Function at 0x10034ac0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x110
mov eax, dword [0x1004c040]
xor eax, esp
mov dword [esp + 0x10c], eax
cmp byte [0x1004d594], 0
mov eax, dword [ebp + 8]
push esi
mov esi, ecx
mov dword [esp + 0x18], eax
mov ecx, dword [ebp + 0xc]
movq xmm0, qword [eax + 0xc]
mov eax, dword [eax + 0x14]
push edi
mov dword [esp + 0x2c], esi
mov dword [esp + 0x34], ecx
movq qword [esp + 0x40], xmm0
mov dword [esp + 0x3c], eax
je 0x10034cb4
mov edx, dword [0x1004d590]
lea ecx, [esp + 0xcc]
call fcn.100349b0
cmp dword [eax + 0x14], 0xf
jbe 0x10034b29
mov eax, dword [eax]
mov ecx, dword [esi + 0x10]
lea edi, [esi + 0x14]
mov dword [esp + 0x18], ecx
mov ecx, dword [esi]
mov dword [esp + 0x14], ecx
lea ecx, [esp + 0xc]
push ecx
push eax
mov dword [esp + 0x14], 0x2b6277
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
add esp, 8
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0
test eax, eax
je 0x10034bac
mov esi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
push eax
push 1
push 4
push edi
call esi
push dword [esp + 0x20]
mov ecx, dword [edi]
push ecx
push 0xc
push dword [esp + 0x34]
lea eax, [ecx - 1]
mov dword [edi], eax
call esi
push dword [esp + 0x30]
mov ecx, dword [edi]
push ecx
push 0x24
push dword [esp + 0x40]
lea eax, [ecx - 1]
mov dword [edi], eax
call esi
push dword [esp + 0x40]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov esi, dword [esp + 0x60]
add esp, 0x34
jmp 0x10034c4f
mov ecx, 0x3f
xor edx, edx
mov al, byte [edx + str.r_7._2]
xor al, cl
inc ecx
mov byte [esp + edx + 0x48], al
and ecx, 0x800000ff
jns 0x10034bd0
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x10
jl 0x10034bb3
mov byte [esp + 0x58], 0
mov ecx, 0x6e
xor edx, edx
mov al, byte [edx + 0x1004659c]
xor al, cl
inc ecx
mov byte [esp + edx + 0x84], al
and ecx, 0x800000ff
jns 0x10034c02
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x14
jl 0x10034be2
push 0
lea eax, [esp + 0x4c]
mov byte [esp + 0x9c], 0
push eax
lea eax, [esp + 0x8c]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xorps xmm0, xmm0
mov dword [esp + 0x94], 0
movups xmmword [esp + 0x84], xmm0
mov byte [esp + 0x98], 0
movups xmmword [esp + 0x48], xmm0
mov byte [esp + 0x58], 0
mov ecx, dword [esp + 0xe0]
cmp ecx, 0xf
jbe 0x10034c8d
mov edx, dword [esp + 0xcc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10034c83
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10034c83
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1003c526
add esp, 8
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0xf
mov byte [esp + 0xcc], 0
mov byte [0x1004d594], 0
jmp 0x10034cb7
lea edi, [esi + 0x14]
cmp byte [0x1004d595], 0
je 0x10034e64
mov edx, dword [0x1004d590]
lea ecx, [esp + 0xe4]
call fcn.100349b0
cmp dword [eax + 0x14], 0xf
jbe 0x10034cde
mov eax, dword [eax]
mov ecx, dword [esi + 0x10]
mov dword [esp + 0x18], ecx
mov ecx, dword [esi]
mov dword [esp + 0x10], ecx
lea ecx, [esp + 0xc]
push ecx
push eax
mov dword [esp + 0x14], 0x2b6272
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
add esp, 8
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], 0
test eax, eax
je 0x10034d5e
push eax
push 1
push 4
push edi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
push dword [esp + 0x24]
mov ecx, dword [edi]
push ecx
push 0xc
push dword [esp + 0x34]
lea eax, [ecx - 1]
mov dword [edi], eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
mov ecx, dword [edi]
lea eax, [ecx - 1]
mov dword [edi], eax
mov edi, dword [esp + 0x34]
push edi
push ecx
push 0x24
push dword [esp + 0x3c]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
push edi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 0x34
jmp 0x10034e01
mov ecx, 0x12
xor edx, edx
mov al, byte [edx + str._bprvmH]
xor al, cl
inc ecx
mov byte [esp + edx + 0x5c], al
and ecx, 0x800000ff
jns 0x10034d82
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x10
jl 0x10034d65
mov byte [esp + 0x6c], 0
mov ecx, 0xa1
xor edx, edx
mov al, byte [edx + 0x100465e4]
xor al, cl
inc ecx
mov byte [esp + edx + 0x9c], al
and ecx, 0x800000ff
jns 0x10034db4
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x14
jl 0x10034d94
push 0
lea eax, [esp + 0x60]
mov byte [esp + 0xb4], 0
push eax
lea eax, [esp + 0xa4]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xorps xmm0, xmm0
mov dword [esp + 0xac], 0
movups xmmword [esp + 0x9c], xmm0
mov byte [esp + 0xb0], 0
movups xmmword [esp + 0x5c], xmm0
mov byte [esp + 0x6c], 0
mov ecx, dword [esp + 0xf8]
cmp ecx, 0xf
jbe 0x10034e3f
mov edx, dword [esp + 0xe4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10034e35
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10034e35
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1003c526
add esp, 8
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0xf
mov byte [esp + 0xe4], 0
mov byte [0x1004d595], 0
cmp byte [0x1004d596], 0
je 0x10035083
mov edx, dword [0x1004d590]
lea ecx, [esp + 0xfc]
call fcn.100349b0
cmp dword [eax + 0x14], 0xf
jbe 0x10034e8b
mov eax, dword [eax]
mov ecx, dword [esi + 0x10]
lea edi, [esi + 0x14]
mov dword [esp + 0x18], ecx
mov ecx, dword [esi + 4]
mov dword [esp + 0x14], ecx
lea ecx, [esp + 0xc]
push ecx
push eax
mov dword [esp + 0x14], 0x2b6272
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
add esp, 8
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0
test eax, eax
je 0x10034f07
push eax
push 1
push 4
push edi
mov edi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
call edi
push dword [esp + 0x20]
push 1
push 0xc
push dword [esp + 0x34]
call edi
push dword [esp + 0x30]
mov ecx, dword [esi + 0x14]
push ecx
push 0x1c
push dword [esp + 0x40]
lea eax, [ecx - 1]
mov dword [esi + 0x14], eax
call edi
push dword [esp + 0x40]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 0x34
jmp 0x10034fb2
mov ecx, 0x5f
xor edx, edx
nop
mov al, byte [edx + 0x10046614]
xor al, cl
inc ecx
mov byte [esp + edx + 0x70], al
and ecx, 0x800000ff
jns 0x10034f2d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x10
jl 0x10034f10
mov byte [esp + 0x80], 0
mov ecx, 0x69
xor edx, edx
mov al, byte [edx + 0x100465fc]
xor al, cl
inc ecx
mov byte [esp + edx + 0xb4], al
and ecx, 0x800000ff
jns 0x10034f62
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x14
jl 0x10034f42
push 0
lea eax, [esp + 0x74]
mov byte [esp + 0xcc], 0
push eax
lea eax, [esp + 0xbc]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xorps xmm0, xmm0
mov dword [esp + 0xc4], 0
movups xmmword [esp + 0xb4], xmm0
mov byte [esp + 0xc8], 0
movups xmmword [esp + 0x70], xmm0
mov byte [esp + 0x80], 0
mov ecx, dword [esp + 0x110]
cmp ecx, 0xf
jbe 0x10034ff0
mov edx, dword [esp + 0xfc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10034fe6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10034fe6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1003c526
add esp, 8
xor edx, edx
mov dword [esp + 0x10c], 0
mov dword [esp + 0x110], 0xf
xor edi, edi
mov byte [esp + 0xfc], 0
mov dword [esp + 0x10], edx
mov eax, dword [esi + 4]
mov ecx, dword [esi]
mov eax, dword [edi + eax]
mov dword [edx + ecx + 0x18], eax
mov eax, dword [esi + 4]
mov ecx, dword [esi]
mov eax, dword [edi + eax + 0xc]
mov dword [edx + ecx + 0x14], eax
mov eax, dword [esi + 4]
mov ecx, dword [esi]
mov eax, dword [edi + eax + 4]
mov dword [edx + ecx + 0xc], eax
mov eax, dword [esi + 4]
mov ecx, dword [esi]
mov eax, dword [edi + eax + 8]
mov dword [edx + ecx + 0x10], eax
mov edx, dword [esi + 4]
mov ecx, dword [esi]
add ecx, dword [esp + 0x10]
mov eax, dword [edi + edx + 0x10]
mov dword [ecx], eax
mov eax, dword [edi + edx + 0x14]
mov dword [ecx + 4], eax
mov eax, dword [edi + edx + 0x18]
add edi, 0x1c
mov edx, dword [esp + 0x10]
add edx, 0x24
mov dword [ecx + 8], eax
mov dword [esp + 0x10], edx
cmp edi, 0x1ab3f00
jl 0x10035016
mov byte [0x1004d596], 0
cmp dword [esi + 0xc], 3
jne 0x10035094
mov byte [esi + 0x20], 1
mov dword [esi + 0x1c], 1
cmp byte [esi + 0x20], 0
je 0x100358d7
cmp dword [esi + 0x1c], 1
jne 0x1003513d
mov ecx, dword [esp + 0x34]
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
movss xmm2, dword [0x10047484]
movss xmm4, dword [eax]
movss xmm3, dword [eax + 4]
mov eax, dword [esi + 0x10]
movss xmm1, dword [eax]
movaps xmm0, xmm1
addss xmm0, xmm2
comiss xmm0, xmm4
jb 0x10035103
subss xmm1, xmm2
comiss xmm4, xmm1
jb 0x10035103
movss xmm1, dword [eax + 4]
movaps xmm0, xmm1
addss xmm0, xmm2
comiss xmm0, xmm3
jb 0x10035103
subss xmm1, xmm2
comiss xmm3, xmm1
jb 0x10035103
mov dword [esi + 0x1c], 2
jmp 0x1003512c
mov eax, dword [0x11dba778]
inc eax
cmp byte [0x11dba77c], 0
mov dword [0x11dba778], eax
je 0x1003511e
mov byte [0x11dba77c], 0
cmp eax, 0x96
jne 0x1003513d
mov dword [esi + 0x1c], 0
mov byte [0x11dba77c], 1
mov dword [0x11dba778], 0
cmp dword [esi + 0x1c], 2
jne 0x100356f8
mov eax, dword fs:[0x2c]
mov edi, dword [0x1004c66c]
mov ecx, dword [eax + edi*4]
mov eax, dword [0x11dbab6c]
cmp eax, dword [ecx + 4]
jle 0x10035186
push 0x11dbab6c
call fcn.1003c5b0
add esp, 4
cmp dword [0x11dbab6c], 0xffffffff
jne 0x10035186
push 0x11dbab6c
call fcn.1003c55f
add esp, 4
mov eax, dword fs:[0x2c]
mov ecx, dword [eax + edi*4]
mov eax, dword [0x11dbab54]
cmp eax, dword [ecx + 4]
jle 0x100351bf
push 0x11dbab54
call fcn.1003c5b0
add esp, 4
cmp dword [0x11dbab54], 0xffffffff
jne 0x100351bf
push 0x11dbab54
call fcn.1003c55f
add esp, 4
mov ecx, dword [0x1004c8e0]
push 0x11dbab70
mov eax, dword [ecx]
mov eax, dword [eax + 0x4c]
call eax
mov eax, dword [esi]
movss xmm6, dword [0x11dbab70]
movss xmm7, dword [0x11dbab74]
movss xmm4, dword [0x10047474]
movss xmm2, dword [eax]
movss xmm1, dword [eax + 4]
subss xmm2, xmm6
movss xmm5, dword [eax + 8]
subss xmm1, xmm7
subss xmm5, dword [0x11dbab78]
movss xmm0, dword [0x100474a0]
comiss xmm2, xmm4
movss dword [0x11dbab5c], xmm2
movss dword [0x11dbab60], xmm1
movss dword [0x11dbab64], xmm5
jbe 0x1003523a
subss xmm2, xmm0
movss dword [0x11dbab5c], xmm2
comiss xmm1, xmm4
jbe 0x1003524b
subss xmm1, xmm0
movss dword [0x11dbab60], xmm1
movss xmm3, dword [0x1004751c]
comiss xmm3, xmm2
jbe 0x10035264
addss xmm2, xmm0
movss dword [0x11dbab5c], xmm2
comiss xmm3, xmm1
jbe 0x10035275
addss xmm1, xmm0
movss dword [0x11dbab60], xmm1
mulss xmm2, dword [0x100472a4]
mulss xmm1, dword [0x100472a4]
mulss xmm5, dword [0x100472a4]
addss xmm2, xmm6
addss xmm1, xmm7
addss xmm5, dword [0x11dbab78]
comiss xmm2, xmm4
movss dword [ebp + 0x10], xmm2
movss dword [ebp + 0x14], xmm1
movss dword [ebp + 0x18], xmm5
jbe 0x100352ba
subss xmm2, xmm0
movss dword [ebp + 0x10], xmm2
comiss xmm1, xmm4
jbe 0x100352c8
subss xmm1, xmm0
movss dword [ebp + 0x14], xmm1
comiss xmm3, xmm2
jbe 0x100352d6
addss xmm2, xmm0
movss dword [ebp + 0x10], xmm2
comiss xmm3, xmm1
jbe 0x100352e4
addss xmm1, xmm0
movss dword [ebp + 0x14], xmm1
mov ecx, dword [0x1004c8e0]
lea edx, [ebp + 0x10]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x50]
call eax
mov ecx, dword [esp + 0x34]
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
mov ecx, dword [esi + 0x10]
movss xmm1, dword [eax + 4]
movss xmm4, dword [ecx + 4]
movss xmm2, dword [eax]
subss xmm4, xmm1
movss xmm0, dword [ecx]
movss dword [esp + 0x30], xmm1
subss xmm0, xmm2
movss xmm1, dword [ecx + 8]
subss xmm1, dword [eax + 8]
movss dword [esp + 0x14], xmm4
movss dword [esp + 0x38], xmm2
movss dword [esp + 0x18], xmm0
movss dword [esp + 0x10], xmm1
cvtps2pd xmm1, xmm0
cvtps2pd xmm0, xmm4
xorps xmm4, xmm4
ucomisd xmm0, xmm4
lahf
test ah, 0x44
jp 0x10035367
ucomisd xmm1, xmm4
lahf
test ah, 0x44
jp 0x10035367
xorps xmm0, xmm0
jmp 0x10035385
call sub.api_ms_win_crt_math_l1_1_0.dll___libm_sse2_atan2
mulsd xmm0, qword [0x100473d0]
xorps xmm4, xmm4
comisd xmm4, xmm0
jbe 0x10035385
addsd xmm0, qword [0x100473e0]
cvtsd2ss xmm0, xmm0
lea ecx, [esp + 0x20]
movss dword [esp + 0xc], xmm0
movss xmm0, dword [esp + 0x18]
movss dword [esp + 0x20], xmm0
movss xmm0, dword [esp + 0x14]
movss dword [esp + 0x24], xmm0
movss xmm0, dword [esp + 0x10]
movss dword [esp + 0x28], xmm0
call fcn.10002a30
xorps xmm1, xmm1
sqrtss xmm1, xmm0
comiss xmm1, dword [0x100473f4]
jbe 0x100353d6
movss xmm3, dword [0x10047484]
jmp 0x10035402
comiss xmm1, dword [0x100473ec]
jbe 0x100353e9
movss xmm3, dword [0x1004745c]
jmp 0x10035402
cvtps2pd xmm0, xmm1
comisd xmm0, xmmword [0x100473c0]
jbe 0x100354a0
movss xmm3, dword [0x10047444]
mov edi, dword [esp + 0x1c]
lea ecx, [esp + 0x20]
movss dword [esp + 0x20], xmm3
mov dword [esp + 0x24], 0
movss xmm0, dword [edi + 0x20]
movss dword [esp + 0x28], xmm0
call fcn.10002a30
movss dword [esp + 0x10], xmm0
cvtps2pd xmm1, xmm3
xorps xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll___libm_sse2_atan2
mulsd xmm0, qword [0x100473d0]
xorps xmm1, xmm1
comisd xmm1, xmm0
jbe 0x10035452
addsd xmm0, qword [0x100473e0]
movss xmm2, dword [ebp + 0x14]
subss xmm2, dword [esp + 0xc]
cvtsd2ss xmm0, xmm0
comiss xmm2, dword [0x10047474]
movaps xmm1, xmm2
movss dword [esp + 0x18], xmm0
mulss xmm1, dword [0x10047264]
movss dword [esp + 0x14], xmm2
movss dword [esp + 0xc], xmm1
ja 0x10035507
movss xmm0, dword [0x1004751c]
comiss xmm0, xmm2
ja 0x10035507
xorps xmm3, xmm3
jmp 0x1003555e
comiss xmm1, dword [0x10047318]
jbe 0x100354b3
movss xmm3, dword [0x10047418]
jmp 0x100354bb
movss xmm3, dword [0x1004740c]
mov edi, dword [esp + 0x1c]
lea ecx, [esp + 0x20]
movss dword [esp + 0x20], xmm3
mov dword [esp + 0x24], 0
movss xmm0, dword [edi + 0x20]
or dword [edi + 0x24], 0x20000
movss dword [esp + 0x28], xmm0
call fcn.10002a30
cvtps2pd xmm1, xmm3
movss dword [esp + 0x10], xmm0
ucomisd xmm1, xmm4
lahf
test ah, 0x44
jp 0x10035431
xorps xmm0, xmm0
jmp 0x10035452
xorps xmm2, xmm2
comiss xmm2, xmm1
jbe 0x1003551c
xorps xmm1, xmmword [0x100475d0]
movss dword [esp + 0xc], xmm1
fld dword [esp + 0xc]
push ecx
fstp dword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
movss xmm2, dword [esp + 0x18]
xorps xmm3, xmm3
fstp dword [esp + 0x10]
movss xmm0, dword [esp + 0x10]
add esp, 4
comiss xmm3, xmm2
mulss xmm0, dword [0x100474a0]
jbe 0x10035552
addss xmm2, xmm0
jmp 0x10035556
subss xmm2, xmm0
movss xmm0, dword [0x1004751c]
addss xmm2, dword [esp + 0x18]
comiss xmm2, dword [0x10047474]
movaps xmm1, xmm2
movss dword [esp + 0x14], xmm2
mulss xmm1, dword [0x10047264]
movss dword [esp + 0xc], xmm1
ja 0x10035589
comiss xmm0, xmm2
jbe 0x100355d5
comiss xmm3, xmm1
jbe 0x1003559b
xorps xmm1, xmmword [0x100475d0]
movss dword [esp + 0xc], xmm1
fld dword [esp + 0xc]
push ecx
fstp dword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
movss xmm2, dword [esp + 0x18]
xorps xmm0, xmm0
add esp, 4
comiss xmm0, xmm2
fstp dword [esp + 0xc]
movss xmm0, dword [esp + 0xc]
mulss xmm0, dword [0x100474a0]
jbe 0x100355d1
addss xmm2, xmm0
jmp 0x100355d5
subss xmm2, xmm0
mulss xmm2, dword [0x10047280]
movaps xmm0, xmm2
call fcn.1003d3a0
movss xmm3, dword [esp + 0x38]
movaps xmm1, xmm0
movsd xmm2, qword [0x10047350]
shufps xmm1, xmm0, 1
mulss xmm1, dword [esp + 0x10]
mulss xmm0, dword [esp + 0x10]
movss dword [edi + 0x18], xmm1
cvtps2pd xmm3, xmm3
movss dword [edi + 0x1c], xmm0
mov eax, dword [esi + 0x10]
movss xmm1, dword [eax]
cvtps2pd xmm1, xmm1
movaps xmm0, xmm1
addsd xmm0, xmm2
comisd xmm0, xmm3
jb 0x100356f8
subsd xmm1, xmm2
comisd xmm3, xmm1
jb 0x100356f8
movss xmm1, dword [eax + 4]
movss xmm3, dword [esp + 0x30]
cvtps2pd xmm1, xmm1
cvtps2pd xmm3, xmm3
movaps xmm0, xmm1
addsd xmm0, xmm2
comisd xmm0, xmm3
jb 0x100356f8
subsd xmm1, xmm2
comisd xmm3, xmm1
jb 0x100356f8
mov eax, dword [esp + 0x34]
lea ecx, [esp + 0x20]
movss xmm0, dword [eax + 0xec]
movss dword [esp + 0x20], xmm0
movss xmm0, dword [eax + 0xf0]
movss dword [esp + 0x24], xmm0
movss xmm0, dword [eax + 0xf4]
movss dword [esp + 0x28], xmm0
call fcn.10002a30
movss xmm1, dword [0x100473e8]
comiss xmm1, xmm0
jb 0x100356f8
movss xmm0, dword [0x11dbab5c]
movss xmm2, dword [0x100472e4]
comiss xmm2, xmm0
jbe 0x100356f1
movss xmm1, dword [0x100474f8]
comiss xmm0, xmm1
jbe 0x100356f1
movss xmm0, dword [0x11dbab60]
comiss xmm2, xmm0
jbe 0x100356f1
comiss xmm0, xmm1
jbe 0x100356f1
mov dword [esi + 0xc], 2
mov byte [esi + 0x20], 0
jmp 0x100356f8
mov dword [esi + 0x1c], 3
cmp dword [esi + 0x1c], 3
jne 0x100358d7
mov eax, dword fs:[0x2c]
mov ecx, dword [0x1004c66c]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x11dbab58]
cmp eax, dword [ecx + 4]
jle 0x10035741
push 0x11dbab58
call fcn.1003c5b0
add esp, 4
cmp dword [0x11dbab58], 0xffffffff
jne 0x10035741
push 0x11dbab58
call fcn.1003c55f
add esp, 4
mov ecx, dword [0x1004c8e0]
push 0x11dbab48
mov eax, dword [ecx]
mov eax, dword [eax + 0x4c]
call eax
mov eax, dword [esi]
movss xmm5, dword [0x10047474]
movss xmm0, dword [0x100474a0]
movss xmm3, dword [eax]
subss xmm3, dword [0x11dbab48]
movss xmm4, dword [eax + 4]
subss xmm4, dword [0x11dbab4c]
movss xmm6, dword [eax + 8]
subss xmm6, dword [0x11dbab50]
comiss xmm3, xmm5
movss dword [esp + 0x14], xmm3
movss dword [esp + 0x10], xmm4
jbe 0x100357a6
subss xmm3, xmm0
movss dword [esp + 0x14], xmm3
comiss xmm4, xmm5
movaps xmm7, xmm3
movss dword [esp + 0xc], xmm3
movaps xmm1, xmm3
jbe 0x100357c7
subss xmm4, xmm0
movss dword [esp + 0xc], xmm3
movss dword [esp + 0x10], xmm4
movss xmm3, dword [0x1004751c]
movaps xmm2, xmm4
comiss xmm3, xmm7
movss dword [esp + 0x18], xmm4
movss dword [esp + 0x30], xmm4
jbe 0x100357fe
movss xmm1, dword [esp + 0xc]
movaps xmm7, xmm4
addss xmm1, xmm0
movss dword [esp + 0x18], xmm4
movss dword [esp + 0x14], xmm1
jmp 0x10035804
movss xmm7, dword [esp + 0x30]
comiss xmm3, dword [esp + 0x18]
jbe 0x10035818
movaps xmm2, xmm7
addss xmm2, xmm0
movss dword [esp + 0x10], xmm2
movss xmm4, dword [0x100472a4]
mulss xmm1, xmm4
mulss xmm2, xmm4
addss xmm1, dword [0x11dbab48]
mulss xmm6, xmm4
addss xmm2, dword [0x11dbab4c]
comiss xmm1, xmm5
addss xmm6, dword [0x11dbab50]
movss dword [ebp + 0x10], xmm1
movss dword [ebp + 0x14], xmm2
movss dword [ebp + 0x18], xmm6
jbe 0x10035861
subss xmm1, xmm0
movss dword [ebp + 0x10], xmm1
comiss xmm2, xmm5
jbe 0x1003586f
subss xmm2, xmm0
movss dword [ebp + 0x14], xmm2
comiss xmm3, xmm1
jbe 0x1003587d
addss xmm1, xmm0
movss dword [ebp + 0x10], xmm1
comiss xmm3, xmm2
jbe 0x1003588b
addss xmm2, xmm0
movss dword [ebp + 0x14], xmm2
mov ecx, dword [0x1004c8e0]
lea edx, [ebp + 0x10]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x50]
call eax
movss xmm0, dword [esp + 0x14]
movss xmm2, dword [0x100472e4]
comiss xmm2, xmm0
jbe 0x100358d7
movss xmm1, dword [0x100474f8]
comiss xmm0, xmm1
jbe 0x100358d7
movss xmm0, dword [esp + 0x10]
comiss xmm2, xmm0
jbe 0x100358d7
comiss xmm0, xmm1
jbe 0x100358d7
mov dword [esi + 0xc], 2
mov byte [esi + 0x20], 0
cmp dword [esi + 0xc], 1
jne 0x100359c8
cmp byte [0x11dbab68], 0
jne 0x10035905
mov byte [esi + 0x20], 0
cmp dword [0x10f6de38], 1
jge 0x100358fe
mov dword [esi + 8], 0
mov byte [0x11dbab68], 1
mov ecx, dword [esp + 0x34]
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
mov ecx, dword [esi + 8]
mov edi, eax
mov edx, dword [esp + 0x2c]
lea esi, [ecx + ecx*2]
mov ecx, dword [edi]
mov edx, dword [edx + 0x10]
mov dword [edx + esi*4], ecx
mov eax, dword [edi + 4]
mov dword [edx + esi*4 + 4], eax
mov eax, dword [edi + 8]
mov dword [edx + esi*4 + 8], eax
mov esi, dword [esp + 0x2c]
mov edi, dword [esp + 0x1c]
mov eax, dword [esi + 8]
mov ecx, dword [esi]
lea edx, [eax + eax*8]
mov eax, dword [edi + 0x24]
mov dword [ecx + edx*4 + 0x18], eax
mov eax, dword [esi + 8]
mov ecx, dword [esi]
lea edx, [eax + eax*8]
mov eax, dword [edi + 0x20]
mov dword [ecx + edx*4 + 0x14], eax
mov eax, dword [esi + 8]
mov ecx, dword [esi]
lea edx, [eax + eax*8]
mov eax, dword [edi + 0x1c]
mov dword [ecx + edx*4 + 0x10], eax
mov eax, dword [esi + 8]
mov ecx, dword [esi]
lea edx, [eax + eax*8]
mov eax, dword [edi + 0x18]
mov dword [ecx + edx*4 + 0xc], eax
mov eax, dword [esi + 8]
movss xmm0, dword [ebp + 0x10]
lea ecx, [eax + eax*8]
mov eax, dword [esi]
movss dword [eax + ecx*4], xmm0
movss xmm0, dword [ebp + 0x14]
movss dword [eax + ecx*4 + 4], xmm0
movss xmm0, dword [ebp + 0x18]
movss dword [eax + ecx*4 + 8], xmm0
mov eax, dword [esi + 8]
mov ecx, dword [esi]
lea edx, [eax + eax*8]
mov eax, dword [edi + 0x30]
mov dword [ecx + edx*4 + 0x20], eax
mov eax, dword [esi + 8]
mov ecx, dword [esi]
lea edx, [eax + eax*8]
mov eax, dword [edi + 0x2c]
mov dword [ecx + edx*4 + 0x1c], eax
mov eax, dword [esi + 8]
mov dword [esi + 0x14], eax
inc eax
mov dword [esi + 8], eax
jmp 0x100359d3
mov edi, dword [esp + 0x1c]
mov byte [0x11dbab68], 0
cmp dword [esi + 0xc], 2
jne 0x10035dfa
cmp byte [0x11dbab69], 0
jne 0x100359fc
mov dword [esi + 8], 0
xor ecx, ecx
mov byte [esi + 0x20], 0
mov byte [0x11dbab69], 1
jmp 0x100359ff
mov ecx, dword [esi + 8]
mov eax, dword [0x10f6de38]
test eax, eax
jle 0x10035a13
cmp ecx, eax
jl 0x10035a13
mov dword [esi + 0xc], 1
cmp ecx, dword [esi + 0x14]
jl 0x10035a28
xor eax, eax
mov edx, 3
cmp byte [esi + 0x18], al
cmovne eax, edx
mov dword [esi + 0xc], eax
mov eax, dword [esi]
lea ecx, [ecx + ecx*8]
mov eax, dword [eax + ecx*4 + 0x18]
mov dword [edi + 0x24], eax
mov eax, dword [esi + 8]
lea ecx, [eax + eax*8]
mov eax, dword [esi]
mov eax, dword [eax + ecx*4 + 0x14]
mov dword [edi + 0x20], eax
mov eax, dword [esi + 8]
lea ecx, [eax + eax*8]
mov eax, dword [esi]
movss xmm3, dword [eax + ecx*4 + 0x10]
movss dword [edi + 0x1c], xmm3
mov eax, dword [esi + 8]
lea ecx, [eax + eax*8]
mov eax, dword [esi]
movss xmm2, dword [eax + ecx*4 + 0xc]
movss dword [edi + 0x18], xmm2
movaps xmm1, xmm2
mov eax, dword [esi + 8]
mulss xmm1, xmm2
lea ecx, [eax + eax*8]
mov eax, dword [esi]
movss xmm5, dword [eax + ecx*4]
movss dword [ebp + 0x10], xmm5
movss xmm4, dword [eax + ecx*4 + 4]
movss dword [ebp + 0x14], xmm4
movss xmm0, dword [eax + ecx*4 + 8]
movss dword [ebp + 0x18], xmm0
movss dword [esp + 0x30], xmm0
movaps xmm0, xmm3
mulss xmm0, xmm3
mov eax, dword [eax + ecx*4 + 0x20]
mov dword [edi + 0x30], eax
mov eax, dword [esi + 8]
addss xmm1, xmm0
movss dword [esp + 0x18], xmm5
xorps xmm0, xmm0
movss dword [esp + 0x1c], xmm4
lea ecx, [eax + eax*8]
mov eax, dword [esi]
sqrtss xmm0, xmm1
mov eax, dword [eax + ecx*4 + 0x1c]
mov dword [edi + 0x2c], eax
cvtps2pd xmm1, xmm2
movss dword [esp + 0x38], xmm0
movaps xmm0, xmm5
cvtps2pd xmm2, xmm3
unpcklps xmm0, xmm4
movq qword [ebp + 0x10], xmm0
movq qword [esp + 0x20], xmm0
xorps xmm0, xmm0
ucomisd xmm2, xmm0
lahf
test ah, 0x44
jp 0x10035b06
ucomisd xmm1, xmm0
lahf
test ah, 0x44
jnp 0x10035b2d
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll___libm_sse2_atan2
mulsd xmm0, qword [0x100473d0]
xorps xmm1, xmm1
movss xmm4, dword [esp + 0x1c]
comisd xmm1, xmm0
jbe 0x10035b2d
addsd xmm0, qword [0x100473e0]
movss xmm2, dword [0x10f6de34]
movss xmm5, dword [0x10047474]
subss xmm4, xmm2
comiss xmm2, xmm5
cvtsd2ss xmm0, xmm0
movss dword [esp + 0x1c], xmm4
movss dword [esp + 0x2c], xmm0
movaps xmm0, xmm2
mulss xmm0, dword [0x10047264]
movss dword [ebp + 0x14], xmm4
movss dword [esp + 0xc], xmm0
ja 0x10035b83
movss xmm3, dword [0x1004751c]
comiss xmm3, xmm2
ja 0x10035b83
movss xmm1, dword [0x100474a0]
jmp 0x10035bee
xorps xmm2, xmm2
comiss xmm2, xmm0
jbe 0x10035b98
xorps xmm0, xmmword [0x100475d0]
movss dword [esp + 0xc], xmm0
fld dword [esp + 0xc]
push ecx
fstp dword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
movss xmm2, dword [0x10f6de34]
xorps xmm0, xmm0
movss xmm1, dword [0x100474a0]
add esp, 4
movss xmm4, dword [esp + 0x1c]
movss xmm3, dword [0x1004751c]
movss xmm5, dword [0x10047474]
comiss xmm0, xmm2
fstp dword [esp + 0xc]
movss xmm0, dword [esp + 0xc]
mulss xmm0, xmm1
jbe 0x10035bea
addss xmm2, xmm0
jmp 0x10035bee
subss xmm2, xmm0
comiss xmm2, dword [0x10047450]
ja 0x10035c04
movss xmm0, dword [0x1004750c]
comiss xmm0, xmm2
jbe 0x10035c1c
cmp byte [0x10f6de32], 0
je 0x10035c1c
movss xmm0, dword [0x1004744c]
movss dword [ebp + 0x10], xmm0
jmp 0x10035c22
movss xmm0, dword [esp + 0x18]
cmp byte [0x10f6de31], 0
je 0x10035c4e
movq xmm0, qword [esp + 0x40]
mov eax, dword [esp + 0x3c]
movq qword [ebp + 0x10], xmm0
movss xmm4, dword [ebp + 0x14]
movss xmm0, dword [ebp + 0x10]
mov dword [ebp + 0x18], eax
movss xmm2, dword [ebp + 0x18]
jmp 0x10035c54
movss xmm2, dword [esp + 0x30]
comiss xmm0, xmm5
jbe 0x10035c62
subss xmm0, xmm1
movss dword [ebp + 0x10], xmm0
comiss xmm3, xmm0
jbe 0x10035c70
addss xmm0, xmm1
movss dword [ebp + 0x10], xmm0
comiss xmm4, xmm5
jbe 0x10035c7e
subss xmm4, xmm1
movss dword [ebp + 0x14], xmm4
comiss xmm3, xmm4
jbe 0x10035c8c
addss xmm4, xmm1
movss dword [ebp + 0x14], xmm4
comiss xmm2, xmm5
jbe 0x10035c9a
subss xmm2, xmm1
movss dword [ebp + 0x18], xmm2
comiss xmm3, xmm2
jbe 0x10035ca8
addss xmm2, xmm1
movss dword [ebp + 0x18], xmm2
mov ecx, dword [0x1004c8e0]
lea edx, [ebp + 0x10]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x50]
call eax
movss xmm2, dword [ebp + 0x14]
subss xmm2, dword [esp + 0x24]
comiss xmm2, dword [0x10047474]
movaps xmm0, xmm2
movss dword [esp + 0x3c], xmm2
mulss xmm0, dword [0x10047264]
movss dword [esp + 0xc], xmm0
ja 0x10035cf6
movss xmm3, dword [0x1004751c]
comiss xmm3, xmm2
ja 0x10035cf6
xorps xmm5, xmm5
jmp 0x10035d4d
xorps xmm2, xmm2
comiss xmm2, xmm0
jbe 0x10035d0b
xorps xmm0, xmmword [0x100475d0]
movss dword [esp + 0xc], xmm0
fld dword [esp + 0xc]
push ecx
fstp dword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
movss xmm2, dword [esp + 0x40]
xorps xmm5, xmm5
movss xmm3, dword [0x1004751c]
add esp, 4
comiss xmm5, xmm2
fstp dword [esp + 0xc]
movss xmm0, dword [esp + 0xc]
mulss xmm0, dword [0x100474a0]
jbe 0x10035d49
addss xmm2, xmm0
jmp 0x10035d4d
subss xmm2, xmm0
movss xmm1, dword [esp + 0x2c]
addss xmm1, xmm2
comiss xmm1, dword [0x10047474]
movaps xmm0, xmm1
movss dword [esp + 0x2c], xmm1
mulss xmm0, dword [0x10047264]
movss dword [esp + 0xc], xmm0
ja 0x10035d7c
comiss xmm3, xmm1
jbe 0x10035dc8
comiss xmm5, xmm0
jbe 0x10035d8e
xorps xmm0, xmmword [0x100475d0]
movss dword [esp + 0xc], xmm0
fld dword [esp + 0xc]
push ecx
fstp dword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
movss xmm1, dword [esp + 0x30]
xorps xmm0, xmm0
add esp, 4
comiss xmm0, xmm1
fstp dword [esp + 0xc]
movss xmm0, dword [esp + 0xc]
mulss xmm0, dword [0x100474a0]
jbe 0x10035dc4
addss xmm1, xmm0
jmp 0x10035dc8
subss xmm1, xmm0
mulss xmm1, dword [0x10047280]
movaps xmm0, xmm1
call fcn.1003d3a0
movaps xmm1, xmm0
shufps xmm1, xmm0, 1
mulss xmm1, dword [esp + 0x38]
mulss xmm0, dword [esp + 0x38]
movss dword [edi + 0x18], xmm1
movss dword [edi + 0x1c], xmm0
inc dword [esi + 8]
jmp 0x10035e01
mov byte [0x11dbab69], 0
mov eax, dword [esi + 0xc]
test eax, eax
jne 0x10035e1f
cmp byte [0x11dbab6a], al
jne 0x10035e30
mov dword [esi + 8], eax
mov byte [esi + 0x20], al
mov byte [0x11dbab6a], 1
jmp 0x10035e30
mov byte [0x11dbab6a], 0
cmp eax, 2
je 0x10035e3a
cmp eax, 1
je 0x10035e3a
mov dword [0x10f6de38], 0
mov ecx, dword [esp + 0x114]
pop edi
pop esi
xor ecx, esp
call fcn.1003c1fe
mov esp, ebp
pop ebp
ret 0x14