ebp - 0xc1c]
test al, al
jns 0x100291f5
and eax, 0xffffff7f
mov dword [ebp - 0xc1c], eax
mov edx, dword [ebp - 0x108]
cmp edx, 0x10
jb 0x100291da
inc edx
mov ecx, dword [ebp - 0x11c]
mov eax, ecx
cmp edx, 0x1000
jb 0x100291ca
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc1c]
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x108], 0xf
mov byte [ebp - 0x11c], 0
test al, 0x40
je 0x10029242
and eax, 0xffffffbf
mov dword [ebp - 0xc1c], eax
mov edx, dword [ebp - 0x258]
cmp edx, 0x10
jb 0x10029242
inc edx
mov ecx, dword [ebp - 0x26c]
mov eax, ecx
cmp edx, 0x1000
jb 0x10029232
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc1c]
test al, 0x20
je 0x1002928f
and eax, 0xffffffdf
mov dword [ebp - 0xc1c], eax
mov edx, dword [ebp - 0x270]
cmp edx, 0x10
jb 0x1002928f
inc edx
mov ecx, dword [ebp - 0x284]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002927f
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc1c]
test al, 0x10
je 0x100292ad
and eax, 0xffffffef
mov dword [ebp - 0xc1c], eax
lea ecx, [ebp - 0xadc]
call fcn.10002b00
mov eax, dword [ebp - 0xc1c]
test al, 8
je 0x100292fa
and eax, 0xfffffff7
mov dword [ebp - 0xc1c], eax
mov edx, dword [ebp - 0x288]
cmp edx, 0x10
jb 0x100292fa
inc edx
mov ecx, dword [ebp - 0x29c]
mov eax, ecx
cmp edx, 0x1000
jb 0x100292ea
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc1c]
test al, 4
je 0x10029318
and eax, 0xfffffffb
mov dword [ebp - 0xc1c], eax
lea ecx, [ebp - 0xaf4]
call fcn.10002b00
mov eax, dword [ebp - 0xc1c]
test al, 2
je 0x10029365
and eax, 0xfffffffd
mov dword [ebp - 0xc1c], eax
mov edx, dword [ebp - 0x2a0]
cmp edx, 0x10
jb 0x10029365
inc edx
mov ecx, dword [ebp - 0x2b4]
mov eax, ecx
cmp edx, 0x1000
jb 0x10029355
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc1c]
test al, 1
je 0x100293a3
mov edx, dword [ebp - 0x2b8]
cmp edx, 0x10
jb 0x100293a3
inc edx
mov ecx, dword [ebp - 0x2cc]
mov eax, ecx
cmp edx, 0x1000
jb 0x10029399
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc18]
test eax, eax
jns 0x100293c9
and eax, 0x7fffffff
mov dword [ebp - 0xc18], eax
lea ecx, [ebp - 0x50c]
call fcn.10002b00
mov eax, dword [ebp - 0xc18]
test eax, 0x40000000
je 0x100293ec
and eax, 0xbfffffff
mov dword [ebp - 0xc18], eax
lea ecx, [ebp - 0xb0c]
call fcn.10002b00
mov eax, dword [ebp - 0xc18]
test eax, 0x20000000
je 0x1002940f
and eax, 0xdfffffff
mov dword [ebp - 0xc18], eax
lea ecx, [ebp - 0x854]
call fcn.10002b00
mov eax, dword [ebp - 0xc18]
test eax, 0x10000000
je 0x10029432
and eax, 0xefffffff
mov dword [ebp - 0xc18], eax
lea ecx, [ebp - 0x86c]
call fcn.10002b00
mov eax, dword [ebp - 0xc18]
test eax, 0x8000000
je 0x10029455
and eax, 0xf7ffffff
mov dword [ebp - 0xc18], eax
lea ecx, [ebp - 0xb24]
call fcn.10002b00
mov eax, dword [ebp - 0xc18]
test eax, 0x4000000
je 0x10029478
and eax, 0xfbffffff
mov dword [ebp - 0xc18], eax
lea ecx, [ebp - 0x884]
call fcn.10002b00
mov eax, dword [ebp - 0xc18]
test eax, 0x2000000
je 0x1002949b
and eax, 0xfdffffff
mov dword [ebp - 0xc18], eax
lea ecx, [ebp - 0xb3c]
call fcn.10002b00
mov eax, dword [ebp - 0xc18]
test eax, 0x1000000
je 0x100294be
and eax, 0xfeffffff
mov dword [ebp - 0xc18], eax
lea ecx, [ebp - 0x89c]
call fcn.10002b00
mov eax, dword [ebp - 0xc18]
test eax, 0x800000
je 0x100294e1
and eax, 0xff7fffff
mov dword [ebp - 0xc18], eax
lea ecx, [ebp - 0xb54]
call fcn.10002b00
mov eax, dword [ebp - 0xc18]
test eax, 0x400000
je 0x10029504
and eax, 0xffbfffff
mov dword [ebp - 0xc18], eax
lea ecx, [ebp - 0x8b4]
call fcn.10002b00
mov eax, dword [ebp - 0xc18]
test eax, 0x200000
je 0x10029527
and eax, 0xffdfffff
mov dword [ebp - 0xc18], eax
lea ecx, [ebp - 0xb6c]
call fcn.10002b00
mov eax, dword [ebp - 0xc18]
test eax, 0x100000
je 0x1002954a
and eax, 0xffefffff
mov dword [ebp - 0xc18], eax
lea ecx, [ebp - 0x8cc]
call fcn.10002b00
mov eax, dword [ebp - 0xc18]
test eax, 0x80000
je 0x1002956d
and eax, 0xfff7ffff
mov dword [ebp - 0xc18], eax
lea ecx, [ebp - 0xb84]
call fcn.10002b00
mov eax, dword [ebp - 0xc18]
test eax, 0x40000
je 0x100295da
and eax, 0xfffbffff
mov dword [ebp - 0xc18], eax
mov edx, dword [ebp - 0x120]
cmp edx, 0x10
jb 0x100295bf
inc edx
mov ecx, dword [ebp - 0x134]
mov eax, ecx
cmp edx, 0x1000
jb 0x100295af
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc18]
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0xf
mov byte [ebp - 0x134], 0
test eax, 0x20000
je 0x1002962c
and eax, 0xfffdffff
mov dword [ebp - 0xc18], eax
mov edx, dword [ebp - 0x2d0]
cmp edx, 0x10
jb 0x1002962c
inc edx
mov ecx, dword [ebp - 0x2e4]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002961c
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc18]
test eax, 0x10000
je 0x1002967e
and eax, 0xfffeffff
mov dword [ebp - 0xc18], eax
mov edx, dword [ebp - 0x2e8]
cmp edx, 0x10
jb 0x1002967e
inc edx
mov ecx, dword [ebp - 0x2fc]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002966e
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc18]
test eax, 0x8000
je 0x100296d0
and eax, 0xffff7fff
mov dword [ebp - 0xc18], eax
mov edx, dword [ebp - 0x300]
cmp edx, 0x10
jb 0x100296d0
inc edx
mov ecx, dword [ebp - 0x314]
mov eax, ecx
cmp edx, 0x1000
jb 0x100296c0
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc18]
test eax, 0x4000
je 0x100296f3
and eax, 0xffffbfff
mov dword [ebp - 0xc18], eax
lea ecx, [ebp - 0xb9c]
call fcn.10002b00
mov eax, dword [ebp - 0xc18]
test eax, 0x2000
je 0x10029745
and eax, 0xffffdfff
mov dword [ebp - 0xc18], eax
mov edx, dword [ebp - 0x318]
cmp edx, 0x10
jb 0x10029745
inc edx
mov ecx, dword [ebp - 0x32c]
mov eax, ecx
cmp edx, 0x1000
jb 0x10029735
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc18]
test eax, 0x1000
je 0x10029797
and eax, 0xffffefff
mov dword [ebp - 0xc18], eax
mov edx, dword [ebp - 0x330]
cmp edx, 0x10
jb 0x10029797
inc edx
mov ecx, dword [ebp - 0x344]
mov eax, ecx
cmp edx, 0x1000
jb 0x10029787
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc18]
test eax, 0x800
je 0x100297e9
and eax, 0xfffff7ff
mov dword [ebp - 0xc18], eax
mov edx, dword [ebp - 0x348]
cmp edx, 0x10
jb 0x100297e9
inc edx
mov ecx, dword [ebp - 0x35c]
mov eax, ecx
cmp edx, 0x1000
jb 0x100297d9
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc18]
test eax, 0x400
je 0x1002980c
and eax, 0xfffffbff
mov dword [ebp - 0xc18], eax
lea ecx, [ebp - 0xbb4]
call fcn.10002b00
mov eax, dword [ebp - 0xc18]
test eax, 0x200
je 0x1002985e
and eax, 0xfffffdff
mov dword [ebp - 0xc18], eax
mov edx, dword [ebp - 0x360]
cmp edx, 0x10
jb 0x1002985e
inc edx
mov ecx, dword [ebp - 0x374]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002984e
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc18]
test eax, 0x100
je 0x10029881
and eax, 0xfffffeff
mov dword [ebp - 0xc18], eax
lea ecx, [ebp - 0xbcc]
call fcn.10002b00
mov eax, dword [ebp - 0xc18]
test al, al
jns 0x100298a1
and eax, 0xffffff7f
mov dword [ebp - 0xc18], eax
lea ecx, [ebp - 0x8e4]
call fcn.10002b00
mov eax, dword [ebp - 0xc18]
test al, 0x40
je 0x100298bf
and eax, 0xffffffbf
mov dword [ebp - 0xc18], eax
lea ecx, [ebp - 0x8fc]
call fcn.10002b00
mov eax, dword [ebp - 0xc18]
test al, 0x20
je 0x100298dd
and eax, 0xffffffdf
mov dword [ebp - 0xc18], eax
lea ecx, [ebp - 0x614]
call fcn.10002b00
mov eax, dword [ebp - 0xc18]
test al, 0x10
je 0x100298fb
and eax, 0xffffffef
mov dword [ebp - 0xc18], eax
lea ecx, [ebp - 0x9a4]
call fcn.10002b00
mov eax, dword [ebp - 0xc18]
test al, 8
je 0x10029919
and eax, 0xfffffff7
mov dword [ebp - 0xc18], eax
lea ecx, [ebp - 0x62c]
call fcn.10002b00
mov eax, dword [ebp - 0xc18]
test al, 4
je 0x10029937
and eax, 0xfffffffb
mov dword [ebp - 0xc18], eax
lea ecx, [ebp - 0xbe4]
call fcn.10002b00
mov eax, dword [ebp - 0xc18]
test al, 2
je 0x10029955
and eax, 0xfffffffd
mov dword [ebp - 0xc18], eax
lea ecx, [ebp - 0x644]
call fcn.10002b00
mov eax, dword [ebp - 0xc18]
test al, 1
je 0x10029964
lea ecx, [ebp - 0x65c]
call fcn.10002b00
mov eax, dword [ebp - 0xc20]
test eax, eax
jns 0x1002998a
and eax, 0x7fffffff
mov dword [ebp - 0xc20], eax
lea ecx, [ebp - 0x674]
call fcn.10002b00
mov eax, dword [ebp - 0xc20]
test eax, 0x40000000
je 0x100299ad
and eax, 0xbfffffff
mov dword [ebp - 0xc20], eax
lea ecx, [ebp - 0xbfc]
call fcn.10002b00
mov eax, dword [ebp - 0xc20]
test eax, 0x20000000
je 0x100299d0
and eax, 0xdfffffff
mov dword [ebp - 0xc20], eax
lea ecx, [ebp - 0xc14]
call fcn.10002b00
mov eax, dword [ebp - 0xc20]
test eax, 0x10000000
je 0x100299f3
and eax, 0xefffffff
mov dword [ebp - 0xc20], eax
lea ecx, [ebp - 0x68c]
call fcn.10002b00
mov eax, dword [ebp - 0xc20]
test eax, 0x8000000
je 0x10029a16
and eax, 0xf7ffffff
mov dword [ebp - 0xc20], eax
lea ecx, [ebp - 0x6d4]
call fcn.10002b00
mov eax, dword [ebp - 0xc20]
test eax, 0x4000000
je 0x10029a39
and eax, 0xfbffffff
mov dword [ebp - 0xc20], eax
lea ecx, [ebp - 0x7ac]
call fcn.10002b00
mov eax, dword [ebp - 0xc20]
test eax, 0x2000000
je 0x10029a5c
and eax, 0xfdffffff
mov dword [ebp - 0xc20], eax
lea ecx, [ebp - 0x704]
call fcn.10002b00
mov eax, dword [ebp - 0xc20]
test eax, 0x1000000
je 0x10029a7f
and eax, 0xfeffffff
mov dword [ebp - 0xc20], eax
lea ecx, [ebp - 0x914]
call fcn.10002b00
mov eax, dword [ebp - 0xc20]
test eax, 0x800000
je 0x10029aa2
and eax, 0xff7fffff
mov dword [ebp - 0xc20], eax
lea ecx, [ebp - 0x6ec]
call fcn.10002b00
mov eax, dword [ebp - 0xc20]
test eax, 0x400000
je 0x10029ac5
and eax, 0xffbfffff
mov dword [ebp - 0xc20], eax
lea ecx, [ebp - 0x6bc]
call fcn.10002b00
mov eax, dword [ebp - 0xc20]
test eax, 0x200000
je 0x10029ae8
and eax, 0xffdfffff
mov dword [ebp - 0xc20], eax
lea ecx, [ebp - 0x92c]
call fcn.10002b00
mov eax, dword [ebp - 0xc20]
test eax, 0x100000
je 0x10029b55
and eax, 0xffefffff
mov dword [ebp - 0xc20], eax
mov edx, dword [ebp - 0x138]
cmp edx, 0x10
jb 0x10029b3a
inc edx
mov ecx, dword [ebp - 0x14c]
mov eax, ecx
cmp edx, 0x1000
jb 0x10029b2a
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0xf
mov byte [ebp - 0x14c], 0
test eax, 0x80000
je 0x10029b78
and eax, 0xfff7ffff
mov dword [ebp - 0xc20], eax
lea ecx, [ebp - 0x944]
call fcn.10002b00
mov eax, dword [ebp - 0xc20]
test eax, 0x40000
je 0x10029bca
and eax, 0xfffbffff
mov dword [ebp - 0xc20], eax
mov edx, dword [ebp - 0x378]
cmp edx, 0x10
jb 0x10029bca
inc edx
mov ecx, dword [ebp - 0x38c]
mov eax, ecx
cmp edx, 0x1000
jb 0x10029bba
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc20]
test eax, 0x20000
je 0x10029bed
and eax, 0xfffdffff
mov dword [ebp - 0xc20], eax
lea ecx, [ebp - 0x95c]
call fcn.10002b00
mov eax, dword [ebp - 0xc20]
test eax, 0x10000
je 0x10029c5a
and eax, 0xfffeffff
mov dword [ebp - 0xc20], eax
mov edx, dword [ebp - 0xc0]
cmp edx, 0x10
jb 0x10029c3f
inc edx
mov ecx, dword [ebp - 0xd4]
mov eax, ecx
cmp edx, 0x1000
jb 0x10029c2f
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 0xf
mov byte [ebp - 0xd4], 0
test eax, 0x8000
je 0x10029cac
and eax, 0xffff7fff
mov dword [ebp - 0xc20], eax
mov edx, dword [ebp - 0x390]
cmp edx, 0x10
jb 0x10029cac
inc edx
mov ecx, dword [ebp - 0x3a4]
mov eax, ecx
cmp edx, 0x1000
jb 0x10029c9c
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc20]
test eax, 0x4000
je 0x10029cfe
and eax, 0xffffbfff
mov dword [ebp - 0xc20], eax
mov edx, dword [ebp - 0x480]
cmp edx, 0x10
jb 0x10029cfe
inc edx
mov ecx, dword [ebp - 0x494]
mov eax, ecx
cmp edx, 0x1000
jb 0x10029cee
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc20]
test eax, 0x2000
je 0x10029d4a
and eax, 0xffffdfff
mov dword [ebp - 0xc20], eax
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x10029d4a
inc edx
mov ecx, dword [ebp - 0x2c]
mov eax, ecx
cmp edx, 0x1000
jb 0x10029d3a
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc20]
test eax, 0x1000
je 0x10029d9c
and eax, 0xffffefff
mov dword [ebp - 0xc20], eax
mov edx, dword [ebp - 0x498]
cmp edx, 0x10
jb 0x10029d9c
inc edx
mov ecx, dword [ebp - 0x4ac]
mov eax, ecx
cmp edx, 0x1000
jb 0x10029d8c
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc20]
test eax, 0x800
je 0x10029de8
and eax, 0xfffff7ff
mov dword [ebp - 0xc20], eax
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x10029de8
inc edx
mov ecx, dword [ebp - 0x44]
mov eax, ecx
cmp edx, 0x1000
jb 0x10029dd8
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc20]
test eax, 0x400
je 0x10029e36
and eax, 0xfffffbff
mov dword [ebp - 0xc20], eax
mov edx, dword [ebp - 0x3a8]
cmp edx, 0x10
jb 0x10029e36
inc edx
mov ecx, dword [ebp - 0x3bc]
mov eax, ecx
cmp edx, 0x1000
jb 0x10029e26
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029e74
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc20]
test eax, 0x200
je 0x10029e8a
and eax, 0xfffffdff
mov dword [ebp - 0xc20], eax
mov edx, dword [ebp - 0x3c0]
cmp edx, 0x10
jb 0x10029e8a
inc edx
mov ecx, dword [ebp - 0x3d4]
mov eax, ecx
cmp edx, 0x1000
jb 0x10029e7a
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10029e7a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1002a59b
add esp, 8
mov eax, dword [ebp - 0xc20]
test eax, 0x100
je 0x10029ead
and eax, 0xfffffeff
mov dword [ebp - 0xc20], eax
lea ecx, [ebp - 0x974]
call fcn.10002b00
mov eax, dword [ebp - 0xc20]
test al, al
jns 0x10029eeb
and eax, 0xffffff7f
mov dword [ebp - 0xc20], eax
mov ecx, dword [ebp - 0x48]
cmp ecx, 0x10
jb 0x10029ed9
lea eax, [ecx + 1]
push eax
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x5c]
call fcn.10004540
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
test al, 0x40
je 0x10029f09
and eax, 0xffffffbf
mov dword [ebp - 0xc20], eax
lea ecx, [ebp - 0x4c4]
call fcn.10002b00
mov eax, dword [ebp - 0xc20]
test al, 0x20
je 0x10029f27
and eax, 0xffffffdf
mov dword [ebp - 0xc20], eax
lea ecx, [ebp - 0x4dc]
call fcn.10002b00
mov eax, dword [ebp - 0xc20]
test al, 0x10
je 0x10029f45
and eax, 0xffffffef
mov dword [ebp - 0xc20], eax
lea ecx, [ebp - 0x56c]
call fcn.10002b00
mov eax, dword [ebp - 0xc20]
test al, 8
je 0x10029f60
and eax, 0xfffffff7
mov dword [ebp - 0xc20], eax
lea ecx, [ebp - 0x74]
call fcn.10002b00
mov eax, dword [ebp - 0xc20]
test al, 4
je 0x10029f7e
and eax, 0xfffffffb
mov dword [ebp - 0xc20], eax
lea ecx, [ebp - 0x584]
call fcn.10002b00
mov eax, dword [ebp - 0xc20]
test al, 2
je 0x10029f9c
and eax, 0xfffffffd
mov dword [ebp - 0xc20], eax
lea ecx, [ebp - 0x8c]
call fcn.10002b00
mov eax, dword [ebp - 0xc20]
test al, 1
je 0x10029fab
lea ecx, [ebp - 0x4f4]
call fcn.10002b00
lea ecx, [ebp - 0x464]
call fcn.10002b00
lea ecx, [ebp - 0x59c]
call fcn.10002b00
lea ecx, [ebp - 0x194]
call fcn.10002b00
lea ecx, [ebp - 0x6a4]
call fcn.10002b00
lea ecx, [ebp - 0x5b4]
call fcn.10002b00
lea ecx, [ebp - 0x1ac]
call fcn.10002b00
lea ecx, [ebp - 0x5cc]
call fcn.10002b00
lea ecx, [ebp - 0x1c4]
call fcn.10002b00
lea ecx, [ebp - 0x5e4]
call fcn.10002b00
lea ecx, [ebp - 0x164]
call fcn.10002b00
lea ecx, [ebp - 0x524]
call fcn.10002b00
lea ecx, [ebp - 0x17c]
call fcn.10002b00
lea ecx, [ebp - 0x98c]
call fcn.10002b00
lea ecx, [ebp - 0x3ec]
call fcn.10002b00
lea ecx, [ebp - 0x404]
call fcn.10002b00
lea ecx, [ebp - 0x41c]
call fcn.10002b00
lea ecx, [ebp - 0x434]
call fcn.10002b00
lea ecx, [ebp - 0x53c]
call fcn.10002b00
lea ecx, [ebp - 0xa4]
call fcn.10002b00
lea ecx, [ebp - 0x44c]
call fcn.10002b00
lea ecx, [ebp - 0x47c]
call fcn.10002b00
lea ecx, [ebp - 0x554]
call fcn.10002b00
lea ecx, [ebp - 0xbc]
call fcn.10002b00
test edi, edi
je 0x1002a0bd
push dword [0x1003176c]
push dword [0x10031768]
call esi
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1002a179
mov esp, ebp
pop ebp
ret