Function at 0x100815bc
Capabilities:
Resolve function by parsing pe exports

Disassembly:
jmp 0x1011bc10
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x9a8
push esi
push edi
lea edi, [ebp - 0x6a8]
mov ecx, 0x1aa
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x101b7d80]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, 0x101fe423
call fcn.1008205c
nop
call fcn.1008259d
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
movzx ecx, byte [eax + 0x88]
test ecx, ecx
je 0x1011bc72
xor al, al
jmp 0x1011ea14
mov eax, dword [ebx + 0x18]
and eax, 0x80
je 0x1011bcad
mov ecx, dword [ebx + 0x18]
and ecx, 0x100000
je 0x1011bcad
mov edx, dword [0x101b61dc]
add edx, 5
mov esi, esp
push edx
push str.C:Usersgr00tMAA_hVHerRDesktopDBGHOOK_V34_shavelmenuimguiImGui.cpp
push str.___flags__ImGuiInputTextFlags_CallbackHistory____flags__ImGuiInputTextFlags_Multiline__
call dword [sym.imp.ucrtbased.dll__wassert]
add esp, 0xc
cmp esi, esp
call fcn.1008119d
mov eax, dword [ebx + 0x18]
and eax, 0x40
je 0x1011bce6
mov ecx, dword [ebx + 0x18]
and ecx, 0x400
je 0x1011bce6
mov edx, dword [0x101b61dc]
add edx, 6
mov esi, esp
push edx
push str.C:Usersgr00tMAA_hVHerRDesktopDBGHOOK_V34_shavelmenuimguiImGui.cpp
push str.___flags__ImGuiInputTextFlags_CallbackCompletion____flags__ImGuiInputTextFlags_AllowTabInput__
call dword [sym.imp.ucrtbased.dll__wassert]
add esp, 0xc
cmp esi, esp
call fcn.1008119d
mov eax, dword [0x101b6148]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
add eax, 4
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x18]
add eax, 0x13b8
mov dword [ebp - 0x30], eax
push 0
mov eax, dword [ebx + 8]
push eax
mov ecx, dword [ebp - 0xc]
call fcn.1008079d
mov dword [ebp - 0x3c], eax
mov eax, dword [ebx + 0x18]
and eax, 0x100000
je 0x1011bd26
mov byte [ebp - 0x989], 1
jmp 0x1011bd2d
mov byte [ebp - 0x989], 0
mov cl, byte [ebp - 0x989]
mov byte [ebp - 0x45], cl
mov eax, dword [ebx + 0x18]
and eax, 0x4000
jne 0x1011bd49
mov byte [ebp - 0x989], 1
jmp 0x1011bd50
mov byte [ebp - 0x989], 0
mov cl, byte [ebp - 0x989]
mov byte [ebp - 0x51], cl
mov eax, dword [ebx + 0x18]
and eax, 0x8000
je 0x1011bd6c
mov byte [ebp - 0x989], 1
jmp 0x1011bd73
mov byte [ebp - 0x989], 0
mov cl, byte [ebp - 0x989]
mov byte [ebp - 0x5d], cl
push ecx
movss xmm0, dword [0x1018ee74]
movss dword [esp], xmm0
push 1
push 0
mov eax, dword [ebx + 8]
push eax
lea ecx, [ebp - 0x70]
push ecx
call fcn.1007fa46
add esp, 0x14
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1011bdcb
call fcn.100820de
fstp dword [ebp - 0x98c]
movss xmm0, dword [ebp - 0x98c]
mulss xmm0, dword [0x1018e2f8]
movss dword [ebp - 0x990], xmm0
jmp 0x1011bdd8
movss xmm0, dword [ebp - 0x6c]
movss dword [ebp - 0x990], xmm0
mov ecx, dword [ebp - 0x30]
movss xmm0, dword [ecx + 0x24]
mulss xmm0, dword [0x1018f8b4]
addss xmm0, dword [ebp - 0x990]
movss dword [ebp - 0x994], xmm0
call fcn.1007fe10
fstp dword [ebp - 0x998]
mov edx, dword [ebx + 0x14]
mov eax, dword [edx]
mov ecx, dword [edx + 4]
mov dword [ebp - 0x7c0], eax
mov dword [ebp - 0x7bc], ecx
mov edx, dword [ebp - 0x7c0]
mov eax, dword [ebp - 0x7bc]
mov dword [ebp - 0x7d0], edx
mov dword [ebp - 0x7cc], eax
push ecx
movss xmm0, dword [ebp - 0x994]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x998]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x7cc]
push ecx
mov edx, dword [ebp - 0x7d0]
push edx
lea eax, [ebp - 0x80]
push eax
call fcn.10081913
add esp, 0x14
lea eax, [ebp - 0x80]
push eax
mov ecx, dword [ebp - 0xc]
add ecx, 0xb8
push ecx
lea edx, [ebp - 0x7e0]
push edx
call fcn.100faf60
add esp, 0xc
push eax
mov eax, dword [ebp - 0xc]
add eax, 0xb8
push eax
lea ecx, [ebp - 0x98]
call fcn.1007fef6
nop
movss xmm0, dword [ebp - 0x70]
comiss xmm0, dword [0x1018e43c]
jbe 0x1011bebd
mov eax, dword [ebp - 0x30]
movss xmm0, dword [eax + 0x34]
addss xmm0, dword [ebp - 0x70]
movss dword [ebp - 0x98c], xmm0
jmp 0x1011bec8
xorps xmm0, xmm0
movss dword [ebp - 0x98c], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x98c]
movss dword [esp], xmm0
lea ecx, [ebp - 0x7f0]
call fcn.10080d38
push eax
lea ecx, [ebp - 0x90]
push ecx
lea edx, [ebp - 0x800]
push edx
call fcn.100faf60
add esp, 0xc
push eax
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0xb0]
call fcn.1007fef6
nop
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xbc], eax
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1011bfa1
call fcn.10081bcf
nop
lea eax, [ebp - 0x810]
push eax
lea ecx, [ebp - 0x98]
call fcn.10080b08
mov dword [ebp - 0x98c], eax
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x990], ecx
push 0
mov edx, dword [ebp - 0x98c]
push edx
mov eax, dword [ebp - 0x990]
push eax
call fcn.10082516
add esp, 0xc
movzx ecx, al
test ecx, ecx
jne 0x1011bf7f
call fcn.100800ea
nop
call fcn.10082291
nop
xor al, al
jmp 0x1011ea14
call fcn.1008259d
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
movss xmm0, dword [ebp - 0x80]
subss xmm0, dword [eax + 0x78]
movss dword [ebp - 0x80], xmm0
jmp 0x1011bfdf
mov eax, dword [ebp - 0x30]
push ecx
movss xmm0, dword [eax + 0x24]
movss dword [esp], xmm0
lea ecx, [ebp - 0xb0]
push ecx
call fcn.100827f5
add esp, 8
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0xb0]
push ecx
call fcn.10080d06
add esp, 8
movzx edx, al
test edx, edx
jne 0x1011bfdf
xor al, al
jmp 0x1011ea14
movzx eax, byte [ebp - 0x5d]
test eax, eax
je 0x1011c131
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x16dc]
mov dword [ebp - 0x98c], ecx
push 0x2a
mov ecx, dword [ebp - 0x98c]
call fcn.1007f118
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x18]
add eax, 0x26e4
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x16dc]
mov edx, dword [ebp - 0xd4]
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x16dc]
mov edx, dword [ebp - 0xd4]
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x16dc]
mov edx, dword [ecx + 8]
mov eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0xd4]
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x16dc]
mov edx, dword [ebp - 0xd4]
mov eax, dword [ecx + 0x48]
mov dword [edx + 0x48], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x16dc]
mov edx, dword [ebp - 0xd4]
mov eax, dword [ecx + 0x4c]
mov dword [edx + 0x4c], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x16dc]
mov edx, dword [ebp - 0xd4]
mov eax, dword [ecx + 0x44]
mov dword [edx + 0x44], eax
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0xc8]
mov dword [eax + 0x34], ecx
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0xc8]
mov edx, dword [ecx + 4]
mov dword [eax + 0x38], edx
mov ecx, dword [ebp - 0xd4]
add ecx, 0x10
call fcn.10082511
movzx eax, al
test eax, eax
je 0x1011c0fd
mov ecx, dword [ebp - 0xd4]
add ecx, 0x1c
call fcn.1008184b
movzx ecx, al
test ecx, ecx
je 0x1011c0fd
mov ecx, dword [ebp - 0xd4]
add ecx, 0x28
call fcn.1007fc76
movzx edx, al
test edx, edx
jne 0x1011c122
mov eax, dword [0x101b61dc]
add eax, 0x37
mov esi, esp
push eax
push str.C:Usersgr00tMAA_hVHerRDesktopDBGHOOK_V34_shavelmenuimguiImGui.cpp
push str.password_font__Glyphs.empty____password_font__IndexXAdvance.empty____password_font__IndexLookup.empty__
call dword [sym.imp.ucrtbased.dll__wassert]
add esp, 0xc
cmp esi, esp
call fcn.1008119d
mov eax, dword [ebp - 0xd4]
push eax
call fcn.1007fb13
add esp, 4
mov eax, dword [ebp - 0x18]
add eax, 0x1a10
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0x24]
mov cl, byte [eax + 0xd5]
mov byte [ebp - 0xe9], cl
mov eax, dword [ebp - 0x24]
mov cl, byte [eax + 0xd6]
mov byte [ebp - 0xf5], cl
mov eax, dword [ebp - 0x24]
mov cl, byte [eax + 0xd7]
mov byte [ebp - 0x101], cl
mov eax, dword [ebp - 0x24]
mov cl, byte [eax + 0xd8]
mov byte [ebp - 0x10d], cl
mov eax, dword [ebx + 0x18]
and eax, 0x440
jne 0x1011c18e
mov byte [ebp - 0x989], 1
jmp 0x1011c195
mov byte [ebp - 0x989], 0
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx + 0x1740]
cmp edx, dword [ebp - 0x3c]
jne 0x1011c1ac
mov byte [ebp - 0x98a], 1
jmp 0x1011c1b3
mov byte [ebp - 0x98a], 0
movzx eax, byte [ebp - 0x989]
push eax
movzx ecx, byte [ebp - 0x98a]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call fcn.100812e7
add esp, 0xc
mov byte [ebp - 0x119], al
movzx eax, byte [ebp - 0x119]
test eax, eax
je 0x1011c1fd
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0xc]
mov eax, dword [ecx + 0x264]
cmp eax, dword [edx + 0x26c]
jne 0x1011c1fd
mov byte [ebp - 0x989], 1
jmp 0x1011c204
mov byte [ebp - 0x989], 0
mov cl, byte [ebp - 0x989]
mov byte [ebp - 0x125], cl
movzx eax, byte [ebp - 0x119]
test eax, eax
je 0x1011c22f
movzx ecx, byte [ebp - 0x125]
test ecx, ecx
jne 0x1011c22f
mov byte [ebp - 0x989], 1
jmp 0x1011c236
mov byte [ebp - 0x989], 0
mov dl, byte [ebp - 0x989]
mov byte [ebp - 0x131], dl
push 0
mov eax, dword [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x98]
push ecx
call fcn.1008165c
add esp, 0xc
mov byte [ebp - 0x13d], al
movzx eax, byte [ebp - 0x13d]
test eax, eax
je 0x1011c281
mov eax, dword [ebp - 0x3c]
push eax
call fcn.1008197c
add esp, 4
mov eax, dword [ebp - 0x18]
mov dword [eax + 0x18a0], 1
movzx eax, byte [ebp - 0x13d]
test eax, eax
je 0x1011c2ac
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 0x24]
movzx ecx, byte [eax + edx + 0x324]
test ecx, ecx
je 0x1011c2ac
mov byte [ebp - 0x989], 1
jmp 0x1011c2b3
mov byte [ebp - 0x989], 0
mov dl, byte [ebp - 0x989]
mov byte [ebp - 0x149], dl
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1011c306
mov ecx, dword [ebp - 0x18]
cmp dword [ecx + 0x1740], 0
jne 0x1011c306
mov edx, dword [ebp - 0xe0]
mov eax, dword [edx]
cmp eax, dword [ebp - 0x3c]
jne 0x1011c306
push 0
push str.SCROLLY
mov ecx, dword [ebp - 0xbc]
call fcn.1008079d
mov ecx, dword [ebp - 0x18]
cmp dword [ecx + 0x1744], eax
jne 0x1011c306
mov byte [ebp - 0x989], 1
jmp 0x1011c30d
mov byte [ebp - 0x989], 0
mov dl, byte [ebp - 0x989]
mov byte [ebp - 0x155], dl
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x1740]
cmp ecx, dword [ebp - 0x3c]
je 0x1011c33b
mov edx, dword [ebx + 0x18]
and edx, 0x10
je 0x1011c33b
mov dword [ebp - 0x98c], 1
jmp 0x1011c345
mov dword [ebp - 0x98c], 0
mov al, byte [ebp - 0x98c]
mov byte [ebp - 0x161], al
movzx eax, byte [ebp - 0x119]
test eax, eax
jne 0x1011c376
movzx eax, byte [ebp - 0x149]
test eax, eax
jne 0x1011c376
movzx eax, byte [ebp - 0x155]
test eax, eax
je 0x1011c579
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x1740]
cmp ecx, dword [ebp - 0x3c]
je 0x1011c55b
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x170], ecx
mov eax, dword [ebp - 0xe0]
add eax, 4
mov dword [ebp - 0x98c], eax
mov ecx, dword [ebx + 0x10]
add ecx, 1
push ecx
mov ecx, dword [ebp - 0x98c]
call fcn.10080a31
nop
mov eax, dword [ebp - 0xe0]
add eax, 0x10
mov dword [ebp - 0x98c], eax
mov ecx, dword [ebx + 0x10]
add ecx, 1
push ecx
mov ecx, dword [ebp - 0x98c]
call fcn.10080ee1
nop
mov eax, dword [ebx + 0xc]
push eax
push 0x1018bb58
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ecx + 0x10]
push edx
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0x18]
push ecx
call fcn.100807ac
add esp, 0x10
mov dword [ebp - 0x17c], 0
lea eax, [ebp - 0x17c]
push eax
push 0
mov ecx, dword [ebx + 0xc]
push ecx
mov edx, dword [ebp - 0xe0]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ecx + 0xc]
push edx
call fcn.10081526
add esp, 0x14
mov ecx, dword [ebp - 0xe0]
mov dword [ecx + 0x2c], eax
mov eax, dword [ebp - 0x17c]
sub eax, dword [ebx + 0xc]
mov ecx, dword [ebp - 0xe0]
mov dword [ecx + 0x28], eax
mov ecx, dword [ebp - 0xe0]
call fcn.100807d4
nop
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0x3c]
jne 0x1011c481
mov edx, dword [ebp - 0xe0]
mov eax, dword [ebp - 0x170]
cmp eax, dword [edx + 0x2c]
jne 0x1011c481
mov byte [ebp - 0x989], 1
jmp 0x1011c488
mov byte [ebp - 0x989], 0
mov cl, byte [ebp - 0x989]
mov byte [ebp - 0x185], cl
movzx eax, byte [ebp - 0x185]
test eax, eax
je 0x1011c4ad
mov ecx, dword [ebp - 0xe0]
call fcn.10080ea5
nop
jmp 0x1011c517
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0x3c]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe0]
xorps xmm0, xmm0
movss dword [eax + 0x34], xmm0
movzx eax, byte [ebp - 0x45]
test eax, eax
jne 0x1011c4da
mov dword [ebp - 0x98c], 1
jmp 0x1011c4e4
mov dword [ebp - 0x98c], 0
mov ecx, dword [ebp - 0x98c]
push ecx
mov edx, dword [ebp - 0xe0]
add edx, 0x38
push edx
call fcn.1013fa90
add esp, 8
movzx eax, byte [ebp - 0x45]
test eax, eax
jne 0x1011c517
movzx eax, byte [ebp - 0x125]
test eax, eax
je 0x1011c517
mov byte [ebp - 0x161], 1
mov eax, dword [ebx + 0x18]
and eax, 0x2000
je 0x1011c52b
mov eax, dword [ebp - 0xe0]
mov byte [eax + 0x44], 1
movzx eax, byte [ebp - 0x45]
test eax, eax
jne 0x1011c55b
movzx eax, byte [ebp - 0x131]
test eax, eax
jne 0x1011c554
movzx eax, byte [ebp - 0x149]
test eax, eax
je 0x1011c55b
movzx eax, byte [ebp - 0xe9]
test eax, eax
je 0x1011c55b
mov byte [ebp - 0x161], 1
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x3c]
push ecx
call fcn.10081c06
add esp, 8
mov eax, dword [ebp - 0xc]
push eax
call fcn.1007f4c4
add esp, 4
jmp 0x1011c5aa
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x24]
movzx eax, byte [edx + ecx + 0x324]
test eax, eax
je 0x1011c5aa
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x1740]
cmp ecx, dword [ebp - 0x3c]
jne 0x1011c5aa
push 0
push 0
call fcn.10081c06
add esp, 8
mov byte [ebp - 0x191], 0
mov byte [ebp - 0x19d], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x1740]
cmp ecx, dword [ebp - 0x3c]
jne 0x1011d954
movzx eax, byte [ebp - 0x51]
test eax, eax
jne 0x1011c660
mov eax, dword [ebp - 0x18]
movzx ecx, byte [eax + 0x1749]
test ecx, ecx
jne 0x1011c660
mov eax, dword [ebp - 0xe0]
add eax, 4
mov dword [ebp - 0x98c], eax
mov ecx, dword [ebx + 0x10]
add ecx, 1
push ecx
mov ecx, dword [ebp - 0x98c]
call fcn.10080a31
nop
mov dword [ebp - 0x1ac], 0
lea eax, [ebp - 0x1ac]
push eax
push 0
mov ecx, dword [ebx + 0xc]
push ecx
mov edx, dword [ebp - 0xe0]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ecx + 0xc]
push edx
call fcn.10081526
add esp, 0x14
mov ecx, dword [ebp - 0xe0]
mov dword [ecx + 0x2c], eax
mov eax, dword [ebp - 0x1ac]
sub eax, dword [ebx + 0xc]
mov ecx, dword [ebp - 0xe0]
mov dword [ecx + 0x28], eax
mov ecx, dword [ebp - 0xe0]
call fcn.10080ea5
nop
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebx + 0x10]
mov dword [eax + 0x30], ecx
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x24]
movzx eax, byte [edx + ecx + 0xc8]
test eax, eax
jne 0x1011c68f
mov dword [ebp - 0x98c], 1
jmp 0x1011c699
mov dword [ebp - 0x98c], 0
mov ecx, dword [ebp - 0x18]
mov dl, byte [ebp - 0x98c]
mov byte [ecx + 0x174a], dl
mov eax, dword [ebp - 0x18]
movss xmm0, dword [eax + 0xc4]
subss xmm0, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x30]
subss xmm0, dword [ecx + 0x20]
mov edx, dword [ebp - 0xe0]
addss xmm0, dword [edx + 0x34]
movss dword [ebp - 0x1b8], xmm0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1011c709
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0xbc]
movss xmm0, dword [ecx + 0xc8]
subss xmm0, dword [edx + 0xbc]
mov eax, dword [ebp - 0x30]
subss xmm0, dword [eax + 0x24]
movss dword [ebp - 0x98c], xmm0
jmp 0x1011c724
mov ecx, dword [ebp - 0x18]
movss xmm0, dword [ecx + 0x16e0]
mulss xmm0, dword [0x1018e454]
movss dword [ebp - 0x98c], xmm0
movss xmm0, dword [ebp - 0x98c]
movss dword [ebp - 0x1c4], xmm0
movzx eax, byte [ebp - 0x161]
test eax, eax
jne 0x1011c76f
movzx eax, byte [ebp - 0x13d]
test eax, eax
je 0x1011c78d
mov eax, dword [ebp - 0x24]
movzx ecx, byte [eax + 0xa2]
test ecx, ecx
jne 0x1011c78d
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x24]
movzx eax, byte [edx + ecx + 0x368]
test eax, eax
je 0x1011c78d
mov ecx, dword [ebp - 0xe0]
call fcn.1007f866
nop
mov eax, dword [ebp - 0xe0]
mov byte [eax + 0xcd1], 1
jmp 0x1011c8fc
movzx eax, byte [ebp - 0x13d]
test eax, eax
je 0x1011c7e4
mov eax, dword [ebp - 0x24]
movzx ecx, byte [eax + 0xa2]
test ecx, ecx
je 0x1011c7e4
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x24]
movzx eax, byte [edx + ecx + 0x368]
test eax, eax
je 0x1011c7e4
push 0x1000c
mov ecx, dword [ebp - 0xe0]
call fcn.10081eb3
nop
push 0x3000d
mov ecx, dword [ebp - 0xe0]
call fcn.10081eb3
nop
jmp 0x1011c8fc
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x24]
movzx eax, byte [edx + ecx + 0x324]
test eax, eax
je 0x1011c852
mov eax, dword [ebp - 0xe0]
movzx ecx, byte [eax + 0xcd1]
test ecx, ecx
jne 0x1011c852
push ecx
movss xmm0, dword [ebp - 0x1c4]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x1b8]
movss dword [esp], xmm0
mov eax, dword [ebp - 0xe0]
add eax, 0x38
push eax
mov ecx, dword [ebp - 0xe0]
push ecx
call fcn.1013f010
add esp, 0x10
mov ecx, dword [ebp - 0xe0]
call fcn.100807d4
nop
jmp 0x1011c8fc
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x24]
movzx eax, byte [edx + ecx + 0xc8]
test eax, eax
je 0x1011c8fc
mov eax, dword [ebp - 0xe0]
movzx ecx, byte [eax + 0xcd1]
test ecx, ecx
jne 0x1011c8fc
mov eax, dword [ebp - 0x24]
movss xmm0, dword [eax + 0x31c]
ucomiss xmm0, dword [0x1018e43c]
lahf
test ah, 0x44
jp 0x1011c8ae
mov eax, dword [ebp - 0x24]
movss xmm0, dword [eax + 0x320]
ucomiss xmm0, dword [0x1018e43c]
lahf
test ah, 0x44
jnp 0x1011c8fc
push ecx
movss xmm0, dword [ebp - 0x1c4]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x1b8]
movss dword [esp], xmm0
mov eax, dword [ebp - 0xe0]
add eax, 0x38
push eax
mov ecx, dword [ebp - 0xe0]
push ecx
call fcn.1013f670
add esp, 0x10
mov ecx, dword [ebp - 0xe0]
call fcn.100807d4
nop
mov eax, dword [ebp - 0xe0]
mov byte [eax + 0xcd0], 1
mov eax, dword [ebp - 0xe0]
movzx ecx, byte [eax + 0xcd1]
test ecx, ecx
je 0x1011c931
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x24]
movzx eax, byte [edx + ecx + 0xc8]
test eax, eax
jne 0x1011c931
mov eax, dword [ebp - 0xe0]
mov byte [eax + 0xcd1], 0
mov eax, 2
imul ecx, eax, 0
mov edx, dword [ebp - 0x18]
movzx eax, word [edx + ecx + 0x2de]
test eax, eax
je 0x1011ca1c
movzx eax, byte [ebp - 0xe9]
test eax, eax
je 0x1011c966
movzx eax, byte [ebp - 0x101]
test eax, eax
je 0x1011ca07
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x1011ca07
mov dword [ebp - 0x1d0], 0
jmp 0x1011c98d
mov eax, dword [ebp - 0x1d0]
add eax, 1
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0x11
jge 0x1011ca07
mov eax, dword [ebp - 0x1d0]
mov ecx, dword [ebp - 0x18]
movzx edx, word [ecx + eax*2 + 0x2de]
test edx, edx
je 0x1011ca07
mov eax, dword [ebp - 0x1d0]
mov ecx, dword [ebp - 0x18]
movzx edx, word [ecx + eax*2 + 0x2de]
mov dword [ebp - 0x1dc], edx
cmp dword [ebp - 0x1dc], 0
je 0x1011ca02
mov eax, dword [ebx + 0x20]
push eax
mov ecx, dword [ebx + 0x1c]
push ecx
mov edx, dword [ebx + 0x18]
push edx
lea eax, [ebp - 0x1dc]
push eax
call fcn.1011f8c0
add esp, 0x10
movzx ecx, al
test ecx, ecx
jne 0x1011c9ef
jmp 0x1011c97e
mov eax, dword [ebp - 0x1dc]
push eax
mov ecx, dword [ebp - 0xe0]
call fcn.10081eb3
nop
jmp 0x1011c97e
push 0x22
push 0
mov eax, dword [ebp - 0x18]
add eax, 0x2de
push eax
call fcn.100804a0
add esp, 0xc
mov byte [ebp - 0x1e5], 0
movzx eax, byte [ebp - 0xf5]
test eax, eax
je 0x1011ca3a
mov dword [ebp - 0x98c], 0x20000
jmp 0x1011ca44
mov dword [ebp - 0x98c], 0
mov ecx, dword [ebp - 0x98c]
mov dword [ebp - 0x1f4], ecx
mov eax, dword [ebp - 0x24]
movzx ecx, byte [eax + 0xa1]
test ecx, ecx
je 0x1011caae
movzx edx, byte [ebp - 0x10d]
test edx, edx
je 0x1011ca96
movzx eax, byte [ebp - 0x101]
test eax, eax
jne 0x1011ca96
movzx ecx, byte [ebp - 0xf5]
test ecx, ecx
jne 0x1011ca96
movzx edx, byte [ebp - 0xe9]
test edx, edx
jne 0x1011ca96
mov dword [ebp - 0x98c], 1
jmp 0x1011caa0
mov dword [ebp - 0x98c], 0
mov eax, dword [ebp - 0x98c]
mov dword [ebp - 0x990], eax
jmp 0x1011cafc
movzx ecx, byte [ebp - 0xe9]
test ecx, ecx
je 0x1011cae6
movzx edx, byte [ebp - 0x101]
test edx, edx
jne 0x1011cae6
movzx eax, byte [ebp - 0xf5]
test eax, eax
jne 0x1011cae6
movzx ecx, byte [ebp - 0x10d]
test ecx, ecx
jne 0x1011cae6
mov dword [ebp - 0x994], 1
jmp 0x1011caf0
mov dword [ebp - 0x994], 0
mov edx, dword [ebp - 0x994]
mov dword [ebp - 0x990], edx
mov al, byte [ebp - 0x990]
mov byte [ebp - 0x1fd], al
mov eax, dword [ebp - 0x24]
movzx ecx, byte [eax + 0xa0]
test ecx, ecx
je 0x1011cb27
mov edx, dword [ebp - 0x24]
mov al, byte [edx + 0xd7]
mov byte [ebp - 0x989], al
jmp 0x1011cb36
mov ecx, dword [ebp - 0x24]
mov dl, byte [ecx + 0xd5]
mov byte [ebp - 0x989], dl
mov al, byte [ebp - 0x989]
mov byte [ebp - 0x209], al
push 1
push 1
call fcn.10120900
add esp, 8
movzx eax, al
test eax, eax
je 0x1011cb9e
movzx eax, byte [ebp - 0x209]
test eax, eax
je 0x1011cb74
mov ecx, dword [ebp - 0x1f4]
or ecx, 0x1000c
mov dword [ebp - 0x98c], ecx
jmp 0x1011cb86
mov edx, dword [ebp - 0x1f4]
or edx, 0x10000
mov dword [ebp - 0x98c], edx
mov eax, dword [ebp - 0x98c]
push eax
mov ecx, dword [ebp - 0xe0]
call fcn.10081eb3
nop
jmp 0x1011d42b
push 1
push 2
call fcn.10120900
add esp, 8
movzx eax, al
test eax, eax
je 0x1011cbfa
movzx eax, byte [ebp - 0x209]
test eax, eax
je 0x1011cbd0
mov ecx, dword [ebp - 0x1f4]
or ecx, 0x1000d
mov dword [ebp - 0x98c], ecx
jmp 0x1011cbe2
mov edx, dword [ebp - 0x1f4]
or edx, 0x10001
mov dword [ebp - 0x98c], edx
mov eax, dword [ebp - 0x98c]
push eax
mov ecx, dword [ebp - 0xe0]
call fcn.10081eb3
nop
jmp 0x1011d42b
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1011cc6a
push 1
push 3
call fcn.10120900
add esp, 8
movzx eax, al
test eax, eax
je 0x1011cc6a
movzx eax, byte [ebp - 0xe9]
test eax, eax
je 0x1011cc4d
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0x18]
movss xmm0, dword [eax + 0x60]
subss xmm0, dword [ecx + 0x16e0]
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0xbc]
push edx
call fcn.101327a0
add esp, 8
jmp 0x1011cc65
mov eax, dword [ebp - 0x1f4]
or eax, 0x10002
push eax
mov ecx, dword [ebp - 0xe0]
call fcn.10081eb3
nop
jmp 0x1011d42b
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1011ccda
push 1
push 4
call fcn.10120900
add esp, 8
movzx eax, al
test eax, eax
je 0x1011ccda
movzx eax, byte [ebp - 0xe9]
test eax, eax
je 0x1011ccbd
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0x18]
movss xmm0, dword [eax + 0x60]
addss xmm0, dword [ecx + 0x16e0]
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0xbc]
push edx
call fcn.101327a0
add esp, 8
jmp 0x1011ccd5
mov eax, dword [ebp - 0x1f4]
or eax, 0x10003
push eax
mov ecx, dword [ebp - 0xe0]
call fcn.10081eb3
nop
jmp 0x1011d42b
push 1
push 7
call fcn.10120900
add esp, 8
movzx eax, al
test eax, eax
je 0x1011cd36
movzx eax, byte [ebp - 0xe9]
test eax, eax
je 0x1011cd0c
mov ecx, dword [ebp - 0x1f4]
or ecx, 0x10006
mov dword [ebp - 0x98c], ecx
jmp 0x1011cd1e
mov edx, dword [ebp - 0x1f4]
or edx, 0x10004
mov dword [ebp - 0x98c], edx
mov eax, dword [ebp - 0x98c]
push eax
mov ecx, dword [ebp - 0xe0]
call fcn.10081eb3
nop
jmp 0x1011d42b
push 1
push 8
call fcn.10120900
add esp, 8
movzx eax, al
test eax, eax
je 0x1011cd92
movzx eax, byte [ebp - 0xe9]
test eax, eax
je 0x1011cd68
mov ecx, dword [ebp - 0x1f4]
or ecx, 0x10007
mov dword [ebp - 0x98c], ecx
jmp 0x1011cd7a
mov edx, dword [ebp - 0x1f4]
or edx, 0x10005
mov dword [ebp - 0x98c], edx
mov eax, dword [ebp - 0x98c]
push eax
mov ecx, dword [ebp - 0xe0]
call fcn.10081eb3
nop
jmp 0x1011d42b
push 1
push 9
call fcn.10120900
add esp, 8
movzx eax, al
test eax, eax
je 0x1011cdca
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x1011cdca
mov eax, dword [ebp - 0x1f4]
or eax, 0x10008
push eax
mov ecx, dword [ebp - 0xe0]
call fcn.10081eb3
nop
jmp 0x1011d42b
push 1
push 0xa
call fcn.10120900
add esp, 8
movzx eax, al
test eax, eax
je 0x1011ce02
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x1011ce02
mov eax, dword [ebp - 0x1f4]
or eax, 0x10009
push eax
mov ecx, dword [ebp - 0xe0]
call fcn.10081eb3
nop
jmp 0x1011d42b
push 1
push 0xb
call fcn.10120900
add esp, 8
movzx eax, al
test eax, eax
je 0x1011ceda
mov eax, dword [ebx + 0x18]
and eax, 0x800
je 0x1011ce2f
mov dword [ebp - 0x98c], 1
jmp 0x1011ce39
mov dword [ebp - 0x98c], 0
mov cl, byte [ebp - 0x98c]
mov byte [ebp - 0x215], cl
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1011ce79
movzx eax, byte [ebp - 0x215]
test eax, eax
je 0x1011ce63
movzx eax, byte [ebp - 0xe9]
test eax, eax
je 0x1011ce79
movzx eax, byte [ebp - 0x215]
test eax, eax
jne 0x1011ce8e
movzx eax, byte [ebp - 0xe9]
test eax, eax
je 0x1011ce8e
push 0
push 0
call fcn.10081c06
add esp, 8
mov byte [ebp - 0x19d], 1
jmp 0x1011ced5
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x1011ced5
mov dword [ebp - 0x224], 0xa
mov eax, dword [ebx + 0x20]
push eax
mov ecx, dword [ebx + 0x1c]
push ecx
mov edx, dword [ebx + 0x18]
push edx
lea eax, [ebp - 0x224]
push eax
call fcn.1011f8c0
add esp, 0x10
movzx ecx, al
test ecx, ecx
je 0x1011ced5
mov eax, dword [ebp - 0x224]
push eax
mov ecx, dword [ebp - 0xe0]
call fcn.10081eb3
nop
jmp 0x1011d42b
mov eax, dword [ebx + 0x18]
and eax, 0x400
je 0x1011cf68
push 1
push 0
call fcn.10120900
add esp, 8
movzx eax, al
test eax, eax
je 0x1011cf68
movzx eax, byte [ebp - 0xe9]
test eax, eax
jne 0x1011cf68
movzx eax, byte [ebp - 0xf5]
test eax, eax
jne 0x1011cf68
movzx eax, byte [ebp - 0x101]
test eax, eax
jne 0x1011cf68
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x1011cf68
mov dword [ebp - 0x230], 9
mov eax, dword [ebx + 0x20]
push eax
mov ecx, dword [ebx + 0x1c]
push ecx
mov edx, dword [ebx + 0x18]
push edx
lea eax, [ebp - 0x230]
push eax
call fcn.1011f8c0
add esp, 0x10
movzx ecx, al
test ecx, ecx
je 0x1011cf63
mov eax, dword [ebp - 0x230]
push eax
mov ecx, dword [ebp - 0xe0]
call fcn.10081eb3
nop
jmp 0x1011d42b
push 1
push 0xc
call fcn.10120900
add esp, 8
movzx eax, al
test eax, eax
je 0x1011cf93
push 0
push 0
call fcn.10081c06
add esp, 8
mov byte [ebp - 0x1e5], 1
jmp 0x1011d42b
movzx eax, byte [ebp - 0x1fd]
test eax, eax
je 0x1011cfdb
push 1
push 0x12
call fcn.10120900
add esp, 8
movzx eax, al
test eax, eax
je 0x1011cfdb
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x1011cfdb
push 0x1000a
mov ecx, dword [ebp - 0xe0]
call fcn.10081eb3
nop
mov ecx, dword [ebp - 0xe0]
call fcn.1007f014
nop
jmp 0x1011d42b
movzx eax, byte [ebp - 0x1fd]
test eax, eax
je 0x1011d023
push 1
push 0x11
call fcn.10120900
add esp, 8
movzx eax, al
test eax, eax
je 0x1011d023
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x1011d023
push 0x1000b
mov ecx, dword [ebp - 0xe0]
call fcn.10081eb3
nop
mov ecx, dword [ebp - 0xe0]
call fcn.1007f014
nop
jmp 0x1011d42b
movzx eax, byte [ebp - 0x1fd]
test eax, eax
je 0x1011d05f
push 1
push 0xd
call fcn.10120900
add esp, 8
movzx eax, al
test eax, eax
je 0x1011d05f
mov ecx, dword [ebp - 0xe0]
call fcn.1007f866
nop
mov eax, dword [ebp - 0xe0]
mov byte [eax + 0xcd0], 1
jmp 0x1011d42b
movzx eax, byte [ebp - 0x1fd]
test eax, eax
je 0x1011d285
movzx eax, byte [ebp - 0x5d]
test eax, eax
jne 0x1011d285
push 1
push 0x10
call fcn.10120900
add esp, 8
movzx eax, al
test eax, eax
je 0x1011d095
movzx eax, byte [ebp - 0x51]
test eax, eax
jne 0x1011d0ac
push 1
push 0xe
call fcn.10120900
add esp, 8
movzx eax, al
test eax, eax
je 0x1011d285
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1011d0ca
mov ecx, dword [ebp - 0xe0]
call fcn.1008015d
movzx eax, al
test eax, eax
je 0x1011d285
push 1
push 0x10
call fcn.10120900
add esp, 8
mov byte [ebp - 0x239], al
movzx eax, byte [ebp - 0x239]
test eax, eax
je 0x1011d105
mov ecx, dword [ebp - 0xe0]
call fcn.1008015d
movzx eax, al
test eax, eax
jne 0x1011d105
mov ecx, dword [ebp - 0xe0]
call fcn.1007f866
nop
mov eax, dword [ebp - 0x18]
cmp dword [eax + 0xb0], 0
je 0x1011d24f
mov ecx, dword [ebp - 0xe0]
call fcn.1008015d
movzx eax, al
test eax, eax
je 0x1011d14b
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ecx + 0x40]
push edx
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0x3c]
push ecx
call fcn.101188e0
add esp, 8
mov dword [ebp - 0x98c], eax
jmp 0x1011d155
mov dword [ebp - 0x98c], 0
mov edx, dword [ebp - 0x98c]
mov dword [ebp - 0x248], edx
mov ecx, dword [ebp - 0xe0]
call fcn.1008015d
movzx eax, al
test eax, eax
je 0x1011d197
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ecx + 0x40]
push edx
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0x3c]
push ecx
call fcn.101186f0
add esp, 8
mov dword [ebp - 0x98c], eax
jmp 0x1011d1a6
mov edx, dword [ebp - 0xe0]
mov eax, dword [edx + 0x2c]
mov dword [ebp - 0x98c], eax
mov ecx, dword [ebp - 0x98c]
mov dword [ebp - 0x254], ecx
mov eax, dword [ebp - 0xe0]
add eax, 0x1c
mov dword [ebp - 0x98c], eax
mov ecx, dword [ebp - 0x254]
sub ecx, dword [ebp - 0x248]
lea edx, [ecx*4 + 1]
push edx
mov ecx, dword [ebp - 0x98c]
call fcn.10080ee1
nop
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x254]
lea eax, [ecx + edx*2]
push eax
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x248]
lea ecx, [edx + eax*2]
push ecx
mov edx, dword [ebp - 0xe0]
mov eax, dword [edx + 0x1c]
push eax
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ecx + 0x24]
push edx
call fcn.10080f0e
add esp, 0x10
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0xb0]
mov dword [ebp - 0x98c], ecx
mov esi, esp
mov edx, dword [ebp - 0xe0]
mov eax, dword [edx + 0x24]
push eax
call dword [ebp - 0x98c]
add esp, 4
cmp esi, esp
call fcn.1008119d
nop
movzx eax, byte [ebp - 0x239]
test eax, eax
je 0x1011d280
mov eax, dword [ebp - 0xe0]
mov byte [eax + 0xcd0], 1
mov eax, dword [ebp - 0xe0]
add eax, 0x38
push eax
mov ecx, dword [ebp - 0xe0]
push ecx
call fcn.1013f0b0
add esp, 8
jmp 0x1011d42b
movzx eax, byte [ebp - 0x1fd]
test eax, eax
je 0x1011d42b
push 1
push 0xf
call fcn.10120900
add esp, 8
movzx eax, al
test eax, eax
je 0x1011d42b
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x1011d42b
mov eax, dword [ebp - 0x18]
cmp dword [eax + 0xac], 0
je 0x1011d42b
mov eax, dword [ebp - 0x18]
mov esi, esp
mov ecx, dword [eax + 0xac]
call ecx
cmp esi, esp
call fcn.1008119d
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0
je 0x1011d42b
mov eax, dword [ebp - 0x260]
push eax
call fcn.100824b2
add esp, 4
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp - 0x26c]
lea ecx, [eax + eax + 2]
push ecx
call fcn.100812a6
add esp, 4
mov dword [ebp - 0x278], eax
mov dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x290]
movsx ecx, byte [eax]
test ecx, ecx
je 0x1011d3cd
push 0
mov eax, dword [ebp - 0x290]
push eax
lea ecx, [ebp - 0x29c]
push ecx
call fcn.10081148
add esp, 0xc
add eax, dword [ebp - 0x290]
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x29c], 0
jne 0x1011d372
jmp 0x1011d3cd
cmp dword [ebp - 0x29c], 0x10000
jae 0x1011d3a0
mov eax, dword [ebx + 0x20]
push eax
mov ecx, dword [ebx + 0x1c]
push ecx
mov edx, dword [ebx + 0x18]
push edx
lea eax, [ebp - 0x29c]
push eax
call fcn.1011f8c0
add esp, 0x10
movzx ecx, al
test ecx, ecx
jne 0x1011d3a2
jmp 0x1011d332
mov eax, dword [ebp - 0x284]
mov ecx, dword [ebp - 0x278]
mov dx, word [ebp - 0x29c]
mov word [ecx + eax*2], dx
mov eax, dword [ebp - 0x284]
add eax, 1
mov dword [ebp - 0x284], eax
jmp 0x1011d332
xor eax, eax
mov ecx, dword [ebp - 0x284]
mov edx, dword [ebp - 0x278]
mov word [edx + ecx*2], ax
cmp dword [ebp - 0x284], 0
jle 0x1011d41c
mov eax, dword [ebp - 0x284]
push eax
mov ecx, dword [ebp - 0x278]
push ecx
mov edx, dword [ebp - 0xe0]
add edx, 0x38
push edx
mov eax, dword [ebp - 0xe0]
push eax
call fcn.10140c50
add esp, 0x10
mov eax, dword [ebp - 0xe0]
mov byte [eax + 0xcd0], 1
mov eax, dword [ebp - 0x278]
push eax
call fcn.10080185
add esp, 4
movzx eax, byte [ebp - 0x1e5]
test eax, eax
je 0x1011d469
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x1011d464
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0x18]
push ecx
push 0x1018bb58
mov edx, dword [ebx + 0x10]
push edx
mov eax, dword [ebx + 0xc]
push eax
call fcn.100807ac
add esp, 0x10
mov byte [ebp - 0x191], 1
jmp 0x1011d954
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x1011d4c1
mov eax, dword [ebp - 0xe0]
add eax, 0x1c
mov dword [ebp - 0x98c], eax
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ecx + 4]
shl edx, 2
push edx
mov ecx, dword [ebp - 0x98c]
call fcn.10080ee1
nop
push 0
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0xc]
push ecx
mov edx, dword [ebp - 0xe0]
mov eax, dword [edx + 0x1c]
push eax
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ecx + 0x24]
push edx
call fcn.10080f0e
add esp, 0x10
mov eax, dword [ebx + 0x18]
and eax, 0x1c0
je 0x1011d90c
cmp dword [ebx + 0x1c], 0
jne 0x1011d4fc
mov eax, dword [0x101b61dc]
add eax, 0x13b
mov esi, esp
push eax
push str.C:Usersgr00tMAA_hVHerRDesktopDBGHOOK_V34_shavelmenuimguiImGui.cpp
push str.callback___0
call dword [sym.imp.ucrtbased.dll__wassert]
add esp, 0xc
cmp esi, esp
call fcn.1008119d
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x2b4], 0x13
mov eax, dword [ebx + 0x18]
and eax, 0x40
je 0x1011d541
push 1
push 0
call fcn.10120900
add esp, 8
movzx eax, al
test eax, eax
je 0x1011d541
mov dword [ebp - 0x2a8], 0x40
mov dword [ebp - 0x2b4], 0
jmp 0x1011d5bb
mov eax, dword [ebx + 0x18]
and eax, 0x80
je 0x1011d574
push 1
push 3
call fcn.10120900
add esp, 8
movzx eax, al
test eax, eax
je 0x1011d574
mov dword [ebp - 0x2a8], 0x80
mov dword [ebp - 0x2b4], 3
jmp 0x1011d5bb
mov eax, dword [ebx + 0x18]
and eax, 0x80
je 0x1011d5a7
push 1
push 4
call fcn.10120900
add esp, 8
movzx eax, al
test eax, eax
je 0x1011d5a7
mov dword [ebp - 0x2a8], 0x80
mov dword [ebp - 0x2b4], 4
jmp 0x1011d5bb
mov eax, dword [ebx + 0x18]
and eax, 0x100
je 0x1011d5bb
mov dword [ebp - 0x2a8], 0x100
cmp dword [ebp - 0x2a8], 0
je 0x1011d90c
push 0x30
push 0
lea eax, [ebp - 0x2ec]
push eax
call fcn.100804a0
add esp, 0xc
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x2ec], eax
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebx + 0x20]
mov dword [ebp - 0x2e4], eax
movzx eax, byte [ebp - 0x51]
test eax, eax
jne 0x1011d60d
mov dword [ebp - 0x98c], 1
jmp 0x1011d617
mov dword [ebp - 0x98c], 0
mov cl, byte [ebp - 0x98c]
mov byte [ebp - 0x2e0], cl
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0x24]
mov dword [ebp - 0x2d8], ecx
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0x28]
mov dword [ebp - 0x2d4], ecx
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x2d0], ecx
mov byte [ebp - 0x2cc], 0
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x2f8], ecx
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0x38]
mov edx, dword [ebp - 0x2f8]
lea eax, [edx + ecx*2]
push eax
mov ecx, dword [ebp - 0x2f8]
push ecx
call fcn.100809f0
add esp, 8
mov dword [ebp - 0x2c8], eax
mov edx, dword [ebp - 0x2c8]
mov dword [ebp - 0x304], edx
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0x3c]
mov edx, dword [ebp - 0x2f8]
lea eax, [edx + ecx*2]
push eax
mov ecx, dword [ebp - 0x2f8]
push ecx
call fcn.100809f0
add esp, 8
mov dword [ebp - 0x2c4], eax
mov edx, dword [ebp - 0x2c4]
mov dword [ebp - 0x310], edx
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0x40]
mov edx, dword [ebp - 0x2f8]
lea eax, [edx + ecx*2]
push eax
mov ecx, dword [ebp - 0x2f8]
push ecx
call fcn.100809f0
add esp, 8
mov dword [ebp - 0x2c0], eax
mov edx, dword [ebp - 0x2c0]
mov dword [ebp - 0x31c], edx
mov eax, dword [ebx + 0x1c]
mov dword [ebp - 0x98c], eax
mov esi, esp
lea ecx, [ebp - 0x2ec]
push ecx
call dword [ebp - 0x98c]
add esp, 4
cmp esi, esp
call fcn.1008119d
nop
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0x2d8]
cmp ecx, dword [eax + 0x24]
je 0x1011d76b
mov edx, dword [0x101b61dc]
add edx, 0x16b
mov esi, esp
push edx
push str.C:Usersgr00tMAA_hVHerRDesktopDBGHOOK_V34_shavelmenuimguiImGui.cpp
push str.callback_data.Buf__edit_state.TempTextBuffer.Data
call dword [sym.imp.ucrtbased.dll__wassert]
add esp, 0xc
cmp esi, esp
call fcn.1008119d
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0x2d0]
cmp ecx, dword [eax + 0x30]
je 0x1011d7a5
mov edx, dword [0x101b61dc]
add edx, 0x16c
mov esi, esp
push edx
push str.C:Usersgr00tMAA_hVHerRDesktopDBGHOOK_V34_shavelmenuimguiImGui.cpp
push str.callback_data.BufSize__edit_state.BufSizeA
call dword [sym.imp.ucrtbased.dll__wassert]
add esp, 0xc
cmp esi, esp
call fcn.1008119d
mov eax, dword [ebp - 0x2e8]
cmp eax, dword [ebx + 0x18]
je 0x1011d7d9
mov ecx, dword [0x101b61dc]
add ecx, 0x16d
mov esi, esp
push ecx
push str.C:Usersgr00tMAA_hVHerRDesktopDBGHOOK_V34_shavelmenuimguiImGui.cpp
push str.callback_data.Flags__flags
call dword [sym.imp.ucrtbased.dll__wassert]
add esp, 0xc
cmp esi, esp
call fcn.1008119d
mov eax, dword [ebp - 0x2c8]
cmp eax, dword [ebp - 0x304]
je 0x1011d80c
mov eax, dword [ebp - 0x2d8]
add eax, dword [ebp - 0x2c8]
push eax
mov ecx, dword [ebp - 0x2d8]
push ecx
call fcn.10081337
add esp, 8
mov edx, dword [ebp - 0xe0]
mov dword [edx + 0x38], eax
mov eax, dword [ebp - 0x2c4]
cmp eax, dword [ebp - 0x310]
je 0x1011d83f
mov eax, dword [ebp - 0x2d8]
add eax, dword [ebp - 0x2c4]
push eax
mov ecx, dword [ebp - 0x2d8]
push ecx
call fcn.10081337
add esp, 8
mov edx, dword [ebp - 0xe0]
mov dword [edx + 0x3c], eax
mov eax, dword [ebp - 0x2c0]
cmp eax, dword [ebp - 0x31c]
je 0x1011d872
mov eax, dword [ebp - 0x2d8]
add eax, dword [ebp - 0x2c0]
push eax
mov ecx, dword [ebp - 0x2d8]
push ecx
call fcn.10081337
add esp, 8
mov edx, dword [ebp - 0xe0]
mov dword [edx + 0x40], eax
movzx eax, byte [ebp - 0x2cc]
test eax, eax
je 0x1011d90c
mov eax, dword [ebp - 0x2d8]
push eax
call fcn.100824b2
add esp, 4
cmp dword [ebp - 0x2d4], eax
je 0x1011d8c1
mov ecx, dword [0x101b61dc]
add ecx, 0x173
mov esi, esp
push ecx
push str.C:Usersgr00tMAA_hVHerRDesktopDBGHOOK_V34_shavelmenuimguiImGui.cpp
push str.callback_data.BufTextLen___int_strlen_callback_data.Buf_
call dword [sym.imp.ucrtbased.dll__wassert]
add esp, 0xc
cmp esi, esp
call fcn.1008119d
push 0
push 0
mov eax, dword [ebp - 0x2d8]
push eax
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0xc]
push ecx
call fcn.10081526
add esp, 0x14
mov edx, dword [ebp - 0xe0]
mov dword [edx + 0x2c], eax
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0x2d4]
mov dword [eax + 0x28], ecx
mov ecx, dword [ebp - 0xe0]
call fcn.100807d4
nop
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x1011d954
mov eax, dword [ebx + 0xc]
push eax
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ecx + 0x24]
push edx
call fcn.1007f2b2
add esp, 8
test eax, eax
je 0x1011d954
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0x24]
push ecx
push 0x1018bb58
mov edx, dword [ebx + 0x10]
push edx
mov eax, dword [ebx + 0xc]
push eax
call fcn.100807ac
add esp, 0x10
mov byte [ebp - 0x191], 1
movzx eax, byte [ebp - 0x45]
test eax, eax
jne 0x1011d9c5
mov eax, dword [ebp - 0x30]
movss xmm0, dword [eax + 0x28]
movss dword [ebp - 0x98c], xmm0
push ecx
movss xmm0, dword [0x1018e2f4]
movss dword [esp], xmm0
push 7
call fcn.1008170b
add esp, 8
mov dword [ebp - 0x990], eax
push ecx
movss xmm0, dword [ebp - 0x98c]
movss dword [esp], xmm0
push 1
mov ecx, dword [ebp - 0x990]
push ecx
mov edx, dword [ebp - 0x8c]
push edx
mov eax, dword [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x94]
push ecx
mov edx, dword [ebp - 0x98]
push edx
call fcn.10080b35
add esp, 0x1c
movss xmm0, dword [ebp - 0x94]
addss xmm0, dword [ebp - 0x7c]
push ecx
movss dword [esp], xmm0
movss xmm0, dword [ebp - 0x98]
addss xmm0, dword [ebp - 0x80]
push ecx
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x94]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x98]
movss dword [esp], xmm0
lea ecx, [ebp - 0x334]
call fcn.100818ff
nop
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1011da47
mov ecx, dword [ebp - 0xbc]
mov edx, dword [ecx + 0xb8]
mov eax, dword [ecx + 0xbc]
mov dword [ebp - 0x82c], edx
mov dword [ebp - 0x828], eax
lea ecx, [ebp - 0x82c]
mov dword [ebp - 0x98c], ecx
jmp 0x1011da6a
mov edx, dword [ebp - 0x30]
add edx, 0x20
push edx
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x83c]
push ecx
call fcn.100faf60
add esp, 0xc
mov dword [ebp - 0x98c], eax
mov edx, dword [ebp - 0x98c]
mov dword [ebp - 0x81c], edx
mov eax, dword [ebp - 0x81c]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x344], ecx
mov dword [ebp - 0x340], edx
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
lea ecx, [ebp - 0x354]
call fcn.10080d38
nop
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x1740]
cmp ecx, dword [ebp - 0x3c]
je 0x1011daf7
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0x3c]
jne 0x1011e7e5
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1011e7e5
push 0
push str.SCROLLY
mov ecx, dword [ebp - 0xbc]
call fcn.1008079d
mov ecx, dword [ebp - 0x18]
cmp dword [ecx + 0x1740], eax
jne 0x1011e7e5
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0x18]
movss xmm0, dword [eax + 0xccc]
addss xmm0, dword [ecx + 0xc]
mov edx, dword [ebp - 0xe0]
movss dword [edx + 0xccc], xmm0
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x360], ecx
lea ecx, [ebp - 0x370]
call fcn.1007f67c
nop
lea ecx, [ebp - 0x380]
call fcn.1007f67c
nop
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0x38]
mov edx, dword [ebp - 0x360]
lea eax, [edx + ecx*2]
mov ecx, 4
imul edx, ecx, 0
mov dword [ebp + edx - 0x390], eax
mov eax, 4
shl eax, 0
mov dword [ebp + eax - 0x390], 0
mov dword [ebp - 0x39c], 1
mov dword [ebp - 0x3ac], 0xffffffff
mov dword [ebp - 0x3a8], 0xfffffc19
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xe0]
mov edx, dword [eax + 0x3c]
cmp edx, dword [ecx + 0x40]
je 0x1011dbfe
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0x40]
push ecx
mov edx, dword [ebp - 0xe0]
mov eax, dword [edx + 0x3c]
push eax
call fcn.101188e0
add esp, 8
mov ecx, dword [ebp - 0x360]
lea edx, [ecx + eax*2]
mov eax, 4
shl eax, 0
mov dword [ebp + eax - 0x390], edx
mov eax, 4
shl eax, 0
mov dword [ebp + eax - 0x3ac], 0xffffffff
mov eax, dword [ebp - 0x39c]
add eax, 1
mov dword [ebp - 0x39c], eax
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1011dc12
mov dword [ebp - 0x98c], 1
jmp 0x1011dc1c
mov dword [ebp - 0x98c], 0
mov ecx, dword [ebp - 0x39c]
add ecx, dword [ebp - 0x98c]
mov dword [ebp - 0x39c], ecx
mov dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x3c4], eax
jmp 0x1011dc55
mov eax, dword [ebp - 0x3c4]
add eax, 2
mov dword [ebp - 0x3c4], eax
mov eax, dword [ebp - 0x3c4]
movzx ecx, word [eax]
test ecx, ecx
je 0x1011dd3c
mov eax, dword [ebp - 0x3c4]
movzx ecx, word [eax]
cmp ecx, 0xa
jne 0x1011dd37
mov eax, dword [ebp - 0x3b8]
add eax, 1
mov dword [ebp - 0x3b8], eax
mov eax, 4
imul ecx, eax, 0
cmp dword [ebp + ecx - 0x3ac], 0xffffffff
jne 0x1011dcdf
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp - 0x3c4]
cmp edx, dword [ebp + ecx - 0x390]
jb 0x1011dcdf
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp - 0x3b8]
mov dword [ebp + ecx - 0x3ac], edx
mov eax, dword [ebp - 0x39c]
sub eax, 1
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 0
jg 0x1011dcdf
jmp 0x1011dd3c
mov eax, 4
shl eax, 0
cmp dword [ebp + eax - 0x3ac], 0xffffffff
jne 0x1011dd37
mov eax, 4
shl eax, 0
mov ecx, dword [ebp - 0x3c4]
cmp ecx, dword [ebp + eax - 0x390]
jb 0x1011dd37
mov eax, 4
shl eax, 0
mov ecx, dword [ebp - 0x3b8]
mov dword [ebp + eax - 0x3ac], ecx
mov eax, dword [ebp - 0x39c]
sub eax, 1
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 0
jg 0x1011dd37
jmp 0x1011dd3c
jmp 0x1011dc46
mov eax, dword [ebp - 0x3b8]
add eax, 1
mov dword [ebp - 0x3b8], eax
mov eax, 4
imul ecx, eax, 0
cmp dword [ebp + ecx - 0x3ac], 0xffffffff
jne 0x1011dd72
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp - 0x3b8]
mov dword [ebp + ecx - 0x3ac], edx
mov eax, 4
shl eax, 0
cmp dword [ebp + eax - 0x3ac], 0xffffffff
jne 0x1011dd99
mov eax, 4
shl eax, 0
mov ecx, dword [ebp - 0x3b8]
mov dword [ebp + eax - 0x3ac], ecx
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp + ecx - 0x390]
mov dword [ebp - 0x98c], edx
mov eax, dword [ebp - 0x360]
push eax
mov ecx, 4
imul edx, ecx, 0
mov eax, dword [ebp + edx - 0x390]
push eax
call fcn.1007fd9d
add esp, 8
mov dword [ebp - 0x990], eax
push 0
push 0
push 0
mov ecx, dword [ebp - 0x98c]
push ecx
mov edx, dword [ebp - 0x990]
push edx
lea eax, [ebp - 0x84c]
push eax
call fcn.1011b940
add esp, 0x18
movss xmm0, dword [eax]
movss dword [ebp - 0x370], xmm0
mov eax, 4
imul ecx, eax, 0
cvtsi2ss xmm0, dword [ebp + ecx - 0x3ac]
mov edx, dword [ebp - 0x18]
mulss xmm0, dword [edx + 0x16e0]
movss dword [ebp - 0x36c], xmm0
mov eax, 4
shl eax, 0
cmp dword [ebp + eax - 0x3ac], 0
jl 0x1011dec9
mov eax, 4
shl eax, 0
mov ecx, dword [ebp + eax - 0x390]
mov dword [ebp - 0x98c], ecx
mov edx, dword [ebp - 0x360]
push edx
mov eax, 4
shl eax, 0
mov ecx, dword [ebp + eax - 0x390]
push ecx
call fcn.1007fd9d
add esp, 8
mov dword [ebp - 0x990], eax
push 0
push 0
push 0
mov edx, dword [ebp - 0x98c]
push edx
mov eax, dword [ebp - 0x990]
push eax
lea ecx, [ebp - 0x85c]
push ecx
call fcn.1011b940
add esp, 0x18
movss xmm0, dword [eax]
movss dword [ebp - 0x380], xmm0
mov eax, 4
shl eax, 0
cvtsi2ss xmm0, dword [ebp + eax - 0x3ac]
mov ecx, dword [ebp - 0x18]
mulss xmm0, dword [ecx + 0x16e0]
movss dword [ebp - 0x37c], xmm0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1011df11
cvtsi2ss xmm0, dword [ebp - 0x3b8]
mov eax, dword [ebp - 0x18]
mulss xmm0, dword [eax + 0x16e0]
push ecx
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x80]
movss dword [esp], xmm0
lea ecx, [ebp - 0x86c]
call fcn.10080d38
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x354], ecx
mov dword [ebp - 0x350], edx
mov eax, dword [ebp - 0xe0]
movzx ecx, byte [eax + 0xcd0]
test ecx, ecx
je 0x1011e0ec
mov eax, dword [ebx + 0x18]
and eax, 0x1000
jne 0x1011dfea
movss xmm0, dword [ebp - 0x80]
mulss xmm0, dword [0x10192134]
movss dword [ebp - 0x3d0], xmm0
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [eax + 0x34]
comiss xmm0, dword [ebp - 0x370]
jbe 0x1011dfa7
movss xmm0, dword [ebp - 0x370]
subss xmm0, dword [ebp - 0x3d0]
push ecx
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
call fcn.10118770
add esp, 8
fstp dword [ebp - 0x98c]
movss xmm0, dword [ebp - 0x98c]
cvttss2si eax, xmm0
cvtsi2ss xmm0, eax
mov ecx, dword [ebp - 0xe0]
movss dword [ecx + 0x34], xmm0
jmp 0x1011dfe8
movss xmm0, dword [ebp - 0x370]
subss xmm0, dword [ebp - 0x80]
mov eax, dword [ebp - 0xe0]
comiss xmm0, dword [eax + 0x34]
jb 0x1011dfe8
movss xmm0, dword [ebp - 0x370]
subss xmm0, dword [ebp - 0x80]
addss xmm0, dword [ebp - 0x3d0]
cvttss2si eax, xmm0
cvtsi2ss xmm0, eax
mov ecx, dword [ebp - 0xe0]
movss dword [ecx + 0x34], xmm0
jmp 0x1011dff8
mov eax, dword [ebp - 0xe0]
xorps xmm0, xmm0
movss dword [eax + 0x34], xmm0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1011e0ec
mov eax, dword [ebp - 0xbc]
movss xmm0, dword [eax + 0x60]
movss dword [ebp - 0x3dc], xmm0
mov eax, dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x36c]
subss xmm0, dword [eax + 0x16e0]
movss xmm1, dword [ebp - 0x3dc]
comiss xmm1, xmm0
jbe 0x1011e069
mov eax, dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x36c]
subss xmm0, dword [eax + 0x16e0]
push ecx
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
call fcn.10118770
add esp, 8
fstp dword [ebp - 0x3dc]
jmp 0x1011e094
movss xmm0, dword [ebp - 0x36c]
subss xmm0, dword [ebp - 0x7c]
comiss xmm0, dword [ebp - 0x3dc]
jb 0x1011e094
movss xmm0, dword [ebp - 0x36c]
subss xmm0, dword [ebp - 0x7c]
movss dword [ebp - 0x3dc], xmm0
mov eax, dword [ebp - 0xbc]
movss xmm0, dword [eax + 0x60]
subss xmm0, dword [ebp - 0x3dc]
mov ecx, dword [ebp - 0xbc]
addss xmm0, dword [ecx + 0xbc]
mov edx, dword [ebp - 0xbc]
movss dword [edx + 0xbc], xmm0
mov eax, dword [ebp - 0xbc]
movss xmm0, dword [ebp - 0x3dc]
movss dword [eax + 0x60], xmm0
mov eax, dword [ebp - 0xbc]
movss xmm0, dword [eax + 0xbc]
movss dword [ebp - 0x340], xmm0
mov eax, dword [ebp - 0xe0]
mov byte [eax + 0xcd0], 0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov eax, dword [ebp - 0xe0]
push ecx
movss xmm0, dword [eax + 0x34]
movss dword [esp], xmm0
lea ecx, [ebp - 0x3ec]
call fcn.10080d38
nop
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xe0]
mov edx, dword [eax + 0x3c]
cmp edx, dword [ecx + 0x40]
je 0x1011e4de
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0x40]
push ecx
mov edx, dword [ebp - 0xe0]
mov eax, dword [edx + 0x3c]
push eax
call fcn.101188e0
add esp, 8
mov ecx, dword [ebp - 0x360]
lea edx, [ecx + eax*2]
mov dword [ebp - 0x3f8], edx
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0x40]
push ecx
mov edx, dword [ebp - 0xe0]
mov eax, dword [edx + 0x3c]
push eax
call fcn.101186f0
add esp, 8
mov ecx, dword [ebp - 0x360]
lea edx, [ecx + eax*2]
mov dword [ebp - 0x404], edx
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1011e1a2
xorps xmm0, xmm0
movss dword [ebp - 0x98c], xmm0
jmp 0x1011e1b2
movss xmm0, dword [0x1018ee74]
movss dword [ebp - 0x98c], xmm0
movss xmm0, dword [ebp - 0x98c]
movss dword [ebp - 0x410], xmm0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1011e1d7
xorps xmm0, xmm0
movss dword [ebp - 0x98c], xmm0
jmp 0x1011e1e7
movss xmm0, dword [0x1018f8b4]
movss dword [ebp - 0x98c], xmm0
movss xmm0, dword [ebp - 0x98c]
movss dword [ebp - 0x41c], xmm0
push ecx
movss xmm0, dword [0x1018e2f4]
movss dword [esp], xmm0
push 0x29
call fcn.1008170b
add esp, 8
mov dword [ebp - 0x428], eax
lea eax, [ebp - 0x3ec]
push eax
lea ecx, [ebp - 0x380]
push ecx
lea edx, [ebp - 0x344]
push edx
lea eax, [ebp - 0x87c]
push eax
call fcn.100faf60
add esp, 0xc
push eax
lea ecx, [ebp - 0x438]
push ecx
call fcn.100faed0
add esp, 0xc
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x444]
cmp eax, dword [ebp - 0x404]
jae 0x1011e4de
mov eax, dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x328]
addss xmm0, dword [eax + 0x16e0]
movss xmm1, dword [ebp - 0x434]
comiss xmm1, xmm0
jbe 0x1011e28c
jmp 0x1011e4de
movss xmm0, dword [ebp - 0x330]
comiss xmm0, dword [ebp - 0x434]
jbe 0x1011e2fa
mov eax, dword [ebp - 0x444]
cmp eax, dword [ebp - 0x404]
jae 0x1011e2f5
mov eax, dword [ebp - 0x444]
movzx ecx, word [eax]
mov dword [ebp - 0x98c], ecx
mov edx, dword [ebp - 0x444]
add edx, 2
mov dword [ebp - 0x444], edx
cmp dword [ebp - 0x98c], 0xa
jne 0x1011e2de
mov dword [ebp - 0x990], 1
jmp 0x1011e2e8
mov dword [ebp - 0x990], 0
cmp dword [ebp - 0x990], 0
je 0x1011e2f3
jmp 0x1011e2f5
jmp 0x1011e29d
jmp 0x1011e4a6
push 1
push 0
lea eax, [ebp - 0x444]
push eax
mov ecx, dword [ebp - 0x404]
push ecx
mov edx, dword [ebp - 0x444]
push edx
lea eax, [ebp - 0x454]
push eax
call fcn.1011b940
add esp, 0x18
xorps xmm0, xmm0
comiss xmm0, dword [ebp - 0x454]
jb 0x1011e370
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x16dc]
mov dword [ebp - 0x98c], ecx
push 0x20
mov ecx, dword [ebp - 0x98c]
call fcn.10080aa9
fstp dword [ebp - 0x990]
movss xmm0, dword [ebp - 0x990]
mulss xmm0, dword [0x1018e454]
cvttss2si edx, xmm0
cvtsi2ss xmm0, edx
movss dword [ebp - 0x454], xmm0
push ecx
movss xmm0, dword [ebp - 0x41c]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x454]
movss dword [esp], xmm0
lea ecx, [ebp - 0x88c]
call fcn.10080d38
push eax
lea eax, [ebp - 0x438]
push eax
lea ecx, [ebp - 0x89c]
push ecx
call fcn.100faf60
add esp, 0xc
mov dword [ebp - 0x98c], eax
mov edx, dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x410]
subss xmm0, dword [edx + 0x16e0]
push ecx
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
lea ecx, [ebp - 0x8ac]
call fcn.10080d38
push eax
lea eax, [ebp - 0x438]
push eax
lea ecx, [ebp - 0x8bc]
push ecx
call fcn.100faf60
add esp, 0xc
mov dword [ebp - 0x990], eax
mov edx, dword [ebp - 0x98c]
push edx
mov eax, dword [ebp - 0x990]
push eax
lea ecx, [ebp - 0x46c]
call fcn.1007fef6
nop
lea eax, [ebp - 0x334]
push eax
lea ecx, [ebp - 0x8d4]
call fcn.10081265
lea ecx, [ebp - 0x8d4]
push ecx
lea ecx, [ebp - 0x46c]
call fcn.1007f7e4
nop
lea eax, [ebp - 0x334]
push eax
lea ecx, [ebp - 0x8ec]
call fcn.10081265
lea ecx, [ebp - 0x8ec]
push ecx
lea ecx, [ebp - 0x46c]
call fcn.1007fb81
movzx edx, al
test edx, edx
je 0x1011e4a6
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax + 0x254]
mov dword [ebp - 0x98c], ecx
push 0xf
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov edx, dword [ebp - 0x428]
push edx
lea eax, [ebp - 0x464]
push eax
lea ecx, [ebp - 0x46c]
push ecx
mov ecx, dword [ebp - 0x98c]
call fcn.10080603
nop
movss xmm0, dword [ebp - 0x344]
subss xmm0, dword [ebp - 0x3ec]
movss dword [ebp - 0x438], xmm0
mov eax, dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x434]
addss xmm0, dword [eax + 0x16e0]
movss dword [ebp - 0x434], xmm0
jmp 0x1011e255
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax + 0x254]
mov dword [ebp - 0x98c], ecx
movzx edx, byte [ebp - 0x45]
test edx, edx
je 0x1011e504
mov dword [ebp - 0x990], 0
jmp 0x1011e510
lea eax, [ebp - 0x334]
mov dword [ebp - 0x990], eax
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ebx + 0xc]
add edx, dword [ecx + 0x28]
mov dword [ebp - 0x994], edx
push ecx
movss xmm0, dword [0x1018e2f4]
movss dword [esp], xmm0
push 0
call fcn.1008170b
add esp, 8
mov dword [ebp - 0x998], eax
lea eax, [ebp - 0x3ec]
push eax
lea ecx, [ebp - 0x344]
push ecx
lea edx, [ebp - 0x8fc]
push edx
call fcn.100faed0
add esp, 0xc
mov dword [ebp - 0x99c], eax
mov eax, dword [ebp - 0x18]
movss xmm0, dword [eax + 0x16e0]
movss dword [ebp - 0x9a0], xmm0
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx + 0x16dc]
mov dword [ebp - 0x9a4], edx
mov eax, dword [ebp - 0x990]
push eax
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x994]
push ecx
mov edx, dword [ebx + 0xc]
push edx
mov eax, dword [ebp - 0x998]
push eax
mov ecx, dword [ebp - 0x99c]
push ecx
push ecx
movss xmm0, dword [ebp - 0x9a0]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x9a4]
push edx
mov ecx, dword [ebp - 0x98c]
call fcn.10081edb
nop
mov eax, dword [ebp - 0x18]
xorps xmm0, xmm0
comiss xmm0, dword [eax + 0x26dc]
jae 0x1011e628
push ecx
movss xmm0, dword [0x1018f89c]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x18]
push ecx
movss xmm0, dword [ecx + 0x26dc]
movss dword [esp], xmm0
call fcn.1007fa0f
add esp, 8
fstp dword [ebp - 0x98c]
movss xmm0, dword [0x10192190]
comiss xmm0, dword [ebp - 0x98c]
jae 0x1011e628
mov dword [ebp - 0x990], 0
jmp 0x1011e632
mov dword [ebp - 0x990], 1
mov dl, byte [ebp - 0x990]
mov byte [ebp - 0x475], dl
lea eax, [ebp - 0x3ec]
push eax
lea ecx, [ebp - 0x370]
push ecx
lea edx, [ebp - 0x344]
push edx
lea eax, [ebp - 0x90c]
push eax
call fcn.100faf60
add esp, 0xc
push eax
lea ecx, [ebp - 0x488]
push ecx
call fcn.100faed0
add esp, 0xc
movss xmm0, dword [ebp - 0x484]
subss xmm0, dword [0x101921b8]
push ecx
movss dword [esp], xmm0
movss xmm0, dword [ebp - 0x488]
addss xmm0, dword [0x1018e2f4]
push ecx
movss dword [esp], xmm0
mov eax, dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x484]
subss xmm0, dword [eax + 0x16e0]
addss xmm0, dword [0x1018e454]
push ecx
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x488]
movss dword [esp], xmm0
lea ecx, [ebp - 0x4a0]
call fcn.100810e9
nop
movzx eax, byte [ebp - 0x475]
test eax, eax
je 0x1011e78a
lea eax, [ebp - 0x334]
push eax
lea ecx, [ebp - 0x924]
call fcn.10081265
lea ecx, [ebp - 0x924]
push ecx
lea ecx, [ebp - 0x4a0]
call fcn.1007fb81
movzx edx, al
test edx, edx
je 0x1011e78a
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax + 0x254]
mov dword [ebp - 0x98c], ecx
push ecx
movss xmm0, dword [0x1018e2f4]
movss dword [esp], xmm0
push 0
call fcn.1008170b
add esp, 8
mov dword [ebp - 0x990], eax
lea edx, [ebp - 0x934]
push edx
lea ecx, [ebp - 0x4a0]
call fcn.1007f1b8
mov dword [ebp - 0x994], eax
push ecx
movss xmm0, dword [0x1018e2f4]
movss dword [esp], xmm0
mov eax, dword [ebp - 0x990]
push eax
mov ecx, dword [ebp - 0x994]
push ecx
lea edx, [ebp - 0x4a0]
push edx
mov ecx, dword [ebp - 0x98c]
call fcn.10082043
nop
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x1011e7e0
mov eax, dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x484]
subss xmm0, dword [eax + 0x16e0]
push ecx
movss dword [esp], xmm0
movss xmm0, dword [ebp - 0x488]
subss xmm0, dword [0x1018e2f4]
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0x944]
call fcn.10080d38
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 0x18]
mov dword [eax + 0x2b68], ecx
mov dword [eax + 0x2b6c], edx
jmp 0x1011e90e
mov dword [ebp - 0x4ac], 0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1011e846
lea eax, [ebp - 0x4ac]
push eax
mov ecx, dword [ebx + 0xc]
push ecx
call fcn.1011b840
add esp, 8
cvtsi2ss xmm0, eax
mov edx, dword [ebp - 0x18]
mulss xmm0, dword [edx + 0x16e0]
push ecx
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x80]
movss dword [esp], xmm0
lea ecx, [ebp - 0x954]
call fcn.10080d38
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x354], ecx
mov dword [ebp - 0x350], edx
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax + 0x254]
mov dword [ebp - 0x98c], ecx
movzx edx, byte [ebp - 0x45]
test edx, edx
je 0x1011e86c
mov dword [ebp - 0x990], 0
jmp 0x1011e878
lea eax, [ebp - 0x334]
mov dword [ebp - 0x990], eax
mov ecx, dword [ebp - 0x4ac]
mov dword [ebp - 0x994], ecx
push ecx
movss xmm0, dword [0x1018e2f4]
movss dword [esp], xmm0
push 0
call fcn.1008170b
add esp, 8
mov dword [ebp - 0x998], eax
mov edx, dword [ebp - 0x18]
movss xmm0, dword [edx + 0x16e0]
movss dword [ebp - 0x99c], xmm0
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x16dc]
mov dword [ebp - 0x9a0], ecx
mov edx, dword [ebp - 0x990]
push edx
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov eax, dword [ebp - 0x994]
push eax
mov ecx, dword [ebx + 0xc]
push ecx
mov edx, dword [ebp - 0x998]
push edx
lea eax, [ebp - 0x344]
push eax
push ecx
movss xmm0, dword [ebp - 0x99c]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x9a0]
push ecx
mov ecx, dword [ebp - 0x98c]
call fcn.10081edb
nop
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1011e967
mov eax, dword [ebp - 0x18]
push ecx
movss xmm0, dword [eax + 0x16e0]
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
lea ecx, [ebp - 0x964]
call fcn.10080d38
push eax
lea ecx, [ebp - 0x354]
push ecx
lea edx, [ebp - 0x974]
push edx
call fcn.100faf60
add esp, 0xc
push eax
call fcn.10080bfd
add esp, 4
call fcn.100800ea
nop
call fcn.10082291
nop
movzx eax, byte [ebp - 0x5d]
test eax, eax
je 0x1011e975
call fcn.1007f140
nop
mov eax, dword [ebp - 0x18]
movzx ecx, byte [eax + 0x2b78]
test ecx, ecx
je 0x1011e9a0
movzx eax, byte [ebp - 0x5d]
test eax, eax
jne 0x1011e9a0
push 0
mov eax, dword [ebx + 0xc]
push eax
lea ecx, [ebp - 0x344]
push ecx
call fcn.10123d70
add esp, 0xc
movss xmm0, dword [ebp - 0x70]
comiss xmm0, dword [0x1018e43c]
jbe 0x1011e9fc
push 1
push 0
mov eax, dword [ebx + 8]
push eax
mov ecx, dword [ebp - 0x30]
movss xmm0, dword [ebp - 0x94]
addss xmm0, dword [ecx + 0x24]
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x30]
movss xmm0, dword [ebp - 0x90]
addss xmm0, dword [edx + 0x34]
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0x984]
call fcn.10080d38
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
call fcn.10081535
add esp, 0x14
mov eax, dword [ebx + 0x18]
and eax, 0x20
je 0x1011ea0e
mov al, byte [ebp - 0x19d]
jmp 0x1011ea14
mov al, byte [ebp - 0x191]
push edx
mov ecx, ebp
push eax
lea edx, [0x1011ea38]
call fcn.10080bb2
pop eax
pop edx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1008041e
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret