Function at 0x10022966
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x1025bfbe
mov eax, dword fs:[0]
push eax
sub esp, 0x54
push ebx
push esi
push edi
mov eax, dword [0x103fb8f8]
xor eax, esp
push eax
lea eax, [esp + 0x64]
mov dword fs:[0], eax
mov esi, ecx
mov ecx, dword [esi + 0x108]
test ecx, ecx
jne 0x10020988
call dword [0x102ab0b0]
mov eax, dword [ecx]
call dword [eax + 8]
push 0xffffffffffffffff
push 0
mov edi, eax
lea eax, [esp + 0x1c]
push str.Creating_new_thread_here_may_result_in_crash._Do_you_really_want_to_continue_
push eax
call fcn.10022460
add esp, 0x10
push edi
push eax
mov ecx, esi
mov dword [esp + 0x74], 0
call fcn.1001d950
test al, al
mov dword [esp + 0x6c], 0xffffffff
lea ecx, [esp + 0x14]
sete bl
call dword [0x102aba64]
test bl, bl
jne 0x10020b38
push 0
push 0x103fbac0
push 0x103fb9b0
push 0
mov ecx, esi
call dword [0x102ab8c4]
push eax
call fcn.10257428
add esp, 0x14
lea ecx, [esp + 0x2c]
push eax
call fcn.1008a8f0
push 4
push 0
push ecx
mov eax, esp
mov dword [esp + 0x78], 1
push 0xffffffffffffffff
push 0
push str.Argument_for_the_new_thread
push eax
call fcn.10022460
add esp, 0x10
lea ecx, [esp + 0x38]
call fcn.1008bbc0
lea ecx, [esp + 0x2c]
call dword [0x102ad1d4]
cmp eax, 1
jne 0x10020b27
lea ecx, [esp + 0x2c]
call fcn.1008b5f0
push eax
lea eax, [esp + 0x28]
push eax
call fcn.10014760
mov ebx, eax
lea eax, [esp + 0x28]
mov byte [esp + 0x74], 2
push edi
push eax
call fcn.10014760
mov esi, eax
push 0x13
push str.createthread__1___2
mov byte [esp + 0x84], 3
call dword [0x102ab9d0]
mov dword [esp + 0x28], eax
add esp, 0x14
mov byte [esp + 0x18], 0x20
mov ecx, esp
mov byte [esp + 0x70], 4
push dword [esp + 0x18]
call dword [0x102aba38]
mov edi, dword [0x102aba10]
lea eax, [esp + 0x20]
push 0
push esi
push eax
lea ecx, [esp + 0x20]
call edi
mov esi, eax
push ecx
mov ecx, esp
mov byte [esp + 0x18], 0x20
push dword [esp + 0x18]
mov byte [esp + 0x74], 5
call dword [0x102aba38]
push 0
push ebx
lea eax, [esp + 0x24]
mov ecx, esi
push eax
call edi
push eax
mov byte [esp + 0x70], 6
call fcn.100132b0
add esp, 4
mov byte [esp + 0x6c], 5
lea ecx, [esp + 0x18]
call dword [0x102aba64]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x6c], 4
call dword [0x102aba64]
lea ecx, [esp + 0x10]
mov byte [esp + 0x6c], 3
call dword [0x102aba64]
lea ecx, [esp + 0x20]
mov byte [esp + 0x6c], 2
call dword [0x102aba64]
lea ecx, [esp + 0x24]
mov byte [esp + 0x6c], 1
call dword [0x102aba64]
lea ecx, [esp + 0x2c]
mov dword [esp + 0x6c], 0xffffffff
call fcn.1008abe0
mov ecx, dword [esp + 0x64]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add esp, 0x60
ret
push 0xffffffffffffffff
push 0x1025c016
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x103fb8f8]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
mov ebx, ecx
mov ecx, dword [ebx + 0x108]
test ecx, ecx
jne 0x10020c38
call dword [0x102ab0b0]
mov eax, dword [ecx]
call dword [eax + 8]
mov edi, eax
test edi, edi
je 0x10020deb
push edi
call dword [0x102ad474]
add esp, 4
push edi
test al, 2
je 0x10020c8f
lea eax, [esp + 0x14]
push eax
call fcn.100146f0
add esp, 8
mov esi, eax
push 0
push 0x103fbac0
push 0x103fb9b0
push 0
mov ecx, ebx
mov dword [esp + 0x40], 0
call dword [0x102ab8c4]
push eax
call fcn.10257428
push eax
push esi
push 2
jmp 0x10020cca
test al, 1
je 0x10020cf7
lea eax, [esp + 0x14]
push eax
call fcn.100146f0
add esp, 8
mov esi, eax
push 0
push 0x103fbac0
push 0x103fb9b0
push 0
mov ecx, ebx
mov dword [esp + 0x40], 1
call dword [0x102ab8c4]
push eax
call fcn.10257428
push eax
push esi
push 1
call fcn.100c1bd0
add esp, 0x20
mov dword [esp + 0x30], 0xffffffff
lea ecx, [esp + 0x10]
call dword [0x102aba64]
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add esp, 0x24
ret
lea eax, [esp + 0x20]
push eax
call fcn.100146f0
mov esi, eax
push 5
push str.bp__1
mov dword [esp + 0x40], 2
call dword [0x102ab9d0]
mov dword [esp + 0x20], eax
add esp, 0xc
mov byte [esp + 0x18], 0x20
mov ecx, esp
mov byte [esp + 0x34], 3
push dword [esp + 0x18]
call dword [0x102aba38]
push 0
push esi
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x20]
call dword [0x102aba10]
push eax
mov byte [esp + 0x34], 4
call fcn.10013320
add esp, 4
mov byte [esp + 0x30], 3
lea ecx, [esp + 0x18]
call dword [0x102aba64]
lea ecx, [esp + 0x10]
mov byte [esp + 0x30], 2
call dword [0x102aba64]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x30], 0xffffffff
call dword [0x102aba64]
lea eax, [esp + 0x20]
push edi
push eax
call fcn.100146f0
add esp, 8
mov esi, eax
push 0
push 0x103fbac0
push 0x103fb9b0
push 0
mov ecx, ebx
mov dword [esp + 0x40], 5
call dword [0x102ab8c4]
push eax
call fcn.10257428
push eax
push esi
push 1
call fcn.100c1bd0
add esp, 0x20
mov dword [esp + 0x30], 0xffffffff
test al, al
lea ecx, [esp + 0x20]
sete bl
call dword [0x102aba64]
test bl, bl
je 0x10020deb
push edi
push 1
call fcn.100c5ba0
add esp, 8
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add esp, 0x24
ret
push 0xffffffffffffffff
push 0x1025c0bb
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push ebx
push esi
mov eax, dword [0x103fb8f8]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
mov ecx, dword [ecx + 0x108]
test ecx, ecx
jne 0x10020fa5
call dword [0x102ab0b0]
mov eax, dword [ecx]
call dword [eax + 8]
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.10014760
mov esi, eax
push 8
push str.graph__1
mov dword [esp + 0x38], 0
call dword [0x102ab9d0]
mov dword [esp + 0x1c], eax
add esp, 0xc
mov byte [esp + 0x14], 0x20
mov ecx, esp
mov byte [esp + 0x2c], 1
push dword [esp + 0x14]
call dword [0x102aba38]
push 0
push esi
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x1c]
call dword [0x102aba10]
push eax
mov byte [esp + 0x2c], 2
call fcn.10013320
add esp, 4
mov byte [esp + 0x28], 1
lea ecx, [esp + 0x14]
mov bl, al
call dword [0x102aba64]
lea ecx, [esp + 0xc]
mov byte [esp + 0x28], 0
call dword [0x102aba64]
lea ecx, [esp + 0x18]
mov dword [esp + 0x28], 0xffffffff
call dword [0x102aba64]
test bl, bl
je 0x1002104a
push 3
call dword [0x102ad464]
add esp, 4
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x20
ret
push 0xffffffffffffffff
push 0x1025c172
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x103fb8f8]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov edi, ecx
call dword [0x102ad4a0]
test al, al
je 0x10021477
mov ecx, dword [edi + 0x108]
test ecx, ecx
jne 0x100213c5
call dword [0x102ab0b0]
mov eax, dword [ecx]
call dword [eax + 8]
mov esi, eax
push esi
call dword [0x102ad47c]
test al, al
sete cl
movzx ecx, cl
push ecx
push esi
call dword [0x102ad478]
add esp, 0xc
test al, al
jne 0x10021471
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x18]
push str.DbgSetBookmarkAt_failed_
push eax
call fcn.10022460
mov esi, eax
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x24]
mov dword [esp + 0x34], 0
push str.Error_
push eax
call fcn.10022460
add esp, 0x20
push esi
push eax
push 0
push 0x103fbac0
push 0x103fb9b0
push 0
mov ecx, edi
mov byte [esp + 0x34], 1
call dword [0x102ab8c4]
push eax
call fcn.10257428
add esp, 0x14
push eax
call fcn.101b2480
add esp, 0xc
mov byte [esp + 0x1c], 0
lea ecx, [esp + 0xc]
call dword [0x102aba64]
lea ecx, [esp + 0x10]
mov dword [esp + 0x1c], 0xffffffff
call dword [0x102aba64]
call dword [0x102ad46c]
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x14
ret
les eax, [eax + ebp*8]
or al, byte [eax]
add byte [eax], al
or byte [eax], al
add byte [eax], al
pop edx
push ebx
push edx
add esp, 4
add ebx, 0x6a59
and ebx, 0x9c5e
pop ebx
push edx
or edx, 0xc1d6
pop edx
push eax
push ebx
add esp, 4
add eax, 0x11039
and eax, 0x174da
jmp 0x100223b8
pop eax
push esi
push ecx
add esp, 4
or esi, 0x13546
xor esi, 0xf365
pop esi
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1a18], ecx
mov edx, dword [ebp - 0x1a18]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1bcc], eax
mov ecx, dword [ebp - 0x1bcc]
mov dword [ebp - 0x1500], ecx
push eax
push ebx
add esp, 4
or eax, 0x1444a
pop eax
push edi
add edi, 0x56ce
pop edi
push eax
push ebx
add esp, 4
and eax, 0x580e
and eax, 0x14690
or eax, 0x324d
sub eax, 0x36ae
pop eax
cmp dword [ebp - 0x1500], 0
jne 0x1002243d
mov dword [ebp - 0x2a0], 0
jmp 0x100226f9
mov edx, dword [ebp - 0x1500]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc1c], ecx
push edx
push edi
add esp, 4
and edx, 0x15160
pop edx
push eax
or eax, 0xc7c6
add byte [eax], al
xor eax, 0xf675
or eax, 0x7a2b
pop eax
push ebx
push ecx
add esp, 4
add ebx, 0x3792
xor ebx, 0x1f36
pop ebx
cmp dword [ebp - 0xc1c], 0
jne 0x10022499
mov dword [ebp - 0x2a0], 0
jmp 0x100226f9
mov edx, dword [ebp - 0xc1c]
mov dword [ebp - 0x4bc], edx
push eax
push esi
add esp, 4
add eax, 0xb7da
jmp 0x100224b8
pop eax
push ecx
push ecx
add esp, 4
jmp 0x100224c5
jmp 0x100224ca
xor ecx, 0x7784
xor ecx, 0x15db
pop ecx
lea eax, [ebp - 0x15cc]
mov dword [ebp - 0xc18], eax
mov ecx, dword [ebp - 0x4bc]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc14], edx
xor eax, eax
mov word [ebp - 0x1ac], ax
xor ecx, ecx
mov word [ebp - 0x100], cx
push ecx
call 0x10022512
add byte [ecx + 0x41], cl
inc ebx
dec edx
dec ecx
inc ebx
cmp dword [ebx + 0xae804c4], eax
add byte [eax], al
add byte [eax], al
cmp ecx, dword [esi + 0x4e]
aas
dec esp
inc ebp
dec esi
add esp, 4
jmp 0x1002252f
xor ecx, 0x5b8
pop ecx
mov edx, dword [ebp - 0xc14]
mov ax, word [edx]
mov word [ebp - 0xfb6], ax
mov ecx, dword [ebp - 0xc14]
add ecx, 2
mov dword [ebp - 0xc14], ecx
mov dx, word [ebp - 0xfb6]
mov word [ebp - 0x1ac], dx
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xfb8], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
mov ax, word [ebp - 0xfb8]
mov word [ebp - 0x100], ax
push edx
push edi
add esp, 4
and edx, 0x14ad6
xor edx, 0x140f9
pop edx
push esi
push edi
add esp, 4
xor esi, 0x1760e
or esi, 0x14a97
or esi, 0x76f8
jmp 0x100225c1
pop esi
movzx ecx, word [ebp - 0x100]
test ecx, ecx
jne 0x100225e5
movzx edx, word [ebp - 0x1ac]
movzx eax, word [ebp - 0x100]
sub edx, eax
mov dword [ebp - 0x150c], edx
jmp 0x10022648
movzx ecx, word [ebp - 0x1ac]
movzx edx, word [ebp - 0x100]
cmp ecx, edx
je 0x10022504
movzx eax, word [ebp - 0x1ac]
xor eax, 0x20
movzx ecx, word [ebp - 0x100]
cmp eax, ecx
je 0x10022504
movzx edx, word [ebp - 0x1ac]
movzx eax, word [ebp - 0x100]
cmp edx, eax
jge 0x10022632
mov dword [ebp - 0x1504], 0xffffffff
jmp 0x1002263c
mov dword [ebp - 0x1504], 1
mov ecx, dword [ebp - 0x1504]
mov dword [ebp - 0x150c], ecx
cmp dword [ebp - 0x150c], 0
jne 0x10022691
push ebx
push ebx
add esp, 4
xor ebx, 0xba03
add ebx, 0xf2b0
or ebx, 0x13745
sub ebx, 0x94db
pop ebx
push edx
and edx, 0x10a7c
sub edx, 0x18094
or edx, 0x1590c
pop edx
mov edx, dword [ebp - 0x4bc]
mov dword [ebp - 0x2a0], edx
jmp 0x100226f9
push ecx
push esi
add esp, 4
and ecx, 0xc1c9
add ecx, 0x13d7f
and ecx, 0x9177
sub ecx, 0xca81
pop ecx
push eax
or eax, 0x366b
sub eax, 0xe340
add eax, 0x3667
pop eax
mov eax, dword [ebp - 0x4bc]
mov ecx, dword [eax]
mov dword [ebp - 0x4bc], ecx
mov edx, dword [ebp - 0x4bc]
cmp edx, dword [ebp - 0xc1c]
je 0x100226ef
mov eax, dword [ebp - 0x4bc]
cmp dword [eax + 0x30], 0
jne 0x100224a5
mov dword [ebp - 0x2a0], 0
push ecx
push edi
add esp, 4
and ecx, 0x5afa
xor ecx, 0xf9fc
sub ecx, 0x6830
pop ecx
push ebx
add ebx, 0x11670
add ebx, 0xb331
or ebx, 0x571d
sub ebx, 0xbb57
pop ebx
cmp dword [ebp - 0x2a0], 0
jne 0x10023030
mov ecx, 0x6b
mov word [ebp - 0x1638], cx
mov edx, 0x65
mov word [ebp - 0x1636], dx
mov eax, 0x72
mov word [ebp - 0x1634], ax
mov ecx, 0x6e
mov word [ebp - 0x1632], cx
mov edx, 0x65
mov word [ebp - 0x1630], dx
mov eax, 0x6c
mov word [ebp - 0x162e], ax
mov ecx, 0x33
mov word [ebp - 0x162c], cx
mov edx, 0x32
mov word [ebp - 0x162a], dx
mov eax, 0x2e
mov word [ebp - 0x1628], ax
mov ecx, 0x64
mov word [ebp - 0x1626], cx
mov edx, 0x6c
mov word [ebp - 0x1624], dx
mov eax, 0x6c
mov word [ebp - 0x1622], ax
xor ecx, ecx
mov word [ebp - 0x1620], cx
push edx
call 0x100227e2
add byte [esi + 0x32], al
cmp byte [edx + eax*2], bh
inc ecx
inc edx
inc ecx
dec esp
add esp, 4
pop edx
push edi
push esi
add esp, 4
call 0x100227f9
add byte [edi + 0x4b], al
xor cl, byte [edi + 0x42]
dec ecx
add esp, 4
and edi, 0x14443
pop edi
mov byte [ebp - 0x84c], 0x4c
mov byte [ebp - 0x84b], 0x6f
mov byte [ebp - 0x84a], 0x61
mov byte [ebp - 0x849], 0x64
mov byte [ebp - 0x848], 0x4c
mov byte [ebp - 0x847], 0x69
mov byte [ebp - 0x846], 0x62
mov byte [ebp - 0x845], 0x72
mov byte [ebp - 0x844], 0x61
mov byte [ebp - 0x843], 0x72
mov byte [ebp - 0x842], 0x79
mov byte [ebp - 0x841], 0x57
mov byte [ebp - 0x840], 0
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1bd0], edx
mov eax, dword [ebp - 0x1bd0]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1bd4], ecx
mov edx, dword [ebp - 0x1bd4]
mov dword [ebp - 0x1510], edx
push edi
add edi, 0x185b0
pop edi
push edx
push ebx
add esp, 4
xor edx, 0xfec9
sub edx, 0x6845
or edx, 0x14c75
call 0x100228b4
add byte [edi + esi], bh
dec edi
inc esi
inc esi
inc edx
dec esi
xor al, 0x83
les eax, [edx + ebx*2]
cmp dword [ebp - 0x1510], 0
jne 0x100228d0
mov dword [ebp - 0x728], 0
jmp 0x10022b77
mov eax, dword [ebp - 0x1510]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc28], edx
push edi
or edi, 0x15605
xor edi, 0x2c59
xor edi, 0x173b4
add edi, 0x1343b
pop edi
push ecx
push ecx
add esp, 4
or ecx, 0x1670f
add ecx, 0x7814
xor ecx, 0x16782
pop ecx
cmp dword [ebp - 0xc28], 0
jne 0x1002292c
mov dword [ebp - 0x728], 0
jmp 0x10022b77
mov eax, dword [ebp - 0xc28]
mov dword [ebp - 0x4c0], eax
push eax
push esi
add esp, 4
jmp 0x10022946
or eax, 0x2e50
or eax, 0xa0ec
or eax, 0xca3
pop eax
push ecx
call 0x10022966
add byte [ebp + 0x4c], al
inc edi
dec ecx
dec edi
add esp, 4
pop ecx
lea ecx, [ebp - 0x1638]
mov dword [ebp - 0xc24], ecx
mov edx, dword [ebp - 0x4c0]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc20], eax
xor ecx, ecx
mov word [ebp - 0x1b0], cx
xor edx, edx
mov word [ebp - 0x24], dx
push edi
sub edi, 0xccd6
sub edi, 0xade8
or edi, 0x7d6f
sub edi, 0x5bf0
pop edi
push edx
push eax
add esp, 4
jmp 0x100229b8
and edx, 0x116eb
jmp 0x100229c5
pop edx
mov eax, dword [ebp - 0xc20]
mov cx, word [eax]
mov word [ebp - 0xfba], cx
mov edx, dword [ebp - 0xc20]
add edx, 2
mov dword [ebp - 0xc20], edx
mov ax, word [ebp - 0xfba]
mov word [ebp - 0x1b0], ax
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xfbc], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xfbc]
mov word [ebp - 0x24], cx
push ecx
push eax
add esp, 4
add ecx, 0x17e96
pop ecx
push edx
or edx, 0xb3e9
or edx, 0x111c4
or edx, 0x108ba
or edx, 0x145c8
pop edx
push ecx
push edi
add esp, 4
xor ecx, 0x12087
pop ecx
movzx edx, word [ebp - 0x24]
test edx, edx
jne 0x10022a6c
movzx eax, word [ebp - 0x1b0]
movzx ecx, word [ebp - 0x24]
sub eax, ecx
mov dword [ebp - 0x1518], eax
jmp 0x10022ac6
movzx edx, word [ebp - 0x1b0]
movzx eax, word [ebp - 0x24]
cmp edx, eax
je 0x10022994
movzx ecx, word [ebp - 0x1b0]
xor ecx, 0x20
movzx edx, word [ebp - 0x24]
cmp ecx, edx
je 0x10022994
movzx eax, word [ebp - 0x1b0]
movzx ecx, word [ebp - 0x24]
cmp eax, ecx
jge 0x10022ab0
mov dword [ebp - 0x1514], 0xffffffff
jmp 0x10022aba
mov dword [ebp - 0x1514], 1
mov edx, dword [ebp - 0x1514]
mov dword [ebp - 0x1518], edx
cmp dword [ebp - 0x1518], 0
jne 0x10022b0f
push esi
push ebx
add esp, 4
and esi, 0xbd45
call 0x10022ae8
add byte [ebx + 0x41], cl
dec eax
dec ebp
xor edi, dword [ecx]
dec edi
add esp, 4
add esi, 0x6ee3
call 0x10022afd
add byte [0x3f3f3f43], bh
xor eax, dword [ebx - 0x74a1fb3c]
test dword [eax - 5], eax
invalid
push eax
and eax, 0x11a27
or eax, 0x709
and eax, 0xdb8d
sub eax, 0xf29f
pop eax
push esi
push esi
add esp, 4
add esi, 0x12648
or esi, 0x56c
add esi, 0x14545
pop esi
mov ecx, dword [ebp - 0x4c0]
mov edx, dword [ecx]
mov dword [ebp - 0x4c0], edx
mov eax, dword [ebp - 0x4c0]
cmp eax, dword [ebp - 0xc28]
je 0x10022b6d
mov ecx, dword [ebp - 0x4c0]
cmp dword [ecx + 0x30], 0
jne 0x10022938
mov dword [ebp - 0x728], 0
push eax
push ebx
add esp, 4
sub eax, 0x14c3a
and eax, 0xbd63
add eax, 0xd346
or eax, 0x151d3
pop eax
push edi
or edi, 0x1427b
or edi, 0x7d09
sub edi, 0xc403
pop edi
cmp dword [ebp - 0x728], 0
jne 0x10022bf3
push edx
call 0x10022bc2
add byte [edi], bh
aas
cmp dword [edx + 0x3e], ecx
inc edx
inc esp
inc ebx
dec ecx
add esp, 4
pop edx
push ebx
push ecx
add esp, 4
xor ebx, 0x1580a
pop ebx
push esi
push edx
add esp, 4
add esi, 0x17236
add esi, 0x2371
pop esi
mov dword [ebp - 0x774], 0
jmp 0x1002371b
push edi
xor edi, 0x10155
xor edi, 0x171f6
xor edi, 0xbe4a
sub edi, 0x13a23
pop edi
push eax
push ecx
add esp, 4
and eax, 0x8394
or eax, 0x4d2d
and eax, 0x20e4
pop eax
mov edx, dword [ebp - 0x728]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x354], eax
mov dword [ebp - 0x738], 0
mov ecx, dword [ebp - 0x354]
mov dword [ebp - 0x151c], ecx
cmp dword [ebp - 0x151c], 0
jne 0x10022c64
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x398], edx
jmp fcn.10022f55
mov eax, dword [ebp - 0x151c]
mov ecx, dword [ebp - 0x354]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x1520], ecx
jne 0x10022c8c
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x398], edx
jmp fcn.10022f55
mov eax, 8
imul ecx, eax, 0
mov edx, dword [ebp - 0x1520]
mov eax, dword [edx + ecx + 0x78]
mov dword [ebp - 0x1524], eax
cmp dword [ebp - 0x1524], 0
jne 0x10022cbe
mov ecx, dword [ebp - 0x738]
mov dword [ebp - 0x398], ecx
jmp fcn.10022f55
mov edx, dword [ebp - 0x354]
add edx, dword [ebp - 0x1524]
mov dword [ebp - 0x72c], edx
jne 0x10022ce3
mov eax, dword [ebp - 0x738]
mov dword [ebp - 0x398], eax
jmp fcn.10022f55
mov ecx, dword [ebp - 0x72c]
mov edx, dword [ebp - 0x354]
add edx, dword [ecx + 0x20]
mov dword [ebp - 0x1bd8], edx
mov eax, dword [ebp - 0x72c]
mov ecx, dword [ebp - 0x354]
add ecx, dword [eax + 0x24]
mov dword [ebp - 0x1bdc], ecx
mov edx, dword [ebp - 0x72c]
mov eax, dword [ebp - 0x354]
add eax, dword [edx + 0x1c]
mov dword [ebp - 0x1be0], eax
mov dword [ebp - 0x730], 0
jmp 0x10022d3d
mov edx, dword [ebp - 0x72c]
mov eax, dword [ebp - 0x730]
cmp eax, dword [edx + 0x18]
jae 0x10022f49
mov ecx, dword [ebp - 0x730]
mov edx, dword [ebp - 0x1bd8]
mov eax, dword [ebp - 0x354]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x734], eax
mov ecx, dword [ebp - 0x730]
mov edx, dword [ebp - 0x1bdc]
movzx eax, word [edx + ecx*2]
mov ecx, dword [ebp - 0x1be0]
mov edx, dword [ebp - 0x354]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x1be4], edx
invalid
inc edi
test dword [eax + 0xfffffe], esi
add byte [eax], al
add bl, ch
invalid
mov ecx, dword [ebp - 0x738]
mov dword [ebp - 0x398], ecx
push eax
push esi
add esp, 4
xor eax, 0xdd60
add eax, 0x8024
sub eax, 0x17ad2
jmp 0x1002373b
pop eax
push edi
push edi
add esp, 4
jmp 0x10023746
sub edi, 0x88e7
pop edi
mov eax, dword [ebp - 0x390]
add eax, 0xe
mov dword [ebp - 0x1c54], eax
push ecx
push edi
add esp, 4
call 0x1002376d
add byte [edi], bh
dec ecx
push eax
inc esi
cmp dh, byte [edx]
add esp, 4
xor ecx, 0x60d
add ecx, 0x3dc1
pop ecx
push edx
push ecx
add esp, 4
or edx, 0x11558
jmp 0x1002378d
pop edx
cmp dword [ebp - 0x390], 0
je 0x100237a0
cmp dword [ebp - 0xa48], 0
jne 0x100237e6
push edi
push edx
add esp, 4
jmp 0x100237ae
add edi, 0x16d07
or edi, 0x113bb
pop edi
push edi
and edi, 0x1769
call 0x100237ce
add byte [ebx + 0x3e], al
cmp eax, dword [esi + 0x44]
inc eax
add esp, 4
pop edi
mov ecx, dword [ebp - 0x774]
mov dword [ebp - 0x1c08], ecx
push 0
call dword [ebp - 0x1c08]
mov dword [ebp - 0x1d24], 0xa
push ebx
push esi
add esp, 4
and ebx, 0x3d1e
xor ebx, 0xa78c
xor ebx, 0xf5df
pop ebx
push edi
xor edi, 0xd0c
and edi, 0x11a5
or edi, 0x11589
xor edi, 0x1115c
pop edi
mov edx, dword [ebp - 0x390]
mov al, byte [edx + 0xa]
mov byte [ebp - 0x3a5], al
mov ecx, dword [ebp - 0xa48]
sub ecx, dword [ebp - 0x390]
mov dword [ebp - 0x157c], ecx
mov dword [ebp - 0xc6c], 0
push edx
or edx, 0xe745
jmp 0x10023859
sub edx, 0xf385
add edx, 0x12adf
pop edx
push edi
or edi, 0x82e2
pop edi
push eax
push ecx
add esp, 4
sub eax, 0x13057
jmp 0x1002387e
pop eax
mov byte [ebp - 0x974], 0x56
mov byte [ebp - 0x973], 0x69
mov byte [ebp - 0x972], 0x72
mov byte [ebp - 0x971], 0x74
mov byte [ebp - 0x970], 0x75
mov byte [ebp - 0x96f], 0x61
mov byte [ebp - 0x96e], 0x6c
mov byte [ebp - 0x96d], 0x50
mov byte [ebp - 0x96c], 0x72
mov byte [ebp - 0x96b], 0x6f
mov byte [ebp - 0x96a], 0x74
mov byte [ebp - 0x969], 0x65
mov byte [ebp - 0x968], 0x63
mov byte [ebp - 0x967], 0x74
mov byte [ebp - 0x966], 0
push edx
push ecx
add esp, 4
call 0x100238fc
add byte [ebp + 0x34], al
cmp al, 0x35
inc ebp
xor dl, byte [eax + 0x3a]
xor eax, dword [ebx - 0x3d7efb3c]
imul edi, dword [ebx], 0x84e28100
fiadd word [eax]
add byte [ecx + 0x27bdc2], al
add byte [edx + 0x51], bl
xor ecx, 0x14d3c
pop ecx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1c0c], edx
mov eax, dword [ebp - 0x1c0c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1c10], ecx
mov edx, dword [ebp - 0x1c10]
mov dword [ebp - 0x1540], edx
push ebx
push ebx
add esp, 4
or ebx, 0xd6c8
call 0x1002395d
add byte [esi], bh
dec eax
dec eax
cmp dl, byte [eax + 0x48]
dec eax
inc ecx
cmp dword [0x5b04c483], edi
push ecx
push ebx
add esp, 4
jmp 0x1002396d
jmp 0x10023973
pop ecx
cmp dword [ebp - 0x1540], 0
jne 0x1002398c
mov dword [ebp - 0x2a4], 0
jmp 0x10023c33
mov eax, dword [ebp - 0x1540]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc48], edx
push esi
push ebx
add esp, 4
and esi, 0x179d2
xor esi, 0x1bed
or esi, 0x15831
pop esi
push edx
call 0x100239c6
add byte [ecx], bh
aaa
cmp eax, 0x3e49434e
inc edx
dec esp
add esp, 4
or edx, 0x17437
pop edx
cmp dword [ebp - 0xc48], 0
jne 0x100239e8
mov dword [ebp - 0x2a4], 0
jmp 0x10023c33
mov eax, dword [ebp - 0xc48]
mov dword [ebp - 0x4cc], eax
push eax
call 0x10023a05
add byte [ebp + 0x3e], al
cmp dword [edx], esi
inc eax
inc edi
cmp ecx, dword ss:[ebx + eax*4 - 0x3c]
add al, 0x81
invalid
push edx
or edx, 0x154fb
add edx, 0xa719
or edx, 0x5b58
and edx, 0xd418
pop edx
push edx
push ebx
add esp, 4
sub edx, 0x13094
add edx, 0x4936
or edx, 0x180b2
pop edx
cmp dword [ebp - 0x2a4], 0
jne 0x10024569
mov edx, 0x6b
mov word [ebp - 0x1654], dx
mov eax, 0x65
mov word [ebp - 0x1652], ax
mov ecx, 0x72
mov word [ebp - 0x1650], cx
mov edx, 0x6e
mov word [ebp - 0x164e], dx
mov eax, 0x65
mov word [ebp - 0x164c], ax
mov ecx, 0x6c
mov word [ebp - 0x164a], cx
mov edx, 0x33
mov word [ebp - 0x1648], dx
mov eax, 0x32
mov word [ebp - 0x1646], ax
mov ecx, 0x2e
mov word [ebp - 0x1644], cx
mov edx, 0x64
mov word [ebp - 0x1642], dx
mov eax, 0x6c
mov word [ebp - 0x1640], ax
mov ecx, 0x6c
mov word [ebp - 0x163e], cx
xor edx, edx
mov word [ebp - 0x163c], dx
push edx
push eax
add esp, 4
call 0x10023d1e
add byte [esi + 0x40], cl
dec edx
dec ecx
inc ecx
aaa
inc ecx
dec edx
add esp, 4
and edx, 0x6617
add edx, 0xdcfd
call 0x10023d39
add byte [esi], dh
push eax
dec esp
inc edx
xor al, 0x3f
add esp, 4
pop edx
mov byte [ebp - 0x85c], 0x4c
mov byte [ebp - 0x85b], 0x6f
mov byte [ebp - 0x85a], 0x61
mov byte [ebp - 0x859], 0x64
mov byte [ebp - 0x858], 0x4c
mov byte [ebp - 0x857], 0x69
mov byte [ebp - 0x856], 0x62
mov byte [ebp - 0x855], 0x72
mov byte [ebp - 0x854], 0x61
mov byte [ebp - 0x853], 0x72
mov byte [ebp - 0x852], 0x79
mov byte [ebp - 0x851], 0x57
mov byte [ebp - 0x850], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c14], eax
mov ecx, dword [ebp - 0x1c14]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1c18], edx
mov eax, dword [ebp - 0x1c18]
mov dword [ebp - 0x154c], eax
push ecx
push edx
add esp, 4
and ecx, 0x461f
pop ecx
push ecx
xor ecx, 0x6d15
pop ecx
push ebx
push esi
add esp, 4
sub ebx, 0x12da9
or ebx, 0x1032e
add ebx, 0x7662
and ebx, 0x14d6b
pop ebx
cmp dword [ebp - 0x154c], 0
jne 0x10023e09
mov dword [ebp - 0x74c], 0
jmp 0x100240b0
mov ecx, dword [ebp - 0x154c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc54], eax
push edx
and edx, 0x3774
and edx, 0xeebb
and edx, 0x320c
pop edx
push esi
push edi
add esp, 4
or esi, 0x4cb6
pop esi
push ecx
push esi
add esp, 4
add ecx, 0xab17
add ecx, 0x1737b
pop ecx
cmp dword [ebp - 0xc54], 0
jne 0x10023e65
mov dword [ebp - 0x74c], 0
jmp 0x100240b0
mov ecx, dword [ebp - 0xc54]
mov dword [ebp - 0x4d0], ecx
push ecx
push edi
add esp, 4
or ecx, 0x162a4
add ecx, 0x10132
pop ecx
push eax
push ecx
add esp, 4
xor eax, 0xe5b1
jmp 0x10023e96
jmp 0x10023e9d
jmp 0x10023ea2
pop eax
lea edx, [ebp - 0x1654]
mov dword [ebp - 0xc50], edx
mov eax, dword [ebp - 0x4d0]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc4c], ecx
xor edx, edx
mov word [ebp - 0x1bc], dx
xor eax, eax
mov word [ebp - 0x30], ax
push ecx
sub ecx, 0xf07d
add ecx, 0xd635
jmp 0x10023edf
pop ecx
push ebx
jmp 0x10023ee6
or ebx, 0x16c90
pop ebx
push edx
push edi
add esp, 4
or edx, 0x108f
and edx, 0x14659
pop edx
mov ecx, dword [ebp - 0xc4c]
mov dx, word [ecx]
mov word [ebp - 0xfc6], dx
mov eax, dword [ebp - 0xc4c]
add eax, 2
mov dword [ebp - 0xc4c], eax
mov cx, word [ebp - 0xfc6]
mov word [ebp - 0x1bc], cx
mov edx, dword [ebp - 0xc50]
mov ax, word [edx]
mov word [ebp - 0xfc8], ax
mov ecx, dword [ebp - 0xc50]
add ecx, 2
mov dword [ebp - 0xc50], ecx
mov dx, word [ebp - 0xfc8]
mov word [ebp - 0x30], dx
push edx
and edx, 0x5636
xor edx, 0x71aa
jmp 0x10023f68
pop edx
push esi
xor esi, 0x2c79
pop esi
push esi
push ebx
add esp, 4
jmp 0x10023f7b
add esi, 0xc9b6
sub esi, 0x1ffd
pop esi
movzx eax, word [ebp - 0x30]
test eax, eax
jne 0x10023fa5
movzx ecx, word [ebp - 0x1bc]
movzx edx, word [ebp - 0x30]
sub ecx, edx
mov dword [ebp - 0x1554], ecx
jmp 0x10023fff
movzx eax, word [ebp - 0x1bc]
movzx ecx, word [ebp - 0x30]
cmp eax, ecx
je 0x10023ecd
movzx edx, word [ebp - 0x1bc]
xor edx, 0x20
movzx eax, word [ebp - 0x30]
cmp edx, eax
je 0x10023ecd
movzx ecx, word [ebp - 0x1bc]
movzx edx, word [ebp - 0x30]
cmp ecx, edx
jge 0x10023fe9
mov dword [ebp - 0x1550], 0xffffffff
jmp 0x10023ff3
mov dword [ebp - 0x1550], 1
mov eax, dword [ebp - 0x1550]
mov dword [ebp - 0x1554], eax
cmp dword [ebp - 0x1554], 0
jne 0x10024048
push eax
sub eax, 0x11dd9
or eax, 0x7305
or eax, 0x6b8e
or eax, 0xf5ff
pop eax
push ecx
jmp 0x10024029
call 0x10024036
add byte [edi + esi + 0x44], cl
xor edi, dword [0xc4834332]
add al, 0x59
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0x74c], ecx
jmp 0x100240b0
push edi
push eax
add esp, 4
xor edi, 0x110cc
add edi, 0xc110
pop edi
push eax
push edi
add esp, 4
or eax, 0x10d62
add eax, 0xcf5b
pop eax
push ecx
add ecx, 0xe7f0
or ecx, 0x1513a
pop ecx
mov edx, dword [ebp - 0x4d0]
mov eax, dword [edx]
mov dword [ebp - 0x4d0], eax
mov ecx, dword [ebp - 0x4d0]
cmp ecx, dword [ebp - 0xc54]
je 0x100240a6
mov edx, dword [ebp - 0x4d0]
cmp dword [edx + 0x30], 0
jne 0x10023e71
mov dword [ebp - 0x74c], 0
push ecx
add ecx, 0x2d0e
or ecx, 0x25b9
add ecx, 0xb29d
pop ecx
push esi
call 0x100240d2
add byte [eax + 0x35], dl
dec eax
cmp byte [ebx + 0x49], al
add esp, 4
add esi, 0x4a26
add esi, 0x9ce1
pop esi
cmp dword [ebp - 0x74c], 0
jne 0x1002412c
push ecx
push ecx
add esp, 4
call 0x100240fd
add byte [eax], bh
xor al, 0x3b
dec edi
dec ebp
add esp, 4
add ecx, 0xe485
call 0x10024113
add byte [eax + ecx*2], dh
inc eax
dec eax
dec edi
inc eax
inc ebx
add esp, 4
or ecx, 0x19c1
pop ecx
mov dword [ebp - 0xa44], 0
jmp 0x10024c53
push ebx
push eax
add esp, 4
xor ebx, 0xd7d5
pop ebx
push esi
call 0x10024145
add byte [0x42363d43], dh
push eax
add esp, 4
call 0x10024154
add byte [ebp + ecx*2 + 0x39], cl
xor ecx, dword [edx + 0x3e]
add esp, 4
or esi, 0x180f7
pop esi
mov eax, dword [ebp - 0x74c]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x31c], ecx
mov dword [ebp - 0x75c], 0
mov edx, dword [ebp - 0x31c]
mov dword [ebp - 0x1558], edx
cmp dword [ebp - 0x1558], 0
jne 0x1002419d
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x394], eax
jmp 0x1002448e
mov ecx, dword [ebp - 0x1558]
mov edx, dword [ebp - 0x31c]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x155c], edx
jne 0x100241c5
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x394], eax
jmp 0x1002448e
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x155c]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1560], ecx
cmp dword [ebp - 0x1560], 0
jne 0x100241f7
mov edx, dword [ebp - 0x75c]
mov dword [ebp - 0x394], edx
jmp 0x1002448e
mov eax, dword [ebp - 0x31c]
add eax, dword [ebp - 0x1560]
mov dword [ebp - 0x6d0], eax
jne 0x1002421c
mov ecx, dword [ebp - 0x75c]
mov dword [ebp - 0x394], ecx
jmp 0x1002448e
mov edx, dword [ebp - 0x6d0]
mov eax, dword [ebp - 0x31c]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1c1c], eax
mov ecx, dword [ebp - 0x6d0]
mov edx, dword [ebp - 0x31c]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1c20], edx
mov eax, dword [ebp - 0x6d0]
mov ecx, dword [ebp - 0x31c]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x1c24], ecx
mov dword [ebp - 0x754], 0
jmp 0x10024276
mov edx, dword [ebp - 0x754]
add edx, 1
mov dword [ebp - 0x754], edx
mov eax, dword [ebp - 0x6d0]
mov ecx, dword [ebp - 0x754]
cmp ecx, dword [eax + 0x18]
jae 0x10024482
mov edx, dword [ebp - 0x754]
mov eax, dword [ebp - 0x1c1c]
mov ecx, dword [ebp - 0x31c]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x758], ecx
mov edx, dword [ebp - 0x754]
mov eax, dword [ebp - 0x1c20]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1c24]
mov eax, dword [ebp - 0x31c]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1c28], eax
mov dword [ebp - 0x158], 0
jmp 0x100242e6
mov ecx, dword [ebp - 0x158]
add ecx, 1
mov dword [ebp - 0x158], ecx
mov edx, dword [ebp - 0x758]
add edx, dword [ebp - 0x158]
movsx eax, byte [edx]
test eax, eax
je 0x10024398
mov ecx, dword [ebp - 0x158]
movsx edx, byte [ebp + ecx - 0x85c]
test edx, edx
je 0x10024398
push ebx
push esi
add esp, 4
sub ebx, 0x9085
and ebx, 0x11a50
call 0x10024331
add byte [esi + 0x3b], al
dec edx
dec ecx
inc ecx
inc esi
aas
add esp, 4
call 0x10024341
add byte [edi + 0x41], al
inc ebx
inc edi
cmp dword [edx], edi
xor eax, 0x5b04c483
mov eax, dword [ebp - 0x758]
add eax, dword [ebp - 0x158]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x158]
movsx eax, byte [ebp + edx - 0x85c]
cmp ecx, eax
je 0x1002438a
mov ecx, dword [ebp - 0x758]
add ecx, dword [ebp - 0x158]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x158]
movsx ecx, byte [ebp + eax - 0x85c]
cmp edx, ecx
jne 0x10024391
jmp 0x100242d7
jmp 0x10024398
push edi
push esi
add esp, 4
and edi, 0x10198
add edi, 0x62b1
add edi, 0x6667
add edi, 0xbc13
pop edi
push edi
xor edi, 0xb746
and edi, 0xa5bd
sub edi, 0x9773
pop edi
mov edx, dword [ebp - 0x758]
add edx, dword [ebp - 0x158]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x158]
movsx edx, byte [ebp + ecx - 0x85c]
cmp eax, edx
jne 0x100243f7
mov dword [ebp - 0xc58], 0
jmp 0x10024466
push edi
add edi, 0xd3f1
sub edi, 0x959f
pop edi
push ebx
push ebx
add esp, 4
or ebx, 0x2832
jmp 0x10024415
call 0x10024425
add byte [eax + 0x39], cl
aas
push eax
dec eax
dec ebp
dec esp
inc edi
dec ecx
add esp, 4
pop ebx
mov eax, dword [ebp - 0x758]
add eax, dword [ebp - 0x158]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x158]
movsx eax, byte [ebp + edx - 0x85c]
or eax, 0x20
cmp ecx, eax
jge 0x1002445c
mov dword [ebp - 0xc58], 0xffffffff
jmp 0x10024466
mov dword [ebp - 0xc58], 1
cmp dword [ebp - 0xc58], 0
jne 0x1002447d
mov ecx, dword [ebp - 0x1c28]
mov dword [ebp - 0x394], ecx
jmp 0x1002448e
jmp 0x10024267
mov edx, dword [ebp - 0x75c]
mov dword [ebp - 0x394], edx
cmp dword [ebp - 0x394], 0
je 0x10024569
push ecx
call 0x100244ab
add byte [0x464a3f49], dh
inc esp
inc eax
aaa
aas
add esp, 4
pop ecx
push edi
sub edi, 0xa7c9
call 0x100244c3
add byte [esi], bh
dec eax
inc ebp
aas
dec esp
xor edi, dword [edi]
add esp, 4
sub edi, 0xe766
pop edi
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x1c2c], eax
push esi
push edi
add esp, 4
or esi, 0x15f05
add esi, 0x14502
add esi, 0x17ecd
and esi, 0x12a9d
pop esi
push edx
xor edx, 0x16516
and edx, 0xe28c
add edx, 0x13b93
pop edx
mov ecx, dword [ebp - 0x1c2c]
mov dword [ebp - 0x1c30], ecx
lea edx, [ebp - 0x15cc]
push edx
call dword [ebp - 0x1c30]
test eax, eax
jne 0x10024569
push esi
push ecx
add esp, 4
sub esi, 0xa497
call 0x1002453f
add byte [ebx + edi], bh
dec esi
cmp al, 0x3e
add esp, 4
sub esi, 0xcfb
call 0x10024556
add byte [ebp + 0x4d], cl
aas
inc ebp
xor al, 0x33
xor bh, byte [0x5e04c483]
mov dword [ebp - 0xa44], 0
jmp 0x10024c53
push ebx
push esi
add esp, 4
or ebx, 0x7e69
sub ebx, 0x59da
or ebx, 0x70fe
pop ebx
push edx
xor edx, 0xe2b6
sub edx, 0x13a55
jmp 0x10024594
and edx, 0x9f22
pop edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1c38], edx
mov eax, dword [ebp - 0x1c38]
mov dword [ebp - 0x1564], eax
push edi
xor edi, 0x6b6a
add edi, 0x13504
pop edi
push ecx
and ecx, 0x6f8f
add ecx, 0x1383a
call 0x100245ea
add byte [edx + 0x48], cl
aas
dec ecx
dec edx
inc esp
inc esi
add esp, 4
or ecx, 0x12435
pop ecx
cmp dword [ebp - 0x1564], 0
jne 0x1002460c
mov dword [ebp - 0x2a4], 0
jmp 0x100248b3
mov ecx, dword [ebp - 0x1564]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc64], eax
push edi
push edx
add esp, 4
and edi, 0xf1f
xor edi, 0x1424
pop edi
push ebx
push ebx
add esp, 4
sub ebx, 0xe0e9
pop ebx
push ebx
add ebx, 0x989f
sub ebx, 0xa659
and ebx, 0x4ec0
pop ebx
cmp dword [ebp - 0xc64], 0
jne 0x10024668
mov dword [ebp - 0x2a4], 0
jmp 0x100248b3
mov ecx, dword [ebp - 0xc64]
mov dword [ebp - 0x4d4], ecx
push edi
push edx
add esp, 4
jmp 0x10024681
and edi, 0x14312
and edi, 0x562d
pop edi
push edx
push eax
add esp, 4
xor edx, 0x449b
sub edx, 0x17c5d
sub edx, 0xef12
pop edx
lea edx, [ebp - 0x15cc]
mov dword [ebp - 0xc60], edx
mov eax, dword [ebp - 0x4d4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc5c], ecx
xor edx, edx
mov word [ebp - 0x1c0], dx
xor eax, eax
mov word [ebp - 0x34], ax
push esi
push eax
add esp, 4
jmp 0x100246de
call 0x100246ea
add byte [ebp + 0x38], al
dec edi
inc ebp
xor al, 0x3b
add esp, 4
pop esi
push ebx
or ebx, 0x17383
xor ebx, 0x12147
or ebx, 0x183d7
pop ebx
mov ecx, dword [ebp - 0xc5c]
mov dx, word [ecx]
mov word [ebp - 0xfca], dx
mov eax, dword [ebp - 0xc5c]
add eax, 2
mov dword [ebp - 0xc5c], eax
mov cx, word [ebp - 0xfca]
mov word [ebp - 0x1c0], cx
mov edx, dword [ebp - 0xc60]
mov ax, word [edx]
mov word [ebp - 0xfcc], ax
mov ecx, dword [ebp - 0xc60]
add ecx, 2
mov dword [ebp - 0xc60], ecx
mov dx, word [ebp - 0xfcc]
mov word [ebp - 0x34], dx
push eax
push edi
add esp, 4
add eax, 0xc94
pop eax
push esi
and esi, 0x318a
pop esi
push edi
push ecx
add esp, 4
and edi, 0x10824
xor edi, 0x2ea5
sub edi, 0x184af
or edi, 0x5b58
pop edi
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x100247a8
movzx ecx, word [ebp - 0x1c0]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x156c], ecx
jmp 0x10024802
movzx eax, word [ebp - 0x1c0]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x100246d0
movzx edx, word [ebp - 0x1c0]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x100246d0
movzx ecx, word [ebp - 0x1c0]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x100247ec
mov dword [ebp - 0x1568], 0xffffffff
jmp 0x100247f6
mov dword [ebp - 0x1568], 1
mov eax, dword [ebp - 0x1568]
mov dword [ebp - 0x156c], eax
cmp dword [ebp - 0x156c], 0
jne 0x1002484b
push ebx
sub ebx, 0xc3eb
xor ebx, 0xce8a
xor ebx, 0x4823
sub ebx, 0xc9cd
pop ebx
push edi
push ecx
add esp, 4
or edi, 0x3f1b
pop edi
push eax
push edx
add esp, 4
sub eax, 0x8548
pop eax
mov ecx, dword [ebp - 0x4d4]
mov dword [ebp - 0x2a4], ecx
jmp 0x100248b3
push edi
push edx
add esp, 4
xor edi, 0x9235
add edi, 0x16423
add edi, 0xf979
pop edi
push esi
or esi, 0xe781
call 0x10024879
add byte [edx + 0x3f], al
dec esi
cmp byte [edx + 0x48], al
dec eax
inc ebx
dec eax
add esp, 4
pop esi
mov edx, dword [ebp - 0x4d4]
mov eax, dword [edx]
mov dword [ebp - 0x4d4], eax
mov ecx, dword [ebp - 0x4d4]
cmp ecx, dword [ebp - 0xc64]
je 0x100248a9
mov edx, dword [ebp - 0x4d4]
cmp dword [edx + 0x30], 0
jne 0x10024674
mov dword [ebp - 0x2a4], 0
push edi
or edi, 0xda05
call 0x100248c9
add byte [esi], bh
inc esp
dec esi
inc ecx
cmp dword [eax], edi
xor dh, byte [esp + ecx*2]
add esp, 4
jmp 0x100248d1
pop edi
push eax
push esi
add esp, 4
or eax, 0xd8ca
jmp 0x100248e4
pop eax
mov eax, dword [ebp - 0x2a4]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x310], ecx
push ecx
push edx
add esp, 4
sub ecx, 0x1a5b
jmp 0x10024907
pop ecx
push edi
push edx
add esp, 4
xor edi, 0xbacd
add edi, 0x17c21
sub edi, 0xaec4
xor edi, 0x7f74
pop edi
mov dword [ebp - 0x76c], 0
mov edx, dword [ebp - 0x310]
mov dword [ebp - 0x1570], edx
cmp dword [ebp - 0x1570], 0
jne 0x10024956
mov eax, dword [ebp - 0x76c]
mov dword [ebp - 0x4d8], eax
jmp 0x10024c47
mov ecx, dword [ebp - 0x1570]
mov edx, dword [ebp - 0x310]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1574], edx
jne 0x1002497e
mov eax, dword [ebp - 0x76c]
mov dword [ebp - 0x4d8], eax
jmp 0x10024c47
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1574]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1578], ecx
cmp dword [ebp - 0x1578], 0
jne 0x100249b0
mov edx, dword [ebp - 0x76c]
mov dword [ebp - 0x4d8], edx
jmp 0x10024c47
mov eax, dword [ebp - 0x310]
add eax, dword [ebp - 0x1578]
mov dword [ebp - 0x760], eax
jne 0x100249d5
mov ecx, dword [ebp - 0x76c]
mov dword [ebp - 0x4d8], ecx
jmp 0x10024c47
mov edx, dword [ebp - 0x760]
mov eax, dword [ebp - 0x310]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1c3c], eax
mov ecx, dword [ebp - 0x760]
mov edx, dword [ebp - 0x310]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1c40], edx
mov eax, dword [ebp - 0x760]
mov ecx, dword [ebp - 0x310]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x1c44], ecx
mov dword [ebp - 0x764], 0
jmp 0x10024a2f
mov edx, dword [ebp - 0x764]
add edx, 1
mov dword [ebp - 0x764], edx
mov eax, dword [ebp - 0x760]
mov ecx, dword [ebp - 0x764]
cmp ecx, dword [eax + 0x18]
jae 0x10024c3b
mov edx, dword [ebp - 0x764]
mov eax, dword [ebp - 0x1c3c]
mov ecx, dword [ebp - 0x310]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x768], ecx
mov edx, dword [ebp - 0x764]
mov eax, dword [ebp - 0x1c40]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1c44]
mov eax, dword [ebp - 0x310]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1c48], eax
mov dword [ebp - 0x15c], 0
jmp 0x10024a9f
mov ecx, dword [ebp - 0x15c]
add ecx, 1
mov dword [ebp - 0x15c], ecx
mov edx, dword [ebp - 0x768]
add edx, dword [ebp - 0x15c]
movsx eax, byte [edx]
test eax, eax
je 0x10024b51
mov ecx, dword [ebp - 0x15c]
movsx edx, byte [ebp + ecx - 0x974]
test edx, edx
je 0x10024b51
push ecx
push edx
add esp, 4
and ecx, 0x8490
or ecx, 0x945
jmp 0x10024ae5
and ecx, 0x39e1
pop ecx
push ecx
push eax
add esp, 4
sub ecx, 0x15018
add ecx, 0xcbe5
pop ecx
mov eax, dword [ebp - 0x768]
add eax, dword [ebp - 0x15c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x15c]
movsx eax, byte [ebp + edx - 0x974]
cmp ecx, eax
je 0x10024b43
mov ecx, dword [ebp - 0x768]
add ecx, dword [ebp - 0x15c]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x15c]
movsx ecx, byte [ebp + eax - 0x974]
cmp edx, ecx
jne 0x10024b4a
jmp 0x10024a90
jmp 0x10024b51
push eax
push edx
add esp, 4
and eax, 0x5ee2
call 0x10024b6a
add byte [edi], dh
aas
inc ebp
dec esp
cmp al, 0x4c
cmp al, 0x33
add esp, 4
pop eax
push ebx
push edi
add esp, 4
jmp 0x10024b7c
or ebx, 0x16e96
pop ebx
mov edx, dword [ebp - 0x768]
add edx, dword [ebp - 0x15c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x15c]
movsx edx, byte [ebp + ecx - 0x974]
cmp eax, edx
jne 0x10024bb0
mov dword [ebp - 0xc68], 0
jmp 0x10024c1f
push eax
push ebx
add esp, 4
add eax, 0x12a1f
xor eax, 0x16243
add eax, 0xbb8d
pop eax
push esi
xor esi, 0x17ce5
and esi, 0x136e1
and esi, 0x129e4
and esi, 0x14377
pop esi
mov eax, dword [ebp - 0x768]
add eax, dword [ebp - 0x15c]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x15c]
movsx eax, byte [ebp + edx - 0x974]
or eax, 0x20
cmp ecx, eax
jge 0x10024c15
mov dword [ebp - 0xc68], 0xffffffff
jmp 0x10024c1f
mov dword [ebp - 0xc68], 1
cmp dword [ebp - 0xc68], 0
jne 0x10024c36
mov ecx, dword [ebp - 0x1c48]
mov dword [ebp - 0x4d8], ecx
jmp 0x10024c47
jmp 0x10024a20
mov edx, dword [ebp - 0x76c]
mov dword [ebp - 0x4d8], edx
mov eax, dword [ebp - 0x4d8]
mov dword [ebp - 0xa44], eax
push ecx
and ecx, 0x155b1
jmp 0x10024c61
xor ecx, 0x8492
pop ecx
push eax
push edi
add esp, 4
and eax, 0xea46
call 0x10024c81
add byte [eax], bh
dec ecx
inc esp
cmp al, byte [edx + 0x34]
inc eax
add esp, 4
pop eax
mov ecx, dword [ebp - 0xa44]
mov dword [ebp - 0x1c4c], ecx
lea edx, [ebp - 0xc6c]
push edx
push 0x40
mov eax, dword [ebp - 0x157c]
push eax
mov ecx, dword [ebp - 0x390]
push ecx
call dword [ebp - 0x1c4c]
test eax, eax
jne 0x10024cf8
push ebx
xor ebx, 0x3b07
call 0x10024cc7
add byte [edi + 0x44], cl
inc esi
aas
push eax
aaa
xor eax, 0x4c48340
pop ebx
push ecx
push eax
add esp, 4
and ecx, 0x9ca7
sub ecx, 0x181
jmp 0x10024ce3
pop ecx
mov edx, dword [ebp - 0x774]
mov dword [ebp - 0x1c50], edx
push 0
call dword [ebp - 0x1c50]
mov eax, dword [ebp - 0x1c54]
mov dword [ebp - 0x770], eax
jmp 0x10024d15
mov ecx, dword [ebp - 0x770]
add ecx, 1
mov dword [ebp - 0x770], ecx
mov edx, dword [ebp - 0x770]
cmp edx, dword [ebp - 0xa48]
jae 0x10024d71
push edx
sub edx, 0x12d5e
call 0x10024d39
add byte [ebx], dh
cmp byte [esi], bh
inc eax
xor bh, byte [edx]
dec esi
cmp esi, dword [ebx]
add esp, 4
sub edx, 0x13a26
xor edx, 0xb228
pop edx
push eax
push ecx
add esp, 4
or eax, 0xc53d
pop eax
movzx eax, byte [ebp - 0x3a5]
mov ecx, dword [ebp - 0x770]
movsx edx, byte [ecx]
sub edx, eax
mov eax, dword [ebp - 0x770]
mov byte [eax], dl
jmp 0x10024d06
mov ecx, dword [ebp - 0xa44]
mov dword [ebp - 0x1c58], ecx
lea edx, [ebp - 0xc6c]
push edx
mov eax, dword [ebp - 0xc6c]
push eax
mov ecx, dword [ebp - 0x157c]
push ecx
mov edx, dword [ebp - 0x390]
push edx
call dword [ebp - 0x1c58]
test eax, eax
jne 0x10024de9
push edx
push eax
add esp, 4
add edx, 0xaad5
or edx, 0x17666
add edx, 0x4273
pop edx
push esi
call 0x10024dcb
add byte [0x463b4e37], bh
inc ecx
inc ebx
cmp al, byte [edx - 0x7d]
les eax, [ecx + eax*4]
out dx, al
das
add dword [eax], eax
pop esi
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0x1c5c], eax
push 0
call dword [ebp - 0x1c5c]
push ecx
push ecx
add esp, 4
xor ecx, 0x115e7
jmp 0x10024df9
pop ecx
push eax
push ecx
add esp, 4
sub eax, 0xb65c
jmp 0x10024e0e
add eax, 0x99b5
or eax, 0x160b
pop eax
push edx
mov ecx, 0x10101010
pop edx
push ecx
mov ecx, 0xffff06ff
pop ecx
pop esp
pop ecx
mov edx, ecx
or al, byte [edi + 0x64f16f4]
push es
xchg esp, ecx
xchg dword [ebp - 0x378f9fa], eax
loope 0x10024e4a
pop es
push es
xchg esp, esi
push ebx
mov word [esi], es
push es
pop ecx
xchg ecx, esi
inc esi
push es
push es
xchg ecx, edi
pushal
mov ebx, 0xc9870606
cmp dword [edi + eax], edx
push es
popal
int3
cmp dword [esp + 8], 0
jne case.default.0x102389a8
mov eax, dword [esp + 0xc]
cmp eax, 0xe
ja case.default.0x102389a8
jmp dword [eax*4 + 0x10238a48]
mov ecx, dword [esp + 4]
jmp fcn.10020e00
mov ecx, dword [esp + 4]
jmp fcn.10021bf0
mov ecx, dword [esp + 4]
jmp fcn.10021490
mov ecx, dword [esp + 4]
jmp 0x10021380
mov ecx, dword [esp + 4]
jmp fcn.10022300
mov ecx, dword [esp + 4]
jmp 0x10020c00
mov ecx, dword [esp + 4]
jmp 0x100221e0
mov ecx, dword [esp + 4]
jmp fcn.10021b30
mov ecx, dword [esp + 4]
jmp fcn.10021b60
mov ecx, dword [esp + 4]
jmp 0x10021b90
mov ecx, dword [esp + 4]
jmp fcn.10021bc0
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx + 8]
push dword [eax]
mov eax, dword [ecx + 4]
mov ecx, dword [esp + 8]
push dword [eax]
call fcn.10021980
ret
mov ecx, dword [esp + 4]
jmp 0x10020f70
mov ecx, dword [esp + 4]
jmp fcn.100220d0
mov ecx, dword [esp + 4]
jmp 0x10020950