Function at 0x435070
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43f970
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x158
mov eax, dword [0x44900c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x150], ecx
mov esi, dword [0x449b68]
mov ecx, esi
mov eax, dword [ebx + 8]
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xbc], ecx
mov eax, dword [ecx + 0x1ba8]
mov byte [eax + 0x8c], 1
mov edi, dword [ecx + 0x1ba8]
mov dword [ebp - 0x110], edi
cmp byte [edi + 0x8f], 0
jne 0x435593
mov ecx, dword [ebx + 0x14]
mov eax, ecx
shr eax, 0xe
mov edx, ecx
and eax, 0xffffff01
shr edx, 0x1a
mov dword [ebp - 0xec], eax
and edx, 0xffffff01
mov eax, ecx
mov dword [ebp - 0xe4], edx
shr eax, 0xf
and eax, 0xffffff01
mov dword [ebp - 0x158], eax
mov eax, ecx
shr eax, 0x10
not al
and eax, 0xffffff01
mov dword [ebp - 0x130], eax
mov eax, ecx
shr eax, 0x12
and eax, 0xffffff01
mov dword [ebp - 0x14c], eax
test dl, dl
je 0x435159
call fcn.00417510
mov esi, dword [0x449b68]
mov ecx, dword [edi + 0xc4]
xor edx, edx
mov eax, dword [edi + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, dword [ebp - 0x150]
call fcn.0040b5a0
add esp, 4
mov dword [ebp - 0xd8], eax
cmp dword [esi + 0x1be0], eax
jne 0x43518d
mov dword [esi + 0x1be4], eax
cmp dword [esi + 0x1c1c], eax
jne 0x43519c
mov byte [esi + 0x1c20], 1
cmp dword [esi + 0x1bc8], eax
jne 0x4351c0
push ecx
push dword [ebp - 0x150]
mov edx, 0xb
mov ecx, eax
call fcn.0041d190
mov esi, dword [0x449b68]
add esp, 8
mov eax, dword [ebp - 0x150]
mov ecx, eax
cmp eax, 0xffffffff
jae 0x4351e6
nop dword [eax]
mov dl, byte [ecx]
test dl, dl
je 0x4351e6
cmp dl, 0x23
jne 0x4351e0
cmp byte [ecx + 1], dl
je 0x4351e6
inc ecx
cmp ecx, 0xffffffff
jb 0x4351d0
movss xmm1, dword [0x445138]
movss xmm0, dword [esi + 0x1944]
movss dword [ebp - 0x154], xmm1
cmp eax, ecx
jne 0x43520f
xorps xmm3, xmm3
movss dword [ebp - 0x164], xmm3
jmp 0x435261
push 0
push ecx
push eax
push ecx
mov ecx, dword [esi + 0x1940]
lea eax, [ebp - 0x138]
mov dword [esp], 0xbf800000
movaps xmm3, xmm1
push eax
movaps xmm2, xmm0
call fcn.0042c0f0
movss xmm0, dword [ebp - 0x138]
xorps xmm3, xmm3
addss xmm0, dword [0x445080]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x164], xmm0
movss xmm0, dword [ebp - 0x134]
cmp byte [ebp - 0xe4], 0
mov eax, dword [ebp - 0xbc]
je 0x435280
movss xmm0, dword [eax + 0x1944]
mulss xmm0, dword [0x4450dc]
test byte [esi + 0x1c34], 1
movss xmm1, dword [eax + 0x1568]
mov eax, dword [esi + 0x1ba8]
movaps xmm2, xmm1
addss xmm2, xmm1
addss xmm2, xmm0
je 0x4352ac
movss xmm0, dword [esi + 0x1c38]
jmp 0x4352b4
movss xmm0, dword [eax + 0x178]
comiss xmm3, xmm0
jbe 0x4352f3
cmp dword [eax + 0x168], 0
movss xmm1, dword [eax + 0x200]
jne 0x4352d3
cmp dword [esi + 0x1f60], 0
je 0x4352db
movss xmm1, dword [eax + 0x1d0]
subss xmm1, dword [eax + 0xd0]
addss xmm1, xmm0
movss xmm0, dword [0x445088]
maxss xmm0, xmm1
cvttss2si eax, xmm0
lea ecx, [ebp - 0x138]
movd xmm1, eax
mov eax, dword [ebx + 0x10]
cvtdq2ps xmm1, xmm1
push dword [eax + 4]
push dword [eax]
call fcn.00417430
movss xmm1, dword [ebp - 0x164]
xorps xmm0, xmm0
mov esi, dword [ebp - 0xbc]
add esp, 8
comiss xmm1, xmm0
jbe 0x435337
movaps xmm2, xmm1
addss xmm2, dword [esi + 0x157c]
jmp 0x43533a
xorps xmm2, xmm2
movss xmm4, dword [edi + 0xd4]
lea ecx, [ebp - 0x124]
movss xmm5, dword [ebp - 0x138]
movaps xmm0, xmm4
addss xmm0, dword [ebp - 0x134]
movss xmm3, dword [edi + 0xd0]
addss xmm2, xmm5
movaps xmm1, xmm3
movss dword [ebp - 0xc4], xmm3
addss xmm1, xmm5
movss dword [ebp - 0x11c], xmm5
movss dword [ebp - 0xf4], xmm4
movss dword [ebp - 0x48], xmm0
movaps xmm0, xmm4
addss xmm0, dword [ebp - 0x134]
addss xmm2, xmm3
movss dword [ebp - 0x54], xmm3
movss dword [ebp - 0x4c], xmm1
movss xmm1, dword [esi + 0x1568]
movss dword [ebp - 0x50], xmm4
movss dword [ebp - 0x18], xmm0
subss xmm0, xmm4
movss dword [ebp - 0x1c], xmm2
subss xmm2, xmm3
movss dword [ebp - 0x24], xmm3
movss dword [ebp - 0x20], xmm4
mov dword [ebp - 0x10c], edi
movss dword [ebp - 0x120], xmm0
movss dword [ebp - 0x124], xmm2
call fcn.00417060
cmp byte [ebp - 0xe4], 0
je 0x435622
mov edx, dword [ebp - 0xd8]
lea eax, [ebp - 0x54]
push pe_nt_image_headers32
push eax
lea ecx, [ebp - 0x24]
call fcn.00417190
add esp, 8
test al, al
je 0x43558e
mov eax, dword [esi + 0x1c50]
movss xmm0, dword [ebp - 0xc4]
mov esi, dword [0x449b68]
movss dword [edi + 0xd0], xmm0
movss xmm0, dword [ebp - 0xf4]
movss dword [edi + 0xd4], xmm0
movups xmm0, xmmword [esi + 0x1620]
mov dword [ebp - 0xfc], eax
lea ecx, [esi + 0x1ce4]
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], 3
push eax
movups xmmword [ebp - 0x24], xmm0
call fcn.0041da20
mov edi, dword [ebp - 0xbc]
lea eax, [ebp - 0x128]
push eax
mov dword [ebp - 0x128], 7
movups xmm0, xmmword [edi + 0x1660]
movups xmmword [esi + 0x1620], xmm0
mov esi, dword [0x449b68]
movss xmm0, dword [edi + 0x156c]
movss dword [ebp - 0xc4], xmm0
movss xmm0, dword [esi + 0x1554]
lea ecx, [esi + 0x1cf0]
movss dword [ebp - 0x124], xmm0
call fcn.0041d960
movss xmm0, dword [ebp - 0xc4]
lea eax, [ebp - 0x128]
movss dword [esi + 0x1554], xmm0
mov esi, dword [0x449b68]
movss xmm0, dword [edi + 0x1570]
movss dword [ebp - 0xc4], xmm0
push eax
movss xmm0, dword [esi + 0x1558]
lea ecx, [esi + 0x1cf0]
mov dword [ebp - 0x128], 8
movss dword [ebp - 0x124], xmm0
call fcn.0041d960
movss xmm0, dword [ebp - 0xc4]
lea eax, [ebp - 0x124]
movss xmm1, dword [ebp - 0x4c]
subss xmm1, dword [ebp - 0x54]
mov edx, dword [ebp - 0xd8]
movss dword [esi + 0x1558], xmm0
movss xmm0, dword [ebp - 0x48]
subss xmm0, dword [ebp - 0x50]
push 4
push ecx
mov ecx, dword [ebp - 0x150]
push eax
movss dword [ebp - 0x124], xmm1
movss dword [ebp - 0x120], xmm0
call fcn.004117a0
add esp, 0xc
mov byte [ebp - 0xf0], al
mov ecx, 2
call fcn.0040bdc0
mov eax, 1
mov ecx, eax
call fcn.0040bd70
cmp byte [ebp - 0xf0], 0
jne 0x4355b3
call fcn.00411990
call fcn.00417640
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0043d9b2
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov esi, edi
mov edx, dword [esi + 0x1ba8]
mov dword [ebp - 0x10c], edx
movsx ecx, word [edx + 0x122]
mov eax, dword [edx + 0x11c]
bts ecx, eax
movss xmm0, dword [edx + 0xd0]
mov word [edx + 0x122], cx
addss xmm0, dword [esi + 0x1564]
movss dword [edx + 0xd0], xmm0
movss xmm0, dword [esi + 0x1568]
addss xmm0, dword [edx + 0xd4]
movss dword [edx + 0xd4], xmm0
movss xmm0, dword [ebp - 0x138]
subss xmm0, dword [edx + 0x80]
movss dword [ebp - 0x11c], xmm0
jmp 0x435659
test dword [ebx + 0x14], 0x10000000
jne 0x43564d
mov edx, dword [ebp - 0xd8]
lea eax, [ebp - 0x54]
push pe_nt_image_headers32
push eax
lea ecx, [ebp - 0x24]
call fcn.00417190
add esp, 8
test al, al
je 0x435593
mov eax, dword [esi + 0x1c50]
mov dword [ebp - 0xfc], eax
mov edx, dword [ebp - 0xd8]
lea ecx, [ebp - 0x54]
call fcn.0040d7f0
mov dl, al
mov byte [ebp - 0xed], dl
test dl, dl
je 0x43567d
mov dword [esi + 0x1ebc], 1
mov edi, dword [0x449b68]
xor eax, eax
mov ecx, dword [ebp - 0xd8]
add edi, 0x1ff0
cmp dword [edi], ecx
cmovne edi, eax
mov eax, dword [ebp - 0xfc]
shr eax, 8
and al, 1
mov dword [ebp - 0xf8], edi
mov dword [ebp - 0xfc], eax
mov eax, dword [esi + 0x1be0]
cmp eax, ecx
je 0x4356d9
cmp dword [esi + 0x1d68], ecx
je 0x4356d0
cmp dword [esi + 0x1d5c], ecx
jne 0x4356d9
cmp dword [esi + 0x1d84], 2
jne 0x4356d9
mov byte [ebp - 0xc6], 1
jmp 0x4356e0
mov byte [ebp - 0xc6], 0
test dl, dl
je 0x4356f4
cmp byte [esi + 0x3e0], 0
mov byte [ebp - 0xc5], 1
jne 0x4356fb
mov byte [ebp - 0xc5], 0
cmp byte [ebp - 0xe4], 0
je 0x43576d
test edi, edi
je 0x43576d
test eax, eax
jne 0x43576d
mov eax, dword [ebp - 0x10c]
xor edx, edx
mov ecx, dword [eax + 0xc4]
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, str.SCROLLY
call fcn.0040b5a0
mov ecx, dword [0x449b68]
mov esi, eax
add esp, 4
cmp dword [ecx + 0x1bc8], esi
jne 0x435756
push ecx
push str.SCROLLY
mov edx, 0xb
mov ecx, esi
call fcn.0041d190
add esp, 8
mov edx, dword [ebp - 0xbc]
cmp dword [edx + 0x1c1c], esi
jne 0x435773
mov byte [ebp - 0xbe], 1
jmp 0x435793
mov edx, dword [ebp - 0xbc]
mov eax, dword [ebp - 0xe4]
mov byte [ebp - 0xbe], 0
test al, al
je 0x435809
mov byte [ebp - 0xbe], 0
test edi, edi
je 0x435809
mov eax, dword [ebp - 0x10c]
xor edx, edx
mov ecx, dword [eax + 0xc4]
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, str.SCROLLY
call fcn.0040b5a0
mov ecx, dword [0x449b68]
mov esi, eax
add esp, 4
cmp dword [ecx + 0x1bc8], esi
jne 0x4357dd
push ecx
push str.SCROLLY
mov edx, 0xb
mov ecx, esi
call fcn.0041d190
add esp, 8
mov edx, dword [ebp - 0xbc]
cmp dword [edx + 0x1be0], esi
jne 0x435803
mov cl, 1
mov byte [ebp - 0xd9], 0
mov byte [ebp - 0xbf], cl
mov byte [ebp - 0xe0], 0
jmp 0x435823
mov eax, dword [ebp - 0xe4]
xor cl, cl
mov byte [ebp - 0xd9], 0
mov byte [ebp - 0xe0], 0
mov byte [ebp - 0xbf], cl
test al, al
je 0x43583e
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [eax + 0x5c]
mov eax, dword [ebp - 0xe4]
movss dword [ebp - 0x154], xmm0
jmp 0x435846
xor cl, cl
mov byte [ebp - 0xbf], cl
test edi, edi
je 0x435855
xor al, 1
cmp byte [edi + 0x53], al
je 0x435855
mov al, 1
jmp 0x435857
xor al, al
cmp byte [ebp - 0xc5], 0
mov byte [ebp - 0xbd], al
jne 0x435894
cmp byte [ebp - 0xbe], 0
jne 0x435894
cmp byte [ebp - 0xc6], 0
jne 0x435894
cmp byte [ebp - 0xfc], 0
jne 0x435894
mov byte [ebp - 0xbe], 0
test cl, cl
jne 0x43589b
mov byte [ebp - 0xce], cl
jmp 0x4358b0
mov byte [ebp - 0xbe], 1
mov ecx, dword [ebp - 0xd8]
mov byte [ebp - 0xce], 1
cmp dword [edx + 0x1be0], ecx
jne 0x4358b8
test al, al
je 0x435b19
mov ecx, dword [ebp - 0xe8]
lea edi, [edx + 0x1ff0]
mov dword [ebp - 0xf8], edi
mov dword [edi + 0xe68], 0xbe99999a
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4358d7
mov eax, dword [edi + 0x28]
sub ecx, edx
lea esi, [ecx + 1]
cmp esi, eax
jle 0x435914
test eax, eax
je 0x4358fd
cdq
sub eax, edx
lea edx, [edi + 0x24]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x435905
mov ecx, 8
lea edx, [edi + 0x24]
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.0041ddb0
push esi
push dword [ebp - 0xe8]
mov dword [edi + 0x24], esi
push dword [edi + 0x2c]
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [ebx + 0xc]
lea eax, [edi + 0xc]
mov esi, dword [eax + 4]
inc edx
add esp, 0xc
mov dword [ebp - 0xcc], edx
cmp edx, esi
jle 0x435972
test esi, esi
je 0x435954
mov eax, esi
cdq
sub eax, edx
mov edx, dword [ebp - 0xcc]
mov ecx, eax
sar ecx, 1
add ecx, esi
jmp 0x435959
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [edi + 0xc]
push eax
call fcn.0041de20
mov edx, dword [ebp - 0xcc]
lea eax, [edi + 0xc]
mov dword [eax], edx
mov ecx, dword [edi + 0x1c]
test ecx, ecx
jns 0x435994
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x18]
call fcn.0041ddb0
mov ecx, dword [ebx + 0xc]
mov eax, dword [ebp - 0xe8]
dec ecx
mov dword [edi + 0x18], 0
mov edx, dword [edi + 0x14]
mov esi, edx
mov byte [edi + 0x30], 0
mov dword [ebp - 0xcc], edx
lea ecx, [edx + ecx*2]
cmp edx, ecx
jae 0x435a0c
mov edi, eax
nop dword [eax]
cmp byte [edi], 0
je 0x4359fa
push 0
mov edx, edi
lea ecx, [ebp - 0xc4]
call fcn.0040b850
mov edx, dword [ebp - 0xcc]
add edi, eax
mov eax, dword [ebp - 0xc4]
add esp, 4
test eax, eax
je 0x4359fa
mov word [esi], ax
add esi, 2
mov eax, dword [ebx + 0xc]
dec eax
lea eax, [edx + eax*2]
cmp esi, eax
jb 0x4359c0
mov dword [ebp - 0xd4], edi
mov edi, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xd4]
sub eax, dword [ebp - 0xe8]
xor ecx, ecx
mov word [esi], cx
sub esi, edx
sar esi, 1
mov dword [edi + 8], eax
mov eax, dword [ebp - 0xd8]
mov dword [edi + 4], esi
cmp dword [edi], eax
jne 0x435a56
cmp byte [ebp - 0xbd], cl
jne 0x435a56
cmp dword [edi + 0x3c], esi
mov ecx, esi
mov dl, 1
cmovl ecx, dword [edi + 0x3c]
cmp dword [edi + 0x40], esi
mov dword [edi + 0x3c], ecx
mov ecx, esi
cmovl ecx, dword [edi + 0x40]
cmp dword [edi + 0x44], esi
cmovl esi, dword [edi + 0x44]
mov dword [edi + 0x44], esi
jmp 0x435a9a
mov dword [edi], eax
xor dl, dl
mov al, byte [ebp - 0xe4]
xor al, 1
mov dword [edi + 0x38], ecx
mov dword [edi + 0xe5a], 0x630000
mov dword [edi + 0xe60], ecx
mov dword [edi + 0xe64], 0x3e7
mov dword [edi + 0x44], ecx
mov dword [edi + 0x3c], ecx
mov word [edi + 0x51], 1
mov dword [edi + 0x58], ecx
mov byte [edi + 0x50], cl
mov byte [edi + 0x53], al
mov byte [edi + 0x48], cl
mov dword [edi + 0x4c], ecx
cmp byte [ebp - 0xe4], 0
mov dword [edi + 0x40], ecx
jne 0x435b0a
mov eax, dword [ebp - 0xe0]
mov ecx, 1
test byte [ebx + 0x14], 0x10
movzx eax, al
cmovne eax, ecx
cmp byte [ebp - 0xc6], 0
mov dword [ebp - 0xe0], eax
je 0x435ae3
test dl, dl
je 0x435add
mov eax, dword [ebp - 0xbc]
test byte [eax + 0x1d6c], 4
jne 0x435ae3
mov byte [ebp - 0xe0], cl
cmp byte [ebp - 0xfc], 0
jne 0x435b04
cmp byte [ebp - 0xc5], 0
je 0x435b0a
mov eax, dword [ebp - 0xbc]
cmp byte [eax + 0xfc], 0
je 0x435b0a
mov byte [ebp - 0xe0], cl
mov edx, dword [ebx + 0x14]
test edx, 0x2000
je 0x435b19
mov byte [edi + 0x48], 1
mov esi, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0xd8]
cmp dword [esi + 0x1be0], ecx
je 0x435bde
cmp byte [ebp - 0xbe], 0
je 0x435bd6
mov edx, dword [ebp - 0x110]
call fcn.0040d690
call fcn.004189d0
mov ecx, edx
call fcn.004169f0
mov eax, dword [esi + 0x1bf4]
mov edx, dword [ebx + 0x14]
or eax, 3
cmp byte [ebp - 0xe4], 0
mov dword [esi + 0x1bf4], eax
jne 0x435b74
test dl, dl
jns 0x435b7d
or eax, 0xc
mov dword [esi + 0x1bf4], eax
mov eax, dword [esi + 0x1c00]
or dword [esi + 0x1bf8], 2
or eax, 0x180
cmp byte [ebp - 0xe4], 0
mov ecx, dword [esi + 0x1c04]
mov dword [esi + 0x1c00], eax
mov dword [esi + 0x1c04], ecx
je 0x435bb9
or eax, 0x60
mov dword [esi + 0x1c04], ecx
mov dword [esi + 0x1c00], eax
test edx, 0x440
je 0x435bd0
or eax, 1
mov dword [esi + 0x1c04], ecx
mov dword [esi + 0x1c00], eax
mov ecx, dword [ebp - 0xd8]
cmp dword [esi + 0x1be0], ecx
jne 0x435c1b
test edi, edi
jne 0x435bed
call fcn.0040d760
mov ecx, dword [ebp - 0xd8]
cmp dword [esi + 0x1be0], ecx
jne 0x435c1b
cmp byte [esi + 0x3e0], 0
je 0x435c28
cmp byte [ebp - 0xce], 0
jne 0x435c28
cmp byte [ebp - 0xbe], 0
jne 0x435c28
mov byte [ebp - 0xd9], 1
mov dl, 1
jmp 0x435c2e
test edi, edi
je 0x435c2c
cmp byte [ebp - 0xbf], 0
je 0x435c2c
mov dl, 1
jmp 0x435c2e
xor dl, dl
mov byte [ebp - 0xcd], dl
test edi, edi
je 0x435c54
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x435c49
cmp byte [ebp - 0xe0], 0
je 0x435c54
test dl, dl
je 0x435c54
mov edx, 1
jmp 0x435c56
xor dl, dl
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x148], edx
mov byte [ebp - 0xef], dl
mov byte [ebp - 0xf0], 0
mov byte [ebp - 0xbe], 0
test al, al
je 0x435d98
test edi, edi
je 0x435d98
cmp byte [ebp - 0xcd], 0
jne 0x435c97
test dl, dl
je 0x435da5
mov ecx, dword [ebx + 0xc]
mov eax, dword [edi + 0x10]
lea esi, [ecx + 1]
cmp esi, eax
jle 0x435cd1
test eax, eax
je 0x435cb7
cdq
sub eax, edx
lea edx, [edi + 0xc]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x435cbf
mov ecx, 8
lea edx, [edi + 0xc]
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.0041de20
mov ecx, dword [ebx + 0xc]
mov eax, dword [ebp - 0xe8]
mov dword [edi + 0xc], esi
mov edx, dword [edi + 0x14]
mov esi, edx
mov dword [ebp - 0xcc], edx
lea ecx, [edx + ecx*2]
cmp edx, ecx
jae 0x435d3b
mov edi, eax
nop
cmp byte [edi], 0
je 0x435d29
push 0
mov edx, edi
lea ecx, [ebp - 0xc4]
call fcn.0040b850
mov edx, dword [ebp - 0xcc]
add edi, eax
mov eax, dword [ebp - 0xc4]
add esp, 4
test eax, eax
je 0x435d29
mov ecx, dword [ebx + 0xc]
mov word [esi], ax
add esi, 2
lea eax, [edx + ecx*2]
cmp esi, eax
jb 0x435cf0
mov dword [ebp - 0xd4], edi
mov edi, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xd4]
sub eax, dword [ebp - 0xe8]
xor ecx, ecx
mov word [esi], cx
sub esi, edx
sar esi, 1
cmp dword [edi + 0x3c], esi
mov ecx, esi
mov dword [edi + 4], esi
cmovl ecx, dword [edi + 0x3c]
cmp dword [edi + 0x40], esi
mov dword [edi + 0x3c], ecx
mov ecx, esi
cmovl ecx, dword [edi + 0x40]
cmp dword [edi + 0x44], esi
mov dword [edi + 8], eax
cmovl esi, dword [edi + 0x44]
xor edx, edx
movzx eax, byte [ebp - 0xef]
cmp ecx, esi
mov dword [edi + 0x40], ecx
mov ecx, dword [ebp - 0xd8]
cmovne edx, eax
mov eax, dword [ebp - 0xec]
mov dword [edi + 0x44], esi
mov esi, dword [ebp - 0xbc]
mov dword [ebp - 0x148], edx
cmp byte [ebp - 0xcd], 0
jne 0x435dad
test dl, dl
jne 0x435dad
cmp dword [esi + 0x1be0], ecx
jne 0x435dc1
test al, al
jne 0x435dc1
test edi, edi
je 0x435dc1
mov byte [ebp - 0xef], 1
cmp byte [edi + 0x30], al
jne 0x435dc8
mov byte [ebp - 0xef], 0
cmp byte [ebp - 0x158], 0
je 0x435e5b
mov edx, dword [esi + 0x1940]
cmp dword [edx + 0x14], 0x2a
ja 0x435de6
mov esi, dword [edx + 0x2c]
jmp 0x435e05
mov eax, dword [edx + 0x1c]
mov ecx, 0xffff
movzx eax, word [eax + 0x54]
cmp ax, cx
jne 0x435dfc
mov esi, dword [edx + 0x2c]
jmp 0x435e05
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x28]
lea esi, [eax + ecx*8]
mov eax, dword [edx + 0x10]
mov edx, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0xbc]
add ecx, 0x2e64
mov dword [ecx + 0x10], eax
mov eax, dword [edx + 0x1940]
mov eax, dword [eax + 0x44]
mov dword [ecx + 0x44], eax
mov eax, dword [edx + 0x1940]
mov eax, dword [eax + 0x48]
mov dword [ecx + 0x48], eax
mov eax, dword [edx + 0x1940]
mov eax, dword [eax + 0x4c]
mov dword [ecx + 0x4c], eax
mov eax, dword [edx + 0x1940]
mov eax, dword [eax + 0x30]
mov dword [ecx + 0x30], eax
mov dword [ecx + 0x2c], esi
mov eax, dword [esi + 4]
mov dword [ecx + 0xc], eax
call fcn.00416cc0
mov esi, dword [ebp - 0xbc]
mov edx, dword [ebp - 0xd8]
mov dword [ebp - 0x110], 0
cmp dword [esi + 0x1be0], edx
jne 0x43652c
mov eax, dword [edi + 8]
mov dword [ebp - 0x110], eax
mov eax, dword [ebx + 0xc]
mov dword [edi + 0x34], eax
mov eax, dword [ebx + 0x14]
mov dword [edi + 0xe70], eax
mov byte [edi + 0xe6e], 0
mov dl, byte [esi + 0xec]
test dl, dl
mov dword [esi + 0x31f8], 1
sete al
cmp byte [ebp - 0xe4], 0
mov byte [esi + 0x1bed], al
movss xmm7, dword [esi + 0xe4]
subss xmm7, dword [ebp - 0x54]
subss xmm7, dword [esi + 0x1564]
addss xmm7, dword [edi + 0x38]
je 0x435ef2
mov eax, dword [ebp - 0x10c]
movss xmm2, dword [esi + 0xe8]
subss xmm2, dword [eax + 0xd4]
jmp 0x435f02
movss xmm2, dword [esi + 0x1944]
mulss xmm2, dword [0x445050]
cmp byte [ebp - 0xe0], 0
mov al, byte [esi + 0xb1]
mov byte [ebp - 0xee], al
je 0x435f39
mov eax, dword [edi + 4]
lea ecx, [edi + 0xe6d]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov byte [ecx], 1
jmp 0x436337
mov cl, byte [ebp - 0xed]
test cl, cl
je 0x43623f
cmp word [esi + 0x3ea], 2
jb 0x43623f
cmp byte [esi + 0xfd], 0
jne 0x43623f
cmp byte [edi + 0x53], 0
lea esi, [edi + 0x3c]
je 0x435f7f
push 0
mov edx, edi
lea ecx, [ebp - 0x2c]
call fcn.00433650
movss xmm2, dword [ebp - 0x20]
add esp, 4
movaps xmm1, xmm7
mov ecx, edi
call fcn.004339b0
mov ecx, eax
mov byte [esi + 0x16], 0
mov eax, dword [ebp - 0xbc]
mov dword [esi], ecx
mov dword [esi + 4], ecx
mov dword [esi + 8], ecx
movzx eax, word [eax + 0x3ea]
sub eax, 2
test al, 1
jne 0x436197
test ecx, ecx
je 0x435fc5
mov eax, dword [edi + 0x14]
mov byte [ebp - 0xbd], 0
cmp word [eax + ecx*2 - 2], 0xa
jne 0x435fcc
mov byte [ebp - 0xbd], 1
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x435fe4
cmp byte [ebp - 0xbd], 0
mov edx, ecx
mov esi, ecx
jne 0x43600e
lea esi, [edi + 0x3c]
push 0x20000c
mov edx, esi
mov ecx, edi
call fcn.00433d90
mov byte [edi + 0xe6c], 1
add esp, 4
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, dword [esi]
mov edx, dword [esi + 8]
mov esi, dword [esi + 4]
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x43602b
cmp esi, edx
lea esi, [edi + 0x3c]
jne 0x436025
mov dword [esi + 8], ecx
mov dword [esi + 4], ecx
jmp 0x43602e
mov dword [esi], edx
mov ecx, edx
jmp 0x43602e
lea esi, [edi + 0x3c]
mov eax, dword [edi + 4]
inc ecx
mov dword [ebp - 0xe0], eax
cmp ecx, eax
jge 0x436142
mov edx, dword [edi + 0xe70]
mov esi, 0x3000
and edx, 0x8000
mov dword [ebp - 0xc4], edx
test edx, edx
jne 0x436134
test ecx, ecx
jle 0x43613d
mov edx, dword [edi + 0x14]
movzx eax, word [edx + ecx*2 - 2]
cmp eax, 0x20
je 0x436122
cmp eax, 9
je 0x436122
cmp ax, si
je 0x436122
cmp eax, 0x2c
je 0x436122
cmp eax, 0x3b
je 0x436122
cmp eax, 0x28
je 0x436122
cmp eax, 0x29
je 0x436122
cmp eax, 0x7b
je 0x436122
cmp eax, 0x7d
je 0x436122
cmp eax, 0x5b
je 0x436122
cmp eax, 0x5d
je 0x436122
cmp eax, 0x7c
je 0x436122
cmp eax, 0xa
je 0x436122
cmp eax, 0xd
je 0x436122
movzx eax, word [edx + ecx*2]
cmp eax, 0x20
je 0x43611b
cmp eax, 9
je 0x43611b
cmp ax, si
je 0x43611b
cmp eax, 0x2c
je 0x43611b
cmp eax, 0x3b
je 0x43611b
cmp eax, 0x28
je 0x43611b
cmp eax, 0x29
je 0x43611b
cmp eax, 0x7b
je 0x43611b
cmp eax, 0x7d
je 0x43611b
cmp eax, 0x5b
je 0x43611b
cmp eax, 0x5d
je 0x43611b
cmp eax, 0x7c
je 0x43611b
cmp eax, 0xa
je 0x43611b
cmp eax, 0xd
jne 0x436122
mov eax, 1
jmp 0x436124
xor eax, eax
test eax, eax
mov eax, dword [ebp - 0xe0]
jne 0x43613d
mov edx, dword [ebp - 0xc4]
inc ecx
cmp ecx, eax
jl 0x436057
lea esi, [edi + 0x3c]
cmp ecx, eax
cmovg ecx, eax
mov dword [esi], ecx
mov dword [edi + 0x44], ecx
mov edx, dword [esi + 8]
mov eax, dword [esi + 4]
cmp eax, edx
je 0x436182
cmp eax, dword [ebp - 0xe0]
jle 0x436165
mov eax, dword [ebp - 0xe0]
mov dword [esi + 4], eax
cmp edx, dword [ebp - 0xe0]
jle 0x43617a
mov ecx, dword [ebp - 0xe0]
mov edx, ecx
mov dword [esi + 8], ecx
mov ecx, dword [esi]
cmp eax, edx
jne 0x436182
mov dword [esi], eax
mov ecx, eax
mov eax, dword [ebp - 0xe0]
cmp ecx, eax
jle 0x436224
mov dword [esi], eax
jmp 0x436224
mov eax, dword [edi + 0x14]
lea edx, [edi + 0x3c]
push 0x200004
movzx esi, word [eax + ecx*2]
mov ecx, edi
call fcn.00433d90
add esp, 4
mov byte [edi + 0xe6c], 1
lea edx, [edi + 0x3c]
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, edi
push 0x600005
call fcn.00433d90
add esp, 4
mov byte [edi + 0xe6c], 1
lea edx, [edi + 0x3c]
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, edi
push 0x600001
call fcn.00433d90
add esp, 4
mov dword [edi + 0xe68], 0xbe99999a
cmp esi, 0xa
je 0x43621d
cmp byte [ebp - 0xe4], 0
je 0x43621d
mov ecx, dword [edi + 0x40]
mov eax, dword [edi + 0x44]
mov dword [edi + 0x40], eax
mov dword [edi + 0x44], ecx
mov dword [edi + 0x3c], ecx
mov byte [edi + 0xe6c], 0
mov esi, dword [ebp - 0xbc]
lea ecx, [edi + 0xe6d]
mov dword [edi + 0xe68], 0xbe99999a
jmp 0x436337
cmp byte [esi + 0x3e0], 0
mov al, byte [edi + 0xe6d]
je 0x43629b
test al, al
jne 0x43629b
test cl, cl
je 0x436290
cmp byte [edi + 0x53], al
je 0x43626f
push 0
mov edx, edi
lea ecx, [ebp - 0x2c]
call fcn.00433650
movss xmm2, dword [ebp - 0x20]
add esp, 4
movaps xmm1, xmm7
mov ecx, edi
call fcn.004339b0
mov dword [edi + 0x3c], eax
mov dword [edi + 0x40], eax
mov dword [edi + 0x44], eax
mov byte [edi + 0x52], 0
mov dword [edi + 0xe68], 0xbe99999a
lea ecx, [edi + 0xe6d]
jmp 0x436337
lea ecx, [edi + 0xe6d]
test dl, dl
je 0x436337
lea ecx, [edi + 0xe6d]
test al, al
jne 0x436337
mov edx, esi
xorps xmm1, xmm1
movss xmm0, dword [edx + 0x370]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x4362e4
movss xmm0, dword [edx + 0x374]
lea ecx, [edi + 0xe6d]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x436335
cmp byte [edi + 0x53], 0
je 0x4362fe
push 0
mov edx, edi
lea ecx, [ebp - 0x2c]
call fcn.00433650
movss xmm2, dword [ebp - 0x20]
add esp, 4
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x43630c
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x40], eax
movaps xmm1, xmm7
mov ecx, edi
call fcn.004339b0
mov dword [edi + 0x44], eax
lea ecx, [edi + 0xe6d]
mov dword [edi + 0x3c], eax
mov dword [edi + 0xe68], 0xbe99999a
mov byte [edi + 0xe6c], 1
jmp 0x436337
mov esi, edx
cmp byte [ecx], 0
je 0x436348
cmp byte [esi + 0xec], 0
jne 0x436348
mov byte [ecx], 0
cmp byte [esi + 0xfc], 0
je 0x43635a
cmp byte [esi + 0xfe], 0
je 0x43636c
cmp byte [ebp - 0xee], 0
je 0x436375
cmp byte [esi + 0xff], 0
je 0x436375
mov byte [ebp - 0xb5], 1
jmp 0x43637c
mov byte [ebp - 0xb5], 0
mov edx, dword [ebx + 0x14]
test edx, 0x400
je 0x4365cd
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0x34]
test ecx, ecx
js 0x4365cd
call fcn.004116e0
mov ecx, dword [ebp - 0xec]
test al, al
mov al, byte [ebp - 0xb5]
je 0x436447
test al, al
jne 0x436447
cmp byte [esi + 0xfd], al
jne 0x436447
test cl, cl
jne 0x436447
mov ecx, dword [esi + 0x1524]
mov eax, dword [esi + 0x151c]
lea edx, [ecx + eax*2]
cmp ecx, edx
jae 0x4363f3
mov ax, word [ecx]
add ecx, 2
cmp ax, 9
je 0x43643b
cmp ecx, edx
jb 0x4363e3
mov edx, dword [ebx + 0x14]
lea ecx, [ebp - 0xcc]
push 2
sub esp, 8
mov dword [ebp - 0xcc], 9
call fcn.00434e90
add esp, 0xc
test al, al
je 0x43643b
push dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00433d90
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, dword [ebp - 0xec]
mov al, byte [ebp - 0xb5]
mov edx, dword [ebx + 0x14]
add esi, 0x151c
mov dword [ebp - 0xc4], esi
cmp dword [esi], 0
jle 0x436526
test al, al
jne 0x436501
test cl, cl
jne 0x436501
cmp byte [ebp - 0xc6], cl
jne 0x436501
mov ecx, dword [ebp - 0xbc]
xor esi, esi
nop dword [eax]
nop word [eax + eax]
mov eax, dword [ecx + 0x1524]
movzx eax, word [eax + esi*2]
mov dword [ebp - 0xcc], eax
cmp eax, 9
jne 0x4364ae
cmp byte [ecx + 0xfd], 0
jne 0x4364ef
push 2
sub esp, 8
lea ecx, [ebp - 0xcc]
call fcn.00434e90
add esp, 0xc
test al, al
je 0x4364e9
push dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00433d90
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, dword [ebp - 0xbc]
mov edx, dword [ebx + 0x14]
inc esi
cmp esi, dword [ecx + 0x151c]
jl 0x436490
mov esi, dword [ebp - 0xc4]
mov ecx, dword [esi + 4]
test ecx, ecx
jns 0x436520
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.0041de20
mov dword [esi], 0
mov esi, dword [ebp - 0xbc]
mov eax, dword [ebp - 0xd8]
xor dl, dl
mov byte [ebp - 0xb5], dl
cmp dword [esi + 0x1be0], eax
jne 0x437156
cmp byte [esi + 0x1bec], dl
jne 0x437156
cmp byte [ebp - 0xd9], dl
jne 0x437156
movss xmm0, dword [ebp - 0x134]
mov ecx, 1
subss xmm0, dword [esi + 0x1568]
divss xmm0, dword [esi + 0x1944]
cvttss2si eax, xmm0
cmp eax, ecx
cmovge ecx, eax
mov eax, dword [ebp - 0xbc]
mov dword [edi + 0x4c], ecx
xor esi, esi
mov dword [ebp - 0xcc], ecx
mov ecx, 0x400000
cmp byte [eax + 0xfd], dl
mov dl, byte [eax + 0xb1]
cmovne esi, ecx
mov byte [ebp - 0x114], dl
test dl, dl
je 0x4365de
mov ecx, dword [eax + 0x37c]
mov dword [ebp - 0xfc], ecx
cmp ecx, 0xa
jne 0x4365de
mov byte [ebp - 0xce], 1
jmp 0x4365f5
mov al, byte [ebp - 0xb5]
mov ecx, dword [ebp - 0xec]
jmp 0x43644a
mov ecx, dword [eax + 0x37c]
mov dword [ebp - 0xfc], ecx
mov byte [ebp - 0xce], 0
test dl, dl
je 0x43663b
mov edi, dword [ebp - 0xbc]
mov al, byte [eax + 0xfe]
mov byte [ebp - 0xc6], al
cmp byte [edi + 0xff], 0
mov edi, dword [ebp - 0xf8]
je 0x43664e
mov edi, dword [ebp - 0xbc]
cmp byte [edi + 0xfc], 0
mov edi, dword [ebp - 0xf8]
jne 0x43664e
test al, al
jne 0x43664e
mov byte [ebp - 0xc5], 1
cmp ecx, 8
jmp 0x436674
mov al, byte [eax + 0xfc]
mov byte [ebp - 0xce], 0
mov dword [ebp - 0xfc], ecx
mov byte [ebp - 0xc6], al
mov byte [ebp - 0xc5], 0
test dl, dl
je 0x436664
cmp ecx, 8
jmp 0x436674
cmp ecx, 1
mov byte [ebp - 0xc6], al
mov byte [ebp - 0xc5], 0
sete dl
mov byte [ebp - 0xbf], dl
test dl, dl
je 0x4366a1
mov eax, dword [0x449b68]
mov eax, dword [eax + 0x80]
test eax, eax
js 0x4366a1
mov ecx, eax
call fcn.004116e0
test al, al
jne 0x4366bb
mov ecx, dword [ebp - 0xfc]
cmp ecx, 2
jne 0x4366e7
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0x5c]
test ecx, ecx
js 0x4366e7
call fcn.004116e0
test al, al
je 0x4366e7
cmp byte [ebp - 0xec], 0
jne 0x4366e7
cmp byte [ebp - 0x158], 0
jne 0x4366e7
cmp byte [ebp - 0xe4], 0
je 0x4366de
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x4366e7
mov byte [ebp - 0xbd], 1
jmp 0x4366ee
mov byte [ebp - 0xbd], 0
cmp byte [ebp - 0xbf], 0
je 0x43670c
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0x78]
test ecx, ecx
js 0x43670c
call fcn.004116e0
test al, al
jne 0x43672a
cmp dword [ebp - 0xfc], 1
jne 0x43674d
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0x58]
test ecx, ecx
js 0x43674d
call fcn.004116e0
test al, al
je 0x43674d
cmp byte [ebp - 0x158], 0
jne 0x43674d
cmp byte [ebp - 0xe4], 0
je 0x436744
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x43674d
mov byte [ebp - 0xee], 1
jmp 0x436754
mov byte [ebp - 0xee], 0
cmp byte [ebp - 0xbf], 0
je 0x436772
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0x7c]
test ecx, ecx
js 0x436772
call fcn.004116e0
test al, al
jne 0x436790
cmp dword [ebp - 0xfc], 2
jne 0x4367a0
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0x58]
test ecx, ecx
js 0x4367a0
call fcn.004116e0
test al, al
je 0x4367a0
cmp byte [ebp - 0xec], 0
mov byte [ebp - 0xed], 1
je 0x4367a7
mov byte [ebp - 0xed], 0
mov dl, byte [ebp - 0xbf]
test dl, dl
je 0x4367ea
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0x88]
test ecx, ecx
js 0x4367ea
call fcn.004116e0
test al, al
je 0x4367e4
cmp byte [ebp - 0xec], 0
jne 0x4367e4
cmp byte [ebp - 0x130], 0
je 0x4367e4
mov byte [ebp - 0x112], 1
jmp 0x4367f5
mov dl, byte [ebp - 0xbf]
mov byte [ebp - 0x112], 0
test dl, dl
je 0x43680d
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0x84]
test ecx, ecx
js 0x43680d
call fcn.004116e0
test al, al
jne 0x43682e
cmp byte [ebp - 0xce], 0
je 0x436847
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0x88]
test ecx, ecx
js 0x436847
call fcn.004116e0
test al, al
je 0x436847
cmp byte [ebp - 0xec], 0
jne 0x436847
cmp byte [ebp - 0x130], 0
mov byte [ebp - 0xfd], 1
jne 0x43684e
mov byte [ebp - 0xfd], 0
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0x68]
test ecx, ecx
js 0x436863
call fcn.004116e0
test al, al
jne 0x436878
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0x70]
test ecx, ecx
js 0x436881
call fcn.004116e0
test al, al
je 0x436881
mov byte [ebp - 0xce], 1
jmp 0x436888
mov byte [ebp - 0xce], 0
mov edx, 1
xor ecx, ecx
call fcn.00419a30
xorps xmm5, xmm5
comiss xmm0, xmm5
jbe 0x4368b1
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0x64]
test ecx, ecx
js 0x4368ca
call fcn.004116e0
test al, al
je 0x4368ca
mov edx, 1
lea ecx, [edx + 1]
call fcn.00419a30
comiss xmm0, xmm5
mov byte [ebp - 0x113], 0
jbe 0x4368d1
mov byte [ebp - 0x113], 1
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0x6c]
test ecx, ecx
js 0x4368e6
call fcn.004116e0
test al, al
jne 0x436900
mov eax, 1
mov edx, eax
mov ecx, eax
call fcn.00419a30
comiss xmm0, xmm5
mov byte [ebp - 0x111], 0
jbe 0x436907
mov byte [ebp - 0x111], 1
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0x38]
test ecx, ecx
js 0x436962
call fcn.004116e0
test al, al
je 0x436962
cmp byte [ebp - 0xc5], 0
je 0x43693c
mov eax, 0x200004
lea edx, [edi + 0x3c]
or esi, eax
mov ecx, edi
push esi
call fcn.00433d90
jmp 0x437119
cmp byte [ebp - 0xc6], 0
lea edx, [edi + 0x3c]
mov ecx, 0x20000c
mov eax, 0x200000
cmovne eax, ecx
mov ecx, edi
or esi, eax
push esi
call fcn.00433d90
jmp 0x437119
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
js 0x4369bd
call fcn.004116e0
test al, al
je 0x4369bd
cmp byte [ebp - 0xc5], 0
je 0x436997
mov eax, 0x200005
lea edx, [edi + 0x3c]
or esi, eax
mov ecx, edi
push esi
call fcn.00433d90
jmp 0x437119
cmp byte [ebp - 0xc6], 0
lea edx, [edi + 0x3c]
mov ecx, 0x20000d
mov eax, 0x200001
cmovne eax, ecx
mov ecx, edi
or esi, eax
push esi
call fcn.00433d90
jmp 0x437119
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0x40]
test ecx, ecx
js 0x436a3b
call fcn.004116e0
test al, al
je 0x436a3b
cmp byte [ebp - 0xe4], 0
je 0x436a3b
mov eax, dword [ebp - 0xbc]
cmp byte [eax + 0xfc], 0
je 0x436a1b
mov ecx, dword [ebp - 0x10c]
mov esi, eax
movss xmm0, dword [ecx + 0x5c]
subss xmm0, dword [esi + 0x1944]
maxss xmm0, xmm5
movss dword [ecx + 0x6c], xmm0
mov dword [ecx + 0x74], 0
mov dword [ecx + 0x7c], 0
jmp 0x437133
movzx eax, byte [ebp - 0xc5]
lea edx, [edi + 0x3c]
mov ecx, edi
lea eax, [eax*4 + 0x200002]
or eax, esi
push eax
call fcn.00433d90
jmp 0x437119
mov ecx, dword [0x449b68]
mov ecx, dword [ecx + 0x44]
test ecx, ecx
js 0x436ab7
call fcn.004116e0
test al, al
je 0x436ab7
cmp byte [ebp - 0xe4], 0
je 0x436ab7
mov eax, dword [ebp - 0xbc]
cmp byte [eax + 0xfc], 0
je 0x436a97
mov ecx, dword [ebp - 0x10c]
mov esi, dword [ebp - 0xbc]
mov eax, dword [0x449b68]
movss xmm0, dword [ecx + 0x5c]
addss xmm0, dword [esi + 0x1944]
mov eax, dword [eax + 0x1ba8]
minss xmm0, dword [eax + 0x64]
jmp 0x436a03
movzx eax, byte [ebp - 0xc5]
lea edx, [edi + 0x3c]
mov ecx, edi
lea eax, [eax*4 + 0x200003]
or eax, esi
push eax
call fcn.00433d90
jmp 0x437119
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0x48]
test ecx, ecx
js 0x436b2c
call fcn.004116e0
test al, al
je 0x436b2c
cmp byte [ebp - 0xe4], 0
je 0x436b2c
or esi, 0x20000e
lea edx, [edi + 0x3c]
push esi
mov ecx, edi
call fcn.00433d90
movd xmm0, dword [ebp - 0xcc]
add esp, 4
mov esi, dword [ebp - 0xbc]
movss xmm1, dword [ebp - 0x154]
cvtdq2ps xmm0, xmm0
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mulss xmm0, dword [esi + 0x1944]
subss xmm1, xmm0
movss dword [ebp - 0x154], xmm1
jmp 0x437133
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
js 0x436b9d
call fcn.004116e0
test al, al
je 0x436b9d
cmp byte [ebp - 0xe4], 0
je 0x436b9d
or esi, 0x20000f
lea edx, [edi + 0x3c]
push esi
mov ecx, edi
call fcn.00433d90
movd xmm0, dword [ebp - 0xcc]
add esp, 4
mov esi, dword [ebp - 0xbc]
cvtdq2ps xmm0, xmm0
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mulss xmm0, dword [esi + 0x1944]
addss xmm0, dword [ebp - 0x154]
movss dword [ebp - 0x154], xmm0
jmp 0x437133
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0x50]
test ecx, ecx
js 0x436bdf
call fcn.004116e0
test al, al
je 0x436bdf
mov ecx, dword [ebp - 0xbc]
lea edx, [edi + 0x3c]
mov eax, esi
or esi, 0x200004
or eax, 0x200006
cmp byte [ecx + 0xfc], 0
mov ecx, edi
cmovne esi, eax
push esi
call fcn.00433d90
jmp 0x437119
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0x54]
test ecx, ecx
js 0x436c21
call fcn.004116e0
test al, al
je 0x436c21
mov ecx, dword [ebp - 0xbc]
lea edx, [edi + 0x3c]
mov eax, esi
or esi, 0x200005
or eax, 0x200007
cmp byte [ecx + 0xfc], 0
mov ecx, edi
cmovne esi, eax
push esi
call fcn.00433d90
jmp 0x437119
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0x5c]
test ecx, ecx
js 0x436c55
call fcn.004116e0
test al, al
je 0x436c55
cmp byte [ebp - 0xec], 0
jne 0x436c55
or esi, 0x200008
lea edx, [edi + 0x3c]
push esi
mov ecx, edi
call fcn.00433d90
jmp 0x437119
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0x60]
test ecx, ecx
js 0x436cf6
call fcn.004116e0
test al, al
je 0x436cf6
cmp byte [ebp - 0xec], 0
jne 0x436cf6
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x436ce0
cmp byte [ebp - 0xc6], 0
je 0x436c93
push 0x60000c
jmp 0x436cc2
cmp byte [ebp - 0x114], 0
je 0x436ce0
mov eax, dword [ebp - 0xbc]
cmp byte [eax + 0xff], 0
je 0x436ce0
cmp byte [eax + 0xfe], 0
jne 0x436ce0
cmp byte [eax + 0xfc], 0
jne 0x436ce0
push 0x600004
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00433d90
mov dword [edi + 0xe68], 0xbe99999a
add esp, 4
mov byte [edi + 0xe6c], 1
or esi, 0x200009
lea edx, [edi + 0x3c]
push esi
mov ecx, edi
call fcn.00433d90
jmp 0x437119
cmp byte [ebp - 0xce], 0
je 0x436d9c
mov edx, dword [ebx + 0x14]
mov eax, edx
mov esi, dword [ebp - 0xbc]
shr eax, 0xb
and al, 1
cmp byte [ebp - 0xe4], 0
je 0x436d2a
mov cl, byte [esi + 0xfc]
test al, al
je 0x436d3d
test cl, cl
jne 0x436d41
mov byte [ebp - 0xd9], 1
mov byte [ebp - 0xbe], 1
jmp 0x437133
test cl, cl
jne 0x436d2a
cmp byte [ebp - 0xec], 0
jne 0x437133
push 2
sub esp, 8
mov dword [ebp - 0xcc], 0xa
lea ecx, [ebp - 0xcc]
call fcn.00434e90
add esp, 0xc
test al, al
je 0x437133
push dword [ebp - 0xcc]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00433d90
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
jmp 0x437133
cmp byte [ebp - 0x113], 0
je 0x436db8
mov byte [ebp - 0xd9], 1
mov byte [ebp - 0xbe], 1
jmp 0x43712d
cmp byte [ebp - 0x111], 0
je 0x436dd4
mov esi, dword [ebp - 0xbc]
mov dl, 1
mov byte [ebp - 0xd9], dl
jmp 0x437139
mov al, byte [ebp - 0x112]
test al, al
jne 0x4370fa
cmp byte [ebp - 0xfd], al
jne 0x4370fa
cmp byte [ebp - 0xbf], al
je 0x436e24
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0x74]
test ecx, ecx
js 0x436e24
call fcn.004116e0
test al, al
je 0x436e24
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
jmp 0x437126
mov al, byte [ebp - 0xbd]
test al, al
jne 0x436fde
cmp byte [ebp - 0xee], al
jne 0x436fde
cmp byte [ebp - 0xed], al
je 0x43712d
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0xd0]
test ecx, ecx
je 0x436e6f
push dword [eax + 0xd8]
call ecx
mov esi, eax
add esp, 4
test esi, esi
jne 0x436e74
jmp 0x43712d
mov esi, 0x4406eb
mov ecx, esi
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x436e80
mov eax, dword [0x449b68]
sub ecx, edx
test eax, eax
je 0x436e98
inc dword [eax + 0x36c]
lea eax, [ecx*2 + 2]
push eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
call eax
add esp, 4
mov dword [ebp - 0x108], eax
cmp byte [esi], 0
mov dword [ebp - 0xcc], 0
je 0x436f21
xor edi, edi
push 0
mov edx, esi
lea ecx, [ebp - 0xd4]
call fcn.0040b850
add esp, 4
add esi, eax
cmp dword [ebp - 0xd4], 0
je 0x436f0f
mov edx, dword [ebx + 0x14]
lea ecx, [ebp - 0xd4]
push 5
sub esp, 8
call fcn.00434e90
add esp, 0xc
test al, al
je 0x436f0a
mov ecx, dword [ebp - 0x108]
mov ax, word [ebp - 0xd4]
mov word [ecx + edi*2], ax
inc edi
cmp byte [esi], 0
jne 0x436ec1
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0xcc], edi
mov edi, dword [ebp - 0xf8]
mov esi, dword [ebp - 0xcc]
xor ecx, ecx
mov word [eax + esi*2], cx
test esi, esi
jle 0x436fba
mov edx, dword [edi + 0x44]
mov ecx, dword [edi + 4]
mov dword [ebp - 0xcc], edx
mov edx, dword [edi + 0x40]
cmp edx, dword [edi + 0x44]
je 0x436f6b
cmp edx, ecx
jle 0x436f52
mov dword [edi + 0x40], ecx
mov edx, ecx
cmp dword [edi + 0x44], ecx
jle 0x436f60
mov dword [edi + 0x44], ecx
mov dword [ebp - 0xcc], ecx
cmp edx, dword [ebp - 0xcc]
jne 0x436f6b
mov dword [edi + 0x3c], edx
cmp dword [edi + 0x3c], ecx
jle 0x436f73
mov dword [edi + 0x3c], ecx
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.00433d00
mov edx, dword [edi + 0x3c]
mov ecx, edi
push esi
push dword [ebp - 0x108]
call fcn.00433870
add esp, 8
test al, al
je 0x436fad
mov edx, dword [edi + 0x3c]
lea ecx, [edi + 0x5c]
push esi
push 0
call fcn.00434b80
add esp, 8
mov byte [edi + 0x52], 0
add dword [edi + 0x3c], esi
mov eax, dword [ebp - 0x108]
mov byte [edi + 0xe6c], 1
test eax, eax
je 0x436fce
mov ecx, dword [0x449b68]
test ecx, ecx
je 0x436fce
dec dword [ecx + 0x36c]
push eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call eax
add esp, 4
jmp 0x43712d
mov esi, dword [ebp - 0xbc]
cmp dword [esi + 0xd4], 0
je 0x4370ba
mov ecx, dword [edi + 0x44]
mov eax, dword [edi + 0x40]
cmp eax, ecx
je 0x437005
mov esi, ecx
cmovge ecx, eax
cmovl esi, eax
jmp 0x43700a
mov ecx, dword [edi + 4]
xor esi, esi
mov eax, dword [edi + 0x14]
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x130], esi
lea edx, [eax + ecx*2]
lea ecx, [eax + esi*2]
call fcn.0040bae0
mov ecx, dword [0x449b68]
inc eax
mov dword [ebp - 0xc4], eax
test ecx, ecx
je 0x43703b
inc dword [ecx + 0x36c]
push eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
call eax
mov esi, dword [edi + 0x14]
add esp, 4
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ebp - 0xc4]
mov dword [ebp - 0xf4], eax
lea ecx, [esi + ecx*2]
push ecx
mov ecx, dword [ebp - 0x130]
lea ecx, [esi + ecx*2]
mov esi, eax
push ecx
mov ecx, esi
call fcn.0040ba70
mov eax, dword [0x449b68]
add esp, 8
mov ecx, dword [eax + 0xd4]
test ecx, ecx
je 0x437095
push esi
push dword [eax + 0xd8]
call ecx
mov eax, dword [0x449b68]
add esp, 8
test esi, esi
je 0x4370a3
test eax, eax
je 0x4370a3
dec dword [eax + 0x36c]
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
push esi
call eax
mov al, byte [ebp - 0xbd]
add esp, 4
mov esi, dword [ebp - 0xbc]
test al, al
je 0x437133
mov eax, dword [edi + 0x40]
lea esi, [edi + 0x3c]
cmp eax, dword [edi + 0x44]
jne 0x4370dc
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [esi], eax
mov byte [edi + 0x52], 0
mov byte [edi + 0xe6c], 1
mov eax, dword [esi + 4]
cmp eax, dword [esi + 8]
je 0x43712d
mov edx, esi
mov ecx, edi
call fcn.00433d00
mov byte [esi + 0x16], 0
jmp 0x43712d
movzx eax, al
lea edx, [edi + 0x3c]
xor eax, 1
mov ecx, edi
add eax, 0x20000a
push eax
call fcn.00433d90
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x44], eax
mov dword [edi + 0x40], eax
mov dword [edi + 0xe68], 0xbe99999a
add esp, 4
mov byte [edi + 0xe6c], 1
mov esi, dword [ebp - 0xbc]
mov dl, byte [ebp - 0xb5]
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x43714e
cmp byte [ebp - 0xcd], 0
je 0x43714e
mov al, 1
jmp 0x437150
xor al, al
or byte [ebp - 0x148], al
mov eax, dword [ebp - 0xd8]
xor ecx, ecx
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0x104], ecx
cmp dword [esi + 0x1be0], eax
jne 0x43790a
test dl, dl
je 0x4373e9
cmp byte [ebp - 0xec], cl
jne 0x4373d1
mov esi, dword [edi + 0x2c]
mov ecx, esi
mov eax, dword [ebp - 0xe8]
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4371c0
test dl, dl
je 0x4371bc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4371c0
add eax, 2
add ecx, 2
test dl, dl
jne 0x4371a0
xor eax, eax
jmp 0x4371c5
sbb eax, eax
or eax, 1
test eax, eax
je 0x4373d1
mov eax, dword [edi + 0x24]
xor ecx, ecx
dec eax
mov dword [ebp - 0xe0], esi
xor edx, edx
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x128], ecx
mov dword [ebp - 0x120], edx
mov dword [ebp - 4], edx
test eax, eax
jle 0x43732c
mov edi, dword [ebp - 0xe0]
add esi, eax
xor eax, eax
mov dword [ebp - 0xd4], eax
test esi, esi
je 0x43721a
cmp edi, esi
jae 0x437244
cmp byte [edi], 0
je 0x437244
push esi
mov edx, edi
lea ecx, [ebp - 0xc4]
call fcn.0040b850
add edi, eax
add esp, 4
cmp dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xd4]
je 0x437244
inc eax
jmp 0x43720c
mov edi, dword [ebp - 0xf8]
lea ecx, [eax + 1]
mov dword [ebp - 0xcc], ecx
test ecx, ecx
jle 0x4372a5
mov edx, 8
mov eax, ecx
cmp ecx, edx
cmovl eax, edx
mov dword [ebp - 0xc4], eax
test eax, eax
jle 0x4372a5
mov ecx, dword [0x449b68]
test ecx, ecx
je 0x43727d
inc dword [ecx + 0x36c]
add eax, eax
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ecx, dword [ebp - 0xc4]
mov edx, eax
mov dword [ebp - 0x124], ecx
add esp, 4
mov ecx, dword [ebp - 0xcc]
mov dword [ebp - 0x120], edx
jmp 0x4372a7
xor edx, edx
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xc4], eax
mov eax, edx
lea edx, [ecx - 1]
mov dword [ebp - 0x128], ecx
mov dword [ebp - 0xd4], eax
lea edx, [eax + edx*2]
mov dword [ebp - 0xf4], edx
cmp eax, edx
jae 0x437327
mov edi, dword [ebp - 0xc4]
test esi, esi
je 0x4372df
cmp edi, esi
jae 0x43731b
cmp byte [edi], 0
je 0x43731b
push esi
mov edx, edi
lea ecx, [ebp - 0xc4]
call fcn.0040b850
mov ecx, dword [ebp - 0xc4]
add edi, eax
mov eax, dword [ebp - 0xd4]
add esp, 4
test ecx, ecx
je 0x43731b
mov word [eax], cx
add eax, 2
mov dword [ebp - 0xd4], eax
cmp eax, dword [ebp - 0xf4]
jb 0x4372d7
mov edi, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xcc]
xor edx, edx
mov word [eax], dx
mov esi, dword [edi + 4]
lea eax, [ecx - 1]
mov ecx, dword [ebp - 0x104]
xor edx, edx
test ecx, ecx
lea ecx, [edi + 0x5c]
cmovle eax, edx
push eax
push esi
mov dword [ebp - 0xc4], eax
call fcn.00434b80
mov edx, eax
add esp, 8
test edx, edx
je 0x437370
xor ecx, ecx
test esi, esi
jle 0x437370
nop
mov eax, dword [edi + 0x14]
mov ax, word [eax + ecx*2]
mov word [edx + ecx*2], ax
inc ecx
cmp ecx, esi
jl 0x437360
push dword [edi + 4]
xor edx, edx
mov ecx, edi
call fcn.00433810
mov esi, dword [ebp - 0xc4]
add esp, 4
test esi, esi
jle 0x4373a7
push esi
push dword [ebp - 0x120]
xor edx, edx
mov ecx, edi
call fcn.00433870
add esp, 8
test al, al
je 0x4373a7
mov dword [edi + 0x3c], esi
mov byte [edi + 0x52], 0
mov ecx, dword [ebp - 0x120]
test ecx, ecx
je 0x4373ca
mov eax, dword [0x449b68]
test eax, eax
je 0x4373c0
dec dword [eax + 0x36c]
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0xbe], 0
mov eax, dword [ebx + 0x14]
je 0x43780c
test al, 0x20
je 0x43780c
cmp byte [ebp - 0xec], 0
jne 0x43744b
mov eax, dword [edi + 0xc]
lea ecx, [edi + 0x18]
mov byte [edi + 0x30], 1
lea esi, [eax*4 + 1]
mov eax, dword [ecx + 4]
cmp esi, eax
jle 0x437437
test eax, eax
je 0x43741d
cdq
sub eax, edx
lea edx, [edi + 0x18]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x437425
mov ecx, 8
lea edx, [edi + 0x18]
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.0041ddb0
lea ecx, [edi + 0x18]
mov dword [ecx], esi
mov edx, esi
mov ecx, dword [edi + 0x20]
push 0
push dword [edi + 0x14]
call fcn.0040ba70
add esp, 8
mov edx, dword [ebx + 0x14]
test edx, 0x801c0
je 0x4377be
xor esi, esi
test dl, 0x40
je 0x437482
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0x34]
test ecx, ecx
js 0x437482
call fcn.004116e0
mov edx, dword [ebx + 0x14]
test al, al
je 0x437482
mov esi, 0x40
xor eax, eax
jmp 0x4374f5
test dl, dl
jns 0x4374ca
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0x40]
test ecx, ecx
js 0x4374a8
call fcn.004116e0
mov edx, dword [ebx + 0x14]
test al, al
je 0x4374a8
mov esi, 0x80
lea eax, [esi - 0x7d]
jmp 0x4374f5
mov eax, dword [0x449b68]
mov ecx, dword [eax + 0x44]
test ecx, ecx
js 0x4374ca
call fcn.004116e0
mov edx, dword [ebx + 0x14]
test al, al
je 0x4374ca
mov esi, 0x80
lea eax, [esi - 0x7c]
jmp 0x4374f5
test edx, 0x80000
je 0x4374e2
cmp byte [edi + 0xe6e], 0
je 0x4374e2
mov esi, 0x80000
jmp 0x4374f0
test edx, 0x100
mov eax, pe_nt_image_headers32
cmovne esi, eax
mov eax, 0x16
test esi, esi
je 0x4377be
xor ecx, ecx
mov dword [ebp - 0x78], 0
cmp byte [ebp - 0xec], cl
mov word [ebp - 0x63], cx
mov byte [ebp - 0x61], cl
mov dword [ebp - 0x7c], ecx
mov ecx, dword [ebp - 0xe8]
mov dword [ebp - 0x84], esi
mov dword [ebp - 0x80], edx
jne 0x43752a
mov ecx, dword [edi + 0x20]
mov esi, dword [edi + 0x14]
mov dword [ebp - 0x74], eax
mov eax, dword [edi + 8]
mov dword [ebp - 0x6c], eax
mov eax, dword [edi + 0x34]
mov dword [ebp - 0x68], eax
mov eax, dword [edi + 0x3c]
mov dword [ebp - 0x70], ecx
mov ecx, esi
mov byte [ebp - 0x64], 0
lea edx, [esi + eax*2]
call fcn.0040bae0
mov ecx, dword [ebp - 0xf8]
mov edi, eax
mov dword [ebp - 0x60], edi
mov ecx, dword [ecx + 0x40]
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.0040bae0
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0xf8]
mov ecx, dword [eax + 0x44]
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.0040bae0
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x84]
push eax
xor eax, eax
call eax
mov al, byte [ebp - 0x64]
add esp, 4
mov edx, dword [ebp - 0x60]
mov byte [ebp - 0xbd], al
cmp edx, edi
jne 0x4375af
test al, al
je 0x43760a
mov esi, dword [ebp - 0x70]
xor eax, eax
lea edi, [edx + esi]
mov dword [ebp - 0xd4], eax
test edi, edi
je 0x4375c5
cmp esi, edi
jae 0x4375ef
cmp byte [esi], 0
je 0x4375ef
push edi
mov edx, esi
lea ecx, [ebp - 0xc4]
call fcn.0040b850
add esi, eax
add esp, 4
cmp dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xd4]
je 0x4375ef
inc eax
jmp 0x4375b7
mov edi, dword [ebp - 0xf8]
mov edx, dword [ebp - 0x60]
mov dword [edi + 0x3c], eax
mov al, byte [ebp - 0xbd]
mov byte [edi + 0xe6c], 1
jmp 0x437610
mov edi, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0x5c]
cmp ecx, dword [ebp - 0xf4]
jne 0x43761f
test al, al
je 0x437674
cmp ecx, edx
jne 0x437628
mov eax, dword [edi + 0x3c]
jmp 0x437671
mov esi, dword [ebp - 0x70]
xor eax, eax
lea edi, [ecx + esi]
mov dword [ebp - 0xd4], eax
test edi, edi
je 0x43763e
cmp esi, edi
jae 0x437668
cmp byte [esi], 0
je 0x437668
push edi
mov edx, esi
lea ecx, [ebp - 0xc4]
call fcn.0040b850
add esi, eax
add esp, 4
cmp dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xd4]
je 0x437668
inc eax
jmp 0x437630
mov ecx, dword [ebp - 0x5c]
mov edi, dword [ebp - 0xf8]
mov dword [edi + 0x40], eax
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0xcc]
jne 0x43768c
cmp byte [ebp - 0xbd], 0
je 0x4377be
cmp eax, ecx
jne 0x437695
mov eax, dword [edi + 0x40]
jmp 0x4376db
mov esi, dword [ebp - 0x70]
lea edi, [eax + esi]
xor eax, eax
mov dword [ebp - 0xd4], eax
test edi, edi
je 0x4376ab
cmp esi, edi
jae 0x4376d5
cmp byte [esi], 0
je 0x4376d5
push edi
mov edx, esi
lea ecx, [ebp - 0xc4]
call fcn.0040b850
add esi, eax
add esp, 4
cmp dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xd4]
je 0x4376d5
inc eax
jmp 0x43769d
mov edi, dword [ebp - 0xf8]
cmp byte [ebp - 0xbd], 0
mov dword [edi + 0x44], eax
je 0x4377be
mov esi, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x110]
cmp esi, ecx
jle 0x43773a
cmp byte [ebp - 0x14c], 0
je 0x43773a
mov eax, dword [edi + 0x10]
sub esi, ecx
add esi, dword [edi + 0xc]
cmp esi, eax
jle 0x437737
test eax, eax
je 0x437720
cdq
sub eax, edx
lea edx, [edi + 0xc]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x437728
mov ecx, 8
lea edx, [edi + 0xc]
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.0041de20
mov dword [edi + 0xc], esi
mov eax, dword [ebp - 0x70]
mov ecx, dword [edi + 0x14]
mov esi, ecx
mov dword [ebp - 0xc4], eax
mov eax, dword [edi + 0xc]
dec eax
mov dword [ebp - 0xcc], ecx
lea eax, [ecx + eax*2]
mov dword [ebp - 0xf4], eax
cmp ecx, eax
jae 0x4377a2
mov edi, dword [ebp - 0xc4]
cmp byte [edi], 0
je 0x437796
push 0
mov edx, edi
lea ecx, [ebp - 0xc4]
call fcn.0040b850
add edi, eax
add esp, 4
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x437796
mov word [esi], ax
add esi, 2
cmp esi, dword [ebp - 0xf4]
jb 0x437765
mov edi, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xcc]
xor eax, eax
mov word [esi], ax
sub esi, ecx
mov eax, dword [ebp - 0x6c]
sar esi, 1
mov dword [edi + 4], esi
mov dword [edi + 8], eax
mov dword [edi + 0xe68], 0xbe99999a
cmp byte [ebp - 0xec], 0
jne 0x437809
mov esi, dword [edi + 0x20]
mov eax, esi
mov ecx, dword [ebp - 0xe8]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4377f2
test dl, dl
je 0x4377ee
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4377f2
add eax, 2
add ecx, 2
test dl, dl
jne 0x4377d2
xor eax, eax
jmp 0x4377f7
sbb eax, eax
or eax, 1
test eax, eax
mov eax, dword [ebx + 0x14]
je 0x43780c
mov ecx, dword [edi + 8]
mov dword [ebp - 0xe0], esi
jmp 0x437812
mov eax, dword [ebx + 0x14]
mov ecx, dword [ebp - 0x104]
mov edx, dword [ebp - 0xe0]
mov dword [edi + 0xe70], 0
test edx, edx
je 0x4378fe
cmp byte [ebp - 0x14c], 0
je 0x4378c6
mov dword [ebp - 0xb0], eax
xorps xmm0, xmm0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xa0], eax
lea eax, [ecx + 1]
cmp dword [ebx + 0xc], eax
movlpd qword [ebp - 0xa8], xmm0
cmovge eax, dword [ebx + 0xc]
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0xb4]
push eax
xor eax, eax
movlpd qword [ebp - 0x94], xmm0
movlpd qword [ebp - 0x8c], xmm0
mov dword [ebp - 0xb4], 0x40000
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xac], 0
call eax
mov esi, dword [ebp - 0x98]
add esp, 4
mov eax, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xe0]
mov dword [ebp - 0xe8], eax
lea ecx, [esi - 1]
cmp dword [ebp - 0x9c], ecx
cmovl ecx, dword [ebp - 0x9c]
jmp 0x4378c9
mov esi, dword [ebx + 0xc]
lea eax, [ecx + 1]
cmp eax, esi
cmovl esi, eax
cmp esi, 1
jb 0x4378f7
jbe 0x4378ec
lea eax, [esi - 1]
push eax
push edx
push dword [ebp - 0xe8]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
add esp, 0xc
mov eax, dword [ebp - 0xe8]
mov byte [esi + eax - 1], 0
mov byte [ebp - 0xf0], 1
mov eax, dword [ebp - 0xd8]
mov esi, dword [ebp - 0xbc]
cmp byte [ebp - 0xd9], 0
je 0x437920
cmp dword [esi + 0x1be0], eax
jne 0x437920
call fcn.0040d760
mov edx, dword [ebp - 0xe4]
test dl, dl
jne 0x4379ec
mov edx, dword [ebp - 0xd8]
lea ecx, [ebp - 0x54]
push 1
call fcn.0040c9f0
movss xmm1, dword [0x445088]
add esp, 4
mov ecx, 7
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call fcn.0040bc90
movss xmm2, dword [esi + 0x156c]
mov dl, 1
mov ecx, eax
call fcn.0040c7e0
movss xmm7, dword [ebp - 0x54]
add esp, 0x10
movss xmm3, dword [ebp - 0x50]
movaps xmm0, xmm7
addss xmm0, dword [esi + 0x1564]
movss xmm4, dword [ebp - 0x11c]
movaps xmm2, xmm7
mov edx, dword [ebp - 0xe4]
addss xmm2, xmm4
movaps xmm1, xmm3
movss dword [ebp - 0x44], xmm7
addss xmm1, dword [ebp - 0x134]
movss dword [ebp - 0x124], xmm0
movaps xmm0, xmm3
addss xmm0, dword [esi + 0x1568]
movss dword [ebp - 0x40], xmm3
movss dword [ebp - 0xc4], xmm2
movss dword [ebp - 0x3c], xmm2
movss dword [ebp - 0xd4], xmm2
movss dword [ebp - 0x120], xmm0
movss dword [ebp - 0x14c], xmm1
jmp 0x437a5b
movss xmm0, dword [ebp - 0x54]
movss xmm1, dword [ebp - 0x50]
movaps xmm3, xmm0
movss xmm4, dword [ebp - 0x11c]
movaps xmm2, xmm1
mov ecx, dword [ebp - 0x10c]
addss xmm3, xmm4
addss xmm2, dword [ebp - 0x134]
movss dword [ebp - 0x44], xmm0
movss dword [ebp - 0x40], xmm1
mov eax, dword [ecx + 0xd0]
mov ecx, dword [ecx + 0xd4]
movaps xmm0, xmm3
movss dword [ebp - 0xd4], xmm3
movaps xmm1, xmm2
movss dword [ebp - 0xc4], xmm0
movss dword [ebp - 0x3c], xmm0
movss dword [ebp - 0x14c], xmm2
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x120], ecx
cmp byte [ebp - 0xef], 0
lea eax, [ebp - 0x124]
movss xmm0, dword [eax]
xorps xmm5, xmm5
movss dword [ebp - 0xfc], xmm0
xorps xmm6, xmm6
movss dword [ebp - 0x34], xmm0
movss xmm0, dword [eax + 4]
mov dword [ebp - 0x118], eax
movss dword [ebp - 0x38], xmm1
movss dword [ebp - 0x110], xmm1
movss dword [ebp - 0x30], xmm0
movss dword [ebp - 0x130], xmm5
movss dword [ebp - 0xcc], xmm6
je 0x437ab9
mov ecx, dword [edi + 0x20]
mov dword [ebp - 0xe8], ecx
jmp 0x437abf
mov ecx, dword [ebp - 0xe8]
cmp byte [ebp - 0xcd], 0
jne 0x437e81
cmp byte [ebp - 0x148], 0
jne 0x437e81
test dl, dl
je 0x437b39
mov eax, dword [ebp - 0xe8]
xor ecx, ecx
mov dl, byte [eax]
lea edi, [eax + 1]
test dl, dl
je 0x437b02
nop
cmp dl, 0xa
lea eax, [ecx + 1]
mov dl, byte [edi]
cmovne eax, ecx
inc edi
mov ecx, eax
test dl, dl
jne 0x437af0
mov al, byte [edi - 1]
dec edi
mov dword [ebp - 0xd8], edi
cmp al, 0xa
je 0x437b15
cmp al, 0xd
je 0x437b15
inc ecx
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [esi + 0x1944]
movss dword [ebp - 0xcc], xmm0
movaps xmm0, xmm4
movss dword [ebp - 0x130], xmm0
jmp 0x437b7d
mov eax, dword [ebp - 0xd8]
cmp dword [esi + 0x1be0], eax
jne 0x437b4e
mov edi, dword [edi + 8]
add edi, ecx
jmp 0x437b68
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x437b51
mov edi, dword [ebp - 0xe8]
sub ecx, edx
add edi, ecx
mov ecx, dword [ebp - 0xe8]
mov eax, edi
mov dword [ebp - 0xd8], edi
sub eax, ecx
cmp eax, 0x200000
jge 0x437ce7
movss xmm1, dword [0x445088]
xor ecx, ecx
call fcn.0040bc90
mov ecx, dword [ebp - 0xbc]
lea edx, [ebp - 0x44]
cmp byte [ebp - 0xe4], 0
mov esi, dword [ebp - 0x10c]
mov dword [ebp - 0xc4], 0
cmovne edx, dword [ebp - 0xc4]
mov edi, dword [ecx + 0x1940]
movss xmm2, dword [ecx + 0x1944]
mov esi, dword [esi + 0x23c]
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0xf4], eax
test eax, 0xff000000
je 0x437cdb
test ecx, ecx
jne 0x437c08
mov ecx, dword [ebp - 0xe8]
lea eax, [ecx + 1]
mov dword [ebp - 0xc4], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x437bf1
sub ecx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xe8]
add ecx, eax
jmp 0x437c0e
mov eax, dword [ebp - 0xe8]
cmp eax, ecx
je 0x437cdb
test edi, edi
jne 0x437c20
mov eax, dword [esi + 0x2c]
mov edi, dword [eax + 8]
ucomiss xmm2, dword [0x44500c]
lahf
test ah, 0x44
jp 0x437c35
mov eax, dword [esi + 0x2c]
movss xmm2, dword [eax + 0xc]
movups xmm0, xmmword [esi + 0x60]
movups xmmword [ebp - 0x140], xmm0
test edx, edx
je 0x437ca3
movss xmm1, dword [edx]
movss xmm0, dword [ebp - 0x140]
comiss xmm0, xmm1
jae 0x437c5d
movss dword [ebp - 0x140], xmm1
movss xmm1, dword [edx + 4]
movss xmm0, dword [ebp - 0x13c]
comiss xmm0, xmm1
jae 0x437c77
movss dword [ebp - 0x13c], xmm1
movss xmm0, dword [edx + 8]
comiss xmm0, dword [ebp - 0x138]
ja 0x437c8d
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [edx + 0xc]
comiss xmm0, dword [ebp - 0x134]
ja 0x437ca3
movss dword [ebp - 0x134], xmm0
mov eax, dword [ebp - 0x118]
test edx, edx
push dword [eax + 4]
push dword [eax]
setne al
movzx eax, al
push eax
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x140]
push ecx
push dword [ebp - 0xe8]
mov ecx, edi
push eax
push dword [ebp - 0xf4]
push esi
call fcn.0042c400
mov esi, dword [ebp - 0xbc]
mov edi, dword [ebp - 0xd8]
cmp byte [ebp - 0x158], 0
je 0x437cf5
call fcn.00416d80
cmp byte [ebp - 0xe4], 0
je 0x437dac
mov ecx, dword [0x449b68]
movss xmm1, dword [ebp - 0xcc]
addss xmm1, dword [esi + 0x1568]
movss xmm0, dword [ebp - 0x130]
mov eax, dword [ecx + 0x1ba8]
movss dword [ebp - 0x138], xmm0
movss dword [ebp - 0x134], xmm1
mov byte [eax + 0x8c], 1
mov eax, dword [ecx + 0x1ba8]
cmp byte [eax + 0x8f], 0
jne 0x437da2
movss xmm3, dword [eax + 0xd0]
lea ecx, [ebp - 0x138]
movaps xmm4, xmm3
movss dword [ebp - 0x24], xmm3
addss xmm4, xmm0
movss xmm0, dword [eax + 0xd4]
movaps xmm2, xmm0
movss dword [ebp - 0x20], xmm0
addss xmm2, xmm1
movss xmm1, dword [0x445148]
movss dword [ebp - 0x1c], xmm4
movss dword [ebp - 0x18], xmm2
call fcn.00417060
push 0
push 0
xor edx, edx
lea ecx, [ebp - 0x24]
call fcn.00417190
add esp, 8
call fcn.00411990
call fcn.00417640
cmp byte [esi + 0x2fa0], 0
je 0x437de9
cmp byte [ebp - 0x158], 0
jne 0x437de9
mov eax, dword [0x449b68]
lea ecx, [ebp - 0x34]
mov edx, dword [ebp - 0xe8]
push edi
mov dword [eax + 0x2fb8], 0x444f40
mov dword [eax + 0x2fbc], 0x444f3c
call fcn.0041c350
add esp, 4
movss xmm0, dword [ebp - 0x164]
comiss xmm0, dword [0x44500c]
jbe 0x437e42
movss xmm0, dword [ebp - 0x4c]
xor edx, edx
addss xmm0, dword [esi + 0x157c]
mov ecx, dword [ebp - 0x150]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [ebp - 0x50]
addss xmm0, dword [esi + 0x1568]
movss dword [ebp - 0x134], xmm0
push dword [ebp - 0x134]
push dword [ebp - 0x138]
push 1
call fcn.0040be40
add esp, 0xc
mov dl, byte [ebp - 0xf0]
mov ecx, dword [ebx + 0x14]
test dl, dl
je 0x437e6c
test ecx, 0x8000000
jne 0x437e6c
mov eax, dword [0x449b68]
or dword [eax + 0x1c50], 4
mov word [eax + 0x1bf0], 0x101
test cl, 0x20
movzx eax, dl
movzx ecx, byte [ebp - 0xbe]
cmovne eax, ecx
jmp 0x435595
mov eax, dword [edi + 8]
xor edx, edx
mov dword [ebp - 0x15c], eax
xorps xmm7, xmm7
add eax, ecx
movss dword [ebp - 0xf4], xmm5
mov ecx, dword [edi + 0x14]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xe0], ecx
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x12c], 0xfffffc18
mov dword [ebp - 0x104], 0xfffffc18
cmp byte [ebp - 0xcd], dl
je 0x437ef0
mov eax, dword [edi + 0x3c]
or esi, 0xffffffff
mov dword [ebp - 0x12c], esi
lea eax, [ecx + eax*2]
mov dword [ebp - 0x144], eax
lea edx, [esi + 2]
cmp byte [ebp - 0x148], 0
je 0x437f23
mov ecx, dword [edi + 0x44]
cmp dword [edi + 0x40], ecx
mov eax, dword [ebp - 0xe0]
cmovl ecx, dword [edi + 0x40]
inc edx
mov dword [ebp - 0x104], 0xffffffff
lea eax, [eax + ecx*2]
mov ecx, dword [ebp - 0xe0]
mov dword [ebp - 0x108], eax
mov esi, dword [ebp - 0xe0]
mov eax, dword [ebp - 0xe4]
movzx eax, al
add edx, eax
xor eax, eax
movzx esi, word [esi]
test si, si
mov dword [ebp - 0x118], eax
mov esi, dword [ebp - 0x12c]
je 0x437fc3
mov edi, dword [ebp - 0xe0]
movzx esi, word [edi]
mov edi, dword [ebp - 0x12c]
nop dword [eax]
cmp si, 0xa
jne 0x437f9d
inc eax
mov dword [ebp - 0x118], eax
cmp edi, 0xffffffff
jne 0x437f81
cmp ecx, dword [ebp - 0x144]
jb 0x437f81
dec edx
mov edi, eax
test edx, edx
jle 0x437fb1
cmp dword [ebp - 0x104], 0xffffffff
jne 0x437f9d
cmp ecx, dword [ebp - 0x108]
jb 0x437f9d
dec edx
mov dword [ebp - 0x104], eax
test edx, edx
jle 0x437fb1
movzx eax, word [ecx + 2]
add ecx, 2
mov esi, eax
test ax, ax
mov eax, dword [ebp - 0x118]
jne 0x437f60
mov dword [ebp - 0x12c], edi
mov edi, dword [ebp - 0xf8]
mov esi, dword [ebp - 0x12c]
mov edx, dword [ebp - 0xe0]
inc eax
cmp esi, 0xffffffff
mov dword [ebp - 0x118], eax
mov ecx, eax
cmovne ecx, esi
mov esi, dword [ebp - 0x144]
mov dword [ebp - 0x12c], ecx
mov ecx, dword [ebp - 0x104]
cmp ecx, 0xffffffff
cmove ecx, eax
mov dword [ebp - 0x104], ecx
mov ecx, esi
cmp esi, edx
jbe 0x43800e
nop dword [eax]
cmp word [ecx - 2], 0xa
je 0x43800e
add ecx, 0xfffffffe
cmp ecx, edx
ja 0x438000
mov eax, dword [0x449b68]
movaps xmm1, xmm5
movaps xmm4, xmm5
mov edx, dword [eax + 0x1940]
movss xmm2, dword [eax + 0x1944]
divss xmm2, dword [edx + 0x10]
cmp ecx, esi
jae 0x438078
mov edi, dword [ebp - 0x144]
movzx eax, word [ecx]
add ecx, 2
mov esi, eax
cmp eax, 0xa
jne 0x43804c
maxss xmm1, xmm4
movaps xmm4, xmm5
jmp 0x43806e
cmp esi, 0xd
je 0x43806e
mov esi, eax
cmp esi, dword [edx]
jge 0x438061
mov eax, dword [edx + 8]
movss xmm0, dword [eax + esi*4]
jmp 0x438066
movss xmm0, dword [edx + 0xc]
mulss xmm0, xmm2
addss xmm4, xmm0
cmp ecx, edi
jb 0x438036
mov edi, dword [ebp - 0xf8]
cmp dword [ebp - 0x104], 0
maxss xmm4, xmm1
movd xmm5, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0xbc]
cvtdq2ps xmm5, xmm5
movss xmm3, dword [ecx + 0x1944]
mulss xmm5, xmm3
movss dword [ebp - 0x160], xmm4
movss dword [ebp - 0x120], xmm5
jl 0x438154
mov eax, dword [ebp - 0x108]
mov ecx, eax
mov esi, dword [ebp - 0xe0]
cmp eax, esi
jbe 0x4380dc
cmp word [ecx - 2], 0xa
je 0x4380d6
add ecx, 0xfffffffe
cmp ecx, esi
ja 0x4380c8
mov eax, dword [ebp - 0x108]
xorps xmm0, xmm0
xorps xmm1, xmm1
xorps xmm7, xmm7
cmp ecx, eax
jae 0x438133
mov edi, dword [ebp - 0x108]
nop
movzx eax, word [ecx]
add ecx, 2
cmp eax, 0xa
jne 0x438104
maxss xmm1, xmm7
movaps xmm7, xmm0
jmp 0x438129
cmp eax, 0xd
je 0x438129
mov esi, eax
cmp esi, dword [edx]
jge 0x438119
mov eax, dword [edx + 8]
movss xmm0, dword [eax + esi*4]
jmp 0x43811e
movss xmm0, dword [edx + 0xc]
mulss xmm0, xmm2
addss xmm7, xmm0
xorps xmm0, xmm0
cmp ecx, edi
jb 0x4380f0
mov edi, dword [ebp - 0xf8]
movd xmm0, dword [ebp - 0x104]
maxss xmm7, xmm1
mov ecx, dword [ebp - 0xbc]
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm3
movss dword [ebp - 0xf4], xmm0
mov edx, dword [ebp - 0xe4]
test dl, dl
je 0x43818a
movd xmm6, dword [ebp - 0x118]
cvtdq2ps xmm6, xmm6
mulss xmm6, xmm3
movss xmm3, dword [ebp - 0x11c]
movaps xmm0, xmm3
movss dword [ebp - 0xcc], xmm6
movss dword [ebp - 0x130], xmm0
jmp 0x438192
movss xmm3, dword [ebp - 0x11c]
cmp byte [ebp - 0xcd], 0
je 0x4382b0
cmp byte [edi + 0xe6c], 0
je 0x4382b0
test dword [ebx + 0x14], 0x1000
jne 0x438201
movss xmm2, dword [edi + 0x38]
movaps xmm0, xmm3
comiss xmm2, xmm4
mulss xmm0, dword [0x44503c]
movaps xmm1, xmm4
subss xmm3, dword [ecx + 0x1564]
jbe 0x4381f2
subss xmm1, xmm0
xorps xmm0, xmm0
maxss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x38], xmm0
jmp 0x438208
subss xmm1, xmm3
comiss xmm1, xmm2
jb 0x438208
addss xmm0, xmm1
jmp 0x4381e0
mov dword [edi + 0x38], 0
xorps xmm2, xmm2
test dl, dl
je 0x43829c
movss xmm3, dword [ebp - 0x154]
movaps xmm0, xmm5
subss xmm0, dword [ecx + 0x1944]
movss xmm4, dword [ebp - 0x134]
comiss xmm3, xmm0
jbe 0x43823c
xorps xmm3, xmm3
maxss xmm3, xmm0
jmp 0x438258
movaps xmm0, xmm5
subss xmm0, xmm4
comiss xmm0, xmm3
jb 0x438258
movss xmm3, dword [ecx + 0x1568]
addss xmm3, xmm3
addss xmm3, xmm0
comiss xmm2, xmm3
movss xmm1, dword [ecx + 0x1568]
jbe 0x43826a
xorps xmm1, xmm1
jmp 0x43827e
addss xmm1, xmm1
addss xmm1, xmm6
subss xmm1, xmm4
maxss xmm1, xmm2
minss xmm1, xmm3
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [eax + 0x5c]
subss xmm0, xmm1
addss xmm0, dword [ebp - 0x30]
movss dword [ebp - 0x30], xmm0
movss dword [eax + 0x5c], xmm1
mov byte [edi + 0xe6c], 0
movss xmm0, dword [ebp - 0x34]
movss dword [ebp - 0xfc], xmm0
cmp byte [ebp - 0x148], 0
movss xmm4, dword [edi + 0x38]
movss dword [ebp - 0x11c], xmm4
je 0x4385d8
mov edx, dword [edi + 0x44]
mov eax, edx
mov ecx, dword [edi + 0x40]
cmp ecx, edx
mov esi, dword [ebp - 0xe0]
cmovl eax, ecx
cmovge edx, ecx
cmp byte [ebp - 0xcd], 0
lea esi, [esi + eax*2]
mov eax, dword [ebp - 0xe0]
lea eax, [eax + edx*2]
mov dword [ebp - 0x118], eax
je 0x438305
movss xmm1, dword [0x445088]
jmp 0x43830d
movss xmm1, dword [0x445054]
mov ecx, 0x2f
call fcn.0040bc90
cmp byte [ebp - 0xe4], 0
mov dword [ebp - 0x12c], eax
je 0x43833b
xorps xmm0, xmm0
movss dword [ebp - 0x108], xmm0
movss dword [ebp - 0x144], xmm0
jmp 0x43835e
movss xmm0, dword [0x445148]
movss dword [ebp - 0x108], xmm0
movss xmm0, dword [0x4450b8]
movss dword [ebp - 0x144], xmm0
xorps xmm0, xmm0
movss xmm4, dword [ebp - 0x30]
addss xmm4, dword [ebp - 0xf4]
movss xmm6, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0x118]
movaps xmm3, xmm6
addss xmm3, xmm7
subss xmm4, xmm0
subss xmm3, dword [ebp - 0x11c]
movss dword [ebp - 0xf4], xmm4
cmp esi, ecx
jae 0x4385ce
movss xmm7, dword [ebp - 0x110]
mov edi, dword [ebp - 0xbc]
nop word [eax + eax]
movss xmm6, dword [edi + 0x1944]
movaps xmm0, xmm7
addss xmm0, xmm6
comiss xmm4, xmm0
ja 0x4385b6
movss xmm0, dword [ebp - 0x50]
comiss xmm0, xmm4
jbe 0x4383f9
cmp esi, ecx
jae 0x43857b
nop word [eax + eax]
mov ax, word [esi]
add esi, 2
cmp ax, 0xa
je 0x43857b
cmp esi, ecx
jb 0x4383e0
jmp 0x43857b
mov eax, dword [0x449b68]
xorps xmm0, xmm0
xorps xmm5, xmm5
xorps xmm1, xmm1
mov edx, dword [eax + 0x1940]
movss xmm2, dword [eax + 0x1944]
divss xmm2, dword [edx + 0x10]
cmp esi, ecx
jae 0x438466
nop
movzx eax, word [esi]
add esi, 2
cmp eax, 0xa
je 0x438459
cmp eax, 0xd
je 0x438453
mov ecx, eax
cmp ecx, dword [edx]
jge 0x438440
mov eax, dword [edx + 8]
movss xmm0, dword [eax + ecx*4]
jmp 0x438445
movss xmm0, dword [edx + 0xc]
mov ecx, dword [ebp - 0x118]
mulss xmm0, xmm2
addss xmm1, xmm0
cmp esi, ecx
jb 0x438420
jmp 0x438463
xorps xmm5, xmm5
maxss xmm5, xmm1
xorps xmm1, xmm1
xorps xmm0, xmm0
maxss xmm1, xmm5
comiss xmm0, xmm1
jb 0x43849f
mov eax, dword [edi + 0x1940]
cmp dword [eax], 0x20
jle 0x438487
mov eax, dword [eax + 8]
movss xmm0, dword [eax + 0x80]
jmp 0x43848c
movss xmm0, dword [eax + 0xc]
mulss xmm0, dword [0x445050]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm2, dword [ebp - 0x108]
addss xmm1, xmm3
movss xmm0, dword [ebp - 0x144]
subss xmm2, xmm6
addss xmm3, dword [0x44500c]
movss xmm5, dword [ebp - 0xc4]
addss xmm0, xmm4
minss xmm1, xmm5
addss xmm2, xmm4
maxss xmm3, dword [ebp - 0x54]
minss xmm0, xmm7
movss dword [ebp - 0x1c], xmm1
maxss xmm2, dword [ebp - 0x50]
movss dword [ebp - 0x24], xmm3
comiss xmm0, dword [ebp - 0x50]
movss dword [ebp - 0x20], xmm2
movss dword [ebp - 0x18], xmm0
jbe 0x43857b
comiss xmm7, xmm2
jbe 0x43857b
comiss xmm1, dword [ebp - 0x54]
jbe 0x43857b
comiss xmm5, xmm3
jbe 0x43857b
push 0
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x1c]
push dword [ebp - 0x12c]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x10c]
mov ecx, dword [eax + 0x23c]
call fcn.004284b0
movss xmm0, dword [ebp - 0xd4]
movss xmm4, dword [ebp - 0x34]
movss xmm7, dword [ebp - 0x110]
mov ecx, dword [ebp - 0x118]
movss dword [ebp - 0xd4], xmm0
movss xmm0, dword [ebp - 0x14c]
movss dword [ebp - 0xfc], xmm4
movss xmm4, dword [ebp - 0xf4]
movss dword [ebp - 0x14c], xmm0
movss xmm6, dword [ebp - 0xfc]
movaps xmm3, xmm6
addss xmm4, dword [edi + 0x1944]
subss xmm3, dword [ebp - 0x11c]
movss dword [ebp - 0xf4], xmm4
cmp esi, ecx
jb 0x4383b0
movss xmm4, dword [ebp - 0x11c]
mov edi, dword [ebp - 0xf8]
jmp 0x4385e0
movss xmm6, dword [ebp - 0xfc]
movss xmm4, dword [ebp - 0x11c]
mov edi, dword [ebp - 0xf8]
jmp 0x4385e0
movss xmm4, dword [ebp - 0x11c]
jmp 0x4385e0
movss xmm6, dword [ebp - 0xfc]
cmp byte [ebp - 0xe4], 0
jne 0x4385f9
cmp dword [ebp - 0x15c], 0x200000
jge 0x438840
mov eax, dword [0x449b68]
xorps xmm5, xmm5
movups xmm2, xmmword [eax + 0x15f0]
comiss xmm5, xmm2
movaps xmm1, xmm2
shufps xmm1, xmm2, 0xff
mulss xmm1, dword [eax + 0x1528]
movups xmmword [ebp - 0x24], xmm2
jbe 0x438625
xorps xmm0, xmm0
jmp 0x438631
movss xmm0, dword [0x445088]
minss xmm0, xmm2
movss xmm2, dword [0x445118]
movss xmm7, dword [0x445050]
movss xmm3, dword [ebp - 0x20]
comiss xmm5, xmm3
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si ecx, xmm0
jbe 0x43865c
xorps xmm0, xmm0
jmp 0x438668
movss xmm0, dword [0x445088]
minss xmm0, xmm3
movss xmm3, dword [ebp - 0x1c]
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm5, xmm3
jbe 0x438688
xorps xmm0, xmm0
jmp 0x438694
movss xmm0, dword [0x445088]
minss xmm0, xmm3
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm5, xmm1
jbe 0x4386af
xorps xmm0, xmm0
jmp 0x4386bb
movss xmm0, dword [0x445088]
minss xmm0, xmm1
mov edx, dword [ebp - 0xbc]
subss xmm6, xmm4
mov eax, dword [ebp - 0x10c]
mulss xmm0, xmm2
mov dword [ebp - 0x15c], 0
movss xmm2, dword [edx + 0x1944]
mov edx, dword [edx + 0x1940]
addss xmm0, xmm7
mov dword [ebp - 0x110], edx
lea edx, [ebp - 0x44]
movss dword [ebp - 0x138], xmm6
cvttss2si esi, xmm0
movss xmm0, dword [ebp - 0x30]
shl esi, 0x18
subss xmm0, xmm5
or esi, ecx
mov ecx, dword [eax + 0x23c]
cmp byte [ebp - 0xe4], 0
mov eax, dword [ebp - 0xd8]
cmovne edx, dword [ebp - 0x15c]
mov dword [ebp - 0xf4], ecx
mov dword [ebp - 0xc4], eax
movss dword [ebp - 0x134], xmm0
test esi, 0xff000000
je 0x438843
test eax, eax
jne 0x438781
mov ecx, dword [ebp - 0xe8]
lea eax, [ecx + 1]
mov dword [ebp - 0x15c], eax
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x438760
sub ecx, dword [ebp - 0x15c]
mov eax, dword [ebp - 0xe8]
add eax, ecx
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xe8], eax
je 0x438843
cmp dword [ebp - 0x110], 0
jne 0x4387a2
mov eax, dword [ecx + 0x2c]
mov eax, dword [eax + 8]
mov dword [ebp - 0x110], eax
ucomiss xmm2, xmm5
lahf
test ah, 0x44
jp 0x4387b3
mov eax, dword [ecx + 0x2c]
movss xmm2, dword [eax + 0xc]
movups xmm0, xmmword [ecx + 0x60]
movups xmmword [ebp - 0x24], xmm0
test edx, edx
je 0x438806
movss xmm1, dword [edx]
movss xmm0, dword [ebp - 0x24]
comiss xmm0, xmm1
jae 0x4387d2
movss dword [ebp - 0x24], xmm1
movss xmm1, dword [edx + 4]
movss xmm0, dword [ebp - 0x20]
comiss xmm0, xmm1
jae 0x4387e6
movss dword [ebp - 0x20], xmm1
movss xmm0, dword [edx + 8]
comiss xmm0, dword [ebp - 0x1c]
ja 0x4387f6
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [edx + 0xc]
comiss xmm0, dword [ebp - 0x18]
ja 0x438806
movss dword [ebp - 0x18], xmm0
push dword [ebp - 0x134]
test edx, edx
push dword [ebp - 0x138]
setne al
movzx eax, al
push eax
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x24]
push dword [ebp - 0xc4]
push dword [ebp - 0xe8]
push eax
push esi
push ecx
mov ecx, dword [ebp - 0x110]
call fcn.0042c400
xorps xmm5, xmm5
cmp byte [ebp - 0xcd], 0
mov esi, dword [ebp - 0xbc]
je 0x437ce1
movss xmm0, dword [esi + 0x18]
addss xmm0, dword [edi + 0xe68]
movss dword [edi + 0xe68], xmm0
cmp byte [esi + 0xb2], 0
je 0x4388b8
comiss xmm5, xmm0
jae 0x4388b8
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x138], xmm0
fld qword [ebp - 0x138]
fld qword [0x4450b0]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIfmod
movss xmm0, dword [0x445074]
fstp qword [ebp - 0x138]
movsd xmm1, qword [ebp - 0x138]
cvtpd2ps xmm1, xmm1
comiss xmm0, xmm1
jae 0x4388b8
xor cl, cl
jmp 0x4388ba
mov cl, 1
movss xmm0, dword [ebp - 0x160]
movss xmm6, dword [0x445088]
addss xmm0, dword [ebp - 0x34]
subss xmm0, dword [ebp - 0x11c]
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x30]
addss xmm0, dword [ebp - 0x120]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm0, dword [0x44500c]
movss dword [ebp - 0x160], xmm1
movaps xmm4, xmm1
movss dword [ebp - 0x24], xmm1
addss xmm4, xmm6
cvttss2si eax, xmm0
movss dword [ebp - 0x1c], xmm4
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x120], xmm0
movaps xmm2, xmm0
movaps xmm3, xmm0
subss xmm2, dword [esi + 0x1944]
subss xmm3, dword [0x4450a0]
addss xmm2, dword [0x445050]
movss dword [ebp - 0x18], xmm3
movss dword [ebp - 0x20], xmm2
test cl, cl
je 0x4389da
comiss xmm3, dword [ebp - 0x50]
jbe 0x4389da
movss xmm5, dword [ebp - 0x14c]
comiss xmm5, xmm2
jbe 0x4389da
comiss xmm4, dword [ebp - 0x54]
jbe 0x4389da
movss xmm2, dword [ebp - 0xd4]
comiss xmm2, xmm1
jbe 0x4389da
sub esp, 8
movss dword [ebp - 0x138], xmm1
movaps xmm1, xmm6
movss dword [ebp - 0x134], xmm3
xor ecx, ecx
mov dword [esp + 4], 0x3f800000
call fcn.0040bc90
add esp, 4
push eax
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x10c]
mov ecx, dword [eax + 0x23c]
call fcn.004282b0
movss xmm1, dword [ebp - 0x160]
movss xmm0, dword [ebp - 0x120]
movss xmm6, dword [0x445088]
cmp byte [ebp - 0xec], 0
jne 0x437ce1
subss xmm0, dword [esi + 0x1944]
subss xmm1, xmm6
movss dword [esi + 0x2f4c], xmm0
movss dword [esi + 0x2f48], xmm1
jmp 0x437ce1