Function at 0x100af481
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d9e9e
mov eax, dword fs:[0]
push eax
sub esp, 0x1bc
mov eax, dword [0x100f2040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, dword [ebp + 8]
xorps xmm0, xmm0
mov eax, 0xf
mov dword [ebp - 0x1a0], ecx
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], eax
mov byte [ebp - 0x28], 0
mov dword [ebp - 4], 0
test ecx, ecx
je 0x100af940
cmp dword [0x101f9ee4], 0
je 0x100af940
mov eax, dword [0x1020af44]
mov edi, dword [ecx + 8]
test al, 1
jne 0x100aed76
or eax, 1
mov dword [0x1020af44], eax
mov edx, 0x990704d7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18c]
call fcn.10053120
push 0xda7d68cb
mov edx, eax
mov ecx, 0x1020af48
call fcn.10053510
push 0x100db510
call fcn.100cf26c
add esp, 8
mov byte [ebp - 4], 0
mov eax, dword [0x1020af48]
call eax
mov esi, eax
mov dword [ebp - 0x1a4], esi
test edi, edi
je 0x100aee0c
test esi, esi
je 0x100aee0c
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x19c], ecx
test ecx, ecx
je 0x100aee0c
nop
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x100aede9
mov edi, 0x811c9dc5
xor ecx, ecx
nop
inc ecx
cmp byte [esi + ecx], 0
jne 0x100aedc0
xor edx, edx
test ecx, ecx
je 0x100aede9
nop dword [eax]
movsx eax, byte [esi + edx]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x100aedd0
cmp edi, 0xd791104e
je 0x100aee04
mov ecx, dword [ebp - 0x19c]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x19c], ecx
test ecx, ecx
je 0x100aee0c
mov esi, dword [ebp - 0x1a4]
jmp 0x100aeda0
mov ecx, dword [ebp - 0x19c]
jmp 0x100aee0e
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
movss xmm1, dword [0x100e5c90]
dec eax
cmp eax, 6
ja case.0x100aee20.2
jmp dword [eax*4 + 0x100af994]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
mov edx, eax
jmp 0x100aee9b
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
add esp, 4
mov edx, eax
jmp 0x100aee9b
movss xmm4, dword [ecx + 0xc]
movss xmm3, dword [0x100e5c98]
movaps xmm0, xmm4
andps xmm3, xmm4
movaps xmm2, xmm4
xorps xmm0, xmm3
cmpltss xmm0, xmm1
andps xmm1, xmm0
orps xmm1, xmm3
addss xmm2, xmm1
subss xmm2, xmm1
movss xmm1, dword [0x100e5ab4]
movaps xmm0, xmm2
subss xmm0, xmm4
cmpnless xmm0, xmm3
andps xmm0, xmm1
subss xmm2, xmm0
cvttss2si edx, xmm2
jmp 0x100aee9b
xor edx, edx
jmp 0x100aee9b
mov edx, dword [ecx + 0xc]
mov ecx, dword [0x10204634]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
mov edi, dword [ebp - 0x1a0]
mov ecx, dword [0x1020af44]
mov dword [ebp - 0x1ac], eax
mov edi, dword [edi + 8]
test cl, 1
jne 0x100aef02
or ecx, 1
mov dword [0x1020af44], ecx
mov edx, 0x990704d7
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18c]
call fcn.10053120
push 0xda7d68cb
mov edx, eax
mov ecx, 0x1020af48
call fcn.10053510
push 0x100db510
call fcn.100cf26c
add esp, 8
mov byte [ebp - 4], 0
mov eax, dword [0x1020af48]
call eax
mov esi, eax
mov dword [ebp - 0x1a4], esi
test edi, edi
je 0x100aef8d
test esi, esi
je 0x100aef8d
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x19c], ecx
test ecx, ecx
je 0x100aef8d
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x100aef6a
mov edi, 0x811c9dc5
xor ecx, ecx
inc ecx
cmp byte [ecx + esi], 0
jne 0x100aef44
xor edx, edx
test ecx, ecx
je 0x100aef6a
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x100aef51
cmp edi, 0x11ab48ff
je 0x100aef85
mov ecx, dword [ebp - 0x19c]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x19c], ecx
test ecx, ecx
je 0x100aef8d
mov esi, dword [ebp - 0x1a4]
jmp 0x100aef26
mov ecx, dword [ebp - 0x19c]
jmp 0x100aef8f
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x100aef9d.2
jmp dword [eax*4 + 0x100af9b0]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
mov edx, eax
jmp 0x100af020
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
add esp, 4
mov edx, eax
jmp 0x100af020
movss xmm4, dword [ecx + 0xc]
movss xmm3, dword [0x100e5c98]
movaps xmm0, xmm4
movss xmm1, dword [0x100e5c90]
andps xmm3, xmm4
xorps xmm0, xmm3
movaps xmm2, xmm4
cmpltss xmm0, xmm1
andps xmm1, xmm0
orps xmm1, xmm3
addss xmm2, xmm1
subss xmm2, xmm1
movss xmm1, dword [0x100e5ab4]
movaps xmm0, xmm2
subss xmm0, xmm4
cmpnless xmm0, xmm3
andps xmm0, xmm1
subss xmm2, xmm0
cvttss2si edx, xmm2
jmp 0x100af020
xor edx, edx
jmp 0x100af020
mov edx, dword [ecx + 0xc]
mov ecx, dword [0x10204634]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
mov edi, dword [ebp - 0x1ac]
mov esi, eax
mov dword [ebp - 0x1a8], esi
lea ecx, [edi - 1]
cmp ecx, 0x3f
ja 0x100af93d
lea ecx, [esi - 1]
cmp ecx, 0x3f
ja 0x100af93d
mov ecx, dword [0x10204634]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
cmp edi, eax
jne 0x100af93d
mov ecx, dword [0x10204634]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
cmp esi, eax
je 0x100af93d
mov eax, dword [ebp - 0x1a0]
mov edi, dword [eax + 8]
mov eax, dword [0x1020af44]
test al, 1
jne 0x100af0ce
or eax, 1
mov dword [0x1020af44], eax
mov edx, 0x990704d7
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18c]
call fcn.10053120
push 0xda7d68cb
mov edx, eax
mov ecx, 0x1020af48
call fcn.10053510
push 0x100db510
call fcn.100cf26c
add esp, 8
mov byte [ebp - 4], 0
mov eax, dword [0x1020af48]
call eax
mov esi, eax
mov dword [ebp - 0x1ac], esi
test edi, edi
je 0x100af15d
test esi, esi
je 0x100af15d
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x19c], ecx
test ecx, ecx
je 0x100af15d
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x100af13a
mov edi, 0x811c9dc5
xor ecx, ecx
inc ecx
cmp byte [esi + ecx], 0
jne 0x100af114
xor edx, edx
test ecx, ecx
je 0x100af13a
movsx eax, byte [esi + edx]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x100af121
cmp edi, 0x2a7e565d
je 0x100af155
mov ecx, dword [ebp - 0x19c]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x19c], ecx
test ecx, ecx
je 0x100af15d
mov esi, dword [ebp - 0x1ac]
jmp 0x100af0f6
mov ecx, dword [ebp - 0x19c]
jmp 0x100af15f
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x100af16d.2
jmp dword [eax*4 + 0x100af9cc]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
mov esi, eax
jmp 0x100af201
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
add esp, 4
mov dword [ebp - 0x1a4], eax
mov esi, eax
jmp 0x100af207
movss xmm4, dword [ecx + 0xc]
movss xmm3, dword [0x100e5c98]
movaps xmm0, xmm4
movss xmm1, dword [0x100e5c90]
andps xmm3, xmm4
xorps xmm0, xmm3
movaps xmm2, xmm4
cmpltss xmm0, xmm1
andps xmm1, xmm0
orps xmm1, xmm3
addss xmm2, xmm1
subss xmm2, xmm1
movss xmm1, dword [0x100e5ab4]
movaps xmm0, xmm2
subss xmm0, xmm4
cmpnless xmm0, xmm3
andps xmm0, xmm1
subss xmm2, xmm0
cvttss2si esi, xmm2
jmp 0x100af201
mov dword [ebp - 0x1a4], 0
jmp 0x100af210
mov esi, dword [ecx + 0xc]
mov dword [ebp - 0x1a4], esi
cmp esi, 0xa
je 0x100af93d
mov ecx, dword [0x10204638]
mov edi, dword [ebp - 0x1a8]
push edi
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov dword [ebp - 0x1ac], eax
test eax, eax
je 0x100af93d
mov esi, dword [0x10204634]
lea eax, [ebp - 0x180]
push eax
push edi
mov ecx, dword [esi]
mov edx, dword [ecx + 0x20]
mov ecx, esi
call edx
test al, al
je 0x100af93d
xorps xmm0, xmm0
mov dword [ebp - 0x188], 0
lea ecx, [ebp - 0x170]
mov dword [ebp - 0x184], 0
movups xmmword [ebp - 0x198], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100af278
sub ecx, edx
lea eax, [ebp - 0x170]
push ecx
push eax
lea ecx, [ebp - 0x198]
call fcn.10035960
mov byte [ebp - 4], 4
lea eax, [ebp - 0x198]
mov ecx, 0x18
mov dword [ebp - 0x1b8], 0
cmp dword [ebp - 0x188], ecx
xorps xmm0, xmm0
movups xmmword [ebp - 0x1c8], xmm0
cmovb ecx, dword [ebp - 0x188]
cmp dword [ebp - 0x184], 0xf
push ecx
cmova eax, dword [ebp - 0x198]
lea ecx, [ebp - 0x1c8]
push eax
mov dword [ebp - 0x1b4], 0
call fcn.10035960
lea eax, [ebp - 0x1c8]
push eax
lea ecx, [ebp - 0x28]
call fcn.1004c290
mov ecx, dword [ebp - 0x1b4]
cmp ecx, 0xf
jbe 0x100af332
mov edx, dword [ebp - 0x1c8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100af328
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100af965
push ecx
push edx
call fcn.100cf286
add esp, 8
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x184]
cmp ecx, 0xf
jbe 0x100af370
mov edx, dword [ebp - 0x198]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100af366
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100af965
push ecx
push edx
call fcn.100cf286
add esp, 8
mov eax, dword [ebp - 0x1a0]
mov edi, dword [eax + 8]
mov eax, dword [0x1020af44]
test al, 1
jne 0x100af3c0
or eax, 1
mov dword [0x1020af44], eax
mov edx, 0x990704d7
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x18c]
call fcn.10053120
push 0xda7d68cb
mov edx, eax
mov ecx, 0x1020af48
call fcn.10053510
push 0x100db510
call fcn.100cf26c
add esp, 8
mov byte [ebp - 4], 0
mov eax, dword [0x1020af48]
call eax
mov esi, eax
mov dword [ebp - 0x1a8], esi
test edi, edi
je 0x100af45c
test esi, esi
je 0x100af45c
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x19c], ecx
test ecx, ecx
je 0x100af45c
nop dword [eax]
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x100af439
mov edi, 0x811c9dc5
xor ecx, ecx
nop
inc ecx
cmp byte [esi + ecx], 0
jne 0x100af410
xor edx, edx
test ecx, ecx
je 0x100af439
nop dword [eax]
movsx eax, byte [esi + edx]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x100af420
cmp edi, 0xa0d9523e
je 0x100af454
mov ecx, dword [ebp - 0x19c]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x19c], ecx
test ecx, ecx
je 0x100af45c
mov esi, dword [ebp - 0x1a8]
jmp 0x100af3f0
mov ecx, dword [ebp - 0x19c]
jmp 0x100af45e
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x100af46c.2
jmp dword [eax*4 + 0x100af9e8]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
jmp 0x100af4eb
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
add esp, 4
jmp 0x100af4eb
movss xmm4, dword [ecx + 0xc]
movss xmm3, dword [0x100e5c98]
movaps xmm0, xmm4
movss xmm1, dword [0x100e5c90]
andps xmm3, xmm4
xorps xmm0, xmm3
movaps xmm2, xmm4
cmpltss xmm0, xmm1
andps xmm1, xmm0
orps xmm1, xmm3
addss xmm2, xmm1
subss xmm2, xmm1
movss xmm1, dword [0x100e5ab4]
movaps xmm0, xmm2
subss xmm0, xmm4
cmpnless xmm0, xmm3
andps xmm0, xmm1
subss xmm2, xmm0
cvttss2si eax, xmm2
jmp 0x100af4eb
xor eax, eax
jmp 0x100af4eb
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x1a0]
mov edi, dword [eax + 8]
mov eax, dword [0x1020af44]
test al, 1
jne 0x100af541
or eax, 1
mov dword [0x1020af44], eax
mov edx, 0x990704d7
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x18c]
call fcn.10053120
push 0xda7d68cb
mov edx, eax
mov ecx, 0x1020af48
call fcn.10053510
push 0x100db510
call fcn.100cf26c
add esp, 8
mov byte [ebp - 4], 0
mov eax, dword [0x1020af48]
call eax
mov esi, eax
mov dword [ebp - 0x1a8], esi
test edi, edi
je 0x100af5dc
test esi, esi
je 0x100af5dc
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x1a0], ecx
test ecx, ecx
je 0x100af5dc
nop dword [eax]
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x100af5b9
mov edi, 0x811c9dc5
xor ecx, ecx
nop
inc ecx
cmp byte [ecx + esi], 0
jne 0x100af590
xor edx, edx
test ecx, ecx
je 0x100af5b9
nop dword [eax]
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x100af5a0
cmp edi, 0x6b98ed8f
je 0x100af5d4
mov ecx, dword [ebp - 0x1a0]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x1a0], ecx
test ecx, ecx
je 0x100af5dc
mov esi, dword [ebp - 0x1a8]
jmp 0x100af570
mov ecx, dword [ebp - 0x1a0]
jmp 0x100af5de
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x100af5ec.2
jmp dword [eax*4 + 0x100afa04]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
jmp 0x100af679
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
add esp, 4
jmp 0x100af679
movss xmm2, dword [ecx + 0xc]
movss xmm4, dword [0x100e5c98]
movaps xmm0, xmm2
movss xmm3, dword [0x100e5c90]
andps xmm4, xmm2
xorps xmm0, xmm4
movaps xmm1, xmm2
cmpltss xmm0, xmm3
andps xmm3, xmm0
orps xmm3, xmm4
addss xmm1, xmm3
subss xmm1, xmm3
movaps xmm0, xmm1
subss xmm0, xmm2
movss xmm2, dword [0x100e5ab4]
cmpnless xmm0, xmm4
andps xmm0, xmm2
subss xmm1, xmm0
cvttss2si esi, xmm1
mov dword [ebp - 0x1a0], esi
jmp 0x100af67f
mov dword [ebp - 0x1a0], 0
jmp 0x100af67f
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x1a0], eax
push 2
push dword [0x101ea960]
push dword [0x101ea95c]
call fcn.100cecd0
cmp eax, dword [0x101ea960]
je 0x100af6c0
mov ecx, dword [0x10204698]
push ecx
mov dword [esp], 0
push 0
mov eax, dword [ecx]
push 0x64
push ecx
mov dword [esp], 0x3f800000
mov eax, dword [eax + 0x30]
push str.buttons_arena_switch_press_02.wav
call eax
cmp dword [ebp - 0x1a4], 0
je 0x100af93d
mov edi, dword [0x10205458]
mov esi, dword [0x10205454]
cmp esi, edi
je 0x100af707
nop dword [eax]
mov edx, dword [0x10204930]
mov eax, dword [0x101f9ee4]
add edx, 0xffffffc1
mov ecx, dword [esi + 0x18]
xor edx, 0xd9785bda
cmp ecx, dword [edx + eax]
jne 0x100af700
mov byte [esi + 0x1d], 1
add esi, 0x20
cmp esi, edi
jne 0x100af6e0
mov eax, dword [0x10205470]
test eax, eax
je 0x100af93d
mov edx, dword [0x1020546c]
lea edi, [eax + edx]
cmp edx, edi
je 0x100af93d
mov ecx, dword [0x10204930]
mov eax, dword [0x101f9ee4]
add ecx, 0xffffffc1
xor ecx, 0xd9785bda
mov eax, dword [ecx + eax]
mov dword [ebp - 0x1a8], eax
mov eax, dword [0x10205468]
dec eax
mov dword [ebp - 0x1b0], eax
nop
mov ecx, dword [0x10205464]
and eax, edx
mov esi, dword [ecx + eax*4]
mov ecx, dword [esi + 8]
cmp ecx, dword [ebp - 0x1a8]
jne 0x100af777
mov eax, dword [esi + 4]
mov ecx, dword [ebp - 0x1ac]
cmp dword [eax + 4], ecx
mov ecx, dword [esi + 8]
je 0x100af788
inc edx
cmp edx, edi
je 0x100af93d
mov eax, dword [ebp - 0x1b0]
jmp 0x100af750
mov byte [esi + 1], 1
mov eax, dword [0x1020463c]
mov edx, dword [0x1020ad9c]
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [eax + 0x20]
mov eax, dword [0x1020ada4]
inc eax
movss dword [ebp - 0x1a8], xmm0
cmp edx, eax
ja 0x100af7c6
push ecx
mov ecx, 0x1020ad94
call fcn.10045f30
mov edx, dword [0x1020ad9c]
lea ecx, [edx - 1]
mov eax, edx
and ecx, dword [0x1020ada0]
lea edi, [edx - 1]
mov dword [0x1020ada0], ecx
cmovne eax, ecx
mov ecx, dword [0x1020ad98]
dec eax
and edi, eax
mov dword [ebp - 0x1b0], eax
cmp dword [ecx + edi*4], 0
jne 0x100af811
push 0x10
call fcn.100cee22
mov ecx, dword [0x1020ad98]
add esp, 4
mov dword [ecx + edi*4], eax
mov edx, dword [0x1020ad9c]
mov ecx, dword [0x1020ad98]
movq xmm0, qword [0x10205434]
lea eax, [edx - 1]
mov edx, dword [ebp - 0x1b0]
and eax, edx
mov dword [ebp - 0x18c], esi
mov ecx, dword [ecx + eax*4]
movq qword [ecx], xmm0
movss xmm0, dword [ebp - 0x1a8]
mov eax, dword [0x1020543c]
movss dword [ecx + 0xc], xmm0
movd xmm0, dword [ebp - 0x19c]
cvtdq2ps xmm0, xmm0
mov dword [ecx + 8], eax
inc dword [0x1020ada4]
cmp dword [ebp - 0x1a0], 0
mov ecx, dword [ebp - 0x1a4]
mov dword [0x1020ada0], edx
mov dword [ebp - 0x188], ecx
movss dword [ebp - 0x184], xmm0
jg 0x100af885
cmp ecx, 1
jne 0x100af885
inc dword [0x101f9ab8]
mov eax, dword [0x10205484]
mov ecx, dword [0x1020547c]
inc eax
cmp ecx, eax
ja 0x100af8a6
push ecx
mov ecx, 0x10205474
call fcn.100460e0
mov ecx, dword [0x1020547c]
mov edx, dword [0x10205478]
lea esi, [ecx - 1]
and esi, dword [0x10205480]
lea edi, [ecx - 1]
mov dword [0x10205480], esi
cmove esi, ecx
dec esi
and edi, esi
cmp dword [edx + edi*4], 0
jne 0x100af8e9
push 0xc
call fcn.100cee22
mov ecx, dword [0x10205478]
add esp, 4
mov dword [ecx + edi*4], eax
mov ecx, dword [0x1020547c]
mov edx, dword [0x10205478]
movq xmm0, qword [ebp - 0x18c]
lea eax, [ecx - 1]
and eax, esi
mov ecx, dword [edx + eax*4]
mov eax, dword [ebp - 0x184]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
mov eax, dword [0x10205484]
inc eax
mov dword [0x10205480], esi
mov dword [0x10205484], eax
cmp eax, 0x80
jbe 0x100af93d
nop
add eax, 0xffffffff
mov dword [0x10205484], eax
je 0x100af933
cmp eax, 0x80
ja 0x100af920
jmp 0x100af93d
mov dword [0x10205480], 0
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0x100af975
mov edx, dword [ebp - 0x28]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x100af96b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100af96b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100cf286
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100cee06
mov esp, ebp
pop ebp
ret 4