Function at 0x10020270
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get number of processors

Disassembly:
push ebp
lea ebp, [esp - 0x194]
sub esp, 0x194
push 0xffffffffffffffff
push 0x1002f422
mov eax, dword fs:[0]
push eax
sub esp, 0x68
mov eax, dword [0x1003800c]
xor eax, ebp
mov dword [ebp + 0x190], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor esi, esi
mov dword [ebp - 0x20], esi
mov ecx, dword [0x10038da0]
mov dword [ebp - 0x30], esi
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [0x10038dac]
push eax
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
mov edi, eax
mov dword [ebp - 0x24], edi
test edi, edi
je 0x10020ecc
cmp byte [0x100493ea], 0
jne 0x1002031c
cmp byte [0x100493eb], 0
jne 0x1002031c
cmp byte [0x100493ec], 0
jne 0x1002031c
cmp byte [0x100493ed], 0
jne 0x1002031c
cmp byte [0x100493ee], 0
jne 0x1002031c
cmp byte [0x100493f0], 0
jne 0x1002031c
cmp byte [0x100493ef], 0
je 0x10020ecc
xor eax, eax
mov edx, 1
mov dword [ebp - 0x38], eax
mov eax, dword [0x10038da8]
mov dword [ebp - 0x60], edx
cmp dword [eax + 0x14], edx
jl 0x10020ecc
mov dword [ebp - 0x6c], 0x10050db8
mov dword [ebp - 0x68], 0x1003ad04
mov ecx, dword [0x10038dac]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov ebx, eax
mov dword [ebp - 0x70], ebx
test ebx, ebx
je 0x10020ea6
cmp ebx, edi
je 0x10020ea6
mov eax, dword [ebx + 8]
lea ecx, [ebx + 8]
mov eax, dword [eax + 0x20]
call eax
test al, al
jne 0x10020ea6
mov ecx, ebx
call fcn.10002df0
cmp dword [eax], 0
jne 0x10020ea6
cmp byte [0x100493f2], 0
je 0x100203af
mov ecx, ebx
call fcn.100029d0
mov ecx, edi
mov esi, dword [eax]
call fcn.100029d0
cmp esi, dword [eax]
je 0x10020ea6
mov esi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x60]
cmp byte [eax + 0x10049654], 0
je 0x100203c7
mov dword [ebp - 0x44], 0xffffffff
mov eax, dword [ebp - 0x44]
jmp 0x100203ee
mov ecx, ebx
call fcn.100029d0
cmp dword [eax], 2
jne 0x100203da
mov eax, dword [0x100491d8]
jmp 0x100203ee
mov ecx, ebx
call fcn.100029d0
cmp dword [eax], 3
mov eax, dword [ebp - 0x38]
cmove eax, dword [0x100491d4]
mov dword [ebp - 0x38], eax
mov ecx, ebx
mov dword [ebp - 0x64], eax
mov eax, dword [ebx]
call dword [eax + 0x24]
mov ecx, ebx
movss xmm0, dword [eax]
movss dword [ebp - 0x10], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x34], xmm0
movss xmm0, dword [eax + 8]
movss dword [ebp - 0x18], xmm0
call fcn.10002b20
movss xmm0, dword [ebp - 0x10]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [ebp - 0x34]
mov eax, dword [eax]
shr eax, 1
and al, 1
movss dword [ebp - 0x14], xmm0
mov dword [ebp - 0x40], eax
je 0x10020448
movss xmm1, dword [0x10034528]
jmp 0x10020450
movss xmm1, dword [0x10034538]
mov ecx, dword [0x10038da0]
movss xmm0, dword [ebp - 0x18]
addss xmm0, xmm1
mov eax, dword [ecx]
movss dword [ebp - 0x3c], xmm0
mov eax, dword [eax + 0x98]
call eax
movss xmm1, dword [ebp - 0x10]
mov edi, eax
movss xmm5, dword [ebp - 0x34]
movaps xmm3, xmm1
movss xmm4, dword [ebp - 0x18]
movaps xmm0, xmm5
mulss xmm0, dword [edi + 0x34]
mulss xmm3, dword [edi + 0x30]
addss xmm3, xmm0
movaps xmm0, xmm4
mulss xmm0, dword [edi + 0x38]
addss xmm0, dword [edi + 0x3c]
addss xmm3, xmm0
cvtps2pd xmm0, xmm3
comisd xmm0, xmmword [0x10034440]
jbe 0x10020ea3
mulss xmm1, dword [edi + 0x10]
xorps xmm0, xmm0
mov ecx, dword [0x10038db4]
mov eax, ecx
mulss xmm5, dword [edi + 0x14]
xorps xmm2, xmm2
cdq
mulss xmm4, dword [edi + 0x18]
sub eax, edx
sar eax, 1
addss xmm1, xmm5
cvtsi2sd xmm0, ecx
mov ecx, dword [0x10038da0]
addss xmm4, dword [edi + 0x1c]
cvtsi2sd xmm2, eax
mov eax, dword [ecx]
addss xmm1, xmm4
mov eax, dword [eax + 0x98]
divss xmm1, xmm3
mulss xmm1, dword [0x10034428]
cvtps2pd xmm1, xmm1
mulsd xmm1, xmm0
addsd xmm1, qword [0x10034490]
subsd xmm2, xmm1
cvtpd2ps xmm0, xmm2
movss dword [ebp - 0x1c], xmm0
call eax
movss xmm4, dword [ebp - 0x14]
mov edi, eax
movss xmm6, dword [ebp - 0x20]
movaps xmm1, xmm4
movss xmm5, dword [ebp - 0x3c]
movaps xmm0, xmm6
mulss xmm0, dword [edi + 0x30]
mulss xmm1, dword [edi + 0x34]
addss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [edi + 0x38]
addss xmm0, dword [edi + 0x3c]
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
comisd xmm0, xmmword [0x10034440]
jbe 0x10020ea3
movss xmm3, dword [0x10034458]
movaps xmm0, xmm6
mulss xmm0, dword [edi]
xorps xmm2, xmm2
mov eax, dword [0x10038dc0]
divss xmm3, xmm1
mov ecx, dword [0x10038db4]
movaps xmm1, xmm4
mulss xmm6, dword [edi + 0x10]
mulss xmm1, dword [edi + 4]
mulss xmm4, dword [edi + 0x14]
addss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [edi + 8]
mulss xmm5, dword [edi + 0x18]
addss xmm4, xmm6
addss xmm0, dword [edi + 0xc]
addss xmm5, dword [edi + 0x1c]
addss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, eax
cdq
sub eax, edx
sar eax, 1
mulss xmm1, xmm3
addss xmm4, xmm5
mulss xmm1, dword [0x10034428]
mulss xmm4, xmm3
cvtps2pd xmm1, xmm1
mulss xmm4, dword [0x10034428]
mulsd xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, eax
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
cmp byte [0x100493ee], 0
addsd xmm1, qword [0x10034490]
cvtsi2sd xmm2, eax
addsd xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, ecx
cvtpd2ps xmm7, xmm1
cvtps2pd xmm1, xmm4
movss dword [ebp - 0x18], xmm7
mulsd xmm1, xmm0
addsd xmm1, qword [0x10034490]
subsd xmm2, xmm1
cvtpd2ps xmm2, xmm2
movss dword [ebp - 0x10], xmm2
je 0x10020662
mov dword [ebp - 0x48], 0xa0ffffff
mov ecx, 0x10038790
push dword [ebp - 0x48]
push ebx
call fcn.1000e110
movss xmm2, dword [ebp - 0x10]
movss xmm7, dword [ebp - 0x18]
cmp byte [ebp - 0x40], 0
movss xmm0, dword [ebp - 0x1c]
subss xmm0, xmm2
movaps xmm1, xmm0
movss dword [ebp - 0x74], xmm0
mulss xmm1, dword [0x10034404]
movss dword [ebp - 0x34], xmm1
je 0x10020693
mulss xmm1, dword [0x10034478]
movss dword [ebp - 0x34], xmm1
cmp byte [0x100493ea], 0
movaps xmm3, xmm7
subss xmm3, xmm1
movss dword [ebp - 0x14], xmm3
je 0x100206ef
mov eax, dword [ebp - 0x38]
movzx edx, byte [ebp - 0x62]
movzx ecx, ah
movzx eax, al
mov byte [ebp - 0x50], al
cvttss2si eax, xmm0
mov dword [ebp - 0x4c], 0x80000000
mov byte [ebp - 0x4f], cl
mov byte [ebp - 0x4e], dl
mov byte [ebp - 0x4d], 0xa0
movaps xmm0, xmm1
push dword [ebp - 0x4c]
addss xmm0, xmm1
push dword [ebp - 0x50]
push eax
cvttss2si eax, xmm0
push eax
cvttss2si eax, xmm2
push eax
cvttss2si eax, xmm3
push eax
call fcn.1000de90
cmp byte [0x100493ef], 0
je 0x1002070e
mov dword [ebp - 0x54], 0xa0ffffff
push dword [ebp - 0x54]
push dword [0x10049214]
push ebx
call fcn.1000e7f0
mov ecx, dword [0x10038da0]
lea edx, [ebp]
mov edi, dword [ebp - 0x60]
push edx
push edi
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
cmp byte [0x100493eb], 0
je 0x10020805
cmp byte [edi + 0x10049654], 0
je 0x1002076f
mov dword [ebp + 0x84], 0x65697246
mov dword [ebp + 0x88], 0x203a646e
mov word [ebp + 0x8c], 0x7325
mov byte [ebp + 0x8e], 0
lea eax, [ebp + 0x84]
mov dword [ebp - 4], 0
or esi, 1
jmp 0x10020786
mov word [ebp - 0x28], 0x7325
mov byte [ebp - 0x26], 0
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 1
or esi, 2
movss xmm0, dword [ebp - 0x10]
lea ecx, [ebp]
subss xmm0, dword [0x10034504]
push ecx
push eax
mov dword [ebp - 0x58], 0xc8ffffff
push dword [ebp - 0x58]
cvttss2si eax, xmm0
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x30], esi
push eax
cvttss2si eax, dword [ebp - 0x18]
push eax
push 0
push 1
push 0x10038790
call fcn.1000dac0
mov eax, esi
add esp, 0x20
test al, 2
je 0x100207d9
and eax, 0xfffffffd
xor ecx, ecx
mov dword [ebp - 0x30], eax
mov word [ebp - 0x28], cx
mov byte [ebp - 0x26], cl
mov dword [ebp - 4], 0xffffffff
test al, 1
je 0x10020805
and eax, 0xfffffffe
mov word [ebp + 0x8c], 0
xorps xmm0, xmm0
mov dword [ebp - 0x30], eax
movq qword [ebp + 0x84], xmm0
mov byte [ebp + 0x8e], 0
mov ecx, ebx
call fcn.10002ee0
mov ecx, dword [eax]
test ecx, ecx
jle 0x10020980
movd xmm0, ecx
cmp ecx, 0x64
cvtdq2ps xmm0, xmm0
mov edx, 0x64
mulss xmm0, dword [0x100344c8]
cvttss2si eax, xmm0
mov dword [ebp - 0x20], eax
mov eax, ecx
cmovg eax, edx
cmp byte [0x100493ec], 0
mov dword [ebp - 0x40], eax
je 0x10020980
movss xmm0, dword [ebp - 0x1c]
cmp ecx, edx
addss xmm0, dword [0x100344d8]
mov eax, 0x80000000
mov ebx, 0x80280000
cmovle ebx, eax
mov eax, 0x2828
xor edx, edx
cmp ecx, 0x64
mov ecx, dword [0x10038db8]
movss dword [ebp - 0x10], xmm0
cmovle eax, edx
subss xmm0, dword [0x10034458]
or ebx, eax
mov eax, dword [ecx]
push ebx
cvttss2si edi, xmm0
mov eax, dword [eax + 0x28]
movss xmm0, dword [ebp - 0x14]
subss xmm0, dword [0x10034458]
cvttss2si esi, xmm0
call eax
lea eax, [edi + 4]
mov ecx, dword [0x10038db8]
push eax
mov edx, dword [ecx]
movss xmm0, dword [ebp - 0x34]
addss xmm0, xmm0
movss dword [ebp - 0x3c], xmm0
addss xmm0, dword [0x100344b8]
cvttss2si eax, xmm0
add eax, esi
push eax
mov eax, dword [edx + 0x38]
push edi
push esi
call eax
mov ecx, dword [0x10038db8]
cvttss2si esi, dword [ebp - 0x10]
push ebx
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
cvttss2si edi, dword [ebp - 0x14]
call eax
lea ebx, [esi + 2]
mov ecx, dword [0x10038db8]
mov edx, edi
push ebx
mov esi, dword [ecx]
movss xmm0, dword [ebp - 0x34]
mulss xmm0, dword [0x100345f8]
cvttss2si eax, xmm0
sub edx, eax
cvttss2si eax, dword [ebp - 0x10]
push edx
push eax
mov eax, dword [esi + 0x30]
push edi
call eax
movd xmm1, dword [ebp - 0x40]
movss xmm0, dword [ebp - 0x3c]
mov ecx, dword [0x10038db8]
mov eax, dword [ebp - 0x20]
cvtdq2pd xmm1, xmm1
movzx edx, al
not al
mov esi, dword [ecx]
or edx, 0xffa00000
movzx eax, al
shl edx, 8
or edx, eax
mov eax, dword [esi + 0x28]
mulsd xmm1, qword [0x10034460]
push edx
cvtps2pd xmm0, xmm0
mulsd xmm1, xmm0
cvttsd2si edi, xmm1
call eax
mov ecx, dword [0x10038db8]
push ebx
mov edx, dword [ecx]
cvttss2si esi, dword [ebp - 0x14]
lea eax, [edi + esi]
push eax
cvttss2si eax, dword [ebp - 0x10]
push eax
mov eax, dword [edx + 0x30]
push esi
call eax
mov ebx, dword [ebp - 0x70]
mov ecx, dword [0x10038dac]
push dword [ebx + 0xb38]
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
call eax
mov ecx, eax
test ecx, ecx
je 0x100209a0
mov eax, dword [ecx]
call dword [eax + 0x1c]
mov ecx, eax
test ecx, ecx
je 0x10020aa4
cmp byte [0x100493ec], 0
je 0x100209bb
movss xmm0, dword [0x100344d8]
jmp 0x100209c8
movss xmm0, dword [ebp - 0x74]
addss xmm0, dword [0x100344d8]
movss xmm1, dword [ebp - 0x10]
mov eax, dword [ecx]
addss xmm1, xmm0
mov eax, dword [eax + 0x4a4]
movss dword [ebp - 0x10], xmm1
call eax
test eax, eax
jns 0x100209e8
xor eax, eax
jmp 0x100209f0
xor ecx, ecx
cmp eax, 0x1d
cmovg eax, ecx
push eax
push str.client.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add eax, 0x1e0b00
call eax
lea edx, [ebp + 0x90]
add esp, 4
sub edx, eax
nop
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [eax + edx - 1], cl
test cl, cl
jne 0x10020a10
mov al, byte [ebp + 0x90]
lea esi, [ebp + 0x90]
test al, al
je 0x10020a48
nop dword [eax]
movsx eax, al
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov byte [esi], al
lea esi, [esi + 1]
mov al, byte [esi]
add esp, 4
test al, al
jne 0x10020a30
cmp byte [0x100493ed], 0
je 0x10020aa4
mov word [ebp - 0x2c], 0x7325
mov byte [ebp - 0x2a], 0
lea eax, [ebp + 0x90]
mov dword [ebp - 0x5c], 0xc8ffffff
push eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 4], 2
push eax
cvttss2si eax, dword [ebp - 0x10]
push dword [ebp - 0x5c]
push eax
cvttss2si eax, dword [ebp - 0x18]
push eax
push 0
push 1
push 0x10038790
call fcn.1000dac0
add esp, 0x20
mov dword [ebp - 4], 0xffffffff
xor eax, eax
mov word [ebp - 0x2c], ax
mov byte [ebp - 0x2a], al
cmp dword [0x100493c0], 0
mov edx, dword [ebp - 0x68]
movss xmm2, dword [edx - 8]
movss xmm0, dword [edx - 4]
movss xmm1, dword [edx]
mov edx, dword [ebp - 0x6c]
movss dword [ebp - 0x70], xmm2
movss dword [ebp - 0x74], xmm0
movss dword [ebp - 0x40], xmm1
movss xmm6, dword [edx - 8]
movss xmm4, dword [edx - 4]
movss xmm5, dword [edx]
movss dword [ebp - 0x18], xmm6
movss dword [ebp - 0x3c], xmm4
movss dword [ebp - 0x14], xmm5
jle 0x10020ea3
xorps xmm3, xmm3
ucomiss xmm3, xmm2
lahf
test ah, 0x44
jp 0x10020b13
ucomiss xmm3, xmm0
lahf
test ah, 0x44
jp 0x10020b13
ucomiss xmm3, xmm1
lahf
test ah, 0x44
jnp 0x10020ea3
ucomiss xmm3, xmm6
lahf
test ah, 0x44
jp 0x10020b32
ucomiss xmm3, xmm4
lahf
test ah, 0x44
jp 0x10020b32
ucomiss xmm3, xmm5
lahf
test ah, 0x44
jnp 0x10020ea3
mov ecx, dword [0x10038da0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x98]
call eax
movss xmm4, dword [ebp - 0x74]
mov esi, eax
movss xmm6, dword [ebp - 0x70]
movaps xmm1, xmm4
movss xmm5, dword [ebp - 0x40]
movaps xmm0, xmm6
mulss xmm0, dword [esi + 0x30]
mulss xmm1, dword [esi + 0x34]
addss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [esi + 0x38]
addss xmm0, dword [esi + 0x3c]
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
comisd xmm0, xmmword [0x10034440]
jbe 0x10020ea3
movss xmm3, dword [0x10034458]
movaps xmm0, xmm6
mulss xmm0, dword [esi]
xorps xmm2, xmm2
mov eax, dword [0x10038dc0]
divss xmm3, xmm1
mov ecx, dword [0x10038db4]
movaps xmm1, xmm4
mulss xmm6, dword [esi + 0x10]
mulss xmm1, dword [esi + 4]
mulss xmm4, dword [esi + 0x14]
addss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [esi + 8]
mulss xmm5, dword [esi + 0x18]
addss xmm4, xmm6
addss xmm0, dword [esi + 0xc]
addss xmm5, dword [esi + 0x1c]
addss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, eax
cdq
sub eax, edx
sar eax, 1
mulss xmm1, xmm3
addss xmm4, xmm5
mulss xmm1, dword [0x10034428]
mulss xmm4, xmm3
cvtps2pd xmm1, xmm1
mulss xmm4, dword [0x10034428]
mulsd xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, eax
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
addsd xmm1, qword [0x10034490]
cvtsi2sd xmm2, eax
addsd xmm1, xmm0
cvtpd2ps xmm0, xmm1
cvtps2pd xmm1, xmm4
movss dword [ebp - 0x20], xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, ecx
mov ecx, dword [0x10038da0]
mov eax, dword [ecx]
mulsd xmm1, xmm0
mov eax, dword [eax + 0x98]
addsd xmm1, qword [0x10034490]
subsd xmm2, xmm1
cvtpd2ps xmm0, xmm2
movss dword [ebp - 0x1c], xmm0
call eax
movss xmm4, dword [ebp - 0x3c]
mov esi, eax
movss xmm6, dword [ebp - 0x18]
movaps xmm1, xmm4
movss xmm5, dword [ebp - 0x14]
movaps xmm0, xmm6
mulss xmm0, dword [esi + 0x30]
mulss xmm1, dword [esi + 0x34]
addss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [esi + 0x38]
addss xmm0, dword [esi + 0x3c]
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
comisd xmm0, xmmword [0x10034440]
jbe 0x10020ea3
movss xmm3, dword [0x10034458]
movaps xmm0, xmm6
mulss xmm0, dword [esi]
mov eax, dword [0x10038dc0]
divss xmm3, xmm1
mov ecx, dword [0x10038db4]
push 0xa0ffffff
movaps xmm1, xmm4
mulss xmm6, dword [esi + 0x10]
mulss xmm1, dword [esi + 4]
mulss xmm4, dword [esi + 0x14]
addss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [esi + 8]
mulss xmm5, dword [esi + 0x18]
addss xmm4, xmm6
addss xmm0, dword [esi + 0xc]
addss xmm5, dword [esi + 0x1c]
addss xmm1, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
mulss xmm1, xmm3
addss xmm4, xmm5
mulss xmm1, dword [0x10034428]
mulss xmm4, xmm3
cvtps2pd xmm1, xmm1
mulss xmm4, dword [0x10034428]
mulsd xmm1, xmm0
movd xmm0, eax
mov eax, ecx
cvtdq2pd xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
addsd xmm1, qword [0x10034490]
movd xmm2, eax
cvtdq2pd xmm2, xmm2
addsd xmm1, xmm0
cvtpd2ps xmm0, xmm1
cvtps2pd xmm1, xmm4
movss dword [ebp - 0x14], xmm0
movd xmm0, ecx
mov ecx, dword [0x10038db8]
cvtdq2pd xmm0, xmm0
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
mulsd xmm1, xmm0
addsd xmm1, qword [0x10034490]
subsd xmm2, xmm1
cvtpd2ps xmm0, xmm2
movss dword [ebp - 0x18], xmm0
call eax
cvttss2si eax, dword [ebp - 0x18]
mov ecx, dword [0x10038db8]
mov edx, dword [ecx]
push eax
cvttss2si eax, dword [ebp - 0x14]
push eax
cvttss2si eax, dword [ebp - 0x1c]
push eax
cvttss2si eax, dword [ebp - 0x20]
push eax
mov eax, dword [edx + 0x3c]
call eax
movss xmm0, dword [ebp - 0x1c]
subss xmm0, dword [0x100344b8]
mov ecx, dword [0x10038db8]
push 0xa03c3cff
mov eax, dword [ecx]
cvttss2si esi, xmm0
mov eax, dword [eax + 0x28]
movss xmm0, dword [ebp - 0x20]
subss xmm0, dword [0x100344b8]
mov dword [ebp - 0x1c], esi
cvttss2si ebx, xmm0
call eax
mov ecx, dword [0x10038db8]
add esi, 5
mov eax, dword [ecx]
lea edi, [ebx + 5]
push esi
push edi
push dword [ebp - 0x1c]
mov eax, dword [eax + 0x30]
push ebx
call eax
mov ecx, dword [0x10038db8]
push 0xa0000000
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [0x10038db8]
push esi
push edi
push dword [ebp - 0x1c]
mov eax, dword [ecx]
push ebx
mov eax, dword [eax + 0x38]
call eax
movss xmm0, dword [ebp - 0x18]
subss xmm0, dword [0x100344b8]
mov ecx, dword [0x10038db8]
push 0xa0ffc8a0
mov eax, dword [ecx]
cvttss2si esi, xmm0
mov eax, dword [eax + 0x28]
movss xmm0, dword [ebp - 0x14]
subss xmm0, dword [0x100344b8]
mov dword [ebp - 0x1c], esi
cvttss2si ebx, xmm0
call eax
mov ecx, dword [0x10038db8]
lea edi, [ebx + 5]
add esi, 5
push esi
push edi
mov eax, dword [ecx]
push dword [ebp - 0x1c]
push ebx
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [0x10038db8]
push 0xa0000000
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [0x10038db8]
push esi
push edi
push dword [ebp - 0x1c]
mov eax, dword [ecx]
push ebx
mov eax, dword [eax + 0x38]
call eax
mov edi, dword [ebp - 0x24]
mov edx, dword [ebp - 0x60]
mov eax, dword [0x10038da8]
inc edx
add dword [ebp - 0x68], 0x39c
add dword [ebp - 0x6c], 0x7380
mov esi, dword [ebp - 0x30]
mov dword [ebp - 0x60], edx
cmp edx, dword [eax + 0x14]
jle 0x10020345
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x190]
xor ecx, ebp
call fcn.1002b17d
lea esp, [ebp + 0x194]
pop ebp
ret