Function at 0x1002f0b0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get number of processors

Disassembly:
push ebp
lea ebp, [esp - 0x1a0c]
mov eax, 0x1a0c
call fcn.1003c140
push 0xffffffffffffffff
push 0x1003f7d9
mov eax, dword fs:[0]
push eax
sub esp, 0xa8
mov eax, dword [0x1004b040]
xor eax, ebp
mov dword [ebp + 0x1a08], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
mov dword [ebp - 0x14], eax
mov ecx, dword [0x1004b8d8]
mov dword [ebp - 0x3c], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [0x1004b8e4]
push eax
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
mov esi, eax
mov dword [ebp - 0x1c], esi
test esi, esi
je 0x100302c0
cmp dword [0x10f6c78c], 0
jne 0x1002f190
cmp byte [0x10f6c710], 0
jne 0x1002f190
cmp byte [0x10f6c6f4], 0
jne 0x1002f190
cmp byte [0x10f6c71b], 0
jne 0x1002f190
cmp byte [0x10f6c711], 0
jne 0x1002f190
cmp byte [0x10f6c718], 0
jne 0x1002f190
cmp byte [0x10f6c720], 0
jne 0x1002f190
cmp byte [0x10f6c713], 0
jne 0x1002f190
cmp byte [0x10f6c714], 0
jne 0x1002f190
cmp byte [0x10f6c717], 0
jne 0x1002f190
cmp byte [0x10f6c719], 0
jne 0x1002f190
cmp byte [0x10f6c716], 0
je 0x100302c0
xor eax, eax
mov ebx, 1
mov dword [ebp - 0x28], eax
mov eax, dword [0x1004b8e0]
mov dword [ebp - 0x20], ebx
cmp dword [eax + 0x14], ebx
jl 0x100302c0
nop dword [eax + eax]
mov ecx, dword [0x1004b8e4]
push ebx
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov edi, eax
mov dword [ebp - 0x80], edi
test edi, edi
je 0x100302ae
cmp edi, esi
je 0x100302ae
mov ecx, dword [0x1004b8e0]
movss xmm1, dword [0x10046200]
movss xmm0, dword [0x10046370]
divss xmm1, dword [ecx + 0x10]
lea ecx, [edi + 8]
divss xmm0, xmm1
cvttss2si eax, xmm0
mov dword [ebp - 0x30], eax
mov eax, dword [edi + 8]
mov eax, dword [eax + 0x20]
call eax
test al, al
je 0x1002f21f
mov eax, dword [ebx*4 + 0x11db9538]
test eax, eax
jle 0x1002f21f
sub eax, dword [ebp - 0x30]
mov dword [ebx*4 + 0x11db9538], eax
jmp 0x1002f245
cmp dword [ebx*4 + 0x11db9538], 0x82
jge 0x1002f245
mov eax, dword [edi + 8]
lea ecx, [edi + 8]
mov eax, dword [eax + 0x20]
call eax
test al, al
jne 0x1002f245
mov ecx, dword [ebp - 0x30]
add dword [ebx*4 + 0x11db9538], ecx
cmp byte [0x10f6c722], 0
jne 0x1002f261
mov eax, dword [edi + 8]
lea ecx, [edi + 8]
mov eax, dword [eax + 0x20]
call eax
test al, al
jne 0x100302ab
mov ecx, edi
call fcn.10002f90
cmp dword [eax], 0
jne 0x100302ab
cmp byte [0x10f6c721], 0
je 0x1002f293
mov ecx, edi
call fcn.10002b70
mov ecx, dword [ebp - 0x1c]
mov esi, dword [eax]
call fcn.10002b70
cmp esi, dword [eax]
je 0x100302ab
cmp byte [ebx + 0x10f6ca38], 0
je 0x1002f2a8
mov dword [ebp - 0x48], 0xffffffff
mov eax, dword [ebp - 0x48]
jmp 0x1002f2cf
mov ecx, edi
call fcn.10002b70
cmp dword [eax], 2
jne 0x1002f2bb
mov eax, dword [0x10f6c4c8]
jmp 0x1002f2cf
mov ecx, edi
call fcn.10002b70
cmp dword [eax], 3
mov eax, dword [ebp - 0x28]
cmove eax, dword [0x10f6c4c4]
mov dword [ebp - 0x28], eax
mov ecx, edi
mov dword [ebp - 0x18], eax
mov eax, dword [edi]
call dword [eax + 0x24]
mov ecx, edi
movss xmm0, dword [eax]
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x34], xmm0
movss xmm0, dword [eax + 8]
movss dword [ebp - 0x24], xmm0
call fcn.10002cc0
movss xmm0, dword [ebp - 0x2c]
movss dword [ebp - 0x10], xmm0
movss xmm0, dword [ebp - 0x34]
mov eax, dword [eax]
shr eax, 1
and al, 1
movss dword [ebp - 0x30], xmm0
movss xmm0, dword [ebp - 0x24]
mov dword [ebp - 0x5c], eax
je 0x1002f32e
addss xmm0, dword [0x100462e8]
jmp 0x1002f336
addss xmm0, dword [0x10046308]
mov ecx, dword [0x1004b8d8]
movss dword [ebp - 0x14], xmm0
mov eax, dword [ecx]
mov eax, dword [eax + 0x98]
call eax
movss xmm1, dword [ebp - 0x2c]
mov esi, eax
movss xmm5, dword [ebp - 0x34]
movaps xmm3, xmm1
movss xmm4, dword [ebp - 0x24]
movaps xmm0, xmm5
mulss xmm0, dword [esi + 0x34]
mulss xmm3, dword [esi + 0x30]
addss xmm3, xmm0
movaps xmm0, xmm4
mulss xmm0, dword [esi + 0x38]
addss xmm0, dword [esi + 0x3c]
addss xmm3, xmm0
cvtps2pd xmm0, xmm3
comisd xmm0, xmmword [0x100461e8]
jbe 0x100302ab
mulss xmm1, dword [esi + 0x10]
xorps xmm0, xmm0
mov ecx, dword [0x1004b880]
mov eax, ecx
mulss xmm5, dword [esi + 0x14]
xorps xmm2, xmm2
cdq
mulss xmm4, dword [esi + 0x18]
sub eax, edx
sar eax, 1
addss xmm1, xmm5
cvtsi2sd xmm0, ecx
mov ecx, dword [0x1004b8d8]
addss xmm4, dword [esi + 0x1c]
cvtsi2sd xmm2, eax
mov eax, dword [ecx]
addss xmm1, xmm4
mov eax, dword [eax + 0x98]
divss xmm1, xmm3
mulss xmm1, dword [0x100461d0]
cvtps2pd xmm1, xmm1
mulsd xmm1, xmm0
addsd xmm1, qword [0x10046248]
subsd xmm2, xmm1
cvtpd2ps xmm0, xmm2
movss dword [ebp - 0x2c], xmm0
call eax
movss xmm4, dword [ebp - 0x30]
mov esi, eax
movss xmm6, dword [ebp - 0x10]
movaps xmm1, xmm4
movss xmm5, dword [ebp - 0x14]
movaps xmm0, xmm6
mulss xmm0, dword [esi + 0x30]
mulss xmm1, dword [esi + 0x34]
addss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [esi + 0x38]
addss xmm0, dword [esi + 0x3c]
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
comisd xmm0, xmmword [0x100461e8]
jbe 0x100302ab
movss xmm3, dword [0x10046200]
movaps xmm0, xmm6
mulss xmm0, dword [esi]
xorps xmm2, xmm2
mov eax, dword [0x1004b884]
divss xmm3, xmm1
mov ecx, dword [0x1004b880]
movaps xmm1, xmm4
mulss xmm6, dword [esi + 0x10]
mulss xmm1, dword [esi + 4]
mulss xmm4, dword [esi + 0x14]
addss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [esi + 8]
mulss xmm5, dword [esi + 0x18]
addss xmm4, xmm6
addss xmm0, dword [esi + 0xc]
addss xmm5, dword [esi + 0x1c]
addss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, eax
cdq
sub eax, edx
sar eax, 1
mulss xmm1, xmm3
addss xmm4, xmm5
mulss xmm1, dword [0x100461d0]
mulss xmm4, xmm3
cvtps2pd xmm1, xmm1
mulss xmm4, dword [0x100461d0]
mulsd xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, eax
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
cmp byte [0x10f6c713], 0
addsd xmm1, qword [0x10046248]
cvtsi2sd xmm2, eax
addsd xmm1, xmm0
cvtpd2ps xmm0, xmm1
cvtps2pd xmm1, xmm4
movss dword [ebp - 0x30], xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, ecx
mulsd xmm1, xmm0
addsd xmm1, qword [0x10046248]
subsd xmm2, xmm1
cvtpd2ps xmm0, xmm2
movss dword [ebp - 0x10], xmm0
je 0x1002f537
push 0xffffffffffffffff
mov dword [ebp - 0x4c], 0xc8ffffff
mov ecx, 0x1004b6bd
push dword [ebp - 0x4c]
push edi
call fcn.10018ea0
cmp byte [ebx + 0x10f6ca38], 0
je 0x1002f54f
mov dword [ebp - 0x70], 0xffffffff
mov eax, dword [ebp - 0x70]
jmp 0x1002f61d
mov ebx, dword [ebp - 0x1c]
mov ecx, ebx
mov eax, dword [ebx]
call dword [eax + 0x24]
movss xmm0, dword [ebx + 0xd4]
mov ecx, edi
addss xmm0, dword [eax]
movss dword [ebp - 0xb4], xmm0
movss xmm0, dword [eax + 4]
addss xmm0, dword [ebx + 0xd8]
movss dword [ebp - 0xb0], xmm0
movss xmm0, dword [eax + 8]
addss xmm0, dword [ebx + 0xdc]
mov eax, dword [edi]
movss dword [ebp - 0xac], xmm0
call dword [eax + 0x24]
push ebx
push edi
lea edx, [ebp - 0xa8]
movss xmm0, dword [eax]
lea ecx, [ebp - 0xb4]
addss xmm0, dword [edi + 0xd4]
movss dword [ebp - 0xa8], xmm0
movss xmm0, dword [eax + 4]
addss xmm0, dword [edi + 0xd8]
movss dword [ebp - 0xa4], xmm0
movss xmm0, dword [eax + 8]
addss xmm0, dword [edi + 0xdc]
movss dword [ebp - 0xa0], xmm0
call fcn.1002dba0
add esp, 8
test al, al
je 0x1002f623
mov ecx, edi
call fcn.10002b70
cmp dword [eax], 2
jne 0x1002f609
mov eax, dword [0x10f6c4d0]
jmp 0x1002f61d
mov ecx, edi
call fcn.10002b70
cmp dword [eax], 3
mov eax, dword [ebp - 0x28]
cmove eax, dword [0x10f6c4cc]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x18], eax
cmp byte [0x10f6c718], 0
je 0x1002f67f
mov eax, dword [edi + 4]
lea ecx, [edi + 4]
call dword [eax + 0x20]
mov edx, eax
test edx, edx
je 0x1002f67f
mov ecx, dword [0x1004b8d0]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x6c]
call eax
mov esi, eax
test esi, esi
je 0x1002f67f
mov ecx, edi
call fcn.10002db0
mov ecx, dword [eax]
mov eax, dword [esi + 0xb0]
lea ecx, [ecx + ecx*2]
lea ebx, [eax + ecx*4]
add ebx, esi
je 0x1002f67f
xor esi, esi
cmp dword [ebx + 4], esi
jle 0x1002f67f
nop
mov edx, esi
mov ecx, edi
call fcn.1002e620
inc esi
cmp esi, dword [ebx + 4]
jl 0x1002f670
cmp byte [ebp - 0x5c], 0
movss xmm4, dword [ebp - 0x2c]
movss xmm2, dword [ebp - 0x10]
movaps xmm0, xmm4
subss xmm0, xmm2
movaps xmm1, xmm0
movss dword [ebp - 0x24], xmm0
mulss xmm1, dword [0x100461a0]
movss dword [ebp - 0x2c], xmm1
je 0x1002f6b8
mulss xmm1, dword [0x10046228]
movss dword [ebp - 0x2c], xmm1
movss xmm5, dword [ebp - 0x30]
mov eax, dword [0x10f6c78c]
movaps xmm3, xmm5
subss xmm3, xmm1
movss dword [ebp - 0x34], xmm3
cmp eax, 1
jne 0x1002f71f
mov eax, dword [ebp - 0x28]
movzx edx, byte [ebp - 0x16]
movzx ebx, byte [ebp - 0x15]
movzx ecx, ah
movzx eax, al
mov byte [ebp - 0x68], al
cvttss2si eax, xmm0
mov dword [ebp - 0x6c], 0xff000000
mov byte [ebp - 0x67], cl
mov byte [ebp - 0x66], dl
mov byte [ebp - 0x65], bl
movaps xmm0, xmm1
push dword [ebp - 0x6c]
addss xmm0, xmm1
push dword [ebp - 0x68]
push eax
cvttss2si eax, xmm0
push eax
cvttss2si eax, xmm2
push eax
cvttss2si eax, xmm3
push eax
call fcn.10017680
jmp 0x1002f75b
cmp eax, 2
jne 0x1002f75b
movzx eax, byte [ebp - 0x15]
push eax
movzx eax, byte [ebp - 0x16]
push eax
mov eax, dword [ebp - 0x28]
movzx ecx, ah
push ecx
movzx eax, al
push eax
cvttss2si eax, xmm0
push ecx
movaps xmm0, xmm1
addss xmm0, xmm1
push eax
cvttss2si edx, xmm4
cvttss2si eax, xmm0
cvttss2si ecx, xmm5
push eax
call fcn.1002e280
add esp, 0x1c
cmp byte [0x10f6c720], 0
je 0x1002f98f
mov ecx, dword [0x1004b8d8]
lea edx, [ebp - 0x78]
push edx
lea edx, [ebp - 0x7c]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
call eax
movd xmm0, dword [ebp - 0x7c]
cvtdq2ps xmm0, xmm0
mov ebx, dword [ebp - 0x1c]
mov ecx, ebx
mulss xmm0, dword [0x100461d0]
cvttss2si eax, xmm0
movd xmm0, dword [ebp - 0x78]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x7c], eax
mulss xmm0, dword [0x100461d0]
cvttss2si eax, xmm0
mov dword [ebp - 0x78], eax
mov eax, dword [ebx]
call dword [eax + 0x24]
mov eax, dword [edi + 4]
push ecx
mov dword [esp], 0x5f800000
lea ecx, [ebp + 0x90]
push 0x100
push 0x80
push ecx
lea ecx, [edi + 4]
call dword [eax + 0x3c]
mov eax, dword [edi + 4]
lea ecx, [edi + 4]
call dword [eax + 0x20]
mov ecx, dword [0x1004b8d0]
push eax
mov edx, dword [ecx]
mov eax, dword [edx + 0x6c]
call eax
mov ecx, edi
mov esi, eax
call fcn.10002db0
mov ecx, dword [eax]
lea eax, [ebp + 0x1890]
lea edx, [ecx + ecx*2]
mov ecx, dword [esi + 0xb0]
push ecx
mov dword [esp], 0
push eax
push ebx
lea edx, [ecx + edx*4]
mov ecx, dword [0x10f6c510]
lea eax, [ebp + 0x90]
add edx, esi
push edi
push eax
call fcn.1002ead0
mov ecx, dword [0x1004b8d8]
add esp, 0x14
mov eax, dword [ecx]
mov eax, dword [eax + 0x98]
call eax
movss xmm5, dword [ebp + 0x1894]
mov esi, eax
movss xmm7, dword [ebp + 0x1890]
movaps xmm1, xmm5
movss xmm6, dword [ebp + 0x1898]
movaps xmm0, xmm7
mulss xmm0, dword [esi + 0x30]
mulss xmm1, dword [esi + 0x34]
addss xmm1, xmm0
movaps xmm0, xmm6
mulss xmm0, dword [esi + 0x38]
addss xmm0, dword [esi + 0x3c]
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
comisd xmm0, xmmword [0x100461e8]
jbe 0x1002f98f
movss xmm4, dword [0x10046200]
movaps xmm0, xmm7
mulss xmm0, dword [esi]
mov eax, dword [0x1004b884]
divss xmm4, xmm1
mov ecx, dword [0x1004b880]
mov edi, dword [ebp - 0x7c]
push 0xc8ffffff
movaps xmm1, xmm5
mulss xmm7, dword [esi + 0x10]
mulss xmm1, dword [esi + 4]
mulss xmm5, dword [esi + 0x14]
addss xmm1, xmm0
movaps xmm0, xmm6
mulss xmm0, dword [esi + 8]
mulss xmm6, dword [esi + 0x18]
addss xmm5, xmm7
addss xmm0, dword [esi + 0xc]
addss xmm6, dword [esi + 0x1c]
mov esi, dword [ebp - 0x78]
addss xmm1, xmm0
movd xmm0, eax
cdq
cvtdq2pd xmm0, xmm0
sub eax, edx
sar eax, 1
mulss xmm1, xmm4
addss xmm5, xmm6
mulss xmm1, dword [0x100461d0]
mulss xmm5, xmm4
cvtps2pd xmm1, xmm1
mulss xmm5, dword [0x100461d0]
mulsd xmm1, xmm0
movd xmm0, eax
mov eax, ecx
cvtdq2pd xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
addsd xmm1, qword [0x10046248]
movd xmm2, eax
cvtdq2pd xmm2, xmm2
addsd xmm1, xmm0
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
mov ecx, dword [0x1004b8f8]
cvtpd2ps xmm3, xmm1
cvtps2pd xmm1, xmm5
cvttss2si ebx, xmm3
mulsd xmm1, xmm0
addsd xmm1, qword [0x10046248]
subsd xmm2, xmm1
cvtpd2ps xmm0, xmm2
cvttss2si eax, xmm0
mov dword [ebp - 0x5c], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [0x1004b8f8]
push dword [ebp - 0x5c]
push ebx
mov eax, dword [ecx]
push esi
push edi
mov eax, dword [eax + 0x3c]
call eax
mov edi, dword [ebp - 0x80]
cmp byte [0x10f6c716], 0
je 0x1002f9ae
mov dword [ebp - 0x64], 0xc8ffffff
push dword [ebp - 0x64]
push dword [0x10f6c510]
push edi
call fcn.10019570
mov ecx, dword [0x1004b8d8]
lea edx, [ebp]
mov ebx, dword [ebp - 0x20]
push edx
push ebx
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
cmp byte [0x10f6c710], 0
je 0x1002faac
cmp byte [ebx + 0x10f6ca38], 0
je 0x1002fa12
mov dword [ebp + 0x84], 0x65697246
mov dword [ebp + 0x88], 0x203a646e
mov word [ebp + 0x8c], 0x7325
mov byte [ebp + 0x8e], 0
mov dword [ebp - 4], 0
lea ecx, [ebp + 0x84]
mov eax, dword [ebp - 0x3c]
or eax, 1
jmp 0x1002fa2c
mov word [ebp - 0x40], 0x7325
mov byte [ebp - 0x3e], 0
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x40]
mov eax, dword [ebp - 0x3c]
or eax, 2
movss xmm0, dword [ebp - 0x10]
subss xmm0, dword [0x100462b8]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x3c], eax
lea eax, [ebp]
push eax
push ecx
cvttss2si eax, xmm0
mov dword [ebp - 0x58], 0xc8ffffff
push dword [ebp - 0x58]
push eax
cvttss2si eax, dword [ebp - 0x30]
push eax
push 0
push 1
push 0x1004b6bd
call fcn.10016e50
mov eax, dword [ebp - 0x3c]
add esp, 0x20
test al, 2
je 0x1002fa80
and eax, 0xfffffffd
xor ecx, ecx
mov dword [ebp - 0x3c], eax
mov word [ebp - 0x40], cx
mov byte [ebp - 0x3e], cl
mov dword [ebp - 4], 0xffffffff
test al, 1
je 0x1002faac
and eax, 0xfffffffe
mov word [ebp + 0x8c], 0
xorps xmm0, xmm0
mov dword [ebp - 0x3c], eax
movq qword [ebp + 0x84], xmm0
mov byte [ebp + 0x8e], 0
imul eax, ebx, 0x37400
movss xmm1, dword [eax + 0x10f6ce1c]
lea ecx, [eax + 0x10f6ce18]
movss xmm2, dword [ecx + 8]
movss xmm0, dword [ecx + 0xc]
subss xmm2, dword [eax + 0x10f6e9c0]
subss xmm1, dword [eax + 0x10f6e9bc]
subss xmm0, dword [eax + 0x10f6e9c4]
mulss xmm2, xmm2
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm2, xmm1
addss xmm2, xmm0
comiss xmm2, dword [0x10046380]
seta al
test al, al
je 0x1002fb54
push ecx
call fcn.1002af70
movss xmm0, dword [ebp - 0x10]
test al, al
subss xmm0, dword [0x10046284]
mov eax, 0xff00ff00
mov ecx, 0xff0000ff
cmove ecx, eax
push 0x100456c8
push ecx
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x34]
subss xmm0, dword [0x100462b0]
push eax
cvttss2si eax, xmm0
push eax
push 0
push 2
push 0x1004b6bd
call fcn.10016ff0
add esp, 0x1c
mov ecx, edi
call fcn.10003080
cmp dword [eax], 0
jle 0x1002fd54
cmp byte [0x10f6c6f4], 0
je 0x1002fd54
mov ecx, edi
call fcn.10003080
mov ecx, dword [ebx*4 + 0x11db9538]
mov ebx, 0x64
cvttss2si edi, dword [ebp - 0x10]
mov edx, dword [eax]
cmp edx, 0x64
movd xmm0, edx
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x10046280]
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x24]
mov dword [ebp - 0x14], eax
mov eax, edx
cmovg eax, ebx
mov ebx, 0x2828
cvtps2pd xmm0, xmm0
mov dword [ebp - 0x44], eax
movd xmm1, eax
cvtdq2pd xmm1, xmm1
mulsd xmm1, qword [0x10046208]
mulsd xmm1, xmm0
subsd xmm0, xmm1
movsd qword [ebp - 0x8c], xmm1
cvttsd2si eax, xmm0
movss xmm0, dword [ebp - 0x34]
subss xmm0, dword [0x100462a8]
mov dword [ebp - 0x5c], eax
xor eax, eax
cmp edx, 0x64
cmovle ebx, eax
xor esi, esi
cmp edx, 0x64
mov eax, 0x280000
cmovle eax, esi
or ebx, eax
movzx eax, cl
mov ecx, dword [0x1004b8f8]
shl eax, 0x18
or ebx, eax
push ebx
mov eax, dword [ecx]
cvttss2si esi, xmm0
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [0x1004b8f8]
movss xmm0, dword [ebp - 0x24]
addss xmm0, dword [0x10046200]
mov edx, dword [ecx]
cvttss2si eax, xmm0
add eax, edi
push eax
lea eax, [esi + 4]
push eax
mov eax, dword [edx + 0x38]
push edi
push esi
call eax
movss xmm0, dword [ebp - 0x10]
addss xmm0, dword [0x10046200]
mov ecx, dword [0x1004b8f8]
push ebx
mov eax, dword [ecx]
cvttss2si esi, xmm0
mov eax, dword [eax + 0x28]
movss xmm0, dword [ebp - 0x34]
subss xmm0, dword [0x100462a0]
cvttss2si edi, xmm0
mov dword [ebp - 0x18], edi
call eax
movss xmm0, dword [ebp - 0x24]
lea ebx, [edi + 2]
subss xmm0, dword [0x10046200]
mov ecx, dword [0x1004b8f8]
mov edx, dword [ecx]
cvttss2si eax, xmm0
add eax, esi
push eax
push ebx
push esi
push edi
mov eax, dword [edx + 0x30]
call eax
movsd xmm0, qword [ebp - 0x8c]
subsd xmm0, qword [0x10046268]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ecx*4 + 0x11db9538]
mov ecx, dword [0x1004b8f8]
cvttsd2si edi, xmm0
movzx edx, al
mov eax, dword [ebp - 0x14]
mov esi, dword [ecx]
movzx eax, al
shl edx, 0x10
or edx, eax
mov eax, dword [ebp - 0x14]
movd xmm0, dword [ebp - 0x5c]
not al
cvtdq2ps xmm0, xmm0
movzx eax, al
shl edx, 8
or edx, eax
mov eax, dword [esi + 0x28]
push edx
addss xmm0, dword [ebp - 0x10]
addss xmm0, dword [0x10046200]
cvttss2si ebx, xmm0
call eax
mov esi, dword [ebp - 0x18]
lea eax, [edi + ebx]
mov ecx, dword [0x1004b8f8]
push eax
lea eax, [esi + 2]
mov edx, dword [ecx]
push eax
push ebx
push esi
mov eax, dword [edx + 0x30]
call eax
push dword [ebp - 0x44]
mov ecx, dword [ebp - 0x20]
push 0x100456d4
mov word [ebp - 0x54], 0xffff
mov byte [ebp - 0x52], 0xff
mov eax, dword [ecx*4 + 0x11db9538]
mov byte [ebp - 0x51], al
push dword [ebp - 0x54]
push ebx
push esi
push 1
push 1
push 0x1004b6bd
call fcn.10016e50
mov edi, dword [ebp - 0x80]
add esp, 0x20
mov ebx, dword [ebp - 0x20]
mov eax, dword fs:[0x2c]
mov esi, dword [0x1004b66c]
mov ecx, dword [eax + esi*4]
mov eax, dword [0x11db9bec]
cmp eax, dword [ecx + 4]
jle 0x1002fdb1
push 0x11db9bec
call fcn.1003b300
add esp, 4
cmp dword [0x11db9bec], 0xffffffff
jne 0x1002fdb1
push 0x11db9bec
mov dword [0x11db9c00], 0
mov dword [0x11db9c04], 0
mov dword [0x11db9c08], 0x42560000
call fcn.1003b2af
add esp, 4
mov eax, dword fs:[0x2c]
mov ecx, dword [eax + esi*4]
mov eax, dword [0x11db9be8]
cmp eax, dword [ecx + 4]
jle 0x1002fe08
push 0x11db9be8
call fcn.1003b300
add esp, 4
cmp dword [0x11db9be8], 0xffffffff
jne 0x1002fe08
push 0x11db9be8
mov dword [0x11db9bf4], 0
mov dword [0x11db9bf8], 0
mov dword [0x11db9bfc], 0x42900000
call fcn.1003b2af
add esp, 4
mov ecx, edi
call fcn.10002cc0
mov ecx, 0x11db9bf4
test byte [eax], 2
mov eax, 0x11db9c00
cmove eax, ecx
mov ecx, edi
movss xmm0, dword [eax]
movss dword [ebp - 0x18], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x5c], xmm0
movss xmm0, dword [eax + 8]
mov eax, dword [edi]
movss dword [ebp - 0x88], xmm0
call dword [eax + 0x24]
mov ecx, dword [0x1004b8d8]
movss xmm0, dword [eax]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x44], xmm0
movss xmm0, dword [eax + 8]
mov eax, dword [ecx]
movss dword [ebp - 0x84], xmm0
mov eax, dword [eax + 0x98]
call eax
movss xmm0, dword [ebp - 0x14]
addss xmm0, dword [ebp - 0x18]
movss xmm1, dword [ebp - 0x44]
addss xmm1, dword [ebp - 0x5c]
mulss xmm0, dword [eax + 0x30]
mulss xmm1, dword [eax + 0x34]
addss xmm1, xmm0
movss xmm0, dword [ebp - 0x84]
addss xmm0, dword [ebp - 0x88]
mulss xmm0, dword [eax + 0x38]
addss xmm0, dword [eax + 0x3c]
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
comisd xmm0, xmmword [0x100461e8]
jbe 0x100302c0
cmp byte [0x10f6c71b], 0
je 0x100301a4
mov eax, dword fs:[0x2c]
mov ecx, dword [eax + esi*4]
mov eax, dword [0x11db9730]
cmp eax, dword [ecx + 4]
jle 0x1002ffb0
push 0x11db9730
call fcn.1003b300
add esp, 4
cmp dword [0x11db9730], 0xffffffff
jne 0x1002ffb0
lea ecx, [ebp - 0x9c]
mov dword [ebp - 4], 2
call fcn.10034fc0
push 0
push str.m_ArmorValue
push str.DT_CSPlayer
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.10035060
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x9c]
mov dword [0x11db973c], eax
test ecx, ecx
je 0x1002ff9c
mov eax, dword [ebp - 0x94]
sub eax, ecx
sar eax, 2
lea edx, [eax*4]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002ff74
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100302e3
push edx
push ecx
call fcn.1003b276
add esp, 8
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0
push 0x11db9730
mov dword [ebp - 4], 0xffffffff
call fcn.1003b2af
add esp, 4
mov eax, dword [0x11db973c]
mov ecx, dword [eax + edi]
cmp ecx, 0x64
mov edx, ecx
cvttss2si edi, dword [ebp - 0x10]
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x10046280]
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x24]
mov dword [ebp - 0x14], eax
mov eax, dword [ebx*4 + 0x11db9538]
mov ebx, 0x64
cmovg edx, ebx
movzx ebx, al
cvtps2pd xmm0, xmm0
mov dword [ebp - 0x44], edx
mov eax, 0x2828
shl ebx, 0x18
movd xmm1, edx
cvtdq2pd xmm1, xmm1
mulsd xmm1, qword [0x10046208]
mulsd xmm1, xmm0
subsd xmm0, xmm1
movsd qword [ebp - 0x60], xmm1
cvttsd2si edx, xmm0
movss xmm0, dword [ebp - 0x2c]
mov dword [ebp - 0x88], edx
addss xmm0, xmm0
xor edx, edx
cmp ecx, 0x64
cmovle eax, edx
or ebx, eax
mov eax, 0x280000
addss xmm0, dword [ebp - 0x34]
cmp ecx, 0x64
mov ecx, dword [0x1004b8f8]
cmovle eax, edx
or ebx, eax
mov eax, dword [ecx]
movss dword [ebp - 0x2c], xmm0
addss xmm0, dword [0x10046270]
push ebx
mov eax, dword [eax + 0x28]
cvttss2si esi, xmm0
call eax
mov ecx, dword [0x1004b8f8]
mov edx, dword [ecx]
movss xmm0, dword [ebp - 0x24]
addss xmm0, dword [0x10046200]
cvttss2si eax, xmm0
add eax, edi
push eax
lea eax, [esi + 4]
push eax
mov eax, dword [edx + 0x38]
push edi
push esi
call eax
movss xmm0, dword [ebp - 0x10]
addss xmm0, dword [0x10046200]
mov ecx, dword [0x1004b8f8]
push ebx
mov eax, dword [ecx]
cvttss2si esi, xmm0
mov eax, dword [eax + 0x28]
movss xmm0, dword [ebp - 0x2c]
addss xmm0, dword [0x10046284]
cvttss2si edi, xmm0
mov dword [ebp - 0x84], edi
call eax
movss xmm0, dword [ebp - 0x24]
lea ebx, [edi + 2]
subss xmm0, dword [0x10046200]
mov ecx, dword [0x1004b8f8]
mov edx, dword [ecx]
cvttss2si eax, xmm0
add eax, esi
push eax
push ebx
push esi
mov eax, dword [edx + 0x30]
push edi
call eax
movsd xmm0, qword [ebp - 0x60]
subsd xmm0, qword [0x10046268]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ecx*4 + 0x11db9538]
mov ecx, dword [0x1004b8f8]
cvttsd2si edi, xmm0
movzx edx, al
mov eax, dword [ebp - 0x14]
mov esi, dword [ecx]
movzx eax, al
shl edx, 8
or edx, eax
mov eax, dword [ebp - 0x14]
movd xmm0, dword [ebp - 0x88]
not al
cvtdq2ps xmm0, xmm0
shl edx, 8
movzx eax, al
or edx, eax
mov eax, dword [esi + 0x28]
shl edx, 8
push edx
addss xmm0, dword [ebp - 0x10]
addss xmm0, dword [0x10046200]
cvttss2si ebx, xmm0
call eax
mov esi, dword [ebp - 0x84]
lea eax, [edi + ebx]
mov ecx, dword [0x1004b8f8]
push eax
lea eax, [esi + 2]
mov edx, dword [ecx]
push eax
push ebx
push esi
mov eax, dword [edx + 0x30]
call eax
push dword [ebp - 0x44]
mov ecx, dword [ebp - 0x20]
push 0x100456d0
mov word [ebp - 0x74], 0xffff
mov byte [ebp - 0x72], 0xff
mov eax, dword [ecx*4 + 0x11db9538]
mov byte [ebp - 0x71], al
push dword [ebp - 0x74]
push ebx
push esi
push 1
push 1
push 0x1004b6bd
call fcn.10016e50
mov edi, dword [ebp - 0x80]
add esp, 0x20
mov ecx, dword [0x1004b8e4]
push dword [edi + 0xb38]
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
call eax
test eax, eax
je 0x100302a8
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
mov ecx, eax
test ecx, ecx
je 0x100302a8
movss xmm0, dword [ebp - 0x10]
addss xmm0, dword [ebp - 0x24]
mov eax, dword [ecx]
mov eax, dword [eax + 0x4a4]
movss dword [ebp - 0x10], xmm0
call eax
test eax, eax
jns 0x100301f1
xor eax, eax
jmp 0x100301f9
xor ecx, ecx
cmp eax, 0x1d
cmovg eax, ecx
push eax
push str.client.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add eax, 0x1e0b00
call eax
lea edx, [ebp + 0x1908]
add esp, 4
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x10030217
mov al, byte [ebp + 0x1908]
lea esi, [ebp + 0x1908]
test al, al
je 0x1003024c
movsx eax, al
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov byte [esi], al
lea esi, [esi + 1]
mov al, byte [esi]
add esp, 4
test al, al
jne 0x10030234
cmp byte [0x10f6c711], 0
je 0x100302a8
mov word [ebp - 0x38], 0x7325
mov byte [ebp - 0x36], 0
lea eax, [ebp + 0x1908]
mov dword [ebp - 0x50], 0xc8ffffff
push eax
lea eax, [ebp - 0x38]
mov dword [ebp - 4], 4
push eax
cvttss2si eax, dword [ebp - 0x10]
push dword [ebp - 0x50]
push eax
cvttss2si eax, dword [ebp - 0x30]
push eax
push 0
push 1
push 0x1004b6bd
call fcn.10016e50
add esp, 0x20
mov dword [ebp - 4], 0xffffffff
xor eax, eax
mov word [ebp - 0x38], ax
mov byte [ebp - 0x36], al
mov ebx, dword [ebp - 0x20]
mov esi, dword [ebp - 0x1c]
mov eax, dword [0x1004b8e0]
inc ebx
mov dword [ebp - 0x20], ebx
cmp ebx, dword [eax + 0x14]
jle 0x1002f1b0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x1a08]
xor ecx, ebp
call fcn.1003af4e
lea esp, [ebp + 0x1a0c]
pop ebp
ret
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3