Function at 0x10047f70
Capabilities:
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10117293
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x20
push esi
push edi
mov eax, dword [0x10150380]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x18], edx
mov esi, ecx
mov edi, dword [0x1017bfd8]
mov dword [ebp - 0x20], edi
test edi, edi
je 0x10047fc3
inc dword [edi + 0x36c]
push 0x340
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
lea ecx, [ebp - 0x11]
mov dword [ebp - 0x2c], eax
add esp, 4
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x10047ff8
push esi
push edi
mov ecx, eax
call fcn.100441a0
mov esi, eax
mov dword [ebp - 0x1c], eax
jmp 0x10047ffd
xor esi, esi
mov dword [ebp - 0x1c], esi
mov eax, dword [ebp - 0x18]
lea ecx, [edi + 0x19d4]
mov dword [ebp - 4], 0xffffffff
mov dword [esi + 8], eax
mov edx, dword [ecx]
mov edi, dword [ecx + 8]
mov eax, dword [esi + 4]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x24], eax
lea esi, [edi + edx*8]
mov dword [ebp - 0x2c], esi
mov esi, dword [ebp - 0x1c]
test edx, edx
je 0x10048057
mov esi, eax
nop dword [eax]
mov ecx, edx
shr ecx, 1
cmp dword [edi + ecx*8], esi
lea eax, [edi + ecx*8]
jae 0x10048048
lea edi, [eax + 8]
or eax, 0xffffffff
sub eax, ecx
add edx, eax
jmp 0x1004804a
mov edx, ecx
test edx, edx
jne 0x10048030
mov esi, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
cmp edi, dword [ebp - 0x2c]
je 0x10048065
cmp dword [edi], eax
jne 0x10048065
mov dword [edi + 4], esi
jmp 0x10048075
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push edi
mov dword [ebp - 0x2c], esi
call fcn.10053a50
test dword [ebp - 0x18], 0x100
mov dword [esi + 0xc], 0x42700000
mov dword [esi + 0x10], 0x42700000
jne 0x1004817c
mov ecx, dword [esi + 4]
call fcn.10052a70
mov edi, dword [ebp - 0x20]
mov edx, eax
mov dword [ebp - 0x2c], edx
test edx, edx
je 0x1004817f
cmp edx, dword [edi + 0x2cb8]
jb 0x10048317
mov ecx, dword [edi + 0x2cb0]
lea eax, [ecx*8]
sub eax, ecx
mov ecx, dword [edi + 0x2cb8]
lea eax, [ecx + eax*4]
cmp edx, eax
ja 0x10048317
mov ecx, edx
mov eax, 0x92492493
sub ecx, dword [edi + 0x2cb8]
and dword [esi + 0xac], 0xfffffffb
and dword [esi + 0xb0], 0xfffffffb
and dword [esi + 0xb4], 0xfffffffb
imul ecx
add edx, ecx
mov ecx, dword [ebp - 0x2c]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esi + 0x270], eax
cvttss2si eax, dword [ecx + 8]
movd xmm1, eax
cvttss2si eax, dword [ecx + 0xc]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esi + 0xc], xmm1
movss dword [esi + 0x10], xmm0
mov al, byte [ecx + 0x18]
mov byte [esi + 0x7d], al
movss xmm2, dword [ecx + 0x14]
movss xmm3, dword [ecx + 0x10]
movaps xmm0, xmm2
movaps xmm1, xmm3
mulss xmm0, xmm2
mulss xmm1, xmm3
addss xmm1, xmm0
comiss xmm1, dword [0x10144ec4]
jbe 0x1004817f
cvttss2si eax, xmm3
movd xmm0, eax
cvttss2si eax, xmm2
cvtdq2ps xmm0, xmm0
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movss dword [ebx + 8], xmm0
movss dword [ebx + 0xc], xmm2
jmp 0x10048189
mov edi, dword [ebp - 0x20]
movss xmm2, dword [ebx + 0xc]
movss xmm0, dword [ebx + 8]
test byte [ebp - 0x18], 0x40
cvttss2si eax, xmm0
mov ecx, dword [esi + 0x10]
mov dword [esi + 0xe4], ecx
movd xmm1, eax
cvttss2si eax, xmm2
cvtdq2ps xmm1, xmm1
movd xmm0, eax
mov eax, dword [esi + 0xc]
cvtdq2ps xmm0, xmm0
mov dword [esi + 0xe0], eax
movss dword [esi + 0x24], xmm1
movss dword [esi + 0x28], xmm0
movss dword [esi + 0x1c], xmm1
movss dword [esi + 0x20], xmm0
movss dword [esi + 0x14], xmm1
movss dword [esi + 0x18], xmm0
je 0x100481ed
mov dword [esi + 0x94], 2
xor al, al
mov dword [esi + 0x90], 2
jmp 0x10048227
xorps xmm0, xmm0
comiss xmm0, xmm1
jb 0x100481ff
mov dword [esi + 0x90], 2
comiss xmm0, dword [esi + 0x18]
jb 0x1004820f
mov dword [esi + 0x94], 2
cmp dword [esi + 0x90], 0
jg 0x10048225
cmp dword [esi + 0x94], 0
jg 0x10048225
xor al, al
jmp 0x10048227
mov al, 1
mov byte [esi + 0x98], al
lea edx, [edi + 0x19b0]
mov eax, dword [edx + 4]
mov ecx, dword [edx]
mov dword [ebp - 0x2c], eax
cmp ecx, eax
jne 0x1004826c
inc ecx
test eax, eax
je 0x10048254
cdq
sub eax, edx
lea edx, [edi + 0x19b0]
sar eax, 1
add eax, dword [ebp - 0x2c]
jmp 0x10048259
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, edx
call fcn.10053900
lea edx, [edi + 0x19b0]
mov ecx, dword [edx]
add edi, 0x19a4
mov eax, dword [edx + 8]
mov dword [eax + ecx*4], esi
inc dword [edx]
test dword [ebp - 0x18], 0x2000
mov ecx, dword [edi]
je 0x1004831f
test ecx, ecx
jne 0x100482c4
mov eax, dword [edi + 4]
cmp ecx, eax
jne 0x100482b7
inc ecx
test eax, eax
je 0x100482a5
cdq
sub eax, edx
sar eax, 1
add eax, dword [edi + 4]
jmp 0x100482aa
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, edi
call fcn.10053900
mov ecx, dword [edi]
mov eax, dword [edi + 8]
mov dword [eax + ecx*4], esi
jmp 0x1004834f
mov edx, dword [edi + 8]
lea eax, [edx + ecx*4]
cmp edx, eax
ja 0x10048317
mov eax, dword [edi + 4]
cmp ecx, eax
jne 0x100482f6
inc ecx
test eax, eax
je 0x100482e4
cdq
sub eax, edx
sar eax, 1
add eax, dword [edi + 4]
jmp 0x100482e9
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, edi
call fcn.10053900
mov eax, dword [edi]
test eax, eax
jle 0x10048310
mov ecx, dword [edi + 8]
shl eax, 2
push eax
push ecx
lea eax, [ecx + 4]
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov eax, dword [edi + 8]
mov dword [eax], esi
jmp 0x1004834f
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov eax, dword [edi + 4]
cmp ecx, eax
jne 0x10048347
inc ecx
test eax, eax
je 0x10048335
cdq
sub eax, edx
sar eax, 1
add eax, dword [edi + 4]
jmp 0x1004833a
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, edi
call fcn.10053900
mov edx, dword [edi]
mov ecx, dword [edi + 8]
mov dword [ecx + edx*4], esi
inc dword [edi]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret