Function at 0x100ae9f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x2b8a05e
mov eax, dword fs:[0]
push eax
mov eax, 0x1d28
call fcn.100cdc10
mov eax, dword [0x2bb76d0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x16a4], 0
mov ax, word [0x2b90080]
mov word [ebp - 0x214], ax
push 0xfe
push 0
lea ecx, [ebp - 0x212]
push ecx
call fcn.100cdc40
add esp, 0xc
mov dx, word [0x2b90080]
mov word [ebp - 0x114], dx
push 0xfe
push 0
lea eax, [ebp - 0x112]
push eax
call fcn.100cdc40
add esp, 0xc
mov ecx, dword [ebp + 0xc]
cmp dword [ecx], 0
jne 0x100aeaa5
push 0x2b947bc
lea edx, [ebp - 0x214]
push edx
call fcn.100cdd50
add esp, 8
push 0x2b947a8
lea eax, [ebp - 0x114]
push eax
call fcn.100cdd50
add esp, 8
jmp 0x100aeba3
mov ecx, dword [ebp + 0xc]
cmp dword [ecx], 1
jne 0x100aeada
push 0x2b9479c
lea edx, [ebp - 0x214]
push edx
call fcn.100cdd50
add esp, 8
push 0x2b94788
lea eax, [ebp - 0x114]
push eax
call fcn.100cdd50
add esp, 8
jmp 0x100aeba3
mov ecx, dword [ebp + 0xc]
cmp dword [ecx], 2
jne 0x100aeb0f
push 0x2b94770
lea edx, [ebp - 0x214]
push edx
call fcn.100cdd50
add esp, 8
push 0x2b947a8
lea eax, [ebp - 0x114]
push eax
call fcn.100cdd50
add esp, 8
jmp 0x100aeba3
mov ecx, dword [ebp + 0xc]
cmp dword [ecx], 3
jne 0x100aeb41
push 0x2b94760
lea edx, [ebp - 0x214]
push edx
call fcn.100cdd50
add esp, 8
push 0x2b94748
lea eax, [ebp - 0x114]
push eax
call fcn.100cdd50
add esp, 8
jmp 0x100aeba3
mov ecx, dword [ebp + 0xc]
cmp dword [ecx], 4
jne 0x100aeb73
push 0x2b94738
lea edx, [ebp - 0x214]
push edx
call fcn.100cdd50
add esp, 8
push 0x2b94720
lea eax, [ebp - 0x114]
push eax
call fcn.100cdd50
add esp, 8
jmp 0x100aeba3
mov ecx, dword [ebp + 0xc]
cmp dword [ecx], 5
jne 0x100aeba3
push 0x2b94710
lea edx, [ebp - 0x214]
push edx
call fcn.100cdd50
add esp, 8
push 0x2b946f8
lea eax, [ebp - 0x114]
push eax
call fcn.100cdd50
add esp, 8
lea ecx, [ebp - 0x16ad]
mov dword [ebp - 0x16ac], ecx
push 0
push 0
lea ecx, [ebp - 0x338]
call fcn.1001d850
mov dword [ebp - 4], 1
push 0x2b946d0
call fcn.100cdcc0
add esp, 4
mov dword [ebp - 0x16b4], eax
mov edx, dword [ebp - 0x16b4]
push edx
push 0x2b946d0
lea ecx, [ebp - 0x338]
call fcn.10034f70
push 0x2b94680
call fcn.100cdcc0
add esp, 4
mov dword [ebp - 0x16b8], eax
mov eax, dword [ebp - 0x16b8]
push eax
push 0x2b94680
lea ecx, [ebp - 0x338]
call fcn.10034f70
push 0x2b94650
call fcn.100cdcc0
add esp, 4
mov dword [ebp - 0x16bc], eax
mov ecx, dword [ebp - 0x16bc]
push ecx
push 0x2b94650
lea ecx, [ebp - 0x338]
call fcn.10034f70
push 0x2b94618
call fcn.100cdcc0
add esp, 4
mov dword [ebp - 0x16c0], eax
mov edx, dword [ebp - 0x16c0]
push edx
push 0x2b94618
lea ecx, [ebp - 0x338]
call fcn.10034f70
push 0x2b94608
call fcn.100cdcc0
add esp, 4
mov dword [ebp - 0x16c4], eax
mov eax, dword [ebp - 0x16c4]
push eax
push 0x2b94608
lea ecx, [ebp - 0x338]
call fcn.10034f70
push 0x2b945b8
lea ecx, [ebp - 0x3e0]
call fcn.10027840
mov dword [ebp - 0x1c70], eax
mov ecx, dword [ebp - 0x1c70]
mov dword [ebp - 0x16c8], ecx
mov byte [ebp - 4], 2
lea edx, [ebp - 0x214]
push edx
mov eax, dword [ebp - 0x16c8]
push eax
call fcn.100b5600
add esp, 8
mov dword [ebp - 0x16cc], eax
mov ecx, dword [ebp - 0x16cc]
push ecx
lea edx, [ebp - 0x3fc]
push edx
call fcn.100279d0
add esp, 8
mov dword [ebp - 0x1c74], eax
mov eax, dword [ebp - 0x1c74]
mov dword [ebp - 0x16d0], eax
mov byte [ebp - 4], 3
mov ecx, dword [0x2b8fd08]
push ecx
push 0
mov edx, dword [ebp - 0x16d0]
push edx
lea ecx, [ebp - 0x338]
call fcn.10034e20
mov byte [ebp - 4], 2
push 0
push 1
lea ecx, [ebp - 0x3fc]
call fcn.1001d850
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3e0]
call fcn.10021370
push 0x2b94568
call fcn.100cdcc0
add esp, 4
mov dword [ebp - 0x16dc], eax
mov eax, dword [ebp - 0x16dc]
push eax
push 0x2b94568
lea ecx, [ebp - 0x338]
call fcn.10034f70
push 0x2b9454c
lea ecx, [ebp - 0x4a4]
call fcn.10027840
mov dword [ebp - 0x1c78], eax
mov ecx, dword [ebp - 0x1c78]
mov dword [ebp - 0x16e0], ecx
mov byte [ebp - 4], 4
lea edx, [ebp - 0x114]
push edx
mov eax, dword [ebp - 0x16e0]
push eax
call fcn.100b5600
add esp, 8
mov dword [ebp - 0x16e4], eax
mov ecx, dword [ebp - 0x16e4]
push ecx
lea edx, [ebp - 0x4c0]
push edx
call fcn.100279d0
add esp, 8
mov dword [ebp - 0x1c7c], eax
mov eax, dword [ebp - 0x1c7c]
mov dword [ebp - 0x16e8], eax
mov byte [ebp - 4], 5
mov ecx, dword [0x2b8fd08]
push ecx
push 0
mov edx, dword [ebp - 0x16e8]
push edx
lea ecx, [ebp - 0x338]
call fcn.10034e20
mov byte [ebp - 4], 4
push 0
push 1
lea ecx, [ebp - 0x4c0]
call fcn.1001d850
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4a4]
call fcn.10021370
push 0x2b9453c
lea ecx, [ebp - 0x568]
call fcn.10027840
mov dword [ebp - 0x1c80], eax
mov eax, dword [ebp - 0x1c80]
mov dword [ebp - 0x16f4], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x214]
push ecx
mov edx, dword [ebp - 0x16f4]
push edx
call fcn.100b5600
add esp, 8
mov dword [ebp - 0x16f8], eax
mov eax, dword [ebp - 0x16f8]
push eax
lea ecx, [ebp - 0x584]
push ecx
call fcn.100279d0
add esp, 8
mov dword [ebp - 0x1c84], eax
mov edx, dword [ebp - 0x1c84]
mov dword [ebp - 0x16fc], edx
mov byte [ebp - 4], 7
mov eax, dword [0x2b8fd08]
push eax
push 0
mov ecx, dword [ebp - 0x16fc]
push ecx
lea ecx, [ebp - 0x338]
call fcn.10034e20
mov byte [ebp - 4], 6
push 0
push 1
lea ecx, [ebp - 0x584]
call fcn.1001d850
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x568]
call fcn.10021370
push 0x2b94514
call fcn.100cdcc0
add esp, 4
mov dword [ebp - 0x1708], eax
mov edx, dword [ebp - 0x1708]
push edx
push 0x2b94514
lea ecx, [ebp - 0x338]
call fcn.10034f70
push 0x2b944d0
call fcn.100cdcc0
add esp, 4
mov dword [ebp - 0x170c], eax
mov eax, dword [ebp - 0x170c]
push eax
push 0x2b944d0
lea ecx, [ebp - 0x338]
call fcn.10034f70
push 0x2b94480
lea ecx, [ebp - 0x62c]
call fcn.10027840
mov dword [ebp - 0x1c88], eax
mov ecx, dword [ebp - 0x1c88]
mov dword [ebp - 0x1710], ecx
mov byte [ebp - 4], 8
lea edx, [ebp - 0x114]
push edx
mov eax, dword [ebp - 0x1710]
push eax
call fcn.100b5600
add esp, 8
mov dword [ebp - 0x1714], eax
mov ecx, dword [ebp - 0x1714]
push ecx
lea edx, [ebp - 0x648]
push edx
call fcn.100279d0
add esp, 8
mov dword [ebp - 0x1c8c], eax
mov eax, dword [ebp - 0x1c8c]
mov dword [ebp - 0x1718], eax
mov byte [ebp - 4], 9
mov ecx, dword [0x2b8fd08]
push ecx
push 0
mov edx, dword [ebp - 0x1718]
push edx
lea ecx, [ebp - 0x338]
call fcn.10034e20
mov byte [ebp - 4], 8
push 0
push 1
lea ecx, [ebp - 0x648]
call fcn.1001d850
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x62c]
call fcn.10021370
push 0x2b94438
call fcn.100cdcc0
add esp, 4
mov dword [ebp - 0x1724], eax
mov eax, dword [ebp - 0x1724]
push eax
push 0x2b94438
lea ecx, [ebp - 0x338]
call fcn.10034f70
mov ecx, dword [ebp + 0xc]
cmp dword [ecx], 1
jne 0x100af154
push 0x2b94408
lea ecx, [ebp - 0x6f0]
call fcn.10027840
mov dword [ebp - 0x1c90], eax
mov edx, dword [ebp - 0x1c90]
mov dword [ebp - 0x1728], edx
mov byte [ebp - 4], 0xa
mov eax, dword [ebp + 0xc]
add eax, 0x7c
push eax
mov ecx, dword [ebp - 0x1728]
push ecx
call fcn.100b56b0
add esp, 8
mov dword [ebp - 0x172c], eax
mov edx, dword [ebp - 0x172c]
push edx
lea eax, [ebp - 0x70c]
push eax
call fcn.100279d0
add esp, 8
mov dword [ebp - 0x1c94], eax
mov ecx, dword [ebp - 0x1c94]
mov dword [ebp - 0x1730], ecx
mov byte [ebp - 4], 0xb
mov edx, dword [0x2b8fd08]
push edx
push 0
mov eax, dword [ebp - 0x1730]
push eax
lea ecx, [ebp - 0x338]
call fcn.10034e20
mov byte [ebp - 4], 0xa
push 0
push 1
lea ecx, [ebp - 0x70c]
call fcn.1001d850
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6f0]
call fcn.10021370
push 0x2b943d4
lea ecx, [ebp - 0x7b4]
call fcn.10027840
mov dword [ebp - 0x1c98], eax
mov ecx, dword [ebp - 0x1c98]
mov dword [ebp - 0x173c], ecx
mov byte [ebp - 4], 0xc
mov edx, dword [ebp + 0xc]
add edx, 0x98
push edx
mov eax, dword [ebp - 0x173c]
push eax
call fcn.100b56b0
add esp, 8
mov dword [ebp - 0x1740], eax
mov ecx, dword [ebp - 0x1740]
push ecx
lea edx, [ebp - 0x7d0]
push edx
call fcn.100279d0
add esp, 8
mov dword [ebp - 0x1c9c], eax
mov eax, dword [ebp - 0x1c9c]
mov dword [ebp - 0x1744], eax
mov byte [ebp - 4], 0xd
mov ecx, dword [0x2b8fd08]
push ecx
push 0
mov edx, dword [ebp - 0x1744]
push edx
lea ecx, [ebp - 0x338]
call fcn.10034e20
mov byte [ebp - 4], 0xc
push 0
push 1
lea ecx, [ebp - 0x7d0]
call fcn.1001d850
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x7b4]
call fcn.10021370
jmp 0x100af889
mov eax, dword [ebp + 0xc]
cmp dword [eax], 3
jne 0x100af382
push 0x2b94398
lea ecx, [ebp - 0x878]
call fcn.10027840
mov dword [ebp - 0x1ca0], eax
mov ecx, dword [ebp - 0x1ca0]
mov dword [ebp - 0x1750], ecx
mov byte [ebp - 4], 0xe
mov edx, dword [ebp + 0xc]
add edx, 0x124
push edx
mov eax, dword [ebp - 0x1750]
push eax
call fcn.100b56b0
add esp, 8
mov dword [ebp - 0x1754], eax
mov ecx, dword [ebp - 0x1754]
push ecx
lea edx, [ebp - 0x894]
push edx
call fcn.100279d0
add esp, 8
mov dword [ebp - 0x1ca4], eax
mov eax, dword [ebp - 0x1ca4]
mov dword [ebp - 0x1758], eax
mov byte [ebp - 4], 0xf
mov ecx, dword [0x2b8fd08]
push ecx
push 0
mov edx, dword [ebp - 0x1758]
push edx
lea ecx, [ebp - 0x338]
call fcn.10034e20
mov byte [ebp - 4], 0xe
push 0
push 1
lea ecx, [ebp - 0x894]
call fcn.1001d850
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x878]
call fcn.10021370
push 0x2b94370
lea ecx, [ebp - 0x93c]
call fcn.10027840
mov dword [ebp - 0x1ca8], eax
mov eax, dword [ebp - 0x1ca8]
mov dword [ebp - 0x1764], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp + 0xc]
add ecx, 0x140
push ecx
mov edx, dword [ebp - 0x1764]
push edx
call fcn.100b56b0
add esp, 8
mov dword [ebp - 0x1768], eax
mov eax, dword [ebp - 0x1768]
push eax
lea ecx, [ebp - 0x958]
push ecx
call fcn.100279d0
add esp, 8
mov dword [ebp - 0x1cac], eax
mov edx, dword [ebp - 0x1cac]
mov dword [ebp - 0x176c], edx
mov byte [ebp - 4], 0x11
mov eax, dword [0x2b8fd08]
push eax
push 0
mov ecx, dword [ebp - 0x176c]
push ecx
lea ecx, [ebp - 0x338]
call fcn.10034e20
mov byte [ebp - 4], 0x10
push 0
push 1
lea ecx, [ebp - 0x958]
call fcn.1001d850
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x93c]
call fcn.10021370
push 0x2bbb1b8
call fcn.100cdcc0
add esp, 4
test eax, eax
je 0x100af37d
push 0x2b94334
lea ecx, [ebp - 0xa00]
call fcn.10027840
mov dword [ebp - 0x1cb0], eax
mov edx, dword [ebp - 0x1cb0]
mov dword [ebp - 0x1778], edx
mov byte [ebp - 4], 0x12
mov eax, dword [ebp + 0xc]
add eax, 0x1cc
push eax
mov ecx, dword [ebp - 0x1778]
push ecx
call fcn.100b56b0
add esp, 8
mov dword [ebp - 0x177c], eax
mov edx, dword [ebp - 0x177c]
push edx
lea eax, [ebp - 0xa1c]
push eax
call fcn.100279d0
add esp, 8
mov dword [ebp - 0x1cb4], eax
mov ecx, dword [ebp - 0x1cb4]
mov dword [ebp - 0x1780], ecx
mov byte [ebp - 4], 0x13
mov edx, dword [0x2b8fd08]
push edx
push 0
mov eax, dword [ebp - 0x1780]
push eax
lea ecx, [ebp - 0x338]
call fcn.10034e20
mov byte [ebp - 4], 0x12
push 0
push 1
lea ecx, [ebp - 0xa1c]
call fcn.1001d850
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xa00]
call fcn.10021370
jmp 0x100af889
mov ecx, dword [ebp + 0xc]
cmp dword [ecx], 4
jne 0x100af614
push 0x2b942f8
call fcn.100cdcc0
add esp, 4
mov dword [ebp - 0x178c], eax
mov edx, dword [ebp - 0x178c]
push edx
push 0x2b942f8
lea ecx, [ebp - 0x338]
call fcn.10034f70
push 0x2b942c0
lea ecx, [ebp - 0xac4]
call fcn.10027840
mov dword [ebp - 0x1cb8], eax
mov eax, dword [ebp - 0x1cb8]
mov dword [ebp - 0x1790], eax
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp + 0xc]
add ecx, 0x178
push ecx
mov edx, dword [ebp - 0x1790]
push edx
call fcn.100b56b0
add esp, 8
mov dword [ebp - 0x1794], eax
mov eax, dword [ebp - 0x1794]
push eax
lea ecx, [ebp - 0xae0]
push ecx
call fcn.100279d0
add esp, 8
mov dword [ebp - 0x1cbc], eax
mov edx, dword [ebp - 0x1cbc]
mov dword [ebp - 0x1798], edx
mov byte [ebp - 4], 0x15
mov eax, dword [0x2b8fd08]
push eax
push 0
mov ecx, dword [ebp - 0x1798]
push ecx
lea ecx, [ebp - 0x338]
call fcn.10034e20
mov byte [ebp - 4], 0x14
push 0
push 1
lea ecx, [ebp - 0xae0]
call fcn.1001d850
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xac4]
call fcn.10021370
push 0x2b9428c
lea ecx, [ebp - 0xb88]
call fcn.10027840
mov dword [ebp - 0x1cc0], eax
mov edx, dword [ebp - 0x1cc0]
mov dword [ebp - 0x17a4], edx
mov byte [ebp - 4], 0x16
mov eax, dword [ebp + 0xc]
add eax, 0x194
push eax
mov ecx, dword [ebp - 0x17a4]
push ecx
call fcn.100b56b0
add esp, 8
mov dword [ebp - 0x17a8], eax
mov edx, dword [ebp - 0x17a8]
push edx
lea eax, [ebp - 0xba4]
push eax
call fcn.100279d0
add esp, 8
mov dword [ebp - 0x1cc4], eax
mov ecx, dword [ebp - 0x1cc4]
mov dword [ebp - 0x17ac], ecx
mov byte [ebp - 4], 0x17
mov edx, dword [0x2b8fd08]
push edx
push 0
mov eax, dword [ebp - 0x17ac]
push eax
lea ecx, [ebp - 0x338]
call fcn.10034e20
mov byte [ebp - 4], 0x16
push 0
push 1
lea ecx, [ebp - 0xba4]
call fcn.1001d850
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xb88]
call fcn.10021370
mov ecx, dword [0x2bbb798]
mov dword [ebp - 0x17b8], ecx
mov edx, dword [ebp - 0x17b8]
mov al, byte [edx + 0x578]
mov byte [ebp - 0x17b9], al
movzx ecx, byte [ebp - 0x17b9]
test ecx, ecx
je 0x100af60f
mov edx, dword [0x2bbb798]
mov dword [ebp - 0x17c0], edx
mov ecx, dword [ebp - 0x17c0]
call fcn.1000d7a0
movzx eax, al
test eax, eax
jne 0x100af60f
push 0x2b94370
lea ecx, [ebp - 0xc4c]
call fcn.10027840
mov dword [ebp - 0x1cc8], eax
mov ecx, dword [ebp - 0x1cc8]
mov dword [ebp - 0x17c4], ecx
mov byte [ebp - 4], 0x18
mov edx, dword [ebp + 0xc]
add edx, 0x140
push edx
mov eax, dword [ebp - 0x17c4]
push eax
call fcn.100b56b0
add esp, 8
mov dword [ebp - 0x17c8], eax
mov ecx, dword [ebp - 0x17c8]
push ecx
lea edx, [ebp - 0xc68]
push edx
call fcn.100279d0
add esp, 8
mov dword [ebp - 0x1ccc], eax
mov eax, dword [ebp - 0x1ccc]
mov dword [ebp - 0x17cc], eax
mov byte [ebp - 4], 0x19
mov ecx, dword [0x2b8fd08]
push ecx
push 0
mov edx, dword [ebp - 0x17cc]
push edx
lea ecx, [ebp - 0x338]
call fcn.10034e20
mov byte [ebp - 4], 0x18
push 0
push 1
lea ecx, [ebp - 0xc68]
call fcn.1001d850
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xc4c]
call fcn.10021370
jmp 0x100af889
mov eax, dword [ebp + 0xc]
cmp dword [eax], 2
jne 0x100af722
mov ecx, dword [0x2bbb798]
mov dword [ebp - 0x17d8], ecx
mov edx, dword [ebp - 0x17d8]
mov al, byte [edx + 0x578]
mov byte [ebp - 0x17d9], al
movzx ecx, byte [ebp - 0x17d9]
test ecx, ecx
je 0x100af71d
mov edx, dword [0x2bbb798]
mov dword [ebp - 0x17e0], edx
mov ecx, dword [ebp - 0x17e0]
call fcn.1000d7a0
movzx eax, al
test eax, eax
jne 0x100af71d
push 0x2b94370
lea ecx, [ebp - 0xd10]
call fcn.10027840
mov dword [ebp - 0x1cd0], eax
mov ecx, dword [ebp - 0x1cd0]
mov dword [ebp - 0x17e4], ecx
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp + 0xc]
add edx, 0x140
push edx
mov eax, dword [ebp - 0x17e4]
push eax
call fcn.100b56b0
add esp, 8
mov dword [ebp - 0x17e8], eax
mov ecx, dword [ebp - 0x17e8]
push ecx
lea edx, [ebp - 0xd2c]
push edx
call fcn.100279d0
add esp, 8
mov dword [ebp - 0x1cd4], eax
mov eax, dword [ebp - 0x1cd4]
mov dword [ebp - 0x17ec], eax
mov byte [ebp - 4], 0x1b
mov ecx, dword [0x2b8fd08]
push ecx
push 0
mov edx, dword [ebp - 0x17ec]
push edx
lea ecx, [ebp - 0x338]
call fcn.10034e20
mov byte [ebp - 4], 0x1a
push 0
push 1
lea ecx, [ebp - 0xd2c]
call fcn.1001d850
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xd10]
call fcn.10021370
jmp 0x100af889
mov eax, dword [ebp + 0xc]
cmp dword [eax], 5
jne 0x100af889
push 0x2b94398
lea ecx, [ebp - 0xdd4]
call fcn.10027840
mov dword [ebp - 0x1cd8], eax
mov ecx, dword [ebp - 0x1cd8]
mov dword [ebp - 0x17f8], ecx
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp + 0xc]
add edx, 0x124
push edx
mov eax, dword [ebp - 0x17f8]
push eax
call fcn.100b56b0
add esp, 8
mov dword [ebp - 0x17fc], eax
mov ecx, dword [ebp - 0x17fc]
push ecx
lea edx, [ebp - 0xdf0]
push edx
call fcn.100279d0
add esp, 8
mov dword [ebp - 0x1cdc], eax
mov eax, dword [ebp - 0x1cdc]
mov dword [ebp - 0x1800], eax
mov byte [ebp - 4], 0x1d
mov ecx, dword [0x2b8fd08]
push ecx
push 0
mov edx, dword [ebp - 0x1800]
push edx
lea ecx, [ebp - 0x338]
call fcn.10034e20
mov byte [ebp - 4], 0x1c
push 0
push 1
lea ecx, [ebp - 0xdf0]
call fcn.1001d850
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xdd4]
call fcn.10021370
push 0x2b94258
lea ecx, [ebp - 0xe98]
call fcn.10027840
mov dword [ebp - 0x1ce0], eax
mov eax, dword [ebp - 0x1ce0]
mov dword [ebp - 0x180c], eax
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp + 0xc]
add ecx, 0x1b0
push ecx
mov edx, dword [ebp - 0x180c]
push edx
call fcn.100b56b0
add esp, 8
mov dword [ebp - 0x1810], eax
mov eax, dword [ebp - 0x1810]
push eax
lea ecx, [ebp - 0xeb4]
push ecx
call fcn.100279d0
add esp, 8
mov dword [ebp - 0x1ce4], eax
mov edx, dword [ebp - 0x1ce4]
mov dword [ebp - 0x1814], edx
mov byte [ebp - 4], 0x1f
mov eax, dword [0x2b8fd08]
push eax
push 0
mov ecx, dword [ebp - 0x1814]
push ecx
lea ecx, [ebp - 0x338]
call fcn.10034e20
mov byte [ebp - 4], 0x1e
push 0
push 1
lea ecx, [ebp - 0xeb4]
call fcn.1001d850
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xe98]
call fcn.10021370
mov edx, dword [ebp + 0xc]
xor eax, eax
cmp dword [edx + 0xc8], 0
sete al
movzx ecx, al
test ecx, ecx
jne 0x100af950
push 0x2b94220
lea ecx, [ebp - 0xf5c]
call fcn.10027840
mov dword [ebp - 0x1ce8], eax
mov edx, dword [ebp - 0x1ce8]
mov dword [ebp - 0x1820], edx
mov byte [ebp - 4], 0x20
mov eax, dword [ebp + 0xc]
add eax, 0xb4
push eax
mov ecx, dword [ebp - 0x1820]
push ecx
call fcn.100b56b0
add esp, 8
mov dword [ebp - 0x1824], eax
mov edx, dword [ebp - 0x1824]
push edx
lea eax, [ebp - 0xf78]
push eax
call fcn.100279d0
add esp, 8
mov dword [ebp - 0x1cec], eax
mov ecx, dword [ebp - 0x1cec]
mov dword [ebp - 0x1828], ecx
mov byte [ebp - 4], 0x21
mov edx, dword [0x2b8fd08]
push edx
push 0
mov eax, dword [ebp - 0x1828]
push eax
lea ecx, [ebp - 0x338]
call fcn.10034e20
mov byte [ebp - 4], 0x20
push 0
push 1
lea ecx, [ebp - 0xf78]
call fcn.1001d850
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xf5c]
call fcn.10021370
push 0x2b941d8
lea ecx, [ebp - 0x1020]
call fcn.10027840
mov dword [ebp - 0x1cf0], eax
mov ecx, dword [ebp - 0x1cf0]
mov dword [ebp - 0x1834], ecx
mov byte [ebp - 4], 0x22
mov edx, dword [ebp + 0xc]
add edx, 0x220
push edx
mov eax, dword [ebp - 0x1834]
push eax
call fcn.1002a1c0
add esp, 8
mov dword [ebp - 0x1838], eax
mov ecx, dword [ebp - 0x1838]
push ecx
lea edx, [ebp - 0x103c]
push edx
call fcn.100279d0
add esp, 8
mov dword [ebp - 0x1cf4], eax
mov eax, dword [ebp - 0x1cf4]
mov dword [ebp - 0x183c], eax
mov byte [ebp - 4], 0x23
mov ecx, dword [0x2b8fd08]
push ecx
push 0
mov edx, dword [ebp - 0x183c]
push edx
lea ecx, [ebp - 0x338]
call fcn.10034e20
mov byte [ebp - 4], 0x22
push 0
push 1
lea ecx, [ebp - 0x103c]
call fcn.1001d850
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1020]
call fcn.10021370
push 0x2b94190
lea ecx, [ebp - 0x10e4]
call fcn.10027840
mov dword [ebp - 0x1cf8], eax
mov eax, dword [ebp - 0x1cf8]
mov dword [ebp - 0x1848], eax
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp + 0xc]
add ecx, 0x224
push ecx
mov edx, dword [ebp - 0x1848]
push edx
call fcn.1002a1c0
add esp, 8
mov dword [ebp - 0x184c], eax
mov eax, dword [ebp - 0x184c]
push eax
lea ecx, [ebp - 0x1100]
push ecx
call fcn.100279d0
add esp, 8
mov dword [ebp - 0x1cfc], eax
mov edx, dword [ebp - 0x1cfc]
mov dword [ebp - 0x1850], edx
mov byte [ebp - 4], 0x25
mov eax, dword [0x2b8fd08]
push eax
push 0
mov ecx, dword [ebp - 0x1850]
push ecx
lea ecx, [ebp - 0x338]
call fcn.10034e20
mov byte [ebp - 4], 0x24
push 0
push 1
lea ecx, [ebp - 0x1100]
call fcn.1001d850
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10e4]
call fcn.10021370
push pe_nt_image_headers32
lea edx, [ebp - 0x314]
push edx
mov eax, dword [0x2bb7020]
push eax
call fcn.100be650
add esp, 0xc
mov dword [ebp - 0x11ac], eax
push 0x2b94158
lea ecx, [ebp - 0x11a8]
call fcn.10027840
mov dword [ebp - 0x1d00], eax
mov ecx, dword [ebp - 0x1d00]
mov dword [ebp - 0x185c], ecx
mov byte [ebp - 4], 0x26
lea edx, [ebp - 0x11ac]
push edx
mov eax, dword [ebp - 0x185c]
push eax
call fcn.1002a110
add esp, 8
mov dword [ebp - 0x1860], eax
mov ecx, dword [ebp - 0x1860]
push ecx
lea edx, [ebp - 0x11c8]
push edx
call fcn.100279d0
add esp, 8
mov dword [ebp - 0x1d04], eax
mov eax, dword [ebp - 0x1d04]
mov dword [ebp - 0x1864], eax
mov byte [ebp - 4], 0x27
mov ecx, dword [0x2b8fd08]
push ecx
push 0
mov edx, dword [ebp - 0x1864]
push edx
lea ecx, [ebp - 0x338]
call fcn.10034e20
mov byte [ebp - 4], 0x26
push 0
push 1
lea ecx, [ebp - 0x11c8]
call fcn.1001d850
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x11a8]
call fcn.10021370
push 0x2b94120
lea ecx, [ebp - 0x1270]
call fcn.10027840
mov dword [ebp - 0x1d08], eax
mov eax, dword [ebp - 0x1d08]
mov dword [ebp - 0x1874], eax
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp + 0xc]
add ecx, 0xd0
push ecx
mov edx, dword [ebp - 0x1874]
push edx
call fcn.100b56b0
add esp, 8
mov dword [ebp - 0x1878], eax
mov eax, dword [ebp - 0x1878]
push eax
lea ecx, [ebp - 0x128c]
push ecx
call fcn.100279d0
add esp, 8
mov dword [ebp - 0x1d0c], eax
mov edx, dword [ebp - 0x1d0c]
mov dword [ebp - 0x187c], edx
mov byte [ebp - 4], 0x29
mov eax, dword [0x2b8fd08]
push eax
push 0
mov ecx, dword [ebp - 0x187c]
push ecx
lea ecx, [ebp - 0x338]
call fcn.10034e20
mov byte [ebp - 4], 0x28
push 0
push 1
lea ecx, [ebp - 0x128c]
call fcn.1001d850
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1270]
call fcn.10021370
mov edx, dword [ebp + 0xc]
xor eax, eax
cmp dword [edx + 0x100], 0
sete al
movzx ecx, al
test ecx, ecx
jne 0x100afcea
push 0x2b940d8
lea ecx, [ebp - 0x1334]
call fcn.10027840
mov dword [ebp - 0x1d10], eax
mov edx, dword [ebp - 0x1d10]
mov dword [ebp - 0x188c], edx
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp + 0xc]
add eax, 0xec
push eax
mov ecx, dword [ebp - 0x188c]
push ecx
call fcn.100b56b0
add esp, 8
mov dword [ebp - 0x1890], eax
mov edx, dword [ebp - 0x1890]
push edx
lea eax, [ebp - 0x1350]
push eax
call fcn.100279d0
add esp, 8
mov dword [ebp - 0x1d14], eax
mov ecx, dword [ebp - 0x1d14]
mov dword [ebp - 0x1894], ecx
mov byte [ebp - 4], 0x2b
mov edx, dword [0x2b8fd08]
push edx
push 0
mov eax, dword [ebp - 0x1894]
push eax
lea ecx, [ebp - 0x338]
call fcn.10034e20
mov byte [ebp - 4], 0x2a
push 0
push 1
lea ecx, [ebp - 0x1350]
call fcn.1001d850
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1334]
call fcn.10021370
mov ecx, dword [ebp + 0xc]
xor edx, edx
cmp dword [ecx + 0x11c], 0
sete dl
movzx eax, dl
test eax, eax
jne 0x100afdb2
push 0x2b94098
lea ecx, [ebp - 0x13f8]
call fcn.10027840
mov dword [ebp - 0x1d18], eax
mov ecx, dword [ebp - 0x1d18]
mov dword [ebp - 0x18a4], ecx
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp + 0xc]
add edx, 0x108
push edx
mov eax, dword [ebp - 0x18a4]
push eax
call fcn.100b56b0
add esp, 8
mov dword [ebp - 0x18a8], eax
mov ecx, dword [ebp - 0x18a8]
push ecx
lea edx, [ebp - 0x1414]
push edx
call fcn.100279d0
add esp, 8
mov dword [ebp - 0x1d1c], eax
mov eax, dword [ebp - 0x1d1c]
mov dword [ebp - 0x18ac], eax
mov byte [ebp - 4], 0x2d
mov ecx, dword [0x2b8fd08]
push ecx
push 0
mov edx, dword [ebp - 0x18ac]
push edx
lea ecx, [ebp - 0x338]
call fcn.10034e20
mov byte [ebp - 4], 0x2c
push 0
push 1
lea ecx, [ebp - 0x1414]
call fcn.1001d850
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x13f8]
call fcn.10021370
mov eax, dword [ebp + 0xc]
xor ecx, ecx
cmp dword [eax + 0x170], 0
sete cl
movzx edx, cl
test edx, edx
jne 0x100afe79
push 0x2b9405c
lea ecx, [ebp - 0x14bc]
call fcn.10027840
mov dword [ebp - 0x1d20], eax
mov eax, dword [ebp - 0x1d20]
mov dword [ebp - 0x18bc], eax
mov byte [ebp - 4], 0x2e
mov ecx, dword [ebp + 0xc]
add ecx, 0x15c
push ecx
mov edx, dword [ebp - 0x18bc]
push edx
call fcn.100b56b0
add esp, 8
mov dword [ebp - 0x18c0], eax
mov eax, dword [ebp - 0x18c0]
push eax
lea ecx, [ebp - 0x14d8]
push ecx
call fcn.100279d0
add esp, 8
mov dword [ebp - 0x1d24], eax
mov edx, dword [ebp - 0x1d24]
mov dword [ebp - 0x18c4], edx
mov byte [ebp - 4], 0x2f
mov eax, dword [0x2b8fd08]
push eax
push 0
mov ecx, dword [ebp - 0x18c4]
push ecx
lea ecx, [ebp - 0x338]
call fcn.10034e20
mov byte [ebp - 4], 0x2e
push 0
push 1
lea ecx, [ebp - 0x14d8]
call fcn.1001d850
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x14bc]
call fcn.10021370
push 0x2b9404c
call fcn.100cdcc0
add esp, 4
mov dword [ebp - 0x18d4], eax
mov edx, dword [ebp - 0x18d4]
push edx
push 0x2b9404c
lea ecx, [ebp - 0x338]
call fcn.10034f70
push 0x2b94038
call fcn.100cdcc0
add esp, 4
mov dword [ebp - 0x18d8], eax
mov eax, dword [ebp - 0x18d8]
push eax
push 0x2b94038
lea ecx, [ebp - 0x338]
call fcn.10034f70
push 0x2b94020
call fcn.100cdcc0
add esp, 4
mov dword [ebp - 0x18dc], eax
mov ecx, dword [ebp - 0x18dc]
push ecx
push 0x2b94020
lea ecx, [ebp - 0x338]
call fcn.10034f70
push 0x12c
call fcn.100cdf54
add esp, 4
mov dword [ebp - 0x14e0], eax
mov byte [ebp - 4], 0x30
cmp dword [ebp - 0x14e0], 0
je 0x100affc6
push 0x2b94014
lea ecx, [ebp - 0x14fc]
call fcn.1001c3d0
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0x16a4]
or edx, 1
mov dword [ebp - 0x16a4], edx
push 0x2b94000
lea ecx, [ebp - 0x1518]
call fcn.1001c3d0
mov dword [ebp - 4], 0x32
mov eax, dword [ebp - 0x16a4]
or eax, 2
mov dword [ebp - 0x16a4], eax
lea ecx, [ebp - 0x1534]
push ecx
mov ecx, dword [ebp + 0xc]
add ecx, 4
call fcn.100c03f0
mov dword [ebp - 0x1d28], eax
mov edx, dword [ebp - 0x1d28]
mov dword [ebp - 0x1d2c], edx
mov dword [ebp - 4], 0x33
mov eax, dword [ebp - 0x16a4]
or eax, 4
mov dword [ebp - 0x16a4], eax
lea ecx, [ebp - 0x14fc]
push ecx
lea edx, [ebp - 0x1518]
push edx
mov eax, dword [ebp - 0x1d2c]
push eax
mov ecx, dword [ebp - 0x14e0]
call fcn.100c1b70
mov dword [ebp - 0x1d30], eax
jmp 0x100affd0
mov dword [ebp - 0x1d30], 0
mov ecx, dword [ebp - 0x1d30]
mov dword [ebp - 0x14dc], ecx
mov dword [ebp - 4], 0x36
mov edx, dword [ebp - 0x14dc]
mov dword [ebp - 0x31c], edx
mov eax, dword [ebp - 0x14dc]
push eax
lea ecx, [ebp - 0x318]
call fcn.100b5760
mov dword [ebp - 4], 0x37
mov ecx, dword [ebp - 0x14dc]
push ecx
mov edx, dword [ebp - 0x14dc]
push edx
lea eax, [ebp - 0x318]
push eax
call fcn.10079e30
add esp, 0xc
mov dword [ebp - 4], 0x39
mov ecx, dword [ebp - 0x16a4]
and ecx, 4
je 0x100b004d
and dword [ebp - 0x16a4], 0xfffffffb
push 0
push 1
lea ecx, [ebp - 0x1534]
call fcn.1001d850
mov byte [ebp - 4], 0x3a
mov edx, dword [ebp - 0x16a4]
and edx, 2
je 0x100b0072
and dword [ebp - 0x16a4], 0xfffffffd
push 0
push 1
lea ecx, [ebp - 0x1518]
call fcn.1001d850
mov byte [ebp - 4], 0x3b
mov eax, dword [ebp - 0x16a4]
and eax, 1
je 0x100b0097
and dword [ebp - 0x16a4], 0xfffffffe
push 0
push 1
lea ecx, [ebp - 0x14fc]
call fcn.1001d850
push 0x2b93ff4
lea ecx, [ebp - 0x1550]
call fcn.1001c3d0
mov byte [ebp - 4], 0x3c
mov ecx, dword [ebp - 0x31c]
mov dword [ebp - 0x1910], ecx
mov edx, dword [0x2b8fd08]
push edx
push 0
lea eax, [ebp - 0x1550]
push eax
mov ecx, dword [ebp - 0x1910]
add ecx, 0x1c
call fcn.1001d660
mov byte [ebp - 4], 0x3b
push 0
push 1
lea ecx, [ebp - 0x1550]
call fcn.1001d850
push 0x2b93fb0
lea ecx, [ebp - 0x156c]
call fcn.1001c3d0
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0x31c]
mov dword [ebp - 0x1924], ecx
mov edx, dword [0x2b8fd08]
push edx
push 0
lea eax, [ebp - 0x156c]
push eax
mov ecx, dword [ebp - 0x1924]
add ecx, 0x54
call fcn.1001d660
mov byte [ebp - 4], 0x3b
push 0
push 1
lea ecx, [ebp - 0x156c]
call fcn.1001d850
mov ecx, dword [ebp + 0xc]
xor edx, edx
cmp dword [ecx + 0x1fc], 0
sete dl
movzx eax, dl
test eax, eax
jne 0x100b01f3
push 0x2b93fa4
lea ecx, [ebp - 0x1588]
call fcn.1001c3d0
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x31c]
mov dword [ebp - 0x1994], ecx
mov edx, dword [ebp + 0xc]
add edx, 0x204
push edx
mov eax, dword [ebp + 0xc]
add eax, 0x1e8
push eax
lea ecx, [ebp - 0x1588]
push ecx
lea ecx, [ebp - 0x1988]
call fcn.100b0630
mov dword [ebp - 0x1d34], eax
mov edx, dword [ebp - 0x1d34]
mov dword [ebp - 0x1990], edx
mov byte [ebp - 4], 0x3f
mov eax, dword [ebp - 0x1994]
add eax, 0xa8
mov dword [ebp - 0x198c], eax
mov ecx, dword [ebp - 0x1990]
push ecx
mov ecx, dword [ebp - 0x198c]
call fcn.100b3b60
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x1988]
call fcn.100b0720
mov byte [ebp - 4], 0x3b
push 0
push 1
lea ecx, [ebp - 0x1588]
call fcn.1001d850
push 0x2b93f98
lea ecx, [ebp - 0x15a4]
call fcn.1001c3d0
mov byte [ebp - 4], 0x40
push 0x2b93f88
lea ecx, [ebp - 0x15c0]
call fcn.1001c3d0
mov byte [ebp - 4], 0x41
lea edx, [ebp - 0x15a4]
push edx
lea eax, [ebp - 0x15c0]
push eax
mov ecx, dword [ebp - 0x31c]
call fcn.100b0500
mov byte [ebp - 4], 0x40
push 0
push 1
lea ecx, [ebp - 0x15c0]
call fcn.1001d850
mov byte [ebp - 4], 0x3b
push 0
push 1
lea ecx, [ebp - 0x15a4]
call fcn.1001d850
push 0x2b93f98
lea ecx, [ebp - 0x15dc]
call fcn.1001c3d0
mov byte [ebp - 4], 0x42
push 0x2b93f80
lea ecx, [ebp - 0x15f8]
call fcn.1001c3d0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x15dc]
push ecx
lea edx, [ebp - 0x15f8]
push edx
mov ecx, dword [ebp - 0x31c]
call fcn.100b0500
mov byte [ebp - 4], 0x42
push 0
push 1
lea ecx, [ebp - 0x15f8]
call fcn.1001d850
mov byte [ebp - 4], 0x3b
push 0
push 1
lea ecx, [ebp - 0x15dc]
call fcn.1001d850
mov eax, dword [ebp + 0xc]
cmp dword [eax], 3
jne 0x100b0335
push 0x2b93f48
lea ecx, [ebp - 0x1614]
call fcn.1001c3d0
mov byte [ebp - 4], 0x44
push 0x2b93f3c
lea ecx, [ebp - 0x1630]
call fcn.1001c3d0
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x1614]
push ecx
lea edx, [ebp - 0x1630]
push edx
mov ecx, dword [ebp - 0x31c]
call fcn.100b0500
mov byte [ebp - 4], 0x44
push 0
push 1
lea ecx, [ebp - 0x1630]
call fcn.1001d850
mov byte [ebp - 4], 0x3b
push 0
push 1
lea ecx, [ebp - 0x1614]
call fcn.1001d850
jmp 0x100b040d
mov eax, dword [ebp + 0xc]
cmp dword [eax], 4
jne 0x100b03a6
push 0x2b93f04
lea ecx, [ebp - 0x164c]
call fcn.1001c3d0
mov byte [ebp - 4], 0x46
push 0x2b93f3c
lea ecx, [ebp - 0x1668]
call fcn.1001c3d0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x164c]
push ecx
lea edx, [ebp - 0x1668]
push edx
mov ecx, dword [ebp - 0x31c]
call fcn.100b0500
mov byte [ebp - 4], 0x46
push 0
push 1
lea ecx, [ebp - 0x1668]
call fcn.1001d850
mov byte [ebp - 4], 0x3b
push 0
push 1
lea ecx, [ebp - 0x164c]
call fcn.1001d850
jmp 0x100b040d
push 0x2b93ed0
lea ecx, [ebp - 0x1684]
call fcn.1001c3d0
mov byte [ebp - 4], 0x48
push 0x2b93f3c
lea ecx, [ebp - 0x16a0]
call fcn.1001c3d0
mov byte [ebp - 4], 0x49
lea eax, [ebp - 0x1684]
push eax
lea ecx, [ebp - 0x16a0]
push ecx
mov ecx, dword [ebp - 0x31c]
call fcn.100b0500
mov byte [ebp - 4], 0x48
push 0
push 1
lea ecx, [ebp - 0x16a0]
call fcn.1001d850
mov byte [ebp - 4], 0x3b
push 0
push 1
lea ecx, [ebp - 0x1684]
call fcn.1001d850
mov edx, dword [ebp - 0x31c]
mov dword [ebp - 0x1c4c], edx
mov eax, dword [0x2b8fd08]
push eax
push 0
lea ecx, [ebp - 0x338]
push ecx
mov ecx, dword [ebp - 0x1c4c]
add ecx, 0x110
call fcn.1001d660
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x31c]
mov dword [edx], eax
mov ecx, dword [ebp + 8]
add ecx, 4
mov dword [ebp - 0x1c54], ecx
mov edx, dword [ebp - 0x1c54]
mov eax, dword [ebp - 0x318]
mov dword [edx], eax
mov ecx, dword [ebp - 0x1c54]
cmp dword [ecx], 0
je 0x100b0489
mov edx, dword [ebp - 0x1c54]
mov eax, dword [edx]
mov dword [ebp - 0x1c50], eax
mov ecx, dword [ebp - 0x1c50]
add ecx, 4
mov edx, 1
lock xadd dword [ecx], edx
mov byte [ebp - 4], 0x4a
mov byte [ebp - 4], 0x3b
mov eax, dword [ebp - 0x16a4]
or eax, 8
mov dword [ebp - 0x16a4], eax
mov byte [ebp - 4], 0x4b
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x318]
mov dword [ebp - 0x1c58], ecx
mov edx, dword [ebp - 0x1c58]
cmp dword [edx], 0
je 0x100b04cc
mov eax, dword [ebp - 0x1c58]
mov ecx, dword [eax]
call fcn.10015420
mov byte [ebp - 4], 0
push 0
push 1
lea ecx, [ebp - 0x338]
call fcn.1001d850
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100cdbfc
mov esp, ebp
pop ebp
ret