Function at 0x10066f50
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100e346c
mov eax, dword fs:[0]
push eax
sub esp, 0x28c
mov eax, dword [0x1013e040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [0x10265850]
mov ecx, dword [eax + 0x14]
mov esi, dword [eax + 0x10]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
mov edx, dword [esi]
mov ecx, esi
push eax
mov edx, dword [edx + 0xc]
call edx
mov ecx, dword [0x10265850]
mov esi, eax
mov edi, 1
mov dword [ebp - 0x174], esi
mov dword [ebp - 0x180], edi
mov ecx, dword [ecx + 0x10]
mov edx, dword [ecx]
mov edx, dword [edx + 0x18]
call edx
cmp eax, edi
jle 0x10067b65
mov eax, dword [0x10265850]
push edi
mov ecx, dword [eax + 0x10]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov ebx, eax
cmp ebx, esi
je 0x10067b47
test ebx, ebx
je 0x10067b47
mov ecx, dword [ebx]
mov edx, dword [ecx + 0x214]
mov ecx, ebx
call edx
test al, al
je 0x10067b47
mov ecx, ebx
call fcn.10066ea0
mov ecx, dword [ebp - 0x174]
mov esi, dword [eax]
call fcn.10066ea0
cmp esi, dword [eax]
jne 0x10067020
cmp byte [0x10265b2a], 0
je 0x10067b41
mov eax, dword [0x102657dc]
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x10265a14]
cmp eax, dword [ecx + 8]
jle 0x10067095
push 0x10265a14
call fcn.100df199
add esp, 4
cmp dword [0x10265a14], 0xffffffff
jne 0x10067095
mov edx, 0xc60bf9f2
mov dword [ebp - 4], 0
mov ecx, 0x10132509
call fcn.10045870
mov dword [ebp - 0x16c], eax
lea eax, [ebp - 0x16c]
push eax
call fcn.10046820
push 0x10265a14
mov eax, dword [eax]
mov dword [0x10265a20], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100df148
add esp, 4
mov eax, dword [0x10265a20]
cmp byte [eax + ebx], 0
jne 0x10067b41
mov eax, dword [0x10265850]
lea edx, [ebp - 0x160]
push edx
push edi
mov ecx, dword [eax + 0x14]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
lea eax, [ebp - 0x190]
mov dword [ebp - 0x188], 0
push eax
lea edx, [ebp - 0x188]
mov dword [ebp - 0x184], 0
mov ecx, ebx
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0
call fcn.10067b90
add esp, 4
test al, al
je 0x10067b41
cmp byte [0x10265b2b], 0
movss xmm0, dword [ebp - 0x18c]
movss dword [ebp - 0x17c], xmm0
movss xmm0, dword [ebp - 0x190]
movss dword [ebp - 0x16c], xmm0
je 0x100674f0
mov eax, dword [0x10265810]
xor edx, edx
push str.Background
mov eax, dword [eax + 0x4a84]
mov ecx, dword [eax]
call fcn.10009a30
movss xmm1, dword [ebp - 0x188]
mov esi, eax
movss xmm2, dword [ebp - 0x16c]
movaps xmm5, xmm1
movss xmm0, dword [ebp - 0x184]
addss xmm2, xmm1
movss xmm4, dword [ebp - 0x17c]
add esp, 4
test byte [esi + 0x24], 1
addss xmm4, xmm0
movss dword [ebp - 0x168], xmm0
mov ecx, esi
movss dword [ebp - 0x164], xmm1
movss xmm1, dword [0x10134934]
movaps xmm3, xmm2
movss dword [ebp - 0x178], xmm2
movss xmm2, dword [0x1013496c]
subss xmm5, xmm2
movss dword [ebp - 0x170], xmm4
subss xmm0, xmm2
addss xmm3, xmm2
addss xmm4, xmm2
push 0
addss xmm5, xmm1
addss xmm0, xmm1
je 0x10067204
subss xmm3, xmm1
movss dword [ebp - 0x1c8], xmm5
subss xmm4, xmm1
movss dword [ebp - 0x1c4], xmm0
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x1c8]
movss dword [ebp - 0x1c0], xmm3
movss dword [ebp - 0x1bc], xmm4
jmp 0x10067241
subss xmm3, dword [0x10134930]
subss xmm4, dword [0x10134930]
lea eax, [ebp - 0x1d0]
movss dword [ebp - 0x1d8], xmm5
push eax
movss dword [ebp - 0x1d4], xmm0
lea eax, [ebp - 0x1d8]
movss dword [ebp - 0x1d0], xmm3
movss dword [ebp - 0x1cc], xmm4
push eax
xorps xmm3, xmm3
call fcn.10021230
push ecx
mov dword [esp], 0x3f800000
mov ecx, esi
push 1
push 0xff000000
push dword [esi + 0x38]
push dword [esi + 0x40]
call fcn.1001f930
test byte [esi + 0x24], 1
mov ecx, esi
movss xmm1, dword [0x1013496c]
movss xmm4, dword [ebp - 0x164]
movss xmm5, dword [ebp - 0x168]
addss xmm4, xmm1
movss xmm0, dword [0x10134934]
addss xmm5, xmm1
movss xmm2, dword [ebp - 0x178]
movss xmm3, dword [ebp - 0x170]
subss xmm2, xmm1
mov dword [esi + 0x38], 0
subss xmm3, xmm1
addss xmm4, xmm0
addss xmm5, xmm0
push 0
je 0x100672f6
subss xmm2, xmm0
movss dword [ebp - 0x1e8], xmm4
subss xmm3, xmm0
movss dword [ebp - 0x1e4], xmm5
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x1e8]
movss dword [ebp - 0x1e0], xmm2
movss dword [ebp - 0x1dc], xmm3
jmp 0x10067333
subss xmm2, dword [0x10134930]
subss xmm3, dword [0x10134930]
lea eax, [ebp - 0x1f0]
movss dword [ebp - 0x278], xmm4
push eax
movss dword [ebp - 0x274], xmm5
lea eax, [ebp - 0x278]
movss dword [ebp - 0x1f0], xmm2
movss dword [ebp - 0x1ec], xmm3
push eax
xorps xmm3, xmm3
call fcn.10021230
push ecx
mov dword [esp], 0x3f800000
mov ecx, esi
push 1
push 0xff000000
push dword [esi + 0x38]
push dword [esi + 0x40]
call fcn.1001f930
test byte [esi + 0x24], 1
xorps xmm3, xmm3
movss xmm1, dword [ebp - 0x178]
mov ecx, esi
movss xmm0, dword [ebp - 0x170]
mov dword [esi + 0x38], 0
push 0
je 0x100673d3
movss xmm2, dword [0x10134934]
lea eax, [ebp - 0x1f8]
subss xmm1, xmm2
subss xmm0, xmm2
push eax
lea eax, [ebp - 0x200]
movss dword [ebp - 0x1f8], xmm1
movss xmm1, dword [ebp - 0x164]
movss dword [ebp - 0x1f4], xmm0
addss xmm1, xmm2
movss xmm0, dword [ebp - 0x168]
addss xmm0, xmm2
movss dword [ebp - 0x200], xmm1
movss dword [ebp - 0x1fc], xmm0
jmp 0x10067430
subss xmm1, dword [0x10134930]
subss xmm0, dword [0x10134930]
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp - 0x210]
movss dword [ebp - 0x208], xmm1
movss xmm1, dword [ebp - 0x164]
addss xmm1, dword [0x10134934]
movss dword [ebp - 0x204], xmm0
movss xmm0, dword [ebp - 0x168]
addss xmm0, dword [0x10134934]
movss dword [ebp - 0x210], xmm1
movss dword [ebp - 0x20c], xmm0
push eax
call fcn.10021230
push ecx
mov dword [esp], 0x3f800000
mov ecx, esi
push 1
push 0xffffffffffffffff
push dword [esi + 0x38]
push dword [esi + 0x40]
call fcn.1001f930
mov dword [esi + 0x38], 0
cmp byte [0x10265b2c], 0
je 0x10067510
mov eax, dword [0x10265810]
xor edx, edx
push str.Background
mov eax, dword [eax + 0x4a84]
mov ecx, dword [eax]
call fcn.10009a30
mov ecx, dword [0x10265b4c]
add esp, 4
mov esi, eax
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x214], 0
call fcn.10006ca0
movss xmm0, dword [ebp - 0x178]
lea ecx, [ebp - 0x218]
sub esp, 8
movss dword [ebp - 0x220], xmm0
movss xmm0, dword [ebp - 0x170]
movss dword [ebp - 0x21c], xmm0
mov dword [esp + 4], 0
push ecx
push ecx
mov dword [esp], 0x42480000
mov ecx, esi
push eax
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x188]
push eax
call fcn.10023270
movss xmm0, dword [ebp - 0x184]
movss dword [ebp - 0x168], xmm0
movss xmm0, dword [ebp - 0x188]
movss dword [ebp - 0x164], xmm0
cmp byte [0x10265b30], 0
je 0x1006761d
mov esi, dword [0x10265810]
lea eax, [ebp - 0x160]
movss xmm3, dword [0x10134a84]
movss xmm2, dword [0x101349f8]
push 0
push 0
push eax
push ecx
mov ecx, dword [esi + 0x3d14]
lea eax, [ebp - 0x1a0]
mov dword [esp], 0xbf800000
push eax
call fcn.10026080
movss xmm0, dword [ebp - 0x1a0]
xor edx, edx
addss xmm0, dword [0x10134964]
movss xmm1, dword [ebp - 0x16c]
push str.Background
cvttss2si eax, xmm0
movd xmm0, eax
mov eax, dword [esi + 0x4a84]
cvtdq2ps xmm0, xmm0
mov ecx, dword [eax]
subss xmm1, xmm0
movss dword [ebp - 0x1a0], xmm0
movss xmm0, dword [ebp - 0x168]
subss xmm0, dword [ebp - 0x19c]
mulss xmm1, dword [0x10134934]
movss dword [ebp - 0x224], xmm0
addss xmm1, dword [ebp - 0x164]
movss dword [ebp - 0x228], xmm1
call fcn.10009a30
mov ecx, dword [0x10265b7c]
add esp, 4
mov edi, eax
call fcn.10006ca0
mov ecx, dword [0x10265b70]
mov esi, eax
call fcn.10006ca0
mov ecx, dword [0x10265810]
lea edx, [ebp - 0x160]
movss xmm2, dword [0x101349f8]
mov ecx, dword [ecx + 0x2c]
mov ecx, dword [ecx + 0x44]
push ecx
push edx
push esi
push eax
lea eax, [ebp - 0x228]
push eax
push dword [ecx + 4]
mov ecx, edi
call fcn.10021b90
mov edi, dword [ebp - 0x180]
cmp byte [0x10265b2d], 0
je 0x10067b41
movss xmm1, dword [ebp - 0x164]
mov ecx, ebx
movss xmm0, dword [ebp - 0x168]
subss xmm1, dword [0x101349dc]
subss xmm0, dword [0x1013496c]
mov eax, dword [ebx]
movss dword [ebp - 0x164], xmm1
mov eax, dword [eax + 0x1b0]
movss dword [ebp - 0x168], xmm0
movss dword [ebp - 0x238], xmm1
movss dword [ebp - 0x234], xmm0
call eax
mov ecx, dword [ebx]
mov dword [ebp - 0x180], eax
mov edx, dword [ecx + 0x1b4]
mov ecx, ebx
call edx
mov ebx, dword [ebp - 0x180]
lea ecx, [ebp - 0x1b8]
mov edx, ebx
mov dword [ebp - 0x178], eax
movd xmm0, eax
movd xmm1, ebx
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
divss xmm1, xmm0
movss xmm0, dword [0x1013496c]
minss xmm0, xmm1
movss dword [ebp - 0x170], xmm0
call fcn.10066dc0
cmp dword [eax + 0x14], 0xf
jbe 0x100676cf
mov eax, dword [eax]
mov esi, dword [0x10265810]
test eax, eax
jne 0x100676e6
xorps xmm0, xmm0
movss dword [ebp - 0x16c], xmm0
jmp 0x10067750
movss xmm3, dword [0x10134a84]
movss xmm2, dword [0x101349f8]
push 0
push 0
push eax
push ecx
mov ecx, dword [esi + 0x3d14]
lea eax, [ebp - 0x198]
mov dword [esp], 0xbf800000
push eax
call fcn.10026080
movss xmm0, dword [ebp - 0x198]
addss xmm0, dword [0x10134964]
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x194]
movss dword [ebp - 0x26c], xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [ebp - 0x16c], xmm1
movss dword [ebp - 0x198], xmm1
mov ecx, dword [ebp - 0x1a4]
cmp ecx, 0xf
jbe 0x10067790
mov edx, dword [ebp - 0x1b8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10067780
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10067b81
push ecx
push edx
call fcn.100df320
mov esi, dword [0x10265810]
add esp, 8
movss xmm0, dword [ebp - 0x168]
xor edx, edx
movss xmm2, dword [ebp - 0x17c]
addss xmm0, dword [ebp - 0x17c]
mulss xmm2, dword [ebp - 0x170]
mov dword [ebp - 0x1a8], 0
movss xmm1, dword [ebp - 0x164]
subss xmm1, dword [ebp - 0x16c]
subss xmm0, xmm2
mov dword [ebp - 0x1a4], 0xf
mov byte [ebp - 0x1b8], 0
mov eax, dword [esi + 0x4a84]
push str.Background
movss dword [ebp - 0x180], xmm2
subss xmm0, dword [0x1013496c]
mov ecx, dword [eax]
movss dword [ebp - 0x250], xmm1
movss dword [ebp - 0x24c], xmm0
call fcn.10009a30
movss xmm1, dword [ebp - 0x17c]
add esp, 4
addss xmm1, dword [0x101349b0]
movss xmm0, dword [ebp - 0x164]
addss xmm0, dword [0x101349cc]
push 0
push ecx
addss xmm1, dword [ebp - 0x168]
mov dword [esp], 0
lea ecx, [ebp - 0x230]
push 0xff000000
push ecx
lea ecx, [ebp - 0x238]
movss dword [ebp - 0x230], xmm0
push ecx
mov ecx, eax
movss dword [ebp - 0x22c], xmm1
call fcn.100217a0
mov eax, dword [0x10265810]
xor edx, edx
push str.Background
mov eax, dword [eax + 0x4a84]
mov ecx, dword [eax]
call fcn.10009a30
movss xmm6, dword [0x1013496c]
lea ecx, [ebp - 0x288]
movss xmm0, dword [ebp - 0x170]
movaps xmm1, xmm6
subss xmm1, xmm0
movss dword [ebp - 0x284], xmm0
add esp, 4
mov dword [ebp - 0x280], 0
mov esi, eax
mov dword [ebp - 0x27c], 0x3f800000
movss dword [ebp - 0x16c], xmm1
movss dword [ebp - 0x288], xmm1
call fcn.10006ca0
movss xmm3, dword [ebp - 0x17c]
movss xmm2, dword [ebp - 0x164]
movaps xmm0, xmm3
subss xmm3, dword [ebp - 0x180]
movss xmm5, dword [ebp - 0x168]
addss xmm0, xmm6
movaps xmm4, xmm2
addss xmm2, xmm6
addss xmm4, dword [0x101349bc]
push 0
addss xmm3, xmm6
addss xmm5, xmm0
movss xmm0, dword [ebp - 0x168]
push ecx
mov dword [esp], 0
push eax
addss xmm0, xmm3
movss dword [ebp - 0x17c], xmm4
movss dword [ebp - 0x26c], xmm5
lea eax, [ebp - 0x240]
movss dword [ebp - 0x240], xmm4
movss dword [ebp - 0x23c], xmm5
movss dword [ebp - 0x164], xmm2
movss dword [ebp - 0x248], xmm2
movss dword [ebp - 0x244], xmm0
push eax
lea eax, [ebp - 0x248]
mov ecx, esi
push eax
call fcn.100217a0
cmp ebx, dword [ebp - 0x178]
je 0x10067a51
mov eax, dword [0x10265810]
xor edx, edx
push str.Background
mov eax, dword [eax + 0x4a84]
mov ecx, dword [eax]
call fcn.10009a30
add esp, 4
lea ecx, [ebp - 0x1b8]
mov edx, ebx
mov esi, eax
call fcn.10066dc0
mov ecx, eax
mov dword [ebp - 4], 1
cmp dword [ecx + 0x14], 0xf
jbe 0x100679c8
mov ecx, dword [ecx]
mov eax, dword [0x10265810]
movss xmm2, dword [0x101349f8]
push ecx
push ecx
mov eax, dword [eax + 0x2c]
lea ecx, [ebp - 0x250]
push 0xff000000
push 0xffffffffffffffff
push ecx
mov eax, dword [eax + 0x44]
mov ecx, esi
push dword [eax + 4]
call fcn.10021b90
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1a4]
cmp ecx, 0xf
jbe 0x10067a36
mov edx, dword [ebp - 0x1b8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10067a2c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10067b81
push ecx
push edx
call fcn.100df320
add esp, 8
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x1a4], 0xf
mov byte [ebp - 0x1b8], 0
cmp byte [0x10265b2e], 0
je 0x10067b41
mov eax, dword [0x10265810]
xor edx, edx
push str.Background
mov eax, dword [eax + 0x4a84]
mov ecx, dword [eax]
call fcn.10009a30
movss xmm0, dword [ebp - 0x16c]
mov esi, eax
movss dword [ebp - 0x298], xmm0
lea eax, [ebp - 0x258]
movss xmm0, dword [ebp - 0x170]
movss dword [ebp - 0x294], xmm0
movss xmm0, dword [ebp - 0x17c]
movss dword [ebp - 0x260], xmm0
movss xmm0, dword [ebp - 0x26c]
movss dword [ebp - 0x25c], xmm0
movss xmm0, dword [ebp - 0x164]
movss dword [ebp - 0x268], xmm0
movss xmm0, dword [ebp - 0x168]
addss xmm0, dword [0x1013496c]
mov dword [esp], 0
push ecx
push eax
push ecx
lea ecx, [ebp - 0x298]
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x254], 0
mov dword [ebp - 0x290], 0
mov dword [ebp - 0x28c], 0x3f800000
movss dword [ebp - 0x264], xmm0
mov dword [esp], 0x42480000
call fcn.10006ca0
push eax
lea eax, [ebp - 0x260]
mov ecx, esi
push eax
lea eax, [ebp - 0x268]
push eax
call fcn.10023270
mov esi, dword [ebp - 0x174]
mov eax, dword [0x10265850]
inc edi
mov dword [ebp - 0x180], edi
mov ecx, dword [eax + 0x10]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
cmp edi, eax
jl 0x10066fc5
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100df10f
mov esp, ebp
pop ebp
ret
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3