Function at 0x10021926
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1006176f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c0
push ebx
push esi
mov esi, edx
mov dword [esp + 0x2c], ecx
push edi
mov dword [esp + 0x34], esi
cmp byte [esi], 0x50
jne 0x1002279d
cmp byte [esi + 1], 0x4b
jne 0x1002279d
mov dword [esp + 0x14], 0xc75b57fd
xor ebx, ebx
mov dword [esp + 0x38], 0x4ec7e318
mov dword [esp + 0x30], 0xffffffff
push 1
mov dword [esp + 0x40], 0x17f9
mov dword [esp + 0x18], ebx
pop edi
jmp 0x10021a38
mov dword [esp + 0x24], 0x9cc25fa5
lea ecx, [esp + 0x114]
push 2
call fcn.100034db
push 2
pop edx
mov dword [esp + 0x2c], edx
mov dword [esp + 0xc], ebx
jmp 0x100219c8
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x44], 0xdf29855e
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edi
jl 0x100219b8
mov dword [esp + 0xc], ebx
jmp 0x100219ea
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x114]
mov dword [eax + ecx*4], 0xd92426f3
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edx
jl 0x100219d4
mov eax, dword [esp + 0x114]
xor ecx, ecx
cmp dword [eax], ebx
setne cl
cmp ecx, dword [esp + 0x24]
jg 0x10021a0c
mov eax, edi
cmp dword [esp + 0x38], ebx
jne 0x10021a0e
mov eax, ebx
cmp dword [esp + 0x24], eax
jge 0x10021a1c
mov ecx, ebx
cmp dword [esp + 0x30], ebx
je 0x10021a1e
mov ecx, edi
mov eax, dword [esp + 0x14]
sub eax, ecx
lea ecx, [esp + 0x114]
mov dword [esp + 0x2c], eax
call fcn.1000355e
dec dword [esp + 0x14]
cmp dword [esp + 0x14], 0xfffffffe
je 0x10021995
push edi
lea ecx, [esp + 0xd0]
call fcn.100034db
mov dword [esp + 0x1d4], ebx
lea eax, [esp + 0x1a0]
push dword [esp + 0x44]
xorps xmm0, xmm0
mov dword [esp + 0x88], ebx
push eax
lea eax, [esp + 0x198]
mov dword [esp + 0x90], ebx
push eax
push ebx
lea ecx, [esp + 0x94]
mov dword [esp + 0x9c], ebx
movdqu xmmword [esp + 0x1a0], xmm0
call fcn.10005cfc
mov dword [esp + 0x2c], 0x59785734
mov dword [esp + 0x24], 0x55f1bb13
mov dword [esp + 0x38], 0xfffffff7
mov dword [esp + 0x10], ebx
jmp 0x10021acd
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xcc]
mov dword [eax + ecx*4], 0xfffffffb
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edi
jl 0x10021ab7
mov byte [esp + 0x2b], bl
cmp byte [esp + 0x2b], 0
je 0x10021ae7
push ebx
push ebx
push ebx
call dword [sym.imp.OLEAUT32.dll_SysStringByteLen]
mov eax, dword [esp + 0x84]
mov eax, dword [eax]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0x2c]
mov edx, dword [eax]
sub ecx, edx
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, edx
mov ecx, 0xb14151c8
setl al
sub eax, 0xfffe
cmp eax, 0xfffffffa
sbb eax, eax
neg eax
sub eax, 0xfdbd0176
neg eax
sbb eax, eax
inc eax
cmp ecx, eax
sbb eax, eax
neg eax
cmp eax, 0xe0b2
jle 0x10021b3b
mov eax, dword [esp + 0x2c]
mov eax, dword [esp + 0x84]
xor ecx, ecx
mov eax, dword [eax]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
mov eax, dword [esp + 0xcc]
cmp dword [eax], ebx
setg cl
mov dword [esp + 0x38], ecx
lea ecx, [esp + 0x84]
call fcn.1000355e
or dword [esp + 0x1d4], 0xffffffff
lea ecx, [esp + 0xcc]
call fcn.1000355e
mov al, byte [esi + 2]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], 0xfffffffc
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x24], 0xfffffffb
mov dword [esp + 0x24], 0xb8e9646b
mov dword [esp + 0x24], ebx
mov dword [esp + 0x38], edi
mov byte [esp + 0x1f], al
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x20]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
sub eax, dword [esp + 0x20]
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x24], 0xcc8e
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x2c]
cmp eax, ecx
setg dl
xor eax, eax
cmp edx, 0x37d45db3
setne al
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
add eax, dword [esp + 0x20]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x38], eax
mov byte [esp + 0x2b], bl
cmp byte [esp + 0x2b], 0
je 0x10021c16
push ebx
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov al, byte [esi + 3]
lea ecx, [esp + 0x120]
movzx esi, byte [esp + 0x1f]
push 4
pop edi
push 2
mov byte [esp + 0x2f], al
add esi, edi
call fcn.100034db
mov dword [esp + 0x10], ebx
mov dword [esp + 0x3c], 0xd37a5b7d
mov dword [esp + 0x10], ebx
jmp 0x10021c5d
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x120]
mov dword [eax + ecx*4], 0xd4e06482
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x10021c47
mov eax, dword [esp + 0x120]
mov dword [eax], ebx
mov dword [esp + 0x10], 0xfffffff2
jmp 0x10021c83
mov dword [esp + 0x24], ebx
dec dword [esp + 0x24]
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xfffffff5
jl 0x10021c77
or dword [esp + 0x1d4], 0xffffffff
lea ecx, [esp + 0x120]
call fcn.1000355e
mov eax, dword [esp + 0x34]
mov dword [esp + 0x30], 0x43b7
add eax, esi
mov dword [esp + 0x14], 0xd8da8e97
mov dword [esp + 0x24], 1
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x24], eax
mov dword [esp + 0x14], ebx
jmp 0x10021ce5
mov byte [esp + 0x1f], bl
cmp byte [esp + 0x1f], 0
jne 0x10021d5b
dec dword [esp + 0x14]
cmp dword [esp + 0x14], 0xffffffeb
jle 0x10021cd6
push dword [esp + 0x44]
movdqa xmm0, xmmword [0x1006f080]
lea eax, [esp + 0x184]
push eax
lea eax, [esp + 0x178]
mov dword [esp + 0x34], 0xcf4a4163
push eax
add esi, 0x18
mov dword [esp + 0x84], ebx
push ebx
lea ecx, [esp + 0x88]
mov dword [esp + 0x30], esi
movdqu xmmword [esp + 0x180], xmm0
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], ebx
call fcn.10005cfc
mov dword [esp + 0x24], 8
push 3
mov dword [esp + 0x34], 0x8be
mov dword [esp + 0x1c], ebx
pop ecx
jmp 0x10021d79
push 0x1230
call dword [sym.imp.KERNEL32.dll_ExitThread]
mov eax, dword [esp + 0x18]
mov dword [esp + eax*4 + 0x90], 1
inc dword [esp + 0x18]
cmp dword [esp + 0x18], ecx
jl 0x10021d66
mov dword [esp + 0x18], ebx
jmp 0x10021d95
mov eax, dword [esp + 0x18]
mov dword [esp + eax*4 + 0x70], 0xdcad2086
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 2
jl 0x10021d85
mov dword [esp + 0x18], ebx
jmp 0x10021db5
mov eax, dword [esp + 0x18]
mov dword [esp + eax*4 + 0xe4], 0x9b950315
inc dword [esp + 0x18]
cmp dword [esp + 0x18], ecx
jl 0x10021da2
dec dword [esp + 0x98]
mov eax, dword [esp + 0x98]
sub eax, dword [esp + 0x74]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0xec]
mov eax, dword [esp + 0xec]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x78]
mov eax, dword [esp + 0x70]
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x94]
mov eax, dword [esp + 0x2c]
imul eax, dword [ecx + 8]
test eax, eax
jne 0x10021e0e
mov eax, dword [esp + 0x78]
cmp dword [eax + 4], ebx
jne 0x10021e0e
mov edx, ebx
jmp 0x10021e11
xor edx, edx
inc edx
mov esi, dword [esp + 0xe4]
xor ecx, ecx
mov dword [esp + 0x74], esi
mov eax, dword [esp + 0x98]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x2c]
cmp edx, eax
setne cl
add ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x98]
mov eax, dword [esp + 0x30]
imul edx, esi
sub edx, ecx
lea ecx, [esp + 0x78]
neg edx
sbb edx, edx
inc edx
add eax, edx
mov dword [esp + 0xe8], eax
call fcn.1000355e
movzx eax, byte [esp + 0x2b]
lea ecx, [esp + 0x13c]
mov esi, dword [esp + 0x20]
mov dword [esp + 0x14], 0x68206240
add esi, eax
mov dword [esp + 0x3c], ebx
push edi
call fcn.100034db
mov dword [esp + 0x1d4], 2
lea eax, [esp + 0x190]
push dword [esp + 0x44]
movdqa xmm0, xmmword [0x1006f0d0]
lea ecx, [esp + 0xc4]
push eax
lea eax, [esp + 0x188]
mov dword [esp + 0xc8], ebx
push eax
push ebx
movdqu xmmword [esp + 0x190], xmm0
mov dword [esp + 0xd4], ebx
mov dword [esp + 0xd8], ebx
call fcn.10005cfc
mov byte [esp + 0x1d4], 3
mov dword [esp + 0x10], ebx
jmp 0x10021ef7
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x13c]
mov dword [eax + ecx*4], 0xfffffffe
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edi
jl 0x10021ee1
mov byte [esp + 0x1f], bl
cmp byte [esp + 0x1f], 0
je 0x10021f15
push ebx
push ebx
push 0xc80
call dword [sym.imp.ADVAPI32.dll_CopySid]
mov dword [esp + 0x14], 0xfffffff7
cmp dword [esp + 0x14], 1
jge 0x10021f8d
mov edi, dword [esp + 0xc0]
mov dword [esp + 0x3c], 0xe00f
lea ecx, [esp + 0x148]
mov dword [esp + 0x3c], 0x7e307b5c
mov dword [esp + 0x3c], 0xa147b80b
push 2
call fcn.100034db
mov dword [esp + 0x10], ebx
jmp 0x10021f69
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x148]
mov dword [eax + ecx*4], ebx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x10021f57
inc dword [edi + 0xc]
lea ecx, [esp + 0x148]
call fcn.1000355e
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 1
jl 0x10021f2b
push 4
pop edi
lea ecx, [esp + 0xc0]
call fcn.1000355e
or dword [esp + 0x1d4], 0xffffffff
lea ecx, [esp + 0x13c]
call fcn.1000355e
mov eax, dword [esp + 0x38]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax]
call fcn.1002191a
mov dword [esp + 0x14], 0x60477862
xor edx, edx
mov dword [esp + 0x18], 0xf9c77509
inc edx
mov dword [esp + 0xc], 0xe2ff5ff7
mov dword [esp + 0x24], eax
mov dword [esp + 0x10], ebx
jmp 0x10021fec
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x40], edx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edx
jl 0x10021fe0
mov dword [esp + 0x14], ebx
cmp dword [esp + 0x14], 7
jle 0x100220d3
mov dword [esp + 0xc], edi
lea ecx, [esp + 0x154]
push 3
call fcn.100034db
mov dword [esp + 0x10], ebx
jmp 0x1002202f
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x154]
mov dword [eax + ecx*4], 1
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jl 0x10022019
mov dword [esp + 0xc], ebx
cmp dword [esp + 0xc], ebx
jl 0x100220b5
mov eax, dword [esp + 0xc]
xor edx, edx
mov eax, dword [esp + eax*4 + 0x40]
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + eax*4 + 0x40]
mov eax, dword [esp + 0xc]
cmp ecx, eax
mov eax, dword [esp + 0xc]
setg dl
xor ecx, ecx
cmp eax, edx
setle cl
xor edx, edx
imul eax, ecx, 0x4ad3
cmp eax, 0xba20
mov eax, dword [esp + 0x40]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [esp + 0xc]
setle cl
xor edx, edx
cmp ecx, 0x5ed9a924
setl dl
mov dword [esp + eax*4 + 0x40], edx
xor edx, edx
inc dword [esp + 0x18]
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + eax*4 + 0x40]
mov eax, dword [esp + 0x18]
cmp eax, ecx
setne dl
mov dword [esp + 0x40], edx
dec dword [esp + 0xc]
jns 0x10022040
lea ecx, [esp + 0x154]
call fcn.1000355e
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 7
jg 0x10022001
xor edx, edx
inc edx
mov eax, dword [esp + 0x18]
mov dword [esp + 0x40], eax
test eax, eax
jne 0x100220e3
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
xor ecx, ecx
cmp eax, edx
setl cl
mov dword [esp + 0x14], ecx
cmp dword [esp + 0x14], 3
je 0x10022101
cmp dword [esp + 0x18], ebx
jne 0x10022101
mov edx, ebx
mov eax, dword [esp + 0x18]
xor ecx, ecx
cmp edx, eax
setle cl
cmp ecx, 0x6d9e96b
jge 0x1002211a
cmp dword [esp + 0x18], ebx
je 0x1002212b
cmp dword [esp + 0x40], ebx
je 0x1002212b
cmp dword [esp + 0x18], ebx
je 0x1002212b
xor eax, eax
inc eax
jmp 0x1002212d
mov eax, ebx
mov dword [esp + 0xc], eax
cmp dword [esp + 0xc], ebx
je 0x1002227a
mov dword [esp + 0x30], 0xf1939efd
mov dword [esp + 0x10], ebx
jmp 0x1002215c
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0xb8], 0xc6f7
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x10022149
mov dword [esp + 0xc], ebx
jmp 0x1002226d
mov dword [esp + 0x10], 0x4416da84
mov dword [esp + 0x20], 0xfffffffd
mov dword [esp + 0x3c], ebx
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
inc dword [esp + 0xbc]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x10]
neg ecx
sbb ecx, ecx
xor edx, edx
neg ecx
sub ecx, eax
mov eax, dword [esp + 0x10]
cmp ecx, eax
mov eax, dword [esp + 0x10]
setg dl
xor ecx, ecx
cmp edx, eax
setne cl
cmp ecx, dword [esp + 0x40]
jge 0x10022209
push 2
lea ecx, [esp + 0x100]
call fcn.100034db
mov dword [esp + 0x20], ebx
jmp 0x100221e6
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0xfc]
or dword [eax + ecx*4], 0xffffffff
inc dword [esp + 0x20]
cmp dword [esp + 0x20], 2
jl 0x100221d3
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xfc]
mov dword [eax + 4], ecx
lea ecx, [esp + 0xfc]
call fcn.1000355e
jmp 0x10022269
mov dword [esp + 0x2c], 0xd3351f4a
mov eax, dword [esp + 0x2c]
mov eax, dword [esp + 0x40]
mov eax, dword [esp + 0xb8]
mov eax, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0xc]
sub edx, eax
sub edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
xor eax, eax
imul ecx, dword [esp + 0x14]
cmp ecx, 0x94b
mov ecx, 0xcabd119e
setle al
dec eax
cmp ecx, eax
sbb eax, eax
inc eax
mov dword [esp + 0x40], eax
dec dword [esp + 0xc]
cmp dword [esp + 0xc], 0xfffffff1
jge 0x1002216c
jmp 0x1002228c
mov byte [esp + 0x1f], bl
cmp byte [esp + 0x1f], 0
je 0x1002228c
push ebx
call dword [sym.imp.USER32.dll_CharUpperW]
mov edx, dword [esp + 0x34]
mov eax, 0x2d5e48d3
mov dword [esp + 0x54], eax
add edx, esi
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x2c], edx
mov dword [esp + 0x20], ebx
jmp 0x100222bd
mov eax, dword [esp + 0x20]
mov dword [esp + eax*4 + 0x48], edi
inc dword [esp + 0x20]
cmp dword [esp + 0x20], 2
jl 0x100222b1
mov dword [esp + 0x54], ebx
cmp dword [esp + 0x54], 0xffffffe4
jle 0x100224c4
push 2
lea ecx, [esp + 0x10c]
call fcn.100034db
mov dword [esp + 0x1d4], edi
mov dword [esp + 0x20], ebx
jmp 0x10022304
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x108]
mov dword [eax + ecx*4], 0xfffffffa
inc dword [esp + 0x20]
cmp dword [esp + 0x20], 2
jl 0x100222ee
mov esi, dword [esp + 0x108]
mov dword [esp + 0x20], esi
mov dword [esi + 4], 1
mov dword [esp + 0xc], 0x7a9a9718
mov dword [esp + 0x30], 0x8acdd1f6
mov dword [esp + 0xc], ebx
jmp 0x10022472
push edi
lea ecx, [esp + 0xf4]
call fcn.100034db
xor edx, edx
inc edx
mov dword [esp + 0x30], edx
mov dword [esp + 0x18], ebx
jmp 0x10022363
mov eax, dword [esp + 0x18]
mov dword [esp + eax*4 + 0x1bc], 0xffffffff
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 3
jl 0x10022350
mov dword [esp + 0x18], ebx
jmp 0x10022386
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0xf0]
mov dword [eax + ecx*4], 0x1efae07d
inc dword [esp + 0x18]
cmp dword [esp + 0x18], edi
jl 0x10022370
mov dword [esp + 0x18], ebx
jmp 0x100223a5
mov eax, dword [esp + 0x18]
mov dword [esp + eax*4 + 0xa8], 0xfb95c1f4
inc dword [esp + 0x18]
cmp dword [esp + 0x18], edx
jl 0x10022392
mov eax, dword [esi + 4]
mov ecx, 0xffff6423
mov eax, dword [esp + eax*4 + 0x48]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + eax*4 + 0x48]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x48]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x20]
mov esi, dword [esi + 4]
mov eax, dword [eax + 4]
mov edx, dword [esp + eax*4 + 0x48]
mov eax, dword [esp + 0x4c]
sub ecx, eax
xor eax, eax
add edx, ecx
cmp edx, esi
setle al
xor edx, edx
cmp eax, esi
mov eax, dword [esp + 0xc]
mov esi, dword [esp + 0x20]
setge dl
xor ecx, ecx
mov eax, dword [esp + eax*4 + 0x48]
cmp eax, edx
setg cl
mov dword [esp + 0x1c4], ecx
xor ecx, ecx
mov eax, dword [esp + 0x60]
mov eax, dword [esp + 0xf0]
mov dword [eax + 8], ebx
mov eax, dword [esp + 0xc]
mov edx, dword [esp + eax*4 + 0x48]
mov eax, dword [esp + 0x60]
test eax, eax
sets cl
add edx, ecx
lea ecx, [esp + 0xf0]
mov dword [esp + 0x30], edx
mov eax, dword [esp + 0x30]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + eax*4 + 0x48]
mov eax, dword [esp + 0xc]
mov eax, dword [esi + 4]
mov eax, dword [esp + eax*4 + 0x48]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x30], eax
call fcn.1000355e
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 1
jle 0x10022336
dec dword [esi + 4]
jns 0x1002231d
mov byte [esp + 0x1f], bl
cmp byte [esp + 0x1f], 0
je 0x1002249d
push ebx
push 0x80
call dword [sym.imp.USER32.dll_FlashWindow]
or dword [esp + 0x1d4], 0xffffffff
lea ecx, [esp + 0x108]
call fcn.1000355e
dec dword [esp + 0x54]
cmp dword [esp + 0x54], 0xffffffe4
jg 0x100222d3
mov edx, dword [esp + 0x2c]
mov eax, dword [ebp + 8]
mov esi, dword [esp + 0x24]
mov dword [eax], esi
mov dword [esp + 0x10], 0xc75b57fd
mov dword [esp + 0x10], ebx
jmp 0x10022575
mov dword [esp + 0x20], 0x82bd7b1c
mov dword [esp + 0xc], ebx
jmp 0x100224fc
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x50], 0x49dfcf09
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 1
jl 0x100224ec
mov dword [esp + 0xc], ebx
jmp 0x1002251c
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x1b0], 0xfffffff7
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 3
jl 0x10022509
mov dword [esp + 0x20], 0xffffffe8
jmp 0x1002256a
mov dword [esp + 0x14], 0xffffffff
mov dword [esp + 0x14], ebx
cmp dword [esp + 0x14], ebx
jl 0x1002255f
mov eax, dword [esp + 0x14]
cmp dword [esp + eax*4 + 0x50], ebx
jne 0x1002255f
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + eax*4 + 0x50]
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0x50], ecx
dec dword [esp + 0x14]
jns 0x1002253f
mov eax, dword [esp + 0x1b8]
inc dword [esp + 0x20]
cmp dword [esp + 0x20], 0x10
jg 0x1002252d
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xa
je 0x100224de
mov ecx, dword [esp + 0x38]
shr esi, 2
inc esi
mov dword [esp + 0x24], esi
mov esi, ebx
mov eax, dword [ecx]
mov dword [esp + 0x12c], eax
mov eax, dword [ecx + 4]
mov dword [esp + 0x130], eax
mov eax, dword [ecx + 8]
mov dword [esp + 0x134], eax
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x138], eax
mov dword [esp + 0x30], esi
je 0x1002295b
sub dword [esp + 0x34], edx
push dword [esp + 0x44]
movdqa xmm0, xmmword [0x1006f0c0]
lea eax, [esp + 0x1b4]
push eax
lea eax, [esp + 0x1a8]
mov dword [esp + 0x28], 3
push eax
push ebx
lea ecx, [esp + 0x74]
mov dword [esp + 0x74], ebx
movdqu xmmword [esp + 0x1b0], xmm0
mov dword [esp + 0x78], ebx
mov dword [esp + 0x7c], ebx
call fcn.10005cfc
mov dword [esp + 0x1d4], 5
mov dword [esp + 0x20], 0xffffffe6
cmp dword [esp + 0x20], 0x12
je 0x10022750
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x14], ebx
mov dword [esp + 0x14], 0xfffffffb
mov eax, dword [esp + 0x14]
mov dword [ecx + 0xc], eax
mov dword [esp + 0x14], 3
cmp dword [esp + 0x14], ebx
jl 0x1002273d
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x9c]
push dword [esp + 0x44]
movdqa xmm0, xmmword [0x1006f0b0]
lea eax, [esp + 0x174]
push eax
lea eax, [esp + 0x168]
mov dword [esp + 0xa4], ebx
push eax
push ebx
movdqu xmmword [esp + 0x170], xmm0
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], ebx
call fcn.10005cfc
mov esi, dword [esp + 0x9c]
mov dword [esi + 0xc], 3
mov dword [esp + 0x38], 0xc9cd49fc
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x64]
mov eax, dword [eax + ecx*4]
mov dword [esp + 0x38], eax
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x64]
mov eax, dword [esi + 0xc]
mov eax, dword [ecx + eax*4]
sub eax, dword [ecx + edx*4]
mov edx, dword [esp + 0x38]
mov ecx, dword [esi + 0xc]
add edx, eax
mov eax, dword [esp + 0x64]
mov dword [eax + ecx*4], edx
mov byte [esp + 0x1f], bl
cmp byte [esp + 0x1f], 0
je 0x10022705
push 0x14e6
push ebx
push ebx
push 0x136f
push ebx
push 0x13fd
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
dec dword [esi + 0xc]
jns 0x100226aa
mov byte [esp + 0x1f], bl
cmp byte [esp + 0x1f], 0
je 0x10022723
push ebx
push ebx
push 0x1f90
push ebx
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
lea ecx, [esp + 0x9c]
call fcn.1000355e
dec dword [esp + 0x14]
jns 0x10022651
mov ecx, dword [esp + 0x3c]
inc dword [esp + 0x20]
cmp dword [esp + 0x20], 0x12
jne 0x1002262c
mov esi, dword [esp + 0x30]
or dword [esp + 0x1d4], 0xffffffff
lea ecx, [esp + 0x64]
call fcn.1000355e
mov ecx, dword [esp + 0x2c]
mov edx, esi
and edx, 3
mov ecx, dword [ecx]
mov edx, dword [esp + edx*4 + 0x12c]
call fcn.1002191a
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x34]
mov dword [ecx + edx], eax
add ecx, edi
inc esi
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x30], esi
cmp esi, dword [esp + 0x24]
jb 0x100225c3
jmp 0x1002295b
xor ebx, ebx
mov dword [esp + 0x18], 0xba33
mov dword [esp + 0xc], ebx
lea ecx, [esp + 0xac]
push 3
call fcn.100034db
mov dword [esp + 0x1d4], 6
push 3
mov dword [esp + 0x18], 0xfdadf860
mov dword [esp + 0x38], ebx
pop edx
jmp 0x100227eb
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0xac]
mov dword [eax + ecx*4], 0xb2f14481
inc dword [esp + 0x34]
cmp dword [esp + 0x34], edx
jl 0x100227d5
mov eax, dword [esp + 0x18]
imul eax, dword [esp + 0x18]
imul eax, eax, 0xbf0b
test eax, eax
je 0x100228dd
push 4
pop edi
mov dword [esp + 0x24], 0xfffffff7
lea ecx, [esp + 0xd8]
mov dword [esp + 0x38], ebx
push edi
call fcn.100034db
mov dword [esp + 0x3c], 8
mov dword [esp + 0x34], ebx
jmp 0x10022848
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0xd8]
mov dword [eax + ecx*4], 0xae4f9dbc
inc dword [esp + 0x34]
cmp dword [esp + 0x34], edi
jl 0x10022832
mov dword [esp + 0xc], 0x452a26f
mov ecx, 0xfffa
mov eax, dword [esp + 0xc]
mov dword [esp + 0xc], 0xfffc
mov eax, dword [esp + 0x24]
cmp ecx, eax
mov eax, dword [esp + 0xac]
sbb ecx, ecx
inc ecx
mov dword [eax], ecx
mov ecx, dword [esp + 0x24]
sub ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x38]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [esp + 0x18]
setge dl
xor ecx, ecx
cmp edx, eax
setle cl
xor edx, edx
cmp ecx, 0xfffffffb
lea ecx, [esp + 0xd8]
setl dl
sub edx, dword [esp + 0x18]
mov eax, dword [esp + 0xd8]
mov dword [eax], edx
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x38]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0xd8]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x3c], eax
call fcn.1000355e
jmp 0x10022914
mov dword [esp + 0xc], 0xffffffeb
jmp 0x1002290d
mov dword [esp + 0x14], ebx
jmp 0x10022903
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0xac]
mov dword [eax + ecx*4], 0xd976d993
inc dword [esp + 0x14]
cmp dword [esp + 0x14], edx
jl 0x100228ed
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 0xb
je 0x100228e7
mov eax, dword [esp + 0x14]
xor ecx, ecx
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0xac]
mov eax, dword [esi + 4]
cmp eax, dword [esi]
mov eax, dword [esp + 0x18]
setg cl
xor edx, edx
test ecx, ecx
sets dl
xor ecx, ecx
cmp eax, edx
setle cl
mov dword [esi + 4], ecx
lea ecx, [esp + 0xac]
call fcn.1000355e
mov eax, dword [ebp + 8]
mov ecx, dword [esp + 0x30]
mov dword [eax], ecx
mov ecx, dword [esp + 0x1cc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret