Function at 0x1000a7a0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
push ebx
push esi
push edi
mov edi, dword [0x100cbe88]
mov dword [ebp - 0x10], edi
mov ecx, dword [edi + 0x53b0]
lea eax, [ecx - 1]
mov dword [ebp - 4], eax
test eax, eax
js 0x1000a836
lea ebx, [eax + eax*4]
shl ebx, 2
nop dword [eax + eax]
mov edx, dword [edi + 0x53b8]
cmp dword [ebx + edx + 4], 7
jne 0x1000a825
mov esi, edx
mov ecx, ebx
sub ecx, esi
mov eax, 0x66666667
add ecx, edx
imul ecx
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
lea eax, [ecx + ecx*4]
lea edx, [esi + eax*4]
mov eax, dword [edi + 0x53b0]
sub eax, ecx
lea eax, [eax + eax*4]
lea eax, [eax*4 - 0x14]
push eax
lea eax, [edx + 0x14]
push eax
push edx
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 4]
add esp, 0xc
dec dword [edi + 0x53b0]
mov ecx, dword [edi + 0x53b0]
dec eax
sub ebx, 0x14
mov dword [ebp - 4], eax
test eax, eax
jns 0x1000a7d0
xor esi, esi
test ecx, ecx
jle 0x1000a864
xor ebx, ebx
nop
mov eax, dword [edi + 0x53b8]
add eax, ebx
cmp dword [eax + 4], 0
jne 0x1000a858
push eax
mov eax, dword [eax + 0xc]
push edi
call eax
add esp, 8
inc esi
add ebx, 0x14
cmp esi, dword [edi + 0x53b0]
jl 0x1000a840
mov esi, dword [0x100cbe88]
mov eax, dword [edi + 0x3c9c]
mov dword [edi + 0x3ca0], eax
cmp byte [esi + 0x65], 0
je 0x1000a886
test byte [esi + 0xc], 2
jne 0x1000a886
mov byte [esi + 0x65], 0
mov ecx, dword [esi + 8]
test ecx, 0x400
je 0x1000a8a9
mov eax, dword [esi + 0xc]
and eax, 0x1400
cmp eax, 0x1400
je 0x1000a8a9
and ecx, 0xfffffbff
mov dword [esi + 8], ecx
mov eax, dword [edi + 8]
mov dword [edi + 0x3c9c], eax
cmp byte [esi + 0x5378], 0
jne 0x1000a907
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x1000a900
push ecx
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
call fcn.10006850
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x1000a900
mov edx, dword [ebp - 4]
mov ecx, ebx
call fcn.1001b0d0
mov ecx, dword [0x100cbe88]
test ecx, ecx
je 0x1000a8f6
dec dword [ecx + 0xb0]
push ebx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov byte [esi + 0x5378], 1
movss xmm0, dword [esi + 0x537c]
xorps xmm1, xmm1
comiss xmm0, xmm1
jbe 0x1000a98f
subss xmm0, dword [esi + 0x18]
comiss xmm1, xmm0
movss dword [esi + 0x537c], xmm0
jb 0x1000a98f
mov ebx, dword [esi + 0x20]
test ebx, ebx
je 0x1000a97e
mov eax, dword [0x100cbe88]
lea ecx, [ebp - 4]
mov dword [ebp - 4], 0
mov dword [eax + 0x537c], 0
call fcn.1001b300
mov edx, 0x1004ed50
mov dword [ebp - 0xc], eax
mov ecx, ebx
call fcn.10006780
mov ebx, eax
test ebx, ebx
je 0x1000a985
push ebx
push dword [ebp - 4]
push 1
push dword [ebp - 0xc]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
push ebx
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 0x14
jmp 0x1000a985
mov byte [esi + 0x98], 1
mov dword [esi + 0x537c], 0
movss xmm0, dword [edi + 0x18]
lea ecx, [edi + 0x531c]
inc dword [edi + 0x3eb0]
xor eax, eax
cvtps2pd xmm0, xmm0
push eax
mov byte [edi + 0x3ec0], 1
mov word [edi + 0x530a], ax
mov dword [edi + 0x3f08], eax
addsd xmm0, qword [edi + 0x3ea8]
movsd qword [edi + 0x3ea8], xmm0
call fcn.100264a0
mov eax, dword [edi + 0x560c]
mov ecx, 0x78
movss xmm1, dword [edi + 0x18]
movaps xmm0, xmm1
subss xmm0, dword [edi + eax*4 + 0x542c]
addss xmm0, dword [edi + 0x5614]
movss dword [edi + 0x5614], xmm0
movss dword [edi + eax*4 + 0x542c], xmm1
mov eax, dword [edi + 0x560c]
inc eax
movss xmm1, dword [edi + 0x5614]
cdq
idiv ecx
mov eax, dword [edi + 0x5610]
movss xmm0, dword [0x1004fc24]
inc eax
cmp eax, ecx
mov dword [edi + 0x560c], edx
movss dword [ebp - 4], xmm0
cmovl ecx, eax
comiss xmm1, dword [0x1004fa58]
mov dword [edi + 0x5610], ecx
jbe 0x1000aa5b
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
divss xmm1, xmm0
movss xmm0, dword [0x1004fb00]
divss xmm0, xmm1
movss dword [edi + 0x9c], xmm0
call fcn.1001c080
mov eax, dword [edi + 0x40]
mov ebx, dword [0x100cbe88]
mov byte [eax + 0x10], 1
mov esi, dword [ebx + 0x4c]
test esi, esi
jne 0x1000aa84
mov eax, dword [ebx + 0x40]
mov eax, dword [eax + 0x3c]
mov esi, dword [eax]
movss xmm2, dword [0x1004fb00]
mov eax, dword [ebx + 0x3f14]
movaps xmm0, xmm2
mov dword [ebx + 0x3ca4], esi
movss xmm1, dword [esi + 0x10]
mulss xmm1, dword [ebx + 0x44]
mulss xmm1, dword [esi + 0x44]
maxss xmm0, xmm1
movss dword [ebx + 0x3cac], xmm0
test eax, eax
je 0x1000aade
mulss xmm0, dword [eax + 0x27c]
mulss xmm0, dword [eax + 0x280]
mov eax, dword [eax + 0x31c]
test eax, eax
je 0x1000aae1
mulss xmm0, dword [eax + 0x27c]
jmp 0x1000aae1
xorps xmm0, xmm0
movss xmm7, dword [0x1004fc24]
movss xmm4, dword [0x1004fc5c]
movaps xmm6, xmm7
movss dword [ebx + 0x3ca8], xmm0
movaps xmm5, xmm4
mov edx, dword [esi + 0x30]
mov eax, dword [edx + 0x2c]
mov ecx, dword [edx + 0x30]
mov dword [ebx + 0x3cb0], eax
lea eax, [edx + 0x58]
mov dword [ebx + 0x3cb4], ecx
mov dword [ebx + 0x3ea0], eax
mov dword [ebx + 0x3cb8], esi
movss dword [ebx + 0x3cbc], xmm0
mov edx, dword [edi + 0x40e8]
test edx, edx
jle 0x1000ab8c
mov ecx, dword [edi + 0x40f0]
nop dword [eax + eax]
mov eax, dword [ecx]
movss xmm3, dword [eax + 8]
comiss xmm7, xmm3
movss xmm2, dword [eax + 0xc]
movaps xmm0, xmm3
addss xmm0, dword [eax + 0x10]
movaps xmm1, xmm2
addss xmm1, dword [eax + 0x14]
jbe 0x1000ab64
movaps xmm7, xmm3
comiss xmm6, xmm2
jbe 0x1000ab6c
movaps xmm6, xmm2
comiss xmm0, xmm4
jbe 0x1000ab74
movaps xmm4, xmm0
comiss xmm1, xmm5
jbe 0x1000ab7c
movaps xmm5, xmm1
add ecx, 4
sub edx, 1
jne 0x1000ab40
movss xmm2, dword [0x1004fb00]
mov eax, dword [edi + 0x3914]
movss xmm1, dword [edi + 0x3918]
movss dword [ebp - 0x20], xmm7
movss dword [ebp - 0x1c], xmm6
movss dword [ebp - 0x18], xmm4
movss dword [ebp - 0x14], xmm5
movups xmm0, xmmword [ebp - 0x20]
mov dword [edi + 0x3cc0], eax
movups xmmword [edi + 0x3cc8], xmm0
movss xmm0, dword [edi + 0x3cc4]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x1000acb5
movss dword [edi + 0x3cc4], xmm1
xor esi, esi
mov ebx, 0x200
movd xmm0, esi
cvtdq2ps xmm0, xmm0
test esi, esi
je 0x1000ac63
movss xmm1, dword [edi + 0x3cc4]
minss xmm1, xmm0
divss xmm1, xmm0
movaps xmm0, xmm2
subss xmm0, xmm1
cvtps2pd xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_acos_precise
movss xmm1, dword [0x1004fb60]
sub esp, 8
cvtsd2ss xmm0, xmm0
divss xmm1, xmm0
cvtps2pd xmm0, xmm1
movsd qword [ebp - 0x18], xmm0
fld qword [ebp - 0x18]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_ceil
fstp qword [ebp - 0x18]
movsd xmm0, qword [ebp - 0x18]
add esp, 8
cvtpd2ps xmm0, xmm0
cvttss2si eax, xmm0
inc eax
cdq
sub eax, edx
and eax, 0xfffffffe
cmp eax, 4
jge 0x1000ac59
mov eax, 4
jmp 0x1000ac65
cmp eax, 0x200
cmovg eax, ebx
jmp 0x1000ac65
xor eax, eax
movss xmm2, dword [0x1004fb00]
mov byte [esi + edi + 0x3e60], al
inc esi
cmp esi, 0x40
jl 0x1000abe3
movsd xmm0, qword [0x1004fb18]
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_cos_precise
movss xmm1, dword [0x1004fb00]
cvtsd2ss xmm0, xmm0
mov ebx, dword [0x100cbe88]
subss xmm1, xmm0
movss xmm0, dword [edi + 0x3cc4]
divss xmm0, xmm1
movss dword [edi + 0x3e5c], xmm0
xor edx, edx
mov dword [edi + 0x3cd8], 0
cmp byte [edi + 0x3910], dl
je 0x1000acd8
mov dword [edi + 0x3cd8], 1
mov edx, 1
cmp byte [edi + 0x3911], 0
mov ecx, edx
je 0x1000acfa
mov eax, dword [edi + 0x3ca4]
mov eax, dword [eax + 0x30]
test byte [eax], 4
jne 0x1000acfa
or ecx, 2
mov dword [edi + 0x3cd8], ecx
cmp byte [edi + 0x3912], 0
je 0x1000ad0c
or ecx, 4
mov dword [edi + 0x3cd8], ecx
test byte [edi + 0xc], 8
je 0x1000ad1b
or ecx, 8
mov dword [edi + 0x3cd8], ecx
xor esi, esi
cmp dword [edi + 0x40e8], esi
jle 0x1000ad4e
mov eax, dword [edi + 0x40f0]
push 0x30
push 0
mov eax, dword [eax + esi*4]
mov dword [eax + 0x30], 0
sub eax, 0xffffff80
push eax
call sub.VCRUNTIME140.dll_memset
inc esi
add esp, 0xc
cmp esi, dword [edi + 0x40e8]
jl 0x1000ad25
cmp byte [edi + 0x42a0], 0
je 0x1000ad82
mov eax, dword [edi + 0x42b8]
cmp eax, dword [edi + 0x3f50]
jne 0x1000ad82
cmp dword [ebx + 0x3f50], eax
jne 0x1000ad73
mov dword [ebx + 0x3f54], eax
cmp dword [ebx + 0x3f94], eax
jne 0x1000ad82
mov byte [ebx + 0x3f98], 1
cmp dword [edi + 0x3f40], 0
mov eax, dword [edi + 0x3f3c]
jne 0x1000ad9d
mov dword [edi + 0x3f48], 0
jmp 0x1000adab
mov edx, eax
test eax, eax
je 0x1000adb7
cmp dword [edi + 0x3f50], eax
jne 0x1000adb7
mov dword [edi + 0x3f4c], 0
mov edx, eax
movss xmm2, dword [edi + 0x18]
mov ecx, dword [edi + 0x3f50]
test edx, edx
je 0x1000adf0
movaps xmm0, xmm2
addss xmm0, dword [edi + 0x3f48]
movss dword [edi + 0x3f48], xmm0
cmp ecx, edx
je 0x1000adf0
movaps xmm0, xmm2
addss xmm0, dword [edi + 0x3f4c]
movss dword [edi + 0x3f4c], xmm0
movaps xmm1, xmm2
mov al, byte [edi + 0x3f45]
mov dword [edi + 0x3f40], edx
mov edx, ecx
mov byte [edi + 0x3f46], al
mov dword [edi + 0x3f3c], 0
mov word [edi + 0x3f44], 0
mov byte [edi + 0x3f47], 0
cmp dword [edi + 0x3f54], ecx
je 0x1000ae45
cmp dword [edi + 0x3f94], ecx
jne 0x1000ae45
test ecx, ecx
je 0x1000ae45
call fcn.10008f10
mov edx, dword [edi + 0x3f50]
movss xmm1, dword [edi + 0x18]
test edx, edx
je 0x1000ae5c
movaps xmm0, xmm1
addss xmm0, dword [edi + 0x3f58]
movss dword [edi + 0x3f58], xmm0
mov eax, dword [edi + 0x3f88]
addss xmm1, dword [edi + 0x3fa4]
mov dword [edi + 0x3f9c], eax
mov al, byte [edi + 0x3f60]
mov byte [edi + 0x3f99], al
mov eax, dword [edi + 0x529c]
movss dword [edi + 0x3fa4], xmm1
mov dword [edi + 0x3f94], edx
mov dword [edi + 0x3f54], 0
mov byte [edi + 0x3f61], 0
mov byte [edi + 0x3f98], 0
mov byte [edi + 0x3f5c], 0
test eax, eax
je 0x1000aec1
cmp edx, eax
je 0x1000aec1
mov dword [edi + 0x529c], 0
test edx, edx
jne 0x1000aee1
mov dword [edi + 0x3f64], edx
xorps xmm0, xmm0
mov dword [edi + 0x3f68], edx
movups xmmword [edi + 0x3f6c], xmm0
mov dword [edi + 0x3f7c], edx
mov eax, dword [edi + 0x4304]
mov dword [edi + 0x4308], eax
mov dword [edi + 0x4304], 0
mov dword [edi + 0x4300], 0x7f7fffff
mov word [edi + 0x42a1], 0
mov dword [edi + 0x4310], 0
mov ecx, dword [edi + 0x384c]
test ecx, ecx
jns 0x1000af3a
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x3848]
call fcn.10026740
mov dword [edi + 0x3848], 0
mov cl, byte [edi + 0x62]
call fcn.10014730
mov esi, dword [0x100cbe88]
cmp byte [esi + 0x37b1], 0
je 0x1000b015
mov eax, 0x200
lea ecx, [esi + 0x8bc]
nop word [eax + eax]
mov edx, dword [ecx]
cmp edx, 0xffffffff
je 0x1000af7e
mov dword [esi + edx*4 + 0xbc], eax
inc eax
add ecx, 4
cmp eax, 0x285
jl 0x1000af70
xor ecx, ecx
nop dword [eax + eax]
mov bl, byte [ecx + esi + 0xad0]
test bl, bl
jne 0x1000afa5
mov al, byte [esi + 0x37b1]
cmp al, 1
jne 0x1000afd8
mov edx, dword [esi + ecx*4 + 0xbc]
cmp edx, 0xffffffff
cmove edx, ecx
mov eax, edx
add eax, eax
mov byte [esi + eax*8 + 0xdcc], bl
cmp edx, ecx
je 0x1000afcf
mov al, byte [ecx + esi + 0xad0]
mov byte [esi + edx + 0xad0], al
mov byte [esi + 0x37b1], 1
mov al, 1
inc ecx
cmp ecx, 0x200
jl 0x1000af90
cmp al, 1
jne 0x1000b015
mov al, byte [esi + 0xd74]
mov byte [esi + 0x35dc], al
mov al, byte [esi + 0xd75]
mov byte [esi + 0x35ec], al
mov al, byte [esi + 0xd76]
mov byte [esi + 0x35fc], al
mov al, byte [esi + 0xd77]
mov byte [esi + 0x360c], al
xor eax, eax
cmp byte [esi + 0xd74], al
setne al
mov ecx, eax
or ecx, 2
cmp byte [esi + 0xd75], 0
cmove ecx, eax
mov edx, ecx
or edx, 4
cmp byte [esi + 0xd76], 0
cmove edx, ecx
mov eax, edx
or eax, 8
cmp byte [esi + 0xd77], 0
cmove eax, edx
test byte [esi + 0xc], 1
mov dword [esi + 0xdc8], eax
jne 0x1000b083
lea eax, [esi + 0x3468]
mov ecx, 0x18
nop dword [eax]
nop dword [eax + eax]
mov byte [eax - 0xc], 0
lea eax, [eax + 0x10]
mov dword [eax - 0x10], 0
sub ecx, 1
jne 0x1000b070
movss xmm1, dword [0x1004fc34]
lea eax, [esi + 0xdd0]
mov ecx, 0x285
nop word [eax + eax]
cmp byte [eax - 4], 0
movss xmm0, dword [eax]
movss dword [eax + 4], xmm0
je 0x1000b0c3
xorps xmm2, xmm2
comiss xmm2, xmm0
jbe 0x1000b0bc
xorps xmm0, xmm0
jmp 0x1000b0c6
addss xmm0, dword [esi + 0x18]
jmp 0x1000b0c6
movaps xmm0, xmm1
movss dword [eax], xmm0
add eax, 0x10
sub ecx, 1
jne 0x1000b0a0
call fcn.10017db0
call fcn.10009c50
test byte [edi + 8], 0x40
jne 0x1000b10b
cmp dword [edi + 0x5350], 0
jg 0x1000b0f8
cmp dword [edi + 0x535c], 0
jle 0x1000b1db
mov dl, 1
call fcn.10023f40
xor ecx, ecx
call fcn.10023c30
jmp 0x1000b1db
cmp byte [edi + 0x58], 0
je 0x1000b14a
xor esi, esi
cmp dword [edi + 0x5350], esi
jle 0x1000b14a
nop dword [eax + eax]
mov eax, dword [edi + 0x5358]
mov ecx, dword [eax + esi*8 + 4]
test ecx, ecx
je 0x1000b141
cmp dword [ecx + 0x18], 0
jne 0x1000b141
cmp dword [ecx + 0x1c], 0
je 0x1000b141
mov ecx, dword [ecx]
call fcn.10023c30
inc esi
cmp esi, dword [edi + 0x5350]
jl 0x1000b120
cmp byte [edi + 0x5374], 0
je 0x1000b18c
xor ecx, ecx
call fcn.1001b300
xor dl, dl
call fcn.10023f40
xor ecx, ecx
call fcn.10023c30
push dword [edi + 0x5368]
mov edx, dword [edi + 0x5370]
mov ecx, edi
call fcn.1001e2c0
add esp, 4
mov ecx, edi
call fcn.1001e430
mov byte [edi + 0x5374], 0
xor esi, esi
cmp dword [edi + 0x535c], esi
jle 0x1000b1db
xor ebx, ebx
nop dword [eax + eax]
mov eax, dword [edi + 0x5364]
cmp dword [eax + ebx], 2
jne 0x1000b1cf
mov edx, dword [eax + ebx + 0x1c]
test edx, edx
je 0x1000b1c0
push 1
call fcn.1001e860
add esp, 4
jmp 0x1000b1cf
mov edx, dword [eax + ebx + 0x20]
test edx, edx
je 0x1000b1cf
mov ecx, edi
call fcn.1001e9a0
inc esi
add ebx, 0x24
cmp esi, dword [edi + 0x535c]
jl 0x1000b1a0
call fcn.1000a530
call fcn.10009790
mov eax, dword [0x100cbe88]
mov edx, dword [eax + 0x40cc]
sub edx, 1
js 0x1000b21f
mov eax, dword [eax + 0x40d4]
lea ecx, [edx + edx*8]
lea eax, [eax + ecx*4]
add eax, 4
mov ecx, dword [eax]
test ecx, ecx
je 0x1000b217
test dword [ecx + 8], 0x8000000
jne 0x1000b2cd
sub eax, 0x24
sub edx, 1
jns 0x1000b204
cmp dword [edi + 0x4280], 0
xorps xmm6, xmm6
je 0x1000b23c
movss xmm0, dword [edi + 0x4290]
comiss xmm0, xmm6
ja 0x1000b2d0
movss xmm0, dword [edi + 0x18]
mulss xmm0, dword [0x1004fb94]
movss xmm1, dword [edi + 0x4298]
subss xmm1, xmm0
maxss xmm1, xmm6
movups xmm0, xmmword [edi + 0x5328]
mov dword [edi + 0x429c], 0
movss dword [edi + 0x4298], xmm1
mov dword [edi + 0x5620], 0xffffffff
mov dword [edi + 0x561c], 0xffffffff
mov dword [edi + 0x5618], 0xffffffff
movups xmmword [edi + 0x5338], xmm0
mov byte [edi + 0x5328], 0
call fcn.1000a080
cmp byte [edi + 0x3ec3], 0
jne 0x1000b2f2
movss xmm0, dword [edi + 0x68]
comiss xmm6, xmm0
ja 0x1000b2f2
movsd xmm1, qword [edi + 0x3ea8]
cvtpd2ps xmm1, xmm1
subss xmm1, xmm0
movss dword [ebp - 4], xmm1
jmp 0x1000b2fa
xorps xmm6, xmm6
movss xmm1, dword [edi + 0x18]
mulss xmm1, dword [0x1004fb7c]
addss xmm1, dword [edi + 0x4298]
minss xmm1, dword [0x1004fb00]
jmp 0x1000b259
movss xmm1, dword [0x1004fc24]
xor ebx, ebx
cmp dword [edi + 0x3ecc], ebx
je 0x1000b49b
nop dword [eax + eax]
mov eax, dword [edi + 0x3ed4]
xor ecx, ecx
mov esi, dword [eax + ebx*4]
mov al, byte [esi + 0xc3]
mov byte [esi + 0xc4], al
mov word [esi + 0xd0], cx
mov byte [esi + 0xc3], cl
mov byte [esi + 0xc5], cl
test al, al
jne 0x1000b489
cmp byte [esi + 0x36c], cl
jne 0x1000b489
comiss xmm1, dword [esi + 0x25c]
jbe 0x1000b489
mov ecx, dword [esi + 0x288]
mov byte [esi + 0x36c], 1
mov eax, dword [ecx + 0x10]
mov dword [esi + 0x364], eax
mov eax, dword [ecx + 0x1c]
mov dword [esi + 0x368], eax
mov ecx, dword [esi + 0x104]
test ecx, ecx
je 0x1000b3bb
mov eax, dword [0x100cbe88]
mov dword [esi + 0x100], 0
mov dword [esi + 0xfc], 0
test eax, eax
je 0x1000b3a7
dec dword [eax + 0xb0]
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov dword [esi + 0x104], 0
mov ecx, dword [esi + 0x288]
call fcn.1002e6b0
mov ecx, dword [esi + 0x1a4]
test ecx, ecx
je 0x1000b407
mov eax, dword [0x100cbe88]
mov dword [esi + 0x1a0], 0
mov dword [esi + 0x19c], 0
test eax, eax
je 0x1000b3f3
dec dword [eax + 0xb0]
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov dword [esi + 0x1a4], 0
mov ecx, dword [esi + 0x1cc]
test ecx, ecx
je 0x1000b448
mov eax, dword [0x100cbe88]
mov dword [esi + 0x1c8], 0
mov dword [esi + 0x1c4], 0
test eax, eax
je 0x1000b434
dec dword [eax + 0xb0]
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov dword [esi + 0x1cc], 0
mov ecx, dword [esi + 0x1d8]
test ecx, ecx
je 0x1000b489
mov eax, dword [0x100cbe88]
mov dword [esi + 0x1d4], 0
mov dword [esi + 0x1d0], 0
test eax, eax
je 0x1000b475
dec dword [eax + 0xb0]
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov dword [esi + 0x1d8], 0
movss xmm1, dword [ebp - 4]
inc ebx
cmp ebx, dword [edi + 0x3ecc]
jne 0x1000b310
xor ecx, ecx
mov dword [ebp - 8], ecx
cmp dword [edi + 0x4374], ecx
jle 0x1000b5f1
xor edx, edx
xorps xmm1, xmm1
mov dword [ebp - 0xc], edx
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [edi + 0x437c]
movss xmm0, dword [eax + ecx*4]
comiss xmm0, xmm1
jb 0x1000b5d8
movss xmm2, dword [ebp - 4]
comiss xmm2, xmm0
jbe 0x1000b5d8
mov esi, dword [edi + 0x435c]
mov ebx, dword [0x100cbe88]
add esi, edx
mov dword [ebp - 0x14], ebx
mov dword [esi + 0x1a0], 0
mov eax, dword [esi + 0x19c]
test eax, eax
je 0x1000b539
mov dword [esi + 0x198], 0
mov dword [esi + 0x194], 0
test ebx, ebx
je 0x1000b525
dec dword [ebx + 0xb0]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov dword [esi + 0x19c], 0
mov byte [esi + 0x1c8], 1
mov ecx, dword [esi + 0x16c]
test ecx, ecx
je 0x1000b581
mov eax, dword [0x100cbe88]
mov dword [esi + 0x168], 0
mov dword [esi + 0x164], 0
test eax, eax
je 0x1000b56d
dec dword [eax + 0xb0]
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov dword [esi + 0x16c], 0
xor edx, edx
mov byte [esi + 0x1d2], 1
cmp dword [esi + 0x54], edx
jle 0x1000b5ab
xor ecx, ecx
or ebx, 0xffffffff
mov eax, dword [esi + 0x10]
lea ecx, [ecx + 0x68]
inc edx
mov word [eax + ecx - 0x18], bx
cmp edx, dword [esi + 0x54]
jl 0x1000b594
mov edi, dword [ebp - 0x10]
mov ebx, dword [ebp - 0x14]
sub esi, dword [ebx + 0x435c]
mov eax, 0x22b63cbf
imul esi
xorps xmm1, xmm1
mov eax, dword [ebx + 0x437c]
sar edx, 6
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [ebp - 0xc]
mov dword [eax + ecx*4], 0xbf800000
mov ecx, dword [ebp - 8]
inc ecx
add edx, 0x1d8
mov dword [ebp - 8], ecx
mov dword [ebp - 0xc], edx
cmp ecx, dword [edi + 0x4374]
jl 0x1000b4c0
xor eax, eax
mov dword [ebp - 0xc], eax
cmp dword [edi + 0x4348], eax
jle 0x1000b652
xor esi, esi
xorps xmm1, xmm1
nop dword [eax]
nop word [eax + eax]
mov ebx, dword [edi + 0x4350]
movss xmm0, dword [ebx + esi + 4]
comiss xmm0, xmm1
jb 0x1000b643
movss xmm2, dword [ebp - 4]
comiss xmm2, xmm0
jbe 0x1000b643
lea ecx, [esi + 0x10]
add ecx, ebx
call fcn.10030ff0
mov eax, dword [ebp - 0xc]
xorps xmm1, xmm1
mov dword [ebx + esi + 4], 0xbf800000
inc eax
add esi, 0x68
mov dword [ebp - 0xc], eax
cmp eax, dword [edi + 0x4348]
jl 0x1000b610
cmp byte [edi + 0x3ec3], 0
je 0x1000b6ed
mov esi, dword [0x100cbe88]
mov eax, dword [esi + 0x40bc]
test eax, eax
je 0x1000b6a5
mov dword [esi + 0x40b8], 0
mov dword [esi + 0x40b4], 0
test esi, esi
je 0x1000b68d
dec dword [esi + 0xb0]
mov ebx, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
push eax
call ebx
add esp, 4
mov dword [esi + 0x40bc], 0
jmp 0x1000b6ab
mov ebx, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov ecx, dword [esi + 0x40c8]
test ecx, ecx
je 0x1000b6e8
mov eax, dword [0x100cbe88]
mov dword [esi + 0x40c4], 0
mov dword [esi + 0x40c0], 0
test eax, eax
je 0x1000b6d8
dec dword [eax + 0xb0]
push ecx
call ebx
add esp, 4
mov dword [esi + 0x40c8], 0
call fcn.1003a810
mov eax, dword [edi + 0x4130]
mov byte [edi + 0x3ec3], 0
test eax, eax
je 0x1000b751
cmp byte [eax + 0xc4], 0
jne 0x1000b751
mov eax, dword [0x100cbe88]
mov edx, dword [eax + 0x3ed8]
sub edx, 1
js 0x1000b74a
mov eax, dword [eax + 0x3ee0]
lea esi, [eax + edx*4]
mov ecx, dword [esi]
test ecx, ecx
je 0x1000b742
cmp byte [ecx + 0xc4], 0
je 0x1000b742
mov eax, dword [ecx + 8]
and eax, 0x40200
cmp eax, 0x40200
jne 0x1000b92c
sub esi, 4
sub edx, 1
jns 0x1000b720
xor ecx, ecx
call fcn.10014030
mov ecx, dword [edi + 0x3ef4]
test ecx, ecx
jns 0x1000b7d2
mov eax, ecx
xor esi, esi
cdq
sub eax, edx
sar eax, 1
add eax, ecx
test eax, eax
cmovg esi, eax
cmp esi, ecx
jle 0x1000b7d2
mov eax, dword [0x100cbe88]
test eax, eax
je 0x1000b77e
inc dword [eax + 0xb0]
imul eax, esi, 0x54
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ebx, dword [edi + 0x3ef8]
add esp, 4
mov dword [ebp - 0x14], eax
test ebx, ebx
je 0x1000b7c6
imul ecx, dword [edi + 0x3ef0], 0x54
push ecx
push ebx
push eax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [0x100cbe88]
add esp, 0xc
test eax, eax
je 0x1000b7b9
dec dword [eax + 0xb0]
push ebx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov eax, dword [ebp - 0x14]
add esp, 4
mov dword [edi + 0x3ef8], eax
mov dword [edi + 0x3ef4], esi
mov dword [edi + 0x3ef0], 0
mov ecx, dword [edi + 0x40dc]
test ecx, ecx
jns 0x1000b802
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x40d8]
call fcn.10026370
lea esi, [edi + 0x40b4]
mov dword [edi + 0x40d8], 0
mov ecx, dword [esi + 4]
test ecx, ecx
jns 0x1000b890
mov eax, ecx
xor ebx, ebx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
test eax, eax
cmovg ebx, eax
cmp ebx, ecx
jle 0x1000b890
mov eax, dword [0x100cbe88]
test eax, eax
je 0x1000b83c
inc dword [eax + 0xb0]
lea eax, [ebx*4]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov edx, eax
add esp, 4
mov eax, dword [esi + 8]
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x14], eax
test eax, eax
je 0x1000b88a
mov ecx, dword [esi]
shl ecx, 2
push ecx
push eax
push edx
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [0x100cbe88]
add esp, 0xc
test eax, eax
je 0x1000b87b
dec dword [eax + 0xb0]
push dword [ebp - 0x14]
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov edx, dword [ebp - 0xc]
add esp, 4
mov dword [esi + 8], edx
mov dword [esi + 4], ebx
lea eax, [ebp - 0x14]
mov dword [esi], 0
push eax
mov ecx, esi
mov dword [ebp - 0x14], 0
call fcn.10025ba0
push 0
lea ecx, [edi + 0x40c0]
call fcn.10026140
mov ecx, edi
call fcn.1001d8b0
mov edx, dword [0x100cbe88]
cmp byte [edx + 0x53f4], 0
mov dword [edx + 0x53f8], 0
je 0x1000ba16
mov esi, dword [edx + 0x3f40]
xorps xmm4, xmm4
mov dword [edx + 0x429c], 7
movss xmm0, dword [edx + 0x2eb0]
ucomiss xmm0, xmm4
lahf
test ah, 0x44
jnp 0x1000b989
movss xmm2, dword [edx + 0x34]
comiss xmm0, xmm2
jbe 0x1000b990
movss xmm3, dword [edx + 0x38]
movaps xmm1, xmm0
subss xmm1, dword [edx + 0x18]
ucomiss xmm0, xmm4
lahf
test ah, 0x44
jp 0x1000b938
mov eax, 1
jmp 0x1000b985
call fcn.100176e0
mov ecx, eax
jmp 0x1000b74c
comiss xmm1, xmm0
jb 0x1000b941
xor eax, eax
jmp 0x1000b985
comiss xmm4, xmm3
jb 0x1000b957
comiss xmm2, xmm1
jbe 0x1000b93d
comiss xmm0, xmm2
jb 0x1000b93d
mov eax, 1
jmp 0x1000b985
comiss xmm2, xmm1
jbe 0x1000b961
or ecx, 0xffffffff
jmp 0x1000b96d
subss xmm1, xmm2
divss xmm1, xmm3
cvttss2si ecx, xmm1
comiss xmm2, xmm0
jbe 0x1000b977
or eax, 0xffffffff
jmp 0x1000b983
subss xmm0, xmm2
divss xmm0, xmm3
cvttss2si eax, xmm0
sub eax, ecx
test eax, eax
jle 0x1000b990
mov byte [edx + 0x53f4], 0
movss xmm0, dword [edx + 0x36a8]
ucomiss xmm0, xmm4
lahf
test ah, 0x44
jp 0x1000b9b2
test esi, esi
je 0x1000b9b2
mov dword [edx + 0x53f8], esi
mov byte [edx + 0x53f4], 0
or dword [edx + 0x3ffc], 0x40
xor ecx, ecx
mov dword [edx + 0x4054], 0x3f19999a
call fcn.10015b60
push esi
push str.HoveredId:_0x_08X
call fcn.1003b4d0
push str.Press_ESC_to_abort_picking.
call fcn.1003b4d0
add esp, 0xc
mov eax, 0x10
test esi, esi
mov ecx, 0x20
cmovne ecx, eax
mov eax, dword [0x100cbe88]
add eax, 0x391c
add eax, ecx
push str.Click_to_break_in_debugger_
push eax
call fcn.1003b550
add esp, 8
call fcn.10013e10
mov edx, dword [0x100cbe88]
lea eax, [edx + 0x3f38]
lea esi, [edx + 0x540c]
mov dword [eax], 0
mov dword [ebp - 0xc], eax
mov eax, dword [esi]
inc eax
cmp dword [edx + 0x3eb0], eax
jne 0x1000baf8
mov ebx, dword [edx + 0x3f40]
test ebx, ebx
jne 0x1000ba4a
mov ebx, dword [edx + 0x3f50]
cmp dword [esi + 8], ebx
je 0x1000ba8b
lea eax, [esi + 0xc]
mov dword [esi + 8], ebx
mov dword [esi + 4], 0xffffffff
mov ecx, dword [eax + 4]
test ecx, ecx
jns 0x1000ba85
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [esi + 0xc]
call fcn.100267c0
mov edx, dword [0x100cbe88]
lea eax, [esi + 0xc]
mov dword [eax], 0
test ebx, ebx
je 0x1000baf8
mov eax, dword [esi + 4]
test eax, eax
js 0x1000bacc
mov ecx, eax
cmp eax, dword [esi + 0xc]
jge 0x1000bade
mov edx, dword [esi + 0x14]
lea ecx, [eax + eax*8]
cmp byte [edx + ecx*8 + 5], 0
mov edx, dword [0x100cbe88]
jne 0x1000bac8
mov edi, dword [esi + 0x14]
lea edx, [eax + eax*8]
mov ecx, eax
cmp byte [edi + edx*8 + 4], 2
mov edi, dword [ebp - 0x10]
mov edx, dword [0x100cbe88]
jle 0x1000bade
inc eax
mov dword [esi + 4], eax
mov ecx, eax
cmp eax, 0xffffffff
jne 0x1000bada
mov eax, dword [ebp - 0xc]
mov dword [eax], ebx
jmp 0x1000baf8
test ecx, ecx
js 0x1000baf8
cmp ecx, dword [esi + 0xc]
jge 0x1000baf8
mov eax, dword [esi + 0x14]
lea ecx, [ecx + ecx*8]
mov ebx, dword [ebp - 0xc]
mov eax, dword [eax + ecx*8]
mov dword [ebx], eax
mov eax, dword [esi + 0x14]
inc byte [eax + ecx*8 + 4]
mov byte [edi + 0x3ec1], 1
mov ecx, str.DebugDefault
or dword [edx + 0x3ffc], 2
mov dword [edx + 0x4020], 0x43c80000
mov dword [edx + 0x4024], 0x43c80000
mov dword [edx + 0x4004], 4
xor edx, edx
push 0
call fcn.100110c0
xor ebx, ebx
add esp, 4
cmp dword [edi + 0x53b0], ebx
jle 0x1000bb65
xor esi, esi
mov eax, dword [edi + 0x53b8]
add eax, esi
cmp dword [eax + 4], 1
jne 0x1000bb59
push eax
mov eax, dword [eax + 0xc]
push edi
call eax
add esp, 8
inc ebx
add esi, 0x14
cmp ebx, dword [edi + 0x53b0]
jl 0x1000bb41
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret