Function at 0x10022e20
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get number of processors

Disassembly:
push ebp
lea ebp, [esp - 0x194]
sub esp, 0x194
push 0xffffffffffffffff
push 0x10031a52
mov eax, dword fs:[0]
push eax
sub esp, 0x60
mov eax, dword [0x1003b008]
xor eax, ebp
mov dword [ebp + 0x190], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor esi, esi
mov dword [ebp - 0x20], esi
mov ecx, dword [0x1003bb10]
mov dword [ebp - 0x34], esi
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [0x1003bb1c]
push eax
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
mov edi, eax
mov dword [ebp - 0x28], edi
test edi, edi
je 0x10023a5a
cmp byte [0x1004c3e2], 0
jne 0x10022ecc
cmp byte [0x1004c3e3], 0
jne 0x10022ecc
cmp byte [0x1004c3e4], 0
jne 0x10022ecc
cmp byte [0x1004c3e5], 0
jne 0x10022ecc
cmp byte [0x1004c3e6], 0
jne 0x10022ecc
cmp byte [0x1004c3e8], 0
jne 0x10022ecc
cmp byte [0x1004c3e7], 0
je 0x10023a5a
xor eax, eax
mov edx, 1
mov dword [ebp - 0x38], eax
mov eax, dword [0x1003bb18]
mov dword [ebp - 0x5c], edx
cmp dword [eax + 0x14], edx
jl 0x10023a5a
mov dword [ebp - 0x64], 0x10053db0
mov dword [ebp - 0x60], 0x1003dcfc
mov ecx, dword [0x1003bb1c]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov ebx, eax
mov dword [ebp - 0x68], ebx
test ebx, ebx
je 0x10023a34
cmp ebx, edi
je 0x10023a34
mov ecx, ebx
call fcn.10002d90
cmp dword [eax], 0
jne 0x10023a34
cmp byte [0x1004c3ea], 0
je 0x10022f4c
mov ecx, ebx
call fcn.10002970
mov ecx, edi
mov esi, dword [eax]
call fcn.10002970
cmp esi, dword [eax]
je 0x10023a34
mov esi, dword [ebp - 0x34]
mov eax, dword [ebp - 0x5c]
cmp byte [eax + 0x1004c64c], 0
je 0x10022f64
mov dword [ebp - 0x40], 0xffffffff
mov eax, dword [ebp - 0x40]
jmp 0x10022f8b
mov ecx, ebx
call fcn.10002970
cmp dword [eax], 2
jne 0x10022f77
mov eax, dword [0x1004c1d0]
jmp 0x10022f8b
mov ecx, ebx
call fcn.10002970
cmp dword [eax], 3
mov eax, dword [ebp - 0x38]
cmove eax, dword [0x1004c1cc]
mov dword [ebp - 0x38], eax
mov ecx, ebx
mov dword [ebp - 0x20], eax
mov eax, dword [ebx]
call dword [eax + 0x24]
mov ecx, ebx
movss xmm0, dword [eax]
movss dword [ebp - 0x24], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [eax + 8]
movss dword [ebp - 0x10], xmm0
call fcn.10002ac0
movss xmm0, dword [ebp - 0x10]
mov eax, dword [eax]
shr eax, 1
and al, 1
mov dword [ebp - 0x3c], eax
je 0x10022fd6
addss xmm0, dword [0x10037658]
jmp 0x10022fde
addss xmm0, dword [0x10037668]
mov ecx, dword [0x1003bb10]
movss dword [ebp - 0x18], xmm0
mov eax, dword [ecx]
mov eax, dword [eax + 0x98]
call eax
movss xmm1, dword [ebp - 0x24]
mov edi, eax
movss xmm5, dword [ebp - 0x1c]
movaps xmm3, xmm1
movss xmm4, dword [ebp - 0x10]
movaps xmm0, xmm5
mulss xmm0, dword [edi + 0x34]
mulss xmm3, dword [edi + 0x30]
addss xmm3, xmm0
movaps xmm0, xmm4
mulss xmm0, dword [edi + 0x38]
addss xmm0, dword [edi + 0x3c]
addss xmm3, xmm0
cvtps2pd xmm0, xmm3
comisd xmm0, xmmword [0x10037578]
jbe 0x10023a31
mulss xmm1, dword [edi + 0x10]
movaps xmm0, xmm5
mov ecx, dword [0x1003bb24]
mov eax, ecx
mulss xmm0, dword [edi + 0x14]
xorps xmm2, xmm2
cdq
mulss xmm4, dword [edi + 0x18]
sub eax, edx
sar eax, 1
addss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, ecx
mov ecx, dword [0x1003bb10]
addss xmm4, dword [edi + 0x1c]
cvtsi2sd xmm2, eax
mov eax, dword [ecx]
addss xmm1, xmm4
mov eax, dword [eax + 0x98]
divss xmm1, xmm3
mulss xmm1, dword [0x10037560]
cvtps2pd xmm1, xmm1
mulsd xmm1, xmm0
addsd xmm1, qword [0x100375c8]
subsd xmm2, xmm1
cvtpd2ps xmm0, xmm2
movss dword [ebp - 0x14], xmm0
call eax
movss xmm4, dword [ebp - 0x24]
mov edi, eax
movss xmm6, dword [ebp - 0x1c]
movaps xmm1, xmm4
movss xmm5, dword [ebp - 0x18]
movaps xmm0, xmm6
mulss xmm0, dword [edi + 0x34]
mulss xmm1, dword [edi + 0x30]
addss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [edi + 0x38]
addss xmm0, dword [edi + 0x3c]
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
comisd xmm0, xmmword [0x10037578]
jbe 0x10023a31
movss xmm3, dword [0x10037590]
movaps xmm0, xmm4
mulss xmm0, dword [edi]
xorps xmm2, xmm2
mov eax, dword [0x1003bb28]
divss xmm3, xmm1
mov ecx, dword [0x1003bb24]
movaps xmm1, xmm6
mulss xmm4, dword [edi + 0x10]
mulss xmm1, dword [edi + 4]
mulss xmm6, dword [edi + 0x14]
addss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [edi + 8]
mulss xmm5, dword [edi + 0x18]
addss xmm4, xmm6
addss xmm0, dword [edi + 0xc]
addss xmm5, dword [edi + 0x1c]
addss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, eax
cdq
sub eax, edx
sar eax, 1
mulss xmm1, xmm3
addss xmm4, xmm5
mulss xmm1, dword [0x10037560]
mulss xmm4, xmm3
cvtps2pd xmm1, xmm1
mulss xmm4, dword [0x10037560]
mulsd xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, eax
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
cmp byte [0x1004c3e6], 0
addsd xmm1, qword [0x100375c8]
cvtsi2sd xmm2, eax
addsd xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, ecx
cvtpd2ps xmm7, xmm1
cvtps2pd xmm1, xmm4
movss dword [ebp - 0x24], xmm7
mulsd xmm1, xmm0
addsd xmm1, qword [0x100375c8]
subsd xmm2, xmm1
cvtpd2ps xmm2, xmm2
movss dword [ebp - 0x10], xmm2
je 0x100231ea
mov dword [ebp - 0x44], 0xa0ffffff
mov ecx, 0x1003b6a8
push dword [ebp - 0x44]
push ebx
call fcn.1000e2a0
movss xmm2, dword [ebp - 0x10]
movss xmm7, dword [ebp - 0x24]
cmp byte [ebp - 0x3c], 0
movss xmm0, dword [ebp - 0x14]
subss xmm0, xmm2
movaps xmm1, xmm0
movss dword [ebp - 0x6c], xmm0
mulss xmm1, dword [0x1003753c]
movss dword [ebp - 0x18], xmm1
je 0x1002321b
mulss xmm1, dword [0x100375b0]
movss dword [ebp - 0x18], xmm1
cmp byte [0x1004c3e2], 0
movaps xmm3, xmm7
subss xmm3, xmm1
movss dword [ebp - 0x1c], xmm3
je 0x10023277
mov eax, dword [ebp - 0x38]
movzx edx, byte [ebp - 0x1e]
movzx ecx, al
movzx eax, ah
mov byte [ebp - 0x4b], al
cvttss2si eax, xmm0
mov dword [ebp - 0x48], 0x80000000
mov byte [ebp - 0x4c], cl
mov byte [ebp - 0x4a], dl
mov byte [ebp - 0x49], 0xa0
movaps xmm0, xmm1
push dword [ebp - 0x48]
addss xmm0, xmm1
push dword [ebp - 0x4c]
push eax
cvttss2si eax, xmm0
push eax
cvttss2si eax, xmm2
push eax
cvttss2si eax, xmm3
push eax
call fcn.1000dff0
cmp byte [0x1004c3e7], 0
je 0x10023296
mov dword [ebp - 0x50], 0xa0ffffff
push dword [ebp - 0x50]
push dword [0x1004c20c]
push ebx
call fcn.1000e980
mov ecx, dword [0x1003bb10]
lea edx, [ebp]
mov edi, dword [ebp - 0x5c]
push edx
push edi
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
cmp byte [0x1004c3e3], 0
je 0x1002338d
cmp byte [edi + 0x1004c64c], 0
je 0x100232f7
mov dword [ebp + 0x84], 0x65697246
mov dword [ebp + 0x88], 0x203a646e
mov word [ebp + 0x8c], 0x7325
mov byte [ebp + 0x8e], 0
lea eax, [ebp + 0x84]
mov dword [ebp - 4], 0
or esi, 1
jmp 0x1002330e
mov word [ebp - 0x2c], 0x7325
mov byte [ebp - 0x2a], 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 4], 1
or esi, 2
movss xmm0, dword [ebp - 0x10]
lea ecx, [ebp]
subss xmm0, dword [0x10037634]
push ecx
push eax
mov dword [ebp - 0x54], 0xc8ffffff
push dword [ebp - 0x54]
cvttss2si eax, xmm0
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x34], esi
push eax
cvttss2si eax, dword [ebp - 0x24]
push eax
push 0
push 1
push 0x1003b6a8
call fcn.1000dc40
mov eax, esi
add esp, 0x20
test al, 2
je 0x10023361
and eax, 0xfffffffd
xor ecx, ecx
mov dword [ebp - 0x34], eax
mov word [ebp - 0x2c], cx
mov byte [ebp - 0x2a], cl
mov dword [ebp - 4], 0xffffffff
test al, 1
je 0x1002338d
and eax, 0xfffffffe
mov word [ebp + 0x8c], 0
xorps xmm0, xmm0
mov dword [ebp - 0x34], eax
movq qword [ebp + 0x84], xmm0
mov byte [ebp + 0x8e], 0
mov ecx, ebx
call fcn.10002e80
mov ecx, dword [eax]
test ecx, ecx
jle 0x10023505
movd xmm0, ecx
cmp ecx, 0x64
cvtdq2ps xmm0, xmm0
mov edx, 0x64
mulss xmm0, dword [0x10037600]
cvttss2si eax, xmm0
mov dword [ebp - 0x20], eax
mov eax, ecx
cmovg eax, edx
cmp byte [0x1004c3e4], 0
mov dword [ebp - 0x3c], eax
je 0x10023505
movss xmm0, dword [ebp - 0x14]
xor eax, eax
addss xmm0, dword [0x10037610]
cmp ecx, edx
mov ebx, 0x2828
mov ecx, 0x80000000
cmovle ebx, eax
mov eax, 0x80280000
cmovle eax, ecx
mov ecx, dword [0x1003bb2c]
movss dword [ebp - 0x10], xmm0
or ebx, eax
subss xmm0, dword [0x10037590]
push ebx
mov eax, dword [ecx]
cvttss2si edi, xmm0
mov eax, dword [eax + 0x28]
movss xmm0, dword [ebp - 0x1c]
subss xmm0, dword [0x10037590]
cvttss2si esi, xmm0
call eax
lea eax, [edi + 4]
mov ecx, dword [0x1003bb2c]
push eax
mov edx, dword [ecx]
movss xmm0, dword [ebp - 0x18]
addss xmm0, xmm0
movss dword [ebp - 0x14], xmm0
addss xmm0, dword [0x100375f0]
cvttss2si eax, xmm0
add eax, esi
push eax
mov eax, dword [edx + 0x38]
push edi
push esi
call eax
mov ecx, dword [0x1003bb2c]
cvttss2si esi, dword [ebp - 0x10]
push ebx
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
cvttss2si edi, dword [ebp - 0x1c]
call eax
lea ebx, [esi + 2]
mov ecx, dword [0x1003bb2c]
mov edx, edi
push ebx
mov esi, dword [ecx]
movss xmm0, dword [ebp - 0x18]
mulss xmm0, dword [0x10037728]
cvttss2si eax, xmm0
sub edx, eax
cvttss2si eax, dword [ebp - 0x10]
push edx
push eax
mov eax, dword [esi + 0x30]
push edi
call eax
movd xmm1, dword [ebp - 0x3c]
movss xmm0, dword [ebp - 0x14]
mov ecx, dword [0x1003bb2c]
mov eax, dword [ebp - 0x20]
cvtdq2pd xmm1, xmm1
movzx edx, al
not al
mov esi, dword [ecx]
or edx, 0xffa00000
movzx eax, al
shl edx, 8
or edx, eax
mov eax, dword [esi + 0x28]
mulsd xmm1, qword [0x10037598]
push edx
cvtps2pd xmm0, xmm0
mulsd xmm1, xmm0
cvttsd2si edi, xmm1
call eax
mov ecx, dword [0x1003bb2c]
push ebx
mov edx, dword [ecx]
cvttss2si esi, dword [ebp - 0x1c]
lea eax, [esi + edi]
push eax
cvttss2si eax, dword [ebp - 0x10]
push eax
mov eax, dword [edx + 0x30]
push esi
call eax
mov ebx, dword [ebp - 0x68]
mov ecx, dword [0x1003bb1c]
push dword [ebx + 0xb38]
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
call eax
test eax, eax
je 0x10023628
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
mov ecx, eax
test ecx, ecx
je 0x10023628
cmp byte [0x1004c3e4], 0
je 0x10023544
movss xmm0, dword [0x10037610]
jmp 0x10023551
movss xmm0, dword [ebp - 0x6c]
addss xmm0, dword [0x10037610]
movss xmm1, dword [ebp - 0x10]
mov eax, dword [ecx]
addss xmm1, xmm0
mov eax, dword [eax + 0x4a4]
movss dword [ebp - 0x10], xmm1
call eax
test eax, eax
jns 0x10023571
xor eax, eax
jmp 0x10023579
xor ecx, ecx
cmp eax, 0x1d
cmovg eax, ecx
push eax
push str.client.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add eax, 0x1e0b00
call eax
lea edx, [ebp + 0x90]
add esp, 4
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x10023597
mov al, byte [ebp + 0x90]
lea esi, [ebp + 0x90]
test al, al
je 0x100235cc
movsx eax, al
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov byte [esi], al
lea esi, [esi + 1]
mov al, byte [esi]
add esp, 4
test al, al
jne 0x100235b4
cmp byte [0x1004c3e5], 0
je 0x10023628
mov word [ebp - 0x30], 0x7325
mov byte [ebp - 0x2e], 0
lea eax, [ebp + 0x90]
mov dword [ebp - 0x58], 0xc8ffffff
push eax
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 2
push eax
cvttss2si eax, dword [ebp - 0x10]
push dword [ebp - 0x58]
push eax
cvttss2si eax, dword [ebp - 0x24]
push eax
push 0
push 1
push 0x1003b6a8
call fcn.1000dc40
add esp, 0x20
mov dword [ebp - 4], 0xffffffff
xor eax, eax
mov word [ebp - 0x30], ax
mov byte [ebp - 0x2e], al
cmp dword [0x1004c3b8], 0
mov edx, dword [ebp - 0x60]
movss xmm2, dword [edx - 8]
movss xmm0, dword [edx - 4]
movss xmm1, dword [edx]
mov edx, dword [ebp - 0x64]
movss dword [ebp - 0x68], xmm2
movss dword [ebp - 0x6c], xmm0
movss dword [ebp - 0x3c], xmm1
movss xmm6, dword [edx - 8]
movss xmm4, dword [edx - 4]
movss xmm5, dword [edx]
movss dword [ebp - 0x18], xmm6
movss dword [ebp - 0x1c], xmm4
movss dword [ebp - 0x20], xmm5
jle 0x10023a31
xorps xmm3, xmm3
ucomiss xmm3, xmm2
lahf
test ah, 0x44
jp 0x10023697
ucomiss xmm3, xmm0
lahf
test ah, 0x44
jp 0x10023697
ucomiss xmm3, xmm1
lahf
test ah, 0x44
jnp 0x10023a31
ucomiss xmm3, xmm6
lahf
test ah, 0x44
jp 0x100236b6
ucomiss xmm3, xmm4
lahf
test ah, 0x44
jp 0x100236b6
ucomiss xmm3, xmm5
lahf
test ah, 0x44
jp 0x100236b6
xor al, al
jmp 0x100236b8
mov al, 1
test al, al
je 0x10023a31
mov ecx, dword [0x1003bb10]
mov eax, dword [ecx]
mov eax, dword [eax + 0x98]
call eax
movss xmm4, dword [ebp - 0x6c]
mov esi, eax
movss xmm6, dword [ebp - 0x68]
movaps xmm1, xmm4
movss xmm5, dword [ebp - 0x3c]
movaps xmm0, xmm6
mulss xmm0, dword [esi + 0x30]
mulss xmm1, dword [esi + 0x34]
addss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [esi + 0x38]
addss xmm0, dword [esi + 0x3c]
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
comisd xmm0, xmmword [0x10037578]
jbe 0x10023a31
movss xmm3, dword [0x10037590]
movaps xmm0, xmm6
mulss xmm0, dword [esi]
xorps xmm2, xmm2
mov eax, dword [0x1003bb28]
divss xmm3, xmm1
mov ecx, dword [0x1003bb24]
movaps xmm1, xmm4
mulss xmm6, dword [esi + 0x10]
mulss xmm1, dword [esi + 4]
mulss xmm4, dword [esi + 0x14]
addss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [esi + 8]
mulss xmm5, dword [esi + 0x18]
addss xmm4, xmm6
addss xmm0, dword [esi + 0xc]
addss xmm5, dword [esi + 0x1c]
addss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, eax
cdq
sub eax, edx
sar eax, 1
mulss xmm1, xmm3
addss xmm4, xmm5
mulss xmm1, dword [0x10037560]
mulss xmm4, xmm3
cvtps2pd xmm1, xmm1
mulss xmm4, dword [0x10037560]
mulsd xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, eax
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
addsd xmm1, qword [0x100375c8]
cvtsi2sd xmm2, eax
addsd xmm1, xmm0
cvtpd2ps xmm0, xmm1
cvtps2pd xmm1, xmm4
movss dword [ebp - 0x24], xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, ecx
mov ecx, dword [0x1003bb10]
mov eax, dword [ecx]
mulsd xmm1, xmm0
mov eax, dword [eax + 0x98]
addsd xmm1, qword [0x100375c8]
subsd xmm2, xmm1
cvtpd2ps xmm0, xmm2
movss dword [ebp - 0x14], xmm0
call eax
movss xmm4, dword [ebp - 0x1c]
mov esi, eax
movss xmm6, dword [ebp - 0x18]
movaps xmm1, xmm4
movss xmm5, dword [ebp - 0x20]
movaps xmm0, xmm6
mulss xmm0, dword [esi + 0x30]
mulss xmm1, dword [esi + 0x34]
addss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [esi + 0x38]
addss xmm0, dword [esi + 0x3c]
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
comisd xmm0, xmmword [0x10037578]
jbe 0x10023a31
movss xmm3, dword [0x10037590]
movaps xmm0, xmm6
mulss xmm0, dword [esi]
mov eax, dword [0x1003bb28]
divss xmm3, xmm1
mov ecx, dword [0x1003bb24]
push 0xa0ffffff
movaps xmm1, xmm4
mulss xmm6, dword [esi + 0x10]
mulss xmm1, dword [esi + 4]
mulss xmm4, dword [esi + 0x14]
addss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [esi + 8]
mulss xmm5, dword [esi + 0x18]
addss xmm4, xmm6
addss xmm0, dword [esi + 0xc]
addss xmm5, dword [esi + 0x1c]
addss xmm1, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
mulss xmm1, xmm3
addss xmm4, xmm5
mulss xmm1, dword [0x10037560]
mulss xmm4, xmm3
cvtps2pd xmm1, xmm1
mulss xmm4, dword [0x10037560]
mulsd xmm1, xmm0
movd xmm0, eax
mov eax, ecx
cvtdq2pd xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
addsd xmm1, qword [0x100375c8]
movd xmm2, eax
cvtdq2pd xmm2, xmm2
addsd xmm1, xmm0
cvtpd2ps xmm0, xmm1
cvtps2pd xmm1, xmm4
movss dword [ebp - 0x18], xmm0
movd xmm0, ecx
mov ecx, dword [0x1003bb2c]
cvtdq2pd xmm0, xmm0
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
mulsd xmm1, xmm0
addsd xmm1, qword [0x100375c8]
subsd xmm2, xmm1
cvtpd2ps xmm0, xmm2
movss dword [ebp - 0x1c], xmm0
call eax
cvttss2si eax, dword [ebp - 0x1c]
mov ecx, dword [0x1003bb2c]
mov edx, dword [ecx]
push eax
cvttss2si eax, dword [ebp - 0x18]
push eax
cvttss2si eax, dword [ebp - 0x14]
push eax
cvttss2si eax, dword [ebp - 0x24]
push eax
mov eax, dword [edx + 0x3c]
call eax
movss xmm0, dword [ebp - 0x14]
subss xmm0, dword [0x100375f0]
mov ecx, dword [0x1003bb2c]
push 0xa03c3cff
mov eax, dword [ecx]
cvttss2si esi, xmm0
mov eax, dword [eax + 0x28]
movss xmm0, dword [ebp - 0x24]
subss xmm0, dword [0x100375f0]
mov dword [ebp - 0x14], esi
cvttss2si ebx, xmm0
call eax
mov ecx, dword [0x1003bb2c]
add esi, 5
mov eax, dword [ecx]
lea edi, [ebx + 5]
push esi
push edi
push dword [ebp - 0x14]
mov eax, dword [eax + 0x30]
push ebx
call eax
mov ecx, dword [0x1003bb2c]
push 0xa0000000
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [0x1003bb2c]
push esi
push edi
push dword [ebp - 0x14]
mov eax, dword [ecx]
push ebx
mov eax, dword [eax + 0x38]
call eax
movss xmm0, dword [ebp - 0x1c]
subss xmm0, dword [0x100375f0]
mov ecx, dword [0x1003bb2c]
push 0xa0ffc8a0
mov eax, dword [ecx]
cvttss2si esi, xmm0
mov eax, dword [eax + 0x28]
movss xmm0, dword [ebp - 0x18]
subss xmm0, dword [0x100375f0]
mov dword [ebp - 0x14], esi
cvttss2si ebx, xmm0
call eax
mov ecx, dword [0x1003bb2c]
lea edi, [ebx + 5]
add esi, 5
push esi
push edi
mov eax, dword [ecx]
push dword [ebp - 0x14]
push ebx
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [0x1003bb2c]
push 0xa0000000
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [0x1003bb2c]
push esi
push edi
push dword [ebp - 0x14]
mov eax, dword [ecx]
push ebx
mov eax, dword [eax + 0x38]
call eax
mov edi, dword [ebp - 0x28]
mov edx, dword [ebp - 0x5c]
mov eax, dword [0x1003bb18]
inc edx
add dword [ebp - 0x60], 0x39c
add dword [ebp - 0x64], 0x7380
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x5c], edx
cmp edx, dword [eax + 0x14]
jle 0x10022ef5
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x190]
xor ecx, ebp
call fcn.1002dd4e
lea esp, [ebp + 0x194]
pop ebp
ret