Function at 0x100294f0
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100f6d6d
mov eax, dword fs:[0]
push eax
sub esp, 0xd0
mov eax, dword [0x10126008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0xd4], edi
cmp dword [edi + 4], 0
je 0x1002a608
xorps xmm0, xmm0
mov dword [ebp - 0x2c], 0
movq qword [ebp - 0x34], xmm0
xor ebx, ebx
mov dword [ebp - 0x34], ebx
xor edx, edx
xor ecx, ecx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x2c], ecx
lea esi, [edi + 0x58]
mov dword [ebp - 4], ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x14], esi
test esi, esi
je 0x1002956d
mov eax, dword [esi]
test eax, eax
je 0x1002956d
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
xor edx, edx
lea eax, [edi + 0x5c]
mov byte [ebp - 4], 1
xor ebx, ebx
lea ecx, [ebp - 0x34]
mov dword [ebp - 0xd8], ebx
cmp ecx, eax
je 0x100295ae
mov ebx, dword [eax]
mov dword [ebp - 0x34], ebx
mov dword [eax], 0
mov edx, dword [eax + 4]
mov dword [ebp - 0x30], edx
mov dword [eax + 4], 0
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2c], ecx
mov dword [eax + 8], 0
mov dword [ebp - 0xd8], ebx
mov byte [ebp - 4], 2
test esi, esi
je 0x100295cd
mov eax, dword [esi]
test eax, eax
je 0x100295c6
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x14], 0
mov byte [ebp - 4], 0
cmp ebx, edx
je 0x1002a5b3
nop dword [eax]
cmp dword [ebx], 0
je 0x1002a5a2
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
call fcn.10004f50
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 5
mov eax, dword [ebx + 4]
mov dword [ebp - 0x14], eax
test al, 1
je 0x1002970a
xorps xmm0, xmm0
mov dword [ebp - 0x38], 0
movq qword [ebp - 0x40], xmm0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 6
mov ecx, dword [edi + 4]
push eax
push 1
call fcn.1001c1c0
mov ebx, dword [ebp - 0x40]
cmp ebx, dword [ebp - 0x3c]
je 0x100296a6
mov esi, ebx
nop dword [eax]
push 0
push 0x3c
push dword [esi + 0x14]
push dword [esi + 0x10]
call fcn.100f2be0
mov ecx, eax
mov edi, edx
shld edi, ecx, 4
push esi
shl ecx, 4
sub ecx, eax
lea eax, [ebp - 0x1c]
push eax
sbb edi, edx
shld edi, ecx, 2
shl ecx, 2
mov dword [esi + 0x10], ecx
mov dword [esi + 0x14], edi
call fcn.100291b0
add esi, 0x4020
cmp esi, dword [ebp - 0x3c]
jne 0x10029660
mov edi, dword [ebp - 0xd4]
mov byte [ebp - 4], 5
test ebx, ebx
je 0x10029707
mov ecx, dword [ebp - 0x38]
mov eax, 0x7fc01ff1
sub ecx, ebx
imul ecx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x4020
mov eax, ebx
cmp ecx, 0x1000
jb 0x100296e8
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002a5e3
push ecx
push ebx
call fcn.100f154a
add esp, 8
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
mov eax, dword [ebp - 0x14]
test eax, 0x4000
je 0x10029802
xorps xmm0, xmm0
mov dword [ebp - 0x44], 0
movq qword [ebp - 0x4c], xmm0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 7
mov ecx, dword [edi + 4]
push eax
push 0x4000
call fcn.1001c1c0
mov ebx, dword [ebp - 0x4c]
cmp ebx, dword [ebp - 0x48]
je 0x1002979e
mov esi, ebx
push 0
push 0x3c
push dword [esi + 0x14]
push dword [esi + 0x10]
call fcn.100f2be0
mov ecx, eax
mov edi, edx
shld edi, ecx, 4
push esi
shl ecx, 4
sub ecx, eax
lea eax, [ebp - 0x1c]
push eax
sbb edi, edx
shld edi, ecx, 2
shl ecx, 2
mov dword [esi + 0x10], ecx
mov dword [esi + 0x14], edi
call fcn.100291b0
add esi, 0x4020
cmp esi, dword [ebp - 0x48]
jne 0x10029758
mov edi, dword [ebp - 0xd4]
mov byte [ebp - 4], 5
test ebx, ebx
je 0x100297ff
mov ecx, dword [ebp - 0x44]
mov eax, 0x7fc01ff1
sub ecx, ebx
imul ecx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x4020
mov eax, ebx
cmp ecx, 0x1000
jb 0x100297e0
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002a5e3
push ecx
push ebx
call fcn.100f154a
add esp, 8
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
mov eax, dword [ebp - 0x14]
test eax, 0x200
je 0x100298fa
xorps xmm0, xmm0
mov dword [ebp - 0x50], 0
movq qword [ebp - 0x58], xmm0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 8
mov ecx, dword [edi + 4]
push eax
push 0x200
call fcn.1001c1c0
mov ebx, dword [ebp - 0x58]
cmp ebx, dword [ebp - 0x54]
je 0x10029896
mov esi, ebx
push 0
push 0x3c
push dword [esi + 0x14]
push dword [esi + 0x10]
call fcn.100f2be0
mov ecx, eax
mov edi, edx
shld edi, ecx, 4
push esi
shl ecx, 4
sub ecx, eax
lea eax, [ebp - 0x1c]
push eax
sbb edi, edx
shld edi, ecx, 2
shl ecx, 2
mov dword [esi + 0x10], ecx
mov dword [esi + 0x14], edi
call fcn.100291b0
add esi, 0x4020
cmp esi, dword [ebp - 0x54]
jne 0x10029850
mov edi, dword [ebp - 0xd4]
mov byte [ebp - 4], 5
test ebx, ebx
je 0x100298f7
mov ecx, dword [ebp - 0x50]
mov eax, 0x7fc01ff1
sub ecx, ebx
imul ecx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x4020
mov eax, ebx
cmp ecx, 0x1000
jb 0x100298d8
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002a5e3
push ecx
push ebx
call fcn.100f154a
add esp, 8
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov eax, dword [ebp - 0x14]
test eax, 0x100
je 0x100299f2
xorps xmm0, xmm0
mov dword [ebp - 0x5c], 0
movq qword [ebp - 0x64], xmm0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 9
mov ecx, dword [edi + 4]
push eax
push 0x100
call fcn.1001c1c0
mov ebx, dword [ebp - 0x64]
cmp ebx, dword [ebp - 0x60]
je 0x1002998e
mov esi, ebx
push 0
push 0x3c
push dword [esi + 0x14]
push dword [esi + 0x10]
call fcn.100f2be0
mov ecx, eax
mov edi, edx
shld edi, ecx, 4
push esi
shl ecx, 4
sub ecx, eax
lea eax, [ebp - 0x1c]
push eax
sbb edi, edx
shld edi, ecx, 2
shl ecx, 2
mov dword [esi + 0x10], ecx
mov dword [esi + 0x14], edi
call fcn.100291b0
add esi, 0x4020
cmp esi, dword [ebp - 0x60]
jne 0x10029948
mov edi, dword [ebp - 0xd4]
mov byte [ebp - 4], 5
test ebx, ebx
je 0x100299ef
mov ecx, dword [ebp - 0x5c]
mov eax, 0x7fc01ff1
sub ecx, ebx
imul ecx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x4020
mov eax, ebx
cmp ecx, 0x1000
jb 0x100299d0
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002a5e3
push ecx
push ebx
call fcn.100f154a
add esp, 8
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov eax, dword [ebp - 0x14]
test eax, 0x400
je 0x10029aea
xorps xmm0, xmm0
mov dword [ebp - 0x68], 0
movq qword [ebp - 0x70], xmm0
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0xa
mov ecx, dword [edi + 4]
push eax
push 0x400
call fcn.1001c1c0
mov ebx, dword [ebp - 0x70]
cmp ebx, dword [ebp - 0x6c]
je 0x10029a86
mov esi, ebx
push 0
push 0x3c
push dword [esi + 0x14]
push dword [esi + 0x10]
call fcn.100f2be0
mov ecx, eax
mov edi, edx
shld edi, ecx, 4
push esi
shl ecx, 4
sub ecx, eax
lea eax, [ebp - 0x1c]
push eax
sbb edi, edx
shld edi, ecx, 2
shl ecx, 2
mov dword [esi + 0x10], ecx
mov dword [esi + 0x14], edi
call fcn.100291b0
add esi, 0x4020
cmp esi, dword [ebp - 0x6c]
jne 0x10029a40
mov edi, dword [ebp - 0xd4]
mov byte [ebp - 4], 5
test ebx, ebx
je 0x10029ae7
mov ecx, dword [ebp - 0x68]
mov eax, 0x7fc01ff1
sub ecx, ebx
imul ecx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x4020
mov eax, ebx
cmp ecx, 0x1000
jb 0x10029ac8
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002a5e3
push ecx
push ebx
call fcn.100f154a
add esp, 8
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0
mov eax, dword [ebp - 0x14]
test eax, 0x8000000
je 0x10029bf6
xorps xmm0, xmm0
mov dword [ebp - 0x74], 0
movq qword [ebp - 0x7c], xmm0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0xb
mov ecx, dword [edi + 4]
push eax
push 0x8000000
call fcn.1001c1c0
mov ebx, dword [ebp - 0x7c]
cmp ebx, dword [ebp - 0x78]
je 0x10029b92
mov esi, ebx
nop dword [eax + eax]
push 0
push 0x3c
push dword [esi + 0x81c]
push dword [esi + 0x818]
call fcn.100f2be0
mov ecx, eax
mov edi, edx
shld edi, ecx, 4
push esi
shl ecx, 4
sub ecx, eax
lea eax, [ebp - 0x1c]
push eax
sbb edi, edx
shld edi, ecx, 2
shl ecx, 2
mov dword [esi + 0x818], ecx
mov dword [esi + 0x81c], edi
call fcn.100291b0
add esi, 0x4020
cmp esi, dword [ebp - 0x78]
jne 0x10029b40
mov edi, dword [ebp - 0xd4]
mov byte [ebp - 4], 5
test ebx, ebx
je 0x10029bf3
mov ecx, dword [ebp - 0x74]
mov eax, 0x7fc01ff1
sub ecx, ebx
imul ecx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x4020
mov eax, ebx
cmp ecx, 0x1000
jb 0x10029bd4
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002a5e3
push ecx
push ebx
call fcn.100f154a
add esp, 8
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
mov eax, dword [ebp - 0x14]
test al, 0x20
je 0x10029d03
xorps xmm0, xmm0
mov dword [ebp - 0x80], 0
movq qword [ebp - 0x88], xmm0
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0xc
mov ecx, dword [edi + 4]
push eax
push 0x20
call fcn.1001c1c0
mov ebx, dword [ebp - 0x88]
cmp ebx, dword [ebp - 0x84]
je 0x10029c99
mov esi, ebx
push 0
push 0x3c
push dword [esi + 0x14]
push dword [esi + 0x10]
call fcn.100f2be0
mov ecx, eax
mov edi, edx
shld edi, ecx, 4
push esi
shl ecx, 4
sub ecx, eax
lea eax, [ebp - 0x1c]
push eax
sbb edi, edx
shld edi, ecx, 2
shl ecx, 2
mov dword [esi + 0x10], ecx
mov dword [esi + 0x14], edi
call fcn.100291b0
add esi, 0x4020
cmp esi, dword [ebp - 0x84]
jne 0x10029c50
mov edi, dword [ebp - 0xd4]
mov byte [ebp - 4], 5
test ebx, ebx
je 0x10029d00
mov ecx, dword [ebp - 0x80]
mov eax, 0x7fc01ff1
sub ecx, ebx
imul ecx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x4020
mov eax, ebx
cmp ecx, 0x1000
jb 0x10029cdb
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002a5e3
push ecx
push ebx
call fcn.100f154a
add esp, 8
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0
mov eax, dword [ebp - 0x14]
test al, 0x40
je 0x10029e1c
xorps xmm0, xmm0
mov dword [ebp - 0x8c], 0
movq qword [ebp - 0x94], xmm0
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 0xd
mov ecx, dword [edi + 4]
push eax
push 0x40
call fcn.1001c1c0
mov ebx, dword [ebp - 0x94]
cmp ebx, dword [ebp - 0x90]
je 0x10029dac
mov esi, ebx
push 0
push 0x3c
push dword [esi + 0x14]
push dword [esi + 0x10]
call fcn.100f2be0
mov ecx, eax
mov edi, edx
shld edi, ecx, 4
push esi
shl ecx, 4
sub ecx, eax
lea eax, [ebp - 0x1c]
push eax
sbb edi, edx
shld edi, ecx, 2
shl ecx, 2
mov dword [esi + 0x10], ecx
mov dword [esi + 0x14], edi
call fcn.100291b0
add esi, 0x4020
cmp esi, dword [ebp - 0x90]
jne 0x10029d63
mov edi, dword [ebp - 0xd4]
mov byte [ebp - 4], 5
test ebx, ebx
je 0x10029e19
mov ecx, dword [ebp - 0x8c]
mov eax, 0x7fc01ff1
sub ecx, ebx
imul ecx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x4020
mov eax, ebx
cmp ecx, 0x1000
jb 0x10029df1
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002a5e3
push ecx
push ebx
call fcn.100f154a
add esp, 8
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0x14]
test eax, 0x10000000
je 0x10029f3b
xorps xmm0, xmm0
mov dword [ebp - 0x98], 0
movq qword [ebp - 0xa0], xmm0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0xe
mov ecx, dword [edi + 4]
push eax
push 0x10000000
call fcn.1001c1c0
mov ebx, dword [ebp - 0xa0]
cmp ebx, dword [ebp - 0x9c]
je 0x10029ecb
mov esi, ebx
push 0
push 0x3c
push dword [esi + 0x14]
push dword [esi + 0x10]
call fcn.100f2be0
mov ecx, eax
mov edi, edx
shld edi, ecx, 4
push esi
shl ecx, 4
sub ecx, eax
lea eax, [ebp - 0x1c]
push eax
sbb edi, edx
shld edi, ecx, 2
shl ecx, 2
mov dword [esi + 0x10], ecx
mov dword [esi + 0x14], edi
call fcn.100291b0
add esi, 0x4020
cmp esi, dword [ebp - 0x9c]
jne 0x10029e82
mov edi, dword [ebp - 0xd4]
mov byte [ebp - 4], 5
test ebx, ebx
je 0x10029f38
mov ecx, dword [ebp - 0x98]
mov eax, 0x7fc01ff1
sub ecx, ebx
imul ecx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x4020
mov eax, ebx
cmp ecx, 0x1000
jb 0x10029f10
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002a5e3
push ecx
push ebx
call fcn.100f154a
add esp, 8
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0
mov eax, dword [ebp - 0x14]
test eax, 0x20000000
je 0x1002a05a
xorps xmm0, xmm0
mov dword [ebp - 0xa4], 0
movq qword [ebp - 0xac], xmm0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0
lea eax, [ebp - 0xac]
mov byte [ebp - 4], 0xf
mov ecx, dword [edi + 4]
push eax
push 0x20000000
call fcn.1001c1c0
mov ebx, dword [ebp - 0xac]
cmp ebx, dword [ebp - 0xa8]
je 0x10029fea
mov esi, ebx
push 0
push 0x3c
push dword [esi + 0x14]
push dword [esi + 0x10]
call fcn.100f2be0
mov ecx, eax
mov edi, edx
shld edi, ecx, 4
push esi
shl ecx, 4
sub ecx, eax
lea eax, [ebp - 0x1c]
push eax
sbb edi, edx
shld edi, ecx, 2
shl ecx, 2
mov dword [esi + 0x10], ecx
mov dword [esi + 0x14], edi
call fcn.100291b0
add esi, 0x4020
cmp esi, dword [ebp - 0xa8]
jne 0x10029fa1
mov edi, dword [ebp - 0xd4]
mov byte [ebp - 4], 5
test ebx, ebx
je 0x1002a057
mov ecx, dword [ebp - 0xa4]
mov eax, 0x7fc01ff1
sub ecx, ebx
imul ecx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x4020
mov eax, ebx
cmp ecx, 0x1000
jb 0x1002a02f
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002a5e3
push ecx
push ebx
call fcn.100f154a
add esp, 8
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0x14]
test al, 8
je 0x1002a185
xorps xmm0, xmm0
mov dword [ebp - 0xb0], 0
movq qword [ebp - 0xb8], xmm0
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 0
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x10
mov ecx, dword [edi + 4]
push eax
push 8
call fcn.1001c1c0
mov ebx, dword [ebp - 0xb8]
cmp ebx, dword [ebp - 0xb4]
je 0x1002a115
mov esi, ebx
nop word [eax + eax]
push 0
push 0x3c
push dword [esi + 0x81c]
push dword [esi + 0x818]
call fcn.100f2be0
mov ecx, eax
mov edi, edx
shld edi, ecx, 4
push esi
shl ecx, 4
sub ecx, eax
lea eax, [ebp - 0x1c]
push eax
sbb edi, edx
shld edi, ecx, 2
shl ecx, 2
mov dword [esi + 0x818], ecx
mov dword [esi + 0x81c], edi
call fcn.100291b0
add esi, 0x4020
cmp esi, dword [ebp - 0xb4]
jne 0x1002a0c0
mov edi, dword [ebp - 0xd4]
mov byte [ebp - 4], 5
test ebx, ebx
je 0x1002a182
mov ecx, dword [ebp - 0xb0]
mov eax, 0x7fc01ff1
sub ecx, ebx
imul ecx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x4020
mov eax, ebx
cmp ecx, 0x1000
jb 0x1002a15a
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002a5e3
push ecx
push ebx
call fcn.100f154a
add esp, 8
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0x14]
test eax, 0x40000000
je 0x1002a2a9
xorps xmm0, xmm0
mov dword [ebp - 0xbc], 0
movq qword [ebp - 0xc4], xmm0
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0
lea eax, [ebp - 0xc4]
mov byte [ebp - 4], 0x11
mov ecx, dword [edi + 4]
push eax
push 0x40000000
call fcn.1001c1c0
mov ebx, dword [ebp - 0xc4]
cmp ebx, dword [ebp - 0xc0]
je 0x1002a239
mov esi, ebx
nop dword [eax + eax]
push 0
push 0x3c
push dword [esi + 0x14]
push dword [esi + 0x10]
call fcn.100f2be0
mov ecx, eax
mov edi, edx
shld edi, ecx, 4
push esi
shl ecx, 4
sub ecx, eax
lea eax, [ebp - 0x1c]
push eax
sbb edi, edx
shld edi, ecx, 2
shl ecx, 2
mov dword [esi + 0x10], ecx
mov dword [esi + 0x14], edi
call fcn.100291b0
add esi, 0x4020
cmp esi, dword [ebp - 0xc0]
jne 0x1002a1f0
mov edi, dword [ebp - 0xd4]
mov byte [ebp - 4], 5
test ebx, ebx
je 0x1002a2a6
mov ecx, dword [ebp - 0xbc]
mov eax, 0x7fc01ff1
sub ecx, ebx
imul ecx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x4020
mov eax, ebx
cmp ecx, 0x1000
jb 0x1002a27e
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002a5e3
push ecx
push ebx
call fcn.100f154a
add esp, 8
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0x14]
test eax, eax
jns 0x1002a3c0
xorps xmm0, xmm0
mov dword [ebp - 0xc8], 0
movq qword [ebp - 0xd0], xmm0
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0x12
mov ecx, dword [edi + 4]
push eax
push 0x80000000
call fcn.1001c1c0
mov ebx, dword [ebp - 0xd0]
cmp ebx, dword [ebp - 0xcc]
je 0x1002a353
mov esi, ebx
nop dword [eax]
push 0
push 0x3c
push dword [esi + 0x14]
push dword [esi + 0x10]
call fcn.100f2be0
mov ecx, eax
mov edi, edx
shld edi, ecx, 4
push esi
shl ecx, 4
sub ecx, eax
lea eax, [ebp - 0x1c]
push eax
sbb edi, edx
shld edi, ecx, 2
shl ecx, 2
mov dword [esi + 0x10], ecx
mov dword [esi + 0x14], edi
call fcn.100291b0
add esi, 0x4020
cmp esi, dword [ebp - 0xcc]
jne 0x1002a310
mov byte [ebp - 4], 5
test ebx, ebx
je 0x1002a3c0
mov ecx, dword [ebp - 0xc8]
mov eax, 0x7fc01ff1
sub ecx, ebx
imul ecx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x4020
mov eax, ebx
cmp ecx, 0x1000
jb 0x1002a398
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002a5e3
push ecx
push ebx
call fcn.100f154a
add esp, 8
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0
mov ebx, dword [ebp - 0xd8]
mov ecx, dword [ebx]
mov eax, dword [ecx]
call dword [eax]
cmp dword [ebp - 0x18], 0
je 0x1002a568
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
movq qword [ebp - 0x28], xmm0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov byte [ebp - 4], 0x13
mov ebx, dword [ebp - 0x1c]
mov edi, dword [ebx]
cmp edi, ebx
je 0x1002a4da
mov edx, dword [ebp - 0x24]
nop
mov eax, dword [edi + 0x14]
mov esi, dword [eax]
cmp esi, eax
je 0x1002a496
nop dword [eax]
lea eax, [esi + 0x28]
cmp dword [ebp - 0x20], edx
je 0x1002a445
push 0x4028
push eax
push edx
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [ebp - 0x24]
add esp, 0xc
add edx, 0x4028
mov dword [ebp - 0x24], edx
jmp 0x1002a452
push eax
push edx
lea ecx, [ebp - 0x28]
call fcn.1002b350
mov edx, dword [ebp - 0x24]
mov eax, dword [esi + 8]
cmp byte [eax + 0xd], 0
je 0x1002a478
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x1002a474
cmp esi, dword [eax + 8]
jne 0x1002a474
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x1002a464
mov esi, eax
jmp 0x1002a48e
mov esi, eax
mov ecx, dword [esi]
cmp byte [ecx + 0xd], 0
jne 0x1002a48e
mov eax, dword [ecx]
mov esi, ecx
mov ecx, eax
cmp byte [eax + 0xd], 0
je 0x1002a482
cmp esi, dword [edi + 0x14]
jne 0x1002a420
mov ebx, dword [ebp - 0x1c]
mov eax, dword [edi + 8]
cmp byte [eax + 0xd], 0
je 0x1002a4bc
mov eax, dword [edi + 4]
cmp byte [eax + 0xd], 0
jne 0x1002a4b8
cmp edi, dword [eax + 8]
jne 0x1002a4b8
mov edi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x1002a4a8
mov edi, eax
jmp 0x1002a4d2
mov edi, eax
mov ecx, dword [edi]
cmp byte [ecx + 0xd], 0
jne 0x1002a4d2
mov eax, dword [ecx]
mov edi, ecx
mov ecx, eax
cmp byte [eax + 0xd], 0
je 0x1002a4c6
cmp edi, ebx
jne 0x1002a410
lea eax, [ebp - 0x28]
push eax
call fcn.10028e60
mov esi, dword [ebp - 0x24]
mov ebx, dword [ebp - 0xd8]
cmp esi, dword [ebp - 0x28]
je 0x1002a504
mov ecx, dword [ebx]
add esi, 0xffffbfd8
push esi
mov eax, dword [ecx]
call dword [eax + 0xc]
cmp esi, dword [ebp - 0x28]
jne 0x1002a4f1
mov byte [ebp - 4], 5
mov esi, dword [ebp - 0x28]
test esi, esi
je 0x1002a568
mov ecx, dword [ebp - 0x20]
mov eax, 0x7fb031e1
sub ecx, esi
imul ecx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x4028
mov eax, esi
cmp ecx, 0x1000
jb 0x1002a549
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002a5e3
push ecx
push esi
call fcn.100f154a
add esp, 8
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov ecx, dword [ebx]
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
push eax
push dword [eax]
lea eax, [ebp - 0xdc]
push eax
call fcn.1002a9c0
push 0x1c
push dword [ebp - 0x1c]
call fcn.100f154a
mov edi, dword [ebp - 0xd4]
add esp, 8
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x30]
add ebx, 8
mov dword [ebp - 0xd8], ebx
cmp ebx, edx
jne 0x100295e0
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x34]
test edx, edx
je 0x1002a608
mov ecx, dword [ebp - 0x2c]
mov eax, edx
sub ecx, edx
and ecx, 0xfffffff8
cmp ecx, 0x1000
jb 0x1002a5e9
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1002a5e9
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100f154a
add esp, 8
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100f11c3
mov esp, ebp
pop ebp
ret