Function at 0x1006f960
Capabilities:
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x40
movss xmm3, dword [0x10163760]
xorps xmm4, xmm4
push esi
mov esi, dword [0x101e0c0c]
push edi
mov edi, edx
mov dword [ebp - 4], ecx
movss xmm2, dword [esi + 0x1598]
movss xmm6, dword [esi + 0x14]
movaps xmm0, xmm2
movss xmm1, dword [esi + 0x1594]
addss xmm0, xmm2
movss xmm5, dword [esi + 0x10]
comiss xmm6, xmm0
jbe 0x1006f9bc
xorps xmm2, xmm3
jmp 0x1006f9bf
xorps xmm2, xmm2
movaps xmm0, xmm1
addss xmm0, xmm1
comiss xmm5, xmm0
jbe 0x1006f9d0
xorps xmm1, xmm3
jmp 0x1006f9d3
xorps xmm1, xmm1
mov eax, dword [edi + 8]
addss xmm5, xmm1
addss xmm6, xmm2
movaps xmm0, xmm1
xorps xmm0, xmm3
movss dword [ebp - 0x3c], xmm0
movaps xmm0, xmm2
xorps xmm0, xmm3
movss dword [ebp - 0x38], xmm0
movss dword [ebp - 0x34], xmm5
movss dword [ebp - 0x30], xmm6
test eax, 0x10000000
je 0x1006fb57
cmp dword [esi + 0x198c], edi
jne 0x1006fceb
mov eax, dword [esi + 0x1970]
lea edx, [eax - 2]
cmp edx, eax
jge 0x1006fceb
mov eax, dword [esi + 0x1978]
movss xmm2, dword [esi + 0x154c]
mov eax, dword [eax + edx*4]
cmp byte [eax + 0x146], 0
je 0x1006faf9
mov edx, dword [eax + 8]
and edx, 1
je 0x1006fa51
xorps xmm2, xmm2
jmp 0x1006fa71
movss xmm0, dword [esi + 0x1538]
movss xmm2, dword [esi + 0x18b0]
addss xmm0, xmm0
mulss xmm2, dword [eax + 0x26c]
addss xmm2, xmm0
test dword [eax + 8], 0x400
je 0x1006faa4
movss xmm1, dword [esi + 0x18b0]
mulss xmm1, dword [eax + 0x26c]
movss xmm0, dword [esi + 0x1538]
addss xmm0, xmm0
addss xmm1, dword [eax + 0x14c]
addss xmm1, xmm0
jmp 0x1006faa7
xorps xmm1, xmm1
movss xmm5, dword [eax + 0x10]
movaps xmm3, xmm5
addss xmm3, xmm2
addss xmm3, xmm1
test edx, edx
jne 0x1006fadb
movss xmm1, dword [esi + 0x1538]
movss xmm4, dword [esi + 0x18b0]
addss xmm1, xmm1
mulss xmm4, dword [eax + 0x26c]
addss xmm4, xmm1
addss xmm5, xmm4
mov dword [ebp - 0x1c], 0xff7fffff
mov dword [ebp - 0x14], 0x7f7fffff
movss dword [ebp - 0x10], xmm3
movss dword [ebp - 0x18], xmm5
jmp 0x1006fb2b
movss xmm1, dword [eax + 0xc]
movaps xmm0, xmm1
mov dword [ebp - 0x18], 0xff7fffff
addss xmm1, dword [eax + 0x14]
addss xmm0, xmm2
mov dword [ebp - 0x10], 0x7f7fffff
subss xmm1, xmm2
movss dword [ebp - 0x1c], xmm0
subss xmm1, dword [eax + 0x70]
movss dword [ebp - 0x14], xmm1
push 0
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [edi + 0xa0]
push eax
lea eax, [edi + 0x14]
push eax
lea edx, [edi + 0xc]
call fcn.1006f620
mov eax, dword [ebp - 4]
add esp, 0x14
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
test eax, 0x4000000
je 0x1006fbc6
movss xmm3, dword [edi + 0xc]
lea edx, [edi + 0xc]
movss xmm2, dword [0x10162728]
lea eax, [ebp - 0x2c]
movss xmm1, dword [edi + 0x10]
movaps xmm0, xmm3
subss xmm0, xmm2
push 0
push eax
lea eax, [ebp - 0x3c]
push eax
movss dword [ebp - 0x2c], xmm0
addss xmm3, xmm2
movaps xmm0, xmm1
lea eax, [edi + 0xa0]
subss xmm0, xmm2
addss xmm1, xmm2
push eax
lea eax, [edi + 0x14]
movss dword [ebp - 0x24], xmm3
push eax
movss dword [ebp - 0x28], xmm0
movss dword [ebp - 0x20], xmm1
call fcn.1006f620
mov eax, dword [ebp - 4]
add esp, 0x14
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
test eax, 0x2000000
je 0x1006fceb
movss xmm4, dword [esi + 0x159c]
lea ecx, [ebp - 0xc]
call fcn.100705a0
cmp byte [esi + 0x1afe], 0
jne 0x1006fc43
cmp byte [esi + 0x1aff], 0
je 0x1006fc43
test byte [esi + 8], 4
jne 0x1006fc43
movss xmm0, dword [ebp - 0xc]
subss xmm0, dword [0x10162850]
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [ebp - 8]
subss xmm0, dword [0x10162830]
movss dword [ebp - 0x28], xmm0
movss xmm0, dword [ebp - 0xc]
addss xmm0, dword [0x10162850]
movss dword [ebp - 0x24], xmm0
movss xmm0, dword [ebp - 8]
addss xmm0, dword [0x10162830]
movss dword [ebp - 0x20], xmm0
jmp 0x1006fc86
movss xmm0, dword [ebp - 0xc]
subss xmm0, dword [0x10162850]
mulss xmm4, dword [0x10162870]
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [ebp - 8]
subss xmm0, dword [0x10162830]
movss dword [ebp - 0x28], xmm0
movaps xmm0, xmm4
addss xmm0, dword [ebp - 0xc]
addss xmm4, dword [ebp - 8]
movss dword [ebp - 0x24], xmm0
movss dword [ebp - 0x20], xmm4
push 0
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x3c]
push eax
lea esi, [edi + 0xa0]
lea eax, [edi + 0x14]
push esi
push eax
lea edx, [ebp - 0xc]
lea ecx, [ebp - 0x14]
call fcn.1006f620
add esp, 0x14
cmp dword [esi], 0xffffffff
jne 0x1006fcd2
movss xmm1, dword [ebp - 0xc]
movss xmm2, dword [ebp - 8]
addss xmm1, dword [0x101627c4]
addss xmm2, dword [0x101627c4]
movss dword [ebp - 0x14], xmm1
movss dword [ebp - 0x10], xmm2
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
pop edi
mov dword [edx], eax
mov eax, edx
mov dword [edx + 4], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3