Function at 0x100c1820
Capabilities:
Check for software breakpoints
Check for time delay via gettickcount
Encrypt data using rc4 ksa
Enumerate pe sections
Resolve function by parsing pe exports
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc8
mov eax, dword [0x1010c040]
xor eax, ebp
mov dword [ebp - 4], eax
movzx eax, byte [ebp + 8]
push ebx
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x70], ebx
push esi
push edi
cmp eax, 0xf6
ja case.default.0x100c4fa7
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, 1
movzx eax, byte [eax + 0x100c5240]
mov dword [ebp - 0x80], esi
jmp dword [eax*4 + 0x100c51b4]
call fcn.10014230
test al, al
je case.default.0x100c4fa7
mov ecx, ebx
call fcn.100c55a0
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
call fcn.10014230
test al, al
je case.default.0x100c4fa7
mov ecx, ebx
call fcn.100c5ff0
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
movzx ecx, byte [ebx + 3]
movzx eax, byte [ebx + 4]
shl ecx, 8
or ecx, eax
and ecx, 0x7fff
cmp dword [0x114793c0], ecx
jne 0x100c18e0
mov eax, dword [ebx + 0xc]
mov dword [0x11479280], eax
mov eax, dword [ebx + 0x10]
mov dword [0x11479288], eax
mov eax, dword [ebx + 0x18]
mov dl, byte [ebx + 7]
mov ecx, dword [ebx + 0x14]
mov dword [0x114793b0], eax
mov eax, dword [0x1147939c]
mov dword [0x114793b4], ecx
test dl, 0x10
je 0x100c1915
cmp eax, 3
jae 0x100c1915
mov dword [eax*4 + 0x114793a0], ecx
inc eax
mov dword [0x1147939c], eax
mov dword [0x11479398], eax
test dl, 0x20
je case.default.0x100c4fa7
cmp eax, 4
jae case.default.0x100c4fa7
mov dword [eax*4 + 0x114793a0], ecx
inc eax
mov dword [0x1147939c], eax
mov dword [0x11479398], eax
jmp case.default.0x100c4fa7
mov ecx, ebx
call fcn.100c7240
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
mov eax, dword [ebx + 0xc]
mov dword [0x114793b4], eax
jmp case.default.0x100c4fa7
movzx ecx, byte [ebx + 3]
movzx eax, byte [ebx + 4]
shl ecx, 8
or ecx, eax
and ecx, 0x7fff
cmp dword [0x114793c0], ecx
jne case.default.0x100c4fa7
mov dword [0x11479280], 0
jmp case.default.0x100c4fa7
cmp byte [ebx + 4], 0
mov dword [ebp - 0x78], 0
jbe case.default.0x100c2902
movss xmm1, dword [0x10103664]
lea esi, [ebx + 8]
movsd xmm2, qword [0x10103b68]
mov edx, 0x5f7b60
nop dword [eax]
movzx eax, byte [esi - 1]
movzx ecx, byte [esi - 3]
shl ecx, 8
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movzx eax, byte [esi]
addss xmm0, xmm1
cvtps2pd xmm0, xmm0
mulsd xmm0, xmm2
cvtpd2ps xmm0, xmm0
movss dword [ebp - 0x6c], xmm0
movd xmm0, eax
movzx eax, byte [esi - 2]
cvtdq2ps xmm0, xmm0
or ecx, eax
mov edi, ecx
and edi, 0x7fff
addss xmm0, xmm1
cvtps2pd xmm0, xmm0
mulsd xmm0, xmm2
cvtpd2ps xmm0, xmm0
movss dword [ebp - 0x68], xmm0
cmp edi, 0x3e8
jae 0x100c1a83
shr ecx, 0xf
lea eax, [esi + 1]
push ecx
lea ecx, [ebp - 0x6c]
push ecx
push eax
lea eax, [edi + 0x273c0]
imul eax, eax, 0x350
push eax
call edx
movss xmm1, dword [0x10103664]
add esp, 0x10
cmp dword [0x102e1864], 1
mov edx, 0x5f7b60
movsd xmm2, qword [0x10103b68]
jne 0x100c1a83
lea ecx, [edi + edi*4]
mov byte [ecx*4 + 0x1132aaf8], 1
movq xmm0, qword [esi + 1]
movq qword [ecx*4 + 0x1132aaf9], xmm0
mov eax, dword [esi + 9]
mov dword [ecx*4 + 0x1132ab01], eax
mov eax, dword [esi + 0xd]
mov dword [ecx*4 + 0x1132ab08], eax
mov ecx, dword [ebp - 0x78]
add esi, 0x14
movzx eax, byte [ebx + 4]
inc ecx
mov dword [ebp - 0x78], ecx
cmp ecx, eax
jl 0x100c19c0
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
cmp dword [0x102e1864], edi
jne case.default.0x100c4fa7
xor esi, esi
cmp byte [ebx + 4], 0
jbe case.default.0x100c4fa7
lea edx, [ebx + 5]
nop word [eax + eax]
movzx ecx, byte [edx]
lea edx, [edx + 2]
movzx eax, byte [edx - 1]
inc esi
shl ecx, 8
or ecx, eax
lea eax, [ecx + ecx*4]
mov byte [eax*4 + 0x1132aaf8], 0
mov dword [eax*4 + 0x1132aaf9], 0xffffffff
mov dword [eax*4 + 0x1132aafd], 0xffffffff
mov dword [eax*4 + 0x1132ab01], 0xffffffff
mov dword [eax*4 + 0x1132ab08], 0
movzx eax, byte [ebx + 4]
cmp esi, eax
jl 0x100c1ad0
jmp case.default.0x100c4fa7
push 9
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne case.default.0x100c4fa7
mov al, byte [ebx + 3]
cmp al, 3
je 0x100c1b59
cmp al, 5
jb 0x100c1b4d
cmp al, 8
jbe 0x100c1b59
cmp al, 9
je 0x100c1b59
cmp al, 0xa
jne case.default.0x100c4fa7
mov eax, 0x7dd1b0
mov byte [0x81f6bef], 0
call eax
mov dword [0x8793744], 0
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
cmp byte [ebx + 3], 0xfe
jne 0x100c1b9a
mov eax, dword [ebx + 0xc]
mov dword [0x1147927c], eax
mov eax, dword [ebx + 0x10]
mov dword [0x11479284], eax
cmp byte [ebx + 3], 0xff
jne case.default.0x100c4fa7
cmp dword [0x11479280], 0
je 0x100c1bb5
mov eax, dword [ebx + 0xc]
mov dword [0x11479280], eax
mov eax, dword [ebx + 0x10]
mov dword [0x11479288], eax
jmp case.default.0x100c4fa7
cmp byte [ebx + 3], 0xfe
jne 0x100c1bd8
mov eax, dword [ebx + 8]
mov dword [0x114792ac], eax
mov eax, dword [ebx + 0xc]
mov dword [0x114792a8], eax
cmp byte [ebx + 3], 0xff
jne case.default.0x100c4fa7
mov eax, dword [ebx + 8]
mov dword [0x11479278], eax
mov eax, dword [ebx + 0xc]
mov dword [0x1147929c], eax
jmp case.default.0x100c4fa7
mov al, byte [ebx + 3]
cmp al, 0xec
jb case.default.0x100c4fa7
movzx eax, al
push eax
call fcn.100b4400
cmp byte [ebx + 4], 0
je case.default.0x100c2902
mov dword [0x8793738], 0
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
mov al, byte [ebx + 3]
cmp al, 0xec
jb case.default.0x100c4fa7
movzx edi, al
mov ecx, 0x114f4988
lea eax, [ebp - 0x74]
mov dword [ebp - 0x74], edi
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.10011a30
mov eax, dword [ebp - 0x64]
mov esi, dword [0x114f4988]
cmp byte [eax + 0xd], 0
jne 0x100c1c6c
cmp edi, dword [eax + 0x10]
jge 0x100c1c6e
mov eax, esi
xor edx, edx
lea ecx, [eax + 0x14]
cmp eax, esi
cmovne edx, ecx
test edx, edx
je case.default.0x100c2902
mov al, byte [ebx + 4]
mov byte [edx + 0x18], al
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
mov al, byte [ebx + 3]
test al, al
je 0x100c1cb3
cmp al, 3
je 0x100c1cb3
cmp al, 6
je 0x100c1cb3
cmp al, 0x11
jne case.default.0x100c4fa7
mov eax, dword [ebx + 8]
mov dword [0x114793bc], eax
mov eax, dword [ebx + 0xc]
mov dword [0x114793b8], eax
mov eax, dword [ebx + 0x10]
mov dword [0x11479384], eax
mov eax, dword [ebx + 0x14]
mov dword [0x11479380], eax
mov eax, dword [ebx + 0x18]
mov dword [0x1147937c], eax
mov eax, dword [ebx + 0x1c]
mov dword [0x11479298], eax
mov eax, dword [ebx + 0x20]
mov dword [0x11479290], eax
jmp case.default.0x100c4fa7
cmp dword [0x102e1880], 0
je case.default.0x100c4fa7
cmp byte [ebx + 8], 0
jne 0x100c1d60
mov al, byte [ebx + 0x10]
test al, al
je 0x100c1d60
xor esi, esi
mov ecx, 0x114c9860
mov edx, dword [ecx]
test edx, edx
je 0x100c1d32
movzx eax, al
cmp edx, eax
je 0x100c1d38
mov al, byte [ebx + 0x10]
add ecx, 0xc
inc esi
cmp ecx, 0x114c99e0
jl 0x100c1d11
jmp case.default.0x100c4fa7
inc dword [0x114c9854]
movzx eax, byte [ebx + 0x10]
lea ecx, [esi + esi*2]
mov dword [ecx*4 + 0x114c9860], eax
mov eax, dword [ebx + 0xc]
dec eax
mov dword [ecx*4 + 0x114c9864], eax
mov eax, dword [ebx + 0xc]
mov dword [ecx*4 + 0x114c9868], eax
jmp case.default.0x100c4fa7
movzx edx, byte [ebx + 0x10]
xor ecx, ecx
mov eax, 0x114c9860
nop dword [eax + eax]
cmp dword [eax], edx
je 0x100c1d84
add eax, 0xc
inc ecx
cmp eax, 0x114c99e0
jl 0x100c1d70
jmp case.default.0x100c4fa7
lea eax, [ecx + ecx*2]
mov dword [eax*4 + 0x114c9860], 0
mov dword [eax*4 + 0x114c9864], 0
mov dword [eax*4 + 0x114c9868], 0
dec dword [0x114c9854]
jmp case.default.0x100c4fa7
push ebx
call fcn.100b65e0
jmp case.default.0x100c4fa7
cmp byte [ebx + 3], 1
je 0x100c1dce
xorps xmm0, xmm0
movups xmmword [0x114ee074], xmm0
mov byte [0x102c2e5d], 0
mov dword [0xe8cb3c], 0
jmp case.default.0x100c4fa7
mov eax, dword [ebx + 4]
mov dword [0x114ee084], eax
mov eax, dword [ebx + 8]
mov dword [0x114ee088], eax
mov eax, dword [ebx + 0xc]
mov dword [0x114ee08c], eax
mov eax, dword [ebx + 0x10]
mov dword [0x114ee090], eax
jmp case.default.0x100c4fa7
xorps xmm0, xmm0
movups xmmword [0x114ee074], xmm0
movups xmmword [0x114ee084], xmm0
movups xmmword [0x114ee094], xmm0
jmp case.default.0x100c4fa7
cmp byte [ebx], 0xc1
jne 0x100c1e30
mov al, byte [ebx + 3]
jmp 0x100c1e33
mov al, byte [ebx + 4]
test al, al
je 0x100c1e4a
cmp al, 3
jne case.default.0x100c4fa7
push ebx
call fcn.10073980
jmp case.default.0x100c4fa7
push ebx
call fcn.10073740
jmp case.default.0x100c4fa7
lea eax, [ebx + 3]
mov word [ebp - 0x7e], 0
mov byte [ebp - 0x81], 0
xorps xmm0, xmm0
movq qword [ebp - 0x68], xmm0
test eax, eax
je 0x100c1e84
movq xmm0, qword [eax]
mov ax, word [eax + 8]
movq qword [ebp - 0x68], xmm0
mov word [ebp - 0x7e], ax
jmp 0x100c1e94
call fcn.100dd04d
mov dword [eax], 0x16
call fcn.100dc027
lea esi, [ebx + 0xe]
test esi, esi
je 0x100c1ea8
mov ecx, 0x16
lea edi, [ebp - 0x60]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
jmp 0x100c1ec8
push 0x59
lea eax, [ebp - 0x60]
push 0
push eax
call fcn.100d4f20
add esp, 0xc
call fcn.100dd04d
mov dword [eax], 0x16
call fcn.100dc027
lea edi, [ebp - 0x60]
lea ecx, [edi + 1]
nop
mov al, byte [edi]
inc edi
test al, al
jne 0x100c1ed0
sub edi, ecx
cmp edi, 0x2d
jle 0x100c1f39
mov ecx, 0x2b
lea edx, [ebp - 0x38]
mov eax, 0x28
sub ecx, edx
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], ecx
lea esi, [ebp - 0x60]
add esi, eax
mov al, byte [esi]
mov byte [ebp - 0x79], al
movsx eax, al
push eax
call fcn.100dd0f0
add esp, 4
test eax, eax
jne 0x100c1f13
cmp byte [ebp - 0x79], 0x20
jne 0x100c1f2e
mov eax, dword [ebp - 0x74]
add eax, esi
mov word [esi], 0x2e2e
mov byte [esi + 2], 0x2e
cmp eax, 0x59
jae 0x100c51ad
mov byte [esi + 3], 0
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp eax, edi
jl 0x100c1ef3
mov eax, dword [0x1025d828]
cmp eax, 0xe
jle 0x100c1f4a
xor eax, eax
mov dword [0x1025d828], eax
mov cx, word [ebp - 0x7e]
lea esi, [ebp - 0x60]
movq xmm0, qword [ebp - 0x68]
imul eax, eax, 0xcf
add eax, 0x1025d830
movq qword [eax], xmm0
mov word [eax + 8], cx
mov cl, byte [ebp - 0x81]
mov byte [eax + 0xa], cl
mov ecx, 0x16
imul edi, dword [0x1025d828], 0xcf
add edi, 0x1025d83b
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x1a
movsb byte es:[edi], byte [esi]
imul edi, dword [0x1025d828], 0xcf
lea esi, [ebx + 0x67]
mov ebx, 0x1025e45c
add edi, 0x1025d894
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov eax, dword [0x1025d828]
inc eax
mov dword [0x1025d828], eax
dec eax
mov dword [ebp - 0x80], eax
nop dword [eax + eax]
imul edx, eax, 0xcf
mov ecx, 0x16
mov edi, ebx
movq xmm0, qword [edx + 0x1025d830]
lea esi, [edx + 0x1025d83b]
movq qword [ebx - 0xb], xmm0
mov ax, word [edx + 0x1025d838]
mov word [ebx - 3], ax
mov al, byte [edx + 0x1025d83a]
mov byte [ebx - 1], al
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x1a
mov eax, dword [ebp - 0x80]
movsb byte es:[edi], byte [esi]
lea esi, [edx + 0x1025d894]
lea edi, [ebx + 0x59]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
test eax, eax
jg 0x100c2018
mov eax, 0xe
jmp 0x100c2019
dec eax
add ebx, 0xcf
mov dword [ebp - 0x80], eax
cmp ebx, 0x1025efae
jle 0x100c1fc0
mov ebx, dword [ebp - 0x70]
push dword [ebp + 0x14]
movzx eax, byte [ebp + 8]
push dword [ebp + 0x10]
push ebx
push eax
mov eax, 0x663b20
call eax
add esp, 0x10
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
mov eax, dword [ebx + 4]
mov dword [0x1054bb78], eax
mov eax, dword [ebx + 8]
mov dword [0x1054bb74], eax
mov eax, dword [ebx + 0xc]
mov dword [0x1054bb70], eax
jmp case.default.0x100c4fa7
mov ecx, ebx
call fcn.100c7500
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
xor esi, esi
mov edi, 0x402bc0
mov ebx, 0x96a4c0
push esi
call edi
mov ecx, eax
call ebx
inc esi
mov byte [eax + 0x17], 0
cmp esi, 0x190
jl 0x100c2094
jmp 0x100c202a
mov ecx, ebx
call fcn.100c6390
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
movzx ecx, byte [ebx + 3]
movzx eax, byte [ebx + 4]
shl ecx, 8
or ecx, eax
and ecx, 0x7fff
cmp dword [0x114793c0], ecx
jne case.default.0x100c4fa7
mov eax, dword [ebx + 8]
mov dword [0x114793b8], eax
jmp case.default.0x100c4fa7
cmp byte [ebx], 0xc1
jne 0x100c20fa
mov al, byte [ebx + 3]
jmp 0x100c20fd
mov al, byte [ebx + 4]
movzx eax, al
sub eax, 0
je 0x100c21df
sub eax, 1
jne case.default.0x100c4fa7
cmp dword [0x102e1880], eax
je 0x100c214e
mov dword [0x114c9854], eax
mov eax, 0x114c9864
nop dword [eax]
nop dword [eax + eax]
mov dword [eax - 4], 0
mov dword [eax], 0
mov dword [eax + 4], 0
add eax, 0xc
cmp eax, 0x114c99e4
jl 0x100c2130
mov eax, dword [0x114793e4]
cmp eax, 1
je case.default.0x100c4fa7
cmp byte [ebx + 4], 1
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
jne 0x100c21d0
mov ecx, dword [0x114793e0]
xor edi, edi
cmp ecx, 3
cmove edi, eax
xor eax, eax
cmp ecx, 3
mov dword [0x114793e4], edi
cmove eax, ecx
mov dword [0x114793e0], eax
call esi
mov dword [0x114793dc], eax
call esi
xor ecx, ecx
mov dword [0x114793d8], eax
mov eax, dword [0x114793cc]
test edi, edi
mov dword [0x114793d4], 0
cmove eax, ecx
mov dword [0x114793d0], 0
mov dword [0x114793cc], eax
test edi, edi
mov eax, dword [0x114793c8]
cmove eax, ecx
mov dword [0x114793c8], eax
jmp case.default.0x100c4fa7
mov dword [0x114793e0], 0
jmp 0x100c2273
cmp dword [0x102e1880], 0
je 0x100c221e
mov dword [0x114c9854], 0
mov eax, 0x114c9864
nop word [eax + eax]
mov dword [eax - 4], 0
mov dword [eax], 0
mov dword [eax + 4], 0
add eax, 0xc
cmp eax, 0x114c99e4
jl 0x100c2200
mov dword [0x8793714], edi
movzx esi, word [ebx + 0x14]
cmp dword [0x114793e4], edi
jne 0x100c223d
cmp dword [0x114793e0], 3
jne case.default.0x100c4fa7
lea eax, [ebx + 4]
push eax
push 0x10
push 0x114793e8
call fcn.100dc16b
xor ecx, ecx
mov word [0x106d85ec], si
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 0xc
cmp dword [0x114793e0], 3
cmove ecx, dword [0x114793e0]
mov dword [0x114793e0], ecx
mov dword [0x114793e4], 2
call esi
mov dword [0x114793dc], eax
call esi
mov dword [0x114793d8], eax
mov dword [0x114793d4], 0
mov dword [0x114793d0], 0
jmp case.default.0x100c4fa7
cmp byte [ebx], 0xc1
jne 0x100c22ae
mov al, byte [ebx + 3]
jmp 0x100c22b1
mov al, byte [ebx + 4]
cmp al, 0x14
je 0x100c243d
cmp al, 0x20
jne case.default.0x100c4fa7
movzx ecx, byte [ebx + 4]
movzx eax, byte [ebx + 5]
shl ecx, 8
or ecx, eax
mov eax, 0x57d9a0
push ecx
call eax
add esp, 4
push eax
mov eax, 0x402bc0
call eax
mov edx, 0x96a4c0
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je case.default.0x100c2902
mov ecx, dword [0x8793710]
test ecx, ecx
je 0x100c2389
mov eax, dword [ebx + 8]
mov esi, 0xda
mov edx, dword [ebx + 0xc]
cmp word [edi + 0x84], si
jne 0x100c234f
mov dword [ecx + 2], eax
mov dword [ecx + 6], edx
movq xmm0, qword [ebx + 0x10]
movq qword [ecx + 0xb], xmm0
mov ax, word [ebx + 0x18]
mov word [ecx + 0x13], ax
mov al, byte [ebx + 6]
mov byte [ecx], al
mov al, byte [ebx + 7]
mov byte [ecx + 1], al
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
mov dword [ecx + 0x18], eax
mov dword [ecx + 0x1c], edx
movq xmm0, qword [ebx + 0x10]
movq qword [ecx + 0x21], xmm0
mov ax, word [ebx + 0x18]
mov word [ecx + 0x29], ax
mov al, byte [ebx + 6]
mov byte [ecx + 0x16], al
mov al, byte [ebx + 7]
mov byte [ecx + 0x17], al
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
push 0x2c
mov eax, 0x9cdb52
call eax
mov esi, eax
add esp, 4
test esi, esi
je 0x100c23ae
push 0x668cc0
push 2
push 0x16
push esi
mov eax, 0x4086f0
call eax
jmp 0x100c23b0
xor esi, esi
mov dword [0x8793710], esi
mov edx, 0xda
mov eax, dword [ebx + 8]
mov ecx, dword [ebx + 0xc]
cmp word [edi + 0x84], dx
jne 0x100c2403
mov dword [esi + 2], eax
mov dword [esi + 6], ecx
movq xmm0, qword [ebx + 0x10]
movq qword [esi + 0xb], xmm0
mov ax, word [ebx + 0x18]
mov word [esi + 0x13], ax
mov al, byte [ebx + 6]
mov byte [esi], al
mov al, byte [ebx + 7]
mov byte [esi + 1], al
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], ecx
movq xmm0, qword [ebx + 0x10]
movq qword [esi + 0x21], xmm0
mov ax, word [ebx + 0x18]
mov word [esi + 0x29], ax
mov al, byte [ebx + 6]
mov byte [esi + 0x16], al
mov al, byte [ebx + 7]
mov byte [esi + 0x17], al
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
movzx ecx, byte [ebx + 4]
movzx eax, byte [ebx + 5]
shl ecx, 8
or ecx, eax
mov eax, 0x57d9a0
push ecx
call eax
add esp, 4
mov edi, 0x402bc0
push eax
call edi
mov esi, 0x96a4c0
mov ecx, eax
call esi
test eax, eax
je case.default.0x100c2902
mov cl, byte [ebx + 8]
test cl, cl
je 0x100c2576
cmp cl, 1
jne 0x100c24b6
mov eax, 0x669fc0
lea ecx, [ebp - 0x78]
call eax
lea eax, [ebp - 0x78]
push eax
mov eax, 0x66d2e0
call eax
add esp, 4
lea ecx, [ebp - 0x78]
mov eax, 0x669fe0
call eax
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
cmp cl, 2
jne case.default.0x100c2902
movzx ecx, byte [ebx + 6]
movzx eax, byte [ebx + 7]
shl ecx, 8
or ecx, eax
mov eax, 0x57d9a0
push ecx
call eax
add esp, 4
push eax
call edi
mov ecx, eax
call esi
mov esi, eax
test esi, esi
je case.default.0x100c2902
mov eax, 0x66a000
lea ecx, [ebp - 0x74]
call eax
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], 0
push ecx
push eax
mov eax, 0x66d360
call eax
add esp, 8
lea ecx, [ebp - 0x74]
mov eax, 0x66a020
call eax
cmp dword [ebp - 0x70], 0
je case.default.0x100c2902
add esi, 0x38
mov edi, 0x402320
push esi
push 0x5ce
mov ecx, 0x8128adc
call edi
push eax
push dword [ebp - 0x70]
push 0x102bc710
call fcn.1007fd10
add esp, 0x10
mov ecx, 0x8128adc
push esi
push 0x5d0
call edi
push eax
push dword [ebp - 0x70]
push 0x102bc710
call fcn.1007fd10
add esp, 0x10
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
mov ecx, 0xda
cmp word [eax + 0x84], cx
mov eax, 0x668770
mov ecx, 0x8793710
je 0x100c2593
mov ecx, 0x8793726
call eax
mov eax, 0x669f80
lea ecx, [ebp - 0x78]
call eax
lea eax, [ebp - 0x78]
push eax
mov eax, 0x66d260
call eax
add esp, 4
lea ecx, [ebp - 0x78]
mov eax, 0x669fa0
call eax
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
movzx ecx, byte [ebx + 3]
movzx eax, byte [ebx + 4]
shl ecx, 8
or ecx, eax
and ecx, 0x7fff
cmp dword [0x114793c0], ecx
jne 0x100c25f8
mov eax, dword [ebx + 0xc]
mov dword [0x11479280], eax
mov eax, dword [ebx + 0x10]
mov dword [0x11479288], eax
movzx esi, byte [ebx + 5]
mov eax, 0x57d9a0
mov edi, dword [ebx + 8]
push ecx
call eax
add esp, 4
push eax
mov eax, 0x402bc0
call eax
mov edx, 0x96a4c0
mov ecx, eax
call edx
test eax, eax
je case.default.0x100c4fa7
movss xmm4, dword [eax + 0x404]
movss xmm5, dword [eax + 0x408]
movss xmm3, dword [eax + 0x40c]
lea eax, [esi - 1]
addss xmm4, dword [0x10103f38]
addss xmm5, dword [0x10103f38]
addss xmm3, dword [0x10103ec4]
cmp eax, 4
ja case.0x100c265b.1
jmp dword [eax*4 + 0x100c5338]
movss xmm2, dword [0x101036cc]
xorps xmm0, xmm0
jmp 0x100c26aa
movss xmm0, dword [0x101036cc]
xorps xmm2, xmm2
movaps xmm1, xmm0
jmp 0x100c26ad
movss xmm1, dword [0x101036cc]
xorps xmm0, xmm0
xorps xmm2, xmm2
jmp 0x100c26ad
movss xmm0, dword [0x10103664]
movaps xmm1, xmm0
movaps xmm2, xmm0
jmp 0x100c26ad
movss xmm0, dword [0x101036cc]
xorps xmm2, xmm2
xorps xmm1, xmm1
mov esi, 0x102b92ec
cmp byte [esi], 0
je 0x100c26ca
add esi, 0x84
cmp esi, 0x102bc67c
jl 0x100c26b2
jmp case.default.0x100c4fa7
addss xmm3, dword [0x10104098]
sub esp, 8
mov byte [esi], 1
mov eax, 0x5d81b0
mov dword [esi + 4], edi
movss dword [esi + 0x14], xmm4
movss dword [esi + 0x18], xmm5
movss dword [esp + 4], xmm5
movss dword [esi + 0x1c], xmm3
movss dword [esi + 0x20], xmm0
movss dword [esi + 0x24], xmm1
movss dword [esi + 0x28], xmm2
mov byte [esi + 0x7c], 0
movss dword [esp], xmm4
call eax
fadd qword [0x10103bc8]
add esp, 8
mov dword [esi + 0x50], 0x41200000
mov dword [esi + 0x10], 0x41600000
mov dword [esi + 0x3c], 0
mov byte [esi + 0x4c], 1
fstp dword [esi + 0x80]
jmp case.default.0x100c4fa7
cmp byte [ebx], 0xc1
jne 0x100c2746
mov al, byte [ebx + 3]
jmp 0x100c2749
mov al, byte [ebx + 4]
cmp al, 0x32
jne case.default.0x100c4fa7
mov eax, 0x102de188
nop word [eax + eax]
mov dword [eax - 4], 0xffffffff
mov dword [eax], 0xffffffff
add eax, 8
cmp eax, 0x102de288
jl 0x100c2760
xor esi, esi
cmp byte [ebx + 5], 0
jbe case.default.0x100c4fa7
lea edx, [ebx + 6]
mov ecx, dword [edx]
lea edx, [edx + 8]
mov eax, dword [edx - 4]
inc esi
mov dword [ecx*8 + 0x102ddb28], eax
movzx eax, byte [ebx + 5]
cmp esi, eax
jl 0x100c2786
jmp case.default.0x100c4fa7
cmp byte [ebx], 0xc1
jne 0x100c27ad
mov al, byte [ebx + 3]
jmp 0x100c27b0
mov al, byte [ebx + 4]
cmp al, 0x12
je 0x100c2807
cmp al, 0x20
jne case.default.0x100c4fa7
mov eax, 0x861110
call eax
mov edx, 0x861280
mov ecx, eax
call edx
mov ecx, dword [eax + 0x10]
test ecx, ecx
je case.default.0x100c2902
movzx eax, word [ebx + 6]
push eax
mov eax, 0x7da760
call eax
test eax, eax
je case.default.0x100c2902
mov ecx, dword [ebx + 8]
mov dword [eax + 0x63], ecx
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
movzx eax, word [ebx + 6]
mov ecx, 0xec
cmp ax, cx
jb case.default.0x100c4fa7
mov edi, eax
mov ecx, 0x114f4988
lea eax, [ebp - 0x74]
mov dword [ebp - 0x74], edi
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.10011a30
mov eax, dword [ebp - 0x64]
mov esi, dword [0x114f4988]
cmp byte [eax + 0xd], 0
jne 0x100c2844
cmp edi, dword [eax + 0x10]
jge 0x100c2846
mov eax, esi
xor edx, edx
lea ecx, [eax + 0x14]
cmp eax, esi
cmovne edx, ecx
test edx, edx
je case.default.0x100c2902
mov eax, dword [ebx + 8]
mov dword [edx + 0x65], eax
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
cmp byte [ebx], 0xc1
jne 0x100c287e
mov al, byte [ebx + 3]
jmp 0x100c2881
mov al, byte [ebx + 4]
movzx eax, al
sub eax, 0
je 0x100c2c39
sub eax, 1
je 0x100c2a6c
sub eax, 1
jne case.default.0x100c4fa7
cmp dword [0x114793e4], edi
je 0x100c28ee
mov al, byte [ebx + 4]
test al, al
je 0x100c28b2
cmp al, 2
jne 0x100c28ee
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x114793e4], 2
mov dword [0x114793e0], 0
call esi
mov dword [0x114793dc], eax
call esi
mov dword [0x114793d8], eax
mov dword [0x114793d4], 0
mov dword [0x114793d0], 0
mov byte [0x8793703], 0
movzx eax, byte [ebx + 4]
cmp eax, 3
ja case.default.0x100c2902
jmp dword [eax*4 + 0x100c534c]
push 0
push 0
push 2
push dword [0xe8c578]
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
mov eax, 0x4d50f0
call eax
call fcn.100d1e10
mov eax, 0x7dd230
call eax
mov eax, 0x634640
call eax
mov eax, 0x8d2cf0
call eax
mov dword [0xe609e8], 4
lea ecx, [ebp - 0x70]
mov edx, 4
mov dword [0x87935a4], 0x32
mov dword [ebp - 0x70], 0xf304c1
call fcn.100c6fd0
mov word [0xe8cb4e], 0
mov eax, 0x63d680
mov byte [0xe8cb1e], 0
mov dword [0x87935a4], 0
call eax
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
cmp dword [0xe609e8], 5
jne 0x100c29db
mov eax, 0x8d2cf0
call eax
mov eax, 0x4d50f0
call eax
call fcn.100d1e10
mov eax, 0x7dd230
call eax
mov eax, 0x634640
call eax
mov eax, 0x63a180
mov ecx, 0x8793750
call eax
mov eax, 0x631610
call eax
mov dword [0xe609e8], 2
mov eax, 0x4db220
mov byte [0xe8cb4c], 0
mov word [0xe8cb4e], 0
mov byte [0xe8cb1e], 0
mov dword [0x87935a4], 0
mov dword [0x8793714], 0
call eax
mov edx, 0x4ef4c0
mov ecx, eax
call edx
mov eax, 0x63d680
call eax
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
mov dword [0x114793c4], edi
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
mov al, byte [ebx + 4]
cmp dword [0x114793e0], edi
jne 0x100c2b66
cmp dword [0x114793cc], 0
je 0x100c2b66
cmp al, 1
jne 0x100c2ae0
xor eax, eax
mov dword [ebp - 0x70], 0xf304c1
lea ecx, [ebp - 0x70]
mov byte [ebp - 0x6d], al
lea edx, [eax + 4]
call fcn.100c6fd0
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x114793e4], edi
mov dword [0x114793e0], 2
call esi
mov dword [0x114793dc], eax
call esi
mov dword [0x114793d8], eax
mov dword [0x114793d4], 0x7530
mov dword [0x114793d0], 0x7530
jmp 0x100c2b66
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp al, 3
jne 0x100c2b24
mov dword [0x114793e4], edi
mov dword [0x114793e0], edi
call esi
mov dword [0x114793dc], eax
call esi
mov dword [0x114793d8], eax
mov dword [0x114793d4], 0x2710
mov dword [0x114793d0], 0x7530
mov dword [0x114793cc], 0
jmp 0x100c2b66
mov dword [0x114793e4], 2
mov dword [0x114793e0], 0
call esi
mov dword [0x114793dc], eax
call esi
mov dword [0x114793d8], eax
mov ecx, 0x8793750
mov eax, 0x63a180
mov dword [0x114793d4], 0
mov dword [0x114793d0], 0
call eax
call fcn.100c7190
cmp dword [0x102e19b8], edi
jne case.default.0x100c4fa7
mov ecx, 0x10100258
mov eax, 0xe8c5c4
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100c2ba1
test dl, dl
je 0x100c2b9d
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100c2ba1
add eax, 2
add ecx, 2
test dl, dl
jne 0x100c2b81
xor eax, eax
jmp 0x100c2ba6
sbb eax, eax
or eax, 1
test eax, eax
je case.default.0x100c4fa7
mov ecx, 0x10100250
mov eax, 0xe8c5c4
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100c2bd8
test dl, dl
je 0x100c2bd4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100c2bd8
add eax, 2
add ecx, 2
test dl, dl
jne 0x100c2bb8
xor eax, eax
jmp 0x100c2bdd
sbb eax, eax
or eax, 1
test eax, eax
je case.default.0x100c4fa7
mov ecx, 0x10100254
mov eax, 0xe8c5c4
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100c2c10
test dl, dl
je 0x100c2c0c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100c2c10
add eax, 2
add ecx, 2
test dl, dl
jne 0x100c2bf0
xor eax, eax
jmp 0x100c2c15
sbb eax, eax
or eax, 1
test eax, eax
je case.default.0x100c4fa7
push 0x10
push str.Error
push str.Main.free_not_found_or_invalid_2__
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
movzx ecx, byte [ebx + 5]
movzx eax, byte [ebx + 6]
shl ecx, 8
or ecx, eax
mov dword [0x114793c0], ecx
jmp case.default.0x100c4fa7
cmp byte [ebx], 0xc1
jne 0x100c2c5b
mov al, byte [ebx + 3]
jmp 0x100c2c5e
mov al, byte [ebx + 4]
movzx eax, al
movzx eax, byte [eax + 0x100c5474]
jmp dword [eax*4 + 0x100c535c]
cmp dword [0x102e1880], 0
je 0x100c2cae
mov dword [0x114c9854], 0
mov eax, 0x114c9864
nop word [eax + eax]
mov dword [eax - 4], 0
mov dword [eax], 0
mov dword [eax + 4], 0
add eax, 0xc
cmp eax, 0x114c99e4
jl 0x100c2c90
call fcn.100c11e0
mov ecx, 0x102bc68c
call fcn.10070210
mov ecx, 0x102bc694
call fcn.10070150
mov ecx, dword [0x114f4988]
mov eax, dword [ecx]
mov dword [ebp - 0x78], eax
cmp eax, ecx
je 0x100c2cf7
nop word [eax + eax]
lea ecx, [ebp - 0x78]
mov byte [eax + 0x15], 0xff
call fcn.10024880
mov eax, dword [ebp - 0x78]
cmp eax, dword [0x114f4988]
jne 0x100c2ce0
call fcn.100b4830
mov ecx, 0x114e98d8
call fcn.100247b0
mov ecx, 0x114dbde8
call fcn.100247b0
push ebx
call fcn.10060120
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
push ebx
call fcn.10060610
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
mov ecx, ebx
call fcn.100c65d0
jmp case.0x100c2c68.2
mov eax, dword [ebx + 0x1c]
mov dword [0x11479280], eax
mov eax, dword [ebx + 0x20]
mov dword [0x11479278], eax
mov eax, dword [ebx + 0x24]
mov dword [0x1147929c], eax
mov eax, dword [ebx + 0x28]
mov dword [0x11479288], eax
jmp case.0x100c2c68.2
mov ecx, ebx
call fcn.100c6850
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
mov al, byte [ebx + 4]
sub al, 0x10
cmp al, 4
ja case.0x100c2c68.2
mov eax, dword [ebx + 0xc]
mov dword [0x114793b8], eax
mov eax, dword [ebx + 0x10]
mov dword [0x1147927c], eax
mov eax, dword [ebx + 0x14]
mov dword [0x114792ac], eax
mov eax, dword [ebx + 0x18]
mov dword [0x114792a8], eax
mov eax, dword [ebx + 0x1c]
mov dword [0x11479284], eax
mov eax, dword [ebx + 0x20]
mov dword [0x11479384], eax
mov eax, dword [ebx + 0x24]
mov dword [0x11479380], eax
mov eax, dword [ebx + 0x28]
mov dword [0x1147937c], eax
mov eax, dword [ebx + 0x2c]
mov dword [0x11479298], eax
mov eax, dword [ebx + 0x30]
mov dword [0x11479290], eax
jmp case.0x100c2c68.2
mov eax, dword [ebx + 8]
mov dword [0x11479280], eax
mov eax, dword [ebx + 0xc]
mov dword [0x11479288], eax
mov eax, dword [ebx + 0x10]
mov dword [0x114793b4], eax
mov eax, dword [ebx + 0x14]
mov dword [0x114793b0], eax
jmp case.0x100c2c68.2
mov ecx, ebx
call fcn.100c6b60
jmp case.0x100c2c68.2
mov eax, dword [ebx + 0x14]
mov dword [0x1147927c], eax
mov eax, dword [ebx + 0x18]
mov dword [0x114792ac], eax
mov eax, dword [ebx + 0x1c]
mov dword [0x114792a8], eax
mov eax, dword [ebx + 0x20]
mov dword [0x11479284], eax
mov eax, dword [ebx + 0x28]
mov ecx, dword [ebx + 0x2c]
mov dword [0x11479390], eax
mov dword [0x11479394], ecx
mov eax, dword [ebx + 0x30]
mov ecx, dword [ebx + 0x34]
mov dword [0x11479388], eax
mov dword [0x1147938c], ecx
mov ecx, dword [0x8128ac8]
movzx eax, word [ebx + 0x12]
mov word [ecx + 0x40], ax
mov ecx, dword [0x8128ac8]
movzx eax, word [ebx + 0x12]
mov word [ecx + 0x42], ax
jmp case.0x100c2c68.2
mov dword [0x1132aab0], 0
mov dword [0x1132aab4], 0
mov dword [0x1132aab8], 0
jmp case.0x100c2c68.2
cmp dword [0x102e19c8], 0
jne 0x100c2eb2
cmp dword [0x102e19dc], 0
je case.0x100c2c68.2
xor edi, edi
cmp byte [ebx + 5], 0
jbe case.0x100c2c68.2
lea esi, [ebx + 6]
nop dword [eax]
movzx eax, byte [esi + 2]
push eax
movzx eax, word [esi]
push eax
call fcn.100243e0
movzx eax, byte [ebx + 5]
lea esi, [esi + 4]
inc edi
cmp edi, eax
jl 0x100c2ec0
mov esi, dword [ebp - 0x80]
cmp byte [ebx], 0xc1
jne 0x100c4f93
mov al, byte [ebx + 3]
jmp 0x100c4f96
movaps xmm0, xmmword [0x101043c0]
push pe_nt_image_headers32
push 0xff
push 0x114eda0c
mov dword [0x114ed9bc], 0
movups xmmword [0x114ed9f4], xmm0
mov dword [0x114eda04], 0
mov dword [0x114eda08], 0
call fcn.100d4f20
add esp, 0xc
cmp byte [ebx + 0x1d], 0
jbe case.default.0x100c2902
movzx eax, byte [ebx + 0x1c]
cmp dword [0x114ed9c4], eax
jne case.default.0x100c2902
mov dword [0x114ed9bc], edi
xor edx, edx
movzx eax, byte [ebx + 0x1d]
mov dword [0x114ed9c8], eax
movsx eax, word [ebx + 6]
mov dword [0x114ed9f4], eax
movsx eax, word [ebx + 8]
mov dword [0x114ed9f8], eax
mov eax, dword [ebx + 0xc]
mov dword [0x114ed9fc], eax
mov eax, dword [ebx + 0x10]
mov dword [0x114eda00], eax
mov eax, dword [ebx + 0x14]
mov dword [0x114eda04], eax
mov eax, dword [ebx + 0x18]
mov dword [0x114eda08], eax
cmp byte [ebx + 0x1e], dl
jbe case.default.0x100c2902
mov eax, 0x114ed9eb
lea ecx, [ebx + 0x23]
sub eax, ebx
mov edi, 0x114ed9e9
mov dword [ebp - 0x74], eax
mov esi, 0x114ed9f5
mov eax, 0x114ed9ec
sub edi, ebx
sub eax, ebx
mov dword [ebp - 0x88], eax
mov eax, 0x114ed9ed
sub eax, ebx
mov dword [ebp - 0x94], eax
mov eax, 0x114ed9ee
sub eax, ebx
mov dword [ebp - 0x90], eax
mov eax, 0x114ed9f1
sub eax, ebx
sub esi, ebx
mov dword [ebp - 0x8c], eax
mov ax, word [ecx - 3]
lea ecx, [ecx + 0x18]
mov ebx, dword [ebp - 0x74]
inc edx
mov word [edi + ecx - 0x18], ax
mov al, byte [ecx - 0x19]
mov byte [ebx + ecx - 0x18], al
mov al, byte [ecx - 0x18]
mov ebx, dword [ebp - 0x88]
mov byte [ebx + ecx - 0x18], al
mov al, byte [ecx - 0x17]
mov ebx, dword [ebp - 0x94]
mov byte [ebx + ecx - 0x18], al
mov al, byte [ecx - 0x16]
mov ebx, dword [ebp - 0x90]
mov byte [ebx + ecx - 0x18], al
mov ebx, dword [ebp - 0x8c]
mov eax, dword [ecx - 0x13]
mov dword [ebx + ecx - 0x18], eax
movq xmm0, qword [ecx - 0xf]
mov ebx, dword [ebp - 0x70]
movq qword [esi + ecx - 0x18], xmm0
mov eax, dword [ecx - 7]
mov dword [esi + ecx - 0x10], eax
movzx eax, byte [ebx + 0x1e]
cmp edx, eax
jl 0x100c2fe6
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
mov al, byte [ebx + 4]
cmp al, 0xa
jbe 0x100c30c3
mov eax, 0x9cfb8d
mov dword [0x114ed9dc], 0x41a00000
call eax
cdq
mov ecx, 0x3c
idiv ecx
add edx, 0x96
mov dword [0x114ed9b8], edx
movzx eax, byte [ebx + 4]
sub eax, 0xa
mov dword [0x114ed9f0], eax
mov eax, dword [0x114eda08]
test eax, eax
jle case.default.0x100c2902
dec eax
mov dword [0x114eda08], eax
lea eax, [ecx - 0x3b]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
cmp al, 3
jne 0x100c30e7
mov dword [0x114ed9ec], 2
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
cmp al, 4
jne 0x100c311f
mov dword [0x114ed9e0], 0
mov eax, 1
mov dword [0x114ed9b8], 0xffffffff
mov dword [0x114ed9ec], 0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
mov dword [0x114ed9ec], edi
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
mov al, byte [ebx + 4]
movzx eax, al
add eax, 0xffffff10
cmp eax, 4
ja case.default.0x100c4fa7
jmp dword [eax*4 + 0x100c5588]
mov byte [0x102bf73d], 1
mov dword [0xe8cb3c], 1
movzx eax, word [ebx + 8]
mov dword [0x1011bbec], eax
movzx eax, word [ebx + 6]
mov dword [0x1011bbdc], eax
mov eax, dword [ebx + 0xc]
mov dword [0x1011bbe0], eax
mov eax, dword [ebx + 0x10]
mov dword [0x1011bbe4], eax
mov eax, dword [ebx + 0x14]
mov dword [0x1011bbe8], eax
mov dword [0x102bf7e8], 0xbf800000
mov dword [0x102bf788], 0xbf800000
call esi
sub eax, 0xc8
mov dword [0x102bf798], eax
call esi
sub eax, 0xc8
lea esi, [ebx + 0x58]
mov dword [0x102bf7f8], eax
mov ecx, 0x40
movups xmm0, xmmword [ebx + 0x18]
mov edi, 0x1011bc50
movups xmmword [0x1011bc10], xmm0
movups xmm0, xmmword [ebx + 0x28]
movups xmmword [0x1011bc20], xmm0
movups xmm0, xmmword [ebx + 0x38]
movups xmmword [0x1011bc30], xmm0
movups xmm0, xmmword [ebx + 0x48]
movups xmmword [0x1011bc40], xmm0
rep movsd dword es:[edi], dword [esi]
jmp case.default.0x100c4fa7
cmp byte [ebx + 4], 1
jne case.default.0x100c4fa7
mov eax, dword [ebx + 8]
mov dword [0x102c4a6c], eax
call esi
mov dword [0x102c4a70], eax
mov eax, dword [0xe61e18]
mov dword [0x102c4a74], eax
jmp case.default.0x100c4fa7
mov eax, dword [0x1010dffc]
xor edi, edi
mov ecx, dword [0x1010e000]
cmp eax, ecx
je 0x100c5096
mov ecx, eax
mov dword [0x1010e000], ecx
cmp dword [ebx + 8], edi
jle 0x100c50ea
lea esi, [ebx + 0xc]
nop
cmp ecx, dword [0x1010e004]
je 0x100c50cf
movups xmm0, xmmword [esi]
movups xmmword [ecx], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ecx + 0x10], xmm0
mov eax, dword [esi + 0x18]
mov dword [ecx + 0x18], eax
mov ecx, dword [0x1010e000]
add ecx, 0x1c
mov dword [0x1010e000], ecx
jmp 0x100c50e1
push esi
push ecx
mov ecx, 0x1010dffc
call fcn.10013b90
mov ecx, dword [0x1010e000]
inc edi
add esi, 0x1c
cmp edi, dword [ebx + 8]
jl 0x100c50a0
cmp dword [0x1010e044], edi
jge case.default.0x100c2902
mov dword [0x1010e044], edi
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
mov eax, dword [0x1010e008]
xor edx, edx
mov ecx, dword [0x1010e00c]
mov dword [ebp - 0x74], edx
cmp eax, ecx
je 0x100c512e
mov ecx, eax
mov dword [0x1010e00c], ecx
xor edi, edi
cmp dword [ebx + 8], edx
jle 0x100c5189
lea esi, [ebx + 0xc]
cmp ecx, dword [0x1010e010]
je 0x100c5167
movups xmm0, xmmword [esi]
movups xmmword [ecx], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ecx + 0x10], xmm0
mov eax, dword [esi + 0x18]
mov dword [ecx + 0x18], eax
mov ecx, dword [0x1010e00c]
add ecx, 0x1c
mov dword [0x1010e00c], ecx
jmp 0x100c517c
push esi
push ecx
mov ecx, 0x1010e008
call fcn.10013b90
mov ecx, dword [0x1010e00c]
mov edx, dword [ebp - 0x74]
inc edx
inc edi
add esi, 0x1c
mov dword [ebp - 0x74], edx
cmp edi, dword [ebx + 8]
jl 0x100c5138
cmp dword [0x1010e044], edx
jge case.default.0x100c2902
mov dword [0x1010e044], edx
mov ecx, dword [ebp - 4]
mov eax, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100d2be8
mov esp, ebp
pop ebp
ret
call fcn.100d3335
nop
sbb byte [si], cl
adc byte [esi - 1257239528], cl
sbb byte [eax + edx], cl
sbb dword ds:[eax + edx], ecx
pop eax
sbb dword [eax + edx], ecx
sbb dword gs:[eax + edx], ecx
xchg ebx, eax
sbb dword [eax + edx], ecx
scasd eax, dword es:[edi]
sbb cl, byte [eax + edx]
and al, 0x1b
or al, 16
test byte [ebx], bl
or al, 16
ret 0xc1b