Function at 0x10027000
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x148
mov eax, dword [0x1007a00c]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
mov esi, dword [0x1007acc0]
mov ebx, esi
push edi
mov dword [ebp - 0xf0], edx
mov dword [ebp - 0x144], ecx
mov eax, dword [ebx + 0x199c]
mov dword [ebp - 0x11c], ebx
mov byte [eax + 0x78], 1
mov edi, dword [ebx + 0x199c]
mov dword [ebp - 0xe4], edi
cmp byte [edi + 0x7b], 0
jne 0x10027455
mov edx, dword [ebp + 0x10]
mov eax, edx
shr eax, 0xe
mov ecx, edx
not al
shr ecx, 0x14
and eax, 0xffffff01
and ecx, 0xffffff01
mov dword [ebp - 0xf8], eax
mov eax, edx
shr eax, 0xf
and eax, 0xffffff01
mov dword [ebp - 0xe0], ecx
mov dword [ebp - 0x134], eax
mov eax, edx
shr eax, 0x10
not al
and eax, 0xffffff01
mov dword [ebp - 0x118], eax
mov eax, edx
shr eax, 0x12
and eax, 0xffffff01
mov dword [ebp - 0x114], eax
test cl, cl
je 0x100270b7
call fcn.1000c620
mov esi, dword [0x1007acc0]
mov ecx, dword [edi + 0x1bc]
xor edx, edx
mov eax, dword [edi + 0x1c4]
push dword [eax + ecx*4 - 4]
mov ecx, dword [ebp - 0x144]
call fcn.10002900
add esp, 4
mov dword [ebp - 0xd8], eax
cmp dword [esi + 0x19bc], eax
jne 0x100270eb
mov dword [esi + 0x19c4], eax
cmp dword [esi + 0x19c0], eax
jne 0x100270fa
mov byte [esi + 0x19cf], 1
mov edx, dword [ebp - 0x144]
mov eax, edx
cmp edx, 0xffffffff
jae 0x1002711d
mov cl, byte [eax]
test cl, cl
je 0x1002711d
cmp cl, 0x23
jne 0x10027117
cmp byte [eax + 1], cl
je 0x1002711d
inc eax
cmp eax, 0xffffffff
jb 0x10027107
movss xmm2, dword [esi + 0x18bc]
movss xmm0, dword [0x10077464]
mov edi, dword [esi + 0x18b8]
movss dword [ebp - 0x44], xmm2
movss dword [ebp - 0x138], xmm0
cmp edx, eax
jne 0x10027151
xorps xmm6, xmm6
movss dword [ebp - 0x140], xmm6
jmp 0x100271b2
movss xmm3, dword [0x10077440]
push ecx
push eax
push edx
push ecx
lea eax, [ebp - 0x128]
mov dword [esp], 0xbf800000
push eax
mov ecx, edi
call fcn.1001e8d0
movss xmm1, dword [ebp - 0x128]
xorps xmm6, xmm6
comiss xmm1, xmm6
jbe 0x1002718f
movss xmm0, dword [ebp - 0x44]
divss xmm0, dword [edi]
subss xmm1, xmm0
addss xmm1, dword [0x10077248]
movss xmm2, dword [ebp - 0x124]
cvttss2si eax, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x140], xmm0
cmp byte [ebp - 0xe0], 0
je 0x100271cb
movss xmm2, dword [esi + 0x18bc]
mulss xmm2, dword [0x100772ec]
mov edi, dword [esi + 0x199c]
movss xmm3, dword [edi + 0x168]
comiss xmm6, xmm3
jbe 0x1002724f
movss xmm4, dword [edi + 0xc4]
movss xmm1, dword [edi + 0x210]
mov ecx, dword [edi + 0x1b8]
subss xmm4, dword [edi + 0xc]
subss xmm1, dword [edi + 0xc]
test ecx, ecx
je 0x1002723b
mov edx, dword [ecx + 0xc]
movss xmm0, dword [ecx + 0x14]
lea eax, [edx + 1]
test eax, eax
cmovns edx, eax
lea ecx, [edx*8]
sub ecx, edx
mov edx, dword [edi + 0x1b8]
movss xmm1, dword [edx + 0x18]
mov eax, dword [edx + 0x34]
subss xmm1, xmm0
mulss xmm1, dword [eax + ecx*4]
addss xmm1, xmm0
subss xmm1, dword [edi + 0x3c]
subss xmm1, xmm4
addss xmm1, xmm3
movss xmm3, dword [0x1007724c]
maxss xmm3, xmm1
movss xmm5, dword [ebx + 0x1550]
xorps xmm1, xmm1
cvttss2si eax, xmm3
movaps xmm3, xmm5
addss xmm3, xmm5
movd xmm4, eax
mov eax, dword [ebp + 0xc]
addss xmm3, xmm2
xorps xmm2, xmm2
cvtdq2ps xmm4, xmm4
movss xmm7, dword [eax]
comiss xmm6, xmm7
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x120], xmm7
movss dword [ebp - 0x130], xmm0
ja 0x10027299
comiss xmm6, xmm0
jbe 0x10027302
movss xmm1, dword [edi + 0x210]
movss xmm2, dword [edi + 0x214]
mov ecx, dword [edi + 0x1b8]
subss xmm1, dword [edi + 0xc]
subss xmm2, dword [edi + 0x10]
test ecx, ecx
je 0x100272f6
mov edx, dword [ecx + 0xc]
movss xmm0, dword [ecx + 0x14]
lea eax, [edx + 1]
test eax, eax
cmovns edx, eax
lea ecx, [edx*8]
sub ecx, edx
mov edx, dword [edi + 0x1b8]
movss xmm1, dword [edx + 0x18]
mov eax, dword [edx + 0x34]
subss xmm1, xmm0
mulss xmm1, dword [eax + ecx*4]
addss xmm1, xmm0
subss xmm1, dword [edi + 0x3c]
mov eax, edi
addss xmm1, dword [eax + 0xc]
addss xmm2, dword [eax + 0x10]
comiss xmm6, xmm7
movss xmm0, dword [0x100772c8]
jb 0x10027340
ucomiss xmm7, xmm6
lahf
test ah, 0x44
jp 0x10027325
movaps xmm7, xmm4
movss dword [ebp - 0x120], xmm7
jmp 0x10027340
subss xmm1, dword [edi + 0xc4]
maxss xmm1, xmm0
addss xmm1, xmm7
movaps xmm7, xmm1
movss dword [ebp - 0x120], xmm1
movss xmm1, dword [ebp - 0x130]
comiss xmm6, xmm1
jb 0x10027378
ucomiss xmm1, xmm6
lahf
test ah, 0x44
jp 0x10027360
movss dword [ebp - 0x130], xmm3
jmp 0x10027378
subss xmm2, dword [edi + 0xc8]
maxss xmm2, xmm0
addss xmm2, xmm1
movss dword [ebp - 0x130], xmm2
mov esi, dword [ebp - 0xe4]
movss xmm2, dword [ebp - 0x140]
comiss xmm2, xmm6
movss xmm3, dword [esi + 0xc4]
movss xmm4, dword [esi + 0xc8]
movaps xmm0, xmm3
movaps xmm1, xmm4
movss dword [ebp - 0x54], xmm3
addss xmm1, dword [ebp - 0x130]
addss xmm0, xmm7
movss dword [ebp - 0x50], xmm4
movss dword [ebp - 0x48], xmm1
movss dword [ebp - 0x4c], xmm0
jbe 0x100273cb
addss xmm2, dword [ebx + 0x1564]
jmp 0x100273ce
xorps xmm2, xmm2
cmp byte [ebp - 0xe0], 0
addss xmm0, xmm2
addss xmm1, xmm6
movss dword [ebp - 0x28], xmm3
movss dword [ebp - 0x24], xmm4
mov dword [ebp - 0x108], esi
movss dword [ebp - 0x20], xmm0
movss dword [ebp - 0x1c], xmm1
je 0x100274a7
mov edx, dword [ebp - 0xd8]
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x28]
call fcn.10004b80
movss xmm0, dword [ebp - 0x4c]
lea edx, [ebp - 0x128]
subss xmm0, dword [ebp - 0x54]
mov ecx, dword [ebp - 0xd8]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [ebp - 0x48]
subss xmm0, dword [ebp - 0x50]
movss dword [ebp - 0x124], xmm0
call fcn.10007920
add esp, 4
test al, al
jne 0x10027468
call fcn.10007760
call fcn.1000c760
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1004edb4
mov esp, ebp
pop ebp
ret
mov edi, dword [0x1007acc0]
movss xmm0, dword [ebp - 0x120]
mov eax, dword [edi + 0x199c]
mov byte [eax + 0x78], 1
mov ecx, dword [edi + 0x199c]
mov dword [ebp - 0x108], ecx
subss xmm0, dword [ecx + 0x6c]
mov eax, dword [ecx + 0x134]
or dword [ecx + 0x13c], eax
movss dword [ebp - 0x120], xmm0
jmp 0x100274f0
subss xmm1, xmm4
subss xmm0, xmm3
lea ecx, [ebp - 0x128]
movss dword [ebp - 0x124], xmm1
movaps xmm1, xmm5
movss dword [ebp - 0x128], xmm0
call fcn.10004a60
mov edx, dword [ebp - 0xd8]
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x28]
call fcn.10004b80
add esp, 4
test al, al
je 0x10027455
mov edi, dword [0x1007acc0]
mov edx, dword [ebp - 0xd8]
lea ecx, [ebp - 0x54]
mov dword [ebp - 0xc0], edi
call fcn.10004d20
mov byte [ebp - 0xb8], al
test al, al
je 0x10027518
mov dword [ebx + 0x1c58], 1
cmp byte [ebp - 0x134], 0
je 0x1002769e
mov edx, dword [ebx + 0x18b8]
cmp dword [edx + 0x28], 0x2a
jg 0x10027536
mov eax, dword [edx + 0x34]
jmp 0x10027555
mov eax, dword [edx + 0x30]
mov ecx, 0xffff
movzx eax, word [eax + 0x54]
cmp ax, cx
jne 0x1002754c
mov eax, dword [edx + 0x34]
jmp 0x10027555
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x18]
lea eax, [eax + ecx*8]
mov dword [ebp - 0xd4], eax
lea esi, [ebx + 0x2b84]
mov eax, dword [edx]
mov dword [esi], eax
mov eax, dword [edx + 4]
mov dword [esi + 4], eax
mov eax, dword [ebx + 0x18b8]
mov dword [ebp - 0x44], esi
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [esi + 0xc], eax
mov dword [esi + 8], ecx
mov eax, dword [ebx + 0x18b8]
mov eax, dword [eax + 0x48]
mov dword [esi + 0x48], eax
mov eax, dword [ebx + 0x18b8]
mov eax, dword [eax + 0x4c]
mov dword [esi + 0x4c], eax
mov eax, dword [ebx + 0x18b8]
mov eax, dword [eax + 0x44]
mov dword [esi + 0x44], eax
mov eax, dword [ebp - 0xd4]
mov dword [esi + 0x34], eax
mov eax, dword [eax + 4]
mov dword [esi + 0x38], eax
movss xmm0, dword [edi + 0x98]
mov eax, dword [edi + 0x199c]
mov dword [edi + 0x18b8], esi
mulss xmm0, dword [esi]
mulss xmm0, dword [esi + 4]
movss dword [edi + 0x18c0], xmm0
test eax, eax
je 0x100275ee
movss xmm0, dword [eax + 0x268]
mulss xmm0, dword [edi + 0x18c0]
jmp 0x100275f1
xorps xmm0, xmm0
movss dword [edi + 0x18bc], xmm0
mov eax, dword [esi + 0x44]
mov ecx, dword [eax + 0x2c]
mov eax, dword [eax + 0x30]
mov dword [edi + 0x18c8], eax
lea eax, [ebp - 0x44]
mov dword [edi + 0x18c4], ecx
lea ecx, [edi + 0x1a18]
push eax
mov dword [edi + 0x18cc], esi
movss dword [edi + 0x18d0], xmm0
call fcn.10012040
mov eax, dword [esi + 0x44]
mov eax, dword [eax + 8]
mov dword [ebp - 0x44], eax
mov eax, dword [edi + 0x199c]
mov eax, dword [eax + 0x270]
mov edi, dword [eax + 0x4c]
lea esi, [eax + 0x48]
mov ecx, dword [esi]
mov dword [ebp - 0xfc], eax
cmp ecx, edi
jne 0x10027676
inc ecx
test edi, edi
je 0x10027662
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, edi
jmp 0x10027667
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.10011ef0
mov ecx, dword [esi]
mov eax, dword [esi + 8]
mov edx, dword [ebp - 0x44]
mov dword [eax + ecx*4], edx
mov ecx, dword [ebp - 0xfc]
inc dword [esi]
call fcn.1001a4b0
mov edi, dword [0x1007acc0]
mov esi, dword [ebp - 0xe4]
mov dword [ebp - 0xc0], edi
test dword [ebp + 0x10], 0x440
mov ecx, esi
mov edx, dword [ebp - 0xd8]
sete al
movzx eax, al
push eax
call fcn.10004e90
add esp, 4
mov byte [ebp - 0xe5], al
test al, al
je 0x10027757
mov ecx, dword [esi + 0x324]
cmp ecx, dword [esi + 0x32c]
jne 0x10027757
mov byte [ebp - 0xb7], 1
mov byte [ebp - 0xc9], 0
cmp byte [ebp - 0xb8], 0
je 0x100276ff
cmp byte [ebx + 0x3f8], 0
mov byte [ebp - 0xba], 1
jne 0x10027706
mov byte [ebp - 0xba], 0
cmp byte [ebp - 0xe0], 0
je 0x10027779
cmp dword [ebx + 0x19bc], 0
jne 0x10027779
mov eax, dword [ebp - 0xd8]
cmp dword [ebx + 0x1d14], eax
jne 0x10027779
mov eax, dword [ebp - 0x108]
xor edx, edx
mov ecx, dword [eax + 0x1bc]
mov eax, dword [eax + 0x1c4]
push dword [eax + ecx*4 - 4]
mov ecx, str.SCROLLY
call fcn.10002900
add esp, 4
cmp dword [ebx + 0x19c0], eax
jne 0x10027779
mov cl, 1
jmp 0x1002777b
mov byte [ebp - 0xb7], 0
test al, al
je 0x100276df
mov byte [ebp - 0xc9], 1
mov byte [ebp - 0xb7], 0
jmp 0x100276e6
xor cl, cl
mov eax, dword [ebx + 0x19bc]
mov edx, dword [ebp - 0xd8]
cmp eax, edx
je 0x100277ae
cmp dword [ebx + 0x1abc], edx
je 0x100277a4
cmp dword [ebx + 0x1ab0], edx
jne 0x100277ae
cmp dword [ebx + 0x1acc], 3
jne 0x100277ae
mov dl, 1
mov byte [ebp - 0xc1], dl
jmp 0x100277be
xor dl, dl
mov byte [ebp - 0xc1], dl
cmp eax, dword [ebp - 0xd8]
je 0x100277d8
test byte [ebp + 0x10], 0x10
jne 0x100277c8
test dl, dl
je 0x100277d8
cmp byte [ebp - 0xe0], 0
mov byte [ebp - 0xec], 1
je 0x100277df
mov byte [ebp - 0xec], 0
cmp byte [ebp - 0xe5], 0
jne 0x10027817
cmp byte [ebp - 0xba], 0
jne 0x10027817
test cl, cl
jne 0x10027817
test dl, dl
jne 0x10027817
mov byte [ebp - 0xb9], dl
cmp byte [ebx + 0x3f8], dl
je 0x10027b1e
mov byte [ebp - 0xb9], 1
jmp 0x10027b1e
mov ecx, dword [ebp - 0xd8]
cmp eax, ecx
je 0x10027ae0
mov esi, dword [ebp - 0xf0]
mov eax, dword [ebx + 0x1d40]
mov dword [ebp - 0xfc], eax
lea ecx, [esi + 1]
nop word [eax + eax]
mov al, byte [esi]
inc esi
test al, al
jne 0x10027840
mov edx, dword [ebp + 8]
sub esi, ecx
mov eax, dword [ebx + 0x1d1c]
inc edx
mov dword [ebp - 0xd0], edx
cmp edx, eax
jle 0x1002789f
lea edi, [ebx + 0x1d18]
test eax, eax
je 0x10027879
cdq
sub eax, edx
mov edx, dword [ebp - 0xd0]
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 4]
jmp 0x1002787e
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
mov ecx, edi
push eax
call fcn.10012400
mov edi, dword [0x1007acc0]
mov edx, dword [ebp - 0xd0]
mov dword [ebp - 0xc0], edi
mov dword [ebx + 0x1d18], edx
inc esi
mov eax, dword [ebx + 0x1d28]
cmp esi, eax
jle 0x100278ec
test eax, eax
je 0x100278c6
cdq
sub eax, edx
lea edx, [ebx + 0x1d24]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x100278d1
mov ecx, 8
lea edx, [ebx + 0x1d24]
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.10012290
mov edi, dword [0x1007acc0]
mov dword [ebp - 0xc0], edi
mov dword [ebx + 0x1d24], esi
push esi
mov esi, dword [ebp - 0xf0]
push esi
push dword [ebx + 0x1d2c]
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [ebx + 0x1d20]
add esp, 0xc
mov ecx, dword [ebp + 8]
mov eax, esi
dec ecx
mov dword [ebp - 0xd0], edx
mov esi, edx
lea ecx, [edx + ecx*2]
cmp edx, ecx
jae 0x1002797a
mov ebx, eax
cmp byte [ebx], 0
je 0x10027968
push 0
mov edx, ebx
lea ecx, [ebp - 0x44]
call fcn.10002ca0
add ebx, eax
add esp, 4
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x10027962
cmp eax, 0x10000
jae 0x1002794f
mov word [esi], ax
add esi, 2
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0xd0]
dec eax
lea eax, [edx + eax*2]
cmp esi, eax
jb 0x10027925
jmp 0x10027968
mov edx, dword [ebp - 0xd0]
mov dword [ebp - 0xd4], ebx
mov ebx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0xd4]
sub eax, dword [ebp - 0xf0]
xor ecx, ecx
mov word [esi], cx
sub esi, edx
mov ecx, dword [ebp - 0xd8]
sar esi, 1
mov dword [ebx + 0x1d40], esi
mov dword [ebx + 0x1d3c], eax
mov dword [ebx + 0x2b70], 0xbe99999a
cmp dword [ebx + 0x1d14], ecx
jne 0x100279fd
cmp dword [ebp - 0xfc], esi
jne 0x100279fd
mov eax, dword [ebx + 0x1d4c]
mov ecx, esi
mov edx, dword [ebp - 0xe0]
cmp eax, esi
cmovl ecx, eax
mov eax, dword [ebx + 0x1d50]
cmp eax, esi
mov dword [ebx + 0x1d4c], ecx
mov ecx, esi
cmovl ecx, eax
mov eax, dword [ebx + 0x1d54]
cmp eax, esi
mov dword [ebx + 0x1d50], ecx
mov ecx, dword [ebp - 0xd8]
cmovl esi, eax
mov dword [ebx + 0x1d54], esi
jmp 0x10027a8e
mov edx, dword [ebp - 0xe0]
mov al, dl
mov dword [ebx + 0x1d14], ecx
xor al, 1
mov dword [ebx + 0x1d48], 0
mov dword [ebx + 0x2b62], 0x630000
mov dword [ebx + 0x2b68], 0
mov dword [ebx + 0x2b6c], 0x3e7
mov dword [ebx + 0x1d50], 0
mov dword [ebx + 0x1d54], 0
mov dword [ebx + 0x1d4c], 0
mov dword [ebx + 0x1d58], 0x10000
mov dword [ebx + 0x1d60], 0
mov byte [ebx + 0x1d5c], al
test dl, dl
jne 0x10027a8e
mov eax, dword [ebp - 0xec]
mov esi, 1
cmp byte [ebp - 0xb7], dl
movzx eax, al
cmovne eax, esi
mov dword [ebp - 0xec], eax
test dword [ebp + 0x10], 0x2000
je 0x10027a9e
mov byte [ebx + 0x1d58], 1
test dl, dl
jne 0x10027ada
cmp byte [ebp - 0xc9], dl
jne 0x10027aba
cmp byte [ebp - 0xba], dl
je 0x10027ada
cmp byte [ebx + 0xfc], dl
je 0x10027ada
mov edx, dword [ebp - 0xe4]
mov byte [ebp - 0xec], 1
call fcn.100048e0
call fcn.100049a0
mov ecx, edx
call fcn.1000bf30
jmp 0x10027b03
mov esi, dword [ebp - 0xe4]
mov edx, esi
call fcn.100048e0
call fcn.100049a0
mov ecx, esi
call fcn.1000bf30
cmp byte [ebp - 0xe0], 0
mov byte [ebp - 0xb9], 0
jne 0x10027b1e
test byte [ebp + 0x10], 0x80
mov byte [ebp - 0xb9], 0
jne 0x10027b1e
or dword [ebx + 0x19d4], 0xc
mov byte [ebp - 0xb9], 0
xor cl, cl
mov byte [ebp - 0xe5], 0
mov byte [ebp - 0xb5], cl
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0x100], 0
cmp dword [ebx + 0x19bc], ecx
jne 0x10028000
cmp byte [ebp - 0xf8], 0
jne 0x10027c79
cmp byte [ebx + 0x19cc], 0
jne 0x10027c79
mov esi, dword [ebp + 8]
mov eax, dword [ebx + 0x1d1c]
inc esi
cmp esi, eax
jle 0x10027bad
test eax, eax
je 0x10027b87
cdq
sub eax, edx
lea edx, [ebx + 0x1d18]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x10027b92
mov ecx, 8
lea edx, [ebx + 0x1d18]
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.10012400
mov edi, dword [0x1007acc0]
mov dword [ebp - 0xc0], edi
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0xf0]
mov dword [ebx + 0x1d18], esi
mov edx, dword [ebx + 0x1d20]
mov esi, edx
mov dword [ebp - 0xd0], edx
lea ecx, [edx + ecx*2]
cmp edx, ecx
jae 0x10027c27
mov ebx, eax
cmp byte [ebx], 0
je 0x10027c15
push 0
mov edx, ebx
lea ecx, [ebp - 0x44]
call fcn.10002ca0
add ebx, eax
add esp, 4
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x10027c0f
cmp eax, 0x10000
jae 0x10027bfd
mov word [esi], ax
add esi, 2
mov edx, dword [ebp - 0xd0]
mov ecx, dword [ebp + 8]
lea eax, [edx + ecx*2]
cmp esi, eax
jb 0x10027bd3
jmp 0x10027c15
mov edx, dword [ebp - 0xd0]
mov dword [ebp - 0xd4], ebx
mov ebx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0xd4]
sub eax, dword [ebp - 0xf0]
xor ecx, ecx
mov word [esi], cx
sub esi, edx
sar esi, 1
mov dword [ebx + 0x1d3c], eax
mov ecx, esi
mov eax, dword [ebx + 0x1d4c]
cmp eax, esi
mov dword [ebx + 0x1d40], esi
cmovl ecx, eax
mov eax, dword [ebx + 0x1d50]
cmp eax, esi
mov dword [ebx + 0x1d4c], ecx
mov ecx, esi
cmovl ecx, eax
mov eax, dword [ebx + 0x1d54]
cmp eax, esi
mov dword [ebx + 0x1d50], ecx
cmovl esi, eax
mov dword [ebx + 0x1d54], esi
mov eax, dword [ebx + 0x1d3c]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp + 8]
mov dword [ebx + 0x1d44], eax
mov eax, dword [ebp + 0x10]
mov dword [ebx + 0x2b78], eax
mov dword [ebx + 0x2b7c], 0
mov dword [ebx + 0x2b80], 0
cmp byte [ebx + 0xec], 0
mov dword [ebx + 0x2e60], 1
sete al
cmp byte [ebp - 0xe0], 0
mov byte [ebx + 0x19cd], al
movss xmm7, dword [ebx + 0xe4]
subss xmm7, dword [ebp - 0x54]
subss xmm7, dword [ebx + 0x154c]
addss xmm7, dword [ebx + 0x1d48]
je 0x10027d0b
mov eax, dword [ebp - 0x108]
movss xmm2, dword [ebx + 0xe8]
subss xmm2, dword [eax + 0xc8]
subss xmm2, dword [ebx + 0x1550]
jmp 0x10027d1b
movss xmm2, dword [ebx + 0x18bc]
mulss xmm2, dword [0x10077210]
cmp byte [ebp - 0xec], 0
mov cl, byte [ebx + 0xbd]
mov byte [ebp - 0xb7], cl
jne 0x10027eee
mov dl, byte [ebp - 0xb8]
test dl, dl
je 0x10027d54
mov al, byte [ebx + 0x3fd]
test cl, cl
jne 0x10027dd1
test al, al
jne 0x10027eee
cmp byte [ebx + 0x3f8], 0
mov al, byte [ebx + 0x2b75]
je 0x10027e44
test al, al
jne 0x10027e44
test dl, dl
je 0x10027f18
lea esi, [ebx + 0x1d14]
cmp byte [ebx + 0x1d5c], al
je 0x10027d99
push 0
mov edx, esi
lea ecx, [ebp - 0x40]
call fcn.10025750
movss xmm2, dword [ebp - 0x34]
add esp, 4
movaps xmm1, xmm7
mov ecx, esi
call fcn.10025a60
mov cl, byte [ebp - 0xb7]
mov dword [ebx + 0x1d4c], eax
mov dword [ebx + 0x1d50], eax
mov dword [ebx + 0x1d54], eax
mov byte [ebx + 0x1d5b], 0
mov dword [ebx + 0x2b70], 0xbe99999a
jmp 0x10027f18
test al, al
je 0x10027d54
push 0x1000c
lea edx, [ebx + 0x1d4c]
lea ecx, [ebx + 0x1d14]
call fcn.10025e60
add esp, 4
mov byte [ebx + 0x2b74], 1
lea edx, [ebx + 0x1d4c]
mov dword [ebx + 0x2b70], 0xbe99999a
lea ecx, [ebx + 0x1d14]
push 0x3000d
call fcn.10025e60
mov edi, dword [0x1007acc0]
add esp, 4
mov cl, byte [ebp - 0xb7]
mov byte [ebx + 0x2b74], 1
mov dword [ebx + 0x2b70], 0xbe99999a
mov dword [ebp - 0xc0], edi
jmp 0x10027f18
cmp byte [ebx + 0xec], 0
je 0x10027f18
test al, al
jne 0x10027f18
movss xmm0, dword [ebx + 0x398]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x10027e82
movss xmm0, dword [ebx + 0x39c]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x10027f18
cmp byte [ebx + 0x1d5c], 0
lea esi, [ebx + 0x1d14]
je 0x10027ea5
push 0
mov edx, esi
lea ecx, [ebp - 0x40]
call fcn.10025750
movss xmm2, dword [ebp - 0x34]
add esp, 4
mov eax, dword [ebx + 0x1d50]
cmp eax, dword [ebx + 0x1d54]
jne 0x10027ebf
mov eax, dword [ebx + 0x1d4c]
mov dword [ebx + 0x1d50], eax
movaps xmm1, xmm7
mov ecx, esi
call fcn.10025a60
mov cl, byte [ebp - 0xb7]
mov dword [ebx + 0x1d54], eax
mov dword [ebx + 0x1d4c], eax
mov dword [ebx + 0x2b70], 0xbe99999a
mov byte [ebx + 0x2b74], 1
jmp 0x10027f18
mov eax, dword [ebx + 0x1d40]
mov dword [ebx + 0x1d50], 0
mov dword [ebx + 0x1d54], eax
mov dword [ebx + 0x1d4c], eax
mov byte [ebx + 0x1d5b], 0
mov byte [ebx + 0x2b75], 1
cmp byte [ebx + 0x2b75], 0
je 0x10027f31
cmp byte [ebx + 0xec], 0
jne 0x10027f31
mov byte [ebx + 0x2b75], 0
cmp word [ebx + 0x300], 0
lea esi, [ebx + 0x300]
je 0x10028000
cmp byte [ebx + 0xfc], 0
je 0x10027f5b
cmp byte [ebx + 0xfe], 0
je 0x10027fe6
test cl, cl
je 0x10027f68
cmp byte [ebx + 0xff], 0
jne 0x10027fe6
cmp byte [ebp - 0xf8], 0
je 0x10027fe6
cmp byte [ebp - 0xc1], 0
jne 0x10027fe6
xor edi, edi
nop dword [eax]
movzx eax, word [esi]
test ax, ax
je 0x10027fda
mov edx, dword [ebp + 0x10]
lea ecx, [ebp - 0xd0]
sub esp, 8
mov dword [ebp - 0xd0], eax
call fcn.10026e40
add esp, 8
test al, al
je 0x10027fd1
push dword [ebp - 0xd0]
lea edx, [ebx + 0x1d4c]
lea ecx, [ebx + 0x1d14]
call fcn.10025e60
add esp, 4
mov byte [ebx + 0x2b74], 1
mov dword [ebx + 0x2b70], 0xbe99999a
inc edi
add esi, 2
cmp edi, 0x11
jl 0x10027f80
mov edi, dword [0x1007acc0]
mov dword [ebp - 0xc0], edi
xorps xmm0, xmm0
movups xmmword [ebx + 0x300], xmm0
movups xmmword [ebx + 0x310], xmm0
mov word [ebx + 0x320], 0
mov eax, dword [ebp - 0xd8]
xor cl, cl
mov byte [ebp - 0xb6], cl
cmp dword [ebx + 0x19bc], eax
jne 0x1002839e
cmp byte [ebx + 0x19cc], cl
jne 0x1002839e
cmp byte [ebp - 0xb9], cl
jne 0x1002839e
mov ah, byte [ebx + 0xfd]
xor esi, esi
mov dh, byte [ebx + 0xbd]
test ah, ah
mov al, byte [ebx + 0xfc]
mov ecx, 0x20000
cmovne esi, ecx
mov byte [ebp - 0xf1], ah
mov byte [ebp - 0x129], dh
test dh, dh
je 0x100280b0
cmp byte [ebx + 0xff], 0
je 0x10028074
test al, al
jne 0x10028074
mov ecx, 1
jmp 0x10028076
xor ecx, ecx
test ecx, ecx
jne 0x100280bd
xor dl, dl
mov byte [ebp - 0xba], dl
mov cl, al
test dh, dh
je 0x100280ce
cmp byte [ebx + 0xff], 0
je 0x100280ce
test ah, ah
je 0x100280ce
mov cl, byte [ebx + 0xfc]
test cl, cl
jne 0x100280ce
cmp byte [ebx + 0xfe], cl
jne 0x100280ce
mov byte [ebp - 0xc9], 1
jmp 0x100280dd
test al, al
je 0x1002807a
cmp byte [ebx + 0xff], 0
jne 0x1002807a
cmp byte [ebx + 0xfe], 0
jne 0x1002807a
test ah, ah
jne 0x1002807a
mov dl, 1
jmp 0x1002807c
mov byte [ebp - 0xc9], 0
test dh, dh
je 0x100281a4
cmp byte [ebx + 0xff], 0
mov al, byte [ebx + 0xfe]
mov byte [ebp - 0xc1], al
je 0x100281b1
test cl, cl
jne 0x100281b1
test al, al
jne 0x100281b1
mov byte [ebp - 0xd9], 1
xor dh, dh
cmp byte [ebx + 0xfd], dh
je 0x10028132
test cl, cl
jne 0x10028132
cmp byte [ebx + 0xfe], cl
jne 0x10028132
mov byte [ebp - 0xb8], 1
cmp byte [ebx + 0xff], cl
je 0x10028139
mov byte [ebp - 0xb8], 0
test dl, dl
je 0x1002814f
mov ecx, dword [edi + 0x7c]
test ecx, ecx
js 0x1002814f
mov dl, 1
call fcn.100073f0
test al, al
jne 0x10028172
cmp byte [ebp - 0xb8], 0
je 0x100281e7
mov ecx, dword [edi + 0x5c]
test ecx, ecx
js 0x100281e7
mov dl, 1
call fcn.100073f0
test al, al
je 0x100281e7
cmp byte [ebp - 0xf8], 0
je 0x100281e7
cmp byte [ebp - 0x134], 0
jne 0x100281e7
cmp byte [ebp - 0xe0], 0
je 0x1002819b
mov eax, dword [ebx + 0x1d50]
cmp eax, dword [ebx + 0x1d54]
je 0x100281e7
mov byte [ebp - 0xb7], 1
jmp 0x100281ee
mov byte [ebp - 0xc1], cl
mov byte [ebp - 0xc9], 0
mov byte [ebp - 0xd9], 0
test cl, cl
je 0x1002810d
test ah, ah
jne 0x1002810d
cmp byte [ebx + 0xfe], ah
jne 0x1002810d
cmp byte [ebx + 0xff], ah
jne 0x1002810d
mov dh, 1
jmp 0x10028132
mov byte [ebp - 0xb7], 0
cmp byte [ebp - 0xba], 0
je 0x10028209
mov ecx, dword [edi + 0x74]
test ecx, ecx
js 0x10028209
mov dl, 1
call fcn.100073f0
test al, al
jne 0x1002821f
test dh, dh
je 0x10028248
mov ecx, dword [edi + 0x58]
test ecx, ecx
js 0x10028248
mov dl, 1
call fcn.100073f0
test al, al
je 0x10028248
cmp byte [ebp - 0x134], 0
jne 0x10028248
cmp byte [ebp - 0xe0], 0
je 0x1002823f
mov eax, dword [ebx + 0x1d50]
cmp eax, dword [ebx + 0x1d54]
je 0x10028248
mov byte [ebp - 0x109], 1
jmp 0x1002824f
mov byte [ebp - 0x109], 0
mov dh, byte [ebp - 0xba]
test dh, dh
je 0x1002826b
mov ecx, dword [edi + 0x78]
test ecx, ecx
js 0x1002826b
mov dl, 1
call fcn.100073f0
test al, al
jne 0x10028286
cmp byte [ebp - 0xb8], 0
je 0x10028296
mov ecx, dword [edi + 0x58]
test ecx, ecx
js 0x10028296
mov dl, 1
call fcn.100073f0
test al, al
je 0x10028296
cmp byte [ebp - 0xf8], 0
mov byte [ebp - 0x10a], 1
jne 0x1002829d
mov byte [ebp - 0x10a], 0
test dh, dh
je 0x100282d0
mov ecx, dword [edi + 0x84]
test ecx, ecx
js 0x100282d0
mov dl, 1
call fcn.100073f0
test al, al
je 0x100282d0
cmp byte [ebp - 0xf8], 0
je 0x100282d0
cmp byte [ebp - 0x118], 0
je 0x100282d0
mov byte [ebp - 0xb8], dl
jmp 0x100282db
mov byte [ebp - 0xb8], 0
test dh, dh
je 0x100282f0
mov ecx, dword [edi + 0x80]
test ecx, ecx
js 0x100282f0
mov dl, 1
call fcn.100073f0
test al, al
jne 0x1002830e
cmp byte [ebp - 0xc9], 0
je 0x10028324
mov ecx, dword [edi + 0x84]
test ecx, ecx
js 0x10028324
mov dl, 1
call fcn.100073f0
test al, al
je 0x10028324
cmp byte [ebp - 0xf8], 0
je 0x10028324
cmp byte [ebp - 0x118], 0
je 0x10028324
mov dh, 1
jmp 0x10028326
xor dh, dh
mov ecx, dword [edi + 0x38]
test ecx, ecx
js 0x1002841b
mov dl, 1
call fcn.100073f0
test al, al
je 0x1002841b
cmp byte [ebp - 0xd9], 0
je 0x10028350
mov eax, 0x10004
jmp 0x10028364
mov eax, 0x10000
mov ecx, 0x1000c
cmp byte [ebp - 0xc1], 0
cmovne eax, ecx
or eax, esi
push eax
lea edx, [ebx + 0x1d4c]
lea ecx, [ebx + 0x1d14]
call fcn.10025e60
mov dword [ebx + 0x2b70], 0xbe99999a
mov byte [ebx + 0x2b74], 1
add esp, 4
mov edi, dword [0x1007acc0]
mov dword [ebp - 0xc0], edi
mov cl, byte [ebp - 0xb6]
mov dh, byte [ebp - 0xb5]
mov eax, dword [ebx + 0x19bc]
cmp eax, dword [ebp - 0xd8]
jne 0x10029074
xor eax, eax
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xec], eax
test cl, cl
je 0x10028bee
cmp byte [ebp - 0xf8], al
je 0x10028b1a
mov esi, dword [ebx + 0x1d2c]
mov ecx, esi
mov eax, dword [ebp - 0xf0]
nop word [eax + eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10028afe
test dl, dl
je 0x10028414
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10028afe
add eax, 2
add ecx, 2
test dl, dl
jne 0x100283f0
xor eax, eax
jmp 0x10028b03
mov ecx, dword [edi + 0x3c]
test ecx, ecx
js 0x1002844d
mov dl, 1
call fcn.100073f0
test al, al
je 0x1002844d
cmp byte [ebp - 0xd9], 0
je 0x10028440
mov eax, 0x10005
jmp 0x10028364
mov eax, 0x10001
lea ecx, [eax + 0xc]
jmp 0x1002835a
mov ecx, dword [edi + 0x40]
test ecx, ecx
js 0x100284bf
mov dl, 1
call fcn.100073f0
test al, al
je 0x100284bf
cmp byte [ebp - 0xe0], 0
je 0x100284bf
cmp byte [ebx + 0xfc], 0
je 0x100284ac
mov edx, dword [ebp - 0x108]
xorps xmm2, xmm2
movss xmm1, dword [edx + 0x58]
movaps xmm0, xmm1
subss xmm0, dword [ebx + 0x18bc]
addss xmm1, dword [edx + 0xe0]
maxss xmm0, xmm2
subss xmm1, xmm0
movss dword [edx + 0x58], xmm0
movss dword [edx + 0xe0], xmm1
jmp 0x10028398
movzx eax, byte [ebp - 0xd9]
lea eax, [eax*4 + 0x10002]
jmp 0x10028364
mov ecx, dword [edi + 0x44]
test ecx, ecx
js 0x10028552
mov dl, 1
call fcn.100073f0
test al, al
je 0x10028552
cmp byte [ebp - 0xe0], 0
je 0x10028552
cmp byte [ebx + 0xfc], 0
je 0x1002853f
mov eax, dword [edi + 0x199c]
mov ecx, dword [ebp - 0x108]
movss xmm0, dword [eax + 0x20]
subss xmm0, dword [eax + 0x70]
movss xmm1, dword [eax + 0x30]
movss xmm3, dword [ecx + 0x58]
movaps xmm2, xmm3
addss xmm2, dword [ebx + 0x18bc]
addss xmm3, dword [ecx + 0xe0]
subss xmm1, xmm0
xorps xmm0, xmm0
maxss xmm0, xmm1
minss xmm2, xmm0
subss xmm3, xmm2
movss dword [ecx + 0x58], xmm2
movss dword [ecx + 0xe0], xmm3
jmp 0x10028398
movzx eax, byte [ebp - 0xd9]
lea eax, [eax*4 + 0x10003]
jmp 0x10028364
mov ecx, dword [edi + 0x50]
test ecx, ecx
js 0x10028581
mov dl, 1
call fcn.100073f0
test al, al
je 0x10028581
mov eax, esi
or esi, 0x10004
or eax, 0x10006
cmp byte [ebx + 0xfc], 0
cmovne esi, eax
push esi
jmp 0x10028367
mov ecx, dword [edi + 0x54]
test ecx, ecx
js 0x100285b0
mov dl, 1
call fcn.100073f0
test al, al
je 0x100285b0
mov eax, esi
or esi, 0x10005
or eax, 0x10007
cmp byte [ebx + 0xfc], 0
cmovne esi, eax
push esi
jmp 0x10028367
mov ecx, dword [edi + 0x5c]
test ecx, ecx
js 0x100285d7
mov dl, 1
call fcn.100073f0
test al, al
je 0x100285d7
cmp byte [ebp - 0xf8], 0
je 0x100285d7
or esi, 0x10008
push esi
jmp 0x10028367
mov ecx, dword [edi + 0x60]
test ecx, ecx
js 0x10028672
mov dl, 1
call fcn.100073f0
test al, al
je 0x10028672
cmp byte [ebp - 0xf8], 0
je 0x10028672
mov eax, dword [ebx + 0x1d50]
cmp eax, dword [ebx + 0x1d54]
jne 0x10028666
cmp byte [ebp - 0xc1], 0
je 0x10028618
push 0x3000c
jmp 0x10028641
cmp byte [ebp - 0x129], 0
je 0x10028666
cmp byte [ebx + 0xff], 0
je 0x10028666
cmp byte [ebx + 0xfe], 0
jne 0x10028666
cmp byte [ebx + 0xfc], 0
jne 0x10028666
push 0x30004
lea edx, [ebx + 0x1d4c]
lea ecx, [ebx + 0x1d14]
call fcn.10025e60
mov dword [ebx + 0x2b70], 0xbe99999a
add esp, 4
mov byte [ebx + 0x2b74], 1
or esi, 0x10009
push esi
jmp 0x10028367
mov ecx, dword [edi + 0x68]
test ecx, ecx
js 0x10028702
mov dl, 1
call fcn.100073f0
test al, al
je 0x10028702
mov edx, dword [ebp + 0x10]
mov eax, edx
shr eax, 0xb
and al, 1
cmp byte [ebp - 0xe0], 0
je 0x100286a9
mov cl, byte [ebx + 0xfc]
test al, al
je 0x100286c3
test cl, cl
jne 0x100286c7
mov cl, byte [ebp - 0xb6]
mov dh, 1
mov byte [ebp - 0xb9], 1
mov byte [ebp - 0xb5], dh
jmp 0x100283a4
test cl, cl
jne 0x100286a9
cmp byte [ebp - 0xf8], 0
je 0x10028398
mov dword [ebp - 0xd0], 0xa
sub esp, 8
lea ecx, [ebp - 0xd0]
call fcn.10026e40
add esp, 8
test al, al
je 0x1002838c
push dword [ebp - 0xd0]
jmp 0x10028367
test dword [ebp + 0x10], 0x400
je 0x10028750
mov ecx, dword [edi + 0x34]
test ecx, ecx
js 0x10028750
mov dl, 1
call fcn.100073f0
test al, al
je 0x10028750
cmp byte [ebx + 0xfc], 0
jne 0x10028750
cmp byte [ebp - 0xf1], 0
jne 0x10028750
cmp byte [ebx + 0xfe], 0
jne 0x10028750
cmp byte [ebp - 0xf8], 0
je 0x10028750
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0xd0], 9
jmp 0x100286de
mov ecx, dword [edi + 0x6c]
test ecx, ecx
js 0x1002876f
mov dl, 1
call fcn.100073f0
test al, al
je 0x1002876f
mov cl, dl
mov byte [ebp - 0xb9], cl
jmp 0x1002839e
mov al, byte [ebp - 0xb8]
test al, al
jne 0x10028aca
test dh, dh
jne 0x10028aca
cmp byte [ebp - 0xba], dh
je 0x100287cc
mov ecx, dword [edi + 0x70]
test ecx, ecx
js 0x100287cc
mov dl, 1
call fcn.100073f0
test al, al
je 0x100287cc
mov eax, dword [ebx + 0x1d40]
mov dword [ebx + 0x1d50], 0
mov dword [ebx + 0x1d54], eax
mov dword [ebx + 0x1d4c], eax
mov byte [ebx + 0x1d5b], dh
mov byte [ebx + 0x2b74], dl
jmp 0x10028398
mov al, byte [ebp - 0xb7]
test al, al
jne 0x10028976
cmp byte [ebp - 0x109], al
jne 0x10028976
cmp byte [ebp - 0x10a], al
je 0x10028398
mov eax, dword [edi + 0xcc]
test eax, eax
je 0x10028819
push dword [edi + 0xd4]
call eax
mov esi, eax
add esp, 4
test esi, esi
je 0x1002838c
mov edi, dword [0x1007acc0]
jmp 0x1002881e
mov esi, 0x1007673a
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028823
sub ecx, edx
test edi, edi
je 0x10028836
inc dword [edi + 0x394]
lea eax, [ecx*2 + 2]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov dword [ebp - 0xc8], eax
xor edi, edi
cmp byte [esi], 0
je 0x100288b0
mov ebx, eax
push 0
mov edx, esi
lea ecx, [ebp - 0xd4]
call fcn.10002ca0
add esi, eax
add esp, 4
mov eax, dword [ebp - 0xd4]
test eax, eax
je 0x100288a4
cmp eax, 0x10000
jae 0x1002889f
mov edx, dword [ebp + 0x10]
lea ecx, [ebp - 0xd4]
sub esp, 8
call fcn.10026e40
add esp, 8
test al, al
je 0x1002889f
mov ax, word [ebp - 0xd4]
mov word [ebx + edi*2], ax
inc edi
cmp byte [esi], 0
jne 0x10028856
mov ebx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0xc8]
xor ecx, ecx
mov word [eax + edi*2], cx
test edi, edi
jle 0x10028956
mov edx, dword [ebx + 0x1d54]
lea esi, [ebx + 0x1d4c]
mov ecx, dword [esi + 4]
mov eax, dword [ebx + 0x1d40]
cmp ecx, edx
je 0x100288ef
cmp ecx, eax
jle 0x100288e0
mov dword [esi + 4], eax
mov ecx, eax
cmp edx, eax
jle 0x100288e9
mov dword [esi + 8], eax
mov edx, eax
cmp ecx, edx
jne 0x100288ef
mov dword [esi], ecx
cmp dword [esi], eax
jle 0x100288f5
mov dword [esi], eax
mov edx, esi
lea ecx, [ebx + 0x1d14]
call fcn.10025dd0
mov edx, dword [esi]
lea ecx, [ebx + 0x1d14]
push edi
push dword [ebp - 0xc8]
call fcn.10025930
add esp, 8
test al, al
je 0x10028935
mov edx, dword [esi]
lea ecx, [esi + 0x18]
push edi
push 0
call fcn.10026b20
add esp, 8
mov byte [esi + 0xf], 0
add dword [esi], edi
jmp 0x10028949
movzx eax, word [esi + 0xe16]
test ax, ax
je 0x10028949
dec eax
mov word [esi + 0xe16], ax
mov eax, dword [ebp - 0xc8]
mov byte [ebx + 0x2b74], 1
test eax, eax
je 0x1002896a
mov ecx, dword [0x1007acc0]
test ecx, ecx
je 0x1002896a
dec dword [ecx + 0x394]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x10028389
cmp dword [ebx + 0xd0], 0
je 0x10028a5b
mov esi, dword [ebx + 0x1d54]
mov eax, dword [ebx + 0x1d50]
cmp eax, esi
je 0x1002899d
mov ecx, esi
cmovl esi, eax
cmovge ecx, eax
jmp 0x100289a5
mov ecx, dword [ebx + 0x1d40]
xor esi, esi
mov eax, dword [ebx + 0x1d34]
mov dword [ebp - 0x118], ecx
sub ecx, esi
lea edx, [ecx*4 + 1]
mov dword [ebp - 0xd0], edx
cmp edx, eax
jle 0x10028a06
lea edi, [ebx + 0x1d30]
test eax, eax
je 0x100289e0
cdq
sub eax, edx
mov edx, dword [ebp - 0xd0]
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 4]
jmp 0x100289e5
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
mov ecx, edi
push eax
call fcn.10012290
mov edi, dword [0x1007acc0]
mov edx, dword [ebp - 0xd0]
mov dword [ebp - 0xc0], edi
mov eax, dword [ebp - 0x118]
mov dword [ebx + 0x1d30], edx
mov ecx, dword [ebx + 0x1d20]
lea eax, [ecx + eax*2]
push eax
lea eax, [ecx + esi*2]
mov ecx, dword [ebx + 0x1d38]
push eax
call fcn.10002e40
mov eax, dword [edi + 0xd0]
add esp, 8
test eax, eax
je 0x10028a55
push dword [ebx + 0x1d38]
push dword [edi + 0xd4]
call eax
mov edi, dword [0x1007acc0]
add esp, 8
mov dword [ebp - 0xc0], edi
mov al, byte [ebp - 0xb7]
test al, al
je 0x10028398
mov eax, dword [ebx + 0x1d50]
cmp eax, dword [ebx + 0x1d54]
jne 0x10028a94
mov eax, dword [ebx + 0x1d40]
mov dword [ebx + 0x1d50], 0
mov dword [ebx + 0x1d54], eax
mov dword [ebx + 0x1d4c], eax
mov byte [ebx + 0x1d5b], 0
mov byte [ebx + 0x2b74], 1
mov eax, dword [ebx + 0x1d50]
cmp eax, dword [ebx + 0x1d54]
je 0x10028398
lea edx, [ebx + 0x1d4c]
lea ecx, [ebx + 0x1d14]
call fcn.10025dd0
mov byte [ebx + 0x1d5b], 0
jmp 0x1002838c
movzx eax, al
lea edx, [ebx + 0x1d4c]
xor eax, 1
lea ecx, [ebx + 0x1d14]
add eax, 0x1000a
push eax
call fcn.10025e60
mov eax, dword [ebx + 0x1d4c]
mov dword [ebx + 0x1d54], eax
mov dword [ebx + 0x1d50], eax
jmp 0x10028378
sbb eax, eax
or eax, 1
test eax, eax
je 0x10028b1a
mov eax, dword [ebx + 0x1d24]
dec eax
mov dword [ebp - 0xe4], esi
mov dword [ebp - 0xec], eax
mov eax, dword [ebp + 0x10]
test dh, dh
je 0x10028b29
test al, 0x20
jne 0x10028bf1
mov esi, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xec]
test esi, esi
je 0x10029050
cmp dword [ebp - 0x100], ecx
je 0x1002900b
cmp byte [ebp - 0x114], 0
je 0x1002900b
mov dword [ebp - 0xb0], eax
xorps xmm0, xmm0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xa0], eax
lea eax, [ecx + 1]
cmp dword [ebp + 8], eax
movlpd qword [ebp - 0xa8], xmm0
cmovge eax, dword [ebp + 8]
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0xb4]
push eax
xor eax, eax
movlpd qword [ebp - 0x94], xmm0
movlpd qword [ebp - 0x8c], xmm0
mov dword [ebp - 0xb4], 0x40000
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xac], 0
call eax
mov esi, dword [ebp - 0x98]
add esp, 4
mov edx, dword [ebp - 0xa0]
mov edi, dword [0x1007acc0]
mov dword [ebp - 0xf0], edx
lea ecx, [esi - 1]
mov dword [ebp - 0xc0], edi
cmp dword [ebp - 0x9c], ecx
cmovl ecx, dword [ebp - 0x9c]
jmp 0x10029014
mov eax, dword [ebp + 0x10]
cmp byte [ebp - 0xf8], 0
je 0x10028c6e
mov eax, dword [ebx + 0x1d18]
lea esi, [eax*4 + 1]
mov eax, dword [ebx + 0x1d34]
cmp esi, eax
jle 0x10028c4d
test eax, eax
je 0x10028c27
cdq
sub eax, edx
lea edx, [ebx + 0x1d30]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x10028c32
mov ecx, 8
lea edx, [ebx + 0x1d30]
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.10012290
mov edi, dword [0x1007acc0]
mov dword [ebp - 0xc0], edi
mov dword [ebx + 0x1d30], esi
mov edx, esi
mov ecx, dword [ebx + 0x1d38]
push 0
push dword [ebx + 0x1d20]
call fcn.10002e40
mov eax, dword [ebp + 0x10]
add esp, 8
test eax, 0x1c0
je 0x10028fae
mov esi, 0x15
test al, 0x40
je 0x10028c9e
mov ecx, dword [edi + 0x34]
test ecx, ecx
js 0x10028c9e
mov dl, 1
call fcn.100073f0
test al, al
je 0x10028c9b
lea eax, [esi + 0x2b]
xor esi, esi
jmp 0x10028cf0
mov eax, dword [ebp + 0x10]
test al, al
jns 0x10028ce0
mov ecx, dword [edi + 0x40]
test ecx, ecx
js 0x10028cc1
mov dl, 1
call fcn.100073f0
test al, al
je 0x10028cbe
mov eax, 0x80
lea esi, [eax - 0x7d]
jmp 0x10028cf0
mov eax, dword [ebp + 0x10]
mov ecx, dword [edi + 0x44]
test ecx, ecx
js 0x10028ce0
mov dl, 1
call fcn.100073f0
test al, al
je 0x10028cdd
mov eax, 0x80
lea esi, [eax - 0x7c]
jmp 0x10028cf0
mov eax, dword [ebp + 0x10]
test eax, 0x100
je 0x10028fae
mov eax, 0x100
mov dword [ebp - 0x84], eax
xor ecx, ecx
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x80], eax
mov eax, dword [ebx + 0x1d38]
mov dword [ebp - 0x70], eax
mov eax, dword [ebx + 0x1d3c]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebx + 0x1d44]
mov dword [ebp - 0x74], esi
mov esi, dword [ebx + 0x1d20]
mov dword [ebp - 0x68], eax
mov eax, dword [ebx + 0x1d4c]
mov word [ebp - 0x63], cx
mov byte [ebp - 0x61], cl
mov dword [ebp - 0x7c], ecx
mov byte [ebp - 0x64], cl
lea edx, [esi + eax*2]
mov ecx, esi
mov dword [ebp - 0x78], 0
call fcn.10002f70
mov ecx, dword [ebx + 0x1d50]
mov edi, eax
mov dword [ebp - 0x60], edi
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.10002f70
mov ecx, dword [ebx + 0x1d54]
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x5c], eax
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.10002f70
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x84]
push eax
xor eax, eax
call eax
mov ecx, dword [ebp - 0x60]
add esp, 4
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x104], eax
cmp ecx, edi
je 0x10028df5
lea edi, [ecx + eax]
mov esi, eax
xor eax, eax
mov dword [ebp - 0xc8], eax
test edi, edi
je 0x10028db0
cmp esi, edi
jae 0x10028de2
cmp byte [esi], 0
je 0x10028de2
push edi
mov edx, esi
lea ecx, [ebp - 0x44]
call fcn.10002ca0
add esi, eax
add esp, 4
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x10028ddc
cmp eax, 0x10000
mov eax, dword [ebp - 0xc8]
jae 0x10028da8
inc eax
jmp 0x10028da2
mov eax, dword [ebp - 0xc8]
mov dword [ebx + 0x1d4c], eax
mov eax, dword [ebp - 0x104]
mov byte [ebx + 0x2b74], 1
mov ecx, dword [ebp - 0x5c]
cmp ecx, dword [ebp - 0xfc]
je 0x10028e56
lea edi, [ecx + eax]
mov esi, eax
xor eax, eax
mov dword [ebp - 0xc8], eax
nop dword [eax]
test edi, edi
je 0x10028e18
cmp esi, edi
jae 0x10028e4a
cmp byte [esi], 0
je 0x10028e4a
push edi
mov edx, esi
lea ecx, [ebp - 0x44]
call fcn.10002ca0
add esi, eax
add esp, 4
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x10028e44
cmp eax, 0x10000
mov eax, dword [ebp - 0xc8]
jae 0x10028e10
inc eax
jmp 0x10028e07
mov eax, dword [ebp - 0xc8]
mov dword [ebx + 0x1d50], eax
mov eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x58]
cmp ecx, dword [ebp - 0xd0]
je 0x10028eb0
lea edi, [ecx + eax]
mov esi, eax
xor eax, eax
mov dword [ebp - 0xc8], eax
nop
test edi, edi
je 0x10028e78
cmp esi, edi
jae 0x10028eaa
cmp byte [esi], 0
je 0x10028eaa
push edi
mov edx, esi
lea ecx, [ebp - 0x44]
call fcn.10002ca0
add esi, eax
add esp, 4
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x10028ea4
cmp eax, 0x10000
mov eax, dword [ebp - 0xc8]
jae 0x10028e70
inc eax
jmp 0x10028e68
mov eax, dword [ebp - 0xc8]
mov dword [ebx + 0x1d54], eax
cmp byte [ebp - 0x64], 0
je 0x10028f9f
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x100]
cmp ecx, edx
jle 0x10028f21
cmp byte [ebp - 0x114], 0
je 0x10028f21
mov esi, dword [ebx + 0x1d18]
lea eax, [ebx + 0x1d18]
mov edi, dword [eax + 4]
sub esi, edx
add esi, ecx
cmp esi, edi
jle 0x10028f1f
test edi, edi
je 0x10028ef8
mov eax, edi
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
add ecx, edi
jmp 0x10028efd
mov ecx, 8
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
lea ecx, [ebx + 0x1d18]
push eax
call fcn.10012400
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x104], eax
lea eax, [ebx + 0x1d18]
mov dword [eax], esi
mov ecx, dword [ebx + 0x1d20]
mov esi, ecx
mov edi, dword [ebx + 0x1d18]
dec edi
mov dword [ebp - 0xfc], ecx
lea edi, [ecx + edi*2]
cmp ecx, edi
jae 0x10028f7d
mov ebx, dword [ebp - 0x104]
cmp byte [ebx], 0
je 0x10028f71
push 0
mov edx, ebx
lea ecx, [ebp - 0x44]
call fcn.10002ca0
add ebx, eax
add esp, 4
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x10028f71
cmp eax, 0x10000
jae 0x10028f6d
mov word [esi], ax
add esi, 2
cmp esi, edi
jb 0x10028f43
mov ebx, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0xfc]
xor eax, eax
mov word [esi], ax
sub esi, ecx
mov eax, dword [ebp - 0x6c]
sar esi, 1
mov dword [ebx + 0x1d40], esi
mov dword [ebx + 0x1d3c], eax
mov dword [ebx + 0x2b70], 0xbe99999a
mov edi, dword [0x1007acc0]
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xc0], edi
cmp byte [ebp - 0xf8], 0
je 0x10028b29
mov esi, dword [ebx + 0x1d38]
mov eax, esi
mov ecx, dword [ebp - 0xf0]
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10028ff0
test dl, dl
je 0x10028fec
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10028ff0
add eax, 2
add ecx, 2
test dl, dl
jne 0x10028fd0
xor eax, eax
jmp 0x10028ff5
sbb eax, eax
or eax, 1
test eax, eax
mov eax, dword [ebp + 0x10]
je 0x10028b29
mov ecx, dword [ebx + 0x1d3c]
jmp 0x10028b35
mov edx, dword [ebp - 0xf0]
mov esi, dword [ebp + 8]
lea eax, [ecx + 1]
cmp eax, esi
cmovl esi, eax
cmp esi, 1
jb 0x10029049
push esi
push dword [ebx + 0x1d38]
push edx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, dword [ebp - 0xf0]
add esp, 0xc
mov edi, dword [0x1007acc0]
mov dword [ebp - 0xc0], edi
mov byte [eax + esi - 1], 0
mov byte [ebp - 0xe5], 1
mov dword [ebx + 0x2b78], 0
mov dword [ebx + 0x2b7c], 0
mov dword [ebx + 0x2b80], 0
mov eax, dword [ebx + 0x19bc]
cmp byte [ebp - 0xb9], 0
mov edx, eax
je 0x100290d8
cmp eax, dword [ebp - 0xd8]
jne 0x100290f9
mov ecx, dword [edi + 0x19bc]
test ecx, ecx
setne al
mov byte [edi + 0x19cc], al
test ecx, ecx
je 0x100290ad
mov dword [edi + 0x19c8], 0
mov byte [edi + 0x19ce], 0
mov dword [edi + 0x19bc], 0
mov dword [edi + 0x19d4], 0
mov byte [edi + 0x19cd], 0
mov dword [edi + 0x19e0], 0
mov edx, dword [ebx + 0x19bc]
mov eax, dword [ebp - 0xd8]
cmp edx, eax
jne 0x100290ff
cmp byte [ebp - 0xf8], 0
je 0x100290ff
mov ecx, dword [ebx + 0x1d38]
mov dword [ebp - 0xf0], ecx
jmp 0x100290ff
mov eax, dword [ebp - 0xd8]
cmp byte [ebp - 0xe0], 0
jne 0x100291b6
push 1
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.10003ce0
movss xmm1, dword [0x1007724c]
add esp, 4
mov ecx, 7
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call fcn.10003210
movss xmm2, dword [ebx + 0x1554]
mov dl, 1
mov ecx, eax
call fcn.10003940
movss xmm0, dword [ebp - 0x54]
add esp, 0x10
movss xmm1, dword [ebp - 0x120]
movss xmm2, dword [ebp - 0x50]
movaps xmm6, xmm1
mov edi, dword [0x1007acc0]
addss xmm6, xmm0
mov edx, dword [ebx + 0x19bc]
movaps xmm5, xmm2
addss xmm5, dword [ebp - 0x130]
movss dword [ebp - 0x18], xmm0
addss xmm0, dword [ebx + 0x154c]
movss dword [ebp - 0x14], xmm2
movss dword [ebp - 0x10], xmm6
movss dword [ebp - 0xc], xmm5
mov dword [ebp - 0xc0], edi
movss dword [ebp - 0x20], xmm0
movaps xmm0, xmm2
addss xmm0, dword [ebx + 0x1550]
movss dword [ebp - 0x1c], xmm0
jmp 0x10029203
movss xmm5, dword [ebp - 0x50]
movss xmm1, dword [ebp - 0x120]
movss xmm0, dword [ebp - 0x54]
movaps xmm6, xmm1
mov ecx, dword [ebp - 0x108]
addss xmm6, xmm0
movss dword [ebp - 0x14], xmm5
addss xmm5, dword [ebp - 0x130]
movss dword [ebp - 0x18], xmm0
movss dword [ebp - 0x10], xmm6
movss dword [ebp - 0xc], xmm5
mov eax, dword [ecx + 0xc4]
mov ecx, dword [ecx + 0xc8]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], ecx
mov esi, dword [ebp - 0xd8]
lea eax, [ebp - 0x20]
movss xmm0, dword [eax]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [eax + 4]
mov dword [ebp - 0x110], eax
lea eax, [ebx + 0x1d14]
movss dword [ebp - 0x100], xmm0
movss dword [ebp - 0x124], xmm0
xorps xmm0, xmm0
movss dword [ebp - 0xec], xmm6
xorps xmm6, xmm6
movss dword [ebp - 0xe4], xmm5
movss dword [ebp - 0x118], xmm0
movss dword [ebp - 0xd0], xmm0
cmp dword [eax], esi
jne 0x1002929f
cmp byte [ebp - 0xe0], 0
je 0x1002929f
mov eax, dword [ebp - 0x108]
xor edx, edx
mov ecx, dword [eax + 0x1bc]
mov eax, dword [eax + 0x1c4]
push dword [eax + ecx*4 - 4]
mov ecx, str.SCROLLY
call fcn.10002900
mov edx, dword [ebx + 0x19bc]
add esp, 4
cmp edx, eax
jne 0x1002929f
mov al, 1
jmp 0x100292a1
xor al, al
cmp edx, esi
je 0x1002938c
test al, al
jne 0x1002938c
mov esi, dword [ebp - 0xf0]
cmp byte [ebp - 0xe0], al
je 0x1002931b
mov al, byte [esi]
lea edx, [esi + 1]
xor ecx, ecx
mov byte [ebp - 0xf1], al
test al, al
je 0x100292ea
mov bl, al
cmp bl, 0xa
lea eax, [ecx + 1]
mov bl, byte [edx]
cmovne eax, ecx
inc edx
mov ecx, eax
test bl, bl
jne 0x100292d2
mov ebx, dword [ebp - 0x11c]
mov al, byte [edx - 1]
dec edx
cmp al, 0xa
je 0x100292f7
cmp al, 0xd
je 0x100292f7
inc ecx
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [ebx + 0x18bc]
movss dword [ebp - 0xd0], xmm0
movaps xmm0, xmm1
movss dword [ebp - 0x118], xmm0
jmp 0x10029338
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10029320
sub ecx, edx
lea edx, [esi + ecx]
cmp ecx, 0x200000
jge 0x10029e8e
movss xmm1, dword [0x1007724c]
lea eax, [ebp - 0x18]
xor ecx, ecx
cmp byte [ebp - 0xe0], cl
cmovne eax, ecx
push eax
push ecx
mov dword [esp], ecx
push edx
push esi
call fcn.10003210
movss xmm2, dword [ebx + 0x18bc]
push eax
lea eax, [ebp - 0x128]
push eax
mov eax, dword [ebp - 0x108]
push dword [ebx + 0x18b8]
mov ecx, dword [eax + 0x270]
call fcn.1001c5f0
mov edi, dword [0x1007acc0]
jmp 0x10029de0
mov ecx, dword [ebx + 0x1d20]
or esi, 0xffffffff
mov eax, dword [ebx + 0x1d4c]
xorps xmm7, xmm7
movss xmm0, dword [ebx + 0x18]
addss xmm0, dword [ebx + 0x2b70]
mov edx, dword [ebx + 0x1d50]
lea eax, [ecx + eax*2]
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0x114], eax
mov ecx, 1
mov eax, dword [ebx + 0x1d54]
movss dword [ebx + 0x2b70], xmm0
movss dword [ebp - 0x44], xmm6
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xd8], 0xfffffc19
cmp edx, eax
je 0x1002940d
mov ecx, dword [ebp - 0x104]
cmovl eax, edx
mov dword [ebp - 0xd8], esi
lea eax, [ecx + eax*2]
mov ecx, 2
mov dword [ebp - 0xc8], eax
mov edi, dword [ebp - 0x104]
mov edx, edi
mov eax, dword [ebp - 0xe0]
movzx eax, al
add ecx, eax
xor eax, eax
movzx edi, word [edi]
test di, di
mov edi, dword [ebp - 0xc0]
je 0x100294a9
mov esi, edx
or ebx, 0xffffffff
xor edi, edi
movzx esi, word [esi]
nop word [eax + eax]
cmp si, 0xa
jne 0x10029477
inc edi
cmp ebx, 0xffffffff
jne 0x1002945b
cmp edx, dword [ebp - 0x114]
jb 0x1002945b
dec ecx
mov ebx, edi
test ecx, ecx
jle 0x10029485
cmp dword [ebp - 0xd8], 0xffffffff
jne 0x10029477
cmp edx, dword [ebp - 0xc8]
jb 0x10029477
dec ecx
mov dword [ebp - 0xd8], edi
test ecx, ecx
jle 0x10029485
movzx eax, word [edx + 2]
add edx, 2
mov esi, eax
test ax, ax
jne 0x10029440
mov dword [ebp - 0xfc], ebx
mov ebx, dword [ebp - 0x11c]
mov esi, dword [ebp - 0xfc]
mov dword [ebp - 0xd4], edi
mov edi, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xd4]
mov edx, dword [ebp - 0x104]
inc eax
cmp esi, 0xffffffff
mov dword [ebp - 0xd4], eax
mov ecx, eax
cmovne ecx, esi
mov esi, dword [ebp - 0x114]
mov dword [ebp - 0xfc], ecx
mov ecx, dword [ebp - 0xd8]
cmp ecx, 0xffffffff
cmove ecx, eax
mov dword [ebp - 0xd8], ecx
mov ecx, esi
cmp esi, edx
jbe 0x100294f2
cmp word [ecx - 2], 0xa
lea eax, [ecx - 2]
je 0x100294f2
mov ecx, eax
cmp ecx, edx
ja 0x100294e2
mov edx, dword [edi + 0x18b8]
movaps xmm2, xmm6
movss xmm3, dword [edi + 0x18bc]
movaps xmm5, xmm6
divss xmm3, dword [edx]
cmp ecx, esi
jae 0x1002955a
mov edi, dword [ebp - 0x114]
movzx eax, word [ecx]
add ecx, 2
mov esi, eax
cmp eax, 0xa
jne 0x1002952a
maxss xmm2, xmm5
movaps xmm5, xmm6
jmp 0x10029550
cmp esi, 0xd
je 0x10029550
mov esi, eax
cmp esi, dword [edx + 0x1c]
jge 0x10029540
mov eax, dword [edx + 0x24]
movss xmm1, dword [eax + esi*4]
jmp 0x10029545
movss xmm1, dword [edx + 0x38]
movaps xmm0, xmm3
mulss xmm0, xmm1
addss xmm5, xmm0
cmp ecx, edi
jb 0x10029514
mov edi, dword [ebp - 0xc0]
cmp dword [ebp - 0xd8], 0
maxss xmm5, xmm2
movd xmm0, dword [ebp - 0xfc]
movss xmm4, dword [ebx + 0x18bc]
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x148], xmm5
mulss xmm0, xmm4
movss dword [ebp - 0x114], xmm0
jl 0x10029626
mov eax, dword [ebp - 0xc8]
mov ecx, eax
mov esi, dword [ebp - 0x104]
cmp eax, esi
jbe 0x100295b8
cmp word [ecx - 2], 0xa
je 0x100295b2
add ecx, 0xfffffffe
cmp ecx, esi
ja 0x100295a4
mov eax, dword [ebp - 0xc8]
movaps xmm2, xmm6
movaps xmm7, xmm6
cmp ecx, eax
jae 0x1002960e
mov edi, dword [ebp - 0xc8]
movzx eax, word [ecx]
add ecx, 2
mov esi, eax
cmp eax, 0xa
jne 0x100295de
maxss xmm2, xmm7
movaps xmm7, xmm6
jmp 0x10029604
cmp esi, 0xd
je 0x10029604
mov esi, eax
cmp esi, dword [edx + 0x1c]
jge 0x100295f4
mov eax, dword [edx + 0x24]
movss xmm1, dword [eax + esi*4]
jmp 0x100295f9
movss xmm1, dword [edx + 0x38]
movaps xmm0, xmm3
mulss xmm0, xmm1
addss xmm7, xmm0
cmp ecx, edi
jb 0x100295c8
mov edi, dword [ebp - 0xc0]
movd xmm0, dword [ebp - 0xd8]
maxss xmm7, xmm2
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm4
movss dword [ebp - 0x44], xmm0
mov ecx, dword [ebp - 0xe0]
movss xmm3, dword [ebp - 0x120]
test cl, cl
je 0x1002965a
movd xmm0, dword [ebp - 0xd4]
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm4
movss dword [ebp - 0xd0], xmm0
movaps xmm0, xmm3
movss dword [ebp - 0x118], xmm0
cmp byte [ebx + 0x2b74], 0
je 0x10029742
test dword [ebp + 0x10], 0x1000
jne 0x100296ba
movss xmm2, dword [ebx + 0x1d48]
movaps xmm0, xmm3
comiss xmm2, xmm5
mulss xmm0, dword [0x100771f8]
movaps xmm1, xmm5
jbe 0x10029698
subss xmm1, xmm0
movaps xmm0, xmm6
maxss xmm0, xmm1
jmp 0x100296a5
subss xmm1, xmm3
comiss xmm1, xmm2
jb 0x100296c4
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebx + 0x1d48], xmm0
jmp 0x100296c4
mov dword [ebx + 0x1d48], 0
test cl, cl
je 0x10029742
movss xmm0, dword [ebp - 0x114]
mov eax, dword [ebp - 0x108]
movaps xmm1, xmm0
subss xmm1, xmm4
movss xmm6, dword [eax + 0x58]
comiss xmm6, xmm1
jbe 0x100296f0
xorps xmm0, xmm0
maxss xmm0, xmm1
jmp 0x100296fc
subss xmm0, dword [ebp - 0x130]
maxss xmm0, xmm6
subss xmm6, xmm0
movss dword [eax + 0x58], xmm0
addss xmm6, dword [eax + 0xc8]
movss dword [eax + 0xc8], xmm6
movss xmm0, dword [ebp - 0xc]
movss dword [ebp - 0xe4], xmm0
movss xmm0, dword [ebp - 0x10]
movss dword [ebp - 0x100], xmm6
movss dword [ebp - 0x124], xmm6
xorps xmm6, xmm6
movss dword [ebp - 0xec], xmm0
movss xmm4, dword [ebx + 0x1d48]
mov ecx, dword [ebx + 0x1d54]
mov edx, dword [ebx + 0x1d50]
mov byte [ebx + 0x2b74], 0
movss dword [ebp - 0xc8], xmm4
cmp edx, ecx
je 0x10029a10
mov esi, dword [ebp - 0x104]
mov eax, ecx
cmovl eax, edx
cmovge ecx, edx
cmp byte [ebp - 0xe0], 0
lea esi, [esi + eax*2]
mov eax, dword [ebp - 0x104]
lea eax, [eax + ecx*2]
mov dword [ebp - 0xd4], eax
je 0x100297a8
movss dword [ebp - 0x138], xmm6
movss dword [ebp - 0xfc], xmm6
jmp 0x100297b8
movss xmm0, dword [0x10077284]
movss dword [ebp - 0xfc], xmm0
movss xmm1, dword [0x1007724c]
mov ecx, 0x2a
call fcn.10003210
movss xmm5, dword [ebp - 0x100]
xorps xmm2, xmm2
mov ecx, dword [ebp - 0x110]
movaps xmm6, xmm5
addss xmm6, dword [ebp - 0x44]
mov dword [ebp - 0x11c], eax
movss xmm4, dword [ecx]
mov ecx, dword [ebp - 0xd4]
addss xmm4, xmm7
subss xmm6, xmm2
subss xmm4, dword [ebp - 0xc8]
movss dword [ebp - 0x44], xmm6
cmp esi, ecx
jae 0x10029a62
movss xmm7, dword [ebx + 0x18bc]
movss xmm5, dword [ebp - 0xe4]
movaps xmm1, xmm7
mov eax, dword [ebp - 0x110]
nop dword [eax]
movaps xmm0, xmm5
addss xmm0, xmm1
comiss xmm6, xmm0
ja 0x10029a08
movss xmm0, dword [ebp - 0x14]
comiss xmm0, xmm6
jbe 0x1002986a
cmp esi, ecx
jae 0x100299dd
movzx eax, word [esi]
add esi, 2
cmp eax, 0xa
je 0x100299d7
cmp esi, ecx
jb 0x10029852
jmp 0x10029a08
mov edx, dword [edi + 0x18b8]
movaps xmm5, xmm2
movss xmm3, dword [edi + 0x18bc]
movaps xmm1, xmm2
divss xmm3, dword [edx]
cmp esi, ecx
jae 0x100298d6
movzx eax, word [esi]
add esi, 2
mov ecx, eax
cmp eax, 0xa
je 0x100298c3
cmp ecx, 0xd
je 0x100298b7
cmp ecx, dword [edx + 0x1c]
jge 0x100298a7
mov eax, dword [edx + 0x24]
movss xmm2, dword [eax + ecx*4]
jmp 0x100298ac
movss xmm2, dword [edx + 0x38]
movaps xmm0, xmm3
mulss xmm0, xmm2
addss xmm1, xmm0
mov ecx, dword [ebp - 0xd4]
cmp esi, ecx
jb 0x10029886
jmp 0x100298d3
mov ecx, dword [ebp - 0xd4]
xorps xmm5, xmm5
maxss xmm5, xmm1
xorps xmm1, xmm1
xorps xmm2, xmm2
maxss xmm1, xmm5
comiss xmm2, xmm1
jb 0x10029910
mov eax, dword [ebx + 0x18b8]
cmp dword [eax + 0x1c], 0x20
jle 0x100298f8
mov eax, dword [eax + 0x24]
movss xmm0, dword [eax + 0x80]
jmp 0x100298fd
movss xmm0, dword [eax + 0x38]
mulss xmm0, dword [0x10077210]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm0, dword [ebp - 0xfc]
addss xmm1, xmm4
movss xmm5, dword [ebp - 0xe4]
addss xmm4, xmm2
movss xmm2, dword [ebp - 0x138]
addss xmm0, xmm6
movss xmm3, dword [ebp - 0xec]
subss xmm2, xmm7
minss xmm1, xmm3
maxss xmm4, dword [ebp - 0x18]
minss xmm0, xmm5
addss xmm2, xmm6
movss dword [ebp - 0x30], xmm1
movss dword [ebp - 0x38], xmm4
comiss xmm0, dword [ebp - 0x14]
maxss xmm2, dword [ebp - 0x14]
movss dword [ebp - 0x2c], xmm0
movss dword [ebp - 0x34], xmm2
jbe 0x100299d4
comiss xmm5, xmm2
jbe 0x100299d4
comiss xmm1, dword [ebp - 0x18]
jbe 0x100299d4
comiss xmm3, xmm4
jbe 0x100299d4
push 0xf
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x30]
push dword [ebp - 0x11c]
push eax
lea eax, [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x108]
mov ecx, dword [eax + 0x270]
call fcn.1001c130
movss xmm5, dword [ebp - 0xc]
movss xmm0, dword [ebp - 0x10]
mov edi, dword [0x1007acc0]
movss xmm6, dword [ebp - 0x44]
mov ecx, dword [ebp - 0xd4]
movss dword [ebp - 0xe4], xmm5
movss dword [ebp - 0xec], xmm0
xorps xmm2, xmm2
mov eax, dword [ebp - 0x110]
movss xmm7, dword [ebx + 0x18bc]
movss xmm4, dword [eax]
movaps xmm0, xmm7
addss xmm6, xmm0
movaps xmm1, xmm7
subss xmm4, dword [ebp - 0xc8]
movss dword [ebp - 0x44], xmm6
cmp esi, ecx
jb 0x10029830
movss xmm4, dword [ebp - 0xc8]
movss xmm5, dword [ebp - 0x100]
cmp byte [ebp - 0xe0], 0
mov edx, dword [ebx + 0x1d3c]
movss xmm2, dword [0x10077408]
jne 0x10029a3b
cmp edx, 0x200000
jge 0x10029b95
movups xmm1, xmmword [edi + 0x15b8]
xorps xmm6, xmm6
comiss xmm6, xmm1
movaps xmm3, xmm1
shufps xmm3, xmm1, 0xff
mulss xmm3, dword [edi + 0x1518]
movups xmmword [ebp - 0x38], xmm1
jbe 0x10029a6c
xorps xmm0, xmm0
jmp 0x10029a78
movss xmm4, dword [ebp - 0xc8]
jmp 0x10029a18
movss xmm0, dword [0x1007724c]
minss xmm0, xmm1
movss xmm7, dword [0x10077210]
movss xmm1, dword [ebp - 0x34]
comiss xmm6, xmm1
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si ecx, xmm0
jbe 0x10029a9b
xorps xmm0, xmm0
jmp 0x10029aa7
movss xmm0, dword [0x1007724c]
minss xmm0, xmm1
movss xmm1, dword [ebp - 0x30]
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm6, xmm1
jbe 0x10029ac7
xorps xmm0, xmm0
jmp 0x10029ad3
movss xmm0, dword [0x1007724c]
minss xmm0, xmm1
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm6, xmm3
jbe 0x10029aee
xorps xmm1, xmm1
jmp 0x10029afa
movss xmm1, dword [0x1007724c]
minss xmm1, xmm3
xor edi, edi
mov esi, dword [ebp - 0x110]
cmp byte [ebp - 0xe0], 0
lea eax, [ebp - 0x18]
mulss xmm1, xmm2
subss xmm5, xmm6
cmovne eax, edi
movss xmm2, dword [ebx + 0x18bc]
push eax
movss xmm0, dword [esi]
addss xmm1, xmm7
push ecx
mov dword [esp], edi
subss xmm0, xmm4
mov edi, dword [ebp - 0xf0]
movss dword [ebp - 0x138], xmm5
lea eax, [edx + edi]
movss dword [ebp - 0x13c], xmm0
push eax
cvttss2si eax, xmm1
push edi
shl eax, 0x18
or eax, ecx
push eax
lea eax, [ebp - 0x13c]
push eax
mov eax, dword [ebp - 0x108]
push dword [ebx + 0x18b8]
mov ecx, dword [eax + 0x270]
call fcn.1001c5f0
movss xmm0, dword [ebp - 0xc]
mov edi, dword [0x1007acc0]
movss dword [ebp - 0xe4], xmm0
movss xmm0, dword [ebp - 0x10]
movss dword [ebp - 0xec], xmm0
jmp 0x10029b9b
mov esi, dword [ebp - 0x110]
cmp byte [ebx + 0xbe], 0
je 0x10029bf3
movss xmm0, dword [ebx + 0x2b70]
xorps xmm2, xmm2
comiss xmm2, xmm0
jae 0x10029bf3
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x13c], xmm0
fld qword [ebp - 0x13c]
fld qword [0x10077278]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIfmod
movss xmm0, dword [0x1007722c]
fstp qword [ebp - 0x13c]
movsd xmm1, qword [ebp - 0x13c]
cvtpd2ps xmm1, xmm1
comiss xmm0, xmm1
jae 0x10029bf3
xor al, al
jmp 0x10029bf5
mov al, 1
movss xmm2, dword [ebp - 0x100]
xorps xmm6, xmm6
movss xmm5, dword [esi]
movss xmm7, dword [0x10077210]
movss xmm3, dword [0x1007724c]
addss xmm2, dword [ebp - 0x114]
addss xmm5, dword [ebp - 0x148]
subss xmm2, xmm6
subss xmm5, dword [ebp - 0xc8]
movss dword [ebp - 0x100], xmm2
movaps xmm0, xmm2
movss dword [ebp - 0x148], xmm5
movaps xmm1, xmm5
movss dword [ebp - 0x38], xmm5
movaps xmm4, xmm2
addss xmm1, xmm3
subss xmm0, dword [ebx + 0x18bc]
subss xmm4, dword [0x10077258]
movss dword [ebp - 0x30], xmm1
addss xmm0, xmm7
movss dword [ebp - 0x2c], xmm4
movss dword [ebp - 0x34], xmm0
test al, al
je 0x10029dbb
comiss xmm4, dword [ebp - 0x14]
jbe 0x10029dbb
movss xmm2, dword [ebp - 0xe4]
comiss xmm2, xmm0
jbe 0x10029db3
comiss xmm1, dword [ebp - 0x18]
jbe 0x10029db3
movss xmm0, dword [ebp - 0xec]
comiss xmm0, xmm5
jbe 0x10029db3
movups xmm1, xmmword [edi + 0x15b8]
comiss xmm6, xmm1
movaps xmm2, xmm1
shufps xmm2, xmm1, 0xff
mulss xmm2, dword [edi + 0x1518]
movups xmmword [ebp - 0x28], xmm1
jbe 0x10029cd7
xorps xmm0, xmm0
jmp 0x10029cde
movaps xmm0, xmm3
minss xmm0, xmm1
movss xmm1, dword [0x10077408]
movss xmm3, dword [ebp - 0x24]
comiss xmm6, xmm3
mulss xmm0, xmm1
addss xmm0, xmm7
cvttss2si ecx, xmm0
jbe 0x10029d01
xorps xmm0, xmm0
jmp 0x10029d0d
movss xmm0, dword [0x1007724c]
minss xmm0, xmm3
movss xmm3, dword [ebp - 0x20]
mulss xmm0, xmm1
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm6, xmm3
jbe 0x10029d2d
xorps xmm0, xmm0
jmp 0x10029d39
movss xmm0, dword [0x1007724c]
minss xmm0, xmm3
mulss xmm0, xmm1
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm6, xmm2
jbe 0x10029d54
xorps xmm0, xmm0
jmp 0x10029d60
movss xmm0, dword [0x1007724c]
minss xmm0, xmm2
mulss xmm0, xmm1
push ecx
mov dword [esp], 0x3f800000
movss dword [ebp - 0x20], xmm5
addss xmm0, xmm7
movss dword [ebp - 0x1c], xmm4
cvttss2si eax, xmm0
shl eax, 0x18
or eax, ecx
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x108]
mov ecx, dword [eax + 0x270]
call fcn.1001bf00
mov edi, dword [0x1007acc0]
movss xmm5, dword [ebp - 0x148]
movss xmm3, dword [0x1007724c]
movss xmm2, dword [ebp - 0x100]
cmp byte [ebp - 0xf8], 0
je 0x10029de0
subss xmm2, dword [ebx + 0x18bc]
subss xmm5, xmm3
movss dword [ebx + 0x2c1c], xmm2
movss dword [ebx + 0x2c18], xmm5
cmp byte [ebp - 0xe0], 0
je 0x10029e8e
mov eax, dword [edi + 0x199c]
movss xmm2, dword [ebx + 0x18bc]
mov byte [eax + 0x78], 1
mov eax, dword [edi + 0x199c]
cmp byte [eax + 0x7b], 0
jne 0x10029e7e
movss xmm4, dword [ebp - 0x118]
lea ecx, [ebp - 0x20]
movss xmm3, dword [ebp - 0xd0]
xorps xmm5, xmm5
movss xmm1, dword [eax + 0xc4]
addss xmm4, xmm5
movss xmm0, dword [eax + 0xc8]
addss xmm3, xmm2
movss dword [ebp - 0x38], xmm1
movss dword [ebp - 0x34], xmm0
addss xmm4, xmm1
addss xmm3, xmm0
movss dword [ebp - 0x30], xmm4
subss xmm4, xmm1
movss dword [ebp - 0x2c], xmm3
xorps xmm1, xmm1
subss xmm3, xmm0
movss dword [ebp - 0x20], xmm4
movss dword [ebp - 0x1c], xmm3
call fcn.10004a60
push 0
xor edx, edx
lea ecx, [ebp - 0x38]
call fcn.10004b80
add esp, 4
call fcn.10007760
call fcn.1000c760
mov edi, dword [0x1007acc0]
mov eax, dword [ebp - 0x134]
test al, al
je 0x10029f59
mov eax, dword [edi + 0x199c]
mov esi, edi
mov ecx, dword [eax + 0x270]
dec dword [ecx + 0x48]
call fcn.1001a4b0
mov edx, dword [edi + 0x1a18]
sub edx, 1
mov dword [edi + 0x1a18], edx
mov edi, dword [0x1007acc0]
jne 0x10029ee0
mov edx, dword [edi + 0xa0]
test edx, edx
jne 0x10029eea
mov eax, dword [edi + 0x94]
mov eax, dword [eax + 0x3c]
mov edx, dword [eax]
jmp 0x10029eea
mov eax, dword [esi + 0x1a20]
mov edx, dword [eax + edx*4 - 4]
movss xmm0, dword [edi + 0x98]
mov eax, dword [edi + 0x199c]
mov dword [edi + 0x18b8], edx
mulss xmm0, dword [edx]
mulss xmm0, dword [edx + 4]
movss dword [edi + 0x18c0], xmm0
test eax, eax
je 0x10029f25
movss xmm0, dword [eax + 0x268]
mulss xmm0, dword [edi + 0x18c0]
jmp 0x10029f28
xorps xmm0, xmm0
movss dword [edi + 0x18bc], xmm0
mov eax, dword [edx + 0x44]
mov ecx, dword [eax + 0x2c]
mov eax, dword [eax + 0x30]
mov dword [edi + 0x18c8], eax
mov eax, dword [ebp - 0x134]
mov dword [edi + 0x18c4], ecx
mov dword [edi + 0x18cc], edx
movss dword [edi + 0x18d0], xmm0
cmp byte [ebx + 0x2c54], 0
je 0x10029f82
test al, al
jne 0x10029f82
mov edx, dword [ebp - 0xf0]
lea ecx, [ebp - 0x128]
push 0
call fcn.10011060
mov edi, dword [0x1007acc0]
add esp, 4
movss xmm0, dword [ebp - 0x140]
comiss xmm0, dword [0x100771a0]
jbe 0x10029fe1
movss xmm0, dword [ebp - 0x4c]
xor edx, edx
addss xmm0, dword [ebx + 0x1564]
mov ecx, dword [ebp - 0x144]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [ebp - 0x50]
addss xmm0, dword [ebx + 0x1550]
movss dword [ebp - 0x124], xmm0
push dword [ebp - 0x124]
push dword [ebp - 0x128]
push 1
call fcn.100034a0
mov edi, dword [0x1007acc0]
add esp, 0xc
mov cl, byte [ebp - 0xe5]
test cl, cl
je 0x10029fff
mov eax, dword [edi + 0x199c]
mov byte [edi + 0x19ce], 1
or dword [eax + 0x10c], 4
test byte [ebp + 0x10], 0x20
movzx eax, cl
movzx ecx, byte [ebp - 0xb5]
cmovne eax, ecx
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1004edb4
mov esp, ebp
pop ebp
ret