Function at 0x1006b8f9
Capabilities:
Hash data using fnv

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d607b
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x328
mov eax, dword [0x100f5008]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2bc], ecx
mov eax, dword [ebx + 8]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0xf
mov byte [ebp - 0x48], 0
mov dword [ebp - 4], 0
test eax, eax
je 0x1006c83d
cmp dword [0x100f5310], 0
je 0x1006c83d
mov edi, dword [eax + 8]
mov eax, dword [0x101f7350]
test al, 1
jne 0x1006b7df
or eax, 1
mov dword [0x101f7350], eax
mov edx, 0x990704d7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x20]
call fcn.100646f0
push 0xda7d68cb
mov edx, eax
mov ecx, 0x101f7354
call fcn.10064b80
add esp, 4
push 0x100df920
call fcn.100d2ca2
add esp, 4
mov byte [ebp - 4], 0
mov eax, dword [0x101f7354]
call eax
mov esi, eax
mov dword [ebp - 0x2b0], esi
test edi, edi
je 0x1006b86e
test esi, esi
je 0x1006b86e
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x2ac], ecx
test ecx, ecx
je 0x1006b86e
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x1006b84b
mov edi, 0x811c9dc5
xor ecx, ecx
inc ecx
cmp byte [ecx + esi], 0
jne 0x1006b825
xor edx, edx
test ecx, ecx
je 0x1006b84b
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x1006b832
cmp edi, 0xd791104e
je 0x1006b866
mov ecx, dword [ebp - 0x2ac]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x2ac], ecx
test ecx, ecx
je 0x1006b86e
mov esi, dword [ebp - 0x2b0]
jmp 0x1006b807
mov ecx, dword [ebp - 0x2ac]
jmp 0x1006b870
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
movss xmm0, dword [0x100e8c78]
dec eax
movss xmm1, dword [0x100e8c68]
movss xmm5, dword [0x100e8adc]
cmp eax, 6
ja case.0x1006b892.2
jmp dword [eax*4 + 0x1006c860]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
mov edx, eax
jmp 0x1006b900
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
add esp, 4
mov edx, eax
jmp 0x1006b900
movss xmm4, dword [ecx + 0xc]
movaps xmm3, xmm0
andps xmm3, xmm4
movaps xmm0, xmm4
xorps xmm0, xmm3
movaps xmm2, xmm4
cmpltss xmm0, xmm1
andps xmm1, xmm0
orps xmm1, xmm3
addss xmm2, xmm1
subss xmm2, xmm1
movaps xmm0, xmm2
subss xmm0, xmm4
cmpnless xmm0, xmm3
andps xmm0, xmm5
subss xmm2, xmm0
cvttss2si edx, xmm2
jmp 0x1006b900
xor edx, edx
jmp 0x1006b900
mov edx, dword [ecx + 0xc]
mov ecx, dword [0x101f6e30]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
mov edi, dword [ebp - 0x2b4]
mov ecx, dword [0x101f7350]
mov dword [ebp - 0x2b8], eax
mov edi, dword [edi + 8]
test cl, 1
jne 0x1006b967
or ecx, 1
mov dword [0x101f7350], ecx
mov edx, 0x990704d7
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x20]
call fcn.100646f0
push 0xda7d68cb
mov edx, eax
mov ecx, 0x101f7354
call fcn.10064b80
add esp, 4
push 0x100df920
call fcn.100d2ca2
add esp, 4
mov byte [ebp - 4], 0
mov eax, dword [0x101f7354]
call eax
mov esi, eax
mov dword [ebp - 0x2b0], esi
test edi, edi
je 0x1006b9fc
test esi, esi
je 0x1006b9fc
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x2ac], ecx
test ecx, ecx
je 0x1006b9fc
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x1006b9d9
mov edi, 0x811c9dc5
xor ecx, ecx
inc ecx
cmp byte [ecx + esi], 0
jne 0x1006b9b1
xor edx, edx
test ecx, ecx
je 0x1006b9d9
nop
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x1006b9c0
cmp edi, 0x11ab48ff
je 0x1006b9f4
mov ecx, dword [ebp - 0x2ac]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x2ac], ecx
test ecx, ecx
je 0x1006b9fc
mov esi, dword [ebp - 0x2b0]
jmp 0x1006b993
mov ecx, dword [ebp - 0x2ac]
jmp 0x1006b9fe
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x1006ba0c.2
jmp dword [eax*4 + 0x1006c87c]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
mov edx, eax
jmp 0x1006ba92
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
add esp, 4
mov edx, eax
jmp 0x1006ba92
movss xmm4, dword [ecx + 0xc]
movss xmm3, dword [0x100e8c78]
movaps xmm0, xmm4
movss xmm1, dword [0x100e8c68]
andps xmm3, xmm4
xorps xmm0, xmm3
movaps xmm2, xmm4
cmpltss xmm0, xmm1
andps xmm1, xmm0
orps xmm1, xmm3
addss xmm2, xmm1
subss xmm2, xmm1
movss xmm1, dword [0x100e8adc]
movaps xmm0, xmm2
subss xmm0, xmm4
cmpnless xmm0, xmm3
andps xmm0, xmm1
subss xmm2, xmm0
cvttss2si edx, xmm2
jmp 0x1006ba92
xor edx, edx
jmp 0x1006ba92
mov edx, dword [ecx + 0xc]
mov ecx, dword [0x101f6e30]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
mov edi, dword [ebp - 0x2b8]
mov esi, eax
mov dword [ebp - 0x2c0], esi
lea ecx, [edi - 1]
cmp ecx, 0x3f
ja 0x1006c807
lea ecx, [esi - 1]
cmp ecx, 0x3f
ja 0x1006c807
mov ecx, dword [0x101f6e30]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
cmp edi, eax
jne 0x1006c807
mov ecx, dword [0x101f6e30]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
cmp esi, eax
je 0x1006c807
mov eax, dword [ebp - 0x2b4]
mov edi, dword [eax + 8]
mov eax, dword [0x101f7350]
test al, 1
jne 0x1006bb40
or eax, 1
mov dword [0x101f7350], eax
mov edx, 0x990704d7
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x20]
call fcn.100646f0
push 0xda7d68cb
mov edx, eax
mov ecx, 0x101f7354
call fcn.10064b80
add esp, 4
push 0x100df920
call fcn.100d2ca2
add esp, 4
mov byte [ebp - 4], 0
mov eax, dword [0x101f7354]
call eax
mov esi, eax
mov dword [ebp - 0x2b8], esi
test edi, edi
je 0x1006bbdc
test esi, esi
je 0x1006bbdc
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x2ac], ecx
test ecx, ecx
je 0x1006bbdc
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x1006bbb9
mov edi, 0x811c9dc5
xor ecx, ecx
nop
inc ecx
cmp byte [ecx + esi], 0
jne 0x1006bb90
xor edx, edx
test ecx, ecx
je 0x1006bbb9
nop dword [eax]
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x1006bba0
cmp edi, 0x2a7e565d
je 0x1006bbd4
mov ecx, dword [ebp - 0x2ac]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x2ac], ecx
test ecx, ecx
je 0x1006bbdc
mov esi, dword [ebp - 0x2b8]
jmp 0x1006bb70
mov ecx, dword [ebp - 0x2ac]
jmp 0x1006bbde
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x1006bbec.2
jmp dword [eax*4 + 0x1006c898]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
mov edi, eax
jmp 0x1006bc83
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
add esp, 4
mov dword [ebp - 0x2b0], eax
mov edi, eax
jmp 0x1006bc89
movss xmm4, dword [ecx + 0xc]
movss xmm3, dword [0x100e8c78]
movaps xmm0, xmm4
movss xmm1, dword [0x100e8c68]
andps xmm3, xmm4
xorps xmm0, xmm3
movaps xmm2, xmm4
cmpltss xmm0, xmm1
andps xmm1, xmm0
orps xmm1, xmm3
addss xmm2, xmm1
subss xmm2, xmm1
movss xmm1, dword [0x100e8adc]
movaps xmm0, xmm2
subss xmm0, xmm4
cmpnless xmm0, xmm3
andps xmm0, xmm1
subss xmm2, xmm0
cvttss2si edi, xmm2
jmp 0x1006bc83
mov dword [ebp - 0x2b0], 0
jmp 0x1006bc92
mov edi, dword [ecx + 0xc]
mov dword [ebp - 0x2b0], edi
cmp edi, 0xa
je 0x1006c807
mov ecx, dword [0x101f6e34]
mov esi, dword [ebp - 0x2c0]
push esi
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov dword [ebp - 0x2d8], eax
test eax, eax
je 0x1006c807
mov ecx, dword [0x101f6e30]
lea eax, [ebp - 0x2a8]
push eax
push esi
mov edx, dword [ecx]
mov edx, dword [edx + 0x20]
call edx
test al, al
je 0x1006c807
lea ecx, [ebp - 0x298]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x1c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006bcf3
sub ecx, edx
lea eax, [ebp - 0x298]
push ecx
push eax
lea ecx, [ebp - 0x2c]
call fcn.1002bf50
mov byte [ebp - 4], 4
lea eax, [ebp - 0x2c]
mov ecx, 0x18
mov dword [ebp - 0x2d4], 0
cmp dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2c4], 0
cmovb ecx, dword [ebp - 0x1c]
cmp dword [ebp - 0x18], 0x10
push ecx
cmovae eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x2d4]
push eax
mov dword [ebp - 0x2c0], 0xf
call fcn.1002bf50
lea eax, [ebp - 0x2d4]
push eax
lea ecx, [ebp - 0x48]
call fcn.1005b970
mov edx, dword [ebp - 0x2c0]
cmp edx, 0x10
jb 0x1006bd9b
mov ecx, dword [ebp - 0x2d4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006bd91
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006c82d
push edx
push ecx
call fcn.100d2cb7
add esp, 8
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x1006bdd3
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006bdc9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006c82d
push edx
push ecx
call fcn.100d2cb7
add esp, 8
mov eax, dword [ebp - 0x2b4]
mov edi, dword [eax + 8]
mov eax, dword [0x101f7350]
test al, 1
jne 0x1006be23
or eax, 1
mov dword [0x101f7350], eax
mov edx, 0x990704d7
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x20]
call fcn.100646f0
push 0xda7d68cb
mov edx, eax
mov ecx, 0x101f7354
call fcn.10064b80
add esp, 4
push 0x100df920
call fcn.100d2ca2
add esp, 4
mov byte [ebp - 4], 0
mov eax, dword [0x101f7354]
call eax
mov esi, eax
mov dword [ebp - 0x2c0], esi
test edi, edi
je 0x1006bebc
test esi, esi
je 0x1006bebc
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x2ac], ecx
test ecx, ecx
je 0x1006bebc
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x1006be99
mov edi, 0x811c9dc5
xor ecx, ecx
inc ecx
cmp byte [ecx + esi], 0
jne 0x1006be71
xor edx, edx
test ecx, ecx
je 0x1006be99
nop
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x1006be80
cmp edi, 0xa0d9523e
je 0x1006beb4
mov ecx, dword [ebp - 0x2ac]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x2ac], ecx
test ecx, ecx
je 0x1006bebc
mov esi, dword [ebp - 0x2c0]
jmp 0x1006be53
mov ecx, dword [ebp - 0x2ac]
jmp 0x1006bebe
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x1006becc.2
jmp dword [eax*4 + 0x1006c8b4]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
jmp 0x1006bf4e
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
add esp, 4
jmp 0x1006bf4e
movss xmm4, dword [ecx + 0xc]
movss xmm3, dword [0x100e8c78]
movaps xmm0, xmm4
movss xmm1, dword [0x100e8c68]
andps xmm3, xmm4
xorps xmm0, xmm3
movaps xmm2, xmm4
cmpltss xmm0, xmm1
andps xmm1, xmm0
orps xmm1, xmm3
addss xmm2, xmm1
subss xmm2, xmm1
movss xmm1, dword [0x100e8adc]
movaps xmm0, xmm2
subss xmm0, xmm4
cmpnless xmm0, xmm3
andps xmm0, xmm1
subss xmm2, xmm0
cvttss2si eax, xmm2
jmp 0x1006bf4e
xor eax, eax
jmp 0x1006bf4e
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 0x2b4]
mov edi, dword [eax + 8]
mov eax, dword [0x101f7350]
test al, 1
jne 0x1006bfa4
or eax, 1
mov dword [0x101f7350], eax
mov edx, 0x990704d7
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x20]
call fcn.100646f0
push 0xda7d68cb
mov edx, eax
mov ecx, 0x101f7354
call fcn.10064b80
add esp, 4
push 0x100df920
call fcn.100d2ca2
add esp, 4
mov byte [ebp - 4], 0
mov eax, dword [0x101f7354]
call eax
mov esi, eax
mov dword [ebp - 0x2c0], esi
test edi, edi
je 0x1006c03c
test esi, esi
je 0x1006c03c
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x2b4], ecx
test ecx, ecx
je 0x1006c03c
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x1006c019
mov edi, 0x811c9dc5
xor ecx, ecx
inc ecx
cmp byte [ecx + esi], 0
jne 0x1006bff2
xor edx, edx
test ecx, ecx
je 0x1006c019
nop
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x1006c000
cmp edi, 0x6b98ed8f
je 0x1006c034
mov ecx, dword [ebp - 0x2b4]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x2b4], ecx
test ecx, ecx
je 0x1006c03c
mov esi, dword [ebp - 0x2c0]
jmp 0x1006bfd4
mov ecx, dword [ebp - 0x2b4]
jmp 0x1006c03e
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x1006c04c.2
jmp dword [eax*4 + 0x1006c8d0]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
jmp 0x1006c0d1
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
add esp, 4
jmp 0x1006c0d1
movss xmm2, dword [ecx + 0xc]
movss xmm4, dword [0x100e8c78]
movaps xmm0, xmm2
movss xmm3, dword [0x100e8c68]
andps xmm4, xmm2
xorps xmm0, xmm4
movaps xmm1, xmm2
cmpltss xmm0, xmm3
andps xmm3, xmm0
orps xmm3, xmm4
addss xmm1, xmm3
subss xmm1, xmm3
movaps xmm0, xmm1
subss xmm0, xmm2
movss xmm2, dword [0x100e8adc]
cmpnless xmm0, xmm4
andps xmm0, xmm2
subss xmm1, xmm0
cvttss2si eax, xmm1
jmp 0x1006c0d1
xor eax, eax
jmp 0x1006c0d1
mov eax, dword [ecx + 0xc]
mov ecx, dword [0x1010b238]
xor esi, esi
mov edi, dword [0x1010b23c]
mov dword [ebp - 0x30], eax
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c0], ecx
cmp ecx, edi
je 0x1006c126
sub edi, ecx
mov esi, edi
sar esi, 2
push esi
call fcn.10034e90
push edi
push dword [ebp - 0x2c0]
mov dword [ebp - 0x20], eax
lea esi, [eax + esi*4]
mov dword [ebp - 0x1c], eax
push eax
mov dword [ebp - 0x18], esi
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x20]
add esp, 0xc
mov dword [ebp - 0x1c], esi
lea ecx, [ebp - 0x20]
sub esi, eax
call fcn.10034160
sar esi, 2
test esi, esi
je 0x1006c189
mov eax, dword [0x101f6e8c]
mov ecx, dword [0x101f6e84]
mov dword [0x101f4c84], 0x3f800000
push ecx
movss xmm0, dword [eax + 0x10]
movss dword [0x101f4c7c], xmm0
addss xmm0, dword [0x100e8adc]
mov dword [esp], 0
push 0
push 0x64
push ecx
movss dword [0x101f4c80], xmm0
mov eax, dword [ecx]
mov dword [esp], 0x3f800000
push str.buttons_arena_switch_press_02.wav
mov eax, dword [eax + 0x30]
call eax
mov eax, dword [0x1011c144]
mov ecx, dword [0x1011c148]
cmp eax, ecx
je 0x1006c46b
nop dword [eax]
cmp dword [eax], 1
je 0x1006c1ac
add eax, 4
cmp eax, ecx
jne 0x1006c1a0
cmp eax, ecx
je 0x1006c46b
movd xmm0, dword [ebp - 0x2ac]
mov ecx, dword [ebp - 0x2bc]
cvtdq2ps xmm0, xmm0
push 0x98
push 0
cvttss2si eax, xmm0
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp - 0x2b0]
lea eax, [eax + eax*2]
lea eax, [ecx + eax*8]
mov dword [ebp - 0x2c0], eax
lea eax, [ebp - 0x150]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 8
lea ecx, [ebp - 0x150]
call fcn.1003bae0
lea eax, [ebp - 0x310]
mov byte [ebp - 4], 7
mov dword [ebp - 0x318], eax
mov esi, eax
mov dword [ebp - 0x314], 4
mov edi, 4
mov ecx, esi
call fcn.1002bbf0
add esi, 0xc
sub edi, 1
jne 0x1006c223
push dword [ebp - 0x314]
mov dword [ebp - 0x1c], 0x1005f290
lea eax, [ebp - 0x48]
push dword [ebp - 0x318]
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x150]
movq xmm0, qword [ebp - 0x20]
mov edx, str.hit__s_in_the__s_for_damage__i___i_health_remaining__n
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x2b8]
movq qword [ebp - 0x310], xmm0
mov dword [ebp - 0x1c], 0x1005f290
movq xmm0, qword [ebp - 0x20]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x30]
movq qword [ebp - 0x304], xmm0
mov dword [ebp - 0x1c], 0x1003c8f0
movq xmm0, qword [ebp - 0x20]
movq qword [ebp - 0x2f8], xmm0
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 0x1003c8f0
movq xmm0, qword [ebp - 0x20]
mov dword [ebp - 0x308], fcn.100370a0
mov dword [ebp - 0x2fc], fcn.100370a0
mov dword [ebp - 0x2f0], 0x1003ca70
movq qword [ebp - 0x2ec], xmm0
mov dword [ebp - 0x2e4], 0x1003ca70
call fcn.1003a060
add esp, 8
lea eax, [ebp - 0x60]
lea ecx, [ebp - 0x14c]
push eax
call fcn.1003be40
mov eax, dword [ebp - 0x150]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0x150], 0x100e21f4
mov eax, dword [ebp - 0x150]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x50]
mov dword [ebp + ecx - 0x154], eax
lea ecx, [ebp - 0x14c]
call fcn.10034af0
lea ecx, [ebp - 0x148]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov byte [ebp - 4], 8
mov esi, dword [0x100e1b30]
push 0x2c
call fcn.100d2858
mov edi, eax
add esp, 4
mov dword [ebp - 0x2c0], edi
mov byte [ebp - 4], 9
lea eax, [ebp - 0x60]
xorps xmm0, xmm0
lea ecx, [edi + 0xc]
movq qword [edi], xmm0
mov dword [edi + 8], 0
push eax
mov dword [edi + 4], 1
mov dword [edi + 8], 1
mov dword [edi], 0x100e2f54
call fcn.1004d6d0
lea ecx, [edi + 0xc]
xorps xmm0, xmm0
mov dword [ecx + 0x18], esi
movlpd qword [ebp - 0x2c4], xmm0
mov dword [ecx + 0x1c], 0x41000000
mov dword [ebp - 0x2c4], ecx
mov dword [ebp - 0x2c0], edi
mov byte [ebp - 4], 0xa
mov eax, dword [0x101f20a0]
cmp eax, dword [0x101f20a4]
je 0x1006c3da
mov dword [eax + 4], 0
xor esi, esi
mov dword [eax], ecx
mov dword [eax + 4], edi
add dword [0x101f20a0], 8
jmp 0x1006c3ed
lea ecx, [ebp - 0x2c4]
push ecx
push eax
call fcn.10063b00
mov esi, dword [ebp - 0x2c0]
mov byte [ebp - 4], 8
test esi, esi
je 0x1006c416
or edi, 0xffffffff
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x1006c416
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lock xadd dword [esi + 8], edi
dec edi
jne 0x1006c416
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
sub esp, 0x18
lea eax, [ebp - 0x60]
mov ecx, esp
push eax
call fcn.1004d6d0
push 0x100f5310
call fcn.10062c30
mov byte [ebp - 4], 0
add esp, 0x1c
mov edx, dword [ebp - 0x4c]
cmp edx, 0x10
jb 0x1006c46b
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006c461
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1006c461
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100d2cb7
add esp, 8
cmp dword [ebp - 0x2b0], 0
je 0x1006c807
mov eax, dword [ebp - 0x2bc]
mov edi, dword [eax + 0xd8]
mov esi, dword [eax + 0xd4]
cmp esi, edi
je 0x1006c4bd
nop
mov edx, dword [0x101f704c]
mov eax, dword [0x100f5310]
add edx, 0xffffffc6
mov ecx, dword [esi + 0x18]
xor edx, 0xfef7a57
cmp ecx, dword [edx + eax]
jne 0x1006c4b0
mov byte [esi + 0x1d], 1
add esi, 0x20
cmp esi, edi
jne 0x1006c490
mov eax, dword [ebp - 0x2bc]
mov ecx, dword [eax + 0xcc]
xor edi, edi
mov edx, dword [eax + 0xd0]
movss xmm1, dword [0x100e8c70]
add edx, ecx
mov dword [ebp - 0x2b4], edx
cmp ecx, edx
je 0x1006c807
mov esi, dword [eax + 0xc8]
movss xmm2, dword [0x100e8d90]
dec esi
mov dword [ebp - 0x2c0], esi
nop dword [eax + eax]
mov eax, esi
mov esi, dword [ebp - 0x2bc]
and eax, ecx
mov edx, dword [esi + 0xc4]
mov esi, dword [ebp - 0x2c0]
mov eax, dword [edx + eax*4]
mov edx, dword [ebp - 0x2b4]
cmp byte [eax + 0x31], 0
jne 0x1006c547
mov edx, dword [0x101f6e8c]
movss xmm0, dword [edx]
subss xmm0, dword [eax + 8]
mov edx, dword [ebp - 0x2b4]
andps xmm0, xmm2
comiss xmm1, xmm0
jb 0x1006c547
movaps xmm1, xmm0
mov edi, eax
inc ecx
cmp ecx, edx
jne 0x1006c500
test edi, edi
je 0x1006c807
push 0x30
lea eax, [ebp - 0x94]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
xorps xmm0, xmm0
mov dword [ebp - 0x98], 0
movups xmmword [ebp - 0xb8], xmm0
add esp, 0xc
movups xmmword [ebp - 0xa8], xmm0
movss xmm4, dword [edi + 0x24]
movss xmm5, dword [edi + 0x18]
movss xmm6, dword [edi + 0x1c]
subss xmm4, xmm5
movss xmm3, dword [edi + 0x28]
movss xmm7, dword [edi + 0x20]
subss xmm3, xmm6
movss xmm2, dword [edi + 0x2c]
subss xmm2, xmm7
movaps xmm0, xmm4
unpcklps xmm0, xmm3
movq qword [ebp - 0x20], xmm0
movaps xmm0, xmm4
mulss xmm0, xmm4
mulss xmm3, xmm3
movss dword [ebp - 0x2c0], xmm2
mov eax, dword [ebp - 0x2c0]
addss xmm0, xmm3
mulss xmm2, xmm2
mov dword [ebp - 0x18], eax
addss xmm0, xmm2
call fcn.1002c290
addss xmm0, dword [0x100e89d8]
movss xmm3, dword [0x100e8adc]
mov dword [ebp - 0x314], 0
mov byte [ebp - 0x2eb], 1
divss xmm3, xmm0
movss xmm0, dword [edi + 0x14]
movaps xmm2, xmm3
movaps xmm1, xmm3
mulss xmm1, dword [ebp - 0x1c]
mulss xmm3, dword [ebp - 0x18]
mulss xmm2, xmm4
mulss xmm1, xmm0
mulss xmm2, xmm0
mulss xmm3, xmm0
movss dword [ebp - 0x320], xmm2
movss dword [ebp - 0x31c], xmm1
mulss xmm2, xmm2
mulss xmm1, xmm1
movss dword [ebp - 0x318], xmm3
mulss xmm3, xmm3
addss xmm2, xmm1
addss xmm2, xmm3
ucomiss xmm2, dword [0x100e89c8]
lahf
test ah, 0x44
jp 0x1006c66e
mov byte [ebp - 0x2eb], 0
mov ecx, dword [0x101f6e4c]
lea edx, [ebp - 0xb8]
mov esi, dword [ebp - 0x2d8]
push edx
mov dword [ebp - 0x2f0], 0
lea edx, [ebp - 0x330]
mov byte [ebp - 0x2ec], 1
movss dword [ebp - 0x330], xmm5
movss dword [ebp - 0x32c], xmm6
movss dword [ebp - 0x328], xmm7
mov dword [ebp - 0x324], 0
mov dword [ebp - 0x308], 0
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x310], 0
mov dword [ebp - 0x2f8], 0
mov dword [ebp - 0x2fc], 0
mov dword [ebp - 0x300], 0
mov eax, dword [ecx]
push esi
push 0x4600400b
push edx
mov eax, dword [eax + 0xc]
call eax
mov eax, dword [0x101f6e8c]
mov dword [ebp - 0x24], 0x3f800000
movss xmm0, dword [eax + 0x10]
mov eax, dword [0x101f4c8c]
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [0x101f4c7c]
addss xmm0, dword [0x101f4c84]
movss dword [ebp - 0x28], xmm0
movss xmm0, dword [ebp - 0xac]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [ebp - 0xa8]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [ebp - 0xa4]
movss dword [ebp - 0x18], xmm0
cmp eax, dword [0x101f4c90]
je 0x1006c77d
movups xmm0, xmmword [ebp - 0x2c]
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x1c]
movq qword [eax + 0x10], xmm0
add dword [0x101f4c8c], 0x18
jmp 0x1006c78c
lea ecx, [ebp - 0x2c]
push ecx
push eax
mov ecx, 0x101f4c88
call fcn.1006e510
mov eax, dword [esi + 8]
lea ecx, [esi + 8]
mov eax, dword [eax + 0x28]
call eax
imul eax, eax, 0x34d8
lea ecx, [eax + 0x1011a404]
mov dword [ebp - 0x2d8], ecx
test ecx, ecx
je 0x1006c807
cmp byte [0x1010ba64], 0
mov dword [ecx + 0x30], 0
mov esi, dword [edi + 4]
je 0x1006c7d2
push dword [0x100e1b54]
push esi
call fcn.1005ab80
mov ecx, dword [ebp - 0x2d8]
cmp dword [ebp - 0x2b0], 1
jne 0x1006c803
mov eax, dword [esi + 0x340c]
mov dword [esi + 0x3418], eax
mov eax, dword [esi + 0x3410]
mov dword [esi + 0x341c], eax
mov eax, dword [esi + 0x3414]
mov dword [esi + 0x3420], eax
mov byte [ecx + 0x34], 1
mov byte [edi + 0x31], 1
mov edx, dword [ebp - 0x34]
cmp edx, 0x10
jb 0x1006c83d
mov ecx, dword [ebp - 0x48]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006c833
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1006c833
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100d2cb7
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100d283c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4