Function at 0x1001d4f0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10097f88
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x1e8
mov eax, dword fs:[0x2c]
mov edx, dword [0x10105654]
push esi
push edi
mov edi, ecx
mov esi, dword [eax + edx*4]
mov eax, dword [0x1010eb10]
mov dword [ebp - 0x30], edi
cmp eax, dword [esi + 4]
jle 0x1001d588
push 0x1010eb10
call fcn.10096a77
add esp, 4
cmp dword [0x1010eb10], 0xffffffff
jne 0x1001d588
mov edx, str.B9_________E8_________8B_5D_08
mov dword [ebp - 4], 0
call fcn.1003c1d0
push 0x1010eb10
mov eax, dword [eax + 1]
mov dword [0x1010eae0], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10096a26
add esp, 4
mov eax, dword [0x1010eb58]
cmp eax, dword [esi + 4]
jle 0x1001d5d5
push 0x1010eb58
call fcn.10096a77
add esp, 4
cmp dword [0x1010eb58], 0xffffffff
jne 0x1001d5d5
mov edx, str.55_8B_EC_53_8B_5D_08_56_57_8B_F9_33_F6_39_77_28
mov dword [ebp - 4], 1
call fcn.1003c1d0
push 0x1010eb58
mov dword [0x1010ea20], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10096a26
add esp, 4
mov ecx, dword [0x1010eae0]
push str.CHudChat
call dword [0x1010ea20]
mov dword [ebp - 0x54], eax
test eax, eax
je 0x1001f456
mov ecx, dword [0x1010eab0]
cmp ecx, dword [esi + 4]
jle 0x1001d640
push 0x1010eab0
call fcn.10096a77
add esp, 4
cmp dword [0x1010eab0], 0xffffffff
jne 0x1001d640
push 0x1010eab0
mov dword [0x1010ea0c], 0x7f800000
mov dword [0x1010ea08], 0x7f800000
mov dword [0x1010ea04], 0x7f800000
call fcn.10096a26
add esp, 4
mov eax, dword [0x1010e9dc]
cmp eax, dword [esi + 4]
jle 0x1001d68e
push 0x1010e9dc
call fcn.10096a77
add esp, 4
cmp dword [0x1010e9dc], 0xffffffff
jne 0x1001d68e
push 0x1010e9dc
mov dword [0x1010e9fc], 0x7f800000
mov dword [0x1010e9f8], 0x7f800000
mov dword [0x1010e9f4], 0x7f800000
call fcn.10096a26
add esp, 4
mov eax, dword [0x1010eaf4]
cmp eax, dword [esi + 4]
jle 0x1001d6dc
push 0x1010eaf4
call fcn.10096a77
add esp, 4
cmp dword [0x1010eaf4], 0xffffffff
jne 0x1001d6dc
push 0x1010eaf4
mov dword [0x1010eb08], 0x7f800000
mov dword [0x1010eb04], 0x7f800000
mov dword [0x1010eb00], 0x7f800000
call fcn.10096a26
add esp, 4
mov eax, dword [0x1010e9e4]
cmp eax, dword [esi + 4]
jle 0x1001d72a
push 0x1010e9e4
call fcn.10096a77
add esp, 4
cmp dword [0x1010e9e4], 0xffffffff
jne 0x1001d72a
push 0x1010e9e4
mov dword [0x1010ea30], 0x7f800000
mov dword [0x1010ea2c], 0x7f800000
mov dword [0x1010ea28], 0x7f800000
call fcn.10096a26
add esp, 4
mov eax, dword [0x1010eb28]
cmp eax, dword [esi + 4]
jle 0x1001d778
push 0x1010eb28
call fcn.10096a77
add esp, 4
cmp dword [0x1010eb28], 0xffffffff
jne 0x1001d778
push 0x1010eb28
mov dword [0x1010ea44], 0x7f800000
mov dword [0x1010ea40], 0x7f800000
mov dword [0x1010ea3c], 0x7f800000
call fcn.10096a26
add esp, 4
mov eax, dword [0x1010eb0c]
cmp eax, dword [esi + 4]
jle 0x1001d7d3
push 0x1010eb0c
call fcn.10096a77
add esp, 4
cmp dword [0x1010eb0c], 0xffffffff
jne 0x1001d7d3
push 0x1009ada0
mov dword [0x1010eb34], 0
mov dword [0x1010eb38], 0
mov dword [0x1010eb3c], 0
call fcn.100969ac
add esp, 4
push 0x1010eb0c
call fcn.10096a26
add esp, 4
test edi, edi
je 0x1001ef6f
movss xmm1, dword [edi + 0xc]
movss xmm0, dword [edi + 0x10]
push dword [0x1010e97c]
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
movss dword [0x1010eb00], xmm1
movss dword [0x1010eb04], xmm0
mov dword [0x1010eb08], 0
call esi
test ax, ax
je 0x1001de9f
cmp byte [0x1010ac39], 0
jne 0x1001dbba
mov edi, dword [0x1010eb38]
mov eax, 0x2aaaaaab
mov esi, dword [0x1010eb34]
mov ecx, edi
sub ecx, esi
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x1001d84f
cmp esi, edi
je 0x1001d84f
mov dword [0x1010eb38], esi
mov eax, dword [0x1010e030]
lea ecx, [ebp - 0x4c]
push ecx
mov ecx, dword [eax]
call fcn.10093fd0
movss xmm0, dword [0x1010eb00]
mov esi, eax
mulss xmm0, dword [0x100caa90]
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x58], xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_cos_precise
cvtsd2ss xmm0, xmm0
movss dword [ebp - 0x30], xmm0
movss xmm0, dword [0x1010eb04]
mulss xmm0, dword [0x100caa90]
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x40], xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_cos_precise
cvtsd2ss xmm0, xmm0
mulss xmm0, dword [ebp - 0x30]
mulss xmm0, dword [0x100cb4fc]
addss xmm0, dword [esi]
movss dword [ebp - 0x2c], xmm0
movsd xmm0, qword [ebp - 0x40]
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sin_precise
cvtsd2ss xmm0, xmm0
mulss xmm0, dword [ebp - 0x30]
mulss xmm0, dword [0x100cb4fc]
addss xmm0, dword [esi + 4]
movss dword [ebp - 0x18], xmm0
movsd xmm0, qword [ebp - 0x58]
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sin_precise
movss xmm1, dword [esi + 8]
lea ecx, [ebp - 0x4c]
mov eax, dword [0x1010e030]
cvtsd2ss xmm0, xmm0
mov dword [ebp - 0x1e8], 0x7f800000
mov dword [ebp - 0x1ec], 0x7f800000
mov dword [ebp - 0x1f0], 0x7f800000
mov dword [ebp - 0x1dc], 0x7f800000
mov dword [ebp - 0x1e0], 0x7f800000
mulss xmm0, dword [0x100cb4fc]
mov dword [ebp - 0x1e4], 0x7f800000
mov dword [ebp - 0x1d0], 0x7f800000
mov dword [ebp - 0x1d4], 0x7f800000
subss xmm1, xmm0
mov dword [ebp - 0x1d8], 0x7f800000
push ecx
mov ecx, dword [eax]
movss dword [ebp - 0x30], xmm1
call fcn.10093fd0
movss xmm2, dword [ebp - 0x2c]
mov ecx, eax
movss xmm1, dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x30]
subss xmm2, dword [ecx]
subss xmm1, dword [ecx + 4]
subss xmm0, dword [ecx + 8]
mov byte [ebp - 0xeb], 1
movss dword [ebp - 0x120], xmm2
movss dword [ebp - 0x11c], xmm1
mulss xmm2, xmm2
mulss xmm1, xmm1
movss dword [ebp - 0x118], xmm0
mulss xmm0, xmm0
addss xmm2, xmm1
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm2, xmm0
lahf
test ah, 0x44
jp 0x1001d9d6
mov byte [ebp - 0xeb], 0
mov eax, dword [0x1010e030]
lea edx, [ebp - 0x1f0]
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf0], 0
mov byte [ebp - 0xec], 1
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x108], 0
movss xmm1, dword [ecx + 4]
movss xmm2, dword [ecx + 8]
movss xmm0, dword [ecx]
mov ecx, dword [0x1010abe4]
push edx
movss dword [ebp - 0x130], xmm0
lea edx, [ebp - 0x38]
movss dword [ebp - 0x12c], xmm1
movss dword [ebp - 0x128], xmm2
mov dword [ebp - 0x38], 0x1009c904
mov eax, dword [eax]
push edx
mov dword [ebp - 0x34], eax
lea edx, [ebp - 0x130]
mov eax, dword [ecx]
push 0x201400b
push edx
call dword [eax + 0x14]
movss xmm0, dword [ebp - 0x1d8]
lea ecx, [ebp - 0x4c]
mov eax, dword [0x1010e030]
movss dword [0x1010ea3c], xmm0
movss xmm0, dword [ebp - 0x1d4]
movss dword [0x1010ea40], xmm0
movss xmm0, dword [ebp - 0x1d0]
movss dword [0x1010ea44], xmm0
push ecx
mov ecx, dword [eax]
call fcn.10093fd0
mov ecx, dword [0x1010e030]
mov esi, eax
lea eax, [ebp - 0x64]
push eax
mov ecx, dword [ecx]
call fcn.10093fd0
movss xmm3, dword [ebp - 0x2c]
lea ecx, [ebp - 0x4c]
movss xmm2, dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x30]
subss xmm3, dword [eax]
subss xmm2, dword [eax + 4]
subss xmm0, dword [eax + 8]
movss xmm1, dword [ebp - 0x1c4]
mov eax, dword [0x1010e030]
mulss xmm3, xmm1
push ecx
mulss xmm2, xmm1
addss xmm3, dword [esi]
mulss xmm0, xmm1
addss xmm2, dword [esi + 4]
addss xmm0, dword [esi + 8]
movss dword [0x1010ea04], xmm3
movss dword [0x1010ea08], xmm2
movss dword [0x1010ea0c], xmm0
mov ecx, dword [eax]
call fcn.10093fd0
mov ecx, dword [0x1010e030]
mov esi, eax
lea eax, [ebp - 0x64]
push eax
mov ecx, dword [ecx]
call fcn.10093fd0
movss xmm1, dword [ebp - 0x2c]
movss xmm2, dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x1c4]
subss xmm1, dword [eax]
subss xmm2, dword [eax + 4]
mulss xmm1, xmm0
mulss xmm2, xmm0
addss xmm1, dword [esi]
addss xmm2, dword [esi + 4]
movss xmm3, dword [ebp - 0x30]
subss xmm3, dword [eax + 8]
mov byte [0x1010ac39], 1
mulss xmm3, xmm0
addss xmm3, dword [esi + 8]
movss dword [0x1010e9f4], xmm1
movss dword [0x1010e9f8], xmm2
movss dword [0x1010e9fc], xmm3
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov eax, dword [0x1010e030]
lea ecx, [ebp - 0x4c]
push ecx
mov ecx, dword [eax]
call fcn.10093fd0
movss xmm0, dword [0x1010eb00]
mov esi, eax
mulss xmm0, dword [0x100caa90]
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x58], xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_cos_precise
movss xmm1, dword [0x1010eb04]
mulss xmm1, dword [0x100caa90]
cvtsd2ss xmm0, xmm0
movss dword [ebp - 0x30], xmm0
cvtps2pd xmm0, xmm1
movsd qword [ebp - 0x38], xmm0
movss xmm0, dword [esi]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [esi + 4]
movss dword [ebp - 0x18], xmm0
movsd xmm0, qword [ebp - 0x58]
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sin_precise
movss xmm1, dword [esi + 8]
lea ecx, [ebp - 0x4c]
mov eax, dword [0x1010e030]
cvtsd2ss xmm0, xmm0
mov dword [ebp - 0x1e8], 0x7f800000
mov dword [ebp - 0x1ec], 0x7f800000
mov dword [ebp - 0x1f0], 0x7f800000
mov dword [ebp - 0x1dc], 0x7f800000
mov dword [ebp - 0x1e0], 0x7f800000
mulss xmm0, dword [0x100cb4fc]
mov dword [ebp - 0x1e4], 0x7f800000
mov dword [ebp - 0x1d0], 0x7f800000
mov dword [ebp - 0x1d4], 0x7f800000
subss xmm1, xmm0
mov dword [ebp - 0x1d8], 0x7f800000
push ecx
mov ecx, dword [eax]
movss dword [ebp - 0x2c], xmm1
call fcn.10093fd0
movsd xmm0, qword [ebp - 0x38]
mov esi, eax
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_cos_precise
cvtsd2ss xmm0, xmm0
mulss xmm0, dword [ebp - 0x30]
mulss xmm0, dword [0x100cb4fc]
addss xmm0, dword [ebp - 0x14]
subss xmm0, dword [esi]
movss dword [ebp - 0x14], xmm0
movsd xmm0, qword [ebp - 0x38]
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sin_precise
xorps xmm1, xmm1
movss xmm2, dword [ebp - 0x14]
cvtsd2ss xmm1, xmm0
movss xmm0, dword [ebp - 0x2c]
mulss xmm1, dword [ebp - 0x30]
subss xmm0, dword [esi + 8]
mulss xmm1, dword [0x100cb4fc]
addss xmm1, dword [ebp - 0x18]
subss xmm1, dword [esi + 4]
movss dword [ebp - 0x120], xmm2
mulss xmm2, xmm2
mov byte [ebp - 0xeb], 1
movss dword [ebp - 0x118], xmm0
movss dword [ebp - 0x11c], xmm1
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm2, xmm1
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm2, xmm0
lahf
test ah, 0x44
jp 0x1001dd53
mov byte [ebp - 0xeb], 0
mov eax, dword [0x1010e030]
lea edx, [ebp - 0x1f0]
mov ecx, dword [0x1010abe4]
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf0], 0
mov byte [ebp - 0xec], 1
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x108], 0
movss xmm1, dword [esi + 4]
movss xmm2, dword [esi + 8]
movss xmm0, dword [esi]
push edx
movss dword [ebp - 0x130], xmm0
lea edx, [ebp - 0x40]
movss dword [ebp - 0x12c], xmm1
movss dword [ebp - 0x128], xmm2
mov dword [ebp - 0x40], 0x1009c904
mov eax, dword [eax]
push edx
mov dword [ebp - 0x3c], eax
lea edx, [ebp - 0x130]
mov eax, dword [ecx]
push 0x201400b
push edx
call dword [eax + 0x14]
movss xmm0, dword [ebp - 0x1d8]
ucomiss xmm0, dword [0x1010ea3c]
lahf
test ah, 0x44
jp 0x1001de23
movss xmm0, dword [ebp - 0x1d4]
ucomiss xmm0, dword [0x1010ea40]
lahf
test ah, 0x44
jnp 0x1001de2a
mov byte [0x1010ac7f], 1
mov eax, dword [0x1010e030]
lea ecx, [ebp - 0x4c]
push ecx
mov ecx, dword [eax]
call fcn.10093fd0
mov ecx, dword [0x1010e030]
mov esi, eax
lea eax, [ebp - 0x64]
push eax
mov ecx, dword [ecx]
call fcn.10093fd0
movss xmm1, dword [ebp - 0x2c]
movss xmm0, dword [0x1010ea04]
subss xmm1, dword [eax + 8]
mulss xmm1, dword [ebp - 0x1c4]
addss xmm1, dword [esi + 8]
movss dword [0x1010e9f4], xmm0
movss xmm0, dword [0x1010ea08]
movss dword [0x1010e9f8], xmm0
movss dword [0x1010e9fc], xmm1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push dword [0x1010e97c]
call esi
test ax, ax
jne 0x1001f456
cmp byte [0x1010ac39], al
je 0x1001f456
cmp byte [0x1010ac7f], al
je 0x1001dee1
mov byte [0x1010ac7f], al
mov byte [0x1010ac39], al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
call fcn.10007ff0
mov esi, dword [ebp - 0x30]
xor edi, edi
movss xmm0, dword [esi + 0x24]
mov eax, dword [esi + 0x30]
movss dword [ebp - 0x34], xmm0
xorps xmm0, xmm0
mov dword [ebp - 0x3c], eax
movss dword [ebp - 0x2c], xmm0
mov eax, dword [0x1010e030]
movss xmm2, dword [0x100cb54c]
mov eax, dword [eax]
mov dword [eax + 0x25c], 2
or dword [esi + 0x30], 6
movss xmm0, dword [0x1010ea40]
movss xmm1, dword [0x1010ea3c]
mulss xmm0, xmm2
mulss xmm1, xmm2
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x28], xmm0
fld qword [ebp - 0x28]
cvtps2pd xmm0, xmm1
movsd qword [ebp - 0x28], xmm0
fld qword [ebp - 0x28]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIatan2
fstp dword [ebp - 0x14]
movss xmm0, dword [ebp - 0x14]
mulss xmm0, dword [0x100cb3e4]
subss xmm0, dword [esi + 0x10]
mulss xmm0, dword [0x100caa90]
movss dword [ebp - 0x14], xmm0
cvtps2pd xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_cos_precise
movss xmm1, dword [ebp - 0x14]
cvtsd2ss xmm0, xmm0
movss dword [ebp - 0x18], xmm0
cvtps2pd xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sin_precise
movss xmm1, dword [ebp - 0x18]
mulss xmm1, dword [0x100caf80]
cvtsd2ss xmm0, xmm0
movss dword [esi + 0x24], xmm1
xorps xmm0, xmmword [0x100cba30]
mulss xmm0, dword [0x100caf80]
movss dword [esi + 0x28], xmm0
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
call fcn.10008cd0
xorps xmm1, xmm1
comiss xmm1, dword [eax + 8]
jbe 0x1001e555
movss xmm2, dword [0x1010ea0c]
comiss xmm1, xmm2
cvttss2si eax, xmm2
movd xmm0, eax
cvtdq2ps xmm0, xmm0
jbe 0x1001dfff
subss xmm0, dword [0x100cab50]
jmp 0x1001e007
addss xmm0, dword [0x100caa98]
subss xmm2, dword [0x1010e9fc]
subss xmm0, dword [ebp - 0x2c]
cvttss2si eax, xmm2
movss xmm2, dword [ebp - 0x2c]
movss dword [ebp - 0x18], xmm0
movss dword [0x1010aca0], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
comiss xmm2, xmm0
ja 0x1001ee8b
addss xmm2, dword [0x100cab58]
movss xmm0, dword [0x1010ea40]
movss dword [ebp - 0x2c], xmm2
movss xmm2, dword [0x1010ea3c]
comiss xmm1, xmm2
jbe 0x1001e19e
comiss xmm1, xmm0
jbe 0x1001e0ff
movss xmm0, dword [0x1010ea04]
subss xmm0, dword [0x100caf9c]
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [0x1010ea08]
subss xmm0, dword [0x100caf9c]
movss dword [ebp - 0x20], xmm0
call fcn.10007ff0
movss xmm0, dword [ebp - 0x14]
lea ecx, [ebp - 0x164]
movss dword [eax], xmm0
movss xmm0, dword [ebp - 0x20]
movss dword [eax + 4], xmm0
movss xmm0, dword [ebp - 0x18]
movss dword [eax + 8], xmm0
mov eax, dword [0x10105180]
movss xmm0, dword [0x1010ea04]
mov edx, dword [eax + 0x10]
movss dword [ebp - 0x164], xmm0
movss xmm0, dword [0x1010ea08]
movss dword [ebp - 0x160], xmm0
movss xmm0, dword [0x1010aca0]
movss dword [ebp - 0x15c], xmm0
jmp 0x1001e54b
comiss xmm0, xmm1
jbe 0x1001e19e
movss xmm0, dword [0x1010ea04]
subss xmm0, dword [0x100caf9c]
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [0x1010ea08]
addss xmm0, dword [0x100caf9c]
movss dword [ebp - 0x14], xmm0
call fcn.10007ff0
movss xmm0, dword [ebp - 0x20]
lea ecx, [ebp - 0x170]
movss dword [eax], xmm0
movss xmm0, dword [ebp - 0x14]
movss dword [eax + 4], xmm0
movss xmm0, dword [ebp - 0x18]
movss dword [eax + 8], xmm0
mov eax, dword [0x10105180]
movss xmm0, dword [0x1010ea04]
mov edx, dword [eax + 0x10]
movss dword [ebp - 0x170], xmm0
movss xmm0, dword [0x1010ea08]
movss dword [ebp - 0x16c], xmm0
movss xmm0, dword [0x1010aca0]
movss dword [ebp - 0x168], xmm0
jmp 0x1001e54b
comiss xmm2, xmm1
jbe 0x1001e2e5
comiss xmm1, xmm0
jbe 0x1001e246
movss xmm0, dword [0x1010ea04]
addss xmm0, dword [0x100caf9c]
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [0x1010ea08]
subss xmm0, dword [0x100caf9c]
movss dword [ebp - 0x14], xmm0
call fcn.10007ff0
movss xmm0, dword [ebp - 0x20]
lea ecx, [ebp - 0x17c]
movss dword [eax], xmm0
movss xmm0, dword [ebp - 0x14]
movss dword [eax + 4], xmm0
movss xmm0, dword [ebp - 0x18]
movss dword [eax + 8], xmm0
mov eax, dword [0x10105180]
movss xmm0, dword [0x1010ea04]
mov edx, dword [eax + 0x10]
movss dword [ebp - 0x17c], xmm0
movss xmm0, dword [0x1010ea08]
movss dword [ebp - 0x178], xmm0
movss xmm0, dword [0x1010aca0]
movss dword [ebp - 0x174], xmm0
jmp 0x1001e54b
comiss xmm0, xmm1
jbe 0x1001e2e5
movss xmm0, dword [0x1010ea04]
addss xmm0, dword [0x100caf9c]
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [0x1010ea08]
addss xmm0, dword [0x100caf9c]
movss dword [ebp - 0x14], xmm0
call fcn.10007ff0
movss xmm0, dword [ebp - 0x20]
lea ecx, [ebp - 0x188]
movss dword [eax], xmm0
movss xmm0, dword [ebp - 0x14]
movss dword [eax + 4], xmm0
movss xmm0, dword [ebp - 0x18]
movss dword [eax + 8], xmm0
mov eax, dword [0x10105180]
movss xmm0, dword [0x1010ea04]
mov edx, dword [eax + 0x10]
movss dword [ebp - 0x188], xmm0
movss xmm0, dword [0x1010ea08]
movss dword [ebp - 0x184], xmm0
movss xmm0, dword [0x1010aca0]
movss dword [ebp - 0x180], xmm0
jmp 0x1001e54b
ucomiss xmm2, xmm1
lahf
test ah, 0x44
jp 0x1001e420
comiss xmm0, xmm1
jbe 0x1001e389
movss xmm0, dword [0x1010ea08]
addss xmm0, dword [0x100caf9c]
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [0x1010ea04]
movss dword [ebp - 0x20], xmm0
call fcn.10007ff0
movss xmm0, dword [ebp - 0x20]
lea ecx, [ebp - 0x194]
movss dword [eax], xmm0
movss xmm0, dword [ebp - 0x14]
movss dword [eax + 4], xmm0
movss xmm0, dword [ebp - 0x18]
movss dword [eax + 8], xmm0
mov eax, dword [0x10105180]
movss xmm0, dword [0x1010ea04]
mov edx, dword [eax + 0x10]
movss dword [ebp - 0x194], xmm0
movss xmm0, dword [0x1010ea08]
movss dword [ebp - 0x190], xmm0
movss xmm0, dword [0x1010aca0]
movss dword [ebp - 0x18c], xmm0
jmp 0x1001e54b
comiss xmm1, xmm0
jbe 0x1001e420
movss xmm0, dword [0x1010ea08]
subss xmm0, dword [0x100caf9c]
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [0x1010ea04]
movss dword [ebp - 0x20], xmm0
call fcn.10007ff0
movss xmm0, dword [ebp - 0x20]
lea ecx, [ebp - 0x13c]
movss dword [eax], xmm0
movss xmm0, dword [ebp - 0x14]
movss dword [eax + 4], xmm0
movss xmm0, dword [ebp - 0x18]
movss dword [eax + 8], xmm0
mov eax, dword [0x10105180]
movss xmm0, dword [0x1010ea04]
mov edx, dword [eax + 0x10]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [0x1010ea08]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [0x1010aca0]
movss dword [ebp - 0x134], xmm0
jmp 0x1001e54b
comiss xmm1, xmm2
jbe 0x1001e4b8
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x1001e4b8
movss xmm0, dword [0x1010ea04]
subss xmm0, dword [0x100caf9c]
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [0x1010ea08]
movss dword [ebp - 0x14], xmm0
call fcn.10007ff0
movss xmm0, dword [ebp - 0x20]
lea ecx, [ebp - 0x64]
movss dword [eax], xmm0
movss xmm0, dword [ebp - 0x14]
movss dword [eax + 4], xmm0
movss xmm0, dword [ebp - 0x18]
movss dword [eax + 8], xmm0
mov eax, dword [0x10105180]
movss xmm0, dword [0x1010ea04]
mov edx, dword [eax + 0x10]
movss dword [ebp - 0x64], xmm0
movss xmm0, dword [0x1010ea08]
movss dword [ebp - 0x60], xmm0
movss xmm0, dword [0x1010aca0]
movss dword [ebp - 0x5c], xmm0
jmp 0x1001e54b
comiss xmm2, xmm1
jbe 0x1001e555
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x1001e555
movss xmm0, dword [0x1010ea04]
addss xmm0, dword [0x100caf9c]
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [0x1010ea08]
movss dword [ebp - 0x14], xmm0
call fcn.10007ff0
movss xmm0, dword [ebp - 0x20]
lea ecx, [ebp - 0x4c]
movss dword [eax], xmm0
movss xmm0, dword [ebp - 0x14]
movss dword [eax + 4], xmm0
movss xmm0, dword [ebp - 0x18]
movss dword [eax + 8], xmm0
mov eax, dword [0x10105180]
movss xmm0, dword [0x1010ea04]
mov edx, dword [eax + 0x10]
movss dword [ebp - 0x4c], xmm0
movss xmm0, dword [0x1010ea08]
movss dword [ebp - 0x48], xmm0
movss xmm0, dword [0x1010aca0]
movss dword [ebp - 0x44], xmm0
mov eax, dword [0x1010e030]
push ecx
mov ecx, dword [eax]
call edx
mov ecx, dword [0x10105b40]
push esi
call fcn.1003bee0
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
call fcn.10008cd0
movss xmm0, dword [0x10105998]
xorps xmm0, xmmword [0x100cba30]
movss xmm1, dword [eax + 8]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x1001eb24
movss xmm2, dword [0x1010ea3c]
xorps xmm0, xmm0
comiss xmm0, xmm2
movss xmm1, dword [0x1010ea40]
jbe 0x1001e6e8
comiss xmm0, xmm1
jbe 0x1001e649
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 8]
mov eax, dword [0x1010e030]
movss dword [ebp - 0x14], xmm0
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 4]
addss xmm0, dword [0x100caf9c]
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
movss dword [ebp - 0x20], xmm0
call fcn.10007ff0
mov ecx, dword [0x1010eb38]
movss xmm0, dword [eax]
addss xmm0, dword [0x100caf9c]
movss dword [ebp - 0x74], xmm0
movss xmm0, dword [ebp - 0x20]
movss dword [ebp - 0x70], xmm0
movss xmm0, dword [ebp - 0x14]
movss dword [ebp - 0x6c], xmm0
cmp ecx, dword [0x1010eb3c]
je 0x1001e641
movq xmm0, qword [ebp - 0x74]
mov eax, dword [ebp - 0x6c]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
add dword [0x1010eb38], 0xc
jmp 0x1001eb1d
lea eax, [ebp - 0x74]
jmp 0x1001eb16
comiss xmm1, xmm0
jbe 0x1001e6e8
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 8]
mov eax, dword [0x1010e030]
movss dword [ebp - 0x14], xmm0
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 4]
subss xmm0, dword [0x100caf9c]
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
movss dword [ebp - 0x20], xmm0
call fcn.10007ff0
mov ecx, dword [0x1010eb38]
movss xmm0, dword [eax]
addss xmm0, dword [0x100caf9c]
movss dword [ebp - 0x80], xmm0
movss xmm0, dword [ebp - 0x20]
movss dword [ebp - 0x7c], xmm0
movss xmm0, dword [ebp - 0x14]
movss dword [ebp - 0x78], xmm0
cmp ecx, dword [0x1010eb3c]
je 0x1001e6e0
movq xmm0, qword [ebp - 0x80]
mov eax, dword [ebp - 0x78]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
add dword [0x1010eb38], 0xc
jmp 0x1001eb1d
lea eax, [ebp - 0x80]
jmp 0x1001eb16
comiss xmm2, xmm0
jbe 0x1001e853
comiss xmm0, xmm1
jbe 0x1001e7a2
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 8]
mov eax, dword [0x1010e030]
movss dword [ebp - 0x14], xmm0
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 4]
addss xmm0, dword [0x100caf9c]
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
movss dword [ebp - 0x20], xmm0
call fcn.10007ff0
mov ecx, dword [0x1010eb38]
movss xmm0, dword [eax]
subss xmm0, dword [0x100caf9c]
movss dword [ebp - 0x8c], xmm0
movss xmm0, dword [ebp - 0x20]
movss dword [ebp - 0x88], xmm0
movss xmm0, dword [ebp - 0x14]
movss dword [ebp - 0x84], xmm0
cmp ecx, dword [0x1010eb3c]
je 0x1001e797
movq xmm0, qword [ebp - 0x8c]
mov eax, dword [ebp - 0x84]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
add dword [0x1010eb38], 0xc
jmp 0x1001eb1d
lea eax, [ebp - 0x8c]
jmp 0x1001eb16
comiss xmm1, xmm0
jbe 0x1001e853
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 8]
mov eax, dword [0x1010e030]
movss dword [ebp - 0x14], xmm0
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 4]
subss xmm0, dword [0x100caf9c]
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
movss dword [ebp - 0x20], xmm0
call fcn.10007ff0
mov ecx, dword [0x1010eb38]
movss xmm0, dword [eax]
subss xmm0, dword [0x100caf9c]
movss dword [ebp - 0x98], xmm0
movss xmm0, dword [ebp - 0x20]
movss dword [ebp - 0x94], xmm0
movss xmm0, dword [ebp - 0x14]
movss dword [ebp - 0x90], xmm0
cmp ecx, dword [0x1010eb3c]
je 0x1001e848
movq xmm0, qword [ebp - 0x98]
mov eax, dword [ebp - 0x90]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
add dword [0x1010eb38], 0xc
jmp 0x1001eb1d
lea eax, [ebp - 0x98]
jmp 0x1001eb16
ucomiss xmm2, xmm0
lahf
test ah, 0x44
jp 0x1001e9b2
comiss xmm1, xmm0
jbe 0x1001e909
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 8]
mov eax, dword [0x1010e030]
movss dword [ebp - 0x14], xmm0
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 4]
subss xmm0, dword [0x100caf9c]
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
movss dword [ebp - 0x20], xmm0
call fcn.10007ff0
mov ecx, dword [0x1010eb38]
movss xmm0, dword [eax]
movss dword [ebp - 0xa4], xmm0
movss xmm0, dword [ebp - 0x20]
movss dword [ebp - 0xa0], xmm0
movss xmm0, dword [ebp - 0x14]
movss dword [ebp - 0x9c], xmm0
cmp ecx, dword [0x1010eb3c]
je 0x1001e8fe
movq xmm0, qword [ebp - 0xa4]
mov eax, dword [ebp - 0x9c]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
add dword [0x1010eb38], 0xc
jmp 0x1001eb1d
lea eax, [ebp - 0xa4]
jmp 0x1001eb16
comiss xmm0, xmm1
jbe 0x1001e9b2
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 8]
mov eax, dword [0x1010e030]
movss dword [ebp - 0x14], xmm0
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 4]
addss xmm0, dword [0x100caf9c]
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
movss dword [ebp - 0x20], xmm0
call fcn.10007ff0
mov ecx, dword [0x1010eb38]
movss xmm0, dword [eax]
movss dword [ebp - 0xb0], xmm0
movss xmm0, dword [ebp - 0x20]
movss dword [ebp - 0xac], xmm0
movss xmm0, dword [ebp - 0x14]
movss dword [ebp - 0xa8], xmm0
cmp ecx, dword [0x1010eb3c]
je 0x1001e9a7
movq xmm0, qword [ebp - 0xb0]
mov eax, dword [ebp - 0xa8]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
add dword [0x1010eb38], 0xc
jmp 0x1001eb1d
lea eax, [ebp - 0xb0]
jmp 0x1001eb16
comiss xmm0, xmm2
jbe 0x1001ea68
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x1001ea68
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 8]
mov eax, dword [0x1010e030]
movss dword [ebp - 0x14], xmm0
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 4]
mov eax, dword [0x1010e030]
movss dword [ebp - 0x20], xmm0
mov ecx, dword [eax]
call fcn.10007ff0
mov ecx, dword [0x1010eb38]
movss xmm0, dword [eax]
addss xmm0, dword [0x100caf9c]
movss dword [ebp - 0xbc], xmm0
movss xmm0, dword [ebp - 0x20]
movss dword [ebp - 0xb8], xmm0
movss xmm0, dword [ebp - 0x14]
movss dword [ebp - 0xb4], xmm0
cmp ecx, dword [0x1010eb3c]
je 0x1001ea5d
movq xmm0, qword [ebp - 0xbc]
mov eax, dword [ebp - 0xb4]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
add dword [0x1010eb38], 0xc
jmp 0x1001eb1d
lea eax, [ebp - 0xbc]
jmp 0x1001eb16
comiss xmm2, xmm0
jbe 0x1001eb24
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x1001eb24
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 8]
mov eax, dword [0x1010e030]
movss dword [ebp - 0x14], xmm0
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 4]
mov eax, dword [0x1010e030]
movss dword [ebp - 0x20], xmm0
mov ecx, dword [eax]
call fcn.10007ff0
mov ecx, dword [0x1010eb38]
movss xmm0, dword [eax]
subss xmm0, dword [0x100caf9c]
movss dword [ebp - 0xc8], xmm0
movss xmm0, dword [ebp - 0x20]
movss dword [ebp - 0xc4], xmm0
movss xmm0, dword [ebp - 0x14]
movss dword [ebp - 0xc0], xmm0
cmp ecx, dword [0x1010eb3c]
je 0x1001eb10
movq xmm0, qword [ebp - 0xc8]
mov eax, dword [ebp - 0xc0]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
add dword [0x1010eb38], 0xc
jmp 0x1001eb1d
lea eax, [ebp - 0xc8]
push eax
push ecx
call fcn.1001fe90
mov byte [0x1010ac39], 0
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
call fcn.10008550
test byte [eax], 1
je 0x1001ee7e
cmp edi, 4
jle 0x1001ee7e
movss xmm2, dword [0x1010ea3c]
xorps xmm0, xmm0
comiss xmm0, xmm2
movss xmm1, dword [0x1010ea40]
jbe 0x1001ebea
comiss xmm0, xmm1
jbe 0x1001ebb4
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 8]
mov eax, dword [0x1010e030]
movss dword [ebp - 0x14], xmm0
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 4]
addss xmm0, dword [0x100caf9c]
mov eax, dword [0x1010e030]
movss dword [ebp - 0x20], xmm0
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax]
addss xmm0, dword [0x100caf9c]
jmp 0x1001ed7e
comiss xmm1, xmm0
jbe 0x1001ebea
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 8]
mov eax, dword [0x1010e030]
movss dword [ebp - 0x14], xmm0
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 4]
subss xmm0, dword [0x100caf9c]
jmp 0x1001eb92
comiss xmm2, xmm0
jbe 0x1001ec61
comiss xmm0, xmm1
jbe 0x1001ec28
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 8]
mov eax, dword [0x1010e030]
movss dword [ebp - 0x14], xmm0
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 4]
addss xmm0, dword [0x100caf9c]
jmp 0x1001ed61
comiss xmm1, xmm0
jbe 0x1001ec61
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 8]
mov eax, dword [0x1010e030]
movss dword [ebp - 0x14], xmm0
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 4]
subss xmm0, dword [0x100caf9c]
jmp 0x1001ed61
ucomiss xmm2, xmm0
lahf
test ah, 0x44
jp 0x1001ecf2
comiss xmm1, xmm0
jbe 0x1001ecbc
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 8]
mov eax, dword [0x1010e030]
movss dword [ebp - 0x14], xmm0
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 4]
subss xmm0, dword [0x100caf9c]
mov eax, dword [0x1010e030]
movss dword [ebp - 0x20], xmm0
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax]
jmp 0x1001ed7e
comiss xmm0, xmm1
jbe 0x1001ecf2
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 8]
mov eax, dword [0x1010e030]
movss dword [ebp - 0x14], xmm0
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 4]
addss xmm0, dword [0x100caf9c]
jmp 0x1001eca2
comiss xmm0, xmm2
jbe 0x1001ed2c
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x1001ed2c
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 8]
mov eax, dword [0x1010e030]
movss dword [ebp - 0x14], xmm0
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 4]
jmp 0x1001eb92
comiss xmm2, xmm0
jbe 0x1001eda0
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x1001eda0
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 8]
mov eax, dword [0x1010e030]
movss dword [ebp - 0x14], xmm0
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax + 4]
mov eax, dword [0x1010e030]
movss dword [ebp - 0x20], xmm0
mov ecx, dword [eax]
call fcn.10007ff0
movss xmm0, dword [eax]
subss xmm0, dword [0x100caf9c]
movss dword [0x1010ea28], xmm0
movss xmm0, dword [ebp - 0x20]
movss dword [0x1010ea2c], xmm0
movss xmm0, dword [ebp - 0x14]
movss dword [0x1010ea30], xmm0
mov eax, dword [0x1010e030]
mov ecx, dword [eax]
call fcn.10007ff0
sub esp, 8
movss xmm0, dword [eax + 8]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push 0x1009c998
movsd qword [ebp - 0x28], xmm0
call fcn.10008a50
add esp, 8
lea ecx, [ebp - 0x158]
mov esi, eax
push esi
call fcn.1001f600
cmp dword [ebp - 0x144], 0xf
lea ecx, [ebp - 0x158]
movsd xmm0, qword [ebp - 0x28]
lea eax, [esi + 1]
cmova ecx, dword [ebp - 0x158]
sub esp, 8
movsd qword [esp], xmm0
push 0x1009c998
push eax
push ecx
call fcn.10008a10
add esp, 0x14
mov dword [ebp - 4], 2
lea eax, [ebp - 0x158]
cmp dword [ebp - 0x144], 0xf
cmova eax, dword [ebp - 0x158]
push eax
push 0
push 0
push dword [ebp - 0x54]
call fcn.10008e70
mov dword [ebp - 4], 0xffffffff
add esp, 0x10
mov ecx, dword [ebp - 0x144]
cmp ecx, 0xf
jbe 0x1001ee7b
mov edx, dword [ebp - 0x158]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001ee71
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001ef32
push ecx
push edx
call fcn.100969c1
add esp, 8
mov esi, dword [ebp - 0x30]
inc edi
cmp edi, 0x19000
jl 0x1001df0a
mov eax, dword [ebp - 0x3c]
movss xmm0, dword [ebp - 0x34]
mov dword [esi + 0x30], eax
mov eax, 0x2aaaaaab
movss dword [esi + 0x24], xmm0
mov esi, dword [0x1010eb38]
mov ecx, esi
mov edi, dword [0x1010eb34]
sub ecx, edi
imul ecx
mov byte [0x1010ac39], 0
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x1001f456
mov dword [ebp - 0x30], 0
add eax, 0xffffffff
je 0x1001f456
xor eax, eax
mov dword [ebp - 0x2c], eax
nop dword [eax]
cvttss2si ecx, dword [edi + eax + 8]
lea edx, [edi + eax]
cvttss2si eax, dword [edx + 0x14]
sub ecx, eax
cmp ecx, 1
jne 0x1001ef38
lea ecx, [edx + 0xc]
cmp ecx, esi
je 0x1001ef27
nop dword [eax]
mov eax, dword [ecx]
lea edx, [edx + 0xc]
mov dword [edx - 0xc], eax
mov eax, dword [ecx + 4]
mov dword [edx - 8], eax
mov eax, dword [ecx + 8]
add ecx, 0xc
mov dword [edx - 4], eax
cmp ecx, esi
jne 0x1001ef00
mov esi, dword [0x1010eb38]
mov edi, dword [0x1010eb34]
sub esi, 0xc
mov dword [0x1010eb38], esi
jmp 0x1001ef3f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
inc dword [ebp - 0x30]
add dword [ebp - 0x2c], 0xc
mov ecx, esi
mov eax, 0x2aaaaaab
sub ecx, edi
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
dec eax
add eax, edx
cmp dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x2c]
jb 0x1001eee0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov edi, dword [0x1010eb38]
mov eax, 0x2aaaaaab
mov esi, dword [0x1010eb34]
mov ecx, edi
sub ecx, esi
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x1001f29b
xor ecx, ecx
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x2c], ecx
mov eax, dword [0x1010ac98]
sub edi, esi
mov dword [ebp - 0x20], 0x7f800000
mov dword [ebp - 0x24], 0x7f800000
mov dword [ebp - 0x28], 0x7f800000
mov eax, dword [eax]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x34], eax
mov eax, 0x2aaaaaab
imul edi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, dword [ebp - 0x18]
jbe 0x1001f469
lea eax, [esi + ecx]
lea ecx, [ebp - 0x28]
push ecx
mov ecx, dword [0x1010ac98]
push eax
call dword [ebp - 0x34]
test eax, eax
jne 0x1001f25f
movss xmm0, dword [ebp - 0x24]
lea edx, [ebp - 0x14]
subss xmm0, dword [0x100caf60]
mov ecx, dword [0x1010ac04]
push edx
lea edx, [ebp - 0x30]
push edx
cvttss2si edi, xmm0
movss xmm0, dword [ebp - 0x28]
subss xmm0, dword [0x100caf60]
cvttss2si eax, xmm0
mov dword [ebp - 0x34], eax
mov eax, dword [ecx]
call dword [eax + 0x14]
mov eax, dword [ebp - 0x30]
cdq
sub eax, edx
mov esi, eax
mov eax, dword [ebp - 0x14]
cdq
sub eax, edx
sar esi, 1
mov edx, eax
mov dword [ebp - 0x30], esi
mov eax, dword [ebp - 0x34]
sar edx, 1
mov dword [ebp - 0x14], edx
cmp esi, eax
jle 0x1001f066
lea ecx, [eax + 0xc]
cmp ecx, esi
jle 0x1001f066
cmp edx, edi
jle 0x1001f066
lea eax, [edi + 0xc]
cmp eax, edx
jle 0x1001f066
mov al, 1
jmp 0x1001f068
xor al, al
mov byte [0x10105995], al
call fcn.1001f550
cmp byte [0x10105995], 0
movaps xmm0, xmmword [0x100cb6b0]
movups xmmword [ebp - 0x50], xmm0
je 0x1001f090
movss xmm2, dword [0x100cafa8]
jmp 0x1001f098
movss xmm2, dword [0x100caf8c]
mov edi, dword [eax + 8]
mov eax, dword [ebp - 0x44]
movzx esi, byte [ebp - 0x48]
movss xmm0, dword [ebp - 0x28]
shl eax, 8
add esi, eax
movss dword [ebp - 0x40], xmm0
movzx eax, byte [ebp - 0x4c]
movss xmm0, dword [ebp - 0x24]
shl esi, 8
add esi, eax
movss dword [ebp - 0x3c], xmm0
movzx eax, byte [ebp - 0x50]
shl esi, 8
add esi, eax
test esi, 0xff000000
je 0x1001f102
push 0x7f
push ecx
lea eax, [ebp - 0x40]
mov dword [esp], 0x40c77dbb
push eax
xorps xmm3, xmm3
mov ecx, edi
call fcn.10063250
push esi
push dword [edi + 0x54]
mov ecx, edi
push dword [edi + 0x5c]
call fcn.10062d40
mov dword [edi + 0x54], 0
call fcn.1001f550
mov cl, byte [0x10105995]
test cl, cl
je 0x1001f121
movaps xmm0, xmmword [0x100cb7b0]
lea edx, [ebp - 0x68]
movups xmmword [ebp - 0x68], xmm0
jmp 0x1001f135
movups xmm0, xmmword [0x1010e754]
lea edx, [ebp - 0x140]
movups xmmword [ebp - 0x140], xmm0
test cl, cl
je 0x1001f143
movss xmm2, dword [0x100cafa8]
jmp 0x1001f14b
movss xmm2, dword [0x100caf8c]
movups xmm1, xmmword [edx]
mov edi, dword [eax + 8]
movaps xmm0, xmm1
psrldq xmm0, 0xc
movd esi, xmm0
movaps xmm0, xmm1
psrldq xmm0, 8
movd eax, xmm0
movaps xmm0, xmm1
shl esi, 8
psrldq xmm0, 4
movzx eax, al
add esi, eax
movd eax, xmm0
movss xmm0, dword [ebp - 0x28]
shl esi, 8
movzx eax, al
add esi, eax
movss dword [ebp - 0x58], xmm0
movss xmm0, dword [ebp - 0x24]
movd eax, xmm1
shl esi, 8
movss dword [ebp - 0x54], xmm0
movzx eax, al
add esi, eax
test esi, 0xff000000
je 0x1001f1f2
subss xmm2, dword [0x100cab0c]
push 0x7f
push ecx
lea eax, [ebp - 0x58]
mov dword [esp], 0x40c77dbb
push eax
xorps xmm3, xmm3
mov ecx, edi
call fcn.10063250
push ecx
mov dword [esp], 0x3f800000
mov ecx, edi
push 1
push esi
push dword [edi + 0x54]
push dword [edi + 0x5c]
call fcn.10062200
mov cl, byte [0x10105995]
mov dword [edi + 0x54], 0
test cl, cl
je 0x1001f25f
push dword [0x1010e93c]
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1001f25f
mov edi, dword [0x1010eb38]
mov eax, 0x2aaaaaab
mov esi, dword [0x1010eb34]
mov ecx, edi
sub ecx, esi
imul ecx
mov ecx, dword [ebp - 0x18]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, ecx
jbe 0x1001f469
mov eax, dword [ebp - 0x2c]
movss xmm0, dword [esi + eax]
movss dword [0x10103b48], xmm0
movss xmm0, dword [esi + eax + 4]
movss dword [0x10103b4c], xmm0
movss xmm0, dword [esi + eax + 8]
movss dword [0x10103b50], xmm0
jmp 0x1001f271
mov edi, dword [0x1010eb38]
mov esi, dword [0x1010eb34]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x18]
inc ecx
add eax, 0xc
mov dword [ebp - 0x18], ecx
mov ecx, edi
mov dword [ebp - 0x2c], eax
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
mov ecx, dword [ebp - 0x2c]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x18], eax
jb 0x1001efa1
push dword [0x1010e97c]
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1001f456
movss xmm0, dword [0x1010ea04]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x1001f2ea
movss xmm0, dword [0x1010ea08]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x1001f2ea
movss xmm0, dword [0x1010ea0c]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x1001f456
movss xmm0, dword [0x1010e9f4]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x1001f321
movss xmm0, dword [0x1010e9f8]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x1001f321
movss xmm0, dword [0x1010e9fc]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x1001f456
mov ecx, dword [0x1010ac98]
lea edx, [ebp - 0xe0]
push edx
push 0x1010ea04
mov dword [ebp - 0xd8], 0x7f800000
mov eax, dword [ecx]
mov dword [ebp - 0xdc], 0x7f800000
mov dword [ebp - 0xe0], 0x7f800000
mov dword [ebp - 0xcc], 0x7f800000
mov eax, dword [eax + 0x34]
mov dword [ebp - 0xd0], 0x7f800000
mov dword [ebp - 0xd4], 0x7f800000
call eax
test eax, eax
jne 0x1001f456
mov ecx, dword [0x1010ac98]
lea edx, [ebp - 0xd4]
push edx
push 0x1010e9f4
mov eax, dword [ecx]
mov eax, dword [eax + 0x34]
call eax
test eax, eax
jne 0x1001f456
call fcn.1001f550
cmp byte [0x1010ac7f], 0
lea ecx, [ebp - 0x50]
mov edx, eax
je 0x1001f3bb
movaps xmm0, xmmword [0x100cb6e0]
jmp 0x1001f3c2
movaps xmm0, xmmword [0x100cb7b0]
movups xmmword [ebp - 0x50], xmm0
push ecx
movups xmm1, xmmword [ecx]
mov dword [esp], 0x3f800000
movss xmm0, dword [ebp - 0xd4]
movss dword [ebp - 0x38], xmm0
movss xmm0, dword [ebp - 0xd0]
movss dword [ebp - 0x34], xmm0
movss xmm0, dword [ebp - 0xe0]
movss dword [ebp - 0x40], xmm0
movss xmm0, dword [ebp - 0xdc]
movss dword [ebp - 0x3c], xmm0
movaps xmm0, xmm1
psrldq xmm0, 0xc
movd ecx, xmm0
movaps xmm0, xmm1
psrldq xmm0, 8
movd eax, xmm0
movaps xmm0, xmm1
shl ecx, 8
psrldq xmm0, 4
movzx eax, al
add ecx, eax
movd eax, xmm0
shl ecx, 8
movzx eax, al
add ecx, eax
movd eax, xmm1
shl ecx, 8
movzx eax, al
add ecx, eax
lea eax, [ebp - 0x38]
push ecx
mov ecx, dword [edx + 8]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.100636d0
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.1001f6f0
int3