Function at 0x1001cd90
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x19c
mov eax, dword [0x1007a00c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, ecx
push ebx
push esi
push edi
cmp dword [eax + 0x58], 0
mov dword [ebp - 0x10c], eax
jge 0x1001ce29
test byte [eax + 4], 2
lea esi, [eax + 0x40]
lea eax, [ebp - 0x168]
mov dword [ebp - 0x160], 0xffffffff
mov dword [ebp - 0x15c], 0
mov ecx, esi
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x168], 0x80000000
push eax
mov dword [ebp - 0x164], 0x1b00d9
je 0x1001ce16
mov dword [ebp - 0x164], 0x20002
call fcn.1001fa00
mov ecx, dword [ebp - 0x10c]
mov eax, dword [esi]
dec eax
mov dword [ecx + 0x58], eax
mov eax, ecx
mov ecx, dword [eax + 0x14]
mov edx, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov dword [eax + 8], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x24], 0
mov dword [eax + 0x28], 0
mov dword [eax + 0x2c], 0
mov dword [eax + 0x30], 0
test ecx, ecx
je 0x1001ce88
mov eax, dword [0x1007acc0]
test eax, eax
je 0x1001ce76
dec dword [eax + 0x394]
push ecx
call edx
mov eax, dword [ebp - 0x10c]
add esp, 4
mov edx, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x1001ceaa
mov eax, dword [0x1007acc0]
test eax, eax
je 0x1001ce9e
dec dword [eax + 0x394]
push ecx
call edx
mov eax, dword [ebp - 0x10c]
add esp, 4
xor ebx, ebx
mov dword [eax + 0x14], 0
xor edi, edi
mov dword [eax + 0x18], 0
xor esi, esi
mov dword [ebp - 0x11c], ebx
cmp dword [eax + 0x4c], ebx
jle 0x1001cf2e
xor ecx, ecx
mov dword [ebp - 0x138], ecx
mov eax, dword [eax + 0x54]
mov edx, dword [eax + ecx + 0x30]
test edx, edx
jne 0x1001cee9
mov dword [eax + ecx + 0x30], 0x100768dc
mov edx, 0x100768dc
cmp word [edx], 0
je 0x1001cf19
nop
movzx eax, word [edx + 2]
test ax, ax
je 0x1001cf0d
mov ecx, eax
inc edi
movzx eax, word [edx]
inc ebx
add edx, 4
sub ecx, eax
add edi, ecx
cmp word [edx], 0
jne 0x1001cef0
mov ecx, dword [ebp - 0x138]
mov dword [ebp - 0x11c], ebx
mov eax, dword [ebp - 0x10c]
inc esi
add ecx, 0x74
mov dword [ebp - 0x138], ecx
cmp esi, dword [eax + 0x4c]
jl 0x1001ced1
mov esi, dword [eax + 0xc]
test esi, esi
jg 0x1001cf66
cmp edi, 0xfa0
jle 0x1001cf44
mov esi, 0x1000
jmp 0x1001cf66
cmp edi, 0x7d0
jle 0x1001cf53
mov esi, 0x800
jmp 0x1001cf66
cmp edi, 0x3e8
mov esi, 0x200
mov ecx, 0x400
cmovg esi, ecx
mov dword [eax + 0x1c], esi
mov dword [eax + 0x20], 0
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x118], eax
mov eax, dword [0x1007acc0]
test eax, eax
je 0x1001cf88
inc dword [eax + 0x394]
push 0x30
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ecx, dword [0x1007acc0]
add esp, 4
mov dword [ebp - 0x110], eax
mov eax, esi
sub eax, dword [ebp - 0x118]
mov dword [ebp - 0x13c], eax
test ecx, ecx
je 0x1001cfb7
inc dword [ecx + 0x394]
shl eax, 3
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ecx, dword [ebp - 0x110]
add esp, 4
mov dword [ebp - 0x134], eax
test ecx, ecx
je 0x1001df96
test eax, eax
je 0x1001d57f
mov edx, dword [ebp - 0x118]
mov dword [ebp - 0x160], edx
mov edx, dword [ebp - 0x13c]
push edx
push eax
mov dword [ebp - 0x150], eax
mov eax, 0x8000
sub eax, dword [ebp - 0x118]
push eax
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x16c], esi
mov dword [ebp - 0x168], 0x8000
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x164], esi
call fcn.100128a0
mov eax, 1
xor edx, edx
mov dword [ebp - 0x120], eax
add esp, 0xc
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x114], edx
mov esi, dword [eax + 0x40]
mov dword [ebp - 0x118], esi
test esi, esi
jle 0x1001d0ae
cmp esi, 8
mov dword [ebp - 0x13c], 8
mov ecx, esi
cmovl ecx, dword [ebp - 0x13c]
test ecx, ecx
jle 0x1001d0ae
mov eax, dword [0x1007acc0]
test eax, eax
je 0x1001d093
inc dword [eax + 0x394]
shl ecx, 4
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov edx, eax
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x10c]
add esp, 4
mov ecx, dword [eax + 0x40]
shl ecx, 4
push ecx
push 0
push edx
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x10c]
add esp, 0xc
cmp dword [eax + 0x40], 0
jle 0x1001d110
mov edx, dword [ebp - 0x114]
xor ecx, ecx
add edx, 6
mov ebx, eax
xor esi, esi
nop dword [eax + eax]
mov eax, dword [ebx + 0x48]
lea ecx, [ecx + 0x1c]
inc esi
lea edx, [edx + 0x10]
movzx eax, word [eax + ecx - 0x18]
mov word [edx - 0x12], ax
mov eax, dword [ebx + 0x48]
movzx eax, word [eax + ecx - 0x16]
mov word [edx - 0x10], ax
cmp esi, dword [ebx + 0x40]
jl 0x1001d0e0
mov ebx, dword [ebp - 0x11c]
mov esi, dword [ebp - 0x118]
mov edx, dword [ebp - 0x114]
mov ecx, dword [ebp - 0x110]
push esi
call fcn.10012d20
add esp, 4
test esi, esi
jle 0x1001d18d
mov edx, dword [ebp - 0x114]
xor esi, esi
mov eax, dword [ebp - 0x118]
add edx, 0xa
mov ebx, dword [ebp - 0x10c]
cmp dword [edx + 2], 0
je 0x1001d176
mov ecx, dword [ebx + 0x48]
movzx eax, word [edx - 2]
mov word [ecx + esi + 8], ax
mov ecx, dword [ebx + 0x48]
movzx eax, word [edx]
mov word [ecx + esi + 0xa], ax
movzx eax, word [edx]
movzx ecx, word [edx - 4]
add ecx, eax
mov eax, dword [ebp - 0x118]
cmp dword [ebx + 0x20], ecx
cmovge ecx, dword [ebx + 0x20]
mov dword [ebx + 0x20], ecx
add esi, 0x1c
add edx, 0x10
sub eax, 1
mov dword [ebp - 0x118], eax
jne 0x1001d140
mov ebx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x114]
test eax, eax
je 0x1001d1b1
mov ecx, dword [0x1007acc0]
test ecx, ecx
je 0x1001d1a7
dec dword [ecx + 0x394]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov esi, dword [ebp - 0x10c]
mov eax, dword [0x1007acc0]
imul ecx, dword [esi + 0x4c], 0x8c
test eax, eax
je 0x1001d1cd
inc dword [eax + 0x394]
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov dword [ebp - 0x118], eax
cmp dword [esi + 0x4c], 0
mov dword [ebp - 0x138], 0
jle 0x1001d25f
xor ecx, ecx
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x130], ecx
nop dword [eax + eax]
mov edx, dword [esi + 0x54]
mov esi, dword [edx + ecx]
mov edx, dword [edx + ecx + 0xc]
mov ecx, esi
call fcn.100197d0
mov edx, esi
mov esi, dword [ebp - 0x11c]
push eax
mov ecx, esi
call fcn.100136a0
add esp, 4
test eax, eax
je 0x1001d561
mov eax, dword [ebp - 0x138]
add esi, 0x8c
mov ecx, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x11c], esi
add ecx, 0x74
mov esi, dword [ebp - 0x10c]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x130], ecx
cmp eax, dword [esi + 0x4c]
jl 0x1001d200
mov eax, dword [0x1007acc0]
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x14c], 0
test eax, eax
je 0x1001d28c
inc dword [eax + 0x394]
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
lea eax, [edi*8]
sub eax, edi
shl eax, 2
push eax
mov dword [ebp - 0x12c], eax
call esi
mov ecx, dword [0x1007acc0]
add esp, 4
mov dword [ebp - 0x138], eax
test ecx, ecx
je 0x1001d2c0
inc dword [ecx + 0x394]
shl edi, 4
push edi
call esi
mov ecx, dword [0x1007acc0]
add esp, 4
mov dword [ebp - 0x130], eax
test ecx, ecx
je 0x1001d2df
inc dword [ecx + 0x394]
lea esi, [ebx + ebx*2]
shl esi, 3
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov ebx, eax
mov dword [ebp - 0x13c], ebx
push dword [ebp - 0x12c]
push 0
push dword [ebp - 0x138]
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push edi
push 0
push dword [ebp - 0x130]
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push esi
push 0
push ebx
call sub.VCRUNTIME140.dll_memset
mov edx, dword [ebp - 0x10c]
add esp, 0xc
mov dword [ebp - 0x148], 0
cmp dword [edx + 0x4c], 0
jle 0x1001d6bc
mov edi, dword [ebp - 0x118]
xor ebx, ebx
mov dword [ebp - 0x12c], ebx
mov ecx, dword [edx + 0x54]
xor esi, esi
mov edx, dword [ecx + ebx + 0x30]
add ecx, ebx
xor ebx, ebx
mov dword [ebp - 0x110], ecx
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x140], esi
movzx eax, word [edx]
test ax, ax
je 0x1001d3af
nop dword [eax]
movzx ecx, word [edx + 2]
test cx, cx
je 0x1001d39d
add edx, 4
movzx eax, ax
sub ecx, eax
inc ebx
add ebx, ecx
inc esi
movzx eax, word [edx]
test ax, ax
jne 0x1001d380
mov ecx, dword [ebp - 0x110]
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x140], esi
mov edx, dword [ebp - 0x14c]
mov ebx, dword [ebp - 0x13c]
mov dword [edi + 0x88], esi
lea eax, [edx + edx*2]
add edx, esi
lea eax, [ebx + eax*8]
mov dword [ebp - 0x14c], edx
xor ebx, ebx
mov dword [ebp - 0x114], eax
mov dword [edi + 0x84], eax
test esi, esi
jle 0x1001d467
xor eax, eax
mov dword [ebp - 0x114], eax
nop dword [eax]
mov edx, dword [ecx + 0x30]
mov esi, dword [edi + 0x84]
add esi, eax
mov eax, dword [ecx + 0x10]
mov dword [esi], eax
movzx eax, word [edx + ebx*4]
mov dword [esi + 4], eax
movzx eax, word [edx + ebx*4]
movzx ecx, word [edx + ebx*4 + 2]
inc ebx
mov edx, dword [ebp - 0x11c]
sub ecx, eax
inc ecx
add dword [ebp - 0x11c], ecx
mov dword [esi + 0xc], ecx
mov ecx, dword [ebp - 0x110]
lea eax, [edx*8]
sub eax, edx
mov edx, dword [ebp - 0x138]
lea eax, [edx + eax*4]
mov dword [esi + 0x10], eax
mov eax, dword [ebp - 0x114]
add eax, 0x18
mov dword [ebp - 0x114], eax
cmp ebx, dword [ebp - 0x140]
jl 0x1001d3f0
mov eax, dword [edi + 0x84]
mov esi, dword [edi + 0x88]
mov dword [ebp - 0x114], eax
mov ecx, dword [ebp - 0x144]
mov eax, ecx
mov edx, dword [ebp - 0x130]
mov ebx, dword [ebp - 0x120]
shl eax, 4
add edx, eax
mov eax, dword [ebp - 0x134]
add ecx, eax
mov dword [edi + 0x80], eax
mov eax, dword [ebp - 0x110]
mov dword [edi + 0x7c], edx
mov dword [ebp - 0x144], ecx
push edx
mov ecx, dword [eax + 0x18]
mov edx, edi
mov eax, dword [eax + 0x14]
cmp eax, 8
push esi
push dword [ebp - 0x114]
cmovbe ebx, eax
mov eax, dword [ebp - 0x124]
cmp ecx, 8
mov dword [ebp - 0x15c], ebx
cmovbe eax, ecx
lea ecx, [ebp - 0x174]
mov dword [ebp - 0x158], eax
call fcn.10018ff0
xor ecx, ecx
xor esi, esi
add esp, 0xc
mov dword [ebp - 0x114], esi
mov ebx, eax
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x124], ebx
cmp dword [edi + 0x88], ecx
jle 0x1001d5e6
xor eax, eax
mov dword [ebp - 0x110], eax
nop word [eax + eax]
mov edx, dword [edi + 0x84]
xor ebx, ebx
cmp dword [eax + edx + 0xc], ebx
jle 0x1001d5c4
shl esi, 4
nop word [eax + eax]
mov dword [ebp - 0x120], edx
mov ecx, edi
mov edx, dword [edx + eax + 4]
add edx, ebx
call fcn.10013bb0
test eax, eax
jne 0x1001d594
mov eax, dword [edi + 0x7c]
xor ecx, ecx
mov word [eax + esi + 6], cx
mov eax, dword [edi + 0x7c]
mov word [eax + esi + 4], cx
mov eax, dword [edi + 0x84]
jmp 0x1001d59a
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x118]
mov dword [eax + 0x20], 0
mov dword [eax + 0x1c], 0
test ecx, ecx
je 0x1001d58e
mov eax, dword [0x1007acc0]
test eax, eax
je 0x1001d58e
dec dword [eax + 0x394]
push ecx
jmp 0x1001dfab
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x110]
inc ebx
inc dword [ebp - 0x114]
add esi, 0x10
mov edx, eax
cmp ebx, dword [eax + ecx + 0xc]
mov eax, ecx
jl 0x1001d530
mov esi, dword [ebp - 0x114]
mov ecx, dword [ebp - 0x134]
inc ecx
add eax, 0x18
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x110], eax
cmp ecx, dword [edi + 0x88]
jl 0x1001d510
mov ebx, dword [ebp - 0x124]
mov eax, dword [ebp - 0x170]
mov ecx, eax
mov edx, dword [edi + 0x7c]
push ebx
mov dword [ebp - 0x110], eax
call fcn.10012d20
add esp, 4
test ebx, ebx
jle 0x1001d65e
mov edx, dword [edi + 0x7c]
xor esi, esi
nop dword [eax]
cmp word [edx + esi + 4], 0
lea eax, [edx + esi]
jne 0x1001d62c
cmp word [eax + 6], 0
jne 0x1001d62c
mov dword [eax + 0xc], 0
mov edx, dword [edi + 0x7c]
cmp dword [edx + esi + 0xc], 0
je 0x1001d656
movzx eax, word [edx + esi + 6]
movzx ecx, word [edx + esi + 0xa]
add ecx, eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x20]
cmp eax, ecx
cmovge ecx, eax
mov eax, dword [ebp - 0x10c]
mov dword [eax + 0x20], ecx
add esi, 0x10
sub ebx, 1
jne 0x1001d610
mov eax, dword [ebp - 0x148]
add edi, 0x8c
mov edx, dword [ebp - 0x10c]
inc eax
mov ebx, dword [ebp - 0x12c]
add ebx, 0x74
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x12c], ebx
cmp eax, dword [edx + 0x4c]
jge 0x1001d6a8
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x120], eax
jmp 0x1001d352
mov esi, dword [ebp - 0x150]
mov edi, dword [ebp - 0x158]
mov ebx, dword [ebp - 0x15c]
jmp 0x1001d6c9
mov esi, dword [ebp - 0x134]
mov ebx, 1
mov edi, ebx
test byte [edx + 4], 1
mov eax, dword [edx + 0x20]
jne 0x1001d6f7
lea ecx, [eax - 1]
mov eax, ecx
sar eax, 1
or ecx, eax
mov eax, ecx
sar eax, 2
or ecx, eax
mov eax, ecx
sar eax, 4
or ecx, eax
mov eax, ecx
sar eax, 8
or ecx, eax
mov eax, ecx
sar eax, 0x10
or eax, ecx
movss xmm1, dword [0x1007724c]
lea ecx, [eax + 1]
mov eax, dword [edx + 0x1c]
movaps xmm2, xmm1
mov dword [edx + 0x20], ecx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm2, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
imul ecx, eax
divss xmm1, xmm0
mov eax, dword [0x1007acc0]
movss dword [edx + 0x24], xmm2
movss dword [edx + 0x28], xmm1
test eax, eax
je 0x1001d73d
inc dword [eax + 0x394]
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov edx, dword [ebp - 0x10c]
add esp, 4
mov ecx, dword [edx + 0x20]
imul ecx, dword [edx + 0x1c]
mov dword [edx + 0x14], eax
push ecx
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [ebp - 0x10c]
add esp, 0xc
mov dword [ebp - 0x120], 0
cmp dword [ecx + 0x4c], 0
mov eax, dword [ecx + 0x14]
mov dword [ebp - 0x154], eax
mov eax, dword [ecx + 0x20]
mov dword [ebp - 0x168], eax
jle 0x1001d95e
mov eax, dword [ebp - 0x118]
xor edx, edx
sub eax, 0xffffff80
mov dword [ebp - 0x124], edx
mov dword [ebp - 0x110], eax
nop word [eax + eax]
mov esi, dword [ecx + 0x54]
mov eax, dword [ebp - 0x110]
add esi, edx
cmp dword [esi + 0x14], 8
lea ecx, [eax - 0x80]
push dword [eax - 4]
cmovbe ebx, dword [esi + 0x14]
mov edx, ecx
cmp dword [esi + 0x18], 8
push dword [eax + 8]
cmovbe edi, dword [esi + 0x18]
push dword [eax + 4]
mov dword [ebp - 0x114], ecx
lea ecx, [ebp - 0x174]
mov dword [ebp - 0x15c], ebx
mov dword [ebp - 0x158], edi
call fcn.100192f0
movss xmm1, dword [esi + 0x44]
add esp, 0xc
ucomiss xmm1, dword [0x1007724c]
movss dword [ebp - 0x12c], xmm1
lahf
test ah, 0x44
jnp 0x1001d8fb
xor esi, esi
nop dword [eax]
movd xmm0, esi
mov eax, esi
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x10077810]
cvtpd2ps xmm0, xmm0
mulss xmm0, xmm1
call fcn.10052cc0
movss xmm1, dword [ebp - 0x12c]
mov edx, 0xff
cmp eax, edx
movzx ecx, al
cmovbe edx, ecx
mov byte [ebp + esi - 0x108], dl
inc esi
cmp esi, 0x100
jb 0x1001d820
mov eax, dword [ebp - 0x114]
mov ebx, dword [eax + 0x7c]
mov eax, dword [ebp - 0x110]
mov eax, dword [eax]
shl eax, 4
add eax, ebx
cmp ebx, eax
je 0x1001d8fb
mov ecx, dword [ebp - 0x164]
mov edx, dword [ebp - 0x114]
nop
cmp dword [ebx + 0xc], 0
je 0x1001d8e6
movzx eax, word [ebx + 0xa]
movzx edx, word [ebx + 8]
movzx edi, word [ebx + 6]
movzx esi, word [ebx + 4]
imul eax, ecx
add eax, dword [ebp - 0x154]
add edx, eax
test edi, edi
je 0x1001d8e0
xor ecx, ecx
test esi, esi
je 0x1001d8d3
nop dword [eax + eax]
movzx eax, byte [ecx + edx]
mov al, byte [ebp + eax - 0x108]
mov byte [ecx + edx], al
inc ecx
cmp ecx, esi
jl 0x1001d8c0
mov ecx, dword [ebp - 0x164]
dec edi
add edx, ecx
test edi, edi
jg 0x1001d8b5
mov edx, dword [ebp - 0x114]
mov eax, dword [ebp - 0x110]
add ebx, 0x10
mov eax, dword [eax]
shl eax, 4
add eax, dword [edx + 0x7c]
cmp ebx, eax
jne 0x1001d890
mov eax, dword [ebp - 0x114]
mov edi, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x124]
add dword [ebp - 0x110], 0x8c
add edx, 0x74
mov dword [eax + 0x7c], 0
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x124], edx
mov dword [ebp - 0x120], eax
cmp eax, dword [edi + 0x4c]
jge 0x1001d950
mov edi, dword [ebp - 0x158]
mov ebx, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0x10c]
jmp 0x1001d7b0
mov esi, dword [ebp - 0x150]
mov ebx, dword [ebp - 0x170]
jmp 0x1001d966
mov ebx, dword [ebp - 0x110]
mov edi, ecx
test esi, esi
je 0x1001d979
mov eax, dword [0x1007acc0]
test eax, eax
je 0x1001d979
dec dword [eax + 0x394]
push esi
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call esi
add esp, 4
test ebx, ebx
je 0x1001d998
mov eax, dword [0x1007acc0]
test eax, eax
je 0x1001d998
dec dword [eax + 0x394]
push ebx
call esi
mov ecx, dword [ebp - 0x130]
add esp, 4
test ecx, ecx
je 0x1001d9b7
mov eax, dword [0x1007acc0]
test eax, eax
je 0x1001d9b7
dec dword [eax + 0x394]
push ecx
call esi
add esp, 4
mov dword [ebp - 0x134], 0
cmp dword [edi + 0x4c], 0
jle 0x1001df1f
mov eax, dword [ebp - 0x118]
xor edx, edx
movss xmm3, dword [0x10077210]
add eax, 4
mov dword [ebp - 0x140], edx
mov dword [ebp - 0x110], eax
mov esi, dword [edi + 0x54]
add esi, edx
mov dword [ebp - 0x130], esi
mov al, byte [esi + 0x3c]
mov ebx, dword [esi + 0x70]
mov byte [ebp - 0x125], al
test al, al
je 0x1001da23
mov ecx, ebx
call fcn.1001e430
mov al, byte [esi + 0x3c]
movss xmm3, dword [0x10077210]
mov byte [ebp - 0x125], al
mov eax, dword [ebp - 0x110]
mov esi, dword [eax + 0x18]
mov edx, dword [eax]
mov eax, 0x100
cwde
movzx ecx, byte [esi + edx + 6]
movsx ecx, cx
imul ecx, eax
movzx eax, byte [esi + edx + 7]
add cx, ax
movsx eax, cx
movzx ecx, byte [esi + edx + 4]
mov dword [ebp - 0x120], eax
mov eax, 0x100
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [esi + edx + 5]
mov esi, dword [ebp - 0x130]
add cx, ax
movss xmm1, dword [esi + 0x10]
movsx eax, cx
mov dword [ebp - 0x124], eax
sub eax, dword [ebp - 0x120]
cmp byte [ebp - 0x125], 0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm1, xmm0
movss dword [ebp - 0x12c], xmm1
jne 0x1001db3c
mov ecx, ebx
call fcn.1001e360
movd xmm1, dword [ebp - 0x124]
xorps xmm3, xmm3
mov eax, dword [esi + 0x10]
cvtdq2ps xmm1, xmm1
mov dword [ebx], eax
xor eax, eax
mov dword [ebx + 0x40], esi
mov dword [ebx + 0x44], edi
comiss xmm1, xmm3
mulss xmm1, dword [ebp - 0x12c]
seta al
lea eax, [eax*2 - 1]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, xmm1
movd xmm1, dword [ebp - 0x120]
cvtdq2ps xmm1, xmm1
cvttss2si eax, xmm0
movd xmm4, eax
xor eax, eax
comiss xmm1, xmm3
mulss xmm1, dword [ebp - 0x12c]
seta al
movss xmm3, dword [0x10077210]
cvtdq2ps xmm4, xmm4
lea eax, [eax*2 - 1]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebx + 0x48], xmm4
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebx + 0x4c], xmm0
jmp 0x1001db41
movss xmm4, dword [ebx + 0x48]
inc word [ebx + 0x3e]
addss xmm4, xmm3
movss xmm2, dword [esi + 0x28]
xor edx, edx
movss dword [ebp - 0x198], xmm2
mov dword [ebp - 0x148], edx
cvttss2si eax, xmm4
movd xmm0, eax
mov eax, dword [ebp - 0x110]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [esi + 0x2c]
movss dword [ebp - 0x17c], xmm0
cmp dword [eax + 0x84], edx
jle 0x1001dee9
xor ecx, ecx
mov dword [ebp - 0x144], ecx
mov eax, dword [eax + 0x80]
add eax, ecx
xor ecx, ecx
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x11c], ecx
cmp dword [eax + 0xc], ecx
jle 0x1001debb
xor edi, edi
mov edx, dword [eax + 0x10]
movzx esi, word [edi + edx]
test si, si
mov esi, dword [ebp - 0x130]
jne 0x1001dbdf
cmp word [edi + edx + 4], 0
jne 0x1001dbdf
cmp word [edi + edx + 2], 0
jne 0x1001dbdf
cmp word [edi + edx + 6], 0
je 0x1001dea2
mov eax, dword [eax + 4]
add eax, ecx
cmp byte [esi + 0x3c], 0
mov dword [ebp - 0x14c], eax
je 0x1001dc1a
movzx ecx, ax
cmp ecx, dword [ebx + 0x28]
jge 0x1001dc1a
mov eax, dword [ebx + 0x30]
movzx eax, word [eax + ecx*2]
mov ecx, 0xffff
cmp ax, cx
je 0x1001dc1a
lea ecx, [eax + eax*4]
mov eax, dword [ebx + 0x18]
lea eax, [eax + ecx*8]
test eax, eax
jne 0x1001de96
movss xmm0, dword [esi + 0x34]
movss xmm1, dword [edi + edx + 0x10]
comiss xmm0, xmm1
movss dword [ebp - 0x124], xmm0
ja 0x1001dc43
movss xmm0, dword [esi + 0x38]
minss xmm0, xmm1
movss dword [ebp - 0x124], xmm0
ucomiss xmm1, xmm0
movss dword [ebp - 0x120], xmm2
lahf
test ah, 0x44
jnp 0x1001dc79
cmp byte [esi + 0x1c], 0
subss xmm0, xmm1
mulss xmm0, xmm3
je 0x1001dc6d
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, xmm2
movss dword [ebp - 0x120], xmm0
mov eax, dword [ebp - 0x10c]
lea ecx, [ebx + 0x10]
movss xmm1, dword [0x1007724c]
movaps xmm2, xmm1
movd xmm0, dword [eax + 0x1c]
cvtdq2ps xmm0, xmm0
divss xmm2, xmm0
movd xmm0, dword [eax + 0x20]
movzx eax, word [edi + edx]
cvtdq2ps xmm0, xmm0
divss xmm1, xmm0
movss xmm0, dword [edi + edx + 8]
movss dword [ebp - 0x114], xmm0
movss xmm0, dword [edi + edx + 0xc]
movss dword [ebp - 0x178], xmm0
movss xmm0, dword [edi + edx + 0x14]
movss dword [ebp - 0x180], xmm0
movss xmm0, dword [edi + edx + 0x18]
movss dword [ebp - 0x184], xmm0
movd xmm0, eax
movzx eax, word [edi + edx + 2]
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm2
movss dword [ebp - 0x188], xmm0
movd xmm0, eax
movzx eax, word [edi + edx + 4]
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
movss dword [ebp - 0x18c], xmm0
movd xmm0, eax
movzx eax, word [edi + edx + 6]
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm2
movss dword [ebp - 0x190], xmm0
movd xmm0, eax
mov eax, dword [ebx + 0x10]
cvtdq2ps xmm0, xmm0
inc eax
push eax
mulss xmm0, xmm1
movss dword [ebp - 0x194], xmm0
call fcn.1001f950
mov eax, dword [ebx + 0x10]
xorps xmm5, xmm5
movss xmm0, dword [ebp - 0x114]
mov esi, dword [ebx + 0x18]
addss xmm0, xmm5
movss xmm3, dword [0x10077210]
lea edx, [eax + eax*4]
mov eax, dword [ebp - 0x14c]
mov word [esi + edx*8 - 0x28], ax
addss xmm0, dword [ebp - 0x120]
movss dword [esi + edx*8 - 0x20], xmm0
movss xmm0, dword [ebp - 0x178]
addss xmm0, xmm5
addss xmm0, dword [ebp - 0x17c]
movss dword [esi + edx*8 - 0x1c], xmm0
movss xmm0, dword [ebp - 0x180]
addss xmm0, xmm5
addss xmm0, dword [ebp - 0x120]
movss dword [esi + edx*8 - 0x18], xmm0
movss xmm0, dword [ebp - 0x184]
addss xmm0, xmm5
addss xmm0, dword [ebp - 0x17c]
movss dword [esi + edx*8 - 0x14], xmm0
movss xmm0, dword [ebp - 0x188]
movss dword [esi + edx*8 - 0x10], xmm0
movss xmm0, dword [ebp - 0x18c]
movss dword [esi + edx*8 - 0xc], xmm0
movss xmm0, dword [ebp - 0x190]
movss dword [esi + edx*8 - 8], xmm0
movss xmm0, dword [ebp - 0x194]
movss dword [esi + edx*8 - 4], xmm0
mov eax, dword [ebx + 0x40]
movss xmm0, dword [ebp - 0x124]
addss xmm0, dword [eax + 0x20]
movss dword [esi + edx*8 - 0x24], xmm0
mov eax, dword [ebx + 0x40]
cmp byte [eax + 0x1c], 0
je 0x1001de39
addss xmm0, xmm3
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esi + edx*8 - 0x24], xmm0
mov eax, dword [ebx + 0x44]
mov byte [ebx + 0x50], 1
movss xmm0, dword [esi + edx*8 - 4]
subss xmm0, dword [esi + edx*8 - 0xc]
movd xmm1, dword [eax + 0x20]
cvtdq2ps xmm1, xmm1
movss xmm2, dword [ebp - 0x198]
mulss xmm1, xmm0
movss xmm0, dword [esi + edx*8 - 8]
subss xmm0, dword [esi + edx*8 - 0x10]
addss xmm1, dword [0x10077280]
cvttss2si ecx, xmm1
movd xmm1, dword [eax + 0x1c]
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
addss xmm1, dword [0x10077280]
cvttss2si eax, xmm1
imul ecx, eax
add dword [ebx + 0x54], ecx
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x11c]
inc ecx
add edi, 0x1c
mov dword [ebp - 0x11c], ecx
cmp ecx, dword [eax + 0xc]
jl 0x1001dbb1
mov edx, dword [ebp - 0x148]
mov eax, dword [ebp - 0x110]
inc edx
mov ecx, dword [ebp - 0x144]
add ecx, 0x18
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x144], ecx
cmp edx, dword [eax + 0x84]
jl 0x1001db90
mov edi, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x134]
add eax, 0x8c
mov edx, dword [ebp - 0x140]
inc ecx
add edx, 0x74
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x140], edx
mov dword [ebp - 0x110], eax
cmp ecx, dword [edi + 0x4c]
jl 0x1001d9f0
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov ecx, dword [ebp - 0x138]
test ecx, ecx
je 0x1001df38
mov eax, dword [0x1007acc0]
test eax, eax
je 0x1001df38
dec dword [eax + 0x394]
push ecx
call esi
mov ecx, dword [ebp - 0x13c]
add esp, 4
test ecx, ecx
je 0x1001df57
mov eax, dword [0x1007acc0]
test eax, eax
je 0x1001df57
dec dword [eax + 0x394]
push ecx
call esi
mov ecx, dword [ebp - 0x118]
add esp, 4
test ecx, ecx
je 0x1001df76
mov eax, dword [0x1007acc0]
test eax, eax
je 0x1001df76
dec dword [eax + 0x394]
push ecx
call esi
add esp, 4
mov ecx, edi
call fcn.1001dfd0
mov al, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004edb4
mov esp, ebp
pop ebp
ret
test eax, eax
je 0x1001dfb4
mov ecx, dword [0x1007acc0]
test ecx, ecx
je 0x1001dfaa
dec dword [ecx + 0x394]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov ecx, dword [ebp - 4]
xor al, al
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1004edb4
mov esp, ebp
pop ebp
ret