Function at 0x10026b40
Capabilities:
Contain obfuscated stackstrings
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100eed1a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x4f4
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
xor ebx, ebx
mov esi, ecx
mov dword [edi + 4], ebx
mov dword [ebp - 4], 1
lea eax, [edi + 8]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x14], eax
mov dword [eax + 4], ebx
mov byte [ebp - 4], 3
lea eax, [edi + 0x10]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x14], eax
mov dword [eax + 4], ebx
mov byte [ebp - 4], 5
lea eax, [edi + 0x18]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x14], eax
mov dword [eax + 4], ebx
mov byte [ebp - 4], 7
lea eax, [edi + 0x20]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x14], eax
mov dword [eax + 4], ebx
mov byte [ebp - 4], 9
lea eax, [edi + 0x28]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x14], eax
mov dword [eax + 4], ebx
mov byte [ebp - 4], 0xb
lea eax, [edi + 0x30]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x14], eax
mov dword [eax + 4], ebx
mov byte [ebp - 4], 0xd
lea eax, [edi + 0x38]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x14], eax
mov dword [eax + 4], ebx
mov byte [ebp - 4], 0xf
lea eax, [edi + 0x40]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x14], eax
mov dword [eax + 4], ebx
mov byte [ebp - 4], 0x11
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
mov ecx, 0x10028ae0
push eax
mov dword [ebp - 0x18c], ebx
mov dword [ebp - 0x18], ecx
call fcn.10016c36
add esp, 4
test al, al
jne 0x10026c38
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov eax, 0x100ff868
or eax, 1
mov dword [ebp - 0x184], ecx
mov dword [ebp - 0x180], edx
mov dword [ebp - 0x18c], eax
jmp 0x10026c3e
mov dword [ebp - 0x18c], ebx
mov byte [ebp - 4], 0x13
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
mov ecx, 0x10028b00
push eax
mov dword [ebp - 0x10c], ebx
mov dword [ebp - 0x18], ecx
call fcn.10016c36
add esp, 4
test al, al
jne 0x10026c88
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov eax, 0x100ff868
or eax, 1
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0x100], edx
mov dword [ebp - 0x10c], eax
jmp 0x10026c8e
mov dword [ebp - 0x10c], ebx
mov byte [ebp - 4], 0x15
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
mov ecx, 0x10028af0
push eax
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x18], ecx
call fcn.10016c36
add esp, 4
test al, al
jne 0x10026cd8
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov eax, 0x100ff868
or eax, 1
mov dword [ebp - 0x224], ecx
mov dword [ebp - 0x220], edx
mov dword [ebp - 0x22c], eax
jmp 0x10026cde
mov dword [ebp - 0x22c], ebx
mov byte [ebp - 4], 0x17
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
mov ecx, 0x10028b00
push eax
mov dword [ebp - 0x1ac], ebx
mov dword [ebp - 0x18], ecx
call fcn.10016c36
add esp, 4
test al, al
jne 0x10026d28
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov eax, 0x100ff868
or eax, 1
mov dword [ebp - 0x1a4], ecx
mov dword [ebp - 0x1a0], edx
mov dword [ebp - 0x1ac], eax
jmp 0x10026d2e
mov dword [ebp - 0x1ac], ebx
mov byte [ebp - 4], 0x19
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
mov ecx, 0x10028b20
push eax
mov dword [ebp - 0x1ec], ebx
mov dword [ebp - 0x18], ecx
call fcn.10016c36
add esp, 4
test al, al
jne 0x10026d78
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov eax, 0x100ff870
or eax, 1
mov dword [ebp - 0x1e4], ecx
mov dword [ebp - 0x1e0], edx
mov dword [ebp - 0x1ec], eax
jmp 0x10026d7e
mov dword [ebp - 0x1ec], ebx
mov byte [ebp - 4], 0x1b
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
mov ecx, 0x10028bf0
push eax
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x18], ecx
call fcn.10016c36
add esp, 4
test al, al
jne 0x10026dc8
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov eax, 0x100ff870
or eax, 1
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x140], edx
mov dword [ebp - 0x14c], eax
jmp 0x10026dce
mov dword [ebp - 0x14c], ebx
mov byte [ebp - 4], 0x1d
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
mov ecx, 0x10028ca0
push eax
mov dword [ebp - 0xec], ebx
mov dword [ebp - 0x18], ecx
call fcn.10016c36
add esp, 4
test al, al
jne 0x10026e18
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov eax, 0x100ff870
or eax, 1
mov dword [ebp - 0xe4], ecx
mov dword [ebp - 0xe0], edx
mov dword [ebp - 0xec], eax
jmp 0x10026e1e
mov dword [ebp - 0xec], ebx
mov byte [ebp - 4], 0x1f
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
mov ecx, 0x10028d10
push eax
mov dword [ebp - 0x1cc], ebx
mov dword [ebp - 0x18], ecx
call fcn.10016c36
add esp, 4
test al, al
jne 0x10026e68
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov eax, 0x100ff870
or eax, 1
mov dword [ebp - 0x1c4], ecx
mov dword [ebp - 0x1c0], edx
mov dword [ebp - 0x1cc], eax
jmp 0x10026e6e
mov dword [ebp - 0x1cc], ebx
mov byte [ebp - 4], 0x21
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
mov ecx, 0x10028d80
push eax
mov dword [ebp - 0x16c], ebx
mov dword [ebp - 0x18], ecx
call fcn.10016c36
add esp, 4
test al, al
jne 0x10026eb8
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov eax, 0x100ff870
or eax, 1
mov dword [ebp - 0x164], ecx
mov dword [ebp - 0x160], edx
mov dword [ebp - 0x16c], eax
jmp 0x10026ebe
mov dword [ebp - 0x16c], ebx
mov byte [ebp - 4], 0x23
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
mov ecx, 0x10028ee0
push eax
mov dword [ebp - 0x24c], ebx
mov dword [ebp - 0x18], ecx
call fcn.10016c36
add esp, 4
test al, al
jne 0x10026f08
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov eax, 0x100ff878
or eax, 1
mov dword [ebp - 0x244], ecx
mov dword [ebp - 0x240], edx
mov dword [ebp - 0x24c], eax
jmp 0x10026f0e
mov dword [ebp - 0x24c], ebx
mov byte [ebp - 4], 0x25
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
mov ecx, 0x10028de0
push eax
mov dword [ebp - 0x20c], ebx
mov dword [ebp - 0x18], ecx
call fcn.10016c36
add esp, 4
test al, al
jne 0x10026f58
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov eax, 0x100ff880
or eax, 1
mov dword [ebp - 0x204], ecx
mov dword [ebp - 0x200], edx
mov dword [ebp - 0x20c], eax
jmp 0x10026f5e
mov dword [ebp - 0x20c], ebx
mov byte [ebp - 4], 0x27
mov esi, dword [esi + 0x20]
mov eax, 0x10028e60
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x12c], ebx
mov dword [ebp - 0x14], esi
call fcn.10016c36
add esp, 4
test al, al
jne 0x10026fa8
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov eax, 0x100ff888
or eax, 1
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x120], edx
mov dword [ebp - 0x12c], eax
jmp 0x10026fae
mov dword [ebp - 0x12c], ebx
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x2c]
mov eax, 0x10028f50
lea esi, [ebp - 0x30]
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x28], eax
call fcn.10029a90
mov eax, 0x100ff820
mov dword [ebp - 0x18], eax
inc eax
cmp byte [eax], bl
jne 0x10026fd6
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x16c]
push eax
lea ecx, [ebp - 0x74]
push ecx
lea edx, [ebp - 0x18]
push edx
call fcn.10029cf0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x2a
mov eax, 0x100feb54
mov dword [ebp - 0x2c], eax
inc eax
cmp byte [eax], bl
jne 0x10027001
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0x9c]
push ecx
lea edx, [ebp - 0x2c]
push edx
call fcn.10029cf0
mov esi, eax
mov byte [ebp - 4], 0x2b
mov eax, 0x100feb5c
mov dword [ebp - 0x2c], eax
mov edi, edi
inc eax
cmp byte [eax], bl
jne 0x10027030
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0xc4]
push ecx
lea edx, [ebp - 0x2c]
push edx
call fcn.10029cf0
mov ebx, eax
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0x34]
lea eax, [ebp - 0x14c]
push eax
lea ecx, [ebp - 0x304]
push ecx
push edx
call fcn.10029b30
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x4c]
push ecx
push eax
lea edx, [ebp - 0x27c]
push edx
call fcn.10029b90
add esp, 0xc
mov byte [ebp - 4], 0x2e
mov ecx, dword [ebp - 0x3c]
push ecx
lea edx, [ebp - 0x33c]
push edx
mov edi, eax
call fcn.10029c00
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x38]
push ecx
lea edx, [ebp - 0x2bc]
push edx
mov edi, eax
call fcn.10029c70
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x434]
push ecx
mov edi, eax
call fcn.10029d50
add esp, 0x14
mov byte [ebp - 4], 0x31
lea edx, [ebp - 0x3cc]
mov edi, esi
push edx
mov esi, eax
call fcn.10029da0
add esp, 4
mov byte [ebp - 4], 0x32
mov ebx, dword [ebp - 0x14]
lea ecx, [ebp - 0x4fc]
push ecx
mov ecx, eax
call fcn.10029e10
add esp, 4
mov byte [ebp - 4], 0x33
mov edi, dword [ebp - 0x24]
push eax
call fcn.10029e60
mov byte [ebp - 4], 0x32
lea edx, [ebp - 0x4fc]
push edx
call fcn.10028890
mov al, 0x3a
mov byte [ebp - 4], al
lea ecx, [ebp - 0x364]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], al
lea edx, [ebp - 0x35c]
mov dword [ebp - 0x14], edx
mov byte [ebp - 4], al
mov eax, dword [ebp - 0x35c]
xor esi, esi
cmp eax, esi
je 0x1002715e
test al, 1
jne 0x10027158
and eax, 0xfffffffe
mov eax, dword [eax]
cmp eax, esi
je 0x10027158
lea ecx, [ebp - 0x354]
push 2
push ecx
mov edx, ecx
push edx
call eax
add esp, 0xc
mov dword [ebp - 0x35c], esi
mov byte [ebp - 4], 0x31
lea eax, [ebp - 0x3cc]
push eax
call fcn.10028760
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x434]
push ecx
call fcn.10028760
mov al, 0x2f
mov byte [ebp - 4], al
lea edx, [ebp - 0x2b4]
mov dword [ebp - 0x14], edx
mov byte [ebp - 4], al
mov eax, dword [ebp - 0x2b4]
cmp eax, esi
je 0x100271bd
test al, 1
jne 0x100271b7
and eax, 0xfffffffe
mov eax, dword [eax]
cmp eax, esi
je 0x100271b7
lea ecx, [ebp - 0x2ac]
push 2
push ecx
mov edx, ecx
push edx
call eax
add esp, 0xc
mov dword [ebp - 0x2b4], esi
mov al, 0x2e
mov byte [ebp - 4], al
lea ecx, [ebp - 0x334]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], al
mov eax, dword [ebp - 0x334]
cmp eax, esi
je 0x100271fc
test al, 1
jne 0x100271f6
and eax, 0xfffffffe
mov eax, dword [eax]
cmp eax, esi
je 0x100271f6
lea edx, [ebp - 0x32c]
push 2
push edx
mov ecx, edx
push ecx
call eax
add esp, 0xc
mov dword [ebp - 0x334], esi
mov al, 0x2d
mov byte [ebp - 4], al
lea edx, [ebp - 0x274]
mov dword [ebp - 0x14], edx
mov byte [ebp - 4], al
mov eax, dword [ebp - 0x274]
cmp eax, esi
je 0x1002723b
test al, 1
jne 0x10027235
and eax, 0xfffffffe
mov eax, dword [eax]
cmp eax, esi
je 0x10027235
lea ecx, [ebp - 0x26c]
push 2
push ecx
mov edx, ecx
push edx
call eax
add esp, 0xc
mov dword [ebp - 0x274], esi
mov al, 0x2c
mov byte [ebp - 4], al
lea ecx, [ebp - 0x2fc]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], al
mov eax, dword [ebp - 0x2fc]
cmp eax, esi
je 0x1002727a
test al, 1
jne 0x10027274
and eax, 0xfffffffe
mov eax, dword [eax]
cmp eax, esi
je 0x10027274
lea edx, [ebp - 0x2f4]
push 2
push edx
mov ecx, edx
push ecx
call eax
add esp, 0xc
mov dword [ebp - 0x2fc], esi
mov al, 0x2b
mov byte [ebp - 4], al
lea edx, [ebp - 0xbc]
mov dword [ebp - 0x14], edx
mov byte [ebp - 4], al
mov eax, dword [ebp - 0xbc]
cmp eax, esi
je 0x100272b9
test al, 1
jne 0x100272b3
and eax, 0xfffffffe
mov eax, dword [eax]
cmp eax, esi
je 0x100272b3
lea ecx, [ebp - 0xb4]
push 2
push ecx
mov edx, ecx
push edx
call eax
add esp, 0xc
mov dword [ebp - 0xbc], esi
mov al, 0x2a
mov byte [ebp - 4], al
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], al
mov eax, dword [ebp - 0x94]
cmp eax, esi
je 0x100272f8
test al, 1
jne 0x100272f2
and eax, 0xfffffffe
mov eax, dword [eax]
cmp eax, esi
je 0x100272f2
lea edx, [ebp - 0x8c]
push 2
push edx
mov ecx, edx
push ecx
call eax
add esp, 0xc
mov dword [ebp - 0x94], esi
mov al, 0x29
mov byte [ebp - 4], al
lea edx, [ebp - 0x6c]
mov dword [ebp - 0x14], edx
mov byte [ebp - 4], al
mov eax, dword [ebp - 0x6c]
cmp eax, esi
je 0x1002732b
test al, 1
jne 0x10027328
and eax, 0xfffffffe
mov eax, dword [eax]
cmp eax, esi
je 0x10027328
lea ecx, [ebp - 0x64]
push 2
push ecx
mov edx, ecx
push edx
call eax
add esp, 0xc
mov dword [ebp - 0x6c], esi
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0x9c]
push ecx
lea edx, [ebp - 0x1d]
push edx
mov byte [ebp - 0x1d], 0x7d
call fcn.10029f00
mov byte [ebp - 4], 0x6a
push eax
lea eax, [ebp - 0xcc]
push eax
lea edi, [ebp - 0x2c]
mov dword [ebp - 0x28], 0x10028fd0
call fcn.10029fd0
add esp, 8
mov ebx, eax
mov byte [ebp - 4], 0x6b
lea ecx, [ebp - 0x18c]
push ecx
lea edx, [ebp - 0x74]
push edx
lea eax, [ebp - 0x1d]
push eax
mov byte [ebp - 0x1d], 0x7b
call fcn.10029f00
mov byte [ebp - 4], 0x6c
mov ecx, dword [ebp - 0x40]
lea edx, [ebp - 0x14]
push edx
push eax
lea eax, [ebp - 0x27c]
push eax
mov dword [ebp - 0x14], ecx
call fcn.10029f60
add esp, 0xc
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0x2dc]
push ecx
mov ecx, eax
call fcn.1002a040
add esp, 4
mov esi, eax
mov bl, 0x6e
mov byte [ebp - 4], bl
push 0x68
call fcn.100ad42f
add esp, 4
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x6f
xor edi, edi
cmp eax, edi
je 0x100273db
push eax
call fcn.1002a930
jmp 0x100273dd
xor eax, eax
mov byte [ebp - 4], bl
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x70
mov edx, dword [ebp - 0x3c]
mov ecx, dword [edx + 4]
mov dword [edx + 4], eax
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], bl
cmp ecx, edi
je 0x10027402
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0x2dc]
push ecx
call fcn.100289c0
mov al, 0x6c
mov byte [ebp - 4], al
lea edx, [ebp - 0x274]
mov dword [ebp - 0x14], edx
mov byte [ebp - 4], al
mov eax, dword [ebp - 0x274]
cmp eax, edi
je 0x10027451
test al, 1
jne 0x1002744b
and eax, 0xfffffffe
mov eax, dword [eax]
cmp eax, edi
je 0x1002744b
lea ecx, [ebp - 0x26c]
push 2
push ecx
mov edx, ecx
push edx
call eax
add esp, 0xc
mov dword [ebp - 0x274], edi
mov al, 0x6b
mov byte [ebp - 4], al
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], al
mov eax, dword [ebp - 0x6c]
cmp eax, edi
je 0x10027484
test al, 1
jne 0x10027481
and eax, 0xfffffffe
mov eax, dword [eax]
cmp eax, edi
je 0x10027481
lea edx, [ebp - 0x64]
push 2
push edx
mov ecx, edx
push ecx
call eax
add esp, 0xc
mov dword [ebp - 0x6c], edi
mov al, 0x6a
mov byte [ebp - 4], al
lea edx, [ebp - 0xc4]
mov dword [ebp - 0x14], edx
mov byte [ebp - 4], al
mov eax, dword [ebp - 0xc4]
cmp eax, edi
je 0x100274c3
test al, 1
jne 0x100274bd
and eax, 0xfffffffe
mov eax, dword [eax]
cmp eax, edi
je 0x100274bd
lea ecx, [ebp - 0xbc]
push 2
push ecx
mov edx, ecx
push edx
call eax
add esp, 0xc
mov dword [ebp - 0xc4], edi
mov al, 0x29
mov byte [ebp - 4], al
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], al
mov eax, dword [ebp - 0x94]
cmp eax, edi
je 0x10027502
test al, 1
jne 0x100274fc
and eax, 0xfffffffe
mov eax, dword [eax]
cmp eax, edi
je 0x100274fc
lea edx, [ebp - 0x8c]
push 2
push edx
mov ecx, edx
push ecx
call eax
add esp, 0xc
mov dword [ebp - 0x94], edi
mov eax, dword [ebp - 0x48]
mov edi, dword [ebp - 0x40]
mov byte [ebp - 0x2c], 0x2c
mov edx, dword [ebp - 0x2c]
lea esi, [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x14], eax
call fcn.1002a110
mov edx, dword [ebp - 0x34]
lea eax, [ebp - 0x1ec]
push eax
lea ecx, [ebp - 0x74]
push ecx
push edx
call fcn.10029b30
mov byte [ebp - 4], 0x84
mov edx, dword [ebp - 0x2c]
push eax
lea eax, [ebp - 0x33c]
mov ecx, 0x10029010
push eax
lea edi, [ebp - 0x30]
mov byte [ebp - 0x30], 0x3a
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x28], ecx
call fcn.1002a1b0
mov byte [ebp - 4], 0x85
mov edx, dword [ebp - 0x24]
mov ecx, 0x10028f50
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x30], edx
mov edx, dword [ebp - 0x2c]
lea ecx, [ebp - 0x2c4]
push ecx
lea edi, [ebp - 0x30]
mov ebx, eax
mov dword [ebp - 0x2c], edx
call fcn.1002a220
add esp, 0xc
mov edi, eax
mov bl, 0x86
mov byte [ebp - 4], bl
push 0x50
call fcn.100ad42f
add esp, 4
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x87
test eax, eax
je 0x100275aa
push eax
call fcn.1002ab70
jmp 0x100275ac
xor eax, eax
mov byte [ebp - 4], bl
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x88
mov edx, dword [ebp - 0x48]
mov ecx, dword [edx + 4]
mov dword [edx + 4], eax
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], bl
test ecx, ecx
je 0x100275d1
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov al, 0x85
mov byte [ebp - 4], al
lea ecx, [ebp - 0x2bc]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], al
mov eax, dword [ebp - 0x2bc]
test eax, eax
je 0x10027614
test al, 1
jne 0x1002760a
and eax, 0xfffffffe
mov eax, dword [eax]
test eax, eax
je 0x1002760a
lea edx, [ebp - 0x2b4]
push 2
push edx
mov ecx, edx
push ecx
call eax
add esp, 0xc
mov dword [ebp - 0x2bc], 0
mov byte [ebp - 4], 0x84
lea edx, [ebp - 0x33c]
push edx
call fcn.10027e00
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x74]
push eax
call fcn.10027b00
lea ecx, [ebp - 0x1ac]
push ecx
lea edx, [ebp - 0x9c]
push edx
lea eax, [ebp - 0x1d]
push eax
mov byte [ebp - 0x1d], 0x5d
call fcn.10029f00
mov byte [ebp - 4], 0x93
push eax
lea ecx, [ebp - 0xcc]
push ecx
lea edi, [ebp - 0x2c]
mov dword [ebp - 0x28], 0x10028f90
call fcn.10029fd0
add esp, 8
mov ebx, eax
mov byte [ebp - 4], 0x94
lea edx, [ebp - 0x22c]
push edx
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x1d]
push ecx
mov byte [ebp - 0x1d], 0x5b
call fcn.10029f00
mov byte [ebp - 4], 0x95
mov edx, dword [ebp - 0x44]
lea ecx, [ebp - 0x14]
push ecx
mov dword [ebp - 0x14], edx
push eax
lea edx, [ebp - 0x27c]
push edx
call fcn.10029f60
add esp, 0xc
mov byte [ebp - 4], 0x96
lea ecx, [ebp - 0x2dc]
push ecx
mov ecx, eax
call fcn.1002a040
add esp, 4
mov byte [ebp - 4], 0x97
mov edi, dword [ebp - 0x38]
mov esi, eax
call fcn.1002a090
mov byte [ebp - 4], 0x96
lea edx, [ebp - 0x2dc]
push edx
call fcn.100289c0
mov byte [ebp - 4], 0x95
lea eax, [ebp - 0x27c]
push eax
call fcn.10027e00
mov byte [ebp - 4], 0x94
lea ecx, [ebp - 0x74]
push ecx
call fcn.10027b00
mov byte [ebp - 4], 0x93
lea edx, [ebp - 0xcc]
push edx
call fcn.10027e00
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x9c]
push eax
call fcn.10027b00
mov eax, dword [ebp - 0x24]
mov edi, dword [ebp - 0x44]
mov byte [ebp - 0x2c], 0x2c
mov ecx, dword [ebp - 0x2c]
lea esi, [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], eax
call fcn.1002a110
mov dl, byte [ebp + 0xb]
mov esi, dword [ebp - 0x34]
mov al, 0x22
mov byte [ebp - 0x23], al
mov byte [ebp - 0x22], dl
mov cx, word [ebp - 0x23]
lea edi, [ebp - 0x23]
mov word [ebp - 0x23], cx
mov byte [ebp - 0x21], al
call fcn.1002a2b0
lea edx, [ebp - 0xc4]
push edx
lea ecx, [ebp - 0x12c]
call fcn.10029930
mov ebx, eax
mov byte [ebp - 4], 0x9b
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x20c]
call fcn.10029930
mov edi, eax
mov byte [ebp - 4], 0x9c
lea ecx, [ebp - 0x74]
push ecx
lea ecx, [ebp - 0x24c]
call fcn.10029930
mov byte [ebp - 4], 0x9d
push eax
lea edx, [ebp - 0x2cc]
push edx
call fcn.10029980
mov byte [ebp - 4], 0x9e
lea ecx, [ebp - 0x444]
push ecx
mov edi, eax
call fcn.10029a00
add esp, 0xc
mov byte [ebp - 4], 0x9f
mov edi, dword [ebp - 0x4c]
mov esi, eax
call fcn.1002a340
mov byte [ebp - 4], 0x9e
lea edx, [ebp - 0x444]
push edx
call fcn.10027bb0
mov byte [ebp - 4], 0x9d
lea eax, [ebp - 0x2cc]
push eax
call fcn.100285c0
mov byte [ebp - 4], 0x9c
lea ecx, [ebp - 0x74]
push ecx
call fcn.10027b00
mov byte [ebp - 4], 0x9b
lea edx, [ebp - 0x9c]
push edx
call fcn.10027b00
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0xc4]
push eax
call fcn.10027b00
mov byte [ebp - 4], 0x27
mov eax, dword [ebp - 0x12c]
xor esi, esi
cmp eax, esi
je 0x10027849
test al, 1
jne 0x10027843
and eax, 0xfffffffe
mov eax, dword [eax]
cmp eax, esi
je 0x10027843
lea ecx, [ebp - 0x124]
push 2
push ecx
mov edx, ecx
push edx
call eax
add esp, 0xc
mov dword [ebp - 0x12c], esi
mov byte [ebp - 4], 0x25
mov eax, dword [ebp - 0x20c]
cmp eax, esi
je 0x1002787b
test al, 1
jne 0x10027875
and eax, 0xfffffffe
mov eax, dword [eax]
cmp eax, esi
je 0x10027875
lea ecx, [ebp - 0x204]
push 2
push ecx
mov edx, ecx
push edx
call eax
add esp, 0xc
mov dword [ebp - 0x20c], esi
mov byte [ebp - 4], 0x23
mov eax, dword [ebp - 0x24c]
cmp eax, esi
je 0x100278ad
test al, 1
jne 0x100278a7
and eax, 0xfffffffe
mov eax, dword [eax]
cmp eax, esi
je 0x100278a7
lea ecx, [ebp - 0x244]
push 2
push ecx
mov edx, ecx
push edx
call eax
add esp, 0xc
mov dword [ebp - 0x24c], esi
mov byte [ebp - 4], 0x21
mov eax, dword [ebp - 0x16c]
cmp eax, esi
je 0x100278df
test al, 1
jne 0x100278d9
and eax, 0xfffffffe
mov eax, dword [eax]
cmp eax, esi
je 0x100278d9
lea ecx, [ebp - 0x164]
push 2
push ecx
mov edx, ecx
push edx
call eax
add esp, 0xc
mov dword [ebp - 0x16c], esi
mov byte [ebp - 4], 0x1f
mov eax, dword [ebp - 0x1cc]
cmp eax, esi
je 0x10027911
test al, 1
jne 0x1002790b
and eax, 0xfffffffe
mov eax, dword [eax]
cmp eax, esi
je 0x1002790b
lea ecx, [ebp - 0x1c4]
push 2
push ecx
mov edx, ecx
push edx
call eax
add esp, 0xc
mov dword [ebp - 0x1cc], esi
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0xec]
cmp eax, esi
je 0x10027943
test al, 1
jne 0x1002793d
and eax, 0xfffffffe
mov eax, dword [eax]
cmp eax, esi
je 0x1002793d
lea ecx, [ebp - 0xe4]
push 2
push ecx
mov edx, ecx
push edx
call eax
add esp, 0xc
mov dword [ebp - 0xec], esi
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0x14c]
cmp eax, esi
je 0x10027975
test al, 1
jne 0x1002796f
and eax, 0xfffffffe
mov eax, dword [eax]
cmp eax, esi
je 0x1002796f
lea ecx, [ebp - 0x144]
push 2
push ecx
mov edx, ecx
push edx
call eax
add esp, 0xc
mov dword [ebp - 0x14c], esi
mov byte [ebp - 4], 0x19
mov eax, dword [ebp - 0x1ec]
cmp eax, esi
je 0x100279a7
test al, 1
jne 0x100279a1
and eax, 0xfffffffe
mov eax, dword [eax]
cmp eax, esi
je 0x100279a1
lea ecx, [ebp - 0x1e4]
push 2
push ecx
mov edx, ecx
push edx
call eax
add esp, 0xc
mov dword [ebp - 0x1ec], esi
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0x1ac]
cmp eax, esi
je 0x100279d9
test al, 1
jne 0x100279d3
and eax, 0xfffffffe
mov eax, dword [eax]
cmp eax, esi
je 0x100279d3
lea ecx, [ebp - 0x1a4]
push 2
push ecx
mov edx, ecx
push edx
call eax
add esp, 0xc
mov dword [ebp - 0x1ac], esi
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x22c]
cmp eax, esi
je 0x10027a0b
test al, 1
jne 0x10027a05
and eax, 0xfffffffe
mov eax, dword [eax]
cmp eax, esi
je 0x10027a05
lea ecx, [ebp - 0x224]
push 2
push ecx
mov edx, ecx
push edx
call eax
add esp, 0xc
mov dword [ebp - 0x22c], esi
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x10c]
cmp eax, esi
je 0x10027a3d
test al, 1
jne 0x10027a37
and eax, 0xfffffffe
mov eax, dword [eax]
cmp eax, esi
je 0x10027a37
lea ecx, [ebp - 0x104]
push 2
push ecx
mov edx, ecx
push edx
call eax
add esp, 0xc
mov dword [ebp - 0x10c], esi
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x18c]
cmp eax, esi
je 0x10027a6f
test al, 1
jne 0x10027a69
and eax, 0xfffffffe
mov eax, dword [eax]
cmp eax, esi
je 0x10027a69
lea ecx, [ebp - 0x184]
push 2
push ecx
mov edx, ecx
push edx
call eax
add esp, 0xc
mov dword [ebp - 0x18c], esi
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4