Function at 0x1002f5f0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get number of processors

Disassembly:
push ebp
lea ebp, [esp - 0x1a0c]
mov eax, 0x1a0c
call fcn.1003bfb0
push 0xffffffffffffffff
push 0x1003f6a9
mov eax, dword fs:[0]
push eax
sub esp, 0xa8
mov eax, dword [0x1004b040]
xor eax, ebp
mov dword [ebp + 0x1a08], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
mov dword [ebp - 0x14], eax
mov ecx, dword [0x1004b8d8]
mov dword [ebp - 0x3c], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [0x1004b8e4]
push eax
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
mov esi, eax
mov dword [ebp - 0x1c], esi
test esi, esi
je 0x100307fc
cmp dword [0x10f6c78c], 0
jne 0x1002f6d0
cmp byte [0x10f6c710], 0
jne 0x1002f6d0
cmp byte [0x10f6c6f4], 0
jne 0x1002f6d0
cmp byte [0x10f6c71b], 0
jne 0x1002f6d0
cmp byte [0x10f6c711], 0
jne 0x1002f6d0
cmp byte [0x10f6c718], 0
jne 0x1002f6d0
cmp byte [0x10f6c720], 0
jne 0x1002f6d0
cmp byte [0x10f6c713], 0
jne 0x1002f6d0
cmp byte [0x10f6c714], 0
jne 0x1002f6d0
cmp byte [0x10f6c717], 0
jne 0x1002f6d0
cmp byte [0x10f6c719], 0
jne 0x1002f6d0
cmp byte [0x10f6c716], 0
je 0x100307fc
xor eax, eax
mov ebx, 1
mov dword [ebp - 0x28], eax
mov eax, dword [0x1004b8e0]
mov dword [ebp - 0x20], ebx
cmp dword [eax + 0x14], ebx
jl 0x100307fc
nop dword [eax + eax]
mov ecx, dword [0x1004b8e4]
push ebx
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov edi, eax
mov dword [ebp - 0x80], edi
test edi, edi
je 0x100307ea
cmp edi, esi
je 0x100307ea
mov ecx, dword [0x1004b8e0]
movss xmm1, dword [0x10046208]
movss xmm0, dword [0x10046384]
divss xmm1, dword [ecx + 0x10]
lea ecx, [edi + 8]
divss xmm0, xmm1
cvttss2si eax, xmm0
mov dword [ebp - 0x30], eax
mov eax, dword [edi + 8]
mov eax, dword [eax + 0x20]
call eax
test al, al
je 0x1002f75f
mov eax, dword [ebx*4 + 0x11db9538]
test eax, eax
jle 0x1002f75f
sub eax, dword [ebp - 0x30]
mov dword [ebx*4 + 0x11db9538], eax
jmp 0x1002f785
cmp dword [ebx*4 + 0x11db9538], 0x82
jge 0x1002f785
mov eax, dword [edi + 8]
lea ecx, [edi + 8]
mov eax, dword [eax + 0x20]
call eax
test al, al
jne 0x1002f785
mov ecx, dword [ebp - 0x30]
add dword [ebx*4 + 0x11db9538], ecx
mov eax, dword [edi + 8]
lea ecx, [edi + 8]
mov eax, dword [eax + 0x20]
call eax
test al, al
jne 0x100307e7
mov ecx, edi
call fcn.10002fa0
cmp dword [eax], 0
jne 0x100307e7
cmp byte [0x10f6c721], 0
je 0x1002f7ca
mov ecx, edi
call fcn.10002b80
mov ecx, dword [ebp - 0x1c]
mov esi, dword [eax]
call fcn.10002b80
cmp esi, dword [eax]
je 0x100307e7
cmp byte [ebx + 0x10f6ca38], 0
je 0x1002f7df
mov dword [ebp - 0x48], 0xffffffff
mov eax, dword [ebp - 0x48]
jmp 0x1002f806
mov ecx, edi
call fcn.10002b80
cmp dword [eax], 2
jne 0x1002f7f2
mov eax, dword [0x10f6c4c8]
jmp 0x1002f806
mov ecx, edi
call fcn.10002b80
cmp dword [eax], 3
mov eax, dword [ebp - 0x28]
cmove eax, dword [0x10f6c4c4]
mov dword [ebp - 0x28], eax
mov ecx, edi
mov dword [ebp - 0x18], eax
mov eax, dword [edi]
call dword [eax + 0x24]
mov ecx, edi
movss xmm0, dword [eax]
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x34], xmm0
movss xmm0, dword [eax + 8]
movss dword [ebp - 0x24], xmm0
call fcn.10002cd0
movss xmm0, dword [ebp - 0x2c]
movss dword [ebp - 0x10], xmm0
movss xmm0, dword [ebp - 0x34]
mov eax, dword [eax]
shr eax, 1
and al, 1
movss dword [ebp - 0x30], xmm0
movss xmm0, dword [ebp - 0x24]
mov dword [ebp - 0x5c], eax
je 0x1002f865
addss xmm0, dword [0x100462f0]
jmp 0x1002f86d
addss xmm0, dword [0x10046310]
mov ecx, dword [0x1004b8d8]
movss dword [ebp - 0x14], xmm0
mov eax, dword [ecx]
mov eax, dword [eax + 0x98]
call eax
movss xmm1, dword [ebp - 0x2c]
mov esi, eax
movss xmm5, dword [ebp - 0x34]
movaps xmm3, xmm1
movss xmm4, dword [ebp - 0x24]
movaps xmm0, xmm5
mulss xmm0, dword [esi + 0x34]
mulss xmm3, dword [esi + 0x30]
addss xmm3, xmm0
movaps xmm0, xmm4
mulss xmm0, dword [esi + 0x38]
addss xmm0, dword [esi + 0x3c]
addss xmm3, xmm0
cvtps2pd xmm0, xmm3
comisd xmm0, xmmword [0x100461f0]
jbe 0x100307e7
mulss xmm1, dword [esi + 0x10]
xorps xmm0, xmm0
mov ecx, dword [0x1004b880]
mov eax, ecx
mulss xmm5, dword [esi + 0x14]
xorps xmm2, xmm2
cdq
mulss xmm4, dword [esi + 0x18]
sub eax, edx
sar eax, 1
addss xmm1, xmm5
cvtsi2sd xmm0, ecx
mov ecx, dword [0x1004b8d8]
addss xmm4, dword [esi + 0x1c]
cvtsi2sd xmm2, eax
mov eax, dword [ecx]
addss xmm1, xmm4
mov eax, dword [eax + 0x98]
divss xmm1, xmm3
mulss xmm1, dword [0x100461d8]
cvtps2pd xmm1, xmm1
mulsd xmm1, xmm0
addsd xmm1, qword [0x10046250]
subsd xmm2, xmm1
cvtpd2ps xmm0, xmm2
movss dword [ebp - 0x2c], xmm0
call eax
movss xmm4, dword [ebp - 0x30]
mov esi, eax
movss xmm6, dword [ebp - 0x10]
movaps xmm1, xmm4
movss xmm5, dword [ebp - 0x14]
movaps xmm0, xmm6
mulss xmm0, dword [esi + 0x30]
mulss xmm1, dword [esi + 0x34]
addss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [esi + 0x38]
addss xmm0, dword [esi + 0x3c]
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
comisd xmm0, xmmword [0x100461f0]
jbe 0x100307e7
movss xmm3, dword [0x10046208]
movaps xmm0, xmm6
mulss xmm0, dword [esi]
xorps xmm2, xmm2
mov eax, dword [0x1004b884]
divss xmm3, xmm1
mov ecx, dword [0x1004b880]
movaps xmm1, xmm4
mulss xmm6, dword [esi + 0x10]
mulss xmm1, dword [esi + 4]
mulss xmm4, dword [esi + 0x14]
addss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [esi + 8]
mulss xmm5, dword [esi + 0x18]
addss xmm4, xmm6
addss xmm0, dword [esi + 0xc]
addss xmm5, dword [esi + 0x1c]
addss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, eax
cdq
sub eax, edx
sar eax, 1
mulss xmm1, xmm3
addss xmm4, xmm5
mulss xmm1, dword [0x100461d8]
mulss xmm4, xmm3
cvtps2pd xmm1, xmm1
mulss xmm4, dword [0x100461d8]
mulsd xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, eax
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
cmp byte [0x10f6c713], 0
addsd xmm1, qword [0x10046250]
cvtsi2sd xmm2, eax
addsd xmm1, xmm0
cvtpd2ps xmm0, xmm1
cvtps2pd xmm1, xmm4
movss dword [ebp - 0x30], xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, ecx
mulsd xmm1, xmm0
addsd xmm1, qword [0x10046250]
subsd xmm2, xmm1
cvtpd2ps xmm0, xmm2
movss dword [ebp - 0x10], xmm0
je 0x1002fa6e
push 0xffffffffffffffff
mov dword [ebp - 0x4c], 0xc8ffffff
mov ecx, 0x1004b6bd
push dword [ebp - 0x4c]
push edi
call fcn.10018da0
cmp byte [ebx + 0x10f6ca38], 0
je 0x1002fa86
mov dword [ebp - 0x70], 0xffffffff
mov eax, dword [ebp - 0x70]
jmp 0x1002fb54
mov ebx, dword [ebp - 0x1c]
mov ecx, ebx
mov eax, dword [ebx]
call dword [eax + 0x24]
movss xmm0, dword [ebx + 0xd4]
mov ecx, edi
addss xmm0, dword [eax]
movss dword [ebp - 0xb4], xmm0
movss xmm0, dword [eax + 4]
addss xmm0, dword [ebx + 0xd8]
movss dword [ebp - 0xb0], xmm0
movss xmm0, dword [eax + 8]
addss xmm0, dword [ebx + 0xdc]
mov eax, dword [edi]
movss dword [ebp - 0xac], xmm0
call dword [eax + 0x24]
push ebx
push edi
lea edx, [ebp - 0xa8]
movss xmm0, dword [eax]
lea ecx, [ebp - 0xb4]
addss xmm0, dword [edi + 0xd4]
movss dword [ebp - 0xa8], xmm0
movss xmm0, dword [edi + 0xd8]
addss xmm0, dword [eax + 4]
movss dword [ebp - 0xa4], xmm0
movss xmm0, dword [edi + 0xdc]
addss xmm0, dword [eax + 8]
movss dword [ebp - 0xa0], xmm0
call fcn.1002e0e0
add esp, 8
test al, al
je 0x1002fb5a
mov ecx, edi
call fcn.10002b80
cmp dword [eax], 2
jne 0x1002fb40
mov eax, dword [0x10f6c4d0]
jmp 0x1002fb54
mov ecx, edi
call fcn.10002b80
cmp dword [eax], 3
mov eax, dword [ebp - 0x28]
cmove eax, dword [0x10f6c4cc]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x18], eax
cmp byte [0x10f6c718], 0
je 0x1002fbb5
mov eax, dword [edi + 4]
lea ecx, [edi + 4]
call dword [eax + 0x20]
mov edx, eax
test edx, edx
je 0x1002fbb5
mov ecx, dword [0x1004b8d0]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x6c]
call eax
mov esi, eax
test esi, esi
je 0x1002fbb5
mov ecx, edi
call fcn.10002dc0
mov ecx, dword [eax]
mov eax, dword [esi + 0xb0]
lea ecx, [ecx + ecx*2]
lea ebx, [eax + ecx*4]
add ebx, esi
je 0x1002fbb5
xor esi, esi
cmp dword [ebx + 4], esi
jle 0x1002fbb5
mov edx, esi
mov ecx, edi
call fcn.1002eb60
inc esi
cmp esi, dword [ebx + 4]
jl 0x1002fba6
cmp byte [ebp - 0x5c], 0
movss xmm4, dword [ebp - 0x2c]
movss xmm2, dword [ebp - 0x10]
movaps xmm0, xmm4
subss xmm0, xmm2
movaps xmm1, xmm0
movss dword [ebp - 0x24], xmm0
mulss xmm1, dword [0x100461ac]
movss dword [ebp - 0x2c], xmm1
je 0x1002fbee
mulss xmm1, dword [0x10046230]
movss dword [ebp - 0x2c], xmm1
movss xmm5, dword [ebp - 0x30]
mov eax, dword [0x10f6c78c]
movaps xmm3, xmm5
subss xmm3, xmm1
movss dword [ebp - 0x34], xmm3
cmp eax, 1
jne 0x1002fc55
mov eax, dword [ebp - 0x28]
movzx edx, byte [ebp - 0x16]
movzx ebx, byte [ebp - 0x15]
movzx ecx, ah
movzx eax, al
mov byte [ebp - 0x68], al
cvttss2si eax, xmm0
mov dword [ebp - 0x6c], 0xff000000
mov byte [ebp - 0x67], cl
mov byte [ebp - 0x66], dl
mov byte [ebp - 0x65], bl
movaps xmm0, xmm1
push dword [ebp - 0x6c]
addss xmm0, xmm1
push dword [ebp - 0x68]
push eax
cvttss2si eax, xmm0
push eax
cvttss2si eax, xmm2
push eax
cvttss2si eax, xmm3
push eax
call fcn.10017580
jmp 0x1002fc91
cmp eax, 2
jne 0x1002fc91
movzx eax, byte [ebp - 0x15]
push eax
movzx eax, byte [ebp - 0x16]
push eax
mov eax, dword [ebp - 0x28]
movzx ecx, ah
push ecx
movzx eax, al
push eax
cvttss2si eax, xmm0
push ecx
movaps xmm0, xmm1
addss xmm0, xmm1
push eax
cvttss2si edx, xmm4
cvttss2si eax, xmm0
cvttss2si ecx, xmm5
push eax
call fcn.1002e7c0
add esp, 0x1c
cmp byte [0x10f6c720], 0
je 0x1002fec5
mov ecx, dword [0x1004b8d8]
lea edx, [ebp - 0x78]
push edx
lea edx, [ebp - 0x7c]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
call eax
movd xmm0, dword [ebp - 0x7c]
cvtdq2ps xmm0, xmm0
mov ebx, dword [ebp - 0x1c]
mov ecx, ebx
mulss xmm0, dword [0x100461d8]
cvttss2si eax, xmm0
movd xmm0, dword [ebp - 0x78]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x7c], eax
mulss xmm0, dword [0x100461d8]
cvttss2si eax, xmm0
mov dword [ebp - 0x78], eax
mov eax, dword [ebx]
call dword [eax + 0x24]
mov eax, dword [edi + 4]
push ecx
mov dword [esp], 0x5f800000
lea ecx, [ebp + 0x90]
push 0x100
push 0x80
push ecx
lea ecx, [edi + 4]
call dword [eax + 0x3c]
mov eax, dword [edi + 4]
lea ecx, [edi + 4]
call dword [eax + 0x20]
mov ecx, dword [0x1004b8d0]
push eax
mov edx, dword [ecx]
mov eax, dword [edx + 0x6c]
call eax
mov ecx, edi
mov esi, eax
call fcn.10002dc0
mov ecx, dword [eax]
lea eax, [ebp + 0x1890]
lea edx, [ecx + ecx*2]
mov ecx, dword [esi + 0xb0]
push ecx
mov dword [esp], 0
push eax
push ebx
lea edx, [ecx + edx*4]
mov ecx, dword [0x10f6c510]
lea eax, [ebp + 0x90]
add edx, esi
push edi
push eax
call fcn.1002f010
mov ecx, dword [0x1004b8d8]
add esp, 0x14
mov eax, dword [ecx]
mov eax, dword [eax + 0x98]
call eax
movss xmm5, dword [ebp + 0x1894]
mov esi, eax
movss xmm7, dword [ebp + 0x1890]
movaps xmm1, xmm5
movss xmm6, dword [ebp + 0x1898]
movaps xmm0, xmm7
mulss xmm0, dword [esi + 0x30]
mulss xmm1, dword [esi + 0x34]
addss xmm1, xmm0
movaps xmm0, xmm6
mulss xmm0, dword [esi + 0x38]
addss xmm0, dword [esi + 0x3c]
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
comisd xmm0, xmmword [0x100461f0]
jbe 0x1002fec5
movss xmm4, dword [0x10046208]
movaps xmm0, xmm7
mulss xmm0, dword [esi]
mov eax, dword [0x1004b884]
divss xmm4, xmm1
mov ecx, dword [0x1004b880]
mov edi, dword [ebp - 0x7c]
push 0xc8ffffff
movaps xmm1, xmm5
mulss xmm7, dword [esi + 0x10]
mulss xmm1, dword [esi + 4]
mulss xmm5, dword [esi + 0x14]
addss xmm1, xmm0
movaps xmm0, xmm6
mulss xmm0, dword [esi + 8]
mulss xmm6, dword [esi + 0x18]
addss xmm5, xmm7
addss xmm0, dword [esi + 0xc]
addss xmm6, dword [esi + 0x1c]
mov esi, dword [ebp - 0x78]
addss xmm1, xmm0
movd xmm0, eax
cdq
cvtdq2pd xmm0, xmm0
sub eax, edx
sar eax, 1
mulss xmm1, xmm4
addss xmm5, xmm6
mulss xmm1, dword [0x100461d8]
mulss xmm5, xmm4
cvtps2pd xmm1, xmm1
mulss xmm5, dword [0x100461d8]
mulsd xmm1, xmm0
movd xmm0, eax
mov eax, ecx
cvtdq2pd xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
addsd xmm1, qword [0x10046250]
movd xmm2, eax
cvtdq2pd xmm2, xmm2
addsd xmm1, xmm0
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
mov ecx, dword [0x1004b8f8]
cvtpd2ps xmm3, xmm1
cvtps2pd xmm1, xmm5
cvttss2si ebx, xmm3
mulsd xmm1, xmm0
addsd xmm1, qword [0x10046250]
subsd xmm2, xmm1
cvtpd2ps xmm0, xmm2
cvttss2si eax, xmm0
mov dword [ebp - 0x5c], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [0x1004b8f8]
push dword [ebp - 0x5c]
push ebx
mov eax, dword [ecx]
push esi
push edi
mov eax, dword [eax + 0x3c]
call eax
mov edi, dword [ebp - 0x80]
cmp byte [0x10f6c716], 0
je 0x1002fee4
mov dword [ebp - 0x64], 0xc8ffffff
push dword [ebp - 0x64]
push dword [0x10f6c510]
push edi
call fcn.10019470
mov ecx, dword [0x1004b8d8]
lea edx, [ebp]
mov ebx, dword [ebp - 0x20]
push edx
push ebx
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
cmp byte [0x10f6c710], 0
je 0x1002ffe2
cmp byte [ebx + 0x10f6ca38], 0
je 0x1002ff48
mov dword [ebp + 0x84], 0x65697246
mov dword [ebp + 0x88], 0x203a646e
mov word [ebp + 0x8c], 0x7325
mov byte [ebp + 0x8e], 0
mov dword [ebp - 4], 0
lea ecx, [ebp + 0x84]
mov eax, dword [ebp - 0x3c]
or eax, 1
jmp 0x1002ff62
mov word [ebp - 0x40], 0x7325
mov byte [ebp - 0x3e], 0
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x40]
mov eax, dword [ebp - 0x3c]
or eax, 2
movss xmm0, dword [ebp - 0x10]
subss xmm0, dword [0x100462c0]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x3c], eax
lea eax, [ebp]
push eax
push ecx
cvttss2si eax, xmm0
mov dword [ebp - 0x58], 0xc8ffffff
push dword [ebp - 0x58]
push eax
cvttss2si eax, dword [ebp - 0x30]
push eax
push 0
push 1
push 0x1004b6bd
call fcn.10016d50
mov eax, dword [ebp - 0x3c]
add esp, 0x20
test al, 2
je 0x1002ffb6
and eax, 0xfffffffd
xor ecx, ecx
mov dword [ebp - 0x3c], eax
mov word [ebp - 0x40], cx
mov byte [ebp - 0x3e], cl
mov dword [ebp - 4], 0xffffffff
test al, 1
je 0x1002ffe2
and eax, 0xfffffffe
mov word [ebp + 0x8c], 0
xorps xmm0, xmm0
mov dword [ebp - 0x3c], eax
movq qword [ebp + 0x84], xmm0
mov byte [ebp + 0x8e], 0
imul eax, ebx, 0x37400
movss xmm1, dword [eax + 0x10f6ce1c]
lea ecx, [eax + 0x10f6ce18]
movss xmm2, dword [ecx + 8]
movss xmm0, dword [ecx + 0xc]
subss xmm2, dword [eax + 0x10f6e9c0]
subss xmm1, dword [eax + 0x10f6e9bc]
subss xmm0, dword [eax + 0x10f6e9c4]
mulss xmm2, xmm2
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm2, xmm1
addss xmm2, xmm0
comiss xmm2, dword [0x10046390]
seta al
test al, al
je 0x1003008a
push ecx
call fcn.1002b4b0
movss xmm0, dword [ebp - 0x10]
test al, al
subss xmm0, dword [0x1004628c]
mov eax, 0xff00ff00
mov ecx, 0xff0000ff
cmove ecx, eax
push 0x100456c0
push ecx
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x34]
subss xmm0, dword [0x100462b8]
push eax
cvttss2si eax, xmm0
push eax
push 0
push 2
push 0x1004b6bd
call fcn.10016ef0
add esp, 0x1c
mov ecx, edi
call fcn.10003090
cmp dword [eax], 0
jle 0x1003028a
cmp byte [0x10f6c6f4], 0
je 0x1003028a
mov ecx, edi
call fcn.10003090
mov ecx, dword [ebx*4 + 0x11db9538]
mov ebx, 0x64
cvttss2si edi, dword [ebp - 0x10]
mov edx, dword [eax]
cmp edx, 0x64
movd xmm0, edx
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x10046288]
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x24]
mov dword [ebp - 0x14], eax
mov eax, edx
cmovg eax, ebx
mov ebx, 0x2828
cvtps2pd xmm0, xmm0
mov dword [ebp - 0x44], eax
movd xmm1, eax
cvtdq2pd xmm1, xmm1
mulsd xmm1, qword [0x10046210]
mulsd xmm1, xmm0
subsd xmm0, xmm1
movsd qword [ebp - 0x8c], xmm1
cvttsd2si eax, xmm0
movss xmm0, dword [ebp - 0x34]
subss xmm0, dword [0x100462b0]
mov dword [ebp - 0x5c], eax
xor eax, eax
cmp edx, 0x64
cmovle ebx, eax
xor esi, esi
cmp edx, 0x64
mov eax, 0x280000
cmovle eax, esi
or ebx, eax
movzx eax, cl
mov ecx, dword [0x1004b8f8]
shl eax, 0x18
or ebx, eax
push ebx
mov eax, dword [ecx]
cvttss2si esi, xmm0
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [0x1004b8f8]
movss xmm0, dword [ebp - 0x24]
addss xmm0, dword [0x10046208]
mov edx, dword [ecx]
cvttss2si eax, xmm0
add eax, edi
push eax
lea eax, [esi + 4]
push eax
mov eax, dword [edx + 0x38]
push edi
push esi
call eax
movss xmm0, dword [ebp - 0x10]
addss xmm0, dword [0x10046208]
mov ecx, dword [0x1004b8f8]
push ebx
mov eax, dword [ecx]
cvttss2si esi, xmm0
mov eax, dword [eax + 0x28]
movss xmm0, dword [ebp - 0x34]
subss xmm0, dword [0x100462a8]
cvttss2si edi, xmm0
mov dword [ebp - 0x18], edi
call eax
movss xmm0, dword [ebp - 0x24]
lea ebx, [edi + 2]
subss xmm0, dword [0x10046208]
mov ecx, dword [0x1004b8f8]
mov edx, dword [ecx]
cvttss2si eax, xmm0
add eax, esi
push eax
push ebx
push esi
push edi
mov eax, dword [edx + 0x30]
call eax
movsd xmm0, qword [ebp - 0x8c]
subsd xmm0, qword [0x10046270]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ecx*4 + 0x11db9538]
mov ecx, dword [0x1004b8f8]
cvttsd2si edi, xmm0
movzx edx, al
mov eax, dword [ebp - 0x14]
mov esi, dword [ecx]
movzx eax, al
shl edx, 0x10
or edx, eax
mov eax, dword [ebp - 0x14]
movd xmm0, dword [ebp - 0x5c]
not al
cvtdq2ps xmm0, xmm0
movzx eax, al
shl edx, 8
or edx, eax
mov eax, dword [esi + 0x28]
push edx
addss xmm0, dword [ebp - 0x10]
addss xmm0, dword [0x10046208]
cvttss2si ebx, xmm0
call eax
mov esi, dword [ebp - 0x18]
lea eax, [edi + ebx]
mov ecx, dword [0x1004b8f8]
push eax
lea eax, [esi + 2]
mov edx, dword [ecx]
push eax
push ebx
push esi
mov eax, dword [edx + 0x30]
call eax
push dword [ebp - 0x44]
mov ecx, dword [ebp - 0x20]
push 0x100456cc
mov word [ebp - 0x54], 0xffff
mov byte [ebp - 0x52], 0xff
mov eax, dword [ecx*4 + 0x11db9538]
mov byte [ebp - 0x51], al
push dword [ebp - 0x54]
push ebx
push esi
push 1
push 1
push 0x1004b6bd
call fcn.10016d50
mov edi, dword [ebp - 0x80]
add esp, 0x20
mov ebx, dword [ebp - 0x20]
mov eax, dword fs:[0x2c]
mov esi, dword [0x1004b66c]
mov ecx, dword [eax + esi*4]
mov eax, dword [0x11db9f38]
cmp eax, dword [ecx + 4]
jle 0x100302e7
push 0x11db9f38
call fcn.1003b170
add esp, 4
cmp dword [0x11db9f38], 0xffffffff
jne 0x100302e7
push 0x11db9f38
mov dword [0x11db9f4c], 0
mov dword [0x11db9f50], 0
mov dword [0x11db9f54], 0x42560000
call fcn.1003b11f
add esp, 4
mov eax, dword fs:[0x2c]
mov ecx, dword [eax + esi*4]
mov eax, dword [0x11db9f34]
cmp eax, dword [ecx + 4]
jle 0x1003033e
push 0x11db9f34
call fcn.1003b170
add esp, 4
cmp dword [0x11db9f34], 0xffffffff
jne 0x1003033e
push 0x11db9f34
mov dword [0x11db9f40], 0
mov dword [0x11db9f44], 0
mov dword [0x11db9f48], 0x42900000
call fcn.1003b11f
add esp, 4
mov ecx, edi
call fcn.10002cd0
mov ecx, 0x11db9f40
test byte [eax], 2
mov eax, 0x11db9f4c
cmove eax, ecx
mov ecx, edi
movss xmm0, dword [eax]
movss dword [ebp - 0x5c], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [eax + 8]
mov eax, dword [edi]
movss dword [ebp - 0x88], xmm0
call dword [eax + 0x24]
mov ecx, dword [0x1004b8d8]
movss xmm0, dword [eax]
movss dword [ebp - 0x44], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x18], xmm0
movss xmm0, dword [eax + 8]
mov eax, dword [ecx]
movss dword [ebp - 0x84], xmm0
mov eax, dword [eax + 0x98]
call eax
movss xmm0, dword [ebp - 0x14]
addss xmm0, dword [ebp - 0x18]
movss xmm1, dword [ebp - 0x44]
addss xmm1, dword [ebp - 0x5c]
mulss xmm0, dword [eax + 0x34]
mulss xmm1, dword [eax + 0x30]
addss xmm1, xmm0
movss xmm0, dword [ebp - 0x84]
addss xmm0, dword [ebp - 0x88]
mulss xmm0, dword [eax + 0x38]
addss xmm0, dword [eax + 0x3c]
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
comisd xmm0, xmmword [0x100461f0]
jbe 0x100307fc
cmp byte [0x10f6c71b], 0
je 0x100306da
mov eax, dword fs:[0x2c]
mov ecx, dword [eax + esi*4]
mov eax, dword [0x11db9734]
cmp eax, dword [ecx + 4]
jle 0x100304e6
push 0x11db9734
call fcn.1003b170
add esp, 4
cmp dword [0x11db9734], 0xffffffff
jne 0x100304e6
lea ecx, [ebp - 0x9c]
mov dword [ebp - 4], 2
call fcn.10035520
push 0
push str.m_ArmorValue
push str.DT_CSPlayer
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.100355c0
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x9c]
mov dword [0x11db9740], eax
test ecx, ecx
je 0x100304d2
mov eax, dword [ebp - 0x94]
sub eax, ecx
sar eax, 2
lea edx, [eax*4]
mov eax, ecx
cmp edx, 0x1000
jb 0x100304aa
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003081f
push edx
push ecx
call fcn.1003b0e6
add esp, 8
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0
push 0x11db9734
mov dword [ebp - 4], 0xffffffff
call fcn.1003b11f
add esp, 4
mov eax, dword [0x11db9740]
mov ecx, dword [eax + edi]
cmp ecx, 0x64
mov edx, ecx
cvttss2si edi, dword [ebp - 0x10]
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x10046288]
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x24]
mov dword [ebp - 0x14], eax
mov eax, dword [ebx*4 + 0x11db9538]
mov ebx, 0x64
cmovg edx, ebx
movzx eax, al
cvtps2pd xmm0, xmm0
mov dword [ebp - 0x44], edx
mov ebx, 0x2828
movd xmm1, edx
cvtdq2pd xmm1, xmm1
mulsd xmm1, qword [0x10046210]
mulsd xmm1, xmm0
subsd xmm0, xmm1
movsd qword [ebp - 0x60], xmm1
cvttsd2si edx, xmm0
movss xmm0, dword [ebp - 0x2c]
mov dword [ebp - 0x88], edx
addss xmm0, xmm0
xor edx, edx
cmp ecx, 0x64
cmovle ebx, edx
shl eax, 0x18
or ebx, eax
mov eax, 0x280000
addss xmm0, dword [ebp - 0x34]
cmp ecx, 0x64
mov ecx, dword [0x1004b8f8]
cmovle eax, edx
or ebx, eax
mov eax, dword [ecx]
movss dword [ebp - 0x2c], xmm0
addss xmm0, dword [0x10046278]
push ebx
mov eax, dword [eax + 0x28]
cvttss2si esi, xmm0
call eax
mov ecx, dword [0x1004b8f8]
mov edx, dword [ecx]
movss xmm0, dword [ebp - 0x24]
addss xmm0, dword [0x10046208]
cvttss2si eax, xmm0
add eax, edi
push eax
lea eax, [esi + 4]
push eax
mov eax, dword [edx + 0x38]
push edi
push esi
call eax
movss xmm0, dword [ebp - 0x10]
addss xmm0, dword [0x10046208]
mov ecx, dword [0x1004b8f8]
push ebx
mov eax, dword [ecx]
cvttss2si esi, xmm0
mov eax, dword [eax + 0x28]
movss xmm0, dword [ebp - 0x2c]
addss xmm0, dword [0x1004628c]
cvttss2si edi, xmm0
mov dword [ebp - 0x84], edi
call eax
movss xmm0, dword [ebp - 0x24]
lea ebx, [edi + 2]
subss xmm0, dword [0x10046208]
mov ecx, dword [0x1004b8f8]
mov edx, dword [ecx]
cvttss2si eax, xmm0
add eax, esi
push eax
push ebx
push esi
mov eax, dword [edx + 0x30]
push edi
call eax
movsd xmm0, qword [ebp - 0x60]
subsd xmm0, qword [0x10046270]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ecx*4 + 0x11db9538]
mov ecx, dword [0x1004b8f8]
cvttsd2si edi, xmm0
movzx edx, al
mov eax, dword [ebp - 0x14]
mov esi, dword [ecx]
movzx eax, al
shl edx, 8
or edx, eax
mov eax, dword [ebp - 0x14]
movd xmm0, dword [ebp - 0x88]
not al
cvtdq2ps xmm0, xmm0
shl edx, 8
movzx eax, al
or edx, eax
mov eax, dword [esi + 0x28]
shl edx, 8
push edx
addss xmm0, dword [ebp - 0x10]
addss xmm0, dword [0x10046208]
cvttss2si ebx, xmm0
call eax
mov esi, dword [ebp - 0x84]
lea eax, [edi + ebx]
mov ecx, dword [0x1004b8f8]
push eax
lea eax, [esi + 2]
mov edx, dword [ecx]
push eax
push ebx
push esi
mov eax, dword [edx + 0x30]
call eax
push dword [ebp - 0x44]
mov ecx, dword [ebp - 0x20]
push 0x100456c8
mov word [ebp - 0x74], 0xffff
mov byte [ebp - 0x72], 0xff
mov eax, dword [ecx*4 + 0x11db9538]
mov byte [ebp - 0x71], al
push dword [ebp - 0x74]
push ebx
push esi
push 1
push 1
push 0x1004b6bd
call fcn.10016d50
mov edi, dword [ebp - 0x80]
add esp, 0x20
mov ecx, dword [0x1004b8e4]
push dword [edi + 0xb38]
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
call eax
test eax, eax
je 0x100307e4
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
mov ecx, eax
test ecx, ecx
je 0x100307e4
movss xmm0, dword [ebp - 0x10]
addss xmm0, dword [ebp - 0x24]
mov eax, dword [ecx]
mov eax, dword [eax + 0x4a4]
movss dword [ebp - 0x10], xmm0
call eax
test eax, eax
jns 0x10030727
xor eax, eax
jmp 0x1003072f
xor ecx, ecx
cmp eax, 0x1d
cmovg eax, ecx
push eax
push str.client.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add eax, 0x1e0b00
call eax
lea edx, [ebp + 0x1908]
add esp, 4
sub edx, eax
nop dword [eax]
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x10030750
mov al, byte [ebp + 0x1908]
lea esi, [ebp + 0x1908]
test al, al
je 0x10030788
nop dword [eax]
movsx eax, al
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov byte [esi], al
lea esi, [esi + 1]
mov al, byte [esi]
add esp, 4
test al, al
jne 0x10030770
cmp byte [0x10f6c711], 0
je 0x100307e4
mov word [ebp - 0x38], 0x7325
mov byte [ebp - 0x36], 0
lea eax, [ebp + 0x1908]
mov dword [ebp - 0x50], 0xc8ffffff
push eax
lea eax, [ebp - 0x38]
mov dword [ebp - 4], 4
push eax
cvttss2si eax, dword [ebp - 0x10]
push dword [ebp - 0x50]
push eax
cvttss2si eax, dword [ebp - 0x30]
push eax
push 0
push 1
push 0x1004b6bd
call fcn.10016d50
add esp, 0x20
mov dword [ebp - 4], 0xffffffff
xor eax, eax
mov word [ebp - 0x38], ax
mov byte [ebp - 0x36], al
mov ebx, dword [ebp - 0x20]
mov esi, dword [ebp - 0x1c]
mov eax, dword [0x1004b8e0]
inc ebx
mov dword [ebp - 0x20], ebx
cmp ebx, dword [eax + 0x14]
jle 0x1002f6f0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x1a08]
xor ecx, ebp
call fcn.1003adbe
lea esp, [ebp + 0x1a0c]
pop ebp
ret
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3