Function at 0x10094350
Capabilities:
Authenticate hmac
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100a4b27
mov eax, dword fs:[0]
push eax
sub esp, 0x2f8
mov eax, dword [0x100b9008]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor eax, eax
mov dword [ebp - 0x1e8], esi
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x200], eax
lea ecx, [ebp - 0x78]
mov dword [ebp - 4], eax
call fcn.10021ce0
lea ecx, [ebp - 0x78]
call fcn.10021d00
mov dword [ebp - 4], 1
mov ecx, dword [0x10112228]
mov eax, dword [0x100b92e0]
add ecx, 0xffffffdb
xor ecx, 0x7e881203
movss xmm1, dword [ecx + esi]
movss xmm2, dword [ecx + esi + 4]
subss xmm2, dword [ecx + eax + 4]
subss xmm1, dword [ecx + eax]
movss xmm0, dword [ecx + esi + 8]
subss xmm0, dword [ecx + eax + 8]
mulss xmm2, xmm2
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm2, xmm1
addss xmm2, xmm0
mulss xmm2, dword [0x100ad6a8]
cvtps2pd xmm0, xmm2
mulsd xmm0, qword [0x100ad728]
cvttsd2si edi, xmm0
mov dword [ebp - 0x3c], edi
test edi, edi
jle 0x100944cd
cmp edi, 5
jle 0x1009449a
mov eax, 0x66666667
mov ecx, edi
imul edi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*4]
sub ecx, eax
je 0x1009445d
nop dword [eax]
dec edi
mov eax, 0x66666667
imul edi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, edi
lea ecx, [eax + eax*4]
sub edx, ecx
jne 0x10094440
mov dword [ebp - 0x3c], edi
mov eax, 0x66666667
imul edi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*4]
sub edi, eax
jne 0x100944cd
lea eax, [ebp - 0x3c]
mov edx, str._i_FT
push eax
lea ecx, [ebp - 0x220]
call fcn.10072b80
add esp, 4
lea ecx, [ebp - 0x78]
push eax
call fcn.100381f0
mov byte [ebp - 4], 2
jmp 0x100944be
lea eax, [ebp - 0x3c]
mov edx, str._i_FT
push eax
lea ecx, [ebp - 0x220]
call fcn.10072b80
add esp, 4
lea ecx, [ebp - 0x78]
push eax
call fcn.100381f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x220]
call fcn.10021100
mov byte [ebp - 4], 1
mov eax, dword [esi + 8]
lea edi, [esi + 8]
mov ecx, edi
mov dword [ebp - 0x1f4], edi
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [0x10112084]
mov edx, dword [0x1011223c]
add edx, 0xffffffd6
mov dword [ebp - 0x18], eax
mov eax, dword [0x100b92e0]
xor edx, 0x7e881208
movss xmm0, dword [ecx + 0x14]
mulss xmm0, dword [0x100ad7ec]
mov ecx, dword [edx + esi]
movss dword [ebp - 0x1f0], xmm0
cmp ecx, dword [edx + eax]
je 0x1009451e
mov bl, 1
jmp 0x10094530
mov ecx, dword [0x10112100]
mov eax, dword [ecx]
mov eax, dword [eax + 0x34]
call eax
test eax, eax
setne bl
mov eax, dword [edi]
mov ecx, edi
mov byte [ebp - 0x1d5], bl
mov eax, dword [eax + 0x24]
call eax
cmp byte [0x100c2e8c], 0
mov bh, al
mov byte [ebp - 0x1dd], bh
je 0x10094575
test bl, bl
je 0x10094575
test bh, bh
jne 0x10094585
mov eax, dword [0x101122c0]
mov edx, dword [ebp - 0x18]
add eax, 0xffffffb5
xor eax, 0x7e881229
mov byte [eax + esi], 1
mov byte [edx + 0x1011585f], 1
jmp 0x10094596
test bh, bh
jne 0x10094585
mov edx, dword [ebp - 0x18]
mov byte [edx + 0x1011585f], 1
jmp 0x10094596
mov edx, dword [ebp - 0x18]
mov al, byte [edx + 0x1011585f]
test al, al
je 0x100962fc
movss xmm0, dword [edx*4 + 0x1011589c]
test bh, bh
je 0x100945ad
subss xmm0, dword [ebp - 0x1f0]
jmp 0x100945b5
addss xmm0, dword [ebp - 0x1f0]
movss dword [edx*4 + 0x1011589c], xmm0
test bl, bl
je 0x100945cf
cmp byte [0x100bff80], 0
je 0x100945cf
mov al, 1
jmp 0x100945d1
xor al, al
movss xmm1, dword [0x100ad748]
xorps xmm2, xmm2
comiss xmm0, xmm1
mov byte [ebp - 0x1f5], al
ja 0x100945f2
comiss xmm0, xmm2
movaps xmm1, xmm0
ja 0x100945f2
xorps xmm1, xmm1
ucomiss xmm1, xmm2
movss dword [edx*4 + 0x1011589c], xmm1
lahf
test ah, 0x44
jp 0x1009460c
test al, al
je 0x100962fc
mov ecx, dword [0x1011229c]
mov eax, dword [0x10112084]
add ecx, 0xffffffbe
xor ecx, 0x7e881220
movss xmm2, dword [eax + 0x10]
subss xmm2, dword [ecx + esi]
test bh, bh
je 0x1009463b
comiss xmm2, dword [0x100ad834]
ja 0x100962fc
cmp byte [ebp - 0x1dd], 0
movaps xmm0, xmm1
mulss xmm0, dword [0x100ad904]
mulss xmm1, dword [0x100ad8ec]
cvttss2si eax, xmm0
cvttss2si ebx, xmm1
mov dword [ebp - 0x204], eax
mov eax, dword [0x100c00ac]
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1dc], ebx
je 0x100946fe
cmp byte [ebp - 0x1f5], 0
je 0x100946fe
movss xmm0, dword [0x100ad81c]
mov ebx, 0x50
comiss xmm2, xmm0
mov dword [ebp - 0x204], 0x70
mov dword [ebp - 0x1dc], ebx
jbe 0x100946eb
subss xmm2, xmm0
movss xmm0, dword [0x100ad8d4]
movaps xmm1, xmm2
mulss xmm2, dword [0x100ad844]
mulss xmm1, dword [0x100ad85c]
subss xmm0, xmm1
cvttss2si eax, xmm0
movss xmm0, dword [0x100ad8b8]
subss xmm0, xmm2
mov dword [ebp - 0x204], eax
cvttss2si ebx, xmm0
mov dword [ebp - 0x1dc], ebx
mov dword [ebp - 0x1c], 0xff707070
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x18], eax
mov ecx, dword [0x10112028]
lea edi, [ebp - 0x1d4]
push edi
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
lea edi, [esi + 8]
test al, al
je 0x100962fc
push dword [ebp - 0x204]
mov ecx, 0x10115860
push esi
call fcn.10093bd0
lea eax, [ebp - 0x2c]
mov ecx, 0x10115860
push eax
push esi
call fcn.100967c0
test al, al
je 0x100962fc
cmp byte [ebp - 0x1d5], 0
je 0x10094774
cmp byte [0x100c1ad8], 0
je 0x10094769
push dword [ebp - 0x204]
mov ecx, 0x10115860
push esi
call fcn.100983d0
cmp byte [0x100c106c], 0
jne 0x10094781
jmp 0x10094792
cmp byte [0x100bfef8], 0
je 0x10094c8c
push dword [ebp - 0x204]
mov ecx, 0x10115860
push esi
call fcn.10096bb0
mov al, byte [ebp - 0x1d5]
test al, al
je 0x100947a7
cmp byte [0x100c11b0], 0
jne 0x100947b4
jmp 0x100947cb
cmp byte [0x100bfef8], 0
je 0x10094c8c
push dword [ebp - 0x204]
mov ecx, 0x10115860
push esi
call fcn.10096900
mov al, byte [ebp - 0x1d5]
test al, al
je 0x100947dd
cmp byte [0x100c0008], 0
jne 0x100947ea
jmp 0x10094915
cmp byte [0x100bfef8], 0
je 0x10094c8c
movzx eax, byte [0x100c00af]
lea ecx, [ebp - 0x1ec]
movd xmm3, ebx
mov edx, esi
cvtdq2ps xmm3, xmm3
mov byte [ebp - 0x19], al
mov word [ebp - 0x1c], 0
mov byte [ebp - 0x1a], 0
push dword [ebp - 0x1c]
call fcn.100942c0
movzx ecx, byte [0x100c00af]
add esp, 4
movd xmm2, ecx
lea ecx, [ebp - 0x248]
cvtdq2ps xmm2, xmm2
push ecx
mov ecx, eax
call fcn.100319b0
movd xmm3, dword [ebp - 0x204]
movzx ebx, byte [0x100c00af]
movzx edx, byte [ebp - 0x16]
mov esi, dword [eax]
mov eax, dword [ebp - 0x1f0]
movzx ecx, ah
movzx eax, al
cvtdq2ps xmm3, xmm3
mov byte [ebp - 0x1b], cl
lea ecx, [ebp - 0x290]
mov byte [ebp - 0x1a], dl
mov edx, dword [ebp - 0x1e8]
mov byte [ebp - 0x1c], al
mov byte [ebp - 0x19], bl
push dword [ebp - 0x1c]
call fcn.100942c0
movzx ecx, byte [0x100c00af]
add esp, 4
movd xmm2, ecx
lea ecx, [ebp - 0x1fc]
cvtdq2ps xmm2, xmm2
push ecx
mov ecx, eax
call fcn.100319b0
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
mov ebx, dword [ebp - 0x28]
push dword [eax]
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x2c]
push ecx
mov dword [ebp - 0x1f0], ecx
mov ecx, ebx
mov dword [ebp - 0x208], edx
push edx
mov edx, dword [ebp - 0x18]
call fcn.1008af90
mov eax, dword [ebp - 0x1f0]
lea ecx, [ebx - 1]
mov edx, dword [ebp - 0x18]
add esp, 0xc
add eax, 2
push esi
push eax
mov eax, dword [ebp - 0x208]
lea edx, [edx - 1]
add eax, 2
push eax
call fcn.1008af90
mov eax, dword [ebp - 0x1f0]
lea ecx, [ebx + 1]
mov edx, dword [ebp - 0x18]
add esp, 0xc
add eax, 0xfffffffe
push esi
push eax
mov eax, dword [ebp - 0x208]
lea edx, [edx + 1]
add eax, 0xfffffffe
push eax
call fcn.1008af90
mov esi, dword [ebp - 0x1e8]
add esp, 0xc
mov bl, byte [ebp - 0x1d5]
test bl, bl
je 0x1009492d
cmp byte [0x100c01d4], 0
jne 0x1009493a
jmp 0x10094aa7
cmp byte [0x100bfef8], 0
je 0x10094ab4
lea eax, [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x220]
call fcn.10021150
lea ecx, [ebp - 0x1f5]
mov byte [ebp - 4], 9
push ecx
push 0x18
push 0
push eax
lea ecx, [ebp - 0x54]
call fcn.10040770
mov eax, 0x40
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x200], eax
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0xc
call fcn.10021100
movd xmm3, dword [ebp - 0x1dc]
lea ecx, [ebp - 0x1ec]
mov byte [ebp - 4], 0xb
mov edx, esi
cmp dword [0x100c0344], 0
mov eax, dword [0x100c0278]
push eax
cvtdq2ps xmm3, xmm3
jne 0x10094a19
call fcn.100942c0
movzx ecx, byte [0x100c027b]
add esp, 4
movd xmm2, ecx
lea ecx, [ebp - 0x248]
cvtdq2ps xmm2, xmm2
push ecx
mov ecx, eax
call fcn.100319b0
lea ecx, [ebp - 0x23c]
mov esi, dword [eax]
mov eax, dword [ebp - 0x28]
sub eax, dword [0x101147f8]
mov dword [ebp - 0x1fc], eax
mov eax, dword [ebp - 0x24]
cdq
sub eax, edx
lea edx, [ebp - 0x54]
mov ebx, eax
sar ebx, 1
add ebx, dword [ebp - 0x2c]
call fcn.1008a130
push 2
push eax
push esi
mov byte [ebp - 4], 0xd
mov ecx, 0x101147f0
push dword [ebp - 0x1fc]
push ebx
call fcn.1008b5e0
mov byte [ebp - 4], 0xe
jmp 0x10094a86
call fcn.100942c0
movzx ecx, byte [0x100c027b]
add esp, 4
movd xmm2, ecx
lea ecx, [ebp - 0x248]
cvtdq2ps xmm2, xmm2
push ecx
mov ecx, eax
call fcn.100319b0
lea ecx, [ebp - 0x23c]
mov esi, dword [eax]
mov eax, dword [ebp - 0x28]
sub eax, dword [0x101147f8]
mov dword [ebp - 0x1fc], eax
mov eax, dword [ebp - 0x24]
cdq
sub eax, edx
lea edx, [ebp - 0x54]
mov ebx, eax
sar ebx, 1
add ebx, dword [ebp - 0x2c]
call fcn.1008a130
push 2
push eax
push esi
mov byte [ebp - 4], 0xf
mov ecx, 0x101147d8
push dword [ebp - 0x1fc]
push ebx
call fcn.1008b5e0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x23c]
call fcn.100460a0
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x11
call fcn.10021100
mov bl, byte [ebp - 0x1d5]
mov byte [ebp - 4], 1
test bl, bl
je 0x10094abf
cmp byte [0x100c014c], 0
jne 0x10094ac8
mov esi, dword [ebp - 0x1e8]
jmp 0x10094c98
cmp byte [0x100bfef8], 0
je 0x10094ab4
mov eax, dword [0x10112274]
mov ecx, dword [ebp - 0x1e8]
add eax, 0xffffffc8
mov esi, dword [ebp - 0x20]
xor eax, 0x7e881216
add esi, 0xfffffffe
mov eax, dword [eax + ecx]
mov ecx, 0x64
cmp eax, ecx
mov ebx, ecx
cmovl ebx, eax
mov eax, 0x51eb851f
sub ecx, ebx
mov dword [ebp - 0x18], ebx
imul ecx, ecx, 0x1fe
imul ecx
mov ecx, 0xff
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, ecx
cmovg eax, ecx
imul ecx, ebx, 0x1fe
mov dword [ebp - 0x1fc], eax
mov eax, 0x51eb851f
imul ecx
mov eax, 0xff
sar edx, 5
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
cmp ebx, 0xff
push ecx
cmovg ebx, eax
mov eax, dword [ebp - 0x18]
imul eax, esi
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x100ad678]
movss dword [esp], xmm0
call dword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_roundf]
mov ecx, dword [ebp - 0x1dc]
mov eax, esp
fstp dword [ebp - 0x1f0]
cvttss2si esi, dword [ebp - 0x1f0]
mov byte [eax + 3], cl
mov word [eax], 0
mov byte [eax + 2], 0
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x28]
add eax, 2
mov ecx, dword [ebp - 0x2c]
push eax
push 4
lea edx, [edx - 1]
lea ecx, [ecx - 6]
call fcn.1008afd0
mov ecx, dword [ebp - 0x1fc]
add esp, 8
mov eax, esp
mov byte [eax], cl
mov ecx, dword [ebp - 0x204]
mov byte [eax + 3], cl
mov byte [eax + 1], bl
mov byte [eax + 2], 0
lea eax, [esi + 2]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x20]
sub ecx, esi
add edx, 0xfffffffe
add edx, ecx
mov ecx, dword [ebp - 0x2c]
push eax
push 2
lea ecx, [ecx - 5]
call fcn.1008af90
mov eax, dword [0x10112274]
add esp, 0xc
add eax, 0xffffffc8
xor eax, 0x7e881216
mov esi, dword [ebp - 0x1e8]
cmp dword [eax + esi], 0x5c
jg 0x10094c92
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x54]
call fcn.10039780
mov eax, dword [ebp - 0x1e4]
or eax, 0x200
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x1dc]
lea edx, [ebp - 0x54]
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
mov esi, dword [ebp - 0x2c]
add ebx, 0xfffffff9
mov byte [ebp - 0x19], al
add esi, 0xfffffffb
cvttss2si eax, dword [ebp - 0x1f0]
mov word [ebp - 0x1c], 0xffff
mov byte [ebp - 0x1a], 0xff
sub ecx, eax
add ebx, ecx
lea ecx, [ebp - 0x220]
call fcn.1008a130
push 2
push eax
mov byte [ebp - 4], 0x13
mov ecx, 0x101147e4
push dword [ebp - 0x1c]
push ebx
push esi
call fcn.1008b5e0
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x14
call fcn.100460a0
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x15
call fcn.10021100
mov esi, dword [ebp - 0x1e8]
mov bl, byte [ebp - 0x1d5]
movd xmm0, dword [ebp - 0x204]
cvtdq2pd xmm0, xmm0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x30], 0
mulsd xmm0, qword [0x100ad798]
cvttsd2si eax, xmm0
xorps xmm0, xmm0
movq qword [ebp - 0x38], xmm0
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
mov byte [ebp - 4], 0x16
movq qword [ebp - 0x60], xmm0
mov dword [ebp - 0x58], 0
test bl, bl
je 0x10094d15
push 0x100c09b0
lea ecx, [ebp - 0x2c4]
call fcn.10020b70
mov ebx, dword [ebp - 0x1e4]
or ebx, 0x800
lea eax, [ebp - 0x2c4]
or ebx, 1
jmp 0x10094d37
push 0x100c0a58
lea ecx, [ebp - 0x2b8]
call fcn.10020b70
mov ebx, dword [ebp - 0x1e4]
lea eax, [ebp - 0x2b8]
or ebx, 0x1002
push eax
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x1e4], ebx
call fcn.10020b20
mov dword [ebp - 4], 0x18
test bl, 2
je 0x10094d70
and ebx, 0xfffffffd
mov dword [ebp - 0x1e4], ebx
mov dword [ebp - 0x200], ebx
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 4], 0x19
call fcn.10020c40
mov byte [ebp - 4], 0x1a
test bl, 1
je 0x10094d95
and ebx, 0xfffffffe
mov dword [ebp - 0x1e4], ebx
lea ecx, [ebp - 0x2c4]
mov byte [ebp - 4], 0x1b
call fcn.10020c40
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0
push eax
lea ecx, [ebp - 0x60]
call fcn.10020b00
lea eax, [ebp - 0x1ec]
push eax
lea ecx, [ebp - 0x60]
call fcn.10020af0
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [eax]
je 0x10095a87
mov eax, dword [ebp - 0x1c]
cmp dword [eax], 0
jne 0x10094e60
mov eax, dword [0x10112278]
lea ecx, [ebp - 0x220]
add eax, 0xffffffc7
mov edx, 0x100ad53c
xor eax, 0x7e881217
add eax, esi
push eax
call fcn.10072b80
add esp, 4
mov ebx, dword [ebp - 0x1dc]
lea ecx, [ebp - 0x240]
mov byte [ebp - 4], 0x1c
push eax
mov word [ebp - 0x250], 0xd29b
mov byte [ebp - 0x24e], 0x64
mov byte [ebp - 0x24d], bl
call fcn.10027510
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x228], eax
lea eax, [ebp - 0x240]
mov byte [ebp - 4], 0x1d
push eax
lea ecx, [ebp - 0x38]
call fcn.1006dcf0
lea ecx, [ebp - 0x240]
mov byte [ebp - 4], 0x1e
call fcn.10021100
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x1f
call fcn.10021100
mov byte [ebp - 4], 0x1a
jmp 0x10094e66
mov ebx, dword [ebp - 0x1dc]
mov eax, dword [ebp - 0x1c]
cmp dword [eax], 1
jne 0x10094f83
mov eax, dword [0x101122c8]
add eax, 0xffffffb3
xor eax, 0x7e88122b
cmp dword [eax + esi], 0
jle 0x10094f83
mov eax, dword [0x101122ac]
lea ecx, [ebp - 0x23c]
add eax, 0xffffffba
xor eax, 0x7e881224
cmp byte [eax + esi], 0
je 0x10094f0c
push 0x100ad584
call fcn.10021150
mov byte [ebp - 4], 0x20
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x224]
mov word [ebp - 0x254], 0xffff
mov byte [ebp - 0x252], 0xff
mov byte [ebp - 0x251], bl
call fcn.10027510
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x20c], eax
lea eax, [ebp - 0x224]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x38]
call fcn.1006dcf0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x22
call fcn.10021100
mov byte [ebp - 4], 0x23
jmp 0x10094f74
push 0x100ad580
call fcn.10021150
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x224]
mov word [ebp - 0x258], 0xffff
mov byte [ebp - 0x256], 0xff
mov byte [ebp - 0x255], bl
call fcn.10027510
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x20c], eax
lea eax, [ebp - 0x224]
mov byte [ebp - 4], 0x25
push eax
lea ecx, [ebp - 0x38]
call fcn.1006dcf0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x26
call fcn.10021100
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x23c]
call fcn.10021100
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x1c]
cmp dword [eax], 2
jne 0x1009501f
mov eax, dword [0x101122b8]
add eax, 0xffffffb7
xor eax, 0x7e881227
cmp byte [eax + esi], 0
je 0x1009501f
push str.ZOOM
lea ecx, [ebp - 0x23c]
call fcn.10021150
mov byte [ebp - 4], 0x28
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x224]
mov word [ebp - 0x25c], 0xb43c
mov byte [ebp - 0x25a], 0xe1
mov byte [ebp - 0x259], bl
call fcn.10027510
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x20c], eax
lea eax, [ebp - 0x224]
mov byte [ebp - 4], 0x29
push eax
lea ecx, [ebp - 0x38]
call fcn.1006dcf0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x2a
call fcn.10021100
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0x2b
call fcn.10021100
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x1c]
xorps xmm1, xmm1
cmp dword [eax], 3
jne 0x100950c9
mov eax, dword [0x101122d4]
add eax, 0xffffffb0
xor eax, 0x7e88122e
movss xmm0, dword [eax + esi]
comiss xmm0, xmm1
jbe 0x100950c9
push str.FLASHED
lea ecx, [ebp - 0x23c]
call fcn.10021150
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x224]
mov word [ebp - 0x260], 0xffff
mov byte [ebp - 0x25e], 0
mov byte [ebp - 0x25d], bl
call fcn.10027510
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x20c], eax
lea eax, [ebp - 0x224]
mov byte [ebp - 4], 0x2d
push eax
lea ecx, [ebp - 0x38]
call fcn.1006dcf0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x2e
call fcn.10021100
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0x2f
call fcn.10021100
mov byte [ebp - 4], 0x1a
xorps xmm1, xmm1
mov eax, dword [ebp - 0x1c]
cmp dword [eax], 4
jne 0x100951b4
mov eax, dword [0x101121b4]
mov ecx, dword [eax + esi]
movss xmm0, dword [ecx + 0x58]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x100951b4
mov eax, dword [ecx + 0x50]
mov ecx, dword [0x10112170]
mov dword [ebp - 0x248], ecx
mov ecx, dword [0x101121d0]
mov dword [ebp - 0x290], eax
cmp dword [ecx + esi], 0
jne 0x10095125
mov eax, dword [0x1011214c]
mov ecx, esi
call eax
mov ecx, dword [0x101121d0]
mov eax, dword [ebp - 0x290]
mov ecx, dword [ecx + esi]
mov edx, eax
call dword [ebp - 0x248]
cmp eax, 0x3c7
jne 0x100951b4
push str.RELOAD
lea ecx, [ebp - 0x23c]
call fcn.10021150
mov byte [ebp - 4], 0x30
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x224]
mov word [ebp - 0x264], 0xb43c
mov byte [ebp - 0x262], 0xe1
mov byte [ebp - 0x261], bl
call fcn.10027510
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x20c], eax
lea eax, [ebp - 0x224]
mov byte [ebp - 4], 0x31
push eax
lea ecx, [ebp - 0x38]
call fcn.1006dcf0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x32
call fcn.10021100
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0x33
call fcn.10021100
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x1c]
cmp dword [eax], 5
jne 0x1009524a
mov eax, dword [0x1011217c]
mov ecx, esi
call eax
test al, al
je 0x1009524a
push 0x100ad564
lea ecx, [ebp - 0x23c]
call fcn.10021150
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x224]
mov word [ebp - 0x268], 0xff
mov byte [ebp - 0x266], 0
mov byte [ebp - 0x265], bl
call fcn.10027510
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x20c], eax
lea eax, [ebp - 0x224]
mov byte [ebp - 4], 0x35
push eax
lea ecx, [ebp - 0x38]
call fcn.1006dcf0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x36
call fcn.10021100
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0x37
call fcn.10021100
mov byte [ebp - 4], 0x1a
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x28]
call eax
imul eax, eax, 0x10a0
lea ebx, [eax + 0x100cd584]
mov eax, dword [ebp - 0x1c]
cmp dword [eax], 6
jne 0x1009553b
cmp byte [ebx + 0x836], 0
je 0x100952fb
push str.PANDORA
lea ecx, [ebp - 0x23c]
call fcn.10021150
mov eax, dword [ebp - 0x1dc]
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x38
mov byte [ebp - 0x269], al
lea eax, [ebp - 0x23c]
push eax
mov word [ebp - 0x26c], 0xffff
mov byte [ebp - 0x26a], 0xff
call fcn.10027510
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x20c], eax
lea eax, [ebp - 0x224]
mov byte [ebp - 4], 0x39
push eax
lea ecx, [ebp - 0x38]
call fcn.1006dcf0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x3a
call fcn.10021100
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0x3b
call fcn.10021100
mov byte [ebp - 4], 0x1a
cmp byte [ebx + 0x834], 0
je 0x1009538b
push str.KAABA
lea ecx, [ebp - 0x23c]
call fcn.10021150
mov eax, dword [ebp - 0x1dc]
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x3c
mov byte [ebp - 0x26d], al
lea eax, [ebp - 0x23c]
push eax
mov word [ebp - 0x270], 0xd29b
mov byte [ebp - 0x26e], 0x64
call fcn.10027510
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x20c], eax
lea eax, [ebp - 0x224]
mov byte [ebp - 4], 0x3d
push eax
lea ecx, [ebp - 0x38]
call fcn.1006dcf0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x3e
call fcn.10021100
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0x3f
call fcn.10021100
mov byte [ebp - 4], 0x1a
cmp byte [ebx + 0x835], 0
je 0x1009541b
push str.CHEESE
lea ecx, [ebp - 0x23c]
call fcn.10021150
mov eax, dword [ebp - 0x1dc]
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x40
mov byte [ebp - 0x271], al
lea eax, [ebp - 0x23c]
push eax
mov word [ebp - 0x274], 0xd29b
mov byte [ebp - 0x272], 0x64
call fcn.10027510
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x20c], eax
lea eax, [ebp - 0x224]
mov byte [ebp - 4], 0x41
push eax
lea ecx, [ebp - 0x38]
call fcn.1006dcf0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x42
call fcn.10021100
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0x43
call fcn.10021100
mov byte [ebp - 4], 0x1a
cmp byte [ebx + 0x837], 0
je 0x100954ab
push str.UNKNOWN
lea ecx, [ebp - 0x23c]
call fcn.10021150
mov eax, dword [ebp - 0x1dc]
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x44
mov byte [ebp - 0x289], al
lea eax, [ebp - 0x23c]
push eax
mov word [ebp - 0x28c], 0xffff
mov byte [ebp - 0x28a], 0xff
call fcn.10027510
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x20c], eax
lea eax, [ebp - 0x224]
mov byte [ebp - 4], 0x45
push eax
lea ecx, [ebp - 0x38]
call fcn.1006dcf0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x46
call fcn.10021100
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0x47
call fcn.10021100
mov byte [ebp - 4], 0x1a
cmp byte [ebx + 0x848], 0
je 0x1009553b
push str.FRIENDLY
lea ecx, [ebp - 0x23c]
call fcn.10021150
mov eax, dword [ebp - 0x1dc]
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x48
mov byte [ebp - 0x279], al
lea eax, [ebp - 0x23c]
push eax
mov word [ebp - 0x27c], 0xff00
mov byte [ebp - 0x27a], 0
call fcn.10027510
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x20c], eax
lea eax, [ebp - 0x224]
mov byte [ebp - 4], 0x49
push eax
lea ecx, [ebp - 0x38]
call fcn.1006dcf0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x4a
call fcn.10021100
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0x4b
call fcn.10021100
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x1c]
cmp dword [eax], 7
jne 0x10095607
test ebx, ebx
je 0x10095607
cmp dword [ebx + 0x18], 0
jbe 0x10095607
lea eax, [ebp - 0x2d0]
push eax
lea ecx, [ebx + 8]
call fcn.10021c70
mov ecx, eax
mov byte [ebp - 4], 0x4c
call fcn.10021fc0
mov byte [ebp - 4], 0x1a
mov ecx, dword [eax]
mov eax, dword [ebp - 0x1dc]
cmp byte [ecx + 0x6b4], 0
je 0x100955a6
mov word [ebp - 0x288], 0xd29b
mov byte [ebp - 0x286], 0x64
mov byte [ebp - 0x285], al
mov esi, dword [ebp - 0x288]
jmp 0x100955c2
mov word [ebp - 0x284], 0xff
mov byte [ebp - 0x282], 0
mov byte [ebp - 0x281], al
mov esi, dword [ebp - 0x284]
test byte [ecx + 0x6d4], 1
jne 0x10095607
push 0x100ad438
lea ecx, [ebp - 0x224]
call fcn.10021150
mov dword [ebp - 0x20c], esi
lea eax, [ebp - 0x224]
mov byte [ebp - 4], 0x4d
push eax
lea ecx, [ebp - 0x38]
call fcn.1006dcf0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x4e
call fcn.10021100
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x1c]
cmp dword [eax], 8
jne 0x10095736
mov esi, dword [0x100b9ad4]
test esi, esi
je 0x10095736
mov eax, dword [edi]
mov ecx, edi
mov esi, dword [esi]
mov eax, dword [eax + 0x28]
call eax
push eax
mov ecx, esi
call fcn.1003e390
sub esp, 8
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [esp], xmm0
call dword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_round]
mov eax, dword [ebp - 0x1dc]
add esp, 8
fstp qword [ebp - 0x24c]
cvttsd2si edx, qword [ebp - 0x24c]
cmp edx, 0xaf
jg 0x10095687
mov word [ebp - 0x280], 0xd29b
mov byte [ebp - 0x27e], 0x64
mov byte [ebp - 0x27d], al
mov esi, dword [ebp - 0x280]
jmp 0x100956a3
mov word [ebp - 0x278], 0xff
mov byte [ebp - 0x276], 0
mov byte [ebp - 0x275], al
mov esi, dword [ebp - 0x278]
lea ecx, [ebp - 0x220]
call fcn.10039780
push 2
push 0x100ad5e4
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x4f
call fcn.10038e30
push eax
lea ecx, [ebp - 0x23c]
call fcn.100274d0
or dword [ebp - 0x1e4], 0x18000
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x2ac]
call fcn.100274d0
mov dword [ebp - 0x294], esi
lea eax, [ebp - 0x2ac]
mov byte [ebp - 4], 0x51
push eax
lea ecx, [ebp - 0x38]
call fcn.1006dcf0
lea ecx, [ebp - 0x2ac]
mov byte [ebp - 4], 0x52
call fcn.10021100
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0x53
call fcn.10021100
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x54
call fcn.10021100
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x1c]
mov cl, byte [ebp - 0x1d5]
cmp dword [eax], 9
jne 0x10095829
test ebx, ebx
je 0x10095829
cmp dword [ebx + 0x18], 0
je 0x10095829
test cl, cl
je 0x10095829
lea eax, [ebp - 0x2dc]
push eax
lea ecx, [ebx + 8]
call fcn.10021c70
mov ecx, eax
mov byte [ebp - 4], 0x55
call fcn.10021fc0
cmp byte [ebp - 0x1dd], 0
mov byte [ebp - 4], 0x1a
mov ecx, dword [eax]
lea edx, [ecx + 0x6d8]
je 0x100957b5
mov eax, dword [ebp - 0x1fc]
mov word [ebp - 0x208], 0xdcdc
mov byte [ebp - 0x206], 0xdc
mov byte [ebp - 0x205], al
mov esi, dword [ebp - 0x208]
jmp 0x100957eb
mov al, byte [ecx + 0x708]
mov byte [ebp - 0x1f0], al
mov al, byte [ecx + 0x709]
mov byte [ebp - 0x1ef], al
mov al, byte [ecx + 0x70a]
mov byte [ebp - 0x1ee], al
mov eax, dword [ebp - 0x1fc]
mov byte [ebp - 0x1ed], al
mov esi, dword [ebp - 0x1f0]
push edx
lea ecx, [ebp - 0x2ac]
call fcn.10027510
mov dword [ebp - 0x294], esi
lea eax, [ebp - 0x2ac]
mov byte [ebp - 4], 0x56
push eax
lea ecx, [ebp - 0x38]
call fcn.1006dcf0
lea ecx, [ebp - 0x2ac]
mov byte [ebp - 4], 0x57
call fcn.10021100
mov cl, byte [ebp - 0x1d5]
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x1c]
cmp dword [eax], 0xa
jne 0x1009592c
test ebx, ebx
je 0x1009592c
cmp dword [ebx + 0x18], 0
je 0x1009592c
test cl, cl
je 0x1009592c
lea eax, [ebp - 0x2e8]
push eax
lea ecx, [ebx + 8]
call fcn.10021c70
mov ecx, eax
mov byte [ebp - 4], 0x58
call fcn.10021fc0
mov byte [ebp - 4], 0x1a
push str.OVERRIDE:BACK
mov esi, dword [eax]
add esi, 0x6d8
mov ecx, esi
call fcn.10046d50
test al, al
jne 0x100958a9
push str.OVERRIDE:RIGHT
mov ecx, esi
call fcn.10046d50
test al, al
jne 0x100958a9
push str.OVERRIDE:LEFT
mov ecx, esi
call fcn.10046d50
test al, al
je 0x1009592c
push str.OVERRIDE
lea ecx, [ebp - 0x220]
call fcn.10021150
mov eax, dword [ebp - 0x1dc]
lea ecx, [ebp - 0x2ac]
mov byte [ebp - 4], 0x59
mov byte [ebp - 0x1fd], al
lea eax, [ebp - 0x220]
push eax
mov word [ebp - 0x200], 0xd29b
mov byte [ebp - 0x1fe], 0x64
call fcn.10027510
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x294], eax
lea eax, [ebp - 0x2ac]
mov byte [ebp - 4], 0x5a
push eax
lea ecx, [ebp - 0x38]
call fcn.1006dcf0
lea ecx, [ebp - 0x2ac]
mov byte [ebp - 4], 0x5b
call fcn.10021100
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x5c
call fcn.10021100
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x1c]
cmp dword [eax], 0xb
jne 0x10095a63
cmp byte [ebp - 0x1d5], 0
je 0x10095a63
test ebx, ebx
je 0x10095a63
cmp dword [ebx + 0x18], 0
je 0x10095975
lea eax, [ebp - 0x2f4]
push eax
lea ecx, [ebx + 8]
call fcn.10021c70
mov ecx, eax
mov byte [ebp - 4], 0x5d
call fcn.10021fc0
mov byte [ebp - 4], 0x1a
mov esi, dword [eax]
jmp 0x10095977
xor esi, esi
test esi, esi
je 0x10095a63
cmp byte [esi + 0x10], 0
jne 0x10095a63
cmp dword [ebx + 0x18], 2
jb 0x100959c2
lea eax, [ebp - 0x300]
lea ecx, [ebx + 8]
push eax
call fcn.10021c70
push 1
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x5e
push ecx
mov ecx, eax
call fcn.10021b00
mov ecx, eax
mov byte [ebp - 4], 0x5f
call fcn.10021fc0
mov byte [ebp - 4], 0x1a
mov ecx, dword [eax]
jmp 0x100959c4
xor ecx, ecx
test ecx, ecx
je 0x10095a63
cmp byte [ecx + 0x10], 0
jne 0x10095a63
cmp byte [esi + 0x711], 0
je 0x10095a63
cmp byte [ecx + 0x711], 0
je 0x10095a63
push str.EXPLOIT
lea ecx, [ebp - 0x220]
call fcn.10021150
mov eax, dword [ebp - 0x1dc]
lea ecx, [ebp - 0x2ac]
mov byte [ebp - 4], 0x60
mov byte [ebp - 0x15], al
lea eax, [ebp - 0x220]
push eax
mov word [ebp - 0x18], 0xff
mov byte [ebp - 0x16], 0
call fcn.10027510
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x294], eax
lea eax, [ebp - 0x2ac]
mov byte [ebp - 4], 0x61
push eax
lea ecx, [ebp - 0x38]
call fcn.1006dcf0
lea ecx, [ebp - 0x2ac]
mov byte [ebp - 4], 0x62
call fcn.10021100
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x63
call fcn.10021100
mov byte [ebp - 4], 0x1a
add dword [ebp - 0x1c], 4
lea eax, [ebp - 0x1ec]
push eax
lea ecx, [ebp - 0x60]
call fcn.10020af0
mov ecx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x1e8]
cmp ecx, dword [eax]
jne 0x10094dc2
mov ecx, dword [ebp - 0x34]
mov eax, 0x92492493
mov esi, dword [ebp - 0x38]
sub ecx, esi
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x10095b48
xor ebx, ebx
xor edi, edi
mov dword [ebp - 0x1fc], ebx
mov ecx, dword [0x101147ec]
lea edx, [ebx + esi]
mov eax, dword [ebp - 0x28]
dec ecx
mov ebx, dword [ebp - 0x24]
mov esi, dword [edx + 0x18]
imul ecx, edi
add eax, ecx
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x2c]
add eax, 2
add ebx, eax
call fcn.1008a130
push 0
push eax
push esi
mov byte [ebp - 4], 0x64
mov ecx, 0x101147e4
push dword [ebp - 0x1ec]
push ebx
call fcn.1008b5e0
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x65
call fcn.100460a0
mov byte [ebp - 4], 0x1a
mov eax, 0x92492493
mov ecx, dword [ebp - 0x34]
inc edi
mov esi, dword [ebp - 0x38]
sub ecx, esi
mov ebx, dword [ebp - 0x1fc]
imul ecx
add ebx, 0x1c
add edx, ecx
mov dword [ebp - 0x1fc], ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x10095ab2
mov edi, dword [ebp - 0x1f4]
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x66
call fcn.10020c40
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x67
call fcn.1006d8d0
cmp byte [ebp - 0x1d5], 0
mov byte [ebp - 4], 1
mov dword [ebp - 0x1e4], 3
je 0x10095d00
cmp byte [0x100c0c18], 0
je 0x10095d0d
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x28]
call eax
imul eax, eax, 0x10a0
lea esi, [eax + 0x100cd584]
test esi, esi
je 0x10095d0d
cmp byte [esi + 0x77d], 0
je 0x10095d0d
cmp dword [esi + 0x18], 0
je 0x10095d0d
lea eax, [ebp - 0x48]
push eax
lea ecx, [esi + 8]
call fcn.10021c70
mov ecx, eax
mov byte [ebp - 4], 0x68
call fcn.10021fc0
mov byte [ebp - 4], 1
mov eax, dword [eax]
test eax, eax
je 0x10095d0d
cmp byte [esi + 0x79c], 0
je 0x10095d0d
movss xmm0, dword [esi + 0x778]
subss xmm0, dword [eax + 0x71c]
movss xmm1, dword [0x100ad74c]
mov dword [ebp - 0x248], 0x3f8ccccd
mov dword [ebp - 0x1f4], 0
comiss xmm0, xmm1
movss dword [ebp - 0x1ec], xmm0
ja 0x10095c40
xorps xmm1, xmm1
lea eax, [ebp - 0x1f4]
comiss xmm0, xmm1
lea ecx, [ebp - 0x1ec]
cmovae eax, ecx
movss xmm1, dword [eax]
movd xmm0, dword [ebp - 0x24]
mov ebx, dword [ebp - 0x1dc]
cvtdq2ps xmm0, xmm0
push ecx
mov eax, esp
push 4
mulss xmm0, xmm1
mov word [eax], 0xa0a
mov byte [eax + 2], 0xa
mov byte [eax + 3], bl
mulss xmm0, dword [0x100ad73c]
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x20]
add eax, 2
push dword [ebp - 0x24]
mov ecx, dword [ebp - 0x2c]
add edx, eax
movss dword [ebp - 0x1f4], xmm0
call fcn.1008afd0
movd xmm3, dword [ebp - 0x204]
lea ecx, [ebp - 0x248]
mov edx, dword [ebp - 0x1e8]
add esp, 0xc
cvtdq2ps xmm3, xmm3
push dword [0x100c0cbc]
call fcn.100942c0
movzx ecx, byte [0x100c0cbf]
add esp, 4
movd xmm2, ecx
lea ecx, [ebp - 0x1ec]
cvtdq2ps xmm2, xmm2
push ecx
mov ecx, eax
call fcn.100319b0
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x20]
push dword [eax]
cvttss2si eax, dword [ebp - 0x1f4]
push 2
lea ecx, [ecx + 1]
push eax
mov eax, dword [ebp - 0x28]
add eax, 3
add edx, eax
call fcn.1008af90
mov edi, 7
add esp, 0xc
mov dword [ebp - 0x1e4], edi
jmp 0x10095d18
cmp byte [0x100bfef8], 0
je 0x100962fc
mov ebx, dword [ebp - 0x1dc]
mov edi, 3
mov eax, dword [0x10112308]
mov ecx, dword [ebp - 0x1e8]
add eax, 0xffffffa3
xor eax, 0x7e88123b
mov eax, dword [eax + ecx]
mov ecx, dword [0x1011202c]
push ecx
mov edx, dword [ecx]
mov esi, dword [edx + 0x10]
mov edx, esp
mov dword [edx], eax
call esi
mov esi, eax
mov dword [ebp - 0x208], esi
test esi, esi
je 0x100962fc
mov ecx, dword [esi]
mov edx, dword [ecx + 0x6f8]
mov ecx, esi
call edx
test eax, eax
je 0x100962fc
mov eax, dword [eax + 0x14]
xorps xmm1, xmm1
mov dword [ebp - 0x1fc], eax
mov eax, dword [0x10112324]
add eax, 0xffffff9c
xor eax, 0x7e881242
mov ecx, dword [eax + esi]
mov eax, dword [0x101121b4]
mov esi, dword [ebp - 0x1e8]
mov dword [ebp - 0x200], ecx
mov ecx, dword [eax + esi]
mov dword [ebp - 0x248], ecx
movss xmm0, dword [ecx + 0x58]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x10095df4
mov eax, dword [ecx + 0x50]
mov ecx, dword [0x10112170]
mov dword [ebp - 0x1ec], ecx
mov ecx, dword [0x101121d0]
mov dword [ebp - 0x1f4], eax
cmp dword [ecx + esi], 0
jne 0x10095dde
mov eax, dword [0x1011214c]
mov ecx, esi
call eax
mov ecx, dword [0x101121d0]
mov eax, dword [ebp - 0x1f4]
mov ecx, dword [ecx + esi]
mov edx, eax
call dword [ebp - 0x1ec]
cmp eax, 0x3c7
jne 0x10095df4
mov al, 1
jmp 0x10095df6
xor al, al
mov ecx, dword [ebp - 0x1fc]
mov byte [ebp - 0x1dd], al
cmp ecx, 0xffffffff
je 0x10096053
cmp byte [0x100c0ad4], 0
je 0x10096053
test al, al
je 0x10095e29
mov eax, dword [ebp - 0x248]
movss xmm1, dword [eax + 0x64]
jmp 0x10095e3f
movd xmm1, dword [ebp - 0x200]
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
divss xmm1, xmm0
mov eax, dword [ebp - 0x24]
add eax, 0xfffffffe
push ecx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
movss dword [esp], xmm0
call dword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_roundf]
movzx eax, byte [0x100c0b7b]
lea ecx, [ebp - 0x1f4]
mov edx, dword [ebp - 0x1e8]
add esp, 4
mov esi, dword [0x100c0b78]
movd xmm0, ebx
cvtdq2ps xmm3, xmm0
mov byte [ebp - 0x15], al
mov word [ebp - 0x18], 0
mov byte [ebp - 0x16], 0
push dword [ebp - 0x18]
fstp dword [ebp - 0x1f0]
call fcn.100942c0
movzx ecx, byte [0x100c0b7b]
add esp, 4
movd xmm2, ecx
lea ecx, [ebp - 0x1ec]
cvtdq2ps xmm2, xmm2
push ecx
mov ecx, eax
call fcn.100319b0
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x20]
add ecx, edi
dec edx
push dword [eax]
mov eax, dword [ebp - 0x24]
add edx, ecx
mov ecx, dword [ebp - 0x2c]
add eax, 2
push 4
push eax
lea ecx, [ecx - 1]
call fcn.1008afd0
movd xmm3, dword [ebp - 0x204]
lea ecx, [ebp - 0x248]
add esp, 0xc
cvtdq2ps xmm3, xmm3
push esi
mov esi, dword [ebp - 0x1e8]
mov edx, esi
call fcn.100942c0
movzx ecx, byte [0x100c0b7b]
add esp, 4
movd xmm2, ecx
lea ecx, [ebp - 0x1f4]
cvtdq2ps xmm2, xmm2
push ecx
mov ecx, eax
call fcn.100319b0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
add edx, edi
add edx, dword [ebp - 0x20]
push dword [eax]
cvttss2si eax, dword [ebp - 0x1f0]
push 2
add eax, 2
push eax
call fcn.1008af90
add esp, 0xc
cmp dword [ebp - 0x200], 0
jle 0x1009604a
movd xmm0, dword [ebp - 0x1fc]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x100ad738]
call fcn.10023390
mov ecx, dword [ebp - 0x200]
cvttss2si eax, xmm0
cmp ecx, eax
jg 0x1009604a
cmp byte [ebp - 0x1dd], 0
jne 0x1009604a
mov edx, ecx
lea ecx, [ebp - 0x220]
call fcn.10039780
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0x1f4]
movzx eax, byte [0x100c0b7b]
mov edx, esi
movd xmm3, ebx
cvtdq2ps xmm3, xmm3
mov byte [ebp - 0x15], al
mov word [ebp - 0x18], 0xffff
mov byte [ebp - 0x16], 0xff
push dword [ebp - 0x18]
call fcn.100942c0
movzx ecx, byte [0x100c0b7b]
add esp, 4
movd xmm2, ecx
lea ecx, [ebp - 0x1ec]
cvtdq2ps xmm2, xmm2
push ecx
mov ecx, eax
call fcn.100319b0
mov ecx, dword [ebp - 0x28]
lea edx, [ebp - 0x220]
mov ebx, dword [ebp - 0x20]
add ecx, edi
cvttss2si edi, dword [ebp - 0x1f0]
mov esi, dword [eax]
add ebx, 0xfffffffd
add ebx, ecx
lea ecx, [ebp - 0x23c]
add edi, dword [ebp - 0x2c]
call fcn.1008a130
push 2
push eax
push esi
push ebx
push edi
mov ecx, 0x101147e4
mov byte [ebp - 4], 0x6a
call fcn.1008b5e0
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0x6b
call fcn.100460a0
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x6c
call fcn.10021100
mov esi, dword [ebp - 0x1e8]
mov byte [ebp - 4], 1
mov edi, dword [ebp - 0x1e4]
add edi, 3
mov dword [ebp - 0x1e4], edi
cmp byte [0x100c0d5c], 0
je 0x10096120
mov ax, word [0x100c0e02]
movd xmm3, dword [ebp - 0x1dc]
movzx edx, al
movzx ebx, ah
mov eax, dword [0x100c0e00]
mov ecx, eax
shr ecx, 8
movzx ecx, cl
movzx eax, al
cvtdq2ps xmm3, xmm3
mov byte [ebp - 0x17], cl
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 0x16], dl
mov edx, esi
mov byte [ebp - 0x18], al
mov byte [ebp - 0x15], bl
push dword [ebp - 0x18]
call fcn.100942c0
movzx ecx, byte [0x100c0e03]
add esp, 4
movd xmm2, ecx
lea ecx, [ebp - 0x1ec]
cvtdq2ps xmm2, xmm2
push ecx
mov ecx, eax
call fcn.100319b0
mov ebx, dword [ebp - 0x28]
lea ecx, [ebp - 0x220]
add ebx, edi
add ebx, dword [ebp - 0x20]
mov esi, dword [eax]
mov eax, dword [ebp - 0x24]
cdq
sub eax, edx
lea edx, [ebp - 0x78]
mov edi, eax
sar edi, 1
add edi, dword [ebp - 0x2c]
call fcn.1008a130
push 2
push eax
push esi
push ebx
push edi
mov ecx, 0x101147e4
mov byte [ebp - 4], 0x6d
call fcn.1008b5e0
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x6e
call fcn.100460a0
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x1e4]
add eax, dword [0x101147ec]
mov dword [ebp - 0x1e4], eax
cmp byte [0x100c03b8], 0
je 0x10096231
mov ecx, dword [ebp - 0x208]
lea eax, [ebp - 0x54]
push eax
call fcn.1008fd10
cmp dword [ebp - 0x40], 0x10
lea eax, [ebp - 0x1f4]
lea esi, [ebp - 0x54]
cmovae esi, dword [ebp - 0x54]
lea ecx, [ebp - 0x54]
push eax
call fcn.100380d0
cmp dword [ebp - 0x40], 0x10
lea ecx, [ebp - 0x54]
cmovae ecx, dword [ebp - 0x54]
mov byte [ebp - 4], 0x70
push dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov edx, dword [eax]
push esi
push dword [ebp - 0x1f4]
call fcn.10099140
mov edi, dword [ebp - 0x1e8]
add esp, 0xc
mov byte [ebp - 4], 0x6f
mov ax, word [0x100c045e]
movzx ebx, ah
movzx edx, al
mov eax, dword [0x100c045c]
mov ecx, eax
mov byte [ebp - 0x15], bl
mov ebx, dword [ebp - 0x1dc]
shr ecx, 8
movzx ecx, cl
movzx eax, al
movd xmm3, ebx
cvtdq2ps xmm3, xmm3
mov byte [ebp - 0x17], cl
lea ecx, [ebp - 0x1ec]
mov byte [ebp - 0x16], dl
mov edx, edi
mov byte [ebp - 0x18], al
push dword [ebp - 0x18]
call fcn.100942c0
movzx ecx, byte [0x100c045f]
add esp, 4
movd xmm2, ecx
lea ecx, [ebp - 0x1f4]
cvtdq2ps xmm2, xmm2
push ecx
mov ecx, eax
call fcn.100319b0
mov esi, dword [ebp - 0x1e4]
lea ecx, [ebp - 0x54]
push 2
push ecx
push dword [eax]
mov eax, dword [ebp - 0x28]
mov ecx, 0x101147e4
add eax, esi
add eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
cdq
sub eax, edx
sar eax, 1
add eax, dword [ebp - 0x2c]
push eax
call fcn.1008b450
add esi, dword [0x101147ec]
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x1e4], esi
mov byte [ebp - 4], 1
call fcn.10021100
jmp 0x1009623d
mov ebx, dword [ebp - 0x1dc]
mov edi, dword [ebp - 0x1e8]
cmp byte [0x100c04fc], 0
je 0x100962fc
mov eax, dword [0x10112320]
mov ecx, 0x10115860
mov edx, dword [ebp - 0x208]
add eax, 0xffffff9d
xor eax, 0x7e881241
push dword [edx + eax]
lea eax, [ebp - 0x220]
push eax
call fcn.100941f0
mov esi, eax
mov byte [ebp - 4], 0x71
mov edx, edi
mov ecx, dword [0x100c065c]
mov byte [ebp - 0x18], cl
shr ecx, 8
mov byte [ebp - 0x17], cl
mov cx, word [0x100c065e]
movd xmm3, ebx
cvtdq2ps xmm3, xmm3
mov byte [ebp - 0x16], cl
mov byte [ebp - 0x15], ch
lea ecx, [ebp - 0x1f4]
push dword [ebp - 0x18]
call fcn.100942c0
movzx ecx, byte [0x100c065f]
add esp, 4
movd xmm2, ecx
lea ecx, [ebp - 0x1ec]
cvtdq2ps xmm2, xmm2
push ecx
mov ecx, eax
call fcn.100319b0
push 2
push esi
mov ecx, 0x10114820
push dword [eax]
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x1e4]
add eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
cdq
sub eax, edx
sar eax, 1
add eax, dword [ebp - 0x2c]
push eax
call fcn.1008b450
lea ecx, [ebp - 0x220]
call fcn.10021100
lea ecx, [ebp - 0x78]
call fcn.10021100
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1009b337
mov esp, ebp
pop ebp
ret 4