Function at 0x10026e90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x134
push ebx
push esi
mov esi, dword [0x100604b8]
mov ebx, esi
push edi
mov dword [ebp - 0xc8], ecx
mov dword [ebp - 0xc], ebx
mov eax, dword [ebx + 0x199c]
mov byte [eax + 0x7c], 1
mov edi, dword [ebx + 0x199c]
mov dword [ebp - 0x2c], edi
cmp byte [edi + 0x7f], 0
jne 0x100271ba
mov ecx, dword [ebp + 0x14]
mov eax, ecx
shr eax, 0xe
mov edx, ecx
and eax, 0xffffff01
shr edx, 0x14
mov dword [ebp - 0x30], eax
and edx, 0xffffff01
mov eax, ecx
mov dword [ebp - 0x1c], edx
shr eax, 0xf
and eax, 0xffffff01
mov dword [ebp - 0x88], eax
mov eax, ecx
shr eax, 0x10
not al
and eax, 0xffffff01
mov dword [ebp - 0x5c], eax
mov eax, ecx
shr eax, 0x12
and eax, 0xffffff01
mov dword [ebp - 0x58], eax
test dl, dl
je 0x10026f23
call fcn.1000db10
mov esi, dword [0x100604b8]
mov ecx, dword [edi + 0x1c4]
xor edx, edx
mov eax, dword [edi + 0x1cc]
push dword [eax + ecx*4 - 4]
mov ecx, dword [ebp - 0xc8]
call fcn.100025e0
add esp, 4
mov dword [ebp - 0x10], eax
cmp dword [esi + 0x19bc], eax
jne 0x10026f54
mov dword [esi + 0x19c4], eax
cmp dword [esi + 0x19c0], eax
jne 0x10026f63
mov byte [esi + 0x19d0], 1
mov edx, dword [ebp - 0xc8]
mov eax, edx
cmp edx, 0xffffffff
jae 0x10026f86
mov cl, byte [eax]
test cl, cl
je 0x10026f86
cmp cl, 0x23
jne 0x10026f80
cmp byte [eax + 1], cl
je 0x10026f86
inc eax
cmp eax, 0xffffffff
jb 0x10026f70
movss xmm0, dword [0x10038c78]
movss xmm4, dword [esi + 0x18bc]
movss dword [ebp - 0xd0], xmm0
cmp edx, eax
jne 0x10026faf
xorps xmm0, xmm0
movss dword [ebp - 0xc4], xmm0
jmp 0x10026ffc
movss xmm3, dword [0x10038c6c]
movaps xmm2, xmm4
push ecx
push eax
push edx
push ecx
mov ecx, dword [esi + 0x18b8]
lea eax, [ebp - 0x54]
mov dword [esp], 0xbf800000
push eax
call fcn.1001eca0
movss xmm0, dword [ebp - 0x54]
addss xmm0, dword [0x10038bc0]
movss xmm4, dword [ebp - 0x50]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0xc4], xmm0
xorps xmm0, xmm0
cmp byte [ebp - 0x1c], 0
je 0x10027012
movss xmm4, dword [esi + 0x18bc]
mulss xmm4, dword [0x10038bf8]
mov esi, dword [esi + 0x199c]
movss xmm3, dword [esi + 0x170]
comiss xmm0, xmm3
jbe 0x10027090
movss xmm2, dword [esi + 0xc8]
movss xmm1, dword [esi + 0x218]
mov edi, dword [esi + 0x1c0]
subss xmm2, dword [esi + 0xc]
subss xmm1, dword [esi + 0xc]
test edi, edi
je 0x10027079
mov edx, dword [edi + 0xc]
movss xmm1, dword [edi + 0x18]
subss xmm1, dword [edi + 0x14]
lea eax, [edx + 1]
test eax, eax
cmovns edx, eax
mov eax, dword [edi + 0x34]
lea ecx, [edx*8]
sub ecx, edx
mulss xmm1, dword [eax + ecx*4]
addss xmm1, dword [edi + 0x14]
subss xmm1, dword [esi + 0x3c]
mov edi, dword [ebp - 0x2c]
subss xmm1, xmm2
addss xmm1, xmm3
movss xmm3, dword [0x10038bc4]
maxss xmm3, xmm1
mov eax, dword [ebp + 0x10]
lea ecx, [ebp - 0x70]
movss xmm0, dword [ebx + 0x1548]
movaps xmm2, xmm0
addss xmm2, xmm0
push dword [eax + 4]
push dword [eax]
cvttss2si eax, xmm3
addss xmm2, xmm4
movd xmm1, eax
cvtdq2ps xmm1, xmm1
call fcn.100057d0
movss xmm3, dword [edi + 0xc8]
xorps xmm5, xmm5
movss xmm1, dword [ebp - 0x70]
movaps xmm0, xmm3
movss xmm4, dword [edi + 0xcc]
addss xmm0, xmm1
movss xmm2, dword [ebp - 0xc4]
add esp, 8
comiss xmm2, xmm5
movss dword [ebp - 0x80], xmm1
movss xmm1, dword [ebp - 0x6c]
addss xmm1, xmm4
movss dword [ebp - 0x98], xmm3
movss dword [ebp - 0x94], xmm4
movss dword [ebp - 0x90], xmm0
movss dword [ebp - 0x8c], xmm1
jbe 0x10027125
addss xmm2, dword [ebx + 0x155c]
jmp 0x10027128
xorps xmm2, xmm2
cmp byte [ebp - 0x1c], 0
addss xmm0, xmm2
addss xmm1, xmm5
movss dword [ebp - 0xa8], xmm3
movss dword [ebp - 0xa4], xmm4
mov dword [ebp - 0x3c], edi
movss dword [ebp - 0xa0], xmm0
movss dword [ebp - 0x9c], xmm1
je 0x10027248
mov esi, dword [ebp - 0x10]
lea eax, [ebp - 0x98]
push eax
mov edx, esi
lea ecx, [ebp - 0xa8]
call fcn.10005310
add esp, 4
test al, al
jne 0x100271c3
movss xmm0, dword [ebp - 0xa0]
lea ecx, [ebp - 0x54]
subss xmm0, dword [ebp - 0xa8]
movss xmm1, dword [ebx + 0x1548]
movss dword [ebp - 0x54], xmm0
movss xmm0, dword [ebp - 0x9c]
subss xmm0, dword [ebp - 0xa4]
movss dword [ebp - 0x50], xmm0
call fcn.100051b0
call fcn.1000dc40
xor al, al
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movss xmm0, dword [ebp - 0x90]
lea edx, [ebp - 0x54]
subss xmm0, dword [ebp - 0x98]
push ecx
mov ecx, esi
movss dword [ebp - 0x54], xmm0
movss xmm0, dword [ebp - 0x8c]
subss xmm0, dword [ebp - 0x94]
movss dword [ebp - 0x50], xmm0
call fcn.10008120
add esp, 4
test al, al
jne 0x10027212
call fcn.10007f90
call fcn.1000dc40
xor al, al
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x100604b8]
movss xmm0, dword [ebp - 0x70]
mov eax, dword [ecx + 0x199c]
mov byte [eax + 0x7c], 1
mov ecx, dword [ecx + 0x199c]
mov dword [ebp - 0x3c], ecx
subss xmm0, dword [ecx + 0x70]
mov eax, dword [ecx + 0x134]
or dword [ecx + 0x13c], eax
movss dword [ebp - 0x80], xmm0
jmp 0x1002728c
subss xmm1, xmm4
subss xmm0, xmm3
lea ecx, [ebp - 0x54]
movss dword [ebp - 0x50], xmm1
movss xmm1, dword [ebx + 0x1548]
movss dword [ebp - 0x54], xmm0
call fcn.100051b0
mov esi, dword [ebp - 0x10]
lea eax, [ebp - 0x98]
push eax
mov edx, esi
lea ecx, [ebp - 0xa8]
call fcn.10005310
add esp, 4
test al, al
je 0x100271ba
mov edx, esi
lea ecx, [ebp - 0x98]
call fcn.10005540
mov byte [ebp - 0x12], al
test al, al
je 0x100272aa
mov dword [ebx + 0x1d04], 1
lea eax, [ebx + 0x1dc4]
xor ecx, ecx
cmp dword [eax], esi
mov ebx, eax
mov edx, esi
cmovne ebx, ecx
mov ecx, edi
mov dword [ebp - 0x84], ebx
call fcn.100056b0
mov edx, dword [ebp - 0xc]
mov byte [ebp - 0x25], al
test al, al
je 0x10027333
cmp dword [edx + 0x1bb8], edi
jne 0x10027333
mov ecx, dword [edx + 0x1bc0]
cmp ecx, dword [edi + 0x164]
jne 0x10027333
mov byte [ebp - 0x11], 1
mov byte [ebp - 0x14], 0
cmp byte [ebp - 0x12], 0
je 0x10027303
cmp byte [edx + 0x3d8], 0
mov byte [ebp - 5], 1
jne 0x10027307
mov byte [ebp - 5], 0
mov esi, dword [edx + 0x19bc]
mov eax, dword [ebp - 0x10]
cmp esi, eax
je 0x10027345
cmp dword [edx + 0x1ac0], eax
je 0x1002732d
cmp dword [edx + 0x1ab4], eax
jne 0x10027345
cmp dword [edx + 0x1ad4], 3
jne 0x10027345
mov byte [ebp - 3], 1
jmp 0x10027349
mov byte [ebp - 0x11], 0
test al, al
je 0x100272ec
mov byte [ebp - 0x14], 1
mov byte [ebp - 0x11], 0
jmp 0x100272f0
mov byte [ebp - 3], 0
mov eax, dword [ebp - 0x1c]
test al, al
je 0x1002738e
test ebx, ebx
je 0x1002738e
test esi, esi
jne 0x1002738e
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov ecx, dword [eax + 0x1c4]
mov eax, dword [eax + 0x1cc]
push dword [eax + ecx*4 - 4]
mov ecx, str.SCROLLY
call fcn.100025e0
mov ecx, dword [ebp - 0xc]
add esp, 4
cmp dword [ecx + 0x19c0], eax
jne 0x1002738b
mov byte [ebp - 4], 1
jmp 0x1002739e
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0
test al, al
je 0x100273c8
mov byte [ebp - 4], 0
test ebx, ebx
je 0x100273c8
mov eax, dword [ebp - 0x3c]
mov ecx, str.SCROLLY
mov edx, dword [eax + 0x1c4]
mov eax, dword [eax + 0x1cc]
push dword [eax + edx*4 - 4]
xor edx, edx
call fcn.100025e0
add esp, 4
cmp esi, eax
jne 0x100273c8
mov al, 1
jmp 0x100273ca
xor al, al
mov edx, dword [ebp - 0x10]
mov cl, byte [ebp - 3]
mov byte [ebp - 1], al
mov byte [ebp - 0x34], 0
cmp esi, edx
je 0x100273ef
test byte [ebp + 0x14], 0x10
jne 0x100273e5
test cl, cl
je 0x100273ef
cmp byte [ebp - 0x1c], 0
mov byte [ebp - 0x24], 1
je 0x100273f3
mov byte [ebp - 0x24], 0
cmp byte [ebp - 0x25], 0
mov dword [ebp - 0x40], 0x20
mov dword [ebp - 0x64], 1
jne 0x1002749f
cmp byte [ebp - 5], 0
jne 0x1002749f
cmp byte [ebp - 4], 0
jne 0x1002749f
test cl, cl
jne 0x1002749f
mov byte [ebp - 4], cl
test al, al
jne 0x100274a3
mov byte [ebp - 0x13], al
mov esi, edx
mov eax, dword [ebp - 0xc]
cmp dword [eax + 0x19bc], esi
je 0x1002767b
cmp byte [ebp - 4], 0
je 0x1002767b
mov edx, edi
mov ecx, esi
call fcn.10005040
call fcn.100050f0
mov ecx, edi
call fcn.1000d290
mov edi, dword [ebp - 0xc]
mov eax, dword [ebp + 0x14]
mov dword [edi + 0x19d8], 2
test eax, 0x440
je 0x1002747e
mov dword [edi + 0x19d8], 0x20002
cmp byte [ebp - 0x1c], 0
jne 0x1002767d
test al, al
js 0x1002767d
mov dword [edi + 0x19d4], 0xc
jmp 0x1002767d
mov byte [ebp - 4], 1
mov byte [ebp - 0x13], 1
mov dword [ebp - 0x84], ebx
cmp esi, edx
je 0x1002742d
mov ebx, dword [ebp - 0xc]
mov ecx, dword [ebp + 8]
add ebx, 0x1dc4
mov dword [ebp - 0x84], ebx
mov dword [ebx + 0xe60], 0xbe99999a
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100274d4
mov edi, dword [ebx + 0x28]
lea eax, [ebx + 0x24]
sub ecx, edx
lea esi, [ecx + 1]
cmp esi, edi
jle 0x10027513
test edi, edi
je 0x100274fb
mov eax, edi
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
add ecx, edi
jmp 0x10027500
mov ecx, 8
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
lea ecx, [ebx + 0x24]
push eax
call fcn.100131c0
lea eax, [ebx + 0x24]
push esi
push dword [ebp + 8]
mov dword [eax], esi
push dword [ebx + 0x2c]
call sub.VCRUNTIME140.dll_memcpy
mov esi, dword [ebx + 0x10]
add esp, 0xc
mov dword [ebp - 0x20], 0
cmp esi, 0x21
jge 0x1002755c
test esi, esi
je 0x10027544
mov eax, esi
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
add ecx, esi
jmp 0x10027549
mov ecx, 8
mov eax, 0x21
cmp ecx, eax
cmovg eax, ecx
lea ecx, [ebx + 0xc]
push eax
call fcn.100132b0
mov dword [ebx + 0xc], 0x21
mov ecx, dword [ebx + 0x1c]
test ecx, ecx
jns 0x10027583
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [ebx + 0x18]
call fcn.100131c0
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x20]
mov edx, dword [ebp - 0x40]
push eax
push ecx
mov dword [ebx + 0x18], 0
mov ecx, dword [ebx + 0x14]
push esi
mov byte [ebx + 0x30], 0
call fcn.10002a10
mov ecx, dword [ebp - 0x20]
add esp, 0xc
sub ecx, esi
mov edx, eax
mov esi, dword [ebp - 0x10]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
cmp dword [ebx], esi
jne 0x100275dd
cmp dword [ebx + 0x3c], edx
mov ecx, edx
cmovl ecx, dword [ebx + 0x3c]
cmp dword [ebx + 0x40], edx
mov dword [ebx + 0x3c], ecx
mov ecx, edx
cmovl ecx, dword [ebx + 0x40]
cmp dword [ebx + 0x44], edx
mov dword [ebx + 0x40], ecx
cmovl edx, dword [ebx + 0x44]
mov dword [ebx + 0x44], edx
jmp 0x10027646
mov ecx, dword [ebp - 0x1c]
mov al, cl
xor al, 1
mov dword [ebx], esi
mov dword [ebx + 0x38], 0
mov dword [ebx + 0xe52], 0x630000
mov dword [ebx + 0xe58], 0
mov dword [ebx + 0xe5c], 0x3e7
mov dword [ebx + 0x40], 0
mov dword [ebx + 0x44], 0
mov dword [ebx + 0x3c], 0
mov dword [ebx + 0x48], 0x10000
mov dword [ebx + 0x50], 0
mov byte [ebx + 0x4c], al
test cl, cl
jne 0x10027649
mov ecx, dword [ebp - 0x24]
cmp byte [ebp - 0x11], 0
movzx ecx, cl
cmovne ecx, dword [ebp - 0x64]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x1c]
test dword [ebp + 0x14], 0x2000
je 0x10027656
mov byte [ebx + 0x48], 1
test cl, cl
jne 0x10027673
cmp byte [ebp - 0x14], cl
jne 0x1002766f
cmp byte [ebp - 5], cl
je 0x10027673
mov eax, dword [ebp - 0xc]
cmp byte [eax + 0xf8], cl
je 0x10027673
mov byte [ebp - 0x24], 1
mov edi, dword [ebp - 0x2c]
jmp 0x1002742f
mov edi, eax
mov eax, dword [edi + 0x19bc]
cmp eax, esi
jne 0x10027710
test ebx, ebx
jne 0x100276f0
mov edx, dword [0x100604b8]
mov ecx, dword [edx + 0x19bc]
test ecx, ecx
setne al
mov byte [edx + 0x19cc], al
test ecx, ecx
je 0x100276b7
mov dword [edx + 0x19c8], ebx
mov word [edx + 0x19ce], bx
mov dword [edx + 0x19bc], 0
mov dword [edx + 0x19d4], 0
mov dword [edx + 0x19d8], 0
mov byte [edx + 0x19cd], 0
mov dword [edx + 0x19e4], 0
mov eax, dword [edi + 0x19bc]
cmp eax, esi
jne 0x10027710
cmp byte [edi + 0x3d8], 0
je 0x10027710
cmp byte [ebp - 0x13], 0
jne 0x10027710
mov ecx, dword [ebp - 0x34]
cmp byte [ebp - 4], 0
movzx ecx, cl
cmove ecx, dword [ebp - 0x64]
mov dword [ebp - 0x34], ecx
cmp byte [ebp - 0x30], 0
je 0x100277d3
test ebx, ebx
je 0x100277d3
cmp eax, esi
je 0x10027730
cmp byte [ebp - 1], 0
jne 0x10027730
xor cl, cl
jmp 0x10027732
mov cl, 1
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
je 0x1002773e
test cl, cl
jne 0x10027746
test cl, cl
je 0x100277d3
mov esi, dword [ebx + 0x10]
mov dword [ebp - 0x20], 0
cmp esi, 0x21
jge 0x1002777e
test esi, esi
je 0x10027766
mov eax, esi
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
add ecx, esi
jmp 0x1002776b
mov ecx, 8
mov eax, 0x21
cmp ecx, eax
cmovg eax, ecx
lea ecx, [ebx + 0xc]
push eax
call fcn.100132b0
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x20]
push eax
push ecx
mov dword [ebx + 0xc], 0x21
mov edx, 0x21
mov ecx, dword [ebx + 0x14]
push edi
call fcn.10002a10
mov ecx, dword [ebp - 0x20]
mov esi, eax
sub ecx, edi
mov dword [ebx + 4], esi
mov edi, dword [ebp - 0xc]
add esp, 0xc
cmp dword [ebx + 0x3c], esi
mov edx, esi
mov dword [ebx + 8], ecx
mov ecx, esi
cmovl edx, dword [ebx + 0x3c]
cmp dword [ebx + 0x40], esi
mov dword [ebx + 0x3c], edx
cmovl ecx, dword [ebx + 0x40]
cmp dword [ebx + 0x44], esi
mov dword [ebx + 0x40], ecx
cmovl esi, dword [ebx + 0x44]
mov dword [ebx + 0x44], esi
mov esi, dword [ebp - 0x10]
mov ecx, dword [edi + 0x19bc]
cmp ecx, esi
je 0x100277eb
test ebx, ebx
je 0x100277e7
cmp byte [ebp - 1], 0
jne 0x100277eb
xor dl, dl
jmp 0x100277ed
mov dl, 1
mov byte [ebp - 0x11], dl
test ebx, ebx
je 0x10027806
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
je 0x10027806
test dl, dl
je 0x10027806
mov byte [ebp - 5], 1
jmp 0x10027815
mov byte [ebp - 5], 0
test dl, dl
jne 0x10027815
mov byte [ebp - 5], dl
cmp ecx, esi
jne 0x10027829
cmp byte [ebp - 0x30], 0
jne 0x10027829
test ebx, ebx
je 0x10027829
cmp byte [ebx + 0x30], 0
mov byte [ebp - 0x25], 1
jne 0x1002782d
mov byte [ebp - 0x25], 0
cmp byte [ebp - 0x88], 0
je 0x100278d3
mov esi, dword [edi + 0x18b8]
cmp dword [esi + 0x14], 0x2a
jg 0x1002784b
mov edi, dword [esi + 0x2c]
jmp 0x1002786a
mov eax, dword [esi + 0x1c]
mov ecx, 0xffff
movzx eax, word [eax + 0x54]
cmp ax, cx
jne 0x10027861
mov edi, dword [esi + 0x2c]
jmp 0x1002786a
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x28]
lea edi, [eax + ecx*8]
mov eax, dword [esi + 0x10]
mov esi, dword [ebp - 0xc]
mov edx, dword [ebp - 0xc]
add edx, 0x2c38
mov dword [edx + 0x10], eax
mov eax, dword [esi + 0x18b8]
mov eax, dword [eax + 0x44]
mov dword [edx + 0x44], eax
mov eax, dword [esi + 0x18b8]
mov ecx, dword [eax + 0x30]
mov eax, dword [eax + 0x34]
mov dword [edx + 0x30], ecx
mov ecx, edx
mov dword [edx + 0x34], eax
mov eax, dword [esi + 0x18b8]
mov eax, dword [eax + 0x48]
mov dword [edx + 0x48], eax
mov eax, dword [esi + 0x18b8]
mov eax, dword [eax + 0x4c]
mov dword [edx + 0x4c], eax
mov eax, dword [esi + 0x18b8]
mov eax, dword [eax + 0x38]
mov dword [edx + 0x38], eax
mov dword [edx + 0x2c], edi
mov eax, dword [edi + 4]
mov dword [edx + 0xc], eax
call fcn.1000d4b0
mov edi, esi
mov esi, dword [ebp - 0x10]
mov dword [ebp - 0x38], 0
cmp dword [edi + 0x19bc], esi
jne 0x10027be4
mov eax, dword [ebx + 8]
mov dword [ebx + 0x34], 0x20
mov dword [ebx + 0xe6c], 0
mov dword [ebx + 0xe70], 0
mov dword [ebp - 0x38], eax
mov eax, dword [ebp + 0x14]
mov dword [ebx + 0xe68], eax
cmp byte [edi + 0xe8], 0
mov dword [edi + 0x2f28], 1
sete al
cmp byte [ebp - 0x1c], 0
mov byte [edi + 0x19cd], al
movss xmm7, dword [edi + 0xe0]
subss xmm7, dword [ebp - 0x98]
subss xmm7, dword [edi + 0x1544]
addss xmm7, dword [ebx + 0x38]
je 0x1002796a
mov eax, dword [ebp - 0x3c]
movss xmm2, dword [edi + 0xe4]
subss xmm2, dword [eax + 0xcc]
subss xmm2, dword [edi + 0x1548]
jmp 0x1002797a
movss xmm2, dword [edi + 0x18bc]
mulss xmm2, dword [0x10038b98]
cmp byte [ebp - 0x24], 0
mov cl, byte [edi + 0xad]
mov byte [ebp - 4], cl
jne 0x10027af1
mov dl, byte [ebp - 0x12]
test dl, dl
je 0x100279a6
mov al, byte [edi + 0x3dd]
test cl, cl
jne 0x10027a11
test al, al
jne 0x10027af1
cmp byte [edi + 0x3d8], 0
mov al, byte [ebx + 0xe65]
je 0x10027a63
test al, al
jne 0x10027a63
test dl, dl
je 0x10027b0c
cmp byte [ebx + 0x4c], al
je 0x100279e8
push 0
mov edx, ebx
lea ecx, [ebp - 0xb0]
call fcn.100254c0
movss xmm2, dword [ebp - 0xa4]
add esp, 4
movaps xmm1, xmm7
mov ecx, ebx
call fcn.10025770
mov cl, byte [ebp - 4]
mov dword [ebx + 0x3c], eax
mov dword [ebx + 0x40], eax
mov dword [ebx + 0x44], eax
mov byte [ebx + 0x4b], 0
mov dword [ebx + 0xe60], 0xbe99999a
jmp 0x10027b0c
test al, al
je 0x100279a6
push 0x1000c
lea edx, [ebx + 0x3c]
mov ecx, ebx
call fcn.10025bb0
add esp, 4
mov byte [ebx + 0xe64], 1
lea edx, [ebx + 0x3c]
mov dword [ebx + 0xe60], 0xbe99999a
mov ecx, ebx
push 0x3000d
call fcn.10025bb0
mov cl, byte [ebp - 4]
add esp, 4
mov byte [ebx + 0xe64], 1
mov dword [ebx + 0xe60], 0xbe99999a
jmp 0x10027b0c
cmp byte [edi + 0xe8], 0
je 0x10027b0c
test al, al
jne 0x10027b0c
movss xmm0, dword [edi + 0x374]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x10027a9d
movss xmm0, dword [edi + 0x378]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x10027b0c
cmp byte [ebx + 0x4c], 0
je 0x10027abd
push 0
mov edx, ebx
lea ecx, [ebp - 0xb0]
call fcn.100254c0
movss xmm2, dword [ebp - 0xa4]
add esp, 4
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
jne 0x10027acb
mov eax, dword [ebx + 0x3c]
mov dword [ebx + 0x40], eax
movaps xmm1, xmm7
mov ecx, ebx
call fcn.10025770
mov cl, byte [ebp - 4]
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x3c], eax
mov dword [ebx + 0xe60], 0xbe99999a
mov byte [ebx + 0xe64], 1
jmp 0x10027b0c
mov eax, dword [ebx + 4]
mov dword [ebx + 0x40], 0
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x3c], eax
mov byte [ebx + 0x4b], 0
mov byte [ebx + 0xe65], 1
cmp byte [ebx + 0xe65], 0
je 0x10027b25
cmp byte [edi + 0xe8], 0
jne 0x10027b25
mov byte [ebx + 0xe65], 0
cmp dword [edi + 0x1500], 0
jle 0x10027be1
mov eax, dword [ebp - 0xc]
cmp byte [eax + 0xf8], 0
je 0x10027b47
cmp byte [eax + 0xfa], 0
je 0x10027bb1
test cl, cl
je 0x10027b54
cmp byte [eax + 0xfb], 0
jne 0x10027bb1
cmp byte [ebp - 0x30], 0
jne 0x10027bb1
cmp byte [ebp - 3], 0
jne 0x10027bb1
xor esi, esi
mov eax, dword [eax + 0x1508]
lea ecx, [ebp - 0x20]
mov edx, dword [ebp + 0x14]
sub esp, 8
movzx eax, word [eax + esi*2]
mov dword [ebp - 0x20], eax
call fcn.10026d00
add esp, 8
test al, al
je 0x10027ba5
push dword [ebp - 0x20]
lea edx, [ebx + 0x3c]
mov ecx, ebx
call fcn.10025bb0
add esp, 4
mov byte [ebx + 0xe64], 1
mov dword [ebx + 0xe60], 0xbe99999a
mov eax, dword [ebp - 0xc]
inc esi
cmp esi, dword [edi + 0x1500]
jl 0x10027b62
mov ecx, dword [edi + 0x1504]
test ecx, ecx
jns 0x10027bd7
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x1500]
call fcn.100132b0
mov dword [edi + 0x1500], 0
mov edi, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
xor cl, cl
xor dh, dh
mov byte [ebp - 3], cl
mov byte [ebp - 1], cl
mov byte [ebp - 2], dh
cmp dword [edi + 0x19bc], eax
jne 0x10028a90
mov byte [ebp - 1], dh
mov byte [ebp - 2], dh
cmp byte [edi + 0x19cc], dh
jne 0x1002866e
mov byte [ebp - 1], dh
mov byte [ebp - 2], dh
cmp byte [ebp - 0x34], dh
jne 0x1002866e
mov ah, byte [edi + 0xf9]
xor esi, esi
mov dh, byte [edi + 0xad]
test ah, ah
mov al, byte [edi + 0xf8]
mov ecx, 0x20000
cmovne esi, ecx
mov byte [ebp - 0x79], ah
mov byte [ebp - 0x7a], dh
test dh, dh
je 0x10027c93
cmp byte [edi + 0xfb], 0
je 0x10027c5d
test al, al
jne 0x10027c5d
mov ecx, 1
jmp 0x10027c5f
xor ecx, ecx
test ecx, ecx
jne 0x10027ca0
xor dl, dl
mov byte [ebp - 1], dl
mov cl, al
test dh, dh
je 0x10027cb1
cmp byte [edi + 0xfb], 0
je 0x10027cb1
test ah, ah
je 0x10027cb1
mov cl, byte [edi + 0xf8]
test cl, cl
jne 0x10027cb1
cmp byte [edi + 0xfa], cl
jne 0x10027cb1
mov byte [ebp - 0x13], 1
jmp 0x10027cbd
test al, al
je 0x10027c63
cmp byte [edi + 0xfb], 0
jne 0x10027c63
cmp byte [edi + 0xfa], 0
jne 0x10027c63
test ah, ah
jne 0x10027c63
mov dl, 1
jmp 0x10027c65
mov byte [ebp - 0x13], 0
test dh, dh
je 0x10027d67
cmp byte [edi + 0xfb], 0
mov al, byte [edi + 0xfa]
mov byte [ebp - 4], al
je 0x10027d6e
test cl, cl
jne 0x10027d6e
test al, al
jne 0x10027d6e
mov byte [ebp - 2], 1
cmp byte [edi + 0xf9], 0
mov byte [ebp - 0x15], 0
je 0x10027d0c
test cl, cl
jne 0x10027d0c
cmp byte [edi + 0xfa], cl
jne 0x10027d0c
mov byte [ebp - 0x12], 1
cmp byte [edi + 0xfb], cl
je 0x10027d10
mov byte [ebp - 0x12], 0
test dl, dl
je 0x10027d29
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x7c]
test ecx, ecx
js 0x10027d29
call fcn.10007bf0
test al, al
jne 0x10027d44
cmp byte [ebp - 0x12], 0
je 0x10027da3
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x5c]
test ecx, ecx
js 0x10027da3
call fcn.10007bf0
test al, al
je 0x10027da3
cmp byte [ebp - 0x30], 0
jne 0x10027da3
cmp byte [ebp - 0x88], 0
jne 0x10027da3
cmp byte [ebp - 0x1c], 0
je 0x10027d61
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
je 0x10027da3
mov byte [ebp - 0x14], 1
jmp 0x10027da7
mov byte [ebp - 4], cl
mov byte [ebp - 0x13], 0
mov byte [ebp - 2], 0
test cl, cl
je 0x10027ce7
test ah, ah
jne 0x10027ce7
cmp byte [edi + 0xfa], ah
jne 0x10027ce7
cmp byte [edi + 0xfb], ah
jne 0x10027ce7
mov byte [ebp - 0x15], 1
jmp 0x10027d0c
mov byte [ebp - 0x14], 0
cmp byte [ebp - 1], 0
je 0x10027dc2
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x74]
test ecx, ecx
js 0x10027dc2
call fcn.10007bf0
test al, al
jne 0x10027ddd
cmp byte [ebp - 0x15], 0
je 0x10027dfa
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x58]
test ecx, ecx
js 0x10027dfa
call fcn.10007bf0
test al, al
je 0x10027dfa
cmp byte [ebp - 0x88], 0
jne 0x10027dfa
cmp byte [ebp - 0x1c], 0
je 0x10027df4
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
je 0x10027dfa
mov byte [ebp - 0x45], 1
jmp 0x10027dfe
mov byte [ebp - 0x45], 0
cmp byte [ebp - 1], 0
je 0x10027e19
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x78]
test ecx, ecx
js 0x10027e19
call fcn.10007bf0
test al, al
jne 0x10027e34
cmp byte [ebp - 0x12], 0
je 0x10027e3e
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x58]
test ecx, ecx
js 0x10027e3e
call fcn.10007bf0
test al, al
je 0x10027e3e
cmp byte [ebp - 0x30], 0
mov byte [ebp - 0x12], 1
je 0x10027e42
mov byte [ebp - 0x12], 0
mov dl, byte [ebp - 1]
test dl, dl
je 0x10027e76
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x84]
test ecx, ecx
js 0x10027e76
call fcn.10007bf0
test al, al
je 0x10027e73
cmp byte [ebp - 0x30], 0
jne 0x10027e73
cmp byte [ebp - 0x5c], 0
je 0x10027e73
mov byte [ebp - 0x15], 1
jmp 0x10027e7e
mov dl, byte [ebp - 1]
mov byte [ebp - 0x15], 0
test dl, dl
je 0x10027e96
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x80]
test ecx, ecx
js 0x10027e96
call fcn.10007bf0
test al, al
jne 0x10027eb4
cmp byte [ebp - 0x13], 0
je 0x10027ec4
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x84]
test ecx, ecx
js 0x10027ec4
call fcn.10007bf0
test al, al
je 0x10027ec4
cmp byte [ebp - 0x30], 0
jne 0x10027ec4
cmp byte [ebp - 0x5c], 0
mov byte [ebp - 0x13], 1
jne 0x10027ec8
mov byte [ebp - 0x13], 0
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x38]
test ecx, ecx
js 0x10027f1d
call fcn.10007bf0
test al, al
je 0x10027f1d
cmp byte [ebp - 2], 0
je 0x10027efa
mov eax, 0x10004
lea edx, [ebx + 0x3c]
or eax, esi
mov ecx, ebx
push eax
call fcn.10025bb0
jmp 0x1002864b
cmp byte [ebp - 4], 0
lea edx, [ebx + 0x3c]
mov ecx, 0x1000c
mov eax, 0x10000
cmovne eax, ecx
mov ecx, ebx
or eax, esi
push eax
call fcn.10025bb0
jmp 0x1002864b
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
js 0x10027f72
call fcn.10007bf0
test al, al
je 0x10027f72
cmp byte [ebp - 2], 0
je 0x10027f4f
mov eax, 0x10005
lea edx, [ebx + 0x3c]
or eax, esi
mov ecx, ebx
push eax
call fcn.10025bb0
jmp 0x1002864b
cmp byte [ebp - 4], 0
lea edx, [ebx + 0x3c]
mov ecx, 0x1000d
mov eax, 0x10001
cmovne eax, ecx
mov ecx, ebx
or eax, esi
push eax
call fcn.10025bb0
jmp 0x1002864b
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x40]
test ecx, ecx
js 0x10027feb
call fcn.10007bf0
test al, al
je 0x10027feb
cmp byte [ebp - 0x1c], 0
je 0x10027feb
cmp byte [edi + 0xf8], 0
je 0x10027fce
mov eax, dword [ebp - 0x3c]
xorps xmm4, xmm4
movss xmm1, dword [eax + 0x5c]
movaps xmm0, xmm1
subss xmm0, dword [edi + 0x18bc]
addss xmm1, dword [eax + 0xe4]
maxss xmm0, xmm4
subss xmm1, xmm0
movss dword [eax + 0x5c], xmm0
movss dword [eax + 0xe4], xmm1
jmp 0x1002865f
movzx eax, byte [ebp - 2]
lea edx, [ebx + 0x3c]
mov ecx, ebx
lea eax, [eax*4 + 0x10002]
or eax, esi
push eax
call fcn.10025bb0
jmp 0x1002864b
mov edi, dword [0x100604b8]
mov ecx, dword [edi + 0x44]
test ecx, ecx
js 0x10028097
call fcn.10007bf0
test al, al
je 0x10028097
cmp byte [ebp - 0x1c], 0
je 0x10028097
mov eax, dword [ebp - 0xc]
cmp byte [eax + 0xf8], 0
je 0x10028077
mov eax, dword [edi + 0x199c]
mov ecx, dword [ebp - 0x3c]
mov edi, dword [ebp - 0xc]
movss xmm0, dword [eax + 0x20]
subss xmm0, dword [eax + 0x74]
movss xmm1, dword [eax + 0x30]
movss xmm3, dword [ecx + 0x5c]
movaps xmm2, xmm3
addss xmm2, dword [edi + 0x18bc]
addss xmm3, dword [ecx + 0xe4]
subss xmm1, xmm0
xorps xmm0, xmm0
maxss xmm0, xmm1
minss xmm2, xmm0
subss xmm3, xmm2
movss dword [ecx + 0x5c], xmm2
movss dword [ecx + 0xe4], xmm3
jmp 0x1002865f
movzx eax, byte [ebp - 2]
lea edx, [ebx + 0x3c]
mov ecx, ebx
lea eax, [eax*4 + 0x10003]
or eax, esi
push eax
call fcn.10025bb0
mov edi, dword [ebp - 0xc]
jmp 0x1002864b
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x50]
test ecx, ecx
js 0x100280d6
call fcn.10007bf0
test al, al
je 0x100280d6
mov edi, dword [ebp - 0xc]
lea edx, [ebx + 0x3c]
mov eax, esi
mov ecx, ebx
or eax, 0x10006
or esi, 0x10004
cmp byte [edi + 0xf8], 0
cmovne esi, eax
push esi
call fcn.10025bb0
jmp 0x1002864b
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x54]
test ecx, ecx
js 0x10028115
call fcn.10007bf0
test al, al
je 0x10028115
mov edi, dword [ebp - 0xc]
lea edx, [ebx + 0x3c]
mov eax, esi
mov ecx, ebx
or eax, 0x10007
or esi, 0x10005
cmp byte [edi + 0xf8], 0
cmovne esi, eax
push esi
call fcn.10025bb0
jmp 0x1002864b
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x5c]
test ecx, ecx
js 0x10028149
call fcn.10007bf0
test al, al
je 0x10028149
cmp byte [ebp - 0x30], 0
jne 0x10028149
or esi, 0x10008
lea edx, [ebx + 0x3c]
push esi
mov ecx, ebx
call fcn.10025bb0
mov edi, dword [ebp - 0xc]
jmp 0x1002864b
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x60]
test ecx, ecx
js 0x10028203
call fcn.10007bf0
test al, al
je 0x10028203
cmp byte [ebp - 0x30], 0
jne 0x10028203
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
jne 0x100281a1
cmp byte [ebp - 4], 0
je 0x100281ba
push 0x3000c
lea edx, [ebx + 0x3c]
mov ecx, ebx
call fcn.10025bb0
add esp, 4
mov byte [ebx + 0xe64], 1
mov dword [ebx + 0xe60], 0xbe99999a
mov edi, dword [ebp - 0xc]
or esi, 0x10009
lea edx, [ebx + 0x3c]
push esi
mov ecx, ebx
call fcn.10025bb0
jmp 0x1002864b
cmp byte [ebp - 0x7a], 0
je 0x100281a1
mov edi, dword [ebp - 0xc]
cmp byte [edi + 0xfb], 0
je 0x100281a4
cmp byte [edi + 0xfa], 0
jne 0x100281a4
cmp byte [edi + 0xf8], 0
jne 0x100281a4
push 0x30004
lea edx, [ebx + 0x3c]
mov ecx, ebx
call fcn.10025bb0
add esp, 4
mov byte [ebx + 0xe64], 1
mov dword [ebx + 0xe60], 0xbe99999a
jmp 0x100281a4
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x68]
test ecx, ecx
js 0x10028297
call fcn.10007bf0
test al, al
je 0x10028297
mov eax, dword [ebp + 0x14]
mov edi, dword [ebp - 0xc]
shr eax, 0xb
and al, 1
cmp byte [ebp - 0x1c], 0
je 0x1002823f
mov cl, byte [edi + 0xf8]
test al, al
je 0x1002824a
test cl, cl
jne 0x1002824e
mov byte [ebp - 0x34], 1
mov dh, 1
jmp 0x10028661
test cl, cl
jne 0x1002823f
xor dh, dh
mov byte [ebp - 2], dh
cmp byte [ebp - 0x30], dh
jne 0x10028664
xor dl, dl
mov dword [ebp - 0x20], 0xa
sub esp, 8
mov byte [ebp - 2], dl
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x20]
call fcn.10026d00
add esp, 8
test al, al
je 0x1002828f
push dword [ebp - 0x20]
lea edx, [ebx + 0x3c]
mov ecx, ebx
call fcn.10025bb0
jmp 0x1002864b
mov dh, byte [ebp - 2]
jmp 0x10028664
test dword [ebp + 0x14], 0x400
je 0x10028308
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x34]
test ecx, ecx
js 0x10028308
call fcn.10007bf0
mov edi, dword [ebp - 0xc]
test al, al
je 0x1002830b
cmp byte [edi + 0xf8], 0
jne 0x1002830b
cmp byte [ebp - 0x79], 0
jne 0x1002830b
cmp byte [edi + 0xfa], 0
jne 0x1002830b
cmp byte [ebp - 0x30], 0
jne 0x1002830b
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x20]
sub esp, 8
mov dword [ebp - 0x20], 9
call fcn.10026d00
add esp, 8
test al, al
je 0x1002865f
push dword [ebp - 0x20]
lea edx, [ebx + 0x3c]
mov ecx, ebx
call fcn.10025bb0
jmp 0x1002864b
mov edi, dword [ebp - 0xc]
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x6c]
test ecx, ecx
js 0x10028333
call fcn.10007bf0
test al, al
je 0x10028333
mov cl, 1
mov byte [ebp - 1], 0
xor dh, dh
mov byte [ebp - 0x34], cl
mov byte [ebp - 2], dh
jmp 0x1002866b
mov al, byte [ebp - 0x15]
test al, al
jne 0x1002862c
cmp byte [ebp - 0x13], al
jne 0x1002862c
cmp byte [ebp - 1], al
je 0x1002837a
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x70]
test ecx, ecx
js 0x1002837a
call fcn.10007bf0
test al, al
je 0x1002837a
mov eax, dword [ebx + 4]
mov dword [ebx + 0x40], 0
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x3c], eax
mov byte [ebx + 0x4b], 0
jmp 0x10028658
mov al, byte [ebp - 0x14]
test al, al
jne 0x10028519
cmp byte [ebp - 0x45], al
jne 0x10028519
xor dh, dh
mov byte [ebp - 1], al
mov byte [ebp - 2], dh
cmp byte [ebp - 0x12], dh
je 0x10028668
mov edi, dword [0x100604b8]
mov eax, dword [edi + 0xc8]
test eax, eax
je 0x100283d1
push dword [edi + 0xd0]
call eax
mov esi, eax
mov byte [ebp - 1], 0
xor dh, dh
add esp, 4
mov byte [ebp - 2], dh
test esi, esi
jne 0x100283d6
mov edi, dword [ebp - 0xc]
jmp 0x10028668
mov esi, 0x1003453e
mov ecx, esi
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100283e0
mov eax, dword [0x100604b8]
sub ecx, edx
test eax, eax
je 0x100283f8
inc dword [eax + 0x370]
lea eax, [ecx*2 + 2]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov dword [ebp - 0x4c], eax
xor edi, edi
cmp byte [esi], 0
je 0x10028460
mov ebx, eax
push 0
mov edx, esi
lea ecx, [ebp - 0x60]
call fcn.10002870
add esi, eax
add esp, 4
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x10028457
cmp eax, 0x10000
jae 0x10028452
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x60]
sub esp, 8
call fcn.10026d00
add esp, 8
test al, al
je 0x10028452
mov ax, word [ebp - 0x60]
mov word [ebx + edi*2], ax
inc edi
cmp byte [esi], 0
jne 0x10028415
mov ebx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
mov word [eax + edi*2], cx
test edi, edi
jle 0x100284f3
mov edx, dword [ebx + 0x44]
mov ecx, dword [ebx + 0x40]
mov eax, dword [ebx + 4]
cmp ecx, edx
je 0x10028494
cmp ecx, eax
jle 0x10028484
mov dword [ebx + 0x40], eax
mov ecx, eax
cmp edx, eax
jle 0x1002848d
mov dword [ebx + 0x44], eax
mov edx, eax
cmp ecx, edx
jne 0x10028494
mov dword [ebx + 0x3c], ecx
cmp dword [ebx + 0x3c], eax
jle 0x1002849c
mov dword [ebx + 0x3c], eax
lea edx, [ebx + 0x3c]
mov ecx, ebx
call fcn.10025b20
mov edx, dword [ebx + 0x3c]
mov ecx, ebx
push edi
push dword [ebp - 0x4c]
call fcn.10025640
add esp, 8
test al, al
je 0x100284d5
mov edx, dword [ebx + 0x3c]
lea ecx, [ebx + 0x54]
push edi
push 0
call fcn.100269b0
add esp, 8
mov byte [ebx + 0x4b], 0
add dword [ebx + 0x3c], edi
jmp 0x100284e9
movzx eax, word [ebx + 0xe52]
test ax, ax
je 0x100284e9
dec eax
mov word [ebx + 0xe52], ax
mov eax, dword [ebp - 0x4c]
mov byte [ebx + 0xe64], 1
test eax, eax
je 0x10028507
mov ecx, dword [0x100604b8]
test ecx, ecx
je 0x10028507
dec dword [ecx + 0x370]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov edi, dword [ebp - 0xc]
add esp, 4
jmp 0x1002865f
xor dh, dh
mov byte [ebp - 1], 0
cmp dword [edi + 0xcc], 0
mov byte [ebp - 2], dh
je 0x100285e6
mov edi, dword [ebx + 0x44]
mov eax, dword [ebx + 0x40]
mov byte [ebp - 1], dh
cmp eax, edi
je 0x10028546
mov ecx, edi
cmovl edi, eax
cmovge ecx, eax
jmp 0x1002854b
mov ecx, dword [ebx + 4]
xor edi, edi
mov al, byte [ebp - 5]
xor dl, dl
mov byte [ebp - 5], al
mov eax, dword [ebx + 0x14]
mov byte [ebp - 2], dl
mov dword [ebp - 0x20], ecx
lea edx, [eax + ecx*2]
lea ecx, [eax + edi*2]
call fcn.10002c00
mov ecx, dword [0x100604b8]
inc eax
mov dword [ebp - 0x44], eax
test ecx, ecx
je 0x1002857b
inc dword [ecx + 0x370]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov esi, dword [ebx + 0x14]
add esp, 4
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x64], eax
lea ecx, [esi + ecx*2]
push ecx
lea ecx, [esi + edi*2]
mov esi, eax
push ecx
mov ecx, esi
call fcn.10002ad0
mov eax, dword [0x100604b8]
add esp, 8
mov ecx, dword [eax + 0xcc]
test ecx, ecx
je 0x100285c5
push esi
push dword [eax + 0xd0]
call ecx
mov eax, dword [0x100604b8]
add esp, 8
test esi, esi
je 0x100285d3
test eax, eax
je 0x100285d3
dec dword [eax + 0x370]
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov al, byte [ebp - 0x14]
add esp, 4
mov edi, dword [ebp - 0xc]
mov dh, byte [ebp - 2]
test al, al
je 0x10028668
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
jne 0x1002860a
mov eax, dword [ebx + 4]
mov dword [ebx + 0x40], 0
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x3c], eax
mov byte [ebx + 0x4b], 0
mov byte [ebx + 0xe64], 1
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
je 0x10028668
lea edx, [ebx + 0x3c]
mov ecx, ebx
call fcn.10025b20
mov dh, byte [ebp - 2]
mov byte [ebx + 0x4b], 0
jmp 0x10028668
movzx eax, al
lea edx, [ebx + 0x3c]
xor eax, 1
mov ecx, ebx
add eax, 0x1000a
push eax
call fcn.10025bb0
mov eax, dword [ebx + 0x3c]
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x40], eax
add esp, 4
mov dword [ebx + 0xe60], 0xbe99999a
mov byte [ebx + 0xe64], 1
xor dh, dh
mov byte [ebp - 2], dh
mov byte [ebp - 1], 0
mov cl, byte [ebp - 3]
mov eax, dword [ebp - 0x10]
cmp dword [edi + 0x19bc], eax
jne 0x10028a90
xor eax, eax
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x2c], eax
test cl, cl
je 0x100286e0
cmp byte [ebp - 0x30], al
jne 0x100286ca
mov esi, dword [ebx + 0x2c]
mov ecx, esi
mov eax, dword [ebp + 8]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100286b7
test dl, dl
je 0x100286b3
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100286b7
add eax, 2
add ecx, 2
test dl, dl
jne 0x10028697
xor eax, eax
jmp 0x100286bc
sbb eax, eax
or eax, 1
test eax, eax
je 0x100286ca
mov eax, dword [ebx + 0x24]
dec eax
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x2c], eax
test dh, dh
mov edx, dword [ebp + 0x14]
je 0x10028997
test dl, 0x20
je 0x10028997
jmp 0x100286e3
mov edx, dword [ebp + 0x14]
cmp byte [ebp - 0x30], 0
jne 0x10028741
mov eax, dword [ebx + 0xc]
mov byte [ebx + 0x30], 1
mov edi, dword [ebx + 0x1c]
lea esi, [eax*4 + 1]
lea eax, [ebx + 0x18]
cmp esi, edi
jle 0x1002872a
test edi, edi
je 0x10028712
mov eax, edi
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
add ecx, edi
jmp 0x10028717
mov ecx, 8
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
lea ecx, [ebx + 0x18]
push eax
call fcn.100131c0
lea eax, [ebx + 0x18]
mov dword [eax], esi
mov edx, esi
mov ecx, dword [ebx + 0x20]
push 0
push dword [ebx + 0x14]
call fcn.10002ad0
mov edx, dword [ebp + 0x14]
add esp, 8
test edx, 0x1c0
je 0x10028952
mov esi, 0x15
test dl, 0x40
je 0x10028776
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x34]
test ecx, ecx
js 0x10028776
call fcn.10007bf0
test al, al
je 0x10028773
lea eax, [esi + 0x2b]
xor esi, esi
jmp 0x100287cf
mov edx, dword [ebp + 0x14]
test dl, dl
jns 0x100287be
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x40]
test ecx, ecx
js 0x1002879c
call fcn.10007bf0
test al, al
je 0x10028799
mov eax, 0x80
lea esi, [eax - 0x7d]
jmp 0x100287cf
mov edx, dword [ebp + 0x14]
mov eax, dword [0x100604b8]
mov ecx, dword [eax + 0x44]
test ecx, ecx
js 0x100287be
call fcn.10007bf0
test al, al
je 0x100287bb
mov eax, 0x80
lea esi, [eax - 0x7c]
jmp 0x100287cf
mov edx, dword [ebp + 0x14]
test edx, 0x100
je 0x10028952
mov eax, 0x100
mov dword [ebp - 0x104], eax
xor ecx, ecx
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x100], eax
mov eax, dword [ebx + 0x20]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 0xec], eax
mov eax, dword [ebx + 0x34]
mov dword [ebp - 0xf4], esi
mov esi, dword [ebx + 0x14]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebx + 0x3c]
mov word [ebp - 0xe3], cx
mov byte [ebp - 0xe1], cl
mov dword [ebp - 0xfc], ecx
mov byte [ebp - 0xe4], cl
lea edx, [esi + eax*2]
mov ecx, esi
mov dword [ebp - 0xf8], 0
call fcn.10002c00
mov ecx, dword [ebx + 0x40]
mov edi, eax
mov dword [ebp - 0xe0], edi
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.10002c00
mov edx, dword [ebx + 0x44]
mov ecx, esi
mov dword [ebp - 0x44], eax
mov dword [ebp - 0xdc], eax
lea edx, [esi + edx*2]
call fcn.10002c00
mov esi, eax
lea eax, [ebp - 0x104]
push eax
xor eax, eax
mov dword [ebp - 0xd8], esi
call eax
mov ecx, dword [ebp - 0xe0]
add esp, 4
cmp ecx, edi
mov edi, dword [ebp - 0xf0]
je 0x10028899
lea edx, [ecx + edi]
mov ecx, edi
call fcn.10002a80
mov dword [ebx + 0x3c], eax
mov byte [ebx + 0xe64], 1
mov eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0x44]
je 0x100288b1
lea edx, [eax + edi]
mov ecx, edi
call fcn.10002a80
mov dword [ebx + 0x40], eax
mov eax, dword [ebp - 0xd8]
cmp eax, esi
je 0x100288c8
lea edx, [eax + edi]
mov ecx, edi
call fcn.10002a80
mov dword [ebx + 0x44], eax
cmp byte [ebp - 0xe4], 0
je 0x1002894f
mov esi, dword [ebp - 0xec]
mov ecx, dword [ebp - 0x38]
cmp esi, ecx
jle 0x10028927
cmp byte [ebp - 0x58], 0
je 0x10028927
mov eax, dword [ebx + 0x10]
sub esi, ecx
add esi, dword [ebx + 0xc]
cmp esi, eax
jle 0x10028924
test eax, eax
je 0x10028907
cdq
sub eax, edx
lea edx, [ebx + 0xc]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x1002890f
mov ecx, 8
lea edx, [ebx + 0xc]
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.100132b0
mov edi, dword [ebp - 0xf0]
mov dword [ebx + 0xc], esi
mov edx, dword [ebx + 0xc]
push 0
push ecx
mov ecx, dword [ebx + 0x14]
push edi
call fcn.10002a10
mov dword [ebx + 4], eax
add esp, 0xc
mov eax, dword [ebp - 0xec]
mov dword [ebx + 8], eax
mov dword [ebx + 0xe60], 0xbe99999a
mov edx, dword [ebp + 0x14]
cmp byte [ebp - 0x30], 0
jne 0x10028994
mov esi, dword [ebx + 0x20]
mov eax, esi
mov ecx, dword [ebp + 8]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10028980
test dl, dl
je 0x1002897c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10028980
add eax, 2
add ecx, 2
test dl, dl
jne 0x10028960
xor eax, eax
jmp 0x10028985
sbb eax, eax
or eax, 1
mov edi, dword [ebp - 0xc]
mov edx, dword [ebp + 0x14]
test eax, eax
je 0x10028997
mov ecx, dword [ebx + 8]
jmp 0x1002899d
mov edi, dword [ebp - 0xc]
mov esi, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x2c]
test esi, esi
je 0x10028a72
cmp dword [ebp - 0x38], ecx
je 0x10028a3b
cmp byte [ebp - 0x58], 0
je 0x10028a3b
mov eax, dword [ebp + 8]
xorps xmm0, xmm0
mov dword [ebp - 0x120], eax
lea eax, [ecx + 1]
cmp eax, 0x20
movlpd qword [ebp - 0x128], xmm0
movlpd qword [ebp - 0x114], xmm0
cmovle eax, dword [ebp - 0x40]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x134]
push eax
xor eax, eax
movlpd qword [ebp - 0x10c], xmm0
mov dword [ebp - 0x134], 0x40000
mov dword [ebp - 0x130], edx
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x12c], 0
call eax
mov edx, dword [ebp - 0x118]
add esp, 4
mov eax, dword [ebp - 0x120]
mov dword [ebp + 8], eax
lea ecx, [edx - 1]
cmp dword [ebp - 0x11c], ecx
cmovl ecx, dword [ebp - 0x11c]
jmp 0x10028a40
mov edx, 0x20
lea eax, [ecx + 1]
cmp eax, edx
cmovl edx, eax
mov dword [ebp - 0x44], edx
cmp edx, 1
jb 0x10028a6e
jbe 0x10028a66
lea eax, [edx - 1]
push eax
push esi
push dword [ebp + 8]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov edx, dword [ebp - 0x44]
add esp, 0xc
mov eax, dword [ebp + 8]
mov byte [edx + eax - 1], 0
mov byte [ebp - 1], 1
mov dword [ebx + 0xe68], 0
mov dword [ebx + 0xe6c], 0
mov dword [ebx + 0xe70], 0
cmp byte [ebp - 0x34], 0
mov ecx, dword [ebp - 0x10]
je 0x10028b01
cmp dword [edi + 0x19bc], ecx
jne 0x10028b01
mov edx, dword [0x100604b8]
mov ecx, dword [edx + 0x19bc]
test ecx, ecx
setne al
mov byte [edx + 0x19cc], al
test ecx, ecx
je 0x10028acf
mov dword [edx + 0x19c8], 0
mov word [edx + 0x19ce], 0
mov ecx, dword [ebp - 0x10]
mov dword [edx + 0x19bc], 0
mov dword [edx + 0x19d4], 0
mov dword [edx + 0x19d8], 0
mov byte [edx + 0x19cd], 0
mov dword [edx + 0x19e4], 0
mov edx, dword [ebp - 0x1c]
movss xmm4, dword [0x10038c40]
test dl, dl
jne 0x10028c9d
mov edx, ecx
lea ecx, [ebp - 0x98]
push 1
call fcn.10004300
mov eax, dword [0x100604b8]
xorps xmm3, xmm3
movss xmm6, dword [0x10038bc4]
add esp, 4
movups xmm2, xmmword [eax + 0x1628]
comiss xmm3, xmm2
movaps xmm1, xmm2
shufps xmm1, xmm2, 0xff
mulss xmm1, dword [eax + 0x1510]
movups xmmword [ebp - 0xa8], xmm2
jbe 0x10028b5d
xorps xmm0, xmm0
jmp 0x10028b64
movaps xmm0, xmm6
minss xmm0, xmm2
movss xmm5, dword [0x10038c40]
movss xmm4, dword [0x10038b98]
movss xmm2, dword [ebp - 0xa4]
comiss xmm3, xmm2
mulss xmm0, xmm5
addss xmm0, xmm4
cvttss2si edx, xmm0
jbe 0x10028b92
xorps xmm0, xmm0
jmp 0x10028b99
movaps xmm0, xmm6
minss xmm0, xmm2
movss xmm2, dword [ebp - 0xa0]
mulss xmm0, xmm5
addss xmm0, xmm4
cvttss2si eax, xmm0
shl eax, 8
or edx, eax
comiss xmm3, xmm2
jbe 0x10028bbc
xorps xmm0, xmm0
jmp 0x10028bc3
movaps xmm0, xmm6
minss xmm0, xmm2
mulss xmm0, xmm5
addss xmm0, xmm4
cvttss2si eax, xmm0
shl eax, 0x10
or edx, eax
comiss xmm3, xmm1
jbe 0x10028bde
xorps xmm0, xmm0
jmp 0x10028be5
movaps xmm0, xmm6
minss xmm0, xmm1
push dword [ebp - 0x8c]
movss xmm2, dword [edi + 0x154c]
push dword [ebp - 0x90]
mulss xmm0, xmm5
push dword [ebp - 0x94]
push dword [ebp - 0x98]
addss xmm0, xmm4
cvttss2si ecx, xmm0
shl ecx, 0x18
or ecx, edx
mov dl, 1
call fcn.10003780
movss xmm0, dword [ebp - 0x98]
add esp, 0x10
movss xmm3, dword [ebp - 0x94]
movaps xmm1, xmm0
movss xmm2, dword [ebp - 0x80]
movss xmm6, dword [ebp - 0x6c]
addss xmm1, xmm2
movss xmm4, dword [0x10038c40]
addss xmm6, xmm3
mov edx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x3c]
movss dword [ebp - 0xc0], xmm0
addss xmm0, dword [edi + 0x1544]
movss dword [ebp - 0xbc], xmm3
movss dword [ebp - 0x2c], xmm1
movss dword [ebp - 0xb8], xmm1
movss dword [ebp - 0xb4], xmm6
movss dword [ebp - 0xa0], xmm0
movaps xmm0, xmm3
addss xmm0, dword [edi + 0x1548]
movss dword [ebp - 0x9c], xmm0
jmp 0x10028cff
movss xmm0, dword [ebp - 0x98]
movss xmm1, dword [ebp - 0x94]
movss xmm2, dword [ebp - 0x80]
movss xmm6, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x3c]
addss xmm6, xmm1
movss dword [ebp - 0xc0], xmm0
addss xmm0, xmm2
movss dword [ebp - 0xbc], xmm1
movss dword [ebp - 0xb4], xmm6
movss dword [ebp - 0xb8], xmm0
mov eax, dword [esi + 0xc8]
mov ecx, dword [esi + 0xcc]
movss dword [ebp - 0x2c], xmm0
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], ecx
cmp byte [ebp - 0x25], 0
lea eax, [ebp - 0xa0]
movss xmm0, dword [eax]
xorps xmm1, xmm1
movss dword [ebp - 0x54], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x24], xmm0
movss dword [ebp - 0x50], xmm0
xorps xmm0, xmm0
mov dword [ebp - 0x5c], eax
movss dword [ebp - 0x34], xmm6
movss dword [ebp - 0x64], xmm1
movss dword [ebp - 0x20], xmm1
je 0x10028d43
mov eax, dword [ebx + 0x20]
mov dword [ebp + 8], eax
jmp 0x10028d46
mov eax, dword [ebp + 8]
mov ch, byte [ebp - 0x11]
mov cl, byte [ebp - 5]
test ch, ch
jne 0x10028ef1
test cl, cl
jne 0x10028ef1
test dl, dl
je 0x10028db0
mov dl, byte [eax]
lea ebx, [eax + 1]
xor ecx, ecx
test dl, dl
je 0x10028d82
nop dword [eax + eax]
cmp dl, 0xa
lea eax, [ecx + 1]
mov dl, byte [ebx]
cmovne eax, ecx
inc ebx
mov ecx, eax
test dl, dl
jne 0x10028d70
mov al, byte [ebx - 1]
dec ebx
cmp al, 0xa
je 0x10028d8f
cmp al, 0xd
je 0x10028d8f
inc ecx
mov edx, dword [ebp + 8]
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
mulss xmm1, dword [edi + 0x18bc]
movss dword [ebp - 0x20], xmm1
movaps xmm1, xmm2
movss dword [ebp - 0x64], xmm1
jmp 0x10028dee
mov eax, dword [ebp - 0x10]
cmp dword [edi + 0x19bc], eax
jne 0x10028dc5
mov ebx, dword [ebx + 8]
mov edx, dword [ebp + 8]
add ebx, edx
jmp 0x10028ddf
mov ecx, dword [ebp + 8]
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028dd0
sub ecx, edx
mov edx, dword [ebp + 8]
lea ebx, [edx + ecx]
mov eax, ebx
sub eax, edx
cmp eax, 0x200000
jge 0x100299e2
mov eax, dword [0x100604b8]
movss xmm6, dword [0x10038bc4]
movups xmm2, xmmword [eax + 0x15b8]
comiss xmm0, xmm2
movaps xmm1, xmm2
shufps xmm1, xmm2, 0xff
mulss xmm1, dword [eax + 0x1510]
movups xmmword [ebp - 0xa8], xmm2
ja 0x10028e24
movaps xmm0, xmm6
minss xmm0, xmm2
movss xmm5, dword [0x10038b98]
xorps xmm3, xmm3
movss xmm2, dword [ebp - 0xa4]
comiss xmm3, xmm2
mulss xmm0, xmm4
addss xmm0, xmm5
cvttss2si ecx, xmm0
jbe 0x10028e4d
xorps xmm0, xmm0
jmp 0x10028e54
movaps xmm0, xmm6
minss xmm0, xmm2
movss xmm2, dword [ebp - 0xa0]
mulss xmm0, xmm4
addss xmm0, xmm5
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm3, xmm2
jbe 0x10028e77
xorps xmm0, xmm0
jmp 0x10028e7e
movaps xmm0, xmm6
minss xmm0, xmm2
mulss xmm0, xmm4
addss xmm0, xmm5
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm3, xmm1
jbe 0x10028e99
xorps xmm6, xmm6
jmp 0x10028e9d
minss xmm6, xmm1
cmp byte [ebp - 0x1c], 0
lea eax, [ebp - 0xc0]
movss xmm2, dword [edi + 0x18bc]
mulss xmm6, xmm4
mov dword [ebp - 0x44], 0
cmovne eax, dword [ebp - 0x44]
push eax
addss xmm6, xmm5
push ecx
mov dword [esp], 0
push ebx
push edx
cvttss2si eax, xmm6
shl eax, 0x18
or eax, ecx
mov ecx, dword [esi + 0x26c]
push eax
lea eax, [ebp - 0x54]
push eax
push dword [edi + 0x18b8]
call fcn.1001c710
jmp 0x10029934
mov eax, dword [ebx + 8]
mov edi, 0xfffffc18
mov esi, dword [ebx + 0x14]
xor edx, edx
mov dword [ebp - 0xd4], eax
xorps xmm7, xmm7
add eax, dword [ebp + 8]
xorps xmm5, xmm5
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x10], edi
test ch, ch
je 0x10028f37
mov eax, dword [ebx + 0x3c]
or edi, 0xffffffff
lea eax, [esi + eax*2]
mov dword [ebp - 0x58], eax
lea edx, [edi + 2]
test cl, cl
je 0x10028f53
mov ecx, dword [ebx + 0x44]
cmp dword [ebx + 0x40], ecx
mov dword [ebp - 0x10], 0xffffffff
cmovl ecx, dword [ebx + 0x40]
inc edx
lea eax, [esi + ecx*2]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x1c]
xor esi, esi
movzx eax, al
add edx, eax
mov eax, dword [ebp - 0x38]
mov ecx, eax
movzx eax, word [eax]
test ax, ax
je 0x10028fb5
mov esi, eax
xor ebx, ebx
nop
cmp si, 0xa
jne 0x10028f9b
inc ebx
cmp edi, 0xffffffff
jne 0x10028f88
cmp ecx, dword [ebp - 0x58]
jb 0x10028f88
dec edx
mov edi, ebx
test edx, edx
jle 0x10028fa9
cmp dword [ebp - 0x10], 0xffffffff
jne 0x10028f9b
cmp ecx, dword [ebp - 0x4c]
jb 0x10028f9b
dec edx
mov dword [ebp - 0x10], ebx
test edx, edx
jle 0x10028fa9
movzx eax, word [ecx + 2]
add ecx, 2
mov esi, eax
test ax, ax
jne 0x10028f70
mov dword [ebp - 0x40], ebx
mov ebx, dword [ebp - 0x84]
mov esi, dword [ebp - 0x40]
mov edx, dword [ebp - 0x38]
inc esi
cmp edi, 0xffffffff
mov dword [ebp - 0x40], esi
mov eax, esi
cmovne eax, edi
mov edi, dword [ebp - 0x58]
mov dword [ebp - 0x44], eax
mov ecx, edi
mov eax, dword [ebp - 0x10]
cmp eax, 0xffffffff
cmove eax, esi
mov dword [ebp - 0x10], eax
cmp edi, edx
jbe 0x10028fee
nop dword [eax]
cmp word [ecx - 2], 0xa
je 0x10028fee
add ecx, 0xfffffffe
cmp ecx, edx
ja 0x10028fe0
mov eax, dword [0x100604b8]
movaps xmm2, xmm0
movaps xmm6, xmm0
mov esi, dword [eax + 0x18b8]
movss xmm4, dword [eax + 0x18bc]
divss xmm4, dword [esi + 0x10]
cmp ecx, edi
jae 0x10029055
movzx eax, word [ecx]
add ecx, 2
mov edx, eax
cmp eax, 0xa
jne 0x10029026
maxss xmm2, xmm6
movaps xmm6, xmm0
jmp 0x1002904e
cmp edx, 0xd
je 0x1002904e
mov edx, eax
cmp edx, dword [esi]
jge 0x1002903b
mov eax, dword [esi + 8]
movss xmm1, dword [eax + edx*4]
jmp 0x10029040
movss xmm1, dword [esi + 0xc]
movaps xmm0, xmm4
mulss xmm0, xmm1
addss xmm6, xmm0
xorps xmm0, xmm0
cmp ecx, edi
jb 0x10029010
mov edx, dword [ebp - 0x38]
movd xmm1, dword [ebp - 0x44]
maxss xmm6, xmm2
mov ecx, dword [ebp - 0xc]
mov edi, dword [ebp - 0x10]
cvtdq2ps xmm1, xmm1
movss xmm3, dword [ecx + 0x18bc]
mulss xmm1, xmm3
movss dword [ebp - 0xcc], xmm6
movss dword [ebp - 0x44], xmm1
test edi, edi
js 0x1002910a
mov eax, dword [ebp - 0x4c]
mov ecx, eax
cmp eax, edx
jbe 0x100290a2
cmp word [ecx - 2], 0xa
je 0x1002909f
add ecx, 0xfffffffe
cmp ecx, edx
ja 0x10029091
mov eax, dword [ebp - 0x4c]
movaps xmm2, xmm0
movaps xmm5, xmm0
cmp ecx, eax
jae 0x100290f8
mov ebx, dword [ebp - 0x4c]
nop
movzx eax, word [ecx]
add ecx, 2
mov edx, eax
cmp eax, 0xa
jne 0x100290c6
maxss xmm2, xmm5
movaps xmm5, xmm0
jmp 0x100290ee
cmp edx, 0xd
je 0x100290ee
mov edx, eax
cmp edx, dword [esi]
jge 0x100290db
mov eax, dword [esi + 8]
movss xmm1, dword [eax + edx*4]
jmp 0x100290e0
movss xmm1, dword [esi + 0xc]
movaps xmm0, xmm4
mulss xmm0, xmm1
addss xmm5, xmm0
xorps xmm0, xmm0
cmp ecx, ebx
jb 0x100290b0
mov ebx, dword [ebp - 0x84]
mov ecx, dword [ebp - 0xc]
maxss xmm5, xmm2
movd xmm7, edi
cvtdq2ps xmm7, xmm7
mulss xmm7, xmm3
mov edx, dword [ebp - 0x1c]
test dl, dl
je 0x10029131
movd xmm1, dword [ebp - 0x40]
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm3
movss xmm3, dword [ebp - 0x80]
movss dword [ebp - 0x20], xmm1
movaps xmm1, xmm3
movss dword [ebp - 0x64], xmm1
jmp 0x10029136
movss xmm3, dword [ebp - 0x80]
cmp byte [ebp - 0x11], 0
je 0x10029218
cmp byte [ebx + 0xe64], 0
je 0x10029218
test dword [ebp + 0x14], 0x1000
jne 0x1002919a
movss xmm1, dword [ebx + 0x38]
movaps xmm2, xmm3
comiss xmm1, xmm6
mulss xmm2, dword [0x10038b84]
jbe 0x10029178
movaps xmm1, xmm6
subss xmm1, xmm2
maxss xmm0, xmm1
jmp 0x10029188
movaps xmm0, xmm6
subss xmm0, xmm3
comiss xmm0, xmm1
jb 0x100291a1
addss xmm0, xmm2
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebx + 0x38], xmm0
jmp 0x100291a1
mov dword [ebx + 0x38], 0
test dl, dl
je 0x10029211
movss xmm0, dword [ebp - 0x44]
mov eax, dword [ebp - 0x3c]
movaps xmm1, xmm0
subss xmm1, dword [ecx + 0x18bc]
movss xmm2, dword [eax + 0x5c]
comiss xmm2, xmm1
jbe 0x100291cb
xorps xmm0, xmm0
maxss xmm0, xmm1
jmp 0x100291d4
subss xmm0, dword [ebp - 0x6c]
maxss xmm0, xmm2
subss xmm2, xmm0
movss dword [eax + 0x5c], xmm0
addss xmm2, dword [eax + 0xcc]
movss dword [eax + 0xcc], xmm2
movss xmm0, dword [ebp - 0xb4]
movss dword [ebp - 0x34], xmm0
movss xmm0, dword [ebp - 0xb8]
movss dword [ebp - 0x24], xmm2
movss dword [ebp - 0x50], xmm2
movss dword [ebp - 0x2c], xmm0
mov byte [ebx + 0xe64], 0
cmp byte [ebp - 5], 0
movss xmm6, dword [ebx + 0x38]
movss dword [ebp - 0x40], xmm6
je 0x10029586
mov edx, dword [ebx + 0x44]
mov eax, edx
mov ecx, dword [ebx + 0x40]
cmp ecx, edx
mov edi, dword [ebp - 0x38]
cmovl eax, ecx
cmovge edx, ecx
cmp byte [ebp - 0x11], 0
lea esi, [edi + eax*2]
lea eax, [edi + edx*2]
mov dword [ebp - 0x38], eax
je 0x10029258
movss xmm1, dword [0x10038bc4]
jmp 0x10029260
movss xmm1, dword [0x10038b9c]
mov eax, dword [0x100604b8]
xorps xmm3, xmm3
movups xmm2, xmmword [eax + 0x1858]
mulss xmm1, dword [eax + 0x1510]
comiss xmm3, xmm2
movaps xmm0, xmm2
shufps xmm0, xmm2, 0xff
movups xmmword [ebp - 0x78], xmm2
mulss xmm1, xmm0
jbe 0x10029290
xorps xmm0, xmm0
jmp 0x1002929c
movss xmm0, dword [0x10038bc4]
minss xmm0, xmm2
movss xmm4, dword [0x10038c40]
movss xmm2, dword [ebp - 0x74]
comiss xmm3, xmm2
mulss xmm0, xmm4
addss xmm0, dword [0x10038b98]
cvttss2si ecx, xmm0
jbe 0x100292c3
xorps xmm0, xmm0
jmp 0x100292cf
movss xmm0, dword [0x10038bc4]
minss xmm0, xmm2
movss xmm2, dword [ebp - 0x70]
mulss xmm0, xmm4
addss xmm0, dword [0x10038b98]
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm3, xmm2
jbe 0x100292f3
xorps xmm0, xmm0
jmp 0x100292ff
movss xmm0, dword [0x10038bc4]
minss xmm0, xmm2
movss xmm2, dword [0x10038b98]
mulss xmm0, xmm4
addss xmm0, xmm2
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm3, xmm1
jbe 0x10029322
xorps xmm0, xmm0
jmp 0x1002932e
movss xmm0, dword [0x10038bc4]
minss xmm0, xmm1
mov edx, dword [ebp - 0x1c]
mulss xmm0, xmm4
addss xmm0, xmm2
cvttss2si eax, xmm0
shl eax, 0x18
or eax, ecx
mov dword [ebp - 0x80], eax
test dl, dl
je 0x10029358
movss dword [ebp - 0xd0], xmm3
movss dword [ebp - 0x58], xmm3
jmp 0x10029365
movss xmm0, dword [0x10038bdc]
movss dword [ebp - 0x58], xmm0
mov edi, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x38]
movss xmm4, dword [edi]
addss xmm4, xmm5
subss xmm4, xmm6
movss xmm6, dword [ebp - 0x24]
addss xmm6, xmm7
subss xmm6, xmm3
movss dword [ebp - 0x5c], xmm6
cmp esi, ecx
jae 0x1002957f
mov ebx, dword [ebp - 0xc]
movss xmm3, dword [ebp - 0x34]
movss xmm7, dword [ebx + 0x18bc]
movaps xmm1, xmm7
movaps xmm0, xmm3
addss xmm0, xmm1
comiss xmm6, xmm0
ja 0x1002956f
movss xmm0, dword [ebp - 0xbc]
comiss xmm0, xmm6
jbe 0x100293e8
cmp esi, ecx
jae 0x1002954a
nop dword [eax]
movzx eax, word [esi]
add esi, 2
cmp eax, 0xa
je 0x1002954a
cmp esi, ecx
jb 0x100293d0
jmp 0x1002954a
mov eax, dword [0x100604b8]
xorps xmm1, xmm1
xorps xmm5, xmm5
xorps xmm2, xmm2
mov edx, dword [eax + 0x18b8]
movss xmm3, dword [eax + 0x18bc]
divss xmm3, dword [edx + 0x10]
cmp esi, ecx
jae 0x10029459
nop dword [eax]
movzx eax, word [esi]
add esi, 2
mov ecx, eax
cmp eax, 0xa
je 0x10029449
cmp ecx, 0xd
je 0x10029440
cmp ecx, dword [edx]
jge 0x10029430
mov eax, dword [edx + 8]
movss xmm1, dword [eax + ecx*4]
jmp 0x10029435
movss xmm1, dword [edx + 0xc]
movaps xmm0, xmm3
mulss xmm0, xmm1
addss xmm2, xmm0
mov ecx, dword [ebp - 0x38]
cmp esi, ecx
jb 0x10029410
jmp 0x10029456
mov ecx, dword [ebp - 0x38]
xorps xmm5, xmm5
maxss xmm5, xmm2
xorps xmm2, xmm2
xorps xmm1, xmm1
maxss xmm2, xmm5
comiss xmm1, xmm2
jb 0x10029492
mov eax, dword [ebx + 0x18b8]
cmp dword [eax], 0x20
jle 0x1002947a
mov eax, dword [eax + 8]
movss xmm0, dword [eax + 0x80]
jmp 0x1002947f
movss xmm0, dword [eax + 0xc]
mulss xmm0, dword [0x10038b98]
cvttss2si eax, xmm0
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movss xmm0, dword [ebp - 0x58]
addss xmm2, xmm4
movss xmm3, dword [ebp - 0x34]
addss xmm4, xmm1
movss xmm1, dword [ebp - 0xd0]
addss xmm0, xmm6
movss xmm5, dword [ebp - 0x2c]
subss xmm1, xmm7
minss xmm2, xmm5
maxss xmm4, dword [ebp - 0xc0]
minss xmm0, xmm3
addss xmm1, xmm6
movss dword [ebp - 0x70], xmm2
movss dword [ebp - 0x78], xmm4
comiss xmm0, dword [ebp - 0xbc]
maxss xmm1, dword [ebp - 0xbc]
movss dword [ebp - 0x6c], xmm0
movss dword [ebp - 0x74], xmm1
jbe 0x1002954a
comiss xmm3, xmm1
jbe 0x1002954a
comiss xmm2, dword [ebp - 0xc0]
jbe 0x1002954a
comiss xmm5, xmm4
jbe 0x1002954a
push 0xf
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x70]
push dword [ebp - 0x80]
push eax
lea eax, [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax + 0x26c]
call fcn.1001c4b0
movss xmm3, dword [ebp - 0xb4]
movss xmm0, dword [ebp - 0xb8]
movss xmm6, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x38]
movss dword [ebp - 0x34], xmm3
movss dword [ebp - 0x2c], xmm0
movss xmm7, dword [ebx + 0x18bc]
movss xmm4, dword [edi]
addss xmm6, xmm7
movaps xmm1, xmm7
subss xmm4, dword [ebp - 0x40]
movss dword [ebp - 0x5c], xmm6
cmp esi, ecx
jb 0x100293a4
movss xmm6, dword [ebp - 0x40]
mov ebx, dword [ebp - 0x84]
mov edx, dword [ebp - 0x1c]
jmp 0x10029589
movss xmm6, dword [ebp - 0x40]
jmp 0x1002958c
mov edi, dword [ebp - 0x5c]
xorps xmm3, xmm3
test dl, dl
jne 0x100295a0
cmp dword [ebp - 0xd4], 0x200000
jge 0x100296d7
mov eax, dword [0x100604b8]
movss xmm7, dword [0x10038bc4]
movups xmm1, xmmword [eax + 0x15b8]
comiss xmm3, xmm1
movaps xmm2, xmm1
shufps xmm2, xmm1, 0xff
mulss xmm2, dword [eax + 0x1510]
movups xmmword [ebp - 0x78], xmm1
jbe 0x100295d1
xorps xmm0, xmm0
jmp 0x100295d8
movaps xmm0, xmm7
minss xmm0, xmm1
movss xmm4, dword [0x10038c40]
movss xmm5, dword [0x10038b98]
movss xmm1, dword [ebp - 0x74]
comiss xmm3, xmm1
mulss xmm0, xmm4
addss xmm0, xmm5
cvttss2si ecx, xmm0
jbe 0x10029603
xorps xmm0, xmm0
jmp 0x1002960a
movaps xmm0, xmm7
minss xmm0, xmm1
movss xmm1, dword [ebp - 0x70]
mulss xmm0, xmm4
addss xmm0, xmm5
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm3, xmm1
jbe 0x1002962a
xorps xmm0, xmm0
jmp 0x10029631
movaps xmm0, xmm7
minss xmm0, xmm1
mulss xmm0, xmm4
addss xmm0, xmm5
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm3, xmm2
jbe 0x1002964c
xorps xmm1, xmm1
jmp 0x10029653
movaps xmm1, xmm7
minss xmm1, xmm2
movss xmm0, dword [edi]
lea eax, [ebp - 0xc0]
mulss xmm1, xmm4
subss xmm0, xmm6
xor esi, esi
test dl, dl
cmovne eax, esi
push eax
addss xmm1, xmm5
movss dword [ebp - 0x70], xmm0
movss xmm0, dword [ebp - 0x24]
push ecx
mov dword [esp], esi
subss xmm0, xmm3
push dword [ebp - 0x60]
mov esi, dword [ebp - 0xc]
push dword [ebp + 8]
cvttss2si eax, xmm1
movss xmm2, dword [esi + 0x18bc]
shl eax, 0x18
or eax, ecx
movss dword [ebp - 0x6c], xmm0
push eax
lea eax, [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x3c]
push dword [esi + 0x18b8]
mov ecx, dword [eax + 0x26c]
call fcn.1001c710
movss xmm0, dword [ebp - 0xb4]
movss dword [ebp - 0x34], xmm0
movss xmm0, dword [ebp - 0xb8]
movss dword [ebp - 0x2c], xmm0
jmp 0x100296da
mov esi, dword [ebp - 0xc]
cmp byte [ebp - 0x11], 0
je 0x1002992e
movss xmm0, dword [esi + 0x18]
addss xmm0, dword [ebx + 0xe60]
movss dword [ebx + 0xe60], xmm0
cmp byte [esi + 0xae], 0
je 0x1002973d
xorps xmm4, xmm4
comiss xmm4, xmm0
jae 0x1002973d
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x70], xmm0
fld qword [ebp - 0x70]
fld qword [0x10038bd0]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIfmod
movss xmm0, dword [0x10038bb8]
fstp qword [ebp - 0x70]
movsd xmm1, qword [ebp - 0x70]
cvtpd2ps xmm1, xmm1
comiss xmm0, xmm1
jae 0x1002973d
xor al, al
jmp 0x1002973f
mov al, 1
movss xmm2, dword [ebp - 0x24]
xorps xmm4, xmm4
movss xmm6, dword [edi]
mov edi, dword [ebp - 0xc]
movss xmm7, dword [0x10038b98]
movss xmm5, dword [0x10038bc4]
addss xmm2, dword [ebp - 0x44]
addss xmm6, dword [ebp - 0xcc]
subss xmm2, xmm4
subss xmm6, dword [ebp - 0x40]
movss dword [ebp - 0x24], xmm2
movaps xmm0, xmm2
movss dword [ebp - 0xcc], xmm6
movaps xmm1, xmm6
movss dword [ebp - 0x78], xmm6
movaps xmm3, xmm2
addss xmm1, xmm5
subss xmm0, dword [edi + 0x18bc]
subss xmm3, dword [0x10038bcc]
movss dword [ebp - 0x70], xmm1
addss xmm0, xmm7
movss dword [ebp - 0x6c], xmm3
movss dword [ebp - 0x74], xmm0
test al, al
je 0x10029907
comiss xmm3, dword [ebp - 0xbc]
jbe 0x10029907
movss xmm2, dword [ebp - 0x34]
comiss xmm2, xmm0
jbe 0x10029902
comiss xmm1, dword [ebp - 0xc0]
jbe 0x10029902
movss xmm0, dword [ebp - 0x2c]
comiss xmm0, xmm6
jbe 0x10029902
mov eax, dword [0x100604b8]
movups xmm2, xmmword [eax + 0x15b8]
comiss xmm4, xmm2
movaps xmm1, xmm2
shufps xmm1, xmm2, 0xff
mulss xmm1, dword [eax + 0x1510]
movups xmmword [ebp - 0xa8], xmm2
jbe 0x10029820
xorps xmm0, xmm0
jmp 0x10029827
movaps xmm0, xmm5
minss xmm0, xmm2
movss xmm5, dword [0x10038c40]
movss xmm2, dword [ebp - 0xa4]
comiss xmm4, xmm2
mulss xmm0, xmm5
addss xmm0, xmm7
cvttss2si ecx, xmm0
jbe 0x1002984d
xorps xmm0, xmm0
jmp 0x10029859
movss xmm0, dword [0x10038bc4]
minss xmm0, xmm2
movss xmm2, dword [ebp - 0xa0]
mulss xmm0, xmm5
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm4, xmm2
jbe 0x1002987c
xorps xmm0, xmm0
jmp 0x10029888
movss xmm0, dword [0x10038bc4]
minss xmm0, xmm2
mulss xmm0, xmm5
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm4, xmm1
jbe 0x100298a3
xorps xmm0, xmm0
jmp 0x100298af
movss xmm0, dword [0x10038bc4]
minss xmm0, xmm1
mulss xmm0, xmm5
push ecx
mov dword [esp], 0x3f800000
movss dword [ebp - 0xa0], xmm6
addss xmm0, xmm7
movss dword [ebp - 0x9c], xmm3
cvttss2si eax, xmm0
shl eax, 0x18
or eax, ecx
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax + 0x26c]
call fcn.1001c390
movss xmm6, dword [ebp - 0xcc]
movss xmm5, dword [0x10038bc4]
movss xmm2, dword [ebp - 0x24]
cmp byte [ebp - 0x30], 0
mov ebx, dword [ebp - 0x60]
jne 0x10029934
subss xmm2, dword [edi + 0x18bc]
subss xmm6, xmm5
movss dword [edi + 0x2cd4], xmm2
movss dword [edi + 0x2cd0], xmm6
jmp 0x10029934
mov edi, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x60]
cmp byte [ebp - 0x1c], 0
je 0x100299e2
mov ecx, dword [0x100604b8]
movss xmm2, dword [edi + 0x18bc]
mov eax, dword [ecx + 0x199c]
mov byte [eax + 0x7c], 1
mov eax, dword [ecx + 0x199c]
cmp byte [eax + 0x7f], 0
jne 0x100299d8
movss xmm4, dword [ebp - 0x20]
lea ecx, [ebp - 0xa0]
movss xmm5, dword [ebp - 0x64]
addss xmm4, xmm2
movss xmm1, dword [eax + 0xc8]
xorps xmm3, xmm3
movss xmm0, dword [eax + 0xcc]
addss xmm5, xmm3
movss dword [ebp - 0x78], xmm1
movss dword [ebp - 0x74], xmm0
addss xmm4, xmm0
addss xmm5, xmm1
movss dword [ebp - 0x6c], xmm4
subss xmm4, xmm0
movss dword [ebp - 0x70], xmm5
subss xmm5, xmm1
xorps xmm1, xmm1
movss dword [ebp - 0x9c], xmm4
movss dword [ebp - 0xa0], xmm5
call fcn.100051b0
push 0
xor edx, edx
lea ecx, [ebp - 0x78]
call fcn.10005310
add esp, 4
call fcn.10007f90
call fcn.1000dc40
mov eax, dword [ebp - 0x88]
test al, al
je 0x100299f7
call fcn.1000d5d0
mov eax, dword [ebp - 0x88]
cmp byte [edi + 0x2d0c], 0
je 0x10029a13
test al, al
jne 0x10029a13
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x54]
push ebx
call fcn.10011da0
add esp, 4
movss xmm0, dword [ebp - 0xc4]
xorps xmm4, xmm4
comiss xmm0, xmm4
jbe 0x10029a65
movss xmm0, dword [ebp - 0x90]
xor edx, edx
addss xmm0, dword [edi + 0x155c]
mov ecx, dword [ebp - 0xc8]
movss dword [ebp - 0x54], xmm0
movss xmm0, dword [ebp - 0x94]
addss xmm0, dword [edi + 0x1548]
movss dword [ebp - 0x50], xmm0
push dword [ebp - 0x50]
push dword [ebp - 0x54]
push 1
call fcn.10002fd0
add esp, 0xc
mov cl, byte [ebp - 1]
test cl, cl
je 0x10029a85
mov eax, dword [0x100604b8]
mov byte [eax + 0x19cf], 1
mov eax, dword [eax + 0x199c]
or dword [eax + 0x10c], 4
test byte [ebp + 0x14], 0x20
pop edi
movzx eax, cl
movzx ecx, byte [ebp - 2]
pop esi
cmovne eax, ecx
pop ebx
mov esp, ebp
pop ebp
ret