Function at 0x432530
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43e920
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x158
mov eax, dword [0x44a040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x158], ecx
mov edi, dword [0x44a678]
mov esi, edi
mov eax, dword [ebx + 8]
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x114], 0x40
mov eax, dword [esi + 0x1ba8]
mov dword [ebp - 0xe8], esi
mov byte [eax + 0x8c], 1
mov eax, dword [esi + 0x1ba8]
mov dword [ebp - 0xf4], eax
cmp byte [eax + 0x8f], 0
jne 0x432a89
mov edx, dword [ebx + 0x14]
mov ecx, edx
shr ecx, 0x1a
and ecx, 0xffffff01
mov dword [ebp - 0xd4], ecx
mov ecx, edx
shr ecx, 0xe
and ecx, 0xffffff01
mov dword [ebp - 0xe4], ecx
mov ecx, edx
shr ecx, 0xf
and ecx, 0xffffff01
mov dword [ebp - 0x160], ecx
mov ecx, edx
shr ecx, 0x10
not cl
and ecx, 0xffffff01
mov dword [ebp - 0x128], ecx
mov ecx, edx
shr ecx, 0x12
and ecx, 0xffffff01
cmp byte [ebp - 0xd4], 0
mov dword [ebp - 0x118], ecx
je 0x432632
call fcn.0040eb30
mov edi, dword [0x44a678]
mov eax, dword [ebp - 0xf4]
mov ecx, dword [eax + 0xc4]
xor edx, edx
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, dword [ebp - 0x158]
call fcn.00402dd0
add esp, 4
mov dword [ebp - 0xd8], eax
cmp dword [edi + 0x1be0], eax
jne 0x432666
mov dword [edi + 0x1be4], eax
cmp dword [edi + 0x1c1c], eax
jne 0x432675
mov byte [edi + 0x1c20], 1
cmp dword [edi + 0x1bc8], eax
jne 0x432699
push ecx
push dword [ebp - 0x158]
mov edx, 0xb
mov ecx, eax
call fcn.00414820
mov edi, dword [0x44a678]
add esp, 8
mov eax, dword [ebp - 0x158]
mov ecx, eax
cmp eax, 0xffffffff
jae 0x4326bc
mov dl, byte [ecx]
test dl, dl
je 0x4326bc
cmp dl, 0x23
jne 0x4326b6
cmp byte [ecx + 1], dl
je 0x4326bc
inc ecx
cmp ecx, 0xffffffff
jb 0x4326a6
movss xmm1, dword [0x446f68]
movss xmm0, dword [edi + 0x1944]
movss dword [ebp - 0x15c], xmm1
cmp eax, ecx
jne 0x4326e5
xorps xmm3, xmm3
movss dword [ebp - 0x164], xmm3
jmp 0x432736
push ecx
push ecx
push eax
push ecx
mov ecx, dword [edi + 0x1940]
lea eax, [ebp - 0x148]
mov dword [esp], 0xbf800000
movaps xmm3, xmm1
push eax
movaps xmm2, xmm0
call fcn.00424790
movss xmm0, dword [ebp - 0x148]
xorps xmm3, xmm3
addss xmm0, dword [0x446eb0]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x164], xmm0
movss xmm0, dword [ebp - 0x144]
cmp byte [ebp - 0xd4], 0
je 0x43274f
movss xmm0, dword [esi + 0x1944]
mulss xmm0, dword [0x446f14]
test byte [edi + 0x1c34], 1
movss xmm1, dword [esi + 0x1568]
mov eax, dword [edi + 0x1ba8]
movaps xmm2, xmm1
addss xmm2, xmm1
addss xmm2, xmm0
je 0x43277b
movss xmm0, dword [edi + 0x1c38]
jmp 0x432783
movss xmm0, dword [eax + 0x178]
comiss xmm3, xmm0
jbe 0x4327c2
cmp dword [eax + 0x168], 0
movss xmm1, dword [eax + 0x200]
jne 0x4327a2
cmp dword [edi + 0x1f60], 0
je 0x4327aa
movss xmm1, dword [eax + 0x1d0]
subss xmm1, dword [eax + 0xd0]
addss xmm1, xmm0
movss xmm0, dword [0x446eb8]
maxss xmm0, xmm1
cvttss2si eax, xmm0
lea ecx, [ebp - 0x148]
movd xmm1, eax
mov eax, dword [ebx + 0x10]
cvtdq2ps xmm1, xmm1
push dword [eax + 4]
push dword [eax]
call fcn.0040ea50
movss xmm1, dword [ebp - 0x164]
xorps xmm0, xmm0
add esp, 8
comiss xmm1, xmm0
jbe 0x432800
movaps xmm2, xmm1
addss xmm2, dword [esi + 0x157c]
jmp 0x432803
xorps xmm2, xmm2
mov edi, dword [ebp - 0xf4]
lea ecx, [ebp - 0x138]
movss xmm0, dword [ebp - 0x144]
movss xmm5, dword [ebp - 0x148]
addss xmm2, xmm5
movss dword [ebp - 0x154], xmm5
movss xmm4, dword [edi + 0xd4]
movaps xmm1, xmm5
movss xmm3, dword [edi + 0xd0]
addss xmm0, xmm4
addss xmm1, xmm3
movss dword [ebp - 0xbc], xmm3
movss dword [ebp - 0xec], xmm4
addss xmm2, xmm3
movss dword [ebp - 0x54], xmm3
movss dword [ebp - 0x50], xmm4
movss dword [ebp - 0x48], xmm0
movaps xmm0, xmm4
addss xmm0, dword [ebp - 0x144]
movss dword [ebp - 0x4c], xmm1
movss xmm1, dword [esi + 0x1568]
movss dword [ebp - 0x1c], xmm2
subss xmm2, xmm3
movss dword [ebp - 0x24], xmm3
movss dword [ebp - 0x18], xmm0
subss xmm0, xmm4
movss dword [ebp - 0x20], xmm4
mov dword [ebp - 0x11c], edi
movss dword [ebp - 0x138], xmm2
movss dword [ebp - 0x134], xmm0
call fcn.0040e680
cmp byte [ebp - 0xd4], 0
je 0x432b18
mov edx, dword [ebp - 0xd8]
lea eax, [ebp - 0x54]
push pe_nt_image_headers32
push eax
lea ecx, [ebp - 0x24]
call fcn.0040e7b0
add esp, 8
test al, al
je 0x432a84
mov eax, dword [esi + 0x1c50]
movss xmm0, dword [ebp - 0xbc]
mov esi, dword [0x44a678]
movss dword [edi + 0xd0], xmm0
movss xmm0, dword [ebp - 0xec]
movss dword [edi + 0xd4], xmm0
movups xmm0, xmmword [esi + 0x1620]
mov dword [ebp - 0x120], eax
lea ecx, [esi + 0x1ce4]
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], 3
push eax
movups xmmword [ebp - 0x24], xmm0
call fcn.00415490
mov edi, dword [ebp - 0xe8]
lea eax, [ebp - 0x13c]
push eax
mov dword [ebp - 0x13c], 7
movups xmm0, xmmword [edi + 0x1660]
movups xmmword [esi + 0x1620], xmm0
mov esi, dword [0x44a678]
movss xmm0, dword [edi + 0x156c]
movss dword [ebp - 0xbc], xmm0
movss xmm0, dword [esi + 0x1554]
lea ecx, [esi + 0x1cf0]
movss dword [ebp - 0x138], xmm0
call fcn.00415370
movss xmm0, dword [ebp - 0xbc]
lea eax, [ebp - 0x13c]
movss dword [esi + 0x1554], xmm0
mov esi, dword [0x44a678]
movss xmm0, dword [edi + 0x1570]
movss dword [ebp - 0xbc], xmm0
push eax
movss xmm0, dword [esi + 0x1558]
lea ecx, [esi + 0x1cf0]
mov dword [ebp - 0x13c], 8
movss dword [ebp - 0x138], xmm0
call fcn.00415370
movss xmm0, dword [ebp - 0xbc]
lea eax, [ebp - 0x138]
movss xmm1, dword [ebp - 0x4c]
subss xmm1, dword [ebp - 0x54]
mov edx, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0x158]
movss dword [esi + 0x1558], xmm0
movss xmm0, dword [ebp - 0x48]
subss xmm0, dword [ebp - 0x50]
push 4
push 1
push eax
movss dword [ebp - 0x138], xmm1
movss dword [ebp - 0x134], xmm0
call fcn.00408ae0
add esp, 0xc
mov byte [ebp - 0xdd], al
mov ecx, 2
call fcn.00403690
mov esi, dword [0x44a678]
mov ecx, dword [esi + 0x1ce4]
lea edx, [ecx + ecx*4]
mov ecx, dword [esi + 0x1cec]
mov eax, dword [ecx + edx*4 - 0x14]
movups xmm0, xmmword [ecx + edx*4 - 0x10]
add eax, 0x15f
shl eax, 4
add eax, esi
movups xmmword [eax], xmm0
dec dword [esi + 0x1ce4]
cmp byte [ebp - 0xdd], 0
jne 0x432aa9
call fcn.00408ce0
call fcn.0040ec60
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0043cc84
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov esi, edi
mov edx, dword [esi + 0x1ba8]
mov dword [ebp - 0x11c], edx
movsx ecx, word [edx + 0x122]
mov eax, dword [edx + 0x11c]
bts ecx, eax
mov word [edx + 0x122], cx
movss xmm0, dword [esi + 0x1564]
addss xmm0, dword [edx + 0xd0]
movss dword [edx + 0xd0], xmm0
movss xmm0, dword [esi + 0x1568]
addss xmm0, dword [edx + 0xd4]
movss dword [edx + 0xd4], xmm0
movss xmm0, dword [ebp - 0x148]
subss xmm0, dword [edx + 0x80]
movss dword [ebp - 0x154], xmm0
jmp 0x432b4f
test dword [ebx + 0x14], 0x10000000
jne 0x432b43
mov edx, dword [ebp - 0xd8]
lea eax, [ebp - 0x54]
push pe_nt_image_headers32
push eax
lea ecx, [ebp - 0x24]
call fcn.0040e7b0
add esp, 8
test al, al
je 0x432a89
mov eax, dword [esi + 0x1c50]
mov dword [ebp - 0x120], eax
mov edx, dword [ebp - 0xd8]
lea ecx, [ebp - 0x54]
call fcn.00404af0
mov dl, al
mov byte [ebp - 0xed], dl
test dl, dl
je 0x432b73
mov dword [esi + 0x1ebc], 1
mov edi, dword [0x44a678]
xor eax, eax
mov ecx, dword [ebp - 0xd8]
add edi, 0x1ff0
cmp dword [edi], ecx
cmovne edi, eax
mov eax, dword [ebp - 0x120]
shr eax, 8
and al, 1
mov dword [ebp - 0x10c], edi
mov dword [ebp - 0x120], eax
mov eax, dword [esi + 0x1be0]
cmp eax, ecx
je 0x432bcf
cmp dword [esi + 0x1d68], ecx
je 0x432bc6
cmp dword [esi + 0x1d5c], ecx
jne 0x432bcf
cmp dword [esi + 0x1d84], 2
jne 0x432bcf
mov byte [ebp - 0xc5], 1
jmp 0x432bd6
mov byte [ebp - 0xc5], 0
test dl, dl
je 0x432bea
cmp byte [esi + 0x3e0], 0
mov byte [ebp - 0xb8], 1
jne 0x432bf1
mov byte [ebp - 0xb8], 0
cmp byte [ebp - 0xd4], 0
je 0x432c67
test edi, edi
je 0x432c67
test eax, eax
jne 0x432c67
mov eax, dword [ebp - 0x11c]
xor edx, edx
mov ecx, dword [eax + 0xc4]
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, str.SCROLLY
call fcn.00402dd0
mov ecx, dword [0x44a678]
add esp, 4
mov dword [ebp - 0xbc], eax
cmp dword [ecx + 0x1bc8], eax
jne 0x432c56
push ecx
push str.SCROLLY
mov edx, 0xb
mov ecx, eax
call fcn.00414820
mov eax, dword [ebp - 0xbc]
add esp, 8
cmp dword [esi + 0x1c1c], eax
jne 0x432c67
mov byte [ebp - 0xb6], 1
jmp 0x432c87
mov eax, dword [ebp - 0xd4]
mov byte [ebp - 0xb6], 0
test al, al
je 0x432d01
mov byte [ebp - 0xb6], 0
test edi, edi
je 0x432d01
mov eax, dword [ebp - 0x11c]
xor edx, edx
mov ecx, dword [eax + 0xc4]
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, str.SCROLLY
call fcn.00402dd0
mov ecx, dword [0x44a678]
add esp, 4
mov dword [ebp - 0xbc], eax
cmp dword [ecx + 0x1bc8], eax
jne 0x432cdb
push ecx
push str.SCROLLY
mov edx, 0xb
mov ecx, eax
call fcn.00414820
mov eax, dword [ebp - 0xbc]
add esp, 8
cmp dword [esi + 0x1be0], eax
jne 0x432cfb
mov cl, 1
mov byte [ebp - 0xcd], 0
mov byte [ebp - 0xb7], cl
mov byte [ebp - 0xcc], 0
jmp 0x432d1b
mov eax, dword [ebp - 0xd4]
xor cl, cl
mov byte [ebp - 0xcd], 0
mov byte [ebp - 0xcc], 0
mov byte [ebp - 0xb7], cl
test al, al
je 0x432d36
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [eax + 0x5c]
mov eax, dword [ebp - 0xd4]
movss dword [ebp - 0x15c], xmm0
jmp 0x432d3e
xor cl, cl
mov byte [ebp - 0xb7], cl
test edi, edi
je 0x432d4d
xor al, 1
cmp byte [edi + 0x53], al
je 0x432d4d
mov al, 1
jmp 0x432d4f
xor al, al
cmp byte [ebp - 0xb8], 0
mov byte [ebp - 0xc6], al
mov dword [ebp - 0xec], 1
jne 0x432d96
cmp byte [ebp - 0xb6], 0
jne 0x432d96
cmp byte [ebp - 0xc5], 0
jne 0x432d96
cmp byte [ebp - 0x120], 0
jne 0x432d96
mov byte [ebp - 0xb6], 0
test cl, cl
jne 0x432d9d
mov byte [ebp - 0xc8], cl
jmp 0x432db2
mov byte [ebp - 0xb6], 1
mov edx, dword [ebp - 0xd8]
mov byte [ebp - 0xc8], 1
cmp dword [esi + 0x1be0], edx
jne 0x432dba
test al, al
je 0x433054
mov ecx, dword [ebp - 0xdc]
lea edi, [esi + 0x1ff0]
mov dword [ebp - 0x10c], edi
mov dword [edi + 0xe68], 0xbe99999a
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x432de0
mov eax, dword [edi + 0x28]
sub ecx, edx
lea edx, [ecx + 1]
mov dword [ebp - 0xc4], edx
cmp edx, eax
jle 0x432e2a
test eax, eax
je 0x432e0f
cdq
sub eax, edx
mov edx, dword [ebp - 0xc4]
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x28]
jmp 0x432e14
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [edi + 0x24]
push eax
call fcn.00415bd0
mov edx, dword [ebp - 0xc4]
push edx
push dword [ebp - 0xdc]
mov dword [edi + 0x24], edx
push dword [edi + 0x2c]
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [edi + 0x10]
add esp, 0xc
cmp eax, 0x41
jge 0x432e74
test eax, eax
je 0x432e5a
cdq
sub eax, edx
lea edx, [edi + 0xc]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x432e62
mov ecx, 8
lea edx, [edi + 0xc]
mov eax, 0x41
cmp ecx, eax
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.00415ca0
lea eax, [edi + 0x18]
mov dword [edi + 0xc], 0x41
mov ecx, dword [eax + 4]
test ecx, ecx
jns 0x432ea1
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x18]
call fcn.00415bd0
lea eax, [edi + 0x18]
mov dword [eax], 0
mov ecx, dword [edi + 0x14]
mov edx, ecx
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x100], ecx
add ecx, 0x7e
mov byte [edi + 0x30], 0
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xc0], edx
cmp edx, ecx
jae 0x432f25
mov esi, eax
cmp byte [esi], 0
je 0x432f19
push 0
mov edx, esi
lea ecx, [ebp - 0xbc]
call fcn.004030a0
mov edx, dword [ebp - 0xc0]
add esi, eax
mov eax, dword [ebp - 0xbc]
add esp, 4
mov dword [ebp - 0xf8], esi
test eax, eax
je 0x432f19
mov word [edx], ax
add edx, 2
mov eax, dword [ebp - 0x100]
add eax, 0x7e
mov dword [ebp - 0xc0], edx
cmp edx, eax
jb 0x432ed1
mov esi, dword [ebp - 0xe8]
mov eax, dword [ebp - 0xf8]
sub eax, dword [ebp - 0xdc]
xor ecx, ecx
mov word [edx], cx
sub edx, dword [ebp - 0x100]
sar edx, 1
mov dword [edi + 8], eax
mov eax, dword [ebp - 0xd8]
mov dword [edi + 4], edx
cmp dword [edi], eax
jne 0x432f81
cmp byte [ebp - 0xc6], cl
jne 0x432f81
cmp dword [edi + 0x3c], edx
mov ecx, edx
mov byte [ebp - 0xdd], 1
cmovl ecx, dword [edi + 0x3c]
cmp dword [edi + 0x40], edx
mov dword [edi + 0x3c], ecx
mov ecx, edx
cmovl ecx, dword [edi + 0x40]
cmp dword [edi + 0x44], edx
mov dword [edi + 0x40], ecx
cmovl edx, dword [edi + 0x44]
mov cl, byte [ebp - 0xdd]
mov dword [edi + 0x44], edx
jmp 0x432fe4
mov dword [edi], eax
xor cl, cl
mov al, byte [ebp - 0xd4]
xor al, 1
mov dword [edi + 0x38], 0
mov dword [edi + 0xe5a], 0x630000
mov dword [edi + 0xe60], 0
mov dword [edi + 0xe64], 0x3e7
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], 0
mov dword [edi + 0x3c], 0
mov word [edi + 0x51], 1
mov dword [edi + 0x58], 0
mov byte [edi + 0x50], cl
mov byte [edi + 0x53], al
mov byte [edi + 0x48], cl
mov dword [edi + 0x4c], 0
cmp byte [ebp - 0xd4], 0
mov edx, dword [ebx + 0x14]
jne 0x433048
mov eax, dword [ebp - 0xcc]
test dl, 0x10
movzx eax, al
cmovne eax, dword [ebp - 0xec]
cmp byte [ebp - 0xc5], 0
mov dword [ebp - 0xcc], eax
je 0x433026
test cl, cl
je 0x43301f
test byte [esi + 0x1d6c], 4
jne 0x433026
mov byte [ebp - 0xcc], 1
cmp byte [ebp - 0x120], 0
jne 0x433041
cmp byte [ebp - 0xb8], 0
je 0x433048
cmp byte [esi + 0xfc], 0
je 0x433048
mov byte [ebp - 0xcc], 1
test edx, 0x2000
je 0x433054
mov byte [edi + 0x48], 1
mov ecx, dword [ebp - 0xd8]
cmp dword [esi + 0x1be0], ecx
je 0x433113
cmp byte [ebp - 0xb6], 0
je 0x43310b
mov edx, dword [ebp - 0xf4]
call fcn.004048e0
call fcn.004100b0
mov ecx, edx
call fcn.0040dd60
mov eax, dword [esi + 0x1bf4]
mov edx, dword [ebx + 0x14]
or eax, 3
cmp byte [ebp - 0xd4], 0
mov dword [esi + 0x1bf4], eax
jne 0x4330a9
test dl, dl
jns 0x4330b2
or eax, 0xc
mov dword [esi + 0x1bf4], eax
mov eax, dword [esi + 0x1c00]
or dword [esi + 0x1bf8], 2
or eax, 0x180
cmp byte [ebp - 0xd4], 0
mov ecx, dword [esi + 0x1c04]
mov dword [esi + 0x1c00], eax
mov dword [esi + 0x1c04], ecx
je 0x4330ee
or eax, 0x60
mov dword [esi + 0x1c04], ecx
mov dword [esi + 0x1c00], eax
test edx, 0x440
je 0x433105
or eax, 1
mov dword [esi + 0x1c04], ecx
mov dword [esi + 0x1c00], eax
mov ecx, dword [ebp - 0xd8]
cmp dword [esi + 0x1be0], ecx
jne 0x433150
test edi, edi
jne 0x433122
call fcn.004049b0
mov ecx, dword [ebp - 0xd8]
cmp dword [esi + 0x1be0], ecx
jne 0x433150
cmp byte [esi + 0x3e0], 0
je 0x43315d
cmp byte [ebp - 0xc8], 0
jne 0x43315d
cmp byte [ebp - 0xb6], 0
jne 0x43315d
mov byte [ebp - 0xcd], 1
mov dl, 1
jmp 0x433163
test edi, edi
je 0x433161
cmp byte [ebp - 0xb7], 0
je 0x433161
mov dl, 1
jmp 0x433163
xor dl, dl
mov byte [ebp - 0xc7], dl
test edi, edi
je 0x433189
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x43317e
cmp byte [ebp - 0xcc], 0
je 0x433189
test dl, dl
je 0x433189
mov edx, 1
jmp 0x43318b
xor dl, dl
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x108], edx
mov byte [ebp - 0xee], dl
mov byte [ebp - 0xdd], 0
mov byte [ebp - 0xb6], 0
test al, al
je 0x4332e2
test edi, edi
je 0x4332e2
cmp byte [ebp - 0xc7], 0
jne 0x4331cc
test dl, dl
je 0x4332ef
mov ecx, dword [edi + 0x10]
lea eax, [edi + 0xc]
cmp ecx, 0x41
jge 0x433202
test ecx, ecx
je 0x4331e6
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x4331eb
mov eax, 8
cmp eax, 0x41
mov ecx, 0x41
cmovg ecx, eax
push ecx
lea ecx, [edi + 0xc]
call fcn.00415ca0
lea eax, [edi + 0xc]
mov dword [eax], 0x41
mov ecx, dword [edi + 0x14]
mov edx, ecx
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x100], ecx
sub ecx, 0xffffff80
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xc0], edx
cmp edx, ecx
jae 0x433284
mov esi, eax
nop
cmp byte [esi], 0
je 0x433278
push 0
mov edx, esi
lea ecx, [ebp - 0xbc]
call fcn.004030a0
mov edx, dword [ebp - 0xc0]
add esi, eax
mov eax, dword [ebp - 0xbc]
add esp, 4
mov dword [ebp - 0xf8], esi
test eax, eax
je 0x433278
mov word [edx], ax
add edx, 2
mov eax, dword [ebp - 0x100]
sub eax, 0xffffff80
mov dword [ebp - 0xc0], edx
cmp edx, eax
jb 0x433230
mov esi, dword [ebp - 0xe8]
mov eax, dword [ebp - 0xf8]
sub eax, dword [ebp - 0xdc]
xor ecx, ecx
mov word [edx], cx
sub edx, dword [ebp - 0x100]
sar edx, 1
cmp dword [edi + 0x3c], edx
mov ecx, edx
mov dword [edi + 4], edx
cmovl ecx, dword [edi + 0x3c]
cmp dword [edi + 0x40], edx
mov dword [edi + 0x3c], ecx
mov ecx, edx
cmovl ecx, dword [edi + 0x40]
cmp dword [edi + 0x44], edx
mov dword [edi + 8], eax
cmovl edx, dword [edi + 0x44]
movzx eax, byte [ebp - 0xee]
cmp ecx, edx
mov dword [edi + 0x44], edx
mov edx, 0
cmovne edx, eax
mov dword [edi + 0x40], ecx
mov ecx, dword [ebp - 0xd8]
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x108], edx
cmp byte [ebp - 0xc7], 0
jne 0x4332f7
test dl, dl
jne 0x4332f7
cmp dword [esi + 0x1be0], ecx
jne 0x43330b
test al, al
jne 0x43330b
test edi, edi
je 0x43330b
mov byte [ebp - 0xee], 1
cmp byte [edi + 0x30], al
jne 0x433312
mov byte [ebp - 0xee], 0
cmp byte [ebp - 0x160], 0
je 0x4333a5
mov edx, dword [esi + 0x1940]
cmp dword [edx + 0x14], 0x2a
ja 0x433330
mov eax, dword [edx + 0x2c]
jmp 0x43334f
mov eax, dword [edx + 0x1c]
mov ecx, 0xffff
movzx eax, word [eax + 0x54]
cmp ax, cx
jne 0x433346
mov eax, dword [edx + 0x2c]
jmp 0x43334f
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x28]
lea eax, [eax + ecx*8]
mov dword [ebp - 0xc0], eax
lea ecx, [esi + 0x2e64]
mov eax, dword [edx + 0x10]
mov dword [ecx + 0x10], eax
mov eax, dword [esi + 0x1940]
mov eax, dword [eax + 0x44]
mov dword [ecx + 0x44], eax
mov eax, dword [esi + 0x1940]
mov eax, dword [eax + 0x48]
mov dword [ecx + 0x48], eax
mov eax, dword [esi + 0x1940]
mov eax, dword [eax + 0x4c]
mov dword [ecx + 0x4c], eax
mov eax, dword [esi + 0x1940]
mov eax, dword [eax + 0x30]
mov dword [ecx + 0x30], eax
mov eax, dword [ebp - 0xc0]
mov dword [ecx + 0x2c], eax
mov eax, dword [eax + 4]
mov dword [ecx + 0xc], eax
call fcn.0040e030
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0xf8], 0
cmp dword [esi + 0x1be0], ecx
jne 0x433a09
mov eax, dword [edi + 8]
mov edx, dword [ebx + 0x14]
mov byte [edi + 0xe6e], 0
mov dword [edi + 0x34], 0x40
mov dword [edi + 0xe70], edx
cmp byte [esi + 0xec], 0
mov dword [ebp - 0xf8], eax
sete al
mov dword [esi + 0x31f8], 1
cmp byte [ebp - 0xd4], 0
mov byte [esi + 0x1bed], al
movss xmm7, dword [esi + 0xe4]
subss xmm7, dword [ebp - 0x54]
subss xmm7, dword [esi + 0x1564]
addss xmm7, dword [edi + 0x38]
je 0x433436
mov eax, dword [ebp - 0x11c]
movss xmm2, dword [esi + 0xe8]
subss xmm2, dword [eax + 0xd4]
jmp 0x433446
movss xmm2, dword [esi + 0x1944]
mulss xmm2, dword [0x446e80]
cmp byte [ebp - 0xcc], 0
mov cl, byte [esi + 0xb1]
mov byte [ebp - 0xb8], cl
je 0x43347b
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov byte [edi + 0xe6d], 1
jmp 0x433819
mov al, byte [ebp - 0xed]
test al, al
je 0x43373b
cmp word [esi + 0x3ea], 2
jb 0x43373b
cmp byte [esi + 0xfd], 0
jne 0x43373b
cmp byte [edi + 0x53], 0
je 0x4334be
push 0
mov edx, edi
lea ecx, [ebp - 0x2c]
call fcn.00430ac0
movss xmm2, dword [ebp - 0x20]
add esp, 4
movaps xmm1, xmm7
mov ecx, edi
call fcn.00430e30
lea edx, [edi + 0x3c]
mov dword [ebp - 0xc4], eax
mov dword [edx], eax
mov dword [edx + 4], eax
mov dword [edx + 8], eax
mov byte [edx + 0x16], 0
movzx ecx, word [esi + 0x3ea]
sub ecx, 2
test cl, 1
jne 0x4336aa
test eax, eax
je 0x433509
mov eax, dword [edi + 0x14]
mov ecx, dword [ebp - 0xc4]
cmp word [eax + ecx*2 - 2], 0xa
je 0x433509
xor cl, cl
jmp 0x43350b
mov cl, 1
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x433517
test cl, cl
jne 0x43353a
push 0x20000c
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00431210
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x433558
mov eax, dword [edi + 0x44]
cmp dword [edi + 0x40], eax
jne 0x433555
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x44], eax
mov dword [edi + 0x40], eax
jmp 0x433558
mov dword [edi + 0x3c], eax
mov ecx, dword [edi + 0x3c]
mov edx, dword [edi + 4]
inc ecx
cmp ecx, edx
jge 0x43366b
mov eax, dword [edi + 0xe70]
and eax, 0x8000
mov dword [ebp - 0xc4], 0x3000
mov dword [ebp - 0xbc], eax
test eax, eax
jne 0x433660
test ecx, ecx
jle 0x433669
mov eax, dword [edi + 0x14]
movzx eax, word [eax + ecx*2 - 2]
cmp eax, 0x20
je 0x433654
cmp eax, 9
je 0x433654
cmp ax, word [ebp - 0xc4]
je 0x433654
cmp eax, 0x2c
je 0x433654
cmp eax, 0x3b
je 0x433654
cmp eax, 0x28
je 0x433654
cmp eax, 0x29
je 0x433654
cmp eax, 0x7b
je 0x433654
cmp eax, 0x7d
je 0x433654
cmp eax, 0x5b
je 0x433654
cmp eax, 0x5d
je 0x433654
cmp eax, 0x7c
je 0x433654
cmp eax, 0xa
je 0x433654
cmp eax, 0xd
je 0x433654
mov eax, dword [edi + 0x14]
movzx eax, word [eax + ecx*2]
cmp eax, 0x20
je 0x43364d
cmp eax, 9
je 0x43364d
cmp ax, word [ebp - 0xc4]
je 0x43364d
cmp eax, 0x2c
je 0x43364d
cmp eax, 0x3b
je 0x43364d
cmp eax, 0x28
je 0x43364d
cmp eax, 0x29
je 0x43364d
cmp eax, 0x7b
je 0x43364d
cmp eax, 0x7d
je 0x43364d
cmp eax, 0x5b
je 0x43364d
cmp eax, 0x5d
je 0x43364d
cmp eax, 0x7c
je 0x43364d
cmp eax, 0xa
je 0x43364d
cmp eax, 0xd
jne 0x433654
mov eax, 1
jmp 0x433656
xor eax, eax
test eax, eax
jne 0x433669
mov eax, dword [ebp - 0xbc]
inc ecx
cmp ecx, edx
jl 0x433582
cmp ecx, edx
mov eax, dword [edi + 4]
cmovg ecx, edx
mov edx, ecx
mov dword [edi + 0x3c], ecx
mov dword [edi + 0x44], ecx
mov ecx, dword [edi + 0x40]
cmp ecx, edx
je 0x433699
cmp ecx, eax
jle 0x433689
mov dword [edi + 0x40], eax
mov ecx, eax
cmp edx, eax
jle 0x433692
mov dword [edi + 0x44], eax
mov edx, eax
cmp ecx, edx
jne 0x433699
mov dword [edi + 0x3c], ecx
cmp dword [edi + 0x3c], eax
jle 0x433806
mov dword [edi + 0x3c], eax
jmp 0x433806
mov eax, dword [edi + 0x14]
mov ecx, dword [ebp - 0xc4]
push 0x200004
movzx esi, word [eax + ecx*2]
mov ecx, edi
call fcn.00431210
add esp, 4
mov byte [edi + 0xe6c], 1
lea edx, [edi + 0x3c]
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, edi
push 0x600005
call fcn.00431210
add esp, 4
mov byte [edi + 0xe6c], 1
lea edx, [edi + 0x3c]
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, edi
push 0x600001
call fcn.00431210
add esp, 4
cmp esi, 0xa
je 0x433729
cmp byte [ebp - 0xd4], 0
je 0x433729
mov ecx, dword [edi + 0x40]
mov eax, dword [edi + 0x44]
mov dword [edi + 0x40], eax
mov dword [edi + 0x44], ecx
mov dword [edi + 0x3c], ecx
mov esi, dword [ebp - 0xe8]
mov byte [edi + 0xe6c], 0
jmp 0x433806
cmp byte [esi + 0x3e0], 0
je 0x433788
cmp byte [edi + 0xe6d], 0
jne 0x433788
test al, al
je 0x433819
cmp byte [edi + 0x53], 0
je 0x43376f
push 0
mov edx, edi
lea ecx, [ebp - 0x2c]
call fcn.00430ac0
movss xmm2, dword [ebp - 0x20]
add esp, 4
movaps xmm1, xmm7
mov ecx, edi
call fcn.00430e30
mov dword [edi + 0x3c], eax
mov dword [edi + 0x40], eax
mov dword [edi + 0x44], eax
mov byte [edi + 0x52], 0
jmp 0x433806
cmp byte [esi + 0xec], 0
je 0x433819
cmp byte [edi + 0xe6d], 0
jne 0x433822
movss xmm0, dword [esi + 0x370]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x4337c7
movss xmm0, dword [esi + 0x374]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x433819
cmp byte [edi + 0x53], 0
je 0x4337e1
push 0
mov edx, edi
lea ecx, [ebp - 0x2c]
call fcn.00430ac0
movss xmm2, dword [ebp - 0x20]
add esp, 4
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x4337ef
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x40], eax
movaps xmm1, xmm7
mov ecx, edi
call fcn.00430e30
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0xe6c], 1
mov cl, byte [ebp - 0xb8]
mov edx, dword [ebx + 0x14]
mov dword [edi + 0xe68], 0xbe99999a
cmp byte [edi + 0xe6d], 0
je 0x433832
cmp byte [esi + 0xec], 0
jne 0x433832
mov byte [edi + 0xe6d], 0
cmp byte [esi + 0xfc], 0
je 0x433844
cmp byte [esi + 0xfe], 0
je 0x433851
test cl, cl
je 0x43385a
cmp byte [esi + 0xff], 0
je 0x43385a
mov byte [ebp - 0xb5], 1
jmp 0x433861
mov byte [ebp - 0xb5], 0
test edx, 0x400
je 0x433aa2
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0x34]
test ecx, ecx
js 0x433aa2
call fcn.00408a20
mov ecx, dword [ebp - 0xe4]
test al, al
mov al, byte [ebp - 0xb5]
je 0x433924
test al, al
jne 0x433924
cmp byte [esi + 0xfd], al
jne 0x433924
test cl, cl
jne 0x433924
mov ecx, dword [esi + 0x1524]
mov eax, dword [esi + 0x151c]
lea edx, [ecx + eax*2]
cmp ecx, edx
jae 0x4338d0
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
cmp ax, 9
je 0x433918
cmp ecx, edx
jb 0x4338c0
mov edx, dword [ebx + 0x14]
lea ecx, [ebp - 0xc4]
push 2
sub esp, 8
mov dword [ebp - 0xc4], 9
call fcn.00432350
add esp, 0xc
test al, al
je 0x433918
push dword [ebp - 0xc4]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00431210
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, dword [ebp - 0xe4]
mov al, byte [ebp - 0xb5]
mov edx, dword [ebx + 0x14]
cmp dword [esi + 0x151c], 0
jle 0x433a09
test al, al
jne 0x4339d1
test cl, cl
jne 0x4339d1
cmp byte [ebp - 0xc5], cl
jne 0x4339d1
xor ecx, ecx
mov dword [ebp - 0xc0], ecx
nop dword [eax + eax]
mov eax, dword [esi + 0x1524]
movzx eax, word [eax + ecx*2]
mov dword [ebp - 0xc4], eax
cmp eax, 9
jne 0x43397e
cmp byte [esi + 0xfd], 0
jne 0x4339bf
push 2
sub esp, 8
lea ecx, [ebp - 0xc4]
call fcn.00432350
add esp, 0xc
test al, al
je 0x4339b9
push dword [ebp - 0xc4]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00431210
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ebx + 0x14]
inc ecx
mov dword [ebp - 0xc0], ecx
cmp ecx, dword [esi + 0x151c]
jl 0x433960
mov ecx, dword [esi + 0x1520]
lea eax, [esi + 0x151c]
test ecx, ecx
jns 0x433a03
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [esi + 0x151c]
call fcn.00415ca0
lea eax, [esi + 0x151c]
mov dword [eax], 0
mov edx, dword [ebp - 0xd8]
xor cl, cl
mov byte [ebp - 0xb5], cl
cmp dword [esi + 0x1be0], edx
jne 0x434588
cmp byte [esi + 0x1bec], cl
jne 0x434588
cmp byte [ebp - 0xcd], cl
jne 0x434588
movss xmm0, dword [ebp - 0x144]
mov ecx, 1
subss xmm0, dword [esi + 0x1568]
divss xmm0, dword [esi + 0x1944]
cvttss2si eax, xmm0
cmp eax, ecx
cmovge ecx, eax
xor eax, eax
mov dword [edi + 0x4c], ecx
cmp byte [esi + 0xfd], al
mov dword [ebp - 0xc4], ecx
mov ecx, 0x400000
cmovne eax, ecx
mov dword [ebp - 0xcc], eax
mov al, byte [esi + 0xb1]
mov byte [ebp - 0x12d], al
test al, al
je 0x433ab3
cmp dword [esi + 0x37c], 0xa
jne 0x433ab3
mov byte [ebp - 0xc8], 1
jmp 0x433abe
mov al, byte [ebp - 0xb5]
mov ecx, dword [ebp - 0xe4]
jmp 0x433927
mov byte [ebp - 0xc8], 0
test al, al
je 0x433ae9
cmp byte [esi + 0xff], 0
mov al, byte [esi + 0xfe]
mov byte [ebp - 0xb8], al
je 0x433afc
cmp byte [esi + 0xfc], 0
jne 0x433afc
test al, al
jne 0x433afc
mov byte [ebp - 0xc5], 1
jmp 0x433b03
mov al, byte [esi + 0xfc]
mov byte [ebp - 0xb8], al
mov byte [ebp - 0xc8], 0
mov byte [ebp - 0xc5], 0
cmp byte [esi + 0xb1], 0
mov ecx, dword [esi + 0x37c]
je 0x433b17
cmp ecx, 8
jmp 0x433b1a
cmp ecx, 1
sete al
mov byte [ebp - 0xb7], al
test al, al
je 0x433b47
mov eax, dword [0x44a678]
mov eax, dword [eax + 0x80]
test eax, eax
js 0x433b47
mov ecx, eax
call fcn.00408a20
test al, al
jne 0x433b61
mov ecx, dword [esi + 0x37c]
cmp ecx, 2
jne 0x433b8d
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0x5c]
test ecx, ecx
js 0x433b8d
call fcn.00408a20
test al, al
je 0x433b8d
cmp byte [ebp - 0xe4], 0
jne 0x433b8d
cmp byte [ebp - 0x160], 0
jne 0x433b8d
cmp byte [ebp - 0xd4], 0
je 0x433b84
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x433b8d
mov byte [ebp - 0xc6], 1
jmp 0x433b94
mov byte [ebp - 0xc6], 0
cmp byte [ebp - 0xb7], 0
je 0x433bb2
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0x78]
test ecx, ecx
js 0x433bb2
call fcn.00408a20
test al, al
jne 0x433bd0
cmp dword [esi + 0x37c], 1
jne 0x433bf3
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0x58]
test ecx, ecx
js 0x433bf3
call fcn.00408a20
test al, al
je 0x433bf3
cmp byte [ebp - 0x160], 0
jne 0x433bf3
cmp byte [ebp - 0xd4], 0
je 0x433bea
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x433bf3
mov byte [ebp - 0x123], 1
jmp 0x433bfa
mov byte [ebp - 0x123], 0
cmp byte [ebp - 0xb7], 0
je 0x433c18
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0x7c]
test ecx, ecx
js 0x433c18
call fcn.00408a20
test al, al
jne 0x433c36
cmp dword [esi + 0x37c], 2
jne 0x433c46
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0x58]
test ecx, ecx
js 0x433c46
call fcn.00408a20
test al, al
je 0x433c46
cmp byte [ebp - 0xe4], 0
mov byte [ebp - 0xed], 1
je 0x433c4d
mov byte [ebp - 0xed], 0
mov dl, byte [ebp - 0xb7]
test dl, dl
je 0x433c90
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0x88]
test ecx, ecx
js 0x433c90
call fcn.00408a20
test al, al
je 0x433c8a
cmp byte [ebp - 0xe4], 0
jne 0x433c8a
cmp byte [ebp - 0x128], 0
je 0x433c8a
mov byte [ebp - 0x122], 1
jmp 0x433c9b
mov dl, byte [ebp - 0xb7]
mov byte [ebp - 0x122], 0
test dl, dl
je 0x433cb3
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0x84]
test ecx, ecx
js 0x433cb3
call fcn.00408a20
test al, al
jne 0x433cd4
cmp byte [ebp - 0xc8], 0
je 0x433ced
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0x88]
test ecx, ecx
js 0x433ced
call fcn.00408a20
test al, al
je 0x433ced
cmp byte [ebp - 0xe4], 0
jne 0x433ced
cmp byte [ebp - 0x128], 0
mov byte [ebp - 0x101], 1
jne 0x433cf4
mov byte [ebp - 0x101], 0
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0x68]
test ecx, ecx
js 0x433d09
call fcn.00408a20
test al, al
jne 0x433d1e
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0x70]
test ecx, ecx
js 0x433d27
call fcn.00408a20
test al, al
je 0x433d27
mov byte [ebp - 0xc8], 1
jmp 0x433d2e
mov byte [ebp - 0xc8], 0
mov edx, 1
xor ecx, ecx
call fcn.00411120
xorps xmm5, xmm5
comiss xmm0, xmm5
jbe 0x433d57
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0x64]
test ecx, ecx
js 0x433d70
call fcn.00408a20
test al, al
je 0x433d70
mov edx, 1
lea ecx, [edx + 1]
call fcn.00411120
comiss xmm0, xmm5
mov byte [ebp - 0x124], 0
jbe 0x433d77
mov byte [ebp - 0x124], 1
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0x6c]
test ecx, ecx
js 0x433d8c
call fcn.00408a20
test al, al
jne 0x433da6
mov eax, 1
mov edx, eax
mov ecx, eax
call fcn.00411120
comiss xmm0, xmm5
mov byte [ebp - 0x121], 0
jbe 0x433dad
mov byte [ebp - 0x121], 1
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0x38]
test ecx, ecx
js 0x433dfe
call fcn.00408a20
test al, al
je 0x433dfe
cmp byte [ebp - 0xc5], 0
je 0x433dd2
mov eax, 0x200004
jmp 0x433de6
mov eax, 0x200000
mov ecx, 0x20000c
cmp byte [ebp - 0xb8], 0
cmovne eax, ecx
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
or ecx, eax
push ecx
mov ecx, edi
call fcn.00431210
jmp 0x43454b
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
js 0x433e2d
call fcn.00408a20
test al, al
je 0x433e2d
cmp byte [ebp - 0xc5], 0
je 0x433e23
mov eax, 0x200005
jmp 0x433de6
mov eax, 0x200001
lea ecx, [eax + 0xc]
jmp 0x433ddc
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0x40]
test ecx, ecx
js 0x433ea7
call fcn.00408a20
test al, al
je 0x433ea7
cmp byte [ebp - 0xd4], 0
je 0x433ea7
cmp byte [esi + 0xfc], 0
je 0x433e83
mov edx, dword [ebp - 0x11c]
movss xmm0, dword [edx + 0x5c]
subss xmm0, dword [esi + 0x1944]
mov dword [edx + 0x74], 0
mov dword [edx + 0x7c], 0
maxss xmm0, xmm5
movss dword [edx + 0x6c], xmm0
jmp 0x43455f
movzx eax, byte [ebp - 0xc5]
lea edx, [edi + 0x3c]
mov ecx, edi
lea eax, [eax*4 + 0x200002]
or eax, dword [ebp - 0xcc]
push eax
call fcn.00431210
jmp 0x43454b
mov ecx, dword [0x44a678]
mov ecx, dword [ecx + 0x44]
test ecx, ecx
js 0x433f2e
call fcn.00408a20
test al, al
je 0x433f2e
cmp byte [ebp - 0xd4], 0
je 0x433f2e
cmp byte [esi + 0xfc], 0
je 0x433f0a
mov ecx, dword [ebp - 0x11c]
movss xmm0, dword [esi + 0x1944]
mov eax, dword [0x44a678]
addss xmm0, dword [ecx + 0x5c]
mov eax, dword [eax + 0x1ba8]
minss xmm0, dword [eax + 0x64]
mov dword [ecx + 0x74], 0
mov dword [ecx + 0x7c], 0
movss dword [ecx + 0x6c], xmm0
jmp 0x43455f
movzx eax, byte [ebp - 0xc5]
lea edx, [edi + 0x3c]
mov ecx, edi
lea eax, [eax*4 + 0x200003]
or eax, dword [ebp - 0xcc]
push eax
call fcn.00431210
jmp 0x43454b
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0x48]
test ecx, ecx
js 0x433fa0
call fcn.00408a20
test al, al
je 0x433fa0
cmp byte [ebp - 0xd4], 0
je 0x433fa0
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
or ecx, 0x20000e
push ecx
mov ecx, edi
call fcn.00431210
movd xmm0, dword [ebp - 0xc4]
movss xmm1, dword [ebp - 0x15c]
cvtdq2ps xmm0, xmm0
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mulss xmm0, dword [esi + 0x1944]
subss xmm1, xmm0
movss dword [ebp - 0x15c], xmm1
jmp 0x43455c
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
js 0x43400e
call fcn.00408a20
test al, al
je 0x43400e
cmp byte [ebp - 0xd4], 0
je 0x43400e
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
or ecx, 0x20000f
push ecx
mov ecx, edi
call fcn.00431210
movd xmm0, dword [ebp - 0xc4]
cvtdq2ps xmm0, xmm0
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mulss xmm0, dword [esi + 0x1944]
addss xmm0, dword [ebp - 0x15c]
movss dword [ebp - 0x15c], xmm0
jmp 0x43455c
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0x50]
test ecx, ecx
js 0x434050
call fcn.00408a20
test al, al
je 0x434050
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
mov eax, ecx
or ecx, 0x200004
or eax, 0x200006
cmp byte [esi + 0xfc], 0
cmovne ecx, eax
push ecx
mov ecx, edi
call fcn.00431210
jmp 0x43454b
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0x54]
test ecx, ecx
js 0x434092
call fcn.00408a20
test al, al
je 0x434092
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
mov eax, ecx
or ecx, 0x200005
or eax, 0x200007
cmp byte [esi + 0xfc], 0
cmovne ecx, eax
push ecx
mov ecx, edi
call fcn.00431210
jmp 0x43454b
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0x5c]
test ecx, ecx
js 0x4340cc
call fcn.00408a20
test al, al
je 0x4340cc
cmp byte [ebp - 0xe4], 0
jne 0x4340cc
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
or ecx, 0x200008
push ecx
mov ecx, edi
call fcn.00431210
jmp 0x43454b
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0x60]
test ecx, ecx
js 0x43416d
call fcn.00408a20
test al, al
je 0x43416d
cmp byte [ebp - 0xe4], 0
jne 0x43416d
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x434151
cmp byte [ebp - 0xb8], 0
je 0x43410a
push 0x60000c
jmp 0x434133
cmp byte [ebp - 0x12d], 0
je 0x434151
cmp byte [esi + 0xff], 0
je 0x434151
cmp byte [esi + 0xfe], 0
jne 0x434151
cmp byte [esi + 0xfc], 0
jne 0x434151
push 0x600004
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00431210
mov dword [edi + 0xe68], 0xbe99999a
add esp, 4
mov byte [edi + 0xe6c], 1
mov ecx, dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
or ecx, 0x200009
push ecx
mov ecx, edi
call fcn.00431210
jmp 0x43454b
cmp byte [ebp - 0xc8], 0
je 0x4341e4
mov edx, dword [ebx + 0x14]
mov eax, edx
shr eax, 0xb
and al, 1
cmp byte [ebp - 0xd4], 0
je 0x4341ed
mov cl, byte [esi + 0xfc]
test al, al
je 0x434199
test cl, cl
je 0x4341ed
jmp 0x43419d
test cl, cl
jne 0x4341ed
cmp byte [ebp - 0xe4], 0
jne 0x43455f
push 2
sub esp, 8
mov dword [ebp - 0xc4], 0xa
lea ecx, [ebp - 0xc4]
call fcn.00432350
add esp, 0xc
test al, al
je 0x43455f
push dword [ebp - 0xc4]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00431210
jmp 0x43454b
cmp byte [ebp - 0x124], 0
je 0x434200
mov byte [ebp - 0xcd], 1
mov byte [ebp - 0xb6], 1
jmp 0x43455f
cmp byte [ebp - 0x121], 0
je 0x434216
mov cl, 1
mov byte [ebp - 0xcd], cl
jmp 0x434565
mov al, byte [ebp - 0x122]
test al, al
jne 0x43452c
cmp byte [ebp - 0x101], al
jne 0x43452c
cmp byte [ebp - 0xb7], al
je 0x43426d
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0x74]
test ecx, ecx
js 0x43426d
call fcn.00408a20
test al, al
je 0x43426d
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov byte [edi + 0xe6c], 1
jmp 0x43455f
mov al, byte [ebp - 0xc6]
test al, al
jne 0x43441d
cmp byte [ebp - 0x123], al
jne 0x43441d
cmp byte [ebp - 0xed], al
je 0x43455f
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0xd0]
test ecx, ecx
je 0x4342b8
push dword [eax + 0xd8]
call ecx
mov esi, eax
add esp, 4
test esi, esi
jne 0x4342bd
jmp 0x43455f
mov esi, 0x43f2ee
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4342c2
mov eax, dword [0x44a678]
sub ecx, edx
test eax, eax
je 0x4342da
inc dword [eax + 0x36c]
lea eax, [ecx*2 + 2]
push eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
call eax
add esp, 4
mov dword [ebp - 0xfc], eax
cmp byte [esi], 0
mov dword [ebp - 0xc4], 0
je 0x434363
xor edi, edi
push 0
mov edx, esi
lea ecx, [ebp - 0xc0]
call fcn.004030a0
add esp, 4
add esi, eax
cmp dword [ebp - 0xc0], 0
je 0x434351
mov edx, dword [ebx + 0x14]
lea ecx, [ebp - 0xc0]
push 5
sub esp, 8
call fcn.00432350
add esp, 0xc
test al, al
je 0x43434c
mov ecx, dword [ebp - 0xfc]
mov ax, word [ebp - 0xc0]
mov word [ecx + edi*2], ax
inc edi
cmp byte [esi], 0
jne 0x434303
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0xc4], edi
mov edi, dword [ebp - 0x10c]
mov esi, dword [ebp - 0xc4]
xor ecx, ecx
mov word [eax + esi*2], cx
test esi, esi
jle 0x4343fc
mov edx, dword [edi + 0x44]
mov ecx, dword [edi + 4]
mov dword [ebp - 0xc4], edx
mov edx, dword [edi + 0x40]
cmp edx, dword [edi + 0x44]
je 0x4343ad
cmp edx, ecx
jle 0x434394
mov dword [edi + 0x40], ecx
mov edx, ecx
cmp dword [edi + 0x44], ecx
jle 0x4343a2
mov dword [edi + 0x44], ecx
mov dword [ebp - 0xc4], ecx
cmp edx, dword [ebp - 0xc4]
jne 0x4343ad
mov dword [edi + 0x3c], edx
cmp dword [edi + 0x3c], ecx
jle 0x4343b5
mov dword [edi + 0x3c], ecx
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00431180
mov edx, dword [edi + 0x3c]
mov ecx, edi
push esi
push dword [ebp - 0xfc]
call fcn.00430ce0
add esp, 8
test al, al
je 0x4343ef
mov edx, dword [edi + 0x3c]
lea ecx, [edi + 0x5c]
push esi
push 0
call fcn.00432060
add esp, 8
mov byte [edi + 0x52], 0
add dword [edi + 0x3c], esi
mov eax, dword [ebp - 0xfc]
mov byte [edi + 0xe6c], 1
test eax, eax
je 0x434410
mov ecx, dword [0x44a678]
test ecx, ecx
je 0x434410
dec dword [ecx + 0x36c]
push eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call eax
jmp 0x43455c
cmp dword [esi + 0xd4], 0
je 0x4344ed
mov ecx, dword [edi + 0x44]
mov eax, dword [edi + 0x40]
cmp eax, ecx
je 0x43443e
mov esi, ecx
cmovge ecx, eax
cmovl esi, eax
jmp 0x434443
mov ecx, dword [edi + 4]
xor esi, esi
mov eax, dword [edi + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0x128], esi
lea edx, [eax + ecx*2]
lea ecx, [eax + esi*2]
call fcn.00403330
mov ecx, dword [0x44a678]
inc eax
mov dword [ebp - 0xbc], eax
test ecx, ecx
je 0x434474
inc dword [ecx + 0x36c]
push eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
call eax
mov esi, dword [edi + 0x14]
add esp, 4
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xbc]
mov dword [ebp - 0xec], eax
lea ecx, [esi + ecx*2]
push ecx
mov ecx, dword [ebp - 0x128]
lea ecx, [esi + ecx*2]
mov esi, eax
push ecx
mov ecx, esi
call fcn.004032c0
mov eax, dword [0x44a678]
add esp, 8
mov ecx, dword [eax + 0xd4]
test ecx, ecx
je 0x4344ce
push esi
push dword [eax + 0xd8]
call ecx
mov eax, dword [0x44a678]
add esp, 8
test esi, esi
je 0x4344dc
test eax, eax
je 0x4344dc
dec dword [eax + 0x36c]
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
push esi
call eax
mov al, byte [ebp - 0xc6]
add esp, 4
test al, al
je 0x43455f
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x43450d
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov byte [edi + 0xe6c], 1
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x43455f
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00431180
mov byte [edi + 0x52], 0
jmp 0x43455f
movzx eax, al
lea edx, [edi + 0x3c]
xor eax, 1
mov ecx, edi
add eax, 0x20000a
push eax
call fcn.00431210
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x44], eax
mov dword [edi + 0x40], eax
mov dword [edi + 0xe68], 0xbe99999a
mov byte [edi + 0xe6c], 1
add esp, 4
mov cl, byte [ebp - 0xb5]
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x43457a
cmp byte [ebp - 0xc7], 0
je 0x43457a
mov al, 1
jmp 0x43457c
xor al, al
or byte [ebp - 0x108], al
mov esi, dword [ebp - 0xe8]
xor eax, eax
mov dword [ebp - 0x110], 0
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xd8]
cmp dword [esi + 0x1be0], eax
jne 0x434d9e
test cl, cl
je 0x434855
cmp byte [ebp - 0xe4], 0
jne 0x43483d
mov ecx, dword [edi + 0x2c]
mov eax, dword [ebp - 0xdc]
nop word [eax + eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4345f0
test dl, dl
je 0x4345ec
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4345f0
add eax, 2
add ecx, 2
test dl, dl
jne 0x4345d0
xor eax, eax
jmp 0x4345f5
sbb eax, eax
or eax, 1
test eax, eax
je 0x43483d
mov eax, dword [edi + 0x24]
xor edx, edx
mov ecx, dword [edi + 0x2c]
dec eax
mov dword [ebp - 0x110], ecx
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x13c], edx
mov dword [ebp - 0x134], edx
mov dword [ebp - 4], edx
test eax, eax
jle 0x434782
lea edi, [eax + ecx]
mov esi, ecx
xor eax, eax
mov dword [ebp - 0xc0], eax
test edi, edi
je 0x434648
cmp esi, edi
jae 0x434672
cmp byte [esi], 0
je 0x434672
push edi
mov edx, esi
lea ecx, [ebp - 0xbc]
call fcn.004030a0
add esi, eax
add esp, 4
cmp dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xc0]
je 0x434672
inc eax
jmp 0x43463a
mov edi, dword [ebp - 0x10c]
lea edx, [eax + 1]
mov esi, dword [ebp - 0xe8]
mov dword [ebp - 0xc4], edx
test edx, edx
jle 0x4346d5
mov ecx, 8
mov eax, edx
cmp edx, ecx
cmovl eax, ecx
mov dword [ebp - 0xbc], eax
test eax, eax
jle 0x4346d5
mov ecx, dword [0x44a678]
test ecx, ecx
je 0x4346b1
inc dword [ecx + 0x36c]
add eax, eax
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ecx, dword [ebp - 0xbc]
add esp, 4
mov edx, dword [ebp - 0xc4]
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x138], ecx
mov eax, dword [ebp - 0x110]
mov ecx, dword [ebp - 0x110]
add ecx, dword [ebp - 0xcc]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0xec], ecx
mov dword [ebp - 0x13c], edx
mov dword [ebp - 0xc0], eax
lea ecx, [eax - 2]
lea ecx, [ecx + edx*2]
mov dword [ebp - 0x128], ecx
cmp eax, ecx
jae 0x434777
mov esi, dword [ebp - 0xbc]
mov edi, dword [ebp - 0xec]
test edi, edi
je 0x434729
cmp esi, edi
jae 0x434765
cmp byte [esi], 0
je 0x434765
push edi
mov edx, esi
lea ecx, [ebp - 0xbc]
call fcn.004030a0
mov ecx, dword [ebp - 0xbc]
add esi, eax
mov eax, dword [ebp - 0xc0]
add esp, 4
test ecx, ecx
je 0x434765
mov word [eax], cx
add eax, 2
mov dword [ebp - 0xc0], eax
cmp eax, dword [ebp - 0x128]
jb 0x434721
mov edi, dword [ebp - 0x10c]
mov esi, dword [ebp - 0xe8]
mov edx, dword [ebp - 0xc4]
xor ecx, ecx
mov word [eax], cx
mov eax, dword [ebp - 0xcc]
lea ecx, [edx - 1]
xor edx, edx
test eax, eax
mov eax, dword [edi + 4]
mov dword [ebp - 0xbc], eax
cmovle ecx, edx
push ecx
mov dword [ebp - 0xc4], ecx
lea ecx, [edi + 0x5c]
push eax
call fcn.00432060
add esp, 8
mov dword [ebp - 0xec], eax
test eax, eax
je 0x4347d6
mov edx, dword [ebp - 0xbc]
xor ecx, ecx
test edx, edx
jle 0x4347d6
mov esi, eax
mov eax, dword [edi + 0x14]
mov ax, word [eax + ecx*2]
mov word [esi + ecx*2], ax
inc ecx
cmp ecx, edx
jl 0x4347c0
mov esi, dword [ebp - 0xe8]
push dword [edi + 4]
xor edx, edx
mov ecx, edi
call fcn.00430c80
mov eax, dword [ebp - 0xc4]
add esp, 4
test eax, eax
jle 0x434813
push eax
push dword [ebp - 0x134]
xor edx, edx
mov ecx, edi
call fcn.00430ce0
add esp, 8
test al, al
je 0x434813
mov eax, dword [ebp - 0xc4]
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov ecx, dword [ebp - 0x134]
test ecx, ecx
je 0x434836
mov eax, dword [0x44a678]
test eax, eax
je 0x43482c
dec dword [eax + 0x36c]
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0xb6], 0
mov eax, dword [ebx + 0x14]
je 0x434c92
test al, 0x20
je 0x434c92
cmp byte [ebp - 0xe4], 0
jne 0x4348c2
mov eax, dword [edi + 0xc]
lea ecx, [edi + 0x18]
mov byte [edi + 0x30], 1
lea edx, [eax*4 + 1]
mov eax, dword [ecx + 4]
mov dword [ebp - 0xc4], edx
cmp edx, eax
jle 0x4348b0
test eax, eax
je 0x434892
cdq
sub eax, edx
mov edx, dword [ebp - 0xc4]
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x1c]
jmp 0x434897
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [edi + 0x18]
push eax
call fcn.00415bd0
mov edx, dword [ebp - 0xc4]
lea ecx, [edi + 0x18]
mov dword [ecx], edx
mov ecx, dword [edi + 0x20]
push 0
push dword [edi + 0x14]
call fcn.004032c0
add esp, 8
mov edx, dword [ebx + 0x14]
test edx, 0x801c0
je 0x434c43
test dl, 0x40
je 0x4348fa
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0x34]
test ecx, ecx
js 0x4348fa
call fcn.00408a20
mov edx, dword [ebx + 0x14]
test al, al
je 0x4348fa
mov eax, 0x40
xor ecx, ecx
jmp 0x434972
test dl, dl
jns 0x434942
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0x40]
test ecx, ecx
js 0x434920
call fcn.00408a20
mov edx, dword [ebx + 0x14]
test al, al
je 0x434920
mov eax, 0x80
lea ecx, [eax - 0x7d]
jmp 0x434972
mov eax, dword [0x44a678]
mov ecx, dword [eax + 0x44]
test ecx, ecx
js 0x434942
call fcn.00408a20
mov edx, dword [ebx + 0x14]
test al, al
je 0x434942
mov eax, 0x80
lea ecx, [eax - 0x7c]
jmp 0x434972
test edx, 0x80000
je 0x43495a
cmp byte [edi + 0xe6e], 0
je 0x43495a
mov eax, 0x80000
jmp 0x43496d
test edx, 0x100
mov ecx, pe_nt_image_headers32
mov eax, 0
cmovne eax, ecx
mov ecx, 0x16
test eax, eax
je 0x434c43
xor esi, esi
mov dword [ebp - 0x84], eax
cmp byte [ebp - 0xe4], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x78], 0
mov word [ebp - 0x63], si
mov byte [ebp - 0x61], 0
mov dword [ebp - 0x80], edx
mov dword [ebp - 0x7c], esi
jne 0x4349a9
mov eax, dword [edi + 0x20]
mov esi, dword [edi + 0x14]
mov dword [ebp - 0x70], eax
mov eax, dword [edi + 8]
mov dword [ebp - 0x6c], eax
mov eax, dword [edi + 0x34]
mov dword [ebp - 0x68], eax
mov eax, dword [edi + 0x3c]
mov dword [ebp - 0x74], ecx
mov ecx, esi
mov byte [ebp - 0x64], 0
lea edx, [esi + eax*2]
call fcn.00403330
mov ecx, dword [ebp - 0x10c]
mov edi, eax
mov dword [ebp - 0x60], edi
mov ecx, dword [ecx + 0x40]
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.00403330
mov dword [ebp - 0xec], eax
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x10c]
mov ecx, dword [eax + 0x44]
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.00403330
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x84]
push eax
xor eax, eax
call eax
mov al, byte [ebp - 0x64]
add esp, 4
mov edx, dword [ebp - 0x60]
mov byte [ebp - 0xc6], al
cmp edx, edi
jne 0x434a2e
test al, al
je 0x434a89
mov esi, dword [ebp - 0x70]
xor eax, eax
lea edi, [edx + esi]
mov dword [ebp - 0xc0], eax
test edi, edi
je 0x434a44
cmp esi, edi
jae 0x434a6e
cmp byte [esi], 0
je 0x434a6e
push edi
mov edx, esi
lea ecx, [ebp - 0xbc]
call fcn.004030a0
add esi, eax
add esp, 4
cmp dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xc0]
je 0x434a6e
inc eax
jmp 0x434a36
mov edi, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x60]
mov dword [edi + 0x3c], eax
mov al, byte [ebp - 0xc6]
mov byte [edi + 0xe6c], 1
jmp 0x434a8f
mov edi, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x5c]
cmp ecx, dword [ebp - 0xec]
jne 0x434a9e
test al, al
je 0x434af3
cmp ecx, edx
jne 0x434aa7
mov eax, dword [edi + 0x3c]
jmp 0x434af0
mov esi, dword [ebp - 0x70]
xor eax, eax
lea edi, [ecx + esi]
mov dword [ebp - 0xc0], eax
test edi, edi
je 0x434abd
cmp esi, edi
jae 0x434ae7
cmp byte [esi], 0
je 0x434ae7
push edi
mov edx, esi
lea ecx, [ebp - 0xbc]
call fcn.004030a0
add esi, eax
add esp, 4
cmp dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xc0]
je 0x434ae7
inc eax
jmp 0x434aaf
mov ecx, dword [ebp - 0x5c]
mov edi, dword [ebp - 0x10c]
mov dword [edi + 0x40], eax
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0xc4]
jne 0x434b0b
cmp byte [ebp - 0xc6], 0
je 0x434c3d
cmp eax, ecx
jne 0x434b14
mov eax, dword [edi + 0x40]
jmp 0x434b5a
mov esi, dword [ebp - 0x70]
lea edi, [eax + esi]
xor eax, eax
mov dword [ebp - 0xc0], eax
test edi, edi
je 0x434b2a
cmp esi, edi
jae 0x434b54
cmp byte [esi], 0
je 0x434b54
push edi
mov edx, esi
lea ecx, [ebp - 0xbc]
call fcn.004030a0
add esi, eax
add esp, 4
cmp dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xc0]
je 0x434b54
inc eax
jmp 0x434b1c
mov edi, dword [ebp - 0x10c]
cmp byte [ebp - 0xc6], 0
mov dword [edi + 0x44], eax
je 0x434c3d
mov esi, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0xf8]
cmp esi, ecx
jle 0x434bb9
cmp byte [ebp - 0x118], 0
je 0x434bb9
mov eax, dword [edi + 0x10]
sub esi, ecx
add esi, dword [edi + 0xc]
cmp esi, eax
jle 0x434bb6
test eax, eax
je 0x434b9f
cdq
sub eax, edx
lea edx, [edi + 0xc]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x434ba7
mov ecx, 8
lea edx, [edi + 0xc]
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.00415ca0
mov dword [edi + 0xc], esi
mov eax, dword [ebp - 0x70]
mov ecx, dword [edi + 0x14]
mov esi, ecx
mov dword [ebp - 0xbc], eax
mov eax, dword [edi + 0xc]
dec eax
mov dword [ebp - 0xc4], ecx
lea eax, [ecx + eax*2]
mov dword [ebp - 0xec], eax
cmp ecx, eax
jae 0x434c21
mov edi, dword [ebp - 0xbc]
cmp byte [edi], 0
je 0x434c15
push 0
mov edx, edi
lea ecx, [ebp - 0xbc]
call fcn.004030a0
add edi, eax
add esp, 4
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x434c15
mov word [esi], ax
add esi, 2
cmp esi, dword [ebp - 0xec]
jb 0x434be4
mov edi, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0xc4]
xor eax, eax
mov word [esi], ax
sub esi, ecx
mov eax, dword [ebp - 0x6c]
sar esi, 1
mov dword [edi + 4], esi
mov dword [edi + 8], eax
mov dword [edi + 0xe68], 0xbe99999a
mov esi, dword [ebp - 0xe8]
cmp byte [ebp - 0xe4], 0
jne 0x434c8f
mov ecx, dword [ebp - 0xdc]
mov eax, dword [edi + 0x20]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x434c75
test dl, dl
je 0x434c71
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x434c75
add eax, 2
add ecx, 2
test dl, dl
jne 0x434c55
xor eax, eax
jmp 0x434c7a
sbb eax, eax
or eax, 1
test eax, eax
mov eax, dword [ebx + 0x14]
je 0x434c92
mov ecx, dword [edi + 0x20]
mov dword [ebp - 0x110], ecx
mov ecx, dword [edi + 8]
jmp 0x434c98
mov eax, dword [ebx + 0x14]
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ebp - 0x110]
mov dword [edi + 0xe70], 0
test edx, edx
je 0x434d98
cmp byte [ebp - 0x118], 0
je 0x434d51
mov dword [ebp - 0xb0], eax
xorps xmm0, xmm0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xa0], eax
lea eax, [ecx + 1]
mov dword [ebp - 0x9c], ecx
mov ecx, 0x40
cmp eax, ecx
movlpd qword [ebp - 0xa8], xmm0
movlpd qword [ebp - 0x94], xmm0
cmovle eax, ecx
movlpd qword [ebp - 0x8c], xmm0
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0xb4]
push eax
xor eax, eax
mov dword [ebp - 0xb4], 0x40000
mov dword [ebp - 0xac], 0
call eax
mov ecx, dword [ebp - 0x98]
add esp, 4
mov eax, dword [ebp - 0xa0]
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0x114], ecx
dec ecx
cmp dword [ebp - 0x9c], ecx
mov dword [ebp - 0xdc], eax
cmovl ecx, dword [ebp - 0x9c]
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x114]
cmp eax, ecx
cmovl ecx, eax
mov dword [ebp - 0x114], ecx
cmp ecx, 1
jb 0x434d91
jbe 0x434d86
lea eax, [ecx - 1]
push eax
push edx
push dword [ebp - 0xdc]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov ecx, dword [ebp - 0x114]
add esp, 0xc
mov eax, dword [ebp - 0xdc]
mov byte [ecx + eax - 1], 0
mov byte [ebp - 0xdd], 1
mov eax, dword [ebp - 0xd8]
cmp byte [ebp - 0xcd], 0
je 0x434db4
cmp dword [esi + 0x1be0], eax
jne 0x434db4
call fcn.004049b0
mov edx, dword [ebp - 0xd4]
test dl, dl
jne 0x434e89
mov edx, dword [ebp - 0xd8]
lea ecx, [ebp - 0x54]
push 1
call fcn.00403c30
movss xmm1, dword [0x446eb8]
add esp, 4
mov ecx, 7
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call fcn.004035b0
movss xmm2, dword [esi + 0x156c]
mov dl, 1
mov ecx, eax
call fcn.00403b10
movss xmm4, dword [ebp - 0x54]
add esp, 0x10
movss xmm2, dword [ebp - 0x50]
movaps xmm0, xmm4
addss xmm0, dword [esi + 0x1564]
mov edx, dword [ebp - 0xd4]
movaps xmm3, xmm4
addss xmm3, dword [ebp - 0x154]
movaps xmm1, xmm2
movss dword [ebp - 0x44], xmm4
addss xmm1, dword [ebp - 0x144]
movss dword [ebp - 0x138], xmm0
movaps xmm0, xmm2
addss xmm0, dword [esi + 0x1568]
movss dword [ebp - 0xbc], xmm3
movss dword [ebp - 0x3c], xmm3
movss dword [ebp - 0xc0], xmm3
movss xmm3, dword [ebp - 0x154]
movss dword [ebp - 0x40], xmm2
movss dword [ebp - 0x100], xmm1
movss dword [ebp - 0x38], xmm1
movss dword [ebp - 0x134], xmm0
jmp 0x434efd
movss xmm1, dword [ebp - 0x54]
movss xmm3, dword [ebp - 0x154]
movaps xmm2, xmm1
movss xmm0, dword [ebp - 0x50]
addss xmm2, xmm3
mov ecx, dword [ebp - 0x11c]
movss dword [ebp - 0x44], xmm1
movss dword [ebp - 0x40], xmm0
mov eax, dword [ecx + 0xd0]
movaps xmm1, xmm2
mov ecx, dword [ecx + 0xd4]
movss dword [ebp - 0xbc], xmm1
movss dword [ebp - 0x3c], xmm1
movaps xmm1, xmm0
addss xmm1, dword [ebp - 0x144]
movss dword [ebp - 0xc0], xmm2
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], ecx
movaps xmm0, xmm1
movss dword [ebp - 0x100], xmm0
movss dword [ebp - 0x38], xmm0
cmp byte [ebp - 0xee], 0
lea eax, [ebp - 0x138]
movss xmm0, dword [eax]
xorps xmm5, xmm5
movss dword [ebp - 0x120], xmm0
xorps xmm6, xmm6
movss dword [ebp - 0x34], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x30], xmm0
xorps xmm0, xmm0
mov dword [ebp - 0xf4], eax
movss dword [ebp - 0xf8], xmm1
movss dword [ebp - 0x128], xmm0
movss dword [ebp - 0xc4], xmm5
je 0x434f59
mov ecx, dword [edi + 0x20]
mov dword [ebp - 0xdc], ecx
jmp 0x434f5f
mov ecx, dword [ebp - 0xdc]
cmp byte [ebp - 0xc7], 0
jne 0x435199
cmp byte [ebp - 0x108], 0
jne 0x435199
test dl, dl
je 0x434fdf
mov eax, dword [ebp - 0xdc]
xor ecx, ecx
mov dl, byte [eax]
lea edi, [eax + 1]
test dl, dl
je 0x434fa2
nop
cmp dl, 0xa
lea eax, [ecx + 1]
mov dl, byte [edi]
cmovne eax, ecx
inc edi
mov ecx, eax
test dl, dl
jne 0x434f90
mov al, byte [edi - 1]
dec edi
mov dword [ebp - 0xcc], edi
cmp al, 0xa
je 0x434fb5
cmp al, 0xd
je 0x434fb5
inc ecx
mov edx, dword [ebp - 0xcc]
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [esi + 0x1944]
movss dword [ebp - 0xc4], xmm0
movaps xmm0, xmm3
movss dword [ebp - 0x128], xmm0
jmp 0x435023
mov eax, dword [ebp - 0xd8]
cmp dword [esi + 0x1be0], eax
jne 0x434ff4
mov edx, dword [edi + 8]
add edx, ecx
jmp 0x43500e
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x434ff7
sub ecx, edx
mov edx, dword [ebp - 0xdc]
add edx, ecx
mov ecx, dword [ebp - 0xdc]
mov eax, edx
mov dword [ebp - 0xcc], edx
sub eax, ecx
cmp eax, 0x200000
jge 0x435d52
movss xmm1, dword [0x446eb8]
xor ecx, ecx
call fcn.004035b0
cmp byte [ebp - 0xd4], 0
mov ecx, edx
movss xmm2, dword [esi + 0x1944]
lea edx, [ebp - 0x44]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0xbc], 0
cmovne edx, dword [ebp - 0xbc]
test dword [ebp - 0xc0], 0xff000000
mov edi, dword [eax + 0x23c]
mov eax, dword [esi + 0x1940]
mov dword [ebp - 0xf8], eax
je 0x435d52
cmp dword [ebp - 0xcc], 0
jne 0x4350b9
mov ecx, dword [ebp - 0xdc]
lea eax, [ecx + 1]
mov dword [ebp - 0xbc], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4350a0
sub ecx, dword [ebp - 0xbc]
add ecx, dword [ebp - 0xdc]
mov eax, dword [esi + 0x1940]
cmp dword [ebp - 0xdc], ecx
je 0x435d52
test eax, eax
jne 0x4350d5
mov eax, dword [edi + 0x2c]
mov eax, dword [eax + 8]
mov dword [ebp - 0xf8], eax
ucomiss xmm2, dword [0x446e34]
lahf
test ah, 0x44
jp 0x4350ea
mov eax, dword [edi + 0x2c]
movss xmm2, dword [eax + 0xc]
movups xmm0, xmmword [edi + 0x60]
movups xmmword [ebp - 0x150], xmm0
test edx, edx
je 0x435158
movss xmm1, dword [edx]
movss xmm0, dword [ebp - 0x150]
comiss xmm0, xmm1
jae 0x435112
movss dword [ebp - 0x150], xmm1
movss xmm1, dword [edx + 4]
movss xmm0, dword [ebp - 0x14c]
comiss xmm0, xmm1
jae 0x43512c
movss dword [ebp - 0x14c], xmm1
movss xmm0, dword [edx + 8]
comiss xmm0, dword [ebp - 0x148]
ja 0x435142
movss dword [ebp - 0x148], xmm0
movss xmm0, dword [edx + 0xc]
comiss xmm0, dword [ebp - 0x144]
ja 0x435158
movss dword [ebp - 0x144], xmm0
mov eax, dword [ebp - 0xf4]
test edx, edx
push dword [eax + 4]
push dword [eax]
setne al
movzx eax, al
push eax
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x150]
push ecx
push dword [ebp - 0xdc]
mov ecx, dword [ebp - 0xf8]
push eax
push dword [ebp - 0xc0]
push edi
call fcn.00424940
jmp 0x435d52
mov eax, dword [edi + 8]
xor edx, edx
add eax, ecx
movss dword [ebp - 0xec], xmm6
xorps xmm7, xmm7
mov ecx, dword [edi + 0x14]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xd8], ecx
mov dword [ebp - 0x114], 0
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0x118], 0xfffffc18
mov dword [ebp - 0x110], 0xfffffc18
cmp byte [ebp - 0xc7], dl
je 0x435205
mov eax, dword [edi + 0x3c]
mov edx, 1
mov dword [ebp - 0x118], 0xffffffff
lea eax, [ecx + eax*2]
mov dword [ebp - 0x114], eax
cmp byte [ebp - 0x108], 0
je 0x435238
mov ecx, dword [edi + 0x44]
cmp dword [edi + 0x40], ecx
mov eax, dword [ebp - 0xd8]
cmovl ecx, dword [edi + 0x40]
inc edx
mov dword [ebp - 0x110], 0xffffffff
lea eax, [eax + ecx*2]
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0xfc], eax
mov esi, dword [ebp - 0xd8]
mov eax, dword [ebp - 0xd4]
movzx eax, al
add edx, eax
xor eax, eax
movzx esi, word [esi]
test si, si
mov esi, dword [ebp - 0xe8]
je 0x4352dd
mov esi, dword [ebp - 0xd8]
mov edi, dword [ebp - 0x118]
movzx eax, word [esi]
xor esi, esi
nop
cmp ax, 0xa
jne 0x4352ab
inc esi
cmp edi, 0xffffffff
jne 0x43528f
cmp ecx, dword [ebp - 0x114]
jb 0x43528f
dec edx
mov dword [ebp - 0x118], esi
test edx, edx
jle 0x4352c5
cmp dword [ebp - 0x110], 0xffffffff
jne 0x4352ab
cmp ecx, dword [ebp - 0xfc]
jb 0x4352ab
dec edx
mov dword [ebp - 0x110], esi
test edx, edx
jle 0x4352c5
movzx eax, word [ecx + 2]
add ecx, 2
mov edi, eax
mov dword [ebp - 0xf4], edi
mov edi, dword [ebp - 0x118]
test ax, ax
jne 0x435270
mov edi, dword [ebp - 0x10c]
mov dword [ebp - 0xf4], esi
mov esi, dword [ebp - 0xe8]
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0x110]
inc eax
cmp dword [ebp - 0x118], 0xffffffff
mov edx, eax
mov dword [ebp - 0xf4], eax
cmovne edx, dword [ebp - 0x118]
cmp ecx, 0xffffffff
mov dword [ebp - 0x12c], edx
mov edx, dword [ebp - 0xd8]
cmove ecx, eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x110], ecx
mov ecx, eax
cmp eax, edx
jbe 0x43532e
nop
cmp word [ecx - 2], 0xa
je 0x43532e
add ecx, 0xfffffffe
cmp ecx, edx
ja 0x435320
movaps xmm1, xmm6
mov eax, dword [0x44a678]
movaps xmm3, xmm6
mov edx, dword [eax + 0x1940]
movss xmm2, dword [eax + 0x1944]
divss xmm2, dword [edx + 0x10]
cmp ecx, dword [ebp - 0x114]
jae 0x4353a8
mov edi, dword [ebp - 0x114]
mov esi, edx
nop dword [eax]
movzx eax, word [ecx]
add ecx, 2
mov edx, eax
cmp eax, 0xa
jne 0x435376
maxss xmm1, xmm3
movaps xmm3, xmm6
jmp 0x435398
cmp edx, 0xd
je 0x435398
mov edx, eax
cmp edx, dword [esi]
jge 0x43538b
mov eax, dword [esi + 8]
movss xmm0, dword [eax + edx*4]
jmp 0x435390
movss xmm0, dword [esi + 0xc]
mulss xmm0, xmm2
addss xmm3, xmm0
cmp ecx, edi
jb 0x435360
mov edi, dword [ebp - 0x10c]
mov esi, dword [ebp - 0xe8]
cmp dword [ebp - 0x110], 0
maxss xmm3, xmm1
movd xmm4, dword [ebp - 0x12c]
movss xmm0, dword [esi + 0x1944]
cvtdq2ps xmm4, xmm4
movss dword [ebp - 0x118], xmm3
mulss xmm4, xmm0
movss dword [ebp - 0x134], xmm4
jl 0x4354a3
mov eax, dword [ebp - 0xfc]
mov ecx, eax
mov edx, dword [ebp - 0xd8]
cmp eax, edx
jbe 0x435400
cmp word [ecx - 2], 0xa
je 0x435400
add ecx, 0xfffffffe
cmp ecx, edx
ja 0x4353f2
movaps xmm1, xmm6
mov eax, dword [0x44a678]
movaps xmm7, xmm6
mov edx, dword [eax + 0x1940]
movss xmm2, dword [eax + 0x1944]
divss xmm2, dword [edx + 0x10]
cmp ecx, dword [ebp - 0xfc]
jae 0x435478
mov esi, dword [ebp - 0xfc]
mov edi, edx
nop
movzx eax, word [ecx]
add ecx, 2
mov edx, eax
cmp eax, 0xa
jne 0x435446
maxss xmm1, xmm7
movaps xmm7, xmm6
jmp 0x435468
cmp edx, 0xd
je 0x435468
mov edx, eax
cmp edx, dword [edi]
jge 0x43545b
mov eax, dword [edi + 8]
movss xmm0, dword [eax + edx*4]
jmp 0x435460
movss xmm0, dword [edi + 0xc]
mulss xmm0, xmm2
addss xmm7, xmm0
cmp ecx, esi
jb 0x435430
mov edi, dword [ebp - 0x10c]
mov esi, dword [ebp - 0xe8]
movd xmm3, dword [ebp - 0x110]
maxss xmm7, xmm1
movss xmm0, dword [esi + 0x1944]
cvtdq2ps xmm3, xmm3
mulss xmm3, xmm0
movss dword [ebp - 0xec], xmm3
movss xmm3, dword [ebp - 0x118]
mov ecx, dword [ebp - 0xd4]
movss xmm1, dword [ebp - 0x154]
test cl, cl
je 0x4354d7
movd xmm5, dword [ebp - 0xf4]
cvtdq2ps xmm5, xmm5
mulss xmm5, xmm0
movaps xmm0, xmm1
movss dword [ebp - 0x128], xmm0
movss dword [ebp - 0xc4], xmm5
cmp byte [ebp - 0xc7], 0
je 0x4355fe
cmp byte [edi + 0xe6c], 0
je 0x4355fe
test dword [ebx + 0x14], 0x1000
jne 0x435552
movss xmm2, dword [edi + 0x38]
movaps xmm0, xmm1
comiss xmm2, xmm3
subss xmm1, dword [esi + 0x1564]
mulss xmm0, dword [0x446e6c]
movss dword [ebp - 0x154], xmm1
movaps xmm1, xmm3
jbe 0x43552f
subss xmm1, xmm0
movaps xmm0, xmm6
maxss xmm0, xmm1
jmp 0x435540
subss xmm1, dword [ebp - 0x154]
comiss xmm1, xmm2
jb 0x435559
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x38], xmm0
jmp 0x435559
mov dword [edi + 0x38], 0
test cl, cl
je 0x4355ea
movss xmm2, dword [ebp - 0x15c]
movaps xmm0, xmm4
subss xmm0, dword [esi + 0x1944]
movss xmm3, dword [ebp - 0x144]
comiss xmm2, xmm0
jbe 0x43558a
movaps xmm2, xmm6
maxss xmm2, xmm0
jmp 0x4355a6
movaps xmm0, xmm4
subss xmm0, xmm3
comiss xmm0, xmm2
jb 0x4355a6
movss xmm2, dword [esi + 0x1568]
addss xmm2, xmm2
addss xmm2, xmm0
comiss xmm6, xmm2
movss xmm1, dword [esi + 0x1568]
jbe 0x4355b8
movaps xmm1, xmm6
jmp 0x4355cc
addss xmm1, xmm1
addss xmm1, xmm5
subss xmm1, xmm3
maxss xmm1, xmm6
minss xmm1, xmm2
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [eax + 0x5c]
subss xmm0, xmm1
addss xmm0, dword [ebp - 0x30]
movss dword [ebp - 0x30], xmm0
movss dword [eax + 0x5c], xmm1
mov byte [edi + 0xe6c], 0
movss xmm0, dword [ebp - 0x34]
movss dword [ebp - 0x120], xmm0
cmp byte [ebp - 0x108], 0
movss xmm5, dword [edi + 0x38]
movss dword [ebp - 0xfc], xmm5
je 0x43590d
mov edx, dword [edi + 0x44]
mov eax, edx
mov ecx, dword [edi + 0x40]
cmp ecx, edx
mov esi, dword [ebp - 0xd8]
cmovl eax, ecx
cmovge edx, ecx
cmp byte [ebp - 0xc7], 0
lea esi, [esi + eax*2]
mov eax, dword [ebp - 0xd8]
lea edx, [eax + edx*2]
mov dword [ebp - 0x108], edx
je 0x435653
movss xmm1, dword [0x446eb8]
jmp 0x43565b
movss xmm1, dword [0x446e84]
mov ecx, 0x2f
call fcn.004035b0
cmp byte [ebp - 0xd4], 0
xorps xmm0, xmm0
mov dword [ebp - 0x12c], eax
je 0x43567f
xorps xmm5, xmm5
xorps xmm6, xmm6
jmp 0x43568f
movss xmm5, dword [0x446f78]
movss xmm6, dword [0x446ee8]
movss xmm3, dword [ebp - 0x30]
movss xmm4, dword [ebp - 0x120]
movss dword [ebp - 0x114], xmm6
addss xmm7, xmm4
movss dword [ebp - 0xf4], xmm5
addss xmm3, dword [ebp - 0xec]
subss xmm7, dword [ebp - 0xfc]
subss xmm3, xmm0
movss dword [ebp - 0xec], xmm3
cmp esi, edx
jae 0x435960
movss xmm4, dword [ebp - 0x100]
mov ecx, dword [ebp - 0xe8]
mov edi, dword [ebp - 0x12c]
nop dword [eax + eax]
movaps xmm0, xmm4
addss xmm0, dword [ecx + 0x1944]
comiss xmm3, xmm0
ja 0x4358f6
movss xmm0, dword [ebp - 0x50]
comiss xmm0, xmm3
jbe 0x43572f
cmp esi, edx
jae 0x4358be
mov ax, word [esi]
add esi, 2
cmp ax, 0xa
je 0x4358be
cmp esi, edx
jb 0x435716
jmp 0x4358be
xorps xmm0, xmm0
mov eax, dword [0x44a678]
xorps xmm4, xmm4
xorps xmm1, xmm1
mov edx, dword [eax + 0x1940]
movss xmm2, dword [eax + 0x1944]
divss xmm2, dword [edx + 0x10]
cmp esi, dword [ebp - 0x108]
jae 0x4357a2
movzx eax, word [esi]
add esi, 2
mov ecx, eax
cmp eax, 0xa
je 0x43578f
cmp ecx, 0xd
je 0x435785
cmp ecx, dword [edx]
jge 0x435778
mov eax, dword [edx + 8]
movss xmm0, dword [eax + ecx*4]
jmp 0x43577d
movss xmm0, dword [edx + 0xc]
mulss xmm0, xmm2
addss xmm1, xmm0
cmp esi, dword [ebp - 0x108]
jb 0x435758
jmp 0x435799
xorps xmm4, xmm4
maxss xmm4, xmm1
xorps xmm1, xmm1
mov ecx, dword [ebp - 0xe8]
xorps xmm0, xmm0
maxss xmm1, xmm4
comiss xmm0, xmm1
jb 0x4357db
mov eax, dword [ecx + 0x1940]
cmp dword [eax], 0x20
jle 0x4357c3
mov eax, dword [eax + 8]
movss xmm0, dword [eax + 0x80]
jmp 0x4357c8
movss xmm0, dword [eax + 0xc]
mulss xmm0, dword [0x446e80]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm4, dword [ebp - 0x100]
addss xmm1, xmm7
addss xmm7, dword [0x446e34]
movaps xmm2, xmm5
movaps xmm0, xmm6
subss xmm2, dword [ecx + 0x1944]
movss xmm6, dword [ebp - 0xbc]
addss xmm0, xmm3
minss xmm1, xmm6
maxss xmm7, dword [ebp - 0x54]
addss xmm2, xmm3
minss xmm0, xmm4
movss dword [ebp - 0x1c], xmm1
movss dword [ebp - 0x24], xmm7
maxss xmm2, dword [ebp - 0x50]
comiss xmm0, dword [ebp - 0x50]
movss dword [ebp - 0x20], xmm2
movss dword [ebp - 0x18], xmm0
jbe 0x4358b8
comiss xmm4, xmm2
jbe 0x4358b8
comiss xmm1, dword [ebp - 0x54]
jbe 0x4358b8
comiss xmm6, xmm7
jbe 0x4358b8
push 0
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x1c]
push edi
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x11c]
mov ecx, dword [eax + 0x23c]
call fcn.00420970
movss xmm0, dword [ebp - 0xc0]
movss xmm3, dword [ebp - 0x34]
movss xmm4, dword [ebp - 0x100]
mov ecx, dword [ebp - 0xe8]
movss dword [ebp - 0xc0], xmm0
movss xmm0, dword [ebp - 0xf8]
movss dword [ebp - 0x120], xmm3
movss xmm3, dword [ebp - 0xec]
movss dword [ebp - 0xf8], xmm0
mov edx, dword [ebp - 0x108]
movss xmm7, dword [ebp - 0x120]
movss xmm5, dword [ebp - 0xf4]
movss xmm6, dword [ebp - 0x114]
addss xmm3, dword [ecx + 0x1944]
subss xmm7, dword [ebp - 0xfc]
movss dword [ebp - 0xec], xmm3
cmp esi, edx
jb 0x4356f0
movss xmm5, dword [ebp - 0xfc]
xorps xmm6, xmm6
mov edi, dword [ebp - 0x10c]
mov esi, dword [ebp - 0xe8]
movss xmm4, dword [ebp - 0x120]
cmp byte [ebp - 0xd4], 0
mov edx, dword [ebp - 0xcc]
jne 0x435937
mov eax, edx
sub eax, dword [ebp - 0xdc]
cmp eax, 0x200000
jge 0x435b95
mov eax, dword [0x44a678]
movups xmm2, xmmword [eax + 0x15f0]
comiss xmm6, xmm2
movaps xmm1, xmm2
shufps xmm1, xmm2, 0xff
mulss xmm1, dword [eax + 0x1528]
movups xmmword [ebp - 0x24], xmm2
jbe 0x435973
movaps xmm0, xmm6
jmp 0x43597f
movss xmm5, dword [ebp - 0xfc]
xorps xmm6, xmm6
mov esi, dword [ebp - 0xe8]
jmp 0x435915
movss xmm0, dword [0x446eb8]
minss xmm0, xmm2
movss xmm2, dword [0x446f48]
movss xmm7, dword [0x446e80]
movss xmm3, dword [ebp - 0x20]
comiss xmm6, xmm3
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si ecx, xmm0
jbe 0x4359aa
movaps xmm0, xmm6
jmp 0x4359b6
movss xmm0, dword [0x446eb8]
minss xmm0, xmm3
movss xmm3, dword [ebp - 0x1c]
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm6, xmm3
jbe 0x4359d6
movaps xmm0, xmm6
jmp 0x4359e2
movss xmm0, dword [0x446eb8]
minss xmm0, xmm3
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm6, xmm1
jbe 0x4359fd
movaps xmm0, xmm6
jmp 0x435a09
movss xmm0, dword [0x446eb8]
minss xmm0, xmm1
mulss xmm0, xmm2
subss xmm4, xmm5
mov dword [ebp - 0x100], edx
mov edx, dword [esi + 0x1940]
movss xmm2, dword [esi + 0x1944]
addss xmm0, xmm7
mov dword [ebp - 0xbc], edx
lea edx, [ebp - 0x44]
mov dword [ebp - 0x12c], 0
movss dword [ebp - 0x148], xmm4
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x30]
shl eax, 0x18
subss xmm0, xmm6
or eax, ecx
mov ecx, dword [ebp - 0x11c]
cmp byte [ebp - 0xd4], 0
mov dword [ebp - 0xf4], eax
cmovne edx, dword [ebp - 0x12c]
mov ecx, dword [ecx + 0x23c]
mov dword [ebp - 0xec], ecx
movss dword [ebp - 0x144], xmm0
test eax, 0xff000000
je 0x435b95
cmp dword [ebp - 0xcc], 0
jne 0x435aca
mov ecx, dword [ebp - 0xdc]
lea eax, [ecx + 1]
mov dword [ebp - 0x12c], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x435aa7
sub ecx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0xdc]
add eax, ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebp - 0x100], eax
jmp 0x435ad0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0xdc], eax
je 0x435b95
cmp dword [esi + 0x1940], 0
jne 0x435af1
mov eax, dword [ecx + 0x2c]
mov eax, dword [eax + 8]
mov dword [ebp - 0xbc], eax
ucomiss xmm2, xmm6
lahf
test ah, 0x44
jp 0x435b02
mov eax, dword [ecx + 0x2c]
movss xmm2, dword [eax + 0xc]
movups xmm0, xmmword [ecx + 0x60]
movups xmmword [ebp - 0x24], xmm0
test edx, edx
je 0x435b55
movss xmm1, dword [edx]
movss xmm0, dword [ebp - 0x24]
comiss xmm0, xmm1
jae 0x435b21
movss dword [ebp - 0x24], xmm1
movss xmm1, dword [edx + 4]
movss xmm0, dword [ebp - 0x20]
comiss xmm0, xmm1
jae 0x435b35
movss dword [ebp - 0x20], xmm1
movss xmm0, dword [edx + 8]
comiss xmm0, dword [ebp - 0x1c]
ja 0x435b45
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [edx + 0xc]
comiss xmm0, dword [ebp - 0x18]
ja 0x435b55
movss dword [ebp - 0x18], xmm0
push dword [ebp - 0x144]
test edx, edx
mov edx, dword [ebp - 0x100]
push dword [ebp - 0x148]
setne al
movzx eax, al
push eax
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x24]
push edx
push dword [ebp - 0xdc]
push eax
push dword [ebp - 0xf4]
push ecx
mov ecx, dword [ebp - 0xbc]
call fcn.00424940
cmp byte [ebp - 0xc7], 0
je 0x435d52
movss xmm0, dword [esi + 0x18]
addss xmm0, dword [edi + 0xe68]
movss dword [edi + 0xe68], xmm0
cmp byte [esi + 0xb2], 0
je 0x435c07
xorps xmm1, xmm1
comiss xmm1, xmm0
jae 0x435c07
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x148], xmm0
fld qword [ebp - 0x148]
fld qword [0x446ee0]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIfmod
movss xmm0, dword [0x446ea4]
fstp qword [ebp - 0x148]
movsd xmm1, qword [ebp - 0x148]
cvtpd2ps xmm1, xmm1
comiss xmm0, xmm1
jae 0x435c07
xor cl, cl
jmp 0x435c09
mov cl, 1
movss xmm0, dword [ebp - 0x118]
movss xmm6, dword [0x446eb8]
addss xmm0, dword [ebp - 0x34]
subss xmm0, dword [ebp - 0xfc]
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x30]
addss xmm0, dword [ebp - 0x134]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm0, dword [0x446e34]
movss dword [ebp - 0x12c], xmm1
movaps xmm4, xmm1
movss dword [ebp - 0x24], xmm1
addss xmm4, xmm6
cvttss2si eax, xmm0
movss dword [ebp - 0x1c], xmm4
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movss dword [ebp - 0x134], xmm2
movaps xmm0, xmm2
movaps xmm3, xmm2
subss xmm0, dword [esi + 0x1944]
subss xmm3, dword [0x446ed8]
addss xmm0, dword [0x446e80]
movss dword [ebp - 0x18], xmm3
movss dword [ebp - 0x20], xmm0
test cl, cl
je 0x435d2d
comiss xmm3, dword [ebp - 0x50]
jbe 0x435d2d
movss xmm5, dword [ebp - 0xf8]
comiss xmm5, xmm0
jbe 0x435d2d
comiss xmm4, dword [ebp - 0x54]
jbe 0x435d2d
movss xmm0, dword [ebp - 0xc0]
comiss xmm0, xmm1
jbe 0x435d2d
sub esp, 8
movss dword [ebp - 0x148], xmm1
movaps xmm1, xmm6
movss dword [ebp - 0x144], xmm3
xor ecx, ecx
mov dword [esp + 4], 0x3f800000
call fcn.004035b0
add esp, 4
push eax
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x11c]
mov ecx, dword [eax + 0x23c]
call fcn.00420770
movss xmm1, dword [ebp - 0x12c]
movss xmm2, dword [ebp - 0x134]
movss xmm6, dword [0x446eb8]
cmp byte [ebp - 0xe4], 0
jne 0x435d52
subss xmm2, dword [esi + 0x1944]
subss xmm1, xmm6
movss dword [esi + 0x2f4c], xmm2
movss dword [esi + 0x2f48], xmm1
cmp byte [ebp - 0x160], 0
je 0x435d60
call fcn.0040e0f0
cmp byte [ebp - 0xd4], 0
je 0x435e14
mov ecx, dword [0x44a678]
movss xmm1, dword [ebp - 0xc4]
addss xmm1, dword [esi + 0x1568]
movss xmm4, dword [ebp - 0x128]
mov eax, dword [ecx + 0x1ba8]
movss dword [ebp - 0x148], xmm4
movss dword [ebp - 0x144], xmm1
mov byte [eax + 0x8c], 1
mov eax, dword [ecx + 0x1ba8]
cmp byte [eax + 0x8f], 0
jne 0x435e0a
movss xmm0, dword [eax + 0xd4]
lea ecx, [ebp - 0x148]
movss xmm3, dword [eax + 0xd0]
movaps xmm2, xmm0
addss xmm2, xmm1
movss dword [ebp - 0x24], xmm3
movss xmm1, dword [0x446f78]
addss xmm4, xmm3
movss dword [ebp - 0x20], xmm0
movss dword [ebp - 0x18], xmm2
movss dword [ebp - 0x1c], xmm4
call fcn.0040e680
push 0
push 0
xor edx, edx
lea ecx, [ebp - 0x24]
call fcn.0040e7b0
add esp, 8
call fcn.00408ce0
call fcn.0040ec60
cmp byte [esi + 0x2fa0], 0
je 0x435e56
cmp byte [ebp - 0x160], 0
jne 0x435e56
mov eax, dword [0x44a678]
lea ecx, [ebp - 0x34]
push dword [ebp - 0xcc]
mov edx, dword [ebp - 0xdc]
mov dword [eax + 0x2fb8], 0x443a24
mov dword [eax + 0x2fbc], 0x443a20
call fcn.004139e0
add esp, 4
movss xmm0, dword [ebp - 0x164]
comiss xmm0, dword [0x446e34]
jbe 0x435eaf
movss xmm0, dword [ebp - 0x4c]
xor edx, edx
addss xmm0, dword [esi + 0x157c]
mov ecx, dword [ebp - 0x158]
movss dword [ebp - 0x148], xmm0
movss xmm0, dword [ebp - 0x50]
addss xmm0, dword [esi + 0x1568]
movss dword [ebp - 0x144], xmm0
push dword [ebp - 0x144]
push dword [ebp - 0x148]
push 1
call fcn.00403710
add esp, 0xc
mov dl, byte [ebp - 0xdd]
mov ecx, dword [ebx + 0x14]
test dl, dl
je 0x435ed9
test ecx, 0x8000000
jne 0x435ed9
mov eax, dword [0x44a678]
or dword [eax + 0x1c50], 4
mov word [eax + 0x1bf0], 0x101
test cl, 0x20
movzx eax, dl
movzx ecx, byte [ebp - 0xb6]
cmovne eax, ecx
jmp 0x432a8b