Function at 0x1005f4ad
Capabilities:
Access peb ldr_data
Get process heap force flags

Disassembly:
jmp 0x100c1750
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1011ca20
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x828
push esi
push edi
lea edi, [ebp - 0x5f8]
mov ecx, 0x17a
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x101b90c0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, 0x101bd0f1
call fcn.1005f00c
nop
mov eax, dword [0x101b97d0]
mov dword [ebp - 0x1c], eax
call fcn.1005d31a
mov dword [ebp - 0x28], eax
mov ecx, 0x101b9838
call fcn.1005ed05
mov dword [ebp - 0x828], eax
mov eax, dword [0x101b982c]
mov dword [ebp - 0x82c], eax
mov ecx, dword [ebx + 8]
push ecx
mov edx, dword [ebp - 0x82c]
push edx
lea eax, [ebp - 0x38]
push eax
mov ecx, dword [ebp - 0x828]
call fcn.1005f8e0
nop
movss xmm0, dword [0x101241b8]
movss dword [ebp - 0x388], xmm0
movss xmm0, dword [0x1012416c]
movss dword [ebp - 0x394], xmm0
mov eax, dword [ebp - 0x28]
movss xmm0, dword [eax + 0x28]
subss xmm0, dword [0x10124188]
movss dword [ebp - 0x3a0], xmm0
lea ecx, [ebp - 0x388]
push ecx
lea edx, [ebp - 0x394]
push edx
lea eax, [ebp - 0x3a0]
push eax
call fcn.1005ce15
add esp, 0xc
movss xmm0, dword [eax]
movss dword [ebp - 0xb4], xmm0
mov eax, dword [ebp - 0x28]
add eax, 0x30
mov dword [ebp - 0x828], eax
push ecx
movss xmm0, dword [0x10123328]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x101241fc]
movss dword [esp], xmm0
lea ecx, [ebp - 0x3c0]
call fcn.1005e47c
push eax
lea ecx, [ebp - 0x3d0]
push ecx
mov ecx, dword [ebp - 0x828]
call fcn.1005c41a
mov dword [ebp - 0x82c], eax
movss xmm0, dword [ebp - 0x34]
addss xmm0, dword [0x10124124]
push ecx
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0xb4]
movss dword [esp], xmm0
lea ecx, [ebp - 0x3b0]
call fcn.1005e47c
mov dword [ebp - 0x830], eax
mov edx, dword [ebp - 0x830]
push edx
mov eax, dword [ebp - 0x82c]
push eax
lea ecx, [ebp - 0xcc]
call fcn.1005c492
nop
movss xmm0, dword [ebp - 0x34]
addss xmm0, dword [0x1012332c]
push ecx
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
lea ecx, [ebp - 0x3f0]
call fcn.1005e47c
push eax
lea eax, [ebp - 0x400]
push eax
lea ecx, [ebp - 0xcc]
call fcn.1005e864
mov dword [ebp - 0x828], eax
push ecx
movss xmm0, dword [0x10123330]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0xc4]
movss dword [esp], xmm0
lea ecx, [ebp - 0x3e0]
call fcn.1005e47c
mov dword [ebp - 0x82c], eax
mov ecx, dword [ebp - 0x82c]
push ecx
mov edx, dword [ebp - 0x828]
push edx
lea ecx, [ebp - 0xe4]
call fcn.1005c492
nop
push 0
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0xcc]
push ecx
lea ecx, [ebp - 0x418]
call fcn.1005c492
sub esp, 0x10
mov edx, esp
mov ecx, dword [eax]
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 8]
mov dword [edx + 8], ecx
mov eax, dword [eax + 0xc]
mov dword [edx + 0xc], eax
mov ecx, dword [ebp - 0x28]
push ecx
call fcn.1005f1a1
add esp, 0x18
push 0x10
lea ecx, [ebp - 0xfc]
call fcn.1005e940
lea ecx, [ebp - 0x421]
call fcn.1005d3d8
mov dword [ebp - 0x828], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x44]
and ecx, 0xff
shl ecx, 0x18
or ecx, 0x340000
or ecx, 0x3400
or ecx, 0x34
mov dword [ebp - 0x820], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x44]
and eax, 0xff
shl eax, 0x18
or eax, 0x480000
or eax, 0x4800
or eax, 0x48
mov dword [ebp - 0x81c], eax
lea ecx, [ebp - 0x818]
push ecx
lea edx, [ebp - 0x820]
push edx
lea ecx, [ebp - 0x434]
call fcn.1005cc3f
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x448], ecx
mov dword [ebp - 0x444], edx
mov eax, dword [ebp - 0x828]
push eax
mov ecx, dword [ebp - 0x444]
push ecx
mov edx, dword [ebp - 0x448]
push edx
lea ecx, [ebp - 0xfc]
call fcn.1005d400
mov dword [ebp - 4], 0
mov byte [ebp - 0x11d], 0
mov eax, dword [ebp - 0x28]
push eax
call fcn.1005f67e
add esp, 4
movzx ecx, al
test ecx, ecx
je 0x100c1eca
mov eax, dword [ebx + 0x1c]
push eax
lea ecx, [ebx + 0x14]
push ecx
lea edx, [ebx + 0x10]
push edx
mov eax, dword [ebx + 0xc]
push eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0xe4]
mov dword [ecx], edx
mov eax, dword [ebp - 0xe0]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xdc]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xd8]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebx + 8]
push ecx
call fcn.1005e4b3
add esp, 0x24
mov byte [ebp - 0x11d], al
movzx edx, byte [ebp - 0x11d]
test edx, edx
je 0x100c1b4e
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x44]
and ecx, 0xff
shl ecx, 0x18
or ecx, 0x480000
or ecx, 0x4800
or ecx, 0x48
mov dword [ebp - 0x810], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x44]
and eax, 0xff
shl eax, 0x18
or eax, 0x5c0000
or eax, 0x5c00
or eax, 0x5c
mov dword [ebp - 0x80c], eax
lea ecx, [ebp - 0x808]
push ecx
lea edx, [ebp - 0x810]
push edx
lea ecx, [ebp - 0x458]
call fcn.1005cc3f
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea ecx, [ebp - 0xfc]
call fcn.1005c5a0
nop
push ecx
movss xmm0, dword [0x10124114]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x10124114]
movss dword [esp], xmm0
lea ecx, [ebp - 0x480]
call fcn.1005e47c
mov dword [ebp - 0x828], eax
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x10124114]
movss dword [esp], xmm0
lea ecx, [ebp - 0x490]
call fcn.1005e47c
push eax
lea eax, [ebp - 0x4a0]
push eax
lea ecx, [ebp - 0xe4]
call fcn.1005c41a
mov dword [ebp - 0x82c], eax
push 0x800
lea ecx, [ebp - 0x111]
push ecx
lea edx, [ebp - 0x105]
push edx
mov eax, dword [ebp - 0x828]
push eax
mov ecx, dword [ebp - 0x82c]
push ecx
lea ecx, [ebp - 0x470]
call fcn.1005c492
sub esp, 0x10
mov edx, esp
mov ecx, dword [eax]
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 8]
mov dword [edx + 8], ecx
mov eax, dword [eax + 0xc]
mov dword [edx + 0xc], eax
mov ecx, dword [ebx + 8]
push ecx
mov edx, dword [ebp - 0x28]
push edx
call fcn.1005c7b2
add esp, 0x24
movzx eax, al
test eax, eax
jne 0x100c1c30
movzx eax, byte [ebp - 0x11d]
test eax, eax
je 0x100c1c76
push 0x25
call fcn.1005c5d2
add esp, 4
movzx eax, al
test eax, eax
je 0x100c1c76
mov eax, dword [ebx + 0xc]
movss xmm0, dword [eax]
subss xmm0, dword [ebx + 0x20]
comiss xmm0, dword [ebx + 0x10]
jb 0x100c1c51
movss xmm0, dword [ebx + 0x20]
movss dword [ebp - 0x828], xmm0
jmp 0x100c1c60
mov ecx, dword [ebx + 0xc]
movss xmm0, dword [ecx]
movss dword [ebp - 0x828], xmm0
mov edx, dword [ebx + 0xc]
movss xmm0, dword [edx]
subss xmm0, dword [ebp - 0x828]
mov eax, dword [ebx + 0xc]
movss dword [eax], xmm0
movzx eax, byte [ebp - 0x105]
test eax, eax
je 0x100c1cf2
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x44]
and ecx, 0xff
shl ecx, 0x18
or ecx, 0x480000
or ecx, 0x4800
or ecx, 0x48
mov dword [ebp - 0x800], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x44]
and eax, 0xff
shl eax, 0x18
or eax, 0x5c0000
or eax, 0x5c00
or eax, 0x5c
mov dword [ebp - 0x7fc], eax
lea ecx, [ebp - 0x7f8]
push ecx
lea edx, [ebp - 0x800]
push edx
lea ecx, [ebp - 0x4b0]
call fcn.1005cc3f
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea ecx, [ebp - 0xfc]
call fcn.1005c5a0
nop
push ecx
movss xmm0, dword [0x10124114]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x10124114]
movss dword [esp], xmm0
lea ecx, [ebp - 0x4d8]
call fcn.1005e47c
mov dword [ebp - 0x828], eax
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0x4e8]
push ecx
lea ecx, [ebp - 0xe4]
call fcn.1005e864
mov dword [ebp - 0x82c], eax
push ecx
movss xmm0, dword [0x10124114]
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
lea ecx, [ebp - 0x4f8]
call fcn.1005e47c
mov dword [ebp - 0x830], eax
mov edx, dword [ebp - 0x830]
push edx
lea eax, [ebp - 0x508]
push eax
mov ecx, dword [ebp - 0x82c]
call fcn.1005c41a
mov dword [ebp - 0x834], eax
push 0x800
lea ecx, [ebp - 0x111]
push ecx
lea edx, [ebp - 0x105]
push edx
mov eax, dword [ebp - 0x828]
push eax
mov ecx, dword [ebp - 0x834]
push ecx
lea ecx, [ebp - 0x4c8]
call fcn.1005c492
sub esp, 0x10
mov edx, esp
mov ecx, dword [eax]
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 8]
mov dword [edx + 8], ecx
mov eax, dword [eax + 0xc]
mov dword [edx + 0xc], eax
mov ecx, dword [ebx + 8]
push ecx
mov edx, dword [ebp - 0x28]
push edx
call fcn.1005c7b2
add esp, 0x24
movzx eax, al
test eax, eax
jne 0x100c1dff
movzx eax, byte [ebp - 0x11d]
test eax, eax
je 0x100c1e4e
push 0x27
call fcn.1005c5d2
add esp, 4
movzx eax, al
test eax, eax
je 0x100c1e4e
mov eax, dword [ebx + 0xc]
movss xmm0, dword [eax]
addss xmm0, dword [ebx + 0x20]
movss xmm1, dword [ebx + 0x14]
comiss xmm1, xmm0
jbe 0x100c1e24
movss xmm0, dword [ebx + 0x20]
movss dword [ebp - 0x828], xmm0
jmp 0x100c1e38
mov ecx, dword [ebx + 0xc]
movss xmm0, dword [ebx + 0x14]
subss xmm0, dword [ecx]
movss dword [ebp - 0x828], xmm0
mov edx, dword [ebx + 0xc]
movss xmm0, dword [edx]
addss xmm0, dword [ebp - 0x828]
mov eax, dword [ebx + 0xc]
movss dword [eax], xmm0
movzx eax, byte [ebp - 0x105]
test eax, eax
je 0x100c1eca
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x44]
and ecx, 0xff
shl ecx, 0x18
or ecx, 0x480000
or ecx, 0x4800
or ecx, 0x48
mov dword [ebp - 0x7f0], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x44]
and eax, 0xff
shl eax, 0x18
or eax, 0x5c0000
or eax, 0x5c00
or eax, 0x5c
mov dword [ebp - 0x7ec], eax
lea ecx, [ebp - 0x7e8]
push ecx
lea edx, [ebp - 0x7f0]
push edx
lea ecx, [ebp - 0x518]
call fcn.1005cc3f
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea ecx, [ebp - 0xfc]
call fcn.1005c5a0
nop
mov eax, dword [ebx + 0xc]
movss xmm0, dword [eax]
subss xmm0, dword [ebx + 0x10]
movss xmm1, dword [ebx + 0x14]
subss xmm1, dword [ebx + 0x10]
divss xmm0, xmm1
mulss xmm0, dword [ebp - 0xb4]
subss xmm0, dword [0x10122f18]
movss dword [ebp - 0x12c], xmm0
cmp dword [ebx + 0x18], 0
jne 0x100c1f2d
mov eax, dword [ebx + 0x1c]
and eax, 0x800
je 0x100c1f2d
mov eax, dword [ebx + 0xc]
cvttss2si ecx, dword [eax]
sub ecx, dword [ebx + 0x24]
push ecx
push 0x10123fa4
lea edx, [ebp - 0xa8]
push edx
call fcn.1005f737
add esp, 0xc
jmp 0x100c1f90
cmp dword [ebx + 0x18], 0
jne 0x100c1f61
mov eax, 0x400
test eax, eax
je 0x100c1f61
mov eax, dword [ebx + 0xc]
cvtss2sd xmm0, dword [eax]
sub esp, 8
movsd qword [esp], xmm0
push 0x10121c28
lea ecx, [ebp - 0xa8]
push ecx
call fcn.1005f737
add esp, 0x10
jmp 0x100c1f90
cvtsi2ss xmm0, dword [ebx + 0x24]
mov eax, dword [ebx + 0xc]
movss xmm1, dword [eax]
subss xmm1, xmm0
cvtss2sd xmm0, xmm1
sub esp, 8
movsd qword [esp], xmm0
mov ecx, dword [ebx + 0x18]
push ecx
lea edx, [ebp - 0xa8]
push edx
call fcn.1005f737
add esp, 0x10
mov ecx, 0x101b9838
call fcn.1005ed05
mov dword [ebp - 0x828], eax
mov eax, dword [0x101b9830]
mov dword [ebp - 0x82c], eax
lea ecx, [ebp - 0xa8]
push ecx
mov edx, dword [ebp - 0x82c]
push edx
lea eax, [ebp - 0x13c]
push eax
mov ecx, dword [ebp - 0x828]
call fcn.1005f8e0
nop
mov ecx, 0x101b9838
call fcn.1005ed05
mov dword [ebp - 0x828], eax
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
lea ecx, [ebp - 0x528]
call fcn.1005e47c
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x538], ecx
mov dword [ebp - 0x534], edx
mov eax, dword [ebp - 0x538]
mov ecx, dword [ebp - 0x534]
mov dword [ebp - 0x548], eax
mov dword [ebp - 0x544], ecx
mov edx, dword [ebp - 0x548]
mov eax, dword [ebp - 0x544]
mov dword [ebp - 0x558], edx
mov dword [ebp - 0x554], eax
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x44]
and edx, 0xff
shl edx, 0x18
or edx, 0xcd0000
or edx, 0xcd00
or edx, 0xcd
mov dword [ebp - 0x82c], edx
mov eax, dword [0x101b982c]
mov dword [ebp - 0x830], eax
mov ecx, dword [ebp - 0x554]
push ecx
mov edx, dword [ebp - 0x558]
push edx
mov eax, dword [ebp - 0x82c]
push eax
push 0
mov ecx, dword [ebp - 0x830]
push ecx
push 0
push ecx
movss xmm0, dword [ebp - 0xc8]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0xcc]
movss dword [esp], xmm0
mov edx, dword [ebx + 8]
push edx
mov ecx, dword [ebp - 0x828]
call fcn.1005e003
nop
mov ecx, 0x101b9838
call fcn.1005ed05
mov dword [ebp - 0x828], eax
push 1
lea ecx, [ebp - 0xfc]
call fcn.1005d702
mov eax, dword [eax]
mov dword [ebp - 0x82c], eax
push 0
lea ecx, [ebp - 0xfc]
call fcn.1005d702
mov ecx, dword [eax]
mov dword [ebp - 0x830], ecx
push ecx
movss xmm0, dword [0x10122f18]
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
lea ecx, [ebp - 0x568]
call fcn.1005e47c
push eax
lea edx, [ebp - 0x578]
push edx
lea ecx, [ebp - 0xdc]
call fcn.1005c41a
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x5b8], ecx
mov dword [ebp - 0x5b4], edx
mov eax, dword [ebp - 0x5b8]
mov ecx, dword [ebp - 0x5b4]
mov dword [ebp - 0x5e8], eax
mov dword [ebp - 0x5e4], ecx
mov edx, dword [ebp - 0x5e8]
mov eax, dword [ebp - 0x5e4]
mov dword [ebp - 0x5f8], edx
mov dword [ebp - 0x5f4], eax
mov ecx, dword [ebp - 0x5f8]
mov edx, dword [ebp - 0x5f4]
mov dword [ebp - 0x618], ecx
mov dword [ebp - 0x614], edx
push ecx
movss xmm0, dword [0x10122f18]
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
lea ecx, [ebp - 0x588]
call fcn.1005e47c
push eax
lea eax, [ebp - 0x598]
push eax
lea ecx, [ebp - 0xe4]
call fcn.1005e864
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x5a8], ecx
mov dword [ebp - 0x5a4], edx
mov eax, dword [ebp - 0x5a8]
mov ecx, dword [ebp - 0x5a4]
mov dword [ebp - 0x5c8], eax
mov dword [ebp - 0x5c4], ecx
mov edx, dword [ebp - 0x5c8]
mov eax, dword [ebp - 0x5c4]
mov dword [ebp - 0x5d8], edx
mov dword [ebp - 0x5d4], eax
mov ecx, dword [ebp - 0x5d8]
mov edx, dword [ebp - 0x5d4]
mov dword [ebp - 0x608], ecx
mov dword [ebp - 0x604], edx
push 0
push 1
mov eax, dword [ebp - 0x82c]
push eax
mov ecx, dword [ebp - 0x830]
push ecx
mov edx, dword [ebp - 0x614]
push edx
mov eax, dword [ebp - 0x618]
push eax
mov ecx, dword [ebp - 0x604]
push ecx
mov edx, dword [ebp - 0x608]
push edx
mov ecx, dword [ebp - 0x828]
call fcn.1005d65d
nop
mov ecx, 0x101b9838
call fcn.1005ed05
mov dword [ebp - 0x828], eax
call fcn.1005e6e3
mov ecx, eax
call fcn.1005d234
mov dword [ebp - 0x82c], eax
push ecx
movss xmm0, dword [ebp - 0xd8]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x12c]
movss dword [esp], xmm0
lea ecx, [ebp - 0x628]
call fcn.1005e47c
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x668], ecx
mov dword [ebp - 0x664], edx
mov eax, dword [ebp - 0x668]
mov ecx, dword [ebp - 0x664]
mov dword [ebp - 0x688], eax
mov dword [ebp - 0x684], ecx
mov edx, dword [ebp - 0x688]
mov eax, dword [ebp - 0x684]
mov dword [ebp - 0x6a8], edx
mov dword [ebp - 0x6a4], eax
push ecx
movss xmm0, dword [0x10122f18]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x10122f18]
movss dword [esp], xmm0
lea ecx, [ebp - 0x638]
call fcn.1005e47c
push eax
lea ecx, [ebp - 0x648]
push ecx
lea ecx, [ebp - 0xe4]
call fcn.1005e864
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x658], edx
mov dword [ebp - 0x654], eax
mov ecx, dword [ebp - 0x658]
mov edx, dword [ebp - 0x654]
mov dword [ebp - 0x678], ecx
mov dword [ebp - 0x674], edx
mov eax, dword [ebp - 0x678]
mov ecx, dword [ebp - 0x674]
mov dword [ebp - 0x698], eax
mov dword [ebp - 0x694], ecx
push 0
mov edx, dword [ebp - 0x82c]
push edx
mov eax, dword [ebp - 0x6a4]
push eax
mov ecx, dword [ebp - 0x6a8]
push ecx
mov edx, dword [ebp - 0x694]
push edx
mov eax, dword [ebp - 0x698]
push eax
mov ecx, dword [ebp - 0x828]
call fcn.1005cad7
nop
mov ecx, 0x101b9838
call fcn.1005ed05
mov dword [ebp - 0x828], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x44]
and ecx, 0xff
shl ecx, 0x18
or ecx, 0xc0000
or ecx, 0xc00
or ecx, 0xc
mov dword [ebp - 0x82c], ecx
push ecx
movss xmm0, dword [0x10122f18]
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
lea ecx, [ebp - 0x6b8]
call fcn.1005e47c
push eax
lea edx, [ebp - 0x6c8]
push edx
lea ecx, [ebp - 0xdc]
call fcn.1005e864
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x6d8], ecx
mov dword [ebp - 0x6d4], edx
mov eax, dword [ebp - 0x6d8]
mov ecx, dword [ebp - 0x6d4]
mov dword [ebp - 0x6e8], eax
mov dword [ebp - 0x6e4], ecx
push 0
mov edx, dword [ebp - 0x82c]
push edx
push ecx
movss xmm0, dword [0x10122f18]
movss dword [esp], xmm0
mov eax, dword [ebp - 0x6e4]
push eax
mov ecx, dword [ebp - 0x6e8]
push ecx
mov edx, dword [ebp - 0xe0]
push edx
mov eax, dword [ebp - 0xe4]
push eax
mov ecx, dword [ebp - 0x828]
call fcn.1005d879
nop
mov ecx, 0x101b9838
call fcn.1005ed05
mov dword [ebp - 0x828], eax
mov dword [ebp - 0x6f4], 0
mov dword [ebp - 0x700], 0x78
mov eax, dword [ebp - 0x1c]
add eax, 0x44
push eax
lea ecx, [ebp - 0x6f4]
push ecx
lea edx, [ebp - 0x700]
push edx
call fcn.1005cc0d
add esp, 0xc
mov eax, dword [eax]
and eax, 0xff
shl eax, 0x18
mov dword [ebp - 0x82c], eax
push ecx
movss xmm0, dword [ebp - 0xd8]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x12c]
movss dword [esp], xmm0
lea ecx, [ebp - 0x710]
call fcn.1005e47c
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x750], ecx
mov dword [ebp - 0x74c], edx
mov eax, dword [ebp - 0x750]
mov ecx, dword [ebp - 0x74c]
mov dword [ebp - 0x770], eax
mov dword [ebp - 0x76c], ecx
mov edx, dword [ebp - 0x770]
mov eax, dword [ebp - 0x76c]
mov dword [ebp - 0x790], edx
mov dword [ebp - 0x78c], eax
push ecx
movss xmm0, dword [0x10122f18]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x10122f18]
movss dword [esp], xmm0
lea ecx, [ebp - 0x720]
call fcn.1005e47c
push eax
lea ecx, [ebp - 0x730]
push ecx
lea ecx, [ebp - 0xe4]
call fcn.1005e864
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x740], edx
mov dword [ebp - 0x73c], eax
mov ecx, dword [ebp - 0x740]
mov edx, dword [ebp - 0x73c]
mov dword [ebp - 0x760], ecx
mov dword [ebp - 0x75c], edx
mov eax, dword [ebp - 0x760]
mov ecx, dword [ebp - 0x75c]
mov dword [ebp - 0x780], eax
mov dword [ebp - 0x77c], ecx
push 0
push 1
mov edx, dword [ebp - 0x82c]
push edx
push 0
mov eax, dword [ebp - 0x78c]
push eax
mov ecx, dword [ebp - 0x790]
push ecx
mov edx, dword [ebp - 0x77c]
push edx
mov eax, dword [ebp - 0x780]
push eax
mov ecx, dword [ebp - 0x828]
call fcn.1005d65d
nop
mov ecx, 0x101b9838
call fcn.1005ed05
mov dword [ebp - 0x828], eax
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
lea ecx, [ebp - 0x7a0]
call fcn.1005e47c
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x7b0], ecx
mov dword [ebp - 0x7ac], edx
mov eax, dword [ebp - 0x7b0]
mov ecx, dword [ebp - 0x7ac]
mov dword [ebp - 0x7c0], eax
mov dword [ebp - 0x7bc], ecx
mov edx, dword [ebp - 0x7c0]
mov eax, dword [ebp - 0x7bc]
mov dword [ebp - 0x7d0], edx
mov dword [ebp - 0x7cc], eax
mov ecx, dword [ebp - 0x7d0]
mov edx, dword [ebp - 0x7cc]
mov dword [ebp - 0x7e0], ecx
mov dword [ebp - 0x7dc], edx
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x44], 0xc8
jle 0x100c2656
mov dword [ebp - 0x82c], 0xc8
jmp 0x100c2662
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x44]
mov dword [ebp - 0x82c], edx
mov eax, dword [ebp - 0x82c]
and eax, 0xff
shl eax, 0x18
or eax, 0xff0000
or eax, 0xff00
or eax, 0xff
mov dword [ebp - 0x830], eax
mov ecx, dword [0x101b9830]
mov dword [ebp - 0x834], ecx
movss xmm0, dword [ebp - 0xe4]
addss xmm0, dword [ebp - 0x12c]
movss xmm1, dword [ebp - 0x13c]
divss xmm1, dword [0x10123324]
subss xmm0, xmm1
mov edx, dword [ebp - 0x7dc]
push edx
mov eax, dword [ebp - 0x7e0]
push eax
mov ecx, dword [ebp - 0x830]
push ecx
push 1
mov edx, dword [ebp - 0x834]
push edx
push 0
push ecx
movss xmm1, dword [ebp - 0xe0]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
lea eax, [ebp - 0xa8]
push eax
mov ecx, dword [ebp - 0x828]
call fcn.1005e003
nop
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xfc]
call fcn.1005d5e5
nop
push edx
mov ecx, ebp
push eax
lea edx, [0x100c2740]
call fcn.1005dca7
pop eax
pop edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1005d4ff
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret