Function at 0x100bd930
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d16c3
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x3a0
mov eax, dword [0x100e1040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebx + 8]
mov dword [ebp - 0x294], 0
lea edi, [esi + 8]
mov eax, dword [edi]
mov ecx, edi
mov dword [ebp - 0x288], esi
mov dword [ebp - 0x2e4], edi
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [0x10109acc]
mov edx, dword [0x10109c5c]
add edx, 0xffffffd6
mov dword [ebp - 0x29c], eax
mov eax, dword [0x100e10ac]
xor edx, 0x8ca77581
movss xmm0, dword [ecx + 0x14]
mulss xmm0, dword [0x100d6e20]
mov ecx, dword [esi + edx]
movss dword [ebp - 0x1c], xmm0
cmp ecx, dword [edx + eax]
je 0x100bd9d9
mov byte [ebp - 0x27a], 1
jmp 0x100bd9ef
mov ecx, dword [0x10109b44]
mov eax, dword [ecx]
mov eax, dword [eax + 0x34]
call eax
test eax, eax
setne byte [ebp - 0x27a]
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x24]
call eax
cmp byte [0x100e9d3c], 0
mov dl, al
mov dh, byte [ebp - 0x27a]
mov byte [ebp - 0x279], dl
je 0x100bda37
test dh, dh
je 0x100bda37
test dl, dl
jne 0x100bda4a
mov eax, dword [0x10109cdc]
add eax, 0xffffffb6
xor eax, 0x8ca775a1
mov byte [eax + esi], 1
mov eax, dword [ebp - 0x29c]
mov byte [eax + 0x1010c9b7], 1
jmp 0x100bda5d
test dl, dl
jne 0x100bda4a
mov eax, dword [ebp - 0x29c]
mov byte [eax + 0x1010c9b7], 1
jmp 0x100bda5d
mov eax, dword [ebp - 0x29c]
cmp byte [eax + 0x1010c9b7], 0
je 0x100bfe6f
movss xmm0, dword [eax*4 + 0x1010c9f4]
lea ecx, [eax*4 + 0x1010c9f4]
test dl, dl
je 0x100bda78
subss xmm0, dword [ebp - 0x1c]
jmp 0x100bda7d
addss xmm0, dword [ebp - 0x1c]
movss dword [ecx], xmm0
test dh, dh
je 0x100bda92
cmp byte [0x100e7dd8], 0
je 0x100bda92
mov dh, 1
jmp 0x100bda94
xor dh, dh
comiss xmm0, dword [0x100d6db8]
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x3f800000
xorps xmm0, xmm0
cmovbe eax, ecx
movss xmm1, dword [eax]
maxss xmm1, xmm0
ucomiss xmm1, xmm0
movss dword [ecx], xmm1
lahf
test ah, 0x44
jp 0x100bdac8
test dh, dh
je 0x100bfe6f
mov ecx, dword [0x10109cb8]
mov eax, dword [0x10109acc]
add ecx, 0xffffffbf
xor ecx, 0x8ca77598
movss xmm2, dword [eax + 0x10]
subss xmm2, dword [ecx + esi]
test dl, dl
je 0x100bdaf7
comiss xmm2, dword [0x100d6e58]
ja 0x100bfe6f
cmp byte [ebp - 0x27a], 0
movaps xmm0, xmm1
mulss xmm1, dword [0x100d6f1c]
mulss xmm0, dword [0x100d6f34]
cvttss2si eax, xmm1
cvttss2si ecx, xmm0
mov dword [ebp - 0x284], eax
mov eax, dword [0x100e7d64]
cmovne eax, dword [0x100e7cd4]
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2d8], ecx
test dl, dl
je 0x100bdbba
test dh, dh
je 0x100bdbba
movss xmm0, dword [0x100d6e40]
mov ecx, 0x70
comiss xmm2, xmm0
mov dword [ebp - 0x2d8], ecx
mov dword [ebp - 0x284], 0x50
jbe 0x100bdba4
subss xmm2, xmm0
movss xmm0, dword [0x100d6ef0]
movaps xmm1, xmm2
mulss xmm2, dword [0x100d6e68]
mulss xmm1, dword [0x100d6e7c]
subss xmm0, xmm1
cvttss2si ecx, xmm0
movss xmm0, dword [0x100d6ecc]
subss xmm0, xmm2
mov dword [ebp - 0x2d8], ecx
cvttss2si eax, xmm0
mov dword [ebp - 0x284], eax
mov dword [ebp - 0x2a4], 0xff707070
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x2a8], eax
mov byte [ebp - 0x2a5], cl
lea edx, [ebp - 0x278]
mov ecx, dword [0x10109a70]
push edx
push dword [ebp - 0x29c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
test al, al
je 0x100bfe6f
push dword [ebp - 0x2d8]
push esi
call fcn.100bd420
mov dword [ebp - 0x70], 0
mov ecx, esi
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
mov eax, dword [esi]
mov eax, dword [eax + 0x28]
call eax
lea ecx, [ebp - 0x40]
push ecx
lea ecx, [ebp - 0x70]
movss xmm0, dword [eax]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [eax + 4]
mov eax, dword [0x10109bac]
push ecx
mov ecx, esi
movss dword [ebp - 0x18], xmm0
call eax
movss xmm0, dword [ebp - 0x38]
lea edx, [ebp - 0x2e0]
addss xmm0, dword [0x100d6e50]
movss xmm2, dword [ebp - 0x1c]
lea ecx, [ebp - 0x70]
movss xmm1, dword [ebp - 0x18]
movss dword [ebp - 0x70], xmm2
movss dword [ebp - 0x6c], xmm1
movss dword [ebp - 0x40], xmm2
movss dword [ebp - 0x3c], xmm1
movss dword [ebp - 0x38], xmm0
call fcn.100b49b0
test al, al
je 0x100bfe6f
lea edx, [ebp - 0x2f8]
lea ecx, [ebp - 0x40]
call fcn.100b49b0
test al, al
je 0x100bfe6f
cmp byte [ebp - 0x27a], 0
movss xmm4, dword [ebp - 0x2dc]
movaps xmm0, xmm4
subss xmm0, dword [ebp - 0x2f4]
cvttss2si eax, xmm0
mov dword [ebp - 0x2b4], eax
movd xmm3, eax
cvtdq2ps xmm3, xmm3
movaps xmm0, xmm3
subss xmm4, xmm3
mulss xmm0, dword [0x100d6d80]
cvttss2si eax, xmm0
mov dword [ebp - 0x2ac], eax
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movaps xmm1, xmm0
movss dword [ebp - 0x1c], xmm0
mulss xmm1, dword [0x100d6d80]
movss xmm0, dword [ebp - 0x2e0]
subss xmm0, xmm1
cvttss2si eax, xmm0
mov dword [ebp - 0x2a0], eax
cvttss2si eax, xmm4
mov dword [ebp - 0x298], eax
je 0x100bdd3b
push 0
push dword [0x100e86e0]
push dword [0x100e86dc]
call fcn.100c7370
cmp eax, dword [0x100e86e0]
jne 0x100bdd69
jmp 0x100bdd7e
push dword [0x100e86e0]
lea edx, [ebp - 0x18]
mov dword [ebp - 0x18], 1
push dword [0x100e86dc]
lea ecx, [ebp - 0x2b0]
call fcn.1002aa70
mov ecx, dword [0x100e86e0]
add esp, 8
cmp dword [eax], ecx
je 0x100bddd6
push dword [ebp - 0x2d8]
push esi
call fcn.100c09f0
cmp byte [ebp - 0x27a], 0
je 0x100bddd6
push 0
push dword [0x100e7c40]
push dword [0x100e7c3c]
call fcn.100c7370
cmp eax, dword [0x100e7c40]
jne 0x100bde04
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x284], eax
cmp byte [ebp - 0x27a], 0
je 0x100bdf07
push 0
push dword [0x100e7fa8]
push dword [0x100e7fa4]
call fcn.100c7370
cmp eax, dword [0x100e7fa8]
jne 0x100bdf39
jmp 0x100bdfe7
push dword [0x100e7c40]
lea edx, [ebp - 0x18]
mov dword [ebp - 0x18], 1
push dword [0x100e7c3c]
lea ecx, [ebp - 0x2b0]
call fcn.1002aa70
mov ecx, dword [0x100e7c40]
add esp, 8
cmp dword [eax], ecx
je 0x100bdd99
mov ecx, dword [0x10109a7c]
mov eax, dword [ebp - 0x284]
push dword [ebp - 0x2a8]
mov byte [ebp - 0x27d], al
mov eax, dword [ecx]
mov word [ebp - 0x280], 0xa0a
mov byte [ebp - 0x27e], 0xa
mov eax, dword [eax + 0x38]
call eax
mov ecx, dword [0x10109a7c]
mov esi, dword [ebp - 0x298]
mov edi, dword [ebp - 0x2a0]
mov eax, dword [ecx]
mov edx, dword [eax + 0x48]
mov eax, dword [ebp - 0x2b4]
add eax, esi
push eax
mov eax, dword [ebp - 0x2ac]
add eax, edi
push eax
push esi
push edi
call edx
mov ecx, dword [0x10109a7c]
mov esi, dword [ebp - 0x280]
push esi
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
mov ecx, dword [0x10109a7c]
inc edi
mov esi, dword [ebp - 0x2b4]
inc esi
mov eax, dword [ecx]
mov edx, dword [eax + 0x48]
mov eax, dword [ebp - 0x298]
add eax, esi
push eax
mov eax, dword [ebp - 0x2ac]
add eax, edi
mov edi, dword [ebp - 0x2a0]
push eax
mov eax, dword [ebp - 0x298]
dec eax
push eax
lea eax, [edi - 1]
push eax
call edx
mov ecx, dword [0x10109a7c]
mov esi, dword [ebp - 0x280]
push esi
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
mov ecx, dword [0x10109a7c]
mov esi, dword [ebp - 0x2b4]
dec esi
mov eax, dword [ecx]
mov edx, dword [eax + 0x48]
mov eax, dword [ebp - 0x298]
add eax, esi
lea esi, [edi + 1]
push eax
mov eax, dword [ebp - 0x2ac]
add eax, 0xfffffffe
add eax, esi
push eax
mov eax, dword [ebp - 0x298]
inc eax
push eax
push esi
call edx
mov edi, dword [ebp - 0x2e4]
mov esi, dword [ebp - 0x288]
jmp 0x100bdda5
push dword [0x100e7fa8]
lea edx, [ebp - 0x18]
mov dword [ebp - 0x18], 1
push dword [0x100e7fa4]
lea ecx, [ebp - 0x2b0]
call fcn.1002aa70
mov ecx, dword [0x100e7fa8]
add esp, 8
cmp dword [eax], ecx
je 0x100be007
lea eax, [ebp - 0x268]
push eax
lea ecx, [ebp - 0x4c]
call fcn.1002a550
push 0x18
push 0
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 0
push ecx
mov ecx, eax
call fcn.10043650
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 2
call fcn.1002a500
cmp byte [ebp - 0x279], 0
mov eax, dword [0x100e803c]
mov dword [ebp - 0x280], eax
je 0x100bdf8e
mov word [ebp - 0x280], 0x8282
mov byte [ebp - 0x27e], 0x82
mov eax, dword [ebp - 0x284]
mov ecx, 0x1010c5c4
mov byte [ebp - 0x27d], al
lea eax, [ebp - 0x64]
push 2
push eax
push dword [ebp - 0x280]
mov eax, dword [ebp - 0x298]
sub eax, dword [0x1010c5cc]
push eax
mov eax, dword [ebp - 0x2ac]
cdq
sub eax, edx
sar eax, 1
add eax, dword [ebp - 0x2a0]
push eax
call fcn.100b5960
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 0xffffffff
call fcn.1002a500
cmp byte [ebp - 0x27a], 0
je 0x100be007
push 0
push dword [0x100e80e0]
push dword [0x100e80dc]
call fcn.100c7370
cmp eax, dword [0x100e80e0]
jne 0x100be039
jmp 0x100be229
push dword [0x100e80e0]
lea edx, [ebp - 0x18]
mov dword [ebp - 0x18], 1
push dword [0x100e80dc]
lea ecx, [ebp - 0x2b0]
call fcn.1002aa70
mov ecx, dword [0x100e80e0]
add esp, 8
cmp dword [eax], ecx
je 0x100be229
mov eax, dword [ebp - 0x2b4]
mov ecx, 0x64
add eax, 0xfffffffe
mov dword [ebp - 0x280], eax
mov eax, dword [0x10109c90]
add eax, 0xffffffc9
xor eax, 0x8ca7758e
add eax, esi
mov esi, ecx
cmp dword [eax], ecx
cmovl esi, dword [eax]
mov eax, 0x51eb851f
sub ecx, esi
mov dword [ebp - 0x29c], esi
imul ecx, ecx, 0x1fe
imul ecx
mov ecx, 0xff
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, ecx
cmovg eax, ecx
imul ecx, esi, 0x1fe
mov dword [ebp - 0x2a8], eax
mov eax, 0x51eb851f
imul ecx
mov ecx, 0xff
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 0xff
push ecx
cmovg eax, ecx
mov dword [ebp - 0x2d4], eax
mov eax, esi
imul eax, dword [ebp - 0x280]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x100d6ce0]
movss dword [ebp - 0x18], xmm0
fld dword [ebp - 0x18]
fstp dword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
mov ecx, dword [ebp - 0x284]
mov eax, esp
mov edx, dword [ebp - 0x298]
fstp dword [ebp - 0x18]
cvttss2si esi, dword [ebp - 0x18]
mov byte [eax + 3], cl
mov ecx, dword [ebp - 0x2a0]
lea edx, [edx - 1]
mov word [eax], 0xa0a
mov byte [eax + 2], 0xa
mov eax, dword [ebp - 0x280]
add eax, 4
lea ecx, [ecx - 6]
push eax
push 4
call fcn.100b5530
mov eax, dword [ebp - 0x280]
lea ecx, [esi + 2]
mov edx, dword [ebp - 0x298]
add esp, 0xc
sub eax, esi
mov esi, dword [ebp - 0x2a0]
add edx, eax
mov dword [ebp - 0x280], eax
add esi, 0xfffffffb
mov dword [ebp - 0x18], edx
cmp byte [ebp - 0x279], 0
push ecx
mov eax, esp
push ecx
push 2
mov ecx, esi
je 0x100be1a9
mov edx, dword [ebp - 0x2d8]
mov byte [eax + 3], dl
mov edx, dword [ebp - 0x18]
mov word [eax], 0x826e
mov byte [eax + 2], 0x6e
call fcn.100b54f0
mov edx, dword [ebp - 0x29c]
add esp, 0xc
cmp edx, 0x5a
jge 0x100be229
lea ecx, [ebp - 0x64]
call fcn.10033d20
push 2
push eax
push ecx
mov eax, esp
mov dword [ebp - 4], 3
mov word [eax], 0x8282
mov byte [eax + 2], 0x82
jmp 0x100be1fb
mov edx, dword [ebp - 0x2a8]
mov byte [eax], dl
mov edx, dword [ebp - 0x2d4]
mov byte [eax + 1], dl
mov edx, dword [ebp - 0x2d8]
mov byte [eax + 3], dl
mov edx, dword [ebp - 0x18]
mov byte [eax + 2], 0
call fcn.100b54f0
mov edx, dword [ebp - 0x29c]
add esp, 0xc
cmp edx, 0x5a
jge 0x100be229
lea ecx, [ebp - 0x64]
call fcn.10033d20
push 2
push eax
push ecx
mov eax, esp
mov dword [ebp - 4], 4
mov word [eax], 0xffff
mov byte [eax + 2], 0xff
mov ecx, dword [ebp - 0x284]
mov byte [eax + 3], cl
mov ecx, dword [ebp - 0x298]
mov eax, dword [ebp - 0x280]
add ecx, 0xfffffffc
add eax, ecx
mov ecx, 0x1010c5b8
push eax
push esi
call fcn.100b5960
lea ecx, [ebp - 0x64]
call fcn.1002a500
xorps xmm0, xmm0
mov dword [ebp - 0x38], 0
movq qword [ebp - 0x40], xmm0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
cmp byte [ebp - 0x27a], 0
mov dword [ebp - 4], 5
movq qword [ebp - 0x58], xmm0
mov dword [ebp - 0x50], 0
je 0x100be286
push 0x100e8184
lea ecx, [ebp - 0x3ac]
call fcn.10029aa0
lea ecx, [ebp - 0x3ac]
mov edx, 0x41
jmp 0x100be2a1
push 0x100e822c
lea ecx, [ebp - 0x3a0]
call fcn.10029aa0
lea ecx, [ebp - 0x3a0]
mov edx, 0x82
mov esi, dword [ecx + 4]
mov eax, dword [ecx + 8]
mov dword [ebp - 0x18], esi
mov esi, dword [ecx]
mov dword [ecx + 8], 0
mov dword [ecx + 4], 0
mov dword [ecx], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x50], eax
mov dword [ebp - 4], 7
test dl, 2
je 0x100be2f2
and edx, 0xfffffffd
lea ecx, [ebp - 0x3a0]
mov dword [ebp - 0x29c], edx
call fcn.10029bd0
mov edx, dword [ebp - 0x29c]
mov byte [ebp - 4], 8
test dl, 1
je 0x100be306
lea ecx, [ebp - 0x3ac]
call fcn.10029bd0
cmp esi, dword [ebp - 0x18]
je 0x100bf125
nop
cmp dword [esi], 0
jne 0x100be4fb
mov eax, dword [0x10109c94]
lea ecx, [ebp - 0x34]
add eax, 0xffffffc8
xor eax, 0x8ca7758f
add eax, dword [ebp - 0x288]
cmp byte [ebp - 0x279], 0
push eax
je 0x100be3eb
lea edx, [ebp - 0x2a4]
mov dword [ebp - 0x2a4], 0x692524
call fcn.10038140
add esp, 4
mov ecx, dword [ebp - 0x284]
mov byte [ebp - 0x27d], cl
lea ecx, [ebp - 0x2d0]
push eax
mov byte [ebp - 4], 9
mov word [ebp - 0x280], 0x8282
mov byte [ebp - 0x27e], 0x82
call fcn.1002e0a0
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x2b8], eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x3c]
cmp ecx, dword [ebp - 0x38]
je 0x100be3cc
movups xmm0, xmmword [ebp - 0x2d0]
mov edx, 0xf
mov byte [ebp - 0x2d0], 0
movups xmmword [ecx], xmm0
movq xmm0, qword [ebp - 0x2c0]
movq qword [ecx + 0x10], xmm0
mov dword [ecx + 0x18], eax
add dword [ebp - 0x3c], 0x1c
mov byte [ebp - 4], 9
jmp 0x100be48d
lea eax, [ebp - 0x2d0]
push eax
push ecx
lea ecx, [ebp - 0x40]
call fcn.1009acc0
mov edx, dword [ebp - 0x2bc]
mov byte [ebp - 4], 9
jmp 0x100be48d
lea edx, [ebp - 0x31c]
mov dword [ebp - 0x31c], 0x692524
call fcn.10038140
add esp, 4
mov ecx, dword [ebp - 0x284]
mov byte [ebp - 0x31d], cl
lea ecx, [ebp - 0x2d0]
push eax
mov byte [ebp - 4], 0xb
mov word [ebp - 0x320], 0xc896
mov byte [ebp - 0x31e], 0x3c
call fcn.1002e0a0
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0x2b8], eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x3c]
cmp ecx, dword [ebp - 0x38]
je 0x100be473
movups xmm0, xmmword [ebp - 0x2d0]
mov edx, 0xf
mov byte [ebp - 0x2d0], 0
movups xmmword [ecx], xmm0
movq xmm0, qword [ebp - 0x2c0]
movq qword [ecx + 0x10], xmm0
mov dword [ecx + 0x18], eax
add dword [ebp - 0x3c], 0x1c
jmp 0x100be489
lea eax, [ebp - 0x2d0]
push eax
push ecx
lea ecx, [ebp - 0x40]
call fcn.1009acc0
mov edx, dword [ebp - 0x2bc]
mov byte [ebp - 4], 0xb
cmp edx, 0xf
jbe 0x100be4c3
lea ecx, [edx + 1]
mov edx, dword [ebp - 0x2d0]
mov eax, edx
cmp ecx, 0x1000
jb 0x100be4b9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100bf21a
push ecx
push edx
call fcn.100c7927
add esp, 8
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x100be4fb
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100be4f1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100bf21a
push ecx
push edx
call fcn.100c7927
add esp, 8
cmp dword [esi], 1
mov ecx, dword [ebp - 0x288]
jne 0x100be7c3
mov eax, dword [0x10109cc8]
add eax, 0xffffffbb
xor eax, 0x8ca7759c
cmp byte [eax + ecx], 0
mov eax, dword [0x10109ce4]
je 0x100be6c9
add eax, 0xffffffb4
xor eax, 0x8ca775a3
cmp dword [eax + ecx], 0
lea ecx, [ebp - 0x34]
jle 0x100be608
cmp byte [ebp - 0x279], 0
je 0x100be5ac
lea eax, [ebp - 0x38c]
mov dword [ebp - 0x38c], 0x44414548
push eax
mov dword [ebp - 0x388], 0x444f422d
mov word [ebp - 0x384], 0x59
call fcn.1002a550
mov eax, dword [ebp - 0x284]
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 0xd
mov byte [ebp - 0x321], al
lea eax, [ebp - 0x324]
push eax
lea eax, [ebp - 0x34]
mov word [ebp - 0x324], 0x8282
push eax
mov byte [ebp - 0x322], 0x82
call fcn.100c1e10
mov byte [ebp - 4], 0xe
jmp 0x100be797
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], 0x44414548
push eax
mov dword [ebp - 0x6c], 0x444f422d
mov word [ebp - 0x68], 0x59
call fcn.1002a550
mov eax, dword [ebp - 0x284]
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 0xf
mov byte [ebp - 0x325], al
lea eax, [ebp - 0x328]
push eax
lea eax, [ebp - 0x34]
mov word [ebp - 0x328], 0xffff
push eax
mov byte [ebp - 0x326], 0xff
call fcn.100c1e10
mov byte [ebp - 4], 0x10
jmp 0x100be797
cmp byte [ebp - 0x279], 0
je 0x100be66d
lea eax, [ebp - 0x350]
mov dword [ebp - 0x350], 0x44414548
push eax
mov byte [ebp - 0x34c], 0
call fcn.1002a550
mov eax, dword [ebp - 0x284]
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 0x11
mov byte [ebp - 0x329], al
lea eax, [ebp - 0x32c]
push eax
lea eax, [ebp - 0x34]
mov word [ebp - 0x32c], 0x8282
push eax
mov byte [ebp - 0x32a], 0x82
call fcn.100c1e10
mov byte [ebp - 4], 0x12
jmp 0x100be797
lea eax, [ebp - 0x358]
mov dword [ebp - 0x358], 0x44414548
push eax
mov byte [ebp - 0x354], 0
call fcn.1002a550
mov eax, dword [ebp - 0x284]
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 0x13
mov byte [ebp - 0x345], al
lea eax, [ebp - 0x348]
push eax
lea eax, [ebp - 0x34]
mov word [ebp - 0x348], 0xffff
push eax
mov byte [ebp - 0x346], 0xff
call fcn.100c1e10
mov byte [ebp - 4], 0x14
jmp 0x100be797
add eax, 0xffffffb4
xor eax, 0x8ca775a3
cmp dword [eax + ecx], 0
jle 0x100be7c3
cmp byte [ebp - 0x279], 0
lea ecx, [ebp - 0x34]
je 0x100be740
lea eax, [ebp - 0x360]
mov dword [ebp - 0x360], 0x59444f42
push eax
mov byte [ebp - 0x35c], 0
call fcn.1002a550
mov eax, dword [ebp - 0x284]
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 0x15
mov byte [ebp - 0x341], al
lea eax, [ebp - 0x344]
push eax
lea eax, [ebp - 0x34]
mov word [ebp - 0x344], 0x8282
push eax
mov byte [ebp - 0x342], 0x82
call fcn.100c1e10
mov byte [ebp - 4], 0x16
jmp 0x100be797
lea eax, [ebp - 0x370]
mov dword [ebp - 0x370], 0x59444f42
push eax
mov byte [ebp - 0x36c], 0
call fcn.1002a550
mov eax, dword [ebp - 0x284]
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 0x17
mov byte [ebp - 0x33d], al
lea eax, [ebp - 0x340]
push eax
lea eax, [ebp - 0x34]
mov word [ebp - 0x340], 0xffff
push eax
mov byte [ebp - 0x33e], 0xff
call fcn.100c1e10
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x2d0]
push eax
lea ecx, [ebp - 0x40]
call fcn.100c1590
lea ecx, [ebp - 0x2d0]
call fcn.1002a500
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 8
call fcn.1002a500
mov ecx, dword [ebp - 0x288]
cmp dword [esi], 2
jne 0x100bea14
mov eax, dword [0x10109cd4]
add eax, 0xffffffb8
xor eax, 0x8ca7759f
cmp byte [eax + ecx], 0
je 0x100bea14
cmp byte [ebp - 0x279], 0
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
movups xmmword [ebp - 0x34], xmm0
je 0x100be8da
lea ecx, [ebp - 0x310]
mov dword [ebp - 0x310], 0x504f4353
mov word [ebp - 0x30c], 0x4445
lea edx, [ecx + 1]
mov byte [ebp - 0x30a], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100be828
sub ecx, edx
lea eax, [ebp - 0x310]
push ecx
push eax
lea ecx, [ebp - 0x34]
call fcn.1002ac50
mov eax, dword [ebp - 0x284]
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 0x335], al
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 0x19
mov word [ebp - 0x338], 0x8282
mov byte [ebp - 0x336], 0x82
call fcn.1002e0a0
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x2b8], eax
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x3c]
cmp ecx, dword [ebp - 0x38]
je 0x100be8bb
movups xmm0, xmmword [ebp - 0x2d0]
mov edx, 0xf
mov byte [ebp - 0x2d0], 0
movups xmmword [ecx], xmm0
movq xmm0, qword [ebp - 0x2c0]
movq qword [ecx + 0x10], xmm0
mov dword [ecx + 0x18], eax
add dword [ebp - 0x3c], 0x1c
mov byte [ebp - 4], 0x19
jmp 0x100be9a6
lea eax, [ebp - 0x2d0]
push eax
push ecx
lea ecx, [ebp - 0x40]
call fcn.1009acc0
mov edx, dword [ebp - 0x2bc]
mov byte [ebp - 4], 0x19
jmp 0x100be9a6
lea ecx, [ebp - 0x318]
mov dword [ebp - 0x318], 0x504f4353
mov word [ebp - 0x314], 0x4445
lea edx, [ecx + 1]
mov byte [ebp - 0x312], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100be900
sub ecx, edx
lea eax, [ebp - 0x318]
push ecx
push eax
lea ecx, [ebp - 0x34]
call fcn.1002ac50
mov eax, dword [ebp - 0x284]
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 0x331], al
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 0x1b
mov word [ebp - 0x334], 0xb43c
mov byte [ebp - 0x332], 0xe1
call fcn.1002e0a0
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x2b8], eax
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x3c]
cmp ecx, dword [ebp - 0x38]
je 0x100be98c
movups xmm0, xmmword [ebp - 0x2d0]
mov edx, 0xf
mov byte [ebp - 0x2d0], 0
movups xmmword [ecx], xmm0
movq xmm0, qword [ebp - 0x2c0]
movq qword [ecx + 0x10], xmm0
mov dword [ecx + 0x18], eax
add dword [ebp - 0x3c], 0x1c
jmp 0x100be9a2
lea eax, [ebp - 0x2d0]
push eax
push ecx
lea ecx, [ebp - 0x40]
call fcn.1009acc0
mov edx, dword [ebp - 0x2bc]
mov byte [ebp - 4], 0x1b
cmp edx, 0xf
jbe 0x100be9dc
lea ecx, [edx + 1]
mov edx, dword [ebp - 0x2d0]
mov eax, edx
cmp ecx, 0x1000
jb 0x100be9d2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100bf21a
push ecx
push edx
call fcn.100c7927
add esp, 8
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x100bea14
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100bea0a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100bf21a
push ecx
push edx
call fcn.100c7927
add esp, 8
cmp dword [esi], 3
xorps xmm1, xmm1
mov ecx, dword [ebp - 0x288]
jne 0x100bec6d
mov eax, dword [0x10109cf0]
add eax, 0xffffffb1
xor eax, 0x8ca775a6
movss xmm0, dword [eax + ecx]
comiss xmm0, xmm1
jbe 0x100bec6d
cmp byte [ebp - 0x279], 0
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
movups xmmword [ebp - 0x34], xmm0
je 0x100beb32
lea ecx, [ebp - 0x2f8]
mov dword [ebp - 0x2f8], 0x53414c46
mov dword [ebp - 0x2f4], 0x444548
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100bea80
sub ecx, edx
lea eax, [ebp - 0x2f8]
push ecx
push eax
lea ecx, [ebp - 0x34]
call fcn.1002ac50
mov eax, dword [ebp - 0x284]
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 0x32d], al
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 0x1d
mov word [ebp - 0x330], 0x8282
mov byte [ebp - 0x32e], 0x82
call fcn.1002e0a0
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x2b8], eax
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x3c]
cmp ecx, dword [ebp - 0x38]
je 0x100beb13
movups xmm0, xmmword [ebp - 0x2d0]
mov edx, 0xf
mov byte [ebp - 0x2d0], 0
movups xmmword [ecx], xmm0
movq xmm0, qword [ebp - 0x2c0]
movq qword [ecx + 0x10], xmm0
mov dword [ecx + 0x18], eax
add dword [ebp - 0x3c], 0x1c
mov byte [ebp - 4], 0x1d
jmp 0x100bebf6
lea eax, [ebp - 0x2d0]
push eax
push ecx
lea ecx, [ebp - 0x40]
call fcn.1009acc0
mov edx, dword [ebp - 0x2bc]
mov byte [ebp - 4], 0x1d
jmp 0x100bebf6
lea ecx, [ebp - 0x2e0]
mov dword [ebp - 0x2e0], 0x53414c46
mov dword [ebp - 0x2dc], 0x444548
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100beb50
sub ecx, edx
lea eax, [ebp - 0x2e0]
push ecx
push eax
lea ecx, [ebp - 0x34]
call fcn.1002ac50
mov eax, dword [ebp - 0x284]
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 0x339], al
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 0x1f
mov word [ebp - 0x33c], 0xb43c
mov byte [ebp - 0x33a], 0xe1
call fcn.1002e0a0
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x2b8], eax
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x3c]
cmp ecx, dword [ebp - 0x38]
je 0x100bebdc
movups xmm0, xmmword [ebp - 0x2d0]
mov edx, 0xf
mov byte [ebp - 0x2d0], 0
movups xmmword [ecx], xmm0
movq xmm0, qword [ebp - 0x2c0]
movq qword [ecx + 0x10], xmm0
mov dword [ecx + 0x18], eax
add dword [ebp - 0x3c], 0x1c
jmp 0x100bebf2
lea eax, [ebp - 0x2d0]
push eax
push ecx
lea ecx, [ebp - 0x40]
call fcn.1009acc0
mov edx, dword [ebp - 0x2bc]
mov byte [ebp - 4], 0x1f
cmp edx, 0xf
jbe 0x100bec2c
lea ecx, [edx + 1]
mov edx, dword [ebp - 0x2d0]
mov eax, edx
cmp ecx, 0x1000
jb 0x100bec22
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100bf21a
push ecx
push edx
call fcn.100c7927
add esp, 8
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x100bec64
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100bec5a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100bf21a
push ecx
push edx
call fcn.100c7927
add esp, 8
mov ecx, dword [ebp - 0x288]
xorps xmm1, xmm1
cmp dword [esi], 4
jne 0x100bedcf
mov eax, dword [0x10109bf0]
mov edx, dword [ecx + eax]
movss xmm0, dword [edx + 0x58]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x100bedcf
mov eax, dword [edx + 0x50]
mov dword [ebp - 0x2b0], eax
mov eax, dword [0x10109bb0]
mov dword [ebp - 0x294], eax
mov eax, dword [0x10109c08]
cmp dword [ecx + eax], 0
jne 0x100becc1
mov eax, dword [0x10109b8c]
call eax
mov eax, dword [0x10109c08]
mov ecx, dword [ebp - 0x288]
mov edx, dword [ebp - 0x2b0]
mov ecx, dword [ecx + eax]
call dword [ebp - 0x294]
cmp eax, 0x3c7
jne 0x100bedcf
cmp byte [ebp - 0x279], 0
lea ecx, [ebp - 0x34]
je 0x100bed49
lea eax, [ebp - 0x380]
mov dword [ebp - 0x380], 0x4f4c4552
push eax
mov word [ebp - 0x37c], 0x4441
mov byte [ebp - 0x37a], 0
call fcn.1002a550
mov eax, dword [ebp - 0x284]
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 0x21
mov byte [ebp - 0x2ed], al
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x34]
mov word [ebp - 0x2f0], 0x8282
push eax
mov byte [ebp - 0x2ee], 0x82
call fcn.100c1e10
mov byte [ebp - 4], 0x22
jmp 0x100beda9
lea eax, [ebp - 0x378]
mov dword [ebp - 0x378], 0x4f4c4552
push eax
mov word [ebp - 0x374], 0x4441
mov byte [ebp - 0x372], 0
call fcn.1002a550
mov eax, dword [ebp - 0x284]
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 0x23
mov byte [ebp - 0x2e9], al
lea eax, [ebp - 0x2ec]
push eax
lea eax, [ebp - 0x34]
mov word [ebp - 0x2ec], 0xb43c
push eax
mov byte [ebp - 0x2ea], 0xe1
call fcn.100c1e10
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0x2d0]
push eax
lea ecx, [ebp - 0x40]
call fcn.100c1590
lea ecx, [ebp - 0x2d0]
call fcn.1002a500
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 8
call fcn.1002a500
cmp dword [esi], 5
jne 0x100bf014
mov eax, dword [0x10109bbc]
mov ecx, dword [ebp - 0x288]
call eax
test al, al
je 0x100bf014
cmp byte [ebp - 0x279], 0
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
movups xmmword [ebp - 0x34], xmm0
je 0x100beee2
lea ecx, [ebp - 0x300]
mov dword [ebp - 0x300], 0x424d4f42
mov byte [ebp - 0x2fc], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100bee30
sub ecx, edx
lea eax, [ebp - 0x300]
push ecx
push eax
lea ecx, [ebp - 0x34]
call fcn.1002ac50
mov eax, dword [ebp - 0x284]
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 0x2e5], al
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 0x25
mov word [ebp - 0x2e8], 0x8282
mov byte [ebp - 0x2e6], 0x82
call fcn.1002e0a0
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x2b8], eax
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x3c]
cmp ecx, dword [ebp - 0x38]
je 0x100beec3
movups xmm0, xmmword [ebp - 0x2d0]
mov edx, 0xf
mov byte [ebp - 0x2d0], 0
movups xmmword [ecx], xmm0
movq xmm0, qword [ebp - 0x2c0]
movq qword [ecx + 0x10], xmm0
mov dword [ecx + 0x18], eax
add dword [ebp - 0x3c], 0x1c
mov byte [ebp - 4], 0x25
jmp 0x100befa6
lea eax, [ebp - 0x2d0]
push eax
push ecx
lea ecx, [ebp - 0x40]
call fcn.1009acc0
mov edx, dword [ebp - 0x2bc]
mov byte [ebp - 4], 0x25
jmp 0x100befa6
lea ecx, [ebp - 0x308]
mov dword [ebp - 0x308], 0x424d4f42
mov byte [ebp - 0x304], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100bef00
sub ecx, edx
lea eax, [ebp - 0x308]
push ecx
push eax
lea ecx, [ebp - 0x34]
call fcn.1002ac50
mov eax, dword [ebp - 0x284]
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 0x2d1], al
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 0x27
mov word [ebp - 0x2d4], 0xff
mov byte [ebp - 0x2d2], 0
call fcn.1002e0a0
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x2b8], eax
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x3c]
cmp ecx, dword [ebp - 0x38]
je 0x100bef8c
movups xmm0, xmmword [ebp - 0x2d0]
mov edx, 0xf
mov byte [ebp - 0x2d0], 0
movups xmmword [ecx], xmm0
movq xmm0, qword [ebp - 0x2c0]
movq qword [ecx + 0x10], xmm0
mov dword [ecx + 0x18], eax
add dword [ebp - 0x3c], 0x1c
jmp 0x100befa2
lea eax, [ebp - 0x2d0]
push eax
push ecx
lea ecx, [ebp - 0x40]
call fcn.1009acc0
mov edx, dword [ebp - 0x2bc]
mov byte [ebp - 4], 0x27
cmp edx, 0xf
jbe 0x100befdc
lea ecx, [edx + 1]
mov edx, dword [ebp - 0x2d0]
mov eax, edx
cmp ecx, 0x1000
jb 0x100befd2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100bf21a
push ecx
push edx
call fcn.100c7927
add esp, 8
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x100bf014
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100bf00a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100bf21a
push ecx
push edx
call fcn.100c7927
add esp, 8
cmp dword [esi], 6
jne 0x100bf119
cmp byte [0x1010ed01], 0
je 0x100bf119
cmp byte [ebp - 0x27a], 0
je 0x100bf119
cmp byte [ebp - 0x279], 0
lea ecx, [ebp - 0x34]
je 0x100bf09c
lea eax, [ebp - 0x368]
mov dword [ebp - 0x368], 0x454b4146
push eax
mov byte [ebp - 0x364], 0
call fcn.1002a550
mov eax, dword [ebp - 0x284]
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 0x29
mov byte [ebp - 0x2a5], al
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x34]
mov word [ebp - 0x2a8], 0x8282
push eax
mov byte [ebp - 0x2a6], 0x82
call fcn.100c1e10
mov byte [ebp - 4], 0x2a
jmp 0x100bf0f3
lea eax, [ebp - 0x290]
mov dword [ebp - 0x290], 0x454b4146
push eax
mov byte [ebp - 0x28c], 0
call fcn.1002a550
mov eax, dword [ebp - 0x284]
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 0x2b
mov byte [ebp - 0x299], al
lea eax, [ebp - 0x29c]
push eax
lea eax, [ebp - 0x34]
mov word [ebp - 0x29c], 0xffff
push eax
mov byte [ebp - 0x29a], 0xff
call fcn.100c1e10
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0x2d0]
push eax
lea ecx, [ebp - 0x40]
call fcn.100c1590
lea ecx, [ebp - 0x2d0]
call fcn.1002a500
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 8
call fcn.1002a500
add esi, 4
cmp esi, dword [ebp - 0x18]
jne 0x100be310
mov ecx, dword [ebp - 0x3c]
mov eax, 0x92492493
sub ecx, dword [ebp - 0x40]
xor esi, esi
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x100bf1b7
mov edx, dword [ebp - 0x2a0]
mov edi, dword [ebp - 0x40]
add edx, 2
add edx, dword [ebp - 0x2ac]
xor eax, eax
mov dword [ebp - 0x294], edx
mov dword [ebp - 0x18], eax
nop
lea ecx, [eax + edi]
mov eax, dword [0x1010c5c0]
dec eax
push 0
imul eax, esi
push ecx
push dword [ecx + 0x18]
mov ecx, 0x1010c5b8
add eax, dword [ebp - 0x298]
push eax
push edx
call fcn.100b5960
mov ecx, dword [ebp - 0x3c]
mov eax, 0x92492493
mov edi, dword [ebp - 0x40]
inc esi
add dword [ebp - 0x18], 0x1c
sub ecx, edi
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x294]
cmp esi, eax
mov eax, dword [ebp - 0x18]
jb 0x100bf160
mov edi, dword [ebp - 0x2e4]
lea ecx, [ebp - 0x58]
call fcn.10029bd0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x100bf22a
mov edx, dword [ebp - 0x3c]
push ecx
call fcn.1009a8f0
mov ecx, dword [ebp - 0x38]
mov eax, 0x92492493
mov esi, dword [ebp - 0x40]
add esp, 4
sub ecx, esi
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax*8]
sub ecx, eax
mov eax, esi
shl ecx, 2
cmp ecx, 0x1000
jb 0x100bf220
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100bf220
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push esi
call fcn.100c7927
add esp, 8
xor esi, esi
mov dword [ebp - 0x2ec], 0
cmp byte [ebp - 0x27a], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x280], esi
mov dword [ebp - 0x2a8], esi
je 0x100bf42a
cmp byte [0x100e8598], 0
je 0x100bf40a
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x28]
call eax
dec eax
imul esi, eax, 0x48c
add esi, 0x100f4bec
je 0x100bf40a
cmp byte [esi + 0x440], 0
je 0x100bf40a
cmp dword [esi + 0x18], 0
je 0x100bf40a
mov edx, dword [esi + 0x14]
mov ecx, edx
mov eax, dword [esi + 0x10]
and edx, 1
dec eax
shr ecx, 1
and ecx, eax
mov eax, dword [esi + 0xc]
mov eax, dword [eax + ecx*4]
mov eax, dword [eax + edx*8]
test eax, eax
je 0x100bf40a
movss xmm1, dword [eax + 0x3c]
movss xmm0, dword [eax + 0x38]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
call fcn.10021a20
cvtss2sd xmm0, xmm0
comisd xmm0, xmmword [0x100d6dd8]
jbe 0x100bf2ed
cmp byte [eax + 0x3fc], 0
je 0x100bf40a
cmp dword [esi + 0x454], 3
jg 0x100bf40a
movss xmm0, dword [esi + 0x43c]
lea edx, [ebp - 0x2b0]
subss xmm0, dword [eax + 0x404]
lea eax, [ebp - 0x294]
mov dword [ebp - 0x294], 0x3f900000
push eax
lea ecx, [ebp - 0x2e4]
mov dword [ebp - 0x2b0], 0
movss dword [ebp - 0x2e4], xmm0
call fcn.1002aa30
movss xmm1, dword [ebp - 0x1c]
xorps xmm0, xmm0
add esp, 4
mulss xmm1, dword [eax]
mulss xmm1, dword [0x100d6da8]
comiss xmm1, xmm0
movss dword [ebp - 0x1c], xmm1
jbe 0x100bf40a
mov edi, dword [ebp - 0x2a0]
mov edx, dword [ebp - 0x2b4]
mov esi, dword [ebp - 0x298]
add edx, 2
push ecx
mov ecx, dword [ebp - 0x284]
mov eax, esp
push 4
add edx, esi
mov byte [eax + 3], cl
lea ecx, [edi - 1]
mov word [eax], 0xa0a
mov byte [eax + 2], 0xa
mov eax, dword [ebp - 0x2ac]
add eax, 2
push eax
call fcn.100b5530
mov eax, dword [0x100e863c]
add esp, 0xc
cmp byte [ebp - 0x279], 0
mov dword [ebp - 0x280], eax
je 0x100bf3ca
mov word [ebp - 0x280], 0x6482
mov byte [ebp - 0x27e], 0x78
mov eax, dword [ebp - 0x2d8]
mov ecx, edi
mov edx, dword [ebp - 0x2b4]
mov byte [ebp - 0x27d], al
add edx, 3
cvttss2si eax, dword [ebp - 0x1c]
add edx, esi
push dword [ebp - 0x280]
push 2
push eax
call fcn.100b54f0
add esp, 0xc
mov dword [ebp - 0x280], 5
mov dword [ebp - 0x18], 1
push 0
push dword [0x100e82d8]
push dword [0x100e82d4]
call fcn.100c7370
cmp eax, dword [0x100e82d8]
jne 0x100bf454
jmp 0x100bfe6f
push 1
push dword [0x100e82d8]
push dword [0x100e82d4]
call fcn.100c7370
xor ecx, ecx
mov dword [ebp - 0x280], esi
mov dword [ebp - 0x18], ecx
cmp eax, dword [0x100e82d8]
je 0x100bfe6f
mov ecx, dword [0x10109a74]
mov eax, dword [0x10109d24]
mov edi, dword [ebp - 0x288]
add eax, 0xffffffa4
push ecx
mov edx, dword [ecx]
xor eax, 0x8ca775b3
mov esi, dword [edx + 0x10]
mov edx, esp
mov eax, dword [eax + edi]
mov dword [edx], eax
call esi
mov esi, eax
mov dword [ebp - 0x2e8], esi
test esi, esi
je 0x100bfe6f
mov ecx, dword [esi]
mov edx, dword [ecx + 0x6f8]
mov ecx, esi
call edx
test eax, eax
je 0x100bfe6f
mov ecx, dword [eax + 0x14]
xorps xmm1, xmm1
mov eax, dword [0x10109d40]
add eax, 0xffffff9d
mov dword [ebp - 0x2e4], ecx
xor eax, 0x8ca775ba
mov esi, dword [eax + esi]
mov eax, dword [0x10109bf0]
mov dword [ebp - 0x2f0], esi
mov ecx, dword [edi + eax]
mov dword [ebp - 0x1c], ecx
movss xmm0, dword [ecx + 0x58]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x100bf527
mov eax, dword [ecx + 0x50]
mov ecx, dword [0x10109bb0]
mov dword [ebp - 0x2b0], ecx
mov ecx, dword [0x10109c08]
mov dword [ebp - 0x294], eax
cmp dword [edi + ecx], 0
jne 0x100bf511
mov eax, dword [0x10109b8c]
mov ecx, edi
call eax
mov ecx, dword [0x10109c08]
mov eax, dword [ebp - 0x294]
mov ecx, dword [edi + ecx]
mov edx, eax
call dword [ebp - 0x2b0]
cmp eax, 0x3c7
jne 0x100bf527
mov al, 1
jmp 0x100bf529
xor al, al
mov ecx, dword [ebp - 0x2e4]
mov byte [ebp - 0x27a], al
cmp ecx, 0xffffffff
je 0x100bf75a
cmp byte [0x100e83f8], 0
je 0x100bf75a
test al, al
je 0x100bf559
mov eax, dword [ebp - 0x1c]
movss xmm1, dword [eax + 0x64]
jmp 0x100bf56b
movd xmm1, esi
movd xmm0, ecx
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm0, xmm0
divss xmm1, xmm0
mov eax, dword [ebp - 0x2ac]
add eax, 0xfffffffe
push ecx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
movss dword [ebp - 0x294], xmm0
fld dword [ebp - 0x294]
fstp dword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
mov eax, dword [ebp - 0x284]
add esp, 4
mov ecx, dword [0x10109a7c]
mov esi, dword [ebp - 0x2a0]
mov byte [ebp - 0x299], al
dec esi
mov eax, dword [ebp - 0x280]
add eax, dword [ebp - 0x2b4]
add eax, dword [ebp - 0x298]
mov dword [ebp - 0x2d4], eax
mov word [ebp - 0x29c], 0xa0a
mov byte [ebp - 0x29a], 0xa
push dword [ebp - 0x29c]
lea edi, [eax + 2]
mov eax, dword [ecx]
fstp dword [ebp - 0x1c]
mov eax, dword [eax + 0x38]
call eax
mov ecx, dword [0x10109a7c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x40]
lea eax, [edi + 4]
push eax
mov eax, dword [ebp - 0x2ac]
add eax, 2
add eax, esi
push eax
push edi
push esi
call edx
cmp byte [ebp - 0x279], 0
mov eax, dword [0x100e8524]
mov dword [ebp - 0x2a4], eax
je 0x100bf630
mov word [ebp - 0x2a4], 0x7d78
mov byte [ebp - 0x2a2], 0x82
mov ecx, dword [0x10109a7c]
mov eax, dword [ebp - 0x2d8]
mov esi, dword [ebp - 0x2d4]
mov byte [ebp - 0x2a1], al
add esi, 3
mov eax, dword [ecx]
push dword [ebp - 0x2a4]
mov eax, dword [eax + 0x38]
call eax
mov ecx, dword [0x10109a7c]
mov edi, dword [ebp - 0x2a0]
add edi, 2
mov eax, dword [ecx]
mov edx, dword [eax + 0x48]
lea eax, [esi + 2]
push eax
cvttss2si eax, dword [ebp - 0x1c]
add eax, edi
push eax
push esi
mov esi, dword [ebp - 0x2a0]
push esi
call edx
mov eax, 0x66666667
sub esp, 8
imul dword [ebp - 0x2e4]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x2e0], xmm0
fld qword [ebp - 0x2e0]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_round
mov ecx, dword [ebp - 0x2f0]
add esp, 8
mov edi, dword [ebp - 0x2d4]
fstp qword [ebp - 0x2e0]
cvttsd2si eax, qword [ebp - 0x2e0]
cmp ecx, eax
jg 0x100bf74d
cmp byte [ebp - 0x27a], 0
jne 0x100bf74d
mov edx, ecx
lea ecx, [ebp - 0x64]
call fcn.10033d20
cmp byte [ebp - 0x279], 0
je 0x100bf70c
push 2
push eax
push ecx
mov eax, esp
mov dword [ebp - 4], 0x2d
mov word [eax], 0x8282
mov byte [eax + 2], 0x82
jmp 0x100bf722
push 2
push eax
push ecx
mov eax, esp
mov dword [ebp - 4], 0x2e
mov word [eax], 0xffff
mov byte [eax + 2], 0xff
mov ecx, dword [ebp - 0x284]
mov byte [eax + 3], cl
mov ecx, 0x1010c5b8
cvttss2si eax, dword [ebp - 0x1c]
push edi
add eax, esi
push eax
call fcn.100b5960
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 0xffffffff
call fcn.1002a500
add dword [ebp - 0x280], 6
mov edi, dword [ebp - 0x288]
cmp byte [0x100e8480], 0
je 0x100bf934
xorps xmm0, xmm0
mov dword [ebp - 0x54], 0
mov edx, 0xf
movups xmmword [ebp - 0x64], xmm0
mov dword [ebp - 0x50], edx
mov byte [ebp - 0x64], 0
mov dword [ebp - 4], 0x2f
mov ecx, dword [0x10109c48]
mov eax, dword [0x100e10ac]
add ecx, 0xffffffdb
xor ecx, 0x8ca7757c
mov dword [ebp - 0x2a8], 0
movss xmm0, dword [ecx + edi + 4]
movss xmm2, dword [ecx + edi]
subss xmm2, dword [ecx + eax]
subss xmm0, dword [ecx + eax + 4]
movss xmm1, dword [ecx + edi + 8]
subss xmm1, dword [ecx + eax + 8]
mulss xmm2, xmm2
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm2, xmm0
addss xmm2, xmm1
mulss xmm2, dword [0x100d6d10]
cvtps2pd xmm0, xmm2
mulsd xmm0, qword [0x100d6d98]
cvttsd2si esi, xmm0
mov dword [ebp - 0x1c], esi
test esi, esi
jle 0x100bf8fa
mov edi, dword [ebp - 0x18]
lea eax, [edi + 9]
mov dword [ebp - 0x2a8], eax
cmp esi, 5
jle 0x100bf85c
mov eax, 0x66666667
mov ecx, esi
imul esi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*4]
sub ecx, eax
je 0x100bf845
dec esi
mov eax, 0x66666667
imul esi
mov ecx, esi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*4]
sub ecx, eax
jne 0x100bf828
mov dword [ebp - 0x1c], esi
mov eax, 0x66666667
imul esi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*4]
sub esi, eax
jne 0x100bf895
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x290], 0x46206925
push eax
lea edx, [ebp - 0x290]
mov word [ebp - 0x28c], 0x54
lea ecx, [ebp - 0x34]
call fcn.10038140
add esp, 4
lea ecx, [ebp - 0x64]
push eax
call fcn.1003dd60
lea ecx, [ebp - 0x34]
call fcn.1002a500
mov edx, dword [ebp - 0x280]
lea eax, [ebp - 0x64]
push 2
push eax
push ecx
mov ecx, dword [ebp - 0x284]
mov eax, esp
add edx, edi
cmp byte [ebp - 0x279], 0
mov byte [eax + 3], cl
mov ecx, 0x1010c5b8
je 0x100bf8c8
mov word [eax], 0x8282
mov byte [eax + 2], 0x82
jmp 0x100bf8d1
mov word [eax], 0xffff
mov byte [eax + 2], 0xff
mov eax, dword [ebp - 0x2b4]
add eax, edx
add eax, dword [ebp - 0x298]
push eax
mov eax, dword [ebp - 0x2ac]
cdq
sub eax, edx
sar eax, 1
add eax, dword [ebp - 0x2a0]
push eax
call fcn.100b5960
mov edx, dword [ebp - 0x50]
mov dword [ebp - 4], 0xffffffff
cmp edx, 0xf
jbe 0x100bf934
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100bf92a
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100bf92a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100c7927
add esp, 8
push 0
push dword [0x100e8380]
push dword [0x100e837c]
call fcn.100c7370
cmp eax, dword [0x100e8380]
je 0x100bfc75
mov eax, dword [0x10109bcc]
mov ecx, dword [ebp - 0x2e8]
mov dword [ebp - 0x2ec], 0xfffffff7
call eax
mov ecx, eax
test ecx, ecx
jne 0x100bf9c1
xorps xmm0, xmm0
mov dword [ebp - 0x290], 0x6f727265
lea ecx, [ebp - 0x290]
mov word [ebp - 0x28c], 0x72
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x78], eax
lea edx, [ecx + 1]
mov dword [ebp - 0x74], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100bf9a0
sub ecx, edx
lea eax, [ebp - 0x290]
push ecx
push eax
lea ecx, [ebp - 0x88]
call fcn.1002ac50
jmp 0x100bfb6e
mov eax, dword [0x10109bd0]
call eax
mov ecx, eax
test ecx, ecx
jne 0x100bfa21
xorps xmm0, xmm0
mov dword [ebp - 0x290], 0x6f727265
lea ecx, [ebp - 0x290]
mov word [ebp - 0x28c], 0x72
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x78], eax
lea edx, [ecx + 1]
mov dword [ebp - 0x74], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100bfa00
sub ecx, edx
lea eax, [ebp - 0x290]
push ecx
push eax
lea ecx, [ebp - 0x88]
call fcn.1002ac50
jmp 0x100bfb6e
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
mov ecx, dword [0x10109abc]
push eax
mov edx, dword [ecx]
mov edx, dword [edx + 0x30]
call edx
mov edx, eax
mov dword [ebp - 0x54], 0
mov ecx, edx
mov dword [ebp - 0x50], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x64], xmm0
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100bfa52
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x64]
call fcn.1004b320
mov dword [ebp - 4], 0x30
xorps xmm0, xmm0
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0xf
mov byte [ebp - 0x4c], 0
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0x54]
test edx, edx
jne 0x100bfab2
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x78], edx
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], dl
jmp 0x100bfb66
cmp dword [ebp - 0x50], 7
lea eax, [ebp - 0x64]
mov ecx, dword [0x100f4adc]
cmova eax, dword [ebp - 0x64]
push 0
push 0
push 0
push 0
push edx
push eax
push 0
push 0xfde9
call ecx
mov esi, eax
lea ecx, [ebp - 0x34]
push 0
push esi
call fcn.1003dde0
push eax
lea ecx, [ebp - 0x4c]
call fcn.1003dd60
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x100bfb22
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100bfb18
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100bfb18
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c7927
add esp, 8
cmp dword [ebp - 0x38], 0xf
lea ecx, [ebp - 0x4c]
mov edx, dword [0x100f4adc]
lea eax, [ebp - 0x64]
cmova ecx, dword [ebp - 0x4c]
cmp dword [ebp - 0x50], 7
push 0
cmova eax, dword [ebp - 0x64]
push 0
push esi
push ecx
push dword [ebp - 0x54]
push eax
push 0
push 0xfde9
call edx
movups xmm0, xmmword [ebp - 0x4c]
movups xmmword [ebp - 0x88], xmm0
movq xmm0, qword [ebp - 0x3c]
movq qword [ebp - 0x78], xmm0
lea ecx, [ebp - 0x64]
call fcn.1004ae80
mov dword [ebp - 4], 0x32
lea ecx, [ebp - 0x88]
cmp dword [ebp - 0x74], 0xf
lea eax, [ebp - 0x88]
mov edx, dword [ebp - 0x88]
lea edi, [ebp - 0x88]
mov esi, dword [ebp - 0x78]
cmova eax, edx
cmova ecx, edx
mov dword [ebp - 0x1c], eax
add esi, ecx
cmp dword [ebp - 0x74], 0xf
cmova edi, edx
cmp edi, esi
je 0x100bfbc8
sub dword [ebp - 0x1c], edi
nop dword [eax]
movsx eax, byte [edi]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov ecx, dword [ebp - 0x1c]
add esp, 4
mov byte [edi + ecx], al
inc edi
cmp edi, esi
jne 0x100bfbb0
mov edx, dword [ebp - 0x2a8]
lea eax, [ebp - 0x88]
mov edi, dword [ebp - 0x280]
add edx, edi
cmp byte [ebp - 0x279], 0
push 2
push eax
push ecx
mov ecx, dword [ebp - 0x284]
mov eax, esp
mov byte [eax + 3], cl
mov ecx, 0x1010c5b8
je 0x100bfc04
mov word [eax], 0x8282
mov byte [eax + 2], 0x82
jmp 0x100bfc0d
mov word [eax], 0xffff
mov byte [eax + 2], 0xff
mov eax, dword [ebp - 0x2b4]
add eax, edx
add eax, dword [ebp - 0x298]
push eax
mov eax, dword [ebp - 0x2ac]
cdq
sub eax, edx
sar eax, 1
add eax, dword [ebp - 0x2a0]
push eax
call fcn.100b5960
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x74]
cmp ecx, 0xf
jbe 0x100bfc7b
mov edx, dword [ebp - 0x88]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100bfc69
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100bfc69
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c7927
add esp, 8
jmp 0x100bfc7b
mov edi, dword [ebp - 0x280]
push 1
push dword [0x100e8380]
push dword [0x100e837c]
call fcn.100c7370
cmp eax, dword [0x100e8380]
je 0x100bfe6f
mov eax, dword [0x10109d3c]
mov ecx, 0x1010ed8c
add eax, 0xffffff9e
xor eax, 0x8ca775b9
add eax, dword [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.100c1eb0
push 0x98
push 0
mov word [ebp - 0x288], 0x6325
mov esi, dword [eax]
lea eax, [ebp - 0x120]
push eax
add esi, 0xc
mov byte [ebp - 0x286], 0
call sub.VCRUNTIME140.dll_memset
add esp, 8
lea ecx, [ebp - 0x120]
call fcn.1002dff0
mov dword [ebp - 4], 0x33
lea eax, [ebp - 0x38c]
mov dword [ebp - 0x58], esi
lea edx, [ebp - 0x288]
mov dword [ebp - 0x54], 0x100c3ef0
lea ecx, [ebp - 0x120]
movq xmm0, qword [ebp - 0x58]
push 1
push eax
mov dword [ebp - 0x394], eax
mov dword [ebp - 0x390], 1
movq qword [ebp - 0x38c], xmm0
mov dword [ebp - 0x384], 0x100c3f60
call fcn.1002c330
add esp, 8
lea eax, [ebp - 0x34]
lea ecx, [ebp - 0x11c]
push eax
call fcn.1002e260
mov eax, dword [ebp - 0x120]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0x120], 0x100d4634
mov eax, dword [ebp - 0x120]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x50]
mov dword [ebp + ecx - 0x124], eax
lea ecx, [ebp - 0x11c]
call fcn.1002a450
lea ecx, [ebp - 0x118]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov dword [ebp - 4], 0x34
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2a8]
sub edx, dword [ebp - 0x2ec]
add edx, 0xfffffffb
push 2
add edx, edi
cmp byte [ebp - 0x279], 0
push eax
push ecx
je 0x100bfdf5
mov eax, dword [ebp - 0x284]
mov ecx, esp
mov byte [ecx + 3], al
mov eax, dword [ebp - 0x298]
mov word [ecx], 0x8282
add eax, 2
mov byte [ecx + 2], 0x82
mov ecx, dword [ebp - 0x2b4]
add ecx, edx
add ecx, eax
push ecx
jmp 0x100bfe1d
mov ecx, dword [ebp - 0x284]
mov eax, esp
mov byte [eax + 3], cl
mov ecx, dword [ebp - 0x298]
mov word [eax], 0xffff
add ecx, 2
mov byte [eax + 2], 0xff
mov eax, dword [ebp - 0x2b4]
add eax, edx
add eax, ecx
push eax
mov eax, dword [ebp - 0x2ac]
mov ecx, 0x1010c60c
cdq
sub eax, edx
sar eax, 1
add eax, dword [ebp - 0x2a0]
push eax
call fcn.100b5960
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x100bfe6f
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100bfe65
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100bfe65
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c7927
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100c74ac
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4