Function at 0x1003e950
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10045340
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x188
push esi
push edi
mov edi, dword [0x10050da8]
mov esi, edi
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0x74], 0x40
mov dword [ebp - 0x3c], esi
mov eax, dword [esi + 0x3e30]
mov byte [eax + 0x90], 1
mov eax, dword [esi + 0x3e30]
mov dword [ebp - 0x80], eax
cmp byte [eax + 0x93], 0
jne 0x1003ef17
mov edx, dword [ebx + 0x14]
mov ecx, edx
shr ecx, 0x1a
and ecx, 0xffffff01
mov dword [ebp - 0x30], ecx
mov ecx, edx
shr ecx, 0xe
and ecx, 0xffffff01
mov dword [ebp - 0x54], ecx
mov ecx, edx
shr ecx, 0xf
and ecx, 0xffffff01
mov dword [ebp - 0xd8], ecx
mov ecx, edx
shr ecx, 0x10
not cl
and ecx, 0xffffff01
mov dword [ebp - 0x7c], ecx
mov ecx, edx
shr ecx, 0x12
and ecx, 0xffffff01
cmp byte [ebp - 0x30], 0
mov dword [ebp - 0x9c], ecx
je 0x1003ea24
call fcn.1001d600
mov edi, dword [0x10050da8]
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax + 0xc8]
xor edx, edx
mov eax, dword [eax + 0xd0]
push dword [eax + ecx*4 - 4]
mov ecx, dword [ebp - 0xc4]
call fcn.10011460
add esp, 4
mov dword [ebp - 0x44], eax
cmp dword [edi + 0x3e68], eax
jne 0x1003ea55
mov dword [edi + 0x3e6c], eax
cmp dword [edi + 0x3eac], eax
jne 0x1003ea64
mov byte [edi + 0x3eb0], 1
cmp dword [edi + 0x3e50], eax
jne 0x1003ea88
push ecx
push dword [ebp - 0xc4]
mov edx, 0xb
mov ecx, eax
call fcn.100235f0
mov edi, dword [0x10050da8]
add esp, 8
mov eax, dword [ebp - 0xc4]
mov ecx, eax
cmp eax, 0xffffffff
jae 0x1003eaab
mov dl, byte [ecx]
test dl, dl
je 0x1003eaab
cmp dl, 0x23
jne 0x1003eaa5
cmp byte [ecx + 1], dl
je 0x1003eaab
inc ecx
cmp ecx, 0xffffffff
jb 0x1003ea95
movss xmm1, dword [0x1004c1ac]
movss xmm0, dword [edi + 0x3bcc]
movss dword [ebp - 0xc0], xmm1
cmp eax, ecx
jne 0x1003ead4
xorps xmm3, xmm3
movss dword [ebp - 0xf8], xmm3
jmp 0x1003eb1d
push 0
push ecx
push eax
push ecx
mov ecx, dword [edi + 0x3bc8]
lea eax, [ebp - 0x68]
mov dword [esp], 0xbf800000
movaps xmm3, xmm1
push eax
movaps xmm2, xmm0
call fcn.10031c20
movss xmm0, dword [ebp - 0x68]
xorps xmm3, xmm3
addss xmm0, dword [0x1004c078]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0xf8], xmm0
movss xmm0, dword [ebp - 0x64]
cmp byte [ebp - 0x30], 0
je 0x1003eb33
movss xmm0, dword [esi + 0x3bcc]
mulss xmm0, dword [0x1004c154]
test byte [edi + 0x3ec4], 1
movss xmm1, dword [esi + 0x37f0]
mov eax, dword [edi + 0x3e30]
movaps xmm2, xmm1
addss xmm2, xmm1
addss xmm2, xmm0
je 0x1003eb5f
movss xmm0, dword [edi + 0x3ec8]
jmp 0x1003eb67
movss xmm0, dword [eax + 0x184]
comiss xmm3, xmm0
jbe 0x1003eba6
cmp dword [eax + 0x174], 0
movss xmm1, dword [eax + 0x20c]
jne 0x1003eb86
cmp dword [edi + 0x41f4], 0
je 0x1003eb8e
movss xmm1, dword [eax + 0x1dc]
subss xmm1, dword [eax + 0xd4]
addss xmm1, xmm0
movss xmm0, dword [0x1004c080]
maxss xmm0, xmm1
cvttss2si eax, xmm0
lea ecx, [ebp - 0x68]
movd xmm1, eax
mov eax, dword [ebx + 0x10]
cvtdq2ps xmm1, xmm1
push dword [eax + 4]
push dword [eax]
call fcn.1001d520
movss xmm1, dword [ebp - 0xf8]
xorps xmm0, xmm0
add esp, 8
comiss xmm1, xmm0
jbe 0x1003ebe1
movaps xmm2, xmm1
addss xmm2, dword [esi + 0x3804]
jmp 0x1003ebe4
xorps xmm2, xmm2
mov edi, dword [ebp - 0x80]
lea eax, [ebp - 0x198]
movss xmm5, dword [ebp - 0x68]
addss xmm2, xmm5
movss dword [ebp - 0xa0], xmm5
push 0x3c
movss xmm4, dword [edi + 0xd8]
movss xmm3, dword [edi + 0xd4]
movaps xmm0, xmm4
addss xmm0, dword [ebp - 0x64]
movaps xmm1, xmm3
movss dword [ebp - 0x18], xmm3
addss xmm2, xmm3
movss dword [ebp - 0x4c], xmm4
addss xmm1, xmm5
movss dword [ebp - 0xf4], xmm3
push 0
movss dword [ebp - 0xe8], xmm0
movaps xmm0, xmm4
addss xmm0, dword [ebp - 0x64]
push eax
movss dword [ebp - 0xf0], xmm4
movss dword [ebp - 0xec], xmm1
movss dword [ebp - 0x20], xmm2
movss dword [ebp - 0x38], xmm0
movss dword [ebp - 0xb4], xmm3
movss dword [ebp - 0xb0], xmm4
movss dword [ebp - 0xac], xmm2
movss dword [ebp - 0xa8], xmm0
mov dword [ebp - 0x78], edi
call sub.VCRUNTIME140.dll_memset
movss xmm1, dword [ebp - 0x38]
lea ecx, [ebp - 0x8c]
subss xmm1, dword [ebp - 0x4c]
movss xmm0, dword [ebp - 0x20]
add esp, 0xc
subss xmm0, dword [ebp - 0x18]
movss dword [ebp - 0x88], xmm1
movss xmm1, dword [esi + 0x37f0]
movss dword [ebp - 0x8c], xmm0
call fcn.1001d150
cmp byte [ebp - 0x30], 0
je 0x1003ef95
mov edx, dword [ebp - 0x44]
lea eax, [ebp - 0xf4]
push pe_nt_image_headers32
push eax
lea ecx, [ebp - 0xb4]
call fcn.1001d280
add esp, 8
test al, al
je 0x1003ef12
movups xmm0, xmmword [esi + 0x3ed8]
mov eax, dword [esi + 0x3ee0]
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0xb8]
movups xmmword [ebp - 0x198], xmm0
push eax
movups xmm0, xmmword [esi + 0x3ee8]
mov dword [ebp - 0xb8], 3
movups xmmword [ebp - 0x188], xmm0
movups xmm0, xmmword [esi + 0x3ef8]
movups xmmword [ebp - 0x178], xmm0
movq xmm0, qword [esi + 0x3f08]
mov esi, dword [0x10050da8]
movq qword [ebp - 0x168], xmm0
movss xmm0, dword [ebp - 0x18]
movss dword [edi + 0xd4], xmm0
movss xmm0, dword [ebp - 0x4c]
lea ecx, [esi + 0x3f74]
movss dword [edi + 0xd8], xmm0
movups xmm0, xmmword [esi + 0x38a8]
movups xmmword [ebp - 0xb4], xmm0
call fcn.10023d00
mov edi, dword [ebp - 0x3c]
lea eax, [ebp - 0x90]
push eax
mov dword [ebp - 0x90], 7
movups xmm0, xmmword [edi + 0x38e8]
movups xmmword [esi + 0x38a8], xmm0
mov esi, dword [0x10050da8]
movss xmm0, dword [edi + 0x37f4]
movss dword [ebp - 0x18], xmm0
movss xmm0, dword [esi + 0x37dc]
lea ecx, [esi + 0x3f80]
movss dword [ebp - 0x8c], xmm0
call fcn.10023c30
movss xmm0, dword [ebp - 0x18]
lea eax, [ebp - 0x90]
movss dword [esi + 0x37dc], xmm0
mov esi, dword [0x10050da8]
movss xmm0, dword [edi + 0x37f8]
movss dword [ebp - 0x18], xmm0
push eax
movss xmm0, dword [esi + 0x37e0]
lea ecx, [esi + 0x3f80]
mov dword [ebp - 0x90], 8
movss dword [ebp - 0x8c], xmm0
call fcn.10023c30
movss xmm0, dword [ebp - 0x18]
lea eax, [ebp - 0x90]
movss dword [esi + 0x37e0], xmm0
mov esi, dword [0x10050da8]
push eax
mov dword [ebp - 0x90], 2
movss xmm1, dword [esi + 0x37b8]
lea ecx, [esi + 0x3f80]
movss xmm0, dword [esi + 0x37bc]
movss dword [ebp - 0x8c], xmm1
movss dword [ebp - 0x88], xmm0
call fcn.10023c30
movss xmm1, dword [ebp - 0xec]
lea eax, [ebp - 0x8c]
movss xmm0, dword [ebp - 0xe8]
subss xmm1, dword [ebp - 0xf4]
subss xmm0, dword [ebp - 0xf0]
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0xc4]
push 4
push 1
push eax
mov dword [esi + 0x37b8], 0
mov dword [esi + 0x37bc], 0
movss dword [ebp - 0x8c], xmm1
movss dword [ebp - 0x88], xmm0
call fcn.10017560
add esp, 0xc
mov byte [ebp - 0x31], al
mov ecx, 3
call fcn.10011f60
mov esi, dword [0x10050da8]
mov ecx, dword [esi + 0x3f74]
lea edx, [ecx + ecx*4]
mov ecx, dword [esi + 0x3f7c]
mov eax, dword [ecx + edx*4 - 0x14]
movups xmm0, xmmword [ecx + edx*4 - 0x10]
shl eax, 4
movups xmmword [eax + esi + 0x3878], xmm0
dec dword [esi + 0x3f74]
cmp byte [ebp - 0x31], 0
jne 0x1003ef2c
call fcn.10017760
call fcn.1001d730
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov esi, edi
mov edx, dword [esi + 0x3e30]
mov dword [ebp - 0x78], edx
movsx ecx, word [edx + 0x12e]
mov eax, dword [edx + 0x128]
bts ecx, eax
movss xmm0, dword [edx + 0xd4]
mov word [edx + 0x12e], cx
addss xmm0, dword [esi + 0x37ec]
movss dword [edx + 0xd4], xmm0
movss xmm0, dword [esi + 0x37f0]
addss xmm0, dword [edx + 0xd8]
movss dword [edx + 0xd8], xmm0
movss xmm0, dword [ebp - 0x68]
subss xmm0, dword [edx + 0x84]
movss dword [ebp - 0xa0], xmm0
jmp 0x1003efcc
test dword [ebx + 0x14], 0x10000000
jne 0x1003efc3
mov edx, dword [ebp - 0x44]
lea eax, [ebp - 0xf4]
push pe_nt_image_headers32
push eax
lea ecx, [ebp - 0xb4]
call fcn.1001d280
add esp, 8
test al, al
je 0x1003ef17
mov eax, dword [esi + 0x3ee0]
mov dword [ebp - 0x50], eax
mov edx, dword [ebp - 0x44]
lea ecx, [ebp - 0xf4]
call fcn.10013a00
mov dl, al
mov byte [ebp - 0x45], dl
test dl, dl
je 0x1003efed
mov dword [esi + 0x4150], 1
mov edi, dword [0x10050da8]
xor eax, eax
mov ecx, dword [ebp - 0x44]
add edi, 0x4284
cmp dword [edi], ecx
cmovne edi, eax
mov eax, dword [ebp - 0x50]
shr eax, 8
and al, 1
mov dword [ebp - 0x84], edi
mov dword [ebp - 0x50], eax
mov eax, dword [esi + 0x3e68]
cmp eax, ecx
je 0x1003f03d
cmp dword [esi + 0x3ffc], ecx
je 0x1003f037
cmp dword [esi + 0x3ff0], ecx
jne 0x1003f03d
cmp dword [esi + 0x4018], 2
jne 0x1003f03d
mov byte [ebp - 0x1b], 1
jmp 0x1003f041
mov byte [ebp - 0x1b], 0
test dl, dl
je 0x1003f052
cmp byte [esi + 0x3670], 0
mov byte [ebp - 0x23], 1
jne 0x1003f056
mov byte [ebp - 0x23], 0
cmp byte [ebp - 0x30], 0
je 0x1003f0bd
test edi, edi
je 0x1003f0bd
test eax, eax
jne 0x1003f0bd
mov eax, dword [ebp - 0x78]
xor edx, edx
mov ecx, dword [eax + 0xc8]
mov eax, dword [eax + 0xd0]
push dword [eax + ecx*4 - 4]
mov ecx, str.SCROLLY
call fcn.10011460
mov ecx, dword [0x10050da8]
add esp, 4
mov dword [ebp - 0x18], eax
cmp dword [ecx + 0x3e50], eax
jne 0x1003f0af
push ecx
push str.SCROLLY
mov edx, 0xb
mov ecx, eax
call fcn.100235f0
mov eax, dword [ebp - 0x18]
add esp, 8
cmp dword [esi + 0x3eac], eax
jne 0x1003f0bd
mov byte [ebp - 0x1a], 1
jmp 0x1003f0d0
mov eax, dword [ebp - 0x30]
mov byte [ebp - 0x1a], 0
test al, al
je 0x1003f145
mov byte [ebp - 0x1a], 0
test edi, edi
je 0x1003f145
mov eax, dword [ebp - 0x78]
mov ecx, str.SCROLLY
mov edx, dword [eax + 0xc8]
mov eax, dword [eax + 0xd0]
push dword [eax + edx*4 - 4]
xor edx, edx
call fcn.10011460
mov ecx, dword [0x10050da8]
add esp, 4
mov dword [ebp - 0x18], eax
cmp dword [ecx + 0x3e50], eax
jne 0x1003f11b
push ecx
push str.SCROLLY
mov edx, 0xb
mov ecx, eax
call fcn.100235f0
mov eax, dword [ebp - 0x18]
add esp, 8
cmp dword [esi + 0x3e68], eax
mov eax, dword [ebp - 0x30]
jne 0x1003f145
mov edx, dword [ebp - 0x78]
mov cl, 1
mov byte [ebp - 0x22], cl
mov byte [ebp - 0x29], 0
mov byte [ebp - 0x28], 0
movss xmm0, dword [edx + 0x60]
movss dword [ebp - 0xc0], xmm0
jmp 0x1003f16d
xor cl, cl
mov byte [ebp - 0x29], 0
mov byte [ebp - 0x28], 0
mov byte [ebp - 0x22], cl
test al, al
je 0x1003f168
mov edx, dword [ebp - 0x78]
movss xmm0, dword [edx + 0x60]
movss dword [ebp - 0xc0], xmm0
jmp 0x1003f16d
xor cl, cl
mov byte [ebp - 0x22], cl
test edi, edi
je 0x1003f17c
xor al, 1
cmp byte [edi + 0x53], al
je 0x1003f17c
mov al, 1
jmp 0x1003f17e
xor al, al
cmp byte [ebp - 0x23], 0
mov byte [ebp - 0x19], al
mov dword [ebp - 0x4c], 1
jne 0x1003f1ad
cmp byte [ebp - 0x1a], 0
jne 0x1003f1ad
cmp byte [ebp - 0x1b], 0
jne 0x1003f1ad
cmp byte [ebp - 0x50], 0
jne 0x1003f1ad
mov byte [ebp - 0x1a], 0
test cl, cl
jne 0x1003f1b1
mov byte [ebp - 0x11], cl
jmp 0x1003f1c0
mov byte [ebp - 0x1a], 1
mov ecx, dword [ebp - 0x44]
mov byte [ebp - 0x11], 1
cmp dword [esi + 0x3e68], ecx
jne 0x1003f1c8
test al, al
je 0x1003f3fb
mov ecx, dword [ebx + 8]
lea edi, [esi + 0x4284]
mov dword [ebp - 0x84], edi
mov dword [edi + 0xe68], 0xbe99999a
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f1e4
mov eax, dword [edi + 0x28]
sub ecx, edx
lea edx, [ecx + 1]
mov dword [ebp - 0x18], edx
cmp edx, eax
jle 0x1003f225
test eax, eax
je 0x1003f20d
cdq
sub eax, edx
mov edx, dword [ebp - 0x18]
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x28]
jmp 0x1003f212
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [edi + 0x24]
push eax
call fcn.10024190
mov edx, dword [ebp - 0x18]
push edx
push dword [ebx + 8]
mov dword [edi + 0x24], edx
push dword [edi + 0x2c]
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [edi + 0x10]
add esp, 0xc
cmp eax, 0x41
jge 0x1003f26c
test eax, eax
je 0x1003f252
cdq
sub eax, edx
lea edx, [edi + 0xc]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x1003f25a
mov ecx, 8
lea edx, [edi + 0xc]
mov eax, 0x41
cmp ecx, eax
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.10024210
lea eax, [edi + 0x18]
mov dword [edi + 0xc], 0x41
mov ecx, dword [eax + 4]
test ecx, ecx
jns 0x1003f299
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x18]
call fcn.10024190
lea eax, [edi + 0x18]
mov dword [eax], 0
mov ecx, dword [edi + 0x14]
mov edx, ecx
mov eax, dword [ebx + 8]
mov dword [ebp - 0x40], ecx
add ecx, 0x7e
mov byte [edi + 0x30], 0
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], edx
cmp edx, ecx
jae 0x1003f2fc
mov esi, eax
nop dword [eax]
cmp byte [esi], 0
je 0x1003f2f6
push 0
mov edx, esi
lea ecx, [ebp - 0x18]
call fcn.10011720
mov edx, dword [ebp - 0x20]
add esi, eax
mov eax, dword [ebp - 0x18]
add esp, 4
mov dword [ebp - 0x38], esi
test eax, eax
je 0x1003f2f6
mov word [edx], ax
add edx, 2
mov eax, dword [ebp - 0x40]
add eax, 0x7e
mov dword [ebp - 0x20], edx
cmp edx, eax
jb 0x1003f2c0
mov esi, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
sub eax, dword [ebx + 8]
xor ecx, ecx
mov word [edx], cx
sub edx, dword [ebp - 0x40]
sar edx, 1
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x44]
mov dword [edi + 4], edx
cmp dword [edi], eax
jne 0x1003f346
cmp byte [ebp - 0x19], cl
jne 0x1003f346
cmp dword [edi + 0x3c], edx
mov ecx, edx
mov byte [ebp - 0x31], 1
cmovl ecx, dword [edi + 0x3c]
cmp dword [edi + 0x40], edx
mov dword [edi + 0x3c], ecx
mov ecx, edx
cmovl ecx, dword [edi + 0x40]
cmp dword [edi + 0x44], edx
mov dword [edi + 0x40], ecx
cmovl edx, dword [edi + 0x44]
mov cl, byte [ebp - 0x31]
mov dword [edi + 0x44], edx
jmp 0x1003f3a6
mov dword [edi], eax
xor cl, cl
mov al, byte [ebp - 0x30]
xor al, 1
mov dword [edi + 0x38], 0
mov dword [edi + 0xe5a], 0x630000
mov dword [edi + 0xe60], 0
mov dword [edi + 0xe64], 0x3e7
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], 0
mov dword [edi + 0x3c], 0
mov word [edi + 0x51], 1
mov dword [edi + 0x58], 0
mov byte [edi + 0x50], cl
mov byte [edi + 0x53], al
mov byte [edi + 0x48], cl
mov dword [edi + 0x4c], 0
cmp byte [ebp - 0x30], 0
mov edx, dword [ebx + 0x14]
jne 0x1003f3ef
mov eax, dword [ebp - 0x28]
test dl, 0x10
movzx eax, al
cmovne eax, dword [ebp - 0x4c]
cmp byte [ebp - 0x1b], 0
mov dword [ebp - 0x28], eax
je 0x1003f3d6
test cl, cl
je 0x1003f3d2
test byte [esi + 0x4000], 4
jne 0x1003f3d6
mov byte [ebp - 0x28], 1
cmp byte [ebp - 0x50], 0
jne 0x1003f3eb
cmp byte [ebp - 0x23], 0
je 0x1003f3ef
cmp byte [esi + 0xd68], 0
je 0x1003f3ef
mov byte [ebp - 0x28], 1
test edx, 0x2000
je 0x1003f3fb
mov byte [edi + 0x48], 1
mov ecx, dword [ebp - 0x44]
cmp dword [esi + 0x3e68], ecx
je 0x1003f4a3
cmp byte [ebp - 0x1a], 0
je 0x1003f49b
mov edx, dword [ebp - 0x80]
call fcn.10013780
call fcn.1001ecc0
mov ecx, edx
call fcn.1001c1a0
mov eax, dword [esi + 0x3e7c]
mov edx, dword [ebx + 0x14]
or eax, 3
cmp byte [ebp - 0x30], 0
mov dword [esi + 0x3e7c], eax
jne 0x1003f444
test dl, dl
jns 0x1003f44d
or eax, 0xc
mov dword [esi + 0x3e7c], eax
mov ecx, dword [0x10050da8]
or dword [esi + 0x3e80], 2
or dword [ecx + 0x3e84], 0x80
mov eax, dword [ecx + 0x3e84]
or eax, 0x100
cmp byte [ebp - 0x30], 0
mov dword [ecx + 0x3e84], eax
je 0x1003f487
or eax, 0x20
or eax, 0x40
mov dword [ecx + 0x3e84], eax
test edx, 0x440
je 0x1003f498
or eax, 1
mov dword [ecx + 0x3e84], eax
mov ecx, dword [ebp - 0x44]
cmp dword [esi + 0x3e68], ecx
jne 0x1003f4d4
test edi, edi
jne 0x1003f4af
call fcn.10013850
mov ecx, dword [ebp - 0x44]
cmp dword [esi + 0x3e68], ecx
jne 0x1003f4d4
cmp byte [esi + 0x3670], 0
je 0x1003f4de
cmp byte [ebp - 0x11], 0
jne 0x1003f4de
cmp byte [ebp - 0x1a], 0
jne 0x1003f4de
mov byte [ebp - 0x29], 1
mov cl, 1
jmp 0x1003f4e4
test edi, edi
je 0x1003f4e2
cmp byte [ebp - 0x22], 0
je 0x1003f4e2
mov cl, 1
jmp 0x1003f4e4
xor cl, cl
mov byte [ebp - 0x21], cl
test edi, edi
je 0x1003f501
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x1003f4f9
cmp byte [ebp - 0x28], 0
je 0x1003f501
test cl, cl
je 0x1003f501
mov cl, 1
jmp 0x1003f503
xor cl, cl
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x58], ecx
mov byte [ebp - 0x46], cl
mov byte [ebp - 0x31], 0
mov byte [ebp - 0x1a], 0
test dl, dl
je 0x1003f60d
test edi, edi
je 0x1003f60d
cmp byte [ebp - 0x21], 0
jne 0x1003f532
test cl, cl
je 0x1003f617
mov ecx, dword [edi + 0x10]
lea eax, [edi + 0xc]
cmp ecx, 0x41
jge 0x1003f568
test ecx, ecx
je 0x1003f54c
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x1003f551
mov eax, 8
cmp eax, 0x41
mov ecx, 0x41
cmovg ecx, eax
push ecx
lea ecx, [edi + 0xc]
call fcn.10024210
lea eax, [edi + 0xc]
mov dword [eax], 0x41
mov ecx, dword [edi + 0x14]
mov edx, ecx
mov eax, dword [ebx + 8]
mov dword [ebp - 0x40], ecx
sub ecx, 0xffffff80
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], edx
cmp edx, ecx
jae 0x1003f5c4
mov esi, eax
cmp byte [esi], 0
je 0x1003f5be
push 0
mov edx, esi
lea ecx, [ebp - 0x18]
call fcn.10011720
mov edx, dword [ebp - 0x20]
add esi, eax
mov eax, dword [ebp - 0x18]
add esp, 4
mov dword [ebp - 0x38], esi
test eax, eax
je 0x1003f5be
mov word [edx], ax
add edx, 2
mov eax, dword [ebp - 0x40]
sub eax, 0xffffff80
mov dword [ebp - 0x20], edx
cmp edx, eax
jb 0x1003f588
mov esi, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
sub eax, dword [ebx + 8]
xor ecx, ecx
mov word [edx], cx
sub edx, dword [ebp - 0x40]
sar edx, 1
cmp dword [edi + 0x3c], edx
mov ecx, edx
mov dword [edi + 4], edx
cmovl ecx, dword [edi + 0x3c]
cmp dword [edi + 0x40], edx
mov dword [edi + 0x3c], ecx
mov ecx, edx
cmovl ecx, dword [edi + 0x40]
cmp dword [edi + 0x44], edx
mov dword [edi + 0x40], ecx
cmovl edx, dword [edi + 0x44]
cmp ecx, edx
mov dword [edi + 8], eax
movzx eax, byte [ebp - 0x46]
mov ecx, 0
cmovne ecx, eax
mov dword [edi + 0x44], edx
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x58], ecx
cmp byte [ebp - 0x21], 0
jne 0x1003f622
test cl, cl
jne 0x1003f622
mov eax, dword [ebp - 0x44]
cmp dword [esi + 0x3e68], eax
jne 0x1003f633
test dl, dl
jne 0x1003f633
test edi, edi
je 0x1003f633
mov byte [ebp - 0x46], 1
cmp byte [edi + 0x30], dl
jne 0x1003f637
mov byte [ebp - 0x46], 0
cmp byte [ebp - 0xd8], 0
je 0x1003f6c4
mov edx, dword [esi + 0x3bc8]
cmp dword [edx + 0x14], 0x2a
ja 0x1003f655
mov eax, dword [edx + 0x2c]
jmp 0x1003f674
mov eax, dword [edx + 0x1c]
mov ecx, 0xffff
movzx eax, word [eax + 0x54]
cmp ax, cx
jne 0x1003f66b
mov eax, dword [edx + 0x2c]
jmp 0x1003f674
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x28]
lea eax, [eax + ecx*8]
mov dword [ebp - 0x20], eax
lea ecx, [esi + 0x50f8]
mov eax, dword [edx + 0x10]
mov dword [ecx + 0x10], eax
mov eax, dword [esi + 0x3bc8]
mov eax, dword [eax + 0x44]
mov dword [ecx + 0x44], eax
mov eax, dword [esi + 0x3bc8]
mov eax, dword [eax + 0x48]
mov dword [ecx + 0x48], eax
mov eax, dword [esi + 0x3bc8]
mov eax, dword [eax + 0x4c]
mov dword [ecx + 0x4c], eax
mov eax, dword [esi + 0x3bc8]
mov eax, dword [eax + 0x30]
mov dword [ecx + 0x30], eax
mov eax, dword [ebp - 0x20]
mov dword [ecx + 0x2c], eax
mov eax, dword [eax + 4]
mov dword [ecx + 0xc], eax
call fcn.1001c470
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x38], 0
cmp dword [esi + 0x3e68], ecx
jne 0x1003fcac
mov eax, dword [edi + 8]
mov byte [edi + 0xe6e], 0
mov dword [edi + 0x34], 0x40
mov dword [ebp - 0x38], eax
mov eax, dword [ebx + 0x14]
mov dword [edi + 0xe70], eax
cmp byte [esi + 0xd58], 0
mov dword [esi + 0x54a4], 1
sete al
cmp byte [ebp - 0x30], 0
mov byte [esi + 0x3e75], al
movss xmm7, dword [esi + 0xd50]
subss xmm7, dword [ebp - 0xf4]
subss xmm7, dword [esi + 0x37ec]
addss xmm7, dword [edi + 0x38]
je 0x1003f749
mov eax, dword [ebp - 0x78]
movss xmm2, dword [esi + 0xd54]
subss xmm2, dword [eax + 0xd8]
jmp 0x1003f759
movss xmm2, dword [esi + 0x3bcc]
mulss xmm2, dword [0x1004c048]
cmp byte [ebp - 0x28], 0
mov dl, byte [esi + 0x59]
mov byte [ebp - 0x11], dl
je 0x1003f787
mov eax, dword [edi + 4]
lea ecx, [edi + 0xe6d]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov byte [ecx], 1
jmp 0x1003fb4c
mov cl, byte [ebp - 0x45]
test cl, cl
je 0x1003fa52
cmp word [esi + 0x367a], 2
jb 0x1003fa52
cmp byte [esi + 0xd69], 0
jne 0x1003fa52
cmp byte [edi + 0x53], 0
je 0x1003f7cd
push 0
mov edx, edi
lea ecx, [ebp - 0xbc]
call fcn.1003ce80
movss xmm2, dword [ebp - 0xb0]
add esp, 4
movaps xmm1, xmm7
mov ecx, edi
call fcn.1003d180
mov edx, eax
mov byte [edi + 0x52], 0
mov dword [edi + 0x3c], edx
mov dword [edi + 0x40], edx
mov dword [edi + 0x44], edx
movzx ecx, word [esi + 0x367a]
sub ecx, 2
test cl, 1
jne 0x1003f9c0
test edx, edx
je 0x1003f80c
mov eax, dword [edi + 0x14]
cmp word [eax + edx*2 - 2], 0xa
je 0x1003f80c
xor cl, cl
jmp 0x1003f80e
mov cl, 1
test cl, cl
jne 0x1003f83c
push 0x20000c
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.1003d5b0
lea ecx, [edi + 0x3c]
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
add esp, 4
mov edx, dword [ecx]
jmp 0x1003f83f
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x1003f85b
mov eax, dword [ecx + 8]
cmp dword [ecx + 4], eax
jne 0x1003f857
mov dword [ecx + 8], edx
mov dword [ecx + 4], edx
jmp 0x1003f85b
mov dword [ecx], eax
mov edx, eax
mov eax, dword [edi + 4]
lea ecx, [edx + 1]
mov dword [ebp - 0x28], eax
cmp ecx, eax
jge 0x1003f961
mov edx, dword [edi + 0xe70]
mov esi, 0x3000
and edx, 0x8000
mov dword [ebp - 0x18], edx
test edx, edx
jne 0x1003f953
test ecx, ecx
jle 0x1003f95c
mov edx, dword [edi + 0x14]
movzx eax, word [edx + ecx*2 - 2]
cmp eax, 0x20
je 0x1003f947
cmp eax, 9
je 0x1003f947
cmp ax, si
je 0x1003f947
cmp eax, 0x2c
je 0x1003f947
cmp eax, 0x3b
je 0x1003f947
cmp eax, 0x28
je 0x1003f947
cmp eax, 0x29
je 0x1003f947
cmp eax, 0x7b
je 0x1003f947
cmp eax, 0x7d
je 0x1003f947
cmp eax, 0x5b
je 0x1003f947
cmp eax, 0x5d
je 0x1003f947
cmp eax, 0x7c
je 0x1003f947
cmp eax, 0xa
je 0x1003f947
cmp eax, 0xd
je 0x1003f947
movzx eax, word [edx + ecx*2]
cmp eax, 0x20
je 0x1003f940
cmp eax, 9
je 0x1003f940
cmp ax, si
je 0x1003f940
cmp eax, 0x2c
je 0x1003f940
cmp eax, 0x3b
je 0x1003f940
cmp eax, 0x28
je 0x1003f940
cmp eax, 0x29
je 0x1003f940
cmp eax, 0x7b
je 0x1003f940
cmp eax, 0x7d
je 0x1003f940
cmp eax, 0x5b
je 0x1003f940
cmp eax, 0x5d
je 0x1003f940
cmp eax, 0x7c
je 0x1003f940
cmp eax, 0xa
je 0x1003f940
cmp eax, 0xd
jne 0x1003f947
mov eax, 1
jmp 0x1003f949
xor eax, eax
test eax, eax
mov eax, dword [ebp - 0x28]
jne 0x1003f95c
mov edx, dword [ebp - 0x18]
inc ecx
cmp ecx, eax
jl 0x1003f880
mov esi, dword [ebp - 0x3c]
cmp ecx, eax
cmovg ecx, eax
lea eax, [edi + 0x3c]
mov dword [eax], ecx
mov dword [edi + 0x44], ecx
mov edx, dword [eax + 8]
mov dword [ebp - 0x18], edx
mov edx, dword [eax + 4]
cmp edx, dword [eax + 8]
je 0x1003f9ae
mov esi, dword [ebp - 0x3c]
cmp edx, dword [ebp - 0x28]
jle 0x1003f98c
mov ecx, dword [ebp - 0x28]
mov edx, ecx
mov dword [eax + 4], ecx
mov ecx, dword [eax]
mov edi, dword [ebp - 0x28]
cmp dword [eax + 8], edi
mov edi, dword [ebp - 0x84]
jle 0x1003f9a5
mov ecx, dword [ebp - 0x28]
mov dword [eax + 8], ecx
mov dword [ebp - 0x18], ecx
mov ecx, dword [eax]
cmp edx, dword [ebp - 0x18]
jne 0x1003f9ae
mov dword [eax], edx
mov ecx, edx
mov edx, dword [ebp - 0x28]
cmp ecx, edx
jle 0x1003fb39
mov dword [eax], edx
jmp 0x1003fb39
mov eax, dword [edi + 0x14]
mov ecx, edi
push 0x200004
movzx esi, word [eax + edx*2]
lea edx, [edi + 0x3c]
call fcn.1003d5b0
add esp, 4
mov byte [edi + 0xe6c], 1
lea edx, [edi + 0x3c]
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, edi
push 0x600005
call fcn.1003d5b0
add esp, 4
mov byte [edi + 0xe6c], 1
lea edx, [edi + 0x3c]
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, edi
push 0x600001
call fcn.1003d5b0
add esp, 4
mov dword [edi + 0xe68], 0xbe99999a
cmp esi, 0xa
je 0x1003fa43
cmp byte [ebp - 0x30], 0
je 0x1003fa43
mov ecx, dword [edi + 0x40]
mov eax, dword [edi + 0x44]
mov dword [edi + 0x40], eax
mov dword [edi + 0x44], ecx
mov dword [edi + 0x3c], ecx
mov esi, dword [ebp - 0x3c]
mov byte [edi + 0xe6c], 0
jmp 0x1003fb39
cmp byte [esi + 0x3670], 0
lea edx, [edi + 0xe6d]
mov al, byte [edx]
je 0x1003fab8
test al, al
jne 0x1003fab8
test cl, cl
je 0x1003fab1
cmp byte [edi + 0x53], al
je 0x1003fa8a
push 0
mov edx, edi
lea ecx, [ebp - 0xbc]
call fcn.1003ce80
movss xmm2, dword [ebp - 0xb0]
add esp, 4
movaps xmm1, xmm7
mov ecx, edi
call fcn.1003d180
mov dword [edi + 0x3c], eax
lea edx, [edi + 0xe6d]
mov dword [edi + 0x40], eax
mov dword [edi + 0x44], eax
mov byte [edi + 0x52], 0
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, edx
jmp 0x1003fb49
cmp byte [esi + 0xd58], 0
mov ecx, edx
je 0x1003fb49
test al, al
jne 0x1003fb49
movss xmm0, dword [esi + 0xac]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x1003faf4
movss xmm0, dword [esi + 0xb0]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x1003fb49
cmp byte [edi + 0x53], 0
je 0x1003fb14
push 0
mov edx, edi
lea ecx, [ebp - 0xbc]
call fcn.1003ce80
movss xmm2, dword [ebp - 0xb0]
add esp, 4
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x1003fb22
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x40], eax
movaps xmm1, xmm7
mov ecx, edi
call fcn.1003d180
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0xe6c], 1
lea ecx, [edi + 0xe6d]
mov dword [edi + 0xe68], 0xbe99999a
mov dl, byte [ebp - 0x11]
cmp byte [ecx], 0
je 0x1003fb5d
cmp byte [esi + 0xd58], 0
jne 0x1003fb5d
mov byte [ecx], 0
cmp byte [esi + 0xd68], 0
je 0x1003fb6f
cmp byte [esi + 0xd6a], 0
je 0x1003fb7c
test dl, dl
je 0x1003fb82
cmp byte [esi + 0xd6b], 0
je 0x1003fb82
mov byte [ebp - 0x11], 1
jmp 0x1003fb86
mov byte [ebp - 0x11], 0
mov edx, dword [ebx + 0x14]
test edx, 0x400
je 0x1003fd35
mov ecx, 0x200
call fcn.1001ca50
mov cl, byte [ebp - 0x11]
test al, al
je 0x1003fbf9
test cl, cl
jne 0x1003fbf9
cmp byte [esi + 0xd69], cl
jne 0x1003fbf9
mov edx, dword [ebx + 0x14]
cmp byte [ebp - 0x54], cl
jne 0x1003fbfc
push 2
sub esp, 8
mov dword [ebp - 0x18], 9
lea ecx, [ebp - 0x18]
call fcn.1003e7a0
add esp, 0xc
test al, al
je 0x1003fbf6
push dword [ebp - 0x18]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.1003d5b0
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov cl, byte [ebp - 0x11]
mov edx, dword [ebx + 0x14]
cmp dword [esi + 0x3788], 0
lea eax, [esi + 0x3788]
jle 0x1003fcac
test cl, cl
jne 0x1003fc7d
cmp byte [ebp - 0x54], cl
jne 0x1003fc7d
cmp byte [ebp - 0x1b], cl
jne 0x1003fc7d
xor ecx, ecx
mov dword [ebp - 0x20], ecx
mov eax, dword [esi + 0x3790]
movzx eax, word [eax + ecx*2]
mov dword [ebp - 0x18], eax
cmp eax, 9
je 0x1003fc6c
push 2
sub esp, 8
lea ecx, [ebp - 0x18]
call fcn.1003e7a0
add esp, 0xc
test al, al
je 0x1003fc69
push dword [ebp - 0x18]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.1003d5b0
add esp, 4
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebx + 0x14]
lea eax, [esi + 0x3788]
inc ecx
mov dword [ebp - 0x20], ecx
cmp ecx, dword [eax]
jl 0x1003fc22
mov ecx, dword [eax + 4]
test ecx, ecx
jns 0x1003fca6
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [esi + 0x3788]
call fcn.10024210
lea eax, [esi + 0x3788]
mov dword [eax], 0
mov eax, dword [ebp - 0x44]
xor cl, cl
mov byte [ebp - 0x12], cl
cmp dword [esi + 0x3e68], eax
jne 0x10040650
cmp byte [esi + 0x3e74], cl
jne 0x10040650
cmp byte [ebp - 0x29], cl
jne 0x10040650
movss xmm0, dword [ebp - 0x64]
mov ecx, 1
subss xmm0, dword [esi + 0x37f0]
divss xmm0, dword [esi + 0x3bcc]
cvttss2si eax, xmm0
cmp eax, ecx
cmovge ecx, eax
xor eax, eax
mov dword [edi + 0x4c], ecx
cmp byte [esi + 0xd69], al
mov dword [ebp - 0x18], ecx
mov ecx, 0x400000
cmovne eax, ecx
mov cl, byte [esi + 0x59]
mov dword [ebp - 0x28], eax
mov byte [ebp - 0x94], cl
test cl, cl
je 0x1003fd3d
cmp dword [esi + 0xdbc], 0xa
jne 0x1003fd3d
mov eax, 0xa
mov byte [ebp - 0x19], 1
mov dword [ebp - 0x50], eax
jmp 0x1003fd4e
mov cl, byte [ebp - 0x11]
jmp 0x1003fbfc
mov eax, dword [esi + 0xdbc]
mov dword [ebp - 0x50], eax
mov byte [ebp - 0x19], 0
test cl, cl
je 0x1003fd73
cmp byte [esi + 0xd6b], 0
mov cl, byte [esi + 0xd6a]
mov byte [ebp - 0x22], cl
je 0x1003fd83
cmp byte [esi + 0xd68], 0
jne 0x1003fd83
test cl, cl
jne 0x1003fd83
mov byte [ebp - 0x1b], 1
jmp 0x1003fd87
mov cl, byte [esi + 0xd68]
mov byte [ebp - 0x22], cl
mov byte [ebp - 0x19], 0
mov dword [ebp - 0x50], eax
mov byte [ebp - 0x1b], 0
cmp byte [esi + 0x59], 0
je 0x1003fd92
cmp eax, 8
jmp 0x1003fd95
cmp eax, 1
sete cl
mov byte [ebp - 0x11], cl
test cl, cl
je 0x1003fdb0
mov ecx, 0x239
call fcn.1001ca50
test al, al
jne 0x1003fdc3
mov eax, dword [ebp - 0x50]
cmp eax, 2
jne 0x1003fde6
mov ecx, 0x20a
call fcn.1001ca50
test al, al
je 0x1003fde6
cmp byte [ebp - 0x54], 0
jne 0x1003fde6
cmp byte [ebp - 0xd8], 0
jne 0x1003fde6
cmp byte [ebp - 0x30], 0
je 0x1003fde0
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x1003fde6
mov byte [ebp - 0x23], 1
jmp 0x1003fdea
mov byte [ebp - 0x23], 0
cmp byte [ebp - 0x11], 0
je 0x1003fdfe
mov ecx, 0x224
call fcn.1001ca50
test al, al
jne 0x1003fe12
cmp dword [ebp - 0x50], 1
jne 0x1003fe32
mov ecx, 0x209
call fcn.1001ca50
test al, al
je 0x1003fe32
cmp byte [ebp - 0xd8], 0
jne 0x1003fe32
cmp byte [ebp - 0x30], 0
je 0x1003fe29
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x1003fe32
mov byte [ebp - 0x95], 1
jmp 0x1003fe39
mov byte [ebp - 0x95], 0
cmp byte [ebp - 0x11], 0
je 0x1003fe4d
mov ecx, 0x237
call fcn.1001ca50
test al, al
jne 0x1003fe61
cmp dword [ebp - 0x50], 2
jne 0x1003fe6b
mov ecx, 0x209
call fcn.1001ca50
test al, al
je 0x1003fe6b
cmp byte [ebp - 0x54], 0
mov byte [ebp - 0x45], 1
je 0x1003fe6f
mov byte [ebp - 0x45], 0
mov al, byte [ebp - 0x11]
test al, al
je 0x1003fe9c
mov ecx, 0x23b
call fcn.1001ca50
test al, al
je 0x1003fe99
cmp byte [ebp - 0x54], 0
jne 0x1003fe99
cmp byte [ebp - 0x7c], 0
je 0x1003fe99
mov byte [ebp - 0x93], 1
jmp 0x1003fea8
mov al, byte [ebp - 0x11]
xor cl, cl
mov byte [ebp - 0x93], cl
test al, al
je 0x1003feb6
mov ecx, 0x23a
call fcn.1001ca50
test al, al
jne 0x1003feca
cmp byte [ebp - 0x19], 0
je 0x1003feda
mov ecx, 0x23b
call fcn.1001ca50
test al, al
je 0x1003feda
cmp byte [ebp - 0x54], 0
jne 0x1003feda
cmp byte [ebp - 0x7c], 0
mov byte [ebp - 0x59], 1
jne 0x1003fede
mov byte [ebp - 0x59], 0
mov ecx, 0x20d
call fcn.1001ca50
test al, al
jne 0x1003fefe
mov ecx, 0x267
call fcn.1001ca50
mov byte [ebp - 0x19], 0
test al, al
je 0x1003ff02
mov byte [ebp - 0x19], 1
mov edx, 1
xor ecx, ecx
call fcn.1001fd00
xorps xmm5, xmm5
comiss xmm0, xmm5
jbe 0x1003ff24
mov ecx, 0x20c
call fcn.1001ca50
test al, al
je 0x1003ff3d
mov edx, 1
lea ecx, [edx + 1]
call fcn.1001fd00
comiss xmm0, xmm5
mov byte [ebp - 0x91], 0
jbe 0x1003ff44
mov byte [ebp - 0x91], 1
mov ecx, 0x20e
call fcn.1001ca50
test al, al
jne 0x1003ff6c
mov eax, 1
mov edx, eax
mov ecx, eax
call fcn.1001fd00
comiss xmm0, xmm5
mov byte [ebp - 0x92], 0
jbe 0x1003ff73
mov byte [ebp - 0x92], 1
mov ecx, 0x201
call fcn.1001ca50
test al, al
je 0x1003ffb4
cmp byte [ebp - 0x1b], 0
je 0x1003ff8e
mov eax, 0x200004
jmp 0x1003ff9f
mov eax, 0x200000
mov ecx, 0x20000c
cmp byte [ebp - 0x22], 0
cmovne eax, ecx
mov ecx, dword [ebp - 0x28]
lea edx, [edi + 0x3c]
or ecx, eax
push ecx
mov ecx, edi
call fcn.1003d5b0
jmp 0x1004061c
mov ecx, 0x202
call fcn.1001ca50
test al, al
je 0x1003ffd9
cmp byte [ebp - 0x1b], 0
je 0x1003ffcf
mov eax, 0x200005
jmp 0x1003ff9f
mov eax, 0x200001
lea ecx, [eax + 0xc]
jmp 0x1003ff98
mov ecx, 0x203
call fcn.1001ca50
test al, al
je 0x10040043
cmp byte [ebp - 0x30], 0
je 0x10040043
cmp byte [esi + 0xd68], 0
je 0x10040025
mov edx, dword [ebp - 0x78]
movss xmm0, dword [edx + 0x60]
subss xmm0, dword [esi + 0x3bcc]
mov dword [edx + 0x78], 0
mov dword [edx + 0x80], 0
maxss xmm0, xmm5
movss dword [edx + 0x70], xmm0
jmp 0x10040630
movzx eax, byte [ebp - 0x1b]
lea edx, [edi + 0x3c]
mov ecx, edi
lea eax, [eax*4 + 0x200002]
or eax, dword [ebp - 0x28]
push eax
call fcn.1003d5b0
jmp 0x1004061c
mov ecx, 0x204
call fcn.1001ca50
test al, al
je 0x100400b9
cmp byte [ebp - 0x30], 0
je 0x100400b9
cmp byte [esi + 0xd68], 0
je 0x1004009b
mov ecx, dword [ebp - 0x78]
mov eax, dword [0x10050da8]
movss xmm0, dword [ecx + 0x60]
addss xmm0, dword [esi + 0x3bcc]
mov eax, dword [eax + 0x3e30]
minss xmm0, dword [eax + 0x68]
mov dword [ecx + 0x78], 0
mov dword [ecx + 0x80], 0
movss dword [ecx + 0x70], xmm0
jmp 0x10040630
movzx eax, byte [ebp - 0x1b]
lea edx, [edi + 0x3c]
mov ecx, edi
lea eax, [eax*4 + 0x200003]
or eax, dword [ebp - 0x28]
push eax
call fcn.1003d5b0
jmp 0x1004061c
mov ecx, 0x205
call fcn.1001ca50
test al, al
je 0x1004011b
cmp byte [ebp - 0x30], 0
je 0x1004011b
mov ecx, dword [ebp - 0x28]
lea edx, [edi + 0x3c]
or ecx, 0x20000e
push ecx
mov ecx, edi
call fcn.1003d5b0
movd xmm0, dword [ebp - 0x18]
movss xmm1, dword [ebp - 0xc0]
cvtdq2ps xmm0, xmm0
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mulss xmm0, dword [esi + 0x3bcc]
subss xmm1, xmm0
movss dword [ebp - 0xc0], xmm1
jmp 0x1004062d
mov ecx, 0x206
call fcn.1001ca50
test al, al
je 0x10040179
cmp byte [ebp - 0x30], 0
je 0x10040179
mov ecx, dword [ebp - 0x28]
lea edx, [edi + 0x3c]
or ecx, 0x20000f
push ecx
mov ecx, edi
call fcn.1003d5b0
movd xmm0, dword [ebp - 0x18]
cvtdq2ps xmm0, xmm0
mov byte [edi + 0xe6c], 1
mov dword [edi + 0xe68], 0xbe99999a
mulss xmm0, dword [esi + 0x3bcc]
addss xmm0, dword [ebp - 0xc0]
movss dword [ebp - 0xc0], xmm0
jmp 0x1004062d
mov ecx, 0x207
call fcn.1001ca50
test al, al
je 0x100401b1
mov ecx, dword [ebp - 0x28]
lea edx, [edi + 0x3c]
mov eax, ecx
or ecx, 0x200004
or eax, 0x200006
cmp byte [esi + 0xd68], 0
cmovne ecx, eax
push ecx
mov ecx, edi
call fcn.1003d5b0
jmp 0x1004061c
mov ecx, 0x208
call fcn.1001ca50
test al, al
je 0x100401e9
mov ecx, dword [ebp - 0x28]
lea edx, [edi + 0x3c]
mov eax, ecx
or ecx, 0x200005
or eax, 0x200007
cmp byte [esi + 0xd68], 0
cmovne ecx, eax
push ecx
mov ecx, edi
call fcn.1003d5b0
jmp 0x1004061c
mov ecx, 0x20a
call fcn.1001ca50
test al, al
je 0x1004021c
cmp byte [ebp - 0x54], 0
jne 0x1004021c
cmp byte [ebp - 0x23], 0
jne 0x1004021c
mov ecx, dword [ebp - 0x28]
lea edx, [edi + 0x3c]
or ecx, 0x200008
push ecx
mov ecx, edi
call fcn.1003d5b0
jmp 0x1004061c
mov ecx, 0x20b
call fcn.1001ca50
test al, al
je 0x100402a5
cmp byte [ebp - 0x54], 0
jne 0x100402a5
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
jne 0x1004028c
cmp byte [ebp - 0x22], 0
je 0x10040245
push 0x60000c
jmp 0x1004026e
cmp byte [ebp - 0x94], 0
je 0x1004028c
cmp byte [esi + 0xd6b], 0
je 0x1004028c
cmp byte [esi + 0xd6a], 0
jne 0x1004028c
cmp byte [esi + 0xd68], 0
jne 0x1004028c
push 0x600004
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.1003d5b0
mov dword [edi + 0xe68], 0xbe99999a
add esp, 4
mov byte [edi + 0xe6c], 1
mov ecx, dword [ebp - 0x28]
lea edx, [edi + 0x3c]
or ecx, 0x200009
push ecx
mov ecx, edi
call fcn.1003d5b0
jmp 0x1004061c
cmp byte [ebp - 0x19], 0
je 0x1004030a
mov edx, dword [ebx + 0x14]
mov eax, edx
shr eax, 0xb
and al, 1
cmp byte [ebp - 0x30], 0
je 0x10040313
mov cl, byte [esi + 0xd68]
test al, al
je 0x100402cb
test cl, cl
je 0x10040313
jmp 0x100402cf
test cl, cl
jne 0x10040313
cmp byte [ebp - 0x54], 0
jne 0x10040630
push 2
sub esp, 8
mov dword [ebp - 0x18], 0xa
lea ecx, [ebp - 0x18]
call fcn.1003e7a0
add esp, 0xc
test al, al
je 0x10040630
push dword [ebp - 0x18]
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.1003d5b0
jmp 0x1004061c
cmp byte [ebp - 0x91], 0
je 0x10040320
mov byte [ebp - 0x29], 1
mov byte [ebp - 0x1a], 1
jmp 0x10040630
cmp byte [ebp - 0x92], 0
je 0x10040333
mov cl, 1
mov byte [ebp - 0x29], cl
jmp 0x10040633
mov al, byte [ebp - 0x93]
test al, al
jne 0x100405fd
cmp byte [ebp - 0x59], al
jne 0x100405fd
cmp byte [ebp - 0x11], al
je 0x1004037d
mov ecx, 0x222
call fcn.1001ca50
test al, al
je 0x1004037d
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov byte [edi + 0xe6c], 1
jmp 0x10040630
mov al, byte [ebp - 0x23]
test al, al
jne 0x10040506
cmp byte [ebp - 0x95], al
jne 0x10040506
cmp byte [ebp - 0x45], al
je 0x10040630
mov eax, dword [0x10050da8]
mov ecx, dword [eax + 0x78]
test ecx, ecx
je 0x100403bf
push dword [eax + 0x80]
call ecx
mov esi, eax
add esp, 4
test esi, esi
jne 0x100403c4
jmp 0x10040630
mov esi, 0x1004643e
mov ecx, esi
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100403d0
mov eax, dword [0x10050da8]
sub ecx, edx
test eax, eax
je 0x100403e8
inc dword [eax + 0xa8]
push dword [0x10050da0]
lea eax, [ecx*2 + 2]
push eax
call fcn.10010cc0
add esp, 8
mov dword [ebp - 0x40], eax
cmp byte [esi], 0
mov dword [ebp - 0x18], 0
je 0x1004045b
xor edi, edi
nop
push 0
mov edx, esi
lea ecx, [ebp - 0x20]
call fcn.10011720
add esp, 4
add esi, eax
cmp dword [ebp - 0x20], 0
je 0x1004044f
mov edx, dword [ebx + 0x14]
lea ecx, [ebp - 0x20]
push 4
sub esp, 8
call fcn.1003e7a0
add esp, 0xc
test al, al
je 0x1004044a
mov ecx, dword [ebp - 0x40]
mov ax, word [ebp - 0x20]
mov word [ecx + edi*2], ax
inc edi
cmp byte [esi], 0
jne 0x10040410
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x18], edi
mov edi, dword [ebp - 0x84]
mov esi, dword [ebp - 0x18]
xor ecx, ecx
mov word [eax + esi*2], cx
test esi, esi
jle 0x100404de
mov edx, dword [edi + 0x44]
mov ecx, dword [edi + 4]
mov dword [ebp - 0x18], edx
mov edx, dword [edi + 0x40]
cmp edx, dword [edi + 0x44]
je 0x10040495
cmp edx, ecx
jle 0x10040482
mov dword [edi + 0x40], ecx
mov edx, ecx
cmp dword [edi + 0x44], ecx
jle 0x1004048d
mov dword [edi + 0x44], ecx
mov dword [ebp - 0x18], ecx
cmp edx, dword [ebp - 0x18]
jne 0x10040495
mov dword [edi + 0x3c], edx
cmp dword [edi + 0x3c], ecx
jle 0x1004049d
mov dword [edi + 0x3c], ecx
lea edx, [edi + 0x3c]
mov ecx, edi
call fcn.1003d520
mov edx, dword [edi + 0x3c]
mov ecx, edi
push esi
push dword [ebp - 0x40]
call fcn.1003d040
add esp, 8
test al, al
je 0x100404d4
mov edx, dword [edi + 0x3c]
lea ecx, [edi + 0x5c]
push esi
push 0
call fcn.1003e2f0
add esp, 8
mov byte [edi + 0x52], 0
add dword [edi + 0x3c], esi
mov eax, dword [ebp - 0x40]
mov byte [edi + 0xe6c], 1
test eax, eax
je 0x100404f2
mov ecx, dword [0x10050da8]
test ecx, ecx
je 0x100404f2
dec dword [ecx + 0xa8]
push dword [0x10050da0]
push eax
call fcn.10010ce0
add esp, 8
jmp 0x10040630
cmp dword [esi + 0x7c], 0
je 0x100405bd
mov ecx, dword [edi + 0x44]
mov eax, dword [edi + 0x40]
cmp eax, ecx
je 0x10040524
mov esi, ecx
cmovge ecx, eax
cmovl esi, eax
jmp 0x10040529
mov ecx, dword [edi + 4]
xor esi, esi
mov eax, dword [edi + 0x14]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x4c], esi
lea edx, [eax + ecx*2]
lea ecx, [eax + esi*2]
call fcn.10011a60
mov ecx, dword [0x10050da8]
inc eax
mov dword [ebp - 0x20], eax
test ecx, ecx
je 0x10040551
inc dword [ecx + 0xa8]
push dword [0x10050da0]
push eax
call fcn.10010cc0
mov esi, dword [edi + 0x14]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
lea ecx, [esi + ecx*2]
push ecx
mov ecx, dword [ebp - 0x4c]
lea ecx, [esi + ecx*2]
mov esi, eax
push ecx
mov ecx, esi
call fcn.100119f0
mov eax, dword [0x10050da8]
add esp, 0x10
mov ecx, dword [eax + 0x7c]
test ecx, ecx
je 0x1004059d
push esi
push dword [eax + 0x80]
call ecx
mov eax, dword [0x10050da8]
add esp, 8
test esi, esi
je 0x100405ab
test eax, eax
je 0x100405ab
dec dword [eax + 0xa8]
push dword [0x10050da0]
push esi
call fcn.10010ce0
mov al, byte [ebp - 0x23]
add esp, 8
test al, al
je 0x10040630
mov eax, dword [edi + 0x40]
lea esi, [edi + 0x3c]
cmp eax, dword [edi + 0x44]
jne 0x100405df
mov eax, dword [edi + 4]
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], eax
mov dword [esi], eax
mov byte [edi + 0x52], 0
mov byte [edi + 0xe6c], 1
mov eax, dword [esi + 4]
cmp eax, dword [esi + 8]
je 0x10040630
mov edx, esi
mov ecx, edi
call fcn.1003d520
mov byte [esi + 0x16], 0
jmp 0x10040630
movzx eax, al
lea edx, [edi + 0x3c]
xor eax, 1
mov ecx, edi
add eax, 0x20000a
push eax
call fcn.1003d5b0
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x44], eax
mov dword [edi + 0x40], eax
mov dword [edi + 0xe68], 0xbe99999a
mov byte [edi + 0xe6c], 1
add esp, 4
mov cl, byte [ebp - 0x12]
mov eax, dword [edi + 0x40]
cmp eax, dword [edi + 0x44]
je 0x10040645
cmp byte [ebp - 0x21], 0
je 0x10040645
mov al, 1
jmp 0x10040647
xor al, al
or byte [ebp - 0x58], al
mov esi, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
cmp dword [esi + 0x3e68], eax
jne 0x10040932
test cl, cl
je 0x10040a22
cmp byte [ebp - 0x54], 0
jne 0x1004083f
mov ecx, dword [edi + 0x2c]
mov eax, dword [ebx + 8]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100406a2
test dl, dl
je 0x1004069e
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100406a2
add eax, 2
add ecx, 2
test dl, dl
jne 0x10040682
xor eax, eax
jmp 0x100406a7
sbb eax, eax
or eax, 1
test eax, eax
je 0x1004083f
mov ecx, dword [edi + 0x24]
xor eax, eax
mov edx, dword [edi + 0x2c]
dec ecx
mov dword [ebp - 0x70], edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 4], eax
test ecx, ecx
jle 0x10040734
lea eax, [ecx + edx]
mov ecx, dword [ebp - 0x70]
mov edx, eax
mov dword [ebp - 0x4c], eax
call fcn.100118f0
lea ecx, [eax + 1]
mov dword [ebp - 0x18], ecx
test ecx, ecx
jle 0x10040710
mov edx, 8
mov eax, ecx
cmp ecx, edx
lea ecx, [ebp - 0x90]
cmovl eax, edx
push eax
call fcn.10024210
mov ecx, dword [ebp - 0x18]
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x90], ecx
mov edx, ecx
push dword [ebp - 0x70]
mov ecx, dword [ebp - 0x88]
call fcn.10011880
mov eax, dword [ebp - 0x18]
add esp, 0xc
mov ecx, dword [ebp - 0x6c]
lea edx, [eax - 1]
xor eax, eax
test ecx, ecx
lea ecx, [edi + 0x5c]
cmovle edx, eax
mov eax, dword [edi + 4]
push edx
mov dword [ebp - 0x18], edx
xor edx, edx
push eax
mov dword [ebp - 0x4c], eax
call fcn.1003e2f0
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x10040783
mov edx, dword [ebp - 0x4c]
xor ecx, ecx
test edx, edx
jle 0x10040783
mov esi, eax
nop dword [eax + eax]
mov eax, dword [edi + 0x14]
mov ax, word [eax + ecx*2]
mov word [esi + ecx*2], ax
inc ecx
cmp ecx, edx
jl 0x10040770
mov esi, dword [ebp - 0x3c]
mov ecx, dword [edi + 0x14]
mov eax, dword [edi + 4]
mov dword [ebp - 0x20], ecx
mov byte [edi + 0xe6e], 1
lea edx, [ecx + eax*2]
mov dword [ebp - 0x4c], edx
call fcn.10011a60
mov ecx, dword [ebp - 0x4c]
sub dword [edi + 8], eax
mov dword [edi + 4], 0
movzx eax, word [ecx]
add ecx, 2
test ax, ax
je 0x100407d8
mov esi, dword [ebp - 0x20]
nop dword [eax]
mov word [esi], ax
lea ecx, [ecx + 2]
movzx eax, word [ecx - 2]
add esi, 2
test ax, ax
jne 0x100407c0
mov dword [ebp - 0x20], esi
mov esi, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov word [eax], cx
mov eax, dword [ebp - 0x18]
test eax, eax
jle 0x10040808
push eax
push dword [ebp - 0x88]
xor edx, edx
mov ecx, edi
call fcn.1003d040
add esp, 8
test al, al
je 0x10040808
mov eax, dword [ebp - 0x18]
mov dword [edi + 0x3c], eax
mov byte [edi + 0x52], 0
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x88]
test eax, eax
je 0x10040838
mov ecx, dword [0x10050da8]
test ecx, ecx
je 0x10040829
dec dword [ecx + 0xa8]
push dword [0x10050da0]
push eax
call fcn.10010ce0
add esp, 8
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x1a], 0
mov eax, dword [ebx + 0x14]
je 0x10040850
test al, 0x20
jne 0x10040a25
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x70]
mov dword [edi + 0xe70], 0
test edx, edx
je 0x10040932
cmp byte [ebp - 0x9c], 0
je 0x100408fd
mov dword [ebp - 0x158], eax
xorps xmm0, xmm0
mov eax, dword [ebx + 8]
mov dword [ebp - 0x148], eax
lea eax, [ecx + 1]
mov dword [ebp - 0x144], ecx
mov ecx, 0x40
cmp eax, ecx
movlpd qword [ebp - 0x150], xmm0
movlpd qword [ebp - 0x13c], xmm0
cmovle eax, ecx
movlpd qword [ebp - 0x134], xmm0
mov dword [ebp - 0x140], eax
lea eax, [ebp - 0x15c]
push eax
xor eax, eax
mov dword [ebp - 0x15c], 0x40000
mov dword [ebp - 0x154], 0
call eax
mov ecx, dword [ebp - 0x140]
add esp, 4
mov eax, dword [ebp - 0x148]
mov edx, dword [ebp - 0x70]
mov dword [ebp - 0x74], ecx
dec ecx
cmp dword [ebp - 0x144], ecx
mov dword [ebx + 8], eax
cmovl ecx, dword [ebp - 0x144]
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x74]
cmp eax, ecx
cmovl ecx, eax
mov dword [ebp - 0x74], ecx
cmp ecx, 1
jb 0x1004092e
jbe 0x10040926
lea eax, [ecx - 1]
push eax
push edx
push dword [ebx + 8]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov ecx, dword [ebp - 0x74]
add esp, 0xc
mov eax, dword [ebx + 8]
mov byte [ecx + eax - 1], 0
mov byte [ebp - 0x31], 1
cmp byte [ebp - 0x29], 0
mov ecx, dword [ebp - 0x44]
je 0x1004094b
cmp dword [esi + 0x3e68], ecx
jne 0x1004094b
call fcn.10013850
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x30]
test dl, dl
jne 0x10040d96
mov edx, ecx
lea ecx, [ebp - 0xf4]
push 1
call fcn.100128d0
movss xmm1, dword [0x1004c080]
add esp, 4
mov ecx, 7
push dword [ebp - 0xe8]
push dword [ebp - 0xec]
push dword [ebp - 0xf0]
push dword [ebp - 0xf4]
call fcn.10011d90
movss xmm2, dword [esi + 0x37f4]
mov dl, 1
mov ecx, eax
call fcn.100127b0
movss xmm0, dword [ebp - 0xf4]
add esp, 0x10
movss xmm1, dword [ebp - 0xf0]
movaps xmm5, xmm0
movss xmm2, dword [ebp - 0xa0]
movaps xmm4, xmm1
addss xmm4, dword [ebp - 0x64]
mov edx, dword [ebp - 0x30]
addss xmm5, xmm2
movss dword [ebp - 0xd4], xmm0
addss xmm0, dword [esi + 0x37ec]
movss dword [ebp - 0xd0], xmm1
movss dword [ebp - 0x40], xmm4
movss dword [ebp - 0x20], xmm5
movss dword [ebp - 0xcc], xmm5
movss dword [ebp - 0x8c], xmm0
movaps xmm0, xmm1
addss xmm0, dword [esi + 0x37f0]
movss dword [ebp - 0xc8], xmm4
movss dword [ebp - 0x88], xmm0
jmp 0x10040dff
mov eax, dword [ebx + 0x14]
cmp byte [ebp - 0x54], 0
jne 0x10040a89
mov eax, dword [edi + 0xc]
lea ecx, [edi + 0x18]
mov byte [edi + 0x30], 1
lea edx, [eax*4 + 1]
mov eax, dword [ecx + 4]
mov dword [ebp - 0x18], edx
cmp edx, eax
jle 0x10040a74
test eax, eax
je 0x10040a59
cdq
sub eax, edx
mov edx, dword [ebp - 0x18]
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 0x1c]
jmp 0x10040a5e
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [edi + 0x18]
push eax
call fcn.10024190
mov edx, dword [ebp - 0x18]
lea ecx, [edi + 0x18]
mov dword [ecx], edx
mov ecx, dword [edi + 0x20]
push 0
push dword [edi + 0x14]
call fcn.100119f0
mov eax, dword [ebx + 0x14]
add esp, 8
test eax, 0x801c0
je 0x10040d48
test al, 0x40
je 0x10040ab5
mov ecx, 0x200
call fcn.1001ca50
test al, al
je 0x10040ab2
mov eax, 0x40
mov ecx, 0x200
jmp 0x10040b19
mov eax, dword [ebx + 0x14]
test al, al
jns 0x10040af0
mov ecx, 0x203
call fcn.1001ca50
test al, al
je 0x10040ad3
mov eax, 0x80
mov ecx, 0x203
jmp 0x10040b19
mov ecx, 0x204
call fcn.1001ca50
test al, al
je 0x10040aed
mov eax, 0x80
mov ecx, 0x204
jmp 0x10040b19
mov eax, dword [ebx + 0x14]
test eax, 0x80000
je 0x10040b07
cmp byte [edi + 0xe6e], 0
je 0x10040b07
mov eax, 0x80000
jmp 0x10040b17
test eax, 0x100
je 0x10040d48
mov eax, pe_nt_image_headers32
xor ecx, ecx
xor edx, edx
mov dword [ebp - 0x12c], eax
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0x128], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 0x120], 0
mov word [ebp - 0x10b], dx
mov byte [ebp - 0x109], dl
mov dword [ebp - 0x124], edx
cmp byte [ebp - 0x54], dl
jne 0x10040b52
mov eax, dword [edi + 0x20]
mov esi, dword [edi + 0x14]
mov dword [ebp - 0x118], eax
mov eax, dword [edi + 8]
mov dword [ebp - 0x114], eax
mov eax, dword [edi + 0x34]
mov dword [ebp - 0x110], eax
mov eax, dword [edi + 0x3c]
mov dword [ebp - 0x11c], ecx
mov ecx, esi
mov byte [ebp - 0x10c], dl
lea edx, [esi + eax*2]
call fcn.10011a60
mov ecx, dword [ebp - 0x84]
mov edi, eax
mov dword [ebp - 0x108], edi
mov ecx, dword [ecx + 0x40]
lea edx, [esi + ecx*2]
mov ecx, esi
call fcn.10011a60
mov dword [ebp - 0x18], eax
mov ecx, esi
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x84]
mov edx, dword [eax + 0x44]
lea edx, [esi + edx*2]
call fcn.10011a60
mov esi, eax
lea eax, [ebp - 0x12c]
push eax
xor eax, eax
mov dword [ebp - 0x100], esi
call eax
mov cl, byte [ebp - 0x10c]
add esp, 4
mov edx, dword [ebp - 0x108]
mov byte [ebp - 0x19], cl
cmp edx, edi
jne 0x10040bea
test cl, cl
je 0x10040c12
mov ecx, dword [ebp - 0x118]
add edx, ecx
call fcn.100118f0
mov edi, dword [ebp - 0x84]
mov edx, dword [ebp - 0x108]
mov cl, byte [ebp - 0x19]
mov dword [edi + 0x3c], eax
mov byte [edi + 0xe6c], 1
jmp 0x10040c18
mov edi, dword [ebp - 0x84]
mov eax, dword [ebp - 0x104]
cmp eax, dword [ebp - 0x18]
jne 0x10040c27
test cl, cl
je 0x10040c4c
cmp eax, edx
jne 0x10040c30
mov ecx, dword [edi + 0x3c]
jmp 0x10040c46
mov ecx, dword [ebp - 0x118]
lea edx, [eax + ecx]
call fcn.100118f0
mov ecx, eax
mov eax, dword [ebp - 0x104]
mov dword [edi + 0x40], ecx
mov cl, byte [ebp - 0x19]
mov edx, dword [ebp - 0x100]
cmp edx, esi
jne 0x10040c5e
test cl, cl
je 0x10040d42
cmp edx, eax
jne 0x10040c67
mov eax, dword [edi + 0x40]
jmp 0x10040c74
mov ecx, dword [ebp - 0x118]
add edx, ecx
call fcn.100118f0
cmp byte [ebp - 0x19], 0
mov dword [edi + 0x44], eax
je 0x10040d42
mov esi, dword [ebp - 0x114]
mov ecx, dword [ebp - 0x38]
cmp esi, ecx
jle 0x10040cd0
cmp byte [ebp - 0x9c], 0
je 0x10040cd0
mov eax, dword [edi + 0x10]
sub esi, ecx
add esi, dword [edi + 0xc]
cmp esi, eax
jle 0x10040ccd
test eax, eax
je 0x10040cb6
cdq
sub eax, edx
lea edx, [edi + 0xc]
mov ecx, eax
sar ecx, 1
add ecx, dword [edx + 4]
jmp 0x10040cbe
mov ecx, 8
lea edx, [edi + 0xc]
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.10024210
mov dword [edi + 0xc], esi
mov eax, dword [ebp - 0x118]
mov ecx, dword [edi + 0x14]
mov esi, ecx
mov dword [ebp - 0x18], eax
mov eax, dword [edi + 0xc]
dec eax
mov dword [ebp - 0x20], ecx
lea eax, [ecx + eax*2]
mov dword [ebp - 0x4c], eax
cmp ecx, eax
jae 0x10040d23
mov edi, dword [ebp - 0x18]
cmp byte [edi], 0
je 0x10040d1a
push 0
mov edx, edi
lea ecx, [ebp - 0x18]
call fcn.10011720
add edi, eax
add esp, 4
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x10040d1a
mov word [esi], ax
add esi, 2
cmp esi, dword [ebp - 0x4c]
jb 0x10040cf2
mov edi, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x20]
xor eax, eax
mov word [esi], ax
sub esi, ecx
mov eax, dword [ebp - 0x114]
sar esi, 1
mov dword [edi + 4], esi
mov dword [edi + 8], eax
mov dword [edi + 0xe68], 0xbe99999a
mov esi, dword [ebp - 0x3c]
mov eax, dword [ebx + 0x14]
cmp byte [ebp - 0x54], 0
jne 0x10040850
mov ecx, dword [ebx + 8]
mov eax, dword [edi + 0x20]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10040d78
test dl, dl
je 0x10040d74
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10040d78
add eax, 2
add ecx, 2
test dl, dl
jne 0x10040d58
xor eax, eax
jmp 0x10040d7d
sbb eax, eax
or eax, 1
test eax, eax
mov eax, dword [ebx + 0x14]
je 0x10040850
mov ecx, dword [edi + 0x20]
mov dword [ebp - 0x70], ecx
mov ecx, dword [edi + 8]
jmp 0x10040853
movss xmm0, dword [ebp - 0xf4]
movss xmm2, dword [ebp - 0xa0]
movss xmm1, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x78]
movss dword [ebp - 0xd4], xmm0
addss xmm0, xmm2
movss dword [ebp - 0xd0], xmm1
movss dword [ebp - 0xcc], xmm0
movss dword [ebp - 0x20], xmm0
movaps xmm0, xmm1
addss xmm0, dword [ebp - 0x64]
movss dword [ebp - 0xc8], xmm0
mov eax, dword [ecx + 0xd4]
mov ecx, dword [ecx + 0xd8]
movss dword [ebp - 0x40], xmm0
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], ecx
cmp byte [ebp - 0x46], 0
lea eax, [ebp - 0x8c]
movss xmm0, dword [eax]
xorps xmm5, xmm5
movss dword [ebp - 0x6c], xmm0
movss dword [ebp - 0xe4], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0xe0], xmm0
xorps xmm0, xmm0
movss dword [ebp - 0x4c], xmm0
movss dword [ebp - 0x18], xmm5
je 0x10040e41
mov eax, dword [edi + 0x20]
mov dword [ebx + 8], eax
jmp 0x10040e44
mov eax, dword [ebx + 8]
cmp byte [ebp - 0x21], 0
jne 0x10040f2e
cmp byte [ebp - 0x58], 0
jne 0x10040f2e
test dl, dl
je 0x10040ea7
mov dl, byte [eax]
lea edi, [eax + 1]
xor ecx, ecx
test dl, dl
je 0x10040e79
cmp dl, 0xa
lea eax, [ecx + 1]
mov dl, byte [edi]
cmovne eax, ecx
inc edi
mov ecx, eax
test dl, dl
jne 0x10040e67
mov al, byte [edi - 1]
dec edi
mov dword [ebp - 0x50], edi
cmp al, 0xa
je 0x10040e89
cmp al, 0xd
je 0x10040e89
inc ecx
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [esi + 0x3bcc]
movss dword [ebp - 0x18], xmm0
movaps xmm0, xmm2
movss dword [ebp - 0x4c], xmm0
jmp 0x10040ee1
mov ecx, dword [ebp - 0x44]
cmp dword [esi + 0x3e68], ecx
jne 0x10040eb9
mov edi, dword [edi + 8]
add edi, eax
jmp 0x10040ece
mov ecx, eax
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10040ec0
mov edi, dword [ebx + 8]
sub ecx, edx
add edi, ecx
mov eax, edi
mov dword [ebp - 0x50], edi
sub eax, dword [ebx + 8]
cmp eax, 0x200000
jge 0x10041a23
movss xmm1, dword [0x1004c080]
lea eax, [ebp - 0xd4]
xor ecx, ecx
cmp byte [ebp - 0x30], cl
cmovne eax, ecx
push eax
push ecx
mov dword [esp], ecx
push edi
push dword [ebx + 8]
call fcn.10011d90
movss xmm2, dword [esi + 0x3bcc]
push eax
lea eax, [ebp - 0xe4]
push eax
mov eax, dword [ebp - 0x78]
push dword [esi + 0x3bc8]
mov ecx, dword [eax + 0x248]
call fcn.1002e4e0
jmp 0x10041a23
mov eax, dword [edi + 8]
xor edx, edx
mov ecx, dword [edi + 0x14]
xorps xmm7, xmm7
mov dword [ebp - 0xdc], eax
add eax, dword [ebx + 8]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x28], ecx
movss dword [ebp - 0x9c], xmm5
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x7c], 0xfffffc18
mov dword [ebp - 0x70], 0xfffffc18
cmp byte [ebp - 0x21], dl
je 0x10040f86
mov eax, dword [edi + 0x3c]
mov edx, 1
mov dword [ebp - 0x7c], 0xffffffff
lea eax, [ecx + eax*2]
mov dword [ebp - 0x80], eax
cmp byte [ebp - 0x58], 0
je 0x10040faa
mov ecx, dword [edi + 0x44]
cmp dword [edi + 0x40], ecx
mov eax, dword [ebp - 0x28]
cmovl ecx, dword [edi + 0x40]
inc edx
mov dword [ebp - 0x70], 0xffffffff
lea eax, [eax + ecx*2]
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x74], eax
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
movzx eax, al
add edx, eax
xor eax, eax
movzx esi, word [esi]
mov dword [ebp - 0x38], esi
test si, si
mov esi, dword [ebp - 0x3c]
je 0x1004101f
mov eax, dword [ebp - 0x38]
xor edi, edi
mov esi, dword [ebp - 0x7c]
movzx eax, ax
cmp ax, 0xa
jne 0x10040ffc
inc edi
cmp esi, 0xffffffff
jne 0x10040fe9
cmp ecx, dword [ebp - 0x80]
jb 0x10040fe9
dec edx
mov dword [ebp - 0x7c], edi
test edx, edx
jle 0x10041010
cmp dword [ebp - 0x70], 0xffffffff
jne 0x10040ffc
cmp ecx, dword [ebp - 0x74]
jb 0x10040ffc
dec edx
mov dword [ebp - 0x70], edi
test edx, edx
jle 0x10041010
movzx eax, word [ecx + 2]
add ecx, 2
mov esi, eax
mov dword [ebp - 0x38], esi
mov esi, dword [ebp - 0x7c]
test ax, ax
jne 0x10040fd0
mov esi, dword [ebp - 0x3c]
mov dword [ebp - 0x38], edi
mov edi, dword [ebp - 0x84]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x70]
inc eax
cmp dword [ebp - 0x7c], 0xffffffff
mov edx, eax
mov dword [ebp - 0x38], eax
cmovne edx, dword [ebp - 0x7c]
cmp ecx, 0xffffffff
mov dword [ebp - 0xa4], edx
mov edx, dword [ebp - 0x28]
cmove ecx, eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x70], ecx
mov ecx, eax
cmp eax, edx
jbe 0x1004105e
nop dword [eax + eax]
cmp word [ecx - 2], 0xa
je 0x1004105e
add ecx, 0xfffffffe
cmp ecx, edx
ja 0x10041050
movaps xmm1, xmm5
mov eax, dword [0x10050da8]
movaps xmm4, xmm5
mov edx, dword [eax + 0x3bc8]
movss xmm3, dword [eax + 0x3bcc]
divss xmm3, dword [edx + 0x10]
cmp ecx, dword [ebp - 0x80]
jae 0x100410d4
movzx eax, word [ecx]
add ecx, 2
mov dword [ebp - 0x7c], eax
mov esi, eax
cmp eax, 0xa
jne 0x1004109a
maxss xmm1, xmm4
movaps xmm4, xmm5
jmp 0x100410c6
cmp esi, 0xd
je 0x100410c6
movzx eax, ax
cmp eax, dword [edx]
jge 0x100410b6
mov edi, dword [ebp - 0x7c]
mov eax, dword [edx + 8]
movzx esi, di
movss xmm2, dword [eax + esi*4]
jmp 0x100410bb
movss xmm2, dword [edx + 0xc]
movaps xmm0, xmm3
mulss xmm0, xmm2
addss xmm4, xmm0
cmp ecx, dword [ebp - 0x80]
jb 0x10041081
mov edi, dword [ebp - 0x84]
mov esi, dword [ebp - 0x3c]
cmp dword [ebp - 0x70], 0
maxss xmm4, xmm1
movd xmm6, dword [ebp - 0xa4]
movss xmm2, dword [esi + 0x3bcc]
cvtdq2ps xmm6, xmm6
movss dword [ebp - 0xfc], xmm4
mulss xmm6, xmm2
movss dword [ebp - 0x88], xmm6
jl 0x1004119c
mov eax, dword [ebp - 0x74]
mov ecx, eax
cmp eax, dword [ebp - 0x28]
jbe 0x1004112a
mov esi, dword [ebp - 0x28]
cmp word [ecx - 2], 0xa
je 0x10041124
add ecx, 0xfffffffe
cmp ecx, esi
ja 0x10041116
mov esi, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x74]
movaps xmm1, xmm5
movaps xmm7, xmm5
cmp ecx, eax
jae 0x10041184
mov esi, dword [ebp - 0x74]
movzx eax, word [ecx]
add ecx, 2
cmp eax, 0xa
jne 0x1004114b
maxss xmm1, xmm7
movaps xmm7, xmm5
jmp 0x10041177
cmp eax, 0xd
je 0x10041177
mov dword [ebp - 0xa4], eax
cmp eax, dword [edx]
jge 0x1004116a
mov eax, dword [edx + 8]
mov edi, dword [ebp - 0xa4]
movss xmm0, dword [eax + edi*4]
jmp 0x1004116f
movss xmm0, dword [edx + 0xc]
mulss xmm0, xmm3
addss xmm7, xmm0
cmp ecx, esi
jb 0x10041137
mov edi, dword [ebp - 0x84]
mov esi, dword [ebp - 0x3c]
movd xmm0, dword [ebp - 0x70]
maxss xmm7, xmm1
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm2
movss dword [ebp - 0x9c], xmm0
mov ecx, dword [ebp - 0x30]
movss xmm1, dword [ebp - 0xa0]
test cl, cl
je 0x100411c6
movd xmm3, dword [ebp - 0x38]
movaps xmm0, xmm1
cvtdq2ps xmm3, xmm3
movss dword [ebp - 0x4c], xmm0
mulss xmm3, xmm2
movss dword [ebp - 0x18], xmm3
jmp 0x100411c9
movaps xmm3, xmm5
cmp byte [ebp - 0x21], 0
je 0x1004131c
cmp byte [edi + 0xe6c], 0
je 0x1004131c
test dword [ebx + 0x14], 0x1000
jne 0x10041241
movss xmm2, dword [edi + 0x38]
movaps xmm0, xmm1
comiss xmm2, xmm4
subss xmm1, dword [esi + 0x37ec]
mulss xmm0, dword [0x1004c034]
movss dword [ebp - 0xa0], xmm1
movaps xmm1, xmm4
jbe 0x1004121e
subss xmm1, xmm0
movaps xmm0, xmm5
maxss xmm0, xmm1
jmp 0x1004122f
subss xmm1, dword [ebp - 0xa0]
comiss xmm1, xmm2
jb 0x10041248
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x38], xmm0
jmp 0x10041248
mov dword [edi + 0x38], 0
test cl, cl
je 0x100412ee
movss xmm4, dword [ebp - 0xc0]
movaps xmm0, xmm6
subss xmm0, dword [esi + 0x3bcc]
comiss xmm4, xmm0
jbe 0x10041286
movaps xmm4, xmm5
maxss xmm4, xmm0
movss xmm0, dword [ebp - 0x64]
comiss xmm5, xmm4
movss xmm1, dword [esi + 0x37f0]
jbe 0x100412b9
movaps xmm1, xmm5
jmp 0x100412cd
movss xmm2, dword [esi + 0x37f0]
movaps xmm0, xmm6
movss xmm1, dword [ebp - 0x64]
addss xmm2, xmm2
subss xmm1, xmm2
subss xmm0, xmm1
comiss xmm0, xmm4
jb 0x1004126f
movss xmm0, dword [ebp - 0x64]
movaps xmm4, xmm6
subss xmm4, xmm0
addss xmm4, xmm2
jmp 0x10041274
addss xmm1, xmm1
addss xmm1, xmm3
subss xmm1, xmm0
maxss xmm1, xmm5
minss xmm1, xmm4
mov eax, dword [ebp - 0x78]
movss xmm0, dword [eax + 0x60]
subss xmm0, xmm1
addss xmm0, dword [ebp - 0xe0]
movss dword [ebp - 0xe0], xmm0
movss dword [eax + 0x60], xmm1
mov byte [edi + 0xe6c], 0
movss xmm0, dword [ebp - 0xc8]
movss dword [ebp - 0x40], xmm0
movss xmm0, dword [ebp - 0xcc]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [ebp - 0xe4]
movss dword [ebp - 0x6c], xmm0
cmp byte [ebp - 0x58], 0
movss xmm4, dword [edi + 0x38]
movss dword [ebp - 0x38], xmm4
je 0x1004163c
mov edx, dword [edi + 0x44]
mov eax, edx
mov ecx, dword [edi + 0x40]
cmp ecx, edx
mov esi, dword [ebp - 0x28]
cmovl eax, ecx
cmovge edx, ecx
cmp byte [ebp - 0x21], 0
lea esi, [esi + eax*2]
mov eax, dword [ebp - 0x28]
lea edx, [eax + edx*2]
mov dword [ebp - 0x58], edx
je 0x1004135f
movss xmm1, dword [0x1004c080]
jmp 0x10041367
movss xmm1, dword [0x1004c04c]
mov ecx, 0x2f
call fcn.10011d90
mov ecx, dword [ebp - 0x30]
xorps xmm5, xmm5
mov dword [ebp - 0x7c], eax
test cl, cl
je 0x1004138a
movss dword [ebp - 0x80], xmm5
movss dword [ebp - 0x74], xmm5
jmp 0x100413a4
movss xmm0, dword [0x1004c1bc]
movss dword [ebp - 0x80], xmm0
movss xmm0, dword [0x1004c0d0]
movss dword [ebp - 0x74], xmm0
movss xmm3, dword [ebp - 0xe0]
movss xmm6, dword [ebp - 0x6c]
movss xmm4, dword [ebp - 0x38]
addss xmm7, xmm6
addss xmm3, dword [ebp - 0x9c]
subss xmm7, xmm4
subss xmm3, xmm5
movss dword [ebp - 0x9c], xmm3
cmp esi, edx
jae 0x10041432
movss xmm4, dword [ebp - 0x40]
movss xmm1, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0x3c]
nop word [eax + eax]
movss xmm6, dword [ecx + 0x3bcc]
movaps xmm0, xmm4
addss xmm0, xmm6
comiss xmm3, xmm0
ja 0x10041425
comiss xmm1, xmm3
jbe 0x1004147c
cmp esi, edx
jae 0x10041612
mov ax, word [esi]
add esi, 2
cmp ax, 0xa
je 0x10041612
cmp esi, edx
jb 0x10041411
movss xmm6, dword [ebp - 0x6c]
movss xmm4, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x30]
mov esi, dword [ebp - 0x3c]
test cl, cl
jne 0x10041449
cmp dword [ebp - 0xdc], 0x200000
jge 0x10041860
mov eax, dword [0x10050da8]
movups xmm2, xmmword [eax + 0x3878]
comiss xmm5, xmm2
movaps xmm1, xmm2
shufps xmm1, xmm2, 0xff
mulss xmm1, dword [eax + 0x37b0]
movups xmmword [ebp - 0xb4], xmm2
jbe 0x10041646
movaps xmm0, xmm5
jmp 0x10041652
xorps xmm2, xmm2
mov eax, dword [0x10050da8]
xorps xmm1, xmm1
mov edx, dword [eax + 0x3bc8]
movss xmm4, dword [eax + 0x3bcc]
divss xmm4, dword [edx + 0x10]
cmp esi, dword [ebp - 0x58]
jae 0x100414f4
nop
movzx eax, word [esi]
add esi, 2
cmp eax, 0xa
je 0x100414e7
cmp eax, 0xd
je 0x100414e0
mov dword [ebp - 0xa4], eax
cmp eax, dword [edx]
jge 0x100414d0
mov edi, dword [ebp - 0xa4]
mov eax, dword [edx + 8]
movss xmm2, dword [eax + edi*4]
mov edi, dword [ebp - 0x84]
jmp 0x100414d5
movss xmm2, dword [edx + 0xc]
movaps xmm0, xmm4
mulss xmm0, xmm2
addss xmm1, xmm0
cmp esi, dword [ebp - 0x58]
jb 0x100414a0
jmp 0x100414f1
xorps xmm5, xmm5
maxss xmm5, xmm1
xorps xmm1, xmm1
xorps xmm2, xmm2
maxss xmm1, xmm5
comiss xmm2, xmm1
jb 0x1004152d
mov eax, dword [ecx + 0x3bc8]
cmp dword [eax], 0x20
jle 0x10041515
mov eax, dword [eax + 8]
movss xmm0, dword [eax + 0x80]
jmp 0x1004151a
movss xmm0, dword [eax + 0xc]
mulss xmm0, dword [0x1004c048]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm0, dword [ebp - 0x74]
addss xmm1, xmm7
movss xmm4, dword [ebp - 0x40]
addss xmm7, xmm2
movss xmm2, dword [ebp - 0x80]
addss xmm0, xmm3
movss xmm5, dword [ebp - 0x20]
subss xmm2, xmm6
minss xmm1, xmm5
maxss xmm7, dword [ebp - 0xd4]
minss xmm0, xmm4
addss xmm2, xmm3
movss dword [ebp - 0xac], xmm1
movss dword [ebp - 0xb4], xmm7
comiss xmm0, dword [ebp - 0xd0]
maxss xmm2, dword [ebp - 0xd0]
movss dword [ebp - 0xa8], xmm0
movss dword [ebp - 0xb0], xmm2
jbe 0x10041604
comiss xmm4, xmm2
jbe 0x10041604
comiss xmm1, dword [ebp - 0xd4]
jbe 0x10041604
comiss xmm5, xmm7
jbe 0x10041604
push 0
push ecx
mov dword [esp], 0
lea eax, [ebp - 0xac]
push dword [ebp - 0x7c]
push eax
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax + 0x248]
call fcn.1002e270
movss xmm4, dword [ebp - 0xc8]
movss xmm0, dword [ebp - 0xcc]
movss xmm1, dword [ebp - 0xe4]
movss xmm3, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x3c]
movss dword [ebp - 0x40], xmm4
movss dword [ebp - 0x20], xmm0
movss dword [ebp - 0x6c], xmm1
movss xmm1, dword [ebp - 0xd0]
xorps xmm5, xmm5
mov edx, dword [ebp - 0x58]
movss xmm6, dword [ebp - 0x6c]
movaps xmm7, xmm6
addss xmm3, dword [ecx + 0x3bcc]
subss xmm7, dword [ebp - 0x38]
movss dword [ebp - 0x9c], xmm3
cmp esi, edx
jb 0x100413f0
jmp 0x1004142a
movss xmm6, dword [ebp - 0x6c]
jmp 0x10041435
movss xmm0, dword [0x1004c080]
minss xmm0, xmm2
movss xmm2, dword [0x1004c188]
movss xmm7, dword [0x1004c048]
movss xmm3, dword [ebp - 0xb0]
comiss xmm5, xmm3
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si ecx, xmm0
jbe 0x10041680
movaps xmm0, xmm5
jmp 0x1004168c
movss xmm0, dword [0x1004c080]
minss xmm0, xmm3
movss xmm3, dword [ebp - 0xac]
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm5, xmm3
jbe 0x100416af
movaps xmm0, xmm5
jmp 0x100416bb
movss xmm0, dword [0x1004c080]
minss xmm0, xmm3
mulss xmm0, xmm2
addss xmm0, xmm7
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm5, xmm1
jbe 0x100416d6
movaps xmm0, xmm5
jmp 0x100416e2
movss xmm0, dword [0x1004c080]
minss xmm0, xmm1
mov edx, dword [ebp - 0x50]
subss xmm6, xmm4
mulss xmm0, xmm2
mov dword [ebp - 0x20], edx
mov edx, dword [esi + 0x3bc8]
movss xmm2, dword [esi + 0x3bcc]
addss xmm0, xmm7
mov dword [ebp - 0x9c], edx
lea edx, [ebp - 0xd4]
mov dword [ebp - 0xdc], 0
movss dword [ebp - 0x68], xmm6
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0xe0]
shl eax, 0x18
subss xmm0, xmm5
or eax, ecx
mov ecx, dword [ebp - 0x78]
cmp byte [ebp - 0x30], 0
mov dword [ebp - 0x40], eax
cmovne edx, dword [ebp - 0xdc]
mov ecx, dword [ecx + 0x248]
mov dword [ebp - 0xa4], ecx
movss dword [ebp - 0x64], xmm0
test eax, 0xff000000
je 0x10041860
cmp dword [ebp - 0x50], 0
jne 0x1004178e
mov ecx, dword [ebx + 8]
lea eax, [ecx + 1]
mov dword [ebp - 0xdc], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10041771
sub ecx, dword [ebp - 0xdc]
mov eax, dword [ebx + 8]
add eax, ecx
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0x20], eax
jmp 0x10041791
mov eax, dword [ebp - 0x20]
cmp dword [ebx + 8], eax
je 0x10041860
cmp dword [esi + 0x3bc8], 0
jne 0x100417af
mov eax, dword [ecx + 0x2c]
mov eax, dword [eax + 8]
mov dword [ebp - 0x9c], eax
ucomiss xmm2, xmm5
lahf
test ah, 0x44
jp 0x100417c0
mov eax, dword [ecx + 0x2c]
movss xmm2, dword [eax + 0xc]
movups xmm0, xmmword [ecx + 0x60]
movups xmmword [ebp - 0xb4], xmm0
test edx, edx
je 0x10041830
movss xmm1, dword [edx]
movss xmm0, dword [ebp - 0xb4]
comiss xmm0, xmm1
jae 0x100417e8
movss dword [ebp - 0xb4], xmm1
movss xmm1, dword [edx + 4]
movss xmm0, dword [ebp - 0xb0]
comiss xmm0, xmm1
jae 0x10041802
movss dword [ebp - 0xb0], xmm1
movss xmm0, dword [edx + 8]
comiss xmm0, dword [ebp - 0xac]
ja 0x10041818
movss dword [ebp - 0xac], xmm0
movss xmm0, dword [edx + 0xc]
comiss xmm0, dword [ebp - 0xa8]
ja 0x1004182e
movss dword [ebp - 0xa8], xmm0
test edx, edx
mov edx, dword [ebp - 0x20]
setne al
movzx eax, al
push eax
push ecx
mov dword [esp], 0
lea eax, [ebp - 0xb4]
push edx
push dword [ebx + 8]
push eax
push dword [ebp - 0x40]
lea eax, [ebp - 0x68]
push eax
push ecx
mov ecx, dword [ebp - 0x9c]
call fcn.10031f30
cmp byte [ebp - 0x21], 0
je 0x10041a23
movss xmm0, dword [esi + 0x18]
addss xmm0, dword [edi + 0xe68]
movss dword [edi + 0xe68], xmm0
cmp byte [esi + 0x5b], 0
je 0x100418c0
xorps xmm1, xmm1
comiss xmm1, xmm0
jae 0x100418c0
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x68], xmm0
fld qword [ebp - 0x68]
fld qword [0x1004c0b0]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIfmod
movss xmm0, dword [0x1004c06c]
fstp qword [ebp - 0x68]
movsd xmm1, qword [ebp - 0x68]
cvtpd2ps xmm1, xmm1
comiss xmm0, xmm1
jae 0x100418c0
xor cl, cl
jmp 0x100418c2
mov cl, 1
movss xmm0, dword [ebp - 0xfc]
movss xmm6, dword [0x1004c080]
addss xmm0, dword [ebp - 0xe4]
subss xmm0, dword [ebp - 0x38]
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0xe0]
addss xmm0, dword [ebp - 0x88]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm0, dword [0x1004bff0]
movss dword [ebp - 0xfc], xmm1
movaps xmm5, xmm1
movss dword [ebp - 0xb4], xmm1
addss xmm5, xmm6
cvttss2si eax, xmm0
movss dword [ebp - 0xac], xmm5
movd xmm3, eax
cvtdq2ps xmm3, xmm3
movss dword [ebp - 0x88], xmm3
movaps xmm2, xmm3
movaps xmm4, xmm3
subss xmm2, dword [esi + 0x3bcc]
subss xmm4, dword [0x1004c0a0]
addss xmm2, dword [0x1004c048]
movss dword [ebp - 0xa8], xmm4
movss dword [ebp - 0xb0], xmm2
test cl, cl
je 0x100419ee
comiss xmm4, dword [ebp - 0xd0]
jbe 0x100419ee
movss xmm0, dword [ebp - 0xc8]
comiss xmm0, xmm2
jbe 0x100419ee
comiss xmm5, dword [ebp - 0xd4]
jbe 0x100419ee
movss xmm0, dword [ebp - 0xcc]
comiss xmm0, xmm1
jbe 0x100419ee
sub esp, 8
movss dword [ebp - 0x68], xmm1
movaps xmm1, xmm6
movss dword [ebp - 0x64], xmm4
xor ecx, ecx
mov dword [esp + 4], 0x3f800000
call fcn.10011d90
add esp, 4
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax + 0x248]
call fcn.1002e070
movss xmm1, dword [ebp - 0xfc]
movss xmm3, dword [ebp - 0x88]
movss xmm6, dword [0x1004c080]
cmp byte [ebp - 0x54], 0
jne 0x10041a23
movss xmm0, dword [esi + 0x3bcc]
subss xmm1, xmm6
subss xmm3, xmm0
mov byte [esi + 0x51dc], 1
movss dword [esi + 0x51e8], xmm0
movss dword [esi + 0x51e0], xmm1
movss dword [esi + 0x51e4], xmm3
cmp byte [ebp - 0xd8], 0
je 0x10041a31
call fcn.1001c520
cmp byte [ebp - 0x30], 0
je 0x10041b43
mov ecx, dword [0x10050da8]
movss xmm1, dword [ebp - 0x18]
addss xmm1, dword [esi + 0x37f0]
movss xmm4, dword [ebp - 0x4c]
mov eax, dword [ecx + 0x3e30]
movss dword [ebp - 0x68], xmm4
movss dword [ebp - 0x64], xmm1
mov byte [eax + 0x90], 1
mov eax, dword [ecx + 0x3e30]
cmp byte [eax + 0x93], 0
jne 0x10041ad8
movss xmm0, dword [eax + 0xd8]
lea ecx, [ebp - 0x68]
movss xmm3, dword [eax + 0xd4]
movaps xmm2, xmm0
addss xmm2, xmm1
movss dword [ebp - 0xb4], xmm3
movss xmm1, dword [0x1004c1bc]
addss xmm4, xmm3
movss dword [ebp - 0xb0], xmm0
movss dword [ebp - 0xa8], xmm2
movss dword [ebp - 0xac], xmm4
call fcn.1001d150
push 0
push 0
xor edx, edx
lea ecx, [ebp - 0xb4]
call fcn.1001d280
add esp, 8
mov esi, dword [esi + 0x3ec0]
mov eax, esi
mov edi, dword [ebp - 0x3c]
or eax, 0x101
mov dword [edi + 0x3ec0], eax
call fcn.10017760
mov eax, dword [edi + 0x3ee0]
mov ecx, dword [ebp - 0x190]
and eax, 0x80
or ecx, eax
mov dword [edi + 0x3ec0], esi
mov dword [ebp - 0x88], ecx
call fcn.1001d730
mov esi, edi
cmp dword [esi + 0x3ed8], 0
jne 0x10041b43
mov eax, dword [ebp - 0x44]
mov dword [esi + 0x3ed8], eax
mov eax, dword [ebp - 0x194]
mov dword [esi + 0x3edc], eax
mov eax, dword [ebp - 0x88]
mov dword [esi + 0x3ee0], eax
cmp byte [esi + 0x5244], 0
je 0x10041b82
cmp byte [ebp - 0xd8], 0
jne 0x10041b82
mov eax, dword [0x10050da8]
lea ecx, [ebp - 0xe4]
push dword [ebp - 0x50]
mov edx, dword [ebx + 8]
mov dword [eax + 0x525c], 0x1004bfac
mov dword [eax + 0x5260], 0x1004bfa8
call fcn.10022660
add esp, 4
movss xmm0, dword [ebp - 0xf8]
comiss xmm0, dword [0x1004bff0]
jbe 0x10041bd5
movss xmm0, dword [ebp - 0xec]
xor edx, edx
addss xmm0, dword [esi + 0x3804]
mov ecx, dword [ebp - 0xc4]
movss dword [ebp - 0x68], xmm0
movss xmm0, dword [ebp - 0xf0]
addss xmm0, dword [esi + 0x37f0]
movss dword [ebp - 0x64], xmm0
push dword [ebp - 0x64]
push dword [ebp - 0x68]
push 1
call fcn.10011fe0
add esp, 0xc
mov dl, byte [ebp - 0x31]
mov ecx, dword [ebx + 0x14]
test dl, dl
je 0x10041bfc
test ecx, 0x8000000
jne 0x10041bfc
mov eax, dword [0x10050da8]
or dword [eax + 0x3ee0], 4
mov word [eax + 0x3e78], 0x101
test cl, 0x20
movzx eax, dl
movzx ecx, byte [ebp - 0x1a]
cmovne eax, ecx
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret