Function at 0x100244a0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x394
mov eax, dword [0x11ad127c]
xor eax, esp
mov dword [esp + 0x390], eax
mov eax, dword [ebp + 8]
mov ecx, dword [0x11d0c5b8]
mov dword [esp + 0x30], eax
mov eax, dword fs:[0x2c]
push ebx
push esi
push edi
mov ebx, dword [eax + ecx*4]
mov eax, dword [0x11d23bc0]
mov dword [esp + 0x20], ebx
cmp eax, dword [ebx + 0xc]
jg 0x10024cc3
mov eax, dword [esp + 0x3c]
lea edi, [esp + 0x1d0]
mov ecx, 0x72
mov byte [esp + 0xf], 0
mov esi, 0x11ad12a0
rep movsd dword es:[edi], dword [esi]
push 0x18c
mov dword [eax], 0
lea eax, [esp + 0x44]
push 0
push eax
call fcn.10425c00
mov edi, dword [ebp + 0x14]
lea ecx, [esp + 0x4c]
add esp, 0xc
push 0xa0000000
push dword [ebp + 0xc]
push edi
push 0x400
push 0x1000
call fcn.10025350
mov eax, dword [esp + 0x98]
lea ecx, [esp + 0x40]
or byte [esp + 0xad], 0x80
and eax, 0xffffff07
or byte [esp + 0xac], 0x20
or eax, 7
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0xa0]
and eax, 0xffff04ff
or eax, 0x400
mov dword [esp + 0xa0], eax
call fcn.10098690
or byte [esp + 0xae], 4
push 0x10
push 0x2c8
call fcn.10434a32
add esp, 8
test eax, eax
je 0x10024ca8
push 0
mov ecx, eax
call fcn.100ac480
mov esi, eax
mov dword [esp + 0x34], esi
test esi, esi
je 0x10024ca8
lea eax, [esp + 0x40]
mov ecx, esi
push eax
push dword [esi + 8]
call fcn.100ab9a0
test al, al
je 0x10024c94
mov ecx, dword [esi + 0x238]
lea eax, [esp + 0x40]
push 0x18c
push 0
push eax
mov dword [esp + 0x1c], ecx
call fcn.10425c00
mov eax, dword [ebx + 0x10]
lea ecx, [esp + 0x4c]
add esp, 0xc
mov eax, dword [eax + 0x140]
and eax, 0x100
neg eax
push 0xa0000000
sbb eax, eax
neg eax
inc eax
push eax
push edi
push 0x400
push 0x1000
call fcn.10025350
mov eax, dword [esp + 0x98]
lea ecx, [esp + 0x40]
or byte [esp + 0xae], 1
and eax, 0xffffff07
or byte [esp + 0xac], 0x20
or eax, 7
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0xa0]
and eax, 0xffff04ff
or eax, 0x400
mov dword [esp + 0xa0], eax
call fcn.10098690
or byte [esp + 0xae], 4
push 0x10
push 0x284
call fcn.10434a32
add esp, 8
test eax, eax
je 0x10024c7f
push 1
push 0
mov ecx, eax
call fcn.100250c0
mov edi, eax
mov dword [esp + 0x38], edi
test edi, edi
je 0x10024c96
lea eax, [esp + 0x40]
mov ecx, edi
push eax
call fcn.1009ed20
test al, al
je 0x10024c96
mov edx, dword [esp + 0x10]
mov ecx, dword [ebp + 0x14]
mov dword [esp + 0x1d0], edx
push 0
mov eax, dword [edx + 0x20c]
push 1
push 0
push 0
movsx eax, byte [eax + 0x58]
mov dword [esp + 0x1ec], eax
mov eax, dword [edx + 0x20c]
mov eax, dword [eax + 0x54]
mov dword [esp + 0x1f0], eax
mov dword [esp + 0x2e0], ecx
mov dword [esp + 0x2d4], 0
mov dword [esp + 0x2d8], 0
mov dword [esp + 0x2dc], 0x400
mov dword [esp + 0x238], edi
mov eax, dword [edi + 0x20c]
movsx eax, byte [eax + 0x58]
mov dword [esp + 0x244], eax
mov eax, dword [edi + 0x20c]
mov eax, dword [eax + 0x54]
mov dword [esp + 0x248], eax
mov eax, dword [ebx + 0x10]
mov dword [esp + 0x2f0], ecx
lea ecx, [esp + 0x1e0]
mov dword [esp + 0x2e4], 0
mov dword [esp + 0x2e8], 0
mov dword [esp + 0x2ec], 0x400
mov dword [esp + 0x29c], 0
mov dword [esp + 0x2c4], 0x3f800000
mov dword [esp + 0x2c8], 0x3f800000
mov eax, dword [eax + 0x162c]
shr eax, 7
test al, 1
mov eax, 0
setne al
or byte [esp + 0x319], 0x18
lea eax, [eax*2 - 1]
mov dword [esp + 0x2f8], eax
lea eax, [esp + 0x2e4]
push eax
lea eax, [esp + 0x2d8]
push eax
push edi
call fcn.100a5750
mov eax, dword [esp + 0x1d4]
mov ecx, dword [esp + 0x10]
mov edx, dword [ebx + 0x10]
push 0x20
movzx eax, byte [eax + 0x61]
add edx, 0x7cac
mov dword [esp + 0x1dc], eax
mov eax, dword [ecx + 0x20c]
mov eax, dword [eax]
mov dword [esp + 0x1f4], eax
mov eax, dword [ecx + 0x20c]
lea ecx, [esp + 0x1d4]
mov eax, dword [eax + 8]
mov dword [esp + 0x1f8], eax
mov eax, dword [esp + 0x230]
movzx eax, byte [eax + 0x61]
mov dword [esp + 0x234], eax
mov eax, dword [edi + 0x20c]
mov eax, dword [eax]
mov dword [esp + 0x24c], eax
mov eax, dword [edi + 0x20c]
mov eax, dword [eax + 8]
mov dword [esp + 0x250], eax
call fcn.10109bc0
mov dword [esp + 0x10], eax
test eax, eax
je 0x10024c96
mov ecx, dword [ebx + 0x10]
mov ecx, dword [ecx + 0x7a70]
call fcn.100a83a0
mov ecx, dword [ebx + 0x10]
mov dword [esp + 0x24], eax
mov ecx, dword [ecx + 0x7a70]
call fcn.100a83a0
push ecx
mov ecx, dword [esp + 0x1d8]
mov ebx, eax
push 0
mov dword [esp + 0x20], ebx
call fcn.10099870
push ecx
mov ecx, dword [esp + 0x230]
push 1
call fcn.10099870
mov edi, dword [esp + 0x10]
lea esi, [esp + 0x1d0]
add edi, 8
mov ecx, 0x72
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x10]
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 0x1c]
mov edi, dword [esp + 0x20]
push 1
push 0
push dword [esp + 0x2c]
mov ecx, dword [edi + 0x10]
mov ecx, dword [ecx + 0x7a70]
call fcn.100a85a0
movups xmm0, xmmword [esp + 0x2d4]
sub esp, 0x10
mov ecx, esi
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [esp + 0x2e4]
movups xmmword [eax], xmm0
call fcn.1010a820
mov ecx, dword [edi + 0x10]
push 1
push 0
push ebx
mov ecx, dword [ecx + 0x7a70]
call fcn.100a85a0
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x20]
mov ecx, dword [esp + 0x1d4]
call fcn.10099bc0
mov ecx, dword [esp + 0x22c]
call fcn.10099bc0
mov eax, dword [edi + 0x10]
push 1
push 1
mov ecx, dword [eax + 0x7a68]
mov ecx, dword [ecx + 8]
call fcn.101e43f0
lea esi, [ebx + ebx*2]
mov dword [esp + 0x10], 0x989680
shl esi, 3
mov eax, dword [edi + 0x10]
push 0x11d0c72c
mov edi, dword [eax + 0x7a70]
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp ebx, dword [edi + 4]
jae 0x100249bb
mov eax, dword [edi]
lea esi, [ebx + ebx*2]
shl esi, 3
cmp byte [esi + eax], 0
je 0x100249bb
push ebx
mov ecx, edi
call fcn.100a8490
push 0x11d0c72c
mov bl, al
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test bl, bl
mov edi, esi
mov ebx, dword [esp + 0x18]
jne 0x100249c8
sub dword [esp + 0x10], 1
je 0x100249c8
mov edi, dword [esp + 0x20]
jmp 0x10024965
push 0x11d0c72c
mov edi, esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov esi, dword [esp + 0x20]
push 0x11d0c72c
mov eax, dword [esi + 0x10]
mov eax, dword [eax + 0x7a70]
mov dword [esp + 0x20], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esp + 0x1c]
cmp ebx, dword [ecx + 4]
jae 0x10024a19
mov eax, dword [ecx]
cmp byte [edi + eax], 0
je 0x10024a19
push ebx
call fcn.100a8490
push 0x11d0c72c
mov bl, al
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test bl, bl
mov ebx, dword [esp + 0x18]
je 0x10024b96
jmp 0x10024a24
push 0x11d0c72c
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [esi + 0x10]
push 0x11d0c72c
mov eax, dword [eax + 0x7a70]
mov dword [esp + 0x14], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x24]
cmp ecx, dword [eax + 4]
jae 0x10024a8b
mov eax, dword [eax]
lea edx, [ecx + ecx*2]
shl edx, 3
mov dword [esp + 0x1c], edx
cmp byte [edx + eax], 0
je 0x10024a8b
push ecx
mov ecx, dword [esp + 0x14]
call fcn.100a8490
mov eax, dword [esp + 0x10]
mov esi, dword [esp + 0x1c]
push 0x11d0c72c
mov eax, dword [eax]
mov ecx, dword [eax + esi + 0x10]
mov dword [esp + 0x20], ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov esi, dword [esp + 0x20]
jmp 0x10024aa7
push 0x11d0c72c
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xorps xmm0, xmm0
movlpd qword [esp + 0x28], xmm0
mov eax, dword [esp + 0x28]
mov dword [esp + 0x1c], eax
mov eax, dword [esi + 0x10]
push 0x11d0c72c
mov eax, dword [eax + 0x7a70]
mov dword [esp + 0x14], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esp + 0x10]
cmp ebx, dword [ecx + 4]
jae 0x10024afc
mov eax, dword [ecx]
cmp byte [edi + eax], 0
je 0x10024afc
push ebx
call fcn.100a8490
mov eax, dword [esp + 0x10]
push 0x11d0c72c
mov eax, dword [eax]
mov ecx, dword [eax + edi + 0x10]
mov dword [esp + 0x2c], ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
jmp 0x10024b14
push 0x11d0c72c
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xorps xmm0, xmm0
movlpd qword [esp + 0x10], xmm0
mov eax, dword [esp + 0x10]
sub eax, dword [esp + 0x1c]
mov ecx, 1
xorps xmm0, xmm0
movss xmm1, dword [0x1122d4d0]
cmove eax, ecx
mov ecx, dword [ebp + 0x14]
cvtsi2sd xmm0, ecx
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x1122e340]
cvtpd2ps xmm2, xmm0
xorps xmm0, xmm0
mulss xmm2, dword [0x1122d548]
cvtsi2sd xmm0, eax
shr eax, 0x1f
mulss xmm2, dword [0x1122d434]
addsd xmm0, qword [eax*8 + 0x1122e340]
mulss xmm2, dword [0x1122d540]
cvtpd2ps xmm0, xmm0
divss xmm2, xmm0
comiss xmm1, xmm2
ja 0x10024b96
comiss xmm2, dword [0x1122d578]
ja 0x10024b96
movaps xmm0, xmm2
call fcn.10451080
mov ecx, dword [esp + 0x3c]
mov byte [esp + 0xf], 1
mov dword [ecx], eax
cmp dword [esp + 0x24], 0xffffffff
je 0x10024c15
mov eax, dword [esi + 0x10]
push 0x11d0c72c
mov eax, dword [eax + 0x7a70]
mov dword [esp + 0x2c], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
cmp eax, dword [edx + 4]
jae 0x10024c0a
lea ecx, [eax + eax*2]
mov eax, dword [edx]
shl ecx, 3
mov dword [esp + 0x28], ecx
cmp byte [ecx + eax], 0
je 0x10024c0a
mov ecx, dword [edx + 8]
mov eax, dword [edx + 0xc]
mov ebx, dword [esp + 0x24]
mov dword [eax + ecx*4], ebx
mov eax, dword [edx]
mov ecx, dword [esp + 0x28]
inc dword [edx + 8]
mov ebx, dword [esp + 0x18]
mov byte [ecx + eax], 0
mov eax, dword [edx]
mov ecx, dword [eax + ecx + 4]
cmp ecx, 0xffffffff
je 0x10024c0a
mov eax, dword [edx + 0x28]
mov dword [eax + ecx*4], 0xffffffff
push 0x11d0c72c
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp ebx, 0xffffffff
je 0x10024c8a
mov eax, dword [esi + 0x10]
push 0x11d0c72c
mov esi, dword [eax + 0x7a70]
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp ebx, dword [esi + 4]
jae 0x10024c65
mov eax, dword [esi]
cmp byte [edi + eax], 0
je 0x10024c65
mov ecx, dword [esi + 8]
mov eax, dword [esi + 0xc]
mov dword [eax + ecx*4], ebx
mov eax, dword [esi]
inc dword [esi + 8]
mov byte [edi + eax], 0
mov eax, dword [esi]
mov ecx, dword [eax + edi + 4]
cmp ecx, 0xffffffff
je 0x10024c65
mov eax, dword [esi + 0x28]
mov dword [eax + ecx*4], 0xffffffff
push 0x11d0c72c
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [esp + 0x34]
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [esp + 0x38]
jmp 0x10024ca1
mov ecx, dword [esi]
mov edx, dword [ecx + 4]
mov ecx, esi
call edx
jmp 0x10024ca8
mov esi, dword [esp + 0x34]
mov edi, dword [esp + 0x38]
jmp 0x10024c96
xor edi, edi
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
test edi, edi
je 0x10024ca8
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov ecx, dword [esp + 0x39c]
mov al, byte [esp + 0xf]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.1045066c
mov esp, ebp
pop ebp
ret 0x14
push 0x11d23bc0
call fcn.10450d26
add esp, 4
cmp dword [0x11d23bc0], 0xffffffff
jne 0x100244e8
push 0x80
push 0
push 0x11ad13e4
call fcn.10425c00
add esp, 0xc
push 0x11d23bc0
call fcn.10450cdc
add esp, 4
jmp 0x100244e8