Function at 0x100dbbd0
Capabilities:
Check for software breakpoints
Check for time delay via gettickcount
Encrypt data using rc4 ksa
Enumerate pe sections
Resolve function by parsing pe exports
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xec
mov eax, dword [0x10129040]
xor eax, ebp
mov dword [ebp - 4], eax
movzx eax, byte [ebp + 8]
push ebx
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x74], ebx
push esi
push edi
cmp eax, 0xf6
ja case.default.0x100df5f7
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, 1
movzx eax, byte [eax + 0x100df91c]
mov dword [ebp - 0x80], esi
jmp dword [eax*4 + 0x100df890]
call fcn.10014850
test al, al
je case.default.0x100df5f7
mov ecx, ebx
call fcn.100dfca0
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
call fcn.10014850
test al, al
je case.default.0x100df5f7
mov ecx, ebx
call fcn.100e06f0
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
movzx ecx, byte [ebx + 3]
movzx eax, byte [ebx + 4]
shl ecx, 8
or ecx, eax
and ecx, 0x7fff
cmp dword [0x114a0530], ecx
jne 0x100dbc90
mov eax, dword [ebx + 0xc]
mov dword [0x114a03f0], eax
mov eax, dword [ebx + 0x10]
mov dword [0x114a03f8], eax
mov eax, dword [ebx + 0x18]
mov dl, byte [ebx + 7]
mov ecx, dword [ebx + 0x14]
mov dword [0x114a0520], eax
mov eax, dword [0x114a050c]
mov dword [0x114a0524], ecx
test dl, 0x10
je 0x100dbcc5
cmp eax, 3
jae 0x100dbcc5
mov dword [eax*4 + 0x114a0510], ecx
inc eax
mov dword [0x114a050c], eax
mov dword [0x114a0508], eax
test dl, 0x20
je case.default.0x100df5f7
cmp eax, 4
jae case.default.0x100df5f7
mov dword [eax*4 + 0x114a0510], ecx
inc eax
mov dword [0x114a050c], eax
mov dword [0x114a0508], eax
jmp case.default.0x100df5f7
mov ecx, ebx
call fcn.100e1920
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
cmp dword [0x10303810], 5
mov eax, dword [ebx + 0xc]
mov dword [0x114a0524], eax
jne case.default.0x100df5f7
movzx ecx, byte [ebx + 3]
movzx eax, byte [ebx + 4]
shl ecx, 8
or ecx, eax
push ecx
mov eax, 0x57d9a0
call eax
add esp, 4
push eax
mov eax, 0x402bc0
call eax
mov edx, 0x96a4c0
mov ecx, eax
call edx
test eax, eax
je case.default.0x100df5f7
mov ecx, 0x115
cmp word [eax + 0x84], cx
jne case.default.0x100df5f7
push 0
push 0
push dword [eax + 0xb0]
push dword [eax + 0xac]
mov eax, 0x8cb950
call eax
add esp, 0x10
jmp case.default.0x100df5f7
movzx ecx, byte [ebx + 3]
movzx eax, byte [ebx + 4]
shl ecx, 8
or ecx, eax
and ecx, 0x7fff
cmp dword [0x114a0530], ecx
jne 0x100dbda4
mov dword [0x114a03f0], 0
cmp dword [0x10303810], 5
jne case.default.0x100df5f7
jmp 0x100dbd2a
cmp byte [ebx + 4], 0
mov dword [ebp - 0x78], 0
jbe case.default.0x100dcd22
movss xmm1, dword [0x1011fae4]
lea esi, [ebx + 8]
movsd xmm2, qword [0x1011fff0]
mov edx, 0x5f7b60
nop
movzx eax, byte [esi - 1]
movzx ecx, byte [esi - 3]
shl ecx, 8
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movzx eax, byte [esi]
addss xmm0, xmm1
cvtps2pd xmm0, xmm0
mulsd xmm0, xmm2
cvtpd2ps xmm0, xmm0
movss dword [ebp - 0x6c], xmm0
movd xmm0, eax
movzx eax, byte [esi - 2]
cvtdq2ps xmm0, xmm0
or ecx, eax
mov edi, ecx
and edi, 0x7fff
addss xmm0, xmm1
cvtps2pd xmm0, xmm0
mulsd xmm0, xmm2
cvtpd2ps xmm0, xmm0
movss dword [ebp - 0x68], xmm0
cmp edi, 0x3e8
jae 0x100dbea3
shr ecx, 0xf
lea eax, [esi + 1]
push ecx
lea ecx, [ebp - 0x6c]
push ecx
push eax
lea eax, [edi + 0x273c0]
imul eax, eax, 0x350
push eax
call edx
movss xmm1, dword [0x1011fae4]
add esp, 0x10
cmp dword [0x10303904], 1
mov edx, 0x5f7b60
movsd xmm2, qword [0x1011fff0]
jne 0x100dbea3
lea ecx, [edi + edi*4]
mov byte [ecx*4 + 0x11351c68], 1
movq xmm0, qword [esi + 1]
movq qword [ecx*4 + 0x11351c69], xmm0
mov eax, dword [esi + 9]
mov dword [ecx*4 + 0x11351c71], eax
mov eax, dword [esi + 0xd]
mov dword [ecx*4 + 0x11351c78], eax
mov ecx, dword [ebp - 0x78]
add esi, 0x14
movzx eax, byte [ebx + 4]
inc ecx
mov dword [ebp - 0x78], ecx
cmp ecx, eax
jl 0x100dbde0
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
cmp dword [0x10303904], edi
jne case.default.0x100df5f7
xor esi, esi
cmp byte [ebx + 4], 0
jbe case.default.0x100df5f7
lea edx, [ebx + 5]
nop word [eax + eax]
movzx eax, byte [edx]
lea edx, [edx + 2]
movzx ecx, byte [edx - 1]
inc esi
shl eax, 8
or ecx, eax
lea eax, [ecx + ecx*4]
mov byte [eax*4 + 0x11351c68], 0
mov dword [eax*4 + 0x11351c69], 0xffffffff
mov dword [eax*4 + 0x11351c6d], 0xffffffff
mov dword [eax*4 + 0x11351c71], 0xffffffff
mov dword [eax*4 + 0x11351c78], 0
movzx eax, byte [ebx + 4]
cmp esi, eax
jl 0x100dbef0
jmp case.default.0x100df5f7
push 9
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne case.default.0x100df5f7
mov al, byte [ebx + 3]
cmp al, 3
je 0x100dbf79
cmp al, 5
jb 0x100dbf6d
cmp al, 8
jbe 0x100dbf79
cmp al, 9
je 0x100dbf79
cmp al, 0xa
jne case.default.0x100df5f7
mov eax, 0x7dd1b0
mov byte [0x81f6bef], 0
call eax
mov dword [0x8793744], 0
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
cmp byte [ebx + 3], 0xfe
jne 0x100dbfba
mov eax, dword [ebx + 0xc]
mov dword [0x114a03ec], eax
mov eax, dword [ebx + 0x10]
mov dword [0x114a03f4], eax
cmp byte [ebx + 3], 0xff
jne case.default.0x100df5f7
cmp dword [0x114a03f0], 0
je 0x100dbfd5
mov eax, dword [ebx + 0xc]
mov dword [0x114a03f0], eax
mov eax, dword [ebx + 0x10]
mov dword [0x114a03f8], eax
jmp case.default.0x100df5f7
cmp byte [ebx + 3], 0xfe
jne 0x100dbff8
mov eax, dword [ebx + 8]
mov dword [0x114a041c], eax
mov eax, dword [ebx + 0xc]
mov dword [0x114a0418], eax
cmp byte [ebx + 3], 0xff
jne case.default.0x100df5f7
mov eax, dword [ebx + 8]
mov dword [0x114a03e8], eax
mov eax, dword [ebx + 0xc]
mov dword [0x114a040c], eax
jmp case.default.0x100df5f7
mov al, byte [ebx + 3]
cmp al, 0xec
jb case.default.0x100df5f7
movzx eax, al
push eax
call fcn.100ce730
cmp byte [ebx + 4], 0
je case.default.0x100dcd22
mov dword [0x8793738], 0
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
mov al, byte [ebx + 3]
cmp al, 0xec
jb case.default.0x100df5f7
movzx edi, al
mov ecx, 0x1151be40
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], edi
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.10011c40
mov eax, dword [ebp - 0x64]
mov esi, dword [0x1151be40]
cmp byte [eax + 0xd], 0
jne 0x100dc08c
cmp edi, dword [eax + 0x10]
jge 0x100dc08e
mov eax, esi
xor edx, edx
lea ecx, [eax + 0x14]
cmp eax, esi
cmovne edx, ecx
test edx, edx
je case.default.0x100dcd22
mov al, byte [ebx + 4]
mov byte [edx + 0x18], al
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
mov al, byte [ebx + 3]
test al, al
je 0x100dc0d3
cmp al, 3
je 0x100dc0d3
cmp al, 6
je 0x100dc0d3
cmp al, 0x11
jne case.default.0x100df5f7
mov eax, dword [ebx + 8]
mov dword [0x114a052c], eax
mov eax, dword [ebx + 0xc]
mov dword [0x114a0528], eax
mov eax, dword [ebx + 0x10]
mov dword [0x114a04f4], eax
mov eax, dword [ebx + 0x14]
mov dword [0x114a04f0], eax
mov eax, dword [ebx + 0x18]
mov dword [0x114a04ec], eax
mov eax, dword [ebx + 0x1c]
mov dword [0x114a0408], eax
mov eax, dword [ebx + 0x20]
mov dword [0x114a0400], eax
jmp case.default.0x100df5f7
cmp dword [0x10303920], 0
je case.default.0x100df5f7
cmp byte [ebx + 8], 0
jne 0x100dc180
mov al, byte [ebx + 0x10]
test al, al
je 0x100dc180
xor esi, esi
mov ecx, 0x114f09d0
mov edx, dword [ecx]
test edx, edx
je 0x100dc152
movzx eax, al
cmp edx, eax
je 0x100dc158
mov al, byte [ebx + 0x10]
add ecx, 0xc
inc esi
cmp ecx, 0x114f0b50
jl 0x100dc131
jmp case.default.0x100df5f7
inc dword [0x114f09c4]
movzx eax, byte [ebx + 0x10]
lea ecx, [esi + esi*2]
mov dword [ecx*4 + 0x114f09d0], eax
mov eax, dword [ebx + 0xc]
dec eax
mov dword [ecx*4 + 0x114f09d4], eax
mov eax, dword [ebx + 0xc]
mov dword [ecx*4 + 0x114f09d8], eax
jmp case.default.0x100df5f7
movzx edx, byte [ebx + 0x10]
xor ecx, ecx
mov eax, 0x114f09d0
nop dword [eax + eax]
cmp dword [eax], edx
je 0x100dc1a4
add eax, 0xc
inc ecx
cmp eax, 0x114f0b50
jl 0x100dc190
jmp case.default.0x100df5f7
lea eax, [ecx + ecx*2]
mov dword [eax*4 + 0x114f09d0], 0
mov dword [eax*4 + 0x114f09d4], 0
mov dword [eax*4 + 0x114f09d8], 0
dec dword [0x114f09c4]
jmp case.default.0x100df5f7
push ebx
call fcn.100d0910
jmp case.default.0x100df5f7
cmp byte [ebx + 3], 1
je 0x100dc1ee
xorps xmm0, xmm0
movups xmmword [0x11515214], xmm0
mov byte [0x102e4eed], 0
mov dword [0xe8cb3c], 0
jmp case.default.0x100df5f7
mov eax, dword [ebx + 4]
mov dword [0x11515224], eax
mov eax, dword [ebx + 8]
mov dword [0x11515228], eax
mov eax, dword [ebx + 0xc]
mov dword [0x1151522c], eax
mov eax, dword [ebx + 0x10]
mov dword [0x11515230], eax
jmp case.default.0x100df5f7
xorps xmm0, xmm0
movups xmmword [0x11515214], xmm0
movups xmmword [0x11515224], xmm0
movups xmmword [0x11515234], xmm0
jmp case.default.0x100df5f7
cmp byte [ebx], 0xc1
jne 0x100dc250
mov al, byte [ebx + 3]
jmp 0x100dc253
mov al, byte [ebx + 4]
test al, al
je 0x100dc26a
cmp al, 3
jne case.default.0x100df5f7
push ebx
call fcn.100803f0
jmp case.default.0x100df5f7
push ebx
call fcn.10080190
jmp case.default.0x100df5f7
lea eax, [ebx + 3]
mov word [ebp - 0x7e], 0
mov byte [ebp - 0x81], 0
xorps xmm0, xmm0
movq qword [ebp - 0x68], xmm0
test eax, eax
je 0x100dc2a4
movq xmm0, qword [eax]
mov ax, word [eax + 8]
movq qword [ebp - 0x68], xmm0
mov word [ebp - 0x7e], ax
jmp 0x100dc2b4
call fcn.100f87cd
mov dword [eax], 0x16
call fcn.100f77a7
lea esi, [ebx + 0xe]
test esi, esi
je 0x100dc2c8
mov ecx, 0x16
lea edi, [ebp - 0x60]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
jmp 0x100dc2e8
push 0x59
lea eax, [ebp - 0x60]
push 0
push eax
call fcn.100f06a0
add esp, 0xc
call fcn.100f87cd
mov dword [eax], 0x16
call fcn.100f77a7
lea edi, [ebp - 0x60]
lea ecx, [edi + 1]
nop
mov al, byte [edi]
inc edi
test al, al
jne 0x100dc2f0
sub edi, ecx
cmp edi, 0x2d
jle 0x100dc359
mov ecx, 0x2b
lea edx, [ebp - 0x38]
mov eax, 0x28
sub ecx, edx
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x70], ecx
lea esi, [ebp - 0x60]
add esi, eax
mov al, byte [esi]
mov byte [ebp - 0x79], al
movsx eax, al
push eax
call fcn.100f8870
add esp, 4
test eax, eax
jne 0x100dc333
cmp byte [ebp - 0x79], 0x20
jne 0x100dc34e
mov eax, dword [ebp - 0x70]
add eax, esi
mov word [esi], 0x2e2e
mov byte [esi + 2], 0x2e
cmp eax, 0x59
jae 0x100df889
mov byte [esi + 3], 0
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp eax, edi
jl 0x100dc313
mov eax, dword [0x1027f8b8]
cmp eax, 0xe
jle 0x100dc36a
xor eax, eax
mov dword [0x1027f8b8], eax
mov cx, word [ebp - 0x7e]
lea esi, [ebp - 0x60]
movq xmm0, qword [ebp - 0x68]
imul eax, eax, 0xcf
add eax, 0x1027f8c0
movq qword [eax], xmm0
mov word [eax + 8], cx
mov cl, byte [ebp - 0x81]
mov byte [eax + 0xa], cl
mov ecx, 0x16
imul edi, dword [0x1027f8b8], 0xcf
add edi, 0x1027f8cb
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x1a
movsb byte es:[edi], byte [esi]
imul edi, dword [0x1027f8b8], 0xcf
lea esi, [ebx + 0x67]
mov ebx, 0x102804ec
add edi, 0x1027f924
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov eax, dword [0x1027f8b8]
inc eax
mov dword [0x1027f8b8], eax
dec eax
mov dword [ebp - 0x80], eax
nop dword [eax + eax]
imul edx, eax, 0xcf
mov ecx, 0x16
mov edi, ebx
movq xmm0, qword [edx + 0x1027f8c0]
lea esi, [edx + 0x1027f8cb]
movq qword [ebx - 0xb], xmm0
mov ax, word [edx + 0x1027f8c8]
mov word [ebx - 3], ax
mov al, byte [edx + 0x1027f8ca]
mov byte [ebx - 1], al
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x1a
mov eax, dword [ebp - 0x80]
movsb byte es:[edi], byte [esi]
lea esi, [edx + 0x1027f924]
lea edi, [ebx + 0x59]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
test eax, eax
jg 0x100dc438
mov eax, 0xe
jmp 0x100dc439
dec eax
add ebx, 0xcf
mov dword [ebp - 0x80], eax
cmp ebx, 0x1028103e
jle 0x100dc3e0
mov ebx, dword [ebp - 0x74]
push dword [ebp + 0x14]
movzx eax, byte [ebp + 8]
push dword [ebp + 0x10]
push ebx
push eax
mov eax, 0x663b20
call eax
add esp, 0x10
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
mov eax, dword [ebx + 4]
mov dword [0x10572ce8], eax
mov eax, dword [ebx + 8]
mov dword [0x10572ce4], eax
mov eax, dword [ebx + 0xc]
mov dword [0x10572ce0], eax
jmp case.default.0x100df5f7
mov ecx, ebx
call fcn.100e1c00
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
xor esi, esi
mov edi, 0x402bc0
mov ebx, 0x96a4c0
push esi
call edi
mov ecx, eax
call ebx
inc esi
mov byte [eax + 0x17], 0
cmp esi, 0x190
jl 0x100dc4b4
jmp 0x100dc44a
mov ecx, ebx
call fcn.100e0a90
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
movzx ecx, byte [ebx + 3]
movzx eax, byte [ebx + 4]
shl ecx, 8
or ecx, eax
and ecx, 0x7fff
cmp dword [0x114a0530], ecx
jne case.default.0x100df5f7
mov eax, dword [ebx + 8]
mov dword [0x114a0528], eax
jmp case.default.0x100df5f7
cmp byte [ebx], 0xc1
jne 0x100dc51a
mov al, byte [ebx + 3]
jmp 0x100dc51d
mov al, byte [ebx + 4]
movzx eax, al
sub eax, 0
je 0x100dc5ff
sub eax, 1
jne case.default.0x100df5f7
cmp dword [0x10303920], eax
je 0x100dc56e
mov dword [0x114f09c4], eax
mov eax, 0x114f09d4
nop dword [eax]
nop dword [eax + eax]
mov dword [eax - 4], 0
mov dword [eax], 0
mov dword [eax + 4], 0
add eax, 0xc
cmp eax, 0x114f0b54
jl 0x100dc550
mov eax, dword [0x114a0554]
cmp eax, 1
je case.default.0x100df5f7
cmp byte [ebx + 4], 1
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
jne 0x100dc5f0
mov ecx, dword [0x114a0550]
xor edi, edi
cmp ecx, 3
cmove edi, eax
xor eax, eax
cmp ecx, 3
mov dword [0x114a0554], edi
cmove eax, ecx
mov dword [0x114a0550], eax
call esi
mov dword [0x114a054c], eax
call esi
xor ecx, ecx
mov dword [0x114a0548], eax
mov eax, dword [0x114a053c]
test edi, edi
mov dword [0x114a0544], 0
cmove eax, ecx
mov dword [0x114a0540], 0
mov dword [0x114a053c], eax
test edi, edi
mov eax, dword [0x114a0538]
cmove eax, ecx
mov dword [0x114a0538], eax
jmp case.default.0x100df5f7
mov dword [0x114a0550], 0
jmp 0x100dc693
cmp dword [0x10303920], 0
je 0x100dc63e
mov dword [0x114f09c4], 0
mov eax, 0x114f09d4
nop word [eax + eax]
mov dword [eax - 4], 0
mov dword [eax], 0
mov dword [eax + 4], 0
add eax, 0xc
cmp eax, 0x114f0b54
jl 0x100dc620
mov dword [0x8793714], edi
movzx esi, word [ebx + 0x14]
cmp dword [0x114a0554], edi
jne 0x100dc65d
cmp dword [0x114a0550], 3
jne case.default.0x100df5f7
lea eax, [ebx + 4]
push eax
push 0x10
push 0x114a0558
call fcn.100f78eb
xor ecx, ecx
mov word [0x106ff75c], si
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 0xc
cmp dword [0x114a0550], 3
cmove ecx, dword [0x114a0550]
mov dword [0x114a0550], ecx
mov dword [0x114a0554], 2
call esi
mov dword [0x114a054c], eax
call esi
mov dword [0x114a0548], eax
mov dword [0x114a0544], 0
mov dword [0x114a0540], 0
jmp case.default.0x100df5f7
cmp byte [ebx], 0xc1
jne 0x100dc6ce
mov al, byte [ebx + 3]
jmp 0x100dc6d1
mov al, byte [ebx + 4]
cmp al, 0x14
je 0x100dc85d
cmp al, 0x20
jne case.default.0x100df5f7
movzx ecx, byte [ebx + 4]
movzx eax, byte [ebx + 5]
shl ecx, 8
or ecx, eax
mov eax, 0x57d9a0
push ecx
call eax
add esp, 4
push eax
mov eax, 0x402bc0
call eax
mov edx, 0x96a4c0
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je case.default.0x100dcd22
mov ecx, dword [0x8793710]
test ecx, ecx
je 0x100dc7a9
mov eax, dword [ebx + 8]
mov esi, 0xda
mov edx, dword [ebx + 0xc]
cmp word [edi + 0x84], si
jne 0x100dc76f
mov dword [ecx + 2], eax
mov dword [ecx + 6], edx
movq xmm0, qword [ebx + 0x10]
movq qword [ecx + 0xb], xmm0
mov ax, word [ebx + 0x18]
mov word [ecx + 0x13], ax
mov al, byte [ebx + 6]
mov byte [ecx], al
mov al, byte [ebx + 7]
mov byte [ecx + 1], al
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
mov dword [ecx + 0x18], eax
mov dword [ecx + 0x1c], edx
movq xmm0, qword [ebx + 0x10]
movq qword [ecx + 0x21], xmm0
mov ax, word [ebx + 0x18]
mov word [ecx + 0x29], ax
mov al, byte [ebx + 6]
mov byte [ecx + 0x16], al
mov al, byte [ebx + 7]
mov byte [ecx + 0x17], al
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
push 0x2c
mov eax, 0x9cdb52
call eax
mov esi, eax
add esp, 4
test esi, esi
je 0x100dc7ce
push 0x668cc0
push 2
push 0x16
push esi
mov eax, 0x4086f0
call eax
jmp 0x100dc7d0
xor esi, esi
mov dword [0x8793710], esi
mov edx, 0xda
mov eax, dword [ebx + 8]
mov ecx, dword [ebx + 0xc]
cmp word [edi + 0x84], dx
jne 0x100dc823
mov dword [esi + 2], eax
mov dword [esi + 6], ecx
movq xmm0, qword [ebx + 0x10]
movq qword [esi + 0xb], xmm0
mov ax, word [ebx + 0x18]
mov word [esi + 0x13], ax
mov al, byte [ebx + 6]
mov byte [esi], al
mov al, byte [ebx + 7]
mov byte [esi + 1], al
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], ecx
movq xmm0, qword [ebx + 0x10]
movq qword [esi + 0x21], xmm0
mov ax, word [ebx + 0x18]
mov word [esi + 0x29], ax
mov al, byte [ebx + 6]
mov byte [esi + 0x16], al
mov al, byte [ebx + 7]
mov byte [esi + 0x17], al
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
movzx ecx, byte [ebx + 4]
movzx eax, byte [ebx + 5]
shl ecx, 8
or ecx, eax
mov eax, 0x57d9a0
push ecx
call eax
add esp, 4
mov edi, 0x402bc0
push eax
call edi
mov esi, 0x96a4c0
mov ecx, eax
call esi
test eax, eax
je case.default.0x100dcd22
mov cl, byte [ebx + 8]
test cl, cl
je 0x100dc996
cmp cl, 1
jne 0x100dc8d6
mov eax, 0x669fc0
lea ecx, [ebp - 0x78]
call eax
lea eax, [ebp - 0x78]
push eax
mov eax, 0x66d2e0
call eax
add esp, 4
lea ecx, [ebp - 0x78]
mov eax, 0x669fe0
call eax
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
cmp cl, 2
jne case.default.0x100dcd22
movzx ecx, byte [ebx + 6]
movzx eax, byte [ebx + 7]
shl ecx, 8
or ecx, eax
mov eax, 0x57d9a0
push ecx
call eax
add esp, 4
push eax
call edi
mov ecx, eax
call esi
mov esi, eax
test esi, esi
je case.default.0x100dcd22
mov eax, 0x66a000
lea ecx, [ebp - 0x70]
call eax
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x74], 0
push ecx
push eax
mov eax, 0x66d360
call eax
add esp, 8
lea ecx, [ebp - 0x70]
mov eax, 0x66a020
call eax
cmp dword [ebp - 0x74], 0
je case.default.0x100dcd22
add esi, 0x38
mov edi, 0x402320
push esi
push 0x5ce
mov ecx, 0x8128adc
call edi
push eax
push dword [ebp - 0x74]
push 0x102de7a0
call fcn.1008ce60
add esp, 0x10
mov ecx, 0x8128adc
push esi
push 0x5d0
call edi
push eax
push dword [ebp - 0x74]
push 0x102de7a0
call fcn.1008ce60
add esp, 0x10
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
mov ecx, 0xda
cmp word [eax + 0x84], cx
mov eax, 0x668770
mov ecx, 0x8793710
je 0x100dc9b3
mov ecx, 0x8793726
call eax
mov eax, 0x669f80
lea ecx, [ebp - 0x78]
call eax
lea eax, [ebp - 0x78]
push eax
mov eax, 0x66d260
call eax
add esp, 4
lea ecx, [ebp - 0x78]
mov eax, 0x669fa0
call eax
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
movzx ecx, byte [ebx + 3]
movzx eax, byte [ebx + 4]
shl ecx, 8
or ecx, eax
and ecx, 0x7fff
cmp dword [0x114a0530], ecx
jne 0x100dca18
mov eax, dword [ebx + 0xc]
mov dword [0x114a03f0], eax
mov eax, dword [ebx + 0x10]
mov dword [0x114a03f8], eax
movzx esi, byte [ebx + 5]
mov eax, 0x57d9a0
mov edi, dword [ebx + 8]
push ecx
call eax
add esp, 4
push eax
mov eax, 0x402bc0
call eax
mov edx, 0x96a4c0
mov ecx, eax
call edx
test eax, eax
je case.default.0x100df5f7
movss xmm4, dword [eax + 0x404]
movss xmm5, dword [eax + 0x408]
movss xmm3, dword [eax + 0x40c]
lea eax, [esi - 1]
addss xmm4, dword [0x101203c8]
addss xmm5, dword [0x101203c8]
addss xmm3, dword [0x10120354]
cmp eax, 4
ja case.0x100dca7b.1
jmp dword [eax*4 + 0x100dfa14]
movss xmm2, dword [0x1011fb4c]
xorps xmm0, xmm0
jmp 0x100dcaca
movss xmm0, dword [0x1011fb4c]
xorps xmm2, xmm2
movaps xmm1, xmm0
jmp 0x100dcacd
movss xmm1, dword [0x1011fb4c]
xorps xmm0, xmm0
xorps xmm2, xmm2
jmp 0x100dcacd
movss xmm0, dword [0x1011fae4]
movaps xmm1, xmm0
movaps xmm2, xmm0
jmp 0x100dcacd
movss xmm0, dword [0x1011fb4c]
xorps xmm2, xmm2
xorps xmm1, xmm1
mov esi, 0x102db37c
cmp byte [esi], 0
je 0x100dcaea
add esi, 0x84
cmp esi, 0x102de70c
jl 0x100dcad2
jmp case.default.0x100df5f7
addss xmm3, dword [0x1012052c]
sub esp, 8
mov byte [esi], 1
mov eax, 0x5d81b0
mov dword [esi + 4], edi
movss dword [esi + 0x14], xmm4
movss dword [esi + 0x18], xmm5
movss dword [esp + 4], xmm5
movss dword [esi + 0x1c], xmm3
movss dword [esi + 0x20], xmm0
movss dword [esi + 0x24], xmm1
movss dword [esi + 0x28], xmm2
mov byte [esi + 0x7c], 0
movss dword [esp], xmm4
call eax
fadd qword [0x10120050]
add esp, 8
mov dword [esi + 0x50], 0x41200000
mov dword [esi + 0x10], 0x41600000
mov dword [esi + 0x3c], 0
mov byte [esi + 0x4c], 1
fstp dword [esi + 0x80]
jmp case.default.0x100df5f7
cmp byte [ebx], 0xc1
jne 0x100dcb66
mov al, byte [ebx + 3]
jmp 0x100dcb69
mov al, byte [ebx + 4]
cmp al, 0x32
jne case.default.0x100df5f7
mov eax, 0x10300218
nop word [eax + eax]
mov dword [eax - 4], 0xffffffff
mov dword [eax], 0xffffffff
add eax, 8
cmp eax, 0x10300318
jl 0x100dcb80
xor esi, esi
cmp byte [ebx + 5], 0
jbe case.default.0x100df5f7
lea edx, [ebx + 6]
mov ecx, dword [edx]
lea edx, [edx + 8]
mov eax, dword [edx - 4]
inc esi
mov dword [ecx*8 + 0x102ffbb8], eax
movzx eax, byte [ebx + 5]
cmp esi, eax
jl 0x100dcba6
jmp case.default.0x100df5f7
cmp byte [ebx], 0xc1
jne 0x100dcbcd
mov al, byte [ebx + 3]
jmp 0x100dcbd0
mov al, byte [ebx + 4]
cmp al, 0x12
je 0x100dcc27
cmp al, 0x20
jne case.default.0x100df5f7
mov eax, 0x861110
call eax
mov edx, 0x861280
mov ecx, eax
call edx
mov ecx, dword [eax + 0x10]
test ecx, ecx
je case.default.0x100dcd22
movzx eax, word [ebx + 6]
push eax
mov eax, 0x7da760
call eax
test eax, eax
je case.default.0x100dcd22
mov ecx, dword [ebx + 8]
mov dword [eax + 0x63], ecx
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
movzx eax, word [ebx + 6]
mov ecx, 0xec
cmp ax, cx
jb case.default.0x100df5f7
mov edi, eax
mov ecx, 0x1151be40
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], edi
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.10011c40
mov eax, dword [ebp - 0x64]
mov esi, dword [0x1151be40]
cmp byte [eax + 0xd], 0
jne 0x100dcc64
cmp edi, dword [eax + 0x10]
jge 0x100dcc66
mov eax, esi
xor edx, edx
lea ecx, [eax + 0x14]
cmp eax, esi
cmovne edx, ecx
test edx, edx
je case.default.0x100dcd22
mov eax, dword [ebx + 8]
mov dword [edx + 0x65], eax
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
cmp byte [ebx], 0xc1
jne 0x100dcc9e
mov al, byte [ebx + 3]
jmp 0x100dcca1
mov al, byte [ebx + 4]
movzx eax, al
sub eax, 0
je 0x100dd060
sub eax, 1
je 0x100dce90
sub eax, 1
jne case.default.0x100df5f7
cmp dword [0x114a0554], edi
je 0x100dcd0e
mov al, byte [ebx + 4]
test al, al
je 0x100dccd2
cmp al, 2
jne 0x100dcd0e
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x114a0554], 2
mov dword [0x114a0550], 0
call esi
mov dword [0x114a054c], eax
call esi
mov dword [0x114a0548], eax
mov dword [0x114a0544], 0
mov dword [0x114a0540], 0
mov byte [0x8793703], 0
movzx eax, byte [ebx + 4]
cmp eax, 3
ja case.default.0x100dcd22
jmp dword [eax*4 + 0x100dfa28]
push 0
push 0
push 2
push dword [0xe8c578]
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
mov eax, 0x4d50f0
call eax
mov eax, 0x6d6f10
call eax
mov eax, 0x7dd230
call eax
mov eax, 0x634640
call eax
mov eax, 0x8d2cf0
call eax
mov dword [0xe609e8], 4
lea ecx, [ebp - 0x74]
mov edx, 4
mov dword [0x87935a4], 0x32
mov dword [ebp - 0x74], 0xf304c1
call fcn.100e16c0
mov word [0xe8cb4e], 0
mov eax, 0x63d680
mov byte [0xe8cb1e], 0
mov dword [0x87935a4], 0
call eax
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
cmp dword [0xe609e8], 5
jne 0x100dcdff
mov eax, 0x8d2cf0
call eax
mov eax, 0x4d50f0
call eax
mov eax, 0x6d6f10
call eax
mov eax, 0x7dd230
call eax
mov eax, 0x634640
call eax
mov eax, 0x63a180
mov ecx, 0x8793750
call eax
mov eax, 0x631610
call eax
mov dword [0xe609e8], 2
mov eax, 0x4db220
mov byte [0xe8cb4c], 0
mov word [0xe8cb4e], 0
mov byte [0xe8cb1e], 0
mov dword [0x87935a4], 0
mov dword [0x8793714], 0
call eax
mov edx, 0x4ef4c0
mov ecx, eax
call edx
mov eax, 0x63d680
call eax
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
mov dword [0x114a0534], edi
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
mov al, byte [ebx + 4]
cmp dword [0x114a0550], edi
jne 0x100dcf8a
cmp dword [0x114a053c], 0
je 0x100dcf8a
cmp al, 1
jne 0x100dcf04
xor eax, eax
mov dword [ebp - 0x74], 0xf304c1
lea ecx, [ebp - 0x74]
mov byte [ebp - 0x71], al
lea edx, [eax + 4]
call fcn.100e16c0
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x114a0554], edi
mov dword [0x114a0550], 2
call esi
mov dword [0x114a054c], eax
call esi
mov dword [0x114a0548], eax
mov dword [0x114a0544], 0x7530
mov dword [0x114a0540], 0x7530
jmp 0x100dcf8a
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp al, 3
jne 0x100dcf48
mov dword [0x114a0554], edi
mov dword [0x114a0550], edi
call esi
mov dword [0x114a054c], eax
call esi
mov dword [0x114a0548], eax
mov dword [0x114a0544], 0x2710
mov dword [0x114a0540], 0x7530
mov dword [0x114a053c], 0
jmp 0x100dcf8a
mov dword [0x114a0554], 2
mov dword [0x114a0550], 0
call esi
mov dword [0x114a054c], eax
call esi
mov dword [0x114a0548], eax
mov ecx, 0x8793750
mov eax, 0x63a180
mov dword [0x114a0544], 0
mov dword [0x114a0540], 0
call eax
call fcn.100e1870
cmp dword [0x10303a58], edi
jne case.default.0x100df5f7
mov ecx, 0x1011c290
mov eax, 0xe8c5c4
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100dcfc5
test dl, dl
je 0x100dcfc1
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100dcfc5
add eax, 2
add ecx, 2
test dl, dl
jne 0x100dcfa5
xor eax, eax
jmp 0x100dcfca
sbb eax, eax
or eax, 1
test eax, eax
je case.default.0x100df5f7
mov ecx, 0x1011c288
mov eax, 0xe8c5c4
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100dd000
test dl, dl
je 0x100dcffc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100dd000
add eax, 2
add ecx, 2
test dl, dl
jne 0x100dcfe0
xor eax, eax
jmp 0x100dd005
sbb eax, eax
or eax, 1
test eax, eax
je case.default.0x100df5f7
mov ecx, 0x1011c28c
mov eax, 0xe8c5c4
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100dd037
test dl, dl
je 0x100dd033
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100dd037
add eax, 2
add ecx, 2
test dl, dl
jne 0x100dd017
xor eax, eax
jmp 0x100dd03c
sbb eax, eax
or eax, 1
test eax, eax
je case.default.0x100df5f7
push 0x10
push str.Error
push str.Main.free_not_found_or_invalid_2__
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
movzx ecx, byte [ebx + 5]
movzx eax, byte [ebx + 6]
shl ecx, 8
or ecx, eax
mov dword [0x114a0530], ecx
jmp case.default.0x100df5f7
cmp byte [ebx], 0xc1
jne 0x100dd082
mov al, byte [ebx + 3]
jmp 0x100dd085
mov al, byte [ebx + 4]
movzx eax, al
movzx eax, byte [eax + 0x100dfb68]
jmp dword [eax*4 + 0x100dfa38]
cmp dword [0x10303920], 0
je 0x100dd0ce
mov dword [0x114f09c4], 0
mov eax, 0x114f09d4
nop
mov dword [eax - 4], 0
mov dword [eax], 0
mov dword [eax + 4], 0
add eax, 0xc
cmp eax, 0x114f0b54
jl 0x100dd0b0
call fcn.100db580
mov ecx, 0x102de71c
call fcn.10077aa0
mov ecx, 0x102de724
call fcn.100779e0
mov ecx, dword [0x1151be40]
mov eax, dword [ecx]
mov dword [ebp - 0x78], eax
cmp eax, ecx
je 0x100dd117
nop word [eax + eax]
lea ecx, [ebp - 0x78]
mov byte [eax + 0x15], 0xff
call fcn.100257b0
mov eax, dword [ebp - 0x78]
cmp eax, dword [0x1151be40]
jne 0x100dd100
call fcn.100ceb60
mov ecx, 0x11510a48
call fcn.100256e0
mov ecx, 0x11502f58
call fcn.100256e0
push ebx
call fcn.10064960
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
push ebx
call fcn.10064e50
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
mov ecx, ebx
call fcn.100e0cd0
jmp case.0x100dd08f.2
mov eax, dword [ebx + 0x1c]
mov dword [0x114a03f0], eax
mov eax, dword [ebx + 0x20]
mov dword [0x114a03e8], eax
mov eax, dword [ebx + 0x24]
mov dword [0x114a040c], eax
mov eax, dword [ebx + 0x28]
mov dword [0x114a03f8], eax
jmp case.0x100dd08f.2
mov ecx, ebx
call fcn.100e0f50
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
mov al, byte [ebx + 4]
sub al, 0x10
cmp al, 4
ja case.0x100dd08f.2
mov eax, dword [ebx + 0xc]
mov dword [0x114a0528], eax
mov eax, dword [ebx + 0x10]
mov dword [0x114a03ec], eax
mov eax, dword [ebx + 0x14]
mov dword [0x114a041c], eax
mov eax, dword [ebx + 0x18]
mov dword [0x114a0418], eax
mov eax, dword [ebx + 0x1c]
mov dword [0x114a03f4], eax
mov eax, dword [ebx + 0x20]
mov dword [0x114a04f4], eax
mov eax, dword [ebx + 0x24]
mov dword [0x114a04f0], eax
mov eax, dword [ebx + 0x28]
mov dword [0x114a04ec], eax
mov eax, dword [ebx + 0x2c]
mov dword [0x114a0408], eax
mov eax, dword [ebx + 0x30]
mov dword [0x114a0400], eax
jmp case.0x100dd08f.2
mov eax, dword [ebx + 8]
mov dword [0x114a03f0], eax
mov eax, dword [ebx + 0xc]
mov dword [0x114a03f8], eax
mov eax, dword [ebx + 0x10]
mov dword [0x114a0524], eax
mov eax, dword [ebx + 0x14]
mov dword [0x114a0520], eax
jmp case.0x100dd08f.2
mov ecx, ebx
call fcn.100e1260
jmp case.0x100dd08f.2
mov eax, dword [ebx + 0x14]
mov dword [0x114a03ec], eax
mov eax, dword [ebx + 0x18]
mov dword [0x114a041c], eax
mov eax, dword [ebx + 0x1c]
mov dword [0x114a0418], eax
mov eax, dword [ebx + 0x20]
mov dword [0x114a03f4], eax
mov eax, dword [ebx + 0x28]
mov ecx, dword [ebx + 0x2c]
mov dword [0x114a0500], eax
mov dword [0x114a0504], ecx
mov eax, dword [ebx + 0x30]
mov ecx, dword [ebx + 0x34]
mov dword [0x114a04f8], eax
mov dword [0x114a04fc], ecx
mov ecx, dword [0x8128ac8]
movzx eax, word [ebx + 0x12]
mov word [ecx + 0x40], ax
mov ecx, dword [0x8128ac8]
movzx eax, word [ebx + 0x12]
mov word [ecx + 0x42], ax
jmp case.0x100dd08f.2
mov dword [0x11351c20], 0
mov dword [0x11351c24], 0
mov dword [0x11351c28], 0
jmp case.0x100dd08f.2
cmp dword [0x10303a68], 0
jne 0x100dd2d2
cmp dword [0x10303a7c], 0
je case.0x100dd08f.2
xor edi, edi
cmp byte [ebx + 5], 0
jbe case.0x100dd08f.2
lea esi, [ebx + 6]
nop dword [eax]
movzx eax, byte [esi + 2]
push eax
movzx eax, word [esi]
push eax
call fcn.10025310
movzx eax, byte [ebx + 5]
lea esi, [esi + 4]
inc edi
cmp edi, eax
jl 0x100dd2e0
mov esi, dword [ebp - 0x80]
cmp byte [ebx], 0xc1
jne 0x100df5e3
mov al, byte [ebx + 3]
jmp 0x100df5e6
push ebx
call fcn.1002e210
jmp case.0x100dd08f.2
mov cl, byte [ebx + 4]
cmp cl, 1
jne 0x100dd326
mov dword [0x11510aec], edi
jmp case.0x100dd08f.2
xor eax, eax
cmp cl, 2
setne al
lea eax, [eax*8 + 2]
mov dword [0x11510aec], eax
jmp case.0x100dd08f.2
push ebx
call fcn.1006bad0
jmp case.0x100dd08f.2
push ebx
call fcn.100b4030
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
mov eax, dword [ebx + 4]
mov dword [0x115197f0], eax
movq xmm0, qword [ebx + 8]
movq qword [0x115197f8], xmm0
mov eax, dword [ebx + 0x10]
mov dword [0x11519800], eax
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
mov eax, dword [0x11519808]
mov edx, dword [0x1151980c]
cmp eax, edx
je case.default.0x100dcd22
mov esi, dword [ebx + 4]
lea ecx, [eax + 0x58]
cmp dword [eax + 0x40], esi
je 0x100dd3c7
mov eax, ecx
cmp eax, edx
jne 0x100dd3a3
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
sub edx, ecx
push edx
push ecx
push eax
call fcn.100f0120
add esp, 0xc
mov eax, 1
sub dword [0x1151980c], 0x58
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
movaps xmm0, xmmword [0x10120850]
push pe_nt_image_headers32
push 0xff
push 0x11514ba4
mov dword [0x11514b54], 0
movups xmmword [0x11514b8c], xmm0
mov dword [0x11514b9c], 0
mov dword [0x11514ba0], 0
call fcn.100f06a0
add esp, 0xc
cmp byte [ebx + 0x1d], 0
jbe case.default.0x100dcd22
movzx eax, byte [ebx + 0x1c]
cmp dword [0x11514b5c], eax
jne case.default.0x100dcd22
mov dword [0x11514b54], edi
xor edx, edx
movzx eax, byte [ebx + 0x1d]
mov dword [0x11514b60], eax
movsx eax, word [ebx + 6]
mov dword [0x11514b8c], eax
movsx eax, word [ebx + 8]
mov dword [0x11514b90], eax
mov eax, dword [ebx + 0xc]
mov dword [0x11514b94], eax
mov eax, dword [ebx + 0x10]
mov dword [0x11514b98], eax
mov eax, dword [ebx + 0x14]
mov dword [0x11514b9c], eax
mov eax, dword [ebx + 0x18]
mov dword [0x11514ba0], eax
cmp byte [ebx + 0x1e], dl
jbe case.default.0x100dcd22
mov eax, 0x11514b83
lea ecx, [ebx + 0x23]
sub eax, ebx
mov edi, 0x11514b81
mov dword [ebp - 0x70], eax
mov esi, 0x11514b8d
mov eax, 0x11514b84
sub edi, ebx
sub eax, ebx
mov dword [ebp - 0x88], eax
mov eax, 0x11514b85
sub eax, ebx
mov dword [ebp - 0x94], eax
mov eax, 0x11514b86
sub eax, ebx
mov dword [ebp - 0x90], eax
mov eax, 0x11514b89
sub eax, ebx
sub esi, ebx
mov dword [ebp - 0x8c], eax
nop dword [eax]
mov ax, word [ecx - 3]
lea ecx, [ecx + 0x18]
mov ebx, dword [ebp - 0x70]
inc edx
mov word [ecx + edi - 0x18], ax
mov al, byte [ecx - 0x19]
mov byte [ecx + ebx - 0x18], al
mov al, byte [ecx - 0x18]
mov ebx, dword [ebp - 0x88]
mov byte [ecx + ebx - 0x18], al
mov al, byte [ecx - 0x17]
mov ebx, dword [ebp - 0x94]
mov byte [ecx + ebx - 0x18], al
mov al, byte [ecx - 0x16]
mov ebx, dword [ebp - 0x90]
mov byte [ecx + ebx - 0x18], al
mov ebx, dword [ebp - 0x8c]
mov eax, dword [ecx - 0x13]
mov dword [ecx + ebx - 0x18], eax
movq xmm0, qword [ecx - 0xf]
mov ebx, dword [ebp - 0x74]
movq qword [esi + ecx - 0x18], xmm0
mov eax, dword [ecx - 7]
mov dword [esi + ecx - 0x10], eax
movzx eax, byte [ebx + 0x1e]
cmp edx, eax
jl 0x100dd4f0
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
mov al, byte [ebx + 4]
cmp al, 0xa
jbe 0x100dd5cd
mov eax, 0x9cfb8d
mov dword [0x11514b74], 0x41a00000
call eax
cdq
mov ecx, 0x3c
idiv ecx
add edx, 0x96
mov dword [0x11514b50], edx
movzx eax, byte [ebx + 4]
sub eax, 0xa
mov dword [0x11514b88], eax
mov eax, dword [0x11514ba0]
test eax, eax
jle case.default.0x100dcd22
dec eax
mov dword [0x11514ba0], eax
lea eax, [ecx - 0x3b]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
cmp al, 3
jne 0x100dd5f1
mov dword [0x11514b84], 2
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
cmp al, 4
jne 0x100dd629
mov dword [0x11514b78], 0
mov eax, 1
mov dword [0x11514b50], 0xffffffff
mov dword [0x11514b84], 0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
mov dword [0x11514b84], edi
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
mov al, byte [ebx + 4]
movzx eax, al
add eax, 0xffffff10
cmp eax, 5
ja case.default.0x100df5f7
jmp dword [eax*4 + 0x100dfc7c]
mov byte [0x102e17cd], 1
mov dword [0xe8cb3c], 1
movzx eax, word [ebx + 8]
mov dword [0x10138bf4], eax
movzx eax, word [ebx + 6]
mov dword [0x10138be4], eax
mov eax, dword [ebx + 0xc]
mov dword [0x10138be8], eax
mov eax, dword [ebx + 0x10]
mov dword [0x10138bec], eax
mov eax, dword [ebx + 0x14]
mov dword [0x10138bf0], eax
mov dword [0x102e1878], 0xbf800000
mov dword [0x102e1818], 0xbf800000
call esi
sub eax, 0xc8
mov dword [0x102e1828], eax
call esi
sub eax, 0xc8
lea esi, [ebx + 0x58]
mov dword [0x102e1888], eax
mov ecx, 0x40
movups xmm0, xmmword [ebx + 0x18]
mov edi, 0x10138c68
movups xmmword [0x10138c28], xmm0
movups xmm0, xmmword [ebx + 0x28]
movups xmmword [0x10138c38], xmm0
movups xmm0, xmmword [ebx + 0x38]
movups xmmword [0x10138c48], xmm0
movups xmm0, xmmword [ebx + 0x48]
movups xmmword [0x10138c58], xmm0
rep movsd dword es:[edi], dword [esi]
jmp case.default.0x100df5f7
cmp byte [ebx + 4], 1
jne case.default.0x100df5f7
mov eax, dword [ebx + 8]
mov dword [0x102e6afc], eax
call esi
mov dword [0x102e6b00], eax
mov eax, dword [0xe61e18]
mov dword [0x102e6b04], eax
jmp case.default.0x100df5f7
mov eax, dword [0x1012affc]
xor edx, edx
mov ecx, dword [0x1012b000]
mov dword [ebp - 0x70], edx
cmp eax, ecx
je 0x100df6e9
mov ecx, eax
mov dword [0x1012b000], ecx
xor edi, edi
cmp dword [ebx + 8], edx
jle 0x100df744
lea esi, [ebx + 0xc]
cmp ecx, dword [0x1012b004]
je 0x100df722
movups xmm0, xmmword [esi]
movups xmmword [ecx], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ecx + 0x10], xmm0
mov eax, dword [esi + 0x18]
mov dword [ecx + 0x18], eax
mov ecx, dword [0x1012b000]
add ecx, 0x1c
mov dword [0x1012b000], ecx
jmp 0x100df737
push esi
push ecx
mov ecx, 0x1012affc
call fcn.100141b0
mov ecx, dword [0x1012b000]
mov edx, dword [ebp - 0x70]
inc edx
inc edi
add esi, 0x1c
mov dword [ebp - 0x70], edx
cmp edi, dword [ebx + 8]
jl 0x100df6f3
cmp dword [0x1012b050], edx
jge case.default.0x100dcd22
mov dword [0x1012b050], edx
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
mov eax, dword [0x1012b008]
xor edi, edi
mov ecx, dword [0x1012b00c]
cmp eax, ecx
je 0x100df785
mov ecx, eax
mov dword [0x1012b00c], ecx
cmp dword [ebx + 8], edi
jle 0x100df7da
lea esi, [ebx + 0xc]
nop dword [eax]
cmp ecx, dword [0x1012b010]
je 0x100df7bf
movups xmm0, xmmword [esi]
movups xmmword [ecx], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ecx + 0x10], xmm0
mov eax, dword [esi + 0x18]
mov dword [ecx + 0x18], eax
mov ecx, dword [0x1012b00c]
add ecx, 0x1c
mov dword [0x1012b00c], ecx
jmp 0x100df7d1
push esi
push ecx
mov ecx, 0x1012b008
call fcn.100141b0
mov ecx, dword [0x1012b00c]
inc edi
add esi, 0x1c
cmp edi, dword [ebx + 8]
jl 0x100df790
cmp dword [0x1012b050], edi
jge case.default.0x100dcd22
mov dword [0x1012b050], edi
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100ee369
mov esp, ebp
pop ebp
ret
mov edx, dword [0x1012b014]
xor ecx, ecx
mov eax, dword [0x1012b018]
mov dword [ebp - 0x70], ecx
cmp edx, eax
je 0x100df81d
mov eax, edx
mov dword [0x1012b018], eax
xor edi, edi
cmp dword [ebx + 8], ecx
jle 0x100df865
lea esi, [ebx + 0xc]
cmp eax, dword [0x1012b01c]
je 0x100df844
movups xmm0, xmmword [esi]
movups xmmword [eax], xmm0
mov eax, dword [0x1012b018]
add eax, 0x10
mov dword [0x1012b018], eax
jmp 0x100df858
push esi
push eax
mov ecx, 0x1012b014
call fcn.10014050
mov eax, dword [0x1012b018]
mov ecx, dword [ebp - 0x70]
inc ecx
inc edi
add esi, 0x10
mov dword [ebp - 0x70], ecx
cmp edi, dword [ebx + 8]
jl 0x100df827
cmp dword [0x1012b050], ecx
jge case.default.0x100dcd22
mov dword [0x1012b050], ecx
mov ecx, dword [ebp - 4]
mov eax, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100ee369
mov esp, ebp
pop ebp
ret
call fcn.100eeab6
nop
pop ss
mov esp, -1136783347
or eax, 0xdbc6510
adc dh, ch
mov esp, 0xbd08100d
or eax, 0xdbd7f10
adc byte [esi - 0x30eff243], dh
mov esi, 0xbf44100d
or eax, 0xdbfa410
adc dl, ah
mov edi, 0xc017100d
or eax, 0xdc05510
adc byte [eax + eax*8 - 0x3eefeff3], bh
or eax, 0xdc1d310
adc dh, bl
ror dword [0xdc20410], 0x10
sub edx, eax
or eax, 230835728
adc byte [ebp - 0x3e], dh
or eax, 0xdc47410
adc byte [esi - 0x57eff23c], cl
les ecx, [0xdc4ca10]
adc ah, ah
les ecx, [0xdc51010]
adc ah, al
invalid