Function at 0x10031560
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x48
movss xmm0, dword [0x101d86f0]
mov eax, ecx
or ecx, 0xffffffff
movss dword [esp + 0x38], xmm0
mov dword [esp + 0x2c], ecx
xor edx, edx
or ecx, ecx
mov dword [esp + 8], eax
push esi
push edi
mov edi, dword [eax + 0x16640c]
xor esi, esi
mov dword [esp + 0x14], ecx
xorps xmm2, xmm2
mov ecx, dword [eax + 0x166410]
xorps xmm0, xmm0
mov dword [esp + 0x44], 0
xorps xmm1, xmm1
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x2c], esi
movss dword [esp + 0x1c], xmm0
movss dword [esp + 0x20], xmm1
movss dword [esp + 0x24], xmm2
mov dword [esp + 0x28], edx
mov dword [esp + 0x30], ecx
cmp edi, ecx
je 0x10031dac
mov eax, ecx
nop word [eax + eax]
mov ecx, dword [edi]
cmp dword [ecx + 0x10], 0
je 0x100317ab
mov esi, dword [ecx + 0xc]
mov edx, esi
mov eax, dword [ecx + 8]
and esi, 1
dec eax
shr edx, 1
and edx, eax
mov eax, dword [ecx + 4]
mov eax, dword [eax + edx*4]
push dword [eax + esi*8]
call fcn.100307f0
mov ecx, dword [edi]
mov eax, dword [ecx + 0x182c]
cmp eax, dword [ecx + 0x1830]
je 0x1003178d
push ecx
call fcn.100d36b0
cmp eax, 2
je 0x100316f2
cmp eax, 1
je 0x1003178d
mov esi, dword [edi]
mov edx, dword [esi + 0xc]
mov eax, edx
mov ecx, dword [esi + 8]
shr eax, 1
dec ecx
and ecx, eax
mov eax, dword [esi + 4]
and edx, 1
mov eax, dword [eax + ecx*4]
mov ecx, esi
mov eax, dword [eax + edx*8]
mov dword [esp + 0xc], eax
push eax
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x54]
push eax
call fcn.10033ba0
test al, al
je 0x1003178d
mov eax, dword [edi]
movss xmm0, dword [esp + 0x44]
movss xmm1, dword [esp + 0x48]
movss xmm2, dword [esp + 0x4c]
mov esi, dword [eax + 0x1824]
mov eax, dword [esp + 0x3c]
movss xmm3, dword [esp + 0x18]
mov edx, dword [esp + 0xc]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x2c], esi
movss dword [esp + 0x1c], xmm0
movss dword [esp + 0x20], xmm1
movss dword [esp + 0x24], xmm2
movss dword [esp + 0x40], xmm3
mov dword [esp + 0x28], edx
mov dword [esp + 0x14], eax
jmp 0x100317a7
push dword [edi]
call fcn.100e2c80
mov esi, eax
test esi, esi
je 0x1003178d
mov ecx, dword [edi]
lea eax, [esp + 0x38]
push esi
push eax
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x54]
push eax
call fcn.10033ba0
test al, al
je 0x10031773
movss xmm0, dword [esp + 0x44]
mov eax, dword [edi]
movss dword [esp + 0x1c], xmm0
movss xmm0, dword [esp + 0x48]
movss dword [esp + 0x20], xmm0
mov eax, dword [eax + 0x1824]
movss xmm0, dword [esp + 0x4c]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x3c]
movss dword [esp + 0x24], xmm0
movss xmm0, dword [esp + 0x18]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x38]
movss dword [esp + 0x40], xmm0
mov dword [esp + 0x28], esi
mov dword [esp + 0x14], eax
push dword [edi]
call fcn.100e2e60
mov dword [esp + 0xc], eax
test eax, eax
je 0x1003178d
cmp eax, esi
je 0x1003178d
mov ecx, dword [edi]
jmp 0x10031677
movss xmm0, dword [esp + 0x1c]
movss xmm1, dword [esp + 0x20]
movss xmm2, dword [esp + 0x24]
mov esi, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x30]
add edi, 4
cmp edi, eax
jne 0x10031600
test esi, esi
je 0x10031dac
test edx, edx
je 0x10031dac
mov edi, dword [esp + 0x10]
movaps xmm3, xmm0
movaps xmm4, xmm1
movaps xmm0, xmm2
mov byte [edi + 0x1c7474], 1
subss xmm0, dword [0x10429dc4]
subss xmm3, dword [0x10429dbc]
subss xmm4, dword [0x10429dc0]
movss dword [esp + 0x18], xmm0
movaps xmm0, xmm3
movss dword [esp + 0xc], xmm3
movaps xmm1, xmm4
mulss xmm0, xmm3
mulss xmm1, xmm4
movss dword [esp + 0x38], xmm4
addss xmm0, xmm1
call fcn.1002e020
movaps xmm2, xmm0
xorps xmm1, xmm1
comiss xmm2, xmm1
movss xmm0, dword [esp + 0x18]
jbe 0x1003186d
xorps xmm0, xmmword [0x101d8850]
movaps xmm1, xmm2
call fcn.10082d80
mulss xmm0, dword [0x101d85f4]
movss xmm1, dword [esp + 0xc]
movss dword [esp + 0x18], xmm0
movss xmm0, dword [esp + 0x38]
call fcn.10082d80
movaps xmm1, xmm0
movss xmm0, dword [esp + 0x18]
mulss xmm1, dword [0x101d85f4]
jmp 0x10031884
comiss xmm0, xmm1
jbe 0x1003187c
movss xmm0, dword [0x101d870c]
jmp 0x10031884
movss xmm0, dword [0x101d8618]
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x28]
movss dword [edi + 0x1c7428], xmm0
movss xmm0, dword [esp + 0x1c]
movss dword [edi + 0x1c742c], xmm1
mov dword [edi + 0x1c7430], 0
mov dword [edi + 0x1c7420], esi
movss dword [edi + 0x1c7434], xmm0
movss xmm0, dword [esp + 0x20]
movss dword [edi + 0x1c7438], xmm0
movss xmm0, dword [esp + 0x24]
movss dword [edi + 0x1c743c], xmm0
movss xmm0, dword [esp + 0x40]
mov dword [edi + 0x1c7440], ecx
mov ecx, dword [esp + 0x14]
movss dword [edi + 0x1c7448], xmm0
mov dword [edi + 0x1c744c], eax
mov dword [edi + 0x1c7444], ecx
mov esi, dword [edi + 0x166410]
sub esi, dword [edi + 0x16640c]
sar esi, 2
cmp esi, 3
jb 0x100319c6
mov edi, dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
call edi
xor edx, edx
div esi
mov eax, dword [esp + 0x10]
mov dword [esp + 0xc], edx
mov esi, dword [eax + 0x166410]
sub esi, dword [eax + 0x16640c]
sar esi, 2
call edi
xor edx, edx
div esi
mov eax, dword [esp + 0x10]
mov dword [esp + 0x34], edx
mov esi, dword [eax + 0x166410]
sub esi, dword [eax + 0x16640c]
sar esi, 2
call edi
xor edx, edx
mov edi, dword [esp + 0x10]
div esi
mov eax, dword [edi + 0x166410]
xor esi, esi
mov ecx, dword [edi + 0x16640c]
sub eax, ecx
sar eax, 2
mov dword [esp + 0x14], edx
test eax, eax
je 0x100319c6
cmp esi, dword [esp + 0xc]
je 0x100319b0
cmp esi, dword [esp + 0x34]
je 0x100319b0
cmp esi, edx
je 0x100319b0
mov eax, dword [edi + 0x166410]
lea edx, [ecx + esi*4]
lea ecx, [edx + 4]
sub eax, ecx
push eax
push ecx
push edx
call sub.VCRUNTIME140.dll_memmove
add dword [edi + 0x166410], 0xfffffffc
add esp, 0xc
mov edx, dword [esp + 0x14]
test esi, esi
je 0x100319b0
dec esi
mov eax, dword [edi + 0x166410]
inc esi
mov ecx, dword [edi + 0x16640c]
sub eax, ecx
sar eax, 2
cmp esi, eax
jb 0x10031977
mov esi, dword [edi + 0x1c744c]
mov ecx, dword [0x10548630]
add ecx, 0xffffffa3
mov dword [esp + 0x14], esi
xor ecx, 0x14f7a235
add ecx, dword [esi]
mov eax, dword [ecx + 0xc]
lea eax, [eax + eax*2]
shl eax, 4
push eax
lea eax, [esi + 0x418]
push eax
push dword [ecx]
call sub.VCRUNTIME140.dll_memcpy
mov ecx, dword [0x10548538]
lea edi, [esi + 0x341c]
mov esi, dword [esi]
add ecx, 0xffffffe1
mov eax, dword [edi]
xor ecx, 0x14f7a1f7
mov edx, dword [esp + 0x20]
add esp, 0xc
mov dword [ecx + esi], eax
mov eax, dword [edi + 4]
mov dword [ecx + esi + 4], eax
mov eax, dword [edi + 8]
mov dword [ecx + esi + 8], eax
mov ecx, dword [0x10548544]
mov eax, dword [edx + 0x74]
add ecx, 0xffffffde
xor ecx, 0x14f7a1fa
mov dword [ecx + esi], eax
mov eax, dword [edx + 0x78]
mov dword [ecx + esi + 4], eax
mov eax, dword [edx + 0x7c]
mov dword [ecx + esi + 8], eax
mov edx, dword [0x10548548]
mov ecx, dword [esp + 0x14]
add edx, 0xffffffdd
xor edx, 0x14f7a1fb
mov eax, dword [ecx + 0x80]
mov dword [edx + esi], eax
mov eax, dword [ecx + 0x84]
mov dword [edx + esi + 4], eax
mov eax, dword [ecx + 0x88]
mov dword [edx + esi + 8], eax
lea eax, [ecx + 0x98]
mov edx, dword [0x10540a80]
mov ecx, esi
push eax
call edx
mov edx, dword [esp + 0x14]
mov eax, dword [0x10540a84]
push edi
mov ecx, dword [edx]
call eax
mov eax, dword [0x10548580]
mov edi, dword [0x10429d7c]
add eax, 0xffffffcf
xor eax, 0x14f7a209
test byte [eax + edi], 1
je 0x10031afa
test byte [0x1042b838], 2
jne 0x10031afa
cmp dword [0x1042b7bc], 0x1f
je 0x10031afa
mov eax, dword [0x103adac0]
test eax, eax
je 0x10031afa
cmp byte [0x1042b7d4], 0
jne 0x10031ae7
cmp eax, 2
jne 0x10031afa
cmp byte [0x10429dd4], 0
je 0x10031afa
mov esi, dword [esp + 0x10]
mov byte [esi + 0x1c746d], 1
mov edi, dword [0x10429d7c]
jmp 0x10031afe
mov esi, dword [esp + 0x10]
cmp dword [0x1042b7bc], 0x1f
mov eax, dword [esi + 0x1c7420]
mov dword [esp + 0x18], eax
jne 0x10031b1b
movss xmm0, dword [0x101d860c]
jmp 0x10031b23
movss xmm0, dword [0x103ad1a4]
cmp byte [0x1042b7d4], 0
cvttss2si eax, xmm0
mov dword [esp + 0x34], eax
je 0x10031d32
cmp byte [0x10429dd4], 0
je 0x10031d32
mov ecx, dword [0x10429d98]
and ecx, 1
je 0x10031b90
mov eax, dword [0x105485c0]
xorps xmm0, xmm0
add eax, 0xffffffbf
xor eax, 0x14f7a219
movss xmm1, dword [eax + edi]
comiss xmm1, xmm0
jbe 0x10031b7b
movss xmm0, dword [0x101d84f0]
comiss xmm0, xmm1
ja 0x10031d32
movss xmm0, dword [0x1042b454]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x10031d32
mov eax, dword [0x105485e0]
add eax, 0xffffffb7
xor eax, 0x14f7a221
cmp byte [eax + edi], 0
mov eax, dword [0x1042b7c0]
je 0x10031bb2
movss xmm0, dword [eax + 0x130]
jmp 0x10031bba
movss xmm0, dword [eax + 0x12c]
mov eax, dword [0x10548540]
add eax, 0xffffffdf
movss dword [esp + 0x14], xmm0
xor eax, 0x14f7a1f9
test ecx, ecx
je 0x10031c37
movss xmm1, dword [eax + edi + 4]
movss xmm0, dword [eax + edi]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
call fcn.1002e020
movss dword [esp + 0x40], xmm0
sub esp, 8
movss xmm0, dword [esp + 0x1c]
subss xmm0, dword [0x101d858c]
movss dword [esp + 0x14], xmm0
fld dword [esp + 0x14]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
movss xmm0, dword [esp + 0x48]
add esp, 8
fstp dword [esp + 0xc]
fld dword [esp + 0xc]
fstp dword [esp + 0xc]
comiss xmm0, dword [esp + 0xc]
jb 0x10031c5b
jmp 0x10031d32
mov eax, dword [0x103c2790]
cmp eax, 0xffffffff
je 0x10031c5b
lea eax, [eax + eax*2]
mov al, byte [eax*4 + 0x103c5098]
test al, al
je 0x10031c5b
cvttss2si eax, dword [0x103c29c8]
mov dword [esp + 0x34], eax
mov ecx, dword [0x10540a20]
mov esi, dword [0x10548608]
add esi, 0xffffffad
xor esi, 0x14f7a22b
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
mov dword [esp + 0xc], eax
call dword [esp + 0xc]
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x44]
movss xmm3, dword [esi + edi + 4]
movss xmm4, dword [esi + edi + 8]
fstp dword [esp + 0xc]
movss xmm2, dword [esp + 0xc]
movss xmm0, dword [eax + 0x1c7428]
movaps xmm1, xmm2
mulss xmm1, dword [esi + edi]
push ecx
push dword [esp + 0x1c]
mulss xmm3, xmm2
mov ecx, eax
subss xmm0, xmm1
mulss xmm4, xmm2
movss dword [esp + 0x4c], xmm0
movss xmm0, dword [eax + 0x1c742c]
subss xmm0, xmm3
movss dword [esp + 0x50], xmm0
movss xmm0, dword [eax + 0x1c7430]
subss xmm0, xmm4
movss dword [esp + 0x54], xmm0
call fcn.10031dc0
movd xmm0, dword [esp + 0x34]
cvtdq2ps xmm0, xmm0
movd xmm1, eax
mov eax, dword [esp + 0x10]
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm0
movss dword [eax + 0x1c7450], xmm1
jb 0x10031d2a
movss xmm0, dword [eax + 0x1c7454]
xorps xmm1, xmm1
comiss xmm0, xmm1
jbe 0x10031d2a
mov edi, dword [0x10429d7c]
mov cl, 1
mov esi, eax
jmp 0x10031d34
mov edi, dword [0x10429d7c]
mov esi, eax
xor cl, cl
mov eax, dword [0x105485e0]
add eax, 0xffffffb7
xor eax, 0x14f7a221
cmp byte [eax + edi], 0
jne 0x10031d63
mov eax, dword [0x1042b7bc]
cmp eax, 8
je 0x10031d5f
cmp eax, 0x27
je 0x10031d5f
cmp dword [0x1042b7c4], 5
jne 0x10031d63
mov al, 1
jmp 0x10031d65
xor al, al
cmp byte [esi + 0x1c746d], 0
je 0x10031d96
test al, al
je 0x10031d96
cmp byte [0x103ad114], 0
je 0x10031d96
mov eax, dword [0x1042b82c]
or dword [eax + 0x30], 0x800
mov eax, dword [0x1042b82c]
and dword [eax + 0x30], 0xfffffffe
pop edi
pop esi
mov esp, ebp
pop ebp
ret
test cl, cl
je 0x10031dac
cmp byte [0x103ade34], 0
je 0x10031dac
mov eax, dword [0x1042b82c]
or dword [eax + 0x30], 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret