Function at 0x10018a50
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100b35b9
mov eax, dword fs:[0]
push eax
sub esp, 0x78
push esi
mov eax, dword [0x100fd040]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, 0x1010bb3f
call fcn.100b18e0
mov eax, dword [0x10107e14]
mov eax, dword [eax]
test eax, eax
je 0x10018aa5
cmp dword [eax + 0x25c], 9
je 0x10018fd3
cmp dword [eax + 0x25c], 8
je 0x10018fd3
mov eax, dword [0x100fdf14]
lea edx, [ebp - 0x48]
lea ecx, [ebp + 8]
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x50], 0
and dword [eax + 0x30], 0xfffff9e7
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x54]
mov dword [ebp - 0x54], 0
push eax
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x7c], 0
call fcn.10024250
mov ecx, dword [0x100fdf14]
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ecx + 0xc]
lea edx, [ebp - 0x60]
call fcn.10024250
movss xmm1, dword [ebp - 0x48]
add esp, 0x10
movss xmm0, dword [ebp - 0x44]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
call fcn.1000a050
movss xmm1, dword [ebp - 0x54]
movss dword [ebp - 0x28], xmm0
movss xmm0, dword [ebp - 0x50]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
call fcn.1000a050
movss dword [ebp - 0x24], xmm0
movss xmm0, dword [ebp - 0x70]
mulss xmm0, xmm0
call fcn.1000a050
movss xmm3, dword [0x100f4bd8]
movaps xmm2, xmm3
divss xmm2, dword [ebp - 0x28]
movaps xmm1, xmm2
mulss xmm2, dword [ebp - 0x44]
mulss xmm1, dword [ebp - 0x48]
movss dword [ebp - 0x2c], xmm2
movaps xmm2, xmm3
divss xmm2, dword [ebp - 0x24]
movss dword [ebp - 0x1c], xmm1
movaps xmm1, xmm2
mulss xmm2, dword [ebp - 0x50]
mulss xmm1, dword [ebp - 0x54]
movss dword [ebp - 0x34], xmm2
movss dword [ebp - 0x30], xmm1
movaps xmm1, xmm3
divss xmm1, xmm0
movss xmm0, dword [ebp - 0x5c]
mulss xmm1, dword [ebp - 0x70]
mulss xmm0, xmm0
movss dword [ebp - 0x38], xmm1
movss xmm1, dword [ebp - 0x60]
mulss xmm1, xmm1
addss xmm0, xmm1
call fcn.1000a050
movss xmm1, dword [ebp - 0x6c]
movss dword [ebp - 0x28], xmm0
movss xmm0, dword [ebp - 0x68]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
call fcn.1000a050
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [ebp - 0x7c]
mulss xmm0, xmm0
call fcn.1000a050
movss xmm4, dword [0x100f4bd8]
movaps xmm2, xmm4
mov eax, dword [0x100fdf14]
divss xmm2, dword [ebp - 0x28]
movss xmm5, dword [eax + 0x24]
movaps xmm3, xmm4
divss xmm3, dword [ebp - 0x20]
divss xmm4, xmm0
movaps xmm1, xmm2
movss xmm6, dword [eax + 0x2c]
mulss xmm2, dword [ebp - 0x5c]
movaps xmm0, xmm5
mulss xmm0, dword [ebp - 0x1c]
movaps xmm7, xmm6
mulss xmm1, dword [ebp - 0x60]
mulss xmm4, dword [ebp - 0x7c]
movss dword [ebp - 0x10], xmm2
movaps xmm2, xmm3
mulss xmm2, dword [ebp - 0x6c]
mulss xmm3, dword [ebp - 0x68]
movss dword [ebp - 0x1c], xmm0
movaps xmm0, xmm5
mulss xmm0, dword [ebp - 0x2c]
movss dword [ebp - 0x18], xmm2
movss dword [ebp - 0x14], xmm3
movss xmm3, dword [eax + 0x28]
movss dword [ebp - 0x20], xmm0
movaps xmm2, xmm3
mulss xmm2, dword [ebp - 0x34]
movaps xmm0, xmm3
mulss xmm0, dword [ebp - 0x30]
movss dword [ebp - 0x28], xmm2
mulss xmm2, dword [ebp - 0x10]
movss dword [ebp - 0x30], xmm0
mulss xmm0, xmm1
movss dword [ebp - 0x24], xmm1
movss xmm1, dword [ebp - 0x20]
mulss xmm1, dword [ebp - 0x10]
addss xmm2, xmm0
movss xmm0, dword [ebp - 0x1c]
mulss xmm0, dword [ebp - 0x24]
mulss xmm6, dword [ebp - 0x38]
addss xmm1, xmm0
movss dword [ebp - 0x3c], xmm4
xorps xmm4, xmm4
mulss xmm3, xmm4
mulss xmm5, xmm4
mulss xmm7, xmm4
movaps xmm4, xmm3
mulss xmm4, dword [0x100f4ad8]
movss dword [ebp - 0x34], xmm3
movaps xmm3, xmm5
mulss xmm3, dword [0x100f4ad8]
movaps xmm0, xmm7
mulss xmm0, dword [ebp - 0x24]
addss xmm2, xmm4
addss xmm1, xmm3
movss dword [ebp - 0x2c], xmm5
movaps xmm5, xmm6
mulss xmm5, dword [0x100f4ad8]
addss xmm2, xmm1
movaps xmm1, xmm7
mulss xmm1, dword [ebp - 0x10]
addss xmm1, xmm0
movss xmm0, dword [ebp - 0x1c]
mulss xmm0, dword [ebp - 0x18]
addss xmm1, xmm5
addss xmm2, xmm1
movss xmm1, dword [ebp - 0x28]
mulss xmm1, dword [ebp - 0x14]
movss dword [eax + 0x24], xmm2
movss xmm2, dword [ebp - 0x20]
mulss xmm2, dword [ebp - 0x14]
addss xmm2, xmm0
addss xmm2, xmm3
movss xmm3, dword [ebp - 0x30]
movaps xmm0, xmm3
mulss xmm0, dword [ebp - 0x18]
addss xmm1, xmm0
addss xmm1, xmm4
addss xmm2, xmm1
movaps xmm1, xmm7
movss xmm4, dword [ebp - 0x3c]
mulss xmm1, dword [ebp - 0x14]
movaps xmm0, xmm7
mov esi, dword [0x100fdedc]
mulss xmm0, dword [ebp - 0x18]
addss xmm1, xmm0
movss xmm0, dword [ebp - 0x20]
addss xmm1, xmm5
xorps xmm5, xmm5
mulss xmm0, xmm5
mulss xmm3, xmm5
addss xmm2, xmm1
mulss xmm7, xmm5
movss xmm1, dword [ebp - 0x28]
mulss xmm1, xmm5
movss dword [eax + 0x28], xmm2
addss xmm7, xmm7
movss xmm2, dword [ebp - 0x1c]
mulss xmm2, xmm5
addss xmm1, xmm3
addss xmm2, xmm0
movaps xmm0, xmm4
mulss xmm0, dword [ebp - 0x2c]
addss xmm2, xmm0
movaps xmm0, xmm4
mulss xmm0, dword [ebp - 0x34]
mulss xmm4, xmm6
addss xmm1, xmm0
addss xmm4, xmm7
addss xmm2, xmm1
addss xmm2, xmm4
movss dword [eax + 0x2c], xmm2
mov eax, dword fs:[0x2c]
mov ecx, dword [eax + esi*4]
mov eax, dword [0x10107ed4]
cmp eax, dword [ecx + 4]
jg 0x10018fe3
mov eax, dword fs:[0x2c]
mov ecx, dword [eax + esi*4]
mov eax, dword [0x10107edc]
cmp eax, dword [ecx + 4]
jg 0x10019034
mov eax, dword fs:[0x2c]
mov ecx, dword [eax + esi*4]
mov eax, dword [0x10107ed0]
cmp eax, dword [ecx + 4]
jg 0x10019085
mov ecx, dword [0x10107ee0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [0x10107ee0]
fstp dword [ebp - 0x38]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [0x100fdf14]
lea eax, [ebp - 0x38]
fstp dword [ebp - 0x3c]
movss xmm0, dword [ebp - 0x3c]
lea edx, [ebp - 0x3c]
xorps xmm0, xmmword [0x100f50a0]
push eax
lea ecx, [ecx + 0x24]
movss dword [ebp - 0x3c], xmm0
call fcn.10011710
mov ecx, dword [0x10107ed8]
add esp, 4
movss xmm0, dword [eax]
mov eax, dword [0x100fdf14]
movss dword [eax + 0x24], xmm0
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [0x10107ed8]
fstp dword [ebp - 0x34]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [0x100fdf14]
lea eax, [ebp - 0x34]
fstp dword [ebp - 0x3c]
movss xmm0, dword [ebp - 0x3c]
lea edx, [ebp - 0x30]
xorps xmm0, xmmword [0x100f50a0]
push eax
lea ecx, [ecx + 0x28]
movss dword [ebp - 0x30], xmm0
call fcn.10011710
mov ecx, dword [0x10107ec8]
add esp, 4
movss xmm0, dword [eax]
mov eax, dword [0x100fdf14]
movss dword [eax + 0x28], xmm0
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [0x10107ec8]
fstp dword [ebp - 0x2c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [0x100fdf14]
lea eax, [ebp - 0x2c]
fstp dword [ebp - 0x3c]
movss xmm0, dword [ebp - 0x3c]
lea edx, [ebp - 0x28]
xorps xmm0, xmmword [0x100f50a0]
push eax
lea ecx, [ecx + 0x2c]
movss dword [ebp - 0x28], xmm0
call fcn.10011710
mov ecx, dword [0x100fdf14]
add esp, 4
movss xmm0, dword [eax]
movss xmm1, dword [ecx + 0x24]
movss dword [ecx + 0x2c], xmm0
xorps xmm0, xmm0
mov eax, dword [0x101077d4]
cmp byte [eax], 0
jne 0x10018fa4
comiss xmm1, xmm0
jbe 0x10018f85
or dword [ecx + 0x30], 8
comiss xmm0, xmm1
jbe 0x10018f8e
or dword [ecx + 0x30], 0x10
movss xmm1, dword [ecx + 0x28]
comiss xmm1, xmm0
jbe 0x10018f9f
or dword [ecx + 0x30], 0x400
comiss xmm0, xmm1
jmp 0x10018fca
comiss xmm0, xmm1
jbe 0x10018fad
or dword [ecx + 0x30], 8
comiss xmm1, xmm0
jbe 0x10018fb6
or dword [ecx + 0x30], 0x10
movss xmm1, dword [ecx + 0x28]
comiss xmm0, xmm1
jbe 0x10018fc7
or dword [ecx + 0x30], 0x400
comiss xmm1, xmm0
jbe 0x10018fd3
or dword [ecx + 0x30], 0x200
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret
push 0x10107ed4
call fcn.100afd50
add esp, 4
cmp dword [0x10107ed4], 0xffffffff
jne 0x10018e30
mov dword [ebp - 4], 0
mov ecx, dword [0x100fdf60]
push str.cl_forwardspeed
mov eax, dword [ecx]
mov eax, dword [eax + 0x44]
call eax
push 0x10107ed4
mov dword [0x10107ee0], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100afd00
add esp, 4
jmp 0x10018e30
push 0x10107edc
call fcn.100afd50
add esp, 4
cmp dword [0x10107edc], 0xffffffff
jne 0x10018e4a
mov dword [ebp - 4], 1
mov ecx, dword [0x100fdf60]
push str.cl_sidespeed
mov eax, dword [ecx]
mov eax, dword [eax + 0x44]
call eax
push 0x10107edc
mov dword [0x10107ed8], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100afd00
add esp, 4
jmp 0x10018e4a
push 0x10107ed0
call fcn.100afd50
add esp, 4
cmp dword [0x10107ed0], 0xffffffff
jne 0x10018e64
mov dword [ebp - 4], 2
mov ecx, dword [0x100fdf60]
push str.cl_upspeed
mov eax, dword [ecx]
mov eax, dword [eax + 0x44]
call eax
push 0x10107ed0
mov dword [0x10107ec8], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100afd00
add esp, 4
jmp 0x10018e64