Function at 0x1008ce70
Capabilities:
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10162950
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x180
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x44], edi
mov eax, dword [0x10292678]
movss xmm3, dword [0x1027e220]
movss xmm2, dword [eax + 0x3bc8]
push ecx
push 0
push 0x1026b364
push ecx
lea ecx, [ebp - 0x160]
mov dword [esp], 0xbf800000
push ecx
mov ecx, dword [eax + 0x3bc4]
call fcn.10069910
mov edx, dword [0x10292678]
xor esi, esi
movss xmm6, dword [0x1027de1c]
xorps xmm7, xmm7
movss xmm3, dword [0x1027e138]
movss xmm1, dword [eax]
movss xmm0, dword [edx + 0x3bc8]
addss xmm0, dword [edx + 0x37d0]
movss dword [edi + 0x218], xmm1
mulss xmm0, dword [edi]
movss dword [edi + 0x21c], xmm0
mov ecx, dword [esi + edi + 0x60]
movzx eax, cl
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x1027e510]
mov eax, ecx
shr eax, 8
movzx eax, al
cvtpd2ps xmm2, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
mulss xmm2, xmm6
addsd xmm0, qword [eax*8 + 0x1027e510]
mov eax, ecx
shr ecx, 0x18
shr eax, 0x10
movzx eax, al
movss dword [ebp - 0x14], xmm2
cvtpd2ps xmm4, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
mulss xmm4, xmm6
addsd xmm0, qword [eax*8 + 0x1027e510]
movss dword [ebp - 0x40], xmm4
cvtpd2ps xmm5, xmm0
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
shr ecx, 0x1f
mulss xmm5, xmm6
addsd xmm0, qword [ecx*8 + 0x1027e510]
movss dword [ebp - 0x58], xmm5
cvtpd2ps xmm1, xmm0
mulss xmm1, xmm6
movss dword [ebp - 0x2c], xmm1
test edx, edx
jne 0x1008d00a
push 0xbd3
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiimgui.cpp
push str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov edx, dword [0x10292678]
add esp, 0xc
movss xmm1, dword [ebp - 0x2c]
xorps xmm7, xmm7
movss xmm2, dword [ebp - 0x14]
movss xmm3, dword [0x1027e138]
movss xmm4, dword [ebp - 0x40]
movss xmm5, dword [ebp - 0x58]
movss xmm6, dword [0x1027de1c]
comiss xmm7, xmm2
mulss xmm1, dword [edx + 0x3780]
jbe 0x1008d01c
movaps xmm0, xmm7
jmp 0x1008d028
movss xmm0, dword [0x1027df3c]
minss xmm0, xmm2
comiss xmm7, xmm4
movss xmm2, dword [0x1027df3c]
mulss xmm0, xmm3
addss xmm0, dword [0x1027dee0]
cvttss2si ecx, xmm0
jbe 0x1008d04a
movaps xmm0, xmm7
jmp 0x1008d051
movaps xmm0, xmm2
minss xmm0, xmm4
movss xmm4, dword [0x1027dee0]
mulss xmm0, xmm3
addss xmm0, xmm4
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm7, xmm5
jbe 0x1008d074
movaps xmm0, xmm7
jmp 0x1008d07b
movaps xmm0, xmm2
minss xmm0, xmm5
mulss xmm0, xmm3
addss xmm0, xmm4
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm7, xmm1
jbe 0x1008d096
movaps xmm0, xmm7
jmp 0x1008d09d
movaps xmm0, xmm2
minss xmm0, xmm1
mulss xmm0, xmm3
addss xmm0, xmm4
cvttss2si eax, xmm0
shl eax, 0x18
or eax, ecx
mov dword [esi + edi + 0xb4], eax
add esi, 4
cmp esi, 0x54
jl 0x1008cf23
cmp dword [edi + 0x240], 0
je 0x1008d0e8
push 0x415
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiTextEditor.cpp
push 0x1026b368
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov edx, dword [0x10292678]
add esp, 0xc
mov eax, dword [edx + 0x3e58]
movss xmm0, dword [eax + 0x228]
subss xmm0, dword [eax + 0x14]
movss dword [ebp - 0x58], xmm0
movss xmm0, dword [eax + 0x22c]
subss xmm0, dword [eax + 0x18]
mov byte [eax + 0xac], 1
cmp byte [edi + 0x40], 0
mov eax, dword [edx + 0x3e58]
movss dword [ebp - 0x40], xmm0
movss xmm0, dword [edi + 0x44]
mov eax, dword [eax + 0x264]
mov dword [ebp - 0x1c], eax
movss dword [ebp - 0x70], xmm0
je 0x1008d160
mov byte [edi + 0x40], 0
mov eax, dword [edx + 0x3e58]
mov dword [eax + 0x8c], 0
mov dword [eax + 0x94], 0
mov dword [eax + 0x9c], 0
mov esi, dword [edx + 0x3e58]
sub esp, 8
movss xmm0, dword [esi + 0xf0]
movss dword [ebp - 0x3c], xmm0
movss xmm0, dword [esi + 0xf4]
movss dword [ebp - 0xc0], xmm0
movss xmm0, dword [esi + 0x78]
movss dword [ebp - 0x68], xmm0
movss xmm0, dword [esi + 0x7c]
divss xmm0, dword [edi + 0x21c]
movss dword [ebp - 0x2c], xmm0
fld dword [ebp - 0x2c]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
mov ecx, dword [edi + 8]
sub ecx, dword [edi + 4]
movss xmm0, dword [ebp - 0x40]
addss xmm0, dword [esi + 0x7c]
fstp dword [ebp - 0x14]
cvttss2si eax, dword [ebp - 0x14]
mov dword [ebp - 0x24], eax
mov eax, 0x2aaaaaab
imul ecx
mov eax, dword [ebp - 0x44]
sar edx, 1
mov edi, edx
shr edi, 0x1f
divss xmm0, dword [eax + 0x21c]
add edi, edx
movss dword [ebp - 0x2c], xmm0
fld dword [ebp - 0x2c]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
cvttss2si esi, dword [ebp - 0x14]
lea ecx, [edi - 1]
push edi
push str.__d
push 0x10
fstp dword [ebp - 0x2c]
cvttss2si eax, dword [ebp - 0x2c]
add eax, esi
cmp eax, ecx
cmovl ecx, eax
xor eax, eax
test ecx, ecx
cmovg eax, ecx
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0xd0]
push eax
call fcn.10088d90
mov eax, dword [0x10292678]
lea ecx, [ebp - 0xd0]
movss xmm3, dword [0x1027e220]
add esp, 0x14
movss xmm2, dword [eax + 0x3bc8]
push 0
push ecx
push ecx
lea ecx, [ebp - 0x190]
mov dword [esp], 0xbf800000
push ecx
mov ecx, dword [eax + 0x3bc4]
call fcn.10069910
mov edi, dword [ebp - 0x44]
movd xmm0, dword [edi + 0x48]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [eax]
movss dword [edi + 0x44], xmm0
mov eax, dword [edi + 4]
cmp eax, dword [edi + 8]
je 0x1008e57f
mov eax, dword [0x10292678]
movss xmm3, dword [0x1027e220]
push ecx
push 0
movss xmm2, dword [eax + 0x3bc8]
push 0x1026b2d4
push ecx
lea ecx, [ebp - 0x180]
mov dword [esp], 0xbf800000
push ecx
mov ecx, dword [eax + 0x3bc4]
call fcn.10069910
movss xmm0, dword [eax]
movss dword [ebp - 0x6c], xmm0
cmp esi, dword [ebp - 0x2c]
jg 0x1008e358
movss xmm1, dword [ebp - 0x3c]
movaps xmm0, xmm1
addss xmm0, dword [ebp - 0x68]
movss dword [ebp - 0x40], xmm0
movss dword [ebp - 0x9c], xmm0
nop word [eax + eax]
addss xmm1, dword [edi + 0x44]
movd xmm0, esi
lea eax, [esi + esi*2]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x4c], eax
mov ecx, edi
mov eax, dword [edi + 4]
push esi
mov dword [ebp - 0x50], eax
movss dword [ebp - 0x54], xmm1
mulss xmm0, dword [edi + 0x21c]
addss xmm0, dword [ebp - 0xc0]
movss dword [ebp - 0x30], xmm0
call fcn.1008b230
mov esi, eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x154], esi
test eax, eax
jns 0x1008d354
push 0x4c
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiTextEditor.h
push str.aLine___0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
test esi, esi
jns 0x1008d36d
push 0x4d
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiTextEditor.h
push str.aColumn___0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
lea eax, [ebp - 0x158]
mov ecx, edi
push eax
call fcn.10091c00
addss xmm0, dword [edi + 0x44]
movss xmm1, dword [ebp - 0x70]
lea eax, [ebp - 0x70]
mov esi, dword [ebp - 0x24]
lea ecx, [ebp - 0x14]
comiss xmm1, xmm0
movss dword [ebp - 0x14], xmm0
cmovbe eax, ecx
movss xmm0, dword [eax]
movss dword [ebp - 0x70], xmm0
test esi, esi
jns 0x1008d3eb
push 0x4c
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiTextEditor.h
push str.aLine___0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
mov ecx, edi
push esi
call fcn.1008b230
push 0x4c
mov esi, eax
mov eax, dword [ebp - 0x24]
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiTextEditor.h
push str.aLine___0
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], esi
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
jmp 0x1008d404
push esi
mov ecx, edi
call fcn.1008b230
mov esi, eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], esi
test esi, esi
jns 0x1008d41d
push 0x4d
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiTextEditor.h
push str.aColumn___0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
movss xmm1, dword [0x1027e25c]
mov eax, dword [edi + 0x10]
movaps xmm0, xmm1
movss dword [ebp - 0x18], xmm0
movss dword [ebp - 0x14], xmm1
cmp eax, dword [edi + 0x18]
je 0x1008d43f
setl al
jmp 0x1008d448
mov eax, dword [edi + 0x14]
cmp eax, dword [edi + 0x1c]
setle al
test al, al
jne 0x1008d464
push 0x441
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiTextEditor.cpp
push str.mState.mSelectionStart___mState.mSelectionEnd
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
mov eax, dword [edi + 0x10]
mov edx, dword [ebp - 0x24]
cmp eax, edx
je 0x1008d473
setl cl
jmp 0x1008d479
cmp dword [edi + 0x14], esi
setle cl
test cl, cl
je 0x1008d4a4
cmp eax, edx
jne 0x1008d485
cmp dword [edi + 0x14], 0
setg al
test al, al
je 0x1008d49c
lea eax, [edi + 0x10]
mov ecx, edi
push eax
call fcn.10091c00
mov edx, dword [ebp - 0x24]
jmp 0x1008d49f
xorps xmm0, xmm0
movss dword [ebp - 0x18], xmm0
mov eax, dword [edi + 0x18]
lea ecx, [edi + 0x18]
cmp eax, edx
jne 0x1008d4b2
cmp dword [ecx + 4], 0
setg cl
test cl, cl
je 0x1008d4e1
cmp eax, edx
jne 0x1008d4c0
cmp dword [edi + 0x1c], esi
setl cl
lea eax, [ebp - 0xac]
test cl, cl
lea esi, [edi + 0x18]
mov ecx, edi
cmovne eax, esi
push eax
call fcn.10091c00
mov edx, dword [ebp - 0x24]
movaps xmm2, xmm0
jmp 0x1008d4e9
movss xmm2, dword [ebp - 0x14]
lea esi, [edi + 0x18]
cmp dword [esi], edx
jle 0x1008d4f5
addss xmm2, dword [edi + 0x218]
movss xmm3, dword [ebp - 0x18]
movss xmm0, dword [0x1027e25c]
ucomiss xmm3, xmm0
lahf
test ah, 0x44
jnp 0x1008d588
ucomiss xmm2, xmm0
lahf
test ah, 0x44
jnp 0x1008d588
comiss xmm2, xmm3
mov esi, dword [ebp - 0x1c]
jbe 0x1008d58b
movss xmm1, dword [ebp - 0x3c]
lea eax, [ebp - 0xd8]
addss xmm1, dword [edi + 0x44]
push 0
push ecx
mov dword [esp], 0
mov ecx, esi
push dword [edi + 0xec]
movaps xmm0, xmm1
addss xmm1, xmm2
addss xmm0, xmm3
push eax
lea eax, [ebp - 0xe0]
push eax
movss dword [ebp - 0xd8], xmm1
movss dword [ebp - 0xe0], xmm0
movss xmm0, dword [ebp - 0x30]
movss dword [ebp - 0xdc], xmm0
addss xmm0, dword [edi + 0x21c]
movss dword [ebp - 0xd4], xmm0
call fcn.10064dc0
mov edx, dword [ebp - 0x24]
jmp 0x1008d58b
mov esi, dword [ebp - 0x1c]
inc edx
movss xmm2, dword [ebp - 0x30]
mov eax, edx
movss dword [ebp - 0x98], xmm2
shr eax, 8
movzx ecx, al
movzx eax, dl
xor eax, 0x811c9dc5
mov dword [ebp - 0x14], edx
imul eax, eax, 0x1000193
xor ecx, eax
mov eax, edx
imul ecx, ecx, 0x1000193
shr eax, 0x10
movzx eax, al
xor ecx, eax
mov eax, edx
imul ecx, ecx, 0x1000193
shr eax, 0x18
xor ecx, eax
imul eax, ecx, 0x1000193
lea ecx, [edi + 0x1f0]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x170]
push eax
call fcn.100960f0
cmp dword [eax + 4], 0
je 0x1008d650
movss xmm0, dword [ebp - 0x3c]
lea eax, [ebp - 0xe8]
movss xmm1, dword [ebp - 0x68]
addss xmm0, dword [ebp - 0x58]
addss xmm1, xmm1
push 0
push ecx
mov dword [esp], 0
mov ecx, esi
push dword [edi + 0xf4]
addss xmm1, xmm0
movaps xmm0, xmm2
addss xmm0, dword [edi + 0x21c]
push eax
lea eax, [ebp - 0x9c]
push eax
movss dword [ebp - 0xe8], xmm1
movss dword [ebp - 0xe4], xmm0
call fcn.10064dc0
movss xmm2, dword [ebp - 0x30]
mov esi, dword [ebp - 0x24]
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0xb8]
inc esi
push eax
lea ecx, [edi + 0x210]
mov dword [ebp - 0x14], esi
call fcn.10096a40
mov eax, dword [ebp - 0xb0]
cmp byte [eax + 0xd], 0
jne 0x1008d8b6
cmp esi, dword [eax + 0x10]
jl 0x1008d8b6
cmp eax, dword [edi + 0x210]
je 0x1008d8b6
movss xmm0, dword [ebp - 0x3c]
lea eax, [ebp - 0xf0]
movss xmm1, dword [ebp - 0x68]
addss xmm0, dword [ebp - 0x58]
mov edx, dword [ebp - 0x1c]
addss xmm1, xmm1
push 0
push ecx
mov dword [esp], 0
mov ecx, edx
push dword [edi + 0xf0]
addss xmm1, xmm0
movaps xmm0, xmm2
addss xmm0, dword [edi + 0x21c]
push eax
lea eax, [ebp - 0x9c]
push eax
movss dword [ebp - 0x18], xmm1
movss dword [ebp - 0x14], xmm0
movss dword [ebp - 0xf0], xmm1
movss dword [ebp - 0xec], xmm0
call fcn.10064dc0
mov ecx, dword [0x10292678]
movss xmm2, dword [ebp - 0x3c]
movss xmm0, dword [ebp - 0x18]
movss xmm4, dword [ebp - 0x30]
mov eax, dword [ecx + 0x3e58]
movss xmm1, dword [ecx + 0x37e4]
movss xmm3, dword [ebp - 0x14]
movaps xmm5, xmm1
maxss xmm2, dword [eax + 0x210]
minss xmm0, dword [eax + 0x218]
maxss xmm4, dword [eax + 0x214]
minss xmm3, dword [eax + 0x21c]
subss xmm2, xmm1
movss xmm1, dword [ecx + 0xdb8]
addss xmm5, xmm0
movss xmm0, dword [ecx + 0x37e8]
movaps xmm6, xmm0
subss xmm4, xmm0
addss xmm6, xmm3
comiss xmm1, xmm2
jb 0x1008d8b6
movss xmm0, dword [ecx + 0xdbc]
comiss xmm0, xmm4
jb 0x1008d8b6
comiss xmm5, xmm1
jbe 0x1008d8b6
comiss xmm6, xmm0
jbe 0x1008d8b6
xor ecx, ecx
call fcn.10052980
mov esi, dword [0x10292678]
lea eax, [ebp - 0x84]
push eax
mov dword [ebp - 0x84], 0
movups xmm0, xmmword [esi + 0x3860]
lea ecx, [esi + 0x476c]
movups xmmword [ebp - 0x80], xmm0
call fcn.1005a420
mov eax, dword [ebp - 0xb0]
movaps xmm0, xmmword [0x1027e4a0]
movups xmmword [esi + 0x3860], xmm0
push dword [eax + 0x10]
push str.Error_at_line__d:
call fcn.10076710
add esp, 8
mov ecx, 1
call fcn.100421b0
mov esi, dword [0x10292678]
mov ecx, dword [esi + 0x3e58]
cmp byte [ecx + 0xaf], 0
jne 0x1008d827
mov ecx, dword [ecx + 0x198]
movss xmm1, dword [0x1027df3c]
neg ecx
sbb ecx, ecx
add ecx, 6
call fcn.100787b0
mov esi, dword [0x10292678]
movups xmm0, xmmword [esi + 0x3860]
lea eax, [ebp - 0x84]
mov dword [ebp - 0x84], 0
lea ecx, [esi + 0x476c]
push eax
movups xmmword [ebp - 0x80], xmm0
call fcn.1005a420
mov eax, dword [ebp - 0xb0]
movaps xmm0, xmmword [0x1027e4b0]
add eax, 0x14
movups xmmword [esi + 0x3860], xmm0
cmp dword [eax + 0x14], 0xf
jbe 0x1008d86d
mov eax, dword [eax]
push eax
push 0x1019d550
call fcn.10076710
add esp, 8
mov ecx, 1
call fcn.100421b0
mov eax, dword [0x10292678]
mov eax, dword [eax + 0x3e58]
test dword [eax + 0xc], 0x2000000
jne 0x1008d8b1
push 0x27de
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiimgui.cpp
push str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
call fcn.1004cd60
mov eax, dword [ebp - 0x24]
inc eax
push eax
push str._d
lea eax, [ebp - 0xd0]
push 0x10
push eax
call fcn.10088d90
mov eax, dword [0x10292678]
lea ecx, [ebp - 0xd0]
movss xmm3, dword [0x1027e220]
add esp, 0xc
movss xmm2, dword [eax + 0x3bc8]
push 0
push ecx
push ecx
lea ecx, [ebp - 0x188]
mov dword [esp], 0xbf800000
push ecx
mov ecx, dword [eax + 0x3bc4]
call fcn.10069910
movss xmm0, dword [ebp - 0x3c]
addss xmm0, dword [edi + 0x44]
mov ecx, dword [edi + 0xf8]
mov dword [ebp - 0x18], ecx
subss xmm0, dword [eax]
movss dword [ebp - 0xf8], xmm0
movss xmm0, dword [ebp - 0x30]
movss dword [ebp - 0xf4], xmm0
test ecx, 0xff000000
je 0x1008d9de
lea ecx, [ebp - 0xd0]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1008d950
sub ecx, edx
lea eax, [ebp - 0xd0]
add eax, ecx
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x14], eax
cmp ecx, eax
je 0x1008d9de
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ecx + 0x2c]
mov esi, dword [eax + 8]
movss xmm0, dword [eax + 0xc]
movss dword [ebp - 0x28], xmm0
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 4]
cmp eax, dword [ecx + 0x70]
je 0x1008d9a7
push 0x632
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiimgui_draw.cpp
push str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov ecx, dword [ebp - 0x1c]
add esp, 0xc
movups xmm0, xmmword [ecx + 0x60]
lea eax, [ebp - 0xd0]
movss xmm2, dword [ebp - 0x28]
push 0
push ecx
mov dword [esp], 0
push dword [ebp - 0x14]
movups xmmword [ebp - 0x80], xmm0
push eax
lea eax, [ebp - 0x80]
push eax
push dword [ebp - 0x18]
lea eax, [ebp - 0xf8]
push eax
push ecx
mov ecx, esi
call fcn.10069ae0
mov eax, dword [ebp - 0x24]
cmp dword [edi + 0x20], eax
jne 0x1008dd74
mov eax, dword [0x10292678]
mov ecx, dword [eax + 0x47dc]
mov esi, dword [eax + 0x3e58]
mov dword [ebp - 0x14], ecx
test ecx, ecx
jne 0x1008da06
xor dl, dl
jmp 0x1008da2a
test esi, esi
jne 0x1008da25
push 0x1cc3
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiimgui.cpp
push str.cur_window
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov ecx, dword [ebp - 0x14]
add esp, 0xc
cmp ecx, esi
sete dl
mov ecx, edi
mov byte [ebp - 0x31], dl
call fcn.10090aa0
test al, al
jne 0x1008db8f
movss xmm0, dword [ebp - 0x40]
addss xmm0, dword [ebp - 0x58]
movss xmm1, dword [ebp - 0x30]
addss xmm1, dword [edi + 0x21c]
push 0
movzx eax, dl
addss xmm0, dword [ebp - 0x68]
xor eax, 1
push ecx
mov ecx, dword [ebp - 0x1c]
mov dword [esp], 0
push dword [edi + eax*4 + 0xfc]
lea eax, [ebp - 0x100]
movss dword [ebp - 0x14], xmm0
push eax
lea eax, [ebp - 0x9c]
movss dword [ebp - 0x18], xmm1
push eax
movss dword [ebp - 0x100], xmm0
movss dword [ebp - 0xfc], xmm1
call fcn.10064dc0
mov esi, dword [edi + 0x104]
test esi, 0xff000000
je 0x1008db8f
mov eax, dword [ebp - 0x1c]
movss xmm2, dword [ebp - 0x30]
movss xmm3, dword [0x1027dee0]
movss xmm0, dword [ebp - 0x14]
addss xmm2, xmm3
test byte [eax + 0x24], 1
movss xmm1, dword [ebp - 0x18]
push 0
je 0x1008db17
subss xmm0, xmm3
movss dword [ebp - 0x10c], xmm2
subss xmm1, xmm3
lea ecx, [ebp - 0x108]
push ecx
lea ecx, [ebp - 0x110]
movss dword [ebp - 0x108], xmm0
movss xmm0, dword [ebp - 0x40]
addss xmm0, xmm3
movss dword [ebp - 0x104], xmm1
movss dword [ebp - 0x110], xmm0
jmp 0x1008db5d
subss xmm0, dword [0x1027dedc]
subss xmm1, dword [0x1027dedc]
lea ecx, [ebp - 0x118]
movss dword [ebp - 0x11c], xmm2
push ecx
lea ecx, [ebp - 0x120]
movss dword [ebp - 0x118], xmm0
movss xmm0, dword [ebp - 0x40]
addss xmm0, xmm3
movss dword [ebp - 0x114], xmm1
movss dword [ebp - 0x120], xmm0
movss xmm3, dword [0x1027df3c]
push ecx
mov ecx, eax
call fcn.100646f0
push ecx
mov dword [esp], 0x3f800000
push 1
push esi
mov esi, dword [ebp - 0x1c]
mov ecx, esi
push dword [esi + 0x54]
push dword [esi + 0x5c]
call fcn.10062d80
mov dword [esi + 0x54], 0
cmp byte [ebp - 0x31], 0
je 0x1008dd74
call dword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
push 0
push 0x2710
push edx
push eax
call fcn.10161c70
mov esi, eax
mov dword [ebp - 0x94], eax
sub esi, dword [edi + 0x248]
mov ecx, edx
mov eax, edx
mov dword [ebp - 0x5c], ecx
sbb eax, dword [edi + 0x24c]
mov dword [ebp - 0x38], eax
jne 0x1008dbd9
cmp esi, 0x190
jbe 0x1008dd74
movss xmm0, dword [0x1027df3c]
lea eax, [edi + 0x20]
push eax
mov ecx, edi
movss dword [ebp - 0x18], xmm0
call fcn.1008b040
mov dword [ebp - 0x28], eax
mov ecx, edi
lea eax, [edi + 0x20]
push eax
call fcn.10091c00
cmp byte [edi + 0x3c], 0
movaps xmm2, xmm0
movss dword [ebp - 0x14], xmm2
je 0x1008dced
mov edx, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [edx + ecx*4]
mov ecx, dword [edx + ecx*4 + 4]
sub ecx, eax
mov eax, 0x2aaaaaab
imul ecx
mov ecx, dword [ebp - 0x28]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jge 0x1008dced
mov edi, dword [ebp - 0x50]
lea eax, [ecx + ecx*2]
mov edx, dword [ebp - 0x4c]
mov ecx, dword [edi + edx*4]
mov edi, dword [ebp - 0x44]
mov al, byte [ecx + eax*4]
cmp al, 9
jne 0x1008dca5
addss xmm0, dword [0x1027df3c]
xorps xmm1, xmm1
sub esp, 8
cvtsi2ss xmm1, dword [edi + 0x38]
mulss xmm1, dword [ebp - 0x6c]
divss xmm0, xmm1
movss dword [ebp - 0x28], xmm1
movss dword [ebp - 0x18], xmm0
fld dword [ebp - 0x18]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
movss xmm2, dword [ebp - 0x14]
add esp, 8
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
addss xmm0, dword [0x1027df3c]
mulss xmm0, dword [ebp - 0x28]
subss xmm0, xmm2
jmp 0x1008dcf2
movss xmm3, dword [0x1027e220]
push ecx
push 0
lea ecx, [ebp - 0x48]
mov byte [ebp - 0x48], al
mov eax, dword [0x10292678]
push ecx
push ecx
lea ecx, [ebp - 0x178]
mov dword [esp], 0xbf800000
movss xmm2, dword [eax + 0x3bc8]
push ecx
mov ecx, dword [eax + 0x3bc4]
mov byte [ebp - 0x47], 0
call fcn.10069910
movss xmm2, dword [ebp - 0x14]
movss xmm0, dword [eax]
jmp 0x1008dcf2
movss xmm0, dword [ebp - 0x18]
addss xmm2, dword [ebp - 0x54]
movss xmm1, dword [ebp - 0x30]
lea eax, [ebp - 0x128]
push 0
push ecx
mov ecx, dword [ebp - 0x1c]
movss dword [ebp - 0x130], xmm2
addss xmm2, xmm0
mov dword [esp], 0
movaps xmm0, xmm1
push dword [edi + 0xe8]
addss xmm0, dword [edi + 0x21c]
push eax
lea eax, [ebp - 0x130]
movss dword [ebp - 0x12c], xmm1
push eax
movss dword [ebp - 0x128], xmm2
movss dword [ebp - 0x124], xmm0
call fcn.10064dc0
cmp dword [ebp - 0x38], 0
ja 0x1008dd5f
cmp esi, 0x320
jbe 0x1008dd74
mov eax, dword [ebp - 0x94]
mov dword [edi + 0x248], eax
mov eax, dword [ebp - 0x5c]
mov dword [edi + 0x24c], eax
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x50]
mov edx, dword [ecx + eax*4 + 4]
mov esi, dword [ecx + eax*4]
mov dword [ebp - 0x5c], edx
cmp esi, edx
jne 0x1008dd90
mov eax, dword [edi + 0xb4]
jmp 0x1008dd9b
push esi
mov ecx, edi
call fcn.1008bfe0
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x38], eax
sub edx, esi
mov eax, 0x2aaaaaab
xor ecx, ecx
imul edx
xorps xmm4, xmm4
xorps xmm3, xmm3
movss dword [ebp - 0x28], xmm4
mov dword [ebp - 0x18], ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x1008e23e
lea eax, [ecx + ecx*2]
mov ecx, edi
lea esi, [esi + eax*4]
push esi
mov dword [ebp - 0x64], esi
call fcn.1008bfe0
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x20], eax
cmp eax, ecx
jne 0x1008ddf4
mov cl, byte [esi]
cmp cl, 9
je 0x1008ddf1
cmp cl, 0x20
jne 0x1008df58
mov ecx, dword [ebp - 0x38]
cmp dword [edi + 0x240], 0
je 0x1008df58
cmp dword [edi + 0x244], 0xf
lea edx, [edi + 0x230]
movss xmm1, dword [ebp - 0x54]
mov eax, edx
movss xmm0, dword [ebp - 0x30]
addss xmm1, xmm4
addss xmm0, xmm3
mov dword [ebp - 0x14], edx
movss dword [ebp - 0x168], xmm1
movss dword [ebp - 0x164], xmm0
jbe 0x1008de3c
mov eax, dword [edx]
mov dword [ebp - 0x14], eax
mov esi, edx
test ecx, 0xff000000
je 0x1008dee5
mov ecx, eax
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1008de50
sub ecx, esi
mov esi, edx
add ecx, dword [ebp - 0x14]
mov dword [ebp - 0x94], ecx
cmp dword [ebp - 0x14], ecx
je 0x1008dee5
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
mov eax, dword [eax + 0x2c]
mov ecx, dword [eax + 8]
movss xmm0, dword [eax + 0xc]
mov dword [ebp - 0x5c], ecx
movss dword [ebp - 0x60], xmm0
mov eax, dword [ecx + 0x30]
mov eax, dword [eax + 4]
cmp eax, dword [edx + 0x70]
je 0x1008deae
push 0x632
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiimgui_draw.cpp
push str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov ecx, dword [ebp - 0x5c]
lea esi, [edi + 0x230]
add esp, 0xc
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x80]
movss xmm2, dword [ebp - 0x60]
push 0
push ecx
movups xmm0, xmmword [eax + 0x60]
mov dword [esp], 0
push dword [ebp - 0x94]
movups xmmword [ebp - 0x80], xmm0
push dword [ebp - 0x14]
push edx
push dword [ebp - 0x38]
lea edx, [ebp - 0x168]
push edx
push eax
call fcn.10069ae0
cmp dword [esi + 0x14], 0xf
mov ecx, esi
mov eax, dword [0x10292678]
mov edx, dword [eax + 0x3bc4]
jbe 0x1008defa
mov ecx, dword [esi]
mov eax, dword [0x10292678]
movss xmm3, dword [0x1027e220]
push ecx
push 0
movss xmm2, dword [eax + 0x3bc8]
push ecx
push ecx
lea ecx, [ebp - 0x160]
mov dword [esp], 0xbf800000
push ecx
mov ecx, edx
call fcn.10069910
cmp dword [esi + 0x14], 0xf
mov eax, esi
movss xmm4, dword [ebp - 0x160]
addss xmm4, dword [ebp - 0x28]
movss dword [ebp - 0x28], xmm4
jbe 0x1008df45
mov eax, dword [esi]
mov dword [esi + 0x10], 0
xorps xmm3, xmm3
mov esi, dword [ebp - 0x64]
mov byte [eax], 0
mov eax, dword [ebp - 0x20]
mov cl, byte [esi]
mov dword [ebp - 0x38], eax
cmp cl, 9
jne 0x1008e0d2
movd xmm0, dword [edi + 0x38]
sub esp, 8
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x60], xmm4
mulss xmm0, dword [ebp - 0x6c]
addss xmm4, dword [0x1027df3c]
movss dword [ebp - 0x64], xmm0
divss xmm4, xmm0
movss dword [ebp - 0x20], xmm4
fld dword [ebp - 0x20]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
movss xmm0, dword [0x1027df3c]
add esp, 8
inc dword [ebp - 0x18]
cmp byte [edi + 0x5f], 0
fstp dword [ebp - 0x20]
movss xmm4, dword [ebp - 0x20]
addss xmm4, xmm0
mulss xmm4, dword [ebp - 0x64]
movss dword [ebp - 0x28], xmm4
je 0x1008e211
movss xmm5, dword [ebp - 0x60]
movaps xmm2, xmm4
mov eax, dword [0x10292678]
addss xmm2, dword [ebp - 0x54]
addss xmm5, dword [ebp - 0x54]
movss xmm1, dword [ebp - 0x30]
movss xmm3, dword [eax + 0x3bc8]
lea eax, [ebp - 0xa4]
addss xmm1, dword [0x1027ddb8]
mov esi, dword [ebp - 0x1c]
subss xmm2, xmm0
addss xmm5, xmm0
movaps xmm0, xmm3
mulss xmm0, dword [0x1027dee0]
push ecx
mulss xmm3, dword [0x1027deb4]
mov ecx, esi
mov dword [esp], 0x3f800000
addss xmm1, xmm0
movss dword [ebp - 0xa4], xmm2
push 0x90909090
subss xmm2, xmm3
movss dword [ebp - 0x138], xmm5
push eax
lea eax, [ebp - 0x138]
movaps xmm0, xmm1
movss dword [ebp - 0x134], xmm1
subss xmm0, xmm3
movss dword [ebp - 0xa0], xmm1
addss xmm3, xmm1
movss dword [ebp - 0x140], xmm2
push eax
movss dword [ebp - 0x148], xmm2
movss dword [ebp - 0x13c], xmm0
movss dword [ebp - 0x144], xmm3
call fcn.10064bc0
push ecx
mov dword [esp], 0x3f800000
lea eax, [ebp - 0x140]
push 0x90909090
push eax
lea eax, [ebp - 0xa4]
mov ecx, esi
push eax
call fcn.10064bc0
push ecx
mov dword [esp], 0x3f800000
lea eax, [ebp - 0x148]
push 0x90909090
push eax
lea eax, [ebp - 0xa4]
mov ecx, esi
push eax
call fcn.10064bc0
jmp 0x1008e20c
cmp cl, 0x20
jne 0x1008e184
cmp byte [edi + 0x5f], 0
je 0x1008e172
movss xmm2, dword [ebp - 0x54]
movss xmm0, dword [ebp - 0x6c]
addss xmm2, xmm4
mulss xmm0, dword [0x1027dee0]
mov eax, dword [0x10292678]
mov esi, dword [ebp - 0x1c]
push 3
addss xmm2, xmm0
movss xmm0, dword [ebp - 0x30]
movss xmm1, dword [eax + 0x3bc8]
addss xmm0, xmm3
mulss xmm1, dword [0x1027dee0]
lea eax, [ebp - 0x150]
push ecx
mov dword [esp], 0x4096cbe4
mov ecx, esi
movss dword [ebp - 0x150], xmm2
movss xmm2, dword [0x1027df68]
addss xmm0, xmm1
push eax
movss dword [ebp - 0x14c], xmm0
call fcn.100642d0
push 0x80808080
push dword [esi + 0x54]
mov ecx, esi
push dword [esi + 0x5c]
call fcn.10063a10
movss xmm4, dword [ebp - 0x28]
mov dword [esi + 0x54], 0
addss xmm4, dword [ebp - 0x6c]
inc dword [ebp - 0x18]
movss dword [ebp - 0x28], xmm4
jmp 0x1008e211
mov al, cl
and al, 0xfe
cmp al, 0xfc
jne 0x1008e193
mov eax, 6
jmp 0x1008e1cc
mov al, cl
and al, 0xfc
cmp al, 0xf8
jne 0x1008e1a2
mov eax, 5
jmp 0x1008e1cc
mov al, cl
and al, 0xf8
cmp al, 0xf0
jne 0x1008e1b1
mov eax, 4
jmp 0x1008e1cc
mov al, cl
and al, 0xf0
cmp al, 0xe0
jne 0x1008e1c0
mov eax, 3
jmp 0x1008e1cc
and cl, 0xe0
xor eax, eax
cmp cl, 0xc0
sete al
inc eax
lea ecx, [edi + 0x230]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x18]
mov edi, dword [ebp - 0x20]
lea esi, [ecx + ecx*2]
shl esi, 2
add ecx, eax
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ecx + eax*4]
mov ecx, edi
add eax, esi
add esi, 0xc
mov al, byte [eax]
push eax
call fcn.10093480
mov eax, dword [ebp - 0x20]
test eax, eax
jg 0x1008e1e6
mov edi, dword [ebp - 0x44]
movss xmm4, dword [ebp - 0x28]
mov eax, dword [ebp - 0x4c]
xorps xmm3, xmm3
mov ecx, dword [ebp - 0x50]
mov esi, dword [ecx + eax*4]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, 0x2aaaaaab
sub ecx, esi
imul ecx
mov ecx, dword [ebp - 0x18]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jb 0x1008ddc6
cmp dword [edi + 0x240], 0
je 0x1008e343
cmp dword [edi + 0x244], 0xf
lea edx, [edi + 0x230]
movss xmm1, dword [ebp - 0x54]
mov eax, edx
movss xmm0, dword [ebp - 0x30]
addss xmm1, xmm4
addss xmm0, xmm3
mov dword [ebp - 0x14], edx
movss dword [ebp - 0x90], xmm1
movss dword [ebp - 0x8c], xmm0
jbe 0x1008e286
mov eax, dword [edx]
mov dword [ebp - 0x14], eax
test dword [ebp - 0x38], 0xff000000
mov esi, edx
je 0x1008e32f
mov ecx, eax
lea esi, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1008e2a0
sub ecx, esi
mov esi, edx
add ecx, dword [ebp - 0x14]
mov dword [ebp - 0x64], ecx
cmp dword [ebp - 0x14], ecx
je 0x1008e32f
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
mov eax, dword [eax + 0x2c]
mov ecx, dword [eax + 8]
movss xmm0, dword [eax + 0xc]
mov dword [ebp - 0x20], ecx
movss dword [ebp - 0x60], xmm0
mov eax, dword [ecx + 0x30]
mov eax, dword [eax + 4]
cmp eax, dword [edx + 0x70]
je 0x1008e2fb
push 0x632
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiimgui_draw.cpp
push str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov ecx, dword [ebp - 0x20]
lea esi, [edi + 0x230]
add esp, 0xc
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x80]
movss xmm2, dword [ebp - 0x60]
push 0
push ecx
movups xmm0, xmmword [eax + 0x60]
mov dword [esp], 0
push dword [ebp - 0x64]
movups xmmword [ebp - 0x80], xmm0
push dword [ebp - 0x14]
push edx
push dword [ebp - 0x38]
lea edx, [ebp - 0x90]
push edx
push eax
call fcn.10069ae0
cmp dword [esi + 0x14], 0xf
mov eax, esi
jbe 0x1008e339
mov eax, dword [esi]
mov dword [esi + 0x10], 0
mov byte [eax], 0
mov esi, dword [ebp - 0x24]
movss xmm1, dword [ebp - 0x3c]
inc esi
mov dword [ebp - 0x24], esi
cmp esi, dword [ebp - 0x2c]
jle 0x1008d2f0
cmp dword [0x10292678], 0
jne 0x1008e379
push 0x20e3
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiimgui.cpp
push str.GImGui___0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
mov ecx, dword [0x10292678]
movss xmm1, dword [0x1027e2c0]
movss xmm0, dword [ecx + 0xdb8]
comiss xmm0, xmm1
movss xmm2, dword [ecx + 0xdbc]
jb 0x1008e3a5
comiss xmm2, xmm1
jb 0x1008e3a5
mov al, 1
jmp 0x1008e3a7
xor al, al
test al, al
je 0x1008e57f
mov eax, dword [ecx + 0xdb8]
mov ecx, dword [ecx + 0xdbc]
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x178]
mov dword [ebp - 0x8c], ecx
push eax
mov ecx, edi
call fcn.1008a7f0
push eax
lea eax, [ebp - 0x88]
mov ecx, edi
push eax
call fcn.1008bdd0
mov dword [ebp - 4], 0
mov esi, dword [ebp - 0x78]
test esi, esi
je 0x1008e528
cmp dword [ebp - 0x74], 0xf
lea eax, [ebp - 0x88]
mov edx, 0x811c9dc5
cmova eax, dword [ebp - 0x88]
xor ecx, ecx
test esi, esi
je 0x1008e434
mov edi, eax
nop dword [eax + eax]
movzx eax, byte [ecx + edi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, esi
jb 0x1008e420
mov edi, dword [ebp - 0x44]
push edx
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x170]
push eax
lea ecx, [edi + 0x140]
call fcn.100966f0
mov eax, dword [eax + 4]
mov dword [ebp - 0x2c], eax
test eax, eax
jne 0x1008e461
mov eax, dword [edi + 0x144]
mov dword [ebp - 0x2c], eax
cmp eax, dword [edi + 0x144]
je 0x1008e478
xor ecx, ecx
call fcn.10052980
mov ecx, dword [ebp - 0x2c]
add ecx, 0x28
jmp 0x1008e4e3
cmp dword [ebp - 0x74], 0xf
lea eax, [ebp - 0x88]
mov edx, 0x811c9dc5
cmova eax, dword [ebp - 0x88]
xor ecx, ecx
test esi, esi
je 0x1008e4aa
mov edi, eax
movzx eax, byte [ecx + edi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, esi
jb 0x1008e496
mov edi, dword [ebp - 0x44]
push edx
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x170]
push eax
lea ecx, [edi + 0x160]
call fcn.100966f0
mov esi, dword [eax + 4]
test esi, esi
jne 0x1008e4d1
mov esi, dword [edi + 0x164]
cmp esi, dword [edi + 0x164]
je 0x1008e528
xor ecx, ecx
call fcn.10052980
lea ecx, [esi + 0x28]
cmp dword [ecx + 0x14], 0xf
jbe 0x1008e4eb
mov ecx, dword [ecx]
push 1
xor edx, edx
call fcn.10076010
mov eax, dword [0x10292678]
add esp, 4
mov eax, dword [eax + 0x3e58]
test dword [eax + 0xc], 0x2000000
jne 0x1008e523
push 0x27de
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiimgui.cpp
push str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
call fcn.1004cd60
mov ecx, dword [ebp - 0x88]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x74]
cmp eax, 0xf
jbe 0x1008e56a
lea edx, [eax + 1]
mov eax, ecx
cmp edx, 0x1000
jb 0x1008e560
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1008e560
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10160098
add esp, 8
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
mov ecx, dword [edi + 8]
mov eax, 0x2aaaaaab
sub ecx, dword [edi + 4]
imul ecx
movss xmm1, dword [ebp - 0x70]
addss xmm1, dword [0x1027df90]
mov ecx, dword [0x10292678]
sar edx, 1
mov eax, edx
movss dword [ebp - 0x90], xmm1
shr eax, 0x1f
add eax, edx
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x1027e510]
mov eax, dword [ecx + 0x3e58]
cvtpd2ps xmm3, xmm0
mulss xmm3, dword [edi + 0x21c]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e58]
movss dword [ebp - 0x8c], xmm3
cmp byte [eax + 0xaf], 0
jne 0x1008e653
movss xmm2, dword [eax + 0xf0]
lea ecx, [ebp - 0x90]
movss xmm0, dword [eax + 0xf4]
addss xmm1, xmm2
addss xmm3, xmm0
movss dword [ebp - 0xbc], xmm2
movss dword [ebp - 0xb8], xmm0
movss dword [ebp - 0xb4], xmm1
movss xmm1, dword [0x1027e25c]
movss dword [ebp - 0xb0], xmm3
call fcn.10051490
push 0
push 0
xor edx, edx
lea ecx, [ebp - 0xbc]
call fcn.100515f0
add esp, 8
cmp byte [edi + 0x3f], 0
je 0x1008e677
mov ecx, edi
call fcn.10091e50
mov ecx, dword [0x10292678]
xor edx, edx
mov ecx, dword [ecx + 0x3e58]
call fcn.1004d470
mov byte [edi + 0x3f], 0
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret