Function at 0x10027b10
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get number of processors

Disassembly:
push ebp
lea ebp, [esp - 0x19c]
sub esp, 0x19c
push 0xffffffffffffffff
push 0x10036a66
mov eax, dword fs:[0]
push eax
sub esp, 0x74
mov eax, dword [0x1006200c]
xor eax, ebp
mov dword [ebp + 0x198], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor edi, edi
mov dword [ebp - 0x1c], edi
mov ecx, dword [0x100c9388]
mov dword [ebp - 0x20], edi
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [0x100c9394]
push eax
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
call edx
mov dword [ebp - 0x58], eax
test eax, eax
je 0x100288e7
cmp byte [0x100e51bc], 0
jne 0x10027bc3
cmp byte [0x100e51bd], 0
jne 0x10027bc3
cmp byte [0x100e51be], 0
jne 0x10027bc3
cmp byte [0x100e51bf], 0
jne 0x10027bc3
cmp byte [0x100e51c0], 0
jne 0x10027bc3
cmp byte [0x100e51c1], 0
jne 0x10027bc3
cmp byte [0x100e51c3], 0
jne 0x10027bc3
cmp byte [0x100e51c2], 0
je 0x100288e7
xor eax, eax
mov edx, 1
mov dword [ebp - 0x38], eax
mov eax, dword [0x100c9390]
mov dword [ebp - 0x34], edx
cmp dword [eax + 0x14], edx
jl 0x100288e7
nop
mov ecx, dword [0x100c9394]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov ebx, eax
mov dword [ebp - 0x44], ebx
test ebx, ebx
je 0x100288d3
mov ecx, ebx
call fcn.10003180
cmp dword [eax], 1
jge 0x100288d3
cmp byte [0x100e51c6], 0
je 0x10027c2d
mov ecx, ebx
call fcn.10002d60
mov ecx, dword [ebp - 0x58]
mov esi, dword [eax]
call fcn.10002d60
cmp esi, dword [eax]
je 0x100288d3
mov eax, dword [ebx + 8]
lea ecx, [ebx + 8]
mov eax, dword [eax + 0x20]
call eax
test al, al
je 0x10027c55
mov ecx, ebx
call fcn.10002d60
mov ecx, dword [ebp - 0x58]
mov esi, dword [eax]
call fcn.10002d60
cmp esi, dword [eax]
je 0x100288d3
mov eax, dword [ebp - 0x34]
cmp byte [eax + 0x100e53f8], 0
je 0x10027c6d
mov dword [ebp - 0x4c], 0xffffffff
mov eax, dword [ebp - 0x4c]
jmp 0x10027c94
mov ecx, ebx
call fcn.10002d60
cmp dword [eax], 2
jne 0x10027c80
mov eax, dword [0x100e4f48]
jmp 0x10027c94
mov ecx, ebx
call fcn.10002d60
cmp dword [eax], 3
mov eax, dword [ebp - 0x38]
cmove eax, dword [0x100e4f44]
mov dword [ebp - 0x38], eax
mov ecx, ebx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebx]
call dword [eax + 0x24]
mov ecx, ebx
movss xmm0, dword [eax]
movss dword [ebp - 0x28], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x10], xmm0
movss xmm0, dword [eax + 8]
movss dword [ebp - 0x24], xmm0
call fcn.10002eb0
movss xmm0, dword [ebp - 0x24]
mov eax, dword [eax]
shr eax, 1
and al, 1
mov dword [ebp - 0x3c], eax
je 0x10027cdf
addss xmm0, dword [0x1005e520]
jmp 0x10027ce7
addss xmm0, dword [0x1005e530]
mov ecx, dword [0x100c9388]
movss dword [ebp - 0x18], xmm0
mov eax, dword [ecx]
mov eax, dword [eax + 0x98]
call eax
movss xmm1, dword [ebp - 0x28]
mov esi, eax
movss xmm3, dword [ebp - 0x10]
movaps xmm4, xmm1
movss xmm5, dword [ebp - 0x24]
movaps xmm0, xmm3
mulss xmm0, dword [esi + 0x34]
mulss xmm4, dword [esi + 0x30]
addss xmm4, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [esi + 0x38]
addss xmm0, dword [esi + 0x3c]
addss xmm4, xmm0
cvtps2pd xmm0, xmm4
comisd xmm0, xmmword [0x1005e408]
jbe 0x100288d3
mulss xmm1, dword [esi + 0x10]
movaps xmm0, xmm3
mov ecx, dword [0x100c935c]
mov eax, ecx
mulss xmm0, dword [esi + 0x14]
xorps xmm2, xmm2
cdq
mulss xmm5, dword [esi + 0x18]
sub eax, edx
sar eax, 1
addss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, ecx
mov ecx, dword [0x100c9388]
addss xmm5, dword [esi + 0x1c]
cvtsi2sd xmm2, eax
mov eax, dword [ecx]
addss xmm1, xmm5
mov eax, dword [eax + 0x98]
divss xmm1, xmm4
mulss xmm1, dword [0x1005e3f8]
cvtps2pd xmm1, xmm1
mulsd xmm1, xmm0
addsd xmm1, qword [0x1005e488]
subsd xmm2, xmm1
cvtpd2ps xmm0, xmm2
movss dword [ebp - 0x14], xmm0
call eax
movss xmm4, dword [ebp - 0x10]
mov esi, eax
movss xmm6, dword [ebp - 0x28]
movaps xmm1, xmm4
movss xmm5, dword [ebp - 0x18]
movaps xmm0, xmm6
mulss xmm0, dword [esi + 0x30]
mulss xmm1, dword [esi + 0x34]
addss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [esi + 0x38]
addss xmm0, dword [esi + 0x3c]
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
comisd xmm0, xmmword [0x1005e408]
jbe 0x100288d3
movss xmm3, dword [0x1005e420]
movaps xmm0, xmm6
mulss xmm0, dword [esi]
xorps xmm2, xmm2
mov eax, dword [0x100c9360]
divss xmm3, xmm1
mov ecx, dword [0x100c935c]
movaps xmm1, xmm4
mulss xmm6, dword [esi + 0x10]
mulss xmm1, dword [esi + 4]
mulss xmm4, dword [esi + 0x14]
addss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [esi + 8]
mulss xmm5, dword [esi + 0x18]
addss xmm4, xmm6
addss xmm0, dword [esi + 0xc]
addss xmm5, dword [esi + 0x1c]
addss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, eax
cdq
sub eax, edx
sar eax, 1
mulss xmm1, xmm3
addss xmm4, xmm5
mulss xmm1, dword [0x1005e3f8]
mulss xmm4, xmm3
cvtps2pd xmm1, xmm1
mulss xmm4, dword [0x1005e3f8]
mulsd xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, eax
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
cmp byte [0x100e51c1], 0
addsd xmm1, qword [0x1005e488]
cvtsi2sd xmm2, eax
addsd xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, ecx
cvtpd2ps xmm7, xmm1
cvtps2pd xmm1, xmm4
movss dword [ebp - 0x24], xmm7
mulsd xmm1, xmm0
addsd xmm1, qword [0x1005e488]
subsd xmm2, xmm1
cvtpd2ps xmm1, xmm2
movss dword [ebp - 0x18], xmm1
je 0x10027ef3
mov dword [ebp - 0x50], 0xa0ffffff
mov ecx, 0x100c9194
push dword [ebp - 0x50]
push ebx
call fcn.10010650
movss xmm1, dword [ebp - 0x18]
movss xmm7, dword [ebp - 0x24]
cmp byte [ebp - 0x3c], 0
movss xmm0, dword [ebp - 0x14]
subss xmm0, xmm1
movaps xmm2, xmm0
movss dword [ebp - 0x48], xmm0
mulss xmm2, dword [0x1005e3d4]
movss dword [ebp - 0x28], xmm2
je 0x10027f24
mulss xmm2, dword [0x1005e448]
movss dword [ebp - 0x28], xmm2
cmp byte [0x100e51bc], 0
movaps xmm3, xmm7
subss xmm3, xmm2
movss dword [ebp - 0x10], xmm3
je 0x10027f7c
movzx edx, byte [ebp - 0x1a]
mov eax, dword [ebp - 0x38]
or edx, 0xffffa000
movzx ecx, ah
shl edx, 8
movzx eax, al
or edx, ecx
shl edx, 8
or edx, eax
cvttss2si eax, xmm0
push 0x80000000
push edx
movaps xmm0, xmm2
push eax
addss xmm0, xmm2
cvttss2si eax, xmm0
push eax
cvttss2si eax, xmm1
push eax
cvttss2si eax, xmm3
push eax
call fcn.1000ee30
xor esi, esi
nop
cmp byte [0x100e51c2], 0
je 0x10027f95
push 0xa0ffffff
push esi
push ebx
call fcn.10010e30
inc esi
cmp esi, 0x12
jle 0x10027f80
mov ecx, dword [0x100c9388]
lea edx, [ebp]
mov esi, dword [ebp - 0x34]
push edx
push esi
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
cmp byte [0x100e51bd], 0
je 0x10028092
cmp byte [esi + 0x100e53f8], 0
je 0x10027ffc
mov dword [ebp + 0x84], 0x65697246
mov dword [ebp + 0x88], 0x203a646e
mov word [ebp + 0x8c], 0x7325
mov byte [ebp + 0x8e], 0
lea eax, [ebp + 0x84]
mov dword [ebp - 4], 0
or edi, 1
jmp 0x10028013
mov word [ebp - 0x2c], 0x7325
mov byte [ebp - 0x2a], 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 4], 1
or edi, 2
movss xmm0, dword [ebp - 0x18]
lea ecx, [ebp]
subss xmm0, dword [0x1005e500]
push ecx
push eax
mov dword [ebp - 0x54], 0xc8ffffff
push dword [ebp - 0x54]
cvttss2si eax, xmm0
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], edi
push eax
cvttss2si eax, dword [ebp - 0x24]
push eax
push 0
push 1
push 0x100c9194
call fcn.1000ea80
mov eax, edi
add esp, 0x20
test al, 2
je 0x10028066
and eax, 0xfffffffd
xor ecx, ecx
mov dword [ebp - 0x20], eax
mov word [ebp - 0x2c], cx
mov byte [ebp - 0x2a], cl
mov dword [ebp - 4], 0xffffffff
test al, 1
je 0x10028092
and eax, 0xfffffffe
mov word [ebp + 0x8c], 0
xorps xmm0, xmm0
mov dword [ebp - 0x20], eax
movq qword [ebp + 0x84], xmm0
mov byte [ebp + 0x8e], 0
mov ecx, ebx
call fcn.10003270
mov ecx, dword [eax]
test ecx, ecx
jle 0x1002820d
movd xmm0, ecx
cmp ecx, 0x64
cvtdq2ps xmm0, xmm0
mov edx, 0x64
mulss xmm0, dword [0x1005e4c0]
cvttss2si eax, xmm0
mov dword [ebp - 0x40], eax
mov eax, ecx
cmovg eax, edx
cmp byte [0x100e51be], 0
mov dword [ebp - 0x3c], eax
je 0x1002820d
movss xmm0, dword [ebp - 0x14]
cmp ecx, edx
addss xmm0, dword [0x1005e4d0]
mov eax, 0x80000000
mov ebx, 0x80280000
cmovle ebx, eax
mov eax, 0x2828
xor edx, edx
cmp ecx, 0x64
mov ecx, dword [0x100c9364]
movss dword [ebp - 0x18], xmm0
cmovle eax, edx
subss xmm0, dword [0x1005e420]
or ebx, eax
mov eax, dword [ecx]
push ebx
cvttss2si edi, xmm0
mov eax, dword [eax + 0x28]
movss xmm0, dword [ebp - 0x10]
subss xmm0, dword [0x1005e420]
cvttss2si esi, xmm0
call eax
mov ecx, dword [0x100c9364]
mov eax, dword [ecx]
movss xmm0, dword [ebp - 0x28]
addss xmm0, xmm0
mov edx, dword [eax + 0x38]
lea eax, [edi + 4]
push eax
movss dword [ebp - 0x14], xmm0
addss xmm0, dword [0x1005e4b0]
cvttss2si eax, xmm0
add eax, esi
push eax
push edi
push esi
call edx
cvttss2si eax, dword [ebp - 0x18]
mov ecx, dword [0x100c9364]
push ebx
cvttss2si edi, dword [ebp - 0x10]
mov dword [ebp - 0x1c], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [0x100c9364]
mov edx, edi
movss xmm0, dword [ebp - 0x28]
mulss xmm0, dword [0x1005e5ec]
mov ebx, dword [ebp - 0x1c]
mov eax, dword [ecx]
add ebx, 2
push ebx
mov esi, dword [eax + 0x30]
cvttss2si eax, xmm0
sub edx, eax
push edx
push dword [ebp - 0x1c]
push edi
call esi
movd xmm1, dword [ebp - 0x3c]
mov ecx, dword [0x100c9364]
movss xmm0, dword [ebp - 0x14]
cvtdq2pd xmm1, xmm1
mov eax, dword [ecx]
mov esi, dword [eax + 0x28]
mulsd xmm1, qword [0x1005e428]
mov eax, dword [ebp - 0x40]
cvtps2pd xmm0, xmm0
movzx edx, al
not al
or edx, 0xffa00000
movzx eax, al
shl edx, 8
or edx, eax
push edx
mulsd xmm1, xmm0
cvttsd2si edi, xmm1
call esi
mov ecx, dword [0x100c9364]
mov eax, dword [ecx]
cvttss2si esi, dword [ebp - 0x10]
mov edx, dword [eax + 0x30]
push ebx
lea eax, [esi + edi]
push eax
push dword [ebp - 0x1c]
push esi
call edx
mov ebx, dword [ebp - 0x44]
mov ecx, dword [0x100c9394]
push dword [ebx + 0xb38]
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
call eax
mov ecx, eax
test ecx, ecx
jne 0x1002822a
xor esi, esi
jmp 0x10028231
mov eax, dword [ecx]
call dword [eax + 0x1c]
mov esi, eax
test esi, esi
je 0x10028355
cmp byte [0x100e51be], 0
je 0x1002824c
movss xmm1, dword [0x1005e4d0]
jmp 0x10028259
movss xmm1, dword [ebp - 0x48]
addss xmm1, dword [0x1005e4d0]
movss xmm0, dword [ebp - 0x18]
addss xmm0, xmm1
push str.client.dll
movss dword [ebp - 0x18], xmm0
movss dword [ebp - 0x10], xmm0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, dword [esi]
lea edi, [eax + 0x1e0b00]
mov edx, dword [ecx + 0x4a4]
mov ecx, esi
call edx
test eax, eax
jns 0x10028291
xor eax, eax
jmp 0x10028299
xor ecx, ecx
cmp eax, 0x1d
cmovg eax, ecx
push eax
call edi
lea edx, [ebp + 0x98]
add esp, 4
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x100282a7
mov al, byte [ebp + 0x98]
lea esi, [ebp + 0x98]
test al, al
je 0x100282dc
movsx eax, al
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov byte [esi], al
lea esi, [esi + 1]
mov al, byte [esi]
add esp, 4
test al, al
jne 0x100282c4
cmp byte [0x100e51bf], 0
je 0x10028355
mov eax, dword [ebx + 8]
lea ecx, [ebx + 8]
movss xmm0, dword [ebp - 0x10]
movss dword [ebp - 0x18], xmm0
mov eax, dword [eax + 0x20]
call eax
test al, al
jne 0x10028355
mov word [ebp - 0x30], 0x7325
mov byte [ebp - 0x2e], al
lea eax, [ebp + 0x98]
mov dword [ebp - 4], 2
push eax
lea eax, [ebp - 0x30]
push eax
cvttss2si eax, dword [ebp - 0x10]
push 0xc8ffffff
push eax
cvttss2si eax, dword [ebp - 0x24]
push eax
push 0
push 1
push 0x100c9194
call fcn.1000ea80
movss xmm0, dword [ebp - 0x10]
add esp, 0x20
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov word [ebp - 0x30], ax
mov byte [ebp - 0x2e], al
movss dword [ebp - 0x18], xmm0
cmp byte [0x100e51c0], 0
je 0x100284a4
mov eax, dword fs:[0x2c]
mov ecx, dword [0x10062724]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x102ca58c]
cmp eax, dword [ecx + 4]
jle 0x10028432
push 0x102ca58c
call fcn.10032d27
add esp, 4
cmp dword [0x102ca58c], 0xffffffff
jne 0x10028432
lea ecx, [ebp - 0x68]
mov dword [ebp - 4], 3
call fcn.1002d280
push 0
push str.m_iAccount
push str.DT_CSPlayer
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.1002d320
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x68]
mov dword [0x102ca584], eax
test ecx, ecx
je 0x1002841e
mov eax, dword [ebp - 0x60]
sub eax, ecx
sar eax, 2
lea edx, [eax*4]
mov eax, ecx
cmp edx, 0x1000
jb 0x100283ff
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002890a
push edx
push ecx
call fcn.10032be6
add esp, 8
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0
push 0x102ca58c
mov dword [ebp - 4], 0xffffffff
call fcn.10032cdd
add esp, 4
mov eax, dword [0x102ca584]
mov cl, 0x50
movss xmm0, dword [ebp - 0x18]
mov dl, 0x1d
addss xmm0, dword [0x1005e500]
mov esi, dword [eax + ebx]
mov bl, 0x39
mov al, 0x1c
mov byte [ebp + 0x94], 0
xor al, bl
mov byte [ebp + 0x90], bl
push esi
mov byte [ebp + 0x91], al
xor cl, bl
lea eax, [ebp + 0x91]
mov byte [ebp + 0x92], cl
push eax
cvttss2si eax, xmm0
push 0xff50beaa
xor dl, bl
mov byte [ebp + 0x94], 0
mov byte [ebp + 0x93], dl
push eax
cvttss2si eax, dword [ebp - 0x24]
push eax
push 0
push 1
push 0x100c9194
call fcn.1000ea80
add esp, 0x20
imul eax, dword [ebp - 0x34], 0x3ac
add eax, 0x100d62d0
movss xmm2, dword [eax]
movss xmm0, dword [eax + 4]
movss xmm1, dword [eax + 8]
imul eax, dword [ebp - 0x34], 0x7580
movss dword [ebp - 0x44], xmm2
movss dword [ebp - 0x48], xmm0
movss dword [ebp - 0x40], xmm1
add eax, 0x100e57e0
cmp dword [0x100e5138], 0
movss xmm5, dword [eax]
movss xmm3, dword [eax + 4]
movss xmm4, dword [eax + 8]
movss dword [ebp - 0x28], xmm5
movss dword [ebp - 0x3c], xmm3
movss dword [ebp - 0x1c], xmm4
jle 0x100288d0
xorps xmm6, xmm6
ucomiss xmm6, xmm2
lahf
test ah, 0x44
jp 0x10028525
ucomiss xmm6, xmm0
lahf
test ah, 0x44
jp 0x10028525
ucomiss xmm6, xmm1
lahf
test ah, 0x44
jnp 0x100288d0
ucomiss xmm6, xmm5
lahf
test ah, 0x44
jp 0x10028544
ucomiss xmm6, xmm3
lahf
test ah, 0x44
jp 0x10028544
ucomiss xmm6, xmm4
lahf
test ah, 0x44
jp 0x10028544
xor al, al
jmp 0x10028546
mov al, 1
test al, al
je 0x100288d0
mov ecx, dword [0x100c9388]
mov eax, dword [ecx]
mov eax, dword [eax + 0x98]
call eax
movss xmm4, dword [ebp - 0x48]
mov esi, eax
movss xmm6, dword [ebp - 0x44]
movaps xmm1, xmm4
movss xmm5, dword [ebp - 0x40]
movaps xmm0, xmm6
mov dword [ebp - 0x78], 0
mulss xmm0, dword [esi + 0x30]
mulss xmm1, dword [esi + 0x34]
addss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [esi + 0x38]
addss xmm0, dword [esi + 0x3c]
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
comisd xmm0, xmmword [0x1005e408]
jbe 0x100288d0
movss xmm3, dword [0x1005e420]
movaps xmm0, xmm6
mulss xmm0, dword [esi]
xorps xmm2, xmm2
mov eax, dword [0x100c9360]
divss xmm3, xmm1
mov ecx, dword [0x100c935c]
movaps xmm1, xmm4
mulss xmm6, dword [esi + 0x10]
mulss xmm1, dword [esi + 4]
mulss xmm4, dword [esi + 0x14]
addss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [esi + 8]
mulss xmm5, dword [esi + 0x18]
addss xmm4, xmm6
addss xmm0, dword [esi + 0xc]
addss xmm5, dword [esi + 0x1c]
addss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, eax
cdq
sub eax, edx
sar eax, 1
mulss xmm1, xmm3
addss xmm4, xmm5
mulss xmm1, dword [0x1005e3f8]
mulss xmm4, xmm3
cvtps2pd xmm1, xmm1
mulss xmm4, dword [0x1005e3f8]
mulsd xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, eax
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
addsd xmm1, qword [0x1005e488]
cvtsi2sd xmm2, eax
addsd xmm1, xmm0
cvtpd2ps xmm0, xmm1
cvtps2pd xmm1, xmm4
movss dword [ebp - 0x10], xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, ecx
mov ecx, dword [0x100c9388]
mov eax, dword [ecx]
mulsd xmm1, xmm0
mov eax, dword [eax + 0x98]
addsd xmm1, qword [0x1005e488]
subsd xmm2, xmm1
cvtpd2ps xmm0, xmm2
movss dword [ebp - 0x14], xmm0
call eax
movss xmm5, dword [ebp - 0x3c]
mov esi, eax
movss xmm7, dword [ebp - 0x28]
movaps xmm1, xmm5
movss xmm6, dword [ebp - 0x1c]
movaps xmm0, xmm7
mov dword [ebp - 0x6c], 0
mulss xmm0, dword [esi + 0x30]
mulss xmm1, dword [esi + 0x34]
addss xmm1, xmm0
movaps xmm0, xmm6
mulss xmm0, dword [esi + 0x38]
addss xmm0, dword [esi + 0x3c]
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
comisd xmm0, xmmword [0x1005e408]
jbe 0x100288d0
movss xmm3, dword [0x1005e420]
movaps xmm0, xmm7
mulss xmm0, dword [esi]
mov eax, dword [0x100c9360]
divss xmm3, xmm1
mov ecx, dword [0x100c935c]
push 0xa0ffffff
movaps xmm1, xmm5
mulss xmm7, dword [esi + 0x10]
mulss xmm1, dword [esi + 4]
mulss xmm5, dword [esi + 0x14]
addss xmm1, xmm0
movaps xmm0, xmm6
mulss xmm0, dword [esi + 8]
mulss xmm6, dword [esi + 0x18]
addss xmm5, xmm7
addss xmm0, dword [esi + 0xc]
cvttss2si edi, dword [ebp - 0x14]
addss xmm1, xmm0
movd xmm0, eax
addss xmm6, dword [esi + 0x1c]
cdq
cvtdq2pd xmm0, xmm0
sub eax, edx
sar eax, 1
mulss xmm1, xmm3
addss xmm5, xmm6
cvttss2si esi, dword [ebp - 0x10]
mulss xmm1, dword [0x1005e3f8]
mulss xmm5, xmm3
cvtps2pd xmm1, xmm1
mulss xmm5, dword [0x1005e3f8]
mulsd xmm1, xmm0
movd xmm0, eax
mov eax, ecx
cvtdq2pd xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
addsd xmm1, qword [0x1005e488]
movd xmm2, eax
cvtdq2pd xmm2, xmm2
addsd xmm1, xmm0
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
mov ecx, dword [0x100c9364]
cvtpd2ps xmm4, xmm1
cvtps2pd xmm1, xmm5
movss dword [ebp - 0x40], xmm4
mulsd xmm1, xmm0
cvttss2si ebx, xmm4
addsd xmm1, qword [0x1005e488]
subsd xmm2, xmm1
cvtpd2ps xmm0, xmm2
cvttss2si eax, xmm0
movss dword [ebp - 0x44], xmm0
mov dword [ebp - 0x48], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [0x100c9364]
push dword [ebp - 0x48]
push ebx
mov eax, dword [ecx]
push edi
push esi
mov eax, dword [eax + 0x3c]
call eax
movss xmm0, dword [ebp - 0x14]
subss xmm0, dword [0x1005e4b0]
mov ecx, dword [0x100c9364]
push 0xa03c3cff
mov eax, dword [ecx]
cvttss2si esi, xmm0
mov eax, dword [eax + 0x28]
movss xmm0, dword [ebp - 0x10]
subss xmm0, dword [0x1005e4b0]
mov dword [ebp - 0x14], esi
cvttss2si ebx, xmm0
call eax
mov ecx, dword [0x100c9364]
mov eax, dword [ecx]
lea edi, [ebx + 5]
add esi, 5
push esi
push edi
push dword [ebp - 0x14]
mov eax, dword [eax + 0x30]
push ebx
call eax
mov ecx, dword [0x100c9364]
push 0xa0000000
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [0x100c9364]
push esi
push edi
push dword [ebp - 0x14]
mov eax, dword [ecx]
push ebx
mov eax, dword [eax + 0x38]
call eax
movss xmm0, dword [ebp - 0x44]
subss xmm0, dword [0x1005e4b0]
mov ecx, dword [0x100c9364]
push 0xa0ffc8a0
mov eax, dword [ecx]
cvttss2si esi, xmm0
mov eax, dword [eax + 0x28]
movss xmm0, dword [ebp - 0x40]
subss xmm0, dword [0x1005e4b0]
mov dword [ebp - 0x14], esi
cvttss2si ebx, xmm0
call eax
mov ecx, dword [0x100c9364]
lea edi, [ebx + 5]
add esi, 5
push esi
push edi
mov eax, dword [ecx]
push dword [ebp - 0x14]
push ebx
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [0x100c9364]
push 0xa0000000
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [0x100c9364]
push esi
push edi
push dword [ebp - 0x14]
mov eax, dword [ecx]
push ebx
mov eax, dword [eax + 0x38]
call eax
mov edi, dword [ebp - 0x20]
mov eax, dword [0x100c9390]
inc dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
cmp edx, dword [eax + 0x14]
jle 0x10027be0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x198]
xor ecx, ebp
call fcn.100328be
lea esp, [ebp + 0x19c]
pop ebp
ret
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3