Function at 0x10048570
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1011b7b1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1a0
mov ecx, dword [0x11290b48]
push esi
push edi
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [0x11290b4c]
mov esi, eax
push esi
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
call edx
mov edi, eax
mov dword [ebp - 0x4c], edi
test edi, edi
je 0x10048a4b
mov ecx, dword [0x11290b48]
lea eax, [ebp - 0x1ac]
push eax
push esi
mov edx, dword [ecx]
mov edx, dword [edx + 0x20]
call edx
test al, al
je 0x10048a4b
cmp byte [ebp + 8], 0
mov eax, dword fs:[0x2c]
mov ecx, dword [0x11297ea4]
mov ecx, dword [eax + ecx*4]
je 0x1004881a
mov eax, dword [0x11292fe8]
cmp eax, dword [ecx + 4]
jg 0x10048a5b
mov eax, dword [0x11292fe4]
mov ecx, edi
add eax, edi
mov dword [ebp - 0x48], eax
call fcn.1000c4c0
xor ecx, ecx
cmp dword [eax], 3
lea eax, [ebp - 0x54]
push eax
sete cl
add ecx, 0x13a4
mov dword [ebp - 0x54], ecx
mov ecx, 0x1128fefc
call fcn.100463c0
mov ecx, dword [0x11290b4c]
mov edi, eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x40], edi
mov ecx, dword [ecx]
push ecx
mov edx, esp
mov esi, dword [ecx + 0x10]
mov ecx, dword [eax]
mov dword [edx], ecx
mov ecx, dword [0x11290b4c]
call esi
mov esi, eax
test esi, esi
jne 0x10048686
mov eax, dword [0x11290b4c]
push ecx
mov ecx, esp
mov eax, dword [eax]
mov edx, dword [eax + 0x10]
mov eax, dword [0x11292ffc]
mov dword [ecx], eax
mov ecx, dword [0x11290b4c]
call edx
test eax, eax
je 0x10048686
mov edx, dword [ebp - 0x48]
mov esi, eax
mov ecx, dword [0x11292ffc]
mov dword [edx], ecx
mov ecx, dword [ebp - 0x4c]
call fcn.100b55c0
test al, al
jne 0x100486ca
test esi, esi
je 0x10048a4b
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 0x10]
call eax
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x34]
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 0x10]
call eax
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
test edi, edi
je 0x100488d7
cmp dword [edi + 0x3c], 0
je 0x100488d7
test esi, esi
jne 0x100487fc
mov edx, dword fs:[0x2c]
mov esi, dword [0x11297ea4]
mov eax, dword [0x11293004]
mov ecx, dword [edx + esi*4]
cmp eax, dword [ecx + 4]
jg 0x10048bcb
jmp 0x1004876e
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x10048c0c
test al, al
je 0x10048c08
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x10048c0c
add ecx, 2
add edx, 2
test al, al
je 0x10048c08
jmp 0x10048710
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10048c34
test dl, dl
je 0x10048c30
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10048c34
add eax, 2
add ecx, 2
test dl, dl
je 0x10048c30
jmp 0x10048740
mov ecx, dword [0x11290b4c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
lea esi, [eax + 1]
mov dword [ebp - 0x44], esi
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov edi, eax
and edi, 0x80000fff
jns 0x10048799
dec edi
or edi, 0xfffff000
inc edi
push edi
push esi
mov dword [ebp - 0x50], edi
call dword [0x11293000]
mov ecx, dword [0x11290b4c]
add esp, 8
mov edx, dword [ecx]
push esi
mov edx, dword [edx + 0xc]
call edx
mov edi, dword [0x11297ea4]
mov esi, eax
mov edx, dword fs:[0x2c]
mov eax, dword [0x1129300c]
mov ecx, dword [edx + edi*4]
mov edi, dword [ebp - 0x50]
cmp eax, dword [ecx + 4]
jg 0x10048c5f
push 0x110be2d4
mov ecx, esi
call dword [0x11293008]
mov eax, dword [ebp - 0x48]
shl edi, 0x10
or edi, dword [ebp - 0x44]
mov dword [eax], edi
mov dword [0x11292ffc], edi
mov edi, dword [ebp - 0x40]
push 0xffffffffffffffff
mov ecx, esi
call fcn.100b5c60
push dword [ebp - 0x1a4]
push edi
push esi
call fcn.10046d80
add esp, 0xc
jmp 0x100488d7
mov eax, dword [0x11292fe0]
cmp eax, dword [ecx + 4]
jg 0x10048cad
mov eax, dword [0x11292fdc]
xor esi, esi
add eax, edi
mov dword [ebp - 0x44], eax
mov ecx, dword [eax]
cmp ecx, 0xffffffff
je 0x100488d7
mov eax, dword [0x11290b4c]
push ecx
mov eax, dword [eax]
mov edx, dword [eax + 0x10]
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [0x11290b4c]
call edx
mov edi, eax
test edi, edi
je 0x100488c7
mov ecx, edi
call fcn.1000c2e0
movzx ecx, word [eax]
mov eax, 0x1f4
movsx edx, cx
cmp cx, ax
jl 0x10048882
mov eax, 0x13a3
cmp cx, ax
jl 0x1004888e
jmp 0x100488a6
cmp cx, 0x3b
je 0x1004888e
cmp cx, 0x2a
jne 0x100488a6
mov ecx, dword [ebp - 0x4c]
call fcn.1000c4c0
mov edx, 0x3b
cmp dword [eax], 3
mov eax, 0x2a
cmove edx, eax
lea eax, [ebp - 0x40]
mov dword [ebp - 0x40], edx
push eax
mov ecx, 0x1128fefc
call fcn.100463c0
push dword [ebp - 0x1a4]
push eax
push edi
call fcn.10046d80
add esp, 0xc
mov eax, dword [ebp - 0x44]
inc esi
mov ecx, dword [eax + esi*4]
cmp ecx, 0xffffffff
jne 0x10048842
mov eax, dword fs:[0x2c]
mov ecx, dword [0x11297ea4]
mov edi, dword [eax + ecx*4]
mov eax, dword [0x11292fd8]
cmp eax, dword [edi + 4]
jg 0x10048e13
mov eax, dword [0x11292fd4]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [eax + ecx]
cmp eax, 0xffffffff
je 0x10048a4b
mov ecx, dword [0x11290b4c]
mov ecx, dword [ecx]
push ecx
mov edx, dword [ecx + 0x10]
mov ecx, esp
mov dword [ecx], eax
mov ecx, dword [0x11290b4c]
call edx
mov dword [ebp - 0x4c], eax
test eax, eax
je 0x10048a4b
mov ecx, dword [0x11292ff8]
cmp ecx, dword [edi + 4]
jg 0x10048f7d
mov eax, dword [0x11292ff4]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [eax + ecx]
cmp eax, 0xffffffff
je 0x10048a4b
mov ecx, dword [0x11290b4c]
mov ecx, dword [ecx]
push ecx
mov edx, dword [ecx + 0x10]
mov ecx, esp
mov dword [ecx], eax
mov ecx, dword [0x11290b4c]
call edx
mov esi, eax
mov dword [ebp - 0x44], esi
test esi, esi
je 0x10048a4b
mov ecx, esi
call fcn.1000c2e0
movsx ecx, word [eax]
lea eax, [ebp - 0x40]
mov dword [ebp - 0x40], ecx
mov ecx, 0x112919f8
push eax
call fcn.10047fd0
test eax, eax
je 0x10048a4b
mov ecx, esi
call fcn.1000c2e0
mov ecx, 0x112919f8
movsx eax, word [eax]
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
call fcn.10047f90
mov ecx, dword [0x11290d68]
mov edx, dword [eax]
mov eax, dword [ecx]
push edx
mov eax, dword [eax + 8]
call eax
mov ecx, dword [0x11292ff0]
mov dword [ebp - 0x48], eax
cmp ecx, dword [edi + 4]
jg 0x100490e1
mov eax, dword [0x11292fec]
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x48]
mov dword [eax + ecx], edx
mov eax, dword [0x11292fd0]
cmp eax, dword [edi + 4]
jg 0x1004924d
mov eax, dword [0x11292fcc]
mov ecx, dword [ebp - 0x44]
mov eax, dword [eax + ecx]
cmp eax, 0xffffffff
je 0x10048a4b
mov ecx, dword [0x11290b4c]
mov ecx, dword [ecx]
push ecx
mov edx, dword [ecx + 0x10]
mov ecx, esp
mov dword [ecx], eax
mov ecx, dword [0x11290b4c]
call edx
mov dword [ebp - 0x40], eax
test eax, eax
je 0x10048a4b
mov ecx, dword [0x11292fc8]
cmp ecx, dword [edi + 4]
jg 0x100493ea
mov eax, dword [0x11292fc4]
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x48]
inc ecx
mov dword [eax + edx], ecx
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret
push 0x11292fe8
call fcn.10118384
add esp, 4
cmp dword [0x11292fe8], 0xffffffff
jne 0x10048601
mov dword [ebp - 4], 0
call fcn.1000b750
mov ecx, dword [0x110be2c0]
xorps xmm0, xmm0
movups xmmword [ebp - 0x3c], xmm0
mov esi, eax
mov ax, word [0x110be2c4]
movq xmm0, qword [0x110be2b8]
mov dword [ebp - 0x2c], 0xe
mov dword [ebp - 0x28], 0xf
movq qword [ebp - 0x3c], xmm0
mov dword [ebp - 0x34], ecx
mov word [ebp - 0x30], ax
mov byte [ebp - 0x2e], 0
xorps xmm0, xmm0
mov byte [ebp - 4], 1
push 0x20
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x24], xmm0
mov dword [ebp - 0x10], 0xf
call fcn.1000bcc0
movups xmm0, xmmword [0x10122b18]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x14], 0x16
mov dword [ebp - 0x10], 0x1f
movups xmmword [eax], xmm0
mov ecx, dword [0x10122b28]
mov dword [eax + 0x10], ecx
mov cx, word [0x10122b2c]
mov word [eax + 0x14], cx
mov byte [eax + 0x16], 0
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x24]
mov ecx, esi
push eax
call fcn.100b75d0
mov ecx, dword [ebp - 0x10]
mov dword [0x11292fe4], eax
mov byte [ebp - 4], 1
cmp ecx, 0x10
jb 0x10048b62
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10048b56
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10048ba0
jmp 0x10048b56
push ecx
push edx
call fcn.10117be7
add esp, 8
jmp 0x10048b62
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0xf
mov byte [ebp - 0x24], 0
mov byte [ebp - 4], 0
cmp ecx, 0x10
jb 0x10048bb2
mov edx, dword [ebp - 0x3c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10048ba6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10048ba6
jmp 0x10048ba0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10117be7
add esp, 8
jmp 0x10048bb2
push 0x11292fe8
mov dword [ebp - 4], 0xffffffff
call fcn.1011833a
add esp, 4
jmp 0x10048601
push 0x11293004
call fcn.10118384
add esp, 4
cmp dword [0x11293004], 0xffffffff
jne 0x1004876e
mov ecx, dword [0x11292f78]
mov dword [ebp - 4], 3
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
mov esi, eax
mov edx, 0x110be174
mov ecx, dword [esi + 8]
jmp 0x10048710
xor eax, eax
jmp 0x10048c11
sbb eax, eax
or eax, 1
test eax, eax
je 0x10048c3f
jmp 0x10048c20
mov esi, dword [esi + 0x10]
mov ecx, 0x110be174
mov eax, dword [esi + 8]
jmp 0x10048740
xor eax, eax
jmp 0x10048c39
sbb eax, eax
or eax, 1
test eax, eax
jne 0x10048c20
jmp 0x10048c3f
mov eax, dword [esi]
push 0x11293004
mov dword [0x11293000], eax
mov dword [ebp - 4], 0xffffffff
call fcn.1011833a
add esp, 4
jmp 0x1004876e
push 0x1129300c
call fcn.10118384
add esp, 4
cmp dword [0x1129300c], 0xffffffff
jne 0x100487db
push 0x110be184
push 0x110be1ac
mov dword [ebp - 4], 4
call fcn.10052830
push 0x1129300c
mov dword [0x11293008], eax
mov dword [ebp - 4], 0xffffffff
call fcn.1011833a
add esp, 0xc
jmp 0x100487db
push 0x11292fe0
call fcn.10118384
add esp, 4
cmp dword [0x11292fe0], 0xffffffff
jne 0x1004882b
mov dword [ebp - 4], 5
call fcn.1000b750
mov ecx, dword [0x110be2b0]
xorps xmm0, xmm0
movups xmmword [ebp - 0x3c], xmm0
mov esi, eax
mov dword [ebp - 0x2c], 0xc
movq xmm0, qword [0x110be2a8]
mov dword [ebp - 0x28], 0xf
movq qword [ebp - 0x3c], xmm0
mov dword [ebp - 0x34], ecx
mov byte [ebp - 0x30], 0
xorps xmm0, xmm0
mov byte [ebp - 4], 6
push 0x20
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x24], xmm0
mov dword [ebp - 0x10], 0xf
call fcn.1000bcc0
movups xmm0, xmmword [0x10122b18]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x14], 0x16
mov dword [ebp - 0x10], 0x1f
movups xmmword [eax], xmm0
mov ecx, dword [0x10122b28]
mov dword [eax + 0x10], ecx
mov cx, word [0x10122b2c]
mov word [eax + 0x14], cx
mov byte [eax + 0x16], 0
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x24]
mov ecx, esi
push eax
call fcn.100b75d0
mov ecx, dword [ebp - 0x10]
mov dword [0x11292fdc], eax
mov byte [ebp - 4], 6
cmp ecx, 0x10
jb 0x10048daa
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10048d9e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10048de8
jmp 0x10048d9e
push ecx
push edx
call fcn.10117be7
add esp, 8
jmp 0x10048daa
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0xf
mov byte [ebp - 0x24], 0
mov byte [ebp - 4], 5
cmp ecx, 0x10
jb 0x10048dfa
mov edx, dword [ebp - 0x3c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10048dee
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10048dee
jmp 0x10048de8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10117be7
add esp, 8
jmp 0x10048dfa
push 0x11292fe0
mov dword [ebp - 4], 0xffffffff
call fcn.1011833a
add esp, 4
jmp 0x1004882b
push 0x11292fd8
call fcn.10118384
add esp, 4
cmp dword [0x11292fd8], 0xffffffff
jne 0x100488f7
mov dword [ebp - 4], 8
call fcn.1000b750
mov ecx, dword [0x110be28c]
mov edx, eax
mov ax, word [0x110be290]
xorps xmm0, xmm0
movups xmmword [ebp - 0x24], xmm0
mov word [ebp - 0x18], ax
movq xmm0, qword [0x110be284]
mov al, byte [0x110be292]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x10], 0xf
movq qword [ebp - 0x24], xmm0
mov dword [ebp - 0x1c], ecx
mov byte [ebp - 0x16], al
mov byte [ebp - 0x15], 0
mov eax, dword [0x10122af0]
xorps xmm0, xmm0
movups xmmword [ebp - 0x3c], xmm0
mov dword [ebp - 0x34], eax
movq xmm0, qword [0x10122ae8]
mov al, byte [0x10122af4]
mov dword [ebp - 0x2c], 0xd
mov dword [ebp - 0x28], 0xf
movq qword [ebp - 0x3c], xmm0
mov byte [ebp - 0x30], al
mov byte [ebp - 0x2f], 0
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x3c]
mov ecx, edx
push eax
call fcn.100b75d0
mov ecx, dword [ebp - 0x28]
mov dword [0x11292fd4], eax
mov byte [ebp - 4], 9
cmp ecx, 0x10
jb 0x10048f02
mov edx, dword [ebp - 0x3c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10048ef6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10048f40
jmp 0x10048ef6
push ecx
push edx
call fcn.10117be7
add esp, 8
jmp 0x10048f02
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0xf
mov byte [ebp - 0x3c], 0
mov byte [ebp - 4], 8
cmp ecx, 0x10
jb 0x10048f52
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10048f46
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10048f46
jmp 0x10048f40
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10117be7
add esp, 8
jmp 0x10048f52
push 0x11292fd8
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0xf
mov byte [ebp - 0x24], 0
mov dword [ebp - 4], 0xffffffff
call fcn.1011833a
add esp, 4
jmp 0x100488f7
push 0x11292ff8
call fcn.10118384
add esp, 4
cmp dword [0x11292ff8], 0xffffffff
jne 0x10048940
mov dword [ebp - 4], 0xb
call fcn.1000b750
mov cl, byte [0x110be2d0]
xorps xmm0, xmm0
movups xmmword [ebp - 0x24], xmm0
mov esi, eax
mov dword [ebp - 0x14], 9
movq xmm0, qword [0x110be2c8]
mov dword [ebp - 0x10], 0xf
movq qword [ebp - 0x24], xmm0
mov byte [ebp - 0x1c], cl
mov byte [ebp - 0x1b], 0
xorps xmm0, xmm0
mov byte [ebp - 4], 0xc
push 0x20
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x2c], 0
movups xmmword [ebp - 0x3c], xmm0
mov dword [ebp - 0x28], 0xf
call fcn.1000bcc0
movups xmm0, xmmword [0x110be294]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x2c], 0x10
mov dword [ebp - 0x28], 0x1f
movups xmmword [eax], xmm0
mov byte [eax + 0x10], 0
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x3c]
mov ecx, esi
push eax
call fcn.100b75d0
mov ecx, dword [ebp - 0x28]
mov dword [0x11292ff4], eax
mov byte [ebp - 4], 0xc
cmp ecx, 0x10
jb 0x10049066
mov edx, dword [ebp - 0x3c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004905a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100490a4
jmp 0x1004905a
push ecx
push edx
call fcn.10117be7
add esp, 8
jmp 0x10049066
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0xf
mov byte [ebp - 0x3c], 0
mov byte [ebp - 4], 0xb
cmp ecx, 0x10
jb 0x100490b6
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100490aa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100490aa
jmp 0x100490a4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10117be7
add esp, 8
jmp 0x100490b6
push 0x11292ff8
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0xf
mov byte [ebp - 0x24], 0
mov dword [ebp - 4], 0xffffffff
call fcn.1011833a
add esp, 4
jmp 0x10048940
push 0x11292ff0
call fcn.10118384
add esp, 4
cmp dword [0x11292ff0], 0xffffffff
jne 0x100489dc
mov dword [ebp - 4], 0xe
call fcn.1000b750
mov ecx, dword [0x110be204]
xorps xmm0, xmm0
movups xmmword [ebp - 0x24], xmm0
mov esi, eax
mov al, byte [0x110be208]
movq xmm0, qword [0x110be1fc]
mov dword [ebp - 0x14], 0xd
mov dword [ebp - 0x10], 0xf
movq qword [ebp - 0x24], xmm0
mov dword [ebp - 0x1c], ecx
mov byte [ebp - 0x18], al
mov byte [ebp - 0x17], 0
xorps xmm0, xmm0
mov byte [ebp - 4], 0xf
push 0x20
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x2c], 0
movups xmmword [ebp - 0x3c], xmm0
mov dword [ebp - 0x28], 0xf
call fcn.1000bcc0
movups xmm0, xmmword [0x110be294]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x2c], 0x10
mov dword [ebp - 0x28], 0x1f
movups xmmword [eax], xmm0
mov byte [eax + 0x10], 0
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x3c]
mov ecx, esi
push eax
call fcn.100b75d0
mov ecx, dword [ebp - 0x28]
mov dword [0x11292fec], eax
mov byte [ebp - 4], 0xf
cmp ecx, 0x10
jb 0x100491d2
mov edx, dword [ebp - 0x3c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100491c6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10049210
jmp 0x100491c6
push ecx
push edx
call fcn.10117be7
add esp, 8
jmp 0x100491d2
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0xf
mov byte [ebp - 0x3c], 0
mov byte [ebp - 4], 0xe
cmp ecx, 0x10
jb 0x10049222
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10049216
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10049216
jmp 0x10049210
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10117be7
add esp, 8
jmp 0x10049222
push 0x11292ff0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0xf
mov byte [ebp - 0x24], 0
mov dword [ebp - 4], 0xffffffff
call fcn.1011833a
add esp, 4
jmp 0x100489dc
push 0x11292fd0
call fcn.10118384
add esp, 4
cmp dword [0x11292fd0], 0xffffffff
jne 0x100489fb
mov dword [ebp - 4], 0x11
call fcn.1000b750
xorps xmm0, xmm0
mov dword [ebp - 0x14], 0
push 0x20
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x10], 0xf
mov esi, eax
movups xmmword [ebp - 0x24], xmm0
call fcn.1000bcc0
movups xmm0, xmmword [0x110be270]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x14], 0x13
mov dword [ebp - 0x10], 0x1f
movups xmmword [eax], xmm0
movzx ecx, word [0x110be280]
mov word [eax + 0x10], cx
movzx ecx, byte [0x110be282]
mov byte [eax + 0x12], cl
mov byte [eax + 0x13], 0
xorps xmm0, xmm0
mov byte [ebp - 4], 0x12
push 0x20
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x2c], 0
movups xmmword [ebp - 0x3c], xmm0
mov dword [ebp - 0x28], 0xf
call fcn.1000bcc0
movups xmm0, xmmword [0x11067348]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x2c], 0x13
mov dword [ebp - 0x28], 0x1f
movups xmmword [eax], xmm0
movzx ecx, word [0x11067358]
mov word [eax + 0x10], cx
movzx ecx, byte [0x1106735a]
mov byte [eax + 0x12], cl
mov byte [eax + 0x13], 0
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x3c]
mov ecx, esi
push eax
call fcn.100b75d0
mov ecx, dword [ebp - 0x28]
mov dword [0x11292fcc], eax
mov byte [ebp - 4], 0x12
cmp ecx, 0x10
jb 0x1004936f
mov edx, dword [ebp - 0x3c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10049363
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100493ad
jmp 0x10049363
push ecx
push edx
call fcn.10117be7
add esp, 8
jmp 0x1004936f
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0xf
mov byte [ebp - 0x3c], 0
mov byte [ebp - 4], 0x11
cmp ecx, 0x10
jb 0x100493bf
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100493b3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100493b3
jmp 0x100493ad
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10117be7
add esp, 8
jmp 0x100493bf
push 0x11292fd0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0xf
mov byte [ebp - 0x24], 0
mov dword [ebp - 4], 0xffffffff
call fcn.1011833a
add esp, 4
jmp 0x100489fb
push 0x11292fc8
call fcn.10118384
add esp, 4
cmp dword [0x11292fc8], 0xffffffff
jne 0x10048a3c
mov dword [ebp - 4], 0x14
call fcn.1000b750
mov ecx, dword [0x110be204]
xorps xmm0, xmm0
movups xmmword [ebp - 0x24], xmm0
mov esi, eax
mov al, byte [0x110be208]
movq xmm0, qword [0x110be1fc]
mov dword [ebp - 0x14], 0xd
mov dword [ebp - 0x10], 0xf
movq qword [ebp - 0x24], xmm0
mov dword [ebp - 0x1c], ecx
mov byte [ebp - 0x18], al
mov byte [ebp - 0x17], 0
xorps xmm0, xmm0
mov byte [ebp - 4], 0x15
push 0x20
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x2c], 0
movups xmmword [ebp - 0x3c], xmm0
mov dword [ebp - 0x28], 0xf
call fcn.1000bcc0
movups xmm0, xmmword [0x110be258]
mov edx, eax
mov dword [ebp - 0x2c], 0x17
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x28], 0x1f
movups xmmword [edx], xmm0
mov ecx, dword [0x110be268]
mov dword [edx + 0x10], ecx
mov cx, word [0x110be26c]
mov word [edx + 0x14], cx
mov al, byte [0x110be26e]
mov byte [edx + 0x16], al
mov byte [edx + 0x17], 0
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x3c]
mov ecx, esi
push eax
call fcn.100b75d0
mov ecx, dword [ebp - 0x28]
mov dword [0x11292fc4], eax
cmp ecx, 0x10
jb 0x100494f5
mov edx, dword [ebp - 0x3c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100494e9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004952f
jmp 0x100494e9
push ecx
push edx
call fcn.10117be7
add esp, 8
jmp 0x100494f5
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0xf
mov byte [ebp - 0x3c], 0
cmp ecx, 0x10
jb 0x10049541
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10049535
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10049535
jmp 0x1004952f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10117be7
add esp, 8
jmp 0x10049541
push 0x11292fc8
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0xf
mov byte [ebp - 0x24], 0
call fcn.1011833a
add esp, 4
jmp 0x10048a3c