Function at 0x10002b80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
sub esp, 0x6b4
mov eax, dword [0x10045010]
xor eax, esp
mov dword [esp + 0x6b0], eax
push ebx
push esi
push edi
mov edi, ecx
mov ecx, dword [0x1006dafc]
mov dword [esp + 0x58], edi
mov eax, dword [ecx]
call dword [eax + 0xf4]
mov esi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
mov ebx, eax
push 4
push ebx
mov dword [esp + 0x6c], ebx
call esi
test eax, eax
jne 0x100037b7
test ebx, ebx
je 0x100037b7
xor ecx, ecx
mov dword [esp + 0x5c], ecx
cmp dword [ebx + 0x18c], ecx
jle 0x100037b7
mov eax, dword [ebx + 0x184]
push 4
mov ebx, dword [eax + ecx*4]
push ebx
mov dword [esp + 0x44], ebx
call esi
test eax, eax
jne 0x1000379e
test ebx, ebx
je 0x1000379e
mov esi, dword [ebx + 0x10]
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10003798
test esi, esi
je 0x10003798
mov esi, dword [0x3840baec]
mov eax, 0x371b92e0
push dword [ebx + 0x5dc]
mov ecx, esi
mov dword [0x1006db04], 0x371b92e0
mov dword [0x1006db00], 0x371ba2d0
call eax
mov edx, dword [0x1006db00]
mov ecx, esi
mov dword [esp + 0x34], eax
call edx
mov esi, dword [esp + 0x34]
push 4
push esi
mov dword [esp + 0x5c], eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10003798
test esi, esi
je 0x10003798
cmp byte [esi + 8], al
jne 0x10003798
mov ecx, dword [0x1006daec]
lea edx, [esp + 0x68]
push 1
push edx
push 8
mov eax, dword [ecx]
push dword [ebx + 0x10]
call dword [eax + 0x40]
mov ecx, dword [0x1006daec]
lea edx, [esp + 0x278]
push 1
push edx
push 4
mov eax, dword [ecx]
push dword [ebx + 0x10]
call dword [eax + 0x40]
movss xmm0, dword [esp + 0x6c]
lea ecx, [esp + 0x1f8]
addss xmm0, dword [0x10041f04]
mov eax, dword [0x1006db18]
push ecx
push edi
movss dword [esp + 0x74], xmm0
mov eax, dword [eax + 0x13c]
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0x1b0], xmm0
movss xmm0, dword [esp + 0x280]
mov eax, dword [eax + 0x18]
movss dword [esp + 0x1d4], xmm0
movss xmm0, dword [esp + 0x284]
mov dword [esp + 0x1b8], eax
mov eax, dword [edi]
movss dword [esp + 0x1d8], xmm0
movss xmm0, dword [esp + 0x288]
movss dword [esp + 0x1dc], xmm0
call dword [eax + 0xc0]
mov ecx, dword [0x7b7f90]
lea eax, [ecx + 0x3f50]
push eax
lea eax, [ecx + 0x3f90]
push eax
lea eax, [ecx + 0x3fd0]
push eax
lea eax, [esp + 0x204]
push eax
lea eax, [esp + 0x1dc]
push eax
lea eax, [esp + 0x1bc]
push eax
call dword [sym.imp.d3dx9_43.dll_D3DXVec3Project]
movss xmm0, dword [0x10041ed0]
comiss xmm0, dword [esp + 0x1b0]
jbe 0x10003798
movss xmm0, dword [esp + 0x6c]
lea ecx, [esp + 0x1f8]
movss xmm2, dword [esp + 0x68]
movaps xmm1, xmm0
subss xmm1, dword [0x10041f48]
mov eax, dword [edi]
push ecx
push edi
movss dword [esp + 0x3c], xmm2
movss dword [esp + 0x40], xmm1
movss xmm1, dword [esp + 0x78]
movss dword [esp + 0x30], xmm1
movss dword [esp + 0x1bc], xmm2
movss dword [esp + 0x1c0], xmm0
movss dword [esp + 0x1c4], xmm1
call dword [eax + 0xc0]
mov ecx, dword [0x7b7f90]
lea eax, [ecx + 0x3f50]
push eax
lea eax, [ecx + 0x3f90]
push eax
lea eax, [ecx + 0x3fd0]
push eax
lea eax, [esp + 0x204]
push eax
lea eax, [esp + 0x1c4]
push eax
lea eax, [esp + 0x198]
push eax
call dword [sym.imp.d3dx9_43.dll_D3DXVec3Project]
movss xmm0, dword [0x10041ed0]
comiss xmm0, dword [esp + 0x18c]
jbe 0x10003798
movss xmm0, dword [esp + 0x34]
lea ecx, [esp + 0x1f8]
mov eax, dword [edi]
movss dword [esp + 0x1c0], xmm0
movss xmm0, dword [esp + 0x38]
movss dword [esp + 0x1c4], xmm0
movss xmm0, dword [esp + 0x28]
push ecx
push edi
movss dword [esp + 0x1d0], xmm0
call dword [eax + 0xc0]
mov ecx, dword [0x7b7f90]
lea eax, [ecx + 0x3f50]
push eax
lea eax, [ecx + 0x3f90]
push eax
lea eax, [ecx + 0x3fd0]
push eax
lea eax, [esp + 0x204]
push eax
lea eax, [esp + 0x1d0]
push eax
lea eax, [esp + 0x18c]
push eax
call dword [sym.imp.d3dx9_43.dll_D3DXVec3Project]
movss xmm0, dword [0x10041ed0]
xor eax, eax
comiss xmm0, dword [esp + 0x180]
seta al
test eax, eax
je 0x10003798
cvttss2si eax, dword [esp + 0x188]
mov bl, byte [ebx + 0x562]
push 0x2c
push 0
mov dword [esp + 0x30], eax
cvttss2si eax, dword [esp + 0x18c]
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x254]
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [0x1006db18]
lea ecx, [esp + 0x258]
xorps xmm0, xmm0
mov dword [esp + 0x224], 0
movlpd qword [esp + 0x21c], xmm0
add esp, 0xc
movlpd qword [esp + 0x228], xmm0
mov eax, dword [eax + 0x13c]
movlpd qword [esp + 0x230], xmm0
movlpd qword [esp + 0x238], xmm0
movlpd qword [esp + 0x240], xmm0
mov dword [esp + 0x248], 0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0x210], xmm0
mov eax, dword [eax + 0x18]
movq xmm0, qword [esp + 0x68]
mov dword [esp + 0x218], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x224], eax
mov eax, dword [0x1006db20]
push ecx
lea ecx, [esp + 0x214]
movq qword [esp + 0x220], xmm0
push ecx
mov eax, dword [eax + 0x38]
call eax
test al, al
mov ecx, 0xffff0000
mov eax, 0xff00ff00
cmove ecx, eax
test bl, bl
mov eax, 0xffffffff
cmovne ecx, eax
mov eax, dword [0x1006db18]
mov dword [0x100468d8], ecx
mov eax, dword [eax + 0x13c]
movq xmm0, qword [eax + 0x10]
mov eax, dword [eax + 0x18]
movq qword [esp + 0x1a4], xmm0
movss xmm1, dword [esp + 0x1a8]
movss xmm2, dword [esp + 0x1a4]
subss xmm2, dword [esp + 0x70]
subss xmm1, dword [esp + 0x74]
mov dword [esp + 0x1ac], eax
movss xmm0, dword [esp + 0x1ac]
subss xmm0, dword [esp + 0x78]
mulss xmm2, xmm2
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm2, xmm1
xorps xmm1, xmm1
addss xmm2, xmm0
cvtps2pd xmm0, xmm2
ucomisd xmm1, xmm0
ja 0x10003025
sqrtsd xmm0, xmm0
jmp 0x1000302a
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
cvtsd2ss xmm0, xmm0
lea eax, [esp + 0x48]
mov dword [esp + 0x48], 0x302e3025
mov word [esp + 0x4c], 0x66
divss xmm0, dword [0x10041f54]
cvtss2sd xmm0, xmm0
movsd qword [esp], xmm0
push eax
lea eax, [esp + 0x5c4]
push eax
call fcn.100010c0
xor eax, eax
mov word [esp + 0x34], 0x7325
mov dword [esp + 0x50], eax
mov word [esp + 0x54], ax
mov byte [esp + 0x36], al
lea eax, [esi + 0x28]
push eax
lea eax, [esp + 0x38]
push eax
lea eax, [esp + 0x3d0]
push eax
call fcn.10009160
xor eax, eax
add esp, 0x1c
mov word [esp + 0x24], ax
mov byte [esp + 0x26], al
mov eax, dword [esi + 0xc]
mov esi, dword [esp + 0x54]
cmp eax, dword [esi + 0xc]
je 0x10003798
cmp byte [0x100468cc], 0
je 0x100030e2
lea eax, [esp + 0x3b8]
push eax
mov eax, dword [esp + 0x2c]
push 0x101
push dword [0x100468d8]
add eax, 0xfffffff0
push eax
push dword [esp + 0x44]
push dword [0x1006db24]
push 1
call fcn.10001770
add esp, 0x1c
cmp byte [0x1006db1c], 0
je 0x10003258
mov eax, dword [0x1006dc94]
sub eax, 0
je 0x10003216
sub eax, 1
je 0x100031d5
sub eax, 1
jne 0x10003258
mov eax, dword [0x1006db18]
push dword [0x100468d8]
mov eax, dword [eax + 0x13c]
movq xmm0, qword [eax + 0x10]
mov eax, dword [eax + 0x18]
movq qword [esp + 0x194], xmm0
movss xmm1, dword [esp + 0x198]
movss xmm2, dword [esp + 0x194]
subss xmm2, dword [esp + 0x6c]
subss xmm1, dword [esp + 0x70]
mov dword [esp + 0x19c], eax
movss xmm0, dword [esp + 0x19c]
subss xmm0, dword [esp + 0x74]
mulss xmm2, xmm2
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm2, xmm1
xorps xmm1, xmm1
addss xmm2, xmm0
cvtps2pd xmm0, xmm2
ucomisd xmm1, xmm0
ja 0x1000318b
sqrtsd xmm0, xmm0
jmp 0x10003190
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
cvtsd2ss xmm0, xmm0
push ecx
cvttss2si eax, dword [esp + 0x184]
divss xmm0, dword [0x10041f38]
cvttss2si edx, dword [esp + 0x190]
cvttss2si ecx, dword [esp + 0x18c]
movss dword [esp], xmm0
push eax
cvttss2si eax, dword [esp + 0x184]
push eax
call fcn.10001920
add esp, 0x10
jmp 0x10003258
movq xmm0, qword [esp + 0x178]
sub esp, 0xc
mov eax, dword [esp + 0x18c]
mov ecx, esp
sub esp, 0xc
mov edx, edi
movq qword [ecx], xmm0
movq xmm0, qword [esp + 0x19c]
mov dword [ecx + 8], eax
mov ecx, esp
mov eax, dword [esp + 0x1a4]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
call fcn.10002000
jmp 0x10003255
movq xmm0, qword [esp + 0x178]
sub esp, 0xc
mov eax, dword [esp + 0x18c]
mov ecx, esp
sub esp, 0xc
mov edx, edi
movq qword [ecx], xmm0
movq xmm0, qword [esp + 0x19c]
mov dword [ecx + 8], eax
mov ecx, esp
mov eax, dword [esp + 0x1a4]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
call fcn.10002150
add esp, 0x18
cmp byte [0x1006daf6], 0
mov ebx, dword [esp + 0x3c]
je 0x10003482
movzx eax, word [ebx + 0x5d4]
sub esp, 0xc
movq xmm0, qword [esp + 0x184]
mov ecx, esp
sub esp, 0xc
mov edx, edi
movd xmm2, eax
mov eax, dword [esp + 0x198]
movq qword [ecx], xmm0
movq xmm0, qword [esp + 0x19c]
mov dword [ecx + 8], eax
mov ecx, esp
mov eax, dword [esp + 0x1a4]
cvtdq2ps xmm2, xmm2
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
call fcn.100023b0
movss xmm0, dword [esp + 0x1a0]
xorps xmm2, xmm2
movzx eax, word [ebx + 0x5d6]
movaps xmm1, xmm0
subss xmm1, dword [esp + 0x194]
add esp, 0x18
mov dword [esp + 0x28], eax
comiss xmm2, xmm1
jbe 0x100032e9
mulss xmm1, dword [0x10041fa4]
cvttss2si ecx, dword [esp + 0x184]
cvttss2si eax, xmm1
cvttss2si esi, xmm0
mov dword [esp + 0x2c], eax
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0x60], eax
cdq
sub eax, edx
sar eax, 1
sub ecx, eax
mov dword [esp + 0x38], esi
mov eax, dword [esp + 0x28]
cmp ax, 0x64
mov dword [esp + 0x3c], ecx
mov ecx, 0x64
cmova eax, ecx
movzx eax, ax
mov dword [esp + 0x30], eax
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
divss xmm0, dword [0x10041f54]
call fcn.10035da0
cmp eax, 3
mov ecx, 4
cmovb eax, ecx
mov dword [esp + 0x28], eax
mov eax, dword [0x1006d9e0]
test eax, eax
jne 0x10003413
mov eax, dword [esp + 0x3c]
mov esi, dword [esp + 0x60]
add eax, 0xa
mov ecx, dword [esp + 0x38]
add esi, eax
push 0
push ecx
mov dword [esp], 0
lea eax, [esi + 5]
mov dword [esp + 0x1e4], ecx
mov dword [esp + 0x1e8], eax
mov eax, dword [esp + 0x34]
push 0xff000000
add eax, ecx
mov dword [esp + 0x1e4], esi
push 1
lea ecx, [esp + 0x1e8]
mov dword [esp + 0x1f4], eax
mov eax, dword [edi]
push ecx
push 1
push edi
call dword [eax + 0xac]
mov ecx, dword [esp + 0x38]
lea eax, [esi + 3]
push 0
inc ecx
mov dword [esp + 0x1f4], eax
mov eax, dword [esp + 0x2c]
push ecx
mov dword [esp], 0
dec eax
push 0xff0000ff
add eax, ecx
mov dword [esp + 0x1f8], ecx
push 1
lea ecx, [esp + 0x1f8]
mov dword [esp + 0x204], eax
mov eax, dword [edi]
push ecx
push 1
push edi
mov dword [esp + 0x204], esi
call dword [eax + 0xac]
mov eax, dword [0x1006d9e0]
mov esi, dword [esp + 0x38]
cmp eax, 1
jne 0x1000347e
push dword [esp + 0x30]
lea eax, [esp + 0x4c]
mov dword [esp + 0x4c], 0x203a5041
push eax
lea eax, [esp + 0x4c0]
mov dword [esp + 0x54], 0x5d64255b
push eax
mov byte [esp + 0x5c], 0
call fcn.100010c0
add esp, 0xc
mov byte [esp + 0x50], 0
lea eax, [esp + 0x4b8]
xorps xmm0, xmm0
movq qword [esp + 0x48], xmm0
push eax
push 0x101
push 0xff0000ff
lea eax, [esi - 0x14]
push eax
push dword [esp + 0x4c]
push dword [0x1006db24]
push 0
call fcn.10001770
add esp, 0x1c
mov esi, dword [esp + 0x54]
cmp byte [0x100468b9], 0
je 0x1000349d
mov edx, dword [0x100468d8]
mov ecx, dword [ebx + 0x10]
push edi
call fcn.10002560
add esp, 4
cmp byte [0x100468ba], 0
je 0x100034d7
lea eax, [esp + 0x5b8]
push eax
cvttss2si eax, dword [esp + 0x180]
push 0x101
push dword [0x100468d8]
push eax
push dword [esp + 0x44]
push dword [0x1006db24]
push 1
call fcn.10001770
add esp, 0x1c
cmp byte [esi + 8], 0
jne 0x10003798
cmp byte [0x1006daf5], 0
je 0x10003798
mov eax, dword [0x1006dca0]
mov ebx, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 1
sub eax, 1
je 0x100036a4
sub eax, 1
mov eax, dword [0x100468d8]
mov dword [esp + 0x30], eax
je 0x100035dd
call ebx
push 0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x10041f44]
cvttss2si eax, xmm0
mov dword [esp + 0x34], eax
call ebx
cvttss2si esi, dword [esp + 0x178]
push 0
movd xmm0, eax
mov eax, dword [0x1006daf0]
cvtdq2ps xmm0, xmm0
push eax
mov ecx, dword [eax]
mulss xmm0, dword [0x10041eac]
cvttss2si edi, xmm0
movss xmm0, dword [esp + 0x184]
addss xmm0, dword [0x10041ef4]
cvttss2si ebx, xmm0
call dword [ecx + 0x34]
mov eax, dword [0x1006daf0]
mov ecx, dword [eax]
push ecx
mov dword [esp], 0x3f800000
push eax
call dword [ecx + 0x2c]
mov eax, dword [0x1006daf0]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x10]
movd xmm0, edi
lea edx, [esp + 0x388]
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x388], xmm0
movd xmm0, dword [esp + 0x30]
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x38c], xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x390], xmm0
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x394], xmm0
jmp 0x10003777
call ebx
push 0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x10041f84]
cvttss2si eax, xmm0
mov dword [esp + 0x34], eax
call ebx
cvttss2si esi, dword [esp + 0x178]
push 0
movd xmm0, eax
mov eax, dword [0x1006daf0]
cvtdq2ps xmm0, xmm0
push eax
mov ecx, dword [eax]
mulss xmm0, dword [0x10041eac]
cvttss2si edi, xmm0
movss xmm0, dword [esp + 0x184]
addss xmm0, dword [0x10041ef4]
cvttss2si ebx, xmm0
call dword [ecx + 0x34]
mov eax, dword [0x1006daf0]
mov ecx, dword [eax]
push ecx
mov dword [esp], 0x3f800000
push eax
call dword [ecx + 0x2c]
mov eax, dword [0x1006daf0]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x10]
movd xmm0, edi
lea edx, [esp + 0x398]
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x398], xmm0
movd xmm0, dword [esp + 0x30]
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x39c], xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x3a0], xmm0
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x3a4], xmm0
jmp 0x10003777
mov eax, dword [0x100468d8]
mov dword [esp + 0x30], eax
call ebx
push 0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x10041f7c]
cvttss2si eax, xmm0
mov dword [esp + 0x34], eax
call ebx
cvttss2si esi, dword [esp + 0x178]
push 0
movd xmm0, eax
mov eax, dword [0x1006daf0]
cvtdq2ps xmm0, xmm0
push eax
mov ecx, dword [eax]
mulss xmm0, dword [0x10041eac]
subss xmm0, dword [0x10041f24]
cvttss2si edi, xmm0
movss xmm0, dword [esp + 0x184]
addss xmm0, dword [0x10041ef4]
cvttss2si ebx, xmm0
call dword [ecx + 0x34]
mov eax, dword [0x1006daf0]
mov ecx, dword [eax]
push ecx
mov dword [esp], 0x3f800000
push eax
call dword [ecx + 0x2c]
mov eax, dword [0x1006daf0]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x10]
movd xmm0, edi
lea edx, [esp + 0x3a8]
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x3a8], xmm0
movd xmm0, dword [esp + 0x30]
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x3ac], xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x3b0], xmm0
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x3b4], xmm0
push dword [esp + 0x2c]
mov eax, dword [0x1006daf0]
push 2
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [0x1006daf0]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov edi, dword [esp + 0x58]
mov esi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
mov ecx, dword [esp + 0x5c]
mov ebx, dword [esp + 0x64]
inc ecx
mov dword [esp + 0x5c], ecx
cmp ecx, dword [ebx + 0x18c]
jl 0x10002be4
mov ecx, dword [esp + 0x6bc]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.10034b20
mov esp, ebp
pop ebp
ret