Function at 0x1002cb20
Capabilities:
Authenticate hmac

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008f045
mov eax, dword fs:[0]
push eax
sub esp, 0x60
mov eax, dword [0x100ad040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x6c], esi
mov eax, dword [esi]
mov dword [0x100b21fc], eax
cmp byte [esi + 0xd4], 0
je 0x1002d2f3
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount64]
call edi
sub eax, dword [esi + 0x148]
mov ecx, eax
sbb edx, dword [esi + 0x14c]
call fcn.1006ac30
divss xmm0, dword [0x100a4714]
comiss xmm0, dword [0x100a46b4]
jb 0x1002d2f3
call edi
mov dword [esi + 0x148], eax
mov eax, dword [esi + 0x144]
mov dword [esi + 0x14c], edx
test eax, eax
jle 0x1002cbb4
dec eax
mov dword [esi + 0x144], eax
test eax, eax
js 0x1002d2d0
xorps xmm0, xmm0
mov word [ebp - 0x2c], 0x36
lea ecx, [ebp - 0x2b]
mov byte [ebp - 0x2b], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x14], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002cbe0
sub ecx, edx
lea eax, [ebp - 0x2b]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.100051e0
mov dword [ebp - 4], 0
mov eax, 0xc22e4507
mov edi, dword [esi + 0x144]
imul edi
add edx, edi
sar edx, 0x10
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
call fcn.10032230
call fcn.1006aae0
mov esi, eax
mov edx, edi
imul ecx, esi, 0x15180
mov eax, 0x91a2b3c5
mov dword [ebp - 0x30], esi
sub edx, ecx
mov ecx, 0x18
mul edx
shr edx, 0xb
mov eax, edx
xor edx, edx
div ecx
mov ecx, edx
call fcn.1002aa30
call fcn.1006aae0
lea ecx, [esi + esi*2]
mov dword [ebp - 0x48], eax
mov edx, edi
lea esi, [eax + ecx*8]
mov eax, 0x88888889
imul ecx, esi, 0xe10
sub edx, ecx
mov ecx, 0x3c
mul edx
shr edx, 5
mov eax, edx
xor edx, edx
div ecx
mov ecx, edx
call fcn.1002aa30
call fcn.1006aae0
mov ecx, esi
mov dword [ebp - 0x40], eax
shl ecx, 4
sub ecx, esi
lea ecx, [eax + ecx*4]
mov edx, ecx
shl edx, 4
sub edx, ecx
mov ecx, 0x3c
shl edx, 2
sub edi, edx
xor edx, edx
mov eax, edi
div ecx
mov ecx, edx
call fcn.1002aa30
call fcn.1006aae0
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x4c], eax
test ecx, ecx
je 0x1002cdec
cmp ecx, 0xa
jae 0x1002cce0
mov dl, 0x3c
mov byte [ebp - 0x2e], 0
mov al, 0xc
mov byte [ebp - 0x30], dl
xor al, dl
mov byte [ebp - 0x2e], 0
mov byte [ebp - 0x2f], al
lea eax, [ebp - 0x2f]
jmp 0x1002cced
mov word [ebp - 0x2c], 0x5f
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x2b], 0
push ecx
push eax
mov dh, 9
mov byte [ebp - 0x32], 0
mov al, 0x2c
mov byte [ebp - 0x38], dh
mov dl, al
mov byte [ebp - 0x32], 0
mov cl, 0x7a
mov ch, 0x33
xor cl, dh
xor ch, dh
mov ah, 0x7c
mov byte [ebp - 0x36], cl
xor al, dh
mov byte [ebp - 0x33], ch
xor dl, dh
mov byte [ebp - 0x37], al
xor ah, dh
mov byte [ebp - 0x35], dl
sub esp, 0x18
mov byte [ebp - 0x34], ah
mov edx, esp
lea ecx, [ebp - 0x37]
xorps xmm0, xmm0
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002cd40
sub ecx, esi
lea eax, [ebp - 0x37]
push ecx
push eax
mov ecx, edx
call fcn.100051e0
lea eax, [ebp - 0x64]
push eax
call fcn.10004d80
add esp, 0x24
mov byte [ebp - 4], 1
mov ecx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x1002cd6f
mov ecx, dword [eax]
mov edi, dword [eax + 0x10]
mov esi, dword [ebp - 0x14]
mov eax, esi
mov edx, dword [ebp - 0x18]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x1002cda4
lea eax, [edi + edx]
cmp esi, 0xf
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
lea esi, [eax + edx]
push esi
call fcn.1006b7f0
add esp, 0xc
mov byte [esi + edi], 0
jmp 0x1002cdb4
mov byte [ebp - 0x68], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x68]
push edi
call fcn.1000b320
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x50]
cmp ecx, 0xf
jbe 0x1002cdec
mov edx, dword [ebp - 0x64]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002cde2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002d30e
push ecx
push edx
call fcn.10069bf1
add esp, 8
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x1002cf21
cmp ecx, 0xa
jae 0x1002ce15
mov dl, 0x42
mov byte [ebp - 0x2e], 0
mov al, 0x72
mov byte [ebp - 0x30], dl
xor al, dl
mov byte [ebp - 0x2e], 0
mov byte [ebp - 0x2f], al
lea eax, [ebp - 0x2f]
jmp 0x1002ce22
mov word [ebp - 0x2c], 0x67
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x2b], 0
push ecx
push eax
mov dh, 0xb
mov byte [ebp - 0x32], 0
mov al, 0x2e
mov byte [ebp - 0x38], dh
mov dl, al
mov byte [ebp - 0x32], 0
mov cl, 0x78
mov ch, 0x31
xor cl, dh
xor ch, dh
mov ah, 0x7e
mov byte [ebp - 0x36], cl
xor al, dh
mov byte [ebp - 0x33], ch
xor dl, dh
mov byte [ebp - 0x37], al
xor ah, dh
mov byte [ebp - 0x35], dl
sub esp, 0x18
mov byte [ebp - 0x34], ah
mov edx, esp
lea ecx, [ebp - 0x37]
xorps xmm0, xmm0
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002ce73
sub ecx, esi
lea eax, [ebp - 0x37]
push ecx
push eax
mov ecx, edx
call fcn.100051e0
lea eax, [ebp - 0x64]
push eax
call fcn.10004d80
add esp, 0x24
mov byte [ebp - 4], 2
mov ecx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x1002cea2
mov ecx, dword [eax]
mov edi, dword [eax + 0x10]
mov esi, dword [ebp - 0x14]
mov eax, esi
mov edx, dword [ebp - 0x18]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x1002ced7
lea eax, [edx + edi]
cmp esi, 0xf
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
lea esi, [eax + edx]
push esi
call fcn.1006b7f0
add esp, 0xc
mov byte [esi + edi], 0
jmp 0x1002cee7
mov byte [ebp - 0x47], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x47]
push edi
call fcn.1000b320
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x50]
cmp ecx, 0xf
jbe 0x1002cf4f
mov edx, dword [ebp - 0x64]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002cf15
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002d313
push ecx
push edx
call fcn.10069bf1
add esp, 8
jmp 0x1002cf4f
mov ah, 1
mov byte [ebp - 0x44], 0
mov al, 0x31
mov byte [ebp - 0x48], ah
mov cl, al
mov byte [ebp - 0x44], 0
xor al, ah
mov dl, 0x3b
xor cl, ah
mov byte [ebp - 0x47], al
xor dl, ah
mov byte [ebp - 0x46], cl
lea eax, [ebp - 0x47]
mov byte [ebp - 0x45], dl
push eax
lea ecx, [ebp - 0x28]
call fcn.10008d30
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x1002d084
cmp ecx, 0xa
jae 0x1002cf78
mov dl, 0x29
mov byte [ebp - 0x2e], 0
mov al, 0x19
mov byte [ebp - 0x30], dl
xor al, dl
mov byte [ebp - 0x2e], 0
mov byte [ebp - 0x2f], al
lea eax, [ebp - 0x2f]
jmp 0x1002cf85
mov word [ebp - 0x2c], 0x37
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x2b], 0
push ecx
push eax
mov dh, 0x58
mov byte [ebp - 0x32], 0
mov al, 0x7d
mov byte [ebp - 0x38], dh
mov dl, al
mov byte [ebp - 0x32], 0
mov cl, 0x2b
mov ch, 0x62
xor cl, dh
xor ch, dh
mov ah, 0x2d
mov byte [ebp - 0x36], cl
xor al, dh
mov byte [ebp - 0x33], ch
xor dl, dh
mov byte [ebp - 0x37], al
xor ah, dh
mov byte [ebp - 0x35], dl
sub esp, 0x18
mov byte [ebp - 0x34], ah
mov edx, esp
lea ecx, [ebp - 0x37]
xorps xmm0, xmm0
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002cfd6
sub ecx, esi
lea eax, [ebp - 0x37]
push ecx
push eax
mov ecx, edx
call fcn.100051e0
lea eax, [ebp - 0x64]
push eax
call fcn.10004d80
add esp, 0x24
mov byte [ebp - 4], 3
mov ecx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x1002d005
mov ecx, dword [eax]
mov edi, dword [eax + 0x10]
mov esi, dword [ebp - 0x14]
mov eax, esi
mov edx, dword [ebp - 0x18]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x1002d03a
lea eax, [edx + edi]
cmp esi, 0xf
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
lea esi, [eax + edx]
push esi
call fcn.1006b7f0
add esp, 0xc
mov byte [esi + edi], 0
jmp 0x1002d04a
mov byte [ebp - 0x3e], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x3e]
push edi
call fcn.1000b320
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x50]
cmp ecx, 0xf
jbe 0x1002d0b2
mov edx, dword [ebp - 0x64]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002d078
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002d318
push ecx
push edx
call fcn.10069bf1
add esp, 8
jmp 0x1002d0b2
mov ah, 0x29
mov byte [ebp - 0x3c], 0
mov al, 0x19
mov byte [ebp - 0x40], ah
mov cl, al
mov byte [ebp - 0x3c], 0
xor al, ah
mov dl, 0x13
xor cl, ah
mov byte [ebp - 0x3f], al
xor dl, ah
mov byte [ebp - 0x3e], cl
lea eax, [ebp - 0x3f]
mov byte [ebp - 0x3d], dl
push eax
lea ecx, [ebp - 0x28]
call fcn.10008d30
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x1002d1e0
cmp ecx, 0xa
jae 0x1002d0db
mov dl, 0x7c
mov byte [ebp - 0x2e], 0
mov al, 0x4c
mov byte [ebp - 0x30], dl
xor al, dl
mov byte [ebp - 0x2e], 0
mov byte [ebp - 0x2f], al
lea eax, [ebp - 0x2f]
jmp 0x1002d0e8
mov word [ebp - 0x2c], 0x4e
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x2b], 0
push ecx
push eax
mov ch, 0x5c
mov byte [ebp - 0x3b], 0
mov al, 0x79
mov byte [ebp - 0x40], ch
mov dl, al
mov byte [ebp - 0x3b], 0
mov cl, 0x2f
xor dl, ch
mov ah, 0x29
mov byte [ebp - 0x3d], dl
xor al, ch
xor cl, ch
xor ah, ch
mov byte [ebp - 0x3e], cl
sub esp, 0x18
mov byte [ebp - 0x3f], al
mov edx, esp
mov byte [ebp - 0x3c], ah
xorps xmm0, xmm0
lea ecx, [ebp - 0x3f]
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002d132
sub ecx, esi
lea eax, [ebp - 0x3f]
push ecx
push eax
mov ecx, edx
call fcn.100051e0
lea eax, [ebp - 0x64]
push eax
call fcn.10004d80
add esp, 0x24
mov byte [ebp - 4], 4
mov ecx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x1002d161
mov ecx, dword [eax]
mov edi, dword [eax + 0x10]
mov esi, dword [ebp - 0x14]
mov eax, esi
mov edx, dword [ebp - 0x18]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x1002d196
lea eax, [edi + edx]
cmp esi, 0xf
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
lea esi, [eax + edx]
push esi
call fcn.1006b7f0
add esp, 0xc
mov byte [edi + esi], 0
jmp 0x1002d1a6
mov byte [ebp - 0x4c], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x4c]
push edi
call fcn.1000b320
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x50]
cmp ecx, 0xf
jbe 0x1002d207
mov edx, dword [ebp - 0x64]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002d1d4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002d31d
push ecx
push edx
call fcn.10069bf1
add esp, 8
jmp 0x1002d207
mov dl, 0x26
mov byte [ebp - 0x2d], 0
mov al, 0x16
mov byte [ebp - 0x30], dl
mov cl, al
mov byte [ebp - 0x2d], 0
xor al, dl
xor cl, dl
mov byte [ebp - 0x2f], al
lea eax, [ebp - 0x2f]
mov byte [ebp - 0x2e], cl
lea ecx, [ebp - 0x28]
push eax
call fcn.10008d30
cmp dword [ebp - 0x14], 0xf
lea edx, [ebp - 0x28]
xorps xmm0, xmm0
mov dword [ebp - 0x54], 0
cmova edx, dword [ebp - 0x28]
mov ecx, edx
mov dword [ebp - 0x50], 0
movups xmmword [ebp - 0x64], xmm0
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002d230
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x64]
call fcn.100051e0
mov eax, dword [ebp - 0x6c]
mov byte [ebp - 4], 5
mov esi, dword [eax + 0x10]
test esi, esi
je 0x1002d26a
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002d26a
lea eax, [ebp - 0x64]
mov ecx, esi
push eax
call dword [0x100a31a0]
mov ecx, dword [ebp - 0x50]
cmp ecx, 0xf
jbe 0x1002d29e
mov edx, dword [ebp - 0x64]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002d294
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002d322
push ecx
push edx
call fcn.10069bf1
add esp, 8
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x1002d2f3
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002d2c4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002d327
push ecx
push edx
call fcn.10069bf1
add esp, 8
jmp 0x1002d2f3
mov byte [esi + 0xd4], 0
mov esi, dword [esi]
test esi, esi
je 0x1002d2f3
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1002d2f3
push eax
mov ecx, esi
call dword [0x100a313c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10069b90
mov esp, ebp
pop ebp
ret
call fcn.1006f2c1
call fcn.1006f2c1
call fcn.1006f2c1
call fcn.1006f2c1
call fcn.1006f2c1
call fcn.1006f2c1
int3