Function at 0x10027e90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x13c
mov eax, dword [0x1003d00c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [0x1003d7b8]
push esi
mov esi, ecx
mov dword [ebp - 0xcc], eax
mov ecx, ebx
mov dword [ebp - 0x13c], esi
push edi
mov dword [ebp - 0xa4], ecx
mov eax, dword [ecx + 0x199c]
mov byte [eax + 0x7c], 1
mov edi, dword [ecx + 0x199c]
mov dword [ebp - 0xc8], edi
cmp byte [edi + 0x7f], 0
jne 0x100281e7
mov edx, dword [ebp + 0x14]
mov eax, edx
shr eax, 0xe
mov ecx, edx
and eax, 0xffffff01
shr ecx, 0x14
mov dword [ebp - 0xd4], eax
and ecx, 0xffffff01
mov eax, edx
mov dword [ebp - 0xc0], ecx
shr eax, 0xf
and eax, 0xffffff01
mov dword [ebp - 0x120], eax
mov eax, edx
shr eax, 0x10
not al
and eax, 0xffffff01
mov dword [ebp - 0xe4], eax
mov eax, edx
shr eax, 0x12
and eax, 0xffffff01
mov dword [ebp - 0xf8], eax
test cl, cl
je 0x10027f4a
call fcn.1000e250
mov ebx, dword [0x1003d7b8]
mov ecx, dword [edi + 0x1c4]
xor edx, edx
mov eax, dword [edi + 0x1cc]
push dword [eax + ecx*4 - 4]
mov ecx, esi
call fcn.10002660
add esp, 4
mov dword [ebp - 0xac], eax
cmp dword [ebx + 0x19bc], eax
jne 0x10027f7a
mov dword [ebx + 0x19c4], eax
cmp dword [ebx + 0x19c0], eax
jne 0x10027f89
mov byte [ebx + 0x19d0], 1
mov eax, esi
cmp esi, 0xffffffff
jae 0x10027fa6
mov cl, byte [eax]
test cl, cl
je 0x10027fa6
cmp cl, 0x23
jne 0x10027fa0
cmp byte [eax + 1], cl
je 0x10027fa6
inc eax
cmp eax, 0xffffffff
jb 0x10027f90
movss xmm0, dword [0x10039bd8]
movss xmm4, dword [ebx + 0x18bc]
movss dword [ebp - 0x128], xmm0
cmp esi, eax
jne 0x10027fcf
xorps xmm0, xmm0
movss dword [ebp - 0x134], xmm0
jmp 0x10028025
movss xmm3, dword [0x10039bc8]
movaps xmm2, xmm4
push ecx
push eax
push esi
push ecx
mov ecx, dword [ebx + 0x18b8]
lea eax, [ebp - 0xf0]
mov dword [esp], 0xbf800000
push eax
call fcn.1001ff20
movss xmm0, dword [ebp - 0xf0]
addss xmm0, dword [0x10039b34]
movss xmm4, dword [ebp - 0xec]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x134], xmm0
xorps xmm0, xmm0
cmp byte [ebp - 0xc0], 0
je 0x1002803e
movss xmm4, dword [ebx + 0x18bc]
mulss xmm4, dword [0x10039b78]
mov esi, dword [ebx + 0x199c]
movss xmm3, dword [esi + 0x170]
comiss xmm0, xmm3
jbe 0x100280bf
movss xmm2, dword [esi + 0xc8]
movss xmm1, dword [esi + 0x218]
mov edi, dword [esi + 0x1c0]
subss xmm2, dword [esi + 0xc]
subss xmm1, dword [esi + 0xc]
test edi, edi
je 0x100280a5
mov edx, dword [edi + 0xc]
movss xmm1, dword [edi + 0x18]
subss xmm1, dword [edi + 0x14]
lea eax, [edx + 1]
test eax, eax
cmovns edx, eax
mov eax, dword [edi + 0x34]
lea ecx, [edx*8]
sub ecx, edx
mulss xmm1, dword [eax + ecx*4]
addss xmm1, dword [edi + 0x14]
subss xmm1, dword [esi + 0x3c]
mov edi, dword [ebp - 0xc8]
subss xmm1, xmm2
addss xmm1, xmm3
movss xmm3, dword [0x10039b38]
maxss xmm3, xmm1
mov eax, dword [ebp + 0x10]
lea ecx, [ebp - 0x110]
mov esi, dword [ebp - 0xa4]
push dword [eax + 4]
movss xmm0, dword [esi + 0x1548]
push dword [eax]
cvttss2si eax, xmm3
movaps xmm2, xmm0
addss xmm2, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
addss xmm2, xmm4
call fcn.100056f0
movss xmm3, dword [edi + 0xc8]
xorps xmm5, xmm5
movss xmm1, dword [ebp - 0x110]
movaps xmm0, xmm3
movss xmm4, dword [edi + 0xcc]
addss xmm0, xmm1
movss xmm6, dword [ebp - 0x134]
add esp, 8
comiss xmm6, xmm5
movss dword [ebp - 0x124], xmm1
movss xmm1, dword [ebp - 0x10c]
addss xmm1, xmm4
movss dword [ebp - 0x3c], xmm3
movss dword [ebp - 0x38], xmm4
movss dword [ebp - 0x34], xmm0
movss dword [ebp - 0x30], xmm1
jbe 0x1002815e
movss xmm2, dword [esi + 0x155c]
addss xmm2, xmm6
jmp 0x10028161
xorps xmm2, xmm2
cmp byte [ebp - 0xc0], 0
addss xmm0, xmm2
addss xmm1, xmm5
movss dword [ebp - 0x14], xmm3
movss dword [ebp - 0x10], xmm4
mov dword [ebp - 0xdc], edi
movss dword [ebp - 0xc], xmm0
movss dword [ebp - 8], xmm1
je 0x10028285
mov ebx, dword [ebp - 0xac]
lea eax, [ebp - 0x3c]
push eax
mov edx, ebx
lea ecx, [ebp - 0x14]
call fcn.10005240
add esp, 4
test al, al
jne 0x100281fa
movss xmm0, dword [ebp - 0xc]
lea ecx, [ebp - 0xf0]
subss xmm0, dword [ebp - 0x14]
movss xmm1, dword [esi + 0x1548]
movss dword [ebp - 0xf0], xmm0
movss xmm0, dword [ebp - 8]
subss xmm0, dword [ebp - 0x10]
movss dword [ebp - 0xec], xmm0
call fcn.100050e0
call fcn.1000e370
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1002f9c3
mov esp, ebp
pop ebp
ret
movss xmm0, dword [ebp - 0x34]
lea edx, [ebp - 0xf0]
movss xmm1, dword [ebp - 0x3c]
subss xmm0, xmm1
movss dword [ebp - 0x104], xmm1
push ecx
mov ecx, ebx
movss dword [ebp - 0xf0], xmm0
movss xmm0, dword [ebp - 0x30]
subss xmm0, dword [ebp - 0x38]
movss dword [ebp - 0xec], xmm0
call fcn.10008870
add esp, 4
test al, al
jne 0x10028246
call fcn.100085d0
jmp 0x100281e2
mov ebx, dword [0x1003d7b8]
movss xmm0, dword [ebp - 0x110]
mov eax, dword [ebx + 0x199c]
mov byte [eax + 0x7c], 1
mov ebx, dword [ebx + 0x199c]
mov dword [ebp - 0xdc], ebx
subss xmm0, dword [ebx + 0x70]
mov eax, dword [ebx + 0x134]
or dword [ebx + 0x13c], eax
movss dword [ebp - 0x124], xmm0
jmp 0x100282da
subss xmm1, xmm4
subss xmm0, xmm3
lea ecx, [ebp - 0xf0]
movss dword [ebp - 0xec], xmm1
movss xmm1, dword [esi + 0x1548]
movss dword [ebp - 0xf0], xmm0
call fcn.100050e0
mov edx, dword [ebp - 0xac]
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x14]
call fcn.10005240
add esp, 4
test al, al
je 0x100281e7
movss xmm0, dword [ebp - 0x3c]
movss dword [ebp - 0x104], xmm0
mov edx, dword [ebp - 0xac]
lea ecx, [ebp - 0x3c]
call fcn.10005470
mov byte [ebp - 0xaf], al
test al, al
je 0x100282fc
mov dword [esi + 0x1d04], 1
lea eax, [esi + 0x1dc4]
xor ecx, ecx
cmp dword [eax], edx
mov ebx, eax
cmovne ebx, ecx
mov ecx, edi
mov dword [ebp - 0x11c], ebx
call fcn.100055d0
mov byte [ebp - 0xc3], al
test al, al
je 0x1002833c
cmp dword [esi + 0x1bb8], edi
jne 0x1002833c
mov ecx, dword [esi + 0x1bc0]
cmp ecx, dword [edi + 0x164]
jne 0x1002833c
mov cl, 1
jmp 0x1002833e
xor cl, cl
mov byte [ebp - 0xad], cl
test al, al
je 0x10028353
mov byte [ebp - 0xb0], 1
test cl, cl
je 0x1002835a
mov byte [ebp - 0xb0], 0
cmp byte [ebp - 0xaf], 0
je 0x10028373
cmp byte [esi + 0x3d8], 0
mov byte [ebp - 0xb1], 1
jne 0x1002837a
mov byte [ebp - 0xb1], 0
mov esi, dword [esi + 0x19bc]
mov ecx, dword [ebp - 0xac]
cmp esi, ecx
je 0x100283b2
mov eax, dword [ebp - 0xa4]
cmp dword [eax + 0x1ac0], ecx
je 0x100283a9
cmp dword [eax + 0x1ab4], ecx
jne 0x100283b2
cmp dword [eax + 0x1ad4], 3
jne 0x100283b2
mov byte [ebp - 0xa5], 1
jmp 0x100283b9
mov byte [ebp - 0xa5], 0
cmp byte [ebp - 0xc0], 0
je 0x10028404
test ebx, ebx
je 0x10028404
test esi, esi
jne 0x10028404
mov eax, dword [ebp - 0xdc]
xor edx, edx
mov ecx, dword [eax + 0x1c4]
mov eax, dword [eax + 0x1cc]
push dword [eax + ecx*4 - 4]
mov ecx, str.SCROLLY
call fcn.10002660
mov ecx, dword [ebp - 0xa4]
add esp, 4
mov byte [ebp - 0xae], 1
cmp dword [ecx + 0x19c0], eax
je 0x1002840b
mov byte [ebp - 0xae], 0
cmp byte [ebp - 0xc0], 0
je 0x10028445
test ebx, ebx
je 0x10028445
mov eax, dword [ebp - 0xdc]
xor edx, edx
mov ecx, dword [eax + 0x1c4]
mov eax, dword [eax + 0x1cc]
push dword [eax + ecx*4 - 4]
mov ecx, str.SCROLLY
call fcn.10002660
add esp, 4
cmp esi, eax
jne 0x10028445
mov al, 1
jmp 0x10028447
xor al, al
mov edx, dword [ebp - 0xac]
mov cl, byte [ebp - 0xa5]
mov byte [ebp - 0xa6], al
mov byte [ebp - 0xd0], 0
cmp esi, edx
je 0x1002847e
test byte [ebp + 0x14], 0x10
jne 0x1002846e
test cl, cl
je 0x1002847e
cmp byte [ebp - 0xc0], 0
mov byte [ebp - 0xbc], 1
je 0x10028485
mov byte [ebp - 0xbc], 0
cmp byte [ebp - 0xc3], 0
mov dword [ebp - 0xf4], 0x20
mov dword [ebp - 0x100], 1
jne 0x10028561
cmp byte [ebp - 0xb1], 0
jne 0x10028561
cmp byte [ebp - 0xae], 0
jne 0x10028561
test cl, cl
jne 0x10028561
mov byte [ebp - 0x9d], cl
test al, al
jne 0x10028568
mov byte [ebp - 0xae], al
mov esi, edx
mov eax, dword [ebp - 0xa4]
mov dl, byte [ebp - 0x9d]
cmp dword [eax + 0x19bc], esi
je 0x1002877f
test dl, dl
je 0x1002877f
mov edx, edi
mov ecx, esi
call fcn.10004f70
call fcn.10005020
mov ecx, edi
call fcn.1000dae0
mov edi, dword [ebp - 0xa4]
mov eax, dword [ebp + 0x14]
mov dword [edi + 0x19d8], 2
test eax, 0x440
je 0x10028537
mov dword [edi + 0x19d8], 0x20002
cmp byte [ebp - 0xc0], 0
mov dl, byte [ebp - 0x9d]
jne 0x10028781
test al, al
js 0x10028781
mov dword [edi + 0x19d4], 0xc
jmp 0x10028781
mov byte [ebp - 0x9d], 1
mov byte [ebp - 0xae], 1
mov dword [ebp - 0x11c], ebx
cmp esi, edx
je 0x100284dc
mov ebx, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xcc]
add ebx, 0x1dc4
mov dword [ebp - 0x11c], ebx
mov dword [ebx + 0xe60], 0xbe99999a
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100285a2
mov edi, dword [ebx + 0x28]
lea eax, [ebx + 0x24]
sub ecx, edx
lea esi, [ecx + 1]
cmp esi, edi
jle 0x100285e1
test edi, edi
je 0x100285c9
mov eax, edi
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
add ecx, edi
jmp 0x100285ce
mov ecx, 8
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
lea ecx, [ebx + 0x24]
push eax
call fcn.10013ac0
lea eax, [ebx + 0x24]
push esi
push dword [ebp - 0xcc]
mov dword [eax], esi
push dword [ebx + 0x2c]
call sub.VCRUNTIME140.dll_memcpy
mov esi, dword [ebx + 0x10]
add esp, 0xc
mov dword [ebp - 0xb8], 0
cmp esi, 0x21
jge 0x10028630
test esi, esi
je 0x10028618
mov eax, esi
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
add ecx, esi
jmp 0x1002861d
mov ecx, 8
mov eax, 0x21
cmp ecx, eax
cmovg eax, ecx
lea ecx, [ebx + 0xc]
push eax
call fcn.10013bb0
mov dword [ebx + 0xc], 0x21
mov ecx, dword [ebx + 0x1c]
test ecx, ecx
jns 0x10028657
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [ebx + 0x18]
call fcn.10013ac0
mov esi, dword [ebp - 0xcc]
lea eax, [ebp - 0xb8]
mov edx, dword [ebp - 0xf4]
push eax
push ecx
mov dword [ebx + 0x18], 0
mov ecx, dword [ebx + 0x14]
push esi
mov byte [ebx + 0x30], 0
call fcn.10002a90
mov ecx, dword [ebp - 0xb8]
add esp, 0xc
sub ecx, esi
mov edx, eax
mov esi, dword [ebp - 0xac]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
cmp dword [ebx], esi
jne 0x100286c0
cmp dword [ebx + 0x3c], edx
mov ecx, edx
cmovl ecx, dword [ebx + 0x3c]
cmp dword [ebx + 0x40], edx
mov dword [ebx + 0x3c], ecx
mov ecx, edx
cmovl ecx, dword [ebx + 0x40]
cmp dword [ebx + 0x44], edx
mov dword [ebx + 0x40], ecx
cmovl edx, dword [ebx + 0x44]
mov dword [ebx + 0x44], edx
jmp 0x10028738
mov ecx, dword [ebp - 0xc0]
mov al, cl
xor al, 1
mov dword [ebx], esi
mov dword [ebx + 0x38], 0
mov dword [ebx + 0xe52], 0x630000
mov dword [ebx + 0xe58], 0
mov dword [ebx + 0xe5c], 0x3e7
mov dword [ebx + 0x40], 0
mov dword [ebx + 0x44], 0
mov dword [ebx + 0x3c], 0
mov dword [ebx + 0x48], 0x10000
mov dword [ebx + 0x50], 0
mov byte [ebx + 0x4c], al
test cl, cl
jne 0x1002873e
mov ecx, dword [ebp - 0xbc]
cmp byte [ebp - 0xad], 0
movzx ecx, cl
cmovne ecx, dword [ebp - 0x100]
mov dword [ebp - 0xbc], ecx
mov ecx, dword [ebp - 0xc0]
test dword [ebp + 0x14], 0x2000
je 0x1002874b
mov byte [ebx + 0x48], 1
test cl, cl
jne 0x10028774
cmp byte [ebp - 0xb0], cl
jne 0x1002876d
cmp byte [ebp - 0xb1], cl
je 0x10028774
mov eax, dword [ebp - 0xa4]
cmp byte [eax + 0xf8], cl
je 0x10028774
mov byte [ebp - 0xbc], 1
mov edi, dword [ebp - 0xc8]
jmp 0x100284de
mov edi, eax
mov eax, dword [edi + 0x19bc]
cmp eax, esi
jne 0x10028824
test ebx, ebx
jne 0x100287f6
mov esi, dword [0x1003d7b8]
mov ecx, dword [esi + 0x19bc]
test ecx, ecx
setne al
mov byte [esi + 0x19cc], al
test ecx, ecx
je 0x100287bb
mov dword [esi + 0x19c8], ebx
mov word [esi + 0x19ce], bx
mov dword [esi + 0x19bc], 0
mov dword [esi + 0x19d4], 0
mov dword [esi + 0x19d8], 0
mov byte [esi + 0x19cd], 0
mov dword [esi + 0x19e4], 0
mov eax, dword [edi + 0x19bc]
mov esi, dword [ebp - 0xac]
cmp eax, esi
jne 0x10028824
cmp byte [edi + 0x3d8], 0
je 0x10028824
cmp byte [ebp - 0xae], 0
jne 0x10028824
mov ecx, dword [ebp - 0xd0]
test dl, dl
movzx ecx, cl
cmove ecx, dword [ebp - 0x100]
mov dword [ebp - 0xd0], ecx
cmp byte [ebp - 0xd4], 0
je 0x1002890a
test ebx, ebx
je 0x1002890a
cmp eax, esi
je 0x1002884a
cmp byte [ebp - 0xa6], 0
jne 0x1002884a
xor cl, cl
jmp 0x1002884c
mov cl, 1
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
je 0x1002885c
test cl, cl
je 0x1002885c
mov al, 1
jmp 0x1002885e
xor al, al
test cl, cl
jne 0x1002886a
test al, al
je 0x1002890a
mov esi, dword [ebx + 0x10]
mov dword [ebp - 0xb8], 0
cmp esi, 0x21
jge 0x100288a5
test esi, esi
je 0x1002888d
mov eax, esi
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
add ecx, esi
jmp 0x10028892
mov ecx, 8
mov eax, 0x21
cmp ecx, eax
cmovg eax, ecx
lea ecx, [ebx + 0xc]
push eax
call fcn.10013bb0
mov edi, dword [ebp - 0xcc]
lea eax, [ebp - 0xb8]
push eax
push ecx
mov dword [ebx + 0xc], 0x21
mov edx, 0x21
mov ecx, dword [ebx + 0x14]
push edi
call fcn.10002a90
mov ecx, dword [ebp - 0xb8]
mov esi, eax
mov eax, dword [ebx + 0x44]
sub ecx, edi
mov edi, dword [ebp - 0xa4]
add esp, 0xc
cmp dword [ebx + 0x3c], esi
mov edx, esi
mov dword [ebx + 8], ecx
mov ecx, esi
cmovl edx, dword [ebx + 0x3c]
cmp dword [ebx + 0x40], esi
mov dword [ebx + 4], esi
cmovl ecx, dword [ebx + 0x40]
cmp eax, esi
mov dword [ebx + 0x3c], edx
cmovl esi, eax
mov dword [ebx + 0x40], ecx
mov dword [ebx + 0x44], esi
mov esi, dword [ebp - 0xac]
mov ecx, dword [edi + 0x19bc]
cmp ecx, esi
je 0x10028925
test ebx, ebx
je 0x10028921
cmp byte [ebp - 0xa6], 0
jne 0x10028925
xor dl, dl
jmp 0x10028927
mov dl, 1
mov byte [ebp - 0xb0], dl
test ebx, ebx
je 0x10028941
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
je 0x10028941
test dl, dl
je 0x10028941
mov al, 1
jmp 0x10028943
xor al, al
xor dh, dh
mov byte [ebp - 0xb1], al
mov byte [ebp - 0xc3], 0
mov byte [ebp - 0x9e], dh
test dl, dl
jne 0x10028964
test al, al
jne 0x10028964
cmp ecx, esi
jne 0x1002897e
cmp byte [ebp - 0xd4], 0
jne 0x1002897e
test ebx, ebx
je 0x1002897e
cmp byte [ebx + 0x30], 0
mov byte [ebp - 0xde], 1
jne 0x10028985
mov byte [ebp - 0xde], 0
cmp byte [ebp - 0x120], 0
je 0x10028a34
mov esi, dword [edi + 0x18b8]
cmp dword [esi + 0x14], 0x2a
jg 0x100289a3
mov edi, dword [esi + 0x2c]
jmp 0x100289c2
mov eax, dword [esi + 0x1c]
mov ecx, 0xffff
movzx eax, word [eax + 0x54]
cmp ax, cx
jne 0x100289b9
mov edi, dword [esi + 0x2c]
jmp 0x100289c2
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x28]
lea edi, [eax + ecx*8]
mov eax, dword [esi + 0x10]
mov esi, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xa4]
add edx, 0x2c38
mov dword [edx + 0x10], eax
mov eax, dword [esi + 0x18b8]
mov eax, dword [eax + 0x44]
mov dword [edx + 0x44], eax
mov ecx, dword [esi + 0x18b8]
mov eax, dword [ecx + 0x30]
mov dword [edx + 0x30], eax
mov eax, dword [ecx + 0x34]
mov ecx, edx
mov dword [edx + 0x34], eax
mov eax, dword [esi + 0x18b8]
mov eax, dword [eax + 0x48]
mov dword [edx + 0x48], eax
mov eax, dword [esi + 0x18b8]
mov eax, dword [eax + 0x4c]
mov dword [edx + 0x4c], eax
mov eax, dword [esi + 0x18b8]
mov eax, dword [eax + 0x38]
mov dword [edx + 0x38], eax
mov dword [edx + 0x2c], edi
mov eax, dword [edi + 4]
mov dword [edx + 0xc], eax
call fcn.1000dcf0
mov edi, esi
mov esi, dword [ebp - 0xac]
mov dword [ebp - 0xd8], 0
cmp dword [edi + 0x19bc], esi
jne 0x10028d71
mov eax, dword [ebx + 8]
mov dword [ebx + 0x34], 0x20
mov dword [ebx + 0xe6c], 0
mov dword [ebx + 0xe70], 0
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp + 0x14]
mov dword [ebx + 0xe68], eax
cmp byte [edi + 0xe8], 0
mov dword [edi + 0x2f28], 1
sete al
cmp byte [ebp - 0xc0], 0
mov byte [edi + 0x19cd], al
movss xmm7, dword [edi + 0xe0]
subss xmm7, dword [ebp - 0x3c]
subss xmm7, dword [edi + 0x1544]
addss xmm7, dword [ebx + 0x38]
je 0x10028ad4
mov eax, dword [ebp - 0xdc]
movss xmm2, dword [edi + 0xe4]
subss xmm2, dword [eax + 0xcc]
subss xmm2, dword [edi + 0x1548]
jmp 0x10028ae4
movss xmm2, dword [edi + 0x18bc]
mulss xmm2, dword [0x10039b0c]
cmp byte [ebp - 0xbc], 0
mov cl, byte [edi + 0xad]
mov byte [ebp - 0xa6], cl
jne 0x10028c61
mov dl, byte [ebp - 0xaf]
test dl, dl
je 0x10028b19
mov al, byte [edi + 0x3dd]
test cl, cl
jne 0x10028b81
test al, al
jne 0x10028c61
cmp byte [edi + 0x3d8], 0
mov al, byte [ebx + 0xe65]
je 0x10028bd6
test al, al
jne 0x10028bd6
test dl, dl
je 0x10028c7c
cmp byte [ebx + 0x4c], al
je 0x10028b55
push 0
mov edx, ebx
lea ecx, [ebp - 0x1c]
call fcn.100264d0
movss xmm2, dword [ebp - 0x10]
add esp, 4
movaps xmm1, xmm7
mov ecx, ebx
call fcn.10026780
mov cl, byte [ebp - 0xa6]
mov dword [ebx + 0x3c], eax
mov dword [ebx + 0x40], eax
mov dword [ebx + 0x44], eax
mov byte [ebx + 0x4b], 0
mov dword [ebx + 0xe60], 0xbe99999a
jmp 0x10028c7c
test al, al
je 0x10028b19
push 0x1000c
lea edx, [ebx + 0x3c]
mov ecx, ebx
call fcn.10026bc0
add esp, 4
mov byte [ebx + 0xe64], 1
lea edx, [ebx + 0x3c]
mov dword [ebx + 0xe60], 0xbe99999a
mov ecx, ebx
push 0x3000d
call fcn.10026bc0
mov cl, byte [ebp - 0xa6]
add esp, 4
mov byte [ebx + 0xe64], 1
mov dword [ebx + 0xe60], 0xbe99999a
jmp 0x10028c7c
cmp byte [edi + 0xe8], 0
je 0x10028c7c
test al, al
jne 0x10028c7c
movss xmm0, dword [edi + 0x374]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x10028c10
movss xmm0, dword [edi + 0x378]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x10028c7c
cmp byte [ebx + 0x4c], 0
je 0x10028c2a
push 0
mov edx, ebx
lea ecx, [ebp - 0x1c]
call fcn.100264d0
movss xmm2, dword [ebp - 0x10]
add esp, 4
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
jne 0x10028c38
mov eax, dword [ebx + 0x3c]
mov dword [ebx + 0x40], eax
movaps xmm1, xmm7
mov ecx, ebx
call fcn.10026780
mov cl, byte [ebp - 0xa6]
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x3c], eax
mov dword [ebx + 0xe60], 0xbe99999a
mov byte [ebx + 0xe64], 1
jmp 0x10028c7c
mov eax, dword [ebx + 4]
mov dword [ebx + 0x40], 0
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x3c], eax
mov byte [ebx + 0x4b], 0
mov byte [ebx + 0xe65], 1
cmp byte [ebx + 0xe65], 0
je 0x10028c95
cmp byte [edi + 0xe8], 0
jne 0x10028c95
mov byte [ebx + 0xe65], 0
cmp dword [edi + 0x1500], 0
jle 0x10028d6b
mov eax, dword [ebp - 0xa4]
cmp byte [eax + 0xf8], 0
je 0x10028cbe
cmp byte [eax + 0xfa], 0
je 0x10028d3b
test cl, cl
je 0x10028ccb
cmp byte [eax + 0xfb], 0
jne 0x10028d3b
cmp byte [ebp - 0xd4], 0
jne 0x10028d3b
cmp byte [ebp - 0xa5], 0
jne 0x10028d3b
xor esi, esi
nop
mov eax, dword [eax + 0x1508]
lea ecx, [ebp - 0xb8]
mov edx, dword [ebp + 0x14]
sub esp, 8
movzx eax, word [eax + esi*2]
mov dword [ebp - 0xb8], eax
call fcn.10027ce0
add esp, 8
test al, al
je 0x10028d2c
push dword [ebp - 0xb8]
lea edx, [ebx + 0x3c]
mov ecx, ebx
call fcn.10026bc0
add esp, 4
mov byte [ebx + 0xe64], 1
mov dword [ebx + 0xe60], 0xbe99999a
mov eax, dword [ebp - 0xa4]
inc esi
cmp esi, dword [edi + 0x1500]
jl 0x10028ce0
mov ecx, dword [edi + 0x1504]
test ecx, ecx
jns 0x10028d61
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x1500]
call fcn.10013bb0
mov dword [edi + 0x1500], 0
mov edi, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xac]
xor cl, cl
mov byte [ebp - 0x9d], cl
cmp dword [edi + 0x19bc], eax
jne 0x1002987d
cmp byte [edi + 0x19cc], cl
jne 0x1002987d
cmp byte [ebp - 0xd0], cl
jne 0x1002987d
mov ah, byte [edi + 0xf9]
xor esi, esi
mov dh, byte [edi + 0xad]
test ah, ah
mov al, byte [edi + 0xf8]
mov ecx, 0x20000
cmovne esi, ecx
mov byte [ebp - 0x105], ah
mov byte [ebp - 0x106], dh
test dh, dh
je 0x10028e21
cmp byte [edi + 0xfb], 0
je 0x10028de5
test al, al
jne 0x10028de5
mov ecx, 1
jmp 0x10028de7
xor ecx, ecx
test ecx, ecx
jne 0x10028e2e
xor dl, dl
mov byte [ebp - 0xa5], dl
mov cl, al
test dh, dh
je 0x10028e3f
cmp byte [edi + 0xfb], 0
je 0x10028e3f
test ah, ah
je 0x10028e3f
mov cl, byte [edi + 0xf8]
test cl, cl
jne 0x10028e3f
cmp byte [edi + 0xfa], cl
jne 0x10028e3f
mov byte [ebp - 0xc2], 1
jmp 0x10028e46
test al, al
je 0x10028deb
cmp byte [edi + 0xfb], 0
jne 0x10028deb
cmp byte [edi + 0xfa], 0
jne 0x10028deb
test ah, ah
jne 0x10028deb
mov dl, 1
jmp 0x10028ded
mov byte [ebp - 0xc2], 0
test dh, dh
je 0x10028f0f
cmp byte [edi + 0xfb], 0
mov al, byte [edi + 0xfa]
mov byte [ebp - 0xa6], al
je 0x10028f15
test cl, cl
jne 0x10028f15
test al, al
jne 0x10028f15
mov byte [ebp - 0xaf], 1
cmp byte [edi + 0xf9], 0
mov byte [ebp - 0xc1], 0
je 0x10028ea9
test cl, cl
jne 0x10028ea9
cmp byte [edi + 0xfa], cl
jne 0x10028ea9
mov byte [ebp - 0xad], 1
cmp byte [edi + 0xfb], cl
je 0x10028eb0
mov byte [ebp - 0xad], 0
mov edi, dword [0x1003d7b8]
test dl, dl
je 0x10028eca
mov ecx, dword [edi + 0x7c]
test ecx, ecx
js 0x10028eca
call fcn.10008290
test al, al
jne 0x10028ee3
cmp byte [ebp - 0xad], 0
je 0x10028f50
mov ecx, dword [edi + 0x5c]
test ecx, ecx
js 0x10028f50
call fcn.10008290
test al, al
je 0x10028f50
cmp byte [ebp - 0xd4], 0
jne 0x10028f50
cmp byte [ebp - 0x120], 0
jne 0x10028f50
cmp byte [ebp - 0xc0], 0
je 0x10028f06
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
je 0x10028f50
mov byte [ebp - 0xae], 1
jmp 0x10028f57
mov byte [ebp - 0xa6], cl
mov byte [ebp - 0xaf], 0
test cl, cl
je 0x10028e7e
test ah, ah
jne 0x10028e7e
cmp byte [edi + 0xfa], ah
jne 0x10028e7e
cmp byte [edi + 0xfb], ah
jne 0x10028e7e
mov byte [ebp - 0xc1], 1
jmp 0x10028ea9
mov byte [ebp - 0xae], 0
cmp byte [ebp - 0xa5], 0
je 0x10028f70
mov ecx, dword [edi + 0x74]
test ecx, ecx
js 0x10028f70
call fcn.10008290
test al, al
jne 0x10028f89
cmp byte [ebp - 0xc1], 0
je 0x10028fac
mov ecx, dword [edi + 0x58]
test ecx, ecx
js 0x10028fac
call fcn.10008290
test al, al
je 0x10028fac
cmp byte [ebp - 0x120], 0
jne 0x10028fac
cmp byte [ebp - 0xc0], 0
je 0x10028fa3
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
je 0x10028fac
mov byte [ebp - 0xdd], 1
jmp 0x10028fb3
mov byte [ebp - 0xdd], 0
cmp byte [ebp - 0xa5], 0
je 0x10028fcc
mov ecx, dword [edi + 0x78]
test ecx, ecx
js 0x10028fcc
call fcn.10008290
test al, al
jne 0x10028fe5
cmp byte [ebp - 0xad], 0
je 0x10028ff5
mov ecx, dword [edi + 0x58]
test ecx, ecx
js 0x10028ff5
call fcn.10008290
test al, al
je 0x10028ff5
cmp byte [ebp - 0xd4], 0
mov byte [ebp - 0xad], 1
je 0x10028ffc
mov byte [ebp - 0xad], 0
cmp byte [ebp - 0xa5], 0
je 0x10029031
mov ecx, dword [edi + 0x84]
test ecx, ecx
js 0x10029031
call fcn.10008290
test al, al
je 0x10029031
cmp byte [ebp - 0xd4], 0
jne 0x10029031
cmp byte [ebp - 0xe4], 0
mov byte [ebp - 0xc1], 1
jne 0x10029038
mov byte [ebp - 0xc1], 0
cmp byte [ebp - 0xa5], 0
je 0x10029054
mov ecx, dword [edi + 0x80]
test ecx, ecx
js 0x10029054
call fcn.10008290
test al, al
jne 0x10029070
cmp byte [ebp - 0xc2], 0
je 0x10029089
mov ecx, dword [edi + 0x84]
test ecx, ecx
js 0x10029089
call fcn.10008290
test al, al
je 0x10029089
cmp byte [ebp - 0xd4], 0
jne 0x10029089
cmp byte [ebp - 0xe4], 0
mov byte [ebp - 0xc2], 1
jne 0x10029090
mov byte [ebp - 0xc2], 0
mov ecx, dword [edi + 0x38]
test ecx, ecx
js 0x100290e6
call fcn.10008290
test al, al
je 0x100290e6
cmp byte [ebp - 0xaf], 0
je 0x100290c0
mov eax, 0x10004
lea edx, [ebx + 0x3c]
or eax, esi
mov ecx, ebx
push eax
call fcn.10026bc0
jmp 0x10029857
cmp byte [ebp - 0xa6], 0
lea edx, [ebx + 0x3c]
mov ecx, 0x1000c
mov eax, 0x10000
cmovne eax, ecx
mov ecx, ebx
or eax, esi
push eax
call fcn.10026bc0
jmp 0x10029857
mov ecx, dword [edi + 0x3c]
test ecx, ecx
js 0x1002913c
call fcn.10008290
test al, al
je 0x1002913c
cmp byte [ebp - 0xaf], 0
je 0x10029116
mov eax, 0x10005
lea edx, [ebx + 0x3c]
or eax, esi
mov ecx, ebx
push eax
call fcn.10026bc0
jmp 0x10029857
cmp byte [ebp - 0xa6], 0
lea edx, [ebx + 0x3c]
mov ecx, 0x1000d
mov eax, 0x10001
cmovne eax, ecx
mov ecx, ebx
or eax, esi
push eax
call fcn.10026bc0
jmp 0x10029857
mov ecx, dword [edi + 0x40]
test ecx, ecx
js 0x100291b8
call fcn.10008290
test al, al
je 0x100291b8
cmp byte [ebp - 0xc0], 0
je 0x100291b8
mov edi, dword [ebp - 0xa4]
cmp byte [edi + 0xf8], 0
je 0x100291a5
mov edx, dword [ebp - 0xdc]
xorps xmm4, xmm4
mov cl, byte [ebp - 0x9d]
movss xmm1, dword [edx + 0x5c]
movaps xmm0, xmm1
subss xmm0, dword [edi + 0x18bc]
addss xmm1, dword [edx + 0xe4]
maxss xmm0, xmm4
subss xmm1, xmm0
movss dword [edx + 0x5c], xmm0
movss dword [edx + 0xe4], xmm1
jmp 0x10029877
movzx eax, byte [ebp - 0xaf]
lea eax, [eax*4 + 0x10002]
jmp 0x10029299
mov ecx, dword [edi + 0x44]
test ecx, ecx
js 0x10029271
call fcn.10008290
test al, al
je 0x10029271
cmp byte [ebp - 0xc0], 0
je 0x10029271
mov eax, dword [ebp - 0xa4]
cmp byte [eax + 0xf8], 0
je 0x10029251
mov eax, dword [edi + 0x199c]
mov ecx, dword [ebp - 0xdc]
mov edi, dword [ebp - 0xa4]
movss xmm0, dword [eax + 0x20]
subss xmm0, dword [eax + 0x74]
movss xmm1, dword [eax + 0x30]
movss xmm3, dword [ecx + 0x5c]
movss xmm2, dword [edi + 0x18bc]
addss xmm2, xmm3
addss xmm3, dword [ecx + 0xe4]
subss xmm1, xmm0
xorps xmm0, xmm0
maxss xmm0, xmm1
minss xmm2, xmm0
subss xmm3, xmm2
movss dword [ecx + 0x5c], xmm2
movss dword [ecx + 0xe4], xmm3
mov cl, byte [ebp - 0x9d]
jmp 0x10029877
movzx eax, byte [ebp - 0xaf]
lea edx, [ebx + 0x3c]
mov ecx, ebx
lea eax, [eax*4 + 0x10003]
or eax, esi
push eax
call fcn.10026bc0
jmp 0x10029857
mov ecx, dword [edi + 0x50]
test ecx, ecx
js 0x100292c5
call fcn.10008290
test al, al
je 0x100292c5
mov edi, dword [ebp - 0xa4]
xor eax, eax
cmp byte [edi + 0xf8], al
setne al
lea eax, [eax*2 + 0x10004]
or eax, esi
push eax
lea edx, [ebx + 0x3c]
mov ecx, ebx
call fcn.10026bc0
add esp, 4
mov byte [ebx + 0xe64], 1
mov dword [ebx + 0xe60], 0xbe99999a
mov cl, byte [ebp - 0x9d]
jmp 0x10029877
mov ecx, dword [edi + 0x54]
test ecx, ecx
js 0x100292ef
call fcn.10008290
test al, al
je 0x100292ef
mov edi, dword [ebp - 0xa4]
xor eax, eax
cmp byte [edi + 0xf8], al
setne al
lea eax, [eax*2 + 0x10005]
jmp 0x10029299
mov ecx, dword [edi + 0x5c]
test ecx, ecx
js 0x1002931e
call fcn.10008290
test al, al
je 0x1002931e
cmp byte [ebp - 0xd4], 0
jne 0x1002931e
or esi, 0x10008
lea edx, [ebx + 0x3c]
push esi
mov ecx, ebx
call fcn.10026bc0
jmp 0x10029857
mov ecx, dword [edi + 0x60]
test ecx, ecx
js 0x100293e2
call fcn.10008290
test al, al
je 0x100293e2
cmp byte [ebp - 0xd4], 0
jne 0x100293e2
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
jne 0x10029377
cmp byte [ebp - 0xa6], 0
je 0x10029389
push 0x3000c
lea edx, [ebx + 0x3c]
mov ecx, ebx
call fcn.10026bc0
add esp, 4
mov byte [ebx + 0xe64], 1
mov dword [ebx + 0xe60], 0xbe99999a
mov edi, dword [ebp - 0xa4]
or esi, 0x10009
push esi
jmp 0x1002929c
cmp byte [ebp - 0x106], 0
je 0x10029377
mov edi, dword [ebp - 0xa4]
cmp byte [edi + 0xfb], 0
je 0x1002937d
cmp byte [edi + 0xfa], 0
jne 0x1002937d
cmp byte [edi + 0xf8], 0
jne 0x1002937d
push 0x30004
lea edx, [ebx + 0x3c]
mov ecx, ebx
call fcn.10026bc0
add esp, 4
mov byte [ebx + 0xe64], 1
or esi, 0x10009
mov dword [ebx + 0xe60], 0xbe99999a
push esi
jmp 0x1002929c
mov ecx, dword [edi + 0x68]
test ecx, ecx
js 0x10029480
call fcn.10008290
test al, al
je 0x10029480
mov edx, dword [ebp + 0x14]
mov eax, edx
mov edi, dword [ebp - 0xa4]
shr eax, 0xb
and al, 1
cmp byte [ebp - 0xc0], 0
je 0x10029421
mov cl, byte [edi + 0xf8]
test al, al
je 0x10029441
test cl, cl
jne 0x10029445
mov cl, byte [ebp - 0x9d]
mov dh, 1
mov eax, dword [ebp - 0xac]
mov byte [ebp - 0xd0], 1
mov byte [ebp - 0x9e], dh
jmp 0x10029883
test cl, cl
jne 0x10029421
cmp byte [ebp - 0xd4], 0
jne 0x100292ba
sub esp, 8
mov dword [ebp - 0xb8], 0xa
lea ecx, [ebp - 0xb8]
call fcn.10027ce0
add esp, 8
test al, al
je 0x100292ba
push dword [ebp - 0xb8]
jmp 0x1002929c
test dword [ebp + 0x14], 0x400
je 0x100294fe
mov ecx, dword [edi + 0x34]
test ecx, ecx
js 0x100294fe
call fcn.10008290
test al, al
je 0x100294fe
mov eax, dword [ebp - 0xa4]
cmp byte [eax + 0xf8], 0
jne 0x100294fe
cmp byte [ebp - 0x105], 0
jne 0x100294fe
cmp byte [eax + 0xfa], 0
jne 0x100294fe
cmp byte [ebp - 0xd4], 0
jne 0x100294fe
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0xb8]
sub esp, 8
mov dword [ebp - 0xb8], 9
call fcn.10027ce0
add esp, 8
test al, al
je 0x100295af
push dword [ebp - 0xb8]
lea edx, [ebx + 0x3c]
mov ecx, ebx
call fcn.10026bc0
jmp 0x10029857
mov ecx, dword [edi + 0x6c]
test ecx, ecx
js 0x1002951b
call fcn.10008290
test al, al
je 0x1002951b
mov cl, 1
mov byte [ebp - 0xd0], cl
jmp 0x10029871
mov al, byte [ebp - 0xc1]
test al, al
jne 0x10029838
cmp byte [ebp - 0xc2], al
jne 0x10029838
cmp byte [ebp - 0xa5], al
je 0x10029566
mov ecx, dword [edi + 0x70]
test ecx, ecx
js 0x10029566
call fcn.10008290
test al, al
je 0x10029566
mov eax, dword [ebx + 4]
mov dword [ebx + 0x40], 0
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x3c], eax
mov byte [ebx + 0x4b], 0
jmp 0x10029864
mov al, byte [ebp - 0xae]
test al, al
jne 0x10029719
cmp byte [ebp - 0xdd], al
jne 0x10029719
cmp byte [ebp - 0xad], al
je 0x1002986b
mov eax, dword [edi + 0xc8]
test eax, eax
je 0x100295c0
push dword [edi + 0xd0]
call eax
mov esi, eax
add esp, 4
test esi, esi
je 0x100295af
mov edi, dword [0x1003d7b8]
jmp 0x100295c5
mov edi, dword [ebp - 0xa4]
mov cl, byte [ebp - 0x9d]
jmp 0x10029877
mov esi, 0x10035582
mov ecx, esi
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100295d0
sub ecx, edx
test edi, edi
je 0x100295e3
inc dword [edi + 0x370]
lea eax, [ecx*2 + 2]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov dword [ebp - 0xe8], eax
xor edi, edi
cmp byte [esi], 0
je 0x1002965d
mov ebx, eax
push 0
mov edx, esi
lea ecx, [ebp - 0xfc]
call fcn.100028f0
add esi, eax
add esp, 4
mov eax, dword [ebp - 0xfc]
test eax, eax
je 0x10029651
cmp eax, 0x10000
jae 0x1002964c
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0xfc]
sub esp, 8
call fcn.10027ce0
add esp, 8
test al, al
je 0x1002964c
mov ax, word [ebp - 0xfc]
mov word [ebx + edi*2], ax
inc edi
cmp byte [esi], 0
jne 0x10029603
mov ebx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0xe8]
xor ecx, ecx
mov word [eax + edi*2], cx
test edi, edi
jle 0x100296f6
mov edx, dword [ebx + 0x44]
mov ecx, dword [ebx + 0x40]
mov eax, dword [ebx + 4]
cmp ecx, edx
je 0x10029691
cmp ecx, eax
jle 0x10029681
mov dword [ebx + 0x40], eax
mov ecx, eax
cmp edx, eax
jle 0x1002968a
mov dword [ebx + 0x44], eax
mov edx, eax
cmp ecx, edx
jne 0x10029691
mov dword [ebx + 0x3c], ecx
cmp dword [ebx + 0x3c], eax
jle 0x10029699
mov dword [ebx + 0x3c], eax
lea edx, [ebx + 0x3c]
mov ecx, ebx
call fcn.10026b30
mov edx, dword [ebx + 0x3c]
mov ecx, ebx
push edi
push dword [ebp - 0xe8]
call fcn.10026650
add esp, 8
test al, al
je 0x100296d5
mov edx, dword [ebx + 0x3c]
lea ecx, [ebx + 0x54]
push edi
push 0
call fcn.10027990
add esp, 8
mov byte [ebx + 0x4b], 0
add dword [ebx + 0x3c], edi
jmp 0x100296e9
movzx eax, word [ebx + 0xe52]
test ax, ax
je 0x100296e9
dec eax
mov word [ebx + 0xe52], ax
mov eax, dword [ebp - 0xe8]
mov byte [ebx + 0xe64], 1
test eax, eax
je 0x1002970a
mov ecx, dword [0x1003d7b8]
test ecx, ecx
je 0x1002970a
dec dword [ecx + 0x370]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
jmp 0x1002986b
mov edi, dword [ebp - 0xa4]
cmp dword [edi + 0xcc], 0
je 0x100297eb
mov edi, dword [ebx + 0x44]
mov eax, dword [ebx + 0x40]
cmp eax, edi
je 0x1002973d
mov ecx, edi
cmovl ecx, eax
jmp 0x1002973f
xor ecx, ecx
cmp eax, edi
mov dword [ebp - 0xb8], ecx
cmovge edi, eax
jne 0x1002974f
mov edi, dword [ebx + 4]
mov eax, dword [ebx + 0x14]
lea edx, [eax + edi*2]
lea ecx, [eax + ecx*2]
call fcn.10002c80
mov ecx, dword [0x1003d7b8]
inc eax
mov dword [ebp - 0x100], eax
test ecx, ecx
je 0x10029774
inc dword [ecx + 0x370]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov esi, dword [ebx + 0x14]
add esp, 4
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0xe4], eax
lea ecx, [esi + edi*2]
push ecx
mov ecx, dword [ebp - 0xb8]
lea ecx, [esi + ecx*2]
mov esi, eax
push ecx
mov ecx, esi
call fcn.10002b50
mov eax, dword [0x1003d7b8]
add esp, 8
mov ecx, dword [eax + 0xcc]
test ecx, ecx
je 0x100297c7
push esi
push dword [eax + 0xd0]
call ecx
mov eax, dword [0x1003d7b8]
add esp, 8
test esi, esi
je 0x100297d5
test eax, eax
je 0x100297d5
dec dword [eax + 0x370]
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov al, byte [ebp - 0xae]
add esp, 4
mov edi, dword [ebp - 0xa4]
test al, al
je 0x100292ba
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
jne 0x1002980f
mov eax, dword [ebx + 4]
mov dword [ebx + 0x40], 0
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x3c], eax
mov byte [ebx + 0x4b], 0
mov byte [ebx + 0xe64], 1
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
je 0x100292ba
lea edx, [ebx + 0x3c]
mov ecx, ebx
call fcn.10026b30
mov cl, byte [ebp - 0x9d]
mov byte [ebx + 0x4b], 0
jmp 0x10029877
movzx eax, al
lea edx, [ebx + 0x3c]
xor eax, 1
mov ecx, ebx
add eax, 0x1000a
push eax
call fcn.10026bc0
mov eax, dword [ebx + 0x3c]
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x40], eax
add esp, 4
mov dword [ebx + 0xe60], 0xbe99999a
mov byte [ebx + 0xe64], 1
mov cl, byte [ebp - 0x9d]
mov edi, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xac]
mov dh, byte [ebp - 0x9e]
cmp dword [edi + 0x19bc], eax
jne 0x10029c9e
xor eax, eax
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xbc], eax
test cl, cl
je 0x10029906
cmp byte [ebp - 0xd4], al
jne 0x100298f1
mov esi, dword [ebx + 0x2c]
mov ecx, esi
mov eax, dword [ebp - 0xcc]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100298d8
test dl, dl
je 0x100298d4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100298d8
add eax, 2
add ecx, 2
test dl, dl
jne 0x100298b8
xor eax, eax
jmp 0x100298dd
sbb eax, eax
or eax, 1
test eax, eax
je 0x100298f1
mov eax, dword [ebx + 0x24]
dec eax
mov dword [ebp - 0xc8], esi
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp + 0x14]
test dh, dh
je 0x10029b8d
test al, 0x20
je 0x10029b8d
jmp 0x10029909
mov eax, dword [ebp + 0x14]
cmp byte [ebp - 0xd4], 0
jne 0x1002996a
mov eax, dword [ebx + 0xc]
mov byte [ebx + 0x30], 1
mov edi, dword [ebx + 0x1c]
lea esi, [eax*4 + 1]
lea eax, [ebx + 0x18]
cmp esi, edi
jle 0x10029953
test edi, edi
je 0x1002993b
mov eax, edi
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
add ecx, edi
jmp 0x10029940
mov ecx, 8
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
lea ecx, [ebx + 0x18]
push eax
call fcn.10013ac0
lea eax, [ebx + 0x18]
mov dword [eax], esi
mov edx, esi
mov ecx, dword [ebx + 0x20]
push 0
push dword [ebx + 0x14]
call fcn.10002b50
mov eax, dword [ebp + 0x14]
add esp, 8
test eax, 0x1c0
je 0x10029b38
mov edi, dword [0x1003d7b8]
mov esi, 0x15
test al, 0x40
je 0x1002999e
mov ecx, dword [edi + 0x34]
test ecx, ecx
js 0x1002999e
call fcn.10008290
test al, al
je 0x1002999b
lea eax, [esi + 0x2b]
xor esi, esi
jmp 0x100299ec
mov eax, dword [ebp + 0x14]
test al, al
jns 0x100299dc
mov ecx, dword [edi + 0x40]
test ecx, ecx
js 0x100299bf
call fcn.10008290
test al, al
je 0x100299bc
mov eax, 0x80
lea esi, [eax - 0x7d]
jmp 0x100299ec
mov eax, dword [ebp + 0x14]
mov ecx, dword [edi + 0x44]
test ecx, ecx
js 0x100299dc
call fcn.10008290
test al, al
je 0x100299d9
mov eax, 0x80
lea esi, [eax - 0x7c]
jmp 0x100299ec
mov eax, dword [ebp + 0x14]
test eax, 0x100
je 0x10029b38
mov eax, pe_nt_image_headers32
mov dword [ebp - 0x6c], eax
xor ecx, ecx
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x68], eax
mov eax, dword [ebx + 0x20]
mov dword [ebp - 0x58], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 0x54], eax
mov eax, dword [ebx + 0x34]
mov dword [ebp - 0x5c], esi
mov esi, dword [ebx + 0x14]
mov dword [ebp - 0x50], eax
mov eax, dword [ebx + 0x3c]
mov word [ebp - 0x4b], cx
mov byte [ebp - 0x49], cl
mov dword [ebp - 0x64], ecx
mov byte [ebp - 0x4c], cl
lea edx, [esi + eax*2]
mov ecx, esi
mov dword [ebp - 0x60], 0
call fcn.10002c80
mov ecx, dword [ebx + 0x40]
mov edi, eax
mov dword [ebp - 0x48], edi
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.10002c80
mov ecx, dword [ebx + 0x44]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x44], eax
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.10002c80
mov esi, eax
lea eax, [ebp - 0x6c]
push eax
xor eax, eax
mov dword [ebp - 0x40], esi
call eax
mov ecx, dword [ebp - 0x48]
add esp, 4
cmp ecx, edi
mov edi, dword [ebp - 0x58]
je 0x10029a86
lea edx, [ecx + edi]
mov ecx, edi
call fcn.10002b00
mov dword [ebx + 0x3c], eax
mov byte [ebx + 0xe64], 1
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0xb8]
je 0x10029a9e
lea edx, [eax + edi]
mov ecx, edi
call fcn.10002b00
mov dword [ebx + 0x40], eax
mov eax, dword [ebp - 0x40]
cmp eax, esi
je 0x10029ab2
lea edx, [eax + edi]
mov ecx, edi
call fcn.10002b00
mov dword [ebx + 0x44], eax
cmp byte [ebp - 0x4c], 0
je 0x10029b35
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0xd8]
cmp ecx, edx
jle 0x10029b10
cmp byte [ebp - 0xf8], 0
je 0x10029b10
mov esi, dword [ebx + 0xc]
mov eax, dword [ebx + 0x10]
sub esi, edx
add esi, ecx
cmp esi, eax
jle 0x10029b0d
test eax, eax
je 0x10029af3
cdq
sub eax, edx
lea edx, [ebx + 0xc]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x10029afb
mov ecx, 8
lea edx, [ebx + 0xc]
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.10013bb0
mov edi, dword [ebp - 0x58]
mov dword [ebx + 0xc], esi
mov edx, dword [ebx + 0xc]
push 0
push ecx
mov ecx, dword [ebx + 0x14]
push edi
call fcn.10002a90
mov dword [ebx + 4], eax
add esp, 0xc
mov eax, dword [ebp - 0x54]
mov dword [ebx + 8], eax
mov dword [ebx + 0xe60], 0xbe99999a
mov eax, dword [ebp + 0x14]
cmp byte [ebp - 0xd4], 0
jne 0x10029b87
mov esi, dword [ebx + 0x20]
mov eax, esi
mov ecx, dword [ebp - 0xcc]
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10029b70
test dl, dl
je 0x10029b6c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10029b70
add eax, 2
add ecx, 2
test dl, dl
jne 0x10029b50
xor eax, eax
jmp 0x10029b75
sbb eax, eax
or eax, 1
mov edi, dword [ebp - 0xa4]
test eax, eax
mov eax, dword [ebp + 0x14]
je 0x10029b8d
mov ecx, dword [ebx + 8]
jmp 0x10029b99
mov edi, dword [ebp - 0xa4]
mov esi, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0xbc]
test esi, esi
je 0x10029c80
cmp dword [ebp - 0xd8], ecx
je 0x10029c3a
cmp byte [ebp - 0xf8], 0
je 0x10029c3a
mov dword [ebp - 0x98], eax
xorps xmm0, xmm0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x88], eax
lea eax, [ecx + 1]
cmp eax, 0x20
movlpd qword [ebp - 0x90], xmm0
movlpd qword [ebp - 0x7c], xmm0
cmovle eax, dword [ebp - 0xf4]
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x9c]
push eax
xor eax, eax
movlpd qword [ebp - 0x74], xmm0
mov dword [ebp - 0x9c], 0x40000
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x94], 0
call eax
mov edx, dword [ebp - 0x80]
add esp, 4
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xcc], eax
lea ecx, [edx - 1]
cmp dword [ebp - 0x84], ecx
cmovl ecx, dword [ebp - 0x84]
jmp 0x10029c3f
mov edx, 0x20
lea eax, [ecx + 1]
cmp eax, edx
cmovl edx, eax
mov dword [ebp - 0xb8], edx
cmp edx, 1
jb 0x10029c79
jbe 0x10029c6e
lea eax, [edx - 1]
push eax
push esi
push dword [ebp - 0xcc]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov edx, dword [ebp - 0xb8]
add esp, 0xc
mov eax, dword [ebp - 0xcc]
mov byte [eax + edx - 1], 0
mov byte [ebp - 0xc3], 1
mov dword [ebx + 0xe68], 0
mov dword [ebx + 0xe6c], 0
mov dword [ebx + 0xe70], 0
cmp byte [ebp - 0xd0], 0
mov ecx, dword [ebp - 0xac]
je 0x10029d18
cmp dword [edi + 0x19bc], ecx
jne 0x10029d18
mov edx, dword [0x1003d7b8]
mov ecx, dword [edx + 0x19bc]
test ecx, ecx
setne al
mov byte [edx + 0x19cc], al
test ecx, ecx
je 0x10029ce3
mov dword [edx + 0x19c8], 0
mov word [edx + 0x19ce], 0
mov ecx, dword [ebp - 0xac]
mov dword [edx + 0x19bc], 0
mov dword [edx + 0x19d4], 0
mov dword [edx + 0x19d8], 0
mov byte [edx + 0x19cd], 0
mov dword [edx + 0x19e4], 0
mov edx, dword [ebp - 0xc0]
movss xmm3, dword [0x10039ba4]
test dl, dl
jne 0x10029e30
mov edx, ecx
lea ecx, [ebp - 0x3c]
push 1
call fcn.100041c0
mov eax, dword [0x1003d7b8]
xorps xmm3, xmm3
movss xmm6, dword [0x10039b38]
add esp, 4
movups xmm2, xmmword [eax + 0x1628]
comiss xmm3, xmm2
movaps xmm1, xmm2
shufps xmm1, xmm2, 0xff
mulss xmm1, dword [eax + 0x1510]
movups xmmword [ebp - 0x14], xmm2
jbe 0x10029d71
xorps xmm0, xmm0
jmp 0x10029d78
movaps xmm0, xmm6
minss xmm0, xmm2
movss xmm4, dword [0x10039ba4]
movss xmm5, dword [0x10039b0c]
movss xmm2, dword [ebp - 0x10]
comiss xmm3, xmm2
mulss xmm0, xmm4
addss xmm0, xmm5
cvttss2si edx, xmm0
jbe 0x10029da3
xorps xmm0, xmm0
jmp 0x10029daa
movaps xmm0, xmm6
minss xmm0, xmm2
movss xmm2, dword [ebp - 0xc]
mulss xmm0, xmm4
addss xmm0, xmm5
cvttss2si eax, xmm0
shl eax, 8
or edx, eax
comiss xmm3, xmm2
jbe 0x10029dca
xorps xmm0, xmm0
jmp 0x10029dd1
movaps xmm0, xmm6
minss xmm0, xmm2
mulss xmm0, xmm4
addss xmm0, xmm5
cvttss2si eax, xmm0
shl eax, 0x10
or edx, eax
comiss xmm3, xmm1
jbe 0x10029dec
xorps xmm0, xmm0
jmp 0x10029df3
movaps xmm0, xmm6
minss xmm0, xmm1
push dword [ebp - 0x30]
movss xmm2, dword [edi + 0x154c]
push dword [ebp - 0x34]
mulss xmm0, xmm4
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
addss xmm0, xmm5
cvttss2si ecx, xmm0
shl ecx, 0x18
or ecx, edx
mov dl, 1
call fcn.10003630
movss xmm3, dword [0x10039ba4]
add esp, 0x10
mov edx, dword [ebp - 0xc0]
movss xmm1, dword [ebp - 0x3c]
movss xmm2, dword [ebp - 0x124]
movaps xmm0, xmm1
movss xmm4, dword [ebp - 0x38]
addss xmm0, xmm2
mov esi, dword [ebp - 0xdc]
movss dword [ebp - 0x2c], xmm1
movss dword [ebp - 0x28], xmm4
movss dword [ebp - 0xe8], xmm0
movss dword [ebp - 0x24], xmm0
movss xmm0, dword [ebp - 0x10c]
addss xmm0, xmm4
movss dword [ebp - 0xc8], xmm0
movss dword [ebp - 0x20], xmm0
test dl, dl
je 0x10029e97
mov eax, dword [esi + 0xc8]
mov dword [ebp - 0xc], eax
mov eax, dword [esi + 0xcc]
mov dword [ebp - 8], eax
jmp 0x10029eb8
movaps xmm0, xmm1
addss xmm0, dword [edi + 0x1544]
movss dword [ebp - 0xc], xmm0
movss xmm0, dword [edi + 0x1548]
addss xmm0, xmm4
movss dword [ebp - 8], xmm0
cmp byte [ebp - 0xde], 0
lea eax, [ebp - 0xc]
movss xmm0, dword [eax]
xorps xmm1, xmm1
movss dword [ebp - 0xf0], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0xd0], xmm0
movss dword [ebp - 0xec], xmm0
xorps xmm0, xmm0
mov dword [ebp - 0xe4], eax
movss dword [ebp - 0x100], xmm0
movss dword [ebp - 0xb8], xmm1
je 0x10029f0c
mov eax, dword [ebx + 0x20]
mov dword [ebp - 0xcc], eax
jmp 0x10029f12
mov eax, dword [ebp - 0xcc]
mov ch, byte [ebp - 0xb0]
mov cl, byte [ebp - 0xb1]
test ch, ch
jne 0x1002a0ce
test cl, cl
jne 0x1002a0ce
test dl, dl
je 0x10029f89
mov dl, byte [eax]
lea ebx, [eax + 1]
xor ecx, ecx
test dl, dl
je 0x10029f52
nop dword [eax]
cmp dl, 0xa
lea eax, [ecx + 1]
mov dl, byte [ebx]
cmovne eax, ecx
inc ebx
mov ecx, eax
test dl, dl
jne 0x10029f40
mov al, byte [ebx - 1]
dec ebx
cmp al, 0xa
je 0x10029f5f
cmp al, 0xd
je 0x10029f5f
inc ecx
mov edx, dword [ebp - 0xcc]
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [edi + 0x18bc]
movss dword [ebp - 0xb8], xmm0
movaps xmm0, xmm2
movss dword [ebp - 0x100], xmm0
jmp 0x10029fc6
mov eax, dword [ebp - 0xac]
cmp dword [edi + 0x19bc], eax
jne 0x10029f9c
mov ecx, dword [ebx + 8]
jmp 0x10029fae
mov ecx, dword [ebp - 0xcc]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10029fa5
sub ecx, edx
mov edx, dword [ebp - 0xcc]
lea ebx, [edx + ecx]
mov eax, ebx
sub eax, edx
cmp eax, 0x200000
jge 0x1002acea
mov eax, dword [0x1003d7b8]
xorps xmm4, xmm4
movss xmm6, dword [0x10039b38]
movups xmm2, xmmword [eax + 0x15b8]
comiss xmm4, xmm2
movaps xmm1, xmm2
shufps xmm1, xmm2, 0xff
mulss xmm1, dword [eax + 0x1510]
movups xmmword [ebp - 0x14], xmm2
jbe 0x10029ffa
xorps xmm0, xmm0
jmp 0x1002a001
movaps xmm0, xmm6
minss xmm0, xmm2
movss xmm5, dword [0x10039b0c]
movss xmm2, dword [ebp - 0x10]
comiss xmm4, xmm2
mulss xmm0, xmm3
addss xmm0, xmm5
cvttss2si ecx, xmm0
jbe 0x1002a024
xorps xmm0, xmm0
jmp 0x1002a02b
movaps xmm0, xmm6
minss xmm0, xmm2
movss xmm2, dword [ebp - 0xc]
mulss xmm0, xmm3
addss xmm0, xmm5
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm4, xmm2
jbe 0x1002a04b
xorps xmm0, xmm0
jmp 0x1002a052
movaps xmm0, xmm6
minss xmm0, xmm2
mulss xmm0, xmm3
addss xmm0, xmm5
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm4, xmm1
jbe 0x1002a06d
xorps xmm6, xmm6
jmp 0x1002a071
minss xmm6, xmm1
cmp byte [ebp - 0xc0], 0
lea eax, [ebp - 0x2c]
movss xmm2, dword [edi + 0x18bc]
mulss xmm6, xmm3
mov dword [ebp - 0x128], 0
cmovne eax, dword [ebp - 0x128]
push eax
addss xmm6, xmm5
push ecx
mov dword [esp], 0
push ebx
push edx
cvttss2si eax, xmm6
shl eax, 0x18
or eax, ecx
mov ecx, dword [esi + 0x26c]
push eax
lea eax, [ebp - 0xf0]
push eax
push dword [edi + 0x18b8]
call fcn.1001d510
jmp 0x1002aca6
mov eax, dword [ebx + 8]
mov edi, 0xfffffc18
mov esi, dword [ebx + 0x14]
xor edx, edx
mov dword [ebp - 0x130], eax
xorps xmm7, xmm7
add eax, dword [ebp - 0xcc]
xorps xmm6, xmm6
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0xd8], esi
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xbc], edi
mov dword [ebp - 0xac], edi
test ch, ch
je 0x1002a135
mov eax, dword [ebx + 0x3c]
or edi, 0xffffffff
mov dword [ebp - 0xbc], edi
lea eax, [esi + eax*2]
mov dword [ebp - 0xf4], eax
lea edx, [edi + 2]
test cl, cl
je 0x1002a157
mov ecx, dword [ebx + 0x44]
cmp dword [ebx + 0x40], ecx
mov dword [ebp - 0xac], 0xffffffff
cmovl ecx, dword [ebx + 0x40]
inc edx
lea eax, [esi + ecx*2]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xc0]
xor esi, esi
movzx eax, al
add edx, eax
mov eax, dword [ebp - 0xd8]
mov ecx, eax
movzx eax, word [eax]
test ax, ax
je 0x1002a1d7
mov ebx, dword [ebp - 0xbc]
mov edi, eax
nop dword [eax]
cmp di, 0xa
jne 0x1002a1b7
inc esi
cmp ebx, 0xffffffff
jne 0x1002a19b
cmp ecx, dword [ebp - 0xf4]
jb 0x1002a19b
dec edx
mov ebx, esi
test edx, edx
jle 0x1002a1c5
cmp dword [ebp - 0xac], 0xffffffff
jne 0x1002a1b7
cmp ecx, dword [ebp - 0xf8]
jb 0x1002a1b7
dec edx
mov dword [ebp - 0xac], esi
test edx, edx
jle 0x1002a1c5
movzx eax, word [ecx + 2]
add ecx, 2
mov edi, eax
test ax, ax
jne 0x1002a180
mov dword [ebp - 0xbc], ebx
mov ebx, dword [ebp - 0x11c]
mov edi, dword [ebp - 0xbc]
mov edx, dword [ebp - 0xd8]
lea ecx, [esi + 1]
cmp edi, 0xffffffff
mov dword [ebp - 0x12c], ecx
mov eax, ecx
cmovne eax, edi
cmp dword [ebp - 0xac], 0xffffffff
mov edi, dword [ebp - 0xf4]
cmovne ecx, dword [ebp - 0xac]
mov dword [ebp - 0xbc], ecx
mov ecx, edi
mov dword [ebp - 0x138], eax
cmp edi, edx
jbe 0x1002a222
cmp word [ecx - 2], 0xa
je 0x1002a222
add ecx, 0xfffffffe
cmp ecx, edx
ja 0x1002a214
mov eax, dword [0x1003d7b8]
movaps xmm2, xmm1
movaps xmm5, xmm1
mov esi, dword [eax + 0x18b8]
movss xmm4, dword [eax + 0x18bc]
divss xmm4, dword [esi + 0x10]
cmp ecx, edi
jae 0x1002a28c
movzx eax, word [ecx]
add ecx, 2
mov edx, eax
cmp eax, 0xa
jne 0x1002a25a
maxss xmm2, xmm5
movaps xmm5, xmm1
jmp 0x1002a282
cmp edx, 0xd
je 0x1002a282
mov edx, eax
cmp edx, dword [esi]
jge 0x1002a26f
mov eax, dword [esi + 8]
movss xmm1, dword [eax + edx*4]
jmp 0x1002a274
movss xmm1, dword [esi + 0xc]
movaps xmm0, xmm4
mulss xmm0, xmm1
xorps xmm1, xmm1
addss xmm5, xmm0
cmp ecx, edi
jb 0x1002a244
mov edx, dword [ebp - 0xd8]
cmp dword [ebp - 0xbc], 0
maxss xmm5, xmm2
movd xmm0, dword [ebp - 0x138]
mov ecx, dword [ebp - 0xa4]
cvtdq2ps xmm0, xmm0
movss xmm3, dword [ecx + 0x18bc]
mulss xmm0, xmm3
movss dword [ebp - 0xac], xmm5
movss dword [ebp - 0xf4], xmm0
jl 0x1002a34b
mov edi, dword [ebp - 0xf8]
mov ecx, edi
cmp edi, edx
jbe 0x1002a2e6
cmp word [ecx - 2], 0xa
lea eax, [ecx - 2]
je 0x1002a2e6
mov ecx, eax
cmp ecx, edx
ja 0x1002a2d6
movaps xmm2, xmm1
movaps xmm6, xmm1
cmp ecx, edi
jae 0x1002a332
movzx eax, word [ecx]
add ecx, 2
mov edx, eax
cmp eax, 0xa
jne 0x1002a306
maxss xmm2, xmm6
movaps xmm6, xmm1
jmp 0x1002a32e
cmp edx, 0xd
je 0x1002a32e
mov edx, eax
cmp edx, dword [esi]
jge 0x1002a31b
mov eax, dword [esi + 8]
movss xmm1, dword [eax + edx*4]
jmp 0x1002a320
movss xmm1, dword [esi + 0xc]
movaps xmm0, xmm4
mulss xmm0, xmm1
xorps xmm1, xmm1
addss xmm6, xmm0
cmp ecx, edi
jb 0x1002a2f0
movd xmm7, dword [ebp - 0xbc]
maxss xmm6, xmm2
mov ecx, dword [ebp - 0xa4]
cvtdq2ps xmm7, xmm7
mulss xmm7, xmm3
mov edx, dword [ebp - 0xc0]
test dl, dl
je 0x1002a381
movd xmm0, dword [ebp - 0x12c]
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm3
movss xmm3, dword [ebp - 0x124]
movss dword [ebp - 0xb8], xmm0
movaps xmm0, xmm3
movss dword [ebp - 0x100], xmm0
jmp 0x1002a389
movss xmm3, dword [ebp - 0x124]
cmp byte [ebp - 0xb0], 0
je 0x1002a48e
cmp byte [ebx + 0xe64], 0
je 0x1002a48e
test dword [ebp + 0x14], 0x1000
jne 0x1002a3f0
movss xmm2, dword [ebx + 0x38]
movaps xmm0, xmm3
comiss xmm2, xmm5
mulss xmm0, dword [0x10039af8]
movaps xmm1, xmm5
jbe 0x1002a3d1
subss xmm1, xmm0
xorps xmm0, xmm0
maxss xmm0, xmm1
jmp 0x1002a3de
subss xmm1, xmm3
comiss xmm1, xmm2
jb 0x1002a3f7
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebx + 0x38], xmm0
jmp 0x1002a3f7
mov dword [ebx + 0x38], 0
test dl, dl
je 0x1002a487
movss xmm0, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xdc]
movaps xmm1, xmm0
subss xmm1, dword [ecx + 0x18bc]
movss xmm2, dword [eax + 0x5c]
comiss xmm2, xmm1
jbe 0x1002a42b
xorps xmm0, xmm0
maxss xmm0, xmm1
jmp 0x1002a437
subss xmm0, dword [ebp - 0x10c]
maxss xmm0, xmm2
subss xmm2, xmm0
movss dword [eax + 0x5c], xmm0
addss xmm2, dword [eax + 0xcc]
movss dword [eax + 0xcc], xmm2
movss xmm0, dword [ebp - 0x20]
movss dword [ebp - 0xc8], xmm0
movss xmm0, dword [ebp - 0x24]
movss dword [ebp - 0xe8], xmm0
movss xmm0, dword [ebp - 0x2c]
movss dword [ebp - 0xd0], xmm2
movss dword [ebp - 0xec], xmm2
movss dword [ebp - 0x104], xmm0
mov byte [ebx + 0xe64], 0
cmp byte [ebp - 0xb1], 0
movss xmm5, dword [ebx + 0x38]
movss dword [ebp - 0xbc], xmm5
je 0x1002a889
mov edx, dword [ebx + 0x44]
mov eax, edx
mov ecx, dword [ebx + 0x40]
cmp ecx, edx
mov edi, dword [ebp - 0xd8]
cmovl eax, ecx
cmovge edx, ecx
cmp byte [ebp - 0xb0], 0
lea esi, [edi + eax*2]
lea eax, [edi + edx*2]
mov dword [ebp - 0xd8], eax
je 0x1002a4dd
movss xmm1, dword [0x10039b38]
jmp 0x1002a4e5
movss xmm1, dword [0x10039b10]
mov edx, dword [0x1003d7b8]
xorps xmm4, xmm4
movups xmm2, xmmword [edx + 0x1858]
mulss xmm1, dword [edx + 0x1510]
comiss xmm4, xmm2
movaps xmm0, xmm2
shufps xmm0, xmm2, 0xff
movups xmmword [ebp - 0x118], xmm2
mulss xmm1, xmm0
jbe 0x1002a519
xorps xmm0, xmm0
jmp 0x1002a525
movss xmm0, dword [0x10039b38]
minss xmm0, xmm2
movss xmm3, dword [0x10039ba4]
movss xmm5, dword [0x10039b0c]
movss xmm2, dword [ebp - 0x114]
comiss xmm4, xmm2
mulss xmm0, xmm3
addss xmm0, xmm5
cvttss2si ecx, xmm0
jbe 0x1002a553
xorps xmm0, xmm0
jmp 0x1002a55f
movss xmm0, dword [0x10039b38]
minss xmm0, xmm2
movss xmm2, dword [ebp - 0x110]
mulss xmm0, xmm3
addss xmm0, xmm5
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm4, xmm2
jbe 0x1002a582
xorps xmm0, xmm0
jmp 0x1002a58e
movss xmm0, dword [0x10039b38]
minss xmm0, xmm2
mulss xmm0, xmm3
addss xmm0, xmm5
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm4, xmm1
jbe 0x1002a5a9
xorps xmm0, xmm0
jmp 0x1002a5b5
movss xmm0, dword [0x10039b38]
minss xmm0, xmm1
mulss xmm0, xmm3
addss xmm0, xmm5
cvttss2si eax, xmm0
shl eax, 0x18
or eax, ecx
cmp byte [ebp - 0xc0], 0
mov dword [ebp - 0x12c], eax
je 0x1002a5e7
movss dword [ebp - 0x128], xmm4
movss dword [ebp - 0xf8], xmm4
jmp 0x1002a5f7
movss xmm0, dword [0x10039b54]
movss dword [ebp - 0xf8], xmm0
mov edi, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xd8]
movss xmm5, dword [edi]
addss xmm5, xmm6
movss xmm6, dword [ebp - 0xd0]
addss xmm6, xmm7
subss xmm5, dword [ebp - 0xbc]
subss xmm6, xmm4
movss dword [ebp - 0xe4], xmm6
cmp esi, ecx
jae 0x1002a87f
mov ebx, dword [ebp - 0xa4]
movss xmm3, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xa4]
movss xmm7, dword [ebx + 0x18bc]
mov ebx, dword [0x1003d7b8]
movaps xmm1, xmm7
nop dword [eax + eax]
movaps xmm0, xmm3
addss xmm0, xmm1
comiss xmm6, xmm0
ja 0x1002a86f
movss xmm0, dword [ebp - 0x28]
comiss xmm0, xmm6
jbe 0x1002a69a
cmp esi, ecx
jae 0x1002a844
movzx eax, word [esi]
add esi, 2
cmp eax, 0xa
je 0x1002a83e
cmp esi, ecx
jb 0x1002a682
jmp 0x1002a83e
mov edx, dword [ebx + 0x18b8]
xorps xmm1, xmm1
movss xmm3, dword [ebx + 0x18bc]
xorps xmm4, xmm4
xorps xmm2, xmm2
divss xmm3, dword [edx + 0x10]
cmp esi, ecx
jae 0x1002a70f
nop word [eax + eax]
movzx eax, word [esi]
add esi, 2
mov ecx, eax
cmp eax, 0xa
je 0x1002a6fc
cmp ecx, 0xd
je 0x1002a6f0
cmp ecx, dword [edx]
jge 0x1002a6e0
mov eax, dword [edx + 8]
movss xmm1, dword [eax + ecx*4]
jmp 0x1002a6e5
movss xmm1, dword [edx + 0xc]
movaps xmm0, xmm3
mulss xmm0, xmm1
addss xmm2, xmm0
mov ecx, dword [ebp - 0xd8]
cmp esi, ecx
jb 0x1002a6c0
jmp 0x1002a70c
mov ecx, dword [ebp - 0xd8]
xorps xmm4, xmm4
maxss xmm4, xmm2
xorps xmm2, xmm2
xorps xmm1, xmm1
maxss xmm2, xmm4
comiss xmm1, xmm2
jb 0x1002a74e
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax + 0x18b8]
cmp dword [eax], 0x20
jle 0x1002a736
mov eax, dword [eax + 8]
movss xmm0, dword [eax + 0x80]
jmp 0x1002a73b
movss xmm0, dword [eax + 0xc]
mulss xmm0, dword [0x10039b0c]
cvttss2si eax, xmm0
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movss xmm0, dword [ebp - 0xf8]
addss xmm2, xmm5
movss xmm3, dword [ebp - 0xc8]
addss xmm5, xmm1
movss xmm1, dword [ebp - 0x128]
addss xmm0, xmm6
movss xmm4, dword [ebp - 0xe8]
subss xmm1, xmm7
minss xmm2, xmm4
maxss xmm5, dword [ebp - 0x104]
minss xmm0, xmm3
addss xmm1, xmm6
movss dword [ebp - 0x110], xmm2
movss dword [ebp - 0x118], xmm5
comiss xmm0, dword [ebp - 0x28]
maxss xmm1, dword [ebp - 0x28]
movss dword [ebp - 0x10c], xmm0
movss dword [ebp - 0x114], xmm1
jbe 0x1002a83e
comiss xmm3, xmm1
jbe 0x1002a83e
comiss xmm2, dword [ebp - 0x104]
jbe 0x1002a83e
comiss xmm4, xmm5
jbe 0x1002a83e
push 0xf
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x110]
push dword [ebp - 0x12c]
push eax
lea eax, [ebp - 0x118]
push eax
mov eax, dword [ebp - 0xdc]
mov ecx, dword [eax + 0x26c]
call fcn.1001d2b0
movss xmm0, dword [ebp - 0x24]
movss xmm3, dword [ebp - 0x20]
movss xmm6, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xd8]
mov ebx, dword [0x1003d7b8]
movss dword [ebp - 0xe8], xmm0
movss xmm0, dword [ebp - 0x2c]
movss dword [ebp - 0xc8], xmm3
movss dword [ebp - 0x104], xmm0
mov eax, dword [ebp - 0xa4]
movss xmm7, dword [eax + 0x18bc]
movss xmm5, dword [edi]
addss xmm6, xmm7
movaps xmm1, xmm7
subss xmm5, dword [ebp - 0xbc]
movss dword [ebp - 0xe4], xmm6
cmp esi, ecx
jb 0x1002a660
movss xmm5, dword [ebp - 0xbc]
mov ebx, dword [ebp - 0x11c]
jmp 0x1002a88f
movss xmm5, dword [ebp - 0xbc]
jmp 0x1002a8a0
mov edi, dword [ebp - 0xe4]
mov edx, dword [0x1003d7b8]
xorps xmm4, xmm4
movss xmm3, dword [0x10039ba4]
cmp byte [ebp - 0xc0], 0
jne 0x1002a8b9
cmp dword [ebp - 0x130], 0x200000
jge 0x1002aa16
movups xmm1, xmmword [edx + 0x15b8]
movss xmm2, dword [edx + 0x1510]
comiss xmm4, xmm1
movss xmm7, dword [0x10039b38]
movaps xmm0, xmm1
shufps xmm0, xmm1, 0xff
movups xmmword [ebp - 0x118], xmm1
mulss xmm2, xmm0
jbe 0x1002a8ec
xorps xmm0, xmm0
jmp 0x1002a8f3
movaps xmm0, xmm7
minss xmm0, xmm1
movss xmm6, dword [0x10039b0c]
movss xmm1, dword [ebp - 0x114]
comiss xmm4, xmm1
mulss xmm0, xmm3
addss xmm0, xmm6
cvttss2si ecx, xmm0
jbe 0x1002a919
xorps xmm0, xmm0
jmp 0x1002a920
movaps xmm0, xmm7
minss xmm0, xmm1
movss xmm1, dword [ebp - 0x110]
mulss xmm0, xmm3
addss xmm0, xmm6
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm4, xmm1
jbe 0x1002a943
xorps xmm0, xmm0
jmp 0x1002a94a
movaps xmm0, xmm7
minss xmm0, xmm1
mulss xmm0, xmm3
addss xmm0, xmm6
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm4, xmm2
jbe 0x1002a965
xorps xmm1, xmm1
jmp 0x1002a96c
movaps xmm1, xmm7
minss xmm1, xmm2
movss xmm0, dword [edi]
lea eax, [ebp - 0x2c]
mov esi, dword [ebp - 0xa4]
subss xmm0, xmm5
mulss xmm1, xmm3
xor edx, edx
cmp byte [ebp - 0xc0], dl
movss xmm2, dword [esi + 0x18bc]
cmovne eax, edx
push eax
addss xmm1, xmm6
movss dword [ebp - 0x110], xmm0
movss xmm0, dword [ebp - 0xd0]
push ecx
mov dword [esp], edx
subss xmm0, xmm4
push dword [ebp - 0xfc]
cvttss2si eax, xmm1
push dword [ebp - 0xcc]
shl eax, 0x18
or eax, ecx
movss dword [ebp - 0x10c], xmm0
push eax
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0xdc]
push dword [esi + 0x18b8]
mov ecx, dword [eax + 0x26c]
call fcn.1001d510
movss xmm0, dword [ebp - 0x20]
movss dword [ebp - 0xc8], xmm0
movss xmm0, dword [ebp - 0x24]
movss dword [ebp - 0xe8], xmm0
movss xmm0, dword [ebp - 0x2c]
movss dword [ebp - 0x104], xmm0
jmp 0x1002aa1c
mov esi, dword [ebp - 0xa4]
cmp byte [ebp - 0xb0], 0
je 0x1002ac9a
movss xmm0, dword [esi + 0x18]
addss xmm0, dword [ebx + 0xe60]
movss dword [ebx + 0xe60], xmm0
cmp byte [esi + 0xae], 0
je 0x1002aa8e
xorps xmm4, xmm4
comiss xmm4, xmm0
jae 0x1002aa8e
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x110], xmm0
fld qword [ebp - 0x110]
fld qword [0x10039b48]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIfmod
movss xmm0, dword [0x10039b2c]
fstp qword [ebp - 0x110]
movsd xmm1, qword [ebp - 0x110]
cvtpd2ps xmm1, xmm1
comiss xmm0, xmm1
jae 0x1002aa8e
xor al, al
jmp 0x1002aa90
mov al, 1
movss xmm2, dword [ebp - 0xd0]
xorps xmm6, xmm6
movss xmm5, dword [edi]
mov edi, dword [ebp - 0xa4]
movss xmm7, dword [0x10039b0c]
movss xmm4, dword [0x10039b38]
addss xmm2, dword [ebp - 0xf4]
addss xmm5, dword [ebp - 0xac]
subss xmm2, xmm6
subss xmm5, dword [ebp - 0xbc]
movss dword [ebp - 0xd0], xmm2
movaps xmm0, xmm2
movss dword [ebp - 0x130], xmm5
movaps xmm1, xmm5
movss dword [ebp - 0x118], xmm5
movaps xmm3, xmm2
addss xmm1, xmm4
subss xmm0, dword [edi + 0x18bc]
subss xmm3, dword [0x10039b40]
movss dword [ebp - 0x110], xmm1
addss xmm0, xmm7
movss dword [ebp - 0x10c], xmm3
movss dword [ebp - 0x114], xmm0
test al, al
je 0x1002ac6d
comiss xmm3, dword [ebp - 0x28]
jbe 0x1002ac6d
movss xmm2, dword [ebp - 0xc8]
comiss xmm2, xmm0
jbe 0x1002ac65
comiss xmm1, dword [ebp - 0x104]
jbe 0x1002ac65
movss xmm0, dword [ebp - 0xe8]
comiss xmm0, xmm5
jbe 0x1002ac65
mov eax, dword [0x1003d7b8]
movups xmm2, xmmword [eax + 0x15b8]
comiss xmm6, xmm2
movaps xmm1, xmm2
shufps xmm1, xmm2, 0xff
mulss xmm1, dword [eax + 0x1510]
movups xmmword [ebp - 0x14], xmm2
jbe 0x1002ab8c
xorps xmm0, xmm0
jmp 0x1002ab93
movaps xmm0, xmm4
minss xmm0, xmm2
movss xmm4, dword [0x10039ba4]
movss xmm2, dword [ebp - 0x10]
comiss xmm6, xmm2
mulss xmm0, xmm4
addss xmm0, xmm7
cvttss2si ecx, xmm0
jbe 0x1002abb6
xorps xmm0, xmm0
jmp 0x1002abc2
movss xmm0, dword [0x10039b38]
minss xmm0, xmm2
movss xmm2, dword [ebp - 0xc]
mulss xmm0, xmm4
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm6, xmm2
jbe 0x1002abe2
xorps xmm0, xmm0
jmp 0x1002abee
movss xmm0, dword [0x10039b38]
minss xmm0, xmm2
mulss xmm0, xmm4
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm6, xmm1
jbe 0x1002ac09
xorps xmm0, xmm0
jmp 0x1002ac15
movss xmm0, dword [0x10039b38]
minss xmm0, xmm1
mulss xmm0, xmm4
push ecx
mov dword [esp], 0x3f800000
movss dword [ebp - 0xc], xmm5
addss xmm0, xmm7
movss dword [ebp - 8], xmm3
cvttss2si eax, xmm0
shl eax, 0x18
or eax, ecx
push eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x118]
push eax
mov eax, dword [ebp - 0xdc]
mov ecx, dword [eax + 0x26c]
call fcn.1001d180
movss xmm5, dword [ebp - 0x130]
movss xmm4, dword [0x10039b38]
movss xmm2, dword [ebp - 0xd0]
cmp byte [ebp - 0xd4], 0
mov ebx, dword [ebp - 0xfc]
jne 0x1002aca6
subss xmm2, dword [edi + 0x18bc]
subss xmm5, xmm4
movss dword [edi + 0x2cd4], xmm2
movss dword [edi + 0x2cd0], xmm5
jmp 0x1002aca6
mov edi, dword [ebp - 0xa4]
mov ebx, dword [ebp - 0xfc]
cmp byte [ebp - 0xc0], 0
je 0x1002acea
movss xmm0, dword [ebp - 0x100]
lea ecx, [ebp - 0xc]
xorps xmm4, xmm4
addss xmm0, xmm4
movss dword [ebp - 0xc], xmm0
movss xmm0, dword [ebp - 0xb8]
addss xmm0, dword [edi + 0x18bc]
movss dword [ebp - 8], xmm0
call fcn.10024b90
call fcn.100085d0
call fcn.1000e370
mov eax, dword [ebp - 0x120]
test al, al
je 0x1002acff
call fcn.1000de20
mov eax, dword [ebp - 0x120]
cmp byte [edi + 0x2d0c], 0
je 0x1002ad21
test al, al
jne 0x1002ad21
mov edx, dword [ebp - 0xcc]
lea ecx, [ebp - 0xf0]
push ebx
call fcn.10012550
add esp, 4
movss xmm0, dword [ebp - 0x134]
comiss xmm0, dword [0x10039ac8]
jbe 0x1002ad7a
movss xmm0, dword [edi + 0x155c]
xor edx, edx
addss xmm0, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x13c]
movss dword [ebp - 0xf0], xmm0
movss xmm0, dword [edi + 0x1548]
addss xmm0, dword [ebp - 0x38]
movss dword [ebp - 0xec], xmm0
push dword [ebp - 0xec]
push dword [ebp - 0xf0]
push 1
call fcn.10002de0
add esp, 0xc
mov cl, byte [ebp - 0xc3]
test cl, cl
je 0x1002ad9d
mov eax, dword [0x1003d7b8]
mov byte [eax + 0x19cf], 1
mov eax, dword [eax + 0x199c]
or dword [eax + 0x10c], 4
test byte [ebp + 0x14], 0x20
movzx eax, cl
movzx ecx, byte [ebp - 0x9e]
cmovne eax, ecx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1002f9c3
mov esp, ebp
pop ebp
ret