Function at 0x10067c00
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68
mov eax, dword [0x10139040]
xor eax, ebp
mov dword [ebp - 4], eax
movzx eax, byte [ebp + 8]
push ebx
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x68], eax
add eax, 0xffffffef
mov dword [ebp - 0x40], ebx
push esi
push edi
cmp eax, 0xea
ja case.0x10067c35.18
movzx eax, byte [eax + 0x10069240]
jmp dword [eax*4 + 0x100691f4]
movzx ecx, byte [ebx + 3]
movzx eax, byte [ebx + 4]
shl ecx, 8
or ecx, eax
and ecx, 0x7fff
cmp dword [0x1014ef84], ecx
jne 0x10067c67
mov eax, dword [ebx + 0xc]
mov dword [0x1014ee78], eax
mov eax, dword [ebx + 0x10]
mov dword [0x1014ef6c], eax
mov eax, dword [ebx + 0x18]
mov dl, byte [ebx + 7]
mov ecx, dword [ebx + 0x14]
mov dword [0x1014ef60], eax
mov eax, dword [0x1014ef4c]
mov dword [0x1014ef64], ecx
test dl, 0x10
je 0x10067c9c
cmp eax, 3
jae 0x10067c9c
mov dword [eax*4 + 0x1014ef50], ecx
inc eax
mov dword [0x1014ef4c], eax
mov dword [0x1014ef48], eax
test dl, 0x20
je case.0x10067c35.18
cmp eax, 4
jae case.0x10067c35.18
mov dword [eax*4 + 0x1014ef50], ecx
inc eax
mov dword [0x1014ef4c], eax
mov dword [0x1014ef48], eax
jmp case.0x10067c35.18
cmp byte [ebx + 3], 0
mov dword [ebp - 0x60], 0
jbe case.0x10067c35.18
mov edx, dword [0x1014b9f0]
lea ecx, [ebx + 4]
mov dword [ebp - 0x5c], ecx
mov esi, 0xffff
nop word [eax + eax]
movzx edi, byte [ecx]
movzx eax, byte [ecx + 1]
mov ecx, 0x10140194
shl edi, 8
or edi, eax
movzx eax, word [ecx + 0xe]
cmp ax, si
je 0x10067d41
cmp eax, edi
jne 0x10067d41
xorps xmm0, xmm0
xor eax, eax
movq qword [ecx - 0x10], xmm0
mov word [ecx - 8], 0
mov byte [ecx - 6], 0
mov dword [ecx - 4], 0
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov byte [ecx + 0xc], 0xff
mov word [ecx + 0xe], si
mov dword [ecx + 8], eax
add ecx, 0x20
cmp ecx, 0x10140af4
jl 0x10067d01
mov eax, dword [ebp - 0x5c]
movzx ecx, byte [eax]
movzx eax, byte [eax + 1]
shl ecx, 8
or ecx, eax
mov eax, dword [0x1014b9ec]
mov dword [ebp - 0x64], ecx
cmp eax, edx
je 0x10067d96
movzx ecx, word [eax]
lea edi, [eax + 0xc]
cmp ecx, dword [ebp - 0x64]
je 0x10067d7a
mov eax, edi
cmp eax, edx
jne 0x10067d67
jmp 0x10067d96
sub edx, edi
push edx
push edi
push eax
call fcn.100d6c70
mov edx, dword [0x1014b9f0]
add esp, 0xc
sub edx, 0xc
mov dword [0x1014b9f0], edx
mov edi, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x5c]
inc edi
movzx eax, byte [ebx + 3]
add ecx, 2
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x5c], ecx
cmp edi, eax
jl 0x10067cf0
jmp case.0x10067c35.18
mov eax, dword [ebx + 0xc]
mov dword [0x1014ef64], eax
jmp case.0x10067c35.18
movzx ecx, byte [ebx + 3]
movzx eax, byte [ebx + 4]
shl ecx, 8
or ecx, eax
and ecx, 0x7fff
cmp dword [0x1014ef84], ecx
jne case.0x10067c35.18
mov dword [0x1014ee78], 0
jmp case.0x10067c35.18
mov eax, dword [0x1014b9ec]
cmp eax, dword [0x1014b9f0]
je case.0x10067c35.18
mov dword [0x1014b9f0], eax
jmp case.0x10067c35.18
mov ecx, ebx
call fcn.100694b0
jmp case.0x10067c35.18
cmp byte [ebx + 3], 0xfe
jne 0x10067e1b
mov eax, dword [ebx + 0xc]
mov dword [0x1014ee74], eax
mov eax, dword [ebx + 0x10]
mov dword [0x1014ef68], eax
cmp byte [ebx + 3], 0xff
jne case.0x10067c35.18
cmp dword [0x1014ee78], 0
je 0x10067e32
mov eax, dword [ebx + 0xc]
mov dword [0x1014ee78], eax
mov eax, dword [ebx + 0x10]
mov dword [0x1014ef6c], eax
push dword [ebp + 0x14]
mov eax, 0x663b20
push dword [ebp + 0x10]
push ebx
push dword [ebp - 0x68]
call eax
add esp, 0x10
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100890df
mov esp, ebp
pop ebp
ret
cmp byte [ebx + 3], 0xfe
jne 0x10067e75
mov eax, dword [ebx + 8]
mov dword [0x1014ef74], eax
mov eax, dword [ebx + 0xc]
mov dword [0x1014ef70], eax
cmp byte [ebx + 3], 0xff
jne case.0x10067c35.18
mov eax, dword [ebx + 8]
mov dword [0x1014ee80], eax
mov eax, dword [ebx + 0xc]
mov dword [0x1014ee7c], eax
jmp case.0x10067c35.18
mov al, byte [ebx + 3]
test al, al
je 0x10067ea0
cmp al, 3
je 0x10067ea0
cmp al, 6
je 0x10067ea0
cmp al, 0x11
jne case.0x10067c35.18
mov eax, dword [ebx + 8]
mov dword [0x1014ef7c], eax
mov eax, dword [ebx + 0xc]
mov dword [0x1014ef78], eax
mov eax, dword [ebx + 0x10]
mov dword [0x1014ef2c], eax
mov eax, dword [ebx + 0x14]
mov dword [0x1014ef28], eax
mov eax, dword [ebx + 0x18]
mov dword [0x1014ef24], eax
mov eax, dword [ebx + 0x1c]
mov dword [0x1014ef20], eax
mov eax, dword [ebx + 0x20]
mov dword [0x1014ef1c], eax
jmp case.0x10067c35.18
movzx ecx, byte [ebx + 3]
movzx eax, byte [ebx + 4]
shl ecx, 8
or ecx, eax
and ecx, 0x7fff
cmp dword [0x1014ef84], ecx
jne case.0x10067c35.18
mov eax, dword [ebx + 8]
mov dword [0x1014ef78], eax
jmp case.0x10067c35.18
cmp byte [ebx], 0xc1
jne 0x10067f13
mov al, byte [ebx + 3]
jmp 0x10067f16
mov al, byte [ebx + 4]
cmp al, 0x27
je case.0x10068594.228
jmp case.0x10067c35.18
cmp byte [ebx], 0xc1
lea ecx, [ebx + 4]
jne 0x10067f30
mov al, byte [ebx + 3]
jmp 0x10067f32
mov al, byte [ecx]
movzx eax, al
sub eax, 0
je 0x10067f7f
sub eax, 1
jne case.0x10067c35.18
mov esi, dword [0x1014efd8]
cmp esi, 1
je case.0x10067c35.18
cmp byte [ecx], 1
jne 0x1006830a
push eax
xor edx, edx
push eax
mov eax, dword [0x1014ef88]
cmp eax, 3
cmove edx, eax
xor ecx, ecx
cmp eax, 3
cmove ecx, esi
call fcn.1006a430
add esp, 8
jmp case.0x10067c35.18
cmp dword [0x1014efd8], 1
movzx esi, word [ebx + 0x14]
jne 0x10067f99
cmp dword [0x1014ef88], 3
jne case.0x10067c35.18
push ecx
push 0x10
push 0x1014efe0
call fcn.100ec69e
xor ecx, ecx
mov word [0x1014efdc], si
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount64]
add esp, 0xc
cmp dword [0x1014ef88], 3
mov dword [0x1014efd8], 2
cmove ecx, dword [0x1014ef88]
mov dword [0x1014ef88], ecx
call esi
mov dword [0x1014efd4], eax
call esi
mov dword [0x1014efd0], eax
mov ecx, 0x3e8
xor eax, eax
mov dword [0x1014efc8], 0
cmp byte [0x1013a31e], 1
cmove eax, ecx
mov dword [0x1014efcc], eax
jmp case.0x10067c35.18
cmp byte [ebx], 0xc1
jne 0x10068013
mov al, byte [ebx + 3]
jmp 0x10068016
mov al, byte [ebx + 4]
movzx eax, al
add eax, 0xfffffffc
cmp eax, 3
ja case.0x10067c35.18
jmp dword [eax*4 + 0x1006932c]
movzx eax, word [ebx + 4]
mov dword [0x1014ee88], eax
movzx eax, word [ebx + 6]
mov dword [0x1014ee84], eax
jmp case.0x10067c35.18
movzx eax, byte [ebx + 4]
cmp eax, 9
ja case.0x10067c35.18
movzx eax, byte [eax + 0x10069350]
jmp dword [eax*4 + 0x1006933c]
mov al, byte [ebx + 5]
mov byte [ebp - 0x56], al
cmp al, 0xff
je case.0x10067c35.18
mov eax, 0x861110
call eax
mov edx, 0x861260
mov ecx, eax
call edx
lea ecx, [ebx + 6]
mov edx, 0x8342c0
push ecx
movzx ecx, byte [ebp - 0x56]
sub ecx, 0xc
push ecx
mov ecx, eax
call edx
push 0
push 0
push 0x1d
mov eax, 0x6d6c20
call eax
add esp, 0xc
jmp case.0x10067c35.18
mov ecx, dword [0x8128adc]
mov eax, 0x402320
push 0x177
call eax
push 0x1012b1e6
mov edi, 0x409a50
lea ecx, [ebp - 0x3c]
mov esi, eax
call edi
push esi
lea ecx, [ebp - 0x20]
call edi
mov eax, 0x861110
call eax
mov edx, 0x861180
mov ecx, eax
call edx
push 0
push 4
lea ecx, [ebp - 0x20]
mov edx, 0x7894e0
push ecx
lea ecx, [ebp - 0x3c]
push ecx
mov ecx, eax
call edx
jmp case.0x10067c35.18
mov ecx, dword [0x8128adc]
mov eax, 0x402320
push 0x91d
call eax
push 0x1012b1e6
mov edi, 0x409a50
lea ecx, [ebp - 0x20]
mov esi, eax
call edi
push esi
lea ecx, [ebp - 0x3c]
call edi
mov eax, 0x861110
call eax
mov edx, 0x861180
mov ecx, eax
call edx
push 0
push 4
lea ecx, [ebp - 0x3c]
mov edx, 0x7894e0
push ecx
lea ecx, [ebp - 0x20]
push ecx
mov ecx, eax
call edx
jmp case.0x10067c35.18
mov ecx, dword [0x8128adc]
mov eax, 0x402320
push 0x912
call eax
push 0x1012b1e6
mov edi, 0x409a50
lea ecx, [ebp - 0x20]
mov esi, eax
call edi
push esi
lea ecx, [ebp - 0x3c]
call edi
mov eax, 0x861110
call eax
mov edx, 0x861180
mov ecx, eax
call edx
push 0
push 4
lea ecx, [ebp - 0x3c]
mov edx, 0x7894e0
push ecx
lea ecx, [ebp - 0x20]
push ecx
mov ecx, eax
call edx
jmp case.0x10067c35.18
cmp byte [ebx + 4], 0
mov esi, 0x861110
jne 0x100681de
push 0xc
call esi
mov edx, 0x85ec50
mov ecx, eax
call edx
mov eax, dword [ebx + 8]
lea ecx, [ebp - 0x44]
xorps xmm0, xmm0
mov dword [0x1014ee70], eax
movlpd qword [ebp - 0x44], xmm0
mov edx, 8
mov dword [ebp - 0x44], 0x5d008c1
mov dword [ebp - 0x40], eax
call fcn.10069e50
cmp dword [0x1014ee70], 0
jne case.0x10067c35.18
push 0xc
call esi
mov edx, 0x85f9a0
mov ecx, eax
call edx
jmp case.0x10067c35.18
mov eax, 0x1014e514
mov dword [eax - 4], 0xffffffff
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
add eax, 0x14
cmp eax, 0x1014ee74
jl 0x10068202
xor esi, esi
cmp byte [ebx + 5], 0
jbe case.0x10068594.228
lea edx, [ebx + 0x12]
nop dword [eax]
mov eax, dword [edx]
xor ecx, ecx
mov edi, dword [edx + 4]
mov dword [ebp - 0x40], eax
mov eax, dword [edx - 4]
mov dword [ebp - 0x5c], eax
mov eax, dword [edx - 8]
mov dword [ebp - 0x60], eax
mov eax, dword [edx - 0xc]
mov dword [ebp - 0x64], eax
mov eax, 0x1014e510
cmp dword [eax], 0xffffffff
je 0x10068273
add eax, 0x14
inc ecx
cmp eax, 0x1014ee70
jl 0x10068261
jmp 0x100682a5
lea eax, [ecx + ecx*4]
mov ecx, dword [ebp - 0x64]
mov dword [eax*4 + 0x1014e510], ecx
mov ecx, dword [ebp - 0x60]
mov dword [eax*4 + 0x1014e514], ecx
mov ecx, dword [ebp - 0x5c]
mov dword [eax*4 + 0x1014e518], ecx
mov ecx, dword [ebp - 0x40]
mov dword [eax*4 + 0x1014e51c], ecx
mov dword [eax*4 + 0x1014e520], edi
movzx eax, byte [ebx + 5]
inc esi
add edx, 0x14
cmp esi, eax
jl 0x10068240
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100890df
mov esp, ebp
pop ebp
ret
cmp byte [ebx], 0xc1
jne 0x100682d1
mov al, byte [ebx + 3]
jmp 0x100682d4
mov al, byte [ebx + 4]
movzx eax, al
sub eax, 0
je 0x10068533
sub eax, 1
je 0x10068357
sub eax, 1
jne case.0x10067c35.18
cmp dword [0x1014efd8], 1
je case.0x10067c35.18
mov al, byte [ebx + 4]
test al, al
je 0x1006830a
cmp al, 2
jne case.0x10067c35.18
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [0x1014efd8], 2
mov dword [0x1014ef88], 0
call esi
mov dword [0x1014efd4], eax
call esi
mov dword [0x1014efd0], eax
mov ecx, 0x3e8
xor eax, eax
mov dword [0x1014efc8], 0
cmp byte [0x1013a31e], 1
cmove eax, ecx
mov dword [0x1014efcc], eax
jmp case.0x10067c35.18
cmp dword [0x1014ef88], 1
jne case.0x10067c35.18
cmp dword [0x1014efc4], 0
je case.0x10067c35.18
mov al, byte [ebx + 4]
cmp al, 1
jne 0x100683dc
mov edx, 4
mov dword [ebp - 0x5c], 0xf304c1
lea ecx, [ebp - 0x5c]
call fcn.10069e50
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [0x1014efd8], 1
mov dword [0x1014ef88], 2
call esi
mov dword [0x1014efd4], eax
call esi
cmp byte [0x1013a31e], 1
mov ecx, 0x3e8
mov dword [0x1014efd0], eax
mov eax, 0x7530
cmove eax, ecx
mov dword [0x1014efc8], 0x7530
mov dword [0x1014efcc], eax
jmp case.0x10067c35.18
cmp byte [0x1013a31e], 1
jne 0x10068482
mov eax, dword [0x8793750]
mov eax, dword [eax + 0xc]
test eax, eax
je 0x100683fc
push eax
call dword [sym.imp.WS2_32.dll_closesocket]
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov byte [0x1013a320], 1
mov dword [0x1014efc4], 0
mov dword [0x1014efd8], 0
mov dword [0x1014ef88], 0
call esi
mov dword [0x1014efd4], eax
call esi
mov dword [0x1014efd0], eax
mov ecx, 0x3e8
xor eax, eax
mov dword [0x1014efc8], 0
cmp byte [0x1013a31e], 1
mov dword [0x8793704], 1
cmove eax, ecx
mov dword [0x1014efc4], 0
mov dword [0x1014efcc], eax
mov dword [0x1014efc0], 0
mov dword [0xe609e8], 2
jmp case.0x10067c35.18
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount64]
cmp al, 3
jne 0x100684e0
mov dword [0x1014efd8], 1
mov dword [0x1014ef88], 1
call esi
mov dword [0x1014efd4], eax
call esi
cmp byte [0x1013a31e], 1
mov ecx, 0x3e8
mov dword [0x1014efd0], eax
mov eax, 0x2710
cmove eax, ecx
mov dword [0x1014efc8], 0x7530
mov dword [0x1014efcc], eax
mov dword [0x1014efc4], 0
jmp case.0x10067c35.18
mov dword [0x1014efd8], 2
mov dword [0x1014ef88], 0
call esi
mov dword [0x1014efd4], eax
call esi
mov dword [0x1014efd0], eax
mov ecx, 0x3e8
xor eax, eax
mov dword [0x1014efc8], 0
cmp byte [0x1013a31e], 1
cmove eax, ecx
mov ecx, 0x8793750
mov dword [0x1014efcc], eax
mov eax, 0x63a180
call eax
jmp case.0x10067c35.18
movzx ecx, byte [ebx + 5]
movzx eax, byte [ebx + 6]
shl ecx, 8
or ecx, eax
mov eax, dword [ebx + 0x2c]
mov dword [0x1014ef84], ecx
cmp eax, dword [ebx + 0x30]
jne case.0x10067c35.18
cmp dword [ebx + 0x34], 0
je case.0x10067c35.18
mov ecx, 0x1013a230
mov byte [0x1013a270], 1
call fcn.10006870
jmp case.0x10067c35.18
cmp byte [ebx], 0xc1
jne 0x1006857c
mov al, byte [ebx + 3]
jmp 0x1006857f
mov al, byte [ebx + 4]
movzx eax, al
cmp eax, 0xfe
ja case.0x10067c35.18
movzx eax, byte [eax + 0x100693ac]
jmp dword [eax*4 + 0x1006935c]
mov ecx, ebx
call fcn.10069680
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100890df
mov esp, ebp
pop ebp
ret
mov ecx, ebx
call fcn.10069970
jmp case.0x10067c35.18
mov eax, dword [ebx + 0x1c]
mov dword [0x1014ee78], eax
mov eax, dword [ebx + 0x20]
mov dword [0x1014ee80], eax
mov eax, dword [ebx + 0x24]
mov dword [0x1014ee7c], eax
mov eax, dword [ebx + 0x28]
jmp 0x10067e35
mov eax, dword [ebx + 0x18]
mov dword [0x1014ef78], eax
mov eax, dword [ebx + 0x1c]
mov dword [0x1014ee74], eax
mov eax, dword [ebx + 0x20]
mov dword [0x1014ef74], eax
mov eax, dword [ebx + 0x24]
mov dword [0x1014ef70], eax
mov eax, dword [ebx + 0x28]
mov dword [0x1014ef68], eax
mov eax, dword [ebx + 0x2c]
mov dword [0x1014ef44], eax
mov eax, dword [ebx + 0x30]
mov dword [0x1014ef40], eax
jmp case.0x10067c35.18
mov al, byte [ebx + 4]
sub al, 0x10
cmp al, 4
ja case.0x10067c35.18
mov eax, dword [ebx + 0xc]
mov dword [0x1014ef78], eax
mov eax, dword [ebx + 0x10]
mov dword [0x1014ee74], eax
mov eax, dword [ebx + 0x14]
mov dword [0x1014ef74], eax
mov eax, dword [ebx + 0x18]
mov dword [0x1014ef70], eax
mov eax, dword [ebx + 0x1c]
mov dword [0x1014ef68], eax
mov eax, dword [ebx + 0x20]
mov dword [0x1014ef2c], eax
mov eax, dword [ebx + 0x24]
mov dword [0x1014ef28], eax
mov eax, dword [ebx + 0x28]
mov dword [0x1014ef24], eax
mov eax, dword [ebx + 0x2c]
mov dword [0x1014ef20], eax
mov eax, dword [ebx + 0x30]
mov dword [0x1014ef1c], eax
jmp case.0x10067c35.18
mov eax, dword [ebx + 8]
mov dword [0x1014ee78], eax
mov eax, dword [ebx + 0xc]
mov dword [0x1014ef6c], eax
mov eax, dword [ebx + 0x10]
mov dword [0x1014ef64], eax
mov eax, dword [ebx + 0x14]
mov dword [0x1014ef60], eax
jmp case.0x10067c35.18
mov eax, dword [ebx + 0x20]
mov dword [0x1014ee74], eax
mov eax, dword [ebx + 0x24]
mov dword [0x1014ef74], eax
mov eax, dword [ebx + 0x28]
mov dword [0x1014ef70], eax
mov eax, dword [ebx + 0x2c]
mov dword [0x1014ef68], eax
jmp case.0x10067c35.18
mov eax, dword [ebx + 0x14]
mov dword [0x1014ee74], eax
mov eax, dword [ebx + 0x18]
mov dword [0x1014ef74], eax
mov eax, dword [ebx + 0x1c]
mov dword [0x1014ef70], eax
mov eax, dword [ebx + 0x20]
mov dword [0x1014ef68], eax
mov eax, dword [ebx + 0x28]
mov ecx, dword [ebx + 0x2c]
mov dword [0x1014ef38], eax
mov dword [0x1014ef3c], ecx
mov eax, dword [ebx + 0x30]
mov ecx, dword [ebx + 0x34]
mov dword [0x1014ef30], eax
mov dword [0x1014ef34], ecx
jmp case.0x10067c35.18
call fcn.10023850
cmp byte [ebx + 5], 0
mov dword [ebp - 0x60], 0
jbe case.0x10068594.228
mov edx, 0x101400a4
lea esi, [ebx + 0x10]
movzx ecx, word [esi + 2]
lea esi, [esi + 0xe]
movzx eax, word [esi - 0xe]
lea edx, [edx + 0x18]
mov dword [edx - 0x18], ecx
mov ecx, dword [ebp - 0x60]
mov byte [edx - 0x14], cl
inc ecx
mov dword [edx - 0x1c], eax
movq xmm0, qword [esi - 0x18]
movq qword [edx - 0x28], xmm0
mov ax, word [esi - 0x10]
mov word [edx - 0x20], ax
mov al, byte [esi - 0xe]
mov byte [edx - 0x1e], al
movzx eax, byte [ebx + 5]
mov dword [ebp - 0x60], ecx
cmp ecx, eax
jl 0x10068732
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100890df
mov esp, ebp
pop ebp
ret
cmp byte [ebx + 6], 1
jne 0x100687e5
push 1
call fcn.10023890
xor edi, edi
cmp byte [ebx + 5], 0
jbe case.0x10068594.228
lea esi, [ebx + 0x15]
lea eax, [esi + 6]
push eax
movzx eax, word [esi]
push eax
movzx eax, word [esi + 4]
push eax
movzx eax, word [esi + 2]
push eax
movzx eax, word [esi - 2]
push eax
lea eax, [esi - 0xe]
push eax
push ecx
call fcn.10023900
movzx eax, byte [ebx + 5]
lea esi, [esi + 0x18]
inc edi
cmp edi, eax
jl 0x100687a2
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100890df
mov esp, ebp
pop ebp
ret
push 0
call fcn.10023890
xor edi, edi
cmp byte [ebx + 5], 0
jbe case.0x10068594.228
lea esi, [ebx + 0x15]
nop dword [eax + eax]
lea eax, [esi + 6]
push eax
movzx eax, word [esi]
push eax
movzx eax, word [esi + 4]
push eax
movzx eax, word [esi + 2]
push eax
movzx eax, word [esi - 2]
push eax
lea eax, [esi - 0xe]
push eax
push ecx
call fcn.10023900
movzx eax, byte [ebx + 5]
lea esi, [esi + 0x18]
inc edi
cmp edi, eax
jl 0x10068800
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100890df
mov esp, ebp
pop ebp
ret
mov ecx, ebx
call fcn.10069b10
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100890df
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x8128ac8]
movzx eax, word [ebx + 4]
mov word [ecx + 0xe], ax
mov ecx, dword [0x8128ac8]
movzx eax, word [ebx + 6]
mov word [ecx + 0x74], ax
mov ecx, dword [0x8128ac8]
movzx eax, word [ebx + 0x10]
mov word [ecx + 0x18], ax
mov ecx, dword [0x8128ac8]
movzx eax, word [ebx + 0x12]
mov word [ecx + 0x1a], ax
mov ecx, dword [0x8128ac8]
movzx eax, word [ebx + 0x14]
mov word [ecx + 0x1c], ax
mov ecx, dword [0x8128ac8]
movzx eax, word [ebx + 0x16]
mov word [ecx + 0x1e], ax
mov ecx, dword [0x8128ac8]
movzx eax, word [ebx + 0x18]
mov word [ecx + 0x20], ax
mov ecx, dword [0x8128ac8]
movzx eax, word [ebx + 0x1a]
mov word [ecx + 0x22], ax
mov ecx, dword [0x8128ac8]
movzx eax, word [ebx + 0x1c]
mov word [ecx + 0x26], ax
mov ecx, dword [0x8128ac8]
movzx eax, word [ebx + 0x1e]
mov word [ecx + 0x24], ax
mov ecx, dword [0x8128ac8]
movzx eax, word [ebx + 0x20]
mov word [ecx + 0x28], ax
mov ecx, dword [0x8128ac8]
movzx eax, word [ebx + 0x22]
mov word [ecx + 0x40], ax
mov ecx, dword [0x8128ac8]
movzx eax, word [ebx + 0x24]
mov word [ecx + 0x42], ax
mov ecx, dword [0x8128ac8]
movzx eax, word [ebx + 0x26]
mov word [ecx + 0x2a], ax
mov ecx, dword [0x8128ac8]
movzx eax, word [ebx + 0x28]
mov word [ecx + 0x2c], ax
mov ecx, dword [0x8128ac8]
movzx eax, word [ebx + 0x2a]
mov word [ecx + 0x4c], ax
mov ecx, dword [0x8128ac8]
movzx eax, word [ebx + 0x2c]
mov word [ecx + 0x4e], ax
mov ecx, dword [0x8128ac8]
movzx eax, word [ebx + 0x2e]
mov word [ecx + 0x50], ax
mov ecx, dword [0x8128ac8]
movzx eax, word [ebx + 0x30]
mov word [ecx + 0x52], ax
mov ecx, dword [0x8128ac8]
mov eax, dword [ebx + 8]
mov dword [ecx + 0x10], eax
mov ecx, dword [0x8128ac8]
mov eax, dword [ebx + 0xc]
mov dword [ecx + 0x14], eax
mov eax, dword [ebx + 0x34]
mov dword [0x1014ef80], eax
mov eax, dword [ebx + 0x38]
mov dword [0x1014ef78], eax
mov eax, dword [ebx + 0x3c]
mov dword [0x1014ee78], eax
mov eax, dword [ebx + 0x40]
mov dword [0x1014ee74], eax
mov eax, dword [ebx + 0x44]
mov dword [0x1014ee80], eax
mov eax, dword [ebx + 0x48]
mov dword [0x1014ef74], eax
mov eax, dword [ebx + 0x4c]
mov dword [0x1014ee7c], eax
mov eax, dword [ebx + 0x50]
mov dword [0x1014ef70], eax
mov eax, dword [ebx + 0x54]
mov dword [0x1014ef6c], eax
mov eax, dword [ebx + 0x58]
mov dword [0x1014ef68], eax
mov eax, dword [ebx + 0x5c]
mov dword [0x1014ef2c], eax
mov eax, dword [ebx + 0x60]
mov dword [0x1014ef28], eax
mov eax, dword [ebx + 0x64]
mov dword [0x1014ef24], eax
mov eax, dword [ebx + 0x68]
pop edi
mov dword [0x1014ef20], eax
mov eax, dword [ebx + 0x6c]
pop esi
mov dword [0x1014ef1c], eax
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100890df
mov esp, ebp
pop ebp
ret
mov eax, dword [ebx + 4]
mov dword [0x1014ee78], eax
mov eax, dword [ebx + 8]
mov dword [0x1014ee74], eax
mov eax, dword [ebx + 0xc]
mov dword [0x1014ee80], eax
mov eax, dword [ebx + 0x10]
mov dword [0x1014ef74], eax
mov eax, dword [ebx + 0x14]
mov dword [0x1014ee7c], eax
mov eax, dword [ebx + 0x18]
mov dword [0x1014ef70], eax
mov eax, dword [ebx + 0x1c]
mov dword [0x1014ef6c], eax
mov eax, dword [ebx + 0x20]
mov dword [0x1014ef68], eax
mov eax, dword [ebx + 0x24]
mov dword [0x1014ef18], eax
mov eax, dword [ebx + 0x28]
mov dword [0x1014ef14], eax
mov eax, dword [ebx + 0x2c]
mov dword [0x1014ef10], eax
mov eax, dword [ebx + 0x30]
mov dword [0x1014ef0c], eax
mov eax, dword [ebx + 0x34]
mov dword [0x1014ef08], eax
mov eax, dword [ebx + 0x38]
mov dword [0x1014ef04], eax
mov eax, dword [ebx + 0x3c]
mov dword [0x1014ef00], eax
mov eax, dword [ebx + 0x40]
mov dword [0x1014eefc], eax
mov eax, dword [ebx + 0x44]
mov dword [0x1014eef8], eax
mov eax, dword [ebx + 0x48]
mov dword [0x1014eef4], eax
mov eax, dword [ebx + 0x4c]
mov dword [0x1014eef0], eax
mov eax, dword [ebx + 0x50]
mov dword [0x1014eeec], eax
mov eax, dword [ebx + 0x54]
mov dword [0x1014eee8], eax
mov eax, dword [ebx + 0x58]
mov dword [0x1014eee4], eax
mov eax, dword [ebx + 0x5c]
mov dword [0x1014eee0], eax
mov eax, dword [ebx + 0x60]
mov dword [0x1014eedc], eax
mov eax, dword [ebx + 0x64]
mov dword [0x1014eed8], eax
mov eax, dword [ebx + 0x68]
mov dword [0x1014eed4], eax
mov eax, dword [ebx + 0x6c]
mov dword [0x1014eed0], eax
mov eax, dword [ebx + 0x70]
mov dword [0x1014eecc], eax
mov eax, dword [ebx + 0x74]
mov dword [0x1014eec8], eax
mov eax, dword [ebx + 0x78]
mov dword [0x1014eec4], eax
mov eax, dword [ebx + 0x7c]
mov dword [0x1014eec0], eax
mov eax, dword [ebx + 0x80]
mov dword [0x1014eebc], eax
mov eax, dword [ebx + 0x84]
mov dword [0x1014eeb8], eax
mov eax, dword [ebx + 0x88]
mov dword [0x1014eeb4], eax
mov eax, dword [ebx + 0x8c]
mov dword [0x1014eeb0], eax
mov eax, dword [ebx + 0x90]
mov dword [0x1014eeac], eax
mov eax, dword [ebx + 0x94]
mov dword [0x1014eea8], eax
mov eax, dword [ebx + 0x98]
mov dword [0x1014eea4], eax
mov eax, dword [ebx + 0x9c]
mov dword [0x1014eea0], eax
mov eax, dword [ebx + 0xa0]
mov dword [0x1014ee9c], eax
mov eax, dword [ebx + 0xa4]
pop edi
mov dword [0x1014ee98], eax
mov eax, dword [ebx + 0xa8]
pop esi
mov dword [0x1014ee94], eax
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100890df
mov esp, ebp
pop ebp
ret
mov eax, 0x1030863a
mov esi, 0xffff
mov dword [eax - 2], esi
add eax, 4
cmp eax, 0x10308c7a
jl 0x10068ba1
xor edx, edx
cmp byte [ebx + 5], dl
jbe case.0x10068594.228
lea ecx, [ebx + 8]
nop dword [eax]
mov al, byte [ecx + 1]
movzx edi, word [ecx - 2]
mov byte [ebp - 0x55], al
mov al, byte [ecx]
mov byte [ebp - 0x56], al
xor eax, eax
cmp word [eax*4 + 0x10308638], si
je 0x10068be5
inc eax
cmp eax, 0x190
jl 0x10068bd1
jmp 0x10068c04
mov bl, byte [ebp - 0x56]
mov byte [eax*4 + 0x1030863a], bl
mov bl, byte [ebp - 0x55]
mov byte [eax*4 + 0x1030863b], bl
mov ebx, dword [ebp - 0x40]
mov word [eax*4 + 0x10308638], di
movzx eax, byte [ebx + 5]
inc edx
add ecx, 4
cmp edx, eax
jl 0x10068bc0
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100890df
mov esp, ebp
pop ebp
ret
movzx eax, byte [ebx + 4]
lea esi, [ebx + 6]
mov byte [0x1014e321], al
mov ecx, 0x1e
movzx eax, byte [ebx + 5]
mov edi, 0x1014e2a8
rep movsd dword es:[edi], dword [esi]
lea esi, [ebx + 0x7e]
mov byte [0x1014e320], al
mov ecx, 0x1e
mov edi, 0x1014e230
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100890df
mov esp, ebp
pop ebp
ret
mov al, byte [ebx + 5]
cmp al, 1
jne 0x10068d36
movzx esi, byte [ebx + 6]
movzx eax, byte [ebx + 7]
mov ecx, dword [0x1014b9ec]
mov edx, dword [0x1014b9f0]
mov edi, dword [ebx + 0xa]
shl esi, 8
or esi, eax
mov al, byte [ebx + 0xe]
mov byte [ebp - 0x55], al
cmp ecx, edx
je 0x10068cae
nop dword [eax]
movzx eax, word [ecx]
cmp eax, esi
je 0x10068cf2
add ecx, 0xc
cmp ecx, edx
jne 0x10068ca0
mov eax, dword [ebx + 0xa]
mov dword [ebp - 0x44], eax
mov al, byte [ebx + 0xe]
mov word [ebp - 0x48], si
mov byte [ebp - 0x40], al
cmp edx, dword [0x1014b9f4]
je 0x10068d11
movq xmm0, qword [ebp - 0x48]
mov eax, dword [ebp - 0x40]
pop edi
movq qword [edx], xmm0
mov dword [edx + 8], eax
mov eax, 1
add dword [0x1014b9f0], 0xc
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100890df
mov esp, ebp
pop ebp
ret
mov al, byte [ebp - 0x55]
mov dword [ecx + 4], edi
pop edi
pop esi
mov byte [ecx + 8], al
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100890df
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x48]
mov ecx, 0x1014b9ec
push eax
push edx
call fcn.10065d50
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100890df
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0x60], 0
test al, al
je case.0x10068594.228
mov edx, dword [0x1014b9f0]
lea esi, [ebx + 6]
nop
movzx eax, byte [esi]
movzx edi, byte [esi + 1]
mov ecx, dword [0x1014b9ec]
shl eax, 8
or edi, eax
mov al, byte [esi + 8]
mov byte [ebp - 0x55], al
mov eax, dword [esi + 4]
mov dword [ebp - 0x40], eax
cmp ecx, edx
je 0x10068d84
movzx eax, word [ecx]
cmp eax, edi
je 0x10068dfd
add ecx, 0xc
cmp ecx, edx
jne 0x10068d72
mov eax, dword [esi + 4]
mov dword [ebp - 0x50], eax
mov al, byte [esi + 8]
mov word [ebp - 0x54], di
mov byte [ebp - 0x4c], al
cmp edx, dword [0x1014b9f4]
je 0x10068dbc
movq xmm0, qword [ebp - 0x54]
mov eax, dword [ebp - 0x4c]
movq qword [edx], xmm0
mov dword [edx + 8], eax
mov edx, dword [0x1014b9f0]
add edx, 0xc
mov dword [0x1014b9f0], edx
jmp 0x10068dd1
lea eax, [ebp - 0x54]
mov ecx, 0x1014b9ec
push eax
push edx
call fcn.10065d50
mov edx, dword [0x1014b9f0]
mov ecx, dword [ebp - 0x60]
add esi, 0xc
movzx eax, byte [ebx + 5]
inc ecx
mov dword [ebp - 0x60], ecx
cmp ecx, eax
jl 0x10068d50
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100890df
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x40]
mov dword [ecx + 4], eax
mov al, byte [ebp - 0x55]
pop edi
pop esi
mov byte [ecx + 8], al
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100890df
mov esp, ebp
pop ebp
ret
cmp byte [ebx + 4], 0xc
ja case.0x10067c35.18
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [0x1030b228], eax
mov dword [0x1030b22c], 0
movzx eax, byte [ebx + 4]
mov dword [0x10308cc8], eax
cmp byte [ebx + 4], 0
mov dword [ebp - 0x60], 0
jbe case.0x10067c35.18
lea eax, [ebx + 5]
mov edi, 0x10308cd8
mov dword [ebp - 0x5c], eax
lea esi, [edi - 0xc]
xorps xmm0, xmm0
movq qword [esi], xmm0
xor eax, eax
mov word [esi + 8], 0
mov byte [esi + 0xa], 0
mov dword [edi], eax
push 0x45
push eax
mov word [edi + 4], ax
lea eax, [edi + 7]
push eax
call fcn.100d71f0
mov ecx, dword [ebp - 0x5c]
add esp, 0xc
sub esi, ecx
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [ecx + esi - 1], al
test al, al
jne 0x10068e93
mov esi, dword [ebp - 0x5c]
mov edx, edi
lea ecx, [esi + 0xc]
sub edx, ecx
nop word [eax + eax]
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [ecx + edx - 1], al
test al, al
jne 0x10068eb0
mov edx, edi
lea ecx, [esi + 0x13]
sub edx, esi
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [ecx + edx - 0xd], al
test al, al
jne 0x10068ec4
mov ecx, dword [ebp - 0x60]
add esi, 0x59
movzx eax, byte [ebx + 4]
inc ecx
add edi, 0x31d
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x5c], esi
cmp ecx, eax
jl 0x10068e63
jmp case.0x10067c35.18
mov al, byte [ebx + 4]
cmp al, 0xc
ja case.0x10067c35.18
movzx eax, al
xorps xmm0, xmm0
imul esi, eax, 0x31d
xor eax, eax
push 0x45
push eax
movq qword [esi + 0x10308ccc], xmm0
mov word [esi + 0x10308cd4], 0
mov byte [esi + 0x10308cd6], 0
mov dword [esi + 0x10308cd8], eax
mov word [esi + 0x10308cdc], ax
lea eax, [esi + 0x10308cdf]
push eax
call fcn.100d71f0
push 0x2bb
lea eax, [esi + 0x10308d25]
push 0
push eax
call fcn.100d71f0
movzx eax, byte [ebx + 4]
lea edx, [ebx + 5]
imul ecx, eax, 0x31d
add esp, 0x18
add ecx, 0x10308ccc
nop dword [eax + eax]
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x10068f70
movzx eax, byte [ebx + 4]
lea edx, [ebx + 0x11]
imul ecx, eax, 0x31d
add ecx, 0x10308cd8
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x10068f91
movzx eax, byte [ebx + 4]
lea edx, [ebx + 0x18]
imul ecx, eax, 0x31d
add ecx, 0x10308cdf
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x10068fb2
movzx eax, byte [ebx + 4]
lea edx, [ebx + 0x5e]
imul ecx, eax, 0x31d
add ecx, 0x10308d25
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x10068fd3
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
movzx ecx, byte [ebx + 4]
imul ecx, ecx, 0x31d
mov dword [ecx + 0x10308fe1], eax
movzx eax, byte [ebx + 4]
imul eax, eax, 0x31d
mov dword [eax + 0x10308fe5], 0
jmp case.0x10067c35.18
cmp byte [ebx], 0xc1
jne 0x1006901a
mov al, byte [ebx + 3]
jmp 0x1006901d
mov al, byte [ebx + 4]
movzx eax, al
sub eax, 0x20
je 0x1006910d
sub eax, 1
je 0x1006906d
sub eax, 2
jne case.0x10067c35.18
mov eax, dword [ebx + 4]
push eax
push 0x1012b404
push str.ChaosMachineMixResult
push 0x1013a400
mov dword [0x1013a3b8], eax
call fcn.10041730
add esp, 0x10
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100890df
mov esp, ebp
pop ebp
ret
call fcn.1000b8a0
cmp byte [ebx + 5], 0
jbe case.0x10068594.228
xor edi, edi
lea esi, [ebx + 6]
lea eax, [esi + 1]
push eax
movzx eax, byte [esi]
push eax
call fcn.1000b7b0
movzx eax, byte [ebx + 5]
lea esi, [esi + 0xd]
inc edi
cmp edi, eax
jl 0x10069081
mov ecx, dword [0x1013a434]
sub ecx, dword [0x1013a430]
movss xmm1, dword [0x1013a3d4]
sar ecx, 3
sub ecx, dword [0x1013a3f8]
pop edi
pop esi
mov dword [0x1013a3e4], 0
movd xmm0, ecx
lea eax, [ecx - 1]
cvtdq2pd xmm0, xmm0
shr ecx, 0x1f
mov dword [0x1013a3e8], eax
mov eax, 1
mov dword [0x1013a3ec], 0
pop ebx
addsd xmm0, qword [ecx*8 + 0x1012e640]
cvtpd2ps xmm0, xmm0
divss xmm1, xmm0
movss dword [0x1013a3f4], xmm1
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100890df
mov esp, ebp
pop ebp
ret
mov byte [0x1013a3c8], 1
mov dword [0x1013a3fc], 0
mov eax, dword [ebx + 4]
mov dword [0x1013a3b8], eax
mov eax, dword [ebx + 8]
pop edi
mov dword [0x1013a3bc], eax
mov eax, dword [ebx + 0xc]
pop esi
mov dword [0x1013a3c0], eax
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100890df
mov esp, ebp
pop ebp
ret
push dword [ebp + 0x10]
movzx eax, byte [ebx + 4]
push ebx
push eax
call fcn.100593a0
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100890df
mov esp, ebp
pop ebp
ret
cmp byte [ebx], 0xc1
jne 0x1006917a
mov al, byte [ebx + 3]
jmp 0x1006917d
mov al, byte [ebx + 4]
cmp al, 0x16
je 0x100691d8
cmp al, 0x2c
jne case.0x10068594.228
movzx eax, byte [ebx + 6]
push eax
call fcn.100119d0
xor edi, edi
cmp byte [ebx + 5], 0
jbe case.0x10068594.228
lea esi, [ebx + 9]
nop word [eax + eax]
push dword [esi + 2]
movzx eax, byte [ebx + 6]
push eax
movzx eax, byte [esi]
push eax
movzx eax, word [esi - 2]
push eax
call fcn.10011cf0
movzx eax, byte [ebx + 5]
lea esi, [esi + 8]
inc edi
cmp edi, eax
jl 0x100691a0
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100890df
mov esp, ebp
pop ebp
ret
push ebx
call fcn.10035380
mov ecx, dword [ebp - 4]
mov eax, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100890df
mov esp, ebp
pop ebp
ret