Function at 0x100b1890
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100bde3c
mov eax, dword fs:[0]
push eax
sub esp, 0x268
mov eax, dword [0x100cc008]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
xor eax, eax
mov dword [ebp - 0x204], eax
lea edi, [ebx + 8]
mov dword [ebp - 0x1c], eax
mov ecx, edi
mov eax, dword [edi]
mov dword [ebp - 0x210], ebx
mov dword [ebp - 0x28], edi
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [0x100ef734]
mov esi, eax
mov edx, dword [0x100ef89c]
mov eax, dword [0x100de5b8]
add edx, 0xffffffd6
xor edx, 0xeb81ef17
movss xmm0, dword [ecx + 0x14]
mulss xmm0, dword [0x100c1550]
mov ecx, dword [edx + ebx]
movss dword [ebp - 0x18], xmm0
cmp ecx, dword [edx + eax]
je 0x100b1920
mov byte [ebp - 0x1e5], 1
jmp 0x100b1936
mov ecx, dword [0x100ef7ac]
mov eax, dword [ecx]
mov eax, dword [eax + 0x34]
call eax
test eax, eax
setne byte [ebp - 0x1e5]
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x24]
call eax
cmp byte [0x100e4e18], 0
mov dh, al
mov dl, byte [ebp - 0x1e5]
je 0x100b1972
test dl, dl
je 0x100b1972
test dh, dh
jne 0x100b197f
mov eax, dword [0x100ef91c]
add eax, 0xffffffb6
xor eax, 0xeb81ef37
mov byte [eax + ebx], 1
mov byte [esi + 0x100f21df], 1
jmp 0x100b198d
test dh, dh
jne 0x100b197f
mov byte [esi + 0x100f21df], 1
jmp 0x100b198d
mov al, byte [esi + 0x100f21df]
test al, al
je 0x100b2f24
test dh, dh
je 0x100b19a1
movss xmm1, dword [esi*4 + 0x100f221c]
subss xmm1, dword [ebp - 0x18]
jmp 0x100b19af
movss xmm1, dword [ebp - 0x18]
addss xmm1, dword [esi*4 + 0x100f221c]
movss dword [esi*4 + 0x100f221c], xmm1
test dl, dl
je 0x100b19c9
cmp byte [0x100e31d4], 0
je 0x100b19c9
mov al, 1
jmp 0x100b19cb
xor al, al
movss xmm2, dword [0x100c1504]
xorps xmm0, xmm0
comiss xmm1, xmm2
mov byte [ebp - 0x1eb], al
jbe 0x100b19e6
movaps xmm1, xmm2
jmp 0x100b19ee
comiss xmm1, xmm0
ja 0x100b19ee
xorps xmm1, xmm1
ucomiss xmm1, xmm0
movss dword [esi*4 + 0x100f221c], xmm1
lahf
test ah, 0x44
jp 0x100b1a08
test al, al
je 0x100b2f24
mov ecx, dword [0x100ef8f8]
mov eax, dword [0x100ef734]
add ecx, 0xffffffbf
xor ecx, 0xeb81ef2e
movss xmm2, dword [eax + 0x10]
subss xmm2, dword [ecx + ebx]
test dh, dh
je 0x100b1a37
comiss xmm2, dword [0x100c1578]
ja 0x100b2f24
movaps xmm0, xmm1
test dl, dl
mulss xmm1, dword [0x100c160c]
mulss xmm0, dword [0x100c1620]
cvttss2si eax, xmm1
cvttss2si ecx, xmm0
mov dword [ebp - 0x1fc], eax
mov eax, dword [0x100e3160]
cmovne eax, dword [0x100e30d0]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x208], ecx
test dh, dh
je 0x100b1af8
cmp byte [ebp - 0x1eb], 0
je 0x100b1af8
movss xmm0, dword [0x100c1568]
mov ecx, 0x70
comiss xmm2, xmm0
mov dword [ebp - 0x208], ecx
mov dword [ebp - 0x1fc], 0x50
jbe 0x100b1ae5
subss xmm2, xmm0
movss xmm0, dword [0x100c15f0]
movaps xmm1, xmm2
mulss xmm2, dword [0x100c1588]
mulss xmm1, dword [0x100c1594]
subss xmm0, xmm1
cvttss2si ecx, xmm0
movss xmm0, dword [0x100c15d4]
subss xmm0, xmm2
mov dword [ebp - 0x208], ecx
cvttss2si eax, xmm0
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x1f8], 0xff707070
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x18], eax
mov byte [ebp - 0x15], cl
lea edx, [ebp - 0x1e4]
mov ecx, dword [0x100ef6d8]
push edx
push esi
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
test al, al
je 0x100b2f24
push dword [ebp - 0x208]
mov ecx, 0x100f21e0
push ebx
call fcn.100b12d0
lea eax, [ebp - 0x38]
mov ecx, 0x100f21e0
push eax
push ebx
call fcn.100b34b0
test al, al
je 0x100b2f24
cmp byte [ebp - 0x1e5], 0
lea eax, [ebp - 0x20]
mov ecx, 0x100e3a48
push eax
je 0x100b1ba0
mov dword [ebp - 0x24], 0
call fcn.1001d270
mov ecx, 0x100e3a48
mov esi, dword [eax]
lea eax, [ebp - 0x1f4]
push eax
call fcn.1001d280
push esi
lea edx, [ebp - 0x24]
lea ecx, [ebp - 0x1f0]
push dword [eax]
call fcn.1001e400
add esp, 8
mov esi, eax
lea eax, [ebp - 0x200]
mov ecx, 0x100e3a48
push eax
call fcn.1001d270
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x100b1bf0
jmp 0x100b1c01
mov dword [ebp - 0x24], 1
call fcn.1001d270
mov ecx, 0x100e3a48
mov esi, dword [eax]
lea eax, [ebp - 0x1f4]
push eax
call fcn.1001d280
push esi
lea edx, [ebp - 0x24]
lea ecx, [ebp - 0x1f0]
push dword [eax]
call fcn.1001e400
add esp, 8
mov esi, eax
lea eax, [ebp - 0x200]
mov ecx, 0x100e3a48
push eax
call fcn.1001d270
mov edx, dword [esi]
cmp edx, dword [eax]
je 0x100b1ce1
push dword [ebp - 0x208]
mov ecx, 0x100f21e0
push ebx
call fcn.100b35f0
cmp byte [ebp - 0x1e5], 0
je 0x100b1ce1
lea eax, [ebp - 0x20]
mov dword [ebp - 0x24], 0
push eax
mov ecx, 0x100e3038
call fcn.1001d270
mov ecx, 0x100e3038
mov esi, dword [eax]
lea eax, [ebp - 0x1f4]
push eax
call fcn.1001d280
push esi
lea edx, [ebp - 0x24]
lea ecx, [ebp - 0x1f0]
push dword [eax]
call fcn.1001e400
add esp, 8
mov esi, eax
lea eax, [ebp - 0x200]
mov ecx, 0x100e3038
push eax
call fcn.1001d270
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x100b1d3a
mov bl, byte [ebp - 0x1fc]
mov byte [ebp - 0x1e6], bl
cmp byte [ebp - 0x1e5], 0
lea eax, [ebp - 0x20]
mov byte [ebp - 0x1eb], bl
mov ecx, 0x100e33a0
push eax
je 0x100b1de1
mov dword [ebp - 0x18], 0
call fcn.1001d270
mov ecx, 0x100e33a0
mov esi, dword [eax]
lea eax, [ebp - 0x1f4]
push eax
call fcn.1001d280
push esi
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0x24]
push dword [eax]
call fcn.1001e400
add esp, 8
mov esi, eax
lea eax, [ebp - 0x1f0]
mov ecx, 0x100e33a0
push eax
call fcn.1001d270
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x100b1e2e
jmp 0x100b1ee0
lea eax, [ebp - 0x20]
mov dword [ebp - 0x24], 1
push eax
mov ecx, 0x100e3038
call fcn.1001d270
mov ecx, 0x100e3038
mov esi, dword [eax]
lea eax, [ebp - 0x1f4]
push eax
call fcn.1001d280
push esi
lea edx, [ebp - 0x24]
lea ecx, [ebp - 0x1f0]
push dword [eax]
call fcn.1001e400
add esp, 8
mov esi, eax
lea eax, [ebp - 0x200]
mov ecx, 0x100e3038
push eax
call fcn.1001d270
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x100b1c67
mov al, byte [ebp - 0x1fc]
push dword [ebp - 0x18]
mov ecx, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x34]
mov byte [ebp - 0x1e6], al
mov byte [ebp - 0x1f5], al
mov eax, dword [ebp - 0x2c]
push eax
mov dword [ebp - 0x1f0], ecx
push ecx
mov ecx, ebx
mov word [ebp - 0x1f8], 0xa0a
mov byte [ebp - 0x1f6], 0xa
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x200], edx
call fcn.100ab690
mov eax, dword [ebp - 0x24]
lea ecx, [ebx - 1]
mov esi, dword [ebp - 0x1f8]
add esp, 0xc
mov edx, dword [ebp - 0x200]
add eax, 2
dec edx
push esi
push eax
mov eax, dword [ebp - 0x1f0]
add eax, 2
push eax
call fcn.100ab690
mov eax, dword [ebp - 0x24]
lea ecx, [ebx + 1]
mov edx, dword [ebp - 0x200]
add esp, 0xc
add eax, 0xfffffffe
push esi
push eax
mov eax, dword [ebp - 0x1f0]
lea edx, [edx + 1]
add eax, 0xfffffffe
push eax
call fcn.100ab690
mov bl, byte [ebp - 0x1e6]
add esp, 0xc
jmp 0x100b1c73
mov dword [ebp - 0x18], 1
call fcn.1001d270
mov ecx, 0x100e33a0
mov esi, dword [eax]
lea eax, [ebp - 0x1f4]
push eax
call fcn.1001d280
push esi
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0x24]
push dword [eax]
call fcn.1001e400
add esp, 8
mov esi, eax
lea eax, [ebp - 0x1f0]
mov ecx, 0x100e33a0
push eax
call fcn.1001d270
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x100b1fa5
lea eax, [ebp - 0x1d4]
push eax
lea ecx, [ebp - 0x234]
call fcn.1001d770
lea ecx, [ebp - 0x1f5]
mov dword [ebp - 4], 0
push ecx
push 0x18
push 0
push eax
lea ecx, [ebp - 0x5c]
call fcn.100368b0
mov eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x204], eax
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 3
call fcn.1001d720
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x74]
mov eax, dword [0x100e3438]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x30]
cdq
sub eax, edx
mov byte [ebp - 0x15], bl
mov ebx, dword [ebp - 0x34]
lea edx, [ebp - 0x5c]
sub ebx, dword [0x100f1eac]
mov esi, eax
sar esi, 1
add esi, dword [ebp - 0x38]
call fcn.100aa950
push 2
push eax
mov byte [ebp - 4], 4
mov ecx, 0x100f1ea4
push dword [ebp - 0x18]
push ebx
push esi
call fcn.100abe60
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 5
call fcn.1003c160
lea ecx, [ebp - 0x5c]
mov dword [ebp - 4], 6
call fcn.1001d720
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x1e5], 0
je 0x100b1fa5
lea eax, [ebp - 0x20]
mov dword [ebp - 0x18], 0
push eax
mov ecx, 0x100e34d8
call fcn.1001d270
mov ecx, 0x100e34d8
mov esi, dword [eax]
lea eax, [ebp - 0x1f4]
push eax
call fcn.1001d280
push esi
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0x24]
push dword [eax]
call fcn.1001e400
add esp, 8
mov esi, eax
lea eax, [ebp - 0x1f0]
mov ecx, 0x100e34d8
push eax
call fcn.1001d270
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x100b1ffb
mov ebx, dword [ebp - 0x1c]
xorps xmm0, xmm0
mov dword [ebp - 0x3c], 0
movq qword [ebp - 0x44], xmm0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
cmp byte [ebp - 0x1e5], 0
mov dword [ebp - 4], 0xb
movq qword [ebp - 0x68], xmm0
mov dword [ebp - 0x60], 0
je 0x100b21ab
push 0x100e3580
lea ecx, [ebp - 0x50]
call fcn.1001d340
or ebx, 0x40
lea eax, [ebp - 0x50]
or ebx, 1
jmp 0x100b21c1
lea eax, [ebp - 0x20]
mov dword [ebp - 0x18], 1
push eax
mov ecx, 0x100e34d8
call fcn.1001d270
mov ecx, 0x100e34d8
mov esi, dword [eax]
lea eax, [ebp - 0x1f4]
push eax
call fcn.1001d280
push esi
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0x24]
push dword [eax]
call fcn.1001e400
add esp, 8
mov esi, eax
lea eax, [ebp - 0x1f0]
mov ecx, 0x100e34d8
push eax
call fcn.1001d270
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x100b1f43
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x210]
mov esi, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
add esi, 0xfffffffe
mov eax, dword [0x100ef8d0]
add eax, 0xffffffc9
mov dword [ebp - 0x18], esi
xor eax, 0xeb81ef24
mov eax, dword [eax + ecx]
mov ecx, 0x64
cmp eax, ecx
mov ebx, ecx
cmovl ebx, eax
mov eax, 0x51eb851f
sub ecx, ebx
mov dword [ebp - 0x1f0], ebx
imul ecx, ecx, 0x1fe
imul ecx
mov ecx, 0xff
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, ecx
cmovg eax, ecx
imul ecx, ebx, 0x1fe
mov dword [ebp - 0x20c], eax
mov eax, 0x51eb851f
imul ecx
mov eax, 0xff
sar edx, 5
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
cmp ebx, 0xff
push ecx
cmovg ebx, eax
mov eax, dword [ebp - 0x1f0]
imul eax, esi
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x100c1460]
movss dword [esp], xmm0
call dword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_roundf]
mov cl, byte [ebp - 0x1eb]
mov eax, esp
mov edx, dword [ebp - 0x24]
fstp dword [ebp - 0x200]
cvttss2si esi, dword [ebp - 0x200]
mov byte [eax + 3], cl
mov word [eax], 0xa0a
mov byte [eax + 2], 0xa
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x38]
add eax, 2
push eax
push 4
lea ecx, [ecx - 6]
call fcn.100ab6d0
mov ecx, dword [ebp - 0x20c]
add esp, 8
mov edx, dword [ebp - 0x24]
mov eax, esp
inc edx
push esi
mov byte [eax], cl
mov ecx, dword [ebp - 0x208]
mov byte [eax + 3], cl
mov byte [eax + 1], bl
mov byte [eax + 2], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x38]
sub eax, esi
add edx, eax
push 2
mov dword [ebp - 0x18], edx
lea ecx, [ecx - 5]
call fcn.100ab690
mov eax, dword [ebp - 0x1f0]
add esp, 0xc
cmp eax, 0x64
jge 0x100b1f43
mov edx, eax
lea ecx, [ebp - 0x5c]
call fcn.1002a050
mov ebx, dword [ebp - 0x1c]
or ebx, 0x10
mov dword [ebp - 0x204], ebx
mov dword [ebp - 4], 7
lea edx, [ebp - 0x5c]
mov al, byte [ebp - 0x1eb]
lea ecx, [ebp - 0x234]
mov esi, dword [ebp - 0x38]
mov word [ebp - 0x1c], 0xffff
add esi, 0xfffffffb
mov byte [ebp - 0x1a], 0xff
mov byte [ebp - 0x19], al
call fcn.100aa950
push 2
push eax
mov byte [ebp - 4], 8
mov ecx, 0x100f1e98
push dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
add eax, 0xfffffffb
push eax
push esi
call fcn.100abe60
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 9
call fcn.1003c160
lea ecx, [ebp - 0x5c]
mov dword [ebp - 4], 0xa
call fcn.1001d720
jmp 0x100b1f46
push 0x100e3628
lea ecx, [ebp - 0x80]
call fcn.1001d340
lea eax, [ebp - 0x80]
or ebx, 0x82
push eax
lea ecx, [ebp - 0x68]
call fcn.1001d2f0
mov dword [ebp - 4], 0xd
test bl, 2
je 0x100b21eb
and ebx, 0xfffffffd
mov dword [ebp - 0x204], ebx
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xe
call fcn.1001d290
mov byte [ebp - 4], 0xf
test bl, 1
je 0x100b2204
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x10
call fcn.1001d290
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0
push eax
lea ecx, [ebp - 0x68]
call fcn.1001d280
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x68]
call fcn.1001d270
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [eax]
je 0x100b27e4
mov ebx, dword [ebp - 0x1fc]
mov edi, dword [ebp - 0x210]
mov byte [ebp - 0x1e6], bl
mov eax, dword [ebp - 0x1c]
cmp dword [eax], 0
jne 0x100b22e1
mov eax, dword [0x100ef8d4]
lea edx, [ebp - 0x238]
add eax, 0xffffffc8
mov dword [ebp - 0x238], 0x692524
xor eax, 0xeb81ef25
lea ecx, [ebp - 0x234]
add eax, edi
push eax
call fcn.10092380
add esp, 4
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x25c]
push eax
mov word [ebp - 0x23c], 0xc896
mov byte [ebp - 0x23a], 0x3c
mov byte [ebp - 0x239], bl
call fcn.10022360
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x244], eax
lea eax, [ebp - 0x25c]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x44]
call fcn.1008e060
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0x13
call fcn.1001d720
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0x14
call fcn.1001d720
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x1c]
cmp dword [eax], 1
jne 0x100b24be
mov eax, dword [0x100ef908]
mov ecx, dword [0x100ef924]
add eax, 0xffffffbb
xor eax, 0xeb81ef32
mov dl, byte [eax + edi]
test dl, dl
je 0x100b2424
lea eax, [ecx - 0x4c]
xor eax, 0xeb81ef39
cmp dword [eax + edi], 0
jle 0x100b23a2
lea eax, [ebp - 0x1fc]
mov word [ebp - 0x1fc], 0x4b48
push eax
lea ecx, [ebp - 0x234]
mov byte [ebp - 0x1fa], 0
call fcn.1001d770
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x25c]
mov word [ebp - 0x240], 0xffff
mov byte [ebp - 0x23e], 0xff
mov byte [ebp - 0x23d], bl
call fcn.10022360
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x244], eax
lea eax, [ebp - 0x25c]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x44]
call fcn.1008e060
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0x17
call fcn.1001d720
mov byte [ebp - 4], 0x18
jmp 0x100b24af
test dl, dl
je 0x100b2424
lea eax, [ebp - 0x1f8]
mov word [ebp - 0x1f8], 0x48
push eax
lea ecx, [ebp - 0x234]
call fcn.1001d770
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x25c]
mov word [ebp - 0x20c], 0xffff
mov byte [ebp - 0x20a], 0xff
mov byte [ebp - 0x209], bl
call fcn.10022360
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x244], eax
lea eax, [ebp - 0x25c]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x44]
call fcn.1008e060
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0x1b
call fcn.1001d720
mov byte [ebp - 4], 0x1c
jmp 0x100b24af
lea eax, [ecx - 0x4c]
xor eax, 0xeb81ef39
cmp dword [eax + edi], 0
jle 0x100b24be
lea eax, [ebp - 0x1ec]
mov word [ebp - 0x1ec], 0x4b
push eax
lea ecx, [ebp - 0x234]
call fcn.1001d770
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x25c]
mov word [ebp - 0x200], 0xffff
mov byte [ebp - 0x1fe], 0xff
mov byte [ebp - 0x1fd], bl
call fcn.10022360
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x244], eax
lea eax, [ebp - 0x25c]
mov byte [ebp - 4], 0x1e
push eax
lea ecx, [ebp - 0x44]
call fcn.1008e060
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0x1f
call fcn.1001d720
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x234]
call fcn.1001d720
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x1c]
cmp dword [eax], 2
jne 0x100b2571
mov eax, dword [0x100ef914]
add eax, 0xffffffb8
xor eax, 0xeb81ef35
cmp byte [eax + edi], 0
je 0x100b2571
lea eax, [ebp - 0x264]
mov dword [ebp - 0x264], 0x4d4f4f5a
push eax
lea ecx, [ebp - 0x234]
mov byte [ebp - 0x260], 0
call fcn.1001d770
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x25c]
mov word [ebp - 0x1f0], 0xb43c
mov byte [ebp - 0x1ee], 0xe1
mov byte [ebp - 0x1ed], bl
call fcn.10022360
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x244], eax
lea eax, [ebp - 0x25c]
mov byte [ebp - 4], 0x22
push eax
lea ecx, [ebp - 0x44]
call fcn.1008e060
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0x23
call fcn.1001d720
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0x24
call fcn.1001d720
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x1c]
xorps xmm1, xmm1
cmp dword [eax], 3
jne 0x100b2625
mov eax, dword [0x100ef930]
add eax, 0xffffffb1
xor eax, 0xeb81ef3c
movss xmm0, dword [eax + edi]
comiss xmm0, xmm1
jbe 0x100b2625
lea eax, [ebp - 0x21c]
mov dword [ebp - 0x21c], 0x53414c46
push eax
lea ecx, [ebp - 0x234]
mov dword [ebp - 0x218], 0x444548
call fcn.1001d770
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x25c]
mov word [ebp - 0x24], 0xffff
mov byte [ebp - 0x22], 0
mov byte [ebp - 0x21], bl
call fcn.10022360
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x244], eax
lea eax, [ebp - 0x25c]
mov byte [ebp - 4], 0x26
push eax
lea ecx, [ebp - 0x44]
call fcn.1008e060
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0x27
call fcn.1001d720
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0x28
call fcn.1001d720
mov byte [ebp - 4], 0xf
xorps xmm1, xmm1
mov eax, dword [ebp - 0x1c]
cmp dword [eax], 4
jne 0x100b2725
mov eax, dword [0x100ef858]
mov ecx, dword [eax + edi]
movss xmm0, dword [ecx + 0x58]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x100b2725
mov esi, dword [ecx + 0x50]
mov ecx, dword [0x100ef870]
mov eax, dword [0x100ef818]
mov dword [ebp - 0x1f4], eax
cmp dword [ecx + edi], 0
jne 0x100b267a
mov eax, dword [0x100ef7f4]
mov ecx, edi
call eax
mov ecx, dword [0x100ef870]
mov eax, dword [ebp - 0x1f4]
mov ecx, dword [ecx + edi]
mov edx, esi
call eax
cmp eax, 0x3c7
jne 0x100b2725
lea eax, [ebp - 0x274]
mov dword [ebp - 0x274], 0x4f4c4552
push eax
lea ecx, [ebp - 0x234]
mov word [ebp - 0x270], 0x4441
mov byte [ebp - 0x26e], 0
call fcn.1001d770
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x25c]
mov word [ebp - 0x204], 0xb43c
mov byte [ebp - 0x202], 0xe1
mov byte [ebp - 0x201], bl
call fcn.10022360
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x244], eax
lea eax, [ebp - 0x25c]
mov byte [ebp - 4], 0x2a
push eax
lea ecx, [ebp - 0x44]
call fcn.1008e060
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0x2b
call fcn.1001d720
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0x2c
call fcn.1001d720
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x1c]
cmp dword [eax], 5
jne 0x100b27c6
mov eax, dword [0x100ef824]
mov ecx, edi
call eax
test al, al
je 0x100b27c6
lea eax, [ebp - 0x26c]
mov dword [ebp - 0x26c], 0x424d4f42
push eax
lea ecx, [ebp - 0x234]
mov byte [ebp - 0x268], 0
call fcn.1001d770
mov byte [ebp - 4], 0x2d
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x25c]
mov word [ebp - 0x18], 0xff
mov byte [ebp - 0x16], 0
mov byte [ebp - 0x15], bl
call fcn.10022360
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x244], eax
lea eax, [ebp - 0x25c]
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0x44]
call fcn.1008e060
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0x2f
call fcn.1001d720
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0x30
call fcn.1001d720
mov byte [ebp - 4], 0xf
add dword [ebp - 0x1c], 4
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x68]
call fcn.1001d270
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [eax]
jne 0x100b2240
mov edi, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x40]
mov eax, 0x92492493
mov esi, dword [ebp - 0x44]
sub ecx, esi
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x100b2893
xor ebx, ebx
xor edi, edi
mov dword [ebp - 0x18], ebx
nop dword [eax]
mov ecx, dword [0x100f1ea0]
lea edx, [esi + ebx]
mov eax, dword [ebp - 0x34]
dec ecx
mov ebx, dword [ebp - 0x30]
mov esi, dword [edx + 0x18]
imul ecx, edi
add eax, ecx
lea ecx, [ebp - 0x234]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x38]
add eax, 2
add ebx, eax
call fcn.100aa950
push 0
push eax
push esi
mov byte [ebp - 4], 0x31
mov ecx, 0x100f1e98
push dword [ebp - 0x20]
push ebx
call fcn.100abe60
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0x32
call fcn.1003c160
mov byte [ebp - 4], 0xf
mov eax, 0x92492493
mov ecx, dword [ebp - 0x40]
inc edi
mov esi, dword [ebp - 0x44]
sub ecx, esi
mov ebx, dword [ebp - 0x18]
imul ecx
add ebx, 0x1c
add edx, ecx
mov dword [ebp - 0x18], ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x100b2810
mov edi, dword [ebp - 0x28]
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x33
call fcn.1001d290
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 0x34
call fcn.1008da70
xor ecx, ecx
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1c], ecx
cmp byte [ebp - 0x1e5], cl
je 0x100b2a9e
cmp byte [0x100e3904], cl
je 0x100b2a47
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x28]
call eax
imul eax, eax, 0x44c
lea esi, [eax + 0x100cbc88]
test esi, esi
je 0x100b2a47
cmp byte [esi + 0x434], 0
je 0x100b2a47
cmp dword [esi + 0x18], 0
je 0x100b2a47
lea eax, [ebp - 0x50]
push eax
lea ecx, [esi + 8]
call fcn.1001e090
mov ecx, eax
mov dword [ebp - 4], 0x35
call fcn.1001e2c0
mov dword [ebp - 4], 0xffffffff
mov edi, dword [eax]
test edi, edi
je 0x100b2a47
movss xmm1, dword [edi + 0x3c]
movss xmm0, dword [edi + 0x38]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
call fcn.10018440
cvtss2sd xmm0, xmm0
comisd xmm0, xmmword [0x100c1518]
jbe 0x100b2967
cmp byte [edi + 0x3f0], 0
je 0x100b2a47
cmp dword [esi + 0x440], 3
jg 0x100b2a47
movss xmm1, dword [esi + 0x430]
xorps xmm0, xmm0
subss xmm1, dword [edi + 0x3f8]
movss xmm2, dword [0x100c1504]
mov dword [ebp - 0x28], 0x3f800000
mov dword [ebp - 0x20], 0
comiss xmm1, xmm2
movss dword [ebp - 0x1f4], xmm1
ja 0x100b29bd
comiss xmm1, xmm0
lea eax, [ebp - 0x20]
lea ecx, [ebp - 0x1f4]
cmovae eax, ecx
movss xmm2, dword [eax]
movd xmm1, dword [ebp - 0x30]
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm2
mulss xmm1, dword [0x100c14f8]
comiss xmm1, xmm0
movss dword [ebp - 0x20], xmm1
jbe 0x100b2a47
push ecx
mov cl, byte [ebp - 0x1e6]
mov eax, esp
push 4
mov word [eax], 0xa0a
mov byte [eax + 2], 0xa
mov byte [eax + 3], cl
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
add eax, 2
push dword [ebp - 0x30]
mov ecx, dword [ebp - 0x38]
add edx, eax
call fcn.100ab6d0
mov eax, dword [0x100e39a8]
add esp, 0xc
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x208]
mov byte [ebp - 0x25], al
lea ecx, [ecx + 1]
cvttss2si eax, dword [ebp - 0x20]
push dword [ebp - 0x28]
push 2
push eax
mov eax, dword [ebp - 0x34]
add eax, 3
add edx, eax
call fcn.100ab690
add esp, 0xc
mov dword [ebp - 0x1c], 5
lea eax, [ebp - 0x1f4]
mov dword [ebp - 0x20], 0
push eax
mov ecx, 0x100e36d0
call fcn.1001d270
mov ecx, 0x100e36d0
mov esi, dword [eax]
lea eax, [ebp - 0x28]
push eax
call fcn.1001d280
push esi
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0x18]
push dword [eax]
call fcn.1001e400
add esp, 8
mov esi, eax
lea eax, [ebp - 0x204]
mov ecx, 0x100e36d0
push eax
call fcn.1001d270
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x100b2af4
jmp 0x100b2f24
lea eax, [ebp - 0x1f4]
mov dword [ebp - 0x20], 1
push eax
mov ecx, 0x100e36d0
call fcn.1001d270
mov ecx, 0x100e36d0
mov esi, dword [eax]
lea eax, [ebp - 0x28]
push eax
call fcn.1001d280
push esi
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0x18]
push dword [eax]
call fcn.1001e400
add esp, 8
mov esi, eax
lea eax, [ebp - 0x204]
mov ecx, 0x100e36d0
push eax
call fcn.1001d270
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x100b2f24
mov ecx, dword [0x100ef6dc]
mov eax, dword [0x100ef964]
mov ebx, dword [ebp - 0x210]
add eax, 0xffffffa4
push ecx
mov edx, dword [ecx]
xor eax, 0xeb81ef49
mov esi, dword [edx + 0x10]
mov edx, esp
mov eax, dword [eax + ebx]
mov dword [edx], eax
call esi
mov esi, eax
mov dword [ebp - 0x24], esi
test esi, esi
je 0x100b2f24
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 0x6f8]
call eax
test eax, eax
je 0x100b2f24
mov eax, dword [eax + 0x14]
xorps xmm1, xmm1
mov dword [ebp - 0x210], eax
mov eax, dword [0x100ef980]
add eax, 0xffffff9d
xor eax, 0xeb81ef50
mov ecx, dword [esi + eax]
mov eax, dword [0x100ef858]
mov dword [ebp - 0x18], ecx
mov edi, dword [eax + ebx]
movss xmm0, dword [edi + 0x58]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x100b2bb8
mov ecx, dword [0x100ef818]
mov eax, dword [edi + 0x50]
mov dword [ebp - 0x1f4], ecx
mov ecx, dword [0x100ef870]
mov dword [ebp - 0x20], eax
cmp dword [ecx + ebx], 0
jne 0x100b2ba2
mov eax, dword [0x100ef7f4]
mov ecx, ebx
call eax
mov ecx, dword [0x100ef870]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ecx + ebx]
mov edx, eax
call dword [ebp - 0x1f4]
cmp eax, 0x3c7
jne 0x100b2bb8
mov al, 1
jmp 0x100b2bba
xor al, al
mov ecx, dword [ebp - 0x210]
mov byte [ebp - 0x1eb], al
cmp ecx, 0xffffffff
je 0x100b2d69
cmp byte [0x100e37ec], 0
je 0x100b2d69
test al, al
je 0x100b2be7
movss xmm1, dword [edi + 0x64]
jmp 0x100b2bfa
movd xmm1, dword [ebp - 0x18]
movd xmm0, ecx
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm0, xmm0
divss xmm1, xmm0
mov eax, dword [ebp - 0x30]
add eax, 0xfffffffe
push ecx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
movss dword [esp], xmm0
call dword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_roundf]
mov cl, byte [ebp - 0x1e6]
mov eax, esp
mov ebx, dword [ebp - 0x1c]
push 4
fstp dword [ebp - 0x204]
cvttss2si edi, dword [ebp - 0x204]
mov byte [eax + 3], cl
mov word [eax], 0xa0a
mov byte [eax + 2], 0xa
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
add ecx, ebx
add edx, 2
add edx, ecx
mov ecx, dword [ebp - 0x38]
push dword [ebp - 0x30]
call fcn.100ab6d0
mov eax, dword [0x100e3890]
add esp, 0xc
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
add ecx, ebx
mov dword [ebp - 0x28], eax
add edx, 3
mov eax, dword [ebp - 0x208]
add edx, ecx
mov ecx, dword [ebp - 0x38]
mov byte [ebp - 0x25], al
push dword [ebp - 0x28]
push 2
push edi
lea ecx, [ecx + 1]
call fcn.100ab690
mov eax, 0x66666667
add esp, 4
imul dword [ebp - 0x210]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [esp], xmm0
call dword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_round]
mov ecx, dword [ebp - 0x18]
add esp, 8
fstp qword [ebp - 0x21c]
cvttsd2si eax, qword [ebp - 0x21c]
cmp ecx, eax
jg 0x100b2d61
cmp byte [ebp - 0x1eb], 0
jne 0x100b2d61
mov edx, ecx
lea ecx, [ebp - 0x234]
call fcn.1002a050
mov al, byte [ebp - 0x1e6]
lea edx, [ebp - 0x234]
mov dword [ebp - 4], 0x36
lea ecx, [ebp - 0x5c]
cvttss2si esi, dword [ebp - 0x204]
mov edi, dword [ebp - 0x34]
add edi, ebx
mov word [ebp - 0x18], 0xffff
add edi, dword [ebp - 0x2c]
mov byte [ebp - 0x16], 0xff
mov byte [ebp - 0x15], al
add esi, dword [ebp - 0x38]
call fcn.100aa950
push 2
push eax
mov byte [ebp - 4], 0x37
mov ecx, 0x100f1e98
push dword [ebp - 0x18]
push edi
push esi
call fcn.100abe60
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x38
call fcn.1003c160
lea ecx, [ebp - 0x234]
mov dword [ebp - 4], 0x39
call fcn.1001d720
mov dword [ebp - 4], 0xffffffff
mov esi, dword [ebp - 0x24]
add ebx, 6
mov dword [ebp - 0x1c], ebx
jmp 0x100b2d6c
mov ebx, dword [ebp - 0x1c]
mov eax, dword [0x100e3778]
test eax, eax
jne 0x100b2e54
lea eax, [ebp - 0x5c]
mov ecx, esi
push eax
call fcn.100ae7f0
mov dword [ebp - 4], 0x3a
lea eax, [ebp - 0x5c]
cmp dword [ebp - 0x48], 0x10
lea ecx, [ebp - 0x5c]
cmovae eax, dword [ebp - 0x5c]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x1f4]
push eax
call fcn.1002eda0
cmp dword [ebp - 0x48], 0x10
lea ebx, [ebp - 0x5c]
cmovae ebx, dword [ebp - 0x5c]
xor esi, esi
mov eax, dword [eax]
xor ecx, ecx
mov edi, eax
sub edi, ebx
cmp ebx, eax
cmova edi, ecx
test edi, edi
je 0x100b2de9
nop word [eax + eax]
movsx eax, byte [esi + ebx]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov ecx, dword [ebp - 0x20]
add esp, 4
mov byte [esi + ecx], al
inc esi
cmp esi, edi
jne 0x100b2dd0
mov al, byte [ebp - 0x1e6]
lea ecx, [ebp - 0x234]
mov edi, dword [ebp - 0x1c]
add edi, dword [ebp - 0x34]
add edi, dword [ebp - 0x2c]
mov byte [ebp - 0x15], al
mov eax, dword [ebp - 0x30]
cdq
sub eax, edx
mov word [ebp - 0x18], 0xffff
mov esi, eax
mov byte [ebp - 0x16], 0xff
sar esi, 1
lea edx, [ebp - 0x5c]
add esi, dword [ebp - 0x38]
call fcn.100aa950
push 2
push eax
mov byte [ebp - 4], 0x3b
mov ecx, 0x100f1e98
push dword [ebp - 0x18]
push edi
push esi
call fcn.100abe60
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0x3c
call fcn.1003c160
mov dword [ebp - 4], 0x3d
lea ecx, [ebp - 0x5c]
jmp 0x100b2f1f
cmp eax, 1
jne 0x100b2f24
mov eax, dword [0x100ef97c]
lea edi, [ebx - 5]
add eax, 0xffffff9e
mov ecx, 0x100f4584
xor eax, 0xeb81ef4f
add eax, esi
push eax
lea eax, [ebp - 0x21c]
push eax
call fcn.100b48e0
mov eax, dword [ebp - 0x21c]
lea edx, [ebp - 0x1fc]
add eax, 0xc
mov word [ebp - 0x1fc], 0x6325
push eax
lea ecx, [ebp - 0x8c]
mov byte [ebp - 0x1fa], 0
call fcn.100b4390
add esp, 4
mov al, byte [ebp - 0x1e6]
lea ecx, [ebp - 0x258]
mov dword [ebp - 4], 0x3e
add edi, dword [ebp - 0x34]
add edi, dword [ebp - 0x2c]
mov byte [ebp - 0x15], al
mov eax, dword [ebp - 0x30]
cdq
sub eax, edx
mov word [ebp - 0x18], 0xffff
mov esi, eax
mov byte [ebp - 0x16], 0xff
sar esi, 1
lea edx, [ebp - 0x8c]
add esi, dword [ebp - 0x38]
call fcn.100aa950
push 2
push eax
mov byte [ebp - 4], 0x3f
mov ecx, 0x100f1ed4
push dword [ebp - 0x18]
push edi
push esi
call fcn.100abe60
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 0x40
call fcn.1003c160
mov dword [ebp - 4], 0x41
lea ecx, [ebp - 0x8c]
call fcn.1001d720
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100b5137
mov esp, ebp
pop ebp
ret 4