Function at 0x1016daa0
Capabilities:
Access peb ldr_data
Get ntdll base address
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0xa8
push esi
mov esi, dword [0x1027efb4]
push edi
mov byte [esp + 0xe], dl
mov dword [esp + 0x50], esi
mov eax, dword [esi + 0x1cdc]
mov byte [eax + 0x8c], 1
mov eax, dword [esi + 0x1cdc]
mov dword [esp + 0x54], eax
cmp byte [eax + 0x8f], 0
jne 0x1016e995
mov ecx, dword ds:[eax + 0xc4]
xor edx, edx
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, str.Save_Selected
call fcn.1012f0e0
mov edi, eax
add esp, 4
cmp dword [esi + 0x1d14], edi
jne 0x1016db18
mov dword [esi + 0x1d18], edi
nop dword [eax + eax]
cmp dword [esi + 0x1d4c], edi
jne 0x1016db2f
mov byte [esi + 0x1d50], 1
mov ecx, str.Save_Selected
mov eax, ecx
cmp eax, 0xffffffff
jae 0x1016db56
nop dword [eax + eax]
mov dl, byte [ecx]
test dl, dl
je 0x1016db56
cmp dl, 0x23
jne 0x1016db50
cmp byte [ecx + 1], dl
je 0x1016db56
inc ecx
cmp ecx, 0xffffffff
jb 0x1016db40
movss xmm4, dword [esi + 0x1a70]
movss dword [esp + 0x2c], xmm4
cmp ecx, str.Save_Selected
jne 0x1016db71
xorps xmm3, xmm3
jmp 0x1016dbc1
movss xmm3, dword [0x1022ce20]
lea eax, [esp + 0x18]
push 0
push ecx
push str.Save_Selected
push ecx
mov ecx, dword [esi + 0x1a6c]
movaps xmm2, xmm4
mov dword [esp], 0xbf800000
push eax
call fcn.10149480
movss xmm0, dword [esp + 0x18]
addss xmm0, dword [0x1022cbac]
movss xmm4, dword [esp + 0x1c]
movss dword [esp + 0x2c], xmm4
cvttss2si eax, xmm0
movd xmm3, eax
cvtdq2ps xmm3, xmm3
mov eax, dword [esp + 0x54]
lea ecx, [esp + 0x18]
movss xmm2, dword [esi + 0x1554]
mulss xmm2, dword [0x1022cbf0]
mov dword [esp + 0x1c], 0x41f00000
movss xmm0, dword [eax + 0xd0]
subss xmm0, dword [eax + 0xc]
movss xmm1, dword [eax + 0x14]
addss xmm2, xmm4
push dword [esp + 0x1c]
movss dword [esp + 0x5c], xmm3
subss xmm1, xmm0
subss xmm1, dword [0x1022cc70]
movss dword [esp + 0x1c], xmm1
movss xmm1, dword [esi + 0x1550]
mulss xmm1, dword [0x1022cbf0]
push dword [esp + 0x1c]
addss xmm1, xmm3
call fcn.10122b00
mov eax, dword [esp + 0x5c]
movss xmm1, dword [eax + 0xd4]
movss xmm3, dword [eax + 0xd0]
movaps xmm0, xmm1
addss xmm0, dword [esp + 0x24]
movaps xmm2, xmm3
movss dword [esp + 0x4c], xmm1
addss xmm2, dword [esp + 0x20]
movss xmm1, dword [esi + 0x1554]
movss dword [esp + 0x48], xmm3
movss dword [esp + 0x54], xmm0
movss dword [esp + 0x50], xmm2
call fcn.101232c0
add esp, 4
lea ecx, [esp + 0x44]
mov edx, edi
push 0
call fcn.101230a0
add esp, 8
test al, al
je 0x1016e995
push 0
lea eax, [esp + 0x2e]
mov edx, edi
push eax
lea eax, [esp + 0x33]
push eax
lea ecx, [esp + 0x4c]
call fcn.10166f80
mov ecx, dword [0x1027db70]
add esp, 0xc
mov edi, dword [0x1027efb4]
mov byte [esp + 0xf], al
mov eax, dword fs:[0x2c]
movups xmm0, xmmword [edi + 0x181c]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x1028a190]
movaps xmmword [esp + 0x60], xmm0
movaps xmmword [esp + 0x70], xmm0
cmp eax, dword [ecx + 4]
jg 0x1016e99b
jmp 0x1016dcf4
mov edi, dword [0x1027efb4]
cmp byte [esp + 0xf], 0
jne 0x1016dd4c
cmp byte [esp + 0xe], 0
je 0x1016dd10
mov eax, dword [0x1027c640]
cmp dword [eax + 0x10c], 2
jg 0x1016dd4c
cmp byte [esp + 0x2a], 0
je 0x1016dd37
mov ecx, str.modalsave
nop dword [eax]
call fcn.10121c20
test al, al
jne 0x1016dd37
movups xmm0, xmmword [edi + 0x180c]
movups xmmword [esp + 0x70], xmm0
jmp 0x1016dd5c
cmp byte [esp + 0x2b], 0
je 0x1016dd5c
movups xmm0, xmmword [edi + 0x17fc]
movups xmmword [esp + 0x70], xmm0
jmp 0x1016dd5c
mov ecx, str.modalsave
call fcn.10121b80
mov edi, dword [0x1027efb4]
xor esi, esi
nop
movss xmm0, dword [esi + 0x10289f50]
sub esp, 8
subss xmm0, dword [esp + esi + 0x78]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.100b0d5f
movss xmm1, dword [esi + 0x10289f50]
add esp, 8
movss xmm2, dword [esp + esi + 0x70]
comiss xmm2, xmm1
fstp dword [esp + 0x10]
jbe 0x1016ddbd
movss xmm0, dword [esp + 0x10]
mulss xmm0, dword [edi + 0x18]
mulss xmm0, dword [0x1022cc58]
addss xmm0, xmm1
minss xmm0, xmm2
movss dword [esi + 0x10289f50], xmm0
jmp 0x1016dde5
comiss xmm1, xmm2
jbe 0x1016dde5
movss xmm0, dword [esp + 0x10]
mulss xmm0, dword [edi + 0x18]
mulss xmm0, dword [0x1022cc68]
subss xmm1, xmm0
maxss xmm1, xmm2
movss dword [esi + 0x10289f50], xmm1
add esi, 4
cmp esi, 0xc
jl 0x1016dd60
mov eax, dword [esp + 0x50]
mov ecx, 0x10289f50
movss xmm7, dword [eax + 0x1558]
call fcn.1012cf20
mov ecx, dword [esp + 0x48]
mov esi, eax
mov edx, dword [esp + 0x4c]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x30], ecx
mov ecx, dword [0x1027efb4]
push 0
push ecx
movss dword [esp], xmm7
mov eax, dword [ecx + 0x1cdc]
lea ecx, [esp + 0x20]
push esi
push ecx
lea ecx, [esp + 0x40]
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x54]
push ecx
mov ecx, dword [eax + 0x284]
mov dword [esp + 0x48], edx
call fcn.1014a000
mov eax, dword fs:[0x2c]
mov ecx, dword [0x1027db70]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x10289f28]
cmp eax, dword [ecx + 4]
jg 0x1016e9d3
mov esi, dword [0x1027efb4]
xor edx, edx
mov eax, dword [esi + 0x1cdc]
mov ecx, dword [eax + 0xc4]
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, str.Save_Selected
call fcn.1012f0e0
add esp, 4
mov dword [esp + 0x10], eax
cmp dword [esi + 0x1d14], eax
jne 0x1016deb0
mov dword [esi + 0x1d18], eax
cmp dword [esi + 0x1d4c], eax
jne 0x1016debf
mov byte [esi + 0x1d50], 1
mov dword [esp + 0x14], eax
mov ecx, 0x1028a060
mov eax, dword [esp + 0x50]
movups xmm0, xmmword [eax + 0x15dc]
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x1c]
push eax
movups xmmword [esp + 0x38], xmm0
call fcn.1004cf40
mov esi, dword [esp + 0x20]
mov ecx, dword [0x1028a060]
cmp byte [esi + 0xd], 0
jne 0x1016df05
mov eax, dword ds:[esp + 0x10]
cmp eax, dword [esi + 0x10]
jae 0x1016df07
mov esi, ecx
cmp esi, ecx
jne 0x1016df52
lea eax, ds:[esp + 0x30]
mov ecx, 0x1028a060
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x20]
push eax
call fcn.10041740
lea eax, [esp + 0x14]
mov ecx, 0x1028a060
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.1004cf40
mov esi, dword [esp + 0x20]
cmp byte [esi + 0xd], 0
jne 0x1016df4c
mov eax, dword [esp + 0x14]
cmp eax, dword [esi + 0x10]
jae 0x1016df52
mov esi, dword [0x1028a060]
movss xmm0, dword [0x10289f50]
sub esp, 8
movss xmm1, dword [esp + 0x3c]
addss xmm1, dword [esp + 0x38]
addss xmm0, dword [0x10289f54]
addss xmm1, dword [esp + 0x40]
addss xmm0, dword [0x10289f58]
divss xmm1, dword [0x1022cc14]
divss xmm0, dword [0x1022cc14]
subss xmm1, xmm0
cvtps2pd xmm0, xmm1
movsd qword [esp], xmm0
call fcn.100b0d5f
movss xmm0, dword [0x1022cb34]
add esp, 8
movss xmm5, dword [0x1022cbb4]
fstp dword [esp + 0x10]
comiss xmm0, dword [esp + 0x10]
jbe 0x1016dfe2
movaps xmm2, xmm5
movaps xmm3, xmm5
subss xmm2, dword [esp + 0x30]
subss xmm3, dword [esp + 0x34]
movaps xmm6, xmm5
subss xmm6, dword [esp + 0x38]
jmp 0x1016dff4
movss xmm2, dword [esp + 0x30]
movss xmm3, dword [esp + 0x34]
movss xmm6, dword [esp + 0x38]
movss xmm1, dword [esi + 0x14]
comiss xmm2, xmm1
movss xmm4, dword [0x1022cc38]
jbe 0x1016e01e
movss xmm0, dword [edi + 0x18]
mulss xmm0, xmm4
addss xmm0, xmm1
minss xmm0, xmm2
movss dword [esi + 0x14], xmm0
jmp 0x1016e039
comiss xmm1, xmm2
jbe 0x1016e039
movss xmm0, dword [edi + 0x18]
mulss xmm0, xmm4
subss xmm1, xmm0
maxss xmm1, xmm2
movss dword [esi + 0x14], xmm1
movss xmm1, dword [esi + 0x18]
comiss xmm3, xmm1
jbe 0x1016e056
movss xmm2, dword [edi + 0x18]
mulss xmm2, xmm4
addss xmm2, xmm1
minss xmm2, xmm3
jmp 0x1016e06f
comiss xmm1, xmm3
movaps xmm2, xmm1
jbe 0x1016e074
movss xmm0, dword [edi + 0x18]
mulss xmm0, xmm4
subss xmm2, xmm0
maxss xmm2, xmm3
movss dword [esi + 0x18], xmm2
movss xmm3, dword [esi + 0x1c]
comiss xmm6, xmm3
jbe 0x1016e091
movss xmm1, dword [edi + 0x18]
mulss xmm1, xmm4
addss xmm1, xmm3
minss xmm1, xmm6
jmp 0x1016e0aa
comiss xmm3, xmm6
movaps xmm1, xmm3
jbe 0x1016e0af
movss xmm0, dword [edi + 0x18]
mulss xmm0, xmm4
subss xmm1, xmm0
maxss xmm1, xmm6
movss dword [esi + 0x1c], xmm1
movss xmm6, dword [esi + 0x20]
movss xmm7, dword [esp + 0x3c]
comiss xmm7, xmm6
jbe 0x1016e0d2
movss xmm3, dword [edi + 0x18]
mulss xmm3, xmm4
addss xmm3, xmm6
minss xmm3, xmm7
jmp 0x1016e0eb
comiss xmm6, xmm7
movaps xmm3, xmm6
jbe 0x1016e0f0
movss xmm0, dword [edi + 0x18]
mulss xmm0, xmm4
subss xmm3, xmm0
maxss xmm3, xmm7
movss dword [esi + 0x20], xmm3
movss xmm6, dword [esi + 0x14]
xorps xmm0, xmm0
comiss xmm0, xmm6
jbe 0x1016e102
xorps xmm4, xmm4
jmp 0x1016e109
movaps xmm4, xmm5
minss xmm4, xmm6
comiss xmm0, xmm2
movss xmm6, dword [0x1022cdac]
movss xmm7, dword [0x1022cb6c]
mulss xmm4, xmm6
addss xmm4, xmm7
cvttss2si edx, xmm4
jbe 0x1016e12f
xorps xmm4, xmm4
jmp 0x1016e136
movaps xmm4, xmm5
minss xmm4, xmm2
mulss xmm4, xmm6
addss xmm4, xmm7
cvttss2si eax, xmm4
shl eax, 8
or edx, eax
comiss xmm0, xmm1
jbe 0x1016e151
xorps xmm2, xmm2
jmp 0x1016e158
movaps xmm2, xmm5
minss xmm2, xmm1
mulss xmm2, xmm6
addss xmm2, xmm7
cvttss2si eax, xmm2
shl eax, 0x10
or edx, eax
comiss xmm0, xmm3
jbe 0x1016e173
xorps xmm5, xmm5
jmp 0x1016e177
minss xmm5, xmm3
mulss xmm5, xmm6
xor ecx, ecx
addss xmm5, xmm7
cvttss2si eax, xmm5
shl eax, 0x18
or edx, eax
call fcn.10131660
movss xmm1, dword [esp + 0x40]
lea eax, [esp + 0x48]
movss xmm0, dword [esp + 0x44]
lea edx, [esp + 0x40]
addss xmm1, dword [esp + 0x48]
addss xmm0, dword [esp + 0x4c]
movss xmm4, dword [0x1022cbf0]
movss xmm3, dword [esp + 0x58]
movss xmm2, dword [esp + 0x2c]
divss xmm3, xmm4
push ecx
push str.Save_Selected
push eax
lea ecx, [esp + 0x24]
divss xmm2, xmm4
divss xmm1, xmm4
divss xmm0, xmm4
subss xmm1, xmm3
subss xmm0, xmm2
movss dword [esp + 0x24], xmm1
movss dword [esp + 0x28], xmm0
call fcn.1012c3e0
mov esi, dword [0x1027efb4]
add esp, 0xc
mov eax, dword [esi + 0x1dd4]
mov ecx, dword [esi + 0x1ddc]
lea edx, [eax + eax*4]
mov eax, dword [ecx + edx*4 - 0x14]
movups xmm0, xmmword [ecx + edx*4 - 0x10]
add eax, eax
movups xmmword [esi + eax*8 + 0x15dc], xmm0
movzx eax, byte [esp + 0xe]
dec dword [esi + 0x1dd4]
movss xmm2, dword [esi + 0x1a70]
movss dword [esp + 0x10], xmm2
mov eax, dword [eax*4 + 0x1022b140]
test eax, eax
jne 0x1016e24b
xorps xmm0, xmm0
jmp 0x1016e295
movss xmm3, dword [0x1022ce20]
push 0
push 0
push eax
push ecx
mov ecx, dword [esi + 0x1a6c]
lea eax, [esp + 0x28]
mov dword [esp], 0xbf800000
push eax
call fcn.10149480
movss xmm0, dword [esp + 0x18]
addss xmm0, dword [0x1022cbac]
movss xmm2, dword [esp + 0x1c]
movss dword [esp + 0x10], xmm2
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm2, dword [0x1022cccc]
or dword [esi + 0x1d60], 2
movss dword [esp + 0x2c], xmm0
addss xmm0, dword [0x1022cc78]
push ecx
mov ecx, str.modalsave
movss dword [esi + 0x1d84], xmm2
mov dword [esi + 0x1d68], 1
movss dword [esi + 0x1d80], xmm0
call fcn.10121580
add esp, 4
test al, al
je 0x1016e995
mov esi, dword [0x1027efb4]
mov ecx, dword [0x1027db70]
mov edi, dword [esp + 0x50]
mov eax, dword [esi + 0x1cdc]
mov byte [eax + 0x8c], 1
mov eax, dword [esi + 0x1cdc]
mov dword [esp + 0x18], eax
movss xmm2, dword [eax + 0xc]
movss xmm3, dword [eax + 0x10]
movaps xmm1, xmm2
addss xmm1, dword [eax + 0x14]
movaps xmm0, xmm3
movss dword [esp + 0x8c], xmm2
addss xmm0, dword [eax + 0x18]
mov eax, dword fs:[0x2c]
movss dword [esp + 0x30], xmm3
movss dword [esp + 0x88], xmm1
movss dword [esp + 0x70], xmm2
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x1028a070]
movss dword [esp + 0x7c], xmm0
movups xmm0, xmmword [edi + 0x15dc]
movss dword [esp + 0x74], xmm3
movss dword [esp + 0x78], xmm1
movups xmmword [esp + 0x60], xmm0
cmp eax, dword [ecx + 4]
jg 0x1016ea2d
nop
jmp 0x1016e388
mov esi, dword [0x1027efb4]
mov eax, dword [esi + 0x1cdc]
mov ecx, str.Save_Selected
mov edx, dword [eax + 0xc4]
mov eax, dword [eax + 0xcc]
push dword [eax + edx*4 - 4]
xor edx, edx
call fcn.1012f0e0
add esp, 4
mov dword [esp + 0x58], eax
cmp dword [esi + 0x1d14], eax
jne 0x1016e3bf
mov dword [esi + 0x1d18], eax
nop
cmp dword [esi + 0x1d4c], eax
jne 0x1016e3cf
mov byte [esi + 0x1d50], 1
mov dword [esp + 0x14], eax
mov ecx, 0x1028a0f0
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x44]
push eax
call fcn.1004cf40
mov esi, dword [esp + 0x48]
mov ecx, dword [0x1028a0f0]
cmp byte [esi + 0xd], 0
jne 0x1016e405
mov eax, dword ds:[esp + 0x58]
cmp eax, dword [esi + 0x10]
jae 0x1016e407
mov esi, ecx
cmp esi, ecx
jne 0x1016e452
lea eax, ds:[esp + 0x60]
mov ecx, 0x1028a0f0
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x60]
push eax
call fcn.10041740
lea eax, [esp + 0x14]
mov ecx, 0x1028a0f0
push eax
lea eax, [esp + 0x44]
push eax
call fcn.1004cf40
mov esi, dword [esp + 0x48]
cmp byte [esi + 0xd], 0
jne 0x1016e44c
mov eax, dword [esp + 0x14]
cmp eax, dword [esi + 0x10]
jae 0x1016e452
mov esi, dword [0x1028a0f0]
mov eax, dword [esp + 0x54]
sub esp, 8
movss xmm1, dword [esp + 0x6c]
addss xmm1, dword [esp + 0x68]
mov eax, dword [eax + 8]
and eax, 0x4000000
or eax, 0x8000000
addss xmm1, dword [esp + 0x70]
shr eax, 0x1a
add eax, eax
divss xmm1, dword [0x1022cc14]
movss xmm0, dword [edi + eax*8 + 0x15e0]
addss xmm0, dword [edi + eax*8 + 0x15dc]
addss xmm0, dword [edi + eax*8 + 0x15e4]
divss xmm0, dword [0x1022cc14]
subss xmm1, xmm0
cvtps2pd xmm0, xmm1
movsd qword [esp], xmm0
call fcn.100b0d5f
movss xmm0, dword [0x1022cb48]
add esp, 8
movss xmm6, dword [0x1022cbb4]
fstp dword [esp + 0x58]
comiss xmm0, dword [esp + 0x58]
jbe 0x1016e4f4
movaps xmm3, xmm6
movaps xmm5, xmm6
subss xmm3, dword [esp + 0x60]
subss xmm5, dword [esp + 0x64]
movaps xmm7, xmm6
subss xmm7, dword [esp + 0x68]
jmp 0x1016e506
movss xmm3, dword [esp + 0x60]
movss xmm5, dword [esp + 0x64]
movss xmm7, dword [esp + 0x68]
mov eax, dword [0x1027efb4]
movss xmm2, dword [esi + 0x14]
comiss xmm3, xmm2
movss xmm1, dword [eax + 0x18]
movss xmm4, dword [0x1022cc38]
jbe 0x1016e538
movaps xmm0, xmm1
mulss xmm0, xmm4
addss xmm0, xmm2
minss xmm0, xmm3
movss dword [esi + 0x14], xmm0
jmp 0x1016e551
comiss xmm2, xmm3
jbe 0x1016e551
movaps xmm0, xmm1
mulss xmm0, xmm4
subss xmm2, xmm0
maxss xmm2, xmm3
movss dword [esi + 0x14], xmm2
movss xmm2, dword [esi + 0x18]
comiss xmm5, xmm2
jbe 0x1016e56c
movaps xmm3, xmm1
mulss xmm3, xmm4
addss xmm3, xmm2
minss xmm3, xmm5
jmp 0x1016e583
comiss xmm2, xmm5
movaps xmm3, xmm2
jbe 0x1016e588
movaps xmm0, xmm1
mulss xmm0, xmm4
subss xmm3, xmm0
maxss xmm3, xmm5
movss dword [esi + 0x18], xmm3
movss xmm5, dword [esi + 0x1c]
comiss xmm7, xmm5
jbe 0x1016e5a3
movaps xmm2, xmm1
mulss xmm2, xmm4
addss xmm2, xmm5
minss xmm2, xmm7
jmp 0x1016e5ba
comiss xmm5, xmm7
movaps xmm2, xmm5
jbe 0x1016e5bf
movaps xmm0, xmm1
mulss xmm0, xmm4
subss xmm2, xmm0
maxss xmm2, xmm7
movss dword [esi + 0x1c], xmm2
movss xmm5, dword [esi + 0x20]
movss xmm0, dword [esp + 0x6c]
comiss xmm0, xmm5
jbe 0x1016e5e5
mulss xmm1, xmm4
addss xmm1, xmm5
minss xmm1, xmm0
movss dword [esi + 0x20], xmm1
movaps xmm5, xmm1
jmp 0x1016e5fb
comiss xmm5, xmm0
jbe 0x1016e5fb
mulss xmm1, xmm4
subss xmm5, xmm1
maxss xmm5, xmm0
movss dword [esi + 0x20], xmm5
movss xmm4, dword [esi + 0x14]
xorps xmm0, xmm0
comiss xmm0, xmm4
jbe 0x1016e60d
xorps xmm1, xmm1
jmp 0x1016e614
movaps xmm1, xmm6
minss xmm1, xmm4
comiss xmm0, xmm3
movss xmm4, dword [0x1022cdac]
movss xmm7, dword [0x1022cb6c]
mulss xmm1, xmm4
addss xmm1, xmm7
cvttss2si edx, xmm1
jbe 0x1016e63a
xorps xmm1, xmm1
jmp 0x1016e641
movaps xmm1, xmm6
minss xmm1, xmm3
mulss xmm1, xmm4
addss xmm1, xmm7
cvttss2si eax, xmm1
shl eax, 8
or edx, eax
comiss xmm0, xmm2
jbe 0x1016e65c
xorps xmm1, xmm1
jmp 0x1016e663
movaps xmm1, xmm6
minss xmm1, xmm2
mulss xmm1, xmm4
addss xmm1, xmm7
cvttss2si eax, xmm1
shl eax, 0x10
or edx, eax
comiss xmm0, xmm5
ja 0x1016e680
movaps xmm0, xmm6
minss xmm0, xmm5
mulss xmm0, xmm4
xor ecx, ecx
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 0x18
or edx, eax
call fcn.10131660
movss xmm2, dword [esp + 0x88]
lea edx, [esp + 0x70]
addss xmm2, dword [esp + 0x8c]
movss xmm0, dword [esp + 0x10]
movss xmm4, dword [0x1022cbf0]
movaps xmm1, xmm0
movss xmm3, dword [esp + 0x2c]
addss xmm0, dword [esp + 0x30]
divss xmm3, xmm4
movzx eax, byte [esp + 0xe]
push ecx
lea ecx, [esp + 0x34]
divss xmm1, xmm4
divss xmm2, xmm4
push dword [eax*4 + 0x1022b140]
subss xmm2, xmm3
subss xmm0, xmm1
lea eax, [esp + 0x80]
push eax
movss dword [esp + 0x3c], xmm2
movss dword [esp + 0x40], xmm0
call fcn.1012c3e0
mov esi, dword [0x1027efb4]
add esp, 0xc
mov dword [esp + 0x1c], 0x41a00000
mov eax, dword [esi + 0x1dd4]
mov ecx, dword [esi + 0x1ddc]
push 0
lea edx, [eax + eax*4]
mov eax, dword [ecx + edx*4 - 0x14]
movups xmm0, xmmword [ecx + edx*4 - 0x10]
add eax, eax
lea edx, [esp + 0x1c]
mov ecx, str.Im_sure
movups xmmword [esi + eax*8 + 0x15dc], xmm0
dec dword [esi + 0x1dd4]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x1c], 0x42a00000
movss xmm2, dword [eax + 0x14]
divss xmm2, dword [0x1022cbf0]
movss xmm1, dword [eax + 0x18]
mov eax, dword [esi + 0x1cdc]
subss xmm1, dword [esp + 0x14]
subss xmm2, dword [0x1022cccc]
mov byte [eax + 0x8c], 1
mov eax, dword [esi + 0x1cdc]
subss xmm1, dword [0x1022cc60]
movss xmm0, dword [eax + 0x10]
movss xmm3, dword [eax + 0xc]
subss xmm0, dword [eax + 0x5c]
subss xmm3, dword [eax + 0x58]
addss xmm0, xmm1
addss xmm3, xmm2
movss dword [eax + 0xd4], xmm0
movss dword [eax + 0xd0], xmm3
movss xmm1, dword [eax + 0xec]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0xe8]
maxss xmm0, xmm3
movss dword [eax + 0xec], xmm1
movss dword [eax + 0xe8], xmm0
call fcn.10164760
add esp, 4
test al, al
je 0x1016e928
cmp byte [esp + 0xe], 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x90], xmm0
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 0xf
mov byte [esp + 0x90], 0
je 0x1016e859
mov ecx, dword [0x1027c640]
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [0x1027c640]
mov ecx, dword [eax + 0x10c]
mov edx, dword [eax + 0x200]
mov eax, dword [eax + 0x204]
sub eax, edx
sar eax, 2
cmp eax, ecx
jbe 0x1016ea85
jmp 0x1016e888
mov ecx, dword [0x1027c644]
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [0x1027c644]
mov ecx, dword [eax + 0x10c]
mov edx, dword [eax + 0x200]
mov eax, dword [eax + 0x204]
sub eax, edx
sar eax, 2
cmp eax, ecx
jbe 0x1016ea8a
mov eax, dword [edx + ecx*4]
lea ecx, [esp + 0x90]
add eax, 0x18
cmp ecx, eax
je 0x1016e8b2
cmp dword [eax + 0x14], 0xf
mov ecx, dword [eax + 0x10]
jbe 0x1016e8a4
mov eax, dword [eax]
push ecx
push eax
lea ecx, [esp + 0x98]
call fcn.100162a0
push 6
push str._saved
lea ecx, [esp + 0x98]
call fcn.100163e0
mov eax, dword [0x1027c628]
sub esp, 0x18
mov ecx, esp
mov esi, dword [eax + 0x1c]
lea eax, [esp + 0xa8]
push eax
call fcn.10014e20
push ecx
mov ecx, esi
call fcn.1010da00
mov ecx, dword [esp + 0xa4]
cmp ecx, 0xf
jbe 0x1016e928
mov edx, dword ds:[esp + 0x90]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1016e91c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1016ea8f
push ecx
push edx
call fcn.1008f386
add esp, 8
cmp byte [esp + 0xf], 0
jne 0x1016e951
mov eax, dword [0x1027efb4]
cmp byte [eax + 0x3e2], 0
je 0x1016e951
xor edx, edx
lea ecx, [esp + 0x70]
call fcn.1012ac00
test al, al
jne 0x1016e951
call fcn.10121820
mov esi, dword [0x1027efb4]
mov eax, dword ds:[esi + 0x1cdc]
cmp dword [esi + 0x1e40], eax
jne 0x1016e978
mov dword [esi + 0x1f40], eax
mov dword [esi + 0x1f44], 2
test dword ds:[eax + 8], 0x1000000
je 0x1016e989
mov byte [esi + 0x1c86], 1
call fcn.101314a0
mov byte [esi + 0x1c86], 0
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push 0x1028a190
call fcn.1008f445
add esp, 4
cmp dword [0x1028a190], 0xffffffff
jne 0x1016dcee
movaps xmm0, xmmword [esp + 0x60]
push 0x1028a190
movaps xmmword [0x10289f50], xmm0
call fcn.1008f3f4
add esp, 4
jmp 0x1016dcee
push 0x10289f28
call fcn.1008f445
add esp, 4
cmp dword [0x10289f28], 0xffffffff
jne 0x1016de73
push 0x24
call fcn.1008f394
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
push 0x10191ce0
mov dword [0x1028a060], eax
call fcn.1008f371
add esp, 4
push 0x10289f28
call fcn.1008f3f4
add esp, 4
jmp 0x1016de73
push 0x1028a070
call fcn.1008f445
add esp, 4
cmp dword [0x1028a070], 0xffffffff
jne 0x1016e382
push 0x24
call fcn.1008f394
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
push 0x10191c80
mov dword [0x1028a0f0], eax
call fcn.1008f371
add esp, 4
push 0x1028a070
call fcn.1008f3f4
add esp, 4
jmp 0x1016e382
call fcn.10015610
call fcn.10041510
call fcn.100b1212
int3