Function at 0x1002e6c0
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1025f7a0
mov eax, dword fs:[0]
push eax
sub esp, 0x11c
mov eax, dword [0x102fb070]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea ecx, [ebp - 0x11d]
call fcn.100035f0
mov dword [ebp - 4], 0
xor eax, eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], 7
mov word [ebp - 0xb8], ax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
push 5
push 0x102de220
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
call fcn.10006680
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 4
push eax
call fcn.10010ce0
mov ecx, eax
call fcn.10066127
mov esi, eax
lea eax, [ebp - 0x40]
cmp eax, esi
je 0x1002e7a7
mov ecx, eax
call fcn.100042b0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x40], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x30], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x8c]
cmp edx, 8
jb 0x1002e7e7
mov ecx, dword [ebp - 0xa0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002e7dd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002f3b2
push edx
push ecx
call fcn.10053aa5
add esp, 8
lea eax, [ebp - 0x40]
push eax
call fcn.1005acab
add esp, 4
test eax, eax
jne 0x1002e84f
mov edx, dword [ebp - 0x2c]
mov eax, edx
mov ecx, dword [ebp - 0x30]
sub eax, ecx
cmp eax, 1
jb 0x1002e831
cmp edx, 8
lea esi, [ebp - 0x40]
push 2
cmovae esi, dword [ebp - 0x40]
lea edi, [ecx + 1]
push 0x102ddc5c
mov dword [ebp - 0x30], edi
lea eax, [esi + ecx*2]
push eax
call fcn.100ccba0
add esp, 0xc
xor eax, eax
mov word [esi + edi*2], ax
jmp 0x1002e84f
push 1
push 0x102ddc5c
mov byte [ebp - 0x11c], 0
lea ecx, [ebp - 0x40]
push dword [ebp - 0x11c]
push 1
call fcn.10008770
mov edx, dword [ebp - 0x2c]
mov eax, edx
mov ecx, dword [ebp - 0x30]
sub eax, ecx
cmp eax, 0xa
jb 0x1002e889
cmp edx, 8
lea esi, [ebp - 0x40]
push 0x14
cmovae esi, dword [ebp - 0x40]
lea edi, [ecx + 0xa]
push str.xsSoft.exe
mov dword [ebp - 0x30], edi
lea eax, [esi + ecx*2]
push eax
call fcn.100ccba0
add esp, 0xc
xor eax, eax
mov word [esi + edi*2], ax
jmp 0x1002e8a7
push 0xa
push str.xsSoft.exe
mov byte [ebp - 0x11c], 0
lea ecx, [ebp - 0x40]
push dword [ebp - 0x11c]
push 0xa
call fcn.10008770
lea eax, [ebp - 0xa0]
push eax
call fcn.1006dc21
mov esi, eax
add esp, 4
lea eax, [ebp - 0x88]
cmp eax, esi
je 0x1002e8f0
mov ecx, eax
call fcn.100042b0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x88], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x78], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x8c]
cmp edx, 8
jb 0x1002e930
mov ecx, dword [ebp - 0xa0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002e926
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002f3b7
push edx
push ecx
call fcn.10053aa5
add esp, 8
mov edx, dword [ebp - 0x74]
mov eax, edx
mov ecx, dword [ebp - 0x78]
sub eax, ecx
cmp eax, 0x42
jb 0x1002e973
cmp edx, 8
lea esi, [ebp - 0x88]
push 0x84
cmovae esi, dword [ebp - 0x88]
lea edi, [ecx + 0x42]
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerShell_Folders_
mov dword [ebp - 0x78], edi
lea eax, [esi + ecx*2]
push eax
call fcn.100ccba0
add esp, 0xc
xor eax, eax
mov word [esi + edi*2], ax
jmp 0x1002e994
push 0x42
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerShell_Folders_
mov byte [ebp - 0x11c], 0
lea ecx, [ebp - 0x88]
push dword [ebp - 0x11c]
push 0x42
call fcn.10008770
cmp dword [ebp - 0x74], 8
lea eax, [ebp - 0x88]
push str.Desktop
cmovae eax, dword [ebp - 0x88]
push eax
lea eax, [ebp - 0xa0]
push reloc.WS2_32.dll_closesocket
push eax
call fcn.10073d16
mov esi, eax
add esp, 0x10
lea eax, [ebp - 0xb8]
cmp eax, esi
je 0x1002e9fc
mov ecx, eax
call fcn.100042b0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0xb8], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0xa8], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x8c]
cmp edx, 8
jb 0x1002ea3c
mov ecx, dword [ebp - 0xa0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002ea32
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002f3bc
push edx
push ecx
call fcn.10053aa5
add esp, 8
cmp dword [ebp - 0xa4], 8
lea eax, [ebp - 0xb8]
cmovae eax, dword [ebp - 0xb8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1002ec3e
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x28]
call fcn.10022100
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
xor eax, eax
push eax
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x102def40
mov word [ecx], ax
call fcn.10006680
lea eax, [ebp - 0x28]
push eax
call fcn.1005a562
mov edx, dword [ebp - 0x14]
add esp, 0x1c
mov ecx, dword [ebp - 0x18]
mov eax, edx
sub eax, ecx
cmp eax, 1
jb 0x1002eadb
cmp edx, 8
lea esi, [ebp - 0x28]
push 2
cmovae esi, dword [ebp - 0x28]
lea edi, [ecx + 1]
push 0x102ddc5c
mov dword [ebp - 0x18], edi
lea eax, [esi + ecx*2]
push eax
call fcn.100ccba0
add esp, 0xc
xor eax, eax
mov word [esi + edi*2], ax
jmp 0x1002eaf9
push 1
push 0x102ddc5c
mov byte [ebp - 0x11c], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x11c]
push 1
call fcn.10008770
cmp dword [ebp - 0x5c], 8
lea ecx, [ebp - 0x70]
mov edx, dword [ebp - 0x18]
cmovae ecx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x14]
mov edi, dword [ebp - 0x60]
sub eax, edx
mov dword [ebp - 0x11c], edx
cmp edi, eax
ja 0x1002eb4b
cmp dword [ebp - 0x14], 8
lea eax, [edx + edi]
mov dword [ebp - 0x18], eax
lea esi, [ebp - 0x28]
cmovae esi, dword [ebp - 0x28]
lea eax, [edi + edi]
push eax
push ecx
lea eax, [esi + edx*2]
push eax
call fcn.100ccba0
mov eax, dword [ebp - 0x11c]
add esp, 0xc
add eax, edi
xor ecx, ecx
mov word [esi + eax*2], cx
jmp 0x1002eb63
push edi
push ecx
mov byte [ebp - 0x11c], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x11c]
push edi
call fcn.10008770
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
cmp eax, 4
jb 0x1002eb9d
cmp edx, 8
lea esi, [ebp - 0x28]
push 8
cmovae esi, dword [ebp - 0x28]
lea edi, [ecx + 4]
push str..lnk
mov dword [ebp - 0x18], edi
lea eax, [esi + ecx*2]
push eax
call fcn.100ccba0
add esp, 0xc
xor eax, eax
mov word [esi + edi*2], ax
jmp 0x1002ebbb
push 4
push str..lnk
mov byte [ebp - 0x11c], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x11c]
push 4
call fcn.10008770
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1002ec00
cmp dword [ebp - 0x2c], 8
lea ecx, [ebp - 0x40]
push 0
cmovae ecx, dword [ebp - 0x40]
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], 8
push 0
cmovae eax, dword [ebp - 0x28]
push 0
push 1
push 0
push 0
push ecx
push eax
lea ecx, [ebp - 0x11d]
call fcn.1005f7fd
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x1002ec3e
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002ec34
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002f3c1
push edx
push ecx
call fcn.10053aa5
add esp, 8
call fcn.1002ac10
xor eax, eax
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 6
push eax
call fcn.10010ce0
mov ecx, eax
call fcn.10066127
mov esi, eax
lea eax, [ebp - 0x58]
cmp eax, esi
je 0x1002eca2
mov ecx, eax
call fcn.100042b0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x58], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x48], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x8c]
cmp edx, 8
jb 0x1002ece2
mov ecx, dword [ebp - 0xa0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002ecd8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002f3c6
push edx
push ecx
call fcn.10053aa5
add esp, 8
lea eax, [ebp - 0x58]
push eax
call fcn.1005acab
add esp, 4
test eax, eax
jne 0x1002ed4a
mov edx, dword [ebp - 0x44]
mov eax, edx
mov ecx, dword [ebp - 0x48]
sub eax, ecx
cmp eax, 1
jb 0x1002ed2c
cmp edx, 8
lea esi, [ebp - 0x58]
push 2
cmovae esi, dword [ebp - 0x58]
lea edi, [ecx + 1]
push 0x102ddc5c
mov dword [ebp - 0x48], edi
lea eax, [esi + ecx*2]
push eax
call fcn.100ccba0
add esp, 0xc
xor eax, eax
mov word [esi + edi*2], ax
jmp 0x1002ed4a
push 1
push 0x102ddc5c
mov byte [ebp - 0x11c], 0
lea ecx, [ebp - 0x58]
push dword [ebp - 0x11c]
push 1
call fcn.10008770
mov edx, dword [ebp - 0x44]
mov eax, edx
mov ecx, dword [ebp - 0x48]
sub eax, ecx
cmp eax, 0xc
jb 0x1002ed84
cmp edx, 8
lea esi, [ebp - 0x58]
push 0x18
cmovae esi, dword [ebp - 0x58]
lea edi, [ecx + 0xc]
push str.uninst00.exe
mov dword [ebp - 0x48], edi
lea eax, [esi + ecx*2]
push eax
call fcn.100ccba0
add esp, 0xc
xor eax, eax
mov word [esi + edi*2], ax
jmp 0x1002eda2
push 0xc
push str.uninst00.exe
mov byte [ebp - 0x11c], 0
lea ecx, [ebp - 0x58]
push dword [ebp - 0x11c]
push 0xc
call fcn.10008770
cmp dword [ebp - 0x5c], 8
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0x11d]
cmovae eax, dword [ebp - 0x70]
push eax
call fcn.1005f90b
cmp dword [ebp - 0x5c], 8
lea esi, [ebp - 0x70]
lea ecx, [ebp - 0x70]
cmovae esi, dword [ebp - 0x70]
lea eax, [ebp - 0x100]
cmovae ecx, dword [ebp - 0x70]
push esi
push ecx
push 0x102def84
push eax
call fcn.1005aa51
add esp, 0x10
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x40]
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x100]
cmovae ecx, dword [ebp - 0x40]
cmp dword [ebp - 0xec], 8
push ecx
cmovae eax, dword [ebp - 0x100]
lea ecx, [ebp - 0x11d]
push eax
call fcn.1005f9cf
cmp dword [ebp - 0x5c], 8
lea esi, [ebp - 0x70]
lea edx, [ebp - 0x70]
cmovae esi, dword [ebp - 0x70]
lea eax, [ebp - 0xe8]
cmovae edx, dword [ebp - 0x70]
push esi
push 0x102def90
push edx
push str._s_s_s
push eax
call fcn.1005aa51
add esp, 0x14
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x58]
cmp dword [ebp - 0x44], 8
lea eax, [ebp - 0xe8]
cmovae ecx, dword [ebp - 0x58]
cmp dword [ebp - 0xd4], 8
push ecx
cmovae eax, dword [ebp - 0xe8]
lea ecx, [ebp - 0x11d]
push eax
call fcn.1005f9cf
call fcn.10010ce0
mov ecx, eax
call fcn.10065deb
test al, al
je 0x1002efd1
push 0xb
xor eax, eax
mov dword [ebp - 0x18], 0
push str.SoftManager
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.10006680
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
cmp eax, 7
jb 0x1002eee3
cmp edx, 8
lea esi, [ebp - 0x28]
push 0xe
cmovae esi, dword [ebp - 0x28]
lea edi, [ecx + 7]
push str.Service
mov dword [ebp - 0x18], edi
lea eax, [esi + ecx*2]
push eax
call fcn.100ccba0
add esp, 0xc
xor eax, eax
mov word [esi + edi*2], ax
jmp 0x1002ef01
push 7
push str.Service
mov byte [ebp - 0x11c], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x11c]
push 7
call fcn.10008770
push 0x3a8
sub esp, 0x18
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.10022100
lea eax, [ebp - 0xa0]
push eax
call fcn.1005cca9
add esp, 8
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0xa0]
mov ecx, esp
push eax
call fcn.10004c70
call fcn.1002cbe0
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x8c]
cmp edx, 0x10
jb 0x1002ef78
mov ecx, dword [ebp - 0xa0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002ef6e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002f3cb
push edx
push ecx
call fcn.10053aa5
add esp, 8
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], 0
cmp edx, 8
jb 0x1002efd1
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002efc7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002f3d0
push edx
push ecx
call fcn.10053aa5
add esp, 8
push 0
call fcn.100d9fba
push edx
push eax
lea eax, [ebp - 0xd0]
push eax
call fcn.1005ac32
add esp, 0x10
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0xd0]
cmp dword [ebp - 0xbc], 8
cmovae eax, dword [ebp - 0xd0]
push eax
call fcn.10010ce0
mov ecx, eax
call fcn.1006752b
sub esp, 0x18
lea eax, [ebp - 0xd0]
mov ecx, esp
push eax
call fcn.10022100
call fcn.1005bdd7
mov dword [ebp - 0x128], eax
lea eax, [ebp - 0x128]
push eax
mov dword [ebp - 0x124], edx
call fcn.100e3f38
push dword [eax + 0xc]
mov ecx, dword [eax + 0x10]
mov eax, dword [eax + 0x14]
inc ecx
push ecx
add eax, 0x76c
push eax
lea eax, [ebp - 0x118]
push str._d_.2d_.2d
push eax
call fcn.1005a987
mov byte [ebp - 4], 0xc
call fcn.10007c10
add esp, 0x18
mov esi, eax
lea eax, [ebp - 0x118]
mov ecx, esp
push eax
call fcn.10004c70
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x34]
mov edx, dword [ebp - 0x104]
cmp edx, 0x10
jb 0x1002f0bb
mov ecx, dword [ebp - 0x118]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002f0b1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002f3d5
push edx
push ecx
call fcn.10053aa5
add esp, 8
mov edx, dword [ebp - 0xbc]
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x104], 0xf
mov byte [ebp - 0x118], 0
cmp edx, 8
jb 0x1002f116
mov ecx, dword [ebp - 0xd0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002f10c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002f3da
push edx
push ecx
call fcn.10053aa5
add esp, 8
mov edx, dword [ebp - 0xd4]
xor eax, eax
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 7
mov word [ebp - 0xd0], ax
cmp edx, 8
jb 0x1002f173
mov ecx, dword [ebp - 0xe8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002f169
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002f3df
push edx
push ecx
call fcn.10053aa5
add esp, 8
mov edx, dword [ebp - 0xec]
xor eax, eax
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd4], 7
mov word [ebp - 0xe8], ax
cmp edx, 8
jb 0x1002f1d0
mov ecx, dword [ebp - 0x100]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002f1c6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002f3e4
push edx
push ecx
call fcn.10053aa5
add esp, 8
mov edx, dword [ebp - 0x44]
xor eax, eax
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xec], 7
mov word [ebp - 0x100], ax
cmp edx, 8
jb 0x1002f227
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002f21d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002f3e9
push edx
push ecx
call fcn.10053aa5
add esp, 8
mov edx, dword [ebp - 0x5c]
xor eax, eax
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
cmp edx, 8
jb 0x1002f275
mov ecx, dword [ebp - 0x70]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002f26b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002f3ee
push edx
push ecx
call fcn.10053aa5
add esp, 8
mov edx, dword [ebp - 0x74]
xor eax, eax
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
cmp edx, 8
jb 0x1002f2c6
mov ecx, dword [ebp - 0x88]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002f2bc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002f3f3
push edx
push ecx
call fcn.10053aa5
add esp, 8
mov edx, dword [ebp - 0xa4]
xor eax, eax
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
cmp edx, 8
jb 0x1002f31d
mov ecx, dword [ebp - 0xb8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002f313
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002f3f8
push edx
push ecx
call fcn.10053aa5
add esp, 8
mov edx, dword [ebp - 0x2c]
xor eax, eax
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 7
mov word [ebp - 0xb8], ax
cmp edx, 8
jb 0x1002f374
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002f36a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002f3fd
push edx
push ecx
call fcn.10053aa5
add esp, 8
xor eax, eax
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x11d]
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
call fcn.10001c50
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10053a94
mov esp, ebp
pop ebp
ret 4
call fcn.100d7e3e
call fcn.100d7e3e
call fcn.100d7e3e
call fcn.100d7e3e
call fcn.100d7e3e
call fcn.100d7e3e
call fcn.100d7e3e
call fcn.100d7e3e
call fcn.100d7e3e
call fcn.100d7e3e
call fcn.100d7e3e
call fcn.100d7e3e
call fcn.100d7e3e
call fcn.100d7e3e
call fcn.100d7e3e
call fcn.100d7e3e
int3