Function at 0x1006aeb0
Capabilities:
Access peb ldr_data

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1018fdb9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x1f0
push esi
mov esi, dword [ebx + 0xc]
push edi
push esi
call fcn.10086000
add esp, 4
mov dword [esi + 4], 0
mov ecx, esi
mov dword [esi + 0x20], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], 0
call fcn.10085b40
xor edx, edx
mov byte [ebp - 0x11], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x8c], edx
xor esi, esi
mov dword [ebp - 4], edx
mov dword [ebp - 0x84], edx
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x80], esi
mov eax, dword [ebx + 0xc]
lea edx, [esi + 8]
mov byte [ebp - 4], 1
mov ecx, dword [eax + 0x4c]
mov dword [ebp - 0x54], ecx
test ecx, ecx
jle 0x1006afa5
cmp ecx, edx
mov edi, ecx
cmovl edi, edx
test edi, edi
jle 0x1006afa5
imul eax, edi, 0x54
push eax
call fcn.10079110
mov ecx, dword [ebp - 0x54]
lea edx, [esi + 8]
mov dword [ebp - 0x40], eax
add esp, 4
mov dword [ebp - 0x8c], eax
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x90], edi
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x2c], eax
test eax, eax
jle 0x1006afe4
cmp eax, 8
mov edi, eax
cmovl edi, edx
test edi, edi
jle 0x1006afe4
lea eax, [edi + edi*2]
shl eax, 3
push eax
call fcn.10079110
mov ecx, dword [ebp - 0x54]
mov esi, eax
mov eax, dword [ebp - 0x2c]
add esp, 4
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x84], edi
mov edi, dword [ebp - 0x40]
imul ecx, ecx, 0x54
mov dword [ebp - 0x88], eax
push ecx
push 0
push edi
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2c]
lea eax, [eax + eax*2]
shl eax, 3
push eax
push 0
push esi
call sub.VCRUNTIME140.dll_memset
mov edx, dword [ebx + 0xc]
add esp, 0x18
mov dword [ebp - 0x30], 0
cmp dword [edx + 0x4c], 0
jle 0x1006b126
xor ecx, ecx
add edi, 0x34
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x24], edi
nop dword [eax]
mov eax, dword [edx + 0x54]
xor edx, edx
add eax, ecx
mov dword [edi - 4], 0xffffffff
mov ecx, dword [ebx + 0xc]
mov dword [ebp - 0x38], eax
cmp dword [ecx + 0x34], edx
jle 0x1006b32f
mov esi, dword [ebp - 0x24]
or edi, 0xffffffff
mov ecx, edi
cmp edi, 0xffffffff
jne 0x1006b07d
mov ecx, dword [ebx + 0xc]
or edi, edi
mov eax, dword [eax + 0x7c]
mov ecx, dword [ecx + 0x3c]
cmp eax, dword [ecx + edx*4]
jne 0x1006b06f
mov dword [esi - 4], edx
mov edi, edx
mov eax, dword [ebx + 0xc]
inc edx
mov ecx, edi
cmp edx, dword [eax + 0x34]
mov eax, dword [ebp - 0x38]
jl 0x1006b053
mov esi, dword [ebp - 0x3c]
cmp ecx, 0xffffffff
je 0x1006b32f
push dword [ebx + 0x10]
mov edi, dword [ebp - 0x24]
push eax
push dword [ebx + 8]
lea ecx, [edi - 0x34]
call fcn.1006be80
test al, al
je 0x1006b32f
mov edx, dword [ebp - 0x38]
mov eax, dword [edx + 0x40]
mov edx, dword [edx + 0x30]
shr eax, 8
and al, 1
or byte [ebp - 0x11], al
mov eax, dword [edi - 4]
lea eax, [eax + eax*2]
mov dword [ebp - 0x28], eax
test edx, edx
jne 0x1006b0cb
mov ecx, dword [ebx + 0xc]
call fcn.10085bd0
mov edx, eax
mov dword [edi - 8], edx
cmp word [edx], 0
je 0x1006b0ef
movzx eax, word [edx + 2]
test ax, ax
je 0x1006b0ef
mov ecx, eax
cmp dword [edi], ecx
cmovge ecx, dword [edi]
add edx, 4
mov dword [edi], ecx
cmp word [edx], 0
jne 0x1006b0d4
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
inc dword [esi + edx*8]
mov ecx, dword [edi]
cmp dword [esi + edx*8 + 4], ecx
cmovge ecx, dword [esi + edx*8 + 4]
inc eax
mov dword [esi + edx*8 + 4], ecx
add edi, 0x54
mov edx, dword [ebx + 0xc]
mov ecx, dword [ebp - 0x50]
sub ecx, 0xffffff80
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x50], ecx
cmp eax, dword [edx + 0x4c]
jl 0x1006b030
mov eax, dword [ebp - 0x54]
xor edi, edi
mov dword [ebp - 0x34], edi
test eax, eax
jle 0x1006b3fa
mov edx, dword [ebp - 0x40]
add edx, 0x38
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x18], edx
mov eax, dword [edx - 8]
lea esi, [edx + 4]
mov ecx, esi
lea edi, [eax + eax*2]
mov eax, dword [edx - 4]
add eax, 0x20
mov dword [ebp - 0x24], edi
sar eax, 5
push eax
call fcn.1006c0d0
mov eax, dword [esi]
shl eax, 2
push eax
mov eax, dword [ebp - 0x18]
push 0
push dword [eax + 0xc]
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x3c]
add esp, 0xc
cmp dword [eax + edi*8 + 0xc], 0
lea esi, [eax + edi*8]
jne 0x1006b1a9
mov eax, dword [eax + edi*8 + 4]
lea ecx, [esi + 0xc]
add eax, 0x20
sar eax, 5
push eax
call fcn.1006c0d0
mov eax, dword [esi + 0xc]
shl eax, 2
push eax
push 0
push dword [esi + 0x14]
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x18]
mov eax, dword [edx - 0xc]
mov dword [ebp - 0x20], eax
cmp word [eax], 0
je 0x1006b254
nop dword [eax]
movzx ecx, word [eax + 2]
test cx, cx
je 0x1006b254
movzx edi, word [eax]
cmp edi, ecx
ja 0x1006b241
mov eax, dword [ebp - 0x24]
mov ecx, edi
and ecx, 0x1f
mov edx, 1
shl edx, cl
mov esi, edi
mov ecx, dword [ebp - 0x3c]
sar esi, 5
mov dword [ebp - 0x28], edx
mov eax, dword [ecx + eax*8 + 0x14]
test dword [eax + esi*4], edx
jne 0x1006b232
mov eax, dword [ebp - 0x18]
push edi
push dword [eax - 0x20]
call fcn.100d15a0
mov edx, dword [ebp - 0x18]
add esp, 8
test eax, eax
je 0x1006b235
inc dword [edx]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x3c]
inc dword [ecx + eax*8 + 8]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x3c]
or dword [eax + esi*4], ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [edx + eax*8 + 0x14]
or dword [eax + esi*4], ecx
inc dword [ebp - 0x34]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
inc edi
movzx eax, word [eax + 2]
cmp edi, eax
jle 0x1006b1d4
mov eax, dword [ebp - 0x20]
add eax, 4
mov dword [ebp - 0x20], eax
cmp word [eax], 0
jne 0x1006b1c0
add edx, 0x54
sub dword [ebp - 0x38], 1
mov dword [ebp - 0x18], edx
jne 0x1006b142
mov esi, dword [ebp - 0x40]
mov edx, dword [ebp - 0x54]
add esi, 0x4c
mov dword [ebp - 0x30], edx
mov edi, dword [esi - 0x14]
cmp edi, dword [esi]
jle 0x1006b2b0
mov eax, edi
shl eax, 5
push eax
call fcn.10079110
mov edx, dword [esi + 4]
add esp, 4
mov dword [ebp - 0x28], eax
test edx, edx
je 0x1006b2ab
mov ecx, dword [esi - 4]
shl ecx, 5
push ecx
push edx
push eax
call sub.VCRUNTIME140.dll_memcpy
push dword [esi + 4]
call fcn.10079140
mov eax, dword [ebp - 0x28]
add esp, 0x10
mov dword [esi + 4], eax
mov dword [esi], edi
mov ecx, dword [esi - 8]
mov edx, ecx
mov eax, dword [esi - 0x10]
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x38], ecx
lea eax, [ecx + eax*4]
mov dword [ebp - 0x48], eax
cmp ecx, eax
jae 0x1006b3c0
nop dword [eax]
mov eax, dword [edx]
mov dword [ebp - 0x28], eax
test eax, eax
je 0x1006b3b1
xor edi, edi
mov dword [ebp - 0x24], edi
mov eax, 1
mov ecx, edi
shl eax, cl
test dword [ebp - 0x28], eax
je 0x1006b3a4
mov ecx, dword [esi]
mov eax, edx
sub eax, dword [ebp - 0x68]
xorps xmm0, xmm0
shl eax, 3
and eax, 0xffffffe0
add eax, edi
movzx eax, ax
movups xmmword [ebp - 0xc0], xmm0
mov dword [ebp - 0xb8], eax
mov eax, dword [esi - 4]
cmp eax, ecx
jne 0x1006b385
lea edi, [eax + 1]
test ecx, ecx
je 0x1006b338
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x1006b33d
mov byte [ebp - 0x11], 0
jmp 0x1006be39
mov eax, 8
cmp eax, edi
cmovg edi, eax
cmp edi, ecx
jle 0x1006b382
mov eax, edi
shl eax, 5
push eax
call fcn.10079110
mov edx, dword [esi + 4]
add esp, 4
mov dword [ebp - 0x64], eax
test edx, edx
je 0x1006b37a
mov ecx, dword [esi - 4]
shl ecx, 5
push ecx
push edx
push eax
call sub.VCRUNTIME140.dll_memcpy
push dword [esi + 4]
call fcn.10079140
mov eax, dword [ebp - 0x64]
add esp, 0x10
mov dword [esi + 4], eax
xorps xmm0, xmm0
mov dword [esi], edi
mov edi, dword [ebp - 0x24]
mov eax, dword [esi - 4]
mov ecx, dword [esi + 4]
mov edx, dword [ebp - 0x38]
shl eax, 5
movups xmmword [ecx + eax], xmm0
movups xmm0, xmmword [ebp - 0xc0]
movups xmmword [ecx + eax + 0x10], xmm0
inc dword [esi - 4]
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x20
jb 0x1006b2e2
add edx, 4
mov dword [ebp - 0x38], edx
cmp edx, dword [ebp - 0x48]
jb 0x1006b2d0
mov eax, dword [esi - 8]
test eax, eax
je 0x1006b3e5
push eax
mov dword [esi - 0xc], 0
mov dword [esi - 0x10], 0
call fcn.10079140
add esp, 4
mov dword [esi - 8], 0
add esi, 0x54
sub dword [ebp - 0x30], 1
jne 0x1006b270
mov esi, dword [ebp - 0x3c]
mov edi, dword [ebp - 0x34]
jmp 0x1006b3ff
xor edi, edi
mov dword [ebp - 0x34], edi
cmp dword [ebp - 0x2c], 0
jle 0x1006b441
mov edi, dword [ebp - 0x2c]
lea eax, [esi + 0x14]
mov dword [ebp - 0x28], eax
mov esi, eax
mov eax, dword [esi]
test eax, eax
je 0x1006b433
push eax
mov dword [esi - 4], 0
mov dword [esi - 8], 0
call fcn.10079140
add esp, 4
mov dword [esi], 0
add esi, 0x18
sub edi, 1
jne 0x1006b410
mov esi, dword [ebp - 0x3c]
mov edi, dword [ebp - 0x34]
test esi, esi
je 0x1006b46a
push esi
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x88], 0
call fcn.10079140
add esp, 4
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x80], eax
xor eax, eax
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0x38], eax
mov dword [ebp - 0xa8], eax
mov byte [ebp - 4], 6
test edi, edi
jle 0x1006b4bf
cmp edi, 8
mov esi, edi
mov ecx, 8
cmovl esi, ecx
test esi, esi
jle 0x1006b4bf
mov eax, esi
shl eax, 4
push eax
call fcn.10079110
add esp, 4
mov dword [ebp - 0x38], eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xac], esi
mov dword [ebp - 0xb0], edi
shl edi, 4
push edi
push 0
push eax
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x74], eax
push 0x40000
mov byte [ebp - 4], 7
call fcn.10079110
push 0x20
mov esi, eax
call fcn.10079110
movss xmm1, dword [0x1019b9cc]
mov ecx, 1
mov dword [ebp - 0x34], eax
xor edi, edi
mov dword [ebp - 0x74], eax
add esp, 0x14
mov dword [eax], esi
mov edx, 8
mov dword [ebp - 0x58], ecx
xor eax, eax
mov dword [ebp - 0x7c], ecx
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x78], edx
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x20], eax
test ecx, ecx
jle 0x1006b810
mov esi, dword [ebp - 0x40]
xor edx, edx
add esi, 0x18
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x48], ecx
mov ecx, dword [ebx + 0xc]
mov ecx, dword [ecx + 0x54]
add ecx, edx
mov edx, dword [esi + 0x20]
test edx, edx
je 0x1006b7ef
add dword [ebp - 0x20], edx
shl eax, 4
add eax, dword [ebp - 0x38]
mov dword [esi + 0x10], eax
movss xmm0, dword [ecx + 0x44]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x1006b58a
push ecx
lea eax, [ebp - 0x200]
movss dword [esp], xmm0
push eax
mov byte [ebp - 0x19], 1
call fcn.100860d0
add esp, 8
jmp 0x1006b58e
mov byte [ebp - 0x19], 0
cmp dword [esi + 0x30], 0
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x50], 0
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x5c], eax
jle 0x1006b7ec
xor ecx, ecx
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x60], ecx
mov edi, dword [esi + 0x38]
add edi, ecx
push dword [edi + 0x18]
push dword [esi]
call fcn.100d15a0
add esp, 8
test eax, eax
je 0x1006b7cc
push dword [esi + 8]
push eax
push dword [esi]
call fcn.100d1ee0
add esp, 0xc
test eax, eax
jne 0x1006b7cc
test byte [esi + 4], 0x20
mov eax, dword [esi]
mov eax, dword [eax + 0x54]
mov dword [ebp - 0x30], eax
je 0x1006b5fe
push eax
call fcn.100d9290
mov eax, dword [ebp - 0x30]
add esp, 4
test byte [esi + 4], 0x40
je 0x1006b60d
push eax
call fcn.100d9380
add esp, 4
mov eax, dword [ebp - 0x30]
add eax, 0x18
je 0x1006b7cc
mov eax, dword [esi]
push dword [esi + 0xc]
mov eax, dword [eax + 0x54]
push eax
mov dword [ebp - 0x28], eax
call fcn.100d41a0
add esp, 8
test eax, eax
jne 0x1006b7cc
mov eax, dword [esi]
mov ecx, dword [eax + 0x54]
mov eax, dword [ecx + 0x50]
add ecx, 0x4c
mov dword [edi], eax
mov dword [ebp - 0x6c], ecx
mov eax, dword [ecx]
mov dword [edi + 4], eax
mov eax, dword [esi]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x64]
mov dword [edi + 8], eax
mov eax, dword [esi]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x68]
neg eax
mov dword [edi + 0xc], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x40]
add eax, 0x3f
and eax, 0xffffffc0
cdq
and edx, 0x3f
add eax, edx
sar eax, 6
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x10], xmm0
cmp byte [ecx + 0x12], 7
sete al
mov byte [edi + 0x14], al
test ecx, ecx
je 0x1006b7cc
mov eax, dword [edi + 4]
imul eax, dword [edi]
mov edx, dword [ebp - 0x2c]
shl eax, 2
mov dword [ebp - 0x30], eax
add eax, edx
cmp eax, 0x40000
jle 0x1006b754
xor eax, eax
push 0x40000
mov dword [ebp - 0x2c], eax
call fcn.10079110
mov ecx, dword [ebp - 0x58]
add esp, 4
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x78]
cmp ecx, eax
jne 0x1006b73f
inc ecx
test eax, eax
je 0x1006b6e5
cdq
sub eax, edx
mov edx, dword [ebp - 0x78]
sar eax, 1
add eax, edx
jmp 0x1006b6ed
mov edx, dword [ebp - 0x78]
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
mov dword [ebp - 0x68], ecx
cmp ecx, edx
jle 0x1006b73c
lea eax, [ecx*4]
push eax
call fcn.10079110
mov edx, dword [ebp - 0x34]
add esp, 4
mov dword [ebp - 0x28], eax
test edx, edx
je 0x1006b730
mov ecx, dword [ebp - 0x58]
shl ecx, 2
push ecx
push edx
push eax
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [ebp - 0x34]
push edx
call fcn.10079140
mov eax, dword [ebp - 0x28]
add esp, 0x10
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x64]
mov dword [edx + ecx*4], eax
inc ecx
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x7c], ecx
jmp 0x1006b757
mov ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax + ecx*4 - 4]
lea eax, [ebp - 0x200]
add ecx, edx
add edx, dword [ebp - 0x30]
mov dword [ebp - 0x2c], edx
xor edx, edx
cmp byte [ebp - 0x19], dl
mov dword [edi + 0x1c], ecx
cmove eax, edx
push eax
push dword [edi]
push ecx
push dword [ebp - 0x6c]
lea ecx, [esi - 0x18]
call fcn.1006a8d0
mov eax, dword [ebp - 0x5c]
movzx ecx, word [edi]
movzx edx, ax
mov eax, dword [esi + 0x10]
add cx, dx
mov esi, dword [ebp - 0x4c]
mov word [eax + esi + 4], cx
movzx ecx, word [edi + 4]
mov esi, dword [ebp - 0x24]
add cx, dx
mov edx, dword [ebp - 0x4c]
mov edi, dword [ebp - 0x18]
mov eax, dword [esi + 0x10]
mov word [eax + edx + 6], cx
mov eax, dword [esi + 0x10]
movzx ecx, word [eax + edx + 6]
movzx eax, word [eax + edx + 4]
imul ecx, eax
add edi, ecx
mov dword [ebp - 0x18], edi
jmp 0x1006b7cf
mov edi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x60]
inc eax
add dword [ebp - 0x4c], 0x10
add ecx, 0x20
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x60], ecx
cmp eax, dword [esi + 0x30]
jl 0x1006b5b4
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x44]
add esi, 0x54
movss xmm1, dword [0x1019b9cc]
sub edx, 0xffffff80
sub dword [ebp - 0x48], 1
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x44], edx
jne 0x1006b542
movd xmm0, edi
xorps xmm1, xmm1
cvtdq2ps xmm0, xmm0
cvtps2pd xmm0, xmm0
ucomisd xmm1, xmm0
ja 0x1006b829
sqrtsd xmm0, xmm0
jmp 0x1006b82e
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
mov edi, dword [ebx + 0xc]
cvtsd2ss xmm0, xmm0
mov esi, dword [edi + 8]
mov dword [edi + 0x20], 0
cvttss2si eax, xmm0
inc eax
test esi, esi
jg 0x1006b883
movd xmm0, eax
cvtdq2ps xmm0, xmm0
comiss xmm0, dword [0x11135a28]
jb 0x1006b85f
mov esi, 0x1000
jmp 0x1006b883
comiss xmm0, dword [0x11135a24]
jb 0x1006b86f
mov esi, 0x800
jmp 0x1006b883
comiss xmm0, dword [0x11135a20]
mov esi, 0x200
mov eax, 0x400
cmovae esi, eax
mov dword [edi + 0x1c], esi
xor eax, eax
sub esi, dword [edi + 0xc]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x98], eax
mov byte [ebp - 4], 8
test esi, esi
jle 0x1006b8dd
cmp esi, 8
mov edi, esi
mov ecx, 8
cmovl edi, ecx
test edi, edi
jle 0x1006b8da
lea eax, [edi*8]
push eax
call fcn.10079110
add esp, 4
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x9c], edi
mov edi, dword [ebx + 0xc]
push esi
push eax
mov eax, dword [edi + 0x1c]
mov ecx, 0x8000
sub ecx, dword [edi + 0xc]
sub eax, dword [edi + 0xc]
push ecx
push eax
lea eax, [ebp - 0x100]
mov dword [ebp - 0xa0], esi
push eax
call fcn.1006c420
lea eax, [ebp - 0x100]
push eax
push edi
call fcn.10086130
mov eax, dword [ebp - 0x54]
add esp, 0x1c
test eax, eax
jle 0x1006b97d
mov esi, dword [ebp - 0x40]
add esi, 0x38
mov dword [ebp - 0x48], eax
mov eax, dword [esi]
test eax, eax
je 0x1006b971
push eax
push dword [esi - 0x10]
lea eax, [ebp - 0x100]
push eax
call fcn.1006c590
xor edi, edi
add esp, 0xc
cmp dword [esi], edi
jle 0x1006b971
xor edx, edx
mov eax, dword [esi - 0x10]
cmp dword [edx + eax + 0xc], 0
je 0x1006b969
movzx ecx, word [edx + eax + 0xa]
movzx eax, word [edx + eax + 6]
add ecx, eax
mov eax, dword [ebx + 0xc]
cmp dword [eax + 0x20], ecx
cmovge ecx, dword [eax + 0x20]
mov dword [eax + 0x20], ecx
inc edi
add edx, 0x10
cmp edi, dword [esi]
jl 0x1006b946
add esi, 0x54
sub dword [ebp - 0x48], 1
jne 0x1006b925
mov edi, dword [ebx + 0xc]
test byte [edi], 1
mov eax, dword [edi + 0x20]
jne 0x1006b9aa
lea ecx, [eax - 1]
mov eax, ecx
sar eax, 1
or ecx, eax
mov eax, ecx
sar eax, 2
or ecx, eax
mov eax, ecx
sar eax, 4
or ecx, eax
mov eax, ecx
sar eax, 8
or ecx, eax
mov eax, ecx
sar eax, 0x10
or eax, ecx
movss xmm2, dword [0x1019b9cc]
lea esi, [eax + 1]
mov eax, dword [edi + 0x1c]
movaps xmm1, xmm2
mov dword [edi + 0x20], esi
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm1, xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
imul esi, eax
cmp byte [ebp - 0x11], 0
divss xmm2, xmm0
movss dword [edi + 0x24], xmm1
movss dword [edi + 0x28], xmm2
je 0x1006b9f5
shl esi, 2
push esi
call fcn.10079110
mov dword [edi + 0x18], eax
jmp 0x1006b9fe
push esi
call fcn.10079110
mov dword [edi + 0x14], eax
push esi
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [ebp - 0x54]
xor al, al
add esp, 0x10
mov byte [ebp - 0x19], al
test edx, edx
jle 0x1006bd3d
mov eax, dword [ebp - 0x40]
xor ecx, ecx
add eax, 8
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x28], edx
nop dword [eax + eax]
cmp dword [eax + 0x30], 0
je 0x1006bd22
mov esi, dword [edi + 0x54]
sub esp, 8
movss xmm0, dword [eax]
add esi, ecx
movss xmm1, dword [eax - 4]
mov dword [ebp - 0x6c], esi
movss dword [esp + 4], xmm0
mov ecx, dword [esi + 0x7c]
movss dword [esp], xmm1
push esi
push ecx
push edi
mov dword [ebp - 0x48], ecx
call fcn.10086680
mov eax, dword [ebp - 0x48]
add esp, 0x14
movss xmm2, dword [esi + 0x28]
movss dword [ebp - 0x24], xmm2
mov dword [ebp - 0x64], 0
movss xmm0, dword [eax + 0x48]
addss xmm0, dword [0x1019b9c8]
cvttss2si eax, xmm0
movd xmm1, eax
mov eax, dword [ebp - 0x30]
cvtdq2ps xmm1, xmm1
cmp dword [eax + 0x30], 0
addss xmm1, dword [esi + 0x2c]
mov esi, dword [edi + 0xc]
mov dword [ebp - 0x2c], esi
movss dword [ebp - 0x4c], xmm1
jle 0x1006bd15
xor ecx, ecx
xor edx, edx
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x50], edx
nop dword [eax]
mov edi, dword [eax + 0x48]
mov eax, dword [eax + 0x20]
add edi, edx
add eax, ecx
cmp word [eax + 4], 0
jne 0x1006badc
cmp word [eax + 6], 0
je 0x1006bcf1
movzx edx, word [eax + 8]
sub esp, 0x24
movd xmm0, dword [edi + 8]
add edx, esi
movzx esi, word [eax + 0xa]
mov eax, dword [edi]
add esi, dword [ebp - 0x2c]
movd xmm7, dword [edi + 0xc]
mov ecx, dword [edi + 4]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x44], esi
mov esi, dword [ebx + 0xc]
mov dword [ebp - 0x20], edx
movd xmm6, eax
add eax, edx
addss xmm0, xmm2
movd xmm4, edx
cvtdq2ps xmm7, xmm7
cvtdq2ps xmm6, xmm6
addss xmm7, xmm1
movss dword [ebp - 0x5c], xmm0
movd xmm1, dword [esi + 0x1c]
addss xmm6, xmm0
movd xmm0, dword [esi + 0x20]
mov esi, dword [ebp - 0x44]
cvtdq2ps xmm1, xmm1
movd xmm2, eax
lea eax, [ecx + esi]
cvtdq2ps xmm4, xmm4
cvtdq2ps xmm2, xmm2
divss xmm4, xmm1
divss xmm2, xmm1
cvtdq2ps xmm0, xmm0
movd xmm1, eax
movd xmm3, esi
cvtdq2ps xmm1, xmm1
movzx eax, word [edi + 0x18]
mov esi, dword [ebp - 0x48]
cvtdq2ps xmm3, xmm3
divss xmm1, xmm0
divss xmm3, xmm0
movss xmm0, dword [edi + 0x10]
movd xmm5, ecx
mov ecx, esi
movss dword [esp + 0x20], xmm0
movss xmm0, dword [ebp - 0x5c]
cvtdq2ps xmm5, xmm5
movss dword [esp + 0x1c], xmm1
movss dword [esp + 0x18], xmm2
addss xmm5, xmm7
movss dword [esp + 0x14], xmm3
movss dword [esp + 0x10], xmm4
movss dword [esp + 0xc], xmm5
movss dword [esp + 8], xmm6
movss dword [esp + 4], xmm7
movss dword [esp], xmm0
push eax
push dword [ebp - 0x6c]
call fcn.10083270
cmp byte [edi + 0x14], 0
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x28]
lea eax, [eax + eax*4]
je 0x1006bbda
or dword [ecx + eax*8 - 0x28], 1
mov byte [ebp - 0x19], 1
mov eax, dword [ebx + 0xc]
mov ecx, dword [edi + 0x1c]
mov edx, dword [edi]
mov dword [ebp - 0x18], ecx
mov esi, dword [eax + 0x1c]
mov eax, esi
mov ecx, dword [ebx + 0xc]
imul eax, dword [ebp - 0x44]
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x44], 0
cmp dword [ecx + 0x14], 0
je 0x1006bc66
add eax, dword [ecx + 0x14]
add eax, dword [ebp - 0x20]
cmp dword [edi + 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
jle 0x1006bce4
lea esi, [edx*4]
mov dword [ebp - 0x70], esi
lea esi, [ecx + 3]
mov dword [ebp - 0x18], esi
xor ecx, ecx
test edx, edx
jle 0x1006bc49
nop dword [eax]
mov edx, dword [ebp - 0x20]
lea esi, [esi + 4]
mov al, byte [esi - 4]
mov byte [edx + ecx], al
inc ecx
mov edx, dword [edi]
cmp ecx, edx
jl 0x1006bc30
mov eax, dword [ebp - 0x20]
mov esi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x44]
add eax, dword [ebp - 0x5c]
inc ecx
add esi, dword [ebp - 0x70]
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x18], esi
cmp ecx, dword [edi + 4]
jl 0x1006bc27
jmp 0x1006bce4
mov ecx, dword [ebp - 0x20]
add ecx, eax
cmp dword [edi + 4], 0
mov eax, dword [ebx + 0xc]
mov eax, dword [eax + 0x18]
lea eax, [eax + ecx*4]
mov dword [ebp - 0x20], eax
jle 0x1006bce4
lea ecx, [esi*4]
mov dword [ebp - 0x5c], ecx
lea ecx, [edx*4]
mov dword [ebp - 0xa4], ecx
mov ecx, dword [ebp - 0x18]
xor esi, esi
test edx, edx
jle 0x1006bcc9
mov ecx, eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x70], eax
nop dword [eax + eax]
mov eax, dword [eax + ecx]
lea ecx, [ecx + 4]
mov dword [ecx - 4], eax
inc esi
mov edx, dword [edi]
mov eax, dword [ebp - 0x70]
cmp esi, edx
jl 0x1006bcb0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x44]
add eax, dword [ebp - 0x5c]
inc esi
add ecx, dword [ebp - 0xa4]
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x18], ecx
cmp esi, dword [edi + 4]
jl 0x1006bc97
mov esi, dword [ebp - 0x2c]
movss xmm2, dword [ebp - 0x24]
movss xmm1, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x30]
inc ecx
add dword [ebp - 0x50], 0x20
add dword [ebp - 0x60], 0x10
mov edx, dword [ebp - 0x50]
cmp ecx, dword [eax + 0x30]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x60]
jl 0x1006bac0
mov edi, dword [ebx + 0xc]
mov ecx, dword [ebp - 0x68]
mov edx, dword [ebp - 0x28]
mov dword [eax + 0x20], 0
add eax, 0x54
sub ecx, 0xffffff80
sub edx, 1
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x28], edx
jne 0x1006ba30
mov al, byte [ebp - 0x19]
mov byte [edi + 0x12], al
xor esi, esi
mov edi, dword [ebp - 0x58]
test edi, edi
jle 0x1006bd63
nop dword [eax]
mov eax, dword [ebp - 0x34]
push dword [eax + esi*4]
call fcn.10079140
inc esi
add esp, 4
cmp esi, edi
jl 0x1006bd50
mov edi, dword [ebp - 0x54]
test edi, edi
jle 0x1006bdb9
mov esi, dword [ebp - 0x40]
add esi, 0x18
mov eax, dword [esi + 0x38]
mov byte [ebp - 4], 9
test eax, eax
je 0x1006bd84
push eax
call fcn.10079140
add esp, 4
mov eax, dword [esi + 0x2c]
mov byte [ebp - 4], 0xa
test eax, eax
je 0x1006bd98
push eax
call fcn.10079140
add esp, 4
mov eax, dword [esi]
mov byte [ebp - 4], 8
test eax, eax
je 0x1006bdb1
push eax
call fcn.100d10e0
add esp, 4
mov dword [esi], 0
add esi, 0x54
sub edi, 1
jne 0x1006bd70
mov esi, dword [ebp - 0x40]
test esi, esi
je 0x1006bde8
push esi
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x94], 0
call fcn.10079140
add esp, 4
xor esi, esi
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x8c], esi
push dword [ebx + 0xc]
call fcn.10085db0
add esp, 4
mov byte [ebp - 0x11], 1
mov eax, dword [ebp - 0x98]
mov byte [ebp - 4], 0xb
test eax, eax
je 0x1006be0e
push eax
call fcn.10079140
add esp, 4
mov eax, dword [ebp - 0x34]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x1006be22
push eax
call fcn.10079140
add esp, 4
mov eax, dword [ebp - 0x38]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x1006be36
push eax
call fcn.10079140
add esp, 4
mov esi, dword [ebp - 0x3c]
mov byte [ebp - 4], 0xe
test esi, esi
je 0x1006be4a
push esi
call fcn.10079140
add esp, 4
mov eax, dword [ebp - 0x40]
mov dword [ebp - 4], 0xf
test eax, eax
je 0x1006be61
push eax
call fcn.10079140
add esp, 4
mov ecx, dword [ebp - 0xc]
mov al, byte [ebp - 0x11]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret