Function at 0x1004b5e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100ce10c
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x1c8
mov eax, dword [0x101344c0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebx + 8]
mov dword [ebp - 0x140], esi
cmp dword [esi + 0x458], 0
jge 0x1004b6a2
test byte [esi + 4], 2
lea eax, [ebp - 0x178]
mov dword [ebp - 0x174], 0xffffffff
lea ecx, [esi + 0x40]
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x160], 0
push eax
mov dword [ebp - 0x178], 0x1b00d9
je 0x1004b693
mov dword [ebp - 0x178], 0x20002
call fcn.1004fd90
mov eax, dword [esi + 0x40]
dec eax
mov dword [esi + 0x458], eax
cmp dword [esi + 0x45c], 0
jge 0x1004b710
test byte [esi + 4], 4
jne 0x1004b710
lea eax, [ebp - 0x178]
mov dword [ebp - 0x174], 0xffffffff
push eax
lea ecx, [esi + 0x40]
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x178], 0x400041
call fcn.1004fd90
mov eax, dword [esi + 0x40]
dec eax
mov dword [esi + 0x45c], eax
mov eax, dword [esi + 0x14]
mov dword [esi + 8], 0
mov dword [esi + 0x20], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], 0
test eax, eax
je 0x1004b751
push eax
call fcn.1003dab0
add esp, 4
mov eax, dword [esi + 0x18]
test eax, eax
je 0x1004b761
push eax
call fcn.1003dab0
add esp, 4
xor eax, eax
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x1b4], eax
xor edi, edi
mov dword [ebp - 4], eax
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x154], edi
mov dword [ebp - 0x190], edi
mov ecx, dword [esi + 0x4c]
lea edx, [eax + 8]
mov byte [ebp - 4], 1
mov dword [ebp - 0x14c], ecx
test ecx, ecx
jle 0x1004b803
cmp ecx, edx
mov eax, ecx
cmovl eax, edx
mov dword [ebp - 0x124], eax
test eax, eax
jle 0x1004b803
imul eax, eax, 0xc4
push eax
call fcn.1003da80
mov ecx, dword [ebp - 0x124]
lea edx, [edi + 8]
mov dword [ebp - 0x1b8], ecx
add esp, 4
mov ecx, dword [ebp - 0x14c]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1bc], ecx
mov ecx, dword [esi + 0x34]
mov dword [ebp - 0x128], ecx
mov dword [ebp - 0x120], 0
test ecx, ecx
jle 0x1004b871
cmp ecx, 8
mov dword [ebp - 0x120], 0
mov eax, ecx
cmovl eax, edx
mov dword [ebp - 0x124], eax
test eax, eax
jle 0x1004b871
lea eax, [eax + eax*2]
shl eax, 3
push eax
call fcn.1003da80
mov ecx, dword [ebp - 0x128]
mov edi, eax
mov eax, dword [ebp - 0x124]
add esp, 4
mov dword [ebp - 0x154], edi
mov dword [ebp - 0x190], edi
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x120], edi
mov dword [ebp - 0x198], ecx
imul ecx, dword [ebp - 0x14c], 0xc4
push ecx
push 0
push dword [ebp - 0x150]
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x128]
lea eax, [eax + eax*2]
shl eax, 3
push eax
push 0
push dword [ebp - 0x120]
call sub.VCRUNTIME140.dll_memset
add esp, 0x18
mov dword [ebp - 0x13c], 0
cmp dword [esi + 0x4c], 0
jle 0x1004ba26
mov eax, dword [ebp - 0x150]
xor edx, edx
add eax, 0xa4
mov dword [ebp - 0x134], edx
mov dword [ebp - 0x130], eax
nop dword [eax]
mov ecx, dword [esi + 0x54]
add ecx, edx
mov dword [eax - 4], 0xffffffff
xor edx, edx
mov dword [ebp - 0x120], ecx
cmp dword [esi + 0x34], edx
jle 0x1004bca6
mov edi, dword [ebp - 0x140]
or esi, 0xffffffff
mov eax, esi
cmp esi, 0xffffffff
jne 0x1004b933
mov eax, dword [ebp - 0x120]
or esi, esi
mov ecx, dword [edi + 0x3c]
mov eax, dword [eax + 0x74]
cmp eax, dword [ecx + edx*4]
jne 0x1004b92b
mov eax, dword [ebp - 0x130]
mov esi, edx
mov dword [eax - 4], edx
inc edx
mov eax, esi
cmp edx, dword [edi + 0x34]
jl 0x1004b906
mov edi, dword [ebp - 0x154]
cmp eax, 0xffffffff
je 0x1004bca6
mov eax, dword [ebp - 0x120]
push dword [eax + 0xc]
mov esi, dword [eax]
push esi
call fcn.10056840
mov ecx, dword [ebp - 0x130]
push eax
add ecx, 0xffffff5c
push esi
push ecx
mov dword [ebp - 0x124], ecx
call fcn.10050bc0
add esp, 0x14
test eax, eax
je 0x1004bca6
mov eax, dword [ebp - 0x124]
mov edx, 0x10118bf4
mov esi, dword [ebp - 0x130]
mov eax, dword [eax + 0xa0]
lea ecx, [eax + eax*2]
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x148], ecx
mov eax, dword [eax + 0x30]
test eax, eax
cmovne edx, eax
mov dword [esi - 8], edx
cmp word [edx], 0
je 0x1004b9d1
nop
movzx eax, word [edx + 2]
test ax, ax
je 0x1004b9cb
mov ecx, eax
cmp dword [esi], ecx
cmovge ecx, dword [esi]
add edx, 4
mov dword [esi], ecx
cmp word [edx], 0
jne 0x1004b9b0
mov ecx, dword [ebp - 0x148]
mov edx, dword [ebp - 0x148]
inc dword [edi + ecx*8]
mov ecx, dword [esi]
mov eax, dword [ebp - 0x13c]
cmp dword [edi + edx*8 + 4], ecx
cmovge ecx, dword [edi + edx*8 + 4]
add esi, 0xc4
mov dword [ebp - 0x130], esi
inc eax
mov esi, dword [ebp - 0x140]
mov dword [edi + edx*8 + 4], ecx
mov edx, dword [ebp - 0x134]
add edx, 0x78
mov dword [ebp - 0x13c], eax
cmp eax, dword [esi + 0x4c]
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x134], edx
jl 0x1004b8e0
mov eax, dword [ebp - 0x14c]
xor esi, esi
mov dword [ebp - 0x130], esi
test eax, eax
jle 0x1004bda5
mov edx, dword [ebp - 0x150]
add edx, 0xa8
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x11c], edx
mov eax, dword [edx - 8]
lea esi, [edx + 4]
mov ecx, esi
lea edi, [eax + eax*2]
mov eax, dword [edx - 4]
add eax, 0x20
mov dword [ebp - 0x120], edi
sar eax, 5
push eax
call fcn.10050010
mov eax, dword [esi]
shl eax, 2
push eax
mov eax, dword [ebp - 0x11c]
push 0
push dword [eax + 0xc]
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x154]
add esp, 0xc
cmp dword [eax + edi*8 + 0xc], 0
lea esi, [eax + edi*8]
jne 0x1004bac4
mov eax, dword [eax + edi*8 + 4]
lea ecx, [esi + 0xc]
add eax, 0x20
sar eax, 5
push eax
call fcn.10050010
mov eax, dword [esi + 0xc]
shl eax, 2
push eax
push 0
push dword [esi + 0x14]
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x11c]
mov eax, dword [edx - 0xc]
mov dword [ebp - 0x12c], eax
cmp word [eax], 0
je 0x1004bbb4
nop dword [eax]
movzx ecx, word [eax + 2]
test cx, cx
je 0x1004bbb4
movzx edi, word [eax]
cmp edi, ecx
ja 0x1004bb9b
nop dword [eax + eax]
mov eax, dword [ebp - 0x120]
mov ecx, edi
and ecx, 0x1f
mov edx, 1
shl edx, cl
mov esi, edi
mov ecx, dword [ebp - 0x154]
sar esi, 5
mov dword [ebp - 0x124], edx
mov eax, dword [ecx + eax*8 + 0x14]
test dword [eax + esi*4], edx
jne 0x1004bb82
mov eax, dword [ebp - 0x11c]
add eax, 0xffffff58
push edi
push eax
call fcn.10056540
mov edx, dword [ebp - 0x11c]
add esp, 8
test eax, eax
je 0x1004bb88
inc dword [edx]
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x154]
inc dword [ecx + eax*8 + 8]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x124]
mov edx, dword [ebp - 0x154]
or dword [eax + esi*4], ecx
mov eax, dword [ebp - 0x120]
mov eax, dword [edx + eax*8 + 0x14]
or dword [eax + esi*4], ecx
inc dword [ebp - 0x130]
mov edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x12c]
inc edi
movzx eax, word [eax + 2]
cmp edi, eax
jbe 0x1004bb00
mov eax, dword [ebp - 0x12c]
add eax, 4
mov dword [ebp - 0x12c], eax
cmp word [eax], 0
jne 0x1004bae0
add edx, 0xc4
sub dword [ebp - 0x148], 1
mov dword [ebp - 0x11c], edx
jne 0x1004ba54
mov esi, dword [ebp - 0x150]
mov eax, dword [ebp - 0x14c]
add esi, 0xb8
mov dword [ebp - 0x120], eax
mov edi, dword [esi - 0x10]
cmp edi, dword [esi + 4]
jle 0x1004bc2e
lea eax, [edi*4]
push eax
call fcn.1003da80
mov edx, dword [esi + 8]
add esp, 4
mov dword [ebp - 0x124], eax
test edx, edx
je 0x1004bc28
mov ecx, dword [esi]
shl ecx, 2
push ecx
push edx
push eax
call sub.VCRUNTIME140.dll_memcpy
push dword [esi + 8]
call fcn.1003dab0
mov eax, dword [ebp - 0x124]
add esp, 0x10
mov dword [esi + 8], eax
mov dword [esi + 4], edi
mov ecx, dword [esi - 4]
mov eax, dword [esi - 0xc]
mov dword [ebp - 0x13c], ecx
lea eax, [ecx + eax*4]
mov dword [ebp - 0x15c], eax
cmp ecx, eax
jae 0x1004bd65
xor edx, edx
mov dword [ebp - 0x134], edx
mov eax, dword [ecx]
mov dword [ebp - 0x11c], eax
test eax, eax
je 0x1004bd47
xor ecx, ecx
mov edi, 1
mov dword [ebp - 0x148], ecx
mov dword [ebp - 0x12c], edi
test edi, eax
je 0x1004bd29
mov eax, edx
and eax, 0xffffffe0
add eax, ecx
mov ecx, dword [esi + 4]
mov dword [ebp - 0x144], eax
mov eax, dword [esi]
cmp eax, ecx
jne 0x1004bd07
lea edi, [eax + 1]
test ecx, ecx
je 0x1004bcb2
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x1004bcb7
mov byte [ebp - 0x135], 0
jmp 0x1004cbaa
mov eax, 8
cmp eax, edi
cmovg edi, eax
cmp edi, ecx
jle 0x1004bd01
lea eax, [edi*4]
push eax
call fcn.1003da80
mov edx, dword [esi + 8]
add esp, 4
mov dword [ebp - 0x124], eax
test edx, edx
je 0x1004bcfb
mov ecx, dword [esi]
shl ecx, 2
push ecx
push edx
push eax
call sub.VCRUNTIME140.dll_memcpy
push dword [esi + 8]
call fcn.1003dab0
mov eax, dword [ebp - 0x124]
add esp, 0x10
mov dword [esi + 8], eax
mov dword [esi + 4], edi
mov edi, dword [ebp - 0x12c]
mov ecx, dword [esi]
mov eax, dword [esi + 8]
mov edx, dword [ebp - 0x144]
mov dword [eax + ecx*4], edx
inc dword [esi]
mov ecx, dword [ebp - 0x148]
mov eax, dword [ebp - 0x11c]
mov edx, dword [ebp - 0x134]
inc ecx
rol edi, 1
mov dword [ebp - 0x148], ecx
mov dword [ebp - 0x12c], edi
cmp ecx, 0x20
jb 0x1004bc76
mov ecx, dword [ebp - 0x13c]
add ecx, 4
add edx, 0x20
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x134], edx
cmp ecx, dword [ebp - 0x15c]
jb 0x1004bc53
mov eax, dword [esi - 4]
test eax, eax
je 0x1004bd8a
push eax
mov dword [esi - 8], 0
mov dword [esi - 0xc], 0
call fcn.1003dab0
add esp, 4
mov dword [esi - 4], 0
add esi, 0xc4
sub dword [ebp - 0x120], 1
jne 0x1004bbe5
mov esi, dword [ebp - 0x130]
jmp 0x1004bdad
xor esi, esi
mov dword [ebp - 0x130], esi
cmp dword [ebp - 0x128], 0
jle 0x1004bdf6
mov edi, dword [ebp - 0x154]
mov esi, dword [ebp - 0x128]
add edi, 0x14
mov eax, dword [edi]
test eax, eax
je 0x1004bde8
push eax
mov dword [edi - 4], 0
mov dword [edi - 8], 0
call fcn.1003dab0
add esp, 4
mov dword [edi], 0
add edi, 0x18
sub esi, 1
jne 0x1004bdc5
mov esi, dword [ebp - 0x130]
mov eax, dword [ebp - 0x154]
test eax, eax
je 0x1004be2b
push eax
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x198], 0
call fcn.1003dab0
add esp, 4
xor eax, eax
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x190], eax
xor eax, eax
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x1c0], eax
mov byte [ebp - 4], 7
mov eax, 8
test esi, esi
jle 0x1004bea2
cmp esi, eax
mov edi, esi
cmovl edi, eax
test edi, edi
jle 0x1004bea2
mov eax, edi
shl eax, 4
push eax
call fcn.1003da80
mov dword [ebp - 0x130], eax
add esp, 4
mov dword [ebp - 0x19c], eax
mov eax, 8
mov dword [ebp - 0x1a0], edi
xor edi, edi
mov dword [ebp - 0x1a4], esi
test esi, esi
jle 0x1004beed
cmp esi, 8
mov edi, esi
cmovl edi, eax
test edi, edi
jle 0x1004beeb
lea eax, [edi*8]
sub eax, edi
shl eax, 2
push eax
call fcn.1003da80
mov dword [ebp - 0x1c4], edi
add esp, 4
mov dword [ebp - 0x148], eax
mov edi, eax
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x15c], eax
jmp 0x1004beed
xor edi, edi
mov ecx, esi
mov dword [ebp - 0x1c8], esi
shl ecx, 4
push ecx
push 0
push dword [ebp - 0x130]
call sub.VCRUNTIME140.dll_memset
lea eax, [esi*8]
sub eax, esi
shl eax, 2
push eax
push 0
push edi
call sub.VCRUNTIME140.dll_memset
mov edx, dword [ebp - 0x14c]
xor eax, eax
xor ecx, ecx
mov dword [ebp - 0x11c], eax
add esp, 0x18
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x128], ecx
test edx, edx
jle 0x1004c1e9
mov esi, dword [ebp - 0x150]
xor edi, edi
add esi, 0x98
mov dword [ebp - 0x134], edi
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x124], edx
mov edx, dword [esi + 0x10]
test edx, edx
je 0x1004c1c7
mov eax, dword [ebp - 0x12c]
add dword [ebp - 0x12c], edx
add dword [ebp - 0x128], edx
shl eax, 4
add eax, dword [ebp - 0x130]
mov dword [esi - 4], eax
lea eax, [ecx*8]
sub eax, ecx
mov ecx, dword [ebp - 0x148]
lea ecx, [ecx + eax*4]
mov eax, dword [ebp - 0x140]
mov dword [esi], ecx
mov edx, dword [eax + 0x54]
mov eax, dword [edx + edi + 0x10]
add edx, edi
mov dword [esi - 0x1c], eax
mov eax, dword [esi + 0x28]
mov dword [esi - 0x14], eax
mov eax, dword [esi + 0x20]
mov dword [esi - 0x18], 0
mov dword [esi - 0x10], eax
mov dword [esi - 0xc], ecx
mov al, byte [edx + 0x14]
mov byte [esi - 8], al
mov al, byte [edx + 0x18]
mov byte [esi - 7], al
movss xmm1, dword [edx + 0x10]
comiss xmm1, dword [0x100d0b40]
mov dword [ebp - 0x13c], edx
jbe 0x1004c045
mov edi, dword [esi - 0x94]
mov eax, dword [esi - 0x7c]
movzx edx, byte [eax + edi + 7]
movzx ecx, byte [eax + edi + 6]
mov eax, 0x100
cwde
movsx ecx, cx
imul ecx, eax
add dx, cx
mov ecx, dword [ebp - 0x120]
movsx esi, dx
mov eax, dword [ecx - 0x7c]
movzx edx, byte [eax + edi + 5]
movzx ecx, byte [eax + edi + 4]
mov eax, 0x100
mov edi, dword [ebp - 0x134]
cwde
movsx ecx, cx
imul ecx, eax
add dx, cx
movsx eax, dx
sub eax, esi
mov esi, dword [ebp - 0x120]
movd xmm0, eax
jmp 0x1004c06b
mov ecx, dword [esi - 0x84]
mov eax, dword [esi - 0x94]
xorps xmm1, xmmword [0x100cf730]
movzx edx, byte [ecx + eax + 0x12]
movzx eax, byte [ecx + eax + 0x13]
shl edx, 8
add edx, eax
movd xmm0, edx
cvtdq2ps xmm0, xmm0
mov eax, dword [ebp - 0x140]
xor ecx, ecx
mov dword [ebp - 0x120], ecx
mov eax, dword [eax + 0x10]
divss xmm1, xmm0
movss dword [ebp - 0x144], xmm1
cmp dword [esi + 0x20], ecx
jle 0x1004c1bb
movzx eax, ax
lea edx, [esi - 0x98]
mov ecx, eax
mov dword [ebp - 0x158], eax
xor edi, edi
mov dword [ebp - 0x1ac], ecx
mov ecx, edi
nop
mov eax, dword [esi + 0x28]
push dword [eax + ecx*4]
push edx
call fcn.10056540
add esp, 8
lea ecx, [ebp - 0x1b0]
push ecx
lea ecx, [ebp - 0x15c]
push ecx
lea ecx, [ebp - 0x18c]
push ecx
lea ecx, [ebp - 0x1a8]
push ecx
mov ecx, dword [ebp - 0x13c]
sub esp, 0x10
movd xmm0, dword [ecx + 0x18]
cvtdq2ps xmm0, xmm0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mulss xmm0, xmm1
movss dword [esp + 4], xmm0
movd xmm0, dword [ecx + 0x14]
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
movss dword [esp], xmm0
push eax
lea eax, [esi - 0x98]
push eax
call fcn.100568d0
mov edx, dword [ebp - 0x13c]
lea edi, [edi + 0x10]
mov ecx, dword [ebp - 0x15c]
add esp, 0x28
sub ecx, dword [ebp - 0x1a8]
mov eax, dword [esi - 4]
dec cx
add cx, word [edx + 0x14]
add cx, word [ebp - 0x1ac]
movss xmm1, dword [ebp - 0x144]
mov word [eax + edi - 0xc], cx
mov ecx, dword [ebp - 0x1b0]
sub ecx, dword [ebp - 0x18c]
add ecx, dword [ebp - 0x158]
mov eax, dword [esi - 4]
dec cx
add cx, word [edx + 0x18]
lea edx, [esi - 0x98]
mov word [eax + edi - 0xa], cx
mov eax, dword [esi - 4]
movzx ecx, word [eax + edi - 0xa]
movzx eax, word [eax + edi - 0xc]
imul ecx, eax
mov eax, dword [ebp - 0x11c]
add eax, ecx
mov ecx, dword [ebp - 0x120]
inc ecx
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x120], ecx
cmp ecx, dword [esi + 0x20]
jl 0x1004c0b0
mov edi, dword [ebp - 0x134]
jmp 0x1004c1c1
mov eax, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0x128]
add esi, 0xc4
add edi, 0x78
sub dword [ebp - 0x124], 1
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x134], edi
jne 0x1004bf62
movd xmm0, eax
xorps xmm1, xmm1
cvtdq2ps xmm0, xmm0
cvtps2pd xmm0, xmm0
ucomisd xmm1, xmm0
ja 0x1004c202
sqrtsd xmm0, xmm0
jmp 0x1004c207
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
mov edi, dword [ebp - 0x140]
cvtsd2ss xmm0, xmm0
mov eax, dword [edi + 0xc]
mov dword [edi + 0x20], 0
cvttss2si ecx, xmm0
inc ecx
test eax, eax
jg 0x1004c25f
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
comiss xmm0, dword [0x10118c28]
jb 0x1004c23b
mov eax, 0x1000
jmp 0x1004c25f
comiss xmm0, dword [0x10118c24]
jb 0x1004c24b
mov eax, 0x800
jmp 0x1004c25f
comiss xmm0, dword [0x10118c20]
mov eax, 0x200
mov ecx, 0x400
cmovae eax, ecx
push 0x2c
mov dword [edi + 0x1c], eax
lea eax, [ebp - 0x188]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [edi + 0x10]
mov dword [ebp - 0x144], eax
mov eax, dword [edi + 0x1c]
push 0x30
mov dword [ebp - 0x124], eax
call fcn.1003da80
mov esi, eax
mov eax, dword [ebp - 0x124]
sub eax, dword [ebp - 0x144]
mov dword [ebp - 0x11c], esi
mov dword [ebp - 0x158], eax
lea ecx, [eax*8]
push ecx
call fcn.1003da80
add esp, 0x14
test esi, esi
je 0x1004c324
test eax, eax
je 0x1004c321
mov ecx, dword [ebp - 0x124]
mov edx, dword [ebp - 0x144]
mov dword [ebp - 0x180], ecx
mov dword [ebp - 0x178], ecx
mov ecx, dword [ebp - 0x158]
push ecx
push eax
mov dword [ebp - 0x160], eax
mov eax, 0x8000
sub eax, edx
mov dword [ebp - 0x184], esi
push eax
push ecx
push esi
mov dword [ebp - 0x174], edx
mov dword [ebp - 0x16c], 1
mov dword [ebp - 0x168], 1
mov dword [ebp - 0x170], 0
call fcn.100561e0
add esp, 0x14
jmp 0x1004c33d
push esi
jmp 0x1004c329
test eax, eax
je 0x1004c331
push eax
call fcn.1003dab0
add esp, 4
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x11c], eax
xor eax, eax
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x1cc], eax
mov esi, dword [edi + 0x40]
mov byte [ebp - 4], 8
mov dword [ebp - 0x120], esi
test esi, esi
jle 0x1004c393
cmp esi, 8
mov ecx, esi
mov edx, 8
cmovl ecx, edx
test ecx, ecx
jle 0x1004c393
shl ecx, 4
push ecx
call fcn.1003da80
add esp, 4
mov dword [ebp - 0x128], eax
mov ecx, esi
shl ecx, 4
push ecx
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
cmp dword [edi + 0x40], 0
jle 0x1004c3e1
mov edx, dword [ebp - 0x128]
xor ecx, ecx
add edx, 6
xor esi, esi
mov eax, dword [edi + 0x48]
lea ecx, [ecx + 0x1c]
inc esi
lea edx, [edx + 0x10]
movzx eax, word [ecx + eax - 0x1c]
mov word [edx - 0x12], ax
mov eax, dword [edi + 0x48]
movzx eax, word [ecx + eax - 0x1a]
mov word [edx - 0x10], ax
cmp esi, dword [edi + 0x40]
jl 0x1004c3b7
mov esi, dword [ebp - 0x120]
push esi
push dword [ebp - 0x128]
push dword [ebp - 0x11c]
call fcn.10056350
add esp, 0xc
test esi, esi
jle 0x1004c457
mov edx, dword [ebp - 0x128]
xor esi, esi
mov eax, dword [ebp - 0x120]
add edx, 0xa
nop dword [eax + eax]
cmp dword [edx + 2], 0
je 0x1004c446
mov ecx, dword [edi + 0x48]
movzx eax, word [edx - 2]
mov word [esi + ecx + 4], ax
mov ecx, dword [edi + 0x48]
movzx eax, word [edx]
mov word [esi + ecx + 6], ax
movzx eax, word [edx]
movzx ecx, word [edx - 4]
add ecx, eax
mov eax, dword [ebp - 0x120]
cmp dword [edi + 0x20], ecx
cmovge ecx, dword [edi + 0x20]
mov dword [edi + 0x20], ecx
add esi, 0x1c
add edx, 0x10
sub eax, 1
mov dword [ebp - 0x120], eax
jne 0x1004c410
mov eax, dword [ebp - 0x128]
mov byte [ebp - 4], 9
test eax, eax
je 0x1004c46e
push eax
call fcn.1003dab0
add esp, 4
mov esi, dword [ebp - 0x14c]
mov byte [ebp - 4], 7
test esi, esi
jle 0x1004c509
mov esi, dword [ebp - 0x150]
mov eax, dword [ebp - 0x14c]
add esi, 0xa8
mov dword [ebp - 0x144], eax
mov eax, dword [esi]
test eax, eax
je 0x1004c4f4
push eax
push dword [esi - 0x14]
push dword [ebp - 0x11c]
call fcn.10056350
xor ecx, ecx
add esp, 0xc
mov dword [ebp - 0x124], ecx
cmp dword [esi], ecx
jle 0x1004c4f4
xor edx, edx
nop
mov eax, dword [esi - 0x14]
cmp dword [eax + edx + 0xc], 0
je 0x1004c4e6
movzx ecx, word [eax + edx + 0xa]
movzx eax, word [eax + edx + 6]
add ecx, eax
cmp dword [edi + 0x20], ecx
cmovge ecx, dword [edi + 0x20]
mov dword [edi + 0x20], ecx
mov ecx, dword [ebp - 0x124]
inc ecx
add edx, 0x10
mov dword [ebp - 0x124], ecx
cmp ecx, dword [esi]
jl 0x1004c4c0
add esi, 0xc4
sub dword [ebp - 0x144], 1
jne 0x1004c498
mov esi, dword [ebp - 0x14c]
test byte [edi + 4], 1
mov eax, dword [edi + 0x20]
jne 0x1004c537
lea ecx, [eax - 1]
mov eax, ecx
sar eax, 1
or ecx, eax
mov eax, ecx
sar eax, 2
or ecx, eax
mov eax, ecx
sar eax, 4
or ecx, eax
mov eax, ecx
sar eax, 8
or ecx, eax
mov eax, ecx
sar eax, 0x10
or eax, ecx
movss xmm1, dword [0x100cf748]
lea ecx, [eax + 1]
mov eax, dword [edi + 0x1c]
movaps xmm2, xmm1
mov dword [edi + 0x20], ecx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
imul eax, ecx
divss xmm2, xmm0
push eax
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movss dword [edi + 0x24], xmm2
divss xmm1, xmm0
movss dword [edi + 0x28], xmm1
call fcn.1003da80
mov ecx, dword [edi + 0x20]
imul ecx, dword [edi + 0x1c]
mov dword [edi + 0x14], eax
push ecx
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [edi + 0x14]
add esp, 0x10
mov dword [ebp - 0x164], eax
mov eax, dword [edi + 0x20]
mov dword [ebp - 0x17c], eax
test esi, esi
jle 0x1004c78a
mov ecx, dword [ebp - 0x150]
xor eax, eax
mov dword [ebp - 0x144], eax
mov edx, esi
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x13c], esi
mov esi, dword [edi + 0x54]
add esi, eax
cmp dword [ecx + 0xa8], 0
je 0x1004c754
push dword [ecx + 0x94]
lea eax, [ecx + 0x7c]
push 1
push eax
push ecx
lea eax, [ebp - 0x188]
push eax
call fcn.10056e30
movss xmm1, dword [esi + 0x44]
add esp, 0x14
ucomiss xmm1, dword [0x100cf748]
movss dword [ebp - 0x158], xmm1
lahf
test ah, 0x44
jnp 0x1004c738
xor esi, esi
nop
movd xmm0, esi
mov eax, esi
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x100d0d30]
cvtpd2ps xmm0, xmm0
mulss xmm0, xmm1
call fcn.100ca110
movss xmm1, dword [ebp - 0x158]
mov edx, 0xff
cmp eax, edx
movzx ecx, al
cmovbe edx, ecx
mov byte [ebp + esi - 0x118], dl
inc esi
cmp esi, 0x100
jb 0x1004c610
mov ecx, dword [ebp - 0x11c]
xor eax, eax
mov dword [ebp - 0x134], eax
mov edx, dword [ecx + 0x94]
cmp dword [ecx + 0xa8], eax
jle 0x1004c73e
lea ecx, [edx + 6]
mov edx, dword [ebp - 0x11c]
mov dword [ebp - 0x12c], ecx
nop word [eax + eax]
cmp dword [ecx + 6], 0
je 0x1004c71c
mov edx, dword [edi + 0x1c]
movzx eax, word [ecx + 4]
movzx edi, word [ecx]
movzx esi, word [ecx - 2]
movzx ecx, word [ecx + 2]
mov dword [ebp - 0x124], edx
imul edx, eax
mov eax, dword [ebp - 0x140]
add edx, dword [eax + 0x14]
add edx, ecx
test edi, edi
je 0x1004c708
mov eax, dword [ebp - 0x124]
nop word [eax + eax]
xor ecx, ecx
test esi, esi
je 0x1004c6f9
nop word [eax + eax]
movzx eax, byte [edx + ecx]
mov al, byte [ebp + eax - 0x118]
mov byte [edx + ecx], al
inc ecx
cmp ecx, esi
jl 0x1004c6e0
mov eax, dword [ebp - 0x124]
dec edi
add edx, eax
test edi, edi
jg 0x1004c6d0
mov edi, dword [ebp - 0x140]
jmp 0x1004c70a
mov edi, eax
mov edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x134]
mov ecx, dword [ebp - 0x12c]
inc eax
add ecx, 0x10
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x12c], ecx
cmp eax, dword [edx + 0xa8]
jl 0x1004c690
mov ecx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x144]
mov edx, dword [ebp - 0x13c]
mov dword [ecx + 0x94], 0
add eax, 0x78
add ecx, 0xc4
sub edx, 1
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x13c], edx
jne 0x1004c5c0
mov eax, dword [ebp - 0x184]
mov esi, dword [ebp - 0x14c]
mov dword [ebp - 0x11c], eax
push dword [ebp - 0x160]
call fcn.1003dab0
push dword [ebp - 0x11c]
call fcn.1003dab0
mov eax, dword [ebp - 0x130]
add esp, 8
test eax, eax
je 0x1004c7d8
push eax
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x1a4], 0
call fcn.1003dab0
add esp, 4
xor eax, eax
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x19c], eax
test esi, esi
jle 0x1004cb6c
mov ecx, dword [ebp - 0x150]
xor edx, edx
add ecx, 4
mov dword [ebp - 0x11c], edx
mov dword [ebp - 0x120], ecx
mov eax, esi
mov dword [ebp - 0x13c], esi
nop
cmp dword [ecx + 0xa4], 0
je 0x1004caef
mov esi, dword [ecx + 0x18]
xorps xmm3, xmm3
mov eax, dword [edi + 0x54]
add eax, edx
mov edx, dword [ecx]
mov dword [ebp - 0x128], eax
mov eax, dword [eax + 0x74]
movzx ecx, byte [esi + edx + 6]
mov dword [ebp - 0x12c], eax
mov eax, 0x100
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [esi + edx + 7]
add cx, ax
mov eax, 0x100
movsx edi, cx
movzx ecx, byte [esi + edx + 4]
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [esi + edx + 5]
mov edx, dword [ebp - 0x12c]
add cx, ax
movsx ecx, cx
mov eax, ecx
sub eax, edi
movd xmm1, ecx
lea ecx, [edx + 0x44]
cvtdq2ps xmm1, xmm1
mov dword [ebp - 0x134], ecx
mov ecx, dword [ebp - 0x128]
movd xmm0, eax
mov eax, dword [ebp - 0x128]
cvtdq2ps xmm0, xmm0
movss xmm2, dword [eax + 0x10]
xor eax, eax
divss xmm2, xmm0
comiss xmm1, xmm3
mulss xmm1, xmm2
seta al
lea eax, [eax*2 - 1]
movd xmm0, eax
xor eax, eax
cvtdq2ps xmm0, xmm0
addss xmm0, xmm1
movd xmm1, edi
cvtdq2ps xmm1, xmm1
cvttss2si esi, xmm0
comiss xmm1, xmm3
mulss xmm2, xmm1
seta al
cmp byte [ecx + 0x3c], 0
lea eax, [eax*2 - 1]
movd xmm0, eax
lea eax, [edx + 0x38]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x124], eax
addss xmm0, xmm2
cvttss2si edi, xmm0
jne 0x1004c94a
mov ecx, edx
call fcn.1004aca0
mov ecx, dword [ebp - 0x128]
mov edx, dword [ebp - 0x12c]
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mov eax, dword [ecx + 0x10]
mov dword [edx + 0x10], eax
mov eax, dword [ebp - 0x124]
mov dword [edx + 0x34], ecx
xor ecx, ecx
mov word [eax], cx
mov eax, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x128]
mov dword [edx + 0x30], eax
mov eax, dword [ebp - 0x134]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x124]
movd xmm0, edi
cvtdq2ps xmm0, xmm0
movss dword [edx + 0x48], xmm0
mov edx, dword [ebp - 0x134]
inc word [eax]
movss xmm7, dword [ecx + 0x28]
mov edi, dword [ebp - 0x140]
movss xmm0, dword [edx]
xor edx, edx
addss xmm0, dword [0x100cf714]
movss dword [ebp - 0x18c], xmm7
mov dword [ebp - 0x124], edx
cvttss2si eax, xmm0
movd xmm6, eax
cvtdq2ps xmm6, xmm6
addss xmm6, dword [ecx + 0x2c]
mov ecx, dword [ebp - 0x120]
movss dword [ebp - 0x158], xmm6
cmp dword [ecx + 0xa4], edx
jle 0x1004cae3
xor esi, esi
nop word [eax + eax]
movd xmm0, dword [edi + 0x1c]
sub esp, 0x24
movss xmm1, dword [0x100cf748]
mov eax, dword [ecx + 0xbc]
mov ecx, dword [ecx + 0x94]
movss xmm3, dword [0x100cf748]
cvtdq2ps xmm0, xmm0
mov edx, dword [eax + edx*4]
movzx eax, word [ecx + esi]
divss xmm1, xmm0
movd xmm0, dword [edi + 0x20]
cvtdq2ps xmm0, xmm0
movd xmm5, eax
movzx eax, word [ecx + esi + 2]
divss xmm3, xmm0
movss xmm0, dword [ecx + esi + 0x10]
movd xmm4, eax
movzx eax, word [ecx + esi + 4]
cvtdq2ps xmm5, xmm5
movd xmm2, eax
movzx eax, word [ecx + esi + 6]
cvtdq2ps xmm2, xmm2
movss dword [esp + 0x20], xmm0
movss xmm0, dword [ecx + esi + 0x18]
mulss xmm5, xmm1
mulss xmm2, xmm1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm4, xmm4
mulss xmm1, xmm3
mulss xmm4, xmm3
movss dword [esp + 0x1c], xmm1
xorps xmm1, xmm1
addss xmm0, xmm1
movss dword [esp + 0x18], xmm2
movss dword [esp + 0x14], xmm4
movss dword [esp + 0x10], xmm5
addss xmm0, xmm6
movss dword [esp + 0xc], xmm0
movss xmm0, dword [ecx + esi + 0x14]
addss xmm0, xmm1
addss xmm0, xmm7
movss dword [esp + 8], xmm0
movss xmm0, dword [ecx + esi + 0xc]
addss xmm0, xmm1
addss xmm0, xmm6
movss dword [esp + 4], xmm0
movss xmm0, dword [ecx + esi + 8]
mov ecx, dword [ebp - 0x12c]
addss xmm0, xmm1
addss xmm0, xmm7
movss dword [esp], xmm0
push edx
push dword [ebp - 0x128]
call fcn.10048ef0
mov edx, dword [ebp - 0x124]
add esi, 0x1c
mov ecx, dword [ebp - 0x120]
inc edx
movss xmm6, dword [ebp - 0x158]
movss xmm7, dword [ebp - 0x18c]
mov dword [ebp - 0x124], edx
cmp edx, dword [ecx + 0xa4]
jl 0x1004c9b0
mov eax, dword [ebp - 0x13c]
mov edx, dword [ebp - 0x11c]
add ecx, 0xc4
add edx, 0x78
sub eax, 1
mov dword [ebp - 0x120], ecx
mov dword [ebp - 0x11c], edx
mov dword [ebp - 0x13c], eax
jne 0x1004c800
mov esi, dword [ebp - 0x14c]
test esi, esi
jle 0x1004cb6c
mov esi, dword [ebp - 0x150]
mov edi, dword [ebp - 0x14c]
add esi, 0xb4
nop
mov eax, dword [esi + 0xc]
mov byte [ebp - 4], 0xa
test eax, eax
je 0x1004cb44
push eax
call fcn.1003dab0
add esp, 4
mov eax, dword [esi]
mov byte [ebp - 4], 0xb
test eax, eax
je 0x1004cb57
push eax
call fcn.1003dab0
add esp, 4
add esi, 0xc4
mov byte [ebp - 4], 7
sub edi, 1
jne 0x1004cb30
mov edi, dword [ebp - 0x140]
push edi
call fcn.1004b060
add esp, 4
mov byte [ebp - 0x135], 1
mov eax, dword [ebp - 0x148]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x1004cb93
push eax
call fcn.1003dab0
add esp, 4
mov eax, dword [ebp - 0x130]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x1004cbaa
push eax
call fcn.1003dab0
add esp, 4
mov eax, dword [ebp - 0x154]
mov byte [ebp - 4], 0xe
test eax, eax
je 0x1004cbc1
push eax
call fcn.1003dab0
add esp, 4
mov eax, dword [ebp - 0x150]
mov dword [ebp - 4], 0xf
test eax, eax
je 0x1004cbdb
push eax
call fcn.1003dab0
add esp, 4
mov al, byte [ebp - 0x135]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100c9684
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret