Function at 0x100ae890
Capabilities:
Encode data using base64

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1011b3bc
mov eax, dword fs:[0]
push eax
sub esp, 0xb1c
mov eax, dword [0x10150380]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xa00], ecx
mov edi, dword [ebp + 8]
mov dword [ebp - 0x9b4], 0
mov dword [ebp - 0x9dc], edi
mov eax, dword [edi + 8]
lea ecx, [edi + 8]
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [ebp - 0xa00]
mov edx, dword [0x1017d4c4]
add ecx, 0x3c
mov dword [ebp - 0x9d0], eax
lea eax, [ecx + eax*4]
mov ecx, dword [0x1017c300]
mov dword [ebp - 0x9d8], eax
mov eax, dword [0x10176f30]
movss xmm0, dword [ecx + 0x14]
mulss xmm0, dword [0x101450e0]
mov ecx, dword [edi + edx]
movss dword [ebp - 0x9ec], xmm0
cmp ecx, dword [edx + eax]
jne 0x100ae93c
mov ecx, dword [0x1017c384]
mov eax, dword [ecx]
mov eax, dword [eax + 0x34]
call eax
test eax, eax
je 0x100b24b7
mov eax, dword [edi + 8]
lea ecx, [edi + 8]
mov eax, dword [eax + 0x24]
call eax
mov byte [ebp - 0x9aa], al
lea ecx, [edi + 8]
mov eax, dword [edi + 8]
mov eax, dword [eax + 0x28]
call eax
imul eax, eax, 0x514
lea eax, [eax + 0x101623f8]
test eax, eax
je 0x100b24c2
xorps xmm0, xmm0
mov dword [ebp - 0x35c], 0
push 0x20
movups xmmword [ebp - 0x36c], xmm0
mov dword [ebp - 0x358], 0
call fcn.1010fe49
movups xmm0, xmmword [str.misc_reveal_radar]
mov dword [ebp - 0x36c], eax
add esp, 4
mov dword [ebp - 0x35c], 0x11
mov dword [ebp - 0x358], 0x1f
movups xmmword [eax], xmm0
mov cl, byte [0x10140d0c]
mov byte [eax + 0x10], cl
mov byte [eax + 0x11], 0
lea eax, [ebp - 0x36c]
mov dword [ebp - 4], 0
push eax
mov ecx, 0x1017fff8
mov dword [ebp - 0x9b4], 1
call fcn.1000dea0
cmp byte [eax], 0
je 0x100ae9fc
cmp byte [ebp - 0x9aa], 0
mov byte [ebp - 0x9a9], 1
je 0x100aea03
mov byte [ebp - 0x9a9], 0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x358]
cmp ecx, 0xf
jbe 0x100aea46
mov edx, dword [ebp - 0x36c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100aea3c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100aea3c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
add esp, 8
cmp byte [ebp - 0x9a9], 0
mov dword [ebp - 0x35c], 0
mov dword [ebp - 0x358], 0xf
mov byte [ebp - 0x36c], 0
je 0x100aea73
mov eax, dword [0x1017d544]
mov byte [edi + eax], 1
cmp byte [ebp - 0x9aa], 0
mov eax, dword [ebp - 0x9d0]
mov ecx, dword [ebp - 0xa00]
jne 0x100aeaa1
movss xmm1, dword [ebp - 0x9ec]
mov byte [ecx + eax - 1], 1
mov eax, dword [ebp - 0x9d8]
addss xmm1, dword [eax]
jmp 0x100aeabe
cmp byte [ecx + eax - 1], 0
je 0x100b24c2
mov eax, dword [ebp - 0x9d8]
movss xmm1, dword [eax]
subss xmm1, dword [ebp - 0x9ec]
movss dword [eax], xmm1
xorps xmm0, xmm0
mov ax, word [0x101400b4]
movups xmmword [ebp - 0x21c], xmm0
mov word [ebp - 0x214], ax
movq xmm0, qword [str.esp_dormant]
mov al, byte [0x101400b6]
mov dword [ebp - 0x20c], 0xb
mov dword [ebp - 0x208], 0xf
movq qword [ebp - 0x21c], xmm0
mov byte [ebp - 0x212], al
mov byte [ebp - 0x211], 0
lea eax, [ebp - 0x21c]
mov dword [ebp - 4], 1
push eax
mov ecx, 0x1017fff8
mov dword [ebp - 0x9b4], 2
call fcn.1000dea0
xor esi, esi
mov dl, byte [eax]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x208]
mov byte [ebp - 0x9a9], dl
mov dword [ebp - 0x9c0], esi
cmp ecx, 0xf
jbe 0x100aeb8a
mov edx, dword [ebp - 0x21c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100aeb7a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100aeb7a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
mov dl, byte [ebp - 0x9a9]
add esp, 8
mov ecx, dword [ebp - 0x9d8]
lea eax, [ebp - 0xa98]
mov dword [ebp - 0xa98], 0x3f800000
xorps xmm2, xmm2
mov dword [ebp - 0x20c], esi
mov dword [ebp - 0x208], 0xf
movss xmm0, dword [ecx]
comiss xmm0, dword [0x10145040]
mov byte [ebp - 0x21c], 0
cmovbe eax, ecx
movss xmm1, dword [eax]
maxss xmm1, xmm2
ucomiss xmm1, xmm2
movss dword [ecx], xmm1
lahf
test ah, 0x44
jp 0x100aebe5
test dl, dl
je 0x100b24c2
cmp byte [ebp - 0x9aa], 0
mov eax, dword [0x1017c300]
movss xmm0, dword [eax + 0x10]
mov eax, dword [0x1017d520]
subss xmm0, dword [edi + eax]
movss dword [ebp - 0x9b0], xmm0
je 0x100aec20
comiss xmm0, dword [0x10145100]
jbe 0x100aec20
ucomiss xmm1, xmm2
lahf
test ah, 0x44
jnp 0x100b24c2
movaps xmm0, xmm1
mov dword [ebp - 0x1f4], 0xb
mulss xmm0, dword [0x10145264]
mov dword [ebp - 0x1f0], 0xf
cvttss2si eax, xmm0
movaps xmm0, xmm1
mulss xmm1, dword [0x10145250]
mov dword [ebp - 0x9b8], eax
mulss xmm0, dword [0x1014523c]
cvttss2si eax, xmm0
xorps xmm0, xmm0
mov dword [ebp - 0x9e8], eax
cvttss2si eax, xmm1
movups xmmword [ebp - 0x204], xmm0
mov dword [ebp - 0xa14], eax
mov ax, word [0x101400e0]
movq xmm0, qword [0x101400d8]
mov word [ebp - 0x1fc], ax
mov al, byte [0x101400e2]
movq qword [ebp - 0x204], xmm0
mov byte [ebp - 0x1fa], al
mov byte [ebp - 0x1f9], 0
lea eax, [ebp - 0x204]
mov dword [ebp - 4], 2
push eax
mov ecx, 0x10180058
call fcn.1000de60
movss xmm1, dword [0x10145264]
movss xmm0, dword [eax + 8]
mulss xmm0, xmm1
cvttss2si edx, xmm0
movss xmm0, dword [eax + 4]
mulss xmm0, xmm1
mov byte [ebp - 0xa0a], dl
cvttss2si ecx, xmm0
movss xmm0, dword [eax]
mulss xmm0, xmm1
mov byte [ebp - 0xa0b], cl
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1f0]
cvttss2si eax, xmm0
mov byte [ebp - 0xa0c], al
cmp ecx, 0xf
jbe 0x100aed44
mov edx, dword [ebp - 0x204]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100aed3a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100aed3a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
add esp, 8
cmp byte [ebp - 0x9aa], 0
mov dword [ebp - 0x1f4], 0
mov dword [ebp - 0x1f0], 0xf
mov byte [ebp - 0x204], 0
je 0x100aedf1
cmp byte [ebp - 0x9a9], 0
je 0x100aedf1
movss xmm0, dword [0x101450c8]
movss xmm2, dword [ebp - 0x9b0]
comiss xmm2, xmm0
mov dword [ebp - 0x9b8], 0x70
mov dword [ebp - 0x9e8], 0x50
jbe 0x100aede1
subss xmm2, xmm0
movss xmm0, dword [0x101451f8]
movaps xmm1, xmm2
mulss xmm2, dword [0x10145180]
mulss xmm1, dword [0x10145198]
subss xmm0, xmm1
cvttss2si eax, xmm0
movss xmm0, dword [0x101451d0]
subss xmm0, xmm2
mov dword [ebp - 0x9b8], eax
cvttss2si eax, xmm0
mov dword [ebp - 0x9e8], eax
mov word [ebp - 0xa0c], 0x7070
mov byte [ebp - 0xa0a], 0x70
mov ecx, dword [0x1017c2a4]
lea edx, [ebp - 0x9a8]
mov eax, dword [ebp - 0x9b8]
mov byte [ebp - 0xa09], al
push edx
mov eax, dword [ecx]
push dword [ebp - 0x9d0]
mov eax, dword [eax + 0x20]
call eax
test al, al
je 0x100b24c2
mov dword [ebp - 0xa84], 0
mov ecx, edi
mov dword [ebp - 0xa80], 0
mov dword [ebp - 0xa7c], 0
mov dword [ebp - 0xa78], 0
mov dword [ebp - 0xa74], 0
mov dword [ebp - 0xa70], 0
mov eax, dword [edi]
mov eax, dword [eax + 0x28]
call eax
lea ecx, [ebp - 0xa78]
push ecx
lea ecx, [ebp - 0xa84]
movss xmm0, dword [eax]
movss dword [ebp - 0x9b0], xmm0
movss xmm0, dword [eax + 4]
mov eax, dword [0x1017c3f8]
push ecx
mov ecx, edi
movss dword [ebp - 0x9c4], xmm0
call eax
movss xmm0, dword [ebp - 0xa70]
lea edx, [ebp - 0xb08]
addss xmm0, dword [0x1014511c]
movss xmm2, dword [ebp - 0x9b0]
lea ecx, [ebp - 0xa84]
movss xmm1, dword [ebp - 0x9c4]
movss dword [ebp - 0xa84], xmm2
movss dword [ebp - 0xa80], xmm1
movss dword [ebp - 0xa78], xmm2
movss dword [ebp - 0xa74], xmm1
movss dword [ebp - 0xa70], xmm0
call fcn.100a0130
test al, al
je 0x100b24a9
lea edx, [ebp - 0xb24]
lea ecx, [ebp - 0xa78]
call fcn.100a0130
test al, al
je 0x100b24a9
movss xmm4, dword [ebp - 0xb04]
movaps xmm0, xmm4
subss xmm0, dword [ebp - 0xb20]
push dword [ebp - 0x9b8]
push edi
cvttss2si eax, xmm0
mov dword [ebp - 0x9e4], eax
movd xmm3, eax
cvtdq2ps xmm3, xmm3
movaps xmm0, xmm3
subss xmm4, xmm3
mulss xmm0, dword [0x10144fec]
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0xb08]
mov dword [ebp - 0x9e0], eax
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, dword [0x10144fec]
subss xmm0, xmm1
cvttss2si eax, xmm0
mov dword [ebp - 0x9d4], eax
cvttss2si eax, xmm4
mov dword [ebp - 0x9cc], eax
call fcn.100b34b0
push dword [ebp - 0x9b8]
push edi
call fcn.100b30d0
mov eax, dword [str.esp_box]
xorps xmm0, xmm0
movups xmmword [ebp - 0x1ec], xmm0
mov dword [ebp - 0x1ec], eax
mov ax, word [0x101400c4]
mov word [ebp - 0x1e8], ax
mov al, byte [0x101400c6]
mov dword [ebp - 0x1dc], 7
mov dword [ebp - 0x1d8], 0xf
mov byte [ebp - 0x1e6], al
mov byte [ebp - 0x1e5], 0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 3
push eax
mov ecx, 0x1017fff8
call fcn.1000dea0
mov al, byte [eax]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1d8]
mov byte [ebp - 0x9a9], al
cmp ecx, 0xf
jbe 0x100af043
mov edx, dword [ebp - 0x1ec]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100af033
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100af033
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
mov al, byte [ebp - 0x9a9]
add esp, 8
mov dword [ebp - 0x1dc], 0
mov dword [ebp - 0x1d8], 0xf
mov byte [ebp - 0x1ec], 0
test al, al
je 0x100af15c
mov ecx, dword [0x1017c2b0]
mov eax, dword [ebp - 0x9e8]
push dword [ebp - 0xa0c]
mov byte [ebp - 0xa19], al
mov eax, dword [ecx]
mov word [ebp - 0xa1c], 0xa0a
mov byte [ebp - 0xa1a], 0xa
mov eax, dword [eax + 0x38]
call eax
mov ecx, dword [0x1017c2b0]
mov edi, dword [ebp - 0x9cc]
mov esi, dword [ebp - 0x9d4]
mov eax, dword [ecx]
mov edx, dword [eax + 0x48]
mov eax, dword [ebp - 0x9e4]
add eax, edi
push eax
mov eax, dword [ebp - 0x9e0]
add eax, esi
push eax
push edi
push esi
call edx
mov ecx, dword [0x1017c2b0]
lea edi, [esi - 1]
mov esi, dword [ebp - 0xa1c]
push esi
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
mov ecx, dword [0x1017c2b0]
mov esi, dword [ebp - 0x9e4]
inc esi
mov eax, dword [ecx]
mov edx, dword [eax + 0x48]
mov eax, dword [ebp - 0x9cc]
add eax, esi
push eax
mov eax, dword [ebp - 0x9e0]
add eax, 2
add eax, edi
push eax
mov eax, dword [ebp - 0x9cc]
dec eax
push eax
push edi
call edx
mov ecx, dword [0x1017c2b0]
mov edi, dword [ebp - 0x9d4]
mov esi, dword [ebp - 0xa1c]
inc edi
push esi
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
mov ecx, dword [0x1017c2b0]
mov esi, dword [ebp - 0x9cc]
inc esi
mov eax, dword [ecx]
mov edx, dword [eax + 0x48]
mov eax, dword [ebp - 0x9e4]
add eax, 0xfffffffe
add eax, esi
push eax
mov eax, dword [ebp - 0x9e0]
add eax, 0xfffffffe
add eax, edi
push eax
push esi
push edi
call edx
mov edi, dword [ebp - 0x9dc]
xor esi, esi
xorps xmm0, xmm0
mov dword [ebp - 0x23c], 8
movups xmmword [ebp - 0x24c], xmm0
mov dword [ebp - 0x238], 0xf
mov dword [ebp - 0x24c], 0x5f707365
mov dword [ebp - 0x248], 0x656d616e
mov byte [ebp - 0x244], 0
lea eax, [ebp - 0x24c]
mov dword [ebp - 4], 4
push eax
mov ecx, 0x1017fff8
call fcn.1000dea0
mov al, byte [eax]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x238]
mov byte [ebp - 0x9a9], al
cmp ecx, 0xf
jbe 0x100af1fe
mov edx, dword [ebp - 0x24c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100af1ee
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100af1ee
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
mov al, byte [ebp - 0x9a9]
add esp, 8
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x238], 0xf
mov byte [ebp - 0x24c], 0
test al, al
je 0x100af4cb
xorps xmm0, xmm0
mov dword [ebp - 0x17c], 0
lea ecx, [ebp - 0x998]
mov dword [ebp - 0x178], 0
movups xmmword [ebp - 0x18c], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100af248
sub ecx, edx
lea eax, [ebp - 0x998]
push ecx
push eax
lea ecx, [ebp - 0x18c]
call fcn.1000f6f0
mov dword [ebp - 4], 5
lea eax, [ebp - 0x18c]
mov ecx, 0x18
mov dword [ebp - 0x374], 0
cmp dword [ebp - 0x17c], ecx
xorps xmm0, xmm0
movups xmmword [ebp - 0x384], xmm0
cmovb ecx, dword [ebp - 0x17c]
cmp dword [ebp - 0x178], 0xf
push ecx
cmova eax, dword [ebp - 0x18c]
lea ecx, [ebp - 0x384]
push eax
mov dword [ebp - 0x370], 0
call fcn.1000f6f0
mov esi, 0x200
mov dword [ebp - 0x9c0], esi
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x178]
cmp ecx, 0xf
jbe 0x100af305
mov edx, dword [ebp - 0x18c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100af2fb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100af4a0
push ecx
push edx
call fcn.1011035b
add esp, 8
mov eax, dword [0x101401e4]
xorps xmm0, xmm0
movups xmmword [ebp - 0x264], xmm0
mov dword [ebp - 0x17c], 0
movq xmm0, qword [0x101401dc]
mov dword [ebp - 0x178], 0xf
mov byte [ebp - 0x18c], 0
mov dword [ebp - 0x254], 0xc
mov dword [ebp - 0x250], 0xf
movq qword [ebp - 0x264], xmm0
mov dword [ebp - 0x25c], eax
mov byte [ebp - 0x258], 0
lea eax, [ebp - 0x264]
mov byte [ebp - 4], 8
push eax
mov ecx, 0x10180058
call fcn.1000de60
movss xmm1, dword [0x10145264]
movss xmm0, dword [eax + 8]
mulss xmm0, xmm1
cvttss2si edx, xmm0
movss xmm0, dword [eax + 4]
mulss xmm0, xmm1
mov byte [ebp - 0xa06], dl
cvttss2si ecx, xmm0
movss xmm0, dword [eax]
mulss xmm0, xmm1
mov byte [ebp - 0xa07], cl
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x250]
cvttss2si eax, xmm0
mov byte [ebp - 0xa08], al
cmp ecx, 0xf
jbe 0x100af3f5
mov edx, dword [ebp - 0x264]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100af3eb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100af3eb
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
add esp, 8
cmp byte [ebp - 0x9aa], 0
mov dword [ebp - 0x254], 0
mov dword [ebp - 0x250], 0xf
mov byte [ebp - 0x264], 0
je 0x100af429
mov word [ebp - 0xa08], 0x8282
mov byte [ebp - 0xa06], 0x82
mov eax, dword [ebp - 0x9e8]
mov ecx, 0x1017feb0
mov byte [ebp - 0xa05], al
lea eax, [ebp - 0x384]
push 2
push eax
push dword [ebp - 0xa08]
mov eax, dword [ebp - 0x9cc]
sub eax, dword [0x1017feb8]
push eax
mov eax, dword [ebp - 0x9e0]
cdq
sub eax, edx
sar eax, 1
add eax, dword [ebp - 0x9d4]
push eax
call fcn.100a06f0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x370]
cmp ecx, 0xf
jbe 0x100af4b0
mov edx, dword [ebp - 0x384]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100af4a6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100af4a6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
add esp, 8
mov dword [ebp - 0x374], 0
mov dword [ebp - 0x370], 0xf
mov byte [ebp - 0x384], 0
mov ax, word [0x101400fc]
xorps xmm0, xmm0
movups xmmword [ebp - 0x2dc], xmm0
mov dword [ebp - 0x2cc], 0xa
movq xmm0, qword [str.esp_health]
mov dword [ebp - 0x2c8], 0xf
movq qword [ebp - 0x2dc], xmm0
mov word [ebp - 0x2d4], ax
mov byte [ebp - 0x2d2], 0
lea eax, [ebp - 0x2dc]
mov dword [ebp - 4], 9
push eax
mov ecx, 0x1017fff8
call fcn.1000dea0
mov al, byte [eax]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2c8]
mov byte [ebp - 0x9a9], al
cmp ecx, 0xf
jbe 0x100af576
mov edx, dword [ebp - 0x2dc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100af566
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100af566
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
mov al, byte [ebp - 0x9a9]
add esp, 8
mov dword [ebp - 0x2cc], 0
mov dword [ebp - 0x2c8], 0xf
mov byte [ebp - 0x2dc], 0
test al, al
je 0x100afda7
mov eax, dword [ebp - 0x9cc]
mov esi, 0x64
inc eax
mov dword [ebp - 0x26c], 0
mov dword [ebp - 0x9c8], eax
xorps xmm0, xmm0
mov eax, dword [ebp - 0x9e4]
add eax, 0xfffffffe
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x9bc], eax
mov eax, dword [0x1017d4f8]
push 0x20
movups xmmword [ebp - 0x27c], xmm0
cmp dword [edi + eax], esi
cmovl esi, dword [edi + eax]
mov dword [ebp - 0x9d0], esi
call fcn.1010fe49
movups xmm0, xmmword [str.esp_health_animate]
mov dword [ebp - 0x27c], eax
add esp, 4
mov dword [ebp - 0x26c], 0x12
mov dword [ebp - 0x268], 0x1f
movups xmmword [eax], xmm0
mov cx, word [0x10140180]
mov word [eax + 0x10], cx
mov byte [eax + 0x12], 0
lea eax, [ebp - 0x27c]
mov dword [ebp - 4], 0xa
push eax
mov ecx, 0x1017fff8
call fcn.1000dea0
mov al, byte [eax]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x268]
mov byte [ebp - 0x9a9], al
cmp ecx, 0xf
jbe 0x100af690
mov edx, dword [ebp - 0x27c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100af680
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100af680
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
mov al, byte [ebp - 0x9a9]
add esp, 8
movd xmm0, esi
lea ecx, [edi + 8]
mov dword [ebp - 0x26c], 0
mov dword [ebp - 0x268], 0xf
mov byte [ebp - 0x27c], 0
cvtdq2ps xmm0, xmm0
test al, al
je 0x100af7cb
mov eax, dword [edi + 8]
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [ebp - 0xa00]
movd xmm0, esi
cvtdq2ps xmm0, xmm0
ucomiss xmm0, dword [ecx + eax*4 + 0x2144]
lahf
test ah, 0x44
jnp 0x100af830
mov dword [ebp - 0xa94], 0x42c80000
lea ecx, [edi + 8]
mov dword [ebp - 0xa90], 0
mov eax, dword [edi + 8]
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [ebp - 0xa00]
push 0x10140190
lea esi, [ecx + eax*4]
lea ecx, [ebp - 0x51c]
call fcn.1000e1e0
lea eax, [ebp - 0x51c]
mov dword [ebp - 4], 0xb
push eax
mov ecx, 0x10180018
call fcn.1000de80
movss xmm0, dword [esi + 0x2144]
lea edx, [ebp - 0xa90]
mov esi, dword [ebp - 0x9d0]
lea ecx, [ebp - 0xa68]
movd xmm1, dword [eax]
mov eax, dword [0x1017c300]
movd xmm2, esi
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm1, xmm1
subss xmm2, xmm0
mulss xmm1, dword [eax + 0x14]
lea eax, [ebp - 0xa94]
push eax
mulss xmm2, xmm1
addss xmm2, xmm0
movss dword [ebp - 0xa68], xmm2
call fcn.1000e800
add esp, 4
lea ecx, [edi + 8]
movss xmm0, dword [eax]
mov eax, dword [edi + 8]
movss dword [ebp - 0x9b0], xmm0
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [ebp - 0xa00]
movss xmm0, dword [ebp - 0x9b0]
mov dword [ebp - 4], 0xffffffff
movss dword [ecx + eax*4 + 0x2144], xmm0
lea ecx, [ebp - 0x51c]
call fcn.1000e190
jmp 0x100af830
lea eax, [ebp - 0xa8c]
mov dword [ebp - 0xa8c], 0x42c80000
push eax
lea edx, [ebp - 0xa88]
mov dword [ebp - 0xa88], 0
lea ecx, [ebp - 0xaf8]
movss dword [ebp - 0xaf8], xmm0
call fcn.1000e800
add esp, 4
lea ecx, [edi + 8]
movss xmm0, dword [eax]
mov eax, dword [edi + 8]
movss dword [ebp - 0xa68], xmm0
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [ebp - 0xa00]
movss xmm0, dword [ebp - 0xa68]
movss dword [ecx + eax*4 + 0x2144], xmm0
mov eax, dword [edi + 8]
lea ecx, [edi + 8]
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [ebp - 0xa00]
push ecx
movss xmm0, dword [ecx + eax*4 + 0x2144]
movss dword [ebp - 0x9b0], xmm0
fld dword [ebp - 0x9b0]
fstp dword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
fstp dword [ebp - 0x9b0]
cvttss2si eax, dword [ebp - 0x9b0]
imul eax, dword [ebp - 0x9bc]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x10144f1c]
movss dword [ebp - 0x9b0], xmm0
fld dword [ebp - 0x9b0]
fstp dword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
mov eax, dword [0x10140114]
xorps xmm0, xmm0
movups xmmword [ebp - 0x1d4], xmm0
add esp, 4
mov dword [ebp - 0x1cc], eax
movq xmm0, qword [0x1014010c]
mov ax, word [0x10140118]
fstp dword [ebp - 0xa10]
mov dword [ebp - 0x1c4], 0xe
mov dword [ebp - 0x1c0], 0xf
movq qword [ebp - 0x1d4], xmm0
mov word [ebp - 0x1c8], ax
mov byte [ebp - 0x1c6], 0
lea eax, [ebp - 0x1d4]
mov dword [ebp - 4], 0xc
push eax
mov ecx, 0x10180058
call fcn.1000de60
movss xmm1, dword [0x10145264]
movss xmm0, dword [eax + 8]
mulss xmm0, xmm1
cvttss2si edx, xmm0
movss xmm0, dword [eax + 4]
mulss xmm0, xmm1
mov byte [ebp - 0xa5a], dl
cvttss2si ecx, xmm0
movss xmm0, dword [eax]
mulss xmm0, xmm1
mov byte [ebp - 0xa5b], cl
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c0]
cvttss2si eax, xmm0
mov dword [ebp - 0x9f0], eax
mov byte [ebp - 0xa5c], al
cmp ecx, 0xf
jbe 0x100af992
mov edx, dword [ebp - 0x1d4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100af988
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100af988
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
add esp, 8
mov eax, dword [0x10140154]
xorps xmm0, xmm0
movups xmmword [ebp - 0x174], xmm0
mov dword [ebp - 0x16c], eax
mov ax, word [0x10140158]
movq xmm0, qword [0x1014014c]
mov word [ebp - 0x168], ax
mov al, byte [0x1014015a]
mov dword [ebp - 0x1c4], 0
mov dword [ebp - 0x1c0], 0xf
mov byte [ebp - 0x1d4], 0
mov dword [ebp - 0x164], 0xf
mov dword [ebp - 0x160], 0xf
movq qword [ebp - 0x174], xmm0
mov byte [ebp - 0x166], al
mov byte [ebp - 0x165], 0
lea eax, [ebp - 0x174]
mov dword [ebp - 4], 0xd
push eax
mov ecx, 0x10180058
call fcn.1000de60
movss xmm1, dword [0x10145264]
movss xmm0, dword [eax + 8]
mulss xmm0, xmm1
cvttss2si ecx, xmm0
movss xmm0, dword [eax + 4]
mulss xmm0, xmm1
mov dword [ebp - 0x9b0], ecx
cvttss2si ecx, xmm0
movss xmm0, dword [eax]
mulss xmm0, xmm1
mov dword [ebp - 0x9c4], ecx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x160]
cvttss2si eax, xmm0
mov dword [ebp - 0xa60], eax
cmp ecx, 0xf
jbe 0x100afaa0
mov edx, dword [ebp - 0x174]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100afa96
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100afa96
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
add esp, 8
mov eax, dword [ebp - 0x9b8]
movzx edx, al
mov byte [ebp - 0xa59], al
mov eax, dword [ebp - 0xa5c]
mov ecx, eax
shr ecx, 0x18
sub ecx, edx
movd xmm2, esi
cvtdq2ps xmm2, xmm2
mov esi, dword [ebp - 0x9d4]
add esi, 0xfffffffa
mov word [ebp - 0xa58], 0x6e6e
mov byte [ebp - 0xa56], 0x6e
mov dword [ebp - 0x164], 0
movd xmm0, edx
mulss xmm2, dword [0x10144f1c]
mov dword [ebp - 0x160], 0xf
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
mov byte [ebp - 0x174], 0
mov dword [ebp - 0xa04], esi
cvtdq2ps xmm0, xmm0
mulss xmm1, xmm2
addss xmm1, xmm0
cvttss2si ecx, xmm1
mov dword [ebp - 0xa18], ecx
mov ecx, dword [ebp - 0x9b0]
movzx edx, cl
mov ecx, eax
shr ecx, 0x10
movzx ecx, cl
sub ecx, edx
shr eax, 8
movd xmm0, edx
cvtdq2ps xmm0, xmm0
movzx eax, al
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm2
addss xmm1, xmm0
cvttss2si ecx, xmm1
mov dword [ebp - 0x9b0], ecx
mov ecx, dword [ebp - 0x9c4]
movzx ecx, cl
sub eax, ecx
movd xmm0, ecx
movd xmm1, eax
mov eax, dword [ebp - 0xa60]
cvtdq2ps xmm1, xmm1
movzx ecx, al
mov eax, dword [ebp - 0x9f0]
movzx eax, al
sub eax, ecx
cvtdq2ps xmm0, xmm0
mulss xmm1, xmm2
addss xmm1, xmm0
movd xmm0, ecx
mov ecx, dword [0x1017c2b0]
cvtdq2ps xmm0, xmm0
cvttss2si edx, xmm1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov byte [ebp - 0x9b3], dl
mulss xmm1, xmm2
addss xmm1, xmm0
cvttss2si eax, xmm1
mov byte [ebp - 0x9b4], al
mov eax, dword [ebp - 0x9b0]
mov byte [ebp - 0x9b2], al
mov eax, dword [ebp - 0xa18]
mov byte [ebp - 0x9b1], al
mov eax, dword [ebp - 0x9e8]
mov byte [ebp - 0xa55], al
mov eax, dword [ecx]
push dword [ebp - 0xa58]
mov eax, dword [eax + 0x38]
call eax
mov ecx, dword [0x1017c2b0]
mov eax, dword [ecx]
mov edx, dword [eax + 0x40]
lea eax, [esi + 4]
mov dword [ebp - 0x9ec], eax
mov eax, dword [ebp - 0x9bc]
add eax, dword [ebp - 0x9c8]
push eax
lea eax, [esi + 4]
push eax
push dword [ebp - 0x9c8]
push esi
call edx
cmp byte [ebp - 0x9aa], 0
je 0x100afc47
mov eax, dword [ebp - 0x9e8]
mov word [ebp - 0x9b4], 0x8282
mov byte [ebp - 0x9b2], 0x82
mov byte [ebp - 0x9b1], al
cvttss2si edi, dword [ebp - 0xa10]
mov eax, dword [ebp - 0x9bc]
mov ecx, dword [0x1017c2b0]
mov esi, dword [ebp - 0x9c8]
push dword [ebp - 0x9b4]
sub eax, edi
mov dword [ebp - 0x9bc], eax
add esi, eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
mov ecx, dword [0x1017c2b0]
add esi, edi
mov edx, dword [ebp - 0x9bc]
add edx, dword [ebp - 0x9c8]
push esi
push dword [ebp - 0x9ec]
mov eax, dword [ecx]
push edx
push dword [ebp - 0xa04]
mov eax, dword [eax + 0x40]
call eax
mov ecx, dword [0x1017c2b0]
mov eax, dword [ecx]
mov edx, dword [eax + 0x38]
mov eax, dword [ebp - 0xa14]
movzx eax, al
shl eax, 0x18
or eax, 0xa0a0a
push eax
call edx
mov ecx, dword [0x1017c2b0]
push esi
push dword [ebp - 0x9ec]
mov esi, dword [ebp - 0x9bc]
mov eax, dword [ecx]
add esi, dword [ebp - 0x9c8]
push esi
push dword [ebp - 0xa04]
mov eax, dword [eax + 0x48]
call eax
cmp byte [ebp - 0x9aa], 0
mov edi, dword [ebp - 0x9dc]
mov edx, dword [ebp - 0x9d0]
je 0x100afd4f
cmp edx, 0x5d
jge 0x100afda1
lea ecx, [ebp - 0x7d8]
call fcn.1001ed80
push 2
push eax
push ecx
mov ecx, dword [ebp - 0x9e8]
mov eax, esp
mov dword [ebp - 4], 0xe
mov byte [eax + 3], cl
mov ecx, 0x1017fea4
mov word [eax], 0x8282
mov byte [eax + 2], 0x82
lea eax, [esi - 5]
push eax
mov eax, dword [ebp - 0x9d4]
add eax, 0xfffffffb
push eax
call fcn.100a06f0
lea ecx, [ebp - 0x7d8]
jmp 0x100afd9c
cmp edx, 0x5d
jge 0x100afda1
lea ecx, [ebp - 0x7f0]
call fcn.1001ed80
push 2
push eax
push ecx
mov ecx, dword [ebp - 0x9e8]
mov eax, esp
mov dword [ebp - 4], 0xf
mov byte [eax + 3], cl
mov ecx, 0x1017fea4
mov word [eax], 0xffff
mov byte [eax + 2], 0xff
lea eax, [esi - 5]
push eax
mov eax, dword [ebp - 0x9d4]
add eax, 0xfffffffb
push eax
call fcn.100a06f0
lea ecx, [ebp - 0x7f0]
call fcn.1000e190
mov esi, dword [ebp - 0x9c0]
mov dword [ebp - 0x9fc], 0
mov dword [ebp - 0x9f8], 0
mov dword [ebp - 0x9f4], 0
mov dword [ebp - 4], 0x10
xorps xmm0, xmm0
mov al, byte [0x101403d8]
movups xmmword [ebp - 0x294], xmm0
mov dword [ebp - 0x284], 9
movq xmm0, qword [str.esp_flags]
mov dword [ebp - 0x280], 0xf
movq qword [ebp - 0x294], xmm0
mov byte [ebp - 0x28c], al
mov byte [ebp - 0x28b], 0
lea eax, [ebp - 0x294]
mov byte [ebp - 4], 0x11
push eax
mov ecx, 0x10180078
call fcn.1000de40
lea ecx, [ebp - 0xaf0]
mov dword [ebp - 0xaf0], 0
push ecx
mov ecx, eax
call fcn.1000dcc0
mov al, byte [eax]
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x280]
mov byte [ebp - 0x9a9], al
cmp ecx, 0xf
jbe 0x100afe87
mov edx, dword [ebp - 0x294]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100afe77
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100afe77
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
mov al, byte [ebp - 0x9a9]
add esp, 8
mov dword [ebp - 0x284], 0
mov dword [ebp - 0x280], 0xf
mov byte [ebp - 0x294], 0
test al, al
je 0x100aff97
mov eax, dword [0x1017d4fc]
mov edx, 0x10144d20
add eax, edi
cmp byte [ebp - 0x9aa], 0
push eax
je 0x100aff2a
lea ecx, [ebp - 0x808]
call fcn.10083a10
add esp, 4
mov ecx, dword [ebp - 0x9b8]
mov byte [ebp - 4], 0x12
mov byte [ebp - 0xa21], cl
lea ecx, [ebp - 0xa24]
push ecx
push eax
lea ecx, [ebp - 0x600]
mov word [ebp - 0xa24], 0x8282
mov byte [ebp - 0xa22], 0x82
call fcn.100b7030
lea eax, [ebp - 0x600]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x9fc]
call fcn.100b6de0
lea ecx, [ebp - 0x600]
call fcn.1000e190
lea ecx, [ebp - 0x808]
jmp 0x100aff92
lea ecx, [ebp - 0x820]
call fcn.10083a10
add esp, 4
mov ecx, dword [ebp - 0x9b8]
mov byte [ebp - 4], 0x14
mov byte [ebp - 0xa51], cl
lea ecx, [ebp - 0xa54]
push ecx
push eax
lea ecx, [ebp - 0x638]
mov word [ebp - 0xa54], 0xc896
mov byte [ebp - 0xa52], 0x3c
call fcn.100b7030
lea eax, [ebp - 0x638]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x9fc]
call fcn.100b6de0
lea ecx, [ebp - 0x638]
call fcn.1000e190
lea ecx, [ebp - 0x820]
call fcn.1000e190
mov al, byte [0x101403d8]
xorps xmm0, xmm0
movups xmmword [ebp - 0x2ac], xmm0
mov dword [ebp - 0x29c], 9
movq xmm0, qword [str.esp_flags]
mov dword [ebp - 0x298], 0xf
movq qword [ebp - 0x2ac], xmm0
mov byte [ebp - 0x2a4], al
mov byte [ebp - 0x2a3], 0
lea eax, [ebp - 0x2ac]
mov byte [ebp - 4], 0x16
push eax
mov ecx, 0x10180078
call fcn.1000de40
lea ecx, [ebp - 0xaec]
mov dword [ebp - 0xaec], 1
push ecx
mov ecx, eax
call fcn.1000dcc0
mov al, byte [eax]
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x298]
mov byte [ebp - 0x9a9], al
cmp ecx, 0xf
jbe 0x100b0052
mov edx, dword [ebp - 0x2ac]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b0042
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b0042
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
mov al, byte [ebp - 0x9a9]
add esp, 8
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0x298], 0xf
mov byte [ebp - 0x2ac], 0
test al, al
je 0x100b0364
mov eax, dword [0x1017d530]
cmp byte [edi + eax], 0
mov eax, dword [0x1017d54c]
je 0x100b026f
cmp dword [edi + eax], 0
jle 0x100b0181
cmp byte [ebp - 0x9aa], 0
push 0x10144d1c
je 0x100b0111
lea ecx, [ebp - 0x564]
call fcn.1000e1e0
mov eax, dword [ebp - 0x9b8]
lea ecx, [ebp - 0x61c]
mov byte [ebp - 4], 0x17
mov byte [ebp - 0xa4d], al
lea eax, [ebp - 0xa50]
push eax
lea eax, [ebp - 0x564]
mov word [ebp - 0xa50], 0x8282
push eax
mov byte [ebp - 0xa4e], 0x82
call fcn.100b7030
lea eax, [ebp - 0x61c]
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0x9fc]
call fcn.100b6de0
lea ecx, [ebp - 0x61c]
call fcn.1000e190
lea ecx, [ebp - 0x564]
jmp 0x100b035f
lea ecx, [ebp - 0x57c]
call fcn.1000e1e0
mov eax, dword [ebp - 0x9b8]
lea ecx, [ebp - 0x5e4]
mov byte [ebp - 4], 0x19
mov byte [ebp - 0xa49], al
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0x57c]
mov word [ebp - 0xa4c], 0xffff
push eax
mov byte [ebp - 0xa4a], 0xff
call fcn.100b7030
lea eax, [ebp - 0x5e4]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x9fc]
call fcn.100b6de0
lea ecx, [ebp - 0x5e4]
call fcn.1000e190
lea ecx, [ebp - 0x57c]
jmp 0x100b035f
cmp byte [ebp - 0x9aa], 0
push 0x10144d18
je 0x100b01ff
lea ecx, [ebp - 0x594]
call fcn.1000e1e0
mov eax, dword [ebp - 0x9b8]
lea ecx, [ebp - 0x5c8]
mov byte [ebp - 4], 0x1b
mov byte [ebp - 0xa45], al
lea eax, [ebp - 0xa48]
push eax
lea eax, [ebp - 0x594]
mov word [ebp - 0xa48], 0x8282
push eax
mov byte [ebp - 0xa46], 0x82
call fcn.100b7030
lea eax, [ebp - 0x5c8]
mov byte [ebp - 4], 0x1c
push eax
lea ecx, [ebp - 0x9fc]
call fcn.100b6de0
lea ecx, [ebp - 0x5c8]
call fcn.1000e190
lea ecx, [ebp - 0x594]
jmp 0x100b035f
lea ecx, [ebp - 0x5ac]
call fcn.1000e1e0
mov eax, dword [ebp - 0x9b8]
lea ecx, [ebp - 0x7c0]
mov byte [ebp - 4], 0x1d
mov byte [ebp - 0xa41], al
lea eax, [ebp - 0xa44]
push eax
lea eax, [ebp - 0x5ac]
mov word [ebp - 0xa44], 0xffff
push eax
mov byte [ebp - 0xa42], 0xff
call fcn.100b7030
lea eax, [ebp - 0x7c0]
mov byte [ebp - 4], 0x1e
push eax
lea ecx, [ebp - 0x9fc]
call fcn.100b6de0
lea ecx, [ebp - 0x7c0]
call fcn.1000e190
lea ecx, [ebp - 0x5ac]
jmp 0x100b035f
cmp dword [edi + eax], 0
jle 0x100b0364
cmp byte [ebp - 0x9aa], 0
push 0x10144d48
je 0x100b02f4
lea ecx, [ebp - 0x4d4]
call fcn.1000e1e0
mov eax, dword [ebp - 0x9b8]
lea ecx, [ebp - 0x670]
mov byte [ebp - 4], 0x1f
mov byte [ebp - 0xa3d], al
lea eax, [ebp - 0xa40]
push eax
lea eax, [ebp - 0x4d4]
mov word [ebp - 0xa40], 0x8282
push eax
mov byte [ebp - 0xa3e], 0x82
call fcn.100b7030
lea eax, [ebp - 0x670]
mov byte [ebp - 4], 0x20
push eax
lea ecx, [ebp - 0x9fc]
call fcn.100b6de0
lea ecx, [ebp - 0x670]
call fcn.1000e190
lea ecx, [ebp - 0x4d4]
jmp 0x100b035f
lea ecx, [ebp - 0x4ec]
call fcn.1000e1e0
mov eax, dword [ebp - 0x9b8]
lea ecx, [ebp - 0x654]
mov byte [ebp - 4], 0x21
mov byte [ebp - 0xa1d], al
lea eax, [ebp - 0xa20]
push eax
lea eax, [ebp - 0x4ec]
mov word [ebp - 0xa20], 0xffff
push eax
mov byte [ebp - 0xa1e], 0xff
call fcn.100b7030
lea eax, [ebp - 0x654]
mov byte [ebp - 4], 0x22
push eax
lea ecx, [ebp - 0x9fc]
call fcn.100b6de0
lea ecx, [ebp - 0x654]
call fcn.1000e190
lea ecx, [ebp - 0x4ec]
call fcn.1000e190
mov al, byte [0x101403d8]
xorps xmm0, xmm0
movups xmmword [ebp - 0x234], xmm0
mov dword [ebp - 0x224], 9
movq xmm0, qword [str.esp_flags]
mov dword [ebp - 0x220], 0xf
movq qword [ebp - 0x234], xmm0
mov byte [ebp - 0x22c], al
mov byte [ebp - 0x22b], 0
lea eax, [ebp - 0x234]
mov byte [ebp - 4], 0x23
or esi, 4
mov ecx, 0x10180078
push eax
mov dword [ebp - 0x9b4], esi
call fcn.1000de40
lea ecx, [ebp - 0xae8]
mov dword [ebp - 0xae8], 2
push ecx
mov ecx, eax
call fcn.1000dcc0
cmp byte [eax], 0
je 0x100b03f1
mov eax, dword [0x1017d53c]
mov byte [ebp - 0x9a9], 1
cmp byte [edi + eax], 0
jne 0x100b03f8
mov byte [ebp - 0x9a9], 0
mov dword [ebp - 4], 0x10
and esi, 0xfffffffb
mov ecx, dword [ebp - 0x220]
cmp ecx, 0xf
jbe 0x100b043e
mov edx, dword [ebp - 0x234]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b0434
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b0434
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
add esp, 8
cmp byte [ebp - 0x9a9], 0
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 0xf
mov byte [ebp - 0x234], 0
je 0x100b0551
cmp byte [ebp - 0x9aa], 0
push str.scoped
je 0x100b04e1
lea ecx, [ebp - 0x4bc]
call fcn.1000e1e0
mov eax, dword [ebp - 0x9b8]
lea ecx, [ebp - 0x68c]
mov byte [ebp - 4], 0x24
mov byte [ebp - 0xa39], al
lea eax, [ebp - 0xa3c]
push eax
lea eax, [ebp - 0x4bc]
mov word [ebp - 0xa3c], 0x8282
push eax
mov byte [ebp - 0xa3a], 0x82
call fcn.100b7030
lea eax, [ebp - 0x68c]
mov byte [ebp - 4], 0x25
push eax
lea ecx, [ebp - 0x9fc]
call fcn.100b6de0
lea ecx, [ebp - 0x68c]
call fcn.1000e190
lea ecx, [ebp - 0x4bc]
jmp 0x100b054c
lea ecx, [ebp - 0x534]
call fcn.1000e1e0
mov eax, dword [ebp - 0x9b8]
lea ecx, [ebp - 0x6a8]
mov byte [ebp - 4], 0x26
mov byte [ebp - 0xa35], al
lea eax, [ebp - 0xa38]
push eax
lea eax, [ebp - 0x534]
mov word [ebp - 0xa38], 0xb43c
push eax
mov byte [ebp - 0xa36], 0xe1
call fcn.100b7030
lea eax, [ebp - 0x6a8]
mov byte [ebp - 4], 0x27
push eax
lea ecx, [ebp - 0x9fc]
call fcn.100b6de0
lea ecx, [ebp - 0x6a8]
call fcn.1000e190
lea ecx, [ebp - 0x534]
call fcn.1000e190
mov al, byte [0x101403d8]
xorps xmm0, xmm0
movups xmmword [ebp - 0x2c4], xmm0
mov dword [ebp - 0x2b4], 9
movq xmm0, qword [str.esp_flags]
mov dword [ebp - 0x2b0], 0xf
movq qword [ebp - 0x2c4], xmm0
mov byte [ebp - 0x2bc], al
mov byte [ebp - 0x2bb], 0
lea eax, [ebp - 0x2c4]
mov byte [ebp - 4], 0x28
or esi, 8
mov ecx, 0x10180078
push eax
mov dword [ebp - 0x9b4], esi
call fcn.1000de40
lea ecx, [ebp - 0xae4]
mov dword [ebp - 0xae4], 3
push ecx
mov ecx, eax
call fcn.1000dcc0
cmp byte [eax], 0
je 0x100b05e6
mov eax, dword [0x1017d558]
mov byte [ebp - 0x9a9], 1
movss xmm0, dword [edi + eax]
comiss xmm0, dword [0x10144e98]
ja 0x100b05ed
mov byte [ebp - 0x9a9], 0
mov dword [ebp - 4], 0x10
and esi, 0xfffffff7
mov ecx, dword [ebp - 0x2b0]
cmp ecx, 0xf
jbe 0x100b0633
mov edx, dword [ebp - 0x2c4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b0629
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b0629
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
add esp, 8
cmp byte [ebp - 0x9a9], 0
mov dword [ebp - 0x2b4], 0
mov dword [ebp - 0x2b0], 0xf
mov byte [ebp - 0x2c4], 0
je 0x100b0746
cmp byte [ebp - 0x9aa], 0
push str.flashed
je 0x100b06d6
lea ecx, [ebp - 0x504]
call fcn.1000e1e0
mov eax, dword [ebp - 0x9b8]
lea ecx, [ebp - 0x6c4]
mov byte [ebp - 4], 0x29
mov byte [ebp - 0xa31], al
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0x504]
mov word [ebp - 0xa34], 0x8282
push eax
mov byte [ebp - 0xa32], 0x82
call fcn.100b7030
lea eax, [ebp - 0x6c4]
mov byte [ebp - 4], 0x2a
push eax
lea ecx, [ebp - 0x9fc]
call fcn.100b6de0
lea ecx, [ebp - 0x6c4]
call fcn.1000e190
lea ecx, [ebp - 0x504]
jmp 0x100b0741
lea ecx, [ebp - 0x4a4]
call fcn.1000e1e0
mov eax, dword [ebp - 0x9b8]
lea ecx, [ebp - 0x6e0]
mov byte [ebp - 4], 0x2b
mov byte [ebp - 0xa2d], al
lea eax, [ebp - 0xa30]
push eax
lea eax, [ebp - 0x4a4]
mov word [ebp - 0xa30], 0xb43c
push eax
mov byte [ebp - 0xa2e], 0xe1
call fcn.100b7030
lea eax, [ebp - 0x6e0]
mov byte [ebp - 4], 0x2c
push eax
lea ecx, [ebp - 0x9fc]
call fcn.100b6de0
lea ecx, [ebp - 0x6e0]
call fcn.1000e190
lea ecx, [ebp - 0x4a4]
call fcn.1000e190
mov al, byte [0x101403d8]
xorps xmm0, xmm0
movups xmmword [ebp - 0x2f4], xmm0
mov dword [ebp - 0x2e4], 9
movq xmm0, qword [str.esp_flags]
mov dword [ebp - 0x2e0], 0xf
movq qword [ebp - 0x2f4], xmm0
mov byte [ebp - 0x2ec], al
mov byte [ebp - 0x2eb], 0
lea eax, [ebp - 0x2f4]
mov byte [ebp - 4], 0x2d
push eax
mov ecx, 0x10180078
call fcn.1000de40
lea ecx, [ebp - 0xae0]
mov dword [ebp - 0xae0], 4
push ecx
mov ecx, eax
call fcn.1000dcc0
mov al, byte [eax]
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x2e0]
mov byte [ebp - 0x9a9], al
cmp ecx, 0xf
jbe 0x100b0801
mov edx, dword [ebp - 0x2f4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b07f1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b07f1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
mov al, byte [ebp - 0x9a9]
add esp, 8
mov dword [ebp - 0x2e4], 0
mov dword [ebp - 0x2e0], 0xf
mov byte [ebp - 0x2f4], 0
test al, al
je 0x100b0979
mov eax, dword [0x1017c43c]
mov ecx, dword [edi + eax]
movss xmm0, dword [ecx + 0x58]
ucomiss xmm0, dword [0x10144e98]
lahf
test ah, 0x44
jnp 0x100b0979
mov eax, dword [ecx + 0x50]
mov ecx, dword [0x1017c3fc]
mov dword [ebp - 0x9c4], ecx
mov ecx, dword [0x1017c454]
mov dword [ebp - 0x9b0], eax
cmp dword [edi + ecx], 0
jne 0x100b0878
mov eax, dword [0x1017c3d8]
mov ecx, edi
call eax
mov ecx, dword [0x1017c454]
mov eax, dword [ebp - 0x9b0]
mov ecx, dword [edi + ecx]
mov edx, eax
call dword [ebp - 0x9c4]
cmp eax, 0x3c7
jne 0x100b0979
cmp byte [ebp - 0x9aa], 0
push str.reload
je 0x100b0909
lea ecx, [ebp - 0x48c]
call fcn.1000e1e0
mov eax, dword [ebp - 0x9b8]
lea ecx, [ebp - 0x6fc]
mov byte [ebp - 4], 0x2e
mov byte [ebp - 0xa29], al
lea eax, [ebp - 0xa2c]
push eax
lea eax, [ebp - 0x48c]
mov word [ebp - 0xa2c], 0x8282
push eax
mov byte [ebp - 0xa2a], 0x82
call fcn.100b7030
lea eax, [ebp - 0x6fc]
mov byte [ebp - 4], 0x2f
push eax
lea ecx, [ebp - 0x9fc]
call fcn.100b6de0
lea ecx, [ebp - 0x6fc]
call fcn.1000e190
lea ecx, [ebp - 0x48c]
jmp 0x100b0974
lea ecx, [ebp - 0x54c]
call fcn.1000e1e0
mov eax, dword [ebp - 0x9b8]
lea ecx, [ebp - 0x718]
mov byte [ebp - 4], 0x30
mov byte [ebp - 0xa25], al
lea eax, [ebp - 0xa28]
push eax
lea eax, [ebp - 0x54c]
mov word [ebp - 0xa28], 0xb43c
push eax
mov byte [ebp - 0xa26], 0xe1
call fcn.100b7030
lea eax, [ebp - 0x718]
mov byte [ebp - 4], 0x31
push eax
lea ecx, [ebp - 0x9fc]
call fcn.100b6de0
lea ecx, [ebp - 0x718]
call fcn.1000e190
lea ecx, [ebp - 0x54c]
call fcn.1000e190
mov al, byte [0x101403d8]
xorps xmm0, xmm0
movups xmmword [ebp - 0x30c], xmm0
mov dword [ebp - 0x2fc], 9
movq xmm0, qword [str.esp_flags]
mov dword [ebp - 0x2f8], 0xf
movq qword [ebp - 0x30c], xmm0
mov byte [ebp - 0x304], al
mov byte [ebp - 0x303], 0
lea eax, [ebp - 0x30c]
mov byte [ebp - 4], 0x32
or esi, 0x10
mov ecx, 0x10180078
push eax
mov dword [ebp - 0x9b4], esi
call fcn.1000de40
lea ecx, [ebp - 0xadc]
mov dword [ebp - 0xadc], 5
push ecx
mov ecx, eax
call fcn.1000dcc0
cmp byte [eax], 0
je 0x100b0a08
mov eax, dword [0x1017c408]
mov ecx, edi
call eax
mov byte [ebp - 0x9a9], 1
test al, al
jne 0x100b0a0f
mov byte [ebp - 0x9a9], 0
mov dword [ebp - 4], 0x10
and esi, 0xffffffef
mov ecx, dword [ebp - 0x2f8]
mov dword [ebp - 0x9c0], esi
cmp ecx, 0xf
jbe 0x100b0a5b
mov edx, dword [ebp - 0x30c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b0a51
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b0a51
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
add esp, 8
cmp byte [ebp - 0x9a9], 0
mov dword [ebp - 0x2fc], 0
mov dword [ebp - 0x2f8], 0xf
mov byte [ebp - 0x30c], 0
je 0x100b0b72
cmp byte [ebp - 0x9aa], 0
push str.bomb
je 0x100b0afe
lea ecx, [ebp - 0x474]
call fcn.1000e1e0
mov eax, dword [ebp - 0x9b8]
lea ecx, [ebp - 0x734]
mov byte [ebp - 4], 0x33
mov byte [ebp - 0xa11], al
lea eax, [ebp - 0xa14]
push eax
lea eax, [ebp - 0x474]
mov word [ebp - 0xa14], 0x8282
push eax
mov byte [ebp - 0xa12], 0x82
call fcn.100b7030
lea eax, [ebp - 0x734]
mov byte [ebp - 4], 0x34
push eax
lea ecx, [ebp - 0x9fc]
call fcn.100b6de0
lea ecx, [ebp - 0x734]
call fcn.1000e190
lea ecx, [ebp - 0x474]
jmp 0x100b0b69
lea ecx, [ebp - 0x45c]
call fcn.1000e1e0
mov eax, dword [ebp - 0x9b8]
lea ecx, [ebp - 0x750]
mov byte [ebp - 4], 0x35
mov byte [ebp - 0xa0d], al
lea eax, [ebp - 0xa10]
push eax
lea eax, [ebp - 0x45c]
mov word [ebp - 0xa10], 0xff
push eax
mov byte [ebp - 0xa0e], 0
call fcn.100b7030
lea eax, [ebp - 0x750]
mov byte [ebp - 4], 0x36
push eax
lea ecx, [ebp - 0x9fc]
call fcn.100b6de0
lea ecx, [ebp - 0x750]
call fcn.1000e190
lea ecx, [ebp - 0x45c]
mov byte [ebp - 4], 0x10
call fcn.1000e190
mov eax, dword [edi + 8]
lea ecx, [edi + 8]
mov eax, dword [eax + 0x28]
call eax
dec eax
mov ecx, edi
imul eax, eax, 0x514
add eax, 0x1016290c
mov dword [ebp - 0x9c4], eax
call fcn.1001b610
test eax, eax
movss xmm1, dword [0x10145040]
lea ecx, [ebp - 0x9ec]
mov dword [ebp - 0x9ec], eax
lea edx, [ebp - 0xad8]
mov dword [ebp - 0xad4], 0x2ee
cmovns edx, ecx
mov dword [ebp - 0xad8], 0
cmp eax, 0x2ee
mov dword [ebp - 0xac4], 0x3f800000
lea ecx, [ebp - 0xad4]
mov dword [ebp - 0xad0], 0
cmovle ecx, edx
mov dword [ebp - 0x114], 0
lea eax, [ebp - 0xad0]
lea esi, [ebp - 0xac4]
push 0x100
movd xmm0, dword [ecx]
lea ecx, [ebp - 0xac8]
cvtdq2ps xmm0, xmm0
push 0
mulss xmm0, dword [0x10144ee8]
comiss xmm0, dword [0x10144e98]
movss dword [ebp - 0xac8], xmm0
cmovae eax, ecx
comiss xmm1, xmm0
cmovae esi, eax
lea eax, [ebp - 0x110]
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [edi + 8]
lea ecx, [edi + 8]
add esp, 0xc
mov eax, dword [eax + 0x24]
call eax
test al, al
jne 0x100b0da5
movd xmm0, dword [ebp - 0x9ec]
cvtdq2ps xmm0, xmm0
comiss xmm0, dword [0x101451c4]
jbe 0x100b0da5
mov eax, dword [edi + 8]
lea ecx, [edi + 8]
mov eax, dword [eax + 0x28]
call eax
movss xmm0, dword [ebp + eax*4 - 0x114]
ucomiss xmm0, dword [esi]
lahf
test ah, 0x44
jnp 0x100b0d26
mov dword [ebp - 0xacc], 0x3f800000
lea ecx, [edi + 8]
mov dword [ebp - 0xac0], 0
mov eax, dword [edi + 8]
mov eax, dword [eax + 0x28]
call eax
movss xmm1, dword [esi]
lea ecx, [ebp - 0x114]
movss xmm0, dword [ecx + eax*4]
lea edx, [ebp - 0xac0]
subss xmm1, xmm0
lea eax, [ecx + eax*4]
mov eax, dword [0x1017c300]
lea ecx, [ebp - 0xabc]
mulss xmm1, dword [eax + 0x14]
lea eax, [ebp - 0xacc]
push eax
mulss xmm1, dword [0x10145148]
addss xmm1, xmm0
movss dword [ebp - 0xabc], xmm1
call fcn.1000e800
add esp, 4
lea ecx, [edi + 8]
movss xmm0, dword [eax]
mov eax, dword [edi + 8]
movss dword [ebp - 0x9b0], xmm0
mov eax, dword [eax + 0x28]
call eax
movss xmm0, dword [ebp - 0x9b0]
movss dword [ebp + eax*4 - 0x114], xmm0
mov eax, dword [edi + 8]
lea ecx, [edi + 8]
mov eax, dword [eax + 0x28]
call eax
push 0xff0000ff
push 0xffffffffffffffff
lea ecx, [ebp - 0xa9c]
movss xmm3, dword [ebp + eax*4 - 0x114]
call fcn.100a8d20
lea eax, [ebp - 0x9ec]
mov edx, str._ims
push eax
lea ecx, [ebp - 0x838]
call fcn.10083a10
add esp, 0xc
lea ecx, [ebp - 0xa9c]
push ecx
push eax
lea ecx, [ebp - 0x76c]
call fcn.100b7060
mov eax, ecx
mov byte [ebp - 4], 0x38
push eax
lea ecx, [ebp - 0x9fc]
call fcn.100b6de0
lea ecx, [ebp - 0x76c]
call fcn.1000e190
lea ecx, [ebp - 0x838]
mov byte [ebp - 4], 0x10
call fcn.1000e190
mov esi, dword [ebp - 0x9c4]
test esi, esi
je 0x100b139f
cmp dword [esi + 0x74], 0
je 0x100b139f
cmp byte [ebp - 0x9aa], 0
jne 0x100b139f
lea ecx, [esi + 0x64]
call fcn.1000e090
cmp dword [eax], 0
je 0x100b139f
push esi
call fcn.100a2480
lea ecx, [edi + 8]
test eax, eax
je 0x100b0f66
cmp dword [eax + 0x10], 1
mov eax, dword [edi + 8]
mov eax, dword [eax + 0x28]
jne 0x100b0eb1
call eax
movss xmm0, dword [eax*4 + 0x1017b928]
lea ecx, [edi + 8]
movss xmm1, dword [0x10145040]
subss xmm1, xmm0
lea eax, [eax*4 + 0x1017b928]
mov eax, dword [0x1017c300]
mulss xmm1, dword [eax + 0x14]
mov eax, dword [edi + 8]
mulss xmm1, dword [0x10145180]
mov eax, dword [eax + 0x28]
addss xmm1, xmm0
movss dword [ebp - 0x9b0], xmm1
call eax
movss xmm0, dword [ebp - 0x9b0]
lea ecx, [edi + 8]
movss dword [eax*4 + 0x1017b928], xmm0
mov eax, dword [edi + 8]
mov eax, dword [eax + 0x28]
call eax
movss xmm1, dword [0x10145040]
lea ecx, [eax*4 + 0x1017b820]
mov eax, dword [0x1017c300]
movss xmm0, dword [eax + 0x14]
mulss xmm0, dword [0x10145180]
mov eax, dword [edi + 8]
subss xmm1, xmm0
mov eax, dword [eax + 0x28]
mulss xmm1, dword [ecx]
lea ecx, [edi + 8]
movss dword [ebp - 0x9b0], xmm1
call eax
movss xmm0, dword [ebp - 0x9b0]
movss dword [eax*4 + 0x1017b820], xmm0
jmp 0x100b1013
call eax
movss xmm1, dword [0x10145040]
lea ecx, [eax*4 + 0x1017b928]
mov eax, dword [0x1017c300]
movss xmm0, dword [eax + 0x14]
mulss xmm0, dword [0x10145180]
mov eax, dword [edi + 8]
subss xmm1, xmm0
mov eax, dword [eax + 0x28]
mulss xmm1, dword [ecx]
lea ecx, [edi + 8]
movss dword [ebp - 0x9b0], xmm1
call eax
movss xmm0, dword [ebp - 0x9b0]
lea ecx, [edi + 8]
movss dword [eax*4 + 0x1017b928], xmm0
mov eax, dword [edi + 8]
mov eax, dword [eax + 0x28]
call eax
movss xmm0, dword [eax*4 + 0x1017b820]
lea ecx, [edi + 8]
movss xmm1, dword [0x10145040]
subss xmm1, xmm0
lea eax, [eax*4 + 0x1017b820]
mov eax, dword [0x1017c300]
mulss xmm1, dword [eax + 0x14]
mov eax, dword [edi + 8]
mulss xmm1, dword [0x10145180]
mov eax, dword [eax + 0x28]
addss xmm1, xmm0
movss dword [ebp - 0x9b0], xmm1
call eax
movss xmm0, dword [ebp - 0x9b0]
movss dword [eax*4 + 0x1017b820], xmm0
jmp 0x100b1013
mov eax, dword [edi + 8]
mov eax, dword [eax + 0x28]
call eax
movss xmm1, dword [0x10145040]
lea ecx, [eax*4 + 0x1017b820]
mov eax, dword [0x1017c300]
movss xmm0, dword [eax + 0x14]
mulss xmm0, dword [0x10145180]
mov eax, dword [edi + 8]
subss xmm1, xmm0
mov eax, dword [eax + 0x28]
mulss xmm1, dword [ecx]
lea ecx, [edi + 8]
movss dword [ebp - 0x9b0], xmm1
call eax
movss xmm0, dword [ebp - 0x9b0]
lea ecx, [edi + 8]
movss dword [eax*4 + 0x1017b820], xmm0
mov eax, dword [edi + 8]
mov eax, dword [eax + 0x28]
call eax
movss xmm1, dword [0x10145040]
lea ecx, [eax*4 + 0x1017b928]
mov eax, dword [0x1017c300]
movss xmm0, dword [eax + 0x14]
mulss xmm0, dword [0x10145180]
mov eax, dword [edi + 8]
subss xmm1, xmm0
mov eax, dword [eax + 0x28]
mulss xmm1, dword [ecx]
lea ecx, [edi + 8]
movss dword [ebp - 0x9b0], xmm1
call eax
movss xmm0, dword [ebp - 0x9b0]
movss dword [eax*4 + 0x1017b928], xmm0
mov dword [ebp - 0xab8], 0x3f800000
lea ecx, [edi + 8]
mov dword [ebp - 0xab4], 0
mov eax, dword [edi + 8]
mov eax, dword [eax + 0x28]
call eax
lea ecx, [ebp - 0xab8]
push ecx
lea edx, [ebp - 0xab4]
lea ecx, [eax*4 + 0x1017b928]
call fcn.1000e800
add esp, 4
lea ecx, [edi + 8]
movss xmm0, dword [eax]
mov eax, dword [edi + 8]
movss dword [ebp - 0x9b0], xmm0
mov eax, dword [eax + 0x28]
call eax
movss xmm0, dword [ebp - 0x9b0]
lea ecx, [edi + 8]
mov dword [ebp - 0xab0], 0x3f800000
mov dword [ebp - 0xaac], 0
movss dword [eax*4 + 0x1017b928], xmm0
mov eax, dword [edi + 8]
mov eax, dword [eax + 0x28]
call eax
lea ecx, [ebp - 0xab0]
push ecx
lea edx, [ebp - 0xaac]
lea ecx, [eax*4 + 0x1017b820]
call fcn.1000e800
add esp, 4
lea ecx, [edi + 8]
movss xmm0, dword [eax]
mov eax, dword [edi + 8]
movss dword [ebp - 0x9b0], xmm0
mov eax, dword [eax + 0x28]
call eax
movss xmm0, dword [ebp - 0x9b0]
lea ecx, [edi + 8]
movss dword [eax*4 + 0x1017b820], xmm0
mov eax, dword [edi + 8]
mov eax, dword [eax + 0x28]
call eax
movd xmm0, dword [ebp - 0x9b8]
cvtdq2ps xmm0, xmm0
push ecx
mulss xmm0, dword [eax*4 + 0x1017b928]
movss dword [ebp - 0x9b0], xmm0
fld dword [ebp - 0x9b0]
fstp dword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
fstp dword [ebp - 0x9d0]
cvttss2si eax, dword [ebp - 0x9d0]
add esp, 4
test eax, eax
jle 0x100b1182
push str.esp_flags
lea ecx, [ebp - 0x444]
call fcn.1000e1e0
mov byte [ebp - 4], 0x39
mov ecx, 0x10180078
mov eax, dword [ebp - 0x9c0]
or eax, 0x20
mov dword [ebp - 0x9c0], eax
mov dword [ebp - 0x9b4], eax
lea eax, [ebp - 0x444]
push eax
call fcn.1000de40
lea ecx, [ebp - 0xaa8]
mov dword [ebp - 0xaa8], 6
push ecx
mov ecx, eax
call fcn.1000dcc0
mov byte [ebp - 0x9a9], 1
cmp byte [eax], 0
jne 0x100b1189
mov byte [ebp - 0x9a9], 0
mov dword [ebp - 4], 0x10
mov eax, dword [ebp - 0x9c0]
test al, 0x20
je 0x100b11ae
and eax, 0xffffffdf
lea ecx, [ebp - 0x444]
mov dword [ebp - 0x9c0], eax
call fcn.1000e190
cmp byte [ebp - 0x9a9], 0
je 0x100b1232
push 0x10144d54
lea ecx, [ebp - 0x42c]
call fcn.1000e1e0
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x788]
cvttss2si eax, dword [ebp - 0x9d0]
mov word [ebp - 0xa04], 0xff00
mov byte [ebp - 0xa02], 0
mov byte [ebp - 0xa01], al
lea eax, [ebp - 0xa04]
push eax
lea eax, [ebp - 0x42c]
push eax
call fcn.100b7030
lea eax, [ebp - 0x788]
mov byte [ebp - 4], 0x3b
push eax
lea ecx, [ebp - 0x9fc]
call fcn.100b6de0
lea ecx, [ebp - 0x788]
call fcn.1000e190
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 0x10
call fcn.1000e190
mov eax, dword [edi + 8]
lea ecx, [edi + 8]
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [ebp - 0x9b8]
push ecx
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [eax*4 + 0x1017b820]
movss dword [ebp - 0x9b0], xmm0
fld dword [ebp - 0x9b0]
fstp dword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
fstp dword [ebp - 0x9c8]
cvttss2si eax, dword [ebp - 0x9c8]
add esp, 4
test eax, eax
jle 0x100b12ef
movss xmm0, dword [esi + 0x54]
ucomiss xmm0, dword [0x101452dc]
lahf
test ah, 0x44
jnp 0x100b12ef
push str.esp_flags
lea ecx, [ebp - 0x414]
call fcn.1000e1e0
mov byte [ebp - 4], 0x3c
mov ecx, 0x10180078
mov eax, dword [ebp - 0x9c0]
or eax, 0x40
mov dword [ebp - 0x9c0], eax
mov dword [ebp - 0x9b4], eax
lea eax, [ebp - 0x414]
push eax
call fcn.1000de40
lea ecx, [ebp - 0xaa4]
mov dword [ebp - 0xaa4], 7
push ecx
mov ecx, eax
call fcn.1000dcc0
mov byte [ebp - 0x9a9], 1
cmp byte [eax], 0
jne 0x100b12f6
mov byte [ebp - 0x9a9], 0
mov dword [ebp - 4], 0x10
mov eax, dword [ebp - 0x9c0]
test al, 0x40
je 0x100b131b
and eax, 0xffffffbf
lea ecx, [ebp - 0x414]
mov dword [ebp - 0x9c0], eax
call fcn.1000e190
cmp byte [ebp - 0x9a9], 0
je 0x100b139f
push str.lby_bt
lea ecx, [ebp - 0x3fc]
call fcn.1000e1e0
cvttss2si eax, dword [ebp - 0x9c8]
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x7a4]
mov word [ebp - 0x9d0], 0xffb4
mov byte [ebp - 0x9ce], 0
mov byte [ebp - 0x9cd], al
lea eax, [ebp - 0x9d0]
push eax
lea eax, [ebp - 0x3fc]
push eax
call fcn.100b7030
lea eax, [ebp - 0x7a4]
mov byte [ebp - 4], 0x3e
push eax
lea ecx, [ebp - 0x9fc]
call fcn.100b6de0
lea ecx, [ebp - 0x7a4]
call fcn.1000e190
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x10
call fcn.1000e190
mov ecx, dword [ebp - 0x9f8]
mov eax, 0x92492493
mov edi, dword [ebp - 0x9fc]
sub ecx, edi
imul ecx
mov dword [ebp - 0x9bc], 0
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x9b0], eax
je 0x100b14e7
mov esi, dword [ebp - 0x9dc]
nop dword [eax]
mov eax, dword [0x1017fedc]
mov ecx, edi
dec eax
imul eax, dword [ebp - 0x9bc]
cmp dword [edi + 0x14], 0xf
mov dword [ebp - 0x9c8], eax
jbe 0x100b13fd
mov ecx, dword [edi]
mov edx, dword [edi + 0x10]
push 2
push 0x10144d54
call fcn.10011560
add esp, 8
test al, al
je 0x100b145e
mov eax, dword [esi + 8]
lea ecx, [esi + 8]
mov eax, dword [eax + 0x28]
call eax
movss xmm0, dword [0x10145040]
subss xmm0, dword [eax*4 + 0x1017b928]
mulss xmm0, dword [0x1014518c]
mov eax, dword [ebp - 0x9c8]
add eax, dword [ebp - 0x9cc]
push 0
cvttss2si ecx, xmm0
push edi
push dword [edi + 0x18]
push eax
mov eax, dword [ebp - 0x9e0]
add eax, ecx
mov ecx, dword [ebp - 0x9d4]
jmp 0x100b14bb
cmp dword [edi + 0x14], 0xf
mov ecx, edi
jbe 0x100b1468
mov ecx, dword [edi]
mov edx, dword [edi + 0x10]
push 6
push str.lby_bt
call fcn.10011560
add esp, 8
test al, al
je 0x100b149c
mov eax, dword [esi + 8]
lea ecx, [esi + 8]
mov eax, dword [eax + 0x28]
call eax
movss xmm0, dword [0x10145040]
subss xmm0, dword [eax*4 + 0x1017b820]
jmp 0x100b142f
mov eax, dword [ebp - 0x9c8]
add eax, dword [ebp - 0x9cc]
mov ecx, dword [ebp - 0x9e0]
push 0
push edi
push dword [edi + 0x18]
push eax
mov eax, dword [ebp - 0x9d4]
add ecx, 3
add eax, ecx
mov ecx, 0x1017fea4
push eax
call fcn.100a06f0
mov eax, dword [ebp - 0x9bc]
add edi, 0x1c
inc eax
mov dword [ebp - 0x9bc], eax
cmp eax, dword [ebp - 0x9b0]
jb 0x100b13e0
mov dword [ebp - 4], 0xffffffff
mov edi, dword [ebp - 0x9fc]
test edi, edi
je 0x100b157c
mov edx, dword [ebp - 0x9f8]
push ecx
mov ecx, edi
call fcn.1007eac0
mov ecx, dword [ebp - 0x9f4]
mov eax, 0x92492493
sub ecx, edi
add esp, 4
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax*8]
sub ecx, eax
mov eax, edi
shl ecx, 2
cmp ecx, 0x1000
jb 0x100b1554
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b1554
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edi
call fcn.1011035b
add esp, 8
mov dword [ebp - 0x9fc], 0
mov dword [ebp - 0x9f8], 0
mov dword [ebp - 0x9f4], 0
mov ax, word [0x1014076c]
xorps xmm0, xmm0
movups xmmword [ebp - 0x1bc], xmm0
mov word [ebp - 0x1b4], ax
movq xmm0, qword [str.esp_lby_bar]
mov al, byte [0x1014076e]
mov dword [ebp - 0x9bc], 0
mov dword [ebp - 0x1ac], 0xb
mov dword [ebp - 0x1a8], 0xf
movq qword [ebp - 0x1bc], xmm0
mov byte [ebp - 0x1b2], al
mov byte [ebp - 0x1b1], 0
mov dword [ebp - 4], 0x3f
mov ecx, 0x1017fff8
mov eax, dword [ebp - 0x9c0]
or eax, 0x80
mov dword [ebp - 0x9c0], eax
mov dword [ebp - 0x9b4], eax
lea eax, [ebp - 0x1bc]
push eax
call fcn.1000dea0
cmp byte [eax], 0
je 0x100b1617
cmp byte [ebp - 0x9aa], 0
mov byte [ebp - 0x9a9], 1
je 0x100b161e
mov byte [ebp - 0x9a9], 0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x9c0]
mov ecx, dword [ebp - 0x1a8]
and eax, 0xffffff7f
mov dword [ebp - 0x9b4], eax
cmp ecx, 0xf
jbe 0x100b1672
mov edx, dword [ebp - 0x1bc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b1668
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b1668
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
add esp, 8
cmp byte [ebp - 0x9a9], 0
mov edi, dword [ebp - 0x9dc]
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1a8], 0xf
mov byte [ebp - 0x1bc], 0
je 0x100b18c2
mov eax, dword [edi + 8]
lea ecx, [edi + 8]
mov eax, dword [eax + 0x28]
call eax
dec eax
imul esi, eax, 0x514
add esi, 0x1016290c
je 0x100b18c2
cmp dword [esi + 0x74], 0
je 0x100b18c2
cmp byte [esi + 0x4f4], 0
je 0x100b18c2
lea ecx, [esi + 0x64]
call fcn.1000e090
mov ecx, dword [eax]
test ecx, ecx
je 0x100b18c2
movss xmm0, dword [esi + 0x54]
ucomiss xmm0, dword [0x101452dc]
lahf
test ah, 0x44
jnp 0x100b18c2
mov dword [ebp - 0xaa0], 0x3f800000
lea eax, [ebp - 0xaa0]
mov dword [ebp - 0xaf4], 0
lea edx, [ebp - 0xaf4]
movss xmm0, dword [esi + 0x54]
subss xmm0, dword [ecx + 0x44]
push eax
lea ecx, [ebp - 0xb00]
mulss xmm0, dword [0x10145034]
movss dword [ebp - 0xb00], xmm0
call fcn.1000e800
mov ecx, dword [ebp - 0x9e0]
mov edx, dword [ebp - 0x9e8]
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
mulss xmm1, dword [eax]
mov eax, esp
push 4
push ecx
mov ecx, dword [ebp - 0x9d4]
mov word [eax], 0x6e6e
mov byte [eax + 2], 0x6e
mov byte [eax + 3], dl
mov eax, dword [ebp - 0x9cc]
mov edx, dword [ebp - 0x9e4]
add eax, 2
add edx, eax
movss dword [ebp - 0x9b0], xmm1
call fcn.100a02e0
add esp, 0xc
lea ecx, [ebp - 0x3e4]
push 0x10140780
call fcn.1000e1e0
lea eax, [ebp - 0x3e4]
mov dword [ebp - 4], 0x40
push eax
mov ecx, 0x10180058
call fcn.1000de60
movss xmm1, dword [0x10145264]
movss xmm0, dword [eax + 8]
mulss xmm0, xmm1
cvttss2si edx, xmm0
movss xmm0, dword [eax + 4]
mulss xmm0, xmm1
mov byte [ebp - 0x9c6], dl
cvttss2si ecx, xmm0
movss xmm0, dword [eax]
mulss xmm0, xmm1
mov byte [ebp - 0x9c7], cl
lea ecx, [ebp - 0x3e4]
mov dword [ebp - 4], 0xffffffff
cvttss2si eax, xmm0
mov byte [ebp - 0x9c8], al
call fcn.1000e190
cmp byte [ebp - 0x9aa], 0
je 0x100b182b
mov dword [ebp - 0x9dc], 0xff6e6e6e
mov eax, dword [ebp - 0x9dc]
mov dword [ebp - 0x9c8], eax
mov eax, dword [ebp - 0x9b8]
cvttss2si esi, dword [ebp - 0x9b0]
mov ecx, dword [ebp - 0x9e4]
mov edx, dword [ebp - 0x9cc]
add ecx, 2
mov byte [ebp - 0x9c5], al
add edx, ecx
mov eax, dword [ebp - 0x9d8]
mov ecx, dword [ebp - 0x9d4]
mov word [ebp - 0x9bc], 0xa0a
mov byte [ebp - 0x9ba], 0xa
movss xmm0, dword [eax]
mulss xmm0, dword [0x10145250]
push dword [ebp - 0x9c8]
cvttss2si eax, xmm0
push 4
push esi
mov byte [ebp - 0x9b9], al
call fcn.100a02e0
push dword [ebp - 0x9bc]
mov ecx, dword [ebp - 0x9cc]
mov edx, dword [ebp - 0x9e4]
add ecx, 2
push 4
add edx, ecx
mov ecx, dword [ebp - 0x9d4]
push esi
call fcn.100a02a0
add esp, 0x18
mov dword [ebp - 0x9bc], 5
mov ecx, dword [0x1017c2a8]
mov eax, dword [0x1017d58c]
push ecx
mov edx, dword [ecx]
mov eax, dword [edi + eax]
mov esi, dword [edx + 0x10]
mov edx, esp
mov dword [edx], eax
call esi
mov esi, eax
mov dword [ebp - 0x9b0], esi
test esi, esi
je 0x100b24c2
cmp byte [ebp - 0x9aa], 0
jne 0x100b24c2
mov ecx, dword [esi]
mov edx, dword [ecx + 0x6f8]
mov ecx, esi
call edx
test eax, eax
je 0x100b24c2
mov ecx, dword [eax + 0x14]
mov eax, dword [0x1017d5a8]
mov dword [ebp - 0xa60], ecx
mov eax, dword [esi + eax]
mov dword [ebp - 0x9c4], eax
mov eax, dword [0x1017c43c]
mov ecx, dword [edi + eax]
mov dword [ebp - 0xa18], ecx
movss xmm0, dword [ecx + 0x58]
ucomiss xmm0, dword [0x10144e98]
lahf
test ah, 0x44
jnp 0x100b1988
mov esi, dword [ecx + 0x50]
mov ecx, dword [0x1017c454]
mov eax, dword [0x1017c3fc]
mov dword [ebp - 0x9f0], eax
cmp dword [edi + ecx], 0
jne 0x100b1973
mov eax, dword [0x1017c3d8]
mov ecx, edi
call eax
mov ecx, dword [0x1017c454]
mov eax, dword [ebp - 0x9f0]
mov ecx, dword [edi + ecx]
mov edx, esi
call eax
mov byte [ebp - 0x9aa], 1
cmp eax, 0x3c7
je 0x100b198f
mov byte [ebp - 0x9aa], 0
mov edi, dword [ebp - 0xa60]
cmp edi, 0xffffffff
je 0x100b19e2
push str.esp_ammo
lea ecx, [ebp - 0x39c]
call fcn.1000e1e0
mov dword [ebp - 4], 0x41
lea eax, [ebp - 0x39c]
mov esi, dword [ebp - 0x9b4]
mov ecx, 0x1017fff8
or esi, 0x100
push eax
mov dword [ebp - 0x9b4], esi
call fcn.1000dea0
cmp byte [eax], 0
je 0x100b19e8
mov byte [ebp - 0x9a9], 1
jmp 0x100b19ef
mov esi, dword [ebp - 0x9b4]
mov byte [ebp - 0x9a9], 0
mov dword [ebp - 4], 0xffffffff
test esi, 0x100
je 0x100b1a61
mov ecx, dword [ebp - 0x388]
and esi, 0xfffffeff
mov dword [ebp - 0x9b4], esi
cmp ecx, 0xf
jbe 0x100b1a46
mov edx, dword [ebp - 0x39c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b1a3c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b1a3c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
add esp, 8
mov dword [ebp - 0x38c], 0
mov dword [ebp - 0x388], 0xf
mov byte [ebp - 0x39c], 0
cmp byte [ebp - 0x9a9], 0
je 0x100b1d56
cmp byte [ebp - 0x9aa], 0
je 0x100b1a84
mov eax, dword [ebp - 0xa18]
movss xmm1, dword [eax + 0x64]
jmp 0x100b1a9a
movd xmm1, dword [ebp - 0x9c4]
movd xmm0, edi
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm0, xmm0
divss xmm1, xmm0
mov edi, dword [ebp - 0x9e0]
push ecx
movd xmm0, edi
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
movss dword [ebp - 0x9f0], xmm0
fld dword [ebp - 0x9f0]
fstp dword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
mov ecx, dword [ebp - 0x9e8]
mov eax, esp
mov esi, dword [ebp - 0x9cc]
add esi, 2
push 4
mov word [eax], 0x6e6e
mov byte [eax + 2], 0x6e
mov byte [eax + 3], cl
mov eax, dword [ebp - 0x9bc]
add eax, dword [ebp - 0x9e4]
add esi, eax
push edi
mov edi, dword [ebp - 0x9d4]
mov edx, esi
mov ecx, edi
mov dword [ebp - 0x9f0], esi
fstp dword [ebp - 0xa18]
call fcn.100a02e0
mov eax, dword [0x10140264]
xorps xmm0, xmm0
movups xmmword [ebp - 0x324], xmm0
add esp, 0xc
mov dword [ebp - 0x314], 0xc
movq xmm0, qword [0x1014025c]
mov dword [ebp - 0x310], 0xf
movq qword [ebp - 0x324], xmm0
mov dword [ebp - 0x31c], eax
mov byte [ebp - 0x318], 0
lea eax, [ebp - 0x324]
mov dword [ebp - 4], 0x42
push eax
mov ecx, 0x10180058
call fcn.1000de60
movss xmm1, dword [0x10145264]
movss xmm0, dword [eax + 8]
mulss xmm0, xmm1
cvttss2si edx, xmm0
movss xmm0, dword [eax + 4]
mulss xmm0, xmm1
cvttss2si ecx, xmm0
movss xmm0, dword [eax]
mulss xmm0, xmm1
mov byte [ebp - 0x9bf], cl
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x310]
mov byte [ebp - 0x9be], dl
cvttss2si eax, xmm0
mov byte [ebp - 0x9c0], al
cmp ecx, 0xf
jbe 0x100b1be9
mov edx, dword [ebp - 0x324]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b1bdf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b1bdf
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
add esp, 8
mov eax, dword [ebp - 0x9b8]
mov ecx, dword [0x1017c2b0]
mov byte [ebp - 0x9bd], al
mov eax, dword [ebp - 0x9d8]
push dword [ebp - 0x9c0]
mov dword [ebp - 0x314], 0
mov dword [ebp - 0x310], 0xf
movss xmm0, dword [eax]
mulss xmm0, dword [0x10145250]
mov byte [ebp - 0x324], 0
cvttss2si eax, xmm0
mov dword [ebp - 0x9d8], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
cvttss2si edx, dword [ebp - 0xa18]
mov ecx, dword [0x1017c2b0]
add esi, 4
push esi
mov eax, dword [ecx]
mov eax, dword [eax + 0x40]
add edx, edi
push edx
push dword [ebp - 0x9f0]
push edi
call eax
mov ecx, dword [0x1017c2b0]
mov eax, dword [ecx]
mov edx, dword [eax + 0x38]
mov eax, dword [ebp - 0x9d8]
movzx eax, al
shl eax, 0x18
or eax, 0xa0a0a
push eax
call edx
mov ecx, dword [0x1017c2b0]
push esi
cvttss2si esi, dword [ebp - 0xa18]
mov eax, dword [ecx]
mov eax, dword [eax + 0x48]
add esi, edi
push esi
push dword [ebp - 0x9f0]
push edi
call eax
mov eax, 0x66666667
sub esp, 8
imul dword [ebp - 0xa60]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0xa64], xmm0
fld qword [ebp - 0xa64]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_round
mov ecx, dword [ebp - 0x9c4]
add esp, 8
fstp qword [ebp - 0xa64]
cvttsd2si eax, qword [ebp - 0xa64]
cmp ecx, eax
jg 0x100b1d4f
cmp byte [ebp - 0x9aa], 0
jne 0x100b1d4f
mov edx, ecx
lea ecx, [ebp - 0x850]
call fcn.1001ed80
push 2
push eax
push ecx
mov ecx, dword [ebp - 0x9e8]
mov eax, esp
mov dword [ebp - 4], 0x44
mov word [eax], 0xffff
mov byte [eax + 2], 0xff
mov byte [eax + 3], cl
mov ecx, 0x1017fea4
mov eax, dword [ebp - 0x9bc]
add eax, dword [ebp - 0x9e4]
add eax, dword [ebp - 0x9cc]
push eax
push esi
call fcn.100a06f0
lea ecx, [ebp - 0x850]
call fcn.1000e190
add dword [ebp - 0x9bc], 6
mov eax, dword [0x10140228]
xorps xmm0, xmm0
movups xmmword [ebp - 0x1a4], xmm0
mov dword [ebp - 0x19c], eax
movq xmm0, qword [0x10140220]
mov ax, word [0x1014022c]
mov dword [ebp - 0x194], 0xe
mov dword [ebp - 0x190], 0xf
movq qword [ebp - 0x1a4], xmm0
mov word [ebp - 0x198], ax
mov byte [ebp - 0x196], 0
lea eax, [ebp - 0x1a4]
mov dword [ebp - 4], 0x45
push eax
mov ecx, 0x10180058
call fcn.1000de60
movss xmm1, dword [0x10145264]
movss xmm0, dword [eax + 0xc]
mulss xmm0, xmm1
cvttss2si ecx, xmm0
movss xmm0, dword [eax + 8]
mulss xmm0, xmm1
mov dword [ebp - 0x9c4], ecx
cvttss2si edx, xmm0
movss xmm0, dword [eax + 4]
mulss xmm0, xmm1
mov byte [ebp - 0x9d6], dl
cvttss2si ecx, xmm0
movss xmm0, dword [eax]
mulss xmm0, xmm1
mov byte [ebp - 0x9d7], cl
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x190]
cvttss2si eax, xmm0
mov byte [ebp - 0x9d8], al
mov eax, dword [ebp - 0x9c4]
mov byte [ebp - 0x9d5], al
cmp ecx, 0xf
jbe 0x100b1e5d
mov edx, dword [ebp - 0x1a4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b1e53
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b1e53
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
add esp, 8
mov ax, word [0x10140214]
xorps xmm0, xmm0
movups xmmword [ebp - 0x33c], xmm0
mov dword [ebp - 0x194], 0
movq xmm0, qword [str.esp_weapon]
mov dword [ebp - 0x190], 0xf
mov byte [ebp - 0x1a4], 0
mov dword [ebp - 0x32c], 0xa
mov dword [ebp - 0x328], 0xf
movq qword [ebp - 0x33c], xmm0
mov word [ebp - 0x334], ax
mov byte [ebp - 0x332], 0
lea eax, [ebp - 0x33c]
mov dword [ebp - 4], 0x46
push eax
mov ecx, 0x10180078
call fcn.1000de40
lea ecx, [ebp - 0xafc]
mov dword [ebp - 0xafc], 0
push ecx
mov ecx, eax
call fcn.1000dcc0
mov al, byte [eax]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x328]
mov byte [ebp - 0x9a9], al
cmp ecx, 0xf
jbe 0x100b1f3b
mov edx, dword [ebp - 0x33c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b1f2b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b1f2b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
mov al, byte [ebp - 0x9a9]
add esp, 8
mov edi, dword [ebp - 0x9d8]
mov dword [ebp - 0x32c], 0
mov dword [ebp - 0x328], 0xf
mov byte [ebp - 0x33c], 0
test al, al
je 0x100b2338
mov eax, dword [0x1017c418]
mov ecx, dword [ebp - 0x9b0]
call eax
mov ecx, eax
test ecx, ecx
jne 0x100b1fc1
mov eax, dword [str.error]
xorps xmm0, xmm0
or dword [ebp - 0x9b4], 0x400
movups xmmword [ebp - 0x12c], xmm0
mov dword [ebp - 0x12c], eax
mov al, byte [0x1013eb80]
mov dword [ebp - 0x11c], 5
mov dword [ebp - 0x118], 0xf
mov byte [ebp - 0x128], al
mov byte [ebp - 0x127], 0
jmp 0x100b228d
mov eax, dword [0x1017c41c]
call eax
mov ecx, eax
test ecx, ecx
je 0x100b1f77
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
mov ecx, dword [0x1017c2f0]
push eax
mov edx, dword [ecx]
mov edx, dword [edx + 0x30]
call edx
mov edx, eax
mov dword [ebp - 0x14c], 0
mov ecx, edx
mov dword [ebp - 0x148], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x15c], xmm0
lea esi, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100b2010
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x15c]
call fcn.1001dc10
mov dword [ebp - 4], 0x47
xorps xmm0, xmm0
mov ecx, 0xf
mov dword [ebp - 0x134], 0
movups xmmword [ebp - 0x144], xmm0
mov dword [ebp - 0x130], ecx
mov byte [ebp - 0x144], 0
mov byte [ebp - 4], 0x48
mov edx, dword [ebp - 0x14c]
test edx, edx
jne 0x100b209a
mov eax, dword [ebp - 0x9b4]
or eax, 0x800
mov dword [ebp - 0x11c], edx
movups xmmword [ebp - 0x12c], xmm0
mov dword [ebp - 0x118], ecx
mov byte [ebp - 0x12c], dl
mov dword [ebp - 0x9b4], eax
mov byte [ebp - 4], 0x47
jmp 0x100b2232
cmp dword [ebp - 0x148], 7
lea eax, [ebp - 0x15c]
mov ecx, dword [0x1017c008]
cmova eax, dword [ebp - 0x15c]
push 0
push 0
push 0
push 0
push edx
push eax
push 0
push 0xfde9
call ecx
push ecx
push eax
lea ecx, [ebp - 0x3b4]
mov dword [ebp - 0x9c4], eax
call fcn.1001d540
mov esi, eax
lea eax, [ebp - 0x144]
cmp eax, esi
je 0x100b215f
mov ecx, dword [ebp - 0x130]
cmp ecx, 0xf
jbe 0x100b211c
mov edx, dword [ebp - 0x144]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b2112
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b218b
push ecx
push edx
call fcn.1011035b
add esp, 8
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 0xf
mov byte [ebp - 0x144], 0
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0x144], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x134], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov ecx, dword [ebp - 0x3a0]
cmp ecx, 0xf
jbe 0x100b219b
mov edx, dword [ebp - 0x3b4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b2191
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b2191
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
add esp, 8
cmp dword [ebp - 0x130], 0xf
lea ecx, [ebp - 0x144]
mov edx, dword [0x1017c008]
lea eax, [ebp - 0x15c]
cmova ecx, dword [ebp - 0x144]
cmp dword [ebp - 0x148], 7
push 0
cmova eax, dword [ebp - 0x15c]
push 0
push dword [ebp - 0x9c4]
mov dword [ebp - 0x3a4], 0
push ecx
push dword [ebp - 0x14c]
mov dword [ebp - 0x3a0], 0xf
push eax
push 0
push 0xfde9
mov byte [ebp - 0x3b4], 0
call edx
mov eax, dword [ebp - 0x9b4]
xorps xmm0, xmm0
movups xmmword [ebp - 0x12c], xmm0
or eax, 0x800
movups xmm0, xmmword [ebp - 0x144]
movups xmmword [ebp - 0x12c], xmm0
movq xmm0, qword [ebp - 0x134]
movq qword [ebp - 0x11c], xmm0
or eax, 0x400
mov byte [ebp - 0x144], 0
mov dword [ebp - 0x9b4], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x130], 0xf
mov dword [ebp - 0x134], 0
cmp eax, 7
jbe 0x100b2270
inc eax
push eax
push dword [ebp - 0x15c]
call fcn.1001d890
xor eax, eax
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x148], 7
mov word [ebp - 0x15c], ax
lea eax, [ebp - 0xb10]
mov dword [ebp - 4], 0x49
push eax
lea ecx, [ebp - 0x12c]
call fcn.1003b0e0
lea ecx, [ebp - 0x12c]
mov esi, dword [eax]
lea eax, [ebp - 0xb0c]
push eax
call fcn.1003b0c0
lea ecx, [ebp - 0x12c]
mov edx, dword [eax]
lea eax, [ebp - 0xb28]
push eax
call fcn.1003b0e0
push esi
push edx
mov edx, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
lea ecx, [ebp - 0xb1c]
push dword [eax]
call fcn.1003b430
mov esi, dword [ebp - 0x9d4]
lea eax, [ebp - 0x12c]
add esp, 0xc
mov ecx, 0x1017fea4
push 2
push eax
mov eax, dword [ebp - 0x9bc]
add eax, dword [ebp - 0x9e4]
add eax, dword [ebp - 0x9cc]
push edi
push eax
mov eax, dword [ebp - 0x9e0]
cdq
sub eax, edx
sar eax, 1
add eax, esi
push eax
call fcn.100a06f0
lea ecx, [ebp - 0x12c]
call fcn.1000e190
mov dword [ebp - 0x9c4], 0xb
jmp 0x100b2348
mov esi, dword [ebp - 0x9d4]
mov dword [ebp - 0x9c4], 2
mov ax, word [0x10140214]
xorps xmm0, xmm0
movups xmmword [ebp - 0x354], xmm0
mov dword [ebp - 0x344], 0xa
movq xmm0, qword [str.esp_weapon]
mov dword [ebp - 0x340], 0xf
movq qword [ebp - 0x354], xmm0
mov word [ebp - 0x34c], ax
mov byte [ebp - 0x34a], 0
lea eax, [ebp - 0x354]
mov dword [ebp - 4], 0x4a
push eax
mov ecx, 0x10180078
call fcn.1000de40
lea ecx, [ebp - 0xa6c]
mov dword [ebp - 0xa6c], 1
push ecx
mov ecx, eax
call fcn.1000dcc0
mov al, byte [eax]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x340]
mov byte [ebp - 0x9a9], al
cmp ecx, 0xf
jbe 0x100b240b
mov edx, dword [ebp - 0x354]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b23fb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b23fb
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
mov al, byte [ebp - 0x9a9]
add esp, 8
mov dword [ebp - 0x344], 0
mov dword [ebp - 0x340], 0xf
mov byte [ebp - 0x354], 0
test al, al
je 0x100b24c2
mov ecx, dword [ebp - 0xa00]
mov eax, dword [0x1017d5a4]
add eax, dword [ebp - 0x9b0]
push eax
lea ecx, [ecx + 0x22ec]
call fcn.100b6ec0
push eax
lea ecx, [ebp - 0x3cc]
call fcn.100b6f30
add esp, 4
mov ecx, dword [ebp - 0x9c4]
lea eax, [ebp - 0x3cc]
add ecx, dword [ebp - 0x9e4]
add ecx, dword [ebp - 0x9cc]
add ecx, dword [ebp - 0x9bc]
push 2
push eax
mov eax, dword [ebp - 0x9e0]
cdq
sub eax, edx
mov dword [ebp - 4], 0x4b
push edi
sar eax, 1
push ecx
add eax, esi
mov ecx, 0x1017febc
push eax
call fcn.100a06f0
lea ecx, [ebp - 0x3cc]
call fcn.1000e190
jmp 0x100b24c2
push dword [ebp - 0x9b8]
push edi
call fcn.100ad2f0
jmp 0x100b24c2
mov eax, dword [edi + 8]
lea ecx, [edi + 8]
mov eax, dword [eax + 0x24]
call eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1010fe2d
mov esp, ebp
pop ebp
ret 4