Function at 0x10020a70
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get number of processors

Disassembly:
push ebp
lea ebp, [esp - 0x194]
sub esp, 0x194
push 0xffffffffffffffff
push 0x1002f6b2
mov eax, dword fs:[0]
push eax
sub esp, 0x60
mov eax, dword [0x10039040]
xor eax, ebp
mov dword [ebp + 0x190], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor esi, esi
mov dword [ebp - 0x18], esi
mov ecx, dword [0x10039be8]
mov dword [ebp - 0x34], esi
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [0x10039bf4]
push eax
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
mov edi, eax
mov dword [ebp - 0x28], edi
test edi, edi
je 0x100216ac
cmp byte [0x1004a44a], 0
jne 0x10020b1c
cmp byte [0x1004a44b], 0
jne 0x10020b1c
cmp byte [0x1004a44c], 0
jne 0x10020b1c
cmp byte [0x1004a44d], 0
jne 0x10020b1c
cmp byte [0x1004a44e], 0
jne 0x10020b1c
cmp byte [0x1004a450], 0
jne 0x10020b1c
cmp byte [0x1004a44f], 0
je 0x100216ac
xor eax, eax
mov edx, 1
mov dword [ebp - 0x38], eax
mov eax, dword [0x10039bf0]
mov dword [ebp - 0x5c], edx
cmp dword [eax + 0x14], edx
jl 0x100216ac
mov dword [ebp - 0x64], 0x10051e18
mov dword [ebp - 0x60], 0x1003bd6c
mov ecx, dword [0x10039bf4]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov ebx, eax
mov dword [ebp - 0x68], ebx
test ebx, ebx
je 0x10021686
cmp ebx, edi
je 0x10021686
mov eax, dword [ebx + 8]
lea ecx, [ebx + 8]
mov eax, dword [eax + 0x20]
call eax
test al, al
jne 0x10021686
mov ecx, ebx
call fcn.10002d90
cmp dword [eax], 0
jne 0x10021686
cmp byte [0x1004a452], 0
je 0x10020baf
mov ecx, ebx
call fcn.10002970
mov ecx, edi
mov esi, dword [eax]
call fcn.10002970
cmp esi, dword [eax]
je 0x10021686
mov esi, dword [ebp - 0x34]
mov eax, dword [ebp - 0x5c]
cmp byte [eax + 0x1004a6b4], 0
je 0x10020bc7
mov dword [ebp - 0x40], 0xffffffff
mov eax, dword [ebp - 0x40]
jmp 0x10020bee
mov ecx, ebx
call fcn.10002970
cmp dword [eax], 2
jne 0x10020bda
mov eax, dword [0x1004a238]
jmp 0x10020bee
mov ecx, ebx
call fcn.10002970
cmp dword [eax], 3
mov eax, dword [ebp - 0x38]
cmove eax, dword [0x1004a234]
mov dword [ebp - 0x38], eax
mov ecx, ebx
mov dword [ebp - 0x18], eax
mov eax, dword [ebx]
call dword [eax + 0x24]
mov ecx, ebx
movss xmm0, dword [eax]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [eax + 8]
movss dword [ebp - 0x24], xmm0
call fcn.10002ac0
mov eax, dword [eax]
shr eax, 1
and al, 1
mov dword [ebp - 0x3c], eax
je 0x10020c34
movss xmm1, dword [0x10035480]
jmp 0x10020c3c
movss xmm1, dword [0x10035490]
mov ecx, dword [0x10039be8]
movss xmm0, dword [ebp - 0x24]
addss xmm0, xmm1
mov eax, dword [ecx]
movss dword [ebp - 0x14], xmm0
mov eax, dword [eax + 0x98]
call eax
movss xmm1, dword [ebp - 0x1c]
mov edi, eax
movss xmm3, dword [ebp - 0x20]
movaps xmm4, xmm1
movss xmm5, dword [ebp - 0x24]
movaps xmm0, xmm3
mulss xmm0, dword [edi + 0x34]
mulss xmm4, dword [edi + 0x30]
addss xmm4, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [edi + 0x38]
addss xmm0, dword [edi + 0x3c]
addss xmm4, xmm0
cvtps2pd xmm0, xmm4
comisd xmm0, xmmword [0x10035398]
jbe 0x10021683
mulss xmm1, dword [edi + 0x10]
movaps xmm0, xmm3
mov ecx, dword [0x10039d48]
mov eax, ecx
mulss xmm0, dword [edi + 0x14]
xorps xmm2, xmm2
cdq
mulss xmm5, dword [edi + 0x18]
sub eax, edx
sar eax, 1
addss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, ecx
mov ecx, dword [0x10039be8]
addss xmm5, dword [edi + 0x1c]
cvtsi2sd xmm2, eax
mov eax, dword [ecx]
addss xmm1, xmm5
mov eax, dword [eax + 0x98]
divss xmm1, xmm4
mulss xmm1, dword [0x10035380]
cvtps2pd xmm1, xmm1
mulsd xmm1, xmm0
addsd xmm1, qword [0x100353e8]
subsd xmm2, xmm1
cvtpd2ps xmm0, xmm2
movss dword [ebp - 0x10], xmm0
call eax
movss xmm4, dword [ebp - 0x20]
mov edi, eax
movss xmm6, dword [ebp - 0x1c]
movaps xmm1, xmm4
movss xmm5, dword [ebp - 0x14]
movaps xmm0, xmm6
mulss xmm0, dword [edi + 0x30]
mulss xmm1, dword [edi + 0x34]
addss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [edi + 0x38]
addss xmm0, dword [edi + 0x3c]
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
comisd xmm0, xmmword [0x10035398]
jbe 0x10021683
movss xmm3, dword [0x100353b0]
movaps xmm0, xmm6
mulss xmm0, dword [edi]
xorps xmm2, xmm2
mov eax, dword [0x10039d4c]
divss xmm3, xmm1
mov ecx, dword [0x10039d48]
movaps xmm1, xmm4
mulss xmm6, dword [edi + 0x10]
mulss xmm1, dword [edi + 4]
mulss xmm4, dword [edi + 0x14]
addss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [edi + 8]
mulss xmm5, dword [edi + 0x18]
addss xmm4, xmm6
addss xmm0, dword [edi + 0xc]
addss xmm5, dword [edi + 0x1c]
addss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, eax
cdq
sub eax, edx
sar eax, 1
mulss xmm1, xmm3
addss xmm4, xmm5
mulss xmm1, dword [0x10035380]
mulss xmm4, xmm3
cvtps2pd xmm1, xmm1
mulss xmm4, dword [0x10035380]
mulsd xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, eax
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
cmp byte [0x1004a44e], 0
addsd xmm1, qword [0x100353e8]
cvtsi2sd xmm2, eax
addsd xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, ecx
cvtpd2ps xmm7, xmm1
cvtps2pd xmm1, xmm4
movss dword [ebp - 0x24], xmm7
mulsd xmm1, xmm0
addsd xmm1, qword [0x100353e8]
subsd xmm2, xmm1
cvtpd2ps xmm2, xmm2
movss dword [ebp - 0x14], xmm2
je 0x10020e51
mov dword [ebp - 0x44], 0xa0ffffff
mov ecx, 0x10039710
push dword [ebp - 0x44]
push ebx
call fcn.1000e210
movss xmm2, dword [ebp - 0x14]
movss xmm7, dword [ebp - 0x24]
cmp byte [ebp - 0x3c], 0
movss xmm0, dword [ebp - 0x10]
subss xmm0, xmm2
movaps xmm1, xmm0
movss dword [ebp - 0x6c], xmm0
mulss xmm1, dword [0x1003535c]
movss dword [ebp - 0x1c], xmm1
je 0x10020e82
mulss xmm1, dword [0x100353d0]
movss dword [ebp - 0x1c], xmm1
cmp byte [0x1004a44a], 0
movaps xmm3, xmm7
subss xmm3, xmm1
movss dword [ebp - 0x20], xmm3
je 0x10020edc
mov eax, dword [ebp - 0x38]
movzx edx, byte [ebp - 0x16]
movzx ecx, byte [ebp - 0x17]
mov byte [ebp - 0x4c], al
cvttss2si eax, xmm0
mov dword [ebp - 0x48], 0x80000000
mov byte [ebp - 0x4b], cl
mov byte [ebp - 0x4a], dl
mov byte [ebp - 0x49], 0xa0
movaps xmm0, xmm1
push dword [ebp - 0x48]
addss xmm0, xmm1
push dword [ebp - 0x4c]
push eax
cvttss2si eax, xmm0
push eax
cvttss2si eax, xmm2
push eax
cvttss2si eax, xmm3
push eax
call fcn.1000df90
cmp byte [0x1004a44f], 0
je 0x10020efb
mov dword [ebp - 0x50], 0xa0ffffff
push dword [ebp - 0x50]
push dword [0x1004a274]
push ebx
call fcn.1000e8f0
mov ecx, dword [0x10039be8]
lea edx, [ebp]
mov edi, dword [ebp - 0x5c]
push edx
push edi
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
cmp byte [0x1004a44b], 0
je 0x10020ff2
cmp byte [edi + 0x1004a6b4], 0
je 0x10020f5c
mov dword [ebp + 0x84], 0x65697246
lea eax, [ebp + 0x84]
mov dword [ebp + 0x88], 0x203a646e
mov word [ebp + 0x8c], 0x7325
mov byte [ebp + 0x8e], 0
mov dword [ebp - 4], 0
or esi, 1
jmp 0x10020f73
mov word [ebp - 0x2c], 0x7325
lea eax, [ebp - 0x2c]
mov byte [ebp - 0x2a], 0
mov dword [ebp - 4], 1
or esi, 2
movss xmm0, dword [ebp - 0x14]
lea ecx, [ebp]
subss xmm0, dword [0x1003545c]
push ecx
push eax
mov dword [ebp - 0x54], 0xc8ffffff
push dword [ebp - 0x54]
cvttss2si eax, xmm0
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x34], esi
push eax
cvttss2si eax, dword [ebp - 0x24]
push eax
push 0
push 1
push 0x10039710
call fcn.1000dbe0
mov eax, esi
add esp, 0x20
test al, 2
je 0x10020fc6
and eax, 0xfffffffd
xor ecx, ecx
mov dword [ebp - 0x34], eax
mov word [ebp - 0x2c], cx
mov byte [ebp - 0x2a], cl
mov dword [ebp - 4], 0xffffffff
test al, 1
je 0x10020ff2
and eax, 0xfffffffe
mov word [ebp + 0x8c], 0
xorps xmm0, xmm0
mov dword [ebp - 0x34], eax
movq qword [ebp + 0x84], xmm0
mov byte [ebp + 0x8e], 0
mov ecx, ebx
call fcn.10002e80
mov eax, dword [eax]
test eax, eax
jle 0x1002115e
movd xmm0, eax
cmp eax, 0x64
cvtdq2ps xmm0, xmm0
mov edx, 0x64
mulss xmm0, dword [0x10035420]
cvttss2si ecx, xmm0
mov dword [ebp - 0x18], ecx
mov ecx, eax
cmovg ecx, edx
cmp byte [0x1004a44c], 0
mov dword [ebp - 0x3c], ecx
je 0x1002115e
movss xmm0, dword [ebp - 0x10]
cmp eax, edx
addss xmm0, dword [0x10035430]
mov ecx, dword [0x10039d08]
mov eax, 0x80000000
mov ebx, 0x80282828
cmovle ebx, eax
push ebx
mov eax, dword [ecx]
movss dword [ebp - 0x14], xmm0
subss xmm0, dword [0x100353b0]
mov eax, dword [eax + 0x28]
cvttss2si edi, xmm0
movss xmm0, dword [ebp - 0x20]
subss xmm0, dword [0x100353b0]
cvttss2si esi, xmm0
call eax
lea eax, [edi + 4]
mov ecx, dword [0x10039d08]
push eax
mov edx, dword [ecx]
movss xmm0, dword [ebp - 0x1c]
addss xmm0, xmm0
movss dword [ebp - 0x10], xmm0
addss xmm0, dword [0x10035410]
cvttss2si eax, xmm0
add eax, esi
push eax
mov eax, dword [edx + 0x38]
push edi
push esi
call eax
mov ecx, dword [0x10039d08]
cvttss2si esi, dword [ebp - 0x14]
push ebx
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
cvttss2si edi, dword [ebp - 0x20]
call eax
lea ebx, [esi + 2]
mov ecx, dword [0x10039d08]
mov edx, edi
push ebx
mov esi, dword [ecx]
movss xmm0, dword [ebp - 0x1c]
mulss xmm0, dword [0x10035550]
cvttss2si eax, xmm0
sub edx, eax
cvttss2si eax, dword [ebp - 0x14]
push edx
push eax
mov eax, dword [esi + 0x30]
push edi
call eax
movd xmm1, dword [ebp - 0x3c]
movss xmm0, dword [ebp - 0x10]
mov ecx, dword [0x10039d08]
mov eax, dword [ebp - 0x18]
cvtdq2pd xmm1, xmm1
movzx edx, al
not al
mov esi, dword [ecx]
or edx, 0xffa00000
movzx eax, al
shl edx, 8
or edx, eax
mov eax, dword [esi + 0x28]
mulsd xmm1, qword [0x100353b8]
push edx
cvtps2pd xmm0, xmm0
mulsd xmm1, xmm0
cvttsd2si edi, xmm1
call eax
mov ecx, dword [0x10039d08]
push ebx
mov edx, dword [ecx]
cvttss2si esi, dword [ebp - 0x20]
lea eax, [esi + edi]
push eax
cvttss2si eax, dword [ebp - 0x14]
push eax
mov eax, dword [edx + 0x30]
push esi
call eax
mov ebx, dword [ebp - 0x68]
mov ecx, dword [0x10039bf4]
push dword [ebx + 0xb38]
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
call eax
mov ecx, eax
test ecx, ecx
je 0x1002117e
mov eax, dword [ecx]
call dword [eax + 0x1c]
mov ecx, eax
test ecx, ecx
je 0x10021284
cmp byte [0x1004a44c], 0
je 0x10021199
movss xmm0, dword [0x10035430]
jmp 0x100211a6
movss xmm0, dword [ebp - 0x6c]
addss xmm0, dword [0x10035430]
movss xmm1, dword [ebp - 0x14]
mov eax, dword [ecx]
addss xmm1, xmm0
mov eax, dword [eax + 0x4a4]
movss dword [ebp - 0x14], xmm1
call eax
test eax, eax
jns 0x100211c6
xor eax, eax
jmp 0x100211ce
xor ecx, ecx
cmp eax, 0x1d
cmovg eax, ecx
push eax
push str.client.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add eax, 0x1e0b00
call eax
lea edx, [ebp + 0x90]
add esp, 4
sub edx, eax
nop dword [eax]
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x100211f0
mov al, byte [ebp + 0x90]
lea esi, [ebp + 0x90]
test al, al
je 0x10021228
nop dword [eax]
movsx eax, al
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov byte [esi], al
lea esi, [esi + 1]
mov al, byte [esi]
add esp, 4
test al, al
jne 0x10021210
cmp byte [0x1004a44d], 0
je 0x10021284
mov word [ebp - 0x30], 0x7325
mov byte [ebp - 0x2e], 0
lea eax, [ebp + 0x90]
mov dword [ebp - 0x58], 0xc8ffffff
push eax
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 2
push eax
cvttss2si eax, dword [ebp - 0x14]
push dword [ebp - 0x58]
push eax
cvttss2si eax, dword [ebp - 0x24]
push eax
push 0
push 1
push 0x10039710
call fcn.1000dbe0
add esp, 0x20
mov dword [ebp - 4], 0xffffffff
xor eax, eax
mov word [ebp - 0x30], ax
mov byte [ebp - 0x2e], al
cmp dword [0x1004a420], 0
mov edx, dword [ebp - 0x60]
movss xmm2, dword [edx - 8]
movss xmm0, dword [edx - 4]
movss xmm1, dword [edx]
mov edx, dword [ebp - 0x64]
movss dword [ebp - 0x68], xmm2
movss dword [ebp - 0x6c], xmm0
movss dword [ebp - 0x3c], xmm1
movss xmm6, dword [edx - 8]
movss xmm4, dword [edx - 4]
movss xmm5, dword [edx]
movss dword [ebp - 0x1c], xmm6
movss dword [ebp - 0x20], xmm4
movss dword [ebp - 0x18], xmm5
jle 0x10021683
xorps xmm3, xmm3
ucomiss xmm3, xmm2
lahf
test ah, 0x44
jp 0x100212f3
ucomiss xmm3, xmm0
lahf
test ah, 0x44
jp 0x100212f3
ucomiss xmm3, xmm1
lahf
test ah, 0x44
jnp 0x10021683
ucomiss xmm3, xmm6
lahf
test ah, 0x44
jp 0x10021312
ucomiss xmm3, xmm4
lahf
test ah, 0x44
jp 0x10021312
ucomiss xmm3, xmm5
lahf
test ah, 0x44
jnp 0x10021683
mov ecx, dword [0x10039be8]
mov eax, dword [ecx]
mov eax, dword [eax + 0x98]
call eax
movss xmm4, dword [ebp - 0x6c]
mov esi, eax
movss xmm6, dword [ebp - 0x68]
movaps xmm1, xmm4
movss xmm5, dword [ebp - 0x3c]
movaps xmm0, xmm6
mulss xmm0, dword [esi + 0x30]
mulss xmm1, dword [esi + 0x34]
addss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [esi + 0x38]
addss xmm0, dword [esi + 0x3c]
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
comisd xmm0, xmmword [0x10035398]
jbe 0x10021683
movss xmm3, dword [0x100353b0]
movaps xmm0, xmm6
mulss xmm0, dword [esi]
xorps xmm2, xmm2
mov eax, dword [0x10039d4c]
divss xmm3, xmm1
mov ecx, dword [0x10039d48]
movaps xmm1, xmm4
mulss xmm6, dword [esi + 0x10]
mulss xmm1, dword [esi + 4]
mulss xmm4, dword [esi + 0x14]
addss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [esi + 8]
mulss xmm5, dword [esi + 0x18]
addss xmm4, xmm6
addss xmm0, dword [esi + 0xc]
addss xmm5, dword [esi + 0x1c]
addss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, eax
cdq
sub eax, edx
sar eax, 1
mulss xmm1, xmm3
addss xmm4, xmm5
mulss xmm1, dword [0x10035380]
mulss xmm4, xmm3
cvtps2pd xmm1, xmm1
mulss xmm4, dword [0x10035380]
mulsd xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, eax
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
addsd xmm1, qword [0x100353e8]
cvtsi2sd xmm2, eax
addsd xmm1, xmm0
cvtpd2ps xmm0, xmm1
cvtps2pd xmm1, xmm4
movss dword [ebp - 0x24], xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, ecx
mov ecx, dword [0x10039be8]
mov eax, dword [ecx]
mulsd xmm1, xmm0
mov eax, dword [eax + 0x98]
addsd xmm1, qword [0x100353e8]
subsd xmm2, xmm1
cvtpd2ps xmm0, xmm2
movss dword [ebp - 0x10], xmm0
call eax
movss xmm4, dword [ebp - 0x20]
mov esi, eax
movss xmm6, dword [ebp - 0x1c]
movaps xmm1, xmm4
movss xmm5, dword [ebp - 0x18]
movaps xmm0, xmm6
mulss xmm0, dword [esi + 0x30]
mulss xmm1, dword [esi + 0x34]
addss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [esi + 0x38]
addss xmm0, dword [esi + 0x3c]
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
comisd xmm0, xmmword [0x10035398]
jbe 0x10021683
movss xmm3, dword [0x100353b0]
movaps xmm0, xmm6
mulss xmm0, dword [esi]
mov eax, dword [0x10039d4c]
divss xmm3, xmm1
mov ecx, dword [0x10039d48]
push 0xa0ffffff
movaps xmm1, xmm4
mulss xmm6, dword [esi + 0x10]
mulss xmm1, dword [esi + 4]
mulss xmm4, dword [esi + 0x14]
addss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [esi + 8]
mulss xmm5, dword [esi + 0x18]
addss xmm4, xmm6
addss xmm0, dword [esi + 0xc]
addss xmm5, dword [esi + 0x1c]
addss xmm1, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
mulss xmm1, xmm3
addss xmm4, xmm5
mulss xmm1, dword [0x10035380]
mulss xmm4, xmm3
cvtps2pd xmm1, xmm1
mulss xmm4, dword [0x10035380]
mulsd xmm1, xmm0
movd xmm0, eax
mov eax, ecx
cvtdq2pd xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
addsd xmm1, qword [0x100353e8]
movd xmm2, eax
cvtdq2pd xmm2, xmm2
addsd xmm1, xmm0
cvtpd2ps xmm0, xmm1
cvtps2pd xmm1, xmm4
movss dword [ebp - 0x1c], xmm0
movd xmm0, ecx
mov ecx, dword [0x10039d08]
cvtdq2pd xmm0, xmm0
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
mulsd xmm1, xmm0
addsd xmm1, qword [0x100353e8]
subsd xmm2, xmm1
cvtpd2ps xmm0, xmm2
movss dword [ebp - 0x20], xmm0
call eax
cvttss2si eax, dword [ebp - 0x20]
mov ecx, dword [0x10039d08]
mov edx, dword [ecx]
push eax
cvttss2si eax, dword [ebp - 0x1c]
push eax
cvttss2si eax, dword [ebp - 0x10]
push eax
cvttss2si eax, dword [ebp - 0x24]
push eax
mov eax, dword [edx + 0x3c]
call eax
movss xmm0, dword [ebp - 0x10]
subss xmm0, dword [0x10035410]
mov ecx, dword [0x10039d08]
push 0xa03c3cff
mov eax, dword [ecx]
cvttss2si esi, xmm0
mov eax, dword [eax + 0x28]
movss xmm0, dword [ebp - 0x24]
subss xmm0, dword [0x10035410]
mov dword [ebp - 0x10], esi
cvttss2si ebx, xmm0
call eax
mov ecx, dword [0x10039d08]
add esi, 5
mov eax, dword [ecx]
lea edi, [ebx + 5]
push esi
push edi
push dword [ebp - 0x10]
mov eax, dword [eax + 0x30]
push ebx
call eax
mov ecx, dword [0x10039d08]
push 0xa0000000
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [0x10039d08]
push esi
push edi
push dword [ebp - 0x10]
mov eax, dword [ecx]
push ebx
mov eax, dword [eax + 0x38]
call eax
movss xmm0, dword [ebp - 0x20]
subss xmm0, dword [0x10035410]
mov ecx, dword [0x10039d08]
push 0xa0ffc8a0
mov eax, dword [ecx]
cvttss2si esi, xmm0
mov eax, dword [eax + 0x28]
movss xmm0, dword [ebp - 0x1c]
subss xmm0, dword [0x10035410]
mov dword [ebp - 0x10], esi
cvttss2si ebx, xmm0
call eax
mov ecx, dword [0x10039d08]
lea edi, [ebx + 5]
add esi, 5
push esi
push edi
mov eax, dword [ecx]
push dword [ebp - 0x10]
push ebx
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [0x10039d08]
push 0xa0000000
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [0x10039d08]
push esi
push edi
push dword [ebp - 0x10]
mov eax, dword [ecx]
push ebx
mov eax, dword [eax + 0x38]
call eax
mov edi, dword [ebp - 0x28]
mov edx, dword [ebp - 0x5c]
mov eax, dword [0x10039bf0]
inc edx
add dword [ebp - 0x60], 0x39c
add dword [ebp - 0x64], 0x7380
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x5c], edx
cmp edx, dword [eax + 0x14]
jle 0x10020b45
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x190]
xor ecx, ebp
call fcn.1002ba3e
lea esp, [ebp + 0x194]
pop ebp
ret