Function at 0x10028770
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0xbc
mov eax, dword [esp + 0xd4]
mov esi, dword [esp + 0xe0]
mov edi, dword [esp + 0xd0]
mov edx, dword [esp + 0xec]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 0x20], esi
mov esi, dword [esp + 0xe4]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 0x30], esi
mov esi, dword [esp + 0xe8]
mov ecx, eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x1c], esi
mov esi, dword [eax]
mov dword [esp + 0x3c], edi
mov eax, esi
mov dword [esp + 0x28], edx
and eax, 0xffffffcf
mov dword [ecx], eax
mov eax, esi
and eax, 7
cmp eax, 3
je 0x10028a98
mov ecx, esi
and ecx, 4
mov dword [esp + 0x44], ecx
jne 0x10028a10
test eax, eax
je 0x10028a60
mov edi, dword [edi]
xor edx, edx
mov eax, 0x20
cmp edi, 0x20
jle 0x10028819
add eax, eax
add edx, 1
cmp edi, eax
jg 0x10028810
mov dword [esp], edx
lea ebx, [edi - 1]
sar ebx, 5
call fcn.10024540
mov dword [esp + 0x48], ebx
mov ebp, eax
mov eax, dword [esp + 0x2c]
lea edx, [ebp + 0x14]
lea ecx, [eax + ebx*4]
lea esi, [esi]
nop
mov ebx, dword [eax]
add eax, 4
add edx, 4
mov dword [edx - 4], ebx
cmp ecx, eax
jae 0x10028840
mov eax, dword [esp + 0x2c]
mov ebx, dword [esp + 0x48]
add ecx, 1
add eax, 1
lea ebx, [ebx*4 + 4]
cmp ecx, eax
mov eax, 4
cmovb ebx, eax
sar ebx, 2
jmp 0x10028880
test ebx, ebx
je 0x10028ad8
mov eax, ebx
sub ebx, 1
mov edx, dword [ebp + ebx*4 + 0x14]
test edx, edx
je 0x10028878
bsr edx, dword [ebp + ebx*4 + 0x14]
mov dword [ebp + 0x10], eax
shl eax, 5
xor edx, 0x1f
sub eax, edx
mov ebx, eax
mov dword [esp], ebp
call fcn.10020910
mov ecx, dword [esp + 0x38]
mov dword [esp + 0xac], eax
mov dword [esp + 0x6c], ecx
test eax, eax
jne 0x10028ae8
mov ecx, dword [ebp + 0x10]
test ecx, ecx
je 0x10028a58
lea eax, [esp + 0xac]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.10024f20
mov ecx, dword [esp + 0x6c]
fstp qword [esp + 0x48]
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x48]
add ecx, ebx
mov dword [esp + 0x58], ecx
and edx, 0xfffff
mov dword [esp + 0x70], ecx
sub ecx, 1
or edx, 0x3ff00000
mov dword [esp + 0x50], ecx
mov dword [esp + 0x60], ecx
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x48], eax
mov eax, 1
sub eax, ecx
mov dword [esp + 0x4c], edx
mov ecx, dword [esp + 0x50]
fld qword [esp + 0x48]
fsub dword [0x10039650]
fmul qword [str.aCoc]
test ecx, ecx
fadd qword [0x10039660]
cmovns eax, ecx
fild dword [esp + 0x60]
fmul qword [0x10039668]
sub eax, 0x435
faddp st(1)
test eax, eax
jle 0x10028964
mov dword [esp + 0x58], eax
fild dword [esp + 0x58]
fmul qword [0x10039670]
faddp st(1)
fst qword [esp + 0x58]
cvttsd2si eax, qword [esp + 0x58]
fldz
fcompi st(1)
mov dword [esp + 0x58], eax
ja 0x10028e88
fstp st(0)
mov ecx, dword [esp + 0x50]
mov eax, ecx
shl eax, 0x14
add eax, edx
mov dword [esp + 0x4c], eax
mov eax, ebx
sub eax, ecx
mov ecx, dword [esp + 0x58]
lea edx, [eax - 1]
mov dword [esp + 0x68], edx
cmp ecx, 0x16
ja 0x10028b10
fld qword [ecx*8 + 0x1003b760]
fst qword [esp + 0x50]
fld qword [esp + 0x48]
fxch st(1)
fcompi st(1)
fstp st(0)
ja 0x10028f18
mov dword [esp + 0x84], 0
mov dword [esp + 0x74], 0
test eax, eax
jg 0x100289f0
mov edx, 1
mov dword [esp + 0x68], 0
sub edx, eax
mov dword [esp + 0x74], edx
lea esi, [esi]
mov dword [esp + 0x80], 0
mov edx, dword [esp + 0x58]
add dword [esp + 0x68], edx
mov dword [esp + 0x78], edx
jmp 0x10028b69
xor ebx, ebx
cmp eax, 4
jne 0x10028a88
mov eax, dword [esp + 0x1c]
mov dword [eax], 0xffff8000
mov eax, dword [esp + 0x28]
mov dword [esp + 0xd8], 3
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd0], 0x10039649
add esp, 0xbc
pop ebx
pop esi
pop edi
pop ebp
jmp 0x1002b590
mov dword [esp], ebp
call fcn.10024620
mov eax, dword [esp + 0x1c]
mov dword [eax], 1
mov eax, dword [esp + 0x28]
mov dword [esp + 8], 1
mov dword [esp + 4], eax
mov dword [esp], 0x1003964d
call 0x1002b590
mov ebx, eax
add esp, 0xbc
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [esp + 0x1c]
mov dword [eax], 0xffff8000
mov eax, dword [esp + 0x28]
mov dword [esp + 0xd8], 8
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd0], str.Infinity
add esp, 0xbc
pop ebx
pop esi
pop edi
pop ebp
jmp 0x1002b590
mov dword [ebp + 0x10], 0
jmp 0x1002889f
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.100207e0
mov eax, dword [esp + 0xac]
mov ecx, dword [esp + 0x38]
add ecx, eax
sub ebx, eax
mov dword [esp + 0x6c], ecx
jmp 0x100288be
mov dword [esp + 0x84], 1
mov edx, dword [esp + 0x68]
mov dword [esp + 0x74], 0
test edx, edx
jns 0x10028b3e
mov edx, 1
mov dword [esp + 0x68], 0
sub edx, eax
mov dword [esp + 0x74], edx
mov eax, dword [esp + 0x58]
test eax, eax
jns 0x100289f0
mov eax, dword [esp + 0x58]
sub dword [esp + 0x74], eax
mov dword [esp + 0x58], 0
mov edx, eax
mov dword [esp + 0x78], eax
neg edx
mov dword [esp + 0x80], edx
mov eax, dword [esp + 0x20]
cmp eax, 9
ja 0x10028df0
cmp eax, 5
jg 0x10028ea8
mov eax, dword [esp + 0x70]
add eax, 0x3fd
cmp eax, 0x7f7
setbe al
movzx eax, al
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x20]
cmp eax, 4
je 0x100298d9
cmp eax, 5
je 0x10029780
cmp eax, 2
jne 0x100292a0
mov dword [esp + 0x7c], 0
mov edx, dword [esp + 0x30]
mov eax, 1
test edx, edx
cmovg eax, edx
mov dword [esp + 0x90], eax
mov edx, eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x30], eax
mov dword [esp], eax
mov dword [esp + 0xac], edx
call fcn.1002b550
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x3c]
mov eax, dword [eax + 0xc]
sub eax, 1
mov dword [esp + 0x60], eax
je 0x10028c2b
mov edx, dword [esp + 0x60]
mov eax, 2
test edx, edx
cmovns eax, edx
and esi, 8
mov dword [esp + 0x60], eax
mov edx, eax
je 0x100290a8
mov eax, 3
sub eax, edx
mov dword [esp + 0x60], eax
mov esi, dword [esp + 0x50]
cmp esi, 0xe
setbe al
and al, byte [esp + 0x88]
mov ecx, eax
je 0x100290a8
mov eax, dword [esp + 0x78]
or eax, dword [esp + 0x60]
jne 0x100290a8
movsd xmm0, qword [esp + 0x48]
mov eax, dword [esp + 0x84]
mov dword [esp + 0xac], 0
movsd qword [esp + 0x60], xmm0
test eax, eax
je 0x10028c84
fld qword [esp + 0x60]
fld1
fcompi st(1)
ja 0x10029b64
fstp st(0)
fld qword [esp + 0x60]
fadd st(0)
fadd dword [0x1003968c]
fstp qword [esp + 0x88]
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x8c]
mov dword [esp + 0x88], eax
mov eax, edx
sub eax, 0x3400000
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x50]
test eax, eax
je 0x10029056
movsd xmm1, qword [esp + 0x60]
mov esi, dword [esp + 0x50]
mov dword [esp + 0x94], 0
movsd qword [esp + 0x98], xmm1
mov eax, dword [esp + 0x7c]
fld qword [esp + 0x88]
fld qword [esi*8 + 0x1003b758]
test eax, eax
je 0x100292dd
fdivr dword [0x10039694]
mov ecx, dword [esp + 0x70]
cvttsd2si eax, qword [esp + 0x98]
lea edx, [ecx + 1]
mov dword [esp + 0x48], eax
add eax, 0x30
mov byte [ecx], al
fsubrp st(1)
fild dword [esp + 0x48]
fsubr qword [esp + 0x98]
fxch st(1)
fcomi st(1)
jbe 0x10028d8c
fstp st(0)
jmp 0x10029d59
mov eax, dword [esp + 0xac]
add eax, 1
mov dword [esp + 0xac], eax
cmp eax, esi
jge 0x10029081
fld dword [0x10039684]
add edx, 1
fmul st(1), st(0)
fmulp st(2)
fxch st(1)
fst qword [esp + 0x48]
cvttsd2si eax, qword [esp + 0x48]
mov dword [esp + 0x48], eax
fild dword [esp + 0x48]
add eax, 0x30
mov byte [edx - 1], al
fsubp st(1)
fxch st(1)
fcomi st(1)
ja 0x10029d57
fld st(1)
fsubr dword [0x10039680]
fxch st(1)
fcomi st(1)
fstp st(1)
jbe 0x10028d40
fstp st(0)
fstp st(0)
movzx ecx, byte [edx - 1]
mov ebx, dword [esp + 0x70]
jmp 0x10028dbe
cmp ebx, eax
je 0x10029c81
movzx ecx, byte [eax - 1]
mov edx, eax
lea eax, [edx - 1]
cmp cl, 0x39
je 0x10028db0
mov dword [esp + 0x70], edx
add ecx, 1
mov byte [eax], cl
mov eax, dword [esp + 0x94]
mov dword [esp + 0x44], 0x20
add eax, 1
mov dword [esp + 0x68], eax
jmp 0x10028fed
mov eax, dword [esp + 0x70]
mov dword [esp + 0x20], 0
add eax, 0x3fd
cmp eax, 0x7f7
setbe al
movzx eax, al
mov dword [esp + 0x88], eax
mov dword [esp + 0x30], edi
fild dword [esp + 0x30]
fmul qword [0x10039678]
fstp qword [esp + 0x30]
cvttsd2si eax, qword [esp + 0x30]
add eax, 3
mov dword [esp], eax
mov dword [esp + 0xac], eax
call fcn.1002b550
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x3c]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x30], eax
sub eax, 1
mov dword [esp + 0x60], eax
je 0x10028f2d
mov dword [esp + 0x30], 0
mov dword [esp + 0x7c], 1
mov dword [esp + 0x90], 0xffffffff
mov dword [esp + 0x50], 0xffffffff
jmp 0x10028c03
fild dword [esp + 0x58]
fucompi st(1)
fstp st(0)
jp 0x10028e98
je 0x1002897e
sub dword [esp + 0x58], 1
jmp 0x1002897e
mov dword [esp + 0x88], 0
sub eax, 4
mov dword [esp + 0x20], eax
cmp eax, 4
je 0x100298d9
cmp eax, 5
je 0x10029780
mov dword [esp + 0x7c], 0
cmp eax, 2
je 0x10028bc1
mov dword [esp + 0x20], 3
lea esi, [esi]
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x30]
mov edx, 1
add eax, ecx
mov dword [esp + 0x90], eax
add eax, 1
test eax, eax
mov dword [esp + 0x50], eax
cmovg edx, eax
mov eax, edx
jmp 0x10028be0
sub dword [esp + 0x58], 1
mov dword [esp + 0x84], 0
jmp 0x10028b1b
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x30], 0
mov dword [esp + 0x50], 0xffffffff
test eax, eax
js 0x10029d20
mov dword [esp + 0x7c], 1
mov dword [esp + 0x90], 0xffffffff
lea esi, [esi]
mov eax, dword [esp + 0x3c]
mov esi, dword [esp + 0x78]
cmp esi, dword [eax + 0x14]
jg 0x100290b4
mov eax, dword [esp + 0x78]
mov edx, dword [esp + 0x30]
fld qword [eax*8 + 0x1003b760]
test edx, edx
jns 0x1002980f
mov edi, dword [esp + 0x50]
test edi, edi
jg 0x1002980f
jne 0x100292b6
fmul dword [0x10039690]
fld qword [esp + 0x48]
fxch st(1)
fcompi st(1)
fstp st(0)
jae 0x100292b8
add eax, 2
mov dword [esp + 0x48], 0
mov ebx, dword [esp + 0x70]
xor esi, esi
mov dword [esp + 0x68], eax
add dword [esp + 0x70], 1
mov byte [ebx], 0x31
mov dword [esp + 0x44], 0x20
mov eax, dword [esp + 0x48]
mov dword [esp], eax
call fcn.10024620
test esi, esi
je 0x10028fed
mov dword [esp], esi
call fcn.10024620
mov dword [esp], ebp
call fcn.10024620
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x70]
mov edi, dword [esp + 0x68]
mov byte [eax], 0
mov dword [esi], edi
mov esi, dword [esp + 0x28]
test esi, esi
je 0x10029010
mov dword [esi], eax
mov eax, dword [esp + 0x40]
mov esi, dword [esp + 0x44]
or dword [eax], esi
add esp, 0xbc
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
fstp st(0)
fld qword [esp + 0x60]
fadd st(0)
fadd dword [0x1003968c]
fstp qword [esp + 0x48]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
mov dword [esp + 0x88], eax
mov eax, edx
sub eax, 0x3400000
mov dword [esp + 0x8c], eax
fld qword [esp + 0x60]
fsub dword [0x10039690]
fld qword [esp + 0x88]
fxch st(1)
fcomi st(1)
ja 0x10029c2a
fxch st(1)
fchs
fcompi st(1)
fstp st(0)
ja 0x100292b8
jmp 0x10029089
fstp st(0)
fstp st(0)
jmp 0x10029089
fstp st(0)
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x64]
mov dword [esp + 0x60], 0
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], edx
lea esi, [esi]
mov ecx, dword [esp + 0x6c]
test ecx, ecx
jns 0x10028f60
mov eax, dword [esp + 0x7c]
test eax, eax
je 0x100293b0
mov esi, dword [esp + 0x3c]
sub edi, ebx
lea eax, [edi + 1]
mov edx, dword [esi + 4]
mov esi, dword [esp + 0x6c]
mov dword [esp + 0xac], eax
mov ecx, esi
sub ecx, edi
cmp ecx, edx
jge 0x100297c8
mov edi, dword [esp + 0x20]
lea eax, [edi - 3]
and eax, 0xfffffffd
je 0x100297d3
mov eax, esi
mov esi, dword [esp + 0x50]
sub eax, edx
add eax, 1
cmp edi, 1
setg cl
test esi, esi
mov dword [esp + 0xac], eax
setg dl
test cl, dl
je 0x1002911c
cmp eax, esi
jg 0x10029e8e
mov esi, dword [esp + 0x74]
add dword [esp + 0x68], eax
mov edx, dword [esp + 0x80]
add eax, esi
mov edi, esi
mov dword [esp + 0x74], eax
mov dword [esp], 1
mov dword [esp + 0x48], edx
call fcn.10024770
mov dword [esp + 0x7c], 1
mov edx, dword [esp + 0x48]
mov esi, eax
test edi, edi
jle 0x10029177
mov ecx, dword [esp + 0x68]
test ecx, ecx
jle 0x10029177
cmp edi, ecx
mov eax, ecx
cmovle eax, edi
sub dword [esp + 0x74], eax
sub ecx, eax
mov dword [esp + 0xac], eax
sub edi, eax
mov dword [esp + 0x68], ecx
mov eax, dword [esp + 0x80]
test eax, eax
je 0x100291a7
mov eax, dword [esp + 0x7c]
test eax, eax
je 0x10029192
test edx, edx
jne 0x100299a9
mov eax, dword [esp + 0x80]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.100249c0
mov ebp, eax
mov dword [esp], 1
call fcn.10024770
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x58]
test eax, eax
jne 0x10029740
cmp dword [esp + 0x20], 1
jle 0x10029790
mov ebx, 0x1f
mov eax, dword [esp + 0x68]
mov edx, dword [esp + 0x74]
sub ebx, eax
sub ebx, 4
and ebx, 0x1f
add edx, ebx
mov dword [esp + 0xac], ebx
mov eax, ebx
test edx, edx
jle 0x10029207
mov dword [esp], ebp
mov dword [esp + 4], edx
call fcn.10024b40
mov ebp, eax
mov eax, dword [esp + 0xac]
mov edx, dword [esp + 0x68]
add edx, eax
test edx, edx
jle 0x10029225
mov eax, dword [esp + 0x48]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.10024b40
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x84]
cmp dword [esp + 0x20], 2
setg dl
test eax, eax
jne 0x10029600
mov eax, dword [esp + 0x50]
test eax, eax
jg 0x100293c8
test dl, dl
je 0x100293c8
mov eax, dword [esp + 0x50]
test eax, eax
jne 0x100292c2
mov eax, dword [esp + 0x48]
mov dword [esp + 8], 0
mov dword [esp + 4], 5
mov dword [esp], eax
call fcn.10024690
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 0x48], eax
call fcn.10024c80
test eax, eax
jle 0x100292c2
mov eax, dword [esp + 0x78]
mov ebx, dword [esp + 0x70]
add eax, 2
mov dword [esp + 0x68], eax
jmp 0x10028fc5
cmp eax, 3
jne 0x10028e13
mov dword [esp + 0x7c], 0
jmp 0x10028ee8
fstp st(0)
mov dword [esp + 0x48], 0
xor esi, esi
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x70]
mov dword [esp + 0x44], 0x10
neg eax
mov dword [esp + 0x68], eax
jmp 0x10028fd5
fmulp st(1)
fld qword [esp + 0x48]
mov dword [esp + 0x88], ebp
xor edi, edi
mov dword [esp + 0xac], 1
mov edx, dword [esp + 0x70]
mov ebp, ecx
fld st(0)
jmp 0x1002931a
add eax, 1
fmul dword [0x10039684]
mov edi, ebp
mov dword [esp + 0xac], eax
fst qword [esp + 0x48]
cvttsd2si ecx, qword [esp + 0x48]
test ecx, ecx
je 0x10029334
mov dword [esp + 0x48], ecx
fild dword [esp + 0x48]
mov edi, ebp
fsubp st(1)
add edx, 1
add ecx, 0x30
mov byte [edx - 1], cl
mov eax, dword [esp + 0xac]
cmp eax, esi
jne 0x10029308
mov eax, edi
mov ebp, dword [esp + 0x88]
test al, al
fcmove st(0), st(1)
fstp st(1)
fld dword [0x10039694]
fld st(2)
fadd st(1)
fxch st(2)
fcomi st(2)
fstp st(2)
ja 0x10029d48
fsubrp st(2)
fxch st(1)
fcompi st(1)
ja 0x10029e53
fstp st(0)
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x64]
mov edi, dword [esp + 0x6c]
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], edx
test edi, edi
js 0x10029eeb
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x60], 0
mov esi, dword [eax + 0x14]
test esi, esi
jns 0x10028f71
nop
mov edx, dword [esp + 0x80]
mov edi, dword [esp + 0x74]
xor esi, esi
jmp 0x10029151
mov eax, dword [esp + 0x78]
add eax, 1
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x7c]
test eax, eax
je 0x10029680
add ebx, edi
test ebx, ebx
jle 0x100293f3
mov dword [esp], esi
mov dword [esp + 4], ebx
call fcn.10024b40
mov esi, eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x38], esi
test eax, eax
jne 0x10029be4
mov eax, dword [esp + 0x70]
mov dword [esp + 0x30], eax
mov eax, 1
jmp 0x100294df
mov dword [esp], edx
call fcn.10024620
mov eax, 1
test ebx, ebx
js 0x10029a50
or ebx, dword [esp + 0x20]
jne 0x10029440
mov ecx, dword [esp + 0x2c]
test byte [ecx], 1
je 0x10029a50
mov edx, dword [esp + 0x30]
lea edi, [edx + 1]
mov ebx, edi
test eax, eax
jle 0x10029458
cmp dword [esp + 0x60], 2
jne 0x10029c49
movzx eax, byte [esp + 0x3c]
mov byte [edi - 1], al
mov eax, dword [esp + 0x50]
cmp dword [esp + 0xac], eax
je 0x10029c72
mov dword [esp], ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
call fcn.10024690
mov dword [esp + 8], 0
mov ebp, eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], 0xa
mov dword [esp], esi
cmp esi, eax
je 0x100295f0
call fcn.10024690
mov dword [esp + 8], 0
mov esi, eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], 0xa
mov dword [esp], eax
call fcn.10024690
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x30], edi
add eax, 1
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x48]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.1002b640
mov dword [esp + 4], esi
mov dword [esp], ebp
lea ecx, [eax + 0x30]
mov edi, eax
mov dword [esp + 0x3c], ecx
call fcn.10024c80
mov edx, dword [esp + 0x38]
mov ebx, eax
mov eax, dword [esp + 0x48]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.10024cd0
mov edx, eax
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x10029418
mov dword [esp + 4], edx
mov dword [esp], ebp
mov dword [esp + 0x6c], edx
call fcn.10024c80
mov edx, dword [esp + 0x6c]
mov dword [esp + 0x58], eax
mov dword [esp], edx
call fcn.10024620
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x20]
or eax, ecx
jne 0x100298d0
mov edx, dword [esp + 0x2c]
mov ecx, dword [edx]
mov edx, ecx
mov dword [esp + 0x58], ecx
and edx, 1
or edx, dword [esp + 0x60]
jne 0x10029425
mov ecx, dword [esp + 0x3c]
cmp ecx, 0x39
je 0x10029d01
test ebx, ebx
jle 0x10029f72
mov dword [esp + 0x44], 0x20
lea ecx, [edi + 0x31]
mov eax, dword [esp + 0x30]
mov edx, esi
mov esi, dword [esp + 0x38]
mov byte [eax], cl
lea edi, [eax + 1]
lea esi, [esi]
lea esi, [esi]
mov eax, dword [esp + 0x48]
mov dword [esp + 0x20], edx
mov dword [esp], eax
call fcn.10024620
test esi, esi
je 0x10029917
mov edx, dword [esp + 0x20]
test edx, edx
je 0x100295dc
cmp edx, esi
je 0x100295dc
mov dword [esp], edx
call fcn.10024620
mov ebx, dword [esp + 0x70]
mov dword [esp + 0x70], edi
jmp 0x10028fe5
call fcn.10024690
mov dword [esp + 0x38], eax
mov esi, eax
jmp 0x100294d1
mov eax, dword [esp + 0x48]
mov dword [esp], ebp
mov byte [esp + 0x38], dl
mov dword [esp + 4], eax
call fcn.10024c80
movzx edx, byte [esp + 0x38]
test eax, eax
jns 0x1002923c
mov dword [esp], ebp
mov eax, dword [esp + 0x78]
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
sub eax, 1
mov dword [esp + 0x3c], eax
call fcn.10024690
mov edx, dword [esp + 0x90]
mov ecx, dword [esp + 0x7c]
mov ebp, eax
test edx, edx
movzx edx, byte [esp + 0x38]
setle al
and edx, eax
test ecx, ecx
jne 0x10029df2
test dl, dl
jne 0x10029d30
mov eax, dword [esp + 0x78]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x50], eax
mov dword [esp + 0x20], esi
mov ebx, dword [esp + 0x70]
mov eax, 1
mov edi, dword [esp + 0x48]
mov esi, dword [esp + 0x50]
jmp 0x100296c4
mov dword [esp], ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
call fcn.10024690
mov ebp, eax
mov eax, dword [esp + 0xac]
add eax, 1
mov dword [esp + 4], edi
add ebx, 1
mov dword [esp], ebp
mov dword [esp + 0xac], eax
call fcn.1002b640
add eax, 0x30
mov byte [ebx - 1], al
cmp dword [esp + 0xac], esi
jl 0x100296a0
mov esi, dword [esp + 0x20]
mov ecx, eax
xor edx, edx
mov edi, dword [esp + 0x60]
test edi, edi
je 0x100299ed
mov eax, dword [ebp + 0x10]
cmp edi, 2
je 0x10029a32
cmp eax, 1
jg 0x100298e6
mov eax, dword [ebp + 0x14]
test eax, eax
jne 0x100298e6
test eax, eax
setne al
movzx eax, al
shl eax, 4
mov dword [esp + 0x44], eax
lea esi, [esi]
mov edi, ebx
sub ebx, 1
cmp byte [ebx], 0x30
je 0x10029730
jmp 0x100295b0
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x48]
mov dword [esp], eax
call fcn.100249c0
cmp dword [esp + 0x20], 1
mov dword [esp + 0x48], eax
jle 0x1002995c
mov dword [esp + 0x58], 0
mov ebx, dword [esp + 0x48]
mov eax, dword [ebx + 0x10]
bsr ebx, dword [ebx + eax*4 + 0x10]
xor ebx, 0x1f
jmp 0x100291d3
mov dword [esp + 0x7c], 1
jmp 0x10028ee8
cmp ebx, 1
jne 0x100291ce
mov eax, dword [esp + 0x3c]
mov eax, dword [eax + 4]
add eax, 1
cmp dword [esp + 0x38], eax
jle 0x100291ce
add dword [esp + 0x74], 1
add dword [esp + 0x68], 1
mov dword [esp + 0x58], 1
jmp 0x100291ce
cmp dword [esp + 0x20], 1
jle 0x1002911c
mov edi, dword [esp + 0x50]
mov esi, dword [esp + 0x80]
lea eax, [edi - 1]
cmp esi, eax
jl 0x10029924
mov edx, esi
sub edx, eax
test edi, edi
jns 0x10029e35
mov edi, dword [esp + 0x74]
mov eax, dword [esp + 0x50]
mov dword [esp + 0xac], 0
sub edi, eax
jmp 0x10029133
fld qword [esp + 0x48]
mov esi, dword [esp + 0x70]
mov dword [esp + 0xac], 1
lea edx, [esi + 1]
fld st(0)
fdiv st(2)
fstp qword [esp + 0x20]
cvttsd2si eax, qword [esp + 0x20]
mov dword [esp + 0x20], eax
fild dword [esp + 0x20]
lea ecx, [eax + 0x30]
mov byte [esi], cl
mov esi, dword [esp + 0x78]
fmul st(2)
add esi, 1
mov dword [esp + 0x68], esi
fsubp st(1)
fldz
fxch st(1)
fucomi st(1)
fstp st(1)
jp 0x10029878
lea esi, [esi]
jne 0x10029878
fstp st(0)
fstp st(0)
mov ebx, dword [esp + 0x70]
mov dword [esp + 0x70], edx
jmp 0x10028fed
mov ecx, dword [esp + 0xac]
mov esi, dword [esp + 0x50]
cmp ecx, esi
je 0x10029b36
fmul dword [0x10039684]
add ecx, 1
add edx, 1
mov dword [esp + 0xac], ecx
fld st(0)
fdiv st(2)
fstp qword [esp + 0x20]
cvttsd2si eax, qword [esp + 0x20]
mov dword [esp + 0x20], eax
fild dword [esp + 0x20]
lea ecx, [eax + 0x30]
mov byte [edx - 1], cl
fmul st(2)
fsubp st(1)
fldz
fxch st(1)
fucomi st(1)
fstp st(1)
jnp 0x10029860
jmp 0x10029878
mov eax, dword [esp + 0x58]
jmp 0x10029425
mov dword [esp + 0x7c], 1
jmp 0x10028bc1
mov ecx, dword [esp + 0x70]
jmp 0x100298f8
cmp ecx, ebx
je 0x10029990
mov edi, ebx
lea ebx, [ebx - 1]
movzx eax, byte [edi - 1]
cmp al, 0x39
je 0x100298f0
add eax, 1
mov dword [esp + 0x44], 0x20
mov byte [ebx], al
jmp 0x100295b0
mov ebx, dword [esp + 0x70]
mov dword [esp + 0x70], edi
jmp 0x10028fed
mov esi, dword [esp + 0x50]
mov ecx, dword [esp + 0x74]
mov edx, eax
mov edi, dword [esp + 0x80]
add dword [esp + 0x68], esi
mov dword [esp + 0xac], esi
add esi, ecx
sub edx, edi
mov dword [esp + 0x74], esi
mov edi, ecx
add dword [esp + 0x58], edx
xor edx, edx
mov dword [esp + 0x80], eax
jmp 0x10029133
cmp ebx, 1
jne 0x10029763
mov eax, dword [esp + 0x3c]
mov eax, dword [eax + 4]
add eax, 1
cmp dword [esp + 0x38], eax
jle 0x10029763
add dword [esp + 0x74], 1
add dword [esp + 0x68], 1
mov dword [esp + 0x58], 1
jmp 0x1002976b
mov eax, dword [esp + 0x70]
add dword [esp + 0x68], 1
mov dword [esp + 0x44], 0x20
mov byte [eax], 0x31
jmp 0x100295b0
mov dword [esp + 4], edx
mov dword [esp], esi
mov dword [esp + 0x6c], edx
call fcn.100249c0
mov dword [esp + 4], ebp
mov dword [esp], eax
mov esi, eax
call fcn.10024820
mov dword [esp], ebp
mov dword [esp + 0x48], eax
call fcn.10024620
mov edx, dword [esp + 0x6c]
sub dword [esp + 0x80], edx
mov ebp, dword [esp + 0x48]
je 0x100291a7
jmp 0x10029192
mov dword [esp], ebp
mov dword [esp + 4], 1
mov dword [esp + 0x20], edx
mov dword [esp + 0x2c], ecx
call fcn.10024b40
mov ebp, eax
mov eax, dword [esp + 0x48]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.10024c80
mov edx, dword [esp + 0x20]
test eax, eax
jg 0x100298e6
jne 0x10029a32
mov ecx, dword [esp + 0x2c]
and ecx, 1
jne 0x100298e6
cmp dword [ebp + 0x10], 1
mov dword [esp + 0x44], 0x10
jg 0x10029730
mov eax, dword [ebp + 0x14]
jmp 0x1002971d
mov ebx, dword [esp + 0x60]
mov ecx, dword [esp + 0x3c]
test ebx, ebx
je 0x10029c97
cmp dword [ebp + 0x10], 1
jle 0x10029ec6
cmp dword [esp + 0x60], 2
je 0x10029ce7
mov ebx, dword [esp + 0x38]
mov edi, dword [esp + 0x30]
mov dword [esp + 0x20], ecx
jmp 0x10029aee
movzx eax, byte [esp + 0x20]
mov dword [esp + 0x38], ecx
mov byte [ecx - 1], al
mov dword [esp], ebx
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
call fcn.10024690
mov dword [esp], ebp
cmp esi, ebx
mov dword [esp + 8], 0
cmove esi, eax
mov dword [esp + 4], 0xa
mov dword [esp + 0x2c], eax
call fcn.10024690
mov ebp, eax
mov eax, dword [esp + 0x48]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.1002b640
mov edi, dword [esp + 0x38]
mov ebx, dword [esp + 0x2c]
add eax, 0x30
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.10024c80
lea ecx, [edi + 1]
test eax, eax
jg 0x10029a88
mov dword [esp + 0x30], edi
mov edi, ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x38], ebx
cmp ecx, 0x39
je 0x10029d08
mov dword [esp + 0x44], 0x20
mov edx, esi
add ecx, 1
mov esi, ebx
mov eax, dword [esp + 0x30]
mov byte [eax], cl
jmp 0x100295b0
mov edi, dword [esp + 0x60]
test edi, edi
je 0x10029d8e
fstp st(0)
fstp st(0)
cmp edi, 1
je 0x10029e76
mov ebx, dword [esp + 0x70]
mov dword [esp + 0x44], 0x10
mov dword [esp + 0x70], edx
jmp 0x10028fed
test esi, esi
je 0x10029027
mov esi, dword [esp + 0x90]
test esi, esi
jle 0x10029087
fmul dword [0x10039684]
mov dword [esp + 0x94], 0xffffffff
fst qword [esp + 0x98]
mov eax, dword [esp + 0x98]
mov edx, dword [esp + 0x9c]
fmul dword [0x10039688]
fadd dword [0x1003968c]
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], edx
fstp qword [esp + 0x88]
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x8c]
mov dword [esp + 0x88], eax
mov eax, edx
sub eax, 0x3400000
mov dword [esp + 0x8c], eax
jmp 0x10028ce4
mov eax, dword [esi + 4]
mov dword [esp], eax
call fcn.10024540
lea ecx, [eax + 0xc]
mov ebx, eax
mov eax, dword [esi + 0x10]
mov dword [esp], ecx
lea edx, [eax*4 + 8]
lea eax, [esi + 0xc]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
call sub.msvcrt.dll_memcpy
mov dword [esp + 4], 1
mov dword [esp], ebx
call fcn.10024b40
mov dword [esp + 0x38], eax
jmp 0x10029403
fstp st(0)
fstp st(0)
mov dword [esp + 0x68], 2
mov ebx, dword [esp + 0x70]
xor esi, esi
mov dword [esp + 0x48], 0
jmp 0x10028fc5
mov ecx, dword [esp + 0x3c]
cmp ecx, 0x39
je 0x10029d08
mov eax, dword [esp + 0x30]
add ecx, 1
mov edx, esi
mov dword [esp + 0x44], 0x20
mov esi, dword [esp + 0x38]
mov byte [eax], cl
jmp 0x100295b0
mov edx, esi
mov ecx, dword [esp + 0x3c]
mov esi, dword [esp + 0x38]
jmp 0x100296f1
add dword [esp + 0x94], 1
mov ecx, 0x31
mov dword [esp + 0x70], edx
jmp 0x10028dcd
test eax, eax
jle 0x10029cdd
mov dword [esp], ebp
mov dword [esp + 4], 1
mov dword [esp + 0x20], ecx
call fcn.10024b40
mov ebp, eax
mov eax, dword [esp + 0x48]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.10024c80
mov ecx, dword [esp + 0x20]
test eax, eax
jle 0x10029f42
cmp ecx, 0x39
je 0x10029d01
mov dword [esp + 0x60], 0x20
lea ecx, [edi + 0x31]
cmp dword [ebp + 0x10], 1
jle 0x10029f05
mov edx, esi
mov esi, dword [esp + 0x38]
mov eax, dword [esp + 0x30]
mov dword [esp + 0x44], 0x10
lea edi, [eax + 1]
jmp 0x10029b2b
mov eax, dword [esp + 0x30]
lea edi, [eax + 1]
mov eax, dword [esp + 0x30]
mov edx, esi
mov ecx, dword [esp + 0x70]
mov ebx, edi
mov esi, dword [esp + 0x38]
mov byte [eax], 0x39
jmp 0x100298f8
mov dword [esp + 0x90], 0xffffffff
jmp 0x100290c0
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x50], eax
jmp 0x10029250
fstp st(0)
fstp st(0)
fstp st(0)
mov ebx, dword [esp + 0x70]
jmp 0x10028dbe
fstp st(0)
fldz
xor eax, eax
mov ecx, 1
mov ebx, dword [esp + 0x70]
fucompi st(1)
fstp st(0)
mov dword [esp + 0x70], edx
setp al
cmovne eax, ecx
shl eax, 4
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x94]
add eax, 1
mov dword [esp + 0x68], eax
jmp 0x10028fed
fadd st(0)
movzx ecx, byte [edx - 1]
fcomi st(1)
ja 0x10029f2a
fucompi st(1)
fstp st(0)
mov ebx, dword [esp + 0x70]
jp 0x10029f5a
jne 0x10029f5a
test al, 1
mov eax, dword [esp + 0x78]
mov dword [esp + 0x94], eax
jne 0x10028dbe
mov dword [esp + 0x44], 0x10
lea esi, [esi]
nop
mov eax, edx
lea edx, [edx - 1]
cmp byte [eax - 1], 0x30
je 0x10029dd0
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x94]
add eax, 1
mov dword [esp + 0x68], eax
jmp 0x10028fed
mov dword [esp], esi
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
mov byte [esp + 0x38], dl
call fcn.10024690
movzx edx, byte [esp + 0x38]
mov esi, eax
test dl, dl
jne 0x10029d30
mov eax, dword [esp + 0x78]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x50], eax
jmp 0x100293df
mov esi, dword [esp + 0x74]
mov eax, edi
add dword [esp + 0x68], edi
mov dword [esp + 0xac], edi
add eax, esi
mov edi, esi
mov dword [esp + 0x74], eax
jmp 0x10029133
fldz
xor eax, eax
mov ecx, 1
mov ebx, dword [esp + 0x70]
fucompi st(1)
fstp st(0)
setp al
cmovne eax, ecx
shl eax, 4
mov dword [esp + 0x44], eax
jmp 0x10029dd0
mov eax, dword [esp + 0x78]
movzx ecx, byte [edx - 1]
mov ebx, dword [esp + 0x70]
mov dword [esp + 0x94], eax
jmp 0x10028dbe
mov edi, dword [esp + 0x50]
mov esi, dword [esp + 0x80]
lea eax, [edi - 1]
cmp esi, eax
jl 0x10029924
sub esi, eax
mov eax, edi
add dword [esp + 0x68], edi
mov edx, esi
mov esi, dword [esp + 0x74]
mov dword [esp + 0xac], edi
add eax, esi
mov edi, esi
mov dword [esp + 0x74], eax
jmp 0x10029133
mov edx, dword [ebp + 0x14]
test edx, edx
jne 0x10029a6a
test eax, eax
jg 0x10029c9b
mov eax, dword [esp + 0x30]
mov edx, esi
mov esi, dword [esp + 0x38]
lea edi, [eax + 1]
jmp 0x10029b2b
mov dword [esp + 0x60], 0
mov edx, dword [esp + 0x80]
xor esi, esi
mov edi, dword [esp + 0x74]
jmp 0x10029151
mov ebx, dword [ebp + 0x14]
mov edx, esi
mov esi, dword [esp + 0x38]
test ebx, ebx
jne 0x10029ced
mov eax, dword [esp + 0x60]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x30]
lea edi, [eax + 1]
jmp 0x10029b2b
fstp st(0)
fstp st(0)
mov eax, dword [esp + 0x78]
mov ebx, dword [esp + 0x70]
mov dword [esp + 0x94], eax
jmp 0x10028dbe
jne 0x10029f4d
test cl, 1
jne 0x10029ccd
mov dword [esp + 0x60], 0x20
jmp 0x10029cdd
mov eax, dword [esp + 0x78]
mov dword [esp + 0x44], 0x10
mov dword [esp + 0x94], eax
jmp 0x10029dd0
cmp dword [ebp + 0x10], 1
mov dword [esp + 0x44], 0x10
jg 0x10029597
xor eax, eax
cmp dword [ebp + 0x14], 0
setne al
shl eax, 4
mov dword [esp + 0x44], eax
jmp 0x10029597
push edi
push esi
push ebx
sub esp, 0x10
mov ecx, dword [esp + 0x28]
mov esi, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
cmp ecx, 0x13
jle 0x1002b600
mov eax, 4
xor edi, edi
nop
add eax, eax
add edi, 1
lea edx, [eax + 0xf]
cmp ecx, edx
jg 0x1002b5b0
mov dword [esp], edi
call fcn.10024540
lea edx, [esi + 1]
mov dword [eax], edi
movzx ecx, byte [esi]
lea edi, [eax + 4]
mov byte [eax + 4], cl
mov eax, edi
test cl, cl
je 0x1002b5ef
lea esi, [esi]
nop
movzx ecx, byte [edx]
add eax, 1
add edx, 1
mov byte [eax], cl
test cl, cl
jne 0x1002b5e0
test ebx, ebx
je 0x1002b5f5
mov dword [ebx], eax
add esp, 0x10
mov eax, edi
pop ebx
pop esi
pop edi
ret
xor edi, edi
jmp 0x1002b5bc