Function at 0x10020832
Capabilities:
Log keystrokes via polling

Disassembly:
mov eax, 0x1005a938
call fcn.10059bc0
sub esp, 0x124
push ebx
push esi
xor esi, esi
mov dword [ebp - 0x40], edx
inc esi
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x1c], esi
xor ebx, ebx
mov dword [ebp - 0x20], 0x1aae4b9
mov dword [ebp - 0x18], 6
mov dword [ebp - 0x24], 0xffffffff
push edi
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x10], esp
cmp dword [ebp - 0x1c], ebx
jne 0x1002087d
mov dword [ebp - 0x20], 9
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
imul ecx, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
or eax, 0xffffffff
neg ecx
sub eax, ecx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x20], ebx
jmp 0x10020988
mov dword [ebp - 0x34], 0xbbb66efe
mov dword [ebp - 0x2c], 0x5ec7e011
mov dword [ebp - 0x30], 0xeeb4
mov dword [ebp - 0x18], ebx
jmp 0x10020920
mov dword [ebp - 0x24], 0xffffffff
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], bl
je 0x100208d9
push ebx
call dword [sym.imp.GDI32.dll_CreatePenIndirect]
cmp dword [ebp - 0x34], ebx
jne 0x100208f4
mov eax, dword [ebp - 0x18]
mov edi, ebx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
neg eax
sbb eax, eax
neg eax
cmp eax, dword [ebp - 0x2c]
jne 0x100208f6
mov edi, esi
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
mov eax, dword [ebp - 0x20]
setne cl
xor edx, edx
cmp edi, ecx
setle dl
xor ecx, ecx
cmp eax, edx
setl cl
mov dword [ebp - 0x24], ecx
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffee
jge 0x100208c3
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
setle dl
xor ecx, ecx
sub edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
cmp eax, edx
mov eax, 0xa44bf8e1
setl cl
imul ecx, dword [ebp - 0x14]
cmp eax, ecx
sbb edx, edx
xor ecx, ecx
inc edx
add edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
cmp edx, eax
setge cl
mov dword [ebp - 0x24], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 5
je 0x100208a9
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x14], 4
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x14], 2
mov dword [ebp - 0x2c], 0x211b
cmp dword [ebp - 0x2c], 0x21c8
jle 0x10020a03
mov esi, ebx
mov dword [ebp - 0x14], ebx
mov edi, ebx
mov eax, esi
mov dword [ebp - 0x24], ebx
cdq
idiv edi
mov esi, edx
mov eax, esi
mov ecx, 0x10602dd8
or eax, ebx
cdq
push edx
push eax
call fcn.1000fdea
inc ebx
cmp ebx, 0x1170
jl 0x100209cb
mov esi, dword [ebp - 0x14]
inc edi
push 0
pop ebx
cmp edi, 0x7083
jl 0x100209c1
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x16fb
jl 0x100209bf
xor esi, esi
inc esi
mov dword [ebp - 0x14], 3
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x2c], 0x1eb4
jge 0x10020a25
mov edx, 0x10008f0c
mov ecx, 0x10602dd8
call fcn.10012a98
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x14], 0xf186
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0x14], 0x6e2bfbd3
mov dword [ebp - 0x14], 0xfffffff8
push 4
call fcn.1001013f
mov dword [ebp - 4], 2
mov dword [ebp - 0x1c], ebx
jmp 0x10020a8f
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xcc]
mov dword [eax + ecx*4], 0x2f38d927
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10020a7c
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x10020ab6
push ebx
push 0x227c
push ebx
push 0x11e1
push ebx
push 0x36f
call dword [sym.imp.USER32.dll_DrawTextExW]
mov dword [ebp - 0x30], 0xe
jmp 0x10020b17
mov dword [ebp - 0x14], 7
lea ecx, [ebp - 0xd8]
push 3
call fcn.1001013f
mov dword [ebp - 0x14], 8
mov dword [ebp - 0x14], 0x76df
mov dword [ebp - 0x14], 0xde6fc608
mov dword [ebp - 0x1c], ebx
jmp 0x10020b00
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xd8]
mov dword [eax + ecx*4], 0x47b80be3
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10020aed
inc dword [ebp - 0x14]
lea ecx, [ebp - 0xd8]
call fcn.100101c1
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xfffffff4
je 0x10020abf
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcc]
call fcn.100101c1
push esi
lea ecx, [ebp - 0xb4]
call fcn.1001013f
mov dword [ebp - 4], 3
mov dword [ebp - 0x14], 0xfffffffc
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x14], 0x5211521f
mov dword [ebp - 0x20], 0xa
jmp 0x10020c12
push esi
lea ecx, [ebp - 0x84]
call fcn.1001013f
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x14], 0xfffffff9
push 2
call fcn.1001013f
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x18], ebx
jmp 0x10020b9b
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x84]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10020b88
mov dword [ebp - 0x18], ebx
jmp 0x10020bb1
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x60]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10020ba5
mov eax, dword [ebp - 0x20]
xor edx, edx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x60]
mov dword [eax], ecx
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x14]
cmp eax, esi
mov ecx, dword [ebp - 0x84]
setle dl
imul edx, dword [ecx]
sub edx, 3
neg edx
sbb edx, edx
lea eax, [edx - 9]
mov dword [ecx], eax
mov ecx, 0xfffe
cmp ecx, eax
lea ecx, [ebp - 0x60]
sbb eax, eax
neg eax
mov dword [ebp - 0x14], eax
call fcn.100101c1
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 3
call fcn.100101c1
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
je 0x10020b5c
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 0xfffffff3
jg 0x10020d2f
mov dword [ebp - 0x1c], 0xab3cf813
mov dword [ebp - 0x14], 0x128abf8b
mov dword [ebp - 0x2c], 0x1ef9
cmp dword [ebp - 0x2c], 0x2266
jle 0x10020c99
mov esi, ebx
mov dword [ebp - 0x14], ebx
mov edi, ebx
mov eax, esi
mov dword [ebp - 0x24], ebx
cdq
idiv edi
mov esi, edx
mov ecx, ebx
mov eax, esi
shl eax, cl
mov ecx, 0x10602dd8
cdq
push edx
push eax
call fcn.1000fdea
inc ebx
cmp ebx, 0x46e6
jl 0x10020c58
mov esi, dword [ebp - 0x14]
inc edi
push 0
pop ebx
cmp edi, 0x4829
jl 0x10020c4e
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x178c
jl 0x10020c4c
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor esi, esi
inc esi
mov ecx, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x1c]
neg ecx
cmp eax, ecx
setg dl
sub edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setge cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setl dl
xor ecx, ecx
neg eax
cmp eax, edx
setl cl
xor edx, edx
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setne dl
mov dword [ebp - 0x14], edx
mov byte [ebp - 4], 5
cmp dword [ebp - 0x2c], 0x1dd3
jge 0x10020d20
mov edx, 0x10008f6c
mov ecx, 0x10602dd8
call fcn.10012a98
jmp 0x10020d20
mov dword [ebp - 4], 3
dec dword [ebp - 0x20]
jmp 0x10020c1f
mov dword [ebp - 0x14], 0x8b72fd49
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x14], 8
mov dword [ebp - 0x14], 0xfffffff9
mov dword [ebp - 0x14], 0xfffffffe
mov dword [ebp - 0x14], 0xf390197f
mov dword [ebp - 0x14], 0xfffffffa
mov dword [ebp - 0x14], 0x1220985a
push esi
call fcn.1001013f
push esi
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 7
call fcn.1001013f
mov byte [ebp - 4], 8
mov dword [ebp - 0x18], ebx
jmp 0x10020d95
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc0]
mov dword [eax + ecx*4], 8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10020d82
mov dword [ebp - 0x14], 0x7de9
cmp dword [ebp - 0x14], 0x7e9d
jle 0x10020e08
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, ebx
mov eax, edi
sar eax, cl
mov ecx, 0x10602dd8
or eax, esi
cdq
push edx
push eax
call fcn.1000fdea
inc ebx
cmp ebx, 0xeac
jl 0x10020dba
inc edi
push 0
pop ebx
cmp edi, 0x3530
jl 0x10020db7
inc esi
cmp esi, 0x66ee
jl 0x10020db5
push 0xd05
push ebx
push ebx
push 0x161
push ebx
push 0x19b3
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
xor esi, esi
inc esi
mov dword [ebp - 0x18], ebx
jmp 0x10020e1d
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x6c]
mov dword [eax + ecx*4], 0xfffffff7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10020e0d
mov byte [ebp - 4], 9
cmp dword [ebp - 0x14], 0x7b5d
jge 0x10020e5f
mov edx, 0x10008fcc
mov ecx, 0x10602dd8
call fcn.10012a98
jmp 0x10020e5f
mov dword [ebp - 4], 8
mov dword [ebp - 0x2c], 0x1c86
cmp dword [ebp - 0x2c], 0x204a
jle 0x10020ee3
push 0x18ac
call dword [sym.imp.USER32.dll_GetKeyState]
mov edx, ebx
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x14], ebx
lea ecx, [eax + edi]
mov eax, edx
shl eax, cl
lea ecx, [ebp - 0x118]
cdq
push edx
push eax
call fcn.1000cbfe
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10020eac
mov eax, dword [eax]
push eax
call fcn.100448f6
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x118]
call fcn.100107c9
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0x211e
jl 0x10020e8d
inc edi
cmp edi, 0x78c
jl 0x10020e88
inc edx
mov dword [ebp - 0x24], edx
cmp edx, 0x64
jl 0x10020e86
mov eax, dword [ebp - 0x6c]
inc dword [eax]
cmp dword [ebp - 0x2c], 0x1b22
jge 0x10020efc
push 0x10009020
call fcn.100448f6
pop ecx
mov dword [ebp - 4], 8
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x10020f24
push 0x111d
push 0x42
push 0x16c6
push 0x596
push ebx
call dword [sym.imp.USER32.dll_PeekMessageA]
lea ecx, [ebp - 0x6c]
call fcn.100101c1
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 3
call fcn.100101c1
push 4
lea ecx, [ebp - 0xa8]
call fcn.1001013f
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x14], 0x44d0289a
mov dword [ebp - 0x44], 0xffff
push esi
call fcn.1001013f
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x10020f7f
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x78]
mov dword [eax + ecx*4], 0x9102071b
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10020f6f
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], ebx
jl 0x10021000
mov dword [ebp - 0x24], 0x62751c76
lea ecx, [ebp - 0x9c]
push 3
call fcn.1001013f
mov dword [ebp - 0x1c], ebx
jmp 0x10020fb8
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x9c]
mov dword [eax + ecx*4], 0xfffffff9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10020fa5
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jl 0x10020ff0
mov dword [ebp - 0x1c], 0xe1b61bab
mov dword [ebp - 0x14], esi
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x78]
cmp dword [eax + ecx*4], ebx
jne 0x10020ff0
mov dword [ebp - 0x1c], ebx
jmp 0x10020fe6
inc dword [ebp - 0x14]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x10020fe0
dec dword [ebp - 0x24]
jns 0x10020fc6
lea ecx, [ebp - 0x9c]
call fcn.100101c1
dec dword [ebp - 0x30]
jns 0x10020f8c
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0xd
call fcn.100101c1
mov dword [ebp - 0x14], 0x1a36
lea ecx, [ebp - 0x90]
mov dword [ebp - 0x14], 0x643cdf98
push 2
call fcn.1001013f
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x14], 9
mov dword [ebp - 0x14], 0x3bc2
cmp dword [ebp - 0x14], 0x3d68
jle 0x1002106b
mov edi, ebx
mov esi, ebx
lea eax, [esi + edi]
mov ecx, 0x10602dd8
cdq
push edx
push eax
call fcn.1000fdea
inc esi
cmp esi, 0x4c43
jl 0x10021046
inc edi
cmp edi, 0x5f28
jl 0x10021044
xor esi, esi
inc esi
mov dword [ebp - 0x2c], 0x9cec79e6
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x14], 0x3b0c
jge 0x100210af
mov edx, 0x10009068
mov ecx, 0x10602dd8
call fcn.10012a98
jmp 0x100210af
mov dword [ebp - 4], 0xf
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0x14], 0x90a23371
push 2
call fcn.1001013f
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x100210e9
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x90]
mov dword [eax + ecx*4], 0x633efc07
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100210d6
mov dword [ebp - 0x18], ebx
jmp 0x10021107
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xe4]
mov dword [eax + ecx*4], 0xa7525d2d
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100210f4
dec dword [ebp - 0x20]
mov dword [ebp - 0x20], ebx
jmp 0x10021126
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x90]
cmp dword [eax + ecx*4], ebx
jne 0x1002112b
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jle 0x10021115
lea ecx, [ebp - 0xe4]
call fcn.100101c1
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xd
call fcn.100101c1
mov dword [ebp - 0x18], ebx
jmp 0x10021159
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb4]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1002114a
mov dword [ebp - 0x18], ebx
jmp 0x10021173
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xa8]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10021163
mov dword [ebp - 0x18], 0x115252cb
mov dword [ebp - 0x34], 0x1d57
cmp dword [ebp - 0x34], 0x20e9
jle 0x1002121c
mov dword [ebp - 0x24], ebx
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov edi, ebx
mov dword [ebp - 0x30], ebx
lea ecx, [edi + eax]
mov dword [ebp - 0x1c], 0xe3d
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x14], ecx
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x130]
cdq
push edx
push eax
call fcn.1000cbfe
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100211cd
mov eax, dword [eax]
push eax
call fcn.100448f6
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x130]
call fcn.100107c9
mov ecx, dword [ebp - 0x14]
dec ecx
dec dword [ebp - 0x1c]
mov dword [ebp - 0x14], ecx
jne 0x100211b1
mov edi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
inc edi
mov dword [ebp - 0x30], edi
cmp edi, 0x58b3
jl 0x100211a1
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x53a1
jl 0x1002119c
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x3da9
jl 0x10021197
cmp dword [ebp - 0x34], 0x1cc0
jge 0x10021230
push 0x100090a8
call fcn.100448f6
pop ecx
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x1c], ebx
jmp 0x1002124d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x100], 0xffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1002123c
mov dword [ebp - 0x18], ebx
jmp 0x10021265
mov dword [ebp - 0x14], 0xffffffff
dec dword [ebp - 0x14]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x10021258
mov eax, dword [ebp - 0xfc]
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x18], eax
call fcn.1002075e
mov dword [ebp - 0x24], 0x33dc
cmp dword [ebp - 0x24], 0x36f3
jle 0x100212e2
mov edi, ebx
mov dword [ebp - 0x14], ebx
mov esi, ebx
mov ebx, dword [ebp - 0x14]
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x14], 0x6532
lea eax, [ebx + edi]
mov ecx, 0x10602dd8
or eax, esi
cdq
push edx
push eax
call fcn.1000fdea
dec esi
dec dword [ebp - 0x14]
jne 0x100212a3
mov esi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x34ce
jl 0x10021299
inc ebx
push 0
mov dword [ebp - 0x14], ebx
cmp ebx, 0x602e
pop ebx
jl 0x10021291
inc edi
cmp edi, 0x2942
jl 0x1002128e
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x24], 0x2ffc
jge 0x1002131c
mov edx, 0x100090f8
mov ecx, 0x10602dd8
call fcn.10012a98
jmp 0x1002131c
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x14], 0x1247adf1
mov dword [ebp - 0x14], 0xfffffff8
mov dword [ebp - 0x1c], ebx
jmp 0x10021344
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3c], 0x110c93b4
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10021336
mov dword [ebp - 0x3c], ebx
jmp 0x10021396
push dword [ebp - 0x40]
movdqa xmm0, xmmword [0x1000b740]
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0xf4]
mov dword [ebp - 0x54], ebx
push eax
push ebx
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x50], ebx
movdqu xmmword [ebp - 0xf4], xmm0
mov dword [ebp - 0x4c], ebx
call fcn.100130f9
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x54]
mov dword [eax + 0xc], ecx
lea ecx, [ebp - 0x54]
call fcn.100101c1
dec dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0xfffffff0
jne 0x1002134f
dec dword [ebp - 0x14]
lea ecx, [ebp - 0xa8]
call fcn.100101c1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb4]
call fcn.100101c1
mov eax, dword [ebp - 0x40]
mov ecx, 0x3e8
cdq
idiv ecx
mov ecx, dword [ebp - 0x48]
mov edi, edx
mov esi, eax
call fcn.100206ec
mov ecx, dword [ebp - 0xc]
add eax, esi
add eax, edi
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret