Function at 0x100126c0
Capabilities:
Contain obfuscated stackstrings
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x1011a411
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x188
mov byte [0x11290c7d], 0
cmp byte [0x1128ff3b], 0
push esi
push edi
je 0x1001287a
mov eax, dword [0x1128fed4]
cmp dword [eax], 0
je 0x1001287a
mov ecx, dword [0x11290b48]
mov eax, dword [ecx]
mov eax, dword [eax + 0x68]
call eax
test al, al
je 0x1001287a
mov eax, dword [0x1128fed4]
mov ecx, dword [eax]
call fcn.100b55c0
test al, al
je 0x1001287a
push dword [0x1128ff40]
mov edi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
call edi
test al, 1
je 0x10012972
cmp byte [0x11290c7d], 0
jne 0x10012972
mov eax, dword [ebx + 8]
lea ecx, [ebp - 0x58]
push ecx
mov dword [ebp - 0x44], 0
movss xmm1, dword [eax + 0x10]
movss xmm0, dword [eax + 0xc]
mov eax, dword [0x1128fed4]
movss dword [ebp - 0x4c], xmm0
movss dword [ebp - 0x48], xmm1
mov ecx, dword [eax]
call fcn.100b5160
mov esi, eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.10019e90
movss xmm0, dword [0x11064b58]
lea ecx, [ebp - 0x198]
add esp, 8
movss xmm1, dword [eax]
movss xmm2, dword [eax + 4]
movss xmm3, dword [eax + 8]
mulss xmm1, xmm0
mulss xmm2, xmm0
addss xmm1, dword [esi]
mulss xmm3, xmm0
addss xmm2, dword [esi + 4]
addss xmm3, dword [esi + 8]
movss dword [ebp - 0x2c], xmm1
movss dword [ebp - 0x4c], xmm1
movss dword [ebp - 0x20], xmm2
movss dword [ebp - 0x48], xmm2
movss dword [ebp - 0x38], xmm3
movss dword [ebp - 0x44], xmm3
call fcn.10011c40
lea ecx, [ebp - 0x110]
call fcn.10011d30
mov eax, dword [0x1128fed4]
lea ecx, [ebp - 0x4c]
push ecx
lea ecx, [ebp - 0x58]
push ecx
mov ecx, dword [eax]
call fcn.100b5160
push eax
lea ecx, [ebp - 0x110]
call fcn.1000ed40
mov ecx, dword [0x11290c18]
lea edx, [ebp - 0x198]
push edx
lea edx, [ebp - 0x40]
mov dword [ebp - 0x40], vtable.CTraceFilterWorldOnly.0
push edx
mov eax, dword [ecx]
lea edx, [ebp - 0x110]
push 0x201400b
push edx
call dword [eax + 0x14]
movss xmm0, dword [ebp - 0x16c]
ucomiss xmm0, dword [0x10122b78]
mov ecx, dword [0x11290b48]
lahf
test ah, 0x44
mov eax, dword [ecx]
jp 0x1001288d
push 0x110647c0
call dword [eax + 0x1b4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov eax, dword [eax + 0xd4]
call eax
push eax
lea ecx, [ebp - 0xb8]
call fcn.10011a20
mov dword [ebp - 0x34], eax
mov ecx, dword [0x1128fed4]
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 4], 0
mov ecx, dword [ecx]
call fcn.100b5160
mov ecx, dword [0x1128fed4]
mov esi, eax
lea eax, [ebp - 0xa0]
push eax
mov ecx, dword [ecx]
call fcn.100b5160
movss xmm1, dword [ebp - 0x2c]
movss xmm2, dword [ebp - 0x20]
movss xmm3, dword [ebp - 0x38]
subss xmm1, dword [eax]
subss xmm2, dword [eax + 4]
subss xmm3, dword [eax + 8]
movss xmm0, dword [ebp - 0x16c]
mov ecx, dword [0x1128fecc]
push dword [ebp - 0x34]
mulss xmm1, xmm0
mulss xmm2, xmm0
addss xmm1, dword [esi]
mulss xmm3, xmm0
addss xmm2, dword [esi + 4]
addss xmm3, dword [esi + 8]
movss dword [ebp - 0x4c], xmm1
movss dword [ebp - 0x48], xmm2
movss dword [ebp - 0x44], xmm3
cmp ecx, dword [0x1128fed0]
je 0x10012951
movq xmm0, qword [ebp - 0x4c]
mov eax, dword [ebp - 0x44]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
add ecx, 0xc
call fcn.100118c0
add dword [0x1128fecc], 0x24
jmp 0x10012960
lea eax, [ebp - 0x4c]
push eax
push ecx
mov ecx, 0x1128fec8
call fcn.10010b00
lea ecx, [ebp - 0xb8]
mov dword [ebp - 4], 0xffffffff
call fcn.1000b370
cmp dword [0x1128ff48], 0
je 0x100129c0
push dword [0x1128ff3c]
call edi
test ax, ax
je 0x100129c0
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov esi, eax
mov ecx, edx
mov eax, dword [0x11291204]
cdq
cmp edx, ecx
ja 0x100129c0
jb 0x100129a2
cmp eax, esi
jae 0x100129c0
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
add eax, 0x1f4
cmp byte [0x1128ff4c], 0
mov dword [0x11291204], eax
sete byte [0x1128ff4c]
push dword [0x1128ff3c]
call edi
test ax, ax
jne 0x10012a06
cmp byte [0x1128ff4c], al
jne 0x10012a06
mov byte [0x11290d5f], al
mov byte [0x112911fc], al
mov byte [0x112911fd], al
mov byte [0x112911fe], al
mov byte [0x112911ff], al
mov byte [0x11291200], al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov edi, dword [0x1128fecc]
mov eax, 0x38e38e39
mov esi, dword [0x1128fec8]
mov ecx, edi
sub ecx, esi
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x1001287a
movss xmm0, dword [0x11064b60]
xor eax, eax
xor ecx, ecx
mov dword [ebp - 0x40], eax
movss dword [ebp - 0x34], xmm0
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], ecx
sub edi, esi
mov eax, 0x38e38e39
imul edi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, dword [ebp - 0x1c]
jbe 0x10013f19
add ecx, 0xc
add esi, ecx
mov ecx, dword [0x11290b48]
mov eax, dword [ecx]
mov eax, dword [eax + 0xd4]
call eax
push esi
push eax
call fcn.1000fe70
add esp, 8
test al, al
je 0x10012bce
mov eax, dword [0x1128fed4]
mov ecx, dword [eax]
call fcn.1001a9a0
mov edi, dword [0x1128fecc]
mov ecx, edi
mov esi, dword [0x1128fec8]
sub ecx, esi
mov dword [ebp - 0x2c], eax
mov eax, 0x38e38e39
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, dword [ebp - 0x1c]
jbe 0x10013f19
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
movss xmm1, dword [ecx]
movss xmm2, dword [ecx + 4]
subss xmm2, dword [esi + eax + 4]
subss xmm1, dword [esi + eax]
movss xmm0, dword [ecx + 8]
subss xmm0, dword [esi + eax + 8]
mulss xmm2, xmm2
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm2, xmm1
xorps xmm1, xmm1
addss xmm2, xmm0
cvtps2pd xmm0, xmm2
ucomisd xmm1, xmm0
ja 0x10012b0e
sqrtsd xmm0, xmm0
jmp 0x10012b13
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
movss xmm1, dword [ebp - 0x34]
cvtsd2ss xmm0, xmm0
comiss xmm1, xmm0
jbe 0x10012bda
mov eax, dword [0x1128fed4]
mov ecx, dword [eax]
call fcn.1001a9a0
mov edi, dword [0x1128fecc]
mov ecx, edi
mov esi, dword [0x1128fec8]
sub ecx, esi
mov dword [ebp - 0x34], eax
mov eax, 0x38e38e39
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, dword [ebp - 0x1c]
jbe 0x10013f19
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
movss xmm1, dword [ecx]
movss xmm2, dword [ecx + 4]
subss xmm2, dword [esi + eax + 4]
subss xmm1, dword [esi + eax]
movss xmm0, dword [ecx + 8]
subss xmm0, dword [esi + eax + 8]
mulss xmm2, xmm2
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm2, xmm1
xorps xmm1, xmm1
addss xmm2, xmm0
cvtps2pd xmm0, xmm2
ucomisd xmm1, xmm0
ja 0x10012bb8
sqrtsd xmm0, xmm0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x40], eax
cvtsd2ss xmm0, xmm0
movss dword [ebp - 0x34], xmm0
jmp 0x10012bdd
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
mov eax, dword [ebp - 0x1c]
cvtsd2ss xmm0, xmm0
mov dword [ebp - 0x40], eax
movss dword [ebp - 0x34], xmm0
jmp 0x10012bdd
mov edi, dword [0x1128fecc]
mov esi, dword [0x1128fec8]
mov eax, dword [ebp - 0x1c]
add dword [ebp - 0x20], 0x24
inc eax
mov dword [ebp - 0x1c], eax
mov ecx, edi
sub ecx, esi
mov eax, 0x38e38e39
imul ecx
mov ecx, dword [ebp - 0x20]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x1c], eax
jb 0x10012a47
mov eax, dword [ebp - 0x40]
mov ecx, 0x1128fec8
push eax
call fcn.100178f0
mov edi, dword [ebx + 8]
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x44], eax
mov eax, dword [edi + 0x30]
movq qword [ebp - 0x4c], xmm0
movss xmm0, dword [edi + 0x24]
mov dword [ebp - 0x20], eax
mov eax, dword [0x1128fed4]
movss dword [ebp - 0x94], xmm0
movss xmm0, dword [edi + 0x28]
movss dword [ebp - 0x18], xmm0
mov ecx, dword [eax]
call fcn.1001ab40
mov eax, dword [0x1128fed4]
mov ecx, dword [eax]
call fcn.1001a9a0
mov eax, dword [0x1128fed4]
mov ecx, dword [eax]
call fcn.10019cf0
mov eax, dword [0x11290d6c]
xor ecx, ecx
xorps xmm0, xmm0
mov dword [ebp - 0x40], ecx
comiss xmm0, dword [0x11290c8c]
mov byte [ebp - 0x11], cl
mov edx, dword [eax + 0x1c]
mov eax, dword [0x1129120c]
mov dword [ebp - 0x34], edx
movss xmm0, dword [0x11064b64]
movss dword [ebp - 0x1c], xmm0
cmova eax, ecx
movss dword [ebp - 0x24], xmm0
mov dword [0x1129120c], eax
mov eax, dword [0x11290d54]
not eax
movss dword [ebp - 0x28], xmm0
and eax, 1
xor esi, esi
lea eax, [eax*2 + 3]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x20]
mov dword [edi + 0x30], eax
mov dword [edi + 0x28], 0
mov dword [edi + 0x24], 0
mov eax, dword [0x111013cc]
mov byte [ebp - 0x2d], 0
mov ecx, dword [eax]
lea eax, [edx - 1]
push eax
push 0
call ecx
mov eax, dword [0x1128fed4]
push 0x111014ac
mov ecx, dword [eax]
call fcn.100b5ca0
mov eax, dword [0x1128fed4]
mov ecx, dword [eax]
call fcn.1001a820
mov eax, dword [0x1128fed4]
mov ecx, dword [eax]
call fcn.1001a9a0
mov eax, dword [0x1128fed4]
mov ecx, dword [eax]
call fcn.1001ab40
mov eax, dword [0x1128fed4]
mov ecx, dword [eax]
call fcn.10019cf0
xor eax, eax
mov dword [ebp - 0xfc], 0
xorps xmm0, xmm0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xec], 0x7f800000
mov dword [ebp - 0xf0], 0x7f800000
mov dword [ebp - 0xf4], 0x7f800000
movups xmmword [ebp - 0xe8], xmm0
mov dword [ebp - 0xd0], 0x7f800000
mov dword [ebp - 0xd4], 0x7f800000
mov dword [ebp - 0xd8], 0x7f800000
mov dword [ebp - 0xc4], 0x7f800000
mov dword [ebp - 0xc8], 0x7f800000
mov dword [ebp - 0xcc], 0x7f800000
mov dword [ebp - 0x3c], eax
cmp byte [0x112911fc], al
jne 0x100133f2
cmp byte [0x112911fd], al
jne 0x100133f2
cmp byte [0x112911fe], al
jne 0x100133f2
cmp byte [0x112911ff], al
jne 0x100133f2
mov dword [ebp - 0x38], eax
nop dword [eax]
mov eax, dword [0x1128fed4]
mov ecx, dword [eax]
call fcn.1001a820
mov ecx, dword [ebp - 0x3c]
test byte [eax], 1
lea eax, [ecx + 1]
cmove eax, ecx
mov dword [ebp - 0x3c], eax
cmp eax, 1
jne 0x10012e29
mov eax, dword [0x1128fed4]
mov ecx, dword [eax]
call fcn.1001a9a0
movss xmm0, dword [eax]
movss dword [ebp - 0x28], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x24], xmm0
movss xmm0, dword [eax + 8]
movss dword [ebp - 0x1c], xmm0
test esi, esi
jne 0x10012e44
mov eax, dword [0x1128fed4]
mov ecx, dword [eax]
call fcn.1001a820
test byte [eax], 1
je 0x10012e63
or dword [edi + 0x30], 2
jmp 0x10012e63
cmp esi, 1
je 0x10012e4e
cmp esi, 2
jne 0x10012e63
mov eax, dword [0x1128fed4]
mov ecx, dword [eax]
call fcn.1001a820
test byte [eax], 1
je 0x10012e63
or dword [edi + 0x30], 6
mov eax, dword [0x1128fed4]
mov ecx, dword [eax]
call fcn.1001a820
test byte [eax], 1
jne 0x10012e84
cmp esi, 3
je 0x10012e89
cmp esi, 4
je 0x10012ea7
and dword [edi + 0x30], 0xfffffff9
jmp 0x10012ea2
cmp esi, 3
jne 0x10012ea2
mov eax, dword [0x1128fed4]
mov ecx, dword [eax]
call fcn.1001a820
test byte [eax], 1
je 0x10012e9e
or dword [edi + 0x30], 2
or dword [edi + 0x30], 4
cmp esi, 4
jne 0x10012ecf
mov ecx, dword [ebp - 0x40]
mov eax, dword [edi + 0x30]
cmp dword [ebp - 0x38], ecx
jne 0x10012ec0
and eax, 0xfffffffd
or eax, 4
inc dword [ebp - 0x3c]
mov dword [edi + 0x30], eax
jmp 0x10012ecf
and eax, 0xfffffffb
or eax, 2
mov dword [edi + 0x30], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x3c], eax
mov eax, dword [0x1128fed4]
mov ecx, dword [eax]
call fcn.1001a820
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [0x1128fed4]
mov ecx, dword [eax]
call fcn.1001a9a0
movss xmm0, dword [eax + 8]
mov eax, dword [0x1128fed4]
movss dword [ebp - 0x6c], xmm0
mov ecx, dword [eax]
call fcn.1001ab40
lea ecx, [ebp - 0xfc]
push ecx
movss xmm0, dword [eax + 8]
mov eax, dword [0x1128fed4]
movss dword [ebp - 0x68], xmm0
mov ecx, dword [eax]
call fcn.100b5de0
mov eax, dword [0x1128fed4]
mov ecx, dword [eax]
call fcn.1001ab40
mov eax, dword [0x1128fed4]
mov ecx, dword [eax]
call fcn.1001a9a0
mov eax, dword [0x1128fed4]
mov ecx, dword [eax]
call fcn.10019cf0
mov ecx, dword [0x11290cfc]
push edi
call fcn.10051da0
mov ecx, dword [0x11290cfc]
call fcn.10003b40
mov eax, dword [0x11290d6c]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x34], eax
cmp esi, 2
jne 0x10012f93
mov eax, dword [0x1128fed4]
mov ecx, dword [eax]
call fcn.1001a820
test byte [eax], 1
je 0x10012f93
test byte [ebp - 0x2c], 1
jne 0x10012f93
cmp byte [ebp - 0x2d], 0
mov eax, dword [ebp - 0x40]
cmove eax, dword [ebp - 0x38]
mov dword [ebp - 0x40], eax
mov byte [ebp - 0x2d], 1
mov eax, dword [0x1128fed4]
mov ecx, dword [eax]
call fcn.1001a820
test byte [eax], 1
jne 0x10012fb2
cmp esi, 3
je 0x10012fb2
cmp esi, 4
je 0x10012fb2
and dword [edi + 0x30], 0xfffffff9
test byte [ebp - 0x2c], 1
je 0x10013058
mov eax, dword [0x1128fed4]
mov ecx, dword [eax]
call fcn.1001a820
test byte [eax], 1
jne 0x10013058
cmp esi, 2
jne 0x10013058
mov eax, dword [0x1128fed4]
mov ecx, dword [eax]
call fcn.1001a9a0
movss xmm0, dword [eax + 8]
addss xmm0, dword [0x11064b0c]
mov eax, dword [0x1128fed4]
mov ecx, dword [eax]
movss dword [ebp - 0x8c], xmm0
call fcn.1001a9a0
movss xmm0, dword [eax + 4]
mov eax, dword [0x1128fed4]
movss dword [ebp - 0x88], xmm0
mov ecx, dword [eax]
call fcn.1001a9a0
movss xmm0, dword [eax]
mov eax, dword [0x1128fed4]
movss dword [ebp - 0x2c], xmm0
mov ecx, dword [eax]
call fcn.1001a9a0
movss xmm0, dword [ebp - 0x2c]
movss dword [eax], xmm0
movss xmm0, dword [ebp - 0x88]
movss dword [eax + 4], xmm0
movss xmm0, dword [ebp - 0x8c]
movss dword [eax + 8], xmm0
mov eax, dword [0x1128fed4]
mov ecx, dword [eax]
call fcn.1001a9a0
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x50], eax
mov eax, dword [0x1128fed4]
movq qword [ebp - 0x58], xmm0
mov ecx, dword [eax]
call fcn.1001ab40
xorps xmm7, xmm7
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
movq qword [ebp - 0xa0], xmm0
movss xmm0, dword [ebp - 0x68]
comiss xmm0, xmm7
mov dword [ebp - 0x98], eax
jbe 0x100133e2
comiss xmm7, dword [ebp - 0x98]
jbe 0x100133e2
mov eax, dword [ebp - 0x3c]
cmp eax, 1
jne 0x100133e2
movss xmm3, dword [ebp - 0x6c]
movaps xmm0, xmm3
mov dword [ebp - 0x3c], 2
subss xmm0, dword [ebp - 0x50]
ucomiss xmm0, xmm7
movss dword [ebp - 0x6c], xmm0
lahf
test ah, 0x44
jnp 0x100133e2
movss xmm4, dword [ebp - 0x44]
xorps xmm6, xmm6
movaps xmm0, xmm4
subss xmm0, dword [0x11064b28]
comiss xmm3, xmm0
movss dword [ebp - 0x68], xmm0
jbe 0x100133e2
mov al, byte [0x11291200]
cvttss2si ecx, xmm4
mov dword [ebp - 0x2c], eax
movd xmm5, ecx
cvtdq2ps xmm5, xmm5
nop dword [eax + eax]
comiss xmm7, xmm4
cvttss2si eax, xmm3
jbe 0x10013175
cmp eax, ecx
jne 0x10013221
movd xmm0, eax
movaps xmm1, xmm3
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
movaps xmm0, xmm4
subss xmm0, xmm5
mulss xmm1, dword [0x11064b3c]
mulss xmm0, dword [0x11064b3c]
cvttss2si ecx, xmm1
cvttss2si edx, xmm0
cmp edx, ecx
je 0x100131bc
lea eax, [ecx + 1]
cmp eax, edx
je 0x100131bc
lea eax, [ecx + 2]
cmp eax, edx
je 0x100131bc
jmp 0x1001321d
cmp eax, ecx
jne 0x10013221
movd xmm0, eax
movaps xmm1, xmm3
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
movaps xmm0, xmm4
subss xmm0, xmm5
mulss xmm1, dword [0x11064b3c]
mulss xmm0, dword [0x11064b3c]
cvttss2si ecx, xmm1
cvttss2si edx, xmm0
cmp edx, ecx
je 0x100131bc
lea eax, [edx - 1]
cmp ecx, eax
je 0x100131bc
lea eax, [edx - 2]
cmp ecx, eax
jne 0x1001321d
test esi, esi
jne 0x100131c9
mov byte [0x112911fc], 1
jmp 0x1001320d
cmp esi, 1
jne 0x100131d7
mov byte [0x112911fd], 1
jmp 0x1001320d
cmp esi, 2
jne 0x100131e5
mov byte [0x112911fe], 1
jmp 0x1001320d
cmp esi, 3
jne 0x100131f3
mov byte [0x112911ff], 1
jmp 0x1001320d
mov ecx, dword [ebp - 0x2c]
cmp esi, 4
movzx ecx, cl
mov eax, 1
cmove ecx, eax
mov dword [ebp - 0x2c], ecx
mov byte [0x11291200], cl
mov ecx, dword [ebp - 0x38]
mov eax, dword [edi + 8]
add ecx, 2
add eax, ecx
mov dword [0x11291208], eax
cvttss2si ecx, xmm4
movss xmm0, dword [0x11064b10]
movaps xmm1, xmm3
addss xmm1, xmm0
cvttss2si eax, xmm1
cmp eax, ecx
jne 0x100132f3
comiss xmm7, xmm4
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
movaps xmm0, xmm4
subss xmm0, xmm5
mulss xmm1, dword [0x11064b3c]
mulss xmm0, dword [0x11064b3c]
cvttss2si ecx, xmm1
cvttss2si edx, xmm0
jbe 0x1001327f
cmp edx, ecx
je 0x10013291
lea eax, [ecx + 1]
cmp eax, edx
je 0x10013291
lea eax, [ecx + 2]
cmp eax, edx
je 0x10013291
jmp 0x100132e7
cmp edx, ecx
je 0x10013291
lea eax, [edx - 1]
cmp ecx, eax
je 0x10013291
lea eax, [edx - 2]
cmp ecx, eax
jne 0x100132e7
test esi, esi
jne 0x1001329e
mov byte [0x112911fc], 1
jmp 0x100132d3
cmp esi, 1
jne 0x100132ac
mov byte [0x112911fd], 1
jmp 0x100132d3
cmp esi, 2
jne 0x100132ba
mov byte [0x112911fe], 1
jmp 0x100132d3
mov eax, dword [ebp - 0x2c]
cmp esi, 4
movzx eax, al
mov ecx, 1
cmove eax, ecx
mov dword [ebp - 0x2c], eax
mov byte [0x11291200], al
mov ecx, dword [ebp - 0x38]
mov eax, dword [edi + 8]
add ecx, 2
add eax, ecx
mov byte [ebp - 0x11], 1
mov dword [0x11291208], eax
movss xmm0, dword [0x11064b10]
cvttss2si ecx, xmm4
cmp esi, 3
jne 0x100133a9
comiss xmm7, xmm4
movaps xmm1, xmm3
subss xmm1, xmm0
cvttss2si eax, xmm1
jbe 0x10013352
cmp eax, ecx
jne 0x100133a9
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
movaps xmm0, xmm4
subss xmm0, xmm5
mulss xmm1, dword [0x11064b3c]
mulss xmm0, dword [0x11064b3c]
cvttss2si ecx, xmm1
cvttss2si edx, xmm0
cmp edx, ecx
je 0x10013392
lea eax, [ecx + 1]
cmp eax, edx
je 0x10013392
lea eax, [ecx + 2]
cmp eax, edx
je 0x10013392
jmp 0x100133a9
cmp eax, ecx
jne 0x100133a9
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
movaps xmm0, xmm4
subss xmm0, xmm5
mulss xmm1, dword [0x11064b3c]
mulss xmm0, dword [0x11064b3c]
cvttss2si ecx, xmm1
cvttss2si edx, xmm0
cmp edx, ecx
je 0x10013392
lea eax, [edx - 1]
cmp ecx, eax
je 0x10013392
lea eax, [edx - 2]
cmp ecx, eax
jne 0x100133a9
mov ecx, dword [ebp - 0x38]
mov eax, dword [edi + 8]
add ecx, 2
add eax, ecx
mov byte [0x112911ff], 1
mov dword [0x11291208], eax
movss xmm0, dword [ebp - 0x6c]
xorps xmm1, xmm1
cvtss2sd xmm1, xmm6
addss xmm6, dword [0x10122b78]
mulsd xmm1, qword [0x11064ae8]
cvtps2pd xmm0, xmm0
cvttss2si ecx, xmm4
addsd xmm1, xmm0
cvtpd2ps xmm0, xmm1
subss xmm3, xmm0
comiss xmm3, dword [ebp - 0x68]
ja 0x10013120
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp eax, 0x30
jl 0x10012de0
mov edx, dword [ebp - 0x34]
inc esi
cmp esi, dword [ebp - 0x90]
jl 0x10012cc1
movss xmm0, dword [ebp - 0x94]
mov esi, dword [ebp - 0x20]
movss dword [edi + 0x24], xmm0
movss xmm0, dword [ebp - 0x18]
mov dword [edi + 0x30], esi
movss dword [edi + 0x28], xmm0
mov eax, dword [0x111013cc]
mov ecx, dword [eax]
mov eax, edx
dec eax
push eax
push 0
call ecx
movss xmm0, dword [0x11290c8c]
comiss xmm0, dword [0x11064b6c]
jbe 0x1001344d
xor eax, eax
mov dword [0x11291208], eax
mov byte [0x11290d5f], al
jmp 0x10013452
mov eax, dword [0x11291208]
cmp dword [edi + 8], eax
jge 0x10013482
mov byte [0x11290d5f], 1
xor eax, eax
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0
mov dword [edi + 0x30], 0
mov dword [edi + 0x44], eax
movss xmm0, dword [0x11290c8c]
jmp 0x10013489
mov byte [0x11290d5f], 0
xorps xmm1, xmm1
comiss xmm0, xmm1
jbe 0x100136ac
cmp byte [0x11291200], 0
je 0x1001369e
movss xmm0, dword [ebp - 0x28]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x100134d0
movss xmm0, dword [ebp - 0x24]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x100134d0
movss xmm2, dword [ebp - 0x1c]
ucomiss xmm2, xmm1
lahf
test ah, 0x44
jnp 0x1001369e
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov esi, eax
mov ecx, edx
mov eax, dword [0x11291210]
cdq
cmp edx, ecx
ja 0x10013698
jb 0x100134f2
cmp eax, esi
jae 0x10013698
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
push 1
push 1
push 1
sub esp, 0x18
xorps xmm0, xmm0
mov esi, esp
mov dword [ebp - 0x18], esp
add eax, 0x1f4
mov dword [0x11291210], eax
push 0xf
movups xmmword [esi], xmm0
push 0x1106484c
push esi
mov dword [esi + 0x10], 0xf
mov dword [esi + 0x14], 0xf
call sub.VCRUNTIME140.dll_memmove
mov byte [esi + 0xf], 0
sub esp, 0xc
mov dword [ebp - 4], 1
mov esi, esp
xorps xmm0, xmm0
push 1
movups xmmword [esi], xmm0
push 0x1106485c
push esi
mov dword [esi + 0x10], 1
mov dword [esi + 0x14], 0xf
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + 1], 0
mov dword [ebp - 4], 0xffffffff
call fcn.1003d630
mov ax, word [0x11064868]
xorps xmm0, xmm0
movups xmmword [ebp - 0x64], xmm0
mov word [ebp - 0x5c], ax
movq xmm0, qword [0x11064860]
mov al, byte [0x1106486a]
mov dword [ebp - 0x54], 0xb
mov dword [ebp - 0x50], 0xf
movq qword [ebp - 0x64], xmm0
mov byte [ebp - 0x5a], al
mov byte [ebp - 0x59], 0
movss xmm0, dword [ebp - 0x44]
lea eax, [ebp - 0x84]
add esp, 0x38
mov dword [ebp - 4], 2
movss dword [esp], xmm0
push eax
call fcn.1002f2a0
add esp, 8
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 3
call fcn.100176f0
push 6
push 0x1106486c
mov ecx, eax
call fcn.10017740
movss xmm0, dword [0x111014f0]
mov esi, eax
push ecx
lea eax, [ebp - 0xb8]
movss dword [esp], xmm0
push eax
call fcn.1002f2a0
add esp, 8
push eax
mov ecx, esi
mov byte [ebp - 4], 4
call fcn.100176f0
cmp byte [ebp - 0x11], 0
mov ecx, 0x11064874
mov edx, 0x11064880
cmove ecx, edx
push ecx
mov ecx, eax
call fcn.10017710
push eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 5
push eax
mov ecx, 0x11290d00
call fcn.10011870
lea ecx, [ebp - 0xb8]
call fcn.1000b370
lea ecx, [ebp - 0x84]
call fcn.1000b370
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0x10
jb 0x10013698
mov edx, dword [ebp - 0x64]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001368e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1001368e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10117be7
add esp, 8
mov esi, dword [ebp - 0x20]
xorps xmm1, xmm1
xor al, al
mov byte [0x112911ff], al
mov byte [0x11291200], al
jmp 0x100136b1
mov al, byte [0x112911ff]
mov dword [edi + 0x30], esi
test al, al
je 0x100138c6
or esi, 4
mov dword [edi + 0x30], esi
test byte [0x11290d54], 1
je 0x100136d1
or esi, 2
mov dword [edi + 0x30], esi
movss xmm3, dword [ebp - 0x28]
ucomiss xmm3, xmm1
lahf
test ah, 0x44
jp 0x100136ff
movss xmm2, dword [ebp - 0x24]
ucomiss xmm2, xmm1
lahf
test ah, 0x44
jp 0x100136ff
movss xmm0, dword [ebp - 0x1c]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x100138d0
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov esi, eax
mov ecx, edx
mov eax, dword [0x11291210]
cdq
cmp edx, ecx
ja 0x100138c6
jb 0x10013721
cmp eax, esi
jae 0x100138c6
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
push 1
push 1
push 1
sub esp, 0x18
xorps xmm0, xmm0
mov esi, esp
mov dword [ebp - 0x18], esp
add eax, 0x1f4
mov dword [0x11291210], eax
push 0xf
movups xmmword [esi], xmm0
push 0x1106488c
push esi
mov dword [esi + 0x10], 0xf
mov dword [esi + 0x14], 0xf
call sub.VCRUNTIME140.dll_memmove
mov byte [esi + 0xf], 0
sub esp, 0xc
mov dword [ebp - 4], 5
mov esi, esp
xorps xmm0, xmm0
push 1
movups xmmword [esi], xmm0
push 0x1106489c
push esi
mov dword [esi + 0x10], 1
mov dword [esi + 0x14], 0xf
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + 1], 0
mov dword [ebp - 4], 0xffffffff
call fcn.1003d630
mov eax, dword [0x110648a8]
xorps xmm0, xmm0
movups xmmword [ebp - 0x64], xmm0
mov dword [ebp - 0x5c], eax
movq xmm0, qword [0x110648a0]
mov ax, word [0x110648ac]
mov dword [ebp - 0x54], 0xe
mov dword [ebp - 0x50], 0xf
movq qword [ebp - 0x64], xmm0
mov word [ebp - 0x58], ax
mov byte [ebp - 0x56], 0
movss xmm0, dword [ebp - 0x44]
lea eax, [ebp - 0x84]
add esp, 0x38
mov dword [ebp - 4], 6
movss dword [esp], xmm0
push eax
call fcn.1002f2a0
add esp, 8
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
mov byte [ebp - 4], 7
jb 0x1001380e
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x64]
call fcn.10017740
push 6
push 0x110648b0
mov ecx, eax
call fcn.10017740
movss xmm0, dword [0x111014f0]
mov esi, eax
push ecx
lea eax, [ebp - 0xb8]
movss dword [esp], xmm0
push eax
call fcn.1002f2a0
add esp, 8
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
mov byte [ebp - 4], 8
jb 0x10013854
mov eax, dword [eax]
push ecx
push eax
mov ecx, esi
call fcn.10017740
cmp byte [ebp - 0x11], 0
mov esi, eax
mov eax, 0x110648c4
mov edx, 0x110648b8
cmove edx, eax
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x18], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10013878
sub ecx, dword [ebp - 0x18]
push ecx
push edx
mov ecx, esi
call fcn.10017740
push eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 5
push eax
mov ecx, 0x11290d00
call fcn.10011870
lea ecx, [ebp - 0xb8]
call fcn.1000b370
lea ecx, [ebp - 0x84]
call fcn.1000b370
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 0xffffffff
call fcn.1000b370
movss xmm3, dword [ebp - 0x28]
movss xmm2, dword [ebp - 0x24]
cmp byte [0x112911fc], 0
je 0x10013ad3
test byte [0x11290d54], 1
xorps xmm0, xmm0
je 0x10013ad6
or dword [edi + 0x30], 2
ucomiss xmm3, xmm0
mov byte [0x112911fc], 0
lahf
test ah, 0x44
jp 0x1001391c
ucomiss xmm2, xmm0
lahf
test ah, 0x44
jp 0x1001391c
movss xmm1, dword [ebp - 0x1c]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jnp 0x10013adb
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov esi, eax
mov ecx, edx
mov eax, dword [0x11291210]
cdq
cmp edx, ecx
ja 0x10013ad3
jb 0x1001393e
cmp eax, esi
jae 0x10013ad3
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
push 1
push 1
push 1
sub esp, 0x18
xorps xmm0, xmm0
mov esi, esp
mov dword [ebp - 0x18], esp
add eax, 0x1f4
mov dword [0x11291210], eax
push 0xf
movups xmmword [esi], xmm0
push 0x110648d0
push esi
mov dword [esi + 0x10], 0xf
mov dword [esi + 0x14], 0xf
call sub.VCRUNTIME140.dll_memmove
mov byte [esi + 0xf], 0
sub esp, 0xc
mov dword [ebp - 4], 9
mov esi, esp
xorps xmm0, xmm0
push 1
movups xmmword [esi], xmm0
push 0x110648e0
push esi
mov dword [esi + 0x10], 1
mov dword [esi + 0x14], 0xf
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + 1], 0
mov dword [ebp - 4], 0xffffffff
call fcn.1003d630
xorps xmm0, xmm0
mov dword [ebp - 0x54], 8
movups xmmword [ebp - 0x64], xmm0
mov dword [ebp - 0x50], 0xf
mov dword [ebp - 0x64], 0x706d756a
mov dword [ebp - 0x60], 0x206f7420
mov byte [ebp - 0x5c], 0
movss xmm0, dword [ebp - 0x44]
lea eax, [ebp - 0x84]
add esp, 0x38
mov dword [ebp - 4], 0xa
movss dword [esp], xmm0
push eax
call fcn.1002f2a0
add esp, 8
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0xb
call fcn.100176f0
push 6
push 0x110648f0
mov ecx, eax
call fcn.10017740
movss xmm0, dword [0x111014f0]
mov esi, eax
push ecx
lea eax, [ebp - 0xb8]
movss dword [esp], xmm0
push eax
call fcn.1002f2a0
add esp, 8
push eax
mov ecx, esi
mov byte [ebp - 4], 0xc
call fcn.100176f0
cmp byte [ebp - 0x11], 0
mov edx, 0x11064904
mov ecx, 0x110648f8
cmove ecx, edx
push ecx
mov ecx, eax
call fcn.10017710
mov dword [ebp - 0x18], 5
push eax
lea eax, [ebp - 0x18]
mov ecx, 0x11290d00
push eax
call fcn.10011870
lea ecx, [ebp - 0xb8]
call fcn.1000b370
lea ecx, [ebp - 0x84]
call fcn.1000b370
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0x10
jb 0x10013ad3
mov edx, dword [ebp - 0x64]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10013ac9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10013ac9
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10117be7
add esp, 8
xorps xmm0, xmm0
movss xmm1, dword [ebp - 0x1c]
cmp byte [0x112911fd], 0
je 0x10013cbf
test byte [0x11290d54], 1
movss xmm3, dword [ebp - 0x28]
je 0x10013cc4
or dword [edi + 0x30], 6
ucomiss xmm3, xmm0
mov byte [0x112911fd], 0
lahf
test ah, 0x44
jp 0x10013b29
movss xmm2, dword [ebp - 0x24]
ucomiss xmm2, xmm0
lahf
test ah, 0x44
jp 0x10013b29
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jnp 0x10013cc9
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov esi, eax
mov ecx, edx
mov eax, dword [0x11291210]
cdq
cmp edx, ecx
ja 0x10013cbf
jb 0x10013b4b
cmp eax, esi
jae 0x10013cbf
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
push 1
push 1
push 1
sub esp, 0x18
xorps xmm0, xmm0
mov esi, esp
mov dword [ebp - 0x18], esp
add eax, 0x1f4
mov dword [0x11291210], eax
push 0xf
movups xmmword [esi], xmm0
push 0x11064910
push esi
mov dword [esi + 0x10], 0xf
mov dword [esi + 0x14], 0xf
call sub.VCRUNTIME140.dll_memmove
mov byte [esi + 0xf], 0
sub esp, 0xc
mov dword [ebp - 4], 0xd
mov esi, esp
xorps xmm0, xmm0
push 1
movups xmmword [esi], xmm0
push 0x11064920
push esi
mov dword [esi + 0x10], 1
mov dword [esi + 0x14], 0xf
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + 1], 0
mov dword [ebp - 4], 0xffffffff
call fcn.1003d630
mov eax, dword [0x1106492c]
xorps xmm0, xmm0
movups xmmword [ebp - 0x84], xmm0
mov dword [ebp - 0x74], 0xc
movq xmm0, qword [0x11064924]
mov dword [ebp - 0x70], 0xf
movq qword [ebp - 0x84], xmm0
mov dword [ebp - 0x7c], eax
mov byte [ebp - 0x78], 0
movss xmm0, dword [ebp - 0x44]
lea eax, [ebp - 0x64]
add esp, 0x38
mov dword [ebp - 4], 0xe
movss dword [esp], xmm0
push eax
call fcn.1002f2a0
add esp, 8
push eax
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0xf
call fcn.100176f0
push 6
push 0x11064934
mov ecx, eax
call fcn.10017740
movss xmm0, dword [0x111014f0]
mov esi, eax
push ecx
lea eax, [ebp - 0xb8]
movss dword [esp], xmm0
push eax
call fcn.1002f2a0
add esp, 8
push eax
mov ecx, esi
mov byte [ebp - 4], 0x10
call fcn.100176f0
cmp byte [ebp - 0x11], 0
mov edx, 0x11064948
mov ecx, 0x1106493c
cmove ecx, edx
push ecx
mov ecx, eax
call fcn.10017710
push eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 5
push eax
mov ecx, 0x11290d00
call fcn.10011870
lea ecx, [ebp - 0xb8]
call fcn.1000b370
lea ecx, [ebp - 0x64]
call fcn.1000b370
lea ecx, [ebp - 0x84]
mov dword [ebp - 4], 0xffffffff
call fcn.1000b370
movss xmm3, dword [ebp - 0x28]
movss xmm2, dword [ebp - 0x24]
cmp byte [0x112911fe], 0
je 0x10013ee8
test byte [0x11290d54], 1
je 0x10013ee8
or dword [edi + 0x30], 6
xorps xmm0, xmm0
mov eax, dword [0x11290b50]
mov byte [0x112911fe], 0
mov eax, dword [eax + 0x1c]
add eax, 3
ucomiss xmm3, xmm0
mov dword [0x1129120c], eax
lahf
test ah, 0x44
jp 0x10013d25
ucomiss xmm2, xmm0
lahf
test ah, 0x44
jp 0x10013d25
movss xmm2, dword [ebp - 0x1c]
ucomiss xmm2, xmm0
lahf
test ah, 0x44
jnp 0x10013ee8
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov esi, eax
mov ecx, edx
mov eax, dword [0x11291210]
cdq
cmp edx, ecx
ja 0x10013ee8
jb 0x10013d47
cmp eax, esi
jae 0x10013ee8
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
push 1
push 1
push 1
sub esp, 0x18
xorps xmm0, xmm0
mov esi, esp
mov dword [ebp - 0x18], esp
add eax, 0x1f4
mov dword [0x11291210], eax
push 0xf
movups xmmword [esi], xmm0
push 0x11064954
push esi
mov dword [esi + 0x10], 0xf
mov dword [esi + 0x14], 0xf
call sub.VCRUNTIME140.dll_memmove
mov byte [esi + 0xf], 0
sub esp, 0xc
mov dword [ebp - 4], 0x11
mov esi, esp
xorps xmm0, xmm0
push 1
movups xmmword [esi], xmm0
push 0x11064964
push esi
mov dword [esi + 0x10], 1
mov dword [esi + 0x14], 0xf
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + 1], 0
mov dword [ebp - 4], 0xffffffff
call fcn.1003d630
mov eax, dword [0x11064970]
xorps xmm0, xmm0
movups xmmword [ebp - 0x84], xmm0
mov dword [ebp - 0x74], 0xc
movq xmm0, qword [0x11064968]
mov dword [ebp - 0x70], 0xf
movq qword [ebp - 0x84], xmm0
mov dword [ebp - 0x7c], eax
mov byte [ebp - 0x78], 0
movss xmm0, dword [ebp - 0x44]
lea eax, [ebp - 0x140]
add esp, 0x38
mov dword [ebp - 4], 0x12
movss dword [esp], xmm0
push eax
call fcn.1002f2a0
add esp, 8
push eax
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x13
call fcn.100176f0
push 6
push 0x11064978
mov ecx, eax
call fcn.10017740
movss xmm0, dword [0x111014f0]
mov esi, eax
push ecx
lea eax, [ebp - 0x128]
movss dword [esp], xmm0
push eax
call fcn.1002f2a0
add esp, 8
push eax
mov ecx, esi
mov byte [ebp - 4], 0x14
call fcn.100176f0
cmp byte [ebp - 0x11], 0
mov edx, 0x11064980
mov esi, 0x1106498c
mov ecx, eax
cmove edx, esi
push edx
call fcn.10017710
push eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 5
push eax
mov ecx, 0x11290d00
call fcn.10011870
lea ecx, [ebp - 0x128]
call fcn.1000b370
lea ecx, [ebp - 0x140]
call fcn.1000b370
mov ecx, dword [ebp - 0x70]
cmp ecx, 0x10
jb 0x10013ee8
mov edx, dword [ebp - 0x84]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10013ede
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10013ede
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10117be7
add esp, 8
mov eax, dword [0x11290b50]
mov ecx, dword [0x1129120c]
cmp ecx, dword [eax + 0x1c]
jle 0x10013efc
or dword [edi + 0x30], 4
mov al, byte [0x11291200]
mov ecx, dword [ebp - 0xc]
pop edi
mov byte [0x11290d60], al
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.10017620
int3