Function at 0x1008a110
Capabilities:
Encode data using xor
Get common file path

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100f571b
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x600
mov eax, dword [0x1011e00c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [0x101203a8]
lea eax, [ebp - 0x2c8]
push 0x78
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov byte [ebp - 0x2c0], 1
lea eax, [ebp - 0x340]
mov dword [ebp - 0x2b4], 3
mov edi, 0xffff
mov dword [ebp - 0x2b0], 1
mov dword [ebp - 0x290], 0x7f7fffff
push 0x78
push 0
push eax
mov word [ebp - 0x280], di
mov dword [ebp - 0x288], 3
mov byte [ebp - 0x2ac], 0
mov dword [ebp - 0x2b8], 0x41800000
mov dword [ebp - 0x284], 0x3f800000
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov byte [ebp - 0x338], 1
lea eax, [ebp - 0x3b8]
mov dword [ebp - 0x32c], 3
mov dword [ebp - 0x328], 1
mov dword [ebp - 0x308], 0x7f7fffff
push 0x78
push 0
push eax
mov word [ebp - 0x2f8], di
mov dword [ebp - 0x300], 3
mov byte [ebp - 0x324], 0
mov dword [ebp - 0x330], 0x41800000
mov dword [ebp - 0x2fc], 0x3f800000
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov byte [ebp - 0x3b0], 1
lea eax, [ebp - 0x430]
mov dword [ebp - 0x3a4], 3
mov dword [ebp - 0x3a0], 1
mov dword [ebp - 0x380], 0x7f7fffff
push 0x78
push 0
push eax
mov word [ebp - 0x370], di
mov dword [ebp - 0x378], 3
mov byte [ebp - 0x39c], 0
mov dword [ebp - 0x3a8], 0x41200000
mov dword [ebp - 0x374], 0x3f800000
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov byte [ebp - 0x428], 1
lea eax, [ebp - 0x4a8]
mov dword [ebp - 0x41c], 3
mov dword [ebp - 0x418], 1
mov dword [ebp - 0x3f8], 0x7f7fffff
push 0x78
push 0
push eax
mov word [ebp - 0x3e8], di
mov dword [ebp - 0x3f0], 3
mov byte [ebp - 0x414], 0
mov dword [ebp - 0x420], 0x41e80000
mov dword [ebp - 0x3ec], 0x3f800000
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov byte [ebp - 0x4a0], 1
lea eax, [ebp - 0x520]
mov dword [ebp - 0x494], 3
mov dword [ebp - 0x490], 1
mov dword [ebp - 0x470], 0x7f7fffff
push 0x78
push 0
mov word [ebp - 0x460], di
mov dword [ebp - 0x468], 0x90
mov byte [ebp - 0x48c], 1
mov dword [ebp - 0x498], 0x41400000
mov dword [ebp - 0x464], 0x3f800000
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov byte [ebp - 0x518], 1
lea eax, [ebp - 0x598]
mov dword [ebp - 0x50c], 3
mov dword [ebp - 0x508], 1
mov dword [ebp - 0x4e8], 0x7f7fffff
push 0x78
push 0
push eax
mov word [ebp - 0x4d8], di
mov dword [ebp - 0x4e0], 0x90
mov byte [ebp - 0x504], 1
mov dword [ebp - 0x510], 0x41400000
mov dword [ebp - 0x4dc], 0x3f800000
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov byte [ebp - 0x590], 1
lea eax, [ebp - 0x610]
mov dword [ebp - 0x584], 3
mov dword [ebp - 0x580], 1
mov dword [ebp - 0x560], 0x7f7fffff
push 0x78
push 0
push eax
mov word [ebp - 0x550], di
mov dword [ebp - 0x558], 0x90
mov byte [ebp - 0x57c], 1
mov dword [ebp - 0x588], 0x41400000
mov dword [ebp - 0x554], 0x3f800000
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov byte [ebp - 0x608], 1
lea eax, [ebp - 0x120]
mov dword [ebp - 0x5fc], 3
mov dword [ebp - 0x5f8], 1
mov dword [ebp - 0x5d8], 0x7f7fffff
push 0x104
push eax
mov word [ebp - 0x5c8], di
mov dword [ebp - 0x5d0], 0x90
mov byte [ebp - 0x5f4], 1
mov dword [ebp - 0x5cc], 0x3f800000
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
movaps xmm0, xmmword [0x10117b50]
xor ecx, ecx
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x128], 0x3220207a
mov byte [ebp - 0x124], 0
nop word [eax + eax]
mov al, byte [ebp - 0x138]
xor byte [ebp + ecx - 0x137], al
inc ecx
cmp ecx, 0x13
jb 0x1008a4b0
xorps xmm0, xmm0
mov byte [ebp - 0x124], 0
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x158], 0
movups xmmword [ebp - 0x168], xmm0
mov dword [ebp - 0x154], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1008a4f1
sub ecx, edx
lea eax, [ebp - 0x120]
push ecx
push eax
lea ecx, [ebp - 0x168]
call fcn.1000b920
lea ecx, [ebp - 0x137]
mov dword [ebp - 4], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1008a520
sub ecx, edx
lea eax, [ebp - 0x137]
push ecx
push eax
lea ecx, [ebp - 0x168]
call fcn.1000e6a0
mov dword [ebp - 0x220], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x230], xmm0
mov dword [ebp - 0x21c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x230], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x220], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x154]
cmp ecx, 0x10
jb 0x1008a5c2
mov edx, dword [ebp - 0x168]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1008a5b8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1008a5b8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100f28ed
add esp, 8
movaps xmm0, xmmword [str._gTUOHgHNRHY]
xor ecx, ecx
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0xf
mov byte [ebp - 0x168], 0
movups xmmword [ebp - 0x134], xmm0
mov dword [ebp - 0x124], 0x5d4f4f
nop word [eax + eax]
mov al, byte [ebp - 0x134]
xor byte [ebp + ecx - 0x133], al
inc ecx
cmp ecx, 0x12
jb 0x1008a600
xorps xmm0, xmm0
mov byte [ebp - 0x121], 0
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x140], 0
movups xmmword [ebp - 0x150], xmm0
mov dword [ebp - 0x13c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1008a641
sub ecx, edx
lea eax, [ebp - 0x120]
push ecx
push eax
lea ecx, [ebp - 0x150]
call fcn.1000b920
lea ecx, [ebp - 0x133]
mov byte [ebp - 4], 3
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1008a670
sub ecx, edx
lea eax, [ebp - 0x133]
push ecx
push eax
lea ecx, [ebp - 0x150]
call fcn.1000e6a0
mov dword [ebp - 0x208], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x218], xmm0
mov dword [ebp - 0x204], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x218], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x208], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x13c]
cmp ecx, 0x10
jb 0x1008a712
mov edx, dword [ebp - 0x150]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1008a708
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1008a708
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100f28ed
add esp, 8
movaps xmm0, xmmword [0x10117ac0]
xor ecx, ecx
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0xf
mov byte [ebp - 0x150], 0
movups xmmword [ebp - 0x134], xmm0
mov word [ebp - 0x124], 0x2634
mov byte [ebp - 0x122], 0
nop dword [eax]
mov al, byte [ebp - 0x134]
xor byte [ebp + ecx - 0x133], al
inc ecx
cmp ecx, 0x11
jb 0x1008a750
xorps xmm0, xmm0
mov byte [ebp - 0x122], 0
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x158], 0
movups xmmword [ebp - 0x168], xmm0
mov dword [ebp - 0x154], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1008a791
sub ecx, edx
lea eax, [ebp - 0x120]
push ecx
push eax
lea ecx, [ebp - 0x168]
call fcn.1000b920
lea ecx, [ebp - 0x133]
mov byte [ebp - 4], 6
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1008a7c0
sub ecx, edx
lea eax, [ebp - 0x133]
push ecx
push eax
lea ecx, [ebp - 0x168]
call fcn.1000e6a0
mov dword [ebp - 0x1f0], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x200], xmm0
mov dword [ebp - 0x1ec], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x200], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1f0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x154]
cmp ecx, 0x10
jb 0x1008a862
mov edx, dword [ebp - 0x168]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1008a858
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1008a858
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100f28ed
add esp, 8
movaps xmm0, xmmword [0x10118790]
xor ecx, ecx
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0xf
mov byte [ebp - 0x168], 0
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x128], 0x6e7c7c26
mov byte [ebp - 0x124], 0
nop
mov al, byte [ebp - 0x138]
xor byte [ebp + ecx - 0x137], al
inc ecx
cmp ecx, 0x13
jb 0x1008a8a0
xorps xmm0, xmm0
mov byte [ebp - 0x124], 0
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x140], 0
movups xmmword [ebp - 0x150], xmm0
mov dword [ebp - 0x13c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1008a8e1
sub ecx, edx
lea eax, [ebp - 0x120]
push ecx
push eax
lea ecx, [ebp - 0x150]
call fcn.1000b920
lea ecx, [ebp - 0x137]
mov byte [ebp - 4], 9
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1008a910
sub ecx, edx
lea eax, [ebp - 0x137]
push ecx
push eax
lea ecx, [ebp - 0x150]
call fcn.1000e6a0
mov dword [ebp - 0x190], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x1a0], xmm0
mov dword [ebp - 0x18c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1a0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x190], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x13c]
cmp ecx, 0x10
jb 0x1008a9b2
mov edx, dword [ebp - 0x150]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1008a9a8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1008a9a8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100f28ed
add esp, 8
movaps xmm0, xmmword [0x101189e0]
xor ecx, ecx
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0xf
mov byte [ebp - 0x150], 0
movups xmmword [ebp - 0x134], xmm0
mov dword [ebp - 0x124], 0x362424
nop word [eax + eax]
mov al, byte [ebp - 0x134]
xor byte [ebp + ecx - 0x133], al
inc ecx
cmp ecx, 0x12
jb 0x1008a9f0
xorps xmm0, xmm0
mov byte [ebp - 0x121], 0
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x158], 0
movups xmmword [ebp - 0x168], xmm0
mov dword [ebp - 0x154], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1008aa31
sub ecx, edx
lea eax, [ebp - 0x120]
push ecx
push eax
lea ecx, [ebp - 0x168]
call fcn.1000b920
lea ecx, [ebp - 0x133]
mov byte [ebp - 4], 0xc
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1008aa60
sub ecx, edx
lea eax, [ebp - 0x133]
push ecx
push eax
lea ecx, [ebp - 0x168]
call fcn.1000e6a0
mov dword [ebp - 0x178], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x188], xmm0
mov dword [ebp - 0x174], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x188], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x178], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x154]
cmp ecx, 0x10
jb 0x1008ab02
mov edx, dword [ebp - 0x168]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1008aaf8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1008aaf8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100f28ed
add esp, 8
movaps xmm0, xmmword [0x101182d0]
xor ecx, ecx
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0xf
mov byte [ebp - 0x168], 0
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x128], 0x5240401a
mov byte [ebp - 0x124], 0
nop
mov al, byte [ebp - 0x138]
xor byte [ebp + ecx - 0x137], al
inc ecx
cmp ecx, 0x13
jb 0x1008ab40
xorps xmm0, xmm0
mov byte [ebp - 0x124], 0
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x140], 0
movups xmmword [ebp - 0x150], xmm0
mov dword [ebp - 0x13c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1008ab81
sub ecx, edx
lea eax, [ebp - 0x120]
push ecx
push eax
lea ecx, [ebp - 0x150]
call fcn.1000b920
lea ecx, [ebp - 0x137]
mov byte [ebp - 4], 0xf
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1008abb0
sub ecx, edx
lea eax, [ebp - 0x137]
push ecx
push eax
lea ecx, [ebp - 0x150]
call fcn.1000e6a0
mov dword [ebp - 0x1d8], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x1e8], xmm0
mov dword [ebp - 0x1d4], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1e8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1d8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x13c]
cmp ecx, 0x10
jb 0x1008ac52
mov edx, dword [ebp - 0x150]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1008ac48
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1008ac48
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100f28ed
add esp, 8
movaps xmm0, xmmword [0x101179d0]
xor ecx, ecx
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0xf
mov byte [ebp - 0x150], 0
movups xmmword [ebp - 0x134], xmm0
mov word [ebp - 0x124], 0x22
nop word [eax + eax]
mov al, byte [ebp - 0x134]
xor byte [ebp + ecx - 0x133], al
inc ecx
cmp ecx, 0x10
jb 0x1008ac90
xorps xmm0, xmm0
mov byte [ebp - 0x123], 0
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x158], 0
movups xmmword [ebp - 0x168], xmm0
mov dword [ebp - 0x154], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1008acd1
sub ecx, edx
lea eax, [ebp - 0x120]
push ecx
push eax
lea ecx, [ebp - 0x168]
call fcn.1000b920
lea ecx, [ebp - 0x133]
mov byte [ebp - 4], 0x12
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1008ad00
sub ecx, edx
lea eax, [ebp - 0x133]
push ecx
push eax
lea ecx, [ebp - 0x168]
call fcn.1000e6a0
mov dword [ebp - 0x1c0], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x1d0], xmm0
mov dword [ebp - 0x1bc], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1d0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1c0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x154]
cmp ecx, 0x10
jb 0x1008ada2
mov edx, dword [ebp - 0x168]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1008ad98
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1008ad98
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100f28ed
add esp, 8
movaps xmm0, xmmword [0x10117c90]
xor ecx, ecx
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0xf
mov byte [ebp - 0x168], 0
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x128], 0x3e643a2f
mov word [ebp - 0x124], 0x2c3e
mov byte [ebp - 0x122], 0
nop word [eax + eax]
mov al, byte [ebp - 0x138]
xor byte [ebp + ecx - 0x137], al
inc ecx
cmp ecx, 0x15
jb 0x1008adf0
xorps xmm0, xmm0
mov byte [ebp - 0x122], 0
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x140], 0
movups xmmword [ebp - 0x150], xmm0
mov dword [ebp - 0x13c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1008ae31
sub ecx, edx
lea eax, [ebp - 0x120]
push ecx
push eax
lea ecx, [ebp - 0x150]
call fcn.1000b920
lea ecx, [ebp - 0x137]
mov byte [ebp - 4], 0x15
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1008ae60
sub ecx, edx
lea eax, [ebp - 0x137]
push ecx
push eax
lea ecx, [ebp - 0x150]
call fcn.1000e6a0
mov dword [ebp - 0x1a8], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x1b8], xmm0
mov dword [ebp - 0x1a4], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1b8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1a8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x13c]
cmp ecx, 0x10
jb 0x1008af02
mov edx, dword [ebp - 0x150]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1008aef8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1008aef8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100f28ed
add esp, 8
movaps xmm0, xmmword [0x101175a0]
xor ecx, ecx
movups xmmword [ebp - 0x170], xmm0
mov dword [ebp - 0x140], 0
movaps xmm0, xmmword [0x10117270]
mov dword [ebp - 0x13c], 0xf
mov byte [ebp - 0x150], 0
movups xmmword [ebp - 0x160], xmm0
nop dword [eax + eax]
mov al, byte [ebp - 0x170]
xor byte [ebp + ecx - 0x16f], al
inc ecx
cmp ecx, 0x1e
jb 0x1008af40
xorps xmm0, xmm0
mov byte [ebp - 0x151], 0
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x128], 0
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x124], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1008af81
sub ecx, edx
lea eax, [ebp - 0x120]
push ecx
push eax
lea ecx, [ebp - 0x138]
call fcn.1000b920
lea ecx, [ebp - 0x16f]
mov byte [ebp - 4], 0x18
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1008afb0
sub ecx, edx
lea eax, [ebp - 0x16f]
push ecx
push eax
lea ecx, [ebp - 0x138]
call fcn.1000e6a0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x248], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x238], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x124]
cmp ecx, 0x10
jb 0x1008b034
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1008b02a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1008b02a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100f28ed
add esp, 8
cmp dword [ebp - 0x21c], 0x10
lea ecx, [ebp - 0x2c8]
movss xmm2, dword [0x10117054]
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push 0x101163e8
push ecx
mov ecx, dword [esi + 0x2c]
push eax
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
call fcn.1004a7c0
cmp dword [ebp - 0x204], 0x10
lea ecx, [ebp - 0x340]
movss xmm2, dword [0x10117054]
mov dword [0x101203f8], eax
lea eax, [ebp - 0x218]
cmovae eax, dword [ebp - 0x218]
push 0x101163e8
push ecx
mov ecx, dword [esi + 0x2c]
push eax
call fcn.1004a7c0
cmp dword [ebp - 0x1bc], 0x10
lea ecx, [ebp - 0x3b8]
movss xmm2, dword [0x10117040]
mov dword [0x101203f4], eax
lea eax, [ebp - 0x1d0]
cmovae eax, dword [ebp - 0x1d0]
push 0x101163e8
push ecx
mov ecx, dword [esi + 0x2c]
push eax
call fcn.1004a7c0
cmp dword [ebp - 0x1d4], 0x10
lea ecx, [ebp - 0x430]
movss xmm2, dword [0x1011706c]
mov dword [0x10120410], eax
lea eax, [ebp - 0x1e8]
cmovae eax, dword [ebp - 0x1e8]
push 0x101163e8
push ecx
mov ecx, dword [esi + 0x2c]
push eax
call fcn.1004a7c0
cmp dword [ebp - 0x174], 0x10
lea ecx, [ebp - 0x4a8]
movss xmm2, dword [0x10117048]
mov dword [0x10120408], eax
lea eax, [ebp - 0x188]
cmovae eax, dword [ebp - 0x188]
push 0x101163e8
push ecx
mov ecx, dword [esi + 0x2c]
push eax
call fcn.1004a7c0
cmp dword [ebp - 0x174], 0x10
lea ecx, [ebp - 0x520]
movss xmm2, dword [0x10117048]
mov dword [0x10120400], eax
lea eax, [ebp - 0x188]
cmovae eax, dword [ebp - 0x188]
push 0x101163e8
push ecx
mov ecx, dword [esi + 0x2c]
push eax
call fcn.1004a7c0
cmp dword [ebp - 0x18c], 0x10
lea ecx, [ebp - 0x598]
movss xmm2, dword [0x10117048]
mov dword [0x10120404], eax
lea eax, [ebp - 0x1a0]
cmovae eax, dword [ebp - 0x1a0]
push 0x101163e8
push ecx
mov ecx, dword [esi + 0x2c]
push eax
call fcn.1004a7c0
mov dword [0x1012040c], eax
lea eax, [ebp - 0x1b8]
cmp dword [ebp - 0x1a4], 0x10
movss xmm2, dword [0x10117048]
cmovae eax, dword [ebp - 0x1b8]
mov ecx, dword [esi + 0x2c]
push 0x101163e8
push 0
push eax
call fcn.1004a7c0
cmp dword [ebp - 0x1ec], 0x10
lea ecx, [ebp - 0x610]
movss xmm2, dword [0x1011704c]
mov dword [0x101203fc], eax
lea eax, [ebp - 0x200]
cmovae eax, dword [ebp - 0x200]
push 0x101163e8
push ecx
mov ecx, dword [esi + 0x2c]
push eax
call fcn.1004a7c0
cmp dword [ebp - 0x18c], 0x10
lea ecx, [ebp - 0x610]
movss xmm2, dword [0x10117044]
lea eax, [ebp - 0x1a0]
cmovae eax, dword [ebp - 0x1a0]
push 0x101163e8
push ecx
mov ecx, dword [esi + 0x2c]
push eax
call fcn.1004a7c0
mov ecx, dword [esi + 0x2c]
mov dword [0x10120a1c], 0x10050ac0
mov dword [ecx + 0x460], 0x10120a1c
mov dword [ecx + 0x464], 0
call fcn.1004acc0
mov ecx, dword [ebp - 0x234]
cmp ecx, 0x10
jb 0x1008b2bc
mov edx, dword [ebp - 0x248]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1008b2b2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1008b537
push ecx
push edx
call fcn.100f28ed
add esp, 8
mov ecx, dword [ebp - 0x1a4]
cmp ecx, 0x10
jb 0x1008b2f6
mov edx, dword [ebp - 0x1b8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1008b2ec
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1008b537
push ecx
push edx
call fcn.100f28ed
add esp, 8
mov ecx, dword [ebp - 0x1bc]
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x1a4], 0xf
mov byte [ebp - 0x1b8], 0
cmp ecx, 0x10
jb 0x1008b34b
mov edx, dword [ebp - 0x1d0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1008b341
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1008b537
push ecx
push edx
call fcn.100f28ed
add esp, 8
mov ecx, dword [ebp - 0x1d4]
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x1bc], 0xf
mov byte [ebp - 0x1d0], 0
cmp ecx, 0x10
jb 0x1008b3a0
mov edx, dword [ebp - 0x1e8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1008b396
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1008b537
push ecx
push edx
call fcn.100f28ed
add esp, 8
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0x1d4], 0xf
mov byte [ebp - 0x1e8], 0
cmp ecx, 0x10
jb 0x1008b3f5
mov edx, dword [ebp - 0x188]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1008b3eb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1008b537
push ecx
push edx
call fcn.100f28ed
add esp, 8
mov ecx, dword [ebp - 0x18c]
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x174], 0xf
mov byte [ebp - 0x188], 0
cmp ecx, 0x10
jb 0x1008b44a
mov edx, dword [ebp - 0x1a0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1008b440
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1008b537
push ecx
push edx
call fcn.100f28ed
add esp, 8
mov ecx, dword [ebp - 0x1ec]
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0xf
mov byte [ebp - 0x1a0], 0
cmp ecx, 0x10
jb 0x1008b49f
mov edx, dword [ebp - 0x200]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1008b495
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1008b537
push ecx
push edx
call fcn.100f28ed
add esp, 8
mov ecx, dword [ebp - 0x204]
mov dword [ebp - 0x1f0], 0
mov dword [ebp - 0x1ec], 0xf
mov byte [ebp - 0x200], 0
cmp ecx, 0x10
jb 0x1008b4f0
mov edx, dword [ebp - 0x218]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1008b4e6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1008b537
push ecx
push edx
call fcn.100f28ed
add esp, 8
mov ecx, dword [ebp - 0x21c]
mov dword [ebp - 0x208], 0
mov dword [ebp - 0x204], 0xf
mov byte [ebp - 0x218], 0
cmp ecx, 0x10
jb 0x1008b547
mov edx, dword [ebp - 0x230]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1008b53d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1008b53d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100f28ed
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100f238c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret