Function at 0x1002b910
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1009fe90
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x100cd4bc]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
or esi, 0xffffffff
mov eax, dword [edi + 4]
mov ebx, dword [edi]
cmp ebx, eax
je 0x1002b975
mov edi, eax
nop dword [eax]
mov edx, dword [ebx]
mov eax, esi
sub edx, 0x10
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002b969
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add ebx, 8
cmp ebx, edi
jne 0x1002b950
mov edi, dword [ebp + 8]
mov ebx, dword [edi]
mov dword [edi + 4], ebx
mov eax, dword [edi + 8]
sub eax, dword [edi]
sar eax, 3
cmp eax, 0x100
jae 0x1002b993
push 0x100
mov ecx, edi
call fcn.1002b500
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
mov dword [ecx + 4], eax
mov eax, dword [ecx + 8]
sub eax, dword [ecx]
sar eax, 3
cmp eax, 0x100
jae 0x1002b9b4
push 0x100
call fcn.1002b470
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001de30
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x1001b3b0
add esp, 4
mov dword [ebp - 0x18], eax
mov ebx, dword [edi + 4]
mov byte [ebp - 4], 1
cmp dword [edi + 8], ebx
je 0x1002ba0c
add eax, 0xfffffff0
push eax
call fcn.1000c230
add eax, 0x10
add esp, 4
mov dword [ebx], eax
mov dword [ebx + 4], 0x1001b3b0
add dword [edi + 4], 8
jmp 0x1002ba18
lea eax, [ebp - 0x18]
mov ecx, edi
push eax
push ebx
call fcn.1001c7d0
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002ba36
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002ba57
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001e520
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 2
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x1001b540
add esp, 4
mov dword [ebp - 0x18], eax
mov ebx, dword [edi + 4]
mov byte [ebp - 4], 3
cmp dword [edi + 8], ebx
je 0x1002baaf
add eax, 0xfffffff0
push eax
call fcn.1000c230
add eax, 0x10
add esp, 4
mov dword [ebx], eax
mov dword [ebx + 4], 0x1001b540
add dword [edi + 4], 8
jmp 0x1002babb
lea eax, [ebp - 0x18]
mov ecx, edi
push eax
push ebx
call fcn.1001c7d0
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 2
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002bad9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002bafa
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.10020cd0
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 4
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x1001b6c0
add esp, 4
mov dword [ebp - 0x18], eax
mov ebx, dword [edi + 4]
mov byte [ebp - 4], 5
cmp dword [edi + 8], ebx
je 0x1002bb52
add eax, 0xfffffff0
push eax
call fcn.1000c230
add eax, 0x10
add esp, 4
mov dword [ebx], eax
mov dword [ebx + 4], 0x1001b6c0
add dword [edi + 4], 8
jmp 0x1002bb5e
lea eax, [ebp - 0x18]
mov ecx, edi
push eax
push ebx
call fcn.1001c7d0
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 4
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002bb7c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002bb9d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001e740
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 6
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x1002b440
add esp, 4
mov dword [ebp - 0x18], eax
mov ebx, dword [edi + 4]
mov byte [ebp - 4], 7
cmp dword [edi + 8], ebx
je 0x1002bbf5
add eax, 0xfffffff0
push eax
call fcn.1000c230
add eax, 0x10
add esp, 4
mov dword [ebx], eax
mov dword [ebx + 4], 0x1002b440
add dword [edi + 4], 8
jmp 0x1002bc01
lea eax, [ebp - 0x18]
mov ecx, edi
push eax
push ebx
call fcn.1001c7d0
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 6
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002bc1f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002bc40
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001fbd0
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 8
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x100272d0
add esp, 4
mov dword [ebp - 0x18], eax
mov ebx, dword [edi + 4]
mov byte [ebp - 4], 9
cmp dword [edi + 8], ebx
je 0x1002bc98
add eax, 0xfffffff0
push eax
call fcn.1000c230
add eax, 0x10
add esp, 4
mov dword [ebx], eax
mov dword [ebx + 4], 0x100272d0
add dword [edi + 4], 8
jmp 0x1002bca4
lea eax, [ebp - 0x18]
mov ecx, edi
push eax
push ebx
call fcn.1001c7d0
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 8
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002bcc2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002bce3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.10020a00
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0xa
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10025850
add esp, 4
mov dword [ebp - 0x18], eax
mov ebx, dword [edi + 4]
mov byte [ebp - 4], 0xb
cmp dword [edi + 8], ebx
je 0x1002bd3b
add eax, 0xfffffff0
push eax
call fcn.1000c230
add eax, 0x10
add esp, 4
mov dword [ebx], eax
mov dword [ebx + 4], 0x10025850
add dword [edi + 4], 8
jmp 0x1002bd47
lea eax, [ebp - 0x18]
mov ecx, edi
push eax
push ebx
call fcn.1001c7d0
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0xa
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002bd65
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002bd86
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001da60
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0xc
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10024950
add esp, 4
mov dword [ebp - 0x18], eax
mov ebx, dword [edi + 4]
mov byte [ebp - 4], 0xd
cmp dword [edi + 8], ebx
je 0x1002bdde
add eax, 0xfffffff0
push eax
call fcn.1000c230
add eax, 0x10
add esp, 4
mov dword [ebx], eax
mov dword [ebx + 4], 0x10024950
add dword [edi + 4], 8
jmp 0x1002bdea
lea eax, [ebp - 0x18]
mov ecx, edi
push eax
push ebx
call fcn.1001c7d0
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0xc
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002be08
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002be29
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001e630
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0xe
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10027100
add esp, 4
mov dword [ebp - 0x18], eax
mov ebx, dword [edi + 4]
mov byte [ebp - 4], 0xf
cmp dword [edi + 8], ebx
je 0x1002be81
add eax, 0xfffffff0
push eax
call fcn.1000c230
add eax, 0x10
add esp, 4
mov dword [ebx], eax
mov dword [ebx + 4], 0x10027100
add dword [edi + 4], 8
jmp 0x1002be8d
lea eax, [ebp - 0x18]
mov ecx, edi
push eax
push ebx
call fcn.1001c7d0
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0xe
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002beab
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002becc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.10020620
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x10
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10026110
add esp, 4
mov dword [ebp - 0x18], eax
mov ebx, dword [edi + 4]
mov byte [ebp - 4], 0x11
cmp dword [edi + 8], ebx
je 0x1002bf24
add eax, 0xfffffff0
push eax
call fcn.1000c230
add eax, 0x10
add esp, 4
mov dword [ebx], eax
mov dword [ebx + 4], 0x10026110
add dword [edi + 4], 8
jmp 0x1002bf30
lea eax, [ebp - 0x18]
mov ecx, edi
push eax
push ebx
call fcn.1001c7d0
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x10
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002bf4e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002bf6f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001dae0
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x12
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10025f00
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x13
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x12
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002bfca
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002bfeb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001d720
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x14
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x1002a580
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x15
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x14
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c046
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c067
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001e9f0
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x16
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10025480
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x17
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x16
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c0c2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c0e3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001eec0
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x18
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10024e50
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x19
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x18
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c13e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c15f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001f4d0
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x1a
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10025800
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x1b
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x1a
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c1ba
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c1db
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001e4a0
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x1c
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10024840
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x1d
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x1c
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c236
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c257
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001d7a0
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x1e
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x100250c0
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x1f
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x1e
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c2b2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c2d3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001fdf0
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x20
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10021f00
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x21
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x20
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c32e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c34f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001fe80
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x22
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10024840
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x23
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x22
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c3aa
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c3cb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001f210
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x24
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x100250c0
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x25
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x24
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c426
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c447
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.100208e0
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x26
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10021f00
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x27
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x26
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c4a2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c4c3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001e0e0
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x28
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10025a00
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x29
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x28
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c51e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c53f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001d830
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x2a
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x100275e0
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x2b
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x2a
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c59a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c5bb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001d9d0
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x2c
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x100276a0
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x2d
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x2c
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c616
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c637
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001e280
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x2e
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10027030
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x2f
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x2e
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c692
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c6b3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001e390
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x30
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10027070
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x31
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x30
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c70e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c72f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001e8d0
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x32
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10027540
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x33
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x32
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c78a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c7ab
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001d590
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x34
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x100275c0
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x35
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x34
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c806
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c827
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.10020120
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x36
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10026ef0
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x37
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x36
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c882
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c8a3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001e200
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x38
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10021f00
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x39
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x38
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c8fe
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c91f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001e6c0
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x3a
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10024840
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x3b
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x3a
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c97a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c99b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001deb0
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x3c
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x100250c0
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x3d
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x3c
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002c9f6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002ca17
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.10020c40
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x3e
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10021f00
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x3f
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x3e
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002ca72
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002ca93
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001dda0
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x40
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x100217d0
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x41
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x40
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002caee
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002cb0f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001ff00
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x42
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10028ee0
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x43
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x42
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002cb6a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002cb8b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001f550
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x44
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10028d50
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x45
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x44
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002cbe6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002cc07
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001f910
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x46
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x1002a0a0
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x47
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x46
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002cc62
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002cc83
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001eb10
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x48
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x1002aa80
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x49
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x48
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002ccde
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002ccff
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001dc00
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x4a
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x1002a850
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x4b
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x4a
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002cd5a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002cd7b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.10020730
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x4c
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10028380
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x4d
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x4c
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002cdd6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002cdf7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001fd70
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x4e
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x100228f0
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x4f
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x4e
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002ce52
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002ce73
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001ec20
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x50
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x100229d0
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x51
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x50
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002cece
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002ceef
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001f320
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x52
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10022ae0
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x53
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x52
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002cf4a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002cf6b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001e170
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x54
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10026a60
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x55
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x54
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002cfc6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002cfe7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001fac0
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x56
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10028970
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x57
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x56
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d042
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d063
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.10020500
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x58
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10021f30
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x59
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x58
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d0be
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d0df
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001fce0
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x5a
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x100245a0
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x5b
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x5a
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d13a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d15b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001eca0
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x5c
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10028070
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x5d
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x5c
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d1b6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d1d7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001db70
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x5e
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10025e10
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x5f
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x5e
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d232
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d253
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001dc90
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x60
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10026fd0
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x61
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x60
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d2ae
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d2cf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001d6a0
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x62
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10027820
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x63
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x62
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d32a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d34b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001f5d0
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x64
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10027a60
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x65
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x64
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d3a6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d3c7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001f9a0
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x66
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10027cc0
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x67
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x66
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d422
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d443
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001f440
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x68
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10029570
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x69
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x68
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d49e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d4bf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.10020350
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x6a
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10026530
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x6b
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x6a
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d51a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d53b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001e300
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x6c
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10024080
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x6d
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x6c
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d596
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d5b7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.10020a90
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x6e
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10027f20
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x6f
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x6e
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d612
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d633
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001fb40
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x70
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10030730
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x71
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x70
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d68e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d6af
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.100206b0
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x72
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x10030d50
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x73
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x72
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d70a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, esi
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d72b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xb]
call fcn.1001ea80
mov eax, dword [eax]
sub eax, 0x10
mov dword [ebp - 4], 0x74
push eax
call fcn.1000c230
add eax, 0x10
mov dword [ebp - 0x14], 0x100303c0
add esp, 4
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x75
push eax
mov ecx, edi
call fcn.1001ca70
mov edx, dword [ebp - 0x18]
mov eax, esi
mov byte [ebp - 4], 0x74
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1002d786