Function at 0x1003f8f0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10315623
mov eax, dword fs:[0]
push eax
sub esp, 0x16c
mov eax, dword [0x1043900c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x78], esi
cmp byte [0x1060fbd8], 0
je 0x1003f93e
mov eax, dword [0x1060b5e0]
cmp dword [eax + 0x7f3c], 0
je 0x100412dd
mov eax, dword [0x1060b300]
test eax, eax
je 0x1003f94d
inc dword [eax + 0x370]
push 0x3d30
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov dword [ebp - 0x74], eax
lea ecx, [ebp - 0x7d]
add esp, 4
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x84], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x1003f980
push 0
mov ecx, eax
call fcn.10074580
jmp 0x1003f982
xor eax, eax
mov dword [ebp - 4], 0xffffffff
cmp dword [0x1060b300], 0
jne 0x1003f997
mov dword [0x1060b300], eax
mov ecx, eax
call fcn.1007b310
mov eax, dword [0x1060b5e0]
push 0x1060ff70
mov edi, dword [eax + 0x68]
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov ebx, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
test eax, eax
je 0x1003fb11
push 0x1060ff68
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x1003fb11
mov eax, dword [0x1060b300]
mov dword [0x1060ff60], edi
test eax, eax
jne 0x1003f9fa
push 0xd71
push str.C:Users_voidDocumentsGitHubecstasy_v6_solutionimguiimgui.cpp
push str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call ebx
mov eax, dword [0x1060b300]
add esp, 0xc
or dword [eax + 0xc], 6
xor esi, esi
mov dword [eax + 0xbc], str.imgui_impl_win32
mov dword [eax + 0xe0], edi
mov dword [eax + 0x34], 9
mov dword [eax + 0x38], 0x25
mov dword [eax + 0x3c], 0x27
mov dword [eax + 0x40], 0x26
mov dword [eax + 0x44], 0x28
mov dword [eax + 0x48], 0x21
mov dword [eax + 0x4c], 0x22
mov dword [eax + 0x50], 0x24
mov dword [eax + 0x54], 0x23
mov dword [eax + 0x58], 0x2d
mov dword [eax + 0x5c], 0x2e
mov dword [eax + 0x60], 8
mov dword [eax + 0x64], 0x20
mov dword [eax + 0x68], 0xd
mov dword [eax + 0x6c], 0x1b
mov dword [eax + 0x70], 0xd
mov dword [eax + 0x74], 0x41
mov dword [eax + 0x78], 0x43
mov dword [eax + 0x7c], 0x56
mov dword [eax + 0x80], 0x58
mov dword [eax + 0x84], 0x59
mov dword [eax + 0x88], 0x5a
mov dword [ebp - 0x2c], str.xinput1_4.dll
mov dword [ebp - 0x28], str.xinput1_3.dll
mov dword [ebp - 0x24], str.xinput9_1_0.dll
mov dword [ebp - 0x20], str.xinput1_2.dll
mov dword [ebp - 0x1c], str.xinput1_1.dll
push dword [ebp + esi*4 - 0x2c]
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
test edi, edi
jne 0x1003faee
inc esi
cmp esi, 5
jl 0x1003fad6
jmp 0x1003fb0e
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.XInputGetCapabilities
push edi
call esi
push str.XInputGetState
push edi
mov dword [0x1060ff58], eax
call esi
mov dword [0x1060ff5c], eax
mov esi, dword [ebp - 0x78]
mov eax, dword [0x1060b300]
test eax, eax
jne 0x1003fb33
push 0xd71
push str.C:Users_voidDocumentsGitHubecstasy_v6_solutionimguiimgui.cpp
push str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call ebx
mov eax, dword [0x1060b300]
add esp, 0xc
or dword [eax + 0xc], 8
mov dword [eax + 0xc0], str.imgui_impl_dx9
mov eax, dword [esi]
push esi
mov dword [0x1060ff50], esi
call dword [eax + 4]
mov eax, dword [0x1060b300]
test eax, eax
jne 0x1003fb6f
push 0xd71
push str.C:Users_voidDocumentsGitHubecstasy_v6_solutionimguiimgui.cpp
push str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call ebx
mov eax, dword [0x1060b300]
add esp, 0xc
lea esi, [eax + 8]
mov dword [ebp - 0x78], esi
test eax, eax
jne 0x1003fb92
push 0x979
push str.C:Users_voidDocumentsGitHubecstasy_v6_solutionimguiimgui.cpp
push str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call ebx
mov eax, dword [0x1060b300]
add esp, 0xc
push 0x78
mov byte [eax + 0x15d2], 0
mov byte [eax + 0x15d0], 0
lea eax, [ebp - 0x100]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edi, dword [esi + 0x90]
add esp, 0xc
cmp byte [0x10493520], 0
mov eax, 0xffff
mov byte [ebp - 0xf8], 1
mov dword [ebp - 0xc8], 0x7f7fffff
mov dword [ebp - 0xbc], 0x3f800000
mov word [ebp - 0xb8], ax
mov dword [ebp - 0xec], 3
mov dword [ebp - 0xe8], 1
jne 0x1003fc60
mov byte [0x10493520], 1
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10493544]
xor ebx, dword [0x10493540]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
xor edx, ecx
shl eax, 0xd
xor ebx, eax
mov ecx, edx
mov eax, ebx
shrd eax, ecx, 7
shr ecx, 7
xor ebx, eax
xor edx, ecx
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, byte [esi + 0x10493521]
xor cl, bl
mov byte [esi + 0x10493521], cl
inc esi
cmp esi, 0x1d
jb 0x1003fc06
mov esi, dword [ebp - 0x78]
push ecx
push 0x1049353d
push 0x10493521
lea ecx, [ebp - 0x30]
call fcn.1001a620
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x100]
cmp dword [ebp - 0x1c], 0x10
lea eax, [ebp - 0x30]
movss xmm2, dword [0x1041ef30]
cmovae eax, dword [ebp - 0x30]
push 0x1040d2f8
push ecx
push eax
mov ecx, edi
call fcn.10096650
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0x10
jb 0x1003fcde
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003fcd4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003fcd4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102bb95a
add esp, 8
cmp byte [0x104a0230], 0
mov edi, dword [esi + 0x90]
jne 0x1003fd50
mov byte [0x104a0230], 1
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x104a0254]
xor ebx, dword [0x104a0250]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
xor edx, ecx
shl eax, 0xd
xor ebx, eax
mov ecx, edx
mov eax, ebx
shrd eax, ecx, 7
shr ecx, 7
xor ebx, eax
xor edx, ecx
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, byte [esi + 0x104a0231]
xor cl, bl
mov byte [esi + 0x104a0231], cl
inc esi
cmp esi, 0x1d
jb 0x1003fcf6
mov esi, dword [ebp - 0x78]
push ecx
push 0x104a024d
push 0x104a0231
lea ecx, [ebp - 0x30]
call fcn.1001a620
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x100]
cmp dword [ebp - 0x1c], 0x10
lea eax, [ebp - 0x30]
movss xmm2, dword [0x1041ef40]
cmovae eax, dword [ebp - 0x30]
push 0x1040d2f8
push ecx
push eax
mov ecx, edi
call fcn.10096650
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov dword [0x1060b340], eax
cmp ecx, 0x10
jb 0x1003fdd3
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003fdc9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003fdc9
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102bb95a
add esp, 8
cmp byte [0x104934d0], 0
mov edi, dword [esi + 0x90]
jne 0x1003fe4a
mov byte [0x104934d0], 1
xor esi, esi
nop dword [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x104934f4]
xor ebx, dword [0x104934f0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
xor edx, ecx
shl eax, 0xd
xor ebx, eax
mov ecx, edx
mov eax, ebx
shrd eax, ecx, 7
shr ecx, 7
xor ebx, eax
xor edx, ecx
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, byte [esi + 0x104934d1]
xor cl, bl
mov byte [esi + 0x104934d1], cl
inc esi
cmp esi, 0x1e
jb 0x1003fdf0
mov esi, dword [ebp - 0x78]
push ecx
push 0x104934ee
push 0x104934d1
lea ecx, [ebp - 0x30]
call fcn.1001a620
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x100]
cmp dword [ebp - 0x1c], 0x10
lea eax, [ebp - 0x30]
movss xmm2, dword [0x1041ef70]
cmovae eax, dword [ebp - 0x30]
push 0x1040d2f8
push ecx
push eax
mov ecx, edi
call fcn.10096650
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov dword [0x1060b35c], eax
cmp ecx, 0x10
jb 0x1003fecd
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003fec3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003fec3
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102bb95a
add esp, 8
movss xmm3, dword [0x1041ef48]
lea eax, [ebp - 0x100]
mov ecx, dword [esi + 0x90]
push 0x1040d2f8
push eax
push 0xae14
push 0x10459410
call fcn.100967c0
cmp byte [0x104932c0], 0
mov edi, dword [esi + 0x90]
jne 0x1003ff6a
mov byte [0x104932c0], 1
xor esi, esi
nop
xor edx, edx
mov ebx, esi
xor edx, dword [0x104932e4]
xor ebx, dword [0x104932e0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
xor edx, ecx
shl eax, 0xd
xor ebx, eax
mov ecx, edx
mov eax, ebx
shrd eax, ecx, 7
shr ecx, 7
xor ebx, eax
xor edx, ecx
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, byte [esi + 0x104932c1]
xor cl, bl
mov byte [esi + 0x104932c1], cl
inc esi
cmp esi, 0x1d
jb 0x1003ff10
mov esi, dword [ebp - 0x78]
push ecx
push 0x104932dd
push 0x104932c1
lea ecx, [ebp - 0x30]
call fcn.1001a620
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x100]
cmp dword [ebp - 0x1c], 0x10
lea eax, [ebp - 0x30]
movss xmm2, dword [0x1041ef4c]
cmovae eax, dword [ebp - 0x30]
push 0x1040d2f8
push ecx
push eax
mov ecx, edi
call fcn.10096650
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0x10
jb 0x1003ffe8
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003ffde
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003ffde
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102bb95a
add esp, 8
cmp byte [0x104a1e20], 0
mov edi, dword [esi + 0x90]
jne 0x1004005a
mov byte [0x104a1e20], 1
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x104a1e44]
xor ebx, dword [0x104a1e40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
xor edx, ecx
shl eax, 0xd
xor ebx, eax
mov ecx, edx
mov eax, ebx
shrd eax, ecx, 7
shr ecx, 7
xor ebx, eax
xor edx, ecx
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, bl
xor cl, byte [esi + 0x104a1e21]
mov byte [esi + 0x104a1e21], cl
inc esi
cmp esi, 0x1d
jb 0x10040000
mov esi, dword [ebp - 0x78]
push ecx
push 0x104a1e3d
push 0x104a1e21
lea ecx, [ebp - 0x30]
call fcn.1001a620
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x100]
cmp dword [ebp - 0x1c], 0x10
lea eax, [ebp - 0x30]
movss xmm2, dword [0x1041ef30]
cmovae eax, dword [ebp - 0x30]
push 0x1040d2f8
push ecx
push eax
mov ecx, edi
call fcn.10096650
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov dword [0x1060b33c], eax
cmp ecx, 0x10
jb 0x100400dd
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100400d3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100400d3
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102bb95a
add esp, 8
cmp byte [0x104a0410], 0
mov edi, dword [esi + 0x90]
jne 0x1004014f
mov byte [0x104a0410], 1
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x104a0434]
xor ebx, dword [0x104a0430]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
xor edx, ecx
shl eax, 0xd
xor ebx, eax
mov ecx, edx
mov eax, ebx
shrd eax, ecx, 7
shr ecx, 7
xor ebx, eax
xor edx, ecx
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, byte [esi + 0x104a0411]
xor cl, bl
mov byte [esi + 0x104a0411], cl
inc esi
cmp esi, 0x1d
jb 0x100400f5
mov esi, dword [ebp - 0x78]
push ecx
push 0x104a042d
push 0x104a0411
lea ecx, [ebp - 0x30]
call fcn.1001a620
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x100]
cmp dword [ebp - 0x1c], 0x10
lea eax, [ebp - 0x30]
movss xmm2, dword [0x1041ef28]
cmovae eax, dword [ebp - 0x30]
push 0x1040d2f8
push ecx
push eax
mov ecx, edi
call fcn.10096650
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0x10
jb 0x100401cd
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100401c3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100401c3
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102bb95a
add esp, 8
movss xmm3, dword [0x1041ef38]
lea eax, [ebp - 0x100]
mov ecx, dword [esi + 0x90]
push 0x1040d2f8
push eax
push 0xae14
push 0x10459410
call fcn.100967c0
movss xmm3, dword [0x1041ef20]
lea eax, [ebp - 0x100]
mov ecx, dword [esi + 0x90]
push 0x1040d2f8
push eax
push 0x4c24
push 0x104a1e88
call fcn.100967c0
cmp byte [0x1043a350], 0
mov edi, dword [esi + 0x90]
mov dword [0x1060b354], eax
jne 0x1004029a
mov byte [0x1043a350], 1
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1043a374]
xor ebx, dword [0x1043a370]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
xor edx, ecx
shl eax, 0xd
xor ebx, eax
mov ecx, edx
mov eax, ebx
shrd eax, ecx, 7
shr ecx, 7
xor ebx, eax
xor edx, ecx
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, byte [esi + 0x1043a351]
xor cl, bl
mov byte [esi + 0x1043a351], cl
inc esi
cmp esi, 0x1d
jb 0x10040240
mov esi, dword [ebp - 0x78]
push ecx
push 0x1043a36d
push 0x1043a351
lea ecx, [ebp - 0x30]
call fcn.1001a620
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x100]
cmp dword [ebp - 0x1c], 0x10
lea eax, [ebp - 0x30]
movss xmm2, dword [0x1041ef34]
cmovae eax, dword [ebp - 0x30]
push 0x1040d2f8
push ecx
push eax
mov ecx, edi
call fcn.10096650
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov dword [0x1060b360], eax
cmp ecx, 0x10
jb 0x1004031d
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10040313
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10040313
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102bb95a
add esp, 8
movss xmm3, dword [0x1041efac]
lea eax, [ebp - 0x100]
mov ecx, dword [esi + 0x90]
push 0x1040d2f8
push eax
push 0xf07c
push 0x10442e60
call fcn.100967c0
cmp byte [0x104a0460], 0
mov edi, dword [esi + 0x90]
mov dword [0x1060b348], eax
jne 0x100403bd
mov byte [0x104a0460], 1
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x104a0484]
xor ebx, dword [0x104a0480]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
xor edx, ecx
shl eax, 0xd
xor ebx, eax
mov ecx, edx
mov eax, ebx
shrd eax, ecx, 7
shr ecx, 7
xor ebx, eax
xor edx, ecx
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, byte [esi + 0x104a0461]
xor cl, bl
mov byte [esi + 0x104a0461], cl
inc esi
cmp esi, 0x1d
jb 0x10040363
mov esi, dword [ebp - 0x78]
push ecx
push 0x104a047d
push 0x104a0461
lea ecx, [ebp - 0x30]
call fcn.1001a620
mov dword [ebp - 4], 8
lea ecx, [ebp - 0x100]
cmp dword [ebp - 0x1c], 0x10
lea eax, [ebp - 0x30]
movss xmm2, dword [0x1041ef54]
cmovae eax, dword [ebp - 0x30]
push 0x1040d2f8
push ecx
push eax
mov ecx, edi
call fcn.10096650
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov dword [0x1060b350], eax
cmp ecx, 0x10
jb 0x10040440
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10040436
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10040436
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102bb95a
add esp, 8
movss xmm3, dword [0x1041ef34]
lea eax, [ebp - 0x100]
mov ecx, dword [esi + 0x90]
push 0x1040d2f8
push eax
push 0x2e65c
push 0x10464230
call fcn.100967c0
cmp byte [0x104a18e0], 0
mov edi, dword [esi + 0x90]
mov dword [0x1060b34c], eax
jne 0x100404e0
mov byte [0x104a18e0], 1
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x104a1904]
xor ebx, dword [0x104a1900]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
xor edx, ecx
shl eax, 0xd
xor ebx, eax
mov ecx, edx
mov eax, ebx
shrd eax, ecx, 7
shr ecx, 7
xor ebx, eax
xor edx, ecx
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, byte [esi + 0x104a18e1]
xor cl, bl
mov byte [esi + 0x104a18e1], cl
inc esi
cmp esi, 0x1d
jb 0x10040486
mov esi, dword [ebp - 0x78]
push ecx
push 0x104a18fd
push 0x104a18e1
lea ecx, [ebp - 0x30]
call fcn.1001a620
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x100]
cmp dword [ebp - 0x1c], 0x10
lea eax, [ebp - 0x30]
movss xmm2, dword [0x1041ef30]
cmovae eax, dword [ebp - 0x30]
push 0x1040d2f8
push ecx
push eax
mov ecx, edi
call fcn.10096650
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov dword [0x1060b358], eax
cmp ecx, 0x10
jb 0x10040563
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10040559
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10040559
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102bb95a
add esp, 8
cmp byte [0x104a93c0], 0
mov edi, dword [esi + 0x90]
jne 0x100405da
mov byte [0x104a93c0], 1
xor esi, esi
nop dword [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x104a93e4]
xor ebx, dword [0x104a93e0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
xor edx, ecx
shl eax, 0xd
xor ebx, eax
mov ecx, edx
mov eax, ebx
shrd eax, ecx, 7
shr ecx, 7
xor ebx, eax
xor edx, ecx
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, byte [esi + 0x104a93c1]
xor cl, bl
mov byte [esi + 0x104a93c1], cl
inc esi
cmp esi, 0x1e
jb 0x10040580
mov esi, dword [ebp - 0x78]
push ecx
push 0x104a93de
push 0x104a93c1
lea ecx, [ebp - 0x30]
call fcn.1001a620
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0x100]
cmp dword [ebp - 0x1c], 0x10
lea eax, [ebp - 0x30]
movss xmm2, dword [0x1041ef88]
cmovae eax, dword [ebp - 0x30]
push 0x1040d2f8
push ecx
push eax
mov ecx, edi
call fcn.10096650
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov dword [0x1060b344], eax
cmp ecx, 0x10
jb 0x1004065d
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10040653
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10040653
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102bb95a
add esp, 8
cmp byte [0x104a1a20], 0
mov edi, dword [esi + 0x90]
jne 0x100406cc
mov byte [0x104a1a20], 1
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x104a1a44]
xor ebx, dword [0x104a1a40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
xor edx, ecx
shl eax, 0xd
xor ebx, eax
mov ecx, edx
mov eax, ebx
shrd eax, ecx, 7
shr ecx, 7
xor ebx, eax
xor edx, ecx
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, byte [esi + 0x104a1a21]
xor cl, bl
mov byte [esi + 0x104a1a21], cl
inc esi
cmp esi, 0x1e
jb 0x10040675
push ecx
push 0x104a1a3e
push 0x104a1a21
lea ecx, [ebp - 0x30]
call fcn.1001a620
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x100]
cmp dword [ebp - 0x1c], 0x10
lea eax, [ebp - 0x30]
movss xmm2, dword [0x1041ef64]
cmovae eax, dword [ebp - 0x30]
push 0x1040d2f8
push ecx
push eax
mov ecx, edi
call fcn.10096650
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0x10
jb 0x1004074a
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10040740
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10040740
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102bb95a
add esp, 8
mov edi, dword [0x1060b5e0]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
mov byte [ebp - 0x30], 0
cmp dword [edi + 0x7f3c], 0
je 0x100408c9
jbe 0x100412f9
mov eax, dword [edi + 0x7f2c]
test eax, eax
je 0x10040783
mov eax, dword [eax]
jmp 0x10040785
xor eax, eax
mov ecx, dword [eax + 8]
mov eax, dword [eax + 4]
dec ecx
and ecx, dword [edi + 0x7f38]
mov eax, dword [eax + ecx*4]
mov ecx, dword [edi + 0x7f44]
mov dword [ebp - 0x74], eax
lea ebx, [eax + 0x1c]
mov esi, dword [ecx]
cmp esi, ecx
je 0x100407e2
cmp dword [ebx + 0x14], 0x10
lea ecx, [esi + 8]
mov eax, ebx
jb 0x100407b4
mov eax, dword [ebx]
cmp dword [ecx + 0x14], 0x10
mov edx, dword [ecx + 0x10]
jb 0x100407bf
mov ecx, dword [ecx]
push dword [ebx + 0x10]
push eax
call fcn.10071120
add esp, 8
test al, al
jne 0x10040880
mov eax, dword [esi]
mov esi, eax
cmp eax, dword [edi + 0x7f44]
jne 0x100407a7
mov eax, dword [ebp - 0x74]
cmp dword [eax + 0x14], 0x10
movss xmm2, dword [eax + 0x18]
jb 0x100407ef
mov eax, dword [eax]
push 0x1040d2f8
lea ecx, [ebp - 0x100]
push ecx
push eax
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax + 0x90]
call fcn.10096650
mov edi, eax
test edi, edi
je 0x1004087a
mov esi, dword [0x1060b5e0]
lea ecx, [ebp - 0x4c]
push ebx
call fcn.1002c0b0
mov dword [ebp - 0x34], edi
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x88]
push eax
lea ecx, [esi + 0x7f40]
call fcn.1006e750
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x38]
cmp ecx, 0x10
jb 0x1004087a
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10040870
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003fcce
push ecx
push edx
call fcn.102bb95a
add esp, 8
mov edi, dword [0x1060b5e0]
mov ecx, dword [edi + 0x7f34]
mov eax, dword [edi + 0x7f30]
dec ecx
and ecx, dword [edi + 0x7f38]
mov ecx, dword [eax + ecx*4]
call fcn.1006efd0
add dword [edi + 0x7f3c], 0xffffffff
jne 0x100408b0
mov dword [edi + 0x7f38], 0
jmp 0x100408b6
inc dword [edi + 0x7f38]
mov edi, dword [0x1060b5e0]
cmp dword [edi + 0x7f3c], 0
jne 0x1004076f
lea eax, [ebp - 0x7c]
push eax
push 0x3dbd
push 0x10369b78
push dword [edi + 0x74]
mov edi, dword [sym.imp.d3dx9_42.dll_D3DXCreateTextureFromFileInMemory]
call edi
test eax, eax
jne 0x1004090d
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x50]
push edx
push 0
push ecx
mov eax, dword [ecx]
call dword [eax + 0x44]
mov eax, dword [ebp - 0x7c]
mov dword [0x10610cb4], eax
mov eax, dword [ebp - 0x38]
mov dword [0x10610cb8], eax
mov eax, dword [ebp - 0x34]
mov dword [0x10610cbc], eax
lea eax, [ebp - 0x74]
push eax
mov eax, dword [0x1060b5e0]
push 0x2216
push 0x104a7078
push dword [eax + 0x74]
call edi
test eax, eax
jne 0x10040950
mov ecx, dword [ebp - 0x74]
lea edx, [ebp - 0x50]
push edx
push 0
push ecx
mov eax, dword [ecx]
call dword [eax + 0x44]
mov eax, dword [ebp - 0x74]
mov dword [0x106114cc], eax
mov eax, dword [ebp - 0x38]
mov dword [0x106114d0], eax
mov eax, dword [ebp - 0x34]
mov dword [0x106114d4], eax
lea eax, [ebp - 0x7c]
push eax
mov eax, dword [0x1060b5e0]
push 0x2216
push 0x104a7078
push dword [eax + 0x74]
call edi
test eax, eax
jne 0x10040993
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x50]
push edx
push 0
push ecx
mov eax, dword [ecx]
call dword [eax + 0x44]
mov eax, dword [ebp - 0x7c]
mov dword [0x106114cc], eax
mov eax, dword [ebp - 0x38]
mov dword [0x106114d0], eax
mov eax, dword [ebp - 0x34]
mov dword [0x106114d4], eax
lea eax, [ebp - 0x74]
push eax
mov eax, dword [0x1060b5e0]
push 0x73b7
push 0x10452058
push dword [eax + 0x74]
call edi
test eax, eax
jne 0x100409d6
mov ecx, dword [ebp - 0x74]
lea edx, [ebp - 0x50]
push edx
push 0
push ecx
mov eax, dword [ecx]
call dword [eax + 0x44]
mov eax, dword [ebp - 0x74]
mov dword [0x10610c60], eax
mov eax, dword [ebp - 0x38]
mov dword [0x10610c64], eax
mov eax, dword [ebp - 0x34]
mov dword [0x10610c68], eax
lea eax, [ebp - 0x7c]
push eax
mov eax, dword [0x1060b5e0]
push 0x588c
push 0x1043d538
push dword [eax + 0x74]
call edi
test eax, eax
jne 0x10040a19
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x50]
push edx
push 0
push ecx
mov eax, dword [ecx]
call dword [eax + 0x44]
mov eax, dword [ebp - 0x7c]
mov dword [0x10610c6c], eax
mov eax, dword [ebp - 0x38]
mov dword [0x10610c70], eax
mov eax, dword [ebp - 0x34]
mov dword [0x10610c74], eax
lea eax, [ebp - 0x74]
push eax
mov eax, dword [0x1060b5e0]
push 0x5376
push 0x10493628
push dword [eax + 0x74]
call edi
test eax, eax
jne 0x10040a5c
mov ecx, dword [ebp - 0x74]
lea edx, [ebp - 0x50]
push edx
push 0
push ecx
mov eax, dword [ecx]
call dword [eax + 0x44]
mov eax, dword [ebp - 0x74]
mov dword [0x10610c78], eax
mov eax, dword [ebp - 0x38]
mov dword [0x10610c7c], eax
mov eax, dword [ebp - 0x34]
mov dword [0x10610c80], eax
lea eax, [ebp - 0x7c]
push eax
mov eax, dword [0x1060b5e0]
push 0x251c
push 0x10498a80
push dword [eax + 0x74]
call edi
test eax, eax
jne 0x10040a9f
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x50]
push edx
push 0
push ecx
mov eax, dword [ecx]
call dword [eax + 0x44]
mov eax, dword [ebp - 0x7c]
mov dword [0x10610c84], eax
mov eax, dword [ebp - 0x38]
mov dword [0x10610c88], eax
mov eax, dword [ebp - 0x34]
mov dword [0x10610c8c], eax
lea eax, [ebp - 0x74]
push eax
mov eax, dword [0x1060b5e0]
push 0x12b6
push 0x104a0568
push dword [eax + 0x74]
call edi
test eax, eax
jne 0x10040ae2
mov ecx, dword [ebp - 0x74]
lea edx, [ebp - 0x50]
push edx
push 0
push ecx
mov eax, dword [ecx]
call dword [eax + 0x44]
mov eax, dword [ebp - 0x74]
mov dword [0x10610c90], eax
mov eax, dword [ebp - 0x38]
mov dword [0x10610c94], eax
mov eax, dword [ebp - 0x34]
mov dword [0x10610c98], eax
lea eax, [ebp - 0x7c]
push eax
mov eax, dword [0x1060b5e0]
push 0x4ed0
push 0x1049b338
push dword [eax + 0x74]
call edi
test eax, eax
jne 0x10040b25
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x50]
push edx
push 0
push ecx
mov eax, dword [ecx]
call dword [eax + 0x44]
mov eax, dword [ebp - 0x7c]
mov dword [0x10610c9c], eax
mov eax, dword [ebp - 0x38]
mov dword [0x10610ca0], eax
mov eax, dword [ebp - 0x34]
mov dword [0x10610ca4], eax
lea eax, [ebp - 0x74]
push eax
mov eax, dword [0x1060b5e0]
push 0x2f17
push 0x1043a4e0
push dword [eax + 0x74]
call edi
test eax, eax
jne 0x10040b68
mov ecx, dword [ebp - 0x74]
lea edx, [ebp - 0x50]
push edx
push 0
push ecx
mov eax, dword [ecx]
call dword [eax + 0x44]
mov eax, dword [ebp - 0x74]
mov dword [0x10610ca8], eax
mov eax, dword [ebp - 0x38]
mov dword [0x10610cac], eax
mov eax, dword [ebp - 0x34]
mov dword [0x10610cb0], eax
mov ebx, dword [ebp - 0x78]
lea eax, [ebp - 0x100]
movss xmm3, dword [0x1041ef38]
push 0x1040d2f8
push eax
mov ecx, dword [ebx + 0x90]
push 0xae08
push 0x103e6cf0
call fcn.100967c0
mov dword [0x10610c54], eax
xor eax, eax
push 0x78
push eax
mov word [ebp - 0x14], ax
lea eax, [ebp - 0x178]
push eax
mov dword [ebp - 0x18], 0xf8ffe000
call sub.VCRUNTIME140.dll_memset
mov eax, 0xffff
mov byte [ebp - 0x170], 1
add esp, 0xc
mov word [ebp - 0x130], ax
cmp byte [0x10442dd0], 0
mov eax, dword [ebx + 0x90]
mov dword [ebp - 0x164], 3
mov dword [ebp - 0x160], 1
mov dword [ebp - 0x140], 0x7f7fffff
mov dword [ebp - 0x134], 0x3f800000
mov byte [ebp - 0x13c], 1
mov dword [ebp - 0x74], eax
jne 0x10040c6f
mov byte [0x10442dd0], 1
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10442df4]
xor ebx, dword [0x10442df0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
xor edx, ecx
shl eax, 0xd
xor ebx, eax
mov ecx, edx
mov eax, ebx
shrd eax, ecx, 7
shr ecx, 7
xor ebx, eax
xor edx, ecx
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, bl
xor cl, byte [esi + 0x10442dd1]
mov byte [esi + 0x10442dd1], cl
inc esi
cmp esi, 0x1d
jb 0x10040c15
mov ebx, dword [ebp - 0x78]
push ecx
push 0x10442ded
push 0x10442dd1
lea ecx, [ebp - 0x30]
call fcn.1001a620
mov dword [ebp - 4], 0xd
lea eax, [ebp - 0x30]
cmp dword [ebp - 0x1c], 0x10
movss xmm2, dword [0x1041ef60]
cmovae eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x74]
push 0
push 0
push eax
call fcn.10096650
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov dword [0x10610c58], eax
cmp ecx, 0x10
jb 0x10040ceb
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10040ce1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10040ce1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102bb95a
add esp, 8
movss xmm3, dword [0x1041ef60]
lea eax, [ebp - 0x18]
mov ecx, dword [ebx + 0x90]
push eax
lea eax, [ebp - 0x178]
push eax
push 0x6dd98
push 0x10377890
call fcn.100967c0
cmp byte [0x1043a2a0], 0
mov eax, dword [ebx + 0x90]
mov dword [ebp - 0x74], eax
jne 0x10040d8a
mov byte [0x1043a2a0], 1
xor esi, esi
nop
xor edx, edx
mov ebx, esi
xor edx, dword [0x1043a2c4]
xor ebx, dword [0x1043a2c0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
xor edx, ecx
shl eax, 0xd
xor ebx, eax
mov ecx, edx
mov eax, ebx
shrd eax, ecx, 7
shr ecx, 7
xor ebx, eax
xor edx, ecx
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, byte [esi + 0x1043a2a1]
xor cl, bl
mov byte [esi + 0x1043a2a1], cl
inc esi
cmp esi, 0x1d
jb 0x10040d30
mov ebx, dword [ebp - 0x78]
push ecx
push 0x1043a2bd
push 0x1043a2a1
lea ecx, [ebp - 0x30]
call fcn.1001a620
mov dword [ebp - 4], 0xe
lea eax, [ebp - 0x30]
cmp dword [ebp - 0x1c], 0x10
movss xmm2, dword [0x1041ef54]
cmovae eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x74]
push 0
push 0
push eax
call fcn.10096650
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov dword [0x10610584], eax
cmp ecx, 0x10
jb 0x10040e06
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10040dfc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10040dfc
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102bb95a
add esp, 8
movss xmm3, dword [0x1041ef54]
lea eax, [ebp - 0x18]
mov ecx, dword [ebx + 0x90]
push eax
lea eax, [ebp - 0x178]
push eax
push 4
push 0x10377890
call fcn.100967c0
cmp byte [0x1049b090], 0
mov eax, dword [ebx + 0x90]
mov dword [ebp - 0x74], eax
jne 0x10040ea0
mov byte [0x1049b090], 1
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1049b0b4]
xor ebx, dword [0x1049b0b0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
xor edx, ecx
shl eax, 0xd
xor ebx, eax
mov ecx, edx
mov eax, ebx
shrd eax, ecx, 7
shr ecx, 7
xor ebx, eax
xor edx, ecx
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, byte [esi + 0x1049b091]
xor cl, bl
mov byte [esi + 0x1049b091], cl
inc esi
cmp esi, 0x1d
jb 0x10040e46
mov ebx, dword [ebp - 0x78]
push ecx
push 0x1049b0ad
push 0x1049b091
lea ecx, [ebp - 0x30]
call fcn.1001a620
mov dword [ebp - 4], 0xf
lea eax, [ebp - 0x30]
cmp dword [ebp - 0x1c], 0x10
movss xmm2, dword [0x1041ef48]
cmovae eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x74]
push 0
push 0
push eax
call fcn.10096650
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0x10
jb 0x10040f17
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10040f0d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10040f0d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102bb95a
add esp, 8
movss xmm3, dword [0x1041ef48]
lea eax, [ebp - 0x18]
mov ecx, dword [ebx + 0x90]
push eax
lea eax, [ebp - 0x178]
push eax
push 0x6dd98
push 0x10377890
call fcn.100967c0
cmp byte [0x1049b280], 0
mov eax, dword [ebx + 0x90]
mov dword [ebp - 0x74], eax
jne 0x10040fba
mov byte [0x1049b280], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1049b2a4]
xor ebx, dword [0x1049b2a0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
xor edx, ecx
shl eax, 0xd
xor ebx, eax
mov ecx, edx
mov eax, ebx
shrd eax, ecx, 7
shr ecx, 7
xor ebx, eax
xor edx, ecx
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, byte [esi + 0x1049b281]
xor cl, bl
mov byte [esi + 0x1049b281], cl
inc esi
cmp esi, 0x1d
jb 0x10040f60
mov ebx, dword [ebp - 0x78]
push ecx
push 0x1049b29d
push 0x1049b281
lea ecx, [ebp - 0x30]
call fcn.1001a620
mov dword [ebp - 4], 0x10
lea eax, [ebp - 0x30]
cmp dword [ebp - 0x1c], 0x10
movss xmm2, dword [0x1041ef28]
cmovae eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x74]
push 0
push 0
push eax
call fcn.10096650
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0x10
jb 0x10041031
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10041027
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10041027
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102bb95a
add esp, 8
movss xmm3, dword [0x1041ef28]
lea eax, [ebp - 0x18]
mov ecx, dword [ebx + 0x90]
push eax
lea eax, [ebp - 0x178]
push eax
push 0x6dd98
push 0x10377890
call fcn.100967c0
cmp byte [0x104a7000], 0
mov eax, dword [ebx + 0x90]
mov dword [ebp - 0x74], eax
jne 0x100410ce
mov byte [0x104a7000], 1
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x104a7024]
xor ebx, dword [0x104a7020]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
xor edx, ecx
shl eax, 0xd
xor ebx, eax
mov ecx, edx
mov eax, ebx
shrd eax, ecx, 7
shr ecx, 7
xor ebx, eax
xor edx, ecx
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, byte [esi + 0x104a7001]
xor cl, bl
mov byte [esi + 0x104a7001], cl
inc esi
cmp esi, 0x1d
jb 0x10041074
mov ebx, dword [ebp - 0x78]
push ecx
push 0x104a701d
push 0x104a7001
lea ecx, [ebp - 0x30]
call fcn.1001a620
mov dword [ebp - 4], 0x11
lea eax, [ebp - 0x30]
cmp dword [ebp - 0x1c], 0x10
movss xmm2, dword [0x1041ef30]
cmovae eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x74]
push 0
push 0
push eax
call fcn.10096650
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov dword [0x1061057c], eax
cmp ecx, 0x10
jb 0x1004114a
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10041140
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10041140
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102bb95a
add esp, 8
movss xmm3, dword [0x1041ef30]
lea eax, [ebp - 0x18]
mov ecx, dword [ebx + 0x90]
push eax
lea eax, [ebp - 0x178]
push eax
push 0x6dd98
push 0x10377890
call fcn.100967c0
cmp byte [0x104a6e40], 0
mov eax, dword [ebx + 0x90]
mov dword [ebp - 0x74], eax
jne 0x100411ea
mov byte [0x104a6e40], 1
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x104a6e64]
xor ebx, dword [0x104a6e60]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
xor edx, ecx
shl eax, 0xd
xor ebx, eax
mov ecx, edx
mov eax, ebx
shrd eax, ecx, 7
shr ecx, 7
xor ebx, eax
xor edx, ecx
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, bl
xor cl, byte [esi + 0x104a6e41]
mov byte [esi + 0x104a6e41], cl
inc esi
cmp esi, 0x1d
jb 0x10041190
mov ebx, dword [ebp - 0x78]
push ecx
push 0x104a6e5d
push 0x104a6e41
lea ecx, [ebp - 0x30]
call fcn.1001a620
mov dword [ebp - 4], 0x12
lea eax, [ebp - 0x30]
cmp dword [ebp - 0x1c], 0x10
movss xmm2, dword [0x1041ef38]
cmovae eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x74]
push 0
push 0
push eax
call fcn.10096650
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov dword [0x10610c50], eax
cmp ecx, 0x10
jb 0x10041266
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004125c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1004125c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102bb95a
add esp, 8
movss xmm3, dword [0x1041ef38]
lea eax, [ebp - 0x18]
mov ecx, dword [ebx + 0x90]
push eax
lea eax, [ebp - 0x178]
push eax
push 0x6dd98
push 0x10377890
call fcn.100967c0
lea eax, [ebp - 0x78]
push eax
mov eax, dword [0x1060b5e0]
push 0x16be
push 0x103e5630
push dword [eax + 0x74]
call edi
test eax, eax
jne 0x100412c1
mov eax, dword [ebp - 0x78]
lea edx, [ebp - 0x70]
push edx
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov eax, dword [ebp - 0x78]
mov dword [0x10610af0], eax
xor ecx, ecx
call fcn.10092120
cmp dword [0x1060ff50], 0
je 0x100412d6
call fcn.1009bfb0
mov byte [0x1060fbd8], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.102bb91c
mov esp, ebp
pop ebp
ret
call fcn.1006c2e0
int3