Function at 0x10027000
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x134
push ebx
push esi
mov esi, dword [0x100604b8]
mov ebx, esi
push edi
mov dword [ebp - 0xc8], ecx
mov dword [ebp - 0xc], ebx
mov eax, dword [ebx + 0x199c]
mov byte [eax + 0x7c], 1
mov edi, dword [ebx + 0x199c]
mov dword [ebp - 0x2c], edi
cmp byte [edi + 0x7f], 0
jne 0x1002732a
mov ecx, dword [ebp + 0x14]
mov eax, ecx
shr eax, 0xe
mov edx, ecx
and eax, 0xffffff01
shr edx, 0x14
mov dword [ebp - 0x30], eax
and edx, 0xffffff01
mov eax, ecx
mov dword [ebp - 0x1c], edx
shr eax, 0xf
and eax, 0xffffff01
mov dword [ebp - 0x88], eax
mov eax, ecx
shr eax, 0x10
not al
and eax, 0xffffff01
mov dword [ebp - 0x5c], eax
mov eax, ecx
shr eax, 0x12
and eax, 0xffffff01
mov dword [ebp - 0x58], eax
test dl, dl
je 0x10027093
call fcn.1000db60
mov esi, dword [0x100604b8]
mov ecx, dword [edi + 0x1c4]
xor edx, edx
mov eax, dword [edi + 0x1cc]
push dword [eax + ecx*4 - 4]
mov ecx, dword [ebp - 0xc8]
call fcn.100025e0
add esp, 4
mov dword [ebp - 0x10], eax
cmp dword [esi + 0x19bc], eax
jne 0x100270c4
mov dword [esi + 0x19c4], eax
cmp dword [esi + 0x19c0], eax
jne 0x100270d3
mov byte [esi + 0x19d0], 1
mov edx, dword [ebp - 0xc8]
mov eax, edx
cmp edx, 0xffffffff
jae 0x100270f6
mov cl, byte [eax]
test cl, cl
je 0x100270f6
cmp cl, 0x23
jne 0x100270f0
cmp byte [eax + 1], cl
je 0x100270f6
inc eax
cmp eax, 0xffffffff
jb 0x100270e0
movss xmm0, dword [0x10038c90]
movss xmm4, dword [esi + 0x18bc]
movss dword [ebp - 0xd0], xmm0
cmp edx, eax
jne 0x1002711f
xorps xmm0, xmm0
movss dword [ebp - 0xc4], xmm0
jmp 0x1002716c
movss xmm3, dword [0x10038c84]
movaps xmm2, xmm4
push ecx
push eax
push edx
push ecx
mov ecx, dword [esi + 0x18b8]
lea eax, [ebp - 0x54]
mov dword [esp], 0xbf800000
push eax
call fcn.1001ee10
movss xmm0, dword [ebp - 0x54]
addss xmm0, dword [0x10038bd0]
movss xmm4, dword [ebp - 0x50]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0xc4], xmm0
xorps xmm0, xmm0
cmp byte [ebp - 0x1c], 0
je 0x10027182
movss xmm4, dword [esi + 0x18bc]
mulss xmm4, dword [0x10038c08]
mov esi, dword [esi + 0x199c]
movss xmm3, dword [esi + 0x170]
comiss xmm0, xmm3
jbe 0x10027200
movss xmm2, dword [esi + 0xc8]
movss xmm1, dword [esi + 0x218]
mov edi, dword [esi + 0x1c0]
subss xmm2, dword [esi + 0xc]
subss xmm1, dword [esi + 0xc]
test edi, edi
je 0x100271e9
mov edx, dword [edi + 0xc]
movss xmm1, dword [edi + 0x18]
subss xmm1, dword [edi + 0x14]
lea eax, [edx + 1]
test eax, eax
cmovns edx, eax
mov eax, dword [edi + 0x34]
lea ecx, [edx*8]
sub ecx, edx
mulss xmm1, dword [eax + ecx*4]
addss xmm1, dword [edi + 0x14]
subss xmm1, dword [esi + 0x3c]
mov edi, dword [ebp - 0x2c]
subss xmm1, xmm2
addss xmm1, xmm3
movss xmm3, dword [0x10038bd4]
maxss xmm3, xmm1
mov eax, dword [ebp + 0x10]
lea ecx, [ebp - 0x70]
movss xmm0, dword [ebx + 0x1548]
movaps xmm2, xmm0
addss xmm2, xmm0
push dword [eax + 4]
push dword [eax]
cvttss2si eax, xmm3
addss xmm2, xmm4
movd xmm1, eax
cvtdq2ps xmm1, xmm1
call fcn.100057d0
movss xmm3, dword [edi + 0xc8]
xorps xmm5, xmm5
movss xmm1, dword [ebp - 0x70]
movaps xmm0, xmm3
movss xmm4, dword [edi + 0xcc]
addss xmm0, xmm1
movss xmm2, dword [ebp - 0xc4]
add esp, 8
comiss xmm2, xmm5
movss dword [ebp - 0x80], xmm1
movss xmm1, dword [ebp - 0x6c]
addss xmm1, xmm4
movss dword [ebp - 0x98], xmm3
movss dword [ebp - 0x94], xmm4
movss dword [ebp - 0x90], xmm0
movss dword [ebp - 0x8c], xmm1
jbe 0x10027295
addss xmm2, dword [ebx + 0x155c]
jmp 0x10027298
xorps xmm2, xmm2
cmp byte [ebp - 0x1c], 0
addss xmm0, xmm2
addss xmm1, xmm5
movss dword [ebp - 0xa8], xmm3
movss dword [ebp - 0xa4], xmm4
mov dword [ebp - 0x3c], edi
movss dword [ebp - 0xa0], xmm0
movss dword [ebp - 0x9c], xmm1
je 0x100273b8
mov esi, dword [ebp - 0x10]
lea eax, [ebp - 0x98]
push eax
mov edx, esi
lea ecx, [ebp - 0xa8]
call fcn.10005310
add esp, 4
test al, al
jne 0x10027333
movss xmm0, dword [ebp - 0xa0]
lea ecx, [ebp - 0x54]
subss xmm0, dword [ebp - 0xa8]
movss xmm1, dword [ebx + 0x1548]
movss dword [ebp - 0x54], xmm0
movss xmm0, dword [ebp - 0x9c]
subss xmm0, dword [ebp - 0xa4]
movss dword [ebp - 0x50], xmm0
call fcn.100051b0
call fcn.1000dc90
xor al, al
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movss xmm0, dword [ebp - 0x90]
lea edx, [ebp - 0x54]
subss xmm0, dword [ebp - 0x98]
push ecx
mov ecx, esi
movss dword [ebp - 0x54], xmm0
movss xmm0, dword [ebp - 0x8c]
subss xmm0, dword [ebp - 0x94]
movss dword [ebp - 0x50], xmm0
call fcn.10008120
add esp, 4
test al, al
jne 0x10027382
call fcn.10007f90
call fcn.1000dc90
xor al, al
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x100604b8]
movss xmm0, dword [ebp - 0x70]
mov eax, dword [ecx + 0x199c]
mov byte [eax + 0x7c], 1
mov ecx, dword [ecx + 0x199c]
mov dword [ebp - 0x3c], ecx
subss xmm0, dword [ecx + 0x70]
mov eax, dword [ecx + 0x134]
or dword [ecx + 0x13c], eax
movss dword [ebp - 0x80], xmm0
jmp 0x100273fc
subss xmm1, xmm4
subss xmm0, xmm3
lea ecx, [ebp - 0x54]
movss dword [ebp - 0x50], xmm1
movss xmm1, dword [ebx + 0x1548]
movss dword [ebp - 0x54], xmm0
call fcn.100051b0
mov esi, dword [ebp - 0x10]
lea eax, [ebp - 0x98]
push eax
mov edx, esi
lea ecx, [ebp - 0xa8]
call fcn.10005310
add esp, 4
test al, al
je 0x1002732a
mov edx, esi
lea ecx, [ebp - 0x98]
call fcn.10005540
mov byte [ebp - 0x12], al
test al, al
je 0x1002741a
mov dword [ebx + 0x1d04], 1
lea eax, [ebx + 0x1dc4]
xor ecx, ecx
cmp dword [eax], esi
mov ebx, eax
mov edx, esi
cmovne ebx, ecx
mov ecx, edi
mov dword [ebp - 0x84], ebx
call fcn.100056b0
mov edx, dword [ebp - 0xc]
mov byte [ebp - 0x25], al
test al, al
je 0x100274a3
cmp dword [edx + 0x1bb8], edi
jne 0x100274a3
mov ecx, dword [edx + 0x1bc0]
cmp ecx, dword [edi + 0x164]
jne 0x100274a3
mov byte [ebp - 0x11], 1
mov byte [ebp - 0x14], 0
cmp byte [ebp - 0x12], 0
je 0x10027473
cmp byte [edx + 0x3d8], 0
mov byte [ebp - 5], 1
jne 0x10027477
mov byte [ebp - 5], 0
mov esi, dword [edx + 0x19bc]
mov eax, dword [ebp - 0x10]
cmp esi, eax
je 0x100274b5
cmp dword [edx + 0x1ac0], eax
je 0x1002749d
cmp dword [edx + 0x1ab4], eax
jne 0x100274b5
cmp dword [edx + 0x1ad4], 3
jne 0x100274b5
mov byte [ebp - 3], 1
jmp 0x100274b9
mov byte [ebp - 0x11], 0
test al, al
je 0x1002745c
mov byte [ebp - 0x14], 1
mov byte [ebp - 0x11], 0
jmp 0x10027460
mov byte [ebp - 3], 0
mov eax, dword [ebp - 0x1c]
test al, al
je 0x100274fe
test ebx, ebx
je 0x100274fe
test esi, esi
jne 0x100274fe
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov ecx, dword [eax + 0x1c4]
mov eax, dword [eax + 0x1cc]
push dword [eax + ecx*4 - 4]
mov ecx, str.SCROLLY
call fcn.100025e0
mov ecx, dword [ebp - 0xc]
add esp, 4
cmp dword [ecx + 0x19c0], eax
jne 0x100274fb
mov byte [ebp - 4], 1
jmp 0x1002750e
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0
test al, al
je 0x10027538
mov byte [ebp - 4], 0
test ebx, ebx
je 0x10027538
mov eax, dword [ebp - 0x3c]
mov ecx, str.SCROLLY
mov edx, dword [eax + 0x1c4]
mov eax, dword [eax + 0x1cc]
push dword [eax + edx*4 - 4]
xor edx, edx
call fcn.100025e0
add esp, 4
cmp esi, eax
jne 0x10027538
mov al, 1
jmp 0x1002753a
xor al, al
mov edx, dword [ebp - 0x10]
mov cl, byte [ebp - 3]
mov byte [ebp - 1], al
mov byte [ebp - 0x34], 0
cmp esi, edx
je 0x1002755f
test byte [ebp + 0x14], 0x10
jne 0x10027555
test cl, cl
je 0x1002755f
cmp byte [ebp - 0x1c], 0
mov byte [ebp - 0x24], 1
je 0x10027563
mov byte [ebp - 0x24], 0
cmp byte [ebp - 0x25], 0
mov dword [ebp - 0x40], 0x20
mov dword [ebp - 0x64], 1
jne 0x1002760f
cmp byte [ebp - 5], 0
jne 0x1002760f
cmp byte [ebp - 4], 0
jne 0x1002760f
test cl, cl
jne 0x1002760f
mov byte [ebp - 4], cl
test al, al
jne 0x10027613
mov byte [ebp - 0x13], al
mov esi, edx
mov eax, dword [ebp - 0xc]
cmp dword [eax + 0x19bc], esi
je 0x100277eb
cmp byte [ebp - 4], 0
je 0x100277eb
mov edx, edi
mov ecx, esi
call fcn.10005040
call fcn.100050f0
mov ecx, edi
call fcn.1000d290
mov edi, dword [ebp - 0xc]
mov eax, dword [ebp + 0x14]
mov dword [edi + 0x19d8], 2
test eax, 0x440
je 0x100275ee
mov dword [edi + 0x19d8], 0x20002
cmp byte [ebp - 0x1c], 0
jne 0x100277ed
test al, al
js 0x100277ed
mov dword [edi + 0x19d4], 0xc
jmp 0x100277ed
mov byte [ebp - 4], 1
mov byte [ebp - 0x13], 1
mov dword [ebp - 0x84], ebx
cmp esi, edx
je 0x1002759d
mov ebx, dword [ebp - 0xc]
mov ecx, dword [ebp + 8]
add ebx, 0x1dc4
mov dword [ebp - 0x84], ebx
mov dword [ebx + 0xe60], 0xbe99999a
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10027644
mov edi, dword [ebx + 0x28]
lea eax, [ebx + 0x24]
sub ecx, edx
lea esi, [ecx + 1]
cmp esi, edi
jle 0x10027683
test edi, edi
je 0x1002766b
mov eax, edi
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
add ecx, edi
jmp 0x10027670
mov ecx, 8
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
lea ecx, [ebx + 0x24]
push eax
call fcn.10013230
lea eax, [ebx + 0x24]
push esi
push dword [ebp + 8]
mov dword [eax], esi
push dword [ebx + 0x2c]
call sub.VCRUNTIME140.dll_memcpy
mov esi, dword [ebx + 0x10]
add esp, 0xc
mov dword [ebp - 0x20], 0
cmp esi, 0x21
jge 0x100276cc
test esi, esi
je 0x100276b4
mov eax, esi
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
add ecx, esi
jmp 0x100276b9
mov ecx, 8
mov eax, 0x21
cmp ecx, eax
cmovg eax, ecx
lea ecx, [ebx + 0xc]
push eax
call fcn.10013320
mov dword [ebx + 0xc], 0x21
mov ecx, dword [ebx + 0x1c]
test ecx, ecx
jns 0x100276f3
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [ebx + 0x18]
call fcn.10013230
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x20]
mov edx, dword [ebp - 0x40]
push eax
push ecx
mov dword [ebx + 0x18], 0
mov ecx, dword [ebx + 0x14]
push esi
mov byte [ebx + 0x30], 0
call fcn.10002a10
mov ecx, dword [ebp - 0x20]
add esp, 0xc
sub ecx, esi
mov edx, eax
mov esi, dword [ebp - 0x10]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
cmp dword [ebx], esi
jne 0x1002774d
cmp dword [ebx + 0x3c], edx
mov ecx, edx
cmovl ecx, dword [ebx + 0x3c]
cmp dword [ebx + 0x40], edx
mov dword [ebx + 0x3c], ecx
mov ecx, edx
cmovl ecx, dword [ebx + 0x40]
cmp dword [ebx + 0x44], edx
mov dword [ebx + 0x40], ecx
cmovl edx, dword [ebx + 0x44]
mov dword [ebx + 0x44], edx
jmp 0x100277b6
mov ecx, dword [ebp - 0x1c]
mov al, cl
xor al, 1
mov dword [ebx], esi
mov dword [ebx + 0x38], 0
mov dword [ebx + 0xe52], 0x630000
mov dword [ebx + 0xe58], 0
mov dword [ebx + 0xe5c], 0x3e7
mov dword [ebx + 0x40], 0
mov dword [ebx + 0x44], 0
mov dword [ebx + 0x3c], 0
mov dword [ebx + 0x48], 0x10000
mov dword [ebx + 0x50], 0
mov byte [ebx + 0x4c], al
test cl, cl
jne 0x100277b9
mov ecx, dword [ebp - 0x24]
cmp byte [ebp - 0x11], 0
movzx ecx, cl
cmovne ecx, dword [ebp - 0x64]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x1c]
test dword [ebp + 0x14], 0x2000
je 0x100277c6
mov byte [ebx + 0x48], 1
test cl, cl
jne 0x100277e3
cmp byte [ebp - 0x14], cl
jne 0x100277df
cmp byte [ebp - 5], cl
je 0x100277e3
mov eax, dword [ebp - 0xc]
cmp byte [eax + 0xf8], cl
je 0x100277e3
mov byte [ebp - 0x24], 1
mov edi, dword [ebp - 0x2c]
jmp 0x1002759f
mov edi, eax
mov eax, dword [edi + 0x19bc]
cmp eax, esi
jne 0x10027880
test ebx, ebx
jne 0x10027860
mov edx, dword [0x100604b8]
mov ecx, dword [edx + 0x19bc]
test ecx, ecx
setne al
mov byte [edx + 0x19cc], al
test ecx, ecx
je 0x10027827
mov dword [edx + 0x19c8], ebx
mov word [edx + 0x19ce], bx
mov dword [edx + 0x19bc], 0
mov dword [edx + 0x19d4], 0
mov dword [edx + 0x19d8], 0
mov byte [edx + 0x19cd], 0
mov dword [edx + 0x19e4], 0
mov eax, dword [edi + 0x19bc]
cmp eax, esi
jne 0x10027880
cmp byte [edi + 0x3d8], 0
je 0x10027880
cmp byte [ebp - 0x13], 0
jne 0x10027880
mov ecx, dword [ebp - 0x34]
cmp byte [ebp - 4], 0
movzx ecx, cl
cmove ecx, dword [ebp - 0x64]
mov dword [ebp - 0x34], ecx
cmp byte [ebp - 0x30], 0
je 0x10027943
test ebx, ebx
je 0x10027943
cmp eax, esi
je 0x100278a0
cmp byte [ebp - 1], 0
jne 0x100278a0
xor cl, cl
jmp 0x100278a2
mov cl, 1
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
je 0x100278ae
test cl, cl
jne 0x100278b6
test cl, cl
je 0x10027943
mov esi, dword [ebx + 0x10]
mov dword [ebp - 0x20], 0
cmp esi, 0x21
jge 0x100278ee
test esi, esi
je 0x100278d6
mov eax, esi
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
add ecx, esi
jmp 0x100278db
mov ecx, 8
mov eax, 0x21
cmp ecx, eax
cmovg eax, ecx
lea ecx, [ebx + 0xc]
push eax
call fcn.10013320
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x20]
push eax
push ecx
mov dword [ebx + 0xc], 0x21
mov edx, 0x21
mov ecx, dword [ebx + 0x14]
push edi
call fcn.10002a10
mov ecx, dword [ebp - 0x20]
mov esi, eax
sub ecx, edi
mov dword [ebx + 4], esi
mov edi, dword [ebp - 0xc]
add esp, 0xc
cmp dword [ebx + 0x3c], esi
mov edx, esi
mov dword [ebx + 8], ecx
mov ecx, esi
cmovl edx, dword [ebx + 0x3c]
cmp dword [ebx + 0x40], esi
mov dword [ebx + 0x3c], edx
cmovl ecx, dword [ebx + 0x40]
cmp dword [ebx + 0x44], esi
mov dword [ebx + 0x40], ecx
cmovl esi, dword [ebx + 0x44]
mov dword [ebx + 0x44], esi
mov esi, dword [ebp - 0x10]
mov ecx, dword [edi + 0x19bc]
cmp ecx, esi
je 0x1002795b
test ebx, ebx
je 0x10027957
cmp byte [ebp - 1], 0
jne 0x1002795b
xor dl, dl
jmp 0x1002795d
mov dl, 1
mov byte [ebp - 0x11], dl
test ebx, ebx
je 0x10027976
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
je 0x10027976
test dl, dl
je 0x10027976
mov byte [ebp - 5], 1
jmp 0x10027985
mov byte [ebp - 5], 0
test dl, dl
jne 0x10027985
mov byte [ebp - 5], dl
cmp ecx, esi
jne 0x10027999
cmp byte [ebp - 0x30], 0
jne 0x10027999
test ebx, ebx
je 0x10027999
cmp byte [ebx + 0x30], 0
mov byte [ebp - 0x25], 1
jne 0x1002799d
mov byte [ebp - 0x25], 0
cmp byte [ebp - 0x88], 0
je 0x10027a43
mov esi, dword [edi + 0x18b8]
cmp dword [esi + 0x14], 0x2a
jg 0x100279bb
mov edi, dword [esi + 0x2c]
jmp 0x100279da
mov eax, dword [esi + 0x1c]
mov ecx, 0xffff
movzx eax, word [eax + 0x54]
cmp ax, cx
jne 0x100279d1
mov edi, dword [esi + 0x2c]
jmp 0x100279da
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x28]
lea edi, [eax + ecx*8]
mov eax, dword [esi + 0x10]
mov esi, dword [ebp - 0xc]
mov edx, dword [ebp - 0xc]
add edx, 0x2c38
mov dword [edx + 0x10], eax
mov eax, dword [esi + 0x18b8]
mov eax, dword [eax + 0x44]
mov dword [edx + 0x44], eax
mov eax, dword [esi + 0x18b8]
mov ecx, dword [eax + 0x30]
mov eax, dword [eax + 0x34]
mov dword [edx + 0x30], ecx
mov ecx, edx
mov dword [edx + 0x34], eax
mov eax, dword [esi + 0x18b8]
mov eax, dword [eax + 0x48]
mov dword [edx + 0x48], eax
mov eax, dword [esi + 0x18b8]
mov eax, dword [eax + 0x4c]
mov dword [edx + 0x4c], eax
mov eax, dword [esi + 0x18b8]
mov eax, dword [eax + 0x38]
mov dword [edx + 0x38], eax
mov dword [edx + 0x2c], edi
mov eax, dword [edi + 4]
mov dword [edx + 0xc], eax
call fcn.1000d4b0
mov edi, esi
mov esi, dword [ebp - 0x10]
mov dword [ebp - 0x38], 0
cmp dword [edi + 0x19bc], esi
jne 0x10027d54
mov eax, dword [ebx + 8]
mov dword [ebx + 0x34], 0x20
mov dword [ebx + 0xe6c], 0
mov dword [ebx + 0xe70], 0
mov dword [ebp - 0x38], eax
mov eax, dword [ebp + 0x14]
mov dword [ebx + 0xe68], eax
cmp byte [edi + 0xe8], 0
mov dword [edi + 0x2f28], 1
sete al
cmp byte [ebp - 0x1c], 0
mov byte [edi + 0x19cd], al
movss xmm7, dword [edi + 0xe0]
subss xmm7, dword [ebp - 0x98]
subss xmm7, dword [edi + 0x1544]
addss xmm7, dword [ebx + 0x38]
je 0x10027ada
mov eax, dword [ebp - 0x3c]
movss xmm2, dword [edi + 0xe4]
subss xmm2, dword [eax + 0xcc]
subss xmm2, dword [edi + 0x1548]
jmp 0x10027aea
movss xmm2, dword [edi + 0x18bc]
mulss xmm2, dword [0x10038ba8]
cmp byte [ebp - 0x24], 0
mov cl, byte [edi + 0xad]
mov byte [ebp - 4], cl
jne 0x10027c61
mov dl, byte [ebp - 0x12]
test dl, dl
je 0x10027b16
mov al, byte [edi + 0x3dd]
test cl, cl
jne 0x10027b81
test al, al
jne 0x10027c61
cmp byte [edi + 0x3d8], 0
mov al, byte [ebx + 0xe65]
je 0x10027bd3
test al, al
jne 0x10027bd3
test dl, dl
je 0x10027c7c
cmp byte [ebx + 0x4c], al
je 0x10027b58
push 0
mov edx, ebx
lea ecx, [ebp - 0xb0]
call fcn.10025630
movss xmm2, dword [ebp - 0xa4]
add esp, 4
movaps xmm1, xmm7
mov ecx, ebx
call fcn.100258e0
mov cl, byte [ebp - 4]
mov dword [ebx + 0x3c], eax
mov dword [ebx + 0x40], eax
mov dword [ebx + 0x44], eax
mov byte [ebx + 0x4b], 0
mov dword [ebx + 0xe60], 0xbe99999a
jmp 0x10027c7c
test al, al
je 0x10027b16
push 0x1000c
lea edx, [ebx + 0x3c]
mov ecx, ebx
call fcn.10025d20
add esp, 4
mov byte [ebx + 0xe64], 1
lea edx, [ebx + 0x3c]
mov dword [ebx + 0xe60], 0xbe99999a
mov ecx, ebx
push 0x3000d
call fcn.10025d20
mov cl, byte [ebp - 4]
add esp, 4
mov byte [ebx + 0xe64], 1
mov dword [ebx + 0xe60], 0xbe99999a
jmp 0x10027c7c
cmp byte [edi + 0xe8], 0
je 0x10027c7c
test al, al
jne 0x10027c7c
movss xmm0, dword [edi + 0x374]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x10027c0d
movss xmm0, dword [edi + 0x378]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x10027c7c
cmp byte [ebx + 0x4c], 0
je 0x10027c2d
push 0
mov edx, ebx
lea ecx, [ebp - 0xb0]
call fcn.10025630
movss xmm2, dword [ebp - 0xa4]
add esp, 4
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
jne 0x10027c3b
mov eax, dword [ebx + 0x3c]
mov dword [ebx + 0x40], eax
movaps xmm1, xmm7
mov ecx, ebx
call fcn.100258e0
mov cl, byte [ebp - 4]
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x3c], eax
mov dword [ebx + 0xe60], 0xbe99999a
mov byte [ebx + 0xe64], 1
jmp 0x10027c7c
mov eax, dword [ebx + 4]
mov dword [ebx + 0x40], 0
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x3c], eax
mov byte [ebx + 0x4b], 0
mov byte [ebx + 0xe65], 1
cmp byte [ebx + 0xe65], 0
je 0x10027c95
cmp byte [edi + 0xe8], 0
jne 0x10027c95
mov byte [ebx + 0xe65], 0
cmp dword [edi + 0x1500], 0
jle 0x10027d51
mov eax, dword [ebp - 0xc]
cmp byte [eax + 0xf8], 0
je 0x10027cb7
cmp byte [eax + 0xfa], 0
je 0x10027d21
test cl, cl
je 0x10027cc4
cmp byte [eax + 0xfb], 0
jne 0x10027d21
cmp byte [ebp - 0x30], 0
jne 0x10027d21
cmp byte [ebp - 3], 0
jne 0x10027d21
xor esi, esi
mov eax, dword [eax + 0x1508]
lea ecx, [ebp - 0x20]
mov edx, dword [ebp + 0x14]
sub esp, 8
movzx eax, word [eax + esi*2]
mov dword [ebp - 0x20], eax
call fcn.10026e70
add esp, 8
test al, al
je 0x10027d15
push dword [ebp - 0x20]
lea edx, [ebx + 0x3c]
mov ecx, ebx
call fcn.10025d20
add esp, 4
mov byte [ebx + 0xe64], 1
mov dword [ebx + 0xe60], 0xbe99999a
mov eax, dword [ebp - 0xc]
inc esi
cmp esi, dword [edi + 0x1500]
jl 0x10027cd2
mov ecx, dword [edi + 0x1504]
test ecx, ecx
jns 0x10027d47
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x1500]
call fcn.10013320
mov dword [edi + 0x1500], 0
mov edi, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
xor cl, cl
xor dh, dh
mov byte [ebp - 3], cl
mov byte [ebp - 1], cl
mov byte [ebp - 2], dh
cmp dword [edi + 0x19bc], eax
jne 0x10028c00
mov byte [ebp - 1], dh
mov byte [ebp - 2], dh
cmp byte [edi + 0x19cc], dh
jne 0x100287de
mov byte [ebp - 1], dh
mov byte [ebp - 2], dh
cmp byte [ebp - 0x34], dh
jne 0x100287de
mov ah, byte [edi + 0xf9]
xor esi, esi
mov dh, byte [edi + 0xad]
test ah, ah
mov al, byte [edi + 0xf8]
mov ecx, 0x20000
cmovne esi, ecx
mov byte [ebp - 0x79], ah
mov byte [ebp - 0x7a], dh
test dh, dh
je 0x10027e03
cmp byte [edi + 0xfb], 0
je 0x10027dcd
test al, al
jne 0x10027dcd
mov ecx, 1
jmp 0x10027dcf
xor ecx, ecx
test ecx, ecx
jne 0x10027e10
xor dl, dl
mov byte [ebp - 1], dl
mov cl, al
test dh, dh
je 0x10027e21
cmp byte [edi + 0xfb], 0
je 0x10027e21
test ah, ah
je 0x10027e21
mov cl, byte [edi + 0xf8]
test cl, cl
jne 0x10027e21
cmp byte [edi + 0xfa], cl
jne 0x10027e21
mov byte [ebp - 0x13], 1
jmp 0x10027e2d
test al, al
je 0x10027dd3
cmp byte [edi + 0xfb], 0
jne 0x10027dd3
cmp byte [edi + 0xfa], 0
jne 0x10027dd3
test ah, ah
jne 0x10027dd3
mov dl, 1
jmp 0x10027dd5
mov byte [ebp - 0x13], 0
test dh, dh
je 0x10027ed7
cmp byte [edi + 0xfb], 0
mov al, byte [edi + 0xfa]
mov byte [ebp - 4], al
je 0x10027ede
test cl, cl
jne 0x10027ede
test al, al
jne 0x10027ede
mov byte [ebp - 2], 1
cmp byte [edi + 0xf9], 0
mov byte [ebp - 0x15], 0
je 0x10027e7c
test cl, cl
jne 0x10027e7c
cmp byte [edi + 0xfa], cl
jne 0x10027e7c
mov byte [ebp - 0x12], 1
cmp byte [edi + 0xfb], cl
je 0x10027e80
mov byte [ebp - 0x12], 0
test dl, dl
je 0x10027e99
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x7c]
test ecx, ecx
js 0x10027e99
call fcn.10007bf0
test al, al
jne 0x10027eb4
cmp byte [ebp - 0x12], 0
je 0x10027f13
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x5c]
test ecx, ecx
js 0x10027f13
call fcn.10007bf0
test al, al
je 0x10027f13
cmp byte [ebp - 0x30], 0
jne 0x10027f13
cmp byte [ebp - 0x88], 0
jne 0x10027f13
cmp byte [ebp - 0x1c], 0
je 0x10027ed1
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
je 0x10027f13
mov byte [ebp - 0x14], 1
jmp 0x10027f17
mov byte [ebp - 4], cl
mov byte [ebp - 0x13], 0
mov byte [ebp - 2], 0
test cl, cl
je 0x10027e57
test ah, ah
jne 0x10027e57
cmp byte [edi + 0xfa], ah
jne 0x10027e57
cmp byte [edi + 0xfb], ah
jne 0x10027e57
mov byte [ebp - 0x15], 1
jmp 0x10027e7c
mov byte [ebp - 0x14], 0
cmp byte [ebp - 1], 0
je 0x10027f32
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x74]
test ecx, ecx
js 0x10027f32
call fcn.10007bf0
test al, al
jne 0x10027f4d
cmp byte [ebp - 0x15], 0
je 0x10027f6a
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x58]
test ecx, ecx
js 0x10027f6a
call fcn.10007bf0
test al, al
je 0x10027f6a
cmp byte [ebp - 0x88], 0
jne 0x10027f6a
cmp byte [ebp - 0x1c], 0
je 0x10027f64
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
je 0x10027f6a
mov byte [ebp - 0x45], 1
jmp 0x10027f6e
mov byte [ebp - 0x45], 0
cmp byte [ebp - 1], 0
je 0x10027f89
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x78]
test ecx, ecx
js 0x10027f89
call fcn.10007bf0
test al, al
jne 0x10027fa4
cmp byte [ebp - 0x12], 0
je 0x10027fae
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x58]
test ecx, ecx
js 0x10027fae
call fcn.10007bf0
test al, al
je 0x10027fae
cmp byte [ebp - 0x30], 0
mov byte [ebp - 0x12], 1
je 0x10027fb2
mov byte [ebp - 0x12], 0
mov dl, byte [ebp - 1]
test dl, dl
je 0x10027fe6
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x84]
test ecx, ecx
js 0x10027fe6
call fcn.10007bf0
test al, al
je 0x10027fe3
cmp byte [ebp - 0x30], 0
jne 0x10027fe3
cmp byte [ebp - 0x5c], 0
je 0x10027fe3
mov byte [ebp - 0x15], 1
jmp 0x10027fee
mov dl, byte [ebp - 1]
mov byte [ebp - 0x15], 0
test dl, dl
je 0x10028006
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x80]
test ecx, ecx
js 0x10028006
call fcn.10007bf0
test al, al
jne 0x10028024
cmp byte [ebp - 0x13], 0
je 0x10028034
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x84]
test ecx, ecx
js 0x10028034
call fcn.10007bf0
test al, al
je 0x10028034
cmp byte [ebp - 0x30], 0
jne 0x10028034
cmp byte [ebp - 0x5c], 0
mov byte [ebp - 0x13], 1
jne 0x10028038
mov byte [ebp - 0x13], 0
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x38]
test ecx, ecx
js 0x1002808d
call fcn.10007bf0
test al, al
je 0x1002808d
cmp byte [ebp - 2], 0
je 0x1002806a
mov eax, 0x10004
lea edx, [ebx + 0x3c]
or eax, esi
mov ecx, ebx
push eax
call fcn.10025d20
jmp 0x100287bb
cmp byte [ebp - 4], 0
lea edx, [ebx + 0x3c]
mov ecx, 0x1000c
mov eax, 0x10000
cmovne eax, ecx
mov ecx, ebx
or eax, esi
push eax
call fcn.10025d20
jmp 0x100287bb
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
js 0x100280e2
call fcn.10007bf0
test al, al
je 0x100280e2
cmp byte [ebp - 2], 0
je 0x100280bf
mov eax, 0x10005
lea edx, [ebx + 0x3c]
or eax, esi
mov ecx, ebx
push eax
call fcn.10025d20
jmp 0x100287bb
cmp byte [ebp - 4], 0
lea edx, [ebx + 0x3c]
mov ecx, 0x1000d
mov eax, 0x10001
cmovne eax, ecx
mov ecx, ebx
or eax, esi
push eax
call fcn.10025d20
jmp 0x100287bb
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x40]
test ecx, ecx
js 0x1002815b
call fcn.10007bf0
test al, al
je 0x1002815b
cmp byte [ebp - 0x1c], 0
je 0x1002815b
cmp byte [edi + 0xf8], 0
je 0x1002813e
mov eax, dword [ebp - 0x3c]
xorps xmm4, xmm4
movss xmm1, dword [eax + 0x5c]
movaps xmm0, xmm1
subss xmm0, dword [edi + 0x18bc]
addss xmm1, dword [eax + 0xe4]
maxss xmm0, xmm4
subss xmm1, xmm0
movss dword [eax + 0x5c], xmm0
movss dword [eax + 0xe4], xmm1
jmp 0x100287cf
movzx eax, byte [ebp - 2]
lea edx, [ebx + 0x3c]
mov ecx, ebx
lea eax, [eax*4 + 0x10002]
or eax, esi
push eax
call fcn.10025d20
jmp 0x100287bb
mov edi, dword [0x100604b8]
mov ecx, dword [edi + 0x44]
test ecx, ecx
js 0x10028207
call fcn.10007bf0
test al, al
je 0x10028207
cmp byte [ebp - 0x1c], 0
je 0x10028207
mov eax, dword [ebp - 0xc]
cmp byte [eax + 0xf8], 0
je 0x100281e7
mov eax, dword [edi + 0x199c]
mov ecx, dword [ebp - 0x3c]
mov edi, dword [ebp - 0xc]
movss xmm0, dword [eax + 0x20]
subss xmm0, dword [eax + 0x74]
movss xmm1, dword [eax + 0x30]
movss xmm3, dword [ecx + 0x5c]
movaps xmm2, xmm3
addss xmm2, dword [edi + 0x18bc]
addss xmm3, dword [ecx + 0xe4]
subss xmm1, xmm0
xorps xmm0, xmm0
maxss xmm0, xmm1
minss xmm2, xmm0
subss xmm3, xmm2
movss dword [ecx + 0x5c], xmm2
movss dword [ecx + 0xe4], xmm3
jmp 0x100287cf
movzx eax, byte [ebp - 2]
lea edx, [ebx + 0x3c]
mov ecx, ebx
lea eax, [eax*4 + 0x10003]
or eax, esi
push eax
call fcn.10025d20
mov edi, dword [ebp - 0xc]
jmp 0x100287bb
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x50]
test ecx, ecx
js 0x10028246
call fcn.10007bf0
test al, al
je 0x10028246
mov edi, dword [ebp - 0xc]
lea edx, [ebx + 0x3c]
mov eax, esi
mov ecx, ebx
or eax, 0x10006
or esi, 0x10004
cmp byte [edi + 0xf8], 0
cmovne esi, eax
push esi
call fcn.10025d20
jmp 0x100287bb
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x54]
test ecx, ecx
js 0x10028285
call fcn.10007bf0
test al, al
je 0x10028285
mov edi, dword [ebp - 0xc]
lea edx, [ebx + 0x3c]
mov eax, esi
mov ecx, ebx
or eax, 0x10007
or esi, 0x10005
cmp byte [edi + 0xf8], 0
cmovne esi, eax
push esi
call fcn.10025d20
jmp 0x100287bb
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x5c]
test ecx, ecx
js 0x100282b9
call fcn.10007bf0
test al, al
je 0x100282b9
cmp byte [ebp - 0x30], 0
jne 0x100282b9
or esi, 0x10008
lea edx, [ebx + 0x3c]
push esi
mov ecx, ebx
call fcn.10025d20
mov edi, dword [ebp - 0xc]
jmp 0x100287bb
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x60]
test ecx, ecx
js 0x10028373
call fcn.10007bf0
test al, al
je 0x10028373
cmp byte [ebp - 0x30], 0
jne 0x10028373
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
jne 0x10028311
cmp byte [ebp - 4], 0
je 0x1002832a
push 0x3000c
lea edx, [ebx + 0x3c]
mov ecx, ebx
call fcn.10025d20
add esp, 4
mov byte [ebx + 0xe64], 1
mov dword [ebx + 0xe60], 0xbe99999a
mov edi, dword [ebp - 0xc]
or esi, 0x10009
lea edx, [ebx + 0x3c]
push esi
mov ecx, ebx
call fcn.10025d20
jmp 0x100287bb
cmp byte [ebp - 0x7a], 0
je 0x10028311
mov edi, dword [ebp - 0xc]
cmp byte [edi + 0xfb], 0
je 0x10028314
cmp byte [edi + 0xfa], 0
jne 0x10028314
cmp byte [edi + 0xf8], 0
jne 0x10028314
push 0x30004
lea edx, [ebx + 0x3c]
mov ecx, ebx
call fcn.10025d20
add esp, 4
mov byte [ebx + 0xe64], 1
mov dword [ebx + 0xe60], 0xbe99999a
jmp 0x10028314
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x68]
test ecx, ecx
js 0x10028407
call fcn.10007bf0
test al, al
je 0x10028407
mov eax, dword [ebp + 0x14]
mov edi, dword [ebp - 0xc]
shr eax, 0xb
and al, 1
cmp byte [ebp - 0x1c], 0
je 0x100283af
mov cl, byte [edi + 0xf8]
test al, al
je 0x100283ba
test cl, cl
jne 0x100283be
mov byte [ebp - 0x34], 1
mov dh, 1
jmp 0x100287d1
test cl, cl
jne 0x100283af
xor dh, dh
mov byte [ebp - 2], dh
cmp byte [ebp - 0x30], dh
jne 0x100287d4
xor dl, dl
mov dword [ebp - 0x20], 0xa
sub esp, 8
mov byte [ebp - 2], dl
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x20]
call fcn.10026e70
add esp, 8
test al, al
je 0x100283ff
push dword [ebp - 0x20]
lea edx, [ebx + 0x3c]
mov ecx, ebx
call fcn.10025d20
jmp 0x100287bb
mov dh, byte [ebp - 2]
jmp 0x100287d4
test dword [ebp + 0x14], 0x400
je 0x10028478
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x34]
test ecx, ecx
js 0x10028478
call fcn.10007bf0
mov edi, dword [ebp - 0xc]
test al, al
je 0x1002847b
cmp byte [edi + 0xf8], 0
jne 0x1002847b
cmp byte [ebp - 0x79], 0
jne 0x1002847b
cmp byte [edi + 0xfa], 0
jne 0x1002847b
cmp byte [ebp - 0x30], 0
jne 0x1002847b
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x20]
sub esp, 8
mov dword [ebp - 0x20], 9
call fcn.10026e70
add esp, 8
test al, al
je 0x100287cf
push dword [ebp - 0x20]
lea edx, [ebx + 0x3c]
mov ecx, ebx
call fcn.10025d20
jmp 0x100287bb
mov edi, dword [ebp - 0xc]
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x6c]
test ecx, ecx
js 0x100284a3
call fcn.10007bf0
test al, al
je 0x100284a3
mov cl, 1
mov byte [ebp - 1], 0
xor dh, dh
mov byte [ebp - 0x34], cl
mov byte [ebp - 2], dh
jmp 0x100287db
mov al, byte [ebp - 0x15]
test al, al
jne 0x1002879c
cmp byte [ebp - 0x13], al
jne 0x1002879c
cmp byte [ebp - 1], al
je 0x100284ea
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x70]
test ecx, ecx
js 0x100284ea
call fcn.10007bf0
test al, al
je 0x100284ea
mov eax, dword [ebx + 4]
mov dword [ebx + 0x40], 0
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x3c], eax
mov byte [ebx + 0x4b], 0
jmp 0x100287c8
mov al, byte [ebp - 0x14]
test al, al
jne 0x10028689
cmp byte [ebp - 0x45], al
jne 0x10028689
xor dh, dh
mov byte [ebp - 1], al
mov byte [ebp - 2], dh
cmp byte [ebp - 0x12], dh
je 0x100287d8
mov edi, dword [0x100604b8]
mov eax, dword [edi + 0xc8]
test eax, eax
je 0x10028541
push dword [edi + 0xd0]
call eax
mov esi, eax
mov byte [ebp - 1], 0
xor dh, dh
add esp, 4
mov byte [ebp - 2], dh
test esi, esi
jne 0x10028546
mov edi, dword [ebp - 0xc]
jmp 0x100287d8
mov esi, 0x1003454e
mov ecx, esi
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028550
mov eax, dword [0x100604b8]
sub ecx, edx
test eax, eax
je 0x10028568
inc dword [eax + 0x370]
lea eax, [ecx*2 + 2]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov dword [ebp - 0x4c], eax
xor edi, edi
cmp byte [esi], 0
je 0x100285d0
mov ebx, eax
push 0
mov edx, esi
lea ecx, [ebp - 0x60]
call fcn.10002870
add esi, eax
add esp, 4
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x100285c7
cmp eax, 0x10000
jae 0x100285c2
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x60]
sub esp, 8
call fcn.10026e70
add esp, 8
test al, al
je 0x100285c2
mov ax, word [ebp - 0x60]
mov word [ebx + edi*2], ax
inc edi
cmp byte [esi], 0
jne 0x10028585
mov ebx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
mov word [eax + edi*2], cx
test edi, edi
jle 0x10028663
mov edx, dword [ebx + 0x44]
mov ecx, dword [ebx + 0x40]
mov eax, dword [ebx + 4]
cmp ecx, edx
je 0x10028604
cmp ecx, eax
jle 0x100285f4
mov dword [ebx + 0x40], eax
mov ecx, eax
cmp edx, eax
jle 0x100285fd
mov dword [ebx + 0x44], eax
mov edx, eax
cmp ecx, edx
jne 0x10028604
mov dword [ebx + 0x3c], ecx
cmp dword [ebx + 0x3c], eax
jle 0x1002860c
mov dword [ebx + 0x3c], eax
lea edx, [ebx + 0x3c]
mov ecx, ebx
call fcn.10025c90
mov edx, dword [ebx + 0x3c]
mov ecx, ebx
push edi
push dword [ebp - 0x4c]
call fcn.100257b0
add esp, 8
test al, al
je 0x10028645
mov edx, dword [ebx + 0x3c]
lea ecx, [ebx + 0x54]
push edi
push 0
call fcn.10026b20
add esp, 8
mov byte [ebx + 0x4b], 0
add dword [ebx + 0x3c], edi
jmp 0x10028659
movzx eax, word [ebx + 0xe52]
test ax, ax
je 0x10028659
dec eax
mov word [ebx + 0xe52], ax
mov eax, dword [ebp - 0x4c]
mov byte [ebx + 0xe64], 1
test eax, eax
je 0x10028677
mov ecx, dword [0x100604b8]
test ecx, ecx
je 0x10028677
dec dword [ecx + 0x370]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov edi, dword [ebp - 0xc]
add esp, 4
jmp 0x100287cf
xor dh, dh
mov byte [ebp - 1], 0
cmp dword [edi + 0xcc], 0
mov byte [ebp - 2], dh
je 0x10028756
mov edi, dword [ebx + 0x44]
mov eax, dword [ebx + 0x40]
mov byte [ebp - 1], dh
cmp eax, edi
je 0x100286b6
mov ecx, edi
cmovl edi, eax
cmovge ecx, eax
jmp 0x100286bb
mov ecx, dword [ebx + 4]
xor edi, edi
mov al, byte [ebp - 5]
xor dl, dl
mov byte [ebp - 5], al
mov eax, dword [ebx + 0x14]
mov byte [ebp - 2], dl
mov dword [ebp - 0x20], ecx
lea edx, [eax + ecx*2]
lea ecx, [eax + edi*2]
call fcn.10002c00
mov ecx, dword [0x100604b8]
inc eax
mov dword [ebp - 0x44], eax
test ecx, ecx
je 0x100286eb
inc dword [ecx + 0x370]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov esi, dword [ebx + 0x14]
add esp, 4
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x64], eax
lea ecx, [esi + ecx*2]
push ecx
lea ecx, [esi + edi*2]
mov esi, eax
push ecx
mov ecx, esi
call fcn.10002ad0
mov eax, dword [0x100604b8]
add esp, 8
mov ecx, dword [eax + 0xcc]
test ecx, ecx
je 0x10028735
push esi
push dword [eax + 0xd0]
call ecx
mov eax, dword [0x100604b8]
add esp, 8
test esi, esi
je 0x10028743
test eax, eax
je 0x10028743
dec dword [eax + 0x370]
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov al, byte [ebp - 0x14]
add esp, 4
mov edi, dword [ebp - 0xc]
mov dh, byte [ebp - 2]
test al, al
je 0x100287d8
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
jne 0x1002877a
mov eax, dword [ebx + 4]
mov dword [ebx + 0x40], 0
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x3c], eax
mov byte [ebx + 0x4b], 0
mov byte [ebx + 0xe64], 1
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
je 0x100287d8
lea edx, [ebx + 0x3c]
mov ecx, ebx
call fcn.10025c90
mov dh, byte [ebp - 2]
mov byte [ebx + 0x4b], 0
jmp 0x100287d8
movzx eax, al
lea edx, [ebx + 0x3c]
xor eax, 1
mov ecx, ebx
add eax, 0x1000a
push eax
call fcn.10025d20
mov eax, dword [ebx + 0x3c]
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x40], eax
add esp, 4
mov dword [ebx + 0xe60], 0xbe99999a
mov byte [ebx + 0xe64], 1
xor dh, dh
mov byte [ebp - 2], dh
mov byte [ebp - 1], 0
mov cl, byte [ebp - 3]
mov eax, dword [ebp - 0x10]
cmp dword [edi + 0x19bc], eax
jne 0x10028c00
xor eax, eax
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x2c], eax
test cl, cl
je 0x10028850
cmp byte [ebp - 0x30], al
jne 0x1002883a
mov esi, dword [ebx + 0x2c]
mov ecx, esi
mov eax, dword [ebp + 8]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10028827
test dl, dl
je 0x10028823
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10028827
add eax, 2
add ecx, 2
test dl, dl
jne 0x10028807
xor eax, eax
jmp 0x1002882c
sbb eax, eax
or eax, 1
test eax, eax
je 0x1002883a
mov eax, dword [ebx + 0x24]
dec eax
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x2c], eax
test dh, dh
mov edx, dword [ebp + 0x14]
je 0x10028b07
test dl, 0x20
je 0x10028b07
jmp 0x10028853
mov edx, dword [ebp + 0x14]
cmp byte [ebp - 0x30], 0
jne 0x100288b1
mov eax, dword [ebx + 0xc]
mov byte [ebx + 0x30], 1
mov edi, dword [ebx + 0x1c]
lea esi, [eax*4 + 1]
lea eax, [ebx + 0x18]
cmp esi, edi
jle 0x1002889a
test edi, edi
je 0x10028882
mov eax, edi
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
add ecx, edi
jmp 0x10028887
mov ecx, 8
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
lea ecx, [ebx + 0x18]
push eax
call fcn.10013230
lea eax, [ebx + 0x18]
mov dword [eax], esi
mov edx, esi
mov ecx, dword [ebx + 0x20]
push 0
push dword [ebx + 0x14]
call fcn.10002ad0
mov edx, dword [ebp + 0x14]
add esp, 8
test edx, 0x1c0
je 0x10028ac2
mov esi, 0x15
test dl, 0x40
je 0x100288e6
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x34]
test ecx, ecx
js 0x100288e6
call fcn.10007bf0
test al, al
je 0x100288e3
lea eax, [esi + 0x2b]
xor esi, esi
jmp 0x1002893f
mov edx, dword [ebp + 0x14]
test dl, dl
jns 0x1002892e
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x40]
test ecx, ecx
js 0x1002890c
call fcn.10007bf0
test al, al
je 0x10028909
mov eax, 0x80
lea esi, [eax - 0x7d]
jmp 0x1002893f
mov edx, dword [ebp + 0x14]
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x44]
test ecx, ecx
js 0x1002892e
call fcn.10007bf0
test al, al
je 0x1002892b
mov eax, 0x80
lea esi, [eax - 0x7c]
jmp 0x1002893f
mov edx, dword [ebp + 0x14]
test edx, 0x100
je 0x10028ac2
mov eax, 0x100
mov dword [ebp - 0x104], eax
xor ecx, ecx
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x100], eax
mov eax, dword [ebx + 0x20]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 0xec], eax
mov eax, dword [ebx + 0x34]
mov dword [ebp - 0xf4], esi
mov esi, dword [ebx + 0x14]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebx + 0x3c]
mov word [ebp - 0xe3], cx
mov byte [ebp - 0xe1], cl
mov dword [ebp - 0xfc], ecx
mov byte [ebp - 0xe4], cl
lea edx, [esi + eax*2]
mov ecx, esi
mov dword [ebp - 0xf8], 0
call fcn.10002c00
mov ecx, dword [ebx + 0x40]
mov edi, eax
mov dword [ebp - 0xe0], edi
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.10002c00
mov edx, dword [ebx + 0x44]
mov ecx, esi
mov dword [ebp - 0x44], eax
mov dword [ebp - 0xdc], eax
lea edx, [esi + edx*2]
call fcn.10002c00
mov esi, eax
lea eax, [ebp - 0x104]
push eax
xor eax, eax
mov dword [ebp - 0xd8], esi
call eax
mov ecx, dword [ebp - 0xe0]
add esp, 4
cmp ecx, edi
mov edi, dword [ebp - 0xf0]
je 0x10028a09
lea edx, [ecx + edi]
mov ecx, edi
call fcn.10002a80
mov dword [ebx + 0x3c], eax
mov byte [ebx + 0xe64], 1
mov eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0x44]
je 0x10028a21
lea edx, [eax + edi]
mov ecx, edi
call fcn.10002a80
mov dword [ebx + 0x40], eax
mov eax, dword [ebp - 0xd8]
cmp eax, esi
je 0x10028a38
lea edx, [eax + edi]
mov ecx, edi
call fcn.10002a80
mov dword [ebx + 0x44], eax
cmp byte [ebp - 0xe4], 0
je 0x10028abf
mov esi, dword [ebp - 0xec]
mov ecx, dword [ebp - 0x38]
cmp esi, ecx
jle 0x10028a97
cmp byte [ebp - 0x58], 0
je 0x10028a97
mov eax, dword [ebx + 0x10]
sub esi, ecx
add esi, dword [ebx + 0xc]
cmp esi, eax
jle 0x10028a94
test eax, eax
je 0x10028a77
cdq
sub eax, edx
lea edx, [ebx + 0xc]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x10028a7f
mov ecx, 8
lea edx, [ebx + 0xc]
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.10013320
mov edi, dword [ebp - 0xf0]
mov dword [ebx + 0xc], esi
mov edx, dword [ebx + 0xc]
push 0
push ecx
mov ecx, dword [ebx + 0x14]
push edi
call fcn.10002a10
mov dword [ebx + 4], eax
add esp, 0xc
mov eax, dword [ebp - 0xec]
mov dword [ebx + 8], eax
mov dword [ebx + 0xe60], 0xbe99999a
mov edx, dword [ebp + 0x14]
cmp byte [ebp - 0x30], 0
jne 0x10028b04
mov esi, dword [ebx + 0x20]
mov eax, esi
mov ecx, dword [ebp + 8]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10028af0
test dl, dl
je 0x10028aec
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10028af0
add eax, 2
add ecx, 2
test dl, dl
jne 0x10028ad0
xor eax, eax
jmp 0x10028af5
sbb eax, eax
or eax, 1
mov edi, dword [ebp - 0xc]
mov edx, dword [ebp + 0x14]
test eax, eax
je 0x10028b07
mov ecx, dword [ebx + 8]
jmp 0x10028b0d
mov edi, dword [ebp - 0xc]
mov esi, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x2c]
test esi, esi
je 0x10028be2
cmp dword [ebp - 0x38], ecx
je 0x10028bab
cmp byte [ebp - 0x58], 0
je 0x10028bab
mov eax, dword [ebp + 8]
xorps xmm0, xmm0
mov dword [ebp - 0x120], eax
lea eax, [ecx + 1]
cmp eax, 0x20
movlpd qword [ebp - 0x128], xmm0
movlpd qword [ebp - 0x114], xmm0
cmovle eax, dword [ebp - 0x40]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x134]
push eax
xor eax, eax
movlpd qword [ebp - 0x10c], xmm0
mov dword [ebp - 0x134], 0x40000
mov dword [ebp - 0x130], edx
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x12c], 0
call eax
mov edx, dword [ebp - 0x118]
add esp, 4
mov eax, dword [ebp - 0x120]
mov dword [ebp + 8], eax
lea ecx, [edx - 1]
cmp dword [ebp - 0x11c], ecx
cmovl ecx, dword [ebp - 0x11c]
jmp 0x10028bb0
mov edx, 0x20
lea eax, [ecx + 1]
cmp eax, edx
cmovl edx, eax
mov dword [ebp - 0x44], edx
cmp edx, 1
jb 0x10028bde
jbe 0x10028bd6
lea eax, [edx - 1]
push eax
push esi
push dword [ebp + 8]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov edx, dword [ebp - 0x44]
add esp, 0xc
mov eax, dword [ebp + 8]
mov byte [edx + eax - 1], 0
mov byte [ebp - 1], 1
mov dword [ebx + 0xe68], 0
mov dword [ebx + 0xe6c], 0
mov dword [ebx + 0xe70], 0
cmp byte [ebp - 0x34], 0
mov ecx, dword [ebp - 0x10]
je 0x10028c71
cmp dword [edi + 0x19bc], ecx
jne 0x10028c71
mov edx, dword [0x100604b8]
mov ecx, dword [edx + 0x19bc]
test ecx, ecx
setne al
mov byte [edx + 0x19cc], al
test ecx, ecx
je 0x10028c3f
mov dword [edx + 0x19c8], 0
mov word [edx + 0x19ce], 0
mov ecx, dword [ebp - 0x10]
mov dword [edx + 0x19bc], 0
mov dword [edx + 0x19d4], 0
mov dword [edx + 0x19d8], 0
mov byte [edx + 0x19cd], 0
mov dword [edx + 0x19e4], 0
mov edx, dword [ebp - 0x1c]
movss xmm4, dword [0x10038c58]
test dl, dl
jne 0x10028e0d
mov edx, ecx
lea ecx, [ebp - 0x98]
push 1
call fcn.10004300
mov eax, dword [0x100604b8]
xorps xmm3, xmm3
movss xmm6, dword [0x10038bd4]
add esp, 4
movups xmm2, xmmword [eax + 0x1628]
comiss xmm3, xmm2
movaps xmm1, xmm2
shufps xmm1, xmm2, 0xff
mulss xmm1, dword [eax + 0x1510]
movups xmmword [ebp - 0xa8], xmm2
jbe 0x10028ccd
xorps xmm0, xmm0
jmp 0x10028cd4
movaps xmm0, xmm6
minss xmm0, xmm2
movss xmm5, dword [0x10038c58]
movss xmm4, dword [0x10038ba8]
movss xmm2, dword [ebp - 0xa4]
comiss xmm3, xmm2
mulss xmm0, xmm5
addss xmm0, xmm4
cvttss2si edx, xmm0
jbe 0x10028d02
xorps xmm0, xmm0
jmp 0x10028d09
movaps xmm0, xmm6
minss xmm0, xmm2
movss xmm2, dword [ebp - 0xa0]
mulss xmm0, xmm5
addss xmm0, xmm4
cvttss2si eax, xmm0
shl eax, 8
or edx, eax
comiss xmm3, xmm2
jbe 0x10028d2c
xorps xmm0, xmm0
jmp 0x10028d33
movaps xmm0, xmm6
minss xmm0, xmm2
mulss xmm0, xmm5
addss xmm0, xmm4
cvttss2si eax, xmm0
shl eax, 0x10
or edx, eax
comiss xmm3, xmm1
jbe 0x10028d4e
xorps xmm0, xmm0
jmp 0x10028d55
movaps xmm0, xmm6
minss xmm0, xmm1
push dword [ebp - 0x8c]
movss xmm2, dword [edi + 0x154c]
push dword [ebp - 0x90]
mulss xmm0, xmm5
push dword [ebp - 0x94]
push dword [ebp - 0x98]
addss xmm0, xmm4
cvttss2si ecx, xmm0
shl ecx, 0x18
or ecx, edx
mov dl, 1
call fcn.10003780
movss xmm0, dword [ebp - 0x98]
add esp, 0x10
movss xmm3, dword [ebp - 0x94]
movaps xmm1, xmm0
movss xmm2, dword [ebp - 0x80]
movss xmm6, dword [ebp - 0x6c]
addss xmm1, xmm2
movss xmm4, dword [0x10038c58]
addss xmm6, xmm3
mov edx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x3c]
movss dword [ebp - 0xc0], xmm0
addss xmm0, dword [edi + 0x1544]
movss dword [ebp - 0xbc], xmm3
movss dword [ebp - 0x2c], xmm1
movss dword [ebp - 0xb8], xmm1
movss dword [ebp - 0xb4], xmm6
movss dword [ebp - 0xa0], xmm0
movaps xmm0, xmm3
addss xmm0, dword [edi + 0x1548]
movss dword [ebp - 0x9c], xmm0
jmp 0x10028e6f
movss xmm0, dword [ebp - 0x98]
movss xmm1, dword [ebp - 0x94]
movss xmm2, dword [ebp - 0x80]
movss xmm6, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x3c]
addss xmm6, xmm1
movss dword [ebp - 0xc0], xmm0
addss xmm0, xmm2
movss dword [ebp - 0xbc], xmm1
movss dword [ebp - 0xb4], xmm6
movss dword [ebp - 0xb8], xmm0
mov eax, dword [esi + 0xc8]
mov ecx, dword [esi + 0xcc]
movss dword [ebp - 0x2c], xmm0
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], ecx
cmp byte [ebp - 0x25], 0
lea eax, [ebp - 0xa0]
movss xmm0, dword [eax]
xorps xmm1, xmm1
movss dword [ebp - 0x54], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x24], xmm0
movss dword [ebp - 0x50], xmm0
xorps xmm0, xmm0
mov dword [ebp - 0x5c], eax
movss dword [ebp - 0x34], xmm6
movss dword [ebp - 0x64], xmm1
movss dword [ebp - 0x20], xmm1
je 0x10028eb3
mov eax, dword [ebx + 0x20]
mov dword [ebp + 8], eax
jmp 0x10028eb6
mov eax, dword [ebp + 8]
mov ch, byte [ebp - 0x11]
mov cl, byte [ebp - 5]
test ch, ch
jne 0x10029061
test cl, cl
jne 0x10029061
test dl, dl
je 0x10028f20
mov dl, byte [eax]
lea ebx, [eax + 1]
xor ecx, ecx
test dl, dl
je 0x10028ef2
nop dword [eax + eax]
cmp dl, 0xa
lea eax, [ecx + 1]
mov dl, byte [ebx]
cmovne eax, ecx
inc ebx
mov ecx, eax
test dl, dl
jne 0x10028ee0
mov al, byte [ebx - 1]
dec ebx
cmp al, 0xa
je 0x10028eff
cmp al, 0xd
je 0x10028eff
inc ecx
mov edx, dword [ebp + 8]
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
mulss xmm1, dword [edi + 0x18bc]
movss dword [ebp - 0x20], xmm1
movaps xmm1, xmm2
movss dword [ebp - 0x64], xmm1
jmp 0x10028f5e
mov eax, dword [ebp - 0x10]
cmp dword [edi + 0x19bc], eax
jne 0x10028f35
mov ebx, dword [ebx + 8]
mov edx, dword [ebp + 8]
add ebx, edx
jmp 0x10028f4f
mov ecx, dword [ebp + 8]
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028f40
sub ecx, edx
mov edx, dword [ebp + 8]
lea ebx, [edx + ecx]
mov eax, ebx
sub eax, edx
cmp eax, 0x200000
jge 0x10029b52
mov eax, dword [0x100604b8]
movss xmm6, dword [0x10038bd4]
movups xmm2, xmmword [eax + 0x15b8]
comiss xmm0, xmm2
movaps xmm1, xmm2
shufps xmm1, xmm2, 0xff
mulss xmm1, dword [eax + 0x1510]
movups xmmword [ebp - 0xa8], xmm2
ja 0x10028f94
movaps xmm0, xmm6
minss xmm0, xmm2
movss xmm5, dword [0x10038ba8]
xorps xmm3, xmm3
movss xmm2, dword [ebp - 0xa4]
comiss xmm3, xmm2
mulss xmm0, xmm4
addss xmm0, xmm5
cvttss2si ecx, xmm0
jbe 0x10028fbd
xorps xmm0, xmm0
jmp 0x10028fc4
movaps xmm0, xmm6
minss xmm0, xmm2
movss xmm2, dword [ebp - 0xa0]
mulss xmm0, xmm4
addss xmm0, xmm5
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm3, xmm2
jbe 0x10028fe7
xorps xmm0, xmm0
jmp 0x10028fee
movaps xmm0, xmm6
minss xmm0, xmm2
mulss xmm0, xmm4
addss xmm0, xmm5
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm3, xmm1
jbe 0x10029009
xorps xmm6, xmm6
jmp 0x1002900d
minss xmm6, xmm1
cmp byte [ebp - 0x1c], 0
lea eax, [ebp - 0xc0]
movss xmm2, dword [edi + 0x18bc]
mulss xmm6, xmm4
mov dword [ebp - 0x44], 0
cmovne eax, dword [ebp - 0x44]
push eax
addss xmm6, xmm5
push ecx
mov dword [esp], 0
push ebx
push edx
cvttss2si eax, xmm6
shl eax, 0x18
or eax, ecx
mov ecx, dword [esi + 0x26c]
push eax
lea eax, [ebp - 0x54]
push eax
push dword [edi + 0x18b8]
call fcn.1001c880
jmp 0x10029aa4
mov eax, dword [ebx + 8]
mov edi, 0xfffffc18
mov esi, dword [ebx + 0x14]
xor edx, edx
mov dword [ebp - 0xd4], eax
xorps xmm7, xmm7
add eax, dword [ebp + 8]
xorps xmm5, xmm5
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x10], edi
test ch, ch
je 0x100290a7
mov eax, dword [ebx + 0x3c]
or edi, 0xffffffff
lea eax, [esi + eax*2]
mov dword [ebp - 0x58], eax
lea edx, [edi + 2]
test cl, cl
je 0x100290c3
mov ecx, dword [ebx + 0x44]
cmp dword [ebx + 0x40], ecx
mov dword [ebp - 0x10], 0xffffffff
cmovl ecx, dword [ebx + 0x40]
inc edx
lea eax, [esi + ecx*2]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x1c]
xor esi, esi
movzx eax, al
add edx, eax
mov eax, dword [ebp - 0x38]
mov ecx, eax
movzx eax, word [eax]
test ax, ax
je 0x10029125
mov esi, eax
xor ebx, ebx
nop
cmp si, 0xa
jne 0x1002910b
inc ebx
cmp edi, 0xffffffff
jne 0x100290f8
cmp ecx, dword [ebp - 0x58]
jb 0x100290f8
dec edx
mov edi, ebx
test edx, edx
jle 0x10029119
cmp dword [ebp - 0x10], 0xffffffff
jne 0x1002910b
cmp ecx, dword [ebp - 0x4c]
jb 0x1002910b
dec edx
mov dword [ebp - 0x10], ebx
test edx, edx
jle 0x10029119
movzx eax, word [ecx + 2]
add ecx, 2
mov esi, eax
test ax, ax
jne 0x100290e0
mov dword [ebp - 0x40], ebx
mov ebx, dword [ebp - 0x84]
mov esi, dword [ebp - 0x40]
mov edx, dword [ebp - 0x38]
inc esi
cmp edi, 0xffffffff
mov dword [ebp - 0x40], esi
mov eax, esi
cmovne eax, edi
mov edi, dword [ebp - 0x58]
mov dword [ebp - 0x44], eax
mov ecx, edi
mov eax, dword [ebp - 0x10]
cmp eax, 0xffffffff
cmove eax, esi
mov dword [ebp - 0x10], eax
cmp edi, edx
jbe 0x1002915e
nop dword [eax]
cmp word [ecx - 2], 0xa
je 0x1002915e
add ecx, 0xfffffffe
cmp ecx, edx
ja 0x10029150
mov eax, dword [0x100604b8]
movaps xmm2, xmm0
movaps xmm6, xmm0
mov esi, dword [eax + 0x18b8]
movss xmm4, dword [eax + 0x18bc]
divss xmm4, dword [esi + 0x10]
cmp ecx, edi
jae 0x100291c5
movzx eax, word [ecx]
add ecx, 2
mov edx, eax
cmp eax, 0xa
jne 0x10029196
maxss xmm2, xmm6
movaps xmm6, xmm0
jmp 0x100291be
cmp edx, 0xd
je 0x100291be
mov edx, eax
cmp edx, dword [esi]
jge 0x100291ab
mov eax, dword [esi + 8]
movss xmm1, dword [eax + edx*4]
jmp 0x100291b0
movss xmm1, dword [esi + 0xc]
movaps xmm0, xmm4
mulss xmm0, xmm1
addss xmm6, xmm0
xorps xmm0, xmm0
cmp ecx, edi
jb 0x10029180
mov edx, dword [ebp - 0x38]
movd xmm1, dword [ebp - 0x44]
maxss xmm6, xmm2
mov ecx, dword [ebp - 0xc]
mov edi, dword [ebp - 0x10]
cvtdq2ps xmm1, xmm1
movss xmm3, dword [ecx + 0x18bc]
mulss xmm1, xmm3
movss dword [ebp - 0xcc], xmm6
movss dword [ebp - 0x44], xmm1
test edi, edi
js 0x1002927a
mov eax, dword [ebp - 0x4c]
mov ecx, eax
cmp eax, edx
jbe 0x10029212
cmp word [ecx - 2], 0xa
je 0x1002920f
add ecx, 0xfffffffe
cmp ecx, edx
ja 0x10029201
mov eax, dword [ebp - 0x4c]
movaps xmm2, xmm0
movaps xmm5, xmm0
cmp ecx, eax
jae 0x10029268
mov ebx, dword [ebp - 0x4c]
nop
movzx eax, word [ecx]
add ecx, 2
mov edx, eax
cmp eax, 0xa
jne 0x10029236
maxss xmm2, xmm5
movaps xmm5, xmm0
jmp 0x1002925e
cmp edx, 0xd
je 0x1002925e
mov edx, eax
cmp edx, dword [esi]
jge 0x1002924b
mov eax, dword [esi + 8]
movss xmm1, dword [eax + edx*4]
jmp 0x10029250
movss xmm1, dword [esi + 0xc]
movaps xmm0, xmm4
mulss xmm0, xmm1
addss xmm5, xmm0
xorps xmm0, xmm0
cmp ecx, ebx
jb 0x10029220
mov ebx, dword [ebp - 0x84]
mov ecx, dword [ebp - 0xc]
maxss xmm5, xmm2
movd xmm7, edi
cvtdq2ps xmm7, xmm7
mulss xmm7, xmm3
mov edx, dword [ebp - 0x1c]
test dl, dl
je 0x100292a1
movd xmm1, dword [ebp - 0x40]
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm3
movss xmm3, dword [ebp - 0x80]
movss dword [ebp - 0x20], xmm1
movaps xmm1, xmm3
movss dword [ebp - 0x64], xmm1
jmp 0x100292a6
movss xmm3, dword [ebp - 0x80]
cmp byte [ebp - 0x11], 0
je 0x10029388
cmp byte [ebx + 0xe64], 0
je 0x10029388
test dword [ebp + 0x14], 0x1000
jne 0x1002930a
movss xmm1, dword [ebx + 0x38]
movaps xmm2, xmm3
comiss xmm1, xmm6
mulss xmm2, dword [0x10038b94]
jbe 0x100292e8
movaps xmm1, xmm6
subss xmm1, xmm2
maxss xmm0, xmm1
jmp 0x100292f8
movaps xmm0, xmm6
subss xmm0, xmm3
comiss xmm0, xmm1
jb 0x10029311
addss xmm0, xmm2
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebx + 0x38], xmm0
jmp 0x10029311
mov dword [ebx + 0x38], 0
test dl, dl
je 0x10029381
movss xmm0, dword [ebp - 0x44]
mov eax, dword [ebp - 0x3c]
movaps xmm1, xmm0
subss xmm1, dword [ecx + 0x18bc]
movss xmm2, dword [eax + 0x5c]
comiss xmm2, xmm1
jbe 0x1002933b
xorps xmm0, xmm0
maxss xmm0, xmm1
jmp 0x10029344
subss xmm0, dword [ebp - 0x6c]
maxss xmm0, xmm2
subss xmm2, xmm0
movss dword [eax + 0x5c], xmm0
addss xmm2, dword [eax + 0xcc]
movss dword [eax + 0xcc], xmm2
movss xmm0, dword [ebp - 0xb4]
movss dword [ebp - 0x34], xmm0
movss xmm0, dword [ebp - 0xb8]
movss dword [ebp - 0x24], xmm2
movss dword [ebp - 0x50], xmm2
movss dword [ebp - 0x2c], xmm0
mov byte [ebx + 0xe64], 0
cmp byte [ebp - 5], 0
movss xmm6, dword [ebx + 0x38]
movss dword [ebp - 0x40], xmm6
je 0x100296f6
mov edx, dword [ebx + 0x44]
mov eax, edx
mov ecx, dword [ebx + 0x40]
cmp ecx, edx
mov edi, dword [ebp - 0x38]
cmovl eax, ecx
cmovge edx, ecx
cmp byte [ebp - 0x11], 0
lea esi, [edi + eax*2]
lea eax, [edi + edx*2]
mov dword [ebp - 0x38], eax
je 0x100293c8
movss xmm1, dword [0x10038bd4]
jmp 0x100293d0
movss xmm1, dword [0x10038bac]
mov eax, dword [0x100604b8]
xorps xmm3, xmm3
movups xmm2, xmmword [eax + 0x1858]
mulss xmm1, dword [eax + 0x1510]
comiss xmm3, xmm2
movaps xmm0, xmm2
shufps xmm0, xmm2, 0xff
movups xmmword [ebp - 0x78], xmm2
mulss xmm1, xmm0
jbe 0x10029400
xorps xmm0, xmm0
jmp 0x1002940c
movss xmm0, dword [0x10038bd4]
minss xmm0, xmm2
movss xmm4, dword [0x10038c58]
movss xmm2, dword [ebp - 0x74]
comiss xmm3, xmm2
mulss xmm0, xmm4
addss xmm0, dword [0x10038ba8]
cvttss2si ecx, xmm0
jbe 0x10029433
xorps xmm0, xmm0
jmp 0x1002943f
movss xmm0, dword [0x10038bd4]
minss xmm0, xmm2
movss xmm2, dword [ebp - 0x70]
mulss xmm0, xmm4
addss xmm0, dword [0x10038ba8]
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm3, xmm2
jbe 0x10029463
xorps xmm0, xmm0
jmp 0x1002946f
movss xmm0, dword [0x10038bd4]
minss xmm0, xmm2
movss xmm2, dword [0x10038ba8]
mulss xmm0, xmm4
addss xmm0, xmm2
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm3, xmm1
jbe 0x10029492
xorps xmm0, xmm0
jmp 0x1002949e
movss xmm0, dword [0x10038bd4]
minss xmm0, xmm1
mov edx, dword [ebp - 0x1c]
mulss xmm0, xmm4
addss xmm0, xmm2
cvttss2si eax, xmm0
shl eax, 0x18
or eax, ecx
mov dword [ebp - 0x80], eax
test dl, dl
je 0x100294c8
movss dword [ebp - 0xd0], xmm3
movss dword [ebp - 0x58], xmm3
jmp 0x100294d5
movss xmm0, dword [0x10038bec]
movss dword [ebp - 0x58], xmm0
mov edi, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x38]
movss xmm4, dword [edi]
addss xmm4, xmm5
subss xmm4, xmm6
movss xmm6, dword [ebp - 0x24]
addss xmm6, xmm7
subss xmm6, xmm3
movss dword [ebp - 0x5c], xmm6
cmp esi, ecx
jae 0x100296ef
mov ebx, dword [ebp - 0xc]
movss xmm3, dword [ebp - 0x34]
movss xmm7, dword [ebx + 0x18bc]
movaps xmm1, xmm7
movaps xmm0, xmm3
addss xmm0, xmm1
comiss xmm6, xmm0
ja 0x100296df
movss xmm0, dword [ebp - 0xbc]
comiss xmm0, xmm6
jbe 0x10029558
cmp esi, ecx
jae 0x100296ba
nop dword [eax]
movzx eax, word [esi]
add esi, 2
cmp eax, 0xa
je 0x100296ba
cmp esi, ecx
jb 0x10029540
jmp 0x100296ba
mov eax, dword [0x100604b8]
xorps xmm1, xmm1
xorps xmm5, xmm5
xorps xmm2, xmm2
mov edx, dword [eax + 0x18b8]
movss xmm3, dword [eax + 0x18bc]
divss xmm3, dword [edx + 0x10]
cmp esi, ecx
jae 0x100295c9
nop dword [eax]
movzx eax, word [esi]
add esi, 2
mov ecx, eax
cmp eax, 0xa
je 0x100295b9
cmp ecx, 0xd
je 0x100295b0
cmp ecx, dword [edx]
jge 0x100295a0
mov eax, dword [edx + 8]
movss xmm1, dword [eax + ecx*4]
jmp 0x100295a5
movss xmm1, dword [edx + 0xc]
movaps xmm0, xmm3
mulss xmm0, xmm1
addss xmm2, xmm0
mov ecx, dword [ebp - 0x38]
cmp esi, ecx
jb 0x10029580
jmp 0x100295c6
mov ecx, dword [ebp - 0x38]
xorps xmm5, xmm5
maxss xmm5, xmm2
xorps xmm2, xmm2
xorps xmm1, xmm1
maxss xmm2, xmm5
comiss xmm1, xmm2
jb 0x10029602
mov eax, dword [ebx + 0x18b8]
cmp dword [eax], 0x20
jle 0x100295ea
mov eax, dword [eax + 8]
movss xmm0, dword [eax + 0x80]
jmp 0x100295ef
movss xmm0, dword [eax + 0xc]
mulss xmm0, dword [0x10038ba8]
cvttss2si eax, xmm0
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movss xmm0, dword [ebp - 0x58]
addss xmm2, xmm4
movss xmm3, dword [ebp - 0x34]
addss xmm4, xmm1
movss xmm1, dword [ebp - 0xd0]
addss xmm0, xmm6
movss xmm5, dword [ebp - 0x2c]
subss xmm1, xmm7
minss xmm2, xmm5
maxss xmm4, dword [ebp - 0xc0]
minss xmm0, xmm3
addss xmm1, xmm6
movss dword [ebp - 0x70], xmm2
movss dword [ebp - 0x78], xmm4
comiss xmm0, dword [ebp - 0xbc]
maxss xmm1, dword [ebp - 0xbc]
movss dword [ebp - 0x6c], xmm0
movss dword [ebp - 0x74], xmm1
jbe 0x100296ba
comiss xmm3, xmm1
jbe 0x100296ba
comiss xmm2, dword [ebp - 0xc0]
jbe 0x100296ba
comiss xmm5, xmm4
jbe 0x100296ba
push 0xf
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x70]
push dword [ebp - 0x80]
push eax
lea eax, [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax + 0x26c]
call fcn.1001c620
movss xmm3, dword [ebp - 0xb4]
movss xmm0, dword [ebp - 0xb8]
movss xmm6, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x38]
movss dword [ebp - 0x34], xmm3
movss dword [ebp - 0x2c], xmm0
movss xmm7, dword [ebx + 0x18bc]
movss xmm4, dword [edi]
addss xmm6, xmm7
movaps xmm1, xmm7
subss xmm4, dword [ebp - 0x40]
movss dword [ebp - 0x5c], xmm6
cmp esi, ecx
jb 0x10029514
movss xmm6, dword [ebp - 0x40]
mov ebx, dword [ebp - 0x84]
mov edx, dword [ebp - 0x1c]
jmp 0x100296f9
movss xmm6, dword [ebp - 0x40]
jmp 0x100296fc
mov edi, dword [ebp - 0x5c]
xorps xmm3, xmm3
test dl, dl
jne 0x10029710
cmp dword [ebp - 0xd4], 0x200000
jge 0x10029847
mov eax, dword [0x100604b8]
movss xmm7, dword [0x10038bd4]
movups xmm1, xmmword [eax + 0x15b8]
comiss xmm3, xmm1
movaps xmm2, xmm1
shufps xmm2, xmm1, 0xff
mulss xmm2, dword [eax + 0x1510]
movups xmmword [ebp - 0x78], xmm1
jbe 0x10029741
xorps xmm0, xmm0
jmp 0x10029748
movaps xmm0, xmm7
minss xmm0, xmm1
movss xmm4, dword [0x10038c58]
movss xmm5, dword [0x10038ba8]
movss xmm1, dword [ebp - 0x74]
comiss xmm3, xmm1
mulss xmm0, xmm4
addss xmm0, xmm5
cvttss2si ecx, xmm0
jbe 0x10029773
xorps xmm0, xmm0
jmp 0x1002977a
movaps xmm0, xmm7
minss xmm0, xmm1
movss xmm1, dword [ebp - 0x70]
mulss xmm0, xmm4
addss xmm0, xmm5
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm3, xmm1
jbe 0x1002979a
xorps xmm0, xmm0
jmp 0x100297a1
movaps xmm0, xmm7
minss xmm0, xmm1
mulss xmm0, xmm4
addss xmm0, xmm5
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm3, xmm2
jbe 0x100297bc
xorps xmm1, xmm1
jmp 0x100297c3
movaps xmm1, xmm7
minss xmm1, xmm2
movss xmm0, dword [edi]
lea eax, [ebp - 0xc0]
mulss xmm1, xmm4
subss xmm0, xmm6
xor esi, esi
test dl, dl
cmovne eax, esi
push eax
addss xmm1, xmm5
movss dword [ebp - 0x70], xmm0
movss xmm0, dword [ebp - 0x24]
push ecx
mov dword [esp], esi
subss xmm0, xmm3
push dword [ebp - 0x60]
mov esi, dword [ebp - 0xc]
push dword [ebp + 8]
cvttss2si eax, xmm1
movss xmm2, dword [esi + 0x18bc]
shl eax, 0x18
or eax, ecx
movss dword [ebp - 0x6c], xmm0
push eax
lea eax, [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x3c]
push dword [esi + 0x18b8]
mov ecx, dword [eax + 0x26c]
call fcn.1001c880
movss xmm0, dword [ebp - 0xb4]
movss dword [ebp - 0x34], xmm0
movss xmm0, dword [ebp - 0xb8]
movss dword [ebp - 0x2c], xmm0
jmp 0x1002984a
mov esi, dword [ebp - 0xc]
cmp byte [ebp - 0x11], 0
je 0x10029a9e
movss xmm0, dword [esi + 0x18]
addss xmm0, dword [ebx + 0xe60]
movss dword [ebx + 0xe60], xmm0
cmp byte [esi + 0xae], 0
je 0x100298ad
xorps xmm4, xmm4
comiss xmm4, xmm0
jae 0x100298ad
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x70], xmm0
fld qword [ebp - 0x70]
fld qword [0x10038be0]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIfmod
movss xmm0, dword [0x10038bc8]
fstp qword [ebp - 0x70]
movsd xmm1, qword [ebp - 0x70]
cvtpd2ps xmm1, xmm1
comiss xmm0, xmm1
jae 0x100298ad
xor al, al
jmp 0x100298af
mov al, 1
movss xmm2, dword [ebp - 0x24]
xorps xmm4, xmm4
movss xmm6, dword [edi]
mov edi, dword [ebp - 0xc]
movss xmm7, dword [0x10038ba8]
movss xmm5, dword [0x10038bd4]
addss xmm2, dword [ebp - 0x44]
addss xmm6, dword [ebp - 0xcc]
subss xmm2, xmm4
subss xmm6, dword [ebp - 0x40]
movss dword [ebp - 0x24], xmm2
movaps xmm0, xmm2
movss dword [ebp - 0xcc], xmm6
movaps xmm1, xmm6
movss dword [ebp - 0x78], xmm6
movaps xmm3, xmm2
addss xmm1, xmm5
subss xmm0, dword [edi + 0x18bc]
subss xmm3, dword [0x10038bdc]
movss dword [ebp - 0x70], xmm1
addss xmm0, xmm7
movss dword [ebp - 0x6c], xmm3
movss dword [ebp - 0x74], xmm0
test al, al
je 0x10029a77
comiss xmm3, dword [ebp - 0xbc]
jbe 0x10029a77
movss xmm2, dword [ebp - 0x34]
comiss xmm2, xmm0
jbe 0x10029a72
comiss xmm1, dword [ebp - 0xc0]
jbe 0x10029a72
movss xmm0, dword [ebp - 0x2c]
comiss xmm0, xmm6
jbe 0x10029a72
mov eax, dword [0x100604b8]
movups xmm2, xmmword [eax + 0x15b8]
comiss xmm4, xmm2
movaps xmm1, xmm2
shufps xmm1, xmm2, 0xff
mulss xmm1, dword [eax + 0x1510]
movups xmmword [ebp - 0xa8], xmm2
jbe 0x10029990
xorps xmm0, xmm0
jmp 0x10029997
movaps xmm0, xmm5
minss xmm0, xmm2
movss xmm5, dword [0x10038c58]
movss xmm2, dword [ebp - 0xa4]
comiss xmm4, xmm2
mulss xmm0, xmm5
addss xmm0, xmm7
cvttss2si ecx, xmm0
jbe 0x100299bd
xorps xmm0, xmm0
jmp 0x100299c9
movss xmm0, dword [0x10038bd4]
minss xmm0, xmm2
movss xmm2, dword [ebp - 0xa0]
mulss xmm0, xmm5
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm4, xmm2
jbe 0x100299ec
xorps xmm0, xmm0
jmp 0x100299f8
movss xmm0, dword [0x10038bd4]
minss xmm0, xmm2
mulss xmm0, xmm5
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm4, xmm1
jbe 0x10029a13
xorps xmm0, xmm0
jmp 0x10029a1f
movss xmm0, dword [0x10038bd4]
minss xmm0, xmm1
mulss xmm0, xmm5
push ecx
mov dword [esp], 0x3f800000
movss dword [ebp - 0xa0], xmm6
addss xmm0, xmm7
movss dword [ebp - 0x9c], xmm3
cvttss2si eax, xmm0
shl eax, 0x18
or eax, ecx
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax + 0x26c]
call fcn.1001c430
movss xmm6, dword [ebp - 0xcc]
movss xmm5, dword [0x10038bd4]
movss xmm2, dword [ebp - 0x24]
cmp byte [ebp - 0x30], 0
mov ebx, dword [ebp - 0x60]
jne 0x10029aa4
subss xmm2, dword [edi + 0x18bc]
subss xmm6, xmm5
movss dword [edi + 0x2cd4], xmm2
movss dword [edi + 0x2cd0], xmm6
jmp 0x10029aa4
mov edi, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x60]
cmp byte [ebp - 0x1c], 0
je 0x10029b52
mov ecx, dword [0x100604b8]
movss xmm2, dword [edi + 0x18bc]
mov eax, dword [ecx + 0x199c]
mov byte [eax + 0x7c], 1
mov eax, dword [ecx + 0x199c]
cmp byte [eax + 0x7f], 0
jne 0x10029b48
movss xmm4, dword [ebp - 0x20]
lea ecx, [ebp - 0xa0]
movss xmm5, dword [ebp - 0x64]
addss xmm4, xmm2
movss xmm1, dword [eax + 0xc8]
xorps xmm3, xmm3
movss xmm0, dword [eax + 0xcc]
addss xmm5, xmm3
movss dword [ebp - 0x78], xmm1
movss dword [ebp - 0x74], xmm0
addss xmm4, xmm0
addss xmm5, xmm1
movss dword [ebp - 0x6c], xmm4
subss xmm4, xmm0
movss dword [ebp - 0x70], xmm5
subss xmm5, xmm1
xorps xmm1, xmm1
movss dword [ebp - 0x9c], xmm4
movss dword [ebp - 0xa0], xmm5
call fcn.100051b0
push 0
xor edx, edx
lea ecx, [ebp - 0x78]
call fcn.10005310
add esp, 4
call fcn.10007f90
call fcn.1000dc90
mov eax, dword [ebp - 0x88]
test al, al
je 0x10029b67
call fcn.1000d5d0
mov eax, dword [ebp - 0x88]
cmp byte [edi + 0x2d0c], 0
je 0x10029b83
test al, al
jne 0x10029b83
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x54]
push ebx
call fcn.10011df0
add esp, 4
movss xmm0, dword [ebp - 0xc4]
xorps xmm4, xmm4
comiss xmm0, xmm4
jbe 0x10029bd5
movss xmm0, dword [ebp - 0x90]
xor edx, edx
addss xmm0, dword [edi + 0x155c]
mov ecx, dword [ebp - 0xc8]
movss dword [ebp - 0x54], xmm0
movss xmm0, dword [ebp - 0x94]
addss xmm0, dword [edi + 0x1548]
movss dword [ebp - 0x50], xmm0
push dword [ebp - 0x50]
push dword [ebp - 0x54]
push 1
call fcn.10002fd0
add esp, 0xc
mov cl, byte [ebp - 1]
test cl, cl
je 0x10029bf5
mov eax, dword [0x100604b8]
mov byte [eax + 0x19cf], 1
mov eax, dword [eax + 0x199c]
or dword [eax + 0x10c], 4
test byte [ebp + 0x14], 0x20
pop edi
movzx eax, cl
movzx ecx, byte [ebp - 2]
pop esi
cmovne eax, ecx
pop ebx
mov esp, ebp
pop ebp
ret