Function at 0x100289e0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x168
mov eax, dword [0x1003e00c]
xor eax, esp
mov dword [esp + 0x164], eax
cmp byte [0x10057274], 0
mov eax, dword [ebp + 8]
push esi
push edi
mov edi, ecx
mov dword [esp + 0x14], eax
movq xmm0, qword [eax + 0xc]
mov ecx, dword [ebp + 0xc]
mov eax, dword [eax + 0x14]
mov dword [esp + 0x1c], ecx
movq qword [esp + 0x58], xmm0
mov dword [esp + 0x3c], eax
je 0x10028bd0
mov edx, dword [0x10057270]
lea ecx, [esp + 0x124]
call fcn.100288d0
cmp dword [eax + 0x14], 0x10
jb 0x10028a45
mov eax, dword [eax]
mov ecx, dword [edi + 0x10]
lea esi, [edi + 0x14]
mov dword [esp + 0x18], ecx
mov ecx, dword [edi]
mov dword [esp + 0x2c], ecx
lea ecx, [esp + 0xc]
push ecx
push eax
mov dword [esp + 0x14], 0x2b6277
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
add esp, 8
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0
test eax, eax
je 0x10028ac8
push eax
push 1
push 4
push esi
mov esi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
call esi
push dword [esp + 0x20]
mov ecx, dword [edi + 0x14]
push ecx
push 0xc
push dword [esp + 0x34]
lea eax, [ecx - 1]
mov dword [edi + 0x14], eax
call esi
push dword [esp + 0x30]
mov ecx, dword [edi + 0x14]
push ecx
push 0x24
push dword [esp + 0x58]
lea eax, [ecx - 1]
mov dword [edi + 0x14], eax
call esi
push dword [esp + 0x40]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 0x34
jmp 0x10028b6d
mov ecx, 0x3f
xor edx, edx
nop
mov al, byte [edx + str.r_7._2]
xor al, cl
inc ecx
mov byte [esp + edx + 0x60], al
and ecx, 0x800000ff
jns 0x10028aed
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x10
jl 0x10028ad0
mov byte [esp + 0x70], 0
mov ecx, 0x6e
xor edx, edx
nop
mov al, byte [edx + 0x10039804]
xor al, cl
inc ecx
mov byte [esp + edx + 0xc0], al
and ecx, 0x800000ff
jns 0x10028b20
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x14
jl 0x10028b00
push 0
lea eax, [esp + 0x64]
mov byte [esp + 0xd8], 0
push eax
lea eax, [esp + 0xc8]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xorps xmm0, xmm0
mov dword [esp + 0xd0], 0
movaps xmmword [esp + 0xc0], xmm0
mov byte [esp + 0xd4], 0
movaps xmmword [esp + 0x60], xmm0
mov byte [esp + 0x70], 0
mov ecx, dword [esp + 0x138]
cmp ecx, 0x10
jb 0x10028bab
mov edx, dword [esp + 0x124]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10028ba1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10028ba1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100302b6
add esp, 8
mov dword [esp + 0x134], 0
mov dword [esp + 0x138], 0xf
mov byte [esp + 0x124], 0
mov byte [0x10057274], 0
cmp byte [0x10057275], 0
lea eax, [edi + 0x10]
mov esi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
mov dword [esp + 0x18], eax
je 0x10028d9e
mov edx, dword [0x10057270]
lea ecx, [esp + 0x13c]
call fcn.100288d0
cmp dword [eax + 0x14], 0x10
jb 0x10028c04
mov eax, dword [eax]
lea ecx, [edi + 0x10]
mov dword [esp + 0xc], 0x2b6272
mov dword [esp + 0x18], ecx
mov ecx, dword [ecx]
mov dword [esp + 0x2c], ecx
mov ecx, dword [edi]
mov dword [esp + 0x30], ecx
lea ecx, [esp + 0xc]
push ecx
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
add esp, 8
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0
test eax, eax
je 0x10028c87
push eax
push 1
lea edx, [edi + 0x14]
push 4
push edx
call esi
push dword [esp + 0x20]
mov ecx, dword [edi + 0x14]
push ecx
push 0xc
push dword [esp + 0x48]
lea eax, [ecx - 1]
mov dword [edi + 0x14], eax
call esi
push dword [esp + 0x30]
mov ecx, dword [edi + 0x14]
push ecx
push 0x24
push dword [esp + 0x5c]
lea eax, [ecx - 1]
mov dword [edi + 0x14], eax
call esi
push dword [esp + 0x40]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 0x34
jmp 0x10028d3b
mov ecx, 0x12
xor edx, edx
nop
mov al, byte [edx + str._bprvmH]
xor al, cl
inc ecx
mov byte [esp + edx + 0x80], al
and ecx, 0x800000ff
jns 0x10028cb0
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x10
jl 0x10028c90
mov byte [esp + 0x90], 0
mov ecx, 0xa1
xor edx, edx
mov al, byte [edx + 0x1003981c]
xor al, cl
inc ecx
mov byte [esp + edx + 0xe0], al
and ecx, 0x800000ff
jns 0x10028ce5
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x14
jl 0x10028cc5
push 0
lea eax, [esp + 0x84]
mov byte [esp + 0xf8], 0
push eax
lea eax, [esp + 0xe8]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xorps xmm0, xmm0
mov dword [esp + 0xf0], 0
movaps xmmword [esp + 0xe0], xmm0
mov byte [esp + 0xf4], 0
movaps xmmword [esp + 0x80], xmm0
mov byte [esp + 0x90], 0
mov ecx, dword [esp + 0x150]
cmp ecx, 0x10
jb 0x10028d79
mov edx, dword [esp + 0x13c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10028d6f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10028d6f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100302b6
add esp, 8
mov dword [esp + 0x14c], 0
mov dword [esp + 0x150], 0xf
mov byte [esp + 0x13c], 0
mov byte [0x10057275], 0
cmp byte [0x10057276], 0
je 0x10028fcd
mov edx, dword [0x10057270]
lea ecx, [esp + 0x154]
call fcn.100288d0
cmp dword [eax + 0x14], 0x10
jb 0x10028dca
mov eax, dword [eax]
lea ecx, [edi + 0x10]
jmp 0x10028dce
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx]
mov dword [esp + 0x30], ecx
mov ecx, dword [edi + 4]
mov dword [esp + 0x2c], ecx
lea ecx, [esp + 0xc]
push ecx
push eax
mov dword [esp + 0x14], 0x2b6272
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov esi, eax
mov dword [esp + 0x14], 0
add esp, 8
test esi, esi
je 0x10028e44
push esi
push 1
lea edx, [edi + 0x14]
push 4
push edx
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
push esi
push 1
push 0xc
push dword [esp + 0x4c]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
mov ecx, dword [edi + 0x14]
push esi
push ecx
push 0x1c
push dword [esp + 0x58]
lea eax, [ecx - 1]
mov dword [edi + 0x14], eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
push esi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 0x34
jmp 0x10028efb
mov ecx, 0x5f
xor edx, edx
nop dword [eax + eax]
mov al, byte [edx + 0x10039848]
xor al, cl
inc ecx
mov byte [esp + edx + 0xa0], al
and ecx, 0x800000ff
jns 0x10028e70
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x10
jl 0x10028e50
mov byte [esp + 0xb0], 0
mov ecx, 0x69
xor edx, edx
mov al, byte [edx + 0x10039860]
xor al, cl
inc ecx
mov byte [esp + edx + 0x100], al
and ecx, 0x800000ff
jns 0x10028ea5
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x14
jl 0x10028e85
push 0
lea eax, [esp + 0xa4]
mov byte [esp + 0x118], 0
push eax
lea eax, [esp + 0x108]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xorps xmm0, xmm0
mov dword [esp + 0x110], 0
movaps xmmword [esp + 0x100], xmm0
mov byte [esp + 0x114], 0
movaps xmmword [esp + 0xa0], xmm0
mov byte [esp + 0xb0], 0
mov ecx, dword [esp + 0x168]
cmp ecx, 0x10
jb 0x10028f39
mov edx, dword [esp + 0x154]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10028f2f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10028f2f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100302b6
add esp, 8
xor edx, edx
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], 0xf
xor esi, esi
mov byte [esp + 0x154], 0
mov dword [esp + 0x10], edx
nop
mov eax, dword [edi + 4]
mov ecx, dword [edi]
mov eax, dword [esi + eax]
mov dword [edx + ecx + 0x18], eax
mov eax, dword [edi + 4]
mov ecx, dword [edi]
mov eax, dword [eax + esi + 0xc]
mov dword [edx + ecx + 0x14], eax
mov eax, dword [edi + 4]
mov ecx, dword [edi]
mov eax, dword [eax + esi + 4]
mov dword [edx + ecx + 0xc], eax
mov eax, dword [edi + 4]
mov ecx, dword [edi]
mov eax, dword [eax + esi + 8]
mov dword [edx + ecx + 0x10], eax
mov edx, dword [edi + 4]
mov ecx, dword [edi]
add ecx, dword [esp + 0x10]
mov eax, dword [edx + esi + 0x10]
mov dword [ecx], eax
mov eax, dword [edx + esi + 0x14]
mov dword [ecx + 4], eax
mov eax, dword [edx + esi + 0x18]
add esi, 0x1c
mov edx, dword [esp + 0x10]
add edx, 0x24
mov dword [ecx + 8], eax
mov dword [esp + 0x10], edx
cmp esi, 0x1ab3f00
jl 0x10028f60
mov byte [0x10057276], 0
cmp dword [edi + 0xc], 3
jne 0x10028fde
mov byte [edi + 0x20], 1
mov dword [edi + 0x1c], 1
cmp byte [edi + 0x20], 0
xorps xmm1, xmm1
movsd xmm0, qword [0x1003a578]
movsd qword [esp + 0x48], xmm0
movsd xmm0, qword [0x1003a588]
movsd qword [esp + 0x40], xmm1
movsd qword [esp + 0x50], xmm0
je 0x1002981e
cmp dword [edi + 0x1c], 1
jne 0x100290a3
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
movss xmm2, dword [0x1003a62c]
movss xmm4, dword [eax]
movss xmm3, dword [eax + 4]
mov eax, dword [edi + 0x10]
movss xmm1, dword [eax]
movaps xmm0, xmm1
addss xmm0, xmm2
comiss xmm0, xmm4
jb 0x10029072
subss xmm1, xmm2
comiss xmm4, xmm1
jb 0x10029072
movss xmm1, dword [eax + 4]
movaps xmm0, xmm1
addss xmm0, xmm2
comiss xmm0, xmm3
jb 0x10029072
subss xmm1, xmm2
comiss xmm3, xmm1
jb 0x10029072
mov dword [edi + 0x1c], 2
jmp 0x10029092
mov eax, dword [0x11dc4444]
inc eax
mov byte [0x11dc4448], 0
mov dword [0x11dc4444], eax
cmp eax, 0x96
jne 0x100290a3
mov dword [edi + 0x1c], 0
mov byte [0x11dc4448], 1
mov dword [0x11dc4444], 0
cmp dword [edi + 0x1c], 2
mov esi, dword [0x10056354]
jne 0x1002968a
mov eax, dword fs:[0x2c]
mov ecx, dword [eax + esi*4]
mov eax, dword [0x11dc4b04]
cmp eax, dword [ecx + 4]
jle 0x100290ec
push 0x11dc4b04
call fcn.100303f7
add esp, 4
cmp dword [0x11dc4b04], 0xffffffff
jne 0x100290ec
push 0x11dc4b04
call fcn.100303ad
add esp, 4
mov eax, dword fs:[0x2c]
mov ecx, dword [eax + esi*4]
mov eax, dword [0x11dc4aec]
cmp eax, dword [ecx + 4]
jle 0x10029125
push 0x11dc4aec
call fcn.100303f7
add esp, 4
cmp dword [0x11dc4aec], 0xffffffff
jne 0x10029125
push 0x11dc4aec
call fcn.100303ad
add esp, 4
mov ecx, dword [0x100565c4]
push 0x11dc4b08
mov eax, dword [ecx]
mov eax, dword [eax + 0x4c]
call eax
mov eax, dword [edi]
movss xmm6, dword [0x11dc4b08]
movss xmm7, dword [0x11dc4b0c]
movss xmm4, dword [0x1003a624]
movss xmm2, dword [eax]
movss xmm0, dword [eax + 4]
subss xmm2, xmm6
movss xmm5, dword [eax + 8]
subss xmm0, xmm7
subss xmm5, dword [0x11dc4b10]
movss xmm1, dword [0x1003a644]
comiss xmm2, xmm4
movss dword [0x11dc4af4], xmm2
movss dword [0x11dc4af8], xmm0
movss dword [0x11dc4afc], xmm5
jbe 0x100291a0
subss xmm2, xmm1
movss dword [0x11dc4af4], xmm2
comiss xmm0, xmm4
jbe 0x100291b1
subss xmm0, xmm1
movss dword [0x11dc4af8], xmm0
movss xmm3, dword [0x1003a6c0]
comiss xmm3, xmm2
jbe 0x100291ca
addss xmm2, xmm1
movss dword [0x11dc4af4], xmm2
comiss xmm3, xmm0
jbe 0x100291db
addss xmm0, xmm1
movss dword [0x11dc4af8], xmm0
mulss xmm2, dword [0x1003a440]
mulss xmm0, dword [0x1003a440]
mulss xmm5, dword [0x1003a440]
addss xmm2, xmm6
addss xmm0, xmm7
addss xmm5, dword [0x11dc4b10]
comiss xmm2, xmm4
movss dword [ebp + 0x10], xmm2
movss dword [ebp + 0x14], xmm0
movss dword [ebp + 0x18], xmm5
jbe 0x10029220
subss xmm2, xmm1
movss dword [ebp + 0x10], xmm2
comiss xmm0, xmm4
jbe 0x1002922e
subss xmm0, xmm1
movss dword [ebp + 0x14], xmm0
comiss xmm3, xmm2
jbe 0x1002923c
addss xmm2, xmm1
movss dword [ebp + 0x10], xmm2
comiss xmm3, xmm0
jbe 0x1002924a
addss xmm0, xmm1
movss dword [ebp + 0x14], xmm0
mov ecx, dword [0x100565c4]
lea edx, [ebp + 0x10]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x50]
call eax
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
mov ecx, dword [edi + 0x10]
movss xmm1, dword [eax + 4]
movss xmm4, dword [ecx + 4]
movss xmm2, dword [eax]
subss xmm4, xmm1
movss xmm0, dword [ecx]
movss dword [esp + 0x38], xmm1
subss xmm0, xmm2
movss xmm1, dword [ecx + 8]
subss xmm1, dword [eax + 8]
movss dword [esp + 0x2c], xmm4
movss dword [esp + 0x34], xmm2
movss dword [esp + 0x30], xmm0
movss dword [esp + 0x10], xmm1
cvtps2pd xmm1, xmm0
cvtps2pd xmm0, xmm4
movsd xmm4, qword [esp + 0x40]
ucomisd xmm0, xmm4
lahf
test ah, 0x44
jp 0x100292d0
ucomisd xmm1, xmm4
lahf
test ah, 0x44
jp 0x100292d0
movaps xmm0, xmm4
jmp 0x100292ed
call sub.api_ms_win_crt_math_l1_1_0.dll___libm_sse2_atan2
mulsd xmm0, qword [esp + 0x48]
movsd xmm4, qword [esp + 0x40]
comisd xmm4, xmm0
jbe 0x100292ed
addsd xmm0, qword [esp + 0x50]
cvtsd2ss xmm0, xmm0
lea ecx, [esp + 0x20]
movss dword [esp + 0xc], xmm0
movss xmm0, dword [esp + 0x30]
movss dword [esp + 0x20], xmm0
movss xmm0, dword [esp + 0x2c]
movss dword [esp + 0x24], xmm0
movss xmm0, dword [esp + 0x10]
movss dword [esp + 0x28], xmm0
call fcn.10002ad0
xorps xmm1, xmm1
sqrtss xmm1, xmm0
comiss xmm1, dword [0x1003a5a4]
jbe 0x1002933e
movss xmm3, dword [0x1003a62c]
jmp 0x1002936a
comiss xmm1, dword [0x1003a598]
jbe 0x10029351
movss xmm3, dword [0x1003a60c]
jmp 0x1002936a
cvtps2pd xmm0, xmm1
comisd xmm0, xmmword [0x1003a558]
jbe 0x10029411
movss xmm3, dword [0x1003a5f0]
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x20]
lea esi, [eax + 0x18]
movss dword [esp + 0x20], xmm3
movss dword [esi], xmm3
mov dword [esp + 0x24], 0
movss xmm0, dword [eax + 0x20]
movss dword [esp + 0x28], xmm0
call fcn.10002ad0
movss dword [esp + 0x10], xmm0
cvtps2pd xmm1, xmm3
movaps xmm0, xmm4
call sub.api_ms_win_crt_math_l1_1_0.dll___libm_sse2_atan2
mulsd xmm0, qword [esp + 0x48]
movsd xmm1, qword [esp + 0x40]
comisd xmm1, xmm0
jbe 0x100293c0
addsd xmm0, qword [esp + 0x50]
movss xmm2, dword [ebp + 0x14]
xorps xmm1, xmm1
subss xmm2, dword [esp + 0xc]
cvtsd2ss xmm1, xmm0
comiss xmm2, dword [0x1003a624]
movaps xmm3, xmm2
movss dword [esp + 0x18], xmm1
mulss xmm3, dword [0x1003a408]
movss dword [esp + 0x30], xmm2
movss dword [esp + 0xc], xmm3
ja 0x10029484
movss xmm0, dword [0x1003a6c0]
comiss xmm0, xmm2
ja 0x10029484
xorps xmm3, xmm3
jmp 0x100294e5
comiss xmm1, dword [0x1003a4b8]
mov eax, dword [esp + 0x14]
lea esi, [eax + 0x18]
mov ecx, esi
jbe 0x1002942d
movss xmm3, dword [0x1003a5c8]
jmp 0x10029435
movss xmm3, dword [0x1003a5c0]
movaps xmm0, xmm3
movss dword [ecx], xmm0
lea ecx, [esp + 0x20]
movss xmm0, dword [eax + 0x20]
or dword [eax + 0x24], 0x20000
movss dword [esp + 0x20], xmm3
mov dword [esp + 0x24], 0
movss dword [esp + 0x28], xmm0
call fcn.10002ad0
cvtps2pd xmm1, xmm3
movss dword [esp + 0x10], xmm0
ucomisd xmm1, xmm4
lahf
test ah, 0x44
jp 0x100293a0
movaps xmm0, xmm4
jmp 0x100293c0
xorps xmm1, xmm1
comiss xmm1, xmm3
jbe 0x1002949d
movaps xmm0, xmm2
mulss xmm0, dword [0x1003a688]
movss dword [esp + 0xc], xmm0
fld dword [esp + 0xc]
push ecx
fstp dword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
movss xmm2, dword [esp + 0x34]
xorps xmm3, xmm3
movss xmm1, dword [esp + 0x1c]
add esp, 4
comiss xmm3, xmm2
fstp dword [esp + 0xc]
movss xmm0, dword [esp + 0xc]
mulss xmm0, dword [0x1003a644]
jbe 0x100294d9
addss xmm2, xmm0
jmp 0x100294dd
subss xmm2, xmm0
movss xmm0, dword [0x1003a6c0]
addss xmm1, xmm2
comiss xmm1, dword [0x1003a624]
movaps xmm2, xmm1
movss dword [esp + 0x18], xmm1
mulss xmm2, dword [0x1003a408]
movss dword [esp + 0xc], xmm2
ja 0x1002950e
comiss xmm0, xmm1
jbe 0x1002955e
comiss xmm3, xmm2
jbe 0x10029524
movaps xmm0, xmm1
mulss xmm0, dword [0x1003a688]
movss dword [esp + 0xc], xmm0
fld dword [esp + 0xc]
push ecx
fstp dword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
movss xmm1, dword [esp + 0x1c]
xorps xmm0, xmm0
add esp, 4
comiss xmm0, xmm1
fstp dword [esp + 0xc]
movss xmm0, dword [esp + 0xc]
mulss xmm0, dword [0x1003a644]
jbe 0x1002955a
addss xmm1, xmm0
jmp 0x1002955e
subss xmm1, xmm0
mulss xmm1, dword [0x1003a41c]
movaps xmm0, xmm1
call fcn.10031260
mov eax, dword [esp + 0x14]
movaps xmm1, xmm0
movss xmm3, dword [esp + 0x34]
movsd xmm2, qword [0x1003a4f0]
shufps xmm1, xmm0, 1
mulss xmm1, dword [esp + 0x10]
mulss xmm0, dword [esp + 0x10]
movss dword [esi], xmm1
cvtps2pd xmm3, xmm3
movss dword [eax + 0x1c], xmm0
mov eax, dword [edi + 0x10]
movss xmm1, dword [eax]
cvtps2pd xmm1, xmm1
movaps xmm0, xmm1
addsd xmm0, xmm2
comisd xmm0, xmm3
jb 0x10029684
subsd xmm1, xmm2
comisd xmm3, xmm1
jb 0x10029684
movss xmm1, dword [eax + 4]
movss xmm3, dword [esp + 0x38]
cvtps2pd xmm1, xmm1
cvtps2pd xmm3, xmm3
movaps xmm0, xmm1
addsd xmm0, xmm2
comisd xmm0, xmm3
jb 0x10029684
subsd xmm1, xmm2
comisd xmm3, xmm1
jb 0x10029684
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x20]
movss xmm0, dword [eax + 0xec]
movss dword [esp + 0x20], xmm0
movss xmm0, dword [eax + 0xf0]
movss dword [esp + 0x24], xmm0
movss xmm0, dword [eax + 0xf4]
movss dword [esp + 0x28], xmm0
call fcn.10002ad0
movss xmm1, dword [0x1003a594]
comiss xmm1, xmm0
jb 0x10029684
movss xmm0, dword [0x11dc4af4]
movss xmm2, dword [0x1003a484]
comiss xmm2, xmm0
jbe 0x1002967d
movss xmm1, dword [0x1003a690]
comiss xmm0, xmm1
jbe 0x1002967d
movss xmm0, dword [0x11dc4af8]
comiss xmm2, xmm0
jbe 0x1002967d
comiss xmm0, xmm1
jbe 0x1002967d
mov dword [edi + 0xc], 2
mov byte [edi + 0x20], 0
jmp 0x10029684
mov dword [edi + 0x1c], 3
mov esi, dword [0x10056354]
cmp dword [edi + 0x1c], 3
jne 0x1002981e
mov eax, dword fs:[0x2c]
mov ecx, dword [eax + esi*4]
mov eax, dword [0x11dc4af0]
cmp eax, dword [ecx + 4]
jle 0x100296cd
push 0x11dc4af0
call fcn.100303f7
add esp, 4
cmp dword [0x11dc4af0], 0xffffffff
jne 0x100296cd
push 0x11dc4af0
call fcn.100303ad
add esp, 4
mov ecx, dword [0x100565c4]
push 0x11dc4ae0
mov eax, dword [ecx]
mov eax, dword [eax + 0x4c]
call eax
mov eax, dword [edi]
movss xmm6, dword [0x11dc4ae0]
movss xmm4, dword [0x1003a624]
movss xmm7, dword [0x11dc4ae4]
movss xmm1, dword [eax]
movss xmm0, dword [eax + 4]
subss xmm1, xmm6
movss xmm5, dword [eax + 8]
subss xmm0, xmm7
subss xmm5, dword [0x11dc4ae8]
movss xmm2, dword [0x1003a644]
comiss xmm1, xmm4
jbe 0x10029728
subss xmm1, xmm2
comiss xmm0, xmm4
jbe 0x10029731
subss xmm0, xmm2
movss xmm3, dword [0x1003a6c0]
comiss xmm3, xmm1
movss dword [esp + 0x10], xmm1
jbe 0x1002974e
addss xmm1, xmm2
movss dword [esp + 0x10], xmm1
comiss xmm3, xmm0
movss dword [esp + 0x18], xmm0
jbe 0x10029763
addss xmm0, xmm2
movss dword [esp + 0x18], xmm0
mulss xmm1, dword [0x1003a440]
mulss xmm0, dword [0x1003a440]
mulss xmm5, dword [0x1003a440]
addss xmm1, xmm6
addss xmm0, xmm7
addss xmm5, dword [0x11dc4ae8]
comiss xmm1, xmm4
movss dword [ebp + 0x10], xmm1
movss dword [ebp + 0x14], xmm0
movss dword [ebp + 0x18], xmm5
jbe 0x100297a8
subss xmm1, xmm2
movss dword [ebp + 0x10], xmm1
comiss xmm0, xmm4
jbe 0x100297b6
subss xmm0, xmm2
movss dword [ebp + 0x14], xmm0
comiss xmm3, xmm1
jbe 0x100297c4
addss xmm1, xmm2
movss dword [ebp + 0x10], xmm1
comiss xmm3, xmm0
jbe 0x100297d2
addss xmm0, xmm2
movss dword [ebp + 0x14], xmm0
mov ecx, dword [0x100565c4]
lea edx, [ebp + 0x10]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x50]
call eax
movss xmm0, dword [esp + 0x10]
movss xmm2, dword [0x1003a484]
comiss xmm2, xmm0
jbe 0x1002981e
movss xmm1, dword [0x1003a690]
comiss xmm0, xmm1
jbe 0x1002981e
movss xmm0, dword [esp + 0x18]
comiss xmm2, xmm0
jbe 0x1002981e
comiss xmm0, xmm1
jbe 0x1002981e
mov dword [edi + 0xc], 2
mov byte [edi + 0x20], 0
cmp dword [edi + 0xc], 1
jne 0x10029905
cmp byte [0x11dc4b00], 0
jne 0x1002984c
mov byte [edi + 0x20], 0
cmp dword [0x10f77b04], 1
jge 0x10029845
mov dword [edi + 8], 0
mov byte [0x11dc4b00], 1
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
mov ecx, dword [edi + 8]
mov edx, dword [edi + 0x10]
lea esi, [ecx + ecx*2]
mov ecx, dword [eax]
mov dword [edx + esi*4], ecx
mov ecx, dword [eax + 4]
mov dword [edx + esi*4 + 4], ecx
mov eax, dword [eax + 8]
mov dword [edx + esi*4 + 8], eax
mov eax, dword [edi + 8]
mov ecx, dword [edi]
mov esi, dword [esp + 0x14]
lea edx, [eax + eax*8]
mov eax, dword [esi + 0x24]
mov dword [ecx + edx*4 + 0x18], eax
mov eax, dword [edi + 8]
mov ecx, dword [edi]
lea edx, [eax + eax*8]
mov eax, dword [esi + 0x20]
mov dword [ecx + edx*4 + 0x14], eax
mov eax, dword [edi + 8]
mov ecx, dword [edi]
lea edx, [eax + eax*8]
mov eax, dword [esi + 0x1c]
mov dword [ecx + edx*4 + 0x10], eax
mov eax, dword [edi + 8]
mov ecx, dword [edi]
lea edx, [eax + eax*8]
mov eax, dword [esi + 0x18]
mov dword [ecx + edx*4 + 0xc], eax
mov eax, dword [edi + 8]
movss xmm0, dword [ebp + 0x10]
lea ecx, [eax + eax*8]
mov eax, dword [edi]
movss dword [eax + ecx*4], xmm0
movss xmm0, dword [ebp + 0x14]
movss dword [eax + ecx*4 + 4], xmm0
movss xmm0, dword [ebp + 0x18]
movss dword [eax + ecx*4 + 8], xmm0
mov eax, dword [edi + 8]
mov ecx, dword [edi]
lea edx, [eax + eax*8]
mov eax, dword [esi + 0x30]
mov dword [ecx + edx*4 + 0x20], eax
mov eax, dword [edi + 8]
mov ecx, dword [edi]
lea edx, [eax + eax*8]
mov eax, dword [esi + 0x2c]
mov dword [ecx + edx*4 + 0x1c], eax
mov eax, dword [edi + 8]
mov dword [edi + 0x14], eax
inc eax
mov dword [edi + 8], eax
jmp 0x10029910
mov esi, dword [esp + 0x14]
mov byte [0x11dc4b00], 0
cmp dword [edi + 0xc], 2
jne 0x10029d45
cmp byte [0x11dc4b01], 0
jne 0x10029939
mov dword [edi + 8], 0
xor ecx, ecx
mov byte [edi + 0x20], 0
mov byte [0x11dc4b01], 1
jmp 0x1002993c
mov ecx, dword [edi + 8]
mov eax, dword [0x10f77b04]
test eax, eax
jle 0x10029950
cmp ecx, eax
jl 0x10029950
mov dword [edi + 0xc], 1
cmp ecx, dword [edi + 0x14]
jl 0x10029965
xor eax, eax
mov edx, 3
cmp byte [edi + 0x18], al
cmovne eax, edx
mov dword [edi + 0xc], eax
mov eax, dword [edi]
lea ecx, [ecx + ecx*8]
mov eax, dword [eax + ecx*4 + 0x18]
mov dword [esi + 0x24], eax
mov eax, dword [edi + 8]
lea ecx, [eax + eax*8]
mov eax, dword [edi]
mov eax, dword [eax + ecx*4 + 0x14]
mov dword [esi + 0x20], eax
mov eax, dword [edi + 8]
lea ecx, [eax + eax*8]
mov eax, dword [edi]
movss xmm3, dword [eax + ecx*4 + 0x10]
movss dword [esi + 0x1c], xmm3
mov eax, dword [edi + 8]
lea ecx, [eax + eax*8]
mov eax, dword [edi]
movss xmm2, dword [eax + ecx*4 + 0xc]
movss dword [esi + 0x18], xmm2
movaps xmm1, xmm2
mov eax, dword [edi + 8]
mulss xmm1, xmm2
lea ecx, [eax + eax*8]
mov eax, dword [edi]
movss xmm5, dword [eax + ecx*4]
movss dword [ebp + 0x10], xmm5
movss xmm4, dword [eax + ecx*4 + 4]
movss dword [ebp + 0x14], xmm4
movss xmm0, dword [eax + ecx*4 + 8]
movss dword [ebp + 0x18], xmm0
movss dword [esp + 0x38], xmm0
movaps xmm0, xmm3
mulss xmm0, xmm3
mov eax, dword [eax + ecx*4 + 0x20]
mov dword [esi + 0x30], eax
mov eax, dword [edi + 8]
addss xmm1, xmm0
movss dword [esp + 0x10], xmm5
xorps xmm0, xmm0
movss dword [esp + 0x14], xmm4
lea ecx, [eax + eax*8]
mov eax, dword [edi]
sqrtss xmm0, xmm1
mov eax, dword [eax + ecx*4 + 0x1c]
mov dword [esi + 0x2c], eax
cvtps2pd xmm1, xmm2
movss dword [esp + 0x34], xmm0
movaps xmm0, xmm5
cvtps2pd xmm2, xmm3
unpcklps xmm0, xmm4
movq qword [ebp + 0x10], xmm0
movq qword [esp + 0x20], xmm0
movsd xmm0, qword [esp + 0x40]
ucomisd xmm2, xmm0
lahf
test ah, 0x44
jp 0x10029a46
ucomisd xmm1, xmm0
lahf
test ah, 0x44
jnp 0x10029a6c
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll___libm_sse2_atan2
mulsd xmm0, qword [esp + 0x48]
movsd xmm1, qword [esp + 0x40]
movss xmm4, dword [esp + 0x14]
comisd xmm1, xmm0
jbe 0x10029a6c
addsd xmm0, qword [esp + 0x50]
movss xmm2, dword [0x10f77b00]
movss xmm5, dword [0x1003a624]
subss xmm4, xmm2
comiss xmm2, xmm5
cvtsd2ss xmm0, xmm0
movss dword [esp + 0x14], xmm4
movss dword [esp + 0x1c], xmm0
movaps xmm0, xmm2
mulss xmm0, dword [0x1003a408]
movss dword [ebp + 0x14], xmm4
movss dword [esp + 0xc], xmm0
ja 0x10029ac2
movss xmm3, dword [0x1003a6c0]
comiss xmm3, xmm2
ja 0x10029ac2
movss xmm1, dword [0x1003a644]
jmp 0x10029b31
xorps xmm1, xmm1
comiss xmm1, xmm0
jbe 0x10029adb
movaps xmm0, xmm2
mulss xmm0, dword [0x1003a688]
movss dword [esp + 0xc], xmm0
fld dword [esp + 0xc]
push ecx
fstp dword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
movss xmm2, dword [0x10f77b00]
xorps xmm0, xmm0
movss xmm1, dword [0x1003a644]
add esp, 4
movss xmm4, dword [esp + 0x14]
movss xmm3, dword [0x1003a6c0]
movss xmm5, dword [0x1003a624]
comiss xmm0, xmm2
fstp dword [esp + 0xc]
movss xmm0, dword [esp + 0xc]
mulss xmm0, xmm1
jbe 0x10029b2d
addss xmm2, xmm0
jmp 0x10029b31
subss xmm2, xmm0
comiss xmm2, dword [0x1003a600]
ja 0x10029b47
movss xmm0, dword [0x1003a6b0]
comiss xmm0, xmm2
jbe 0x10029b5f
cmp byte [0x10f77afe], 0
je 0x10029b5f
movss xmm0, dword [0x1003a5fc]
movss dword [ebp + 0x10], xmm0
jmp 0x10029b65
movss xmm0, dword [esp + 0x10]
cmp byte [0x10f77afd], 0
je 0x10029b91
movq xmm0, qword [esp + 0x58]
mov eax, dword [esp + 0x3c]
movq qword [ebp + 0x10], xmm0
movss xmm4, dword [ebp + 0x14]
movss xmm0, dword [ebp + 0x10]
mov dword [ebp + 0x18], eax
movss xmm2, dword [ebp + 0x18]
jmp 0x10029b97
movss xmm2, dword [esp + 0x38]
comiss xmm0, xmm5
jbe 0x10029ba5
subss xmm0, xmm1
movss dword [ebp + 0x10], xmm0
comiss xmm3, xmm0
jbe 0x10029bb3
addss xmm0, xmm1
movss dword [ebp + 0x10], xmm0
comiss xmm4, xmm5
jbe 0x10029bc1
subss xmm4, xmm1
movss dword [ebp + 0x14], xmm4
comiss xmm3, xmm4
jbe 0x10029bcf
addss xmm4, xmm1
movss dword [ebp + 0x14], xmm4
comiss xmm2, xmm5
jbe 0x10029bdd
subss xmm2, xmm1
movss dword [ebp + 0x18], xmm2
comiss xmm3, xmm2
jbe 0x10029beb
addss xmm2, xmm1
movss dword [ebp + 0x18], xmm2
mov ecx, dword [0x100565c4]
lea edx, [ebp + 0x10]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x50]
call eax
movss xmm2, dword [ebp + 0x14]
subss xmm2, dword [esp + 0x24]
comiss xmm2, dword [0x1003a624]
movaps xmm1, xmm2
movss dword [esp + 0x3c], xmm2
mulss xmm1, dword [0x1003a408]
movss dword [esp + 0xc], xmm1
ja 0x10029c39
movss xmm0, dword [0x1003a6c0]
comiss xmm0, xmm2
ja 0x10029c39
xorps xmm3, xmm3
jmp 0x10029c94
xorps xmm0, xmm0
comiss xmm0, xmm1
jbe 0x10029c52
movaps xmm0, xmm2
mulss xmm0, dword [0x1003a688]
movss dword [esp + 0xc], xmm0
fld dword [esp + 0xc]
push ecx
fstp dword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
movss xmm2, dword [esp + 0x40]
xorps xmm3, xmm3
fstp dword [esp + 0x10]
movss xmm0, dword [esp + 0x10]
add esp, 4
comiss xmm3, xmm2
mulss xmm0, dword [0x1003a644]
jbe 0x10029c88
addss xmm2, xmm0
jmp 0x10029c8c
subss xmm2, xmm0
movss xmm0, dword [0x1003a6c0]
movss xmm1, dword [esp + 0x1c]
addss xmm1, xmm2
comiss xmm1, dword [0x1003a624]
movaps xmm2, xmm1
movss dword [esp + 0x1c], xmm1
mulss xmm2, dword [0x1003a408]
movss dword [esp + 0xc], xmm2
ja 0x10029cc3
comiss xmm0, xmm1
jbe 0x10029d13
comiss xmm3, xmm2
jbe 0x10029cd9
movaps xmm0, xmm1
mulss xmm0, dword [0x1003a688]
movss dword [esp + 0xc], xmm0
fld dword [esp + 0xc]
push ecx
fstp dword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
movss xmm1, dword [esp + 0x20]
xorps xmm0, xmm0
add esp, 4
comiss xmm0, xmm1
fstp dword [esp + 0xc]
movss xmm0, dword [esp + 0xc]
mulss xmm0, dword [0x1003a644]
jbe 0x10029d0f
addss xmm1, xmm0
jmp 0x10029d13
subss xmm1, xmm0
mulss xmm1, dword [0x1003a41c]
movaps xmm0, xmm1
call fcn.10031260
movaps xmm1, xmm0
shufps xmm1, xmm0, 1
mulss xmm1, dword [esp + 0x34]
mulss xmm0, dword [esp + 0x34]
movss dword [esi + 0x18], xmm1
movss dword [esi + 0x1c], xmm0
inc dword [edi + 8]
jmp 0x10029d4c
mov byte [0x11dc4b01], 0
mov eax, dword [edi + 0xc]
test eax, eax
jne 0x10029d6a
cmp byte [0x11dc4b02], al
jne 0x10029d7b
mov dword [edi + 8], eax
mov byte [edi + 0x20], al
mov byte [0x11dc4b02], 1
jmp 0x10029d7b
mov byte [0x11dc4b02], 0
cmp eax, 2
je 0x10029d85
cmp eax, 1
je 0x10029d85
mov dword [0x10f77b04], 0
mov ecx, dword [esp + 0x16c]
pop edi
pop esi
xor ecx, esp
call fcn.1002ff8e
mov esp, ebp
pop ebp
ret 0x14