Function at 0x100b2d10
Capabilities:
Encode data using base64

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100cb0fc
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x360
mov eax, dword [0x100f0364]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x350], ecx
mov eax, dword [ebx + 8]
mov dword [ebp - 0x338], eax
mov dword [ebp - 0x308], 0
lea edi, [eax + 8]
mov eax, dword [edi]
mov ecx, edi
mov dword [ebp - 0x334], edi
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [0x10135d00]
mov esi, eax
mov eax, dword [ebp - 0x350]
mov edx, dword [0x10136eac]
movss xmm0, dword [ecx + 0x14]
mulss xmm0, dword [0x100e57d8]
lea eax, [eax + esi*4]
add eax, 0x3c
mov dword [ebp - 0x364], eax
mov eax, dword [ebp - 0x338]
movss dword [ebp - 0x31c], xmm0
mov ecx, dword [eax + edx]
mov eax, dword [0x101305e0]
cmp ecx, dword [edx + eax]
jne 0x100b2dd9
mov ecx, dword [0x10135d84]
mov eax, dword [ecx]
mov eax, dword [eax + 0x34]
call eax
test eax, eax
je 0x100b6728
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x24]
call eax
mov byte [ebp - 0x301], al
mov ecx, edi
mov eax, dword [edi]
mov eax, dword [eax + 0x28]
call eax
imul eax, eax, 0x514
lea eax, [eax + 0x1011ba60]
test eax, eax
je 0x100b6731
xorps xmm0, xmm0
mov dword [ebp - 0x128], 0
push 0x20
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x124], 0xf
call fcn.1000e610
movups xmm0, xmmword [str.misc_reveal_radar]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x128], 0x11
mov dword [ebp - 0x124], 0x1f
movups xmmword [eax], xmm0
mov cl, byte [0x100e1364]
mov byte [eax + 0x10], cl
mov byte [eax + 0x11], 0
lea eax, [ebp - 0x138]
mov dword [ebp - 4], 0
push eax
mov ecx, 0x10139700
mov dword [ebp - 0x308], 1
call fcn.1000dda0
cmp byte [eax], 0
je 0x100b2e92
cmp byte [ebp - 0x301], 0
mov byte [ebp - 0x2f9], 1
je 0x100b2e99
mov byte [ebp - 0x2f9], 0
mov dword [ebp - 4], 0xffffffff
xor ecx, ecx
mov eax, dword [ebp - 0x124]
cmp eax, 0x10
jb 0x100b2ee2
mov edx, dword [ebp - 0x138]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x100b2ed6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b2ed6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
add esp, 8
xor ecx, ecx
cmp byte [ebp - 0x2f9], 0
je 0x100b2efa
mov eax, dword [0x10136f2c]
mov edx, dword [ebp - 0x338]
mov byte [edx + eax], 1
cmp byte [ebp - 0x301], 0
mov eax, dword [ebp - 0x350]
jne 0x100b2f22
movss xmm1, dword [ebp - 0x31c]
mov byte [eax + esi - 1], 1
mov eax, dword [ebp - 0x364]
addss xmm1, dword [eax]
jmp 0x100b2f3f
cmp byte [eax + esi - 1], 0
je 0x100b6731
mov eax, dword [ebp - 0x364]
movss xmm1, dword [eax]
subss xmm1, dword [ebp - 0x31c]
movss dword [eax], xmm1
xorps xmm0, xmm0
mov ax, word [0x100e070c]
movups xmmword [ebp - 0x138], xmm0
mov word [ebp - 0x130], ax
movq xmm0, qword [str.esp_dormant]
mov al, byte [0x100e070e]
mov dword [ebp - 0x128], 0xb
mov dword [ebp - 0x124], 0xf
movq qword [ebp - 0x138], xmm0
mov byte [ebp - 0x12e], al
mov byte [ebp - 0x12d], 0
or ecx, 2
mov dword [ebp - 4], 1
lea eax, [ebp - 0x138]
mov dword [ebp - 0x314], ecx
mov dword [ebp - 0x308], ecx
mov ecx, 0x10139700
push eax
call fcn.1000dda0
mov dl, byte [eax]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x314]
mov byte [ebp - 0x2f9], dl
test al, 2
je 0x100b301b
mov ecx, dword [ebp - 0x124]
and eax, 0xfffffffd
mov dword [ebp - 0x314], eax
cmp ecx, 0x10
jb 0x100b301b
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b300b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b300b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
mov dl, byte [ebp - 0x2f9]
add esp, 8
mov eax, dword [ebp - 0x364]
lea ecx, [ebp - 0x36c]
mov dword [ebp - 0x36c], 0x3f800000
xorps xmm2, xmm2
mov dword [ebp - 0x31c], 0
movss xmm0, dword [eax]
comiss xmm0, dword [0x100e572c]
cmovbe ecx, eax
lea eax, [ebp - 0x31c]
movss xmm0, dword [ecx]
comiss xmm0, xmm2
cmova eax, ecx
movss xmm1, dword [eax]
mov eax, dword [ebp - 0x364]
ucomiss xmm1, xmm2
movss dword [eax], xmm1
lahf
test ah, 0x44
jp 0x100b307b
test dl, dl
je 0x100b6731
cmp byte [ebp - 0x301], 0
mov eax, dword [0x10135d00]
mov ecx, dword [ebp - 0x338]
movss xmm0, dword [eax + 0x10]
mov eax, dword [0x10136f08]
subss xmm0, dword [ecx + eax]
movss dword [ebp - 0x31c], xmm0
je 0x100b30bc
comiss xmm0, dword [0x100e57fc]
jbe 0x100b30bc
ucomiss xmm1, xmm2
lahf
test ah, 0x44
jnp 0x100b6731
movaps xmm0, xmm1
mov dword [ebp - 0x128], 0xb
mulss xmm0, dword [0x100e5940]
mov dword [ebp - 0x124], 0xf
cvttss2si eax, xmm0
movaps xmm0, xmm1
mulss xmm1, dword [0x100e592c]
mov dword [ebp - 0x318], eax
mulss xmm0, dword [0x100e5918]
cvttss2si eax, xmm0
xorps xmm0, xmm0
mov dword [ebp - 0x344], eax
cvttss2si eax, xmm1
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x30c], eax
mov ax, word [0x100e0738]
movq xmm0, qword [0x100e0730]
mov word [ebp - 0x130], ax
mov al, byte [0x100e073a]
movq qword [ebp - 0x138], xmm0
mov byte [ebp - 0x12e], al
mov byte [ebp - 0x12d], 0
lea eax, [ebp - 0x138]
mov dword [ebp - 4], 2
push eax
mov ecx, 0x10139760
call fcn.1000dd60
movss xmm1, dword [0x100e5940]
movss xmm0, dword [eax + 8]
mulss xmm0, xmm1
cvttss2si edx, xmm0
movss xmm0, dword [eax + 4]
mulss xmm0, xmm1
mov byte [ebp - 0x306], dl
cvttss2si ecx, xmm0
movss xmm0, dword [eax]
mulss xmm0, xmm1
mov byte [ebp - 0x307], cl
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x124]
cvttss2si eax, xmm0
mov byte [ebp - 0x308], al
cmp ecx, 0x10
jb 0x100b31e0
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b31d6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b31d6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
add esp, 8
cmp byte [ebp - 0x301], 0
je 0x100b3272
cmp byte [ebp - 0x2f9], 0
je 0x100b3272
movss xmm0, dword [0x100e57b0]
movss xmm2, dword [ebp - 0x31c]
comiss xmm2, xmm0
mov dword [ebp - 0x318], 0x70
mov dword [ebp - 0x344], 0x50
jbe 0x100b3262
subss xmm2, xmm0
movss xmm0, dword [0x100e58d4]
movaps xmm1, xmm2
mulss xmm2, dword [0x100e5878]
mulss xmm1, dword [0x100e5888]
subss xmm0, xmm1
cvttss2si eax, xmm0
movss xmm0, dword [0x100e58ac]
subss xmm0, xmm2
mov dword [ebp - 0x318], eax
cvttss2si eax, xmm0
mov dword [ebp - 0x344], eax
mov word [ebp - 0x308], 0x7070
mov byte [ebp - 0x306], 0x70
mov ecx, dword [0x10135ca4]
lea edx, [ebp - 0x2f8]
mov eax, dword [ebp - 0x318]
mov byte [ebp - 0x305], al
push edx
mov eax, dword [ecx]
push esi
mov eax, dword [eax + 0x20]
call eax
test al, al
je 0x100b6731
mov esi, dword [ebp - 0x338]
mov ecx, esi
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x15c], 0
mov eax, dword [esi]
mov eax, dword [eax + 0x28]
call eax
lea ecx, [ebp - 0x164]
push ecx
lea ecx, [ebp - 0x12c]
movss xmm0, dword [eax]
movss dword [ebp - 0x31c], xmm0
movss xmm0, dword [eax + 4]
mov eax, dword [0x10135df8]
push ecx
mov ecx, esi
movss dword [ebp - 0x324], xmm0
call eax
movss xmm0, dword [ebp - 0x15c]
lea edx, [ebp - 0x34c]
addss xmm0, dword [0x100e581c]
movss xmm2, dword [ebp - 0x31c]
lea ecx, [ebp - 0x12c]
movss xmm1, dword [ebp - 0x324]
movss dword [ebp - 0x12c], xmm2
movss dword [ebp - 0x128], xmm1
movss dword [ebp - 0x164], xmm2
movss dword [ebp - 0x160], xmm1
movss dword [ebp - 0x15c], xmm0
call fcn.100a40f0
test al, al
je 0x100b671a
lea edx, [ebp - 0x35c]
lea ecx, [ebp - 0x164]
call fcn.100a40f0
test al, al
je 0x100b671a
movss xmm4, dword [ebp - 0x348]
movaps xmm0, xmm4
subss xmm0, dword [ebp - 0x358]
push dword [ebp - 0x318]
push esi
cvttss2si eax, xmm0
mov dword [ebp - 0x354], eax
movd xmm3, eax
cvtdq2ps xmm3, xmm3
movaps xmm0, xmm3
subss xmm4, xmm3
mulss xmm0, dword [0x100e56b0]
cvttss2si eax, xmm0
mov dword [ebp - 0x340], eax
movd xmm0, eax
cvtdq2ps xmm1, xmm0
movss xmm0, dword [ebp - 0x34c]
mulss xmm1, dword [0x100e56b0]
subss xmm0, xmm1
cvttss2si eax, xmm0
mov dword [ebp - 0x320], eax
cvttss2si eax, xmm4
mov dword [ebp - 0x33c], eax
call fcn.100b7730
push dword [ebp - 0x318]
push esi
call fcn.100b7340
mov eax, dword [str.esp_box]
xorps xmm0, xmm0
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x138], eax
mov ax, word [0x100e071c]
mov word [ebp - 0x134], ax
mov al, byte [0x100e071e]
mov dword [ebp - 0x128], 7
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x132], al
mov byte [ebp - 0x131], 0
lea eax, [ebp - 0x138]
mov dword [ebp - 4], 3
push eax
mov ecx, 0x10139700
call fcn.1000dda0
mov al, byte [eax]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x124]
mov byte [ebp - 0x2f9], al
cmp ecx, 0x10
jb 0x100b34c5
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b34b5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b34b5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
mov al, byte [ebp - 0x2f9]
add esp, 8
test al, al
je 0x100b35c7
mov ecx, dword [0x10135cb0]
mov eax, dword [ebp - 0x344]
push dword [ebp - 0x308]
mov byte [ebp - 0x329], al
mov eax, dword [ecx]
mov word [ebp - 0x32c], 0xa0a
mov byte [ebp - 0x32a], 0xa
mov eax, dword [eax + 0x38]
call eax
mov ecx, dword [0x10135cb0]
mov edi, dword [ebp - 0x33c]
mov esi, dword [ebp - 0x320]
mov eax, dword [ecx]
mov edx, dword [eax + 0x48]
mov eax, dword [ebp - 0x354]
add eax, edi
push eax
mov eax, dword [ebp - 0x340]
add eax, esi
push eax
push edi
push esi
call edx
mov ecx, dword [0x10135cb0]
mov esi, dword [ebp - 0x32c]
push esi
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
mov ecx, dword [0x10135cb0]
mov esi, dword [ebp - 0x340]
inc esi
mov eax, dword [ecx]
mov edx, dword [eax + 0x48]
mov eax, dword [ebp - 0x354]
inc eax
add eax, edi
push eax
mov eax, dword [ebp - 0x320]
add eax, esi
push eax
lea eax, [edi - 1]
push eax
mov eax, dword [ebp - 0x320]
dec eax
push eax
call edx
mov ecx, dword [0x10135cb0]
inc edi
mov esi, dword [ebp - 0x32c]
push esi
mov dword [ebp - 0x328], edi
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
mov ecx, dword [0x10135cb0]
mov esi, dword [ebp - 0x320]
inc esi
mov eax, dword [ecx]
mov edx, dword [eax + 0x48]
mov eax, dword [ebp - 0x354]
add eax, 0xfffffffe
add eax, edi
push eax
mov eax, dword [ebp - 0x340]
add eax, 0xfffffffe
add eax, esi
push eax
push edi
push esi
call edx
mov edi, dword [ebp - 0x334]
mov esi, dword [ebp - 0x338]
jmp 0x100b35d4
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x328], eax
xorps xmm0, xmm0
mov dword [ebp - 0x128], 8
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x124], 0xf
mov dword [ebp - 0x138], 0x5f707365
mov dword [ebp - 0x134], 0x656d616e
mov byte [ebp - 0x130], 0
lea eax, [ebp - 0x138]
mov dword [ebp - 4], 4
push eax
mov ecx, 0x10139700
call fcn.1000dda0
mov al, byte [eax]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x124]
mov byte [ebp - 0x2f9], al
cmp ecx, 0x10
jb 0x100b3676
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b3666
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b3666
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
mov al, byte [ebp - 0x2f9]
add esp, 8
test al, al
je 0x100b38d6
xorps xmm0, xmm0
mov dword [ebp - 0x128], 0
lea ecx, [ebp - 0x2e8]
mov dword [ebp - 0x124], 0
movups xmmword [ebp - 0x138], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b36a5
sub ecx, edx
lea eax, [ebp - 0x2e8]
push ecx
push eax
lea ecx, [ebp - 0x138]
call fcn.1000f6b0
mov dword [ebp - 4], 5
lea eax, [ebp - 0x138]
mov ecx, 0x18
mov dword [ebp - 0x160], 0
cmp dword [ebp - 0x128], ecx
xorps xmm0, xmm0
movups xmmword [ebp - 0x170], xmm0
cmovb ecx, dword [ebp - 0x128]
cmp dword [ebp - 0x124], 0x10
push ecx
cmovae eax, dword [ebp - 0x138]
lea ecx, [ebp - 0x170]
push eax
mov dword [ebp - 0x15c], 0
call fcn.1000f6b0
or dword [ebp - 0x314], 0x200
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x124]
cmp ecx, 0x10
jb 0x100b3761
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b3757
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b38c6
push ecx
push edx
call fcn.100c0328
add esp, 8
mov eax, dword [0x100e083c]
xorps xmm0, xmm0
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x128], 0xc
movq xmm0, qword [0x100e0834]
mov dword [ebp - 0x124], 0xf
movq qword [ebp - 0x138], xmm0
mov dword [ebp - 0x130], eax
mov byte [ebp - 0x12c], 0
lea eax, [ebp - 0x138]
mov byte [ebp - 4], 8
push eax
mov ecx, 0x10139760
call fcn.1000dd60
movss xmm1, dword [0x100e5940]
movss xmm0, dword [eax + 8]
mulss xmm0, xmm1
cvttss2si edx, xmm0
movss xmm0, dword [eax + 4]
mulss xmm0, xmm1
mov byte [ebp - 0x306], dl
cvttss2si ecx, xmm0
movss xmm0, dword [eax]
mulss xmm0, xmm1
mov byte [ebp - 0x307], cl
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x124]
cvttss2si eax, xmm0
mov byte [ebp - 0x308], al
cmp ecx, 0x10
jb 0x100b3836
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b382c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b382c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
add esp, 8
cmp byte [ebp - 0x301], 0
je 0x100b384f
mov word [ebp - 0x308], 0x8282
mov byte [ebp - 0x306], 0x82
mov eax, dword [ebp - 0x344]
mov ecx, 0x10139660
mov byte [ebp - 0x305], al
lea eax, [ebp - 0x170]
push 2
push eax
push dword [ebp - 0x308]
mov eax, dword [ebp - 0x33c]
sub eax, dword [0x10139668]
push eax
mov eax, dword [ebp - 0x340]
cdq
sub eax, edx
sar eax, 1
add eax, dword [ebp - 0x320]
push eax
call fcn.100a46b0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x15c]
cmp ecx, 0x10
jb 0x100b38d6
mov edx, dword [ebp - 0x170]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b38cc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b38cc
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
add esp, 8
mov ax, word [0x100e0754]
xorps xmm0, xmm0
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x128], 0xa
movq xmm0, qword [str.esp_health]
mov dword [ebp - 0x124], 0xf
movq qword [ebp - 0x138], xmm0
mov word [ebp - 0x130], ax
mov byte [ebp - 0x12e], 0
lea eax, [ebp - 0x138]
mov dword [ebp - 4], 9
push eax
mov ecx, 0x10139700
call fcn.1000dda0
mov al, byte [eax]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x124]
mov byte [ebp - 0x2f9], al
cmp ecx, 0x10
jb 0x100b3983
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b3971
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b3971
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
mov al, byte [ebp - 0x2f9]
add esp, 8
jmp 0x100b3990
mov ecx, dword [ebp - 0x33c]
inc ecx
mov dword [ebp - 0x328], ecx
test al, al
je 0x100b4122
mov ecx, dword [0x10136ee0]
xorps xmm0, xmm0
mov eax, dword [ebp - 0x354]
add ecx, esi
add eax, 0xfffffffe
mov dword [ebp - 0x370], 0x64
mov dword [ebp - 0x32c], eax
lea eax, [ebp - 0x370]
push 0x20
cmp dword [ecx], 0x64
movups xmmword [ebp - 0x138], xmm0
cmovl eax, ecx
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov esi, dword [eax]
mov dword [ebp - 0x324], esi
call fcn.1000e610
movups xmm0, xmmword [str.esp_health_animate]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x128], 0x12
mov dword [ebp - 0x124], 0x1f
movups xmmword [eax], xmm0
mov cx, word [0x100e07d8]
mov word [eax + 0x10], cx
mov byte [eax + 0x12], 0
lea eax, [ebp - 0x138]
mov dword [ebp - 4], 0xa
push eax
mov ecx, 0x10139700
call fcn.1000dda0
mov al, byte [eax]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x124]
mov byte [ebp - 0x2f9], al
cmp ecx, 0x10
jb 0x100b3a8e
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b3a7e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b3a7e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
mov al, byte [ebp - 0x2f9]
add esp, 8
movd xmm0, esi
cvtdq2ps xmm0, xmm0
test al, al
je 0x100b3ba8
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [ebp - 0x350]
movd xmm0, esi
cvtdq2ps xmm0, xmm0
ucomiss xmm0, dword [ecx + eax*4 + 0x2144]
lahf
test ah, 0x44
jnp 0x100b3c0b
mov dword [ebp - 0x31c], 0x42c80000
mov ecx, edi
mov dword [ebp - 0x300], 0
mov eax, dword [edi]
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [ebp - 0x350]
push 0x100e07e8
lea esi, [ecx + eax*4]
lea ecx, [ebp - 0x138]
call fcn.1000e060
lea eax, [ebp - 0x138]
mov dword [ebp - 4], 0xb
push eax
mov ecx, 0x10139720
call fcn.1000dd80
movss xmm1, dword [esi + 0x2144]
lea edx, [ebp - 0x300]
mov esi, dword [ebp - 0x324]
lea ecx, [ebp - 0x308]
movd xmm2, dword [eax]
mov eax, dword [0x10135d00]
movd xmm0, esi
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm2, xmm2
subss xmm0, xmm1
mulss xmm2, dword [eax + 0x14]
lea eax, [ebp - 0x31c]
push eax
mulss xmm0, xmm2
addss xmm0, xmm1
movss dword [ebp - 0x308], xmm0
call fcn.1000e790
add esp, 4
mov ecx, edi
movss xmm0, dword [eax]
mov eax, dword [edi]
movss dword [ebp - 0x330], xmm0
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [ebp - 0x350]
movss xmm0, dword [ebp - 0x330]
mov dword [ebp - 4], 0xffffffff
movss dword [ecx + eax*4 + 0x2144], xmm0
lea ecx, [ebp - 0x138]
call fcn.1000e010
jmp 0x100b3c0b
lea eax, [ebp - 0x330]
mov dword [ebp - 0x330], 0x42c80000
push eax
lea edx, [ebp - 0x31c]
mov dword [ebp - 0x31c], 0
lea ecx, [ebp - 0x300]
movss dword [ebp - 0x300], xmm0
call fcn.1000e790
add esp, 4
mov ecx, edi
movss xmm0, dword [eax]
mov eax, dword [edi]
movss dword [ebp - 0x308], xmm0
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [ebp - 0x350]
movss xmm0, dword [ebp - 0x308]
movss dword [ecx + eax*4 + 0x2144], xmm0
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [ebp - 0x350]
push ecx
movss xmm0, dword [ecx + eax*4 + 0x2144]
movss dword [ebp - 0x330], xmm0
fld dword [ebp - 0x330]
fstp dword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
fstp dword [ebp - 0x330]
cvttss2si eax, dword [ebp - 0x330]
imul eax, dword [ebp - 0x32c]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x100e55d4]
movss dword [ebp - 0x330], xmm0
fld dword [ebp - 0x330]
fstp dword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
mov eax, dword [0x100e076c]
xorps xmm0, xmm0
movups xmmword [ebp - 0x138], xmm0
add esp, 4
mov dword [ebp - 0x130], eax
movq xmm0, qword [0x100e0764]
mov ax, word [0x100e0770]
fstp dword [ebp - 0x31c]
mov dword [ebp - 0x128], 0xe
mov dword [ebp - 0x124], 0xf
movq qword [ebp - 0x138], xmm0
mov word [ebp - 0x12c], ax
mov byte [ebp - 0x12a], 0
lea eax, [ebp - 0x138]
mov dword [ebp - 4], 0xc
push eax
mov ecx, 0x10139760
call fcn.1000dd60
movss xmm1, dword [0x100e5940]
movss xmm0, dword [eax + 8]
mulss xmm0, xmm1
cvttss2si edx, xmm0
movss xmm0, dword [eax + 4]
mulss xmm0, xmm1
mov byte [ebp - 0x306], dl
cvttss2si ecx, xmm0
movss xmm0, dword [eax]
mulss xmm0, xmm1
mov byte [ebp - 0x307], cl
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x124]
cvttss2si eax, xmm0
mov dword [ebp - 0x358], eax
mov byte [ebp - 0x308], al
cmp ecx, 0x10
jb 0x100b3d6b
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b3d61
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b3d61
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
add esp, 8
mov eax, dword [0x100e07ac]
xorps xmm0, xmm0
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x130], eax
mov ax, word [0x100e07b0]
movq xmm0, qword [0x100e07a4]
mov word [ebp - 0x12c], ax
mov al, byte [0x100e07b2]
mov dword [ebp - 0x128], 0xf
mov dword [ebp - 0x124], 0xf
movq qword [ebp - 0x138], xmm0
mov byte [ebp - 0x12a], al
mov byte [ebp - 0x129], 0
lea eax, [ebp - 0x138]
mov dword [ebp - 4], 0xd
push eax
mov ecx, 0x10139760
call fcn.1000dd60
movss xmm1, dword [0x100e5940]
movss xmm0, dword [eax + 8]
mulss xmm0, xmm1
cvttss2si ecx, xmm0
movss xmm0, dword [eax + 4]
mulss xmm0, xmm1
mov dword [ebp - 0x330], ecx
cvttss2si ecx, xmm0
movss xmm0, dword [eax]
mulss xmm0, xmm1
mov dword [ebp - 0x300], ecx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x124]
cvttss2si eax, xmm0
mov dword [ebp - 0x360], eax
cmp ecx, 0x10
jb 0x100b3e5e
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b3e54
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b3e54
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
add esp, 8
mov eax, dword [ebp - 0x318]
movzx edx, al
mov byte [ebp - 0x305], al
mov eax, dword [ebp - 0x308]
mov ecx, eax
shr ecx, 0x18
sub ecx, edx
movd xmm2, esi
cvtdq2ps xmm2, xmm2
mov esi, dword [ebp - 0x320]
add esi, 0xfffffffa
movd xmm0, edx
mulss xmm2, dword [0x100e55d4]
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm0, xmm0
mulss xmm1, xmm2
addss xmm1, xmm0
cvttss2si ecx, xmm1
mov dword [ebp - 0x348], ecx
mov ecx, dword [ebp - 0x330]
movzx edx, cl
mov ecx, eax
shr ecx, 0x10
movzx ecx, cl
sub ecx, edx
shr eax, 8
movd xmm0, edx
cvtdq2ps xmm0, xmm0
movzx eax, al
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm2
addss xmm1, xmm0
cvttss2si ecx, xmm1
mov dword [ebp - 0x330], ecx
mov ecx, dword [ebp - 0x300]
movzx ecx, cl
sub eax, ecx
mov word [ebp - 0x300], 0x6e6e
mov byte [ebp - 0x2fe], 0x6e
movd xmm0, ecx
movd xmm1, eax
mov eax, dword [ebp - 0x360]
cvtdq2ps xmm1, xmm1
movzx ecx, al
mov eax, dword [ebp - 0x358]
movzx eax, al
sub eax, ecx
cvtdq2ps xmm0, xmm0
mulss xmm1, xmm2
addss xmm1, xmm0
movd xmm0, ecx
mov ecx, dword [0x10135cb0]
cvtdq2ps xmm0, xmm0
cvttss2si edx, xmm1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov byte [ebp - 0x307], dl
mulss xmm1, xmm2
addss xmm1, xmm0
cvttss2si eax, xmm1
mov byte [ebp - 0x308], al
mov eax, dword [ebp - 0x330]
mov byte [ebp - 0x306], al
mov eax, dword [ebp - 0x348]
mov byte [ebp - 0x305], al
mov eax, dword [ebp - 0x344]
mov byte [ebp - 0x2fd], al
mov eax, dword [ecx]
push dword [ebp - 0x300]
mov eax, dword [eax + 0x38]
call eax
mov ecx, dword [0x10135cb0]
mov eax, dword [ecx]
mov edx, dword [eax + 0x40]
lea eax, [esi + 4]
mov dword [ebp - 0x300], eax
mov eax, dword [ebp - 0x32c]
add eax, dword [ebp - 0x328]
push eax
lea eax, [esi + 4]
push eax
push dword [ebp - 0x328]
push esi
call edx
cmp byte [ebp - 0x301], 0
je 0x100b3fe4
mov eax, dword [ebp - 0x344]
mov word [ebp - 0x308], 0x8282
mov byte [ebp - 0x306], 0x82
mov byte [ebp - 0x305], al
cvttss2si ecx, dword [ebp - 0x31c]
mov eax, dword [ebp - 0x32c]
mov edi, dword [ebp - 0x328]
push dword [ebp - 0x308]
sub eax, ecx
mov ecx, dword [0x10135cb0]
mov dword [ebp - 0x32c], eax
lea esi, [eax + edi]
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
mov ecx, dword [0x10135cb0]
mov edx, dword [ebp - 0x32c]
add edx, edi
mov eax, dword [ecx]
cvttss2si ecx, dword [ebp - 0x31c]
mov eax, dword [eax + 0x40]
add esi, ecx
mov ecx, dword [0x10135cb0]
push esi
push dword [ebp - 0x300]
push edx
mov edx, dword [ebp - 0x320]
add edx, 0xfffffffa
push edx
call eax
mov ecx, dword [0x10135cb0]
mov eax, dword [ecx]
mov edx, dword [eax + 0x38]
mov eax, dword [ebp - 0x30c]
movzx eax, al
shl eax, 0x18
or eax, 0xa0a0a
push eax
call edx
mov ecx, dword [0x10135cb0]
mov edx, dword [ebp - 0x320]
push esi
push dword [ebp - 0x300]
mov eax, dword [ecx]
add edx, 0xfffffffa
mov esi, dword [ebp - 0x32c]
add esi, edi
push esi
mov eax, dword [eax + 0x48]
push edx
call eax
cmp byte [ebp - 0x301], 0
mov edi, dword [ebp - 0x334]
mov edx, dword [ebp - 0x324]
je 0x100b40d0
cmp edx, 0x5d
jge 0x100b4122
lea ecx, [ebp - 0x138]
call fcn.1001e150
push 2
push eax
push ecx
mov eax, esp
mov dword [ebp - 4], 0xe
mov word [eax], 0x8282
mov byte [eax + 2], 0x82
jmp 0x100b40f6
cmp edx, 0x5d
jge 0x100b4122
lea ecx, [ebp - 0x138]
call fcn.1001e150
push 2
push eax
push ecx
mov eax, esp
mov dword [ebp - 4], 0xf
mov word [eax], 0xffff
mov byte [eax + 2], 0xff
mov ecx, dword [ebp - 0x344]
mov byte [eax + 3], cl
lea eax, [esi - 5]
push eax
mov eax, dword [ebp - 0x320]
mov ecx, 0x10139654
add eax, 0xfffffffb
push eax
call fcn.100a46b0
lea ecx, [ebp - 0x138]
call fcn.1000e010
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x15c], 0
mov dword [ebp - 4], 0x10
xorps xmm0, xmm0
mov al, byte [0x100e0a30]
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x128], 9
movq xmm0, qword [str.esp_flags]
mov dword [ebp - 0x124], 0xf
movq qword [ebp - 0x138], xmm0
mov byte [ebp - 0x130], al
mov byte [ebp - 0x12f], 0
lea eax, [ebp - 0x138]
mov byte [ebp - 4], 0x11
push eax
mov ecx, 0x10139780
call fcn.1000dd40
lea ecx, [ebp - 0x30c]
mov dword [ebp - 0x30c], 0
push ecx
mov ecx, eax
call fcn.1000dbc0
mov al, byte [eax]
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x124]
mov byte [ebp - 0x2f9], al
cmp ecx, 0x10
jb 0x100b4202
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b41f2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b41f2
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
mov al, byte [ebp - 0x2f9]
add esp, 8
mov esi, dword [ebp - 0x338]
test al, al
je 0x100b4328
mov eax, dword [0x10136ee4]
lea ecx, [ebp - 0x154]
add eax, esi
mov edx, 0x100e53d8
push eax
call fcn.10088260
add esp, 4
cmp byte [ebp - 0x301], 0
je 0x100b42c9
mov ecx, dword [ebp - 0x318]
mov byte [ebp - 4], 0x12
mov byte [ebp - 0x2fd], cl
lea ecx, [ebp - 0x300]
push ecx
push eax
lea ecx, [ebp - 0x13c]
mov word [ebp - 0x300], 0x8282
mov byte [ebp - 0x2fe], 0x82
call fcn.100bbdb0
lea eax, [ebp - 0x13c]
mov byte [ebp - 4], 0x13
push eax
push 0
lea ecx, [ebp - 0x164]
call fcn.10083070
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x128]
cmp ecx, 0x10
jb 0x100b431d
mov edx, dword [ebp - 0x13c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b42bd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b42bd
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
add esp, 8
jmp 0x100b431d
mov ecx, dword [ebp - 0x318]
mov byte [ebp - 4], 0x14
mov byte [ebp - 0x2fd], cl
lea ecx, [ebp - 0x300]
push ecx
push eax
lea ecx, [ebp - 0x13c]
mov word [ebp - 0x300], 0xc896
mov byte [ebp - 0x2fe], 0x3c
call fcn.100bbdb0
lea eax, [ebp - 0x13c]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x164]
call fcn.100bbb90
lea ecx, [ebp - 0x13c]
call fcn.1000e010
lea ecx, [ebp - 0x154]
call fcn.1000e010
mov al, byte [0x100e0a30]
xorps xmm0, xmm0
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x128], 9
movq xmm0, qword [str.esp_flags]
mov dword [ebp - 0x124], 0xf
movq qword [ebp - 0x138], xmm0
mov byte [ebp - 0x130], al
mov byte [ebp - 0x12f], 0
lea eax, [ebp - 0x138]
mov byte [ebp - 4], 0x16
push eax
mov ecx, 0x10139780
call fcn.1000dd40
lea ecx, [ebp - 0x30c]
mov dword [ebp - 0x30c], 1
push ecx
mov ecx, eax
call fcn.1000dbc0
mov al, byte [eax]
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x124]
mov byte [ebp - 0x2f9], al
cmp ecx, 0x10
jb 0x100b43e3
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b43d3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b43d3
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
mov al, byte [ebp - 0x2f9]
add esp, 8
test al, al
je 0x100b4604
mov eax, dword [0x10136f18]
cmp byte [esi + eax], 0
mov eax, dword [0x10136f34]
je 0x100b453d
cmp dword [eax + esi], 0
lea ecx, [ebp - 0x154]
jle 0x100b44a6
push 0x100e5400
call fcn.1000e060
cmp byte [ebp - 0x301], 0
je 0x100b4464
mov eax, dword [ebp - 0x318]
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x17
mov byte [ebp - 0x2fd], al
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x154]
mov word [ebp - 0x300], 0x8282
push eax
mov byte [ebp - 0x2fe], 0x82
call fcn.100bbdb0
mov byte [ebp - 4], 0x18
jmp 0x100b45dc
mov eax, dword [ebp - 0x318]
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x19
mov byte [ebp - 0x2fd], al
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x154]
mov word [ebp - 0x300], 0xffff
push eax
mov byte [ebp - 0x2fe], 0xff
call fcn.100bbdb0
mov byte [ebp - 4], 0x1a
jmp 0x100b45dc
push 0x100e53fc
call fcn.1000e060
cmp byte [ebp - 0x301], 0
je 0x100b44fb
mov eax, dword [ebp - 0x318]
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x1b
mov byte [ebp - 0x2fd], al
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x154]
mov word [ebp - 0x300], 0x8282
push eax
mov byte [ebp - 0x2fe], 0x82
call fcn.100bbdb0
mov byte [ebp - 4], 0x1c
jmp 0x100b45dc
mov eax, dword [ebp - 0x318]
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x1d
mov byte [ebp - 0x2fd], al
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x154]
mov word [ebp - 0x300], 0xffff
push eax
mov byte [ebp - 0x2fe], 0xff
call fcn.100bbdb0
mov byte [ebp - 4], 0x1e
jmp 0x100b45dc
cmp dword [eax + esi], 0
jle 0x100b4604
push 0x100e53d4
lea ecx, [ebp - 0x154]
call fcn.1000e060
cmp byte [ebp - 0x301], 0
je 0x100b459f
mov eax, dword [ebp - 0x318]
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x1f
mov byte [ebp - 0x2fd], al
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x154]
mov word [ebp - 0x300], 0x8282
push eax
mov byte [ebp - 0x2fe], 0x82
call fcn.100bbdb0
mov byte [ebp - 4], 0x20
jmp 0x100b45dc
mov eax, dword [ebp - 0x318]
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x21
mov byte [ebp - 0x2fd], al
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x154]
mov word [ebp - 0x300], 0xffff
push eax
mov byte [ebp - 0x2fe], 0xff
call fcn.100bbdb0
mov byte [ebp - 4], 0x22
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0x164]
call fcn.100bbb90
lea ecx, [ebp - 0x13c]
call fcn.1000e010
lea ecx, [ebp - 0x154]
call fcn.1000e010
mov al, byte [0x100e0a30]
xorps xmm0, xmm0
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x128], 9
movq xmm0, qword [str.esp_flags]
mov dword [ebp - 0x124], 0xf
movq qword [ebp - 0x138], xmm0
mov byte [ebp - 0x130], al
mov byte [ebp - 0x12f], 0
mov byte [ebp - 4], 0x23
mov ecx, 0x10139780
mov eax, dword [ebp - 0x314]
or eax, 4
mov dword [ebp - 0x314], eax
mov dword [ebp - 0x308], eax
lea eax, [ebp - 0x138]
push eax
call fcn.1000dd40
lea ecx, [ebp - 0x30c]
mov dword [ebp - 0x30c], 2
push ecx
mov ecx, eax
call fcn.1000dbc0
cmp byte [eax], 0
je 0x100b469d
mov eax, dword [0x10136f24]
mov byte [ebp - 0x2f9], 1
cmp byte [esi + eax], 0
jne 0x100b46a4
mov byte [ebp - 0x2f9], 0
mov dword [ebp - 4], 0x10
mov eax, dword [ebp - 0x314]
test al, 4
je 0x100b46fa
mov ecx, dword [ebp - 0x124]
and eax, 0xfffffffb
mov dword [ebp - 0x314], eax
cmp ecx, 0x10
jb 0x100b46fa
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b46f0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b46f0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
add esp, 8
cmp byte [ebp - 0x2f9], 0
je 0x100b47c4
push str.scoped
lea ecx, [ebp - 0x154]
call fcn.1000e060
cmp byte [ebp - 0x301], 0
je 0x100b475f
mov eax, dword [ebp - 0x318]
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x24
mov byte [ebp - 0x2fd], al
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x154]
mov word [ebp - 0x300], 0x8282
push eax
mov byte [ebp - 0x2fe], 0x82
call fcn.100bbdb0
mov byte [ebp - 4], 0x25
jmp 0x100b479c
mov eax, dword [ebp - 0x318]
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x26
mov byte [ebp - 0x2fd], al
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x154]
mov word [ebp - 0x300], 0xb43c
push eax
mov byte [ebp - 0x2fe], 0xe1
call fcn.100bbdb0
mov byte [ebp - 4], 0x27
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0x164]
call fcn.100bbb90
lea ecx, [ebp - 0x13c]
call fcn.1000e010
lea ecx, [ebp - 0x154]
call fcn.1000e010
mov al, byte [0x100e0a30]
xorps xmm0, xmm0
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x128], 9
movq xmm0, qword [str.esp_flags]
mov dword [ebp - 0x124], 0xf
movq qword [ebp - 0x138], xmm0
mov byte [ebp - 0x130], al
mov byte [ebp - 0x12f], 0
mov byte [ebp - 4], 0x28
mov ecx, 0x10139780
mov eax, dword [ebp - 0x314]
or eax, 8
mov dword [ebp - 0x314], eax
mov dword [ebp - 0x308], eax
lea eax, [ebp - 0x138]
push eax
call fcn.1000dd40
lea ecx, [ebp - 0x30c]
mov dword [ebp - 0x30c], 3
push ecx
mov ecx, eax
call fcn.1000dbc0
cmp byte [eax], 0
je 0x100b4865
mov eax, dword [0x10136f40]
mov byte [ebp - 0x2f9], 1
movss xmm0, dword [esi + eax]
comiss xmm0, dword [0x100e5558]
ja 0x100b486c
mov byte [ebp - 0x2f9], 0
mov dword [ebp - 4], 0x10
mov eax, dword [ebp - 0x314]
test al, 8
je 0x100b48c2
mov ecx, dword [ebp - 0x124]
and eax, 0xfffffff7
mov dword [ebp - 0x314], eax
cmp ecx, 0x10
jb 0x100b48c2
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b48b8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b48b8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
add esp, 8
cmp byte [ebp - 0x2f9], 0
je 0x100b49fb
cmp byte [ebp - 0x301], 0
je 0x100b4986
mov eax, dword [str.flashed]
xorps xmm0, xmm0
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x138], eax
mov ax, word [0x100e53f0]
mov word [ebp - 0x134], ax
mov al, byte [0x100e53f2]
mov dword [ebp - 0x128], 7
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x132], al
mov byte [ebp - 0x131], 0
mov eax, dword [ebp - 0x318]
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 0x29
mov byte [ebp - 0x2fd], al
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x138]
mov word [ebp - 0x300], 0x8282
push eax
mov byte [ebp - 0x2fe], 0x82
call fcn.100bbdb0
lea eax, [ebp - 0x158]
mov byte [ebp - 4], 0x2a
push eax
lea ecx, [ebp - 0x164]
call fcn.100bbb90
lea ecx, [ebp - 0x158]
call fcn.1000e010
lea ecx, [ebp - 0x138]
jmp 0x100b49f6
push str.flashed
lea ecx, [ebp - 0x154]
call fcn.1000e060
mov eax, dword [ebp - 0x318]
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x2b
mov byte [ebp - 0x2fd], al
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x154]
mov word [ebp - 0x300], 0xb43c
push eax
mov byte [ebp - 0x2fe], 0xe1
call fcn.100bbdb0
lea eax, [ebp - 0x13c]
mov byte [ebp - 4], 0x2c
push eax
lea ecx, [ebp - 0x164]
call fcn.100bbb90
lea ecx, [ebp - 0x13c]
call fcn.1000e010
lea ecx, [ebp - 0x154]
call fcn.1000e010
mov al, byte [0x100e0a30]
xorps xmm0, xmm0
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x128], 9
movq xmm0, qword [str.esp_flags]
mov dword [ebp - 0x124], 0xf
movq qword [ebp - 0x138], xmm0
mov byte [ebp - 0x130], al
mov byte [ebp - 0x12f], 0
lea eax, [ebp - 0x138]
mov byte [ebp - 4], 0x2d
push eax
mov ecx, 0x10139780
call fcn.1000dd40
lea ecx, [ebp - 0x30c]
mov dword [ebp - 0x30c], 4
push ecx
mov ecx, eax
call fcn.1000dbc0
mov al, byte [eax]
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x124]
mov byte [ebp - 0x2f9], al
cmp ecx, 0x10
jb 0x100b4ab6
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b4aa6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b4aa6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
mov al, byte [ebp - 0x2f9]
add esp, 8
test al, al
je 0x100b4be6
mov eax, dword [0x10135e3c]
mov ecx, dword [esi + eax]
movss xmm0, dword [ecx + 0x58]
ucomiss xmm0, dword [0x100e5558]
lahf
test ah, 0x44
jnp 0x100b4be6
mov esi, dword [ecx + 0x50]
mov ecx, dword [0x10135e54]
mov edx, dword [ebp - 0x338]
mov eax, dword [0x10135dfc]
mov dword [ebp - 0x30c], eax
cmp dword [ecx + edx], 0
jne 0x100b4b11
mov eax, dword [0x10135dd8]
mov ecx, edx
call eax
mov ecx, dword [0x10135e54]
mov eax, dword [ebp - 0x30c]
mov edx, esi
mov esi, dword [ebp - 0x338]
mov ecx, dword [ecx + esi]
call eax
cmp eax, 0x3c7
jne 0x100b4be6
push str.reload
lea ecx, [ebp - 0x154]
call fcn.1000e060
cmp byte [ebp - 0x301], 0
je 0x100b4b81
mov eax, dword [ebp - 0x318]
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x2e
mov byte [ebp - 0x2fd], al
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x154]
mov word [ebp - 0x300], 0x8282
push eax
mov byte [ebp - 0x2fe], 0x82
call fcn.100bbdb0
mov byte [ebp - 4], 0x2f
jmp 0x100b4bbe
mov eax, dword [ebp - 0x318]
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x30
mov byte [ebp - 0x2fd], al
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x154]
mov word [ebp - 0x300], 0xb43c
push eax
mov byte [ebp - 0x2fe], 0xe1
call fcn.100bbdb0
mov byte [ebp - 4], 0x31
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0x164]
call fcn.100bbb90
lea ecx, [ebp - 0x13c]
call fcn.1000e010
lea ecx, [ebp - 0x154]
call fcn.1000e010
mov al, byte [0x100e0a30]
xorps xmm0, xmm0
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x128], 9
movq xmm0, qword [str.esp_flags]
mov dword [ebp - 0x124], 0xf
movq qword [ebp - 0x138], xmm0
mov byte [ebp - 0x130], al
mov byte [ebp - 0x12f], 0
mov byte [ebp - 4], 0x32
mov ecx, 0x10139780
mov eax, dword [ebp - 0x314]
or eax, 0x10
mov dword [ebp - 0x314], eax
mov dword [ebp - 0x308], eax
lea eax, [ebp - 0x138]
push eax
call fcn.1000dd40
lea ecx, [ebp - 0x30c]
mov dword [ebp - 0x30c], 5
push ecx
mov ecx, eax
call fcn.1000dbc0
cmp byte [eax], 0
je 0x100b4c81
mov eax, dword [0x10135e08]
mov ecx, esi
call eax
mov byte [ebp - 0x2f9], 1
test al, al
jne 0x100b4c88
mov byte [ebp - 0x2f9], 0
mov dword [ebp - 4], 0x10
mov eax, dword [ebp - 0x314]
test al, 0x10
je 0x100b4cde
mov ecx, dword [ebp - 0x124]
and eax, 0xffffffef
mov dword [ebp - 0x314], eax
cmp ecx, 0x10
jb 0x100b4cde
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b4cd4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b4cd4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
add esp, 8
cmp byte [ebp - 0x2f9], 0
je 0x100b4dac
push str.bomb
lea ecx, [ebp - 0x154]
call fcn.1000e060
cmp byte [ebp - 0x301], 0
je 0x100b4d43
mov eax, dword [ebp - 0x318]
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x33
mov byte [ebp - 0x2fd], al
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x154]
mov word [ebp - 0x300], 0x8282
push eax
mov byte [ebp - 0x2fe], 0x82
call fcn.100bbdb0
mov byte [ebp - 4], 0x34
jmp 0x100b4d80
mov eax, dword [ebp - 0x318]
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x35
mov byte [ebp - 0x2fd], al
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x154]
mov word [ebp - 0x300], 0xff
push eax
mov byte [ebp - 0x2fe], 0
call fcn.100bbdb0
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0x164]
call fcn.100bbb90
lea ecx, [ebp - 0x13c]
call fcn.1000e010
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 0x10
call fcn.1000e010
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x28]
call eax
dec eax
mov ecx, esi
imul eax, eax, 0x514
add eax, 0x1011bf74
mov dword [ebp - 0x334], eax
call fcn.1001b010
mov esi, eax
mov dword [ebp - 0x348], 0x2ee
mov ecx, esi
mov dword [ebp - 0x324], esi
shr ecx, 0x1f
lea eax, [ebp - 0x324]
test cl, cl
mov dword [ebp - 0x30c], 0
lea edx, [ebp - 0x30c]
mov dword [ebp - 0x358], 0x3f800000
cmove edx, eax
mov dword [ebp - 0x120], 0
cmp esi, 0x2ee
lea eax, [ebp - 0x348]
xorps xmm1, xmm1
lea ecx, [ebp - 0x30c]
cmovle eax, edx
lea esi, [ebp - 0x358]
lea edx, [ebp - 0x348]
push pe_nt_image_headers32
push 0
movd xmm0, dword [eax]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x30c], 0
mulss xmm0, dword [0x100e55a4]
comiss xmm1, xmm0
movss dword [ebp - 0x348], xmm0
seta al
test al, al
cmove ecx, edx
comiss xmm0, dword [0x100e572c]
seta al
test al, al
lea eax, [ebp - 0x11c]
push eax
cmove esi, ecx
call sub.VCRUNTIME140.dll_memset
mov eax, dword [edi]
add esp, 0xc
mov ecx, edi
mov eax, dword [eax + 0x24]
call eax
test al, al
jne 0x100b4fe0
movd xmm0, dword [ebp - 0x324]
cvtdq2ps xmm0, xmm0
comiss xmm0, dword [0x100e58a4]
jbe 0x100b4fe0
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x28]
call eax
movss xmm0, dword [ebp + eax*4 - 0x120]
ucomiss xmm0, dword [esi]
lahf
test ah, 0x44
jnp 0x100b4f63
mov dword [ebp - 0x360], 0x3f800000
mov ecx, edi
mov dword [ebp - 0x330], 0
mov eax, dword [edi]
mov eax, dword [eax + 0x28]
call eax
movss xmm1, dword [esi]
lea ecx, [ebp - 0x120]
movss xmm0, dword [ecx + eax*4]
lea edx, [ebp - 0x330]
subss xmm1, xmm0
lea eax, [ecx + eax*4]
mov eax, dword [0x10135d00]
lea ecx, [ebp - 0x31c]
mulss xmm1, dword [eax + 0x14]
lea eax, [ebp - 0x360]
push eax
mulss xmm1, dword [0x100e5840]
addss xmm1, xmm0
movss dword [ebp - 0x31c], xmm1
call fcn.1000e790
add esp, 4
mov ecx, edi
movss xmm0, dword [eax]
mov eax, dword [edi]
movss dword [ebp - 0x30c], xmm0
mov eax, dword [eax + 0x28]
call eax
movss xmm0, dword [ebp - 0x30c]
movss dword [ebp + eax*4 - 0x120], xmm0
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x28]
call eax
push 0xff0000ff
push 0xffffffffffffffff
lea ecx, [ebp - 0x30c]
movss xmm3, dword [ebp + eax*4 - 0x120]
call fcn.100ae060
lea eax, [ebp - 0x324]
mov edx, str._ims
push eax
lea ecx, [ebp - 0x154]
call fcn.10088260
add esp, 0xc
lea ecx, [ebp - 0x30c]
push ecx
push eax
lea ecx, [ebp - 0x13c]
call fcn.100bbde0
mov eax, ecx
mov byte [ebp - 4], 0x38
push eax
lea ecx, [ebp - 0x164]
call fcn.100bbb90
lea ecx, [ebp - 0x13c]
call fcn.1000e010
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 0x10
call fcn.1000e010
mov esi, dword [ebp - 0x334]
test esi, esi
je 0x100b55c1
cmp dword [esi + 0x74], 0
je 0x100b55c1
cmp byte [ebp - 0x301], 0
jne 0x100b55c1
lea ecx, [esi + 0x64]
call fcn.1000df90
cmp dword [eax], 0
je 0x100b55c1
push esi
call fcn.100a7610
mov ecx, edi
test eax, eax
je 0x100b5193
cmp dword [eax + 0x10], 1
mov eax, dword [edi]
mov eax, dword [eax + 0x28]
jne 0x100b50e4
call eax
movss xmm0, dword [eax*4 + 0x101354c8]
mov ecx, edi
movss xmm1, dword [0x100e572c]
subss xmm1, xmm0
lea eax, [eax*4 + 0x101354c8]
mov eax, dword [0x10135d00]
mulss xmm1, dword [eax + 0x14]
mov eax, dword [edi]
mulss xmm1, dword [0x100e5878]
mov eax, dword [eax + 0x28]
addss xmm1, xmm0
movss dword [ebp - 0x30c], xmm1
call eax
movss xmm0, dword [ebp - 0x30c]
mov ecx, edi
movss dword [eax*4 + 0x101354c8], xmm0
mov eax, dword [edi]
mov eax, dword [eax + 0x28]
call eax
movss xmm1, dword [0x100e572c]
lea ecx, [eax*4 + 0x101353c0]
mov eax, dword [0x10135d00]
movss xmm0, dword [eax + 0x14]
mulss xmm0, dword [0x100e5878]
mov eax, dword [edi]
subss xmm1, xmm0
mov eax, dword [eax + 0x28]
mulss xmm1, dword [ecx]
mov ecx, edi
movss dword [ebp - 0x30c], xmm1
call eax
movss xmm0, dword [ebp - 0x30c]
movss dword [eax*4 + 0x101353c0], xmm0
jmp 0x100b5239
call eax
movss xmm1, dword [0x100e572c]
lea ecx, [eax*4 + 0x101354c8]
mov eax, dword [0x10135d00]
movss xmm0, dword [eax + 0x14]
mulss xmm0, dword [0x100e5878]
mov eax, dword [edi]
subss xmm1, xmm0
mov eax, dword [eax + 0x28]
mulss xmm1, dword [ecx]
mov ecx, edi
movss dword [ebp - 0x30c], xmm1
call eax
movss xmm0, dword [ebp - 0x30c]
mov ecx, edi
movss dword [eax*4 + 0x101354c8], xmm0
mov eax, dword [edi]
mov eax, dword [eax + 0x28]
call eax
movss xmm0, dword [eax*4 + 0x101353c0]
mov ecx, edi
movss xmm1, dword [0x100e572c]
subss xmm1, xmm0
lea eax, [eax*4 + 0x101353c0]
mov eax, dword [0x10135d00]
mulss xmm1, dword [eax + 0x14]
mov eax, dword [edi]
mulss xmm1, dword [0x100e5878]
mov eax, dword [eax + 0x28]
addss xmm1, xmm0
movss dword [ebp - 0x30c], xmm1
call eax
movss xmm0, dword [ebp - 0x30c]
movss dword [eax*4 + 0x101353c0], xmm0
jmp 0x100b5239
mov eax, dword [edi]
mov eax, dword [eax + 0x28]
call eax
movss xmm1, dword [0x100e572c]
lea ecx, [eax*4 + 0x101353c0]
mov eax, dword [0x10135d00]
movss xmm0, dword [eax + 0x14]
mulss xmm0, dword [0x100e5878]
mov eax, dword [edi]
subss xmm1, xmm0
mov eax, dword [eax + 0x28]
mulss xmm1, dword [ecx]
mov ecx, edi
movss dword [ebp - 0x30c], xmm1
call eax
movss xmm0, dword [ebp - 0x30c]
mov ecx, edi
movss dword [eax*4 + 0x101353c0], xmm0
mov eax, dword [edi]
mov eax, dword [eax + 0x28]
call eax
movss xmm1, dword [0x100e572c]
lea ecx, [eax*4 + 0x101354c8]
mov eax, dword [0x10135d00]
movss xmm0, dword [eax + 0x14]
mulss xmm0, dword [0x100e5878]
mov eax, dword [edi]
subss xmm1, xmm0
mov eax, dword [eax + 0x28]
mulss xmm1, dword [ecx]
mov ecx, edi
movss dword [ebp - 0x30c], xmm1
call eax
movss xmm0, dword [ebp - 0x30c]
movss dword [eax*4 + 0x101354c8], xmm0
mov dword [ebp - 0x30c], 0x3f800000
mov ecx, edi
mov dword [ebp - 0x348], 0
mov eax, dword [edi]
mov eax, dword [eax + 0x28]
call eax
lea ecx, [ebp - 0x30c]
push ecx
lea edx, [ebp - 0x348]
lea ecx, [eax*4 + 0x101354c8]
call fcn.1000e790
add esp, 4
mov ecx, edi
movss xmm0, dword [eax]
mov eax, dword [edi]
movss dword [ebp - 0x358], xmm0
mov eax, dword [eax + 0x28]
call eax
movss xmm0, dword [ebp - 0x358]
mov ecx, edi
mov dword [ebp - 0x30c], 0x3f800000
mov dword [ebp - 0x348], 0
movss dword [eax*4 + 0x101354c8], xmm0
mov eax, dword [edi]
mov eax, dword [eax + 0x28]
call eax
lea ecx, [ebp - 0x30c]
push ecx
lea edx, [ebp - 0x348]
lea ecx, [eax*4 + 0x101353c0]
call fcn.1000e790
add esp, 4
mov ecx, edi
movss xmm0, dword [eax]
mov eax, dword [edi]
movss dword [ebp - 0x358], xmm0
mov eax, dword [eax + 0x28]
call eax
movss xmm0, dword [ebp - 0x358]
mov ecx, edi
movss dword [eax*4 + 0x101353c0], xmm0
mov eax, dword [edi]
mov eax, dword [eax + 0x28]
call eax
movd xmm0, dword [ebp - 0x318]
cvtdq2ps xmm0, xmm0
push ecx
mulss xmm0, dword [eax*4 + 0x101354c8]
movss dword [ebp - 0x30c], xmm0
fld dword [ebp - 0x30c]
fstp dword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
fstp dword [ebp - 0x31c]
cvttss2si eax, dword [ebp - 0x31c]
add esp, 4
test eax, eax
jle 0x100b539e
push str.esp_flags
lea ecx, [ebp - 0x154]
call fcn.1000e060
mov byte [ebp - 4], 0x39
mov ecx, 0x10139780
mov eax, dword [ebp - 0x314]
or eax, 0x20
mov dword [ebp - 0x314], eax
mov dword [ebp - 0x308], eax
lea eax, [ebp - 0x154]
push eax
call fcn.1000dd40
lea ecx, [ebp - 0x30c]
mov dword [ebp - 0x30c], 6
push ecx
mov ecx, eax
call fcn.1000dbc0
mov byte [ebp - 0x2f9], 1
cmp byte [eax], 0
jne 0x100b53a5
mov byte [ebp - 0x2f9], 0
mov dword [ebp - 4], 0x10
mov eax, dword [ebp - 0x314]
test al, 0x20
je 0x100b53ca
and eax, 0xffffffdf
lea ecx, [ebp - 0x154]
mov dword [ebp - 0x314], eax
call fcn.1000e010
cmp byte [ebp - 0x2f9], 0
je 0x100b5452
push 0x100e5404
lea ecx, [ebp - 0x154]
call fcn.1000e060
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x13c]
cvttss2si eax, dword [ebp - 0x31c]
mov word [ebp - 0x300], 0xff00
mov byte [ebp - 0x2fe], 0
mov byte [ebp - 0x2fd], al
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.100bbdb0
lea eax, [ebp - 0x13c]
mov byte [ebp - 4], 0x3b
push eax
lea ecx, [ebp - 0x164]
call fcn.100bbb90
lea ecx, [ebp - 0x13c]
call fcn.1000e010
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 0x10
call fcn.1000e010
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [ebp - 0x318]
push ecx
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [eax*4 + 0x101353c0]
movss dword [ebp - 0x30c], xmm0
fld dword [ebp - 0x30c]
fstp dword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
fstp dword [ebp - 0x31c]
cvttss2si eax, dword [ebp - 0x31c]
add esp, 4
test eax, eax
jle 0x100b550d
movss xmm0, dword [esi + 0x54]
ucomiss xmm0, dword [0x100e59b8]
lahf
test ah, 0x44
jnp 0x100b550d
push str.esp_flags
lea ecx, [ebp - 0x154]
call fcn.1000e060
mov byte [ebp - 4], 0x3c
mov ecx, 0x10139780
mov eax, dword [ebp - 0x314]
or eax, 0x40
mov dword [ebp - 0x314], eax
mov dword [ebp - 0x308], eax
lea eax, [ebp - 0x154]
push eax
call fcn.1000dd40
lea ecx, [ebp - 0x30c]
mov dword [ebp - 0x30c], 7
push ecx
mov ecx, eax
call fcn.1000dbc0
mov byte [ebp - 0x2f9], 1
cmp byte [eax], 0
jne 0x100b5514
mov byte [ebp - 0x2f9], 0
mov dword [ebp - 4], 0x10
mov eax, dword [ebp - 0x314]
test al, 0x40
je 0x100b5539
and eax, 0xffffffbf
lea ecx, [ebp - 0x154]
mov dword [ebp - 0x314], eax
call fcn.1000e010
cmp byte [ebp - 0x2f9], 0
je 0x100b55c1
push str.lby_bt
lea ecx, [ebp - 0x154]
call fcn.1000e060
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x13c]
cvttss2si eax, dword [ebp - 0x31c]
mov word [ebp - 0x300], 0xffb4
mov byte [ebp - 0x2fe], 0
mov byte [ebp - 0x2fd], al
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.100bbdb0
lea eax, [ebp - 0x13c]
mov byte [ebp - 4], 0x3e
push eax
lea ecx, [ebp - 0x164]
call fcn.100bbb90
lea ecx, [ebp - 0x13c]
call fcn.1000e010
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 0x10
call fcn.1000e010
mov ecx, dword [ebp - 0x160]
mov eax, 0x92492493
mov esi, dword [ebp - 0x164]
sub ecx, esi
imul ecx
mov dword [ebp - 0x300], 0
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x30c], eax
je 0x100b56fb
mov eax, dword [0x1013968c]
mov ecx, esi
dec eax
imul eax, dword [ebp - 0x300]
cmp dword [esi + 0x14], 0x10
mov dword [ebp - 0x334], eax
jb 0x100b5615
mov ecx, dword [esi]
mov edx, dword [esi + 0x10]
push 2
push 0x100e5404
call fcn.10011140
add esp, 8
test al, al
je 0x100b5674
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x28]
call eax
movss xmm0, dword [0x100e572c]
subss xmm0, dword [eax*4 + 0x101354c8]
mulss xmm0, dword [0x100e5884]
mov eax, dword [ebp - 0x334]
add eax, dword [ebp - 0x33c]
push 0
cvttss2si ecx, xmm0
push esi
push dword [esi + 0x18]
push eax
mov eax, dword [ebp - 0x340]
add eax, ecx
mov ecx, dword [ebp - 0x320]
jmp 0x100b56cf
cmp dword [esi + 0x14], 0x10
mov ecx, esi
jb 0x100b567e
mov ecx, dword [esi]
mov edx, dword [esi + 0x10]
push 6
push str.lby_bt
call fcn.10011140
add esp, 8
test al, al
je 0x100b56b0
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x28]
call eax
movss xmm0, dword [0x100e572c]
subss xmm0, dword [eax*4 + 0x101353c0]
jmp 0x100b5645
mov eax, dword [ebp - 0x334]
add eax, dword [ebp - 0x33c]
mov ecx, dword [ebp - 0x340]
push 0
push esi
push dword [esi + 0x18]
push eax
mov eax, dword [ebp - 0x320]
add ecx, 3
add eax, ecx
mov ecx, 0x10139654
push eax
call fcn.100a46b0
mov eax, dword [ebp - 0x300]
add esi, 0x1c
inc eax
mov dword [ebp - 0x300], eax
cmp eax, dword [ebp - 0x30c]
jb 0x100b55f8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [ebp - 0x164]
test esi, esi
je 0x100b576e
mov edx, dword [ebp - 0x160]
push ecx
mov ecx, esi
call fcn.10083000
mov ecx, dword [ebp - 0x15c]
mov eax, 0x92492493
sub ecx, esi
add esp, 4
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax*8]
sub ecx, eax
mov eax, esi
shl ecx, 2
cmp ecx, 0x1000
jb 0x100b5764
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b5764
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push esi
call fcn.100c0328
add esp, 8
mov ax, word [0x100e0dc4]
xorps xmm0, xmm0
movups xmmword [ebp - 0x138], xmm0
mov word [ebp - 0x130], ax
movq xmm0, qword [str.esp_lby_bar]
mov al, byte [0x100e0dc6]
mov dword [ebp - 0x32c], 0
mov dword [ebp - 0x128], 0xb
mov dword [ebp - 0x124], 0xf
movq qword [ebp - 0x138], xmm0
mov byte [ebp - 0x12e], al
mov byte [ebp - 0x12d], 0
mov dword [ebp - 4], 0x3f
mov ecx, 0x10139700
mov eax, dword [ebp - 0x314]
or eax, 0x80
mov dword [ebp - 0x314], eax
mov dword [ebp - 0x308], eax
lea eax, [ebp - 0x138]
push eax
call fcn.1000dda0
cmp byte [eax], 0
je 0x100b5809
cmp byte [ebp - 0x301], 0
mov byte [ebp - 0x2f9], 1
je 0x100b5810
mov byte [ebp - 0x2f9], 0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x314]
test al, al
jns 0x100b5868
mov ecx, dword [ebp - 0x124]
and eax, 0xffffff7f
mov dword [ebp - 0x314], eax
cmp ecx, 0x10
jb 0x100b5868
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b585e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b585e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
add esp, 8
cmp byte [ebp - 0x2f9], 0
je 0x100b5a8a
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x28]
call eax
dec eax
imul esi, eax, 0x514
add esi, 0x1011bf74
je 0x100b5a8a
cmp dword [esi + 0x74], 0
je 0x100b5a8a
cmp byte [esi + 0x4f4], 0
je 0x100b5a8a
mov edx, dword [esi + 0x70]
mov eax, edx
mov ecx, dword [esi + 0x6c]
and edx, 1
shr eax, 1
dec ecx
and ecx, eax
mov eax, dword [esi + 0x68]
mov eax, dword [eax + ecx*4]
mov ecx, dword [eax + edx*8]
test ecx, ecx
je 0x100b5a8a
movss xmm0, dword [esi + 0x54]
ucomiss xmm0, dword [0x100e59b8]
lahf
test ah, 0x44
jnp 0x100b5a8a
subss xmm0, dword [ecx + 0x44]
lea eax, [ebp - 0x30c]
mov dword [ebp - 0x30c], 0x3f800000
push eax
lea edx, [ebp - 0x348]
mov dword [ebp - 0x348], 0
lea ecx, [ebp - 0x358]
mulss xmm0, dword [0x100e5714]
movss dword [ebp - 0x358], xmm0
call fcn.1000e790
mov ecx, dword [ebp - 0x340]
mov edx, dword [ebp - 0x344]
mov edi, dword [ebp - 0x33c]
movss xmm0, dword [eax]
mov eax, esp
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
push 4
mov word [eax], 0x6e6e
mov byte [eax + 2], 0x6e
mov byte [eax + 3], dl
mov edx, dword [ebp - 0x354]
add edx, 2
mulss xmm0, xmm1
add edi, edx
push ecx
mov ecx, dword [ebp - 0x320]
mov edx, edi
movss dword [ebp - 0x30c], xmm0
call fcn.100a42a0
add esp, 0xc
lea ecx, [ebp - 0x138]
push 0x100e0dd8
call fcn.1000e060
lea eax, [ebp - 0x138]
mov dword [ebp - 4], 0x40
push eax
mov ecx, 0x10139760
call fcn.1000dd60
movss xmm1, dword [0x100e5940]
movss xmm0, dword [eax + 8]
mulss xmm0, xmm1
cvttss2si edx, xmm0
movss xmm0, dword [eax + 4]
mulss xmm0, xmm1
mov byte [ebp - 0x326], dl
cvttss2si ecx, xmm0
movss xmm0, dword [eax]
mulss xmm0, xmm1
mov byte [ebp - 0x327], cl
lea ecx, [ebp - 0x138]
mov dword [ebp - 4], 0xffffffff
cvttss2si eax, xmm0
mov byte [ebp - 0x328], al
call fcn.1000e010
cmp byte [ebp - 0x301], 0
je 0x100b5a0e
mov dword [ebp - 0x300], 0xff6e6e6e
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x328], eax
mov eax, dword [ebp - 0x318]
mov edx, edi
cvttss2si esi, dword [ebp - 0x30c]
mov ecx, dword [ebp - 0x320]
mov byte [ebp - 0x325], al
mov eax, dword [ebp - 0x364]
mov word [ebp - 0x300], 0xa0a
mov byte [ebp - 0x2fe], 0xa
movss xmm0, dword [eax]
mulss xmm0, dword [0x100e592c]
push dword [ebp - 0x328]
cvttss2si eax, xmm0
push 4
push esi
mov byte [ebp - 0x2fd], al
call fcn.100a42a0
mov ecx, dword [ebp - 0x320]
add esp, 0xc
mov edx, edi
push dword [ebp - 0x300]
push 4
push esi
call fcn.100a4260
add esp, 0xc
mov dword [ebp - 0x32c], 5
mov eax, dword [0x10136f74]
mov ecx, dword [ebp - 0x338]
mov eax, dword [ecx + eax]
mov ecx, dword [0x10135ca8]
push ecx
mov edx, dword [ecx]
mov esi, dword [edx + 0x10]
mov edx, esp
mov dword [edx], eax
call esi
mov edi, eax
mov dword [ebp - 0x31c], edi
test edi, edi
je 0x100b6731
cmp byte [ebp - 0x301], 0
jne 0x100b6731
mov ecx, dword [edi]
mov edx, dword [ecx + 0x6f8]
mov ecx, edi
call edx
test eax, eax
je 0x100b6731
mov ecx, dword [eax + 0x14]
mov eax, dword [0x10136f90]
mov edx, dword [ebp - 0x338]
mov dword [ebp - 0x324], ecx
mov eax, dword [edi + eax]
mov dword [ebp - 0x328], eax
mov eax, dword [0x10135e3c]
mov esi, dword [edx + eax]
movss xmm0, dword [esi + 0x58]
ucomiss xmm0, dword [0x100e5558]
lahf
test ah, 0x44
jnp 0x100b5b67
mov ecx, dword [0x10135dfc]
mov eax, dword [esi + 0x50]
mov dword [ebp - 0x348], ecx
mov ecx, dword [0x10135e54]
mov dword [ebp - 0x30c], eax
cmp dword [ecx + edx], 0
jne 0x100b5b48
mov eax, dword [0x10135dd8]
mov ecx, edx
call eax
mov ecx, dword [0x10135e54]
mov eax, dword [ebp - 0x30c]
mov edx, eax
mov eax, dword [ebp - 0x338]
mov ecx, dword [ecx + eax]
call dword [ebp - 0x348]
mov byte [ebp - 0x301], 1
cmp eax, 0x3c7
je 0x100b5b6e
mov byte [ebp - 0x301], 0
cmp dword [ebp - 0x324], 0xffffffff
je 0x100b5bef
xorps xmm0, xmm0
mov dword [ebp - 0x128], 8
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x124], 0xf
mov dword [ebp - 0x138], 0x5f707365
mov dword [ebp - 0x134], 0x6f6d6d61
mov byte [ebp - 0x130], 0
mov dword [ebp - 4], 0x41
mov ecx, 0x10139700
mov eax, dword [ebp - 0x314]
or eax, 0x100
mov dword [ebp - 0x314], eax
mov dword [ebp - 0x308], eax
lea eax, [ebp - 0x138]
push eax
call fcn.1000dda0
mov byte [ebp - 0x2f9], 1
cmp byte [eax], 0
jne 0x100b5bf6
mov byte [ebp - 0x2f9], 0
mov dword [ebp - 4], 0xffffffff
test dword [ebp - 0x314], 0x100
je 0x100b5c45
mov ecx, dword [ebp - 0x124]
cmp ecx, 0x10
jb 0x100b5c45
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b5c3b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b5c3b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
add esp, 8
cmp byte [ebp - 0x2f9], 0
je 0x100b5f77
cmp byte [ebp - 0x301], 0
je 0x100b5c62
movss xmm1, dword [esi + 0x64]
jmp 0x100b5c7c
movd xmm1, dword [ebp - 0x328]
movd xmm0, dword [ebp - 0x324]
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm0, xmm0
divss xmm1, xmm0
movd xmm0, dword [ebp - 0x340]
cvtdq2ps xmm0, xmm0
push ecx
mulss xmm1, xmm0
movss dword [ebp - 0x30c], xmm1
fld dword [ebp - 0x30c]
fstp dword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
mov eax, dword [ebp - 0x344]
add esp, 4
mov ecx, dword [0x10135cb0]
mov byte [ebp - 0x2fd], al
mov eax, dword [ebp - 0x32c]
add eax, dword [ebp - 0x354]
add eax, dword [ebp - 0x33c]
mov dword [ebp - 0x308], eax
mov word [ebp - 0x300], 0x6e6e
mov byte [ebp - 0x2fe], 0x6e
push dword [ebp - 0x300]
lea esi, [eax + 2]
mov eax, dword [ecx]
fstp dword [ebp - 0x360]
mov eax, dword [eax + 0x38]
call eax
mov ecx, dword [0x10135cb0]
mov eax, dword [ecx]
mov edx, dword [eax + 0x40]
lea eax, [esi + 4]
push eax
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0x320]
add eax, dword [ebp - 0x340]
push eax
push esi
push dword [ebp - 0x320]
call edx
mov eax, dword [0x100e08bc]
xorps xmm0, xmm0
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x128], 0xc
movq xmm0, qword [0x100e08b4]
mov dword [ebp - 0x124], 0xf
movq qword [ebp - 0x138], xmm0
mov dword [ebp - 0x130], eax
mov byte [ebp - 0x12c], 0
lea eax, [ebp - 0x138]
mov dword [ebp - 4], 0x42
push eax
mov ecx, 0x10139760
call fcn.1000dd60
movss xmm1, dword [0x100e5940]
movss xmm0, dword [eax + 8]
mulss xmm0, xmm1
cvttss2si ecx, xmm0
movss xmm0, dword [eax + 4]
mulss xmm0, xmm1
mov dword [ebp - 0x30c], ecx
cvttss2si ecx, xmm0
movss xmm0, dword [eax]
mulss xmm0, xmm1
mov dword [ebp - 0x348], ecx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x124]
cvttss2si eax, xmm0
mov dword [ebp - 0x358], eax
cmp ecx, 0x10
jb 0x100b5dfb
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b5df1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b5df1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
add esp, 8
mov eax, dword [ebp - 0x364]
mov ecx, dword [0x10135cb0]
movss xmm0, dword [eax]
mulss xmm0, dword [0x100e592c]
cvttss2si eax, xmm0
mov dword [ebp - 0x330], eax
mov eax, dword [ecx]
mov esi, dword [eax + 0x38]
mov eax, dword [ebp - 0x318]
movzx edx, al
mov eax, dword [ebp - 0x30c]
shl edx, 8
movzx eax, al
or edx, eax
mov eax, dword [ebp - 0x348]
shl edx, 8
movzx eax, al
or edx, eax
mov eax, dword [ebp - 0x358]
shl edx, 8
movzx eax, al
or edx, eax
push edx
call esi
cvttss2si edx, dword [ebp - 0x360]
mov ecx, dword [0x10135cb0]
mov edi, dword [ebp - 0x308]
mov esi, dword [ebp - 0x320]
mov eax, dword [ecx]
push dword [ebp - 0x334]
mov eax, dword [eax + 0x40]
add esi, edx
push esi
lea edx, [edi + 2]
push edx
push dword [ebp - 0x320]
call eax
mov ecx, dword [0x10135cb0]
mov eax, dword [ecx]
mov edx, dword [eax + 0x38]
mov eax, dword [ebp - 0x330]
movzx eax, al
shl eax, 0x18
or eax, 0xa0a0a
push eax
call edx
mov ecx, dword [0x10135cb0]
lea edx, [edi + 2]
push dword [ebp - 0x334]
push esi
mov eax, dword [ecx]
push edx
push dword [ebp - 0x320]
mov eax, dword [eax + 0x48]
call eax
mov eax, 0x66666667
sub esp, 8
imul dword [ebp - 0x324]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x310], xmm0
fld qword [ebp - 0x310]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_round
mov ecx, dword [ebp - 0x328]
add esp, 8
mov edi, dword [ebp - 0x31c]
fstp qword [ebp - 0x310]
cvttsd2si eax, qword [ebp - 0x310]
cmp ecx, eax
jg 0x100b5f70
cmp byte [ebp - 0x301], 0
jne 0x100b5f70
mov edx, ecx
lea ecx, [ebp - 0x138]
call fcn.1001e150
push 2
push eax
push ecx
mov ecx, dword [ebp - 0x344]
mov eax, esp
mov dword [ebp - 4], 0x44
push dword [ebp - 0x308]
mov word [eax], 0xffff
mov byte [eax + 2], 0xff
mov byte [eax + 3], cl
mov ecx, 0x10139654
push esi
call fcn.100a46b0
lea ecx, [ebp - 0x138]
call fcn.1000e010
add dword [ebp - 0x32c], 6
mov eax, dword [0x100e0880]
xorps xmm0, xmm0
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x130], eax
movq xmm0, qword [0x100e0878]
mov ax, word [0x100e0884]
mov dword [ebp - 0x128], 0xe
mov dword [ebp - 0x124], 0xf
movq qword [ebp - 0x138], xmm0
mov word [ebp - 0x12c], ax
mov byte [ebp - 0x12a], 0
lea eax, [ebp - 0x138]
mov dword [ebp - 4], 0x45
push eax
mov ecx, 0x10139760
call fcn.1000dd60
movss xmm1, dword [0x100e5940]
movss xmm0, dword [eax + 0xc]
mulss xmm0, xmm1
cvttss2si ecx, xmm0
movss xmm0, dword [eax + 8]
mulss xmm0, xmm1
mov dword [ebp - 0x30c], ecx
cvttss2si edx, xmm0
movss xmm0, dword [eax + 4]
mulss xmm0, xmm1
mov byte [ebp - 0x326], dl
cvttss2si ecx, xmm0
movss xmm0, dword [eax]
mulss xmm0, xmm1
mov byte [ebp - 0x327], cl
cvttss2si eax, xmm0
mov byte [ebp - 0x328], al
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x124]
mov byte [ebp - 0x325], al
cmp ecx, 0x10
jb 0x100b607e
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b6074
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b6074
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
add esp, 8
mov ax, word [0x100e086c]
xorps xmm0, xmm0
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x128], 0xa
movq xmm0, qword [str.esp_weapon]
mov dword [ebp - 0x124], 0xf
movq qword [ebp - 0x138], xmm0
mov word [ebp - 0x130], ax
mov byte [ebp - 0x12e], 0
lea eax, [ebp - 0x138]
mov dword [ebp - 4], 0x46
push eax
mov ecx, 0x10139780
call fcn.1000dd40
lea ecx, [ebp - 0x30c]
mov dword [ebp - 0x30c], 0
push ecx
mov ecx, eax
call fcn.1000dbc0
mov al, byte [eax]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x124]
mov byte [ebp - 0x2f9], al
cmp ecx, 0x10
jb 0x100b6141
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b6131
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b6131
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
mov al, byte [ebp - 0x2f9]
add esp, 8
mov esi, dword [ebp - 0x328]
test al, al
je 0x100b658d
mov eax, dword [0x10135e18]
mov ecx, edi
call eax
mov ecx, eax
test ecx, ecx
jne 0x100b61a0
mov al, byte [0x100df204]
xorps xmm0, xmm0
mov edi, dword [str.error]
mov edx, 0xf
movups xmmword [ebp - 0x188], xmm0
mov dword [ebp - 0x178], 5
mov dword [ebp - 0x174], edx
mov dword [ebp - 0x188], edi
mov byte [ebp - 0x184], al
mov byte [ebp - 0x183], 0
jmp 0x100b6483
mov eax, dword [0x10135e1c]
call eax
mov ecx, eax
test ecx, ecx
je 0x100b615e
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
mov ecx, dword [0x10135cf0]
push eax
mov edx, dword [ecx]
mov edx, dword [edx + 0x30]
call edx
mov edx, eax
mov dword [ebp - 0x128], 0
mov ecx, edx
mov dword [ebp - 0x124], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x138], xmm0
lea edi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100b61e7
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x138]
call fcn.1001d1a0
mov dword [ebp - 4], 0x47
xorps xmm0, xmm0
movups xmmword [ebp - 0x1a0], xmm0
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0xf
mov byte [ebp - 0x1a0], 0
mov byte [ebp - 4], 0x48
mov edx, dword [ebp - 0x128]
test edx, edx
jne 0x100b6267
mov dword [ebp - 0x178], edx
mov edx, 0xf
movups xmmword [ebp - 0x188], xmm0
mov dword [ebp - 0x174], edx
mov byte [ebp - 0x188], 0
mov dword [ebp - 0x18c], edx
jmp 0x100b6400
cmp dword [ebp - 0x124], 8
lea eax, [ebp - 0x138]
mov ecx, dword [0x10135b94]
cmovae eax, dword [ebp - 0x138]
push 0
push 0
push 0
push 0
push edx
push eax
push 0
push 0xfde9
call ecx
push ecx
push eax
lea ecx, [ebp - 0x170]
mov dword [ebp - 0x30c], eax
call fcn.1001cd30
mov edi, eax
lea eax, [ebp - 0x1a0]
cmp eax, edi
je 0x100b6334
mov ecx, dword [ebp - 0x18c]
cmp ecx, 0x10
jb 0x100b62f1
mov edx, dword [ebp - 0x1a0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b62e7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b644a
push ecx
push edx
call fcn.100c0328
add esp, 8
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0xf
mov byte [ebp - 0x1a0], 0
movups xmm0, xmmword [edi]
movups xmmword [ebp - 0x1a0], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [ebp - 0x190], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
mov ecx, dword [ebp - 0x15c]
cmp ecx, 0x10
jb 0x100b636e
mov edx, dword [ebp - 0x170]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b6364
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b644a
push ecx
push edx
call fcn.100c0328
add esp, 8
cmp dword [ebp - 0x18c], 0x10
lea ecx, [ebp - 0x1a0]
mov edx, dword [0x10135b94]
lea eax, [ebp - 0x138]
cmovae ecx, dword [ebp - 0x1a0]
cmp dword [ebp - 0x124], 8
push 0
cmovae eax, dword [ebp - 0x138]
push 0
push dword [ebp - 0x30c]
mov dword [ebp - 0x160], 0
push ecx
push dword [ebp - 0x128]
mov dword [ebp - 0x15c], 0xf
push eax
push 0
push 0xfde9
mov byte [ebp - 0x170], 0
call edx
movups xmm0, xmmword [ebp - 0x1a0]
movups xmmword [ebp - 0x188], xmm0
movq xmm0, qword [ebp - 0x190]
movq qword [ebp - 0x178], xmm0
mov edx, dword [ebp - 0x174]
mov dword [ebp - 0x18c], 0xf
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x124]
mov byte [ebp - 0x1a0], 0
mov dword [ebp - 0x190], 0
cmp ecx, 8
jb 0x100b6460
mov edx, dword [ebp - 0x138]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100b6450
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b6450
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
mov edx, dword [ebp - 0x174]
add esp, 8
mov edi, dword [ebp - 0x188]
xor eax, eax
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 7
mov word [ebp - 0x138], ax
mov dword [ebp - 0x324], edi
cmp edx, 0x10
mov dword [ebp - 4], 0x49
lea eax, [ebp - 0x188]
cmovae eax, edi
lea ecx, [ebp - 0x188]
cmovae ecx, edi
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0x178]
lea edi, [ebp - 0x188]
add eax, ecx
cmp edx, 0x10
mov dword [ebp - 0x30c], eax
cmovae edi, dword [ebp - 0x324]
cmp edi, eax
je 0x100b64ff
sub dword [ebp - 0x334], edi
mov esi, dword [ebp - 0x334]
nop dword [eax]
movsx eax, byte [edi]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [edi + esi], al
add esp, 4
inc edi
cmp edi, dword [ebp - 0x30c]
jne 0x100b64e0
mov esi, dword [ebp - 0x328]
push 2
lea eax, [ebp - 0x188]
mov ecx, 0x10139654
push eax
mov eax, dword [ebp - 0x32c]
add eax, dword [ebp - 0x354]
add eax, dword [ebp - 0x33c]
push esi
push eax
mov eax, dword [ebp - 0x340]
cdq
sub eax, edx
sar eax, 1
add eax, dword [ebp - 0x320]
push eax
call fcn.100a46b0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x174]
cmp ecx, 0x10
jb 0x100b657b
mov edx, dword [ebp - 0x188]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b6571
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b6571
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
add esp, 8
mov edi, dword [ebp - 0x31c]
mov dword [ebp - 0x324], 0xb
jmp 0x100b6597
mov dword [ebp - 0x324], 2
mov ax, word [0x100e086c]
xorps xmm0, xmm0
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x128], 0xa
movq xmm0, qword [str.esp_weapon]
mov dword [ebp - 0x124], 0xf
movq qword [ebp - 0x138], xmm0
mov word [ebp - 0x130], ax
mov byte [ebp - 0x12e], 0
lea eax, [ebp - 0x138]
mov dword [ebp - 4], 0x4a
push eax
mov ecx, 0x10139780
call fcn.1000dd40
lea ecx, [ebp - 0x30c]
mov dword [ebp - 0x30c], 1
push ecx
mov ecx, eax
call fcn.1000dbc0
mov al, byte [eax]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x124]
mov byte [ebp - 0x2f9], al
cmp ecx, 0x10
jb 0x100b665a
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b664a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b664a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
mov al, byte [ebp - 0x2f9]
add esp, 8
test al, al
je 0x100b6731
mov eax, dword [0x10136f8c]
mov ecx, dword [ebp - 0x350]
add eax, edi
push eax
lea eax, [ebp - 0x368]
push eax
lea ecx, [ecx + 0x22ec]
call fcn.100bbe90
lea ecx, [ebp - 0x154]
mov eax, dword [eax]
add eax, 0xc
push eax
call fcn.100bbcc0
add esp, 4
push 2
lea eax, [ebp - 0x154]
mov dword [ebp - 4], 0x4b
mov ecx, dword [ebp - 0x324]
add ecx, dword [ebp - 0x33c]
add ecx, dword [ebp - 0x32c]
add ecx, dword [ebp - 0x354]
push eax
mov eax, dword [ebp - 0x340]
cdq
sub eax, edx
push esi
sar eax, 1
add eax, dword [ebp - 0x320]
push ecx
push eax
mov ecx, 0x1013966c
call fcn.100a46b0
mov ecx, dword [ebp - 0x140]
cmp ecx, 0x10
jb 0x100b6731
mov edx, dword [ebp - 0x154]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b670e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b670e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
add esp, 8
jmp 0x100b6731
push dword [ebp - 0x318]
push esi
call fcn.100b1780
jmp 0x100b6731
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x24]
call eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100bfdfa
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4