Function at 0x1008d130
Capabilities:
Resolve function by parsing pe exports
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0xf8
push esi
push edi
mov edi, dword [0x101e0c0c]
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0xec], ecx
mov dword [ebp - 0x70], edi
mov eax, dword [edi + 0x198c]
mov byte [eax + 0x7c], 1
mov esi, dword [edi + 0x198c]
mov dword [ebp - 0x40], esi
cmp byte [esi + 0x7f], 0
jne 0x1008d3e7
mov edx, dword [ebx + 0x10]
mov eax, edx
and eax, 0x100080
cmp eax, 0x100080
je 0x1008f90c
mov eax, edx
and eax, 0x440
mov dword [ebp - 0x60], eax
cmp eax, 0x440
je 0x1008f90c
mov eax, edx
mov ecx, edx
shr eax, 0xe
not al
shr ecx, 0x14
and eax, 0xffffff01
and ecx, 0xffffff01
mov dword [ebp - 0x30], eax
mov eax, edx
shr eax, 0xf
and eax, 0xffffff01
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0xa4], eax
mov eax, edx
shr eax, 0x10
not al
and eax, 0xffffff01
mov dword [ebp - 0x54], eax
mov eax, edx
shr eax, 0x12
and al, 1
jne 0x1008f90c
test cl, cl
je 0x1008d1f9
call fcn.1006e8c0
push ecx
push dword [ebp - 0xec]
mov ecx, esi
call fcn.10065a90
mov esi, dword [0x101e0c0c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0xec]
mov ecx, eax
cmp eax, 0xffffffff
jae 0x1008d236
nop dword [eax]
mov dl, byte [ecx]
test dl, dl
je 0x1008d236
cmp dl, 0x23
jne 0x1008d230
cmp byte [ecx + 1], dl
je 0x1008d236
inc ecx
cmp ecx, 0xffffffff
jb 0x1008d220
movss xmm1, dword [0x10162a14]
movss xmm0, dword [esi + 0x18ac]
movss dword [ebp - 0xe4], xmm1
cmp eax, ecx
jne 0x1008d25f
xorps xmm3, xmm3
movss dword [ebp - 0xe8], xmm3
jmp 0x1008d2a1
push ecx
push ecx
push eax
push ecx
mov ecx, dword [esi + 0x18a8]
lea eax, [ebp - 0x38]
mov dword [esp], 0xbf800000
movaps xmm2, xmm0
push eax
call fcn.10080e40
movss xmm0, dword [ebp - 0x38]
addss xmm0, dword [0x10162720]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0xe8], xmm0
movss xmm0, dword [ebp - 0x34]
cmp byte [ebp - 0x20], 0
je 0x1008d2b7
movss xmm0, dword [esi + 0x18ac]
mulss xmm0, dword [0x10162830]
movss xmm2, dword [edi + 0x1538]
lea ecx, [ebp - 0x98]
mov eax, dword [ebx + 0xc]
addss xmm2, xmm2
mov esi, dword [ebp - 0x40]
push dword [eax + 4]
movss xmm1, dword [esi + 0x14]
addss xmm2, xmm0
subss xmm1, dword [0x1016289c]
push dword [eax]
call fcn.10066430
movss xmm3, dword [esi + 0xc8]
xorps xmm2, xmm2
movss xmm1, dword [ebp - 0x98]
movaps xmm0, xmm3
movss xmm4, dword [esi + 0xcc]
addss xmm0, xmm1
addss xmm3, dword [0x10162850]
movss xmm5, dword [ebp - 0xe8]
add esp, 8
comiss xmm5, xmm2
movss dword [ebp - 0x58], xmm1
movaps xmm1, xmm4
addss xmm1, dword [ebp - 0x94]
movss dword [ebp - 0x88], xmm3
movss dword [ebp - 0x84], xmm4
movss dword [ebp - 0x80], xmm0
movss dword [ebp - 0x7c], xmm1
jbe 0x1008d359
movaps xmm2, xmm5
addss xmm2, dword [edi + 0x154c]
cmp byte [ebp - 0x20], 0
addss xmm0, xmm2
movss dword [ebp - 0xd8], xmm3
movss dword [ebp - 0xd4], xmm4
movss dword [ebp - 0xcc], xmm1
mov dword [ebp - 0x3c], esi
movss dword [ebp - 0xd0], xmm0
je 0x1008d476
mov esi, dword [ebp - 0x28]
lea eax, [ebp - 0x88]
push eax
mov edx, esi
lea ecx, [ebp - 0xd8]
call fcn.10065f40
add esp, 4
test al, al
jne 0x1008d3f2
movss xmm0, dword [ebp - 0xd0]
lea ecx, [ebp - 0x38]
subss xmm0, dword [ebp - 0xd8]
movss xmm1, dword [edi + 0x1538]
movss dword [ebp - 0x38], xmm0
movss xmm0, dword [ebp - 0xcc]
subss xmm0, dword [ebp - 0xd4]
movss dword [ebp - 0x34], xmm0
call fcn.10065e10
call fcn.1006ea10
xor al, al
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
movss xmm0, dword [ebp - 0x80]
lea edx, [ebp - 0x38]
subss xmm0, dword [ebp - 0x88]
push ecx
mov ecx, esi
movss dword [ebp - 0x38], xmm0
movss xmm0, dword [ebp - 0x7c]
subss xmm0, dword [ebp - 0x84]
movss dword [ebp - 0x34], xmm0
call fcn.10068ae0
add esp, 4
test al, al
jne 0x1008d43d
call fcn.10068920
call fcn.1006ea10
xor al, al
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov ecx, dword [0x101e0c0c]
movss xmm0, dword [ebp - 0x98]
mov eax, dword [ecx + 0x198c]
mov byte [eax + 0x7c], 1
mov esi, dword [ecx + 0x198c]
mov dword [ebp - 0x3c], esi
subss xmm0, dword [esi + 0x70]
mov eax, dword [esi + 0x138]
or dword [esi + 0x140], eax
movss dword [ebp - 0x58], xmm0
jmp 0x1008d4b8
subss xmm1, xmm4
subss xmm0, xmm3
lea ecx, [ebp - 0x38]
movss dword [ebp - 0x34], xmm1
movss xmm1, dword [edi + 0x1538]
movss dword [ebp - 0x38], xmm0
call fcn.10065e10
mov edx, dword [ebp - 0x28]
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0xd8]
call fcn.10065f40
add esp, 4
test al, al
je 0x1008d3e7
mov edx, dword [ebp - 0x28]
lea ecx, [ebp - 0x88]
call fcn.100661e0
mov byte [ebp - 4], al
test al, al
je 0x1008d4d7
mov dword [edi + 0x1c64], 1
cmp byte [ebp - 0xa4], 0
je 0x1008d598
mov esi, dword [edi + 0x18a8]
cmp dword [esi + 0x14], 0x2a
jg 0x1008d4f5
mov eax, dword [esi + 0x2c]
jmp 0x1008d514
mov eax, dword [esi + 0x1c]
mov ecx, 0xffff
movzx eax, word [eax + 0x54]
cmp ax, cx
jne 0x1008d50b
mov eax, dword [esi + 0x2c]
jmp 0x1008d514
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x28]
lea eax, [eax + ecx*8]
cmp dword [edi + 0x2bb0], 0
lea edx, [edi + 0x2b90]
mov dword [ebp - 0x10], eax
mov eax, dword [esi + 0x10]
mov dword [edx + 0x10], eax
mov eax, dword [edi + 0x18a8]
mov eax, dword [eax + 0x44]
mov dword [edx + 0x44], eax
mov eax, dword [edi + 0x18a8]
mov ecx, dword [eax + 0x30]
mov eax, dword [eax + 0x34]
mov dword [edx + 0x34], eax
mov dword [edx + 0x30], ecx
mov eax, dword [edi + 0x18a8]
mov eax, dword [eax + 0x48]
mov dword [edx + 0x48], eax
mov eax, dword [edi + 0x18a8]
mov eax, dword [eax + 0x4c]
mov dword [edx + 0x4c], eax
mov eax, dword [edi + 0x18a8]
mov eax, dword [eax + 0x38]
mov dword [edx + 0x38], eax
mov eax, dword [ebp - 0x10]
mov dword [edx + 0x2c], eax
mov eax, dword [eax + 4]
mov dword [edx + 0xc], eax
jne 0x1008f90c
cmp dword [edx], 0
jne 0x1008f90c
cmp dword [edx + 0x14], 0
jne 0x1008f90c
mov ecx, edx
call fcn.1006e2e0
cmp dword [ebp - 0x60], 0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x40]
sete al
movzx eax, al
push eax
call fcn.10066350
add esp, 4
mov byte [ebp - 0x21], al
test al, al
je 0x1008d63e
mov edx, dword [ebp - 0x40]
mov ecx, dword [edx + 0x328]
cmp ecx, dword [edx + 0x330]
jne 0x1008d63e
mov byte [ebp - 2], 1
mov byte [ebp - 0x11], 0
cmp byte [ebp - 4], 0
je 0x1008d5e8
cmp byte [edi + 0x3d0], 0
mov byte [ebp - 7], 1
jne 0x1008d5ec
mov byte [ebp - 7], 0
cmp byte [ebp - 0x20], 0
je 0x1008d650
cmp dword [edi + 0x19ac], 0
jne 0x1008d650
mov eax, dword [ebp - 0x28]
cmp dword [edi + 0x1d20], eax
jne 0x1008d650
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax + 0x1c0]
test ecx, ecx
jle 0x1008f90c
mov eax, dword [eax + 0x1c8]
xor edx, edx
push dword [eax + ecx*4 - 4]
mov ecx, str.SCROLLY
call fcn.10063440
add esp, 4
cmp dword [edi + 0x19b0], eax
jne 0x1008d650
mov cl, 1
xor eax, eax
jmp 0x1008d658
mov byte [ebp - 2], 0
test al, al
je 0x1008d5d1
mov byte [ebp - 0x11], 1
mov byte [ebp - 2], 0
jmp 0x1008d5d5
mov eax, dword [edi + 0x19ac]
xor cl, cl
mov edx, dword [ebp - 0x28]
cmp eax, edx
je 0x1008d682
cmp dword [edi + 0x1ab0], edx
je 0x1008d678
cmp dword [edi + 0x1aa4], edx
jne 0x1008d682
cmp dword [edi + 0x1ac4], 3
jne 0x1008d682
mov esi, dword [ebp - 0x28]
mov dl, 1
mov byte [ebp - 3], dl
jmp 0x1008d68e
mov esi, dword [ebp - 0x28]
xor dl, dl
mov byte [ebp - 3], dl
cmp eax, esi
je 0x1008d6a2
test byte [ebx + 0x10], 0x10
jne 0x1008d698
test dl, dl
je 0x1008d6a2
cmp byte [ebp - 0x20], 0
mov byte [ebp - 0xc], 1
je 0x1008d6a6
mov byte [ebp - 0xc], 0
cmp byte [ebp - 0x21], 0
jne 0x1008d6d2
cmp byte [ebp - 7], 0
jne 0x1008d6d2
test cl, cl
jne 0x1008d6d2
test dl, dl
jne 0x1008d6d2
mov byte [ebp - 6], dl
cmp byte [edi + 0x3d0], dl
je 0x1008d95b
mov byte [ebp - 6], 1
jmp 0x1008d95b
cmp eax, esi
je 0x1008d916
mov esi, dword [ebp - 0x2c]
mov eax, dword [edi + 0x1d4c]
mov dword [ebp - 0x6c], eax
lea ecx, [esi + 1]
nop dword [eax]
mov al, byte [esi]
inc esi
test al, al
jne 0x1008d6f0
mov edx, dword [ebx + 8]
sub esi, ecx
mov eax, dword [edi + 0x1d28]
inc edx
mov dword [ebp - 0x18], edx
cmp edx, eax
jle 0x1008d73b
test eax, eax
je 0x1008d720
cdq
sub eax, edx
mov edx, dword [ebp - 0x18]
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x1d28]
jmp 0x1008d725
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [edi + 0x1d24]
push eax
call fcn.10052b50
mov edx, dword [ebp - 0x18]
mov dword [edi + 0x1d24], edx
inc esi
mov eax, dword [edi + 0x1d34]
cmp esi, eax
jle 0x1008d77c
test eax, eax
je 0x1008d762
cdq
sub eax, edx
lea edx, [edi + 0x1d30]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x1008d76d
mov ecx, 8
lea edx, [edi + 0x1d30]
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.10074930
mov dword [edi + 0x1d30], esi
push esi
mov esi, dword [ebp - 0x2c]
push esi
push dword [edi + 0x1d38]
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [edi + 0x1d2c]
add esp, 0xc
mov ecx, dword [ebx + 8]
mov eax, esi
dec ecx
mov dword [ebp - 0x18], edx
mov esi, edx
lea ecx, [edx + ecx*2]
cmp edx, ecx
jae 0x1008d7f6
mov edi, eax
nop
cmp byte [edi], 0
je 0x1008d7ed
push 0
mov edx, edi
lea ecx, [ebp - 0x60]
call fcn.100637b0
add edi, eax
add esp, 4
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x1008d7ea
cmp eax, 0x10000
jae 0x1008d7da
mov word [esi], ax
add esi, 2
mov eax, dword [ebx + 8]
mov edx, dword [ebp - 0x18]
dec eax
lea eax, [edx + eax*2]
cmp esi, eax
jb 0x1008d7b0
jmp 0x1008d7ed
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x10], edi
mov edi, dword [ebp - 0x70]
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x2c]
xor ecx, ecx
mov word [esi], cx
sub esi, edx
mov ecx, dword [ebp - 0x28]
sar esi, 1
mov dword [edi + 0x1d4c], esi
mov dword [edi + 0x1d48], eax
mov dword [edi + 0x2b7c], 0xbe99999a
cmp dword [edi + 0x1d20], ecx
jne 0x1008d867
cmp dword [ebp - 0x6c], esi
jne 0x1008d867
mov eax, dword [edi + 0x1d58]
mov ecx, esi
cmp eax, esi
cmovl ecx, eax
mov eax, dword [edi + 0x1d5c]
cmp eax, esi
mov dword [edi + 0x1d58], ecx
mov ecx, esi
cmovl ecx, eax
mov eax, dword [edi + 0x1d60]
cmp eax, esi
mov dword [edi + 0x1d5c], ecx
mov ecx, dword [ebp - 0x20]
cmovl esi, eax
mov dword [edi + 0x1d60], esi
jmp 0x1008d8ec
mov dword [edi + 0x1d20], ecx
mov ecx, dword [ebp - 0x20]
mov al, cl
mov dword [edi + 0x1d54], 0
xor al, 1
mov dword [edi + 0x2b6e], 0x630000
mov dword [edi + 0x2b74], 0
mov dword [edi + 0x2b78], 0x3e7
mov dword [edi + 0x1d5c], 0
mov dword [edi + 0x1d60], 0
mov dword [edi + 0x1d58], 0
mov dword [edi + 0x1d64], 0x10000
mov dword [edi + 0x1d6c], 0
mov byte [edi + 0x1d68], al
test cl, cl
jne 0x1008d8ec
mov eax, dword [ebp - 0xc]
mov edx, 1
cmp byte [ebp - 2], cl
movzx eax, al
cmovne eax, edx
mov dword [ebp - 0xc], eax
test dword [ebx + 0x10], 0x2000
je 0x1008d8fc
mov byte [edi + 0x1d64], 1
test cl, cl
jne 0x1008d916
cmp byte [ebp - 0x11], cl
jne 0x1008d912
cmp byte [ebp - 7], cl
je 0x1008d916
cmp byte [edi + 0xf8], cl
je 0x1008d916
mov byte [ebp - 0xc], 1
mov esi, dword [ebp - 0x40]
mov edx, esi
mov ecx, dword [ebp - 0x28]
call fcn.10065c30
call fcn.10065ce0
mov ecx, esi
call fcn.1006df90
cmp byte [ebp - 0x20], 0
mov dword [edi + 0x19c8], 2
mov byte [ebp - 6], 0
jne 0x1008d95b
test byte [ebx + 0x10], 0x80
mov byte [ebp - 6], 0
jne 0x1008d95b
mov dword [edi + 0x19c4], 0xc
mov byte [ebp - 6], 0
mov ecx, dword [ebp - 0x28]
mov byte [ebp - 0x21], 0
mov byte [ebp - 0x11], 0
cmp dword [edi + 0x19ac], ecx
jne 0x1008dde8
cmp byte [ebp - 0x30], 0
jne 0x1008da84
cmp byte [edi + 0x19bc], 0
jne 0x1008da84
mov ecx, dword [ebx + 8]
mov eax, dword [edi + 0x1d28]
lea esi, [ecx + 1]
cmp esi, eax
jle 0x1008d9cc
test eax, eax
je 0x1008d9af
cdq
sub eax, edx
lea edx, [edi + 0x1d24]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x1008d9ba
mov ecx, 8
lea edx, [edi + 0x1d24]
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.10052b50
mov ecx, dword [ebx + 8]
mov eax, dword [ebp - 0x2c]
mov dword [edi + 0x1d24], esi
mov edx, dword [edi + 0x1d2c]
mov esi, edx
mov dword [ebp - 0x18], edx
lea ecx, [edx + ecx*2]
cmp edx, ecx
jae 0x1008da35
mov edi, eax
nop dword [eax]
cmp byte [edi], 0
je 0x1008da2c
push 0
mov edx, edi
lea ecx, [ebp - 0x60]
call fcn.100637b0
add edi, eax
add esp, 4
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x1008da29
cmp eax, 0x10000
jae 0x1008da1a
mov word [esi], ax
add esi, 2
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 8]
lea eax, [edx + ecx*2]
cmp esi, eax
jb 0x1008d9f0
jmp 0x1008da2c
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x10], edi
mov edi, dword [ebp - 0x70]
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x2c]
xor ecx, ecx
mov word [esi], cx
sub esi, edx
sar esi, 1
mov dword [edi + 0x1d48], eax
mov ecx, esi
mov eax, dword [edi + 0x1d58]
cmp eax, esi
mov dword [edi + 0x1d4c], esi
cmovl ecx, eax
mov eax, dword [edi + 0x1d5c]
cmp eax, esi
mov dword [edi + 0x1d58], ecx
mov ecx, esi
cmovl ecx, eax
mov eax, dword [edi + 0x1d60]
cmp eax, esi
mov dword [edi + 0x1d5c], ecx
cmovl esi, eax
mov dword [edi + 0x1d60], esi
mov eax, dword [ebx + 8]
mov dword [edi + 0x1d50], eax
mov eax, dword [ebx + 0x10]
mov dword [edi + 0x2b84], eax
mov dword [edi + 0x2b88], 0
mov dword [edi + 0x2b8c], 0
cmp byte [edi + 0xe8], 0
mov dword [edi + 0x2e70], 1
sete al
cmp byte [ebp - 0x20], 0
mov byte [edi + 0x19bd], al
movss xmm6, dword [edi + 0xe0]
subss xmm6, dword [ebp - 0x88]
subss xmm6, dword [edi + 0x1534]
addss xmm6, dword [edi + 0x1d54]
je 0x1008db07
mov eax, dword [ebp - 0x3c]
movss xmm2, dword [edi + 0xe4]
subss xmm2, dword [eax + 0xcc]
subss xmm2, dword [edi + 0x1538]
jmp 0x1008db17
movss xmm2, dword [edi + 0x18ac]
mulss xmm2, dword [0x101626c8]
cmp byte [ebp - 0xc], 0
mov cl, byte [edi + 0xad]
mov byte [ebp - 2], cl
jne 0x1008dcd8
mov dl, byte [ebp - 4]
test dl, dl
je 0x1008db47
mov al, byte [edi + 0x3d5]
test cl, cl
jne 0x1008dbc7
test al, al
jne 0x1008dcd8
cmp byte [edi + 0x3d0], 0
mov al, byte [edi + 0x2b81]
je 0x1008dc2b
test al, al
jne 0x1008dc2b
test dl, dl
je 0x1008dd02
lea esi, [edi + 0x1d20]
cmp byte [edi + 0x1d68], al
je 0x1008db92
push 0
mov edx, esi
lea ecx, [ebp - 0xe0]
call fcn.1008b7b0
movss xmm2, dword [ebp - 0xd4]
add esp, 4
movaps xmm1, xmm6
mov ecx, esi
call fcn.1008bad0
mov cl, byte [ebp - 2]
mov dword [edi + 0x1d58], eax
mov dword [edi + 0x1d5c], eax
mov dword [edi + 0x1d60], eax
mov byte [edi + 0x1d67], 0
mov dword [edi + 0x2b7c], 0xbe99999a
jmp 0x1008dd02
test al, al
je 0x1008db47
push 0x1000c
lea edx, [edi + 0x1d58]
lea ecx, [edi + 0x1d20]
call fcn.1008bee0
add esp, 4
mov byte [edi + 0x2b80], 1
lea edx, [edi + 0x1d58]
mov dword [edi + 0x2b7c], 0xbe99999a
lea ecx, [edi + 0x1d20]
push 0x3000d
call fcn.1008bee0
mov cl, byte [ebp - 2]
add esp, 4
mov byte [edi + 0x2b80], 1
mov dword [edi + 0x2b7c], 0xbe99999a
jmp 0x1008dd02
cmp byte [edi + 0xe8], 0
je 0x1008dd02
test al, al
jne 0x1008dd02
movss xmm0, dword [edi + 0x370]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x1008dc69
movss xmm0, dword [edi + 0x374]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x1008dd02
cmp byte [edi + 0x1d68], 0
lea esi, [edi + 0x1d20]
je 0x1008dc92
push 0
mov edx, esi
lea ecx, [ebp - 0xe0]
call fcn.1008b7b0
movss xmm2, dword [ebp - 0xd4]
add esp, 4
mov eax, dword [edi + 0x1d5c]
cmp eax, dword [edi + 0x1d60]
jne 0x1008dcac
mov eax, dword [edi + 0x1d58]
mov dword [edi + 0x1d5c], eax
movaps xmm1, xmm6
mov ecx, esi
call fcn.1008bad0
mov cl, byte [ebp - 2]
mov dword [edi + 0x1d60], eax
mov dword [edi + 0x1d58], eax
mov dword [edi + 0x2b7c], 0xbe99999a
mov byte [edi + 0x2b80], 1
jmp 0x1008dd02
mov eax, dword [edi + 0x1d4c]
mov dword [edi + 0x1d5c], 0
mov dword [edi + 0x1d60], eax
mov dword [edi + 0x1d58], eax
mov byte [edi + 0x1d67], 0
mov byte [edi + 0x2b81], 1
cmp byte [edi + 0x2b81], 0
je 0x1008dd1b
cmp byte [edi + 0xe8], 0
jne 0x1008dd1b
mov byte [edi + 0x2b81], 0
mov eax, dword [edi + 0x14f0]
lea esi, [edi + 0x14f0]
test eax, eax
jle 0x1008dde8
cmp byte [edi + 0xf8], 0
je 0x1008dd45
cmp byte [edi + 0xfa], 0
je 0x1008ddc3
test cl, cl
je 0x1008dd52
cmp byte [edi + 0xfb], 0
jne 0x1008ddc3
cmp byte [ebp - 0x30], 0
je 0x1008ddc3
cmp byte [ebp - 3], 0
jne 0x1008ddc3
xor esi, esi
cmp esi, eax
jge 0x1008f90c
mov eax, dword [edi + 0x14f8]
lea ecx, [ebp - 0x18]
mov edx, dword [ebx + 0x10]
sub esp, 8
movzx eax, word [eax + esi*2]
mov dword [ebp - 0x18], eax
call fcn.1008cfa0
add esp, 8
test al, al
je 0x1008ddb2
push dword [ebp - 0x18]
lea edx, [edi + 0x1d58]
lea ecx, [edi + 0x1d20]
call fcn.1008bee0
add esp, 4
mov byte [edi + 0x2b80], 1
mov dword [edi + 0x2b7c], 0xbe99999a
mov eax, dword [edi + 0x14f0]
inc esi
cmp esi, eax
jl 0x1008dd68
lea esi, [edi + 0x14f0]
mov ecx, dword [esi + 4]
test ecx, ecx
jns 0x1008dde2
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.10052b50
mov dword [esi], 0
mov eax, dword [ebp - 0x28]
xor cl, cl
mov byte [ebp - 1], cl
cmp dword [edi + 0x19ac], eax
jne 0x1008e7ce
cmp byte [edi + 0x19bc], cl
jne 0x1008e7ce
cmp byte [ebp - 6], cl
jne 0x1008e7ce
mov dl, byte [edi + 0xf9]
xor esi, esi
mov dh, byte [edi + 0xad]
test dl, dl
mov eax, 0x20000
mov byte [ebp - 0x45], dh
cmovne esi, eax
mov al, byte [edi + 0xf8]
test dh, dh
je 0x1008de7f
cmp byte [edi + 0xfb], cl
je 0x1008de49
test al, al
jne 0x1008de49
mov ecx, 1
jmp 0x1008de4b
xor ecx, ecx
test ecx, ecx
jne 0x1008de8c
xor ah, ah
mov byte [ebp - 5], ah
mov cl, al
test dh, dh
je 0x1008de9d
cmp byte [edi + 0xfb], 0
je 0x1008de9d
test dl, dl
je 0x1008de9d
mov cl, byte [edi + 0xf8]
test cl, cl
jne 0x1008de9d
cmp byte [edi + 0xfa], cl
jne 0x1008de9d
mov byte [ebp - 4], 1
jmp 0x1008dea9
test al, al
je 0x1008de4f
cmp byte [edi + 0xfb], 0
jne 0x1008de4f
cmp byte [edi + 0xfa], 0
jne 0x1008de4f
test dl, dl
jne 0x1008de4f
mov ah, 1
jmp 0x1008de51
mov byte [ebp - 4], 0
test dh, dh
je 0x1008df5e
cmp byte [edi + 0xfb], 0
mov al, byte [edi + 0xfa]
mov byte [ebp - 7], al
je 0x1008df65
test cl, cl
jne 0x1008df65
test al, al
jne 0x1008df65
mov byte [ebp - 0x19], 1
mov al, byte [edi + 0xf9]
mov byte [ebp - 0x1a], 0
test al, al
je 0x1008def9
test cl, cl
jne 0x1008def9
cmp byte [edi + 0xfa], cl
jne 0x1008def9
mov byte [ebp - 3], 1
cmp byte [edi + 0xfb], cl
je 0x1008defd
mov byte [ebp - 3], 0
test ah, ah
je 0x1008df18
mov eax, dword [0x101e0c0c]
mov ecx, dword [eax + 0x7c]
test ecx, ecx
js 0x1008df18
mov dl, 1
call fcn.100685a0
test al, al
jne 0x1008df35
cmp byte [ebp - 3], 0
je 0x1008df9a
mov eax, dword [0x101e0c0c]
mov ecx, dword [eax + 0x5c]
test ecx, ecx
js 0x1008df9a
mov dl, 1
call fcn.100685a0
test al, al
je 0x1008df9a
cmp byte [ebp - 0x30], 0
je 0x1008df9a
cmp byte [ebp - 0xa4], 0
jne 0x1008df9a
cmp byte [ebp - 0x20], 0
je 0x1008df58
mov eax, dword [edi + 0x1d5c]
cmp eax, dword [edi + 0x1d60]
je 0x1008df9a
mov byte [ebp - 2], 1
jmp 0x1008df9e
mov byte [ebp - 7], cl
mov byte [ebp - 4], 0
mov byte [ebp - 0x19], 0
test cl, cl
je 0x1008ded3
test dl, dl
jne 0x1008ded3
cmp byte [edi + 0xfa], dl
jne 0x1008ded3
cmp byte [edi + 0xfb], dl
jne 0x1008ded3
mov byte [ebp - 0x1a], 1
jmp 0x1008def9
mov byte [ebp - 2], 0
cmp byte [ebp - 5], 0
je 0x1008dfbb
mov eax, dword [0x101e0c0c]
mov ecx, dword [eax + 0x74]
test ecx, ecx
js 0x1008dfbb
mov dl, 1
call fcn.100685a0
test al, al
jne 0x1008dfd8
cmp byte [ebp - 0x1a], 0
je 0x1008dffb
mov eax, dword [0x101e0c0c]
mov ecx, dword [eax + 0x58]
test ecx, ecx
js 0x1008dffb
mov dl, 1
call fcn.100685a0
test al, al
je 0x1008dffb
cmp byte [ebp - 0xa4], 0
jne 0x1008dffb
cmp byte [ebp - 0x20], 0
je 0x1008dff5
mov eax, dword [edi + 0x1d5c]
cmp eax, dword [edi + 0x1d60]
je 0x1008dffb
mov byte [ebp - 0x1b], 1
jmp 0x1008dfff
mov byte [ebp - 0x1b], 0
cmp byte [ebp - 5], 0
je 0x1008e01c
mov eax, dword [0x101e0c0c]
mov ecx, dword [eax + 0x78]
test ecx, ecx
js 0x1008e01c
mov dl, 1
call fcn.100685a0
test al, al
jne 0x1008e039
cmp byte [ebp - 3], 0
je 0x1008e043
mov eax, dword [0x101e0c0c]
mov ecx, dword [eax + 0x58]
test ecx, ecx
js 0x1008e043
mov dl, 1
call fcn.100685a0
test al, al
je 0x1008e043
cmp byte [ebp - 0x30], 0
mov byte [ebp - 3], 1
jne 0x1008e047
mov byte [ebp - 3], 0
mov dl, byte [ebp - 5]
test dl, dl
je 0x1008e07d
mov eax, dword [0x101e0c0c]
mov ecx, dword [eax + 0x84]
test ecx, ecx
js 0x1008e07d
mov dl, 1
call fcn.100685a0
test al, al
je 0x1008e07a
cmp byte [ebp - 0x30], 0
je 0x1008e07a
cmp byte [ebp - 0x54], 0
je 0x1008e07a
mov byte [ebp - 0x1a], 1
jmp 0x1008e085
mov dl, byte [ebp - 5]
mov byte [ebp - 0x1a], 0
test dl, dl
je 0x1008e09f
mov eax, dword [0x101e0c0c]
mov ecx, dword [eax + 0x80]
test ecx, ecx
js 0x1008e09f
mov dl, 1
call fcn.100685a0
test al, al
jne 0x1008e0bf
cmp byte [ebp - 4], 0
je 0x1008e0cf
mov eax, dword [0x101e0c0c]
mov ecx, dword [eax + 0x84]
test ecx, ecx
js 0x1008e0cf
mov dl, 1
call fcn.100685a0
test al, al
je 0x1008e0cf
cmp byte [ebp - 0x30], 0
je 0x1008e0cf
cmp byte [ebp - 0x54], 0
mov byte [ebp - 4], 1
jne 0x1008e0d3
mov byte [ebp - 4], 0
mov eax, dword [0x101e0c0c]
mov ecx, dword [eax + 0x38]
test ecx, ecx
js 0x1008e121
mov dl, 1
call fcn.100685a0
test al, al
je 0x1008e121
cmp byte [ebp - 0x19], 0
je 0x1008e0f7
mov eax, 0x10004
jmp 0x1008e108
mov eax, 0x10000
mov ecx, 0x1000c
cmp byte [ebp - 7], 0
cmovne eax, ecx
or eax, esi
push eax
lea edx, [edi + 0x1d58]
lea ecx, [edi + 0x1d20]
call fcn.1008bee0
jmp 0x1008e7b7
mov eax, dword [0x101e0c0c]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
js 0x1008e14f
mov dl, 1
call fcn.100685a0
test al, al
je 0x1008e14f
cmp byte [ebp - 0x19], 0
je 0x1008e145
mov eax, 0x10005
jmp 0x1008e108
mov eax, 0x10001
lea ecx, [eax + 0xc]
jmp 0x1008e101
mov eax, dword [0x101e0c0c]
mov ecx, dword [eax + 0x40]
test ecx, ecx
js 0x1008e1bd
mov dl, 1
call fcn.100685a0
test al, al
je 0x1008e1bd
cmp byte [ebp - 0x20], 0
je 0x1008e1bd
cmp byte [edi + 0xf8], 0
je 0x1008e1ad
mov edx, dword [ebp - 0x3c]
xorps xmm3, xmm3
movss xmm1, dword [edx + 0x5c]
movaps xmm0, xmm1
subss xmm0, dword [edi + 0x18ac]
addss xmm1, dword [edx + 0xe4]
maxss xmm0, xmm3
subss xmm1, xmm0
movss dword [edx + 0x5c], xmm0
movss dword [edx + 0xe4], xmm1
jmp 0x1008e7cb
movzx eax, byte [ebp - 0x19]
lea eax, [eax*4 + 0x10002]
jmp 0x1008e108
mov eax, dword [0x101e0c0c]
mov ecx, dword [eax + 0x44]
test ecx, ecx
js 0x1008e251
mov dl, 1
call fcn.100685a0
test al, al
je 0x1008e251
cmp byte [ebp - 0x20], 0
je 0x1008e251
cmp byte [edi + 0xf8], 0
je 0x1008e241
mov eax, dword [0x101e0c0c]
xorps xmm3, xmm3
mov ecx, dword [ebp - 0x3c]
mov eax, dword [eax + 0x198c]
movss xmm2, dword [ecx + 0x5c]
movss xmm0, dword [eax + 0x20]
subss xmm0, dword [eax + 0x74]
movss xmm1, dword [eax + 0x30]
subss xmm1, xmm0
movaps xmm0, xmm2
addss xmm0, dword [edi + 0x18ac]
addss xmm2, dword [ecx + 0xe4]
maxss xmm1, xmm3
minss xmm1, xmm0
subss xmm2, xmm1
movss dword [ecx + 0x5c], xmm1
movss dword [ecx + 0xe4], xmm2
jmp 0x1008e7cb
movzx eax, byte [ebp - 0x19]
lea eax, [eax*4 + 0x10003]
jmp 0x1008e108
mov eax, dword [0x101e0c0c]
mov ecx, dword [eax + 0x50]
test ecx, ecx
js 0x1008e285
mov dl, 1
call fcn.100685a0
test al, al
je 0x1008e285
mov eax, esi
or esi, 0x10004
or eax, 0x10006
cmp byte [edi + 0xf8], 0
cmovne esi, eax
push esi
jmp 0x1008e10b
mov eax, dword [0x101e0c0c]
mov ecx, dword [eax + 0x54]
test ecx, ecx
js 0x1008e2b9
mov dl, 1
call fcn.100685a0
test al, al
je 0x1008e2b9
mov eax, esi
or esi, 0x10005
or eax, 0x10007
cmp byte [edi + 0xf8], 0
cmovne esi, eax
push esi
jmp 0x1008e10b
mov eax, dword [0x101e0c0c]
mov ecx, dword [eax + 0x5c]
test ecx, ecx
js 0x1008e2e2
mov dl, 1
call fcn.100685a0
test al, al
je 0x1008e2e2
cmp byte [ebp - 0x30], 0
je 0x1008e2e2
or esi, 0x10008
push esi
jmp 0x1008e10b
mov eax, dword [0x101e0c0c]
mov ecx, dword [eax + 0x60]
test ecx, ecx
js 0x1008e375
mov dl, 1
call fcn.100685a0
test al, al
je 0x1008e375
cmp byte [ebp - 0x30], 0
je 0x1008e375
mov eax, dword [edi + 0x1d5c]
cmp eax, dword [edi + 0x1d60]
jne 0x1008e369
cmp byte [ebp - 7], 0
je 0x1008e31e
push 0x3000c
jmp 0x1008e344
cmp byte [ebp - 0x45], 0
je 0x1008e369
cmp byte [edi + 0xfb], 0
je 0x1008e369
cmp byte [edi + 0xfa], 0
jne 0x1008e369
cmp byte [edi + 0xf8], 0
jne 0x1008e369
push 0x30004
lea edx, [edi + 0x1d58]
lea ecx, [edi + 0x1d20]
call fcn.1008bee0
mov dword [edi + 0x2b7c], 0xbe99999a
add esp, 4
mov byte [edi + 0x2b80], 1
or esi, 0x10009
push esi
jmp 0x1008e10b
mov eax, dword [0x101e0c0c]
mov ecx, dword [eax + 0x68]
test ecx, ecx
js 0x1008e3e9
mov dl, 1
call fcn.100685a0
test al, al
je 0x1008e3e9
mov edx, dword [ebx + 0x10]
mov eax, edx
shr eax, 0xb
and al, 1
cmp byte [ebp - 0x20], 0
je 0x1008e3aa
mov cl, byte [edi + 0xf8]
test al, al
je 0x1008e3ba
test cl, cl
jne 0x1008e3be
mov byte [ebp - 6], 1
mov byte [ebp - 0x11], 1
mov cl, byte [ebp - 1]
jmp 0x1008e7d1
test cl, cl
jne 0x1008e3aa
cmp byte [ebp - 0x30], 0
je 0x1008e3b2
mov dword [ebp - 0x18], 0xa
sub esp, 8
lea ecx, [ebp - 0x18]
call fcn.1008cfa0
add esp, 8
test al, al
je 0x1008e7cb
push dword [ebp - 0x18]
jmp 0x1008e10b
test dword [ebx + 0x10], 0x400
je 0x1008e436
mov eax, dword [0x101e0c0c]
mov ecx, dword [eax + 0x34]
test ecx, ecx
js 0x1008e436
mov dl, 1
call fcn.100685a0
test al, al
je 0x1008e436
cmp byte [edi + 0xf8], 0
jne 0x1008e436
cmp byte [edi + 0xf9], 0
jne 0x1008e436
cmp byte [edi + 0xfa], 0
jne 0x1008e436
cmp byte [ebp - 0x30], 0
je 0x1008e436
mov edx, dword [ebx + 0x10]
mov dword [ebp - 0x18], 9
jmp 0x1008e3cb
mov eax, dword [0x101e0c0c]
mov ecx, dword [eax + 0x6c]
test ecx, ecx
js 0x1008e457
mov dl, 1
call fcn.100685a0
test al, al
je 0x1008e457
mov cl, 1
mov byte [ebp - 6], cl
jmp 0x1008e7ce
mov al, byte [ebp - 0x1a]
test al, al
jne 0x1008e788
cmp byte [ebp - 4], al
jne 0x1008e788
cmp byte [ebp - 5], al
je 0x1008e4af
mov eax, dword [0x101e0c0c]
mov ecx, dword [eax + 0x70]
test ecx, ecx
js 0x1008e4af
mov dl, 1
call fcn.100685a0
test al, al
je 0x1008e4af
mov eax, dword [edi + 0x1d4c]
mov dword [edi + 0x1d5c], 0
mov dword [edi + 0x1d60], eax
mov dword [edi + 0x1d58], eax
mov byte [edi + 0x1d67], 0
jmp 0x1008e7c4
mov al, byte [ebp - 2]
test al, al
jne 0x1008e65f
cmp byte [ebp - 0x1b], al
jne 0x1008e65f
cmp byte [ebp - 3], al
je 0x1008e7cb
mov eax, dword [0x101e0c0c]
mov ecx, dword [eax + 0xc8]
test ecx, ecx
je 0x1008e4f2
push dword [eax + 0xd0]
call ecx
mov esi, eax
add esp, 4
test esi, esi
je 0x1008e7cb
jmp 0x1008e4f7
mov esi, 0x1014ffeb
mov ecx, esi
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1008e500
mov eax, dword [0x101e0c0c]
sub ecx, edx
test eax, eax
je 0x1008e518
inc dword [eax + 0x36c]
push dword [0x101e0c08]
lea eax, [ecx*2 + 2]
push eax
call fcn.10062c40
mov ecx, eax
add esp, 8
xor eax, eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0xc], eax
cmp byte [esi], al
je 0x1008e591
xor edi, edi
nop
push 0
mov edx, esi
lea ecx, [ebp - 0x10]
call fcn.100637b0
add esi, eax
add esp, 4
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x1008e585
cmp eax, 0x10000
jae 0x1008e580
mov edx, dword [ebx + 0x10]
lea ecx, [ebp - 0x10]
sub esp, 8
call fcn.1008cfa0
add esp, 8
test al, al
je 0x1008e580
mov ecx, dword [ebp - 0x4c]
mov ax, word [ebp - 0x10]
mov word [ecx + edi*2], ax
inc edi
cmp byte [esi], 0
jne 0x1008e540
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0xc], edi
mov edi, dword [ebp - 0x70]
mov eax, dword [ebp - 0xc]
xor edx, edx
mov word [ecx + eax*2], dx
test eax, eax
jle 0x1008e638
mov edx, dword [edi + 0x1d60]
lea esi, [edi + 0x1d58]
mov ecx, dword [esi + 4]
mov eax, dword [edi + 0x1d4c]
cmp ecx, edx
je 0x1008e5d0
cmp ecx, eax
jle 0x1008e5c1
mov dword [esi + 4], eax
mov ecx, eax
cmp edx, eax
jle 0x1008e5ca
mov dword [esi + 8], eax
mov edx, eax
cmp ecx, edx
jne 0x1008e5d0
mov dword [esi], ecx
cmp dword [esi], eax
jle 0x1008e5d6
mov dword [esi], eax
mov edx, esi
lea ecx, [edi + 0x1d20]
call fcn.1008be50
push dword [ebp - 0xc]
mov edx, dword [esi]
lea ecx, [edi + 0x1d20]
push dword [ebp - 0x4c]
call fcn.1008b990
add esp, 8
test al, al
je 0x1008e61a
push dword [ebp - 0xc]
mov edx, dword [esi]
lea ecx, [esi + 0x18]
push 0
call fcn.1008cc50
mov eax, dword [ebp - 0xc]
add esp, 8
add dword [esi], eax
mov byte [esi + 0xf], 0
jmp 0x1008e62e
movzx eax, word [esi + 0xe16]
test ax, ax
je 0x1008e62e
dec eax
mov word [esi + 0xe16], ax
mov ecx, dword [ebp - 0x4c]
mov byte [edi + 0x2b80], 1
test ecx, ecx
je 0x1008e64b
mov eax, dword [0x101e0c0c]
test eax, eax
je 0x1008e64b
dec dword [eax + 0x36c]
push dword [0x101e0c08]
push ecx
call fcn.10062c60
add esp, 8
jmp 0x1008e7cb
cmp dword [edi + 0xcc], 0
je 0x1008e720
mov esi, dword [edi + 0x1d60]
mov eax, dword [edi + 0x1d5c]
cmp eax, esi
je 0x1008e686
mov ecx, esi
cmovl esi, eax
cmovge ecx, eax
jmp 0x1008e68e
mov ecx, dword [edi + 0x1d4c]
xor esi, esi
mov eax, dword [edi + 0x1d40]
mov dword [ebp - 0x54], ecx
sub ecx, esi
lea edx, [ecx*4 + 1]
mov dword [ebp - 0x18], edx
cmp edx, eax
jle 0x1008e6d8
test eax, eax
je 0x1008e6bd
cdq
sub eax, edx
mov edx, dword [ebp - 0x18]
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x1d40]
jmp 0x1008e6c2
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [edi + 0x1d3c]
push eax
call fcn.10074930
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x54]
mov dword [edi + 0x1d3c], edx
mov ecx, dword [edi + 0x1d2c]
lea eax, [ecx + eax*2]
push eax
lea eax, [ecx + esi*2]
mov ecx, dword [edi + 0x1d44]
push eax
call fcn.10063950
mov eax, dword [0x101e0c0c]
add esp, 8
mov ecx, dword [eax + 0xcc]
test ecx, ecx
je 0x1008e71d
push dword [edi + 0x1d44]
push dword [eax + 0xd0]
call ecx
add esp, 8
mov al, byte [ebp - 2]
test al, al
je 0x1008e7cb
mov eax, dword [edi + 0x1d5c]
cmp eax, dword [edi + 0x1d60]
jne 0x1008e759
mov eax, dword [edi + 0x1d4c]
mov dword [edi + 0x1d5c], 0
mov dword [edi + 0x1d60], eax
mov dword [edi + 0x1d58], eax
mov byte [edi + 0x1d67], 0
mov byte [edi + 0x2b80], 1
mov eax, dword [edi + 0x1d5c]
cmp eax, dword [edi + 0x1d60]
je 0x1008e7cb
lea edx, [edi + 0x1d58]
lea ecx, [edi + 0x1d20]
call fcn.1008be50
mov byte [edi + 0x1d67], 0
jmp 0x1008e7cb
movzx eax, al
lea edx, [edi + 0x1d58]
xor eax, 1
lea ecx, [edi + 0x1d20]
add eax, 0x1000a
push eax
call fcn.1008bee0
mov eax, dword [edi + 0x1d58]
mov dword [edi + 0x1d60], eax
mov dword [edi + 0x1d5c], eax
mov dword [edi + 0x2b7c], 0xbe99999a
add esp, 4
mov byte [edi + 0x2b80], 1
mov cl, byte [ebp - 1]
mov edx, dword [ebx + 0x10]
mov eax, dword [edi + 0x19ac]
cmp eax, dword [ebp - 0x28]
jne 0x1008e978
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
test cl, cl
je 0x1008e84f
cmp byte [ebp - 0x30], 0
je 0x1008e839
mov esi, dword [edi + 0x1d38]
mov ecx, esi
mov eax, dword [ebp - 0x2c]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1008e823
test dl, dl
je 0x1008e81f
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1008e823
add eax, 2
add ecx, 2
test dl, dl
jne 0x1008e803
xor eax, eax
jmp 0x1008e828
sbb eax, eax
or eax, 1
test eax, eax
je 0x1008e839
mov eax, dword [edi + 0x1d30]
dec eax
mov dword [ebp - 0x10], esi
mov dword [ebp - 0xc], eax
cmp byte [ebp - 0x11], 0
je 0x1008e915
mov edx, dword [ebx + 0x10]
test dl, 0x20
je 0x1008e915
mov eax, dword [ebp - 0x30]
test al, al
je 0x1008e8c6
mov eax, dword [edi + 0x1d24]
lea ecx, [edi + 0x1d3c]
lea esi, [eax*4 + 1]
mov eax, dword [ecx + 4]
cmp esi, eax
jle 0x1008e8a6
test eax, eax
je 0x1008e886
cdq
sub eax, edx
lea edx, [edi + 0x1d3c]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x1008e891
mov ecx, 8
lea edx, [edi + 0x1d3c]
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.10074930
lea ecx, [edi + 0x1d3c]
mov dword [ecx], esi
mov edx, esi
mov ecx, dword [edi + 0x1d44]
push 0
push dword [edi + 0x1d2c]
call fcn.10063950
mov edx, dword [ebx + 0x10]
add esp, 8
mov eax, dword [ebp - 0x30]
test edx, 0x1c0
jne 0x1008f90c
test al, al
je 0x1008e915
mov esi, dword [edi + 0x1d44]
mov eax, esi
mov ecx, dword [ebp - 0x2c]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1008e901
test dl, dl
je 0x1008e8fd
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1008e901
add eax, 2
add ecx, 2
test dl, dl
jne 0x1008e8e1
xor eax, eax
jmp 0x1008e906
sbb eax, eax
or eax, 1
test eax, eax
je 0x1008e915
mov eax, dword [edi + 0x1d48]
mov dword [ebp - 0x10], esi
jmp 0x1008e918
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x10]
test ecx, ecx
je 0x1008e954
test eax, eax
js 0x1008f90c
mov esi, dword [ebx + 8]
inc eax
cmp eax, esi
cmovl esi, eax
cmp esi, 1
jb 0x1008e950
jbe 0x1008e948
lea eax, [esi - 1]
push eax
push ecx
push dword [ebp - 0x2c]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
add esp, 0xc
mov eax, dword [ebp - 0x2c]
mov byte [esi + eax - 1], 0
mov byte [ebp - 0x21], 1
mov dword [edi + 0x2b84], 0
mov dword [edi + 0x2b88], 0
mov dword [edi + 0x2b8c], 0
mov eax, dword [edi + 0x19ac]
cmp byte [ebp - 6], 0
je 0x1008e98e
cmp eax, dword [ebp - 0x28]
jne 0x1008e9a2
call fcn.10065db0
mov eax, dword [edi + 0x19ac]
cmp eax, dword [ebp - 0x28]
jne 0x1008e9a2
cmp byte [ebp - 0x30], 0
je 0x1008e9a2
mov eax, dword [edi + 0x1d44]
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0x20]
movss xmm0, dword [0x101627c4]
movss xmm3, dword [0x10162728]
movss dword [ebp - 0x60], xmm0
test dl, dl
jne 0x1008ebc2
mov esi, dword [ebp - 0x40]
lea eax, [ebp - 0x80]
push ecx
mov dword [esp], 0x3f800000
push 0xf
push ecx
mov ecx, dword [esi + 0x274]
mov dword [esp], 0
push 0xff0c0c0c
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.1007d6f0
movss xmm3, dword [0x10162728]
lea eax, [ebp - 0x38]
movss xmm0, dword [ebp - 0x80]
subss xmm0, xmm3
push ecx
mov dword [esp], 0x3f800000
push 0xf
push ecx
movss dword [ebp - 0x38], xmm0
movss xmm0, dword [ebp - 0x7c]
mov ecx, dword [esi + 0x274]
subss xmm0, xmm3
mov dword [esp], 0
push 0xff323232
push eax
lea eax, [ebp - 0x68]
movss dword [ebp - 0x34], xmm0
movss xmm0, dword [ebp - 0x88]
addss xmm0, xmm3
push eax
movss dword [ebp - 0x68], xmm0
movss xmm0, dword [ebp - 0x84]
addss xmm0, xmm3
movss dword [ebp - 0x64], xmm0
call fcn.1007d6f0
movss xmm1, dword [0x101627c4]
lea eax, [ebp - 0x38]
movss xmm0, dword [ebp - 0x80]
subss xmm0, xmm1
push ecx
mov dword [esp], 0x3f800000
push 0xf
push ecx
movss dword [ebp - 0x38], xmm0
movss xmm0, dword [ebp - 0x7c]
mov ecx, dword [esi + 0x274]
subss xmm0, xmm1
mov dword [esp], 0
push 0xff0c0c0c
push eax
lea eax, [ebp - 0x68]
movss dword [ebp - 0x34], xmm0
movss xmm0, dword [ebp - 0x88]
addss xmm0, xmm1
push eax
movss dword [ebp - 0x68], xmm0
movss xmm0, dword [ebp - 0x84]
addss xmm0, xmm1
movss dword [ebp - 0x64], xmm0
call fcn.1007d6f0
movss xmm1, dword [0x10162800]
lea eax, [ebp - 0x38]
movss xmm0, dword [ebp - 0x80]
subss xmm0, xmm1
push 0xf
push ecx
mov dword [esp], 0
push 0xff191919
movss dword [ebp - 0x38], xmm0
movss xmm0, dword [ebp - 0x7c]
subss xmm0, xmm1
movss dword [ebp - 0x34], xmm0
movss xmm0, dword [ebp - 0x88]
addss xmm0, xmm1
movss dword [ebp - 0x68], xmm0
movss xmm0, dword [ebp - 0x84]
addss xmm0, xmm1
movss dword [ebp - 0x64], xmm0
mov ecx, dword [esi + 0x274]
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.1007d7d0
movss xmm5, dword [ebp - 0x84]
movss xmm0, dword [ebp - 0x94]
movss xmm4, dword [ebp - 0x88]
addss xmm0, xmm5
movss xmm2, dword [ebp - 0x58]
movaps xmm1, xmm4
movss xmm3, dword [0x10162728]
addss xmm1, xmm2
mov edx, dword [ebp - 0x20]
mov esi, dword [ebp - 0x3c]
movss dword [ebp - 0x44], xmm0
movss dword [ebp - 0xa8], xmm0
movaps xmm0, xmm4
addss xmm0, dword [edi + 0x1534]
movss dword [ebp - 0xb4], xmm4
movss dword [ebp - 0xb0], xmm5
movss dword [ebp - 0x40], xmm1
movss dword [ebp - 0xac], xmm1
movss dword [ebp - 0xd0], xmm0
movaps xmm0, xmm5
addss xmm0, dword [edi + 0x1538]
movss dword [ebp - 0xcc], xmm0
jmp 0x1008ec2c
movss xmm0, dword [ebp - 0x88]
movss xmm2, dword [ebp - 0x58]
movss xmm1, dword [ebp - 0x84]
mov esi, dword [ebp - 0x3c]
movss dword [ebp - 0xb4], xmm0
addss xmm0, xmm2
movss dword [ebp - 0xb0], xmm1
movss dword [ebp - 0xac], xmm0
movss dword [ebp - 0x40], xmm0
movss xmm0, dword [ebp - 0x94]
addss xmm0, xmm1
movss dword [ebp - 0xa8], xmm0
mov eax, dword [esi + 0xc8]
mov ecx, dword [esi + 0xcc]
movss dword [ebp - 0x44], xmm0
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov ecx, dword [ebp - 0x28]
lea eax, [ebp - 0xd0]
xorps xmm7, xmm7
movss xmm0, dword [eax]
movss dword [ebp - 0x38], xmm0
movss xmm0, dword [eax + 4]
mov dword [ebp - 0x50], eax
lea eax, [edi + 0x1d20]
movss dword [ebp - 0x4c], xmm0
movss dword [ebp - 0x34], xmm0
xorps xmm0, xmm0
movss dword [ebp - 0x54], xmm0
movss dword [ebp - 0x18], xmm0
cmp dword [eax], ecx
jne 0x1008eca6
test dl, dl
je 0x1008eca6
mov edx, dword [esi + 0x1c0]
test edx, edx
jle 0x1008f90c
mov eax, dword [ebp - 0x3c]
mov ecx, str.SCROLLY
mov esi, dword [edi + 0x19ac]
mov eax, dword [eax + 0x1c8]
push dword [eax + edx*4 - 4]
xor edx, edx
call fcn.10063440
add esp, 4
cmp esi, eax
jne 0x1008eca6
mov al, 1
jmp 0x1008ecae
mov esi, dword [edi + 0x19ac]
xor al, al
cmp esi, dword [ebp - 0x28]
je 0x1008ee3d
test al, al
jne 0x1008ee3d
mov esi, dword [ebp - 0x2c]
cmp byte [ebp - 0x20], al
je 0x1008ed16
mov al, byte [esi]
lea edx, [esi + 1]
xor ecx, ecx
mov byte [ebp - 0x1b], al
test al, al
je 0x1008eceb
cmp byte [ebp - 0x1b], 0xa
lea eax, [ecx + 1]
cmovne eax, ecx
mov ecx, eax
mov al, byte [edx]
inc edx
mov byte [ebp - 0x1b], al
test al, al
jne 0x1008ecd5
mov al, byte [edx - 1]
dec edx
cmp al, 0xa
je 0x1008ecf8
cmp al, 0xd
je 0x1008ecf8
inc ecx
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [edi + 0x18ac]
movss dword [ebp - 0x18], xmm0
movaps xmm0, xmm2
movss dword [ebp - 0x54], xmm0
jmp 0x1008ed38
mov ecx, esi
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1008ed20
sub ecx, edx
lea edx, [esi + ecx]
cmp ecx, 0x200000
jge 0x1008f828
mov eax, dword [0x101e0c0c]
movups xmm1, xmmword [eax + 0x15a8]
comiss xmm7, xmm1
movaps xmm0, xmm1
movaps xmmword [ebp - 0xe0], xmm1
shufps xmm0, xmm1, 0xff
mulss xmm0, dword [eax + 0x1500]
jbe 0x1008ed64
movaps xmm1, xmm7
jmp 0x1008ed68
minss xmm1, xmm3
movss xmm2, dword [0x10162960]
movss xmm4, dword [0x101626c8]
mulss xmm1, xmm2
addss xmm1, xmm4
cvttss2si ecx, xmm1
movss xmm1, dword [ebp - 0xdc]
comiss xmm7, xmm1
jbe 0x1008ed96
movaps xmm1, xmm7
jmp 0x1008ed9a
minss xmm1, xmm3
mulss xmm1, xmm2
addss xmm1, xmm4
cvttss2si eax, xmm1
movss xmm1, dword [ebp - 0xd8]
shl eax, 8
or ecx, eax
comiss xmm7, xmm1
jbe 0x1008edbd
movaps xmm1, xmm7
jmp 0x1008edc1
minss xmm1, xmm3
mulss xmm1, xmm2
addss xmm1, xmm4
cvttss2si eax, xmm1
shl eax, 0x10
or ecx, eax
comiss xmm7, xmm0
jbe 0x1008eddc
movaps xmm0, xmm7
jmp 0x1008ede0
minss xmm0, xmm3
cmp byte [ebp - 0x20], 0
lea eax, [ebp - 0xb4]
mulss xmm0, xmm2
mov dword [ebp - 0xe4], 0
cmovne eax, dword [ebp - 0xe4]
push eax
movss xmm2, dword [edi + 0x18ac]
addss xmm0, xmm4
push ecx
mov dword [esp], 0
push edx
push esi
cvttss2si eax, xmm0
shl eax, 0x18
or eax, ecx
push eax
lea eax, [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x3c]
push dword [edi + 0x18a8]
mov ecx, dword [eax + 0x274]
call fcn.1007dcd0
jmp 0x1008f76e
mov ecx, dword [edi + 0x1d2c]
or esi, 0xffffffff
mov eax, dword [edi + 0x1d58]
xorps xmm6, xmm6
movss xmm0, dword [edi + 0x18]
xorps xmm5, xmm5
addss xmm0, dword [edi + 0x2b7c]
mov edx, dword [edi + 0x1d5c]
lea eax, [ecx + eax*2]
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0xc], eax
mov ecx, 1
mov eax, dword [edi + 0x1d60]
movss dword [edi + 0x2b7c], xmm0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x74], 0xfffffc19
cmp edx, eax
je 0x1008eea7
mov ecx, dword [ebp - 0x78]
cmovl eax, edx
mov dword [ebp - 0x74], esi
lea eax, [ecx + eax*2]
mov ecx, 2
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x20]
movzx eax, al
add ecx, eax
xor eax, eax
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x78]
mov edx, eax
movzx eax, word [eax]
test ax, ax
je 0x1008ef0e
mov esi, eax
or edi, 0xffffffff
cmp si, 0xa
jne 0x1008eef7
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp edi, 0xffffffff
jne 0x1008eee4
cmp edx, dword [ebp - 0xc]
jb 0x1008eee4
dec ecx
mov edi, eax
test ecx, ecx
jle 0x1008ef05
cmp dword [ebp - 0x74], 0xffffffff
jne 0x1008eef7
cmp edx, dword [ebp - 0x10]
jb 0x1008eef7
dec ecx
mov dword [ebp - 0x74], eax
test ecx, ecx
jle 0x1008ef05
movzx eax, word [edx + 2]
add edx, 2
mov esi, eax
test ax, ax
jne 0x1008eec6
mov dword [ebp - 0x6c], edi
mov edi, dword [ebp - 0x70]
mov esi, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x5c]
mov edx, dword [ebp - 0xc]
inc eax
cmp esi, 0xffffffff
mov dword [ebp - 0x5c], eax
mov ecx, eax
cmovne ecx, esi
mov esi, dword [ebp - 0x78]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x74]
cmp ecx, 0xffffffff
cmove ecx, eax
mov dword [ebp - 0x74], ecx
mov ecx, edx
cmp edx, esi
jbe 0x1008ef46
cmp word [ecx - 2], 0xa
je 0x1008ef46
add ecx, 0xfffffffe
cmp ecx, esi
ja 0x1008ef38
mov eax, dword [0x101e0c0c]
movaps xmm4, xmm7
movss dword [ebp - 0x6c], xmm4
movaps xmm1, xmm7
mov esi, dword [eax + 0x18a8]
movss xmm3, dword [eax + 0x18ac]
divss xmm3, dword [esi + 0x10]
cmp ecx, edx
jae 0x1008efc1
mov edi, dword [ebp - 0xc]
movzx eax, word [ecx]
add ecx, 2
mov edx, eax
cmp eax, 0xa
jne 0x1008ef86
maxss xmm4, xmm1
movaps xmm1, xmm7
jmp 0x1008efa8
cmp edx, 0xd
je 0x1008efa8
mov edx, eax
cmp edx, dword [esi]
jge 0x1008ef9b
mov eax, dword [esi + 8]
movss xmm0, dword [eax + edx*4]
jmp 0x1008efa0
movss xmm0, dword [esi + 0xc]
mulss xmm0, xmm3
addss xmm1, xmm0
cmp ecx, edi
jb 0x1008ef70
comiss xmm1, xmm4
mov edi, dword [ebp - 0x70]
movss dword [ebp - 0x6c], xmm4
jbe 0x1008efc1
movaps xmm4, xmm1
movss dword [ebp - 0x6c], xmm1
cmp dword [ebp - 0x74], 0
movd xmm7, dword [ebp - 0x64]
movss xmm2, dword [edi + 0x18ac]
cvtdq2ps xmm7, xmm7
mulss xmm7, xmm2
movss dword [ebp - 0xc], xmm7
jl 0x1008f06a
mov edx, dword [ebp - 0x10]
mov ecx, edx
cmp edx, dword [ebp - 0x78]
jbe 0x1008f004
mov edi, dword [ebp - 0x78]
cmp word [ecx - 2], 0xa
lea eax, [ecx - 2]
je 0x1008f001
mov ecx, eax
cmp ecx, edi
ja 0x1008eff1
mov edi, dword [ebp - 0x70]
xorps xmm0, xmm0
xorps xmm5, xmm5
xorps xmm1, xmm1
cmp ecx, edx
jae 0x1008f05e
mov edi, dword [ebp - 0x10]
movzx eax, word [ecx]
add ecx, 2
mov edx, eax
cmp eax, 0xa
jne 0x1008f02a
maxss xmm5, xmm1
movaps xmm1, xmm0
jmp 0x1008f04f
cmp edx, 0xd
je 0x1008f04f
mov edx, eax
cmp edx, dword [esi]
jge 0x1008f03f
mov eax, dword [esi + 8]
movss xmm0, dword [eax + edx*4]
jmp 0x1008f044
movss xmm0, dword [esi + 0xc]
mulss xmm0, xmm3
addss xmm1, xmm0
xorps xmm0, xmm0
cmp ecx, edi
jb 0x1008f014
comiss xmm1, xmm5
mov edi, dword [ebp - 0x70]
jbe 0x1008f05e
movaps xmm5, xmm1
movd xmm6, dword [ebp - 0x74]
cvtdq2ps xmm6, xmm6
mulss xmm6, xmm2
mov ecx, dword [ebp - 0x20]
movss xmm3, dword [ebp - 0x58]
test cl, cl
je 0x1008f091
mov eax, dword [ebp - 0x5c]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm2
movss dword [ebp - 0x18], xmm0
movaps xmm0, xmm3
movss dword [ebp - 0x54], xmm0
cmp byte [edi + 0x2b80], 0
je 0x1008f181
test dword [ebx + 0x10], 0x1000
jne 0x1008f104
movss xmm2, dword [edi + 0x1d54]
movaps xmm1, xmm3
comiss xmm2, xmm4
mulss xmm1, dword [0x10162684]
movaps xmm0, xmm4
jbe 0x1008f0e2
subss xmm0, xmm1
xorps xmm1, xmm1
maxss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x1d54], xmm0
jmp 0x1008f111
subss xmm0, xmm3
comiss xmm0, xmm2
jb 0x1008f10e
addss xmm1, xmm0
cvttss2si eax, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x1d54], xmm0
jmp 0x1008f10e
mov dword [edi + 0x1d54], 0
xorps xmm1, xmm1
test cl, cl
je 0x1008f181
mov eax, dword [ebp - 0x3c]
movaps xmm0, xmm7
subss xmm0, dword [edi + 0x18ac]
movss xmm2, dword [eax + 0x5c]
comiss xmm2, xmm0
jbe 0x1008f133
maxss xmm0, xmm1
jmp 0x1008f142
movaps xmm0, xmm7
subss xmm0, dword [ebp - 0x94]
maxss xmm0, xmm2
subss xmm2, xmm0
movss dword [eax + 0x5c], xmm0
addss xmm2, dword [eax + 0xcc]
movss dword [eax + 0xcc], xmm2
movss xmm3, dword [ebp - 0xa8]
movss xmm0, dword [ebp - 0xac]
movss dword [ebp - 0x4c], xmm2
movss dword [ebp - 0x34], xmm2
movss dword [ebp - 0x44], xmm3
movss dword [ebp - 0x40], xmm0
jmp 0x1008f18b
movss xmm2, dword [ebp - 0x4c]
movss xmm3, dword [ebp - 0x44]
movss xmm7, dword [edi + 0x1d54]
mov ecx, dword [edi + 0x1d60]
mov edx, dword [edi + 0x1d5c]
mov byte [edi + 0x2b80], 0
movss dword [ebp - 0x5c], xmm7
cmp edx, ecx
je 0x1008f3f6
mov esi, dword [ebp - 0x78]
mov eax, ecx
cmovl eax, edx
cmovge ecx, edx
cmp byte [ebp - 0x20], 0
lea esi, [esi + eax*2]
mov eax, dword [ebp - 0x78]
lea ecx, [eax + ecx*2]
mov dword [ebp - 0x10], ecx
je 0x1008f1e0
xorps xmm0, xmm0
movss dword [ebp - 0xe4], xmm0
movss dword [ebp - 0x60], xmm0
mov edx, dword [ebp - 0x50]
addss xmm6, xmm2
movss xmm4, dword [edx]
movss dword [ebp - 0x58], xmm6
addss xmm4, xmm5
subss xmm4, xmm7
cmp esi, ecx
jae 0x1008f3f6
movss xmm5, dword [edi + 0x18ac]
movaps xmm1, xmm5
nop dword [eax + eax]
movaps xmm0, xmm3
addss xmm0, xmm1
comiss xmm6, xmm0
ja 0x1008f3f6
movss xmm0, dword [ebp - 0xb0]
comiss xmm0, xmm6
jbe 0x1008f24d
cmp esi, ecx
jae 0x1008f3d2
movzx eax, word [esi]
add esi, 2
cmp eax, 0xa
je 0x1008f3d2
cmp esi, ecx
jb 0x1008f235
jmp 0x1008f3f6
mov eax, dword [0x101e0c0c]
xorps xmm0, xmm0
xorps xmm2, xmm2
xorps xmm1, xmm1
mov edx, dword [eax + 0x18a8]
movss xmm3, dword [eax + 0x18ac]
divss xmm3, dword [edx + 0x10]
cmp esi, ecx
jae 0x1008f2a9
movzx eax, word [esi]
add esi, 2
mov ecx, eax
cmp eax, 0xa
je 0x1008f2ca
cmp ecx, 0xd
je 0x1008f29f
cmp ecx, dword [edx]
jge 0x1008f292
mov eax, dword [edx + 8]
movss xmm0, dword [eax + ecx*4]
jmp 0x1008f297
movss xmm0, dword [edx + 0xc]
mulss xmm0, xmm3
addss xmm1, xmm0
mov ecx, dword [ebp - 0x10]
cmp esi, ecx
jb 0x1008f272
xorps xmm0, xmm0
maxss xmm2, xmm1
comiss xmm0, xmm2
jb 0x1008f2f4
mov eax, dword [edi + 0x18a8]
cmp dword [eax], 0x20
jle 0x1008f2dc
mov eax, dword [eax + 8]
movss xmm0, dword [eax + 0x80]
jmp 0x1008f2e1
mov ecx, dword [ebp - 0x10]
movaps xmm2, xmm1
xorps xmm0, xmm0
xorps xmm1, xmm1
maxss xmm2, xmm0
jmp 0x1008f2a9
movss xmm0, dword [eax + 0xc]
mulss xmm0, dword [0x101626c8]
cvttss2si eax, xmm0
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movss xmm0, dword [ebp - 0xe4]
addss xmm2, xmm4
movss xmm3, dword [ebp - 0xb0]
subss xmm0, xmm5
movss xmm5, dword [ebp - 0x44]
movaps xmm1, xmm6
addss xmm1, dword [ebp - 0x60]
maxss xmm4, dword [ebp - 0xb4]
minss xmm2, dword [ebp - 0x40]
addss xmm0, xmm6
movss dword [ebp - 0xa0], xmm4
movss dword [ebp - 0x98], xmm2
maxss xmm3, xmm0
movaps xmm0, xmm5
minss xmm0, xmm1
movss dword [ebp - 0x9c], xmm3
comiss xmm0, dword [ebp - 0xb0]
movss dword [ebp - 0x94], xmm0
jbe 0x1008f3ca
comiss xmm5, xmm3
jbe 0x1008f3ca
comiss xmm2, dword [ebp - 0xb4]
jbe 0x1008f3ca
movss xmm2, dword [ebp - 0x40]
comiss xmm2, xmm4
jbe 0x1008f3ca
push 0xf
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x98]
push 0xff4005b2
push eax
lea eax, [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax + 0x274]
call fcn.1007d7d0
movss xmm3, dword [ebp - 0xa8]
movss xmm2, dword [ebp - 0xac]
movss xmm6, dword [ebp - 0x58]
movss xmm7, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x10]
movss dword [ebp - 0x44], xmm3
movss dword [ebp - 0x40], xmm2
jmp 0x1008f3cf
movss xmm3, dword [ebp - 0x44]
mov edx, dword [ebp - 0x50]
movss xmm5, dword [edi + 0x18ac]
movss xmm4, dword [edx]
addss xmm6, xmm5
subss xmm4, xmm7
movaps xmm1, xmm5
movss dword [ebp - 0x58], xmm6
cmp esi, ecx
jb 0x1008f210
cmp byte [ebp - 0x20], 0
mov edx, dword [edi + 0x1d48]
movss xmm2, dword [0x10162960]
jne 0x1008f416
cmp edx, 0x200000
jge 0x1008f559
mov eax, dword [0x101e0c0c]
xorps xmm4, xmm4
movss xmm3, dword [0x10162728]
movups xmm0, xmmword [eax + 0x15a8]
comiss xmm4, xmm0
movaps xmm1, xmm0
movaps xmmword [ebp - 0xa0], xmm0
shufps xmm1, xmm0, 0xff
mulss xmm1, dword [eax + 0x1500]
jbe 0x1008f44d
xorps xmm0, xmm0
jmp 0x1008f451
minss xmm0, xmm3
movss xmm5, dword [0x101626c8]
mulss xmm0, xmm2
addss xmm0, xmm5
cvttss2si ecx, xmm0
movss xmm0, dword [ebp - 0x9c]
comiss xmm4, xmm0
jbe 0x1008f477
xorps xmm0, xmm0
jmp 0x1008f47b
minss xmm0, xmm3
mulss xmm0, xmm2
addss xmm0, xmm5
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x98]
shl eax, 8
or ecx, eax
comiss xmm4, xmm0
jbe 0x1008f49e
xorps xmm0, xmm0
jmp 0x1008f4a2
minss xmm0, xmm3
mulss xmm0, xmm2
addss xmm0, xmm5
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm4, xmm1
jbe 0x1008f4bd
xorps xmm1, xmm1
jmp 0x1008f4c1
minss xmm1, xmm3
cmp byte [ebp - 0x20], 0
lea eax, [ebp - 0xb4]
mov esi, dword [ebp - 0x50]
mulss xmm1, xmm2
mov dword [ebp - 0x64], 0
cmovne eax, dword [ebp - 0x64]
movss xmm0, dword [esi]
push eax
mov eax, dword [ebp - 0x2c]
addss xmm1, xmm5
push ecx
movss xmm2, dword [edi + 0x18ac]
subss xmm0, xmm7
add eax, edx
mov dword [esp], 0
push eax
push dword [ebp - 0x2c]
cvttss2si eax, xmm1
movss dword [ebp - 0x98], xmm0
movss xmm0, dword [ebp - 0x4c]
shl eax, 0x18
or eax, ecx
movss dword [ebp - 0x94], xmm0
push eax
lea eax, [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x3c]
push dword [edi + 0x18a8]
mov ecx, dword [eax + 0x274]
call fcn.1007dcd0
movss xmm0, dword [ebp - 0xa8]
movss dword [ebp - 0x44], xmm0
movss xmm0, dword [ebp - 0xac]
movss dword [ebp - 0x40], xmm0
jmp 0x1008f55c
mov esi, dword [ebp - 0x50]
cmp byte [edi + 0xae], 0
je 0x1008f59d
movss xmm0, dword [edi + 0x2b7c]
xorps xmm3, xmm3
comiss xmm3, xmm0
movss dword [ebp - 0x64], xmm0
jae 0x1008f59d
fld dword [ebp - 0x64]
fld dword [0x10162740]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIfmod
movss xmm0, dword [0x101626f8]
fstp dword [ebp - 0x64]
comiss xmm0, dword [ebp - 0x64]
jae 0x1008f59d
xor al, al
jmp 0x1008f59f
mov al, 1
movss xmm2, dword [ebp - 0xc]
movss xmm4, dword [esi]
movss xmm7, dword [0x101626c8]
movss xmm5, dword [0x10162728]
addss xmm2, dword [ebp - 0x4c]
addss xmm4, dword [ebp - 0x6c]
movss dword [ebp - 0xc], xmm2
movaps xmm0, xmm2
movaps xmm3, xmm2
subss xmm4, dword [ebp - 0x5c]
subss xmm0, dword [edi + 0x18ac]
subss xmm3, dword [0x10162770]
movss dword [ebp - 0xa0], xmm4
movaps xmm1, xmm4
addss xmm0, xmm7
movss dword [ebp - 0x94], xmm3
addss xmm1, xmm5
movss dword [ebp - 0x9c], xmm0
movss dword [ebp - 0x98], xmm1
test al, al
je 0x1008f749
comiss xmm3, dword [ebp - 0xb0]
jbe 0x1008f749
movss xmm2, dword [ebp - 0x44]
comiss xmm2, xmm0
jbe 0x1008f744
comiss xmm1, dword [ebp - 0xb4]
jbe 0x1008f744
movss xmm0, dword [ebp - 0x40]
comiss xmm0, xmm4
jbe 0x1008f744
mov eax, dword [0x101e0c0c]
xorps xmm6, xmm6
movups xmm1, xmmword [eax + 0x15a8]
comiss xmm6, xmm1
movaps xmm0, xmm1
movaps xmmword [ebp - 0xe0], xmm1
shufps xmm0, xmm1, 0xff
mulss xmm0, dword [eax + 0x1500]
jbe 0x1008f67a
xorps xmm1, xmm1
jmp 0x1008f67e
minss xmm1, xmm5
movss xmm2, dword [0x10162960]
mulss xmm1, xmm2
addss xmm1, xmm7
cvttss2si ecx, xmm1
movss xmm1, dword [ebp - 0xdc]
comiss xmm6, xmm1
jbe 0x1008f6a4
xorps xmm1, xmm1
jmp 0x1008f6a8
minss xmm1, xmm5
mulss xmm1, xmm2
addss xmm1, xmm7
cvttss2si eax, xmm1
movss xmm1, dword [ebp - 0xd8]
shl eax, 8
or ecx, eax
comiss xmm6, xmm1
jbe 0x1008f6cb
xorps xmm1, xmm1
jmp 0x1008f6cf
minss xmm1, xmm5
mulss xmm1, xmm2
addss xmm1, xmm7
cvttss2si eax, xmm1
shl eax, 0x10
or ecx, eax
comiss xmm6, xmm0
jbe 0x1008f6ea
xorps xmm0, xmm0
jmp 0x1008f6ee
minss xmm0, xmm5
mulss xmm0, xmm2
push ecx
mov dword [esp], 0x3f800000
movss dword [ebp - 0xd0], xmm4
addss xmm0, xmm7
movss dword [ebp - 0xcc], xmm3
cvttss2si eax, xmm0
shl eax, 0x18
or eax, ecx
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax + 0x274]
call fcn.1007d5d0
movss xmm4, dword [ebp - 0xa0]
movss xmm5, dword [0x10162728]
movss xmm2, dword [ebp - 0xc]
cmp byte [ebp - 0x30], 0
mov esi, dword [ebp - 0x2c]
je 0x1008f76e
subss xmm2, dword [edi + 0x18ac]
subss xmm4, xmm5
movss dword [edi + 0x2c2c], xmm2
movss dword [edi + 0x2c28], xmm4
cmp byte [ebp - 0x20], 0
je 0x1008f828
mov ecx, dword [0x101e0c0c]
movss xmm2, dword [edi + 0x18ac]
mov eax, dword [ecx + 0x198c]
mov byte [eax + 0x7c], 1
mov eax, dword [ecx + 0x198c]
cmp byte [eax + 0x7f], 0
jne 0x1008f81e
movss xmm3, dword [ebp - 0x18]
lea ecx, [ebp - 0xd0]
movss xmm1, dword [eax + 0xc8]
addss xmm3, xmm2
movss xmm0, dword [eax + 0xcc]
movss xmm4, dword [ebp - 0x54]
addss xmm4, xmm1
movss dword [ebp - 0xa0], xmm1
movss dword [ebp - 0x9c], xmm0
addss xmm3, xmm0
movss dword [ebp - 0x98], xmm4
subss xmm4, xmm1
xorps xmm1, xmm1
movss dword [ebp - 0x94], xmm3
subss xmm3, xmm0
movss dword [ebp - 0xd0], xmm4
movss dword [ebp - 0xcc], xmm3
call fcn.10065e10
push 0
xor edx, edx
lea ecx, [ebp - 0xa0]
call fcn.10065f40
add esp, 4
call fcn.10068920
call fcn.1006ea10
mov eax, dword [ebp - 0xa4]
test al, al
je 0x1008f83d
call fcn.1006e390
mov eax, dword [ebp - 0xa4]
cmp byte [edi + 0x2c64], 0
je 0x1008f859
test al, al
jne 0x1008f859
push 0
mov edx, esi
lea ecx, [ebp - 0x38]
call fcn.10073410
add esp, 4
movss xmm0, dword [ebp - 0xe8]
comiss xmm0, dword [0x101625e4]
jbe 0x1008f8bd
lea ecx, [esi + 1]
nop dword [eax]
mov al, byte [esi]
inc esi
test al, al
jne 0x1008f870
sub esi, ecx
jne 0x1008f8bd
movss xmm0, dword [ebp - 0x88]
xor edx, edx
addss xmm0, dword [edi + 0x154c]
mov ecx, dword [ebp - 0xec]
movss dword [ebp - 0x38], xmm0
movss xmm0, dword [ebp - 0x84]
addss xmm0, dword [edi + 0x1538]
movss dword [ebp - 0x34], xmm0
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push 1
call fcn.10063ed0
add esp, 0xc
mov dl, byte [ebp - 0x21]
test dl, dl
je 0x1008f8f5
mov eax, dword [0x101e0c0c]
mov ecx, dword [eax + 0x19ac]
cmp ecx, dword [ebp - 0x28]
je 0x1008f8e1
test ecx, ecx
je 0x1008f8e1
cmp byte [eax + 0x1c68], 0
je 0x1008f90c
mov byte [eax + 0x19bf], 1
mov eax, dword [eax + 0x198c]
or dword [eax + 0x110], 4
test byte [ebx + 0x10], 0x20
movzx ecx, byte [ebp - 0x11]
movzx eax, dl
pop edi
cmovne eax, ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3