Function at 0x1001fc30
Capabilities:
Log keystrokes via polling
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100b990e
mov eax, dword fs:[0]
push eax
sub esp, 0x394
mov eax, dword [0x100e50d4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x25c], edx
mov eax, ecx
mov dword [ebp - 0x264], eax
mov dword [ebp - 4], 0
xor ecx, ecx
mov edi, dword [eax]
mov eax, dword [edx]
mov esi, dword [0x100fed28]
mov dword [ebp - 0x248], eax
mov eax, 0x92492493
mov dword [ebp - 0x20], ecx
mov ecx, dword [0x100fed2c]
sub ecx, esi
mov dword [ebp - 0x254], edi
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x1001fe53
xor eax, eax
mov dword [ebp - 0x24c], eax
add eax, esi
lea ecx, [ebp - 0x6c]
push eax
call fcn.10021e80
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp + 8]
call fcn.10026d30
test al, al
je 0x1001fdf5
cmp dword [edi], 0x584c444d
jne 0x1001fdd4
mov esi, 4
cmp dword [ebp - 0x248], esi
jbe 0x1001fdd4
nop word [eax + eax]
cmp dword [esi + edi], 0x53514553
jne 0x1001fdbc
mov ecx, dword [esi + edi + 4]
add esi, 4
lea eax, [ecx + esi]
add esi, 4
mov dword [ebp - 0x258], eax
mov eax, 0x3e0f83e1
mul ecx
mov dword [ebp - 0x228], esi
mov eax, edx
shr eax, 5
test eax, eax
je 0x1001fdb4
lea edx, [esi + edi]
mov dword [ebp - 0x24], edx
nop dword [eax]
dec eax
lea edi, [ebp - 0x118]
cmp dword [ebp - 0x44], 0
mov ecx, 0x21
mov esi, edx
mov dword [ebp - 0x22c], eax
rep movsd dword es:[edi], dword [esi]
je 0x1001fd72
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x54]
call fcn.10026cf0
mov edx, dword [ebp - 0x24]
test al, al
je 0x1001fd91
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x228]
mov edi, dword [ebp - 0x254]
movss xmm0, dword [ebp - 0x38]
lea eax, [ecx + eax*4]
movss dword [eax + edi + 0x68], xmm0
jmp 0x1001fd97
mov edi, dword [ebp - 0x254]
add dword [ebp - 0x228], 0x84
add edx, 0x84
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x24], edx
test eax, eax
jne 0x1001fd40
mov esi, dword [ebp - 0x258]
jmp 0x1001fdc5
mov eax, dword [esi + edi + 4]
add esi, 4
add esi, eax
add esi, 4
cmp esi, dword [ebp - 0x248]
jb 0x1001fd00
mov eax, dword [0x100fed28]
mov ecx, 0x100fed28
mov esi, dword [ebp - 0x24c]
add eax, esi
push eax
lea eax, [ebp - 0x238]
push eax
call fcn.10022d30
jmp 0x1001fdfb
mov esi, dword [ebp - 0x24c]
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 2
call fcn.1000ec00
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 3
call fcn.1000ec00
add esi, 0x38
mov byte [ebp - 4], 0
mov ecx, dword [0x100fed2c]
mov eax, 0x92492493
inc dword [ebp - 0x20]
mov dword [ebp - 0x24c], esi
mov esi, dword [0x100fed28]
sub ecx, esi
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24c]
jb 0x1001fcb6
mov ecx, dword [0x100fed20]
mov eax, 0x4ec4ec4f
mov esi, dword [0x100fed1c]
sub ecx, esi
imul ecx
mov dword [ebp - 0x258], 0
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x10020830
xor ecx, ecx
imul eax, ecx, 0x34
lea ecx, [ebp - 0x68]
add esi, eax
mov dword [ebp - 0x230], eax
push esi
call fcn.10012510
lea eax, [esi + 0x18]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x50]
call fcn.10012510
movss xmm0, dword [esi + 0x30]
movss dword [ebp - 0x38], xmm0
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp + 8]
call fcn.10026d30
test al, al
je 0x100207e1
xorps xmm0, xmm0
mov dword [ebp - 0x2c], 0
xor ecx, ecx
movq qword [ebp - 0x34], xmm0
xor edx, edx
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x2c], ecx
xor esi, esi
movq qword [ebp - 0x1c], xmm0
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x24c], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], esi
mov esi, edi
mov byte [ebp - 4], 7
mov dword [ebp - 0x24], str.MDLX
mov eax, dword [esi]
cmp eax, dword [str.MDLX]
je 0x1001ff5d
mov edi, dword [ebp - 0x24]
cmp al, byte [edi]
mov edi, dword [ebp - 0x254]
jne 0x1001ff61
mov edi, dword [ebp - 0x24]
mov al, byte [esi + 1]
cmp al, byte [edi + 1]
mov edi, dword [ebp - 0x254]
jne 0x1001ff61
mov edi, dword [ebp - 0x24]
mov al, byte [esi + 2]
cmp al, byte [edi + 2]
mov edi, dword [ebp - 0x254]
jne 0x1001ff61
mov al, byte [esi + 3]
mov esi, dword [ebp - 0x24]
cmp al, byte [esi + 3]
jne 0x1001ff61
xor eax, eax
jmp 0x1001ff66
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1002056e
lea edi, [eax + 4]
mov eax, dword [ebp - 0x248]
cmp eax, edi
jbe 0x10020568
nop
mov ecx, dword [ebp - 0x254]
cmp dword [edi + ecx], 0x53514553
jne 0x10020056
mov ecx, dword [edi + ecx + 4]
add edi, 4
mov eax, 0x3e0f83e1
mov esi, edi
mul ecx
add edi, ecx
mov ecx, edx
mov dword [ebp - 0x24], edi
shr ecx, 5
test ecx, ecx
je 0x1002004b
mov eax, dword [ebp - 0x254]
add eax, 0x58
add esi, eax
mov dword [ebp - 0x228], esi
nop word [eax + eax]
dec ecx
lea edi, [ebp - 0x224]
mov dword [ebp - 0x24c], ecx
lea eax, [ebp - 0x224]
add esi, 0xffffffac
mov ecx, 0x21
rep movsd dword es:[edi], dword [esi]
push eax
lea ecx, [ebp - 0x50]
call fcn.10026cf0
mov esi, dword [ebp - 0x228]
test al, al
mov ecx, dword [ebp - 0x20]
mov edi, dword [ebp - 0x22c]
cmovne ecx, edi
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0x34]
lea eax, [esi - 4]
mov dword [ebp - 0x240], esi
mov dword [ebp - 0x244], eax
lea eax, [ebp - 0x244]
push eax
call fcn.10022ae0
mov ecx, dword [ebp - 0x24c]
add esi, 0x84
inc edi
mov dword [ebp - 0x228], esi
mov dword [ebp - 0x22c], edi
test ecx, ecx
jne 0x1001ffd0
mov edi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x248]
jmp 0x1002054c
cmp dword [edi + ecx], 0x454e4f42
jne 0x100200ef
mov esi, dword [edi + ecx + 4]
add edi, 4
add esi, edi
add edi, 4
cmp esi, edi
jbe 0x10020352
movups xmm0, xmmword [edi + ecx]
lea eax, [ebp - 0x1c]
push eax
movups xmmword [ebp - 0x278], xmm0
lea edx, [edi + 0x60]
movups xmm0, xmmword [edi + ecx + 0x10]
movups xmmword [ebp - 0x2d0], xmm0
movups xmm0, xmmword [edi + ecx + 0x20]
movups xmmword [ebp - 0x2c0], xmm0
movups xmm0, xmmword [edi + ecx + 0x30]
movups xmmword [ebp - 0x2b0], xmm0
movups xmm0, xmmword [edi + ecx + 0x40]
movups xmmword [ebp - 0x2a0], xmm0
movups xmm0, xmmword [edi + ecx + 0x50]
movups xmmword [ebp - 0x290], xmm0
call fcn.1001fa10
mov eax, dword [ebp - 0x278]
add esp, 4
mov ecx, dword [ebp - 0x254]
add eax, 8
add edi, eax
cmp esi, edi
ja 0x10020077
mov eax, dword [ebp - 0x248]
mov edi, esi
jmp 0x1002054c
cmp dword [edi + ecx], 0x504c4548
jne 0x10020183
mov esi, dword [edi + ecx + 4]
add edi, 4
add esi, edi
add edi, 4
cmp esi, edi
jbe 0x10020352
movups xmm0, xmmword [edi + ecx]
lea eax, [ebp - 0x1c]
push eax
movups xmmword [ebp - 0x278], xmm0
lea edx, [edi + 0x60]
movups xmm0, xmmword [edi + ecx + 0x10]
movups xmmword [ebp - 0x2d0], xmm0
movups xmm0, xmmword [edi + ecx + 0x20]
movups xmmword [ebp - 0x2c0], xmm0
movups xmm0, xmmword [edi + ecx + 0x30]
movups xmmword [ebp - 0x2b0], xmm0
movups xmm0, xmmword [edi + ecx + 0x40]
movups xmmword [ebp - 0x2a0], xmm0
movups xmm0, xmmword [edi + ecx + 0x50]
movups xmmword [ebp - 0x290], xmm0
call fcn.1001fa10
add edi, dword [ebp - 0x278]
add esp, 4
mov ecx, dword [ebp - 0x254]
cmp esi, edi
ja 0x10020110
mov eax, dword [ebp - 0x248]
mov edi, esi
jmp 0x1002054c
cmp dword [edi + ecx], 0x4554494c
jne 0x100201dd
mov eax, dword [edi + ecx + 4]
add edi, 4
add eax, edi
add edi, 4
mov dword [ebp - 0x228], eax
cmp eax, edi
jbe 0x10020499
mov esi, dword [edi + ecx]
lea eax, [ebp - 0x1c]
add edi, 4
push eax
lea edx, [edi + 0x60]
call fcn.1001fa10
mov eax, dword [ebp - 0x228]
add edi, 0xfffffffc
mov ecx, dword [ebp - 0x254]
add edi, esi
add esp, 4
cmp eax, edi
ja 0x100201a6
mov edi, eax
mov eax, dword [ebp - 0x248]
jmp 0x1002054c
cmp dword [edi + ecx], 0x48435441
jne 0x10020237
mov eax, dword [edi + ecx + 4]
add edi, 4
add eax, edi
add edi, 4
mov dword [ebp - 0x228], eax
cmp eax, edi
jbe 0x10020499
mov esi, dword [edi + ecx]
lea eax, [ebp - 0x1c]
add edi, 4
push eax
lea edx, [edi + 0x60]
call fcn.1001fa10
mov eax, dword [ebp - 0x228]
add edi, 0xfffffffc
mov ecx, dword [ebp - 0x254]
add edi, esi
add esp, 4
cmp eax, edi
ja 0x10020200
mov edi, eax
mov eax, dword [ebp - 0x248]
jmp 0x1002054c
cmp dword [edi + ecx], 0x4d455250
jne 0x10020297
mov eax, dword [edi + ecx + 4]
add edi, 4
add eax, edi
add edi, 4
mov dword [ebp - 0x228], eax
cmp eax, edi
jbe 0x10020499
nop word [eax + eax]
mov esi, dword [edi + ecx]
lea eax, [ebp - 0x1c]
add edi, 4
push eax
lea edx, [edi + 0x60]
call fcn.1001fa10
mov eax, dword [ebp - 0x228]
add edi, 0xfffffffc
mov ecx, dword [ebp - 0x254]
add edi, esi
add esp, 4
cmp eax, edi
ja 0x10020260
mov edi, eax
mov eax, dword [ebp - 0x248]
jmp 0x1002054c
cmp dword [edi + ecx], 0x32455250
jne 0x100202f7
mov eax, dword [edi + ecx + 4]
add edi, 4
add eax, edi
add edi, 4
mov dword [ebp - 0x228], eax
cmp eax, edi
jbe 0x10020499
nop word [eax + eax]
mov esi, dword [edi + ecx]
lea eax, [ebp - 0x1c]
add edi, 4
push eax
lea edx, [edi + 0x60]
call fcn.1001fa10
mov eax, dword [ebp - 0x228]
add edi, 0xfffffffc
mov ecx, dword [ebp - 0x254]
add edi, esi
add esp, 4
cmp eax, edi
ja 0x100202c0
mov edi, eax
mov eax, dword [ebp - 0x248]
jmp 0x1002054c
cmp dword [edi + ecx], 0x414f4547
jne 0x10020359
mov esi, dword [edi + ecx + 4]
add edi, 4
add esi, edi
add edi, 4
cmp esi, edi
jbe 0x10020352
movups xmm0, xmmword [edi + ecx]
mov eax, dword [edi + ecx + 0x18]
lea edx, [edi + 0x1c]
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x1c]
movups xmmword [ebp - 0x278], xmm0
push eax
movq xmm0, qword [edi + ecx + 0x10]
movq qword [ebp - 0x78], xmm0
call fcn.1001fa10
add edi, dword [ebp - 0x278]
add esp, 4
mov ecx, dword [ebp - 0x254]
cmp esi, edi
ja 0x10020310
mov eax, dword [ebp - 0x248]
mov edi, esi
jmp 0x1002054c
cmp dword [edi + ecx], 0x42424952
jne 0x100203b7
mov eax, dword [edi + ecx + 4]
add edi, 4
add eax, edi
add edi, 4
mov dword [ebp - 0x228], eax
cmp eax, edi
jbe 0x10020499
nop dword [eax]
mov esi, dword [edi + ecx]
lea eax, [ebp - 0x1c]
add edi, 4
push eax
lea edx, [edi + 0x60]
call fcn.1001fa10
mov eax, dword [ebp - 0x228]
add edi, 0xfffffffc
mov ecx, dword [ebp - 0x254]
add edi, esi
add esp, 4
cmp eax, edi
ja 0x10020380
mov edi, eax
mov eax, dword [ebp - 0x248]
jmp 0x1002054c
cmp dword [edi + ecx], 0x53545645
jne 0x100204a6
mov eax, dword [edi + ecx + 4]
add eax, 4
add eax, edi
add edi, 8
mov dword [ebp - 0x24c], eax
cmp eax, edi
jbe 0x10020499
nop
movups xmm0, xmmword [edi + ecx]
lea eax, [ebp - 0x1c]
push eax
movups xmmword [ebp - 0x278], xmm0
lea edx, [edi + 0x60]
movups xmm0, xmmword [edi + ecx + 0x10]
movups xmmword [ebp - 0x2d0], xmm0
movups xmm0, xmmword [edi + ecx + 0x20]
movups xmmword [ebp - 0x2c0], xmm0
movups xmm0, xmmword [edi + ecx + 0x30]
movups xmmword [ebp - 0x2b0], xmm0
movups xmm0, xmmword [edi + ecx + 0x40]
movups xmmword [ebp - 0x2a0], xmm0
movups xmm0, xmmword [edi + ecx + 0x50]
movups xmmword [ebp - 0x290], xmm0
call fcn.1001fa10
add edi, dword [ebp - 0x278]
add esp, 4
mov ecx, dword [ebp - 0x254]
cmp dword [edi + ecx], 0x5456454b
jne 0x10020488
mov esi, dword [edi + ecx + 4]
mov eax, dword [edi + ecx + 8]
add edi, 0xc
mov dword [ebp - 0x26c], eax
test esi, esi
jle 0x1002048b
lea eax, [edi + ecx]
mov dword [ebp - 0x228], eax
lea ecx, [ebp - 0x1c]
lea eax, [ebp - 0x228]
push eax
call fcn.10022aa0
mov ecx, dword [ebp - 0x254]
add edi, 4
sub esi, 1
jne 0x10020460
jmp 0x1002048b
add edi, 4
mov eax, dword [ebp - 0x24c]
cmp eax, edi
ja 0x100203e0
mov edi, eax
mov eax, dword [ebp - 0x248]
jmp 0x1002054c
cmp dword [edi + ecx], 0x44494c43
jne 0x10020546
lea esi, [edi + 4]
add esi, dword [edi + ecx + 4]
add edi, 8
cmp esi, edi
jbe 0x1002053c
movups xmm0, xmmword [edi + ecx]
lea eax, [ebp - 0x1c]
push eax
movups xmmword [ebp - 0x278], xmm0
lea edx, [edi + 0x60]
movups xmm0, xmmword [edi + ecx + 0x10]
movups xmmword [ebp - 0x2d0], xmm0
movups xmm0, xmmword [edi + ecx + 0x20]
movups xmmword [ebp - 0x2c0], xmm0
movups xmm0, xmmword [edi + ecx + 0x30]
movups xmmword [ebp - 0x2b0], xmm0
movups xmm0, xmmword [edi + ecx + 0x40]
movups xmmword [ebp - 0x2a0], xmm0
movups xmm0, xmmword [edi + ecx + 0x50]
movups xmmword [ebp - 0x290], xmm0
call fcn.1001fa10
add edi, dword [ebp - 0x278]
xor eax, eax
mov ecx, dword [ebp - 0x254]
add esp, 4
cmp dword [edi + ecx], eax
sete al
lea eax, [eax*8 + 0x14]
add edi, eax
cmp esi, edi
ja 0x100204c5
mov eax, dword [ebp - 0x248]
mov edi, esi
jmp 0x1002054c
add edi, 4
add edi, dword [edi + ecx]
add edi, 4
cmp edi, eax
jb 0x1001ff80
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x254]
jmp 0x10020574
mov edi, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
cmp dword [ebp - 0x20], 0xffffffff
je 0x1002077f
mov eax, edx
xor esi, esi
sub eax, ecx
sar eax, 3
test eax, eax
je 0x100205f8
lea eax, [ebp - 0xf8]
mov dword [ebp - 0x22c], 0x41f00000
mov dword [ebp - 0x228], eax
mov eax, dword [ecx + esi*8]
push dword [eax]
mov eax, dword [ecx + esi*8 + 4]
push dword [eax]
lea eax, [ebp - 0xf8]
push str.IntervalEnd:__d_IntervalStart:__d
push eax
call fcn.1001e1e0
add esp, 0x10
cmp dword [0x100f26d8], 0
jbe 0x100205e6
push 0xffffffffffffffff
push dword [ebp - 0x22c]
push dword [ebp - 0x228]
mov ecx, dword [0x100f2708]
mov ecx, dword [ecx]
mov eax, dword [0x100f28b8]
call eax
mov edx, dword [ebp - 0x30]
inc esi
mov ecx, dword [ebp - 0x34]
mov eax, edx
sub eax, ecx
sar eax, 3
cmp esi, eax
jb 0x100205a1
mov esi, dword [ebp - 0x20]
mov eax, dword [ecx + esi*8 + 4]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov eax, dword [ecx + esi*8]
mov esi, dword [eax]
mov eax, dword [ebp - 0x24]
sub eax, esi
mov dword [ebp - 0x228], esi
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, dword [ebp - 0x38]
cvttss2si eax, xmm0
add eax, esi
xor esi, esi
mov dword [ebp - 0x28], eax
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x22c], eax
mov eax, edx
sub eax, ecx
sar eax, 3
test eax, eax
je 0x10020677
mov edi, dword [ebp - 0x22c]
mov eax, dword [ecx + esi*8]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x24]
jl 0x10020665
mov ecx, dword [ecx + esi*8]
add eax, edi
mov dword [ecx], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + esi*8 + 4]
add dword [eax], edi
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov eax, edx
inc esi
sub eax, ecx
sar eax, 3
cmp esi, eax
jb 0x10020645
mov edi, dword [ebp - 0x254]
mov esi, dword [ebp - 0x20]
mov eax, dword [ecx + esi*8 + 4]
xor esi, esi
mov ecx, dword [ebp - 0x28]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
sub edx, ecx
mov dword [ebp - 0x24c], ecx
add edx, 3
shr edx, 2
cmp ecx, dword [ebp - 0x18]
cmova edx, esi
mov dword [ebp - 0x20], edx
test edx, edx
je 0x100206f9
mov edi, edx
mov edx, dword [ecx]
mov eax, dword [edx]
cmp eax, dword [ebp - 0x24]
jl 0x100206bc
add eax, dword [ebp - 0x22c]
mov edi, dword [ebp - 0x20]
jmp 0x100206e0
cmp eax, dword [ebp - 0x228]
jl 0x100206e2
sub eax, dword [ebp - 0x228]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, dword [ebp - 0x38]
cvttss2si eax, xmm0
add eax, dword [ebp - 0x228]
mov dword [edx], eax
inc esi
add ecx, 4
cmp esi, edi
jne 0x100206a8
mov eax, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x254]
mov dword [ebp - 0x24c], eax
mov edx, dword [ebp - 0x30]
xor esi, esi
mov ecx, dword [ebp - 0x34]
mov eax, edx
sub eax, ecx
sar eax, 3
test eax, eax
je 0x10020779
lea eax, [ebp - 0xf8]
mov dword [ebp - 0x28], 0x41f00000
mov dword [ebp - 0x22c], eax
nop
mov eax, dword [ecx + esi*8]
push dword [eax]
mov eax, dword [ecx + esi*8 + 4]
push dword [eax]
lea eax, [ebp - 0xf8]
push str.IntervalEnd:__d_IntervalStart:__d
push eax
call fcn.1001e1e0
add esp, 0x10
cmp dword [0x100f26d8], 0
jbe 0x10020762
push 0xffffffffffffffff
push dword [ebp - 0x28]
push dword [ebp - 0x22c]
mov ecx, dword [0x100f2708]
mov ecx, dword [ecx]
mov eax, dword [0x100f28b8]
call eax
mov edx, dword [ebp - 0x30]
inc esi
mov ecx, dword [ebp - 0x34]
mov eax, edx
sub eax, ecx
sar eax, 3
cmp esi, eax
jb 0x10020720
mov eax, dword [ebp - 0x1c]
jmp 0x1002077f
mov eax, dword [ebp - 0x24c]
cmp eax, dword [ebp - 0x18]
je 0x10020792
lea ecx, [ebp - 0x1c]
call fcn.10022ad0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
cmp ecx, edx
je 0x1002079e
lea ecx, [ebp - 0x34]
call fcn.10022ad0
lea eax, [ebp - 0x238]
mov ecx, 0x100fed1c
push eax
call fcn.10022e20
mov ecx, 0x100fed1c
mov eax, dword [eax]
add eax, dword [ebp - 0x230]
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.10022e40
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 8
call fcn.10012740
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 9
call fcn.10022b10
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0xa
call fcn.1000ec00
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0xb
call fcn.1000ec00
inc dword [ebp - 0x258]
mov eax, 0x4ec4ec4f
mov byte [ebp - 4], 0
mov ecx, dword [0x100fed20]
mov esi, dword [0x100fed1c]
sub ecx, esi
imul ecx
mov ecx, dword [ebp - 0x258]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jb 0x1001fe84
mov esi, dword [0x100fed10]
xor ecx, ecx
mov dword [ebp - 0x258], ecx
mov eax, 0x2aaaaaab
mov ecx, dword [0x100fed14]
sub ecx, esi
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x10020a03
xor eax, eax
mov dword [ebp - 0x24c], eax
add esi, eax
lea ecx, [ebp - 0x64]
push esi
call fcn.10012510
lea eax, [esi + 0x18]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x4c]
call fcn.10012510
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp + 8]
call fcn.10026d30
test al, al
je 0x100209a1
xor esi, esi
mov dword [ebp - 0x228], 0
cmp dword [edi], 0x584c444d
mov dword [ebp - 0x22c], 0
jne 0x10020972
mov edx, 4
cmp dword [ebp - 0x248], edx
jbe 0x10020972
nop dword [eax + eax]
cmp dword [ebp - 0x38], 0x10
lea ecx, [ebp - 0x4c]
mov eax, dword [edx + edi]
cmovae ecx, dword [ebp - 0x4c]
cmp eax, dword [ecx]
jne 0x10020901
mov ecx, edx
mov eax, 1
add edx, 4
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x22c], ecx
add edx, dword [edx + edi]
mov esi, edx
sub esi, ecx
jmp 0x10020916
mov eax, dword [edx + edi + 4]
mov ecx, dword [ebp - 0x22c]
add eax, 4
add edx, eax
mov eax, dword [ebp - 0x228]
add edx, 4
cmp edx, dword [ebp - 0x248]
jb 0x100208d0
test eax, eax
je 0x10020972
mov eax, dword [ebp - 0x248]
sub eax, esi
mov dword [ebp - 0x248], eax
sub eax, ecx
push eax
lea eax, [ecx + 4]
add eax, esi
add eax, edi
push eax
lea eax, [ecx + edi]
push eax
call fcn.10099e70
push esi
mov esi, dword [ebp - 0x248]
push 0xff
lea eax, [esi - 4]
add eax, edi
push eax
call fcn.1009a970
mov eax, dword [ebp - 0x25c]
add esp, 0x18
add esi, 0xfffffffc
mov dword [ebp - 0x248], esi
mov dword [eax], esi
lea eax, [ebp - 0x260]
mov ecx, 0x100fed10
push eax
call fcn.10022f20
mov esi, dword [ebp - 0x24c]
mov ecx, 0x100fed10
mov eax, dword [eax]
add eax, esi
push eax
lea eax, [ebp - 0x238]
push eax
call fcn.10022f40
jmp 0x100209a7
mov esi, dword [ebp - 0x24c]
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0xe
call fcn.1000ec00
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0xf
call fcn.1000ec00
inc dword [ebp - 0x258]
add esi, 0x30
mov byte [ebp - 4], 0
mov eax, 0x2aaaaaab
mov ecx, dword [0x100fed14]
mov dword [ebp - 0x24c], esi
mov esi, dword [0x100fed10]
sub ecx, esi
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x24c]
jb 0x10020865
mov esi, dword [0x100fed34]
xor ecx, ecx
mov dword [ebp - 0x228], ecx
mov eax, 0x66666667
mov ecx, dword [0x100fed38]
sub ecx, esi
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x1002175c
mov eax, dword [ebp - 0x228]
lea ecx, [ebp - 0x94]
lea eax, [eax + eax*4]
shl eax, 3
mov dword [ebp - 0x238], eax
add eax, esi
push eax
call fcn.10021ef0
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp + 8]
call fcn.10026d30
test al, al
je 0x10021718
mov eax, dword [0x100fed40]
cmp eax, dword [0x100fed44]
je 0x10020a7e
mov ecx, 0x100fed40
call fcn.10022b90
xor eax, eax
xorps xmm0, xmm0
xor ecx, ecx
movq qword [ebp - 0x34], xmm0
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 0x11
cmp dword [edi], 0x584c444d
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x258], eax
jne 0x10020af0
mov esi, 4
cmp dword [ebp - 0x248], esi
jbe 0x10020af0
mov eax, dword [ebp - 0x248]
cmp dword [esi + edi], 0x53424c47
mov edx, esi
jne 0x10020d1e
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x258], 1
add esi, 4
add esi, dword [esi + edi]
add esi, 4
cmp esi, eax
jb 0x10020ac1
mov eax, dword [ebp - 0x34]
mov esi, dword [ebp - 0x30]
inc ecx
sub esi, eax
mov dword [ebp - 0x20], ecx
add esi, 3
xor edx, edx
shr esi, 2
cmp eax, dword [ebp - 0x30]
cmova esi, edx
mov dword [ebp - 0x230], esi
test esi, esi
je 0x10020b2d
mov edi, esi
mov esi, dword [eax]
cmp dword [esi], 0xffffffff
jne 0x10020b1f
mov dword [esi], ecx
mov ecx, dword [ebp - 0x20]
inc edx
add eax, 4
cmp edx, edi
jne 0x10020b13
mov edi, dword [ebp - 0x254]
push dword [ebp - 0x260]
mov eax, dword [ebp - 0x248]
mov ecx, dword [0x100fed44]
add eax, edi
push eax
push edi
mov esi, ecx
sub esi, dword [0x100fed40]
push ecx
mov ecx, 0x100fed40
call fcn.10026d90
push esi
lea eax, [ebp - 0x260]
mov ecx, 0x100fed40
push eax
call fcn.10026cd0
mov eax, dword [ebp - 0x22c]
test eax, eax
je 0x10020bba
push dword [ebp - 0x260]
add eax, dword [0x100fed40]
lea ecx, [ebp - 0x10]
push ecx
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x14], 0
push ecx
xorps xmm0, xmm0
mov esi, eax
sub esi, dword [0x100fed40]
mov ecx, 0x100fed40
push eax
movq qword [ebp - 0x1c], xmm0
call fcn.10026d90
push esi
lea eax, [ebp - 0x27c]
mov ecx, 0x100fed40
push eax
call fcn.10026cd0
push dword [ebp - 0x27c]
mov eax, dword [0x100fed44]
mov ecx, 0x100fed40
push 0x100e5acc
push str.BONE
mov esi, eax
sub esi, dword [0x100fed40]
push eax
call fcn.10026d90
push esi
lea eax, [ebp - 0x280]
mov ecx, 0x100fed40
push eax
call fcn.10026cd0
lea eax, [ebp - 0x20]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x1f]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x1e]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x1d]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
push dword [ebp - 0x280]
mov eax, dword [0x100fed44]
mov ecx, 0x100fed40
push 0x100e5a64
push 0x100e5a48
mov esi, eax
sub esi, dword [0x100fed40]
push eax
call fcn.10026d90
push esi
lea eax, [ebp - 0x268]
mov ecx, 0x100fed40
push eax
call fcn.10026cd0
movss xmm0, dword [ebp - 0x7c]
mov ecx, 0x100fed40
ucomiss xmm0, dword [0x100da388]
lahf
test ah, 0x44
jnp 0x10021472
lea eax, [ebp - 0x7c]
push eax
call fcn.10022ba0
lea eax, [ebp - 0x7b]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x7a]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x79]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x7c]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x7b]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x7a]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x79]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x7c]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x7b]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x7a]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x79]
jmp 0x1002150a
cmp dword [esi + edi], 0x54564950
jne 0x10020d4e
add esi, 4
mov eax, dword [esi + edi]
lea ecx, [esi + edi]
add esi, eax
add eax, 0xc
mov dword [ecx], eax
mov ecx, dword [ebp - 0x20]
lea eax, [esi + 4]
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0x248]
jmp 0x10020ae6
cmp dword [esi + edi], 0x454e4f42
jne 0x10020e16
mov eax, dword [esi + edi + 4]
add esi, 4
add eax, esi
add esi, 4
mov dword [ebp - 0x28], eax
cmp eax, esi
jbe 0x10021465
nop dword [eax]
nop word [eax + eax]
movups xmm0, xmmword [esi + edi]
movups xmmword [ebp - 0x340], xmm0
movups xmm0, xmmword [esi + edi + 0x10]
movups xmmword [ebp - 0x330], xmm0
movups xmm0, xmmword [esi + edi + 0x20]
movups xmmword [ebp - 0x320], xmm0
movups xmm0, xmmword [esi + edi + 0x30]
movups xmmword [ebp - 0x310], xmm0
movups xmm0, xmmword [esi + edi + 0x40]
movups xmmword [ebp - 0x300], xmm0
movups xmm0, xmmword [esi + edi + 0x50]
psrldq xmm0, 4
movd eax, xmm0
cmp eax, 0xffffffff
je 0x10020dd6
cmp eax, ecx
cmova ecx, eax
mov dword [ebp - 0x20], ecx
lea eax, [edi + 0x58]
add eax, esi
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x230], eax
lea eax, [ebp - 0x230]
push eax
call fcn.10022aa0
mov eax, dword [ebp - 0x340]
mov ecx, dword [ebp - 0x20]
add eax, 8
add esi, eax
mov eax, dword [ebp - 0x28]
cmp eax, esi
ja 0x10020d80
mov esi, eax
mov eax, dword [ebp - 0x248]
jmp 0x10020ae6
cmp dword [esi + edi], 0x504c4548
jne 0x10020ecd
mov eax, dword [esi + edi + 4]
add esi, 4
add eax, esi
add esi, 4
mov dword [ebp - 0x28], eax
cmp eax, esi
jbe 0x10021465
nop word [eax + eax]
movups xmm0, xmmword [esi + edi]
movups xmmword [ebp - 0x3a0], xmm0
movups xmm0, xmmword [esi + edi + 0x10]
movups xmmword [ebp - 0x390], xmm0
movups xmm0, xmmword [esi + edi + 0x20]
movups xmmword [ebp - 0x380], xmm0
movups xmm0, xmmword [esi + edi + 0x30]
movups xmmword [ebp - 0x370], xmm0
movups xmm0, xmmword [esi + edi + 0x40]
movups xmmword [ebp - 0x360], xmm0
movups xmm0, xmmword [esi + edi + 0x50]
psrldq xmm0, 4
movd eax, xmm0
cmp eax, 0xffffffff
je 0x10020e96
cmp eax, ecx
cmova ecx, eax
mov dword [ebp - 0x20], ecx
lea eax, [edi + 0x58]
add eax, esi
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x230], eax
lea eax, [ebp - 0x230]
push eax
call fcn.10022aa0
add esi, dword [ebp - 0x3a0]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
cmp eax, esi
ja 0x10020e40
mov esi, eax
mov eax, dword [ebp - 0x248]
jmp 0x10020ae6
cmp dword [esi + edi], 0x4554494c
jne 0x10020f93
mov eax, dword [esi + edi + 4]
add esi, 4
add eax, esi
add esi, 4
mov dword [ebp - 0x24c], eax
cmp eax, esi
jbe 0x10021465
mov eax, dword [esi + edi]
add esi, 4
mov dword [ebp - 0x28], eax
movups xmm0, xmmword [esi + edi]
movups xmmword [ebp - 0xf4], xmm0
movups xmm0, xmmword [esi + edi + 0x10]
movups xmmword [ebp - 0xe4], xmm0
movups xmm0, xmmword [esi + edi + 0x20]
movups xmmword [ebp - 0xd4], xmm0
movups xmm0, xmmword [esi + edi + 0x30]
movups xmmword [ebp - 0xc4], xmm0
movups xmm0, xmmword [esi + edi + 0x40]
movups xmmword [ebp - 0xb4], xmm0
movups xmm0, xmmword [esi + edi + 0x50]
psrldq xmm0, 4
movd eax, xmm0
cmp eax, 0xffffffff
je 0x10020f53
cmp eax, ecx
cmova ecx, eax
mov dword [ebp - 0x20], ecx
lea eax, [edi + 0x58]
add eax, esi
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x230], eax
lea eax, [ebp - 0x230]
push eax
call fcn.10022aa0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
add eax, 0xfffffffc
add esi, eax
mov eax, dword [ebp - 0x24c]
cmp eax, esi
ja 0x10020ef4
mov esi, eax
mov eax, dword [ebp - 0x248]
jmp 0x10020ae6
cmp dword [esi + edi], 0x48435441
jne 0x1002105f
mov eax, dword [esi + edi + 4]
add esi, 4
add eax, esi
add esi, 4
mov dword [ebp - 0x24c], eax
cmp eax, esi
jbe 0x10021465
nop word [eax + eax]
mov eax, dword [esi + edi]
add esi, 4
mov dword [ebp - 0x28], eax
movups xmm0, xmmword [esi + edi]
movups xmmword [ebp - 0xf4], xmm0
movups xmm0, xmmword [esi + edi + 0x10]
movups xmmword [ebp - 0xe4], xmm0
movups xmm0, xmmword [esi + edi + 0x20]
movups xmmword [ebp - 0xd4], xmm0
movups xmm0, xmmword [esi + edi + 0x30]
movups xmmword [ebp - 0xc4], xmm0
movups xmm0, xmmword [esi + edi + 0x40]
movups xmmword [ebp - 0xb4], xmm0
movups xmm0, xmmword [esi + edi + 0x50]
psrldq xmm0, 4
movd eax, xmm0
cmp eax, 0xffffffff
je 0x1002101f
cmp eax, ecx
cmova ecx, eax
mov dword [ebp - 0x20], ecx
lea eax, [edi + 0x58]
add eax, esi
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x230], eax
lea eax, [ebp - 0x230]
push eax
call fcn.10022aa0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
add eax, 0xfffffffc
add esi, eax
mov eax, dword [ebp - 0x24c]
cmp eax, esi
ja 0x10020fc0
mov esi, eax
mov eax, dword [ebp - 0x248]
jmp 0x10020ae6
cmp dword [esi + edi], 0x4d455250
jne 0x10021125
mov eax, dword [esi + edi + 4]
add esi, 4
add eax, esi
add esi, 4
mov dword [ebp - 0x24c], eax
cmp eax, esi
jbe 0x10021465
mov eax, dword [esi + edi]
add esi, 4
mov dword [ebp - 0x28], eax
movups xmm0, xmmword [esi + edi]
movups xmmword [ebp - 0xf4], xmm0
movups xmm0, xmmword [esi + edi + 0x10]
movups xmmword [ebp - 0xe4], xmm0
movups xmm0, xmmword [esi + edi + 0x20]
movups xmmword [ebp - 0xd4], xmm0
movups xmm0, xmmword [esi + edi + 0x30]
movups xmmword [ebp - 0xc4], xmm0
movups xmm0, xmmword [esi + edi + 0x40]
movups xmmword [ebp - 0xb4], xmm0
movups xmm0, xmmword [esi + edi + 0x50]
psrldq xmm0, 4
movd eax, xmm0
cmp eax, 0xffffffff
je 0x100210e5
cmp eax, ecx
cmova ecx, eax
mov dword [ebp - 0x20], ecx
lea eax, [edi + 0x58]
add eax, esi
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x230], eax
lea eax, [ebp - 0x230]
push eax
call fcn.10022aa0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
add eax, 0xfffffffc
add esi, eax
mov eax, dword [ebp - 0x24c]
cmp eax, esi
ja 0x10021086
mov esi, eax
mov eax, dword [ebp - 0x248]
jmp 0x10020ae6
cmp dword [esi + edi], 0x32455250
jne 0x100211ef
mov eax, dword [esi + edi + 4]
add esi, 4
add eax, esi
add esi, 4
mov dword [ebp - 0x24c], eax
cmp eax, esi
jbe 0x10021465
nop dword [eax]
mov eax, dword [esi + edi]
add esi, 4
mov dword [ebp - 0x28], eax
movups xmm0, xmmword [esi + edi]
movups xmmword [ebp - 0xf4], xmm0
movups xmm0, xmmword [esi + edi + 0x10]
movups xmmword [ebp - 0xe4], xmm0
movups xmm0, xmmword [esi + edi + 0x20]
movups xmmword [ebp - 0xd4], xmm0
movups xmm0, xmmword [esi + edi + 0x30]
movups xmmword [ebp - 0xc4], xmm0
movups xmm0, xmmword [esi + edi + 0x40]
movups xmmword [ebp - 0xb4], xmm0
movups xmm0, xmmword [esi + edi + 0x50]
psrldq xmm0, 4
movd eax, xmm0
cmp eax, 0xffffffff
je 0x100211af
cmp eax, ecx
cmova ecx, eax
mov dword [ebp - 0x20], ecx
lea eax, [edi + 0x58]
add eax, esi
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x230], eax
lea eax, [ebp - 0x230]
push eax
call fcn.10022aa0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
add eax, 0xfffffffc
add esi, eax
mov eax, dword [ebp - 0x24c]
cmp eax, esi
ja 0x10021150
mov esi, eax
mov eax, dword [ebp - 0x248]
jmp 0x10020ae6
cmp dword [esi + edi], 0x42424952
jne 0x100212b1
mov esi, dword [esi + edi + 4]
lea eax, [edx + 8]
add esi, 4
add esi, edx
cmp esi, eax
jbe 0x10021399
mov edx, dword [eax + edi]
add eax, 4
mov dword [ebp - 0x24c], edx
mov dword [ebp - 0x28], eax
movups xmm0, xmmword [eax + edi]
movups xmmword [ebp - 0xf4], xmm0
movups xmm0, xmmword [eax + edi + 0x10]
movups xmmword [ebp - 0xe4], xmm0
movups xmm0, xmmword [eax + edi + 0x20]
movups xmmword [ebp - 0xd4], xmm0
movups xmm0, xmmword [eax + edi + 0x30]
movups xmmword [ebp - 0xc4], xmm0
movups xmm0, xmmword [eax + edi + 0x40]
movups xmmword [ebp - 0xb4], xmm0
movups xmm0, xmmword [eax + edi + 0x50]
psrldq xmm0, 4
movd edx, xmm0
cmp edx, 0xffffffff
je 0x10021275
cmp edx, ecx
cmova ecx, edx
mov dword [ebp - 0x20], ecx
add eax, 0x58
lea ecx, [ebp - 0x34]
add eax, edi
mov dword [ebp - 0x230], eax
lea eax, [ebp - 0x230]
push eax
call fcn.10022aa0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
add eax, 0xfffffffc
add eax, dword [ebp - 0x24c]
cmp esi, eax
ja 0x10021210
mov eax, dword [ebp - 0x248]
jmp 0x10020ae6
cmp dword [esi + edi], 0x53545645
jne 0x100213a4
mov eax, dword [esi + edi + 4]
lea esi, [edx + 4]
add edx, 8
add esi, eax
mov dword [ebp - 0x24c], edx
cmp esi, edx
jbe 0x10021399
nop dword [eax + eax]
movups xmm0, xmmword [edx + edi]
movups xmmword [ebp - 0x200], xmm0
movups xmm0, xmmword [edx + edi + 0x10]
movups xmmword [ebp - 0x1f0], xmm0
movups xmm0, xmmword [edx + edi + 0x20]
movups xmmword [ebp - 0x1e0], xmm0
movups xmm0, xmmword [edx + edi + 0x30]
movups xmmword [ebp - 0x1d0], xmm0
movups xmm0, xmmword [edx + edi + 0x40]
movups xmmword [ebp - 0x1c0], xmm0
movups xmm0, xmmword [edx + edi + 0x50]
psrldq xmm0, 4
movd eax, xmm0
cmp eax, 0xffffffff
je 0x10021336
cmp eax, ecx
cmova ecx, eax
mov dword [ebp - 0x20], ecx
lea eax, [edx + 0x58]
add eax, edi
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x230], eax
lea eax, [ebp - 0x230]
push eax
call fcn.10022aa0
mov edx, dword [ebp - 0x24c]
add edx, dword [ebp - 0x200]
cmp dword [edx + edi], 0x5456454b
jne 0x10021385
mov ecx, dword [edx + edi + 4]
mov eax, dword [edx + edi + 8]
add edx, 0xc
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x24c], edx
test ecx, ecx
jle 0x1002138e
lea edx, [edx + ecx*4]
jmp 0x10021388
add edx, 4
mov dword [ebp - 0x24c], edx
mov ecx, dword [ebp - 0x20]
cmp esi, edx
ja 0x100212e0
mov eax, dword [ebp - 0x248]
jmp 0x10020ae6
cmp dword [esi + edi], 0x44494c43
jne 0x10020ae0
mov eax, dword [esi + edi + 4]
add eax, 4
add eax, esi
add esi, 8
mov dword [ebp - 0x28], eax
cmp eax, esi
jbe 0x10021465
nop dword [eax + eax]
movups xmm0, xmmword [esi + edi]
movups xmmword [ebp - 0x2e0], xmm0
movups xmm0, xmmword [esi + edi + 0x10]
movups xmmword [ebp - 0x2d0], xmm0
movups xmm0, xmmword [esi + edi + 0x20]
movups xmmword [ebp - 0x2c0], xmm0
movups xmm0, xmmword [esi + edi + 0x30]
movups xmmword [ebp - 0x2b0], xmm0
movups xmm0, xmmword [esi + edi + 0x40]
movups xmmword [ebp - 0x2a0], xmm0
movups xmm0, xmmword [esi + edi + 0x50]
psrldq xmm0, 4
movd eax, xmm0
cmp eax, 0xffffffff
je 0x10021426
cmp eax, ecx
cmova ecx, eax
mov dword [ebp - 0x20], ecx
lea eax, [edi + 0x58]
add eax, esi
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x230], eax
lea eax, [ebp - 0x230]
push eax
call fcn.10022aa0
add esi, dword [ebp - 0x2e0]
xor eax, eax
mov ecx, dword [ebp - 0x20]
cmp dword [esi + edi], eax
sete al
lea eax, [eax*8 + 0x14]
add esi, eax
mov eax, dword [ebp - 0x28]
cmp eax, esi
ja 0x100213d0
mov esi, eax
mov eax, dword [ebp - 0x248]
jmp 0x10020ae6
lea eax, [ebp - 0x78]
push eax
call fcn.10022ba0
lea eax, [ebp - 0x77]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x76]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x75]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x74]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x73]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x72]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x71]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x70]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x6f]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x6e]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x6d]
push eax
mov ecx, 0x100fed40
call fcn.10022ba0
push dword [ebp - 0x268]
mov eax, dword [0x100fed44]
mov ecx, 0x100fed40
push 0x100e5a6c
push 0x100e5a64
mov esi, eax
sub esi, dword [0x100fed40]
push eax
call fcn.10026d90
push esi
lea eax, [ebp - 0x26c]
mov ecx, 0x100fed40
push eax
call fcn.10026cd0
cmp dword [ebp - 0x258], 0
jne 0x1002163a
lea eax, [ebp - 0x24d]
mov byte [ebp - 0x24d], 0x47
push eax
mov ecx, 0x100fed40
call fcn.10022ba0
lea eax, [ebp - 0x24d]
mov byte [ebp - 0x24d], 0x4c
push eax
mov ecx, 0x100fed40
call fcn.10022ba0
lea eax, [ebp - 0x24d]
mov byte [ebp - 0x24d], 0x42
push eax
mov ecx, 0x100fed40
call fcn.10022ba0
lea eax, [ebp - 0x24d]
mov byte [ebp - 0x24d], 0x53
push eax
mov ecx, 0x100fed40
call fcn.10022ba0
lea eax, [ebp - 0x24]
mov dword [ebp - 0x24], 4
push eax
mov ecx, 0x100fed40
call fcn.10022ba0
lea eax, [ebp - 0x23]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x22]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x21]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x24]
mov dword [ebp - 0x24], 0
push eax
mov ecx, 0x100fed40
call fcn.10022ba0
lea eax, [ebp - 0x23]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x22]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
lea eax, [ebp - 0x21]
mov ecx, 0x100fed40
push eax
call fcn.10022ba0
mov ecx, 0x14
call fcn.10045640
mov ecx, dword [0x100fed44]
sub ecx, dword [0x100fed40]
mov dword [ebp - 0x22c], eax
call fcn.10045640
mov edi, dword [0x100fed44]
mov esi, eax
mov ecx, dword [0x100fed40]
sub edi, ecx
push edi
push ecx
push esi
call fcn.10099e70
mov eax, dword [ebp - 0x22c]
lea ecx, [ebp + 8]
add esp, 0xc
mov dword [eax + 0xc], esi
mov esi, eax
mov dword [esi + 0x10], edi
mov edx, dword [ebp + 0x18]
mov dword [esi + 8], edx
cmp dword [ebp + 0x1c], 0x10
cmovae ecx, dword [ebp + 8]
call fcn.1001f740
push esi
mov ecx, 0x100fecd4
mov dword [esi], eax
mov dword [esi + 4], edx
call fcn.10022c10
cmp dword [0x100f1d4c], 0
je 0x100216c0
mov eax, dword [ebp - 0x264]
mov ecx, dword [eax]
call fcn.100456d0
mov ecx, dword [ebp - 0x264]
mov eax, dword [esi + 0xc]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x25c]
mov eax, dword [esi + 0x10]
mov dword [ecx], eax
mov ecx, esi
mov edi, dword [esi + 0xc]
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x254], edi
mov dword [ebp - 0x248], eax
call fcn.100456d0
mov eax, dword [0x100fed34]
mov ecx, 0x100fed34
add eax, dword [ebp - 0x238]
push eax
lea eax, [ebp - 0x240]
push eax
call fcn.10022c50
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x12
call fcn.10012740
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x13
call fcn.1000ec00
mov byte [ebp - 4], 0
mov eax, 0x66666667
mov ecx, dword [0x100fed38]
mov esi, dword [0x100fed34]
sub ecx, esi
inc dword [ebp - 0x228]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x228], eax
jb 0x10020a30
mov eax, dword [0x100fed40]
cmp eax, dword [0x100fed44]
je 0x10021773
mov ecx, 0x100fed40
call fcn.10022b90
mov esi, dword [0x100fed04]
xor ecx, ecx
mov dword [ebp - 0x258], ecx
mov eax, 0x2aaaaaab
mov ecx, dword [0x100fed08]
sub ecx, esi
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x10021890
xor edi, edi
add esi, edi
lea ecx, [ebp - 0x64]
push esi
call fcn.10012510
lea eax, [esi + 0x18]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x4c]
call fcn.10012510
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp + 8]
call fcn.10026d30
test al, al
je 0x1002183a
cmp dword [ebp - 0x38], 0x10
lea eax, [ebp - 0x230]
push dword [ebp + 0x20]
lea ecx, [ebp - 0x4c]
cmovae ecx, dword [ebp - 0x4c]
lea edx, [ebp - 0x238]
push eax
call dword [0x100f1d44]
test eax, eax
je 0x10021821
mov ecx, dword [ebp - 0x238]
mov eax, dword [ebp - 0x230]
add eax, ecx
push eax
push ecx
push dword [0x100fed44]
lea eax, [ebp - 0x240]
mov ecx, 0x100fed40
push eax
call fcn.10025900
mov eax, dword [0x100fed04]
mov ecx, 0x100fed04
add eax, edi
push eax
lea eax, [ebp - 0x26c]
push eax
call fcn.10023000
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x16
call fcn.1000ec00
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x17
call fcn.1000ec00
inc dword [ebp - 0x258]
mov eax, 0x2aaaaaab
mov byte [ebp - 4], 0
add edi, 0x30
mov ecx, dword [0x100fed08]
mov esi, dword [0x100fed04]
sub ecx, esi
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x258], eax
jb 0x100217a2
mov edi, dword [ebp - 0x254]
mov eax, dword [0x100fed40]
cmp eax, dword [0x100fed44]
je 0x10021b19
mov ecx, 0x14
call fcn.10045640
sub esp, 0x18
mov dword [ebp - 0x258], eax
mov esi, esp
lea eax, [ebp - 0x24d]
mov dword [ebp - 0x240], esi
mov ecx, esi
push eax
push dword [ebp - 0x23f]
call fcn.10013570
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x18
push eax
mov ecx, esi
call fcn.100129e0
mov esi, dword [ebp - 0x258]
mov ecx, esi
mov byte [ebp - 4], 0
call fcn.1001f7c0
add esp, 0x18
push 9
test eax, eax
je 0x100219b6
lea ecx, [ebp - 0x244]
call fcn.10021f30
lea ecx, [ebp - 0x244]
call fcn.1001f550
mov ecx, 0x100fed40
call fcn.10022b80
add eax, dword [esi + 0x10]
mov ecx, eax
call fcn.10045640
mov ecx, 0x100fed40
mov dword [ebp - 0x244], eax
call fcn.10022b80
push dword [ebp - 0x248]
add eax, dword [esi + 0x10]
push dword [esi + 0xc]
mov dword [ebp - 0x240], eax
push dword [ebp - 0x244]
call fcn.10099e70
add esp, 0xc
mov ecx, 0x100fed40
call fcn.10022b80
push eax
push 0
mov ecx, 0x100fed40
call fcn.10022b70
push eax
mov eax, dword [ebp - 0x244]
add eax, dword [ebp - 0x248]
push eax
call fcn.10099e70
mov ecx, dword [esi + 0xc]
add esp, 0xc
call fcn.100456d0
mov eax, dword [ebp - 0x240]
mov ecx, dword [ebp - 0x244]
mov dword [esi + 0x10], eax
mov eax, dword [ebp - 0x264]
mov dword [esi + 0xc], ecx
mov dword [eax], ecx
mov ecx, dword [ebp - 0x25c]
mov eax, dword [esi + 0x10]
mov dword [ecx], eax
jmp 0x10021ab0
lea ecx, [ebp - 0x1c]
call fcn.10021f30
lea ecx, [ebp - 0x1c]
call fcn.1001f550
mov ecx, 0x100fed40
call fcn.10022b80
add eax, dword [ebp - 0x248]
mov ecx, eax
call fcn.10045640
mov ecx, 0x100fed40
mov dword [ebp - 0x1c], eax
call fcn.10022b80
mov ecx, dword [ebp - 0x248]
add eax, ecx
push ecx
push edi
push dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
call fcn.10099e70
add esp, 0xc
mov ecx, 0x100fed40
call fcn.10022b80
push eax
push 0
mov ecx, 0x100fed40
call fcn.10022b70
push eax
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x248]
push eax
call fcn.10099e70
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp + 8]
add esp, 0xc
mov dword [esi + 0xc], eax
mov eax, dword [ebp - 0x18]
mov dword [esi + 0x10], eax
call fcn.10012310
mov esi, eax
lea ecx, [ebp + 8]
mov eax, dword [ebp - 0x258]
mov dword [eax + 8], esi
call fcn.10012320
mov edx, esi
mov ecx, eax
call fcn.1001f740
mov esi, dword [ebp - 0x258]
mov ecx, 0x100fecd4
push esi
mov dword [esi], eax
mov dword [esi + 4], edx
call fcn.10022c10
cmp dword [0x100f1d4c], 0
je 0x10021a88
mov eax, dword [ebp - 0x264]
mov ecx, dword [eax]
call fcn.100456d0
mov ecx, dword [ebp - 0x264]
mov eax, dword [esi + 0xc]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x25c]
mov eax, dword [esi + 0x10]
mov dword [ecx], eax
mov edi, dword [esi + 0xc]
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x254], edi
mov dword [ebp - 0x248], eax
push 0x30
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, 0x8000
test cx, ax
jbe 0x10021b08
mov ecx, str..Test1234.mdx
call fcn.1008fda0
test eax, eax
je 0x10021b08
push 0x100d6e84
lea eax, [ebp - 0x22c]
push str..Test1234.mdx
push eax
call fcn.1009f49c
push dword [ebp - 0x22c]
push 1
push dword [ebp - 0x248]
push edi
call fcn.1009f6fc
push dword [ebp - 0x22c]
call fcn.1009f7d8
add esp, 0x20
mov ecx, esi
call fcn.100456d0
mov ecx, 0x100fed40
call fcn.10022b90
mov ecx, 0x100fecec
xor esi, esi
call fcn.10023220
test eax, eax
je 0x10021c5f
nop dword [eax]
push esi
mov ecx, 0x100fecec
call fcn.10023200
push eax
lea ecx, [ebp - 0x5c]
call fcn.10021ef0
lea edx, [ebp - 0x5c]
mov byte [ebp - 4], 0x19
lea ecx, [ebp + 8]
call fcn.100258d0
test al, al
je 0x10021c40
mov ecx, edi
mov edx, str.MDLX
mov eax, dword [ecx]
cmp eax, dword [edx]
je 0x10021b84
cmp al, byte [edx]
jne 0x10021b88
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x10021b88
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x10021b88
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x10021b88
xor eax, eax
jmp 0x10021b8d
sbb eax, eax
or eax, 1
test eax, eax
jne 0x10021c0d
mov ecx, dword [ebp - 0x248]
mov eax, 4
cmp ecx, eax
jbe 0x10021c0d
movss xmm0, dword [ebp - 0x38]
movss xmm1, dword [ebp - 0x3c]
movss xmm2, dword [ebp - 0x40]
movss xmm3, dword [ebp - 0x44]
nop dword [eax + eax]
cmp dword [eax + edi], 0x44494c43
mov edx, eax
jne 0x10021c00
mov ecx, dword [eax + edi + 4]
add eax, 8
add eax, dword [eax + edi]
cmp dword [eax + edi], 2
jne 0x10021bf3
movss dword [eax + edi + 4], xmm3
movss dword [eax + edi + 8], xmm2
movss dword [eax + edi + 0xc], xmm1
movss dword [eax + edi + 0x10], xmm0
lea eax, [ecx + 8]
mov ecx, dword [ebp - 0x248]
add eax, edx
jmp 0x10021c06
add eax, 4
add eax, dword [eax + edi]
add eax, 4
cmp eax, ecx
jb 0x10021bc0
push esi
lea eax, [ebp - 0x240]
mov ecx, 0x100fecec
push eax
lea eax, [ebp - 0x26c]
push eax
call fcn.10023240
mov ecx, eax
call fcn.10022bf0
mov ecx, 0x100fecec
push dword [eax]
lea eax, [ebp - 0x268]
push eax
call fcn.10023260
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0
call fcn.1000ec00
mov ecx, 0x100fecec
inc esi
call fcn.10023220
cmp esi, eax
jb 0x10021b30
xor esi, esi
mov ecx, 0x100fecf8
mov dword [ebp - 0x258], esi
call fcn.100230e0
test eax, eax
je 0x10021e56
nop dword [eax]
push esi
mov ecx, 0x100fecf8
call fcn.100230c0
push eax
lea ecx, [ebp - 0x68]
call fcn.10021f40
mov byte [ebp - 4], 0x1a
lea edx, [ebp - 0x68]
lea ecx, [ebp + 8]
mov dword [ebp - 0x22c], 0
call fcn.100258d0
test al, al
je 0x10021e31
cmp dword [edi], 0x584c444d
jne 0x10021dfe
mov esi, 4
cmp dword [ebp - 0x248], esi
jbe 0x10021df8
cmp dword [esi + edi], 0x53584554
jne 0x10021de3
mov ecx, dword [esi + edi + 4]
add esi, 4
lea eax, [ecx + esi]
add esi, 4
mov dword [ebp - 0x230], eax
mov eax, 0x7a44c6b
imul ecx
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
test ecx, ecx
jle 0x10021ddb
lea eax, [esi + edi]
mov dword [ebp - 0x25c], eax
nop dword [eax]
nop dword [eax + eax]
dec ecx
lea edi, [ebp - 0x1a0]
mov dword [ebp - 0x238], ecx
mov esi, eax
mov ecx, 0x43
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x22c]
inc ecx
mov dword [ebp - 0x22c], ecx
cmp dword [ebp - 0x50], ecx
jne 0x10021dbc
lea ecx, [ebp - 0x4c]
call fcn.10012310
lea ecx, [ebp - 0x4c]
cmp eax, 3
jbe 0x10021d80
mov dword [ebp - 0x1a0], 0
call fcn.10012320
push eax
push 0x100d6e88
lea eax, [ebp - 0x19c]
push 0x104
push eax
call fcn.100180d0
jmp 0x10021da4
call fcn.10012320
push eax
call fcn.100a0168
push 0x104
mov dword [ebp - 0x1a0], eax
lea eax, [ebp - 0x19c]
push 0
push eax
call fcn.1009a970
mov eax, dword [ebp - 0x25c]
lea esi, [ebp - 0x1a0]
mov ecx, 0x43
mov edi, eax
add esp, 0x10
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x238]
add eax, 0x10c
mov dword [ebp - 0x25c], eax
test ecx, ecx
jg 0x10021d20
mov edi, dword [ebp - 0x254]
mov eax, dword [ebp - 0x230]
jmp 0x10021de9
mov eax, dword [esi + edi + 4]
add eax, esi
lea esi, [eax + 8]
cmp esi, dword [ebp - 0x248]
jb 0x10021cd2
mov esi, dword [ebp - 0x258]
push esi
lea eax, [ebp - 0x240]
mov ecx, 0x100fecf8
push eax
lea eax, [ebp - 0x26c]
push eax
call fcn.10023100
mov ecx, eax
call fcn.10022bd0
mov ecx, 0x100fecf8
push dword [eax]
lea eax, [ebp - 0x268]
push eax
call fcn.10023120
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0
call fcn.10010c10
inc esi
mov ecx, 0x100fecf8
mov dword [ebp - 0x258], esi
call fcn.100230e0
cmp esi, eax
jb 0x10021c80
lea ecx, [ebp + 8]
call fcn.1000ec00
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10097f9e
mov esp, ebp
pop ebp
ret