Function at 0x1001e350
Capabilities:
Access peb ldr_data

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100b946d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x138
mov ecx, dword [0x101005bc]
push esi
push edi
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [0x101005b8]
push eax
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
call edx
mov ecx, dword [ebx + 0xc]
xor edi, edi
mov esi, dword [ebx + 8]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x20], 0
movq xmm0, qword [ecx + 0xc]
mov ecx, dword [ecx + 0x14]
movq qword [esi], xmm0
mov dword [esi + 8], ecx
xor ecx, ecx
mov dword [0x100fead4], 0
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 4], ecx
cmp byte [0x100feaa2], cl
je 0x1001e3f9
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], ecx
push eax
push ecx
lea ecx, [ebp - 0x20]
call fcn.10018960
mov ecx, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ecx
cmp byte [0x100feaa3], 0
je 0x1001e493
mov dword [ebp - 0x14], 4
cmp edi, ecx
je 0x1001e41f
mov dword [edi], 4
add edi, 4
mov dword [ebp - 0x1c], edi
jmp 0x1001e435
lea eax, [ebp - 0x14]
push eax
push edi
lea ecx, [ebp - 0x20]
call fcn.10018960
mov ecx, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x14], 5
cmp edi, ecx
je 0x1001e44e
mov dword [edi], 5
add edi, 4
mov dword [ebp - 0x1c], edi
jmp 0x1001e464
lea eax, [ebp - 0x14]
push eax
push edi
lea ecx, [ebp - 0x20]
call fcn.10018960
mov ecx, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x14], 6
cmp edi, ecx
je 0x1001e47d
mov dword [edi], 6
add edi, 4
mov dword [ebp - 0x1c], edi
jmp 0x1001e493
lea eax, [ebp - 0x14]
push eax
push edi
lea ecx, [ebp - 0x20]
call fcn.10018960
mov ecx, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ecx
cmp byte [0x100feaa4], 0
je 0x1001e4cb
mov dword [ebp - 0x14], 3
cmp edi, ecx
je 0x1001e4b5
mov dword [edi], 3
add edi, 4
mov dword [ebp - 0x1c], edi
jmp 0x1001e4cb
lea eax, [ebp - 0x14]
push eax
push edi
lea ecx, [ebp - 0x20]
call fcn.10018960
mov ecx, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ecx
cmp byte [0x100feaa5], 0
je 0x1001e5f2
mov dword [ebp - 0x14], 0xe
cmp edi, ecx
je 0x1001e4f1
mov dword [edi], 0xe
add edi, 4
mov dword [ebp - 0x1c], edi
jmp 0x1001e507
lea eax, [ebp - 0x14]
push eax
push edi
lea ecx, [ebp - 0x20]
call fcn.10018960
mov ecx, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x14], 0x12
cmp edi, ecx
je 0x1001e520
mov dword [edi], 0x12
add edi, 4
mov dword [ebp - 0x1c], edi
jmp 0x1001e536
lea eax, [ebp - 0x14]
push eax
push edi
lea ecx, [ebp - 0x20]
call fcn.10018960
mov ecx, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x14], 0x11
cmp edi, ecx
je 0x1001e54f
mov dword [edi], 0x11
add edi, 4
mov dword [ebp - 0x1c], edi
jmp 0x1001e565
lea eax, [ebp - 0x14]
push eax
push edi
lea ecx, [ebp - 0x20]
call fcn.10018960
mov ecx, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x14], 0xd
cmp edi, ecx
je 0x1001e57e
mov dword [edi], 0xd
add edi, 4
mov dword [ebp - 0x1c], edi
jmp 0x1001e594
lea eax, [ebp - 0x14]
push eax
push edi
lea ecx, [ebp - 0x20]
call fcn.10018960
mov ecx, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x14], 0x10
cmp edi, ecx
je 0x1001e5ad
mov dword [edi], 0x10
add edi, 4
mov dword [ebp - 0x1c], edi
jmp 0x1001e5c3
lea eax, [ebp - 0x14]
push eax
push edi
lea ecx, [ebp - 0x20]
call fcn.10018960
mov ecx, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x14], 0xf
cmp edi, ecx
je 0x1001e5dc
mov dword [edi], 0xf
add edi, 4
mov dword [ebp - 0x1c], edi
jmp 0x1001e5f2
lea eax, [ebp - 0x14]
push eax
push edi
lea ecx, [ebp - 0x20]
call fcn.10018960
mov ecx, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ecx
cmp byte [0x100feaa6], 0
je 0x1001e719
mov dword [ebp - 0x14], 0xa
cmp edi, ecx
je 0x1001e618
mov dword [edi], 0xa
add edi, 4
mov dword [ebp - 0x1c], edi
jmp 0x1001e62e
lea eax, [ebp - 0x14]
push eax
push edi
lea ecx, [ebp - 0x20]
call fcn.10018960
mov ecx, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x14], 0xc
cmp edi, ecx
je 0x1001e647
mov dword [edi], 0xc
add edi, 4
mov dword [ebp - 0x1c], edi
jmp 0x1001e65d
lea eax, [ebp - 0x14]
push eax
push edi
lea ecx, [ebp - 0x20]
call fcn.10018960
mov ecx, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x14], 8
cmp edi, ecx
je 0x1001e676
mov dword [edi], 8
add edi, 4
mov dword [ebp - 0x1c], edi
jmp 0x1001e68c
lea eax, [ebp - 0x14]
push eax
push edi
lea ecx, [ebp - 0x20]
call fcn.10018960
mov ecx, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x14], 9
cmp edi, ecx
je 0x1001e6a5
mov dword [edi], 9
add edi, 4
mov dword [ebp - 0x1c], edi
jmp 0x1001e6bb
lea eax, [ebp - 0x14]
push eax
push edi
lea ecx, [ebp - 0x20]
call fcn.10018960
mov ecx, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x14], 0xb
cmp edi, ecx
je 0x1001e6d4
mov dword [edi], 0xb
add edi, 4
mov dword [ebp - 0x1c], edi
jmp 0x1001e6ea
lea eax, [ebp - 0x14]
push eax
push edi
lea ecx, [ebp - 0x20]
call fcn.10018960
mov ecx, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x14], 7
cmp edi, ecx
je 0x1001e703
mov dword [edi], 7
add edi, 4
mov dword [ebp - 0x1c], edi
jmp 0x1001e719
lea eax, [ebp - 0x14]
push eax
push edi
lea ecx, [ebp - 0x20]
call fcn.10018960
mov eax, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
mov eax, dword [0x1010061c]
mov edx, 1
mov dword [ebp - 0x14], edx
cmp dword [eax + 0x18], edx
jl 0x1001ec60
nop
mov ecx, dword [0x101005b8]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov dword [ebp - 0x30], eax
test eax, eax
je 0x1001ec48
mov edx, dword [eax + 8]
lea ecx, [eax + 8]
mov edx, dword [edx + 0x24]
call edx
test al, al
jne 0x1001ec48
mov ecx, dword [ebp - 0x30]
mov esi, dword [0x101007fc]
add ecx, 8
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
cmp dword [eax + 0x14], esi
jne 0x1001ec48
mov esi, dword [ebp - 0x30]
mov ecx, esi
call fcn.10019e90
test al, al
je 0x1001ec48
mov eax, dword [ebp - 0x3c]
cmp esi, eax
je 0x1001ec48
cmp byte [0x100feaa7], 0
je 0x1001e7c4
test eax, eax
je 0x1001ec48
mov ecx, esi
call fcn.1001b7f0
mov ecx, dword [ebp - 0x3c]
mov esi, eax
call fcn.1001b7f0
mov ecx, dword [eax]
cmp ecx, dword [esi]
je 0x1001ec48
mov esi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
movss xmm0, dword [0x100feaac]
movss dword [ebp - 0x40], xmm0
mov dword [ebp - 0x48], eax
cmp eax, edi
je 0x1001ec48
nop
push dword [eax]
lea eax, [ebp - 0x54]
mov ecx, esi
push eax
call fcn.1001df70
movq xmm0, qword [0x100fead8]
xorps xmm3, xmm3
mov eax, dword [0x100feae0]
movss xmm1, dword [ebp - 0x54]
movss xmm2, dword [ebp - 0x4c]
movq qword [ebp - 0x60], xmm0
subss xmm1, dword [ebp - 0x60]
movq qword [ebp - 0x78], xmm0
movss xmm0, dword [ebp - 0x50]
subss xmm0, dword [ebp - 0x5c]
mov dword [ebp - 0x58], eax
subss xmm2, dword [ebp - 0x58]
mov dword [ebp - 0x44], eax
movss dword [ebp - 0x28], xmm1
ucomiss xmm0, xmm3
movss dword [ebp - 0x2c], xmm0
movss dword [ebp - 0x34], xmm2
lahf
test ah, 0x44
jp 0x1001e880
ucomiss xmm1, xmm3
lahf
test ah, 0x44
jp 0x1001e880
comiss xmm2, xmm3
movss xmm2, dword [0x100ee254]
movss dword [ebp - 0x38], xmm3
movss xmm3, dword [0x100ee27c]
jbe 0x1001e873
movss xmm0, dword [0x100ee270]
jmp 0x1001e90e
movss xmm0, dword [0x100ee21c]
jmp 0x1001e90e
call fcn.1001d390
mulss xmm0, dword [0x100ee254]
xorps xmm1, xmm1
divss xmm0, dword [0x100ee160]
comiss xmm1, xmm0
movss dword [ebp - 0x38], xmm0
jbe 0x1001e8af
addss xmm0, dword [0x100ee27c]
movss dword [ebp - 0x38], xmm0
movss xmm1, dword [ebp - 0x28]
movss xmm0, dword [ebp - 0x2c]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
call fcn.1001d440
movss xmm2, dword [ebp - 0x34]
movaps xmm1, xmm0
xorps xmm2, xmmword [0x100ee8b0]
movaps xmm0, xmm2
call fcn.1001d390
movss xmm2, dword [0x100ee254]
xorps xmm1, xmm1
mulss xmm0, xmm2
movss xmm3, dword [0x100ee27c]
divss xmm0, dword [0x100ee160]
comiss xmm1, xmm0
movss dword [ebp - 0x2c], xmm0
jbe 0x1001e913
addss xmm0, xmm3
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [0x100feac4]
mulss xmm0, dword [0x100ee134]
mov eax, dword [ebx + 0xc]
movss xmm1, dword [ebp - 0x2c]
movss xmm4, dword [ebp - 0x38]
movss xmm6, dword [0x100ee218]
addss xmm0, dword [eax + 0xc]
subss xmm1, xmm0
movss xmm0, dword [0x100feac8]
mulss xmm0, dword [0x100ee134]
comiss xmm1, xmm6
addss xmm0, dword [eax + 0x10]
subss xmm4, xmm0
movss dword [ebp - 0x28], xmm4
jbe 0x1001e96d
subss xmm1, xmm2
comiss xmm1, xmm6
ja 0x1001e964
movss xmm0, dword [0x100ee318]
comiss xmm0, xmm1
jbe 0x1001e989
nop word [eax + eax]
addss xmm1, xmm2
comiss xmm0, xmm1
ja 0x1001e980
comiss xmm4, xmm2
jbe 0x1001e99e
nop
subss xmm4, xmm3
comiss xmm4, xmm2
ja 0x1001e990
movss dword [ebp - 0x28], xmm4
movss xmm5, dword [0x100ee320]
comiss xmm5, xmm4
jbe 0x1001e9be
nop dword [eax + eax]
addss xmm4, xmm3
comiss xmm5, xmm4
ja 0x1001e9b0
movss dword [ebp - 0x28], xmm4
comiss xmm1, xmm6
mov dword [ebp - 0x64], 0
jbe 0x1001e9cf
movaps xmm1, xmm6
jmp 0x1001e9d7
comiss xmm0, xmm1
jbe 0x1001e9d7
movaps xmm1, xmm0
comiss xmm4, xmm2
movss dword [ebp - 0x6c], xmm1
jbe 0x1001e9ea
subss xmm4, xmm3
movss dword [ebp - 0x28], xmm4
comiss xmm5, xmm4
jbe 0x1001e9f8
addss xmm4, xmm3
movss dword [ebp - 0x28], xmm4
comiss xmm4, xmm2
ja 0x1001ea02
comiss xmm5, xmm4
jbe 0x1001ea12
movaps xmm1, xmm4
lea ecx, [ebp - 0x6c]
call fcn.1001d470
movss xmm1, dword [ebp - 0x6c]
sub esp, 8
movss dword [ebp - 0x68], xmm4
mov dword [esp + 4], 0x40000000
movss dword [esp], xmm1
call fcn.1001d3f0
movss xmm0, dword [ebp - 0x28]
fstp dword [ebp - 0x34]
mov dword [esp + 4], 0x40000000
movss dword [esp], xmm0
call fcn.1001d3f0
fadd dword [ebp - 0x34]
add esp, 8
fstp dword [ebp - 0x34]
movss xmm0, dword [ebp - 0x34]
call fcn.1001d440
comiss xmm0, dword [ebp - 0x40]
movss dword [0x100feae4], xmm0
ja 0x1001ec37
cmp byte [0x100feaa9], 0
je 0x1001ea99
mov ecx, esi
call fcn.1001dac0
test byte [eax], 1
je 0x1001ec37
movq xmm0, qword [0x100fead8]
mov eax, dword [0x100feae0]
mov dword [ebp - 0x44], eax
movq qword [ebp - 0x78], xmm0
cmp byte [0x100feaaa], 0
mov esi, dword [ebp - 0x4c]
je 0x1001eb2a
mov eax, dword [0x100ffac0]
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x10100804]
cmp eax, dword [ecx + 4]
jle 0x1001eaf2
push 0x10100804
call fcn.1008f4b8
add esp, 4
cmp dword [0x10100804], 0xffffffff
jne 0x1001eaf2
mov eax, dword [0x101006d0]
push 0x10100804
mov dword [0x101007b8], eax
call fcn.1008f46e
add esp, 4
movq xmm0, qword [ebp - 0x54]
sub esp, 0xc
mov edx, dword [ebp - 0x44]
mov eax, esp
mov ecx, dword [0x101007b8]
sub esp, 0xc
movq qword [eax], xmm0
movq xmm0, qword [ebp - 0x78]
mov dword [eax + 8], esi
mov eax, esp
movq qword [eax], xmm0
mov dword [eax + 8], edx
call ecx
add esp, 0x18
test al, al
jne 0x1001ec34
movq xmm0, qword [ebp - 0x54]
mov dword [ebp - 0x88], esi
mov esi, dword [ebp - 0x3c]
movq qword [ebp - 0x90], xmm0
test esi, esi
je 0x1001ebec
push 0x54
lea eax, [ebp - 0x148]
push 0
push eax
call fcn.10092000
add esp, 0xc
mov dword [ebp - 0xb0], 0
lea eax, [ebp - 0x90]
mov word [ebp - 0xac], 0
push eax
push ecx
lea eax, [ebp - 0x9c]
mov ecx, esi
push eax
call fcn.1001dd80
add esp, 4
lea ecx, [ebp - 0xf0]
push eax
call fcn.1001d4e0
mov ecx, dword [0x101005e8]
lea edx, [ebp - 0x148]
push edx
mov dword [ebp - 0x84], 0x100e6bb8
lea edx, [ebp - 0x84]
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x7c], 0x100c87bb
mov eax, dword [ecx]
push edx
push 0x46004009
lea edx, [ebp - 0xf0]
mov eax, dword [eax + 0x14]
push edx
call eax
mov esi, dword [ebp - 0x30]
cmp dword [ebp - 0xfc], esi
je 0x1001ebf8
movss xmm0, dword [ebp - 0x11c]
comiss xmm0, dword [0x100ee0e4]
jbe 0x1001ebef
jmp 0x1001ebf8
mov esi, dword [ebp - 0x30]
cmp byte [0x100feaa8], 0
jne 0x1001ec37
movss xmm0, dword [0x100feae4]
movss xmm1, dword [ebp - 0x40]
comiss xmm1, xmm0
jbe 0x1001ec37
mov eax, dword [ebx + 8]
movss dword [ebp - 0x40], xmm0
movss xmm0, dword [ebp - 0x2c]
mov dword [0x100fead4], esi
movss dword [eax], xmm0
movss xmm0, dword [ebp - 0x38]
movss dword [eax + 4], xmm0
mov dword [eax + 8], 0
jmp 0x1001ec37
mov esi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x48]
add eax, 4
mov dword [ebp - 0x48], eax
cmp eax, edi
jne 0x1001e7e0
mov edx, dword [ebp - 0x14]
mov eax, dword [0x1010061c]
inc edx
mov dword [ebp - 0x14], edx
cmp edx, dword [eax + 0x18]
jle 0x1001e730
mov esi, dword [ebx + 8]
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x1001ec93
mov edx, dword [ebp - 0x24]
mov eax, ecx
sub edx, ecx
and edx, 0xfffffffc
cmp edx, 0x1000
jb 0x1001ec89
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001ecaa
push edx
push ecx
call fcn.1008f9f2
add esp, 8
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 8
call fcn.1009cdfc
int3